# Flog Txt Version 1 # Analyzer Version: 4.7.1 # Analyzer Build Date: Nov 21 2022 05:40:14 # Log Creation Date: 18.01.2023 22:45:13.037 Process: id = "1" image_name = "82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe" filename = "c:\\users\\rdhj0cnfevzx\\desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe" page_root = "0x598fa000" os_pid = "0x13c4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x670" cmd_line = "\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe\" " cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f213" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 118 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 119 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 120 start_va = 0x50000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 121 start_va = 0x150000 end_va = 0x153fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 122 start_va = 0x160000 end_va = 0x160fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 123 start_va = 0x170000 end_va = 0x171fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 124 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 125 start_va = 0x400000 end_va = 0x45bfff monitored = 1 entry_point = 0x454e8e region_type = mapped_file name = "82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe") Region: id = 126 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 127 start_va = 0x7ff5fffd0000 end_va = 0x7ff5ffff2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5fffd0000" filename = "" Region: id = 128 start_va = 0x7ffd0d950000 end_va = 0x7ffd0db10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 267 start_va = 0x460000 end_va = 0x5cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 268 start_va = 0x7ffd02120000 end_va = 0x7ffd02187fff monitored = 1 entry_point = 0x7ffd02124970 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 269 start_va = 0x7ffd0c220000 end_va = 0x7ffd0c2ccfff monitored = 0 entry_point = 0x7ffd0c2381a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 270 start_va = 0x7ffd0a070000 end_va = 0x7ffd0a257fff monitored = 0 entry_point = 0x7ffd0a09ba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 271 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 272 start_va = 0x7ff5ffed0000 end_va = 0x7ff5fffcffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ffed0000" filename = "" Region: id = 273 start_va = 0x5d0000 end_va = 0x68dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 274 start_va = 0x690000 end_va = 0x7affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000690000" filename = "" Region: id = 275 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 276 start_va = 0x7ffd07cf0000 end_va = 0x7ffd07d68fff monitored = 0 entry_point = 0x7ffd07d0fb90 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 277 start_va = 0x7ff5ffe50000 end_va = 0x7ff5ffecdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\apppatch64\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\apppatch64\\sysmain.sdb") Region: id = 278 start_va = 0x7ffd0b140000 end_va = 0x7ffd0b1e6fff monitored = 0 entry_point = 0x7ffd0b1558d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 279 start_va = 0x7ffd0b040000 end_va = 0x7ffd0b0dcfff monitored = 0 entry_point = 0x7ffd0b0478a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 280 start_va = 0x690000 end_va = 0x78ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000690000" filename = "" Region: id = 281 start_va = 0x7a0000 end_va = 0x7affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007a0000" filename = "" Region: id = 282 start_va = 0x7ffd0ae20000 end_va = 0x7ffd0ae7afff monitored = 0 entry_point = 0x7ffd0ae338b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 283 start_va = 0x180000 end_va = 0x186fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 284 start_va = 0x7ffd0b370000 end_va = 0x7ffd0b48bfff monitored = 0 entry_point = 0x7ffd0b3b02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 285 start_va = 0x7b0000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007b0000" filename = "" Region: id = 286 start_va = 0x190000 end_va = 0x196fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 287 start_va = 0x7ffcf5410000 end_va = 0x7ffcf54acfff monitored = 1 entry_point = 0x7ffcf5411010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 288 start_va = 0x7ffd0b310000 end_va = 0x7ffd0b361fff monitored = 0 entry_point = 0x7ffd0b31f530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 289 start_va = 0x7ffd0bfa0000 end_va = 0x7ffd0c21cfff monitored = 0 entry_point = 0x7ffd0c074970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 290 start_va = 0x7ffd0a000000 end_va = 0x7ffd0a069fff monitored = 0 entry_point = 0x7ffd0a036d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 291 start_va = 0x7ffd0b850000 end_va = 0x7ffd0b9d5fff monitored = 0 entry_point = 0x7ffd0b89ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 292 start_va = 0x7ffd0b490000 end_va = 0x7ffd0b5e5fff monitored = 0 entry_point = 0x7ffd0b49a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 293 start_va = 0x1a0000 end_va = 0x1d8fff monitored = 0 entry_point = 0x1a12f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 294 start_va = 0x890000 end_va = 0xa17fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000890000" filename = "" Region: id = 295 start_va = 0x7ffd0b270000 end_va = 0x7ffd0b2aafff monitored = 0 entry_point = 0x7ffd0b2712f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 296 start_va = 0x1a0000 end_va = 0x1a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 297 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 298 start_va = 0xa20000 end_va = 0xba0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a20000" filename = "" Region: id = 299 start_va = 0xbb0000 end_va = 0x1faffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000bb0000" filename = "" Region: id = 300 start_va = 0x460000 end_va = 0x4b3fff monitored = 1 entry_point = 0x4b4e8e region_type = mapped_file name = "82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe") Region: id = 301 start_va = 0x4d0000 end_va = 0x5cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004d0000" filename = "" Region: id = 302 start_va = 0x7ffd09ff0000 end_va = 0x7ffd09ffefff monitored = 0 entry_point = 0x7ffd09ff3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 303 start_va = 0x7ffcfccf0000 end_va = 0x7ffcfccf9fff monitored = 0 entry_point = 0x7ffcfccf1350 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 304 start_va = 0x7ffcf08d0000 end_va = 0x7ffcf12b5fff monitored = 1 entry_point = 0x7ffcf08d5b60 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 305 start_va = 0x7ffcf3f90000 end_va = 0x7ffcf4086fff monitored = 0 entry_point = 0x7ffcf3fb4d80 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\System32\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll") Region: id = 306 start_va = 0x1c0000 end_va = 0x1c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 307 start_va = 0x1d0000 end_va = 0x1dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 308 start_va = 0x1e0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 309 start_va = 0x7ffc911a0000 end_va = 0x7ffc911affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc911a0000" filename = "" Region: id = 310 start_va = 0x7ffc911b0000 end_va = 0x7ffc911bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc911b0000" filename = "" Region: id = 311 start_va = 0x7ffc911c0000 end_va = 0x7ffc9124ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc911c0000" filename = "" Region: id = 312 start_va = 0x7ffc91250000 end_va = 0x7ffc912bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc91250000" filename = "" Region: id = 313 start_va = 0x1f0000 end_va = 0x1f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 314 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 315 start_va = 0x1fb0000 end_va = 0x212ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fb0000" filename = "" Region: id = 316 start_va = 0x1fb0000 end_va = 0x209ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fb0000" filename = "" Region: id = 317 start_va = 0x2120000 end_va = 0x212ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002120000" filename = "" Region: id = 318 start_va = 0x2130000 end_va = 0x222ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002130000" filename = "" Region: id = 319 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 320 start_va = 0x2230000 end_va = 0x1a22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002230000" filename = "" Region: id = 321 start_va = 0x1a230000 end_va = 0x1a59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a230000" filename = "" Region: id = 322 start_va = 0x1a5a0000 end_va = 0x1a6a7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a5a0000" filename = "" Region: id = 323 start_va = 0x1a6b0000 end_va = 0x1a7affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a6b0000" filename = "" Region: id = 324 start_va = 0x1a7b0000 end_va = 0x1aae6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 325 start_va = 0x7ffcef3e0000 end_va = 0x7ffcf08c7fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\f89061884b75dab0e3967d7221e5290d\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\f89061884b75dab0e3967d7221e5290d\\mscorlib.ni.dll") Region: id = 326 start_va = 0x7ffd0ae80000 end_va = 0x7ffd0afc2fff monitored = 0 entry_point = 0x7ffd0aea8210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 327 start_va = 0x7b0000 end_va = 0x86ffff monitored = 0 entry_point = 0x7d0da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 328 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 329 start_va = 0x1fb0000 end_va = 0x208cfff monitored = 0 entry_point = 0x200e0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 330 start_va = 0x2090000 end_va = 0x209ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002090000" filename = "" Region: id = 331 start_va = 0x7ffd088f0000 end_va = 0x7ffd08985fff monitored = 0 entry_point = 0x7ffd08915570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 332 start_va = 0x470000 end_va = 0x4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 333 start_va = 0x7ff5ffe30000 end_va = 0x7ff5ffecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff5ffe30000" filename = "" Region: id = 334 start_va = 0x7ff5ffe20000 end_va = 0x7ff5ffe2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff5ffe20000" filename = "" Region: id = 335 start_va = 0x7ffc912c0000 end_va = 0x7ffc912cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc912c0000" filename = "" Region: id = 336 start_va = 0x7ffcee790000 end_va = 0x7ffcef3d3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\60b77585c8aa9cfd1b30a64092c81041\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\60b77585c8aa9cfd1b30a64092c81041\\system.ni.dll") Region: id = 337 start_va = 0x7ffcf3da0000 end_va = 0x7ffcf3f8afff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\43de4a177616225e9b6262468e1c3b53\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\43de4a177616225e9b6262468e1c3b53\\system.drawing.ni.dll") Region: id = 338 start_va = 0x7ffced890000 end_va = 0x7ffcee780fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\37004ddc6f466d807c52ca3b7f9f9827\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\37004ddc6f466d807c52ca3b7f9f9827\\system.windows.forms.ni.dll") Region: id = 339 start_va = 0x7ffc912d0000 end_va = 0x7ffc9130ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc912d0000" filename = "" Region: id = 340 start_va = 0x7ffced780000 end_va = 0x7ffced88dfff monitored = 1 entry_point = 0x7ffced781080 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 341 start_va = 0x7ffd0ad50000 end_va = 0x7ffd0ae10fff monitored = 0 entry_point = 0x7ffd0ad70da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 342 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 343 start_va = 0x4a0000 end_va = 0x4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004a0000" filename = "" Region: id = 344 start_va = 0x1aaf0000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aaf0000" filename = "" Region: id = 345 start_va = 0x7ffcecdf0000 end_va = 0x7ffced771fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Core\\d1da4b8a843ec63bb8be25f8202bedc1\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.core\\d1da4b8a843ec63bb8be25f8202bedc1\\system.core.ni.dll") Region: id = 346 start_va = 0x7ffcecbc0000 end_va = 0x7ffcecde3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "microsoft.visualbasic.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.V9921e851#\\85a40a6654f0aac2a2c52d1deb4d3f17\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\microsoft.v9921e851#\\85a40a6654f0aac2a2c52d1deb4d3f17\\microsoft.visualbasic.ni.dll") Region: id = 347 start_va = 0x480000 end_va = 0x48ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 348 start_va = 0x480000 end_va = 0x48ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 349 start_va = 0x490000 end_va = 0x49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000490000" filename = "" Region: id = 350 start_va = 0x4b0000 end_va = 0x4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004b0000" filename = "" Region: id = 351 start_va = 0x4c0000 end_va = 0x4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 352 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 353 start_va = 0x480000 end_va = 0x48ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 354 start_va = 0x490000 end_va = 0x49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000490000" filename = "" Region: id = 355 start_va = 0x4b0000 end_va = 0x4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004b0000" filename = "" Region: id = 356 start_va = 0x7b0000 end_va = 0x855fff monitored = 0 entry_point = 0x7b93e0 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_396e892957c7fb25\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_396e892957c7fb25\\comctl32.dll") Region: id = 357 start_va = 0x7ffcf40a0000 end_va = 0x7ffcf4149fff monitored = 0 entry_point = 0x7ffcf40a93e0 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_396e892957c7fb25\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_396e892957c7fb25\\comctl32.dll") Region: id = 358 start_va = 0x480000 end_va = 0x49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 359 start_va = 0x480000 end_va = 0x480fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000480000" filename = "" Region: id = 360 start_va = 0x490000 end_va = 0x49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000490000" filename = "" Region: id = 361 start_va = 0x7b0000 end_va = 0x86bfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007b0000" filename = "" Region: id = 362 start_va = 0x480000 end_va = 0x483fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000480000" filename = "" Region: id = 363 start_va = 0x4b0000 end_va = 0x4b6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004b0000" filename = "" Region: id = 364 start_va = 0x7ffd077f0000 end_va = 0x7ffd07811fff monitored = 0 entry_point = 0x7ffd077f1a40 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 365 start_va = 0x4c0000 end_va = 0x4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 366 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 367 start_va = 0x4c0000 end_va = 0x4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 368 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 369 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 370 start_va = 0x1fb0000 end_va = 0x1fbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fb0000" filename = "" Region: id = 371 start_va = 0x1fc0000 end_va = 0x1fcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fc0000" filename = "" Region: id = 372 start_va = 0x1fd0000 end_va = 0x1fdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fd0000" filename = "" Region: id = 373 start_va = 0x1fe0000 end_va = 0x1feffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fe0000" filename = "" Region: id = 374 start_va = 0x1ff0000 end_va = 0x1ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ff0000" filename = "" Region: id = 375 start_va = 0x2000000 end_va = 0x200ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002000000" filename = "" Region: id = 376 start_va = 0x2010000 end_va = 0x201ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002010000" filename = "" Region: id = 377 start_va = 0x2020000 end_va = 0x202ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002020000" filename = "" Region: id = 378 start_va = 0x2030000 end_va = 0x203ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002030000" filename = "" Region: id = 379 start_va = 0x2040000 end_va = 0x204ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002040000" filename = "" Region: id = 380 start_va = 0x2050000 end_va = 0x205ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002050000" filename = "" Region: id = 381 start_va = 0x2060000 end_va = 0x206ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002060000" filename = "" Region: id = 382 start_va = 0x2070000 end_va = 0x207ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 383 start_va = 0x2080000 end_va = 0x208ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 384 start_va = 0x20a0000 end_va = 0x20affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020a0000" filename = "" Region: id = 385 start_va = 0x20b0000 end_va = 0x20bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020b0000" filename = "" Region: id = 386 start_va = 0x20c0000 end_va = 0x20cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020c0000" filename = "" Region: id = 387 start_va = 0x20d0000 end_va = 0x20dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020d0000" filename = "" Region: id = 388 start_va = 0x20e0000 end_va = 0x20effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020e0000" filename = "" Region: id = 389 start_va = 0x20f0000 end_va = 0x20fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020f0000" filename = "" Region: id = 390 start_va = 0x2100000 end_va = 0x210ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002100000" filename = "" Region: id = 391 start_va = 0x2110000 end_va = 0x211ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002110000" filename = "" Region: id = 392 start_va = 0x1aaf0000 end_va = 0x1aafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aaf0000" filename = "" Region: id = 393 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 394 start_va = 0x1ab00000 end_va = 0x1ab0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab00000" filename = "" Region: id = 395 start_va = 0x1ab10000 end_va = 0x1ab1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab10000" filename = "" Region: id = 396 start_va = 0x1ab20000 end_va = 0x1ab2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab20000" filename = "" Region: id = 397 start_va = 0x1ab30000 end_va = 0x1ab3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab30000" filename = "" Region: id = 398 start_va = 0x1ab40000 end_va = 0x1ab4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab40000" filename = "" Region: id = 399 start_va = 0x1ab50000 end_va = 0x1ab5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab50000" filename = "" Region: id = 400 start_va = 0x1ab60000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab60000" filename = "" Region: id = 401 start_va = 0x1ab70000 end_va = 0x1ab7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab70000" filename = "" Region: id = 402 start_va = 0x1ab80000 end_va = 0x1ab8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab80000" filename = "" Region: id = 403 start_va = 0x1ab90000 end_va = 0x1ab9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab90000" filename = "" Region: id = 404 start_va = 0x1aba0000 end_va = 0x1abaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aba0000" filename = "" Region: id = 405 start_va = 0x1abb0000 end_va = 0x1abbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abb0000" filename = "" Region: id = 406 start_va = 0x1abc0000 end_va = 0x1abdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abc0000" filename = "" Region: id = 407 start_va = 0x1abe0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 408 start_va = 0x1ac00000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac00000" filename = "" Region: id = 409 start_va = 0x1ac30000 end_va = 0x1ac5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac30000" filename = "" Region: id = 410 start_va = 0x1ac60000 end_va = 0x1ac6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac60000" filename = "" Region: id = 411 start_va = 0x1ac70000 end_va = 0x1ac7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac70000" filename = "" Region: id = 412 start_va = 0x1ac80000 end_va = 0x1ac8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac80000" filename = "" Region: id = 413 start_va = 0x1aca0000 end_va = 0x1acaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aca0000" filename = "" Region: id = 414 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 415 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 416 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 417 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 418 start_va = 0x1acf0000 end_va = 0x1acfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acf0000" filename = "" Region: id = 419 start_va = 0x1ad00000 end_va = 0x1ad0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad00000" filename = "" Region: id = 420 start_va = 0x1ad10000 end_va = 0x1ad1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad10000" filename = "" Region: id = 421 start_va = 0x1ad20000 end_va = 0x1ad2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad20000" filename = "" Region: id = 422 start_va = 0x1ad30000 end_va = 0x1ad3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad30000" filename = "" Region: id = 423 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 424 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 425 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 426 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 427 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 428 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 429 start_va = 0x4c0000 end_va = 0x4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 430 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 431 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 432 start_va = 0x1fb0000 end_va = 0x1fbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fb0000" filename = "" Region: id = 433 start_va = 0x1fc0000 end_va = 0x1fcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fc0000" filename = "" Region: id = 434 start_va = 0x1fd0000 end_va = 0x1fdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fd0000" filename = "" Region: id = 435 start_va = 0x1fe0000 end_va = 0x1feffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fe0000" filename = "" Region: id = 436 start_va = 0x1ff0000 end_va = 0x1ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ff0000" filename = "" Region: id = 437 start_va = 0x2000000 end_va = 0x200ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002000000" filename = "" Region: id = 438 start_va = 0x2010000 end_va = 0x201ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002010000" filename = "" Region: id = 439 start_va = 0x2020000 end_va = 0x202ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002020000" filename = "" Region: id = 440 start_va = 0x2030000 end_va = 0x203ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002030000" filename = "" Region: id = 441 start_va = 0x2040000 end_va = 0x204ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002040000" filename = "" Region: id = 442 start_va = 0x2050000 end_va = 0x205ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002050000" filename = "" Region: id = 443 start_va = 0x2060000 end_va = 0x206ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002060000" filename = "" Region: id = 444 start_va = 0x2070000 end_va = 0x207ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 445 start_va = 0x2080000 end_va = 0x208ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 446 start_va = 0x20a0000 end_va = 0x20affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020a0000" filename = "" Region: id = 447 start_va = 0x20b0000 end_va = 0x20bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020b0000" filename = "" Region: id = 448 start_va = 0x20c0000 end_va = 0x20cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020c0000" filename = "" Region: id = 449 start_va = 0x20d0000 end_va = 0x20dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020d0000" filename = "" Region: id = 450 start_va = 0x20e0000 end_va = 0x20effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020e0000" filename = "" Region: id = 451 start_va = 0x20f0000 end_va = 0x20fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020f0000" filename = "" Region: id = 452 start_va = 0x2100000 end_va = 0x210ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002100000" filename = "" Region: id = 453 start_va = 0x2110000 end_va = 0x211ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002110000" filename = "" Region: id = 454 start_va = 0x1aaf0000 end_va = 0x1aafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aaf0000" filename = "" Region: id = 455 start_va = 0x1ab00000 end_va = 0x1ab1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab00000" filename = "" Region: id = 456 start_va = 0x1ab20000 end_va = 0x1ab4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab20000" filename = "" Region: id = 457 start_va = 0x1ab50000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab50000" filename = "" Region: id = 458 start_va = 0x1ab70000 end_va = 0x1abcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab70000" filename = "" Region: id = 459 start_va = 0x1abd0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abd0000" filename = "" Region: id = 460 start_va = 0x1ac00000 end_va = 0x1ac0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac00000" filename = "" Region: id = 461 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 462 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 463 start_va = 0x1ac30000 end_va = 0x1ac3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac30000" filename = "" Region: id = 464 start_va = 0x1ac40000 end_va = 0x1ac4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac40000" filename = "" Region: id = 465 start_va = 0x1ac50000 end_va = 0x1ac5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac50000" filename = "" Region: id = 466 start_va = 0x1ac60000 end_va = 0x1ac6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac60000" filename = "" Region: id = 467 start_va = 0x1ac70000 end_va = 0x1ac7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac70000" filename = "" Region: id = 468 start_va = 0x1ac80000 end_va = 0x1ac8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac80000" filename = "" Region: id = 469 start_va = 0x7ffcf8190000 end_va = 0x7ffcf8338fff monitored = 0 entry_point = 0x7ffcf81e4060 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_0bdd1d3064f6384a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_0bdd1d3064f6384a\\gdiplus.dll") Region: id = 470 start_va = 0x1aaf0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aaf0000" filename = "" Region: id = 471 start_va = 0x1aca0000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aca0000" filename = "" Region: id = 472 start_va = 0x7ffd0ba00000 end_va = 0x7ffd0bb59fff monitored = 0 entry_point = 0x7ffd0ba438e0 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 473 start_va = 0x7ffd03990000 end_va = 0x7ffd03beffff monitored = 0 entry_point = 0x7ffd03a3b5b0 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\System32\\DWrite.dll" (normalized: "c:\\windows\\system32\\dwrite.dll") Region: id = 474 start_va = 0x1fb0000 end_va = 0x1ff8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-system.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-System.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-system.dat") Region: id = 475 start_va = 0x1ada0000 end_va = 0x1ae9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ada0000" filename = "" Region: id = 476 start_va = 0x1aea0000 end_va = 0x1be9ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-fontface.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-FontFace.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-fontface.dat") Region: id = 477 start_va = 0x4c0000 end_va = 0x4c6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 478 start_va = 0x1bea0000 end_va = 0x1bf9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bea0000" filename = "" Region: id = 479 start_va = 0x1bfa0000 end_va = 0x1c491fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bfa0000" filename = "" Region: id = 480 start_va = 0x1aaf0000 end_va = 0x1abacfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 481 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 482 start_va = 0x1c4a0000 end_va = 0x1c89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c4a0000" filename = "" Region: id = 483 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 484 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 485 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 486 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 487 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 488 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 489 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 490 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 491 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 492 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 493 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 494 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 495 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 496 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 497 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 498 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 499 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 500 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 501 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 502 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 503 start_va = 0x7ffc91310000 end_va = 0x7ffc9131ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc91310000" filename = "" Region: id = 504 start_va = 0x7ffc91320000 end_va = 0x7ffc9132ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc91320000" filename = "" Region: id = 505 start_va = 0x2000000 end_va = 0x2037fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002000000" filename = "" Region: id = 506 start_va = 0x790000 end_va = 0x790fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000790000" filename = "" Region: id = 507 start_va = 0x7ffd0a260000 end_va = 0x7ffd0a314fff monitored = 0 entry_point = 0x7ffd0a2a22e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 508 start_va = 0x870000 end_va = 0x870fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000870000" filename = "" Region: id = 509 start_va = 0x2040000 end_va = 0x2040fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002040000" filename = "" Region: id = 510 start_va = 0x1c8a0000 end_va = 0x1d8dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 511 start_va = 0x1d8e0000 end_va = 0x1d9dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d8e0000" filename = "" Region: id = 512 start_va = 0x2050000 end_va = 0x2054fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 513 start_va = 0x2060000 end_va = 0x2066fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002060000" filename = "" Region: id = 514 start_va = 0x1d9e0000 end_va = 0x1dadffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d9e0000" filename = "" Region: id = 515 start_va = 0x2070000 end_va = 0x207ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 516 start_va = 0x2080000 end_va = 0x208ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 517 start_va = 0x2070000 end_va = 0x207ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 518 start_va = 0x1dae0000 end_va = 0x1dbdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dae0000" filename = "" Region: id = 519 start_va = 0x2070000 end_va = 0x207ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 520 start_va = 0x2080000 end_va = 0x208ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 521 start_va = 0x20a0000 end_va = 0x20affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020a0000" filename = "" Region: id = 522 start_va = 0x2080000 end_va = 0x208ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 523 start_va = 0x7ffc91330000 end_va = 0x7ffc9133ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc91330000" filename = "" Region: id = 524 start_va = 0x2080000 end_va = 0x208ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 525 start_va = 0x2070000 end_va = 0x207ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 526 start_va = 0x2070000 end_va = 0x207ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 527 start_va = 0x20a0000 end_va = 0x20affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020a0000" filename = "" Region: id = 528 start_va = 0x20b0000 end_va = 0x20bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020b0000" filename = "" Region: id = 529 start_va = 0x2080000 end_va = 0x208ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 530 start_va = 0x2080000 end_va = 0x208ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 531 start_va = 0x2080000 end_va = 0x208ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 532 start_va = 0x7ffd0c2d0000 end_va = 0x7ffd0d82efff monitored = 0 entry_point = 0x7ffd0c4311f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 533 start_va = 0x2080000 end_va = 0x208ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 534 start_va = 0x20a0000 end_va = 0x20affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020a0000" filename = "" Region: id = 535 start_va = 0x20b0000 end_va = 0x20bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020b0000" filename = "" Region: id = 536 start_va = 0x20c0000 end_va = 0x20cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020c0000" filename = "" Region: id = 537 start_va = 0x20d0000 end_va = 0x20dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020d0000" filename = "" Region: id = 538 start_va = 0x20e0000 end_va = 0x20effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020e0000" filename = "" Region: id = 539 start_va = 0x20f0000 end_va = 0x20fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020f0000" filename = "" Region: id = 540 start_va = 0x2100000 end_va = 0x210ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002100000" filename = "" Region: id = 541 start_va = 0x2110000 end_va = 0x211ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002110000" filename = "" Region: id = 542 start_va = 0x1abb0000 end_va = 0x1abbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abb0000" filename = "" Region: id = 543 start_va = 0x1abc0000 end_va = 0x1abcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abc0000" filename = "" Region: id = 544 start_va = 0x1abd0000 end_va = 0x1abdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abd0000" filename = "" Region: id = 545 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 546 start_va = 0x1ac00000 end_va = 0x1ac0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac00000" filename = "" Region: id = 547 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 548 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 549 start_va = 0x1ac30000 end_va = 0x1ac3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac30000" filename = "" Region: id = 550 start_va = 0x7ffd0ac50000 end_va = 0x7ffd0ac92fff monitored = 0 entry_point = 0x7ffd0ac64b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 551 start_va = 0x7ffd0a320000 end_va = 0x7ffd0a963fff monitored = 0 entry_point = 0x7ffd0a4e64b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 552 start_va = 0x7ffd09f90000 end_va = 0x7ffd09fdafff monitored = 0 entry_point = 0x7ffd09f935f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 553 start_va = 0x7ffd09f70000 end_va = 0x7ffd09f83fff monitored = 0 entry_point = 0x7ffd09f752e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 554 start_va = 0x1ac40000 end_va = 0x1ac4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac40000" filename = "" Region: id = 555 start_va = 0x1ac50000 end_va = 0x1ac5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac50000" filename = "" Region: id = 556 start_va = 0x1ac60000 end_va = 0x1ac6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac60000" filename = "" Region: id = 557 start_va = 0x1ac70000 end_va = 0x1ac7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac70000" filename = "" Region: id = 558 start_va = 0x1ac80000 end_va = 0x1ac8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac80000" filename = "" Region: id = 559 start_va = 0x1dbe0000 end_va = 0x1dbeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dbe0000" filename = "" Region: id = 560 start_va = 0x1dbf0000 end_va = 0x1dbfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dbf0000" filename = "" Region: id = 561 start_va = 0x1dc00000 end_va = 0x1dc0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc00000" filename = "" Region: id = 562 start_va = 0x1dc10000 end_va = 0x1dc1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc10000" filename = "" Region: id = 563 start_va = 0x1dc20000 end_va = 0x1dc2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc20000" filename = "" Region: id = 564 start_va = 0x1dc30000 end_va = 0x1dc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc30000" filename = "" Region: id = 565 start_va = 0x1dc30000 end_va = 0x1dc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc30000" filename = "" Region: id = 566 start_va = 0x1dc30000 end_va = 0x1dc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc30000" filename = "" Region: id = 567 start_va = 0x1dc30000 end_va = 0x1dc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc30000" filename = "" Region: id = 568 start_va = 0x1dc30000 end_va = 0x1dc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc30000" filename = "" Region: id = 569 start_va = 0x1dc40000 end_va = 0x1dc4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc40000" filename = "" Region: id = 570 start_va = 0x1dc50000 end_va = 0x1dc5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc50000" filename = "" Region: id = 571 start_va = 0x1dc60000 end_va = 0x1dc6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc60000" filename = "" Region: id = 572 start_va = 0x1dc70000 end_va = 0x1dc7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc70000" filename = "" Region: id = 573 start_va = 0x1dc80000 end_va = 0x1dc8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc80000" filename = "" Region: id = 574 start_va = 0x1dc90000 end_va = 0x1dc9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc90000" filename = "" Region: id = 575 start_va = 0x1dca0000 end_va = 0x1dcaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dca0000" filename = "" Region: id = 576 start_va = 0x1dcb0000 end_va = 0x1dccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dcb0000" filename = "" Region: id = 577 start_va = 0x1dcd0000 end_va = 0x1dceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dcd0000" filename = "" Region: id = 578 start_va = 0x1dcf0000 end_va = 0x1dd1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dcf0000" filename = "" Region: id = 579 start_va = 0x1dd20000 end_va = 0x1dd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dd20000" filename = "" Region: id = 580 start_va = 0x1dd50000 end_va = 0x1dd5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dd50000" filename = "" Region: id = 581 start_va = 0x1dd60000 end_va = 0x1dd6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dd60000" filename = "" Region: id = 582 start_va = 0x1dd70000 end_va = 0x1dd7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dd70000" filename = "" Region: id = 583 start_va = 0x1dd80000 end_va = 0x1dd8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dd80000" filename = "" Region: id = 584 start_va = 0x1dd90000 end_va = 0x1dd9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dd90000" filename = "" Region: id = 585 start_va = 0x1dda0000 end_va = 0x1ddaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dda0000" filename = "" Region: id = 586 start_va = 0x1ddb0000 end_va = 0x1ddbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ddb0000" filename = "" Region: id = 587 start_va = 0x7ffd09460000 end_va = 0x7ffd09490fff monitored = 0 entry_point = 0x7ffd09467d10 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 588 start_va = 0x7ffd056c0000 end_va = 0x7ffd0575bfff monitored = 0 entry_point = 0x7ffd057196a0 region_type = mapped_file name = "efswrt.dll" filename = "\\Windows\\System32\\efswrt.dll" (normalized: "c:\\windows\\system32\\efswrt.dll") Region: id = 589 start_va = 0x7ffd05fe0000 end_va = 0x7ffd06115fff monitored = 0 entry_point = 0x7ffd0600f350 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 590 start_va = 0x1ddc0000 end_va = 0x1ddcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ddc0000" filename = "" Region: id = 591 start_va = 0x1ddd0000 end_va = 0x1dddffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ddd0000" filename = "" Region: id = 592 start_va = 0x1dde0000 end_va = 0x1ddeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dde0000" filename = "" Region: id = 593 start_va = 0x1ddf0000 end_va = 0x1ddfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ddf0000" filename = "" Region: id = 594 start_va = 0x1de00000 end_va = 0x1de0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001de00000" filename = "" Region: id = 595 start_va = 0x1de10000 end_va = 0x1de1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001de10000" filename = "" Region: id = 596 start_va = 0x1de20000 end_va = 0x1de2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001de20000" filename = "" Region: id = 597 start_va = 0x1de30000 end_va = 0x1de3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001de30000" filename = "" Region: id = 598 start_va = 0x1de40000 end_va = 0x1de4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001de40000" filename = "" Region: id = 599 start_va = 0x1de50000 end_va = 0x1de5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001de50000" filename = "" Region: id = 600 start_va = 0x7ffd00550000 end_va = 0x7ffd0059ffff monitored = 0 entry_point = 0x7ffd00552580 region_type = mapped_file name = "edputil.dll" filename = "\\Windows\\System32\\edputil.dll" (normalized: "c:\\windows\\system32\\edputil.dll") Region: id = 601 start_va = 0x2070000 end_va = 0x207ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 602 start_va = 0x2070000 end_va = 0x207ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 603 start_va = 0x2070000 end_va = 0x207ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 604 start_va = 0x2070000 end_va = 0x207ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 605 start_va = 0x7ffd084c0000 end_va = 0x7ffd08645fff monitored = 0 entry_point = 0x7ffd0850d700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 606 start_va = 0x2070000 end_va = 0x2070fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002070000" filename = "" Region: id = 607 start_va = 0x7ffd0b5f0000 end_va = 0x7ffd0b696fff monitored = 0 entry_point = 0x7ffd0b5fb4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 608 start_va = 0x2080000 end_va = 0x2080fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002080000" filename = "" Region: id = 609 start_va = 0x20a0000 end_va = 0x20a3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 610 start_va = 0x20b0000 end_va = 0x20f4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db") Region: id = 611 start_va = 0x2100000 end_va = 0x210ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002100000" filename = "" Region: id = 612 start_va = 0x2110000 end_va = 0x211ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002110000" filename = "" Region: id = 613 start_va = 0x1abb0000 end_va = 0x1abbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abb0000" filename = "" Region: id = 614 start_va = 0x1abc0000 end_va = 0x1abcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abc0000" filename = "" Region: id = 615 start_va = 0x1abd0000 end_va = 0x1abdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abd0000" filename = "" Region: id = 616 start_va = 0x1abf0000 end_va = 0x1abf3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 617 start_va = 0x1ac00000 end_va = 0x1ac8dfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 618 start_va = 0x1dbe0000 end_va = 0x1dbf0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 619 start_va = 0x1dc00000 end_va = 0x1dc03fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 620 start_va = 0x1dc10000 end_va = 0x1dc2afff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db") Region: id = 621 start_va = 0x2100000 end_va = 0x210ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002100000" filename = "" Region: id = 622 start_va = 0x2110000 end_va = 0x2110fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002110000" filename = "" Region: id = 623 start_va = 0x1dc30000 end_va = 0x1dd2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc30000" filename = "" Region: id = 624 start_va = 0x1dd30000 end_va = 0x1de0cfff monitored = 0 entry_point = 0x1dd8e0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 625 start_va = 0x1dd30000 end_va = 0x1de2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dd30000" filename = "" Region: id = 626 start_va = 0x1de30000 end_va = 0x1df2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001de30000" filename = "" Region: id = 627 start_va = 0x1df30000 end_va = 0x1e02ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001df30000" filename = "" Region: id = 628 start_va = 0x1e030000 end_va = 0x1e12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e030000" filename = "" Region: id = 629 start_va = 0x1e130000 end_va = 0x1e181fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001e130000" filename = "" Region: id = 630 start_va = 0x7ffcfe0b0000 end_va = 0x7ffcfe267fff monitored = 0 entry_point = 0x7ffcfe11e630 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 631 start_va = 0x7ffd03ed0000 end_va = 0x7ffd04251fff monitored = 0 entry_point = 0x7ffd03f21220 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 632 start_va = 0x7ffd09bf0000 end_va = 0x7ffd09c1cfff monitored = 0 entry_point = 0x7ffd09c09d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 633 start_va = 0x2100000 end_va = 0x2100fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002100000" filename = "" Region: id = 634 start_va = 0x1e190000 end_va = 0x1e28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e190000" filename = "" Region: id = 635 start_va = 0x7ff5ffda0000 end_va = 0x7ff5ffe1dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\apppatch64\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\apppatch64\\sysmain.sdb") Region: id = 647 start_va = 0x1abb0000 end_va = 0x1abbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abb0000" filename = "" Region: id = 648 start_va = 0x7ff5ffa70000 end_va = 0x7ff5ffe10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 686 start_va = 0x1abb0000 end_va = 0x1abbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abb0000" filename = "" Region: id = 721 start_va = 0x1e290000 end_va = 0x1e2f1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscorrc.dll") Region: id = 728 start_va = 0x7ff5ffa70000 end_va = 0x7ff5ffe10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 761 start_va = 0x1abb0000 end_va = 0x1abb0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001abb0000" filename = "" Region: id = 808 start_va = 0x2000000 end_va = 0x2037fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002000000" filename = "" Region: id = 814 start_va = 0x1abb0000 end_va = 0x1abb0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abb0000" filename = "" Region: id = 818 start_va = 0x1e300000 end_va = 0x1eafffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-s-1-5-21-1560258661-3990802383-1811730007-1000.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-S-1-5-21-1560258661-3990802383-1811730007-1000.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-s-1-5-21-1560258661-3990802383-1811730007-1000.dat") Region: id = 848 start_va = 0x1abb0000 end_va = 0x1abb1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abb0000" filename = "" Region: id = 851 start_va = 0x1abc0000 end_va = 0x1abc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abc0000" filename = "" Region: id = 864 start_va = 0x2000000 end_va = 0x2037fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002000000" filename = "" Region: id = 866 start_va = 0x2000000 end_va = 0x2037fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002000000" filename = "" Region: id = 1366 start_va = 0x2000000 end_va = 0x2037fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002000000" filename = "" Thread: id = 1 os_tid = 0x13c8 [0051.784] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0051.842] RoInitialize () returned 0x1 [0051.843] RoUninitialize () returned 0x0 [0054.221] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc210 [0054.222] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc20f [0054.292] GetSystemMetrics (nIndex=75) returned 1 [0054.302] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0054.352] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7ffcf40a0000 [0054.442] AdjustWindowRectEx (in: lpRect=0x14e590, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x14e590) returned 1 [0054.454] GetCurrentProcess () returned 0xffffffffffffffff [0054.454] GetCurrentThread () returned 0xfffffffffffffffe [0054.454] GetCurrentProcess () returned 0xffffffffffffffff [0054.454] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x14e3a0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x14e3a0*=0x250) returned 1 [0054.458] GetCurrentThreadId () returned 0x13c8 [0054.473] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0054.478] GetModuleHandleW (lpModuleName="user32.dll") returned 0x7ffd0b490000 [0054.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0x14dfd0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcW", lpUsedDefaultChar=0x0) returned 14 [0054.479] GetProcAddress (hModule=0x7ffd0b490000, lpProcName="DefWindowProcW") returned 0x7ffd0d9f4a40 [0054.479] GetStockObject (i=5) returned 0x1900015 [0054.483] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0054.488] CoTaskMemAlloc (cb=0x5a) returned 0x566b40 [0054.488] RegisterClassW (lpWndClass=0x14df90) returned 0xc150 [0054.489] CoTaskMemFree (pv=0x566b40) [0054.489] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0054.490] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.1ca0192_r8_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x702da [0054.498] SetWindowLongPtrW (hWnd=0x702da, nIndex=-4, dwNewLong=0x7ffd0d9f4a40) returned 0x1ac9089c [0054.502] GetWindowLongPtrW (hWnd=0x702da, nIndex=-4) returned 0x7ffd0d9f4a40 [0054.511] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x14d358 | out: phkResult=0x14d358*=0x254) returned 0x0 [0054.513] RegQueryValueExW (in: hKey=0x254, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x14d3a8, lpData=0x0, lpcbData=0x14d3a0*=0x0 | out: lpType=0x14d3a8*=0x0, lpData=0x0, lpcbData=0x14d3a0*=0x0) returned 0x2 [0054.513] RegQueryValueExW (in: hKey=0x254, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x14d3a8, lpData=0x0, lpcbData=0x14d3a0*=0x0 | out: lpType=0x14d3a8*=0x0, lpData=0x0, lpcbData=0x14d3a0*=0x0) returned 0x2 [0054.514] RegCloseKey (hKey=0x254) returned 0x0 [0054.516] SetWindowLongPtrW (hWnd=0x702da, nIndex=-4, dwNewLong=0x1ac908ec) returned 0x7ffd0d9f4a40 [0054.517] GetWindowLongPtrW (hWnd=0x702da, nIndex=-4) returned 0x1ac908ec [0054.517] GetWindowLongPtrW (hWnd=0x702da, nIndex=-16) returned 0x6c10000 [0054.519] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc20b [0054.520] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x702da, Msg=0x24, wParam=0x0, lParam=0x14d9b0) returned 0x0 [0054.521] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc20c [0054.521] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x702da, Msg=0x81, wParam=0x0, lParam=0x14d920) returned 0x1 [0054.521] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x702da, Msg=0x83, wParam=0x0, lParam=0x14d9d0) returned 0x0 [0054.529] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x702da, Msg=0x1, wParam=0x0, lParam=0x14d920) returned 0x0 [0054.530] GetClientRect (in: hWnd=0x702da, lpRect=0x14d3b0 | out: lpRect=0x14d3b0) returned 1 [0054.530] GetWindowRect (in: hWnd=0x702da, lpRect=0x14d3b0 | out: lpRect=0x14d3b0) returned 1 [0054.533] GetParent (hWnd=0x702da) returned 0x0 [0055.033] GetSystemDefaultLCID () returned 0x409 [0055.033] GetStockObject (i=17) returned 0x10a0047 [0055.036] GetObjectW (in: h=0x10a0047, c=92, pv=0x14d6e0 | out: pv=0x14d6e0) returned 92 [0055.037] GetDC (hWnd=0x0) returned 0x1b0107ae [0055.057] GdiplusStartup (in: token=0x7ffc911b6f40, input=0x14bfa8, output=0x14c058 | out: token=0x7ffc911b6f40, output=0x14c058) returned 0x0 [0055.066] CoTaskMemAlloc (cb=0x5c) returned 0x566600 [0055.086] GdipCreateFontFromLogfontW (hdc=0x1b0107ae, logfont=0x566600, font=0x14d820) returned 0x0 [0055.294] CoTaskMemFree (pv=0x566600) [0055.295] CoTaskMemAlloc (cb=0x5c) returned 0x566600 [0055.296] CoTaskMemFree (pv=0x566600) [0055.296] CoTaskMemAlloc (cb=0x5c) returned 0x566600 [0055.296] CoTaskMemFree (pv=0x566600) [0055.305] GdipGetFontUnit (font=0x1abe34f0, unit=0x14d790) returned 0x0 [0055.306] GdipGetFontSize (font=0x1abe34f0, size=0x14d79c) returned 0x0 [0055.306] GdipGetFontStyle (font=0x1abe34f0, style=0x14d788) returned 0x0 [0055.306] GdipGetFamily (font=0x1abe34f0, family=0x14d780) returned 0x0 [0055.311] GdipGetFontSize (font=0x1abe34f0, size=0x2241200) returned 0x0 [0055.311] ReleaseDC (hWnd=0x0, hDC=0x1b0107ae) returned 1 [0055.313] GetDC (hWnd=0x0) returned 0xc0100ae [0055.313] GdipCreateFromHDC (hdc=0xc0100ae, graphics=0x14d798) returned 0x0 [0055.322] GdipGetDpiY (graphics=0x1beb67f0, dpi=0x22413d8) returned 0x0 [0055.323] GdipGetFontHeight (font=0x1abe34f0, graphics=0x1beb67f0, height=0x14d794) returned 0x0 [0055.324] GdipGetEmHeight (family=0x1bea90f0, style=0, EmHeight=0x14d798) returned 0x0 [0055.326] GdipGetLineSpacing (family=0x1bea90f0, style=0, LineSpacing=0x14d798) returned 0x0 [0055.326] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0055.329] ReleaseDC (hWnd=0x0, hDC=0xc0100ae) returned 1 [0055.334] GdipCreateFont (fontFamily=0x1bea90f0, emSize=0x7ffcf3e0d4a5, style=0, unit=0x3, font=0x2241368) returned 0x0 [0055.335] GdipGetFontSize (font=0x1abeed70, size=0x2241370) returned 0x0 [0055.335] GdipDeleteFont (font=0x1abe34f0) returned 0x0 [0055.436] GetDC (hWnd=0x0) returned 0xc0100ae [0055.436] GdipCreateFromHDC (hdc=0xc0100ae, graphics=0x14d8f8) returned 0x0 [0055.437] GdipGetFontHeight (font=0x1abeed70, graphics=0x1beb67f0, height=0x14d8f4) returned 0x0 [0055.438] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0055.438] ReleaseDC (hWnd=0x0, hDC=0xc0100ae) returned 1 [0055.438] GetSystemMetrics (nIndex=5) returned 1 [0055.438] GetSystemMetrics (nIndex=6) returned 1 [0055.439] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.440] AdjustWindowRectEx (in: lpRect=0x14dba0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14dba0) returned 1 [0055.453] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.454] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0055.492] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.492] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0055.521] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.521] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0055.549] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.549] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0055.577] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.577] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0055.605] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.605] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0055.627] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.627] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0055.651] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.651] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0055.674] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.674] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0055.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.700] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0055.723] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.723] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0055.749] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.749] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0055.782] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.782] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0055.808] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.808] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0055.834] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.834] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0055.861] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.861] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0055.880] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.880] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0055.889] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.889] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0055.895] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.895] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0055.907] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x14db50) returned 0x0 [0055.908] GdipCreateFont (fontFamily=0x1bea90f0, emSize=0x7ffcf3e0d4a5, style=1, unit=0x3, font=0x2244fe0) returned 0x0 [0055.908] GdipGetFontSize (font=0x1abe34f0, size=0x2244fe8) returned 0x0 [0055.915] GetDC (hWnd=0x0) returned 0xc0100ae [0055.915] GdipCreateFromHDC (hdc=0xc0100ae, graphics=0x14da78) returned 0x0 [0055.915] GdipGetFontHeight (font=0x1abe34f0, graphics=0x1beb67f0, height=0x14da74) returned 0x0 [0055.915] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0055.915] ReleaseDC (hWnd=0x0, hDC=0xc0100ae) returned 1 [0055.921] GetDC (hWnd=0x0) returned 0xc0100ae [0055.922] GdipCreateFromHDC (hdc=0xc0100ae, graphics=0x14d948) returned 0x0 [0055.922] GdipGetFontHeight (font=0x1abe34f0, graphics=0x1beb67f0, height=0x14d944) returned 0x0 [0055.922] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0055.922] ReleaseDC (hWnd=0x0, hDC=0xc0100ae) returned 1 [0055.922] GetSystemMetrics (nIndex=5) returned 1 [0055.922] GetSystemMetrics (nIndex=6) returned 1 [0055.922] GetSystemMetrics (nIndex=5) returned 1 [0055.922] GetSystemMetrics (nIndex=6) returned 1 [0055.923] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.924] AdjustWindowRectEx (in: lpRect=0x14d998, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d998) returned 1 [0055.926] GetSystemMetrics (nIndex=5) returned 1 [0055.926] GetSystemMetrics (nIndex=6) returned 1 [0055.926] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.926] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14da78) returned 1 [0055.929] GetSystemMetrics (nIndex=5) returned 1 [0055.929] GetSystemMetrics (nIndex=6) returned 1 [0055.929] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.929] AdjustWindowRectEx (in: lpRect=0x14d998, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d998) returned 1 [0055.929] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.930] AdjustWindowRectEx (in: lpRect=0x14d998, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d998) returned 1 [0055.934] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.934] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14da78) returned 1 [0055.943] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.943] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0055.958] GetProcessWindowStation () returned 0xcc [0055.961] GetUserObjectInformationA (in: hObj=0xcc, nIndex=1, pvInfo=0x2245c68, nLength=0xc, lpnLengthNeeded=0x14d6f0 | out: pvInfo=0x2245c68, lpnLengthNeeded=0x14d6f0) returned 1 [0055.963] SetConsoleCtrlHandler (HandlerRoutine=0x1ac9093c, Add=1) returned 1 [0055.964] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0055.964] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0055.966] GetClassInfoW (in: hInstance=0x400000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.1ca0192.0", lpWndClass=0x2245d28 | out: lpWndClass=0x2245d28) returned 0 [0055.967] CoTaskMemAlloc (cb=0x58) returned 0x574510 [0055.967] RegisterClassW (lpWndClass=0x14d500) returned 0xc211 [0055.967] CoTaskMemFree (pv=0x574510) [0055.970] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.1ca0192.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.1ca0192.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x50208 [0055.972] NtdllDefWindowProc_W (hWnd=0x50208, Msg=0x81, wParam=0x0, lParam=0x14ce20) returned 0x1 [0055.974] NtdllDefWindowProc_W (hWnd=0x50208, Msg=0x83, wParam=0x0, lParam=0x14ced0) returned 0x0 [0055.975] NtdllDefWindowProc_W (hWnd=0x50208, Msg=0x1, wParam=0x0, lParam=0x14cdc0) returned 0x0 [0055.975] NtdllDefWindowProc_W (hWnd=0x50208, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0055.975] NtdllDefWindowProc_W (hWnd=0x50208, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0055.980] GetSysColor (nIndex=10) returned 0xb4b4b4 [0055.980] GetSysColor (nIndex=2) returned 0xd1b499 [0055.980] GetSysColor (nIndex=9) returned 0x0 [0055.980] GetSysColor (nIndex=12) returned 0xababab [0055.980] GetSysColor (nIndex=15) returned 0xf0f0f0 [0055.980] GetSysColor (nIndex=20) returned 0xffffff [0055.980] GetSysColor (nIndex=16) returned 0xa0a0a0 [0055.980] GetSysColor (nIndex=15) returned 0xf0f0f0 [0055.980] GetSysColor (nIndex=16) returned 0xa0a0a0 [0055.980] GetSysColor (nIndex=21) returned 0x696969 [0055.980] GetSysColor (nIndex=22) returned 0xe3e3e3 [0055.980] GetSysColor (nIndex=20) returned 0xffffff [0055.980] GetSysColor (nIndex=18) returned 0x0 [0055.980] GetSysColor (nIndex=1) returned 0x0 [0055.980] GetSysColor (nIndex=27) returned 0xead1b9 [0055.980] GetSysColor (nIndex=28) returned 0xf2e4d7 [0055.980] GetSysColor (nIndex=17) returned 0x6d6d6d [0055.980] GetSysColor (nIndex=13) returned 0xff9933 [0055.980] GetSysColor (nIndex=14) returned 0xffffff [0055.980] GetSysColor (nIndex=26) returned 0xcc6600 [0055.981] GetSysColor (nIndex=11) returned 0xfcf7f4 [0055.981] GetSysColor (nIndex=3) returned 0xdbcdbf [0055.981] GetSysColor (nIndex=19) returned 0x0 [0055.981] GetSysColor (nIndex=24) returned 0xe1ffff [0055.981] GetSysColor (nIndex=23) returned 0x0 [0055.981] GetSysColor (nIndex=4) returned 0xf0f0f0 [0055.981] GetSysColor (nIndex=30) returned 0xf0f0f0 [0055.981] GetSysColor (nIndex=29) returned 0xff9933 [0055.981] GetSysColor (nIndex=7) returned 0x0 [0055.981] GetSysColor (nIndex=0) returned 0xc8c8c8 [0055.981] GetSysColor (nIndex=5) returned 0xffffff [0055.981] GetSysColor (nIndex=6) returned 0x646464 [0055.981] GetSysColor (nIndex=8) returned 0x0 [0055.981] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0055.982] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.003] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.003] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.003] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.004] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.009] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.009] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.009] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.009] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.016] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.016] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.016] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.016] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.021] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.022] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.022] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.022] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.027] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.027] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.027] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.027] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.031] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.032] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.032] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.032] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.034] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.034] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.034] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.034] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.038] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.038] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.038] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.038] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.040] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.040] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.040] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.040] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.042] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.042] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.042] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.042] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.044] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.044] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.044] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.044] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.045] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.045] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.045] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.045] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.048] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.048] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.048] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.048] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.049] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.049] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.049] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.049] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.050] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.050] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.050] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.050] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.051] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x14db50) returned 0x0 [0056.051] GdipCreateFont (fontFamily=0x1bea90f0, emSize=0x7ffcf3e0d4a5, style=1, unit=0x3, font=0x2247328) returned 0x0 [0056.051] GdipGetFontSize (font=0x1abeedb0, size=0x2247330) returned 0x0 [0056.052] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.052] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.052] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.052] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.053] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.053] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.053] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.053] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.054] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.054] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.054] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.054] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0056.058] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.058] AdjustWindowRectEx (in: lpRect=0x14dad8, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14dad8) returned 1 [0056.058] GetSystemMetrics (nIndex=59) returned 1456 [0056.058] GetSystemMetrics (nIndex=60) returned 916 [0056.058] GetSystemMetrics (nIndex=34) returned 136 [0056.058] GetSystemMetrics (nIndex=35) returned 39 [0056.059] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.060] AdjustWindowRectEx (in: lpRect=0x14d898, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14d898) returned 1 [0056.060] GetCurrentThreadId () returned 0x13c8 [0056.060] GetCurrentThreadId () returned 0x13c8 [0056.063] GetCurrentThreadId () returned 0x13c8 [0056.063] GetCurrentThreadId () returned 0x13c8 [0056.063] GetCurrentThreadId () returned 0x13c8 [0056.063] GetCurrentThreadId () returned 0x13c8 [0056.063] GetCurrentThreadId () returned 0x13c8 [0056.063] GetCurrentThreadId () returned 0x13c8 [0056.063] GetCurrentThreadId () returned 0x13c8 [0056.063] GetCurrentThreadId () returned 0x13c8 [0056.063] GetCurrentThreadId () returned 0x13c8 [0056.063] GetCurrentThreadId () returned 0x13c8 [0056.063] GetCurrentThreadId () returned 0x13c8 [0056.063] GetCurrentThreadId () returned 0x13c8 [0056.063] GetCurrentThreadId () returned 0x13c8 [0056.063] GetCurrentThreadId () returned 0x13c8 [0056.063] GetCurrentThreadId () returned 0x13c8 [0056.063] GetCurrentThreadId () returned 0x13c8 [0056.063] GetCurrentThreadId () returned 0x13c8 [0056.063] GetCurrentThreadId () returned 0x13c8 [0056.064] GetCurrentThreadId () returned 0x13c8 [0056.064] GetCurrentThreadId () returned 0x13c8 [0056.064] GetCurrentThreadId () returned 0x13c8 [0056.064] GetCurrentThreadId () returned 0x13c8 [0056.064] GetCurrentThreadId () returned 0x13c8 [0056.064] GetCurrentThreadId () returned 0x13c8 [0056.064] GetCurrentThreadId () returned 0x13c8 [0056.064] GetCurrentThreadId () returned 0x13c8 [0056.064] GetCurrentThreadId () returned 0x13c8 [0056.064] GetCurrentThreadId () returned 0x13c8 [0056.064] GetCurrentThreadId () returned 0x13c8 [0056.064] GetCurrentThreadId () returned 0x13c8 [0056.064] GetCurrentThreadId () returned 0x13c8 [0056.064] GetCurrentThreadId () returned 0x13c8 [0056.064] GetCurrentThreadId () returned 0x13c8 [0056.064] GetCurrentThreadId () returned 0x13c8 [0056.064] GetCurrentThreadId () returned 0x13c8 [0056.064] GetCurrentThreadId () returned 0x13c8 [0056.064] GetCurrentThreadId () returned 0x13c8 [0056.064] GetCurrentThreadId () returned 0x13c8 [0056.078] CreateCompatibleDC (hdc=0x0) returned 0x2b010997 [0056.079] GetDC (hWnd=0x0) returned 0xc0100ae [0056.079] GdipCreateFromHDC (hdc=0xc0100ae, graphics=0x14d728) returned 0x0 [0056.080] CoTaskMemAlloc (cb=0x5c) returned 0x566f30 [0056.080] GdipGetLogFontW (font=0x1abeed70, graphics=0x1beb67f0, logfontW=0x566f30) returned 0x0 [0056.082] CoTaskMemFree (pv=0x566f30) [0056.082] CoTaskMemAlloc (cb=0x5c) returned 0x566980 [0056.083] CoTaskMemFree (pv=0x566980) [0056.083] CoTaskMemAlloc (cb=0x5c) returned 0x566c90 [0056.083] CoTaskMemFree (pv=0x566c90) [0056.083] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0056.083] ReleaseDC (hWnd=0x0, hDC=0xc0100ae) returned 1 [0056.083] CoTaskMemAlloc (cb=0x5c) returned 0x566980 [0056.083] CreateFontIndirectW (lplf=0x566980) returned 0xffffffffae0a0968 [0056.084] CoTaskMemFree (pv=0x566980) [0056.084] SelectObject (hdc=0x2b010997, h=0xffffffffae0a0968) returned 0x18a0048 [0056.084] GetTextMetricsW (in: hdc=0x2b010997, lptm=0x14d9a8 | out: lptm=0x14d9a8) returned 1 [0056.085] GetTextExtentPoint32W (in: hdc=0x2b010997, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x224a0f0 | out: psizl=0x224a0f0) returned 1 [0056.087] SelectObject (hdc=0x2b010997, h=0x18a0048) returned 0xffffffffae0a0968 [0056.087] DeleteDC (hdc=0x2b010997) returned 1 [0056.087] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.088] AdjustWindowRectEx (in: lpRect=0x14d610, dwStyle=0x2cc0000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x14d610) returned 1 [0056.088] AdjustWindowRectEx (in: lpRect=0x14d890, dwStyle=0x2cc0000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x14d890) returned 1 [0056.089] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.089] AdjustWindowRectEx (in: lpRect=0x14d500, dwStyle=0x2cc0000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x14d500) returned 1 [0056.089] AdjustWindowRectEx (in: lpRect=0x14d680, dwStyle=0x2cc0000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x14d680) returned 1 [0056.089] GetSystemMetrics (nIndex=34) returned 136 [0056.089] GetSystemMetrics (nIndex=35) returned 39 [0056.089] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.090] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0056.090] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.091] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0056.091] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.091] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0056.091] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.091] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0056.091] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.091] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0056.091] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.091] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0056.092] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.092] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0056.092] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.092] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0056.092] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.092] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0056.092] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.092] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0056.092] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.092] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0056.092] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.092] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0056.093] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.093] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0056.105] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.113] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0056.113] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.113] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0056.113] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.113] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0056.114] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.114] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0056.114] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.114] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0056.114] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.114] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0056.114] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.114] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0056.114] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.114] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0056.115] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.115] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0056.115] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.115] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0056.115] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.115] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0056.115] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.115] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0056.115] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.115] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0056.115] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.116] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0056.116] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.116] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0056.116] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.116] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0056.116] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.116] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0056.116] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.116] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0056.116] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.116] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0056.117] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.117] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0056.117] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.117] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0056.117] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.117] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0056.117] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.117] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0056.117] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.117] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0056.117] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.120] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0056.120] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.120] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x56010046, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d8a0) returned 1 [0056.120] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.120] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x56010046, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d6f0) returned 1 [0056.129] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.129] AdjustWindowRectEx (in: lpRect=0x14eb70, dwStyle=0x2cc0000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x14eb70) returned 1 [0056.129] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.129] CreateWindowExW (dwExStyle=0x90001, lpClassName="WindowsForms10.Window.8.app.0.1ca0192_r8_ad1", lpWindowName="Form1", dwStyle=0x2cc0000, X=-2147483648, Y=-2147483648, nWidth=274, nHeight=208, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x70020 [0056.130] SetWindowLongPtrW (hWnd=0x70020, nIndex=-4, dwNewLong=0x7ffd0d9f4a40) returned 0x1ac9089c [0056.130] GetWindowLongPtrW (hWnd=0x70020, nIndex=-4) returned 0x7ffd0d9f4a40 [0056.130] SetWindowLongPtrW (hWnd=0x70020, nIndex=-4, dwNewLong=0x1ac909dc) returned 0x7ffd0d9f4a40 [0056.130] GetWindowLongPtrW (hWnd=0x70020, nIndex=-4) returned 0x1ac909dc [0056.130] GetWindowLongPtrW (hWnd=0x70020, nIndex=-16) returned 0x6cc0000 [0056.134] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x81, wParam=0x0, lParam=0x14e2d0) returned 0x1 [0056.135] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x83, wParam=0x0, lParam=0x14e380) returned 0x0 [0056.136] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x1, wParam=0x0, lParam=0x14e2b0) returned 0x0 [0056.136] GetClientRect (in: hWnd=0x70020, lpRect=0x14dd00 | out: lpRect=0x14dd00) returned 1 [0056.136] GetWindowRect (in: hWnd=0x70020, lpRect=0x14dd00 | out: lpRect=0x14dd00) returned 1 [0056.136] SetWindowTextW (hWnd=0x70020, lpString="Form1") returned 1 [0056.137] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xc, wParam=0x0, lParam=0x2248914) returned 0x1 [0056.142] SetLayeredWindowAttributes (hwnd=0x70020, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0056.148] GetStartupInfoW (in: lpStartupInfo=0x224ac68 | out: lpStartupInfo=0x224ac68*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\Desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0056.154] GetParent (hWnd=0x70020) returned 0x0 [0056.155] GetStockObject (i=5) returned 0x1900015 [0056.156] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.156] CoTaskMemAlloc (cb=0x5a) returned 0x566600 [0056.156] RegisterClassW (lpWndClass=0x14e950) returned 0xc212 [0056.156] CoTaskMemFree (pv=0x566600) [0056.156] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.156] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.1ca0192_r8_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x602d0 [0056.157] SetWindowLongPtrW (hWnd=0x602d0, nIndex=-4, dwNewLong=0x7ffd0d9f4a40) returned 0x1ac90a2c [0056.157] GetWindowLongPtrW (hWnd=0x602d0, nIndex=-4) returned 0x7ffd0d9f4a40 [0056.158] SetWindowLongPtrW (hWnd=0x602d0, nIndex=-4, dwNewLong=0x1ac90a7c) returned 0x7ffd0d9f4a40 [0056.158] GetWindowLongPtrW (hWnd=0x602d0, nIndex=-4) returned 0x1ac90a7c [0056.158] GetWindowLongPtrW (hWnd=0x602d0, nIndex=-16) returned 0x4c00000 [0056.158] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x602d0, Msg=0x24, wParam=0x0, lParam=0x14e370) returned 0x0 [0056.158] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x602d0, Msg=0x81, wParam=0x0, lParam=0x14e2e0) returned 0x1 [0056.158] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x602d0, Msg=0x83, wParam=0x0, lParam=0x14e390) returned 0x0 [0056.159] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x602d0, Msg=0x1, wParam=0x0, lParam=0x14e2e0) returned 0x0 [0056.160] SetWindowLongPtrW (hWnd=0x70020, nIndex=-8, dwNewLong=0x602d0) returned 0x0 [0056.161] SendMessageW (hWnd=0x70020, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0056.161] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0056.162] SendMessageW (hWnd=0x70020, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0056.162] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0056.180] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0056.200] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0056.200] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0056.232] GetSystemMenu (hWnd=0x70020, bRevert=0) returned 0x50229 [0056.238] GetWindowPlacement (in: hWnd=0x70020, lpwndpl=0x14ec58 | out: lpwndpl=0x14ec58) returned 1 [0056.240] EnableMenuItem (hMenu=0x50229, uIDEnableItem=0xf020, uEnable=0x1) returned 0 [0056.240] EnableMenuItem (hMenu=0x50229, uIDEnableItem=0xf030, uEnable=0x1) returned 0 [0056.240] EnableMenuItem (hMenu=0x50229, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0056.240] EnableMenuItem (hMenu=0x50229, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0056.240] EnableMenuItem (hMenu=0x50229, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0056.240] GetClientRect (in: hWnd=0x70020, lpRect=0x14ed20 | out: lpRect=0x14ed20) returned 1 [0056.240] GetClientRect (in: hWnd=0x70020, lpRect=0x14ec50 | out: lpRect=0x14ec50) returned 1 [0056.240] GetWindowRect (in: hWnd=0x70020, lpRect=0x14ec50 | out: lpRect=0x14ec50) returned 1 [0056.240] SetWindowLongPtrW (hWnd=0x70020, nIndex=-8, dwNewLong=0x602d0) returned 0x602d0 [0056.246] GetSystemMetrics (nIndex=11) returned 32 [0056.246] GetSystemMetrics (nIndex=12) returned 32 [0056.246] GetDC (hWnd=0x0) returned 0x1b0107ae [0056.246] GetDeviceCaps (hdc=0x1b0107ae, index=12) returned 32 [0056.246] GetDeviceCaps (hdc=0x1b0107ae, index=14) returned 1 [0056.246] ReleaseDC (hWnd=0x0, hDC=0x1b0107ae) returned 1 [0056.247] CreateIconFromResourceEx (presbits=0x224dcb0, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x610177 [0056.249] SendMessageW (hWnd=0x602d0, Msg=0x80, wParam=0x1, lParam=0x610177) returned 0x0 [0056.249] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x602d0, Msg=0x80, wParam=0x1, lParam=0x610177) returned 0x0 [0056.253] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.253] GetWindowLongPtrW (hWnd=0x70020, nIndex=-16) returned 0x6cc0000 [0056.253] GetWindowTextLengthW (hWnd=0x70020) returned 5 [0056.253] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0056.253] GetSystemMetrics (nIndex=42) returned 0 [0056.254] GetWindowTextW (in: hWnd=0x70020, lpString=0x14ea60, nMaxCount=6 | out: lpString="Form1") returned 5 [0056.254] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xd, wParam=0x6, lParam=0x14ea60) returned 0x5 [0056.257] GetWindowTextLengthW (hWnd=0x70020) returned 5 [0056.257] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0056.257] GetSystemMetrics (nIndex=42) returned 0 [0056.257] GetWindowTextW (in: hWnd=0x70020, lpString=0x14ea60, nMaxCount=6 | out: lpString="Form1") returned 5 [0056.257] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xd, wParam=0x6, lParam=0x14ea60) returned 0x5 [0056.257] GetWindowLongPtrW (hWnd=0x70020, nIndex=-16) returned 0x6cc0000 [0056.257] GetWindowLongPtrW (hWnd=0x70020, nIndex=-20) returned 0x90101 [0056.257] SetWindowLongPtrW (hWnd=0x70020, nIndex=-16, dwNewLong=0x2cc0000) returned 0x6cc0000 [0056.257] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x14eb20) returned 0x0 [0056.258] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x14eb20) returned 0x0 [0056.259] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0056.259] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0056.259] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0056.260] SetWindowLongPtrW (hWnd=0x70020, nIndex=-20, dwNewLong=0x90001) returned 0x90101 [0056.260] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x14eb20) returned 0x0 [0056.260] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x14eb20) returned 0x0 [0056.261] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0056.261] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0056.261] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0056.262] SetWindowPos (hWnd=0x70020, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0056.263] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x46, wParam=0x0, lParam=0x14eb80) returned 0x0 [0056.263] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x83, wParam=0x1, lParam=0x14eb50) returned 0x0 [0056.265] GetWindowPlacement (in: hWnd=0x70020, lpwndpl=0x14e728 | out: lpwndpl=0x14e728) returned 1 [0056.265] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x47, wParam=0x0, lParam=0x14eb80) returned 0x0 [0056.265] GetClientRect (in: hWnd=0x70020, lpRect=0x14e5c0 | out: lpRect=0x14e5c0) returned 1 [0056.265] GetWindowRect (in: hWnd=0x70020, lpRect=0x14e5c0 | out: lpRect=0x14e5c0) returned 1 [0056.267] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0056.267] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0056.267] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0056.268] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x83, wParam=0x1, lParam=0x14e420) returned 0x0 [0056.270] RedrawWindow (hWnd=0x70020, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0056.271] GetSystemMenu (hWnd=0x70020, bRevert=0) returned 0x50229 [0056.271] GetWindowPlacement (in: hWnd=0x70020, lpwndpl=0x14ebf8 | out: lpwndpl=0x14ebf8) returned 1 [0056.271] EnableMenuItem (hMenu=0x50229, uIDEnableItem=0xf020, uEnable=0x1) returned 1 [0056.271] EnableMenuItem (hMenu=0x50229, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0056.271] EnableMenuItem (hMenu=0x50229, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0056.271] EnableMenuItem (hMenu=0x50229, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0056.271] EnableMenuItem (hMenu=0x50229, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0056.271] ShowWindow (hWnd=0x70020, nCmdShow=5) returned 0 [0056.271] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.272] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.273] GetClassInfoW (in: hInstance=0x0, lpClassName="BUTTON", lpWndClass=0x224f068 | out: lpWndClass=0x224f068) returned 1 [0056.274] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.274] CoTaskMemAlloc (cb=0x56) returned 0x5740f0 [0056.274] RegisterClassW (lpWndClass=0x14e300) returned 0xc213 [0056.274] CoTaskMemFree (pv=0x5740f0) [0056.274] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.274] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="*", dwStyle=0x5601000b, X=215, Y=60, nWidth=26, nHeight=23, hWndParent=0x70020, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x40206 [0056.277] SetWindowLongPtrW (hWnd=0x40206, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x1ac90acc [0056.277] GetWindowLongPtrW (hWnd=0x40206, nIndex=-4) returned 0x7ffd0d9f4aa0 [0056.277] SetWindowLongPtrW (hWnd=0x40206, nIndex=-4, dwNewLong=0x1ac90b1c) returned 0x7ffd0d9f4aa0 [0056.277] GetWindowLongPtrW (hWnd=0x40206, nIndex=-4) returned 0x1ac90b1c [0056.277] GetWindowLongPtrW (hWnd=0x40206, nIndex=-16) returned 0x4601000b [0056.277] GetWindowLongPtrW (hWnd=0x40206, nIndex=-12) returned 0x0 [0056.277] SetWindowLongPtrW (hWnd=0x40206, nIndex=-12, dwNewLong=0x40206) returned 0x0 [0056.277] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0056.278] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0056.278] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0056.279] GetWindow (hWnd=0x40206, uCmd=0x3) returned 0x0 [0056.279] GetClientRect (in: hWnd=0x40206, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.279] GetWindowRect (in: hWnd=0x40206, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.279] GetParent (hWnd=0x40206) returned 0x70020 [0056.280] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -3670050 [0056.280] SetWindowTextW (hWnd=0x40206, lpString="*") returned 1 [0056.280] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0xc, wParam=0x0, lParam=0x2246a2c) returned 0x1 [0056.281] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0056.281] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x3, wParam=0x0, lParam=0x3c00d7) returned 0x0 [0056.281] GetClientRect (in: hWnd=0x40206, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.281] GetWindowRect (in: hWnd=0x40206, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.281] GetParent (hWnd=0x40206) returned 0x70020 [0056.281] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -3670050 [0056.283] SendMessageW (hWnd=0x40206, Msg=0x2210, wParam=0x2060001, lParam=0x40206) returned 0x0 [0056.283] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x2210, wParam=0x2060001, lParam=0x40206) returned 0x0 [0056.283] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.283] GetParent (hWnd=0x40206) returned 0x70020 [0056.283] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.283] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.283] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="=", dwStyle=0x5601000b, X=183, Y=118, nWidth=58, nHeight=23, hWndParent=0x70020, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x60204 [0056.284] SetWindowLongPtrW (hWnd=0x60204, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x1ac90acc [0056.284] GetWindowLongPtrW (hWnd=0x60204, nIndex=-4) returned 0x7ffd0d9f4aa0 [0056.284] SetWindowLongPtrW (hWnd=0x60204, nIndex=-4, dwNewLong=0x1ac90b6c) returned 0x7ffd0d9f4aa0 [0056.284] GetWindowLongPtrW (hWnd=0x60204, nIndex=-4) returned 0x1ac90b6c [0056.284] GetWindowLongPtrW (hWnd=0x60204, nIndex=-16) returned 0x4601000b [0056.284] GetWindowLongPtrW (hWnd=0x60204, nIndex=-12) returned 0x0 [0056.284] SetWindowLongPtrW (hWnd=0x60204, nIndex=-12, dwNewLong=0x60204) returned 0x0 [0056.284] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0056.286] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0056.286] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0056.286] GetWindow (hWnd=0x60204, uCmd=0x3) returned 0x40206 [0056.286] GetClientRect (in: hWnd=0x60204, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.287] GetWindowRect (in: hWnd=0x60204, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.287] GetParent (hWnd=0x60204) returned 0x70020 [0056.287] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -3670050 [0056.287] SetWindowTextW (hWnd=0x60204, lpString="=") returned 1 [0056.287] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0xc, wParam=0x0, lParam=0x2247804) returned 0x1 [0056.288] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x5, wParam=0x0, lParam=0x17003a) returned 0x0 [0056.288] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x3, wParam=0x0, lParam=0x7600b7) returned 0x0 [0056.288] GetClientRect (in: hWnd=0x60204, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.288] GetWindowRect (in: hWnd=0x60204, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.288] GetParent (hWnd=0x60204) returned 0x70020 [0056.288] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -3670050 [0056.288] SendMessageW (hWnd=0x60204, Msg=0x2210, wParam=0x2040001, lParam=0x60204) returned 0x0 [0056.288] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x2210, wParam=0x2040001, lParam=0x60204) returned 0x0 [0056.288] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.288] GetParent (hWnd=0x60204) returned 0x70020 [0056.288] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.289] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.289] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="log", dwStyle=0x5601000b, X=183, Y=89, nWidth=58, nHeight=23, hWndParent=0x70020, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x602d4 [0056.289] SetWindowLongPtrW (hWnd=0x602d4, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x1ac90acc [0056.289] GetWindowLongPtrW (hWnd=0x602d4, nIndex=-4) returned 0x7ffd0d9f4aa0 [0056.289] SetWindowLongPtrW (hWnd=0x602d4, nIndex=-4, dwNewLong=0x1ac90bbc) returned 0x7ffd0d9f4aa0 [0056.289] GetWindowLongPtrW (hWnd=0x602d4, nIndex=-4) returned 0x1ac90bbc [0056.289] GetWindowLongPtrW (hWnd=0x602d4, nIndex=-16) returned 0x4601000b [0056.289] GetWindowLongPtrW (hWnd=0x602d4, nIndex=-12) returned 0x0 [0056.289] SetWindowLongPtrW (hWnd=0x602d4, nIndex=-12, dwNewLong=0x602d4) returned 0x0 [0056.290] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0056.291] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0056.291] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0056.291] GetWindow (hWnd=0x602d4, uCmd=0x3) returned 0x60204 [0056.291] GetClientRect (in: hWnd=0x602d4, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.291] GetWindowRect (in: hWnd=0x602d4, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.291] GetParent (hWnd=0x602d4) returned 0x70020 [0056.291] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -3670050 [0056.292] SetWindowTextW (hWnd=0x602d4, lpString="log") returned 1 [0056.292] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0xc, wParam=0x0, lParam=0x2246fbc) returned 0x1 [0056.292] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x5, wParam=0x0, lParam=0x17003a) returned 0x0 [0056.292] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x3, wParam=0x0, lParam=0x5900b7) returned 0x0 [0056.292] GetClientRect (in: hWnd=0x602d4, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.292] GetWindowRect (in: hWnd=0x602d4, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.292] GetParent (hWnd=0x602d4) returned 0x70020 [0056.292] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -3670050 [0056.292] SendMessageW (hWnd=0x602d4, Msg=0x2210, wParam=0x2d40001, lParam=0x602d4) returned 0x0 [0056.292] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x2210, wParam=0x2d40001, lParam=0x602d4) returned 0x0 [0056.292] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.293] GetParent (hWnd=0x602d4) returned 0x70020 [0056.293] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.293] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.293] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="e^", dwStyle=0x5601000b, X=151, Y=118, nWidth=33, nHeight=23, hWndParent=0x70020, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x302ea [0056.293] SetWindowLongPtrW (hWnd=0x302ea, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x1ac90acc [0056.293] GetWindowLongPtrW (hWnd=0x302ea, nIndex=-4) returned 0x7ffd0d9f4aa0 [0056.294] SetWindowLongPtrW (hWnd=0x302ea, nIndex=-4, dwNewLong=0x1ac90c0c) returned 0x7ffd0d9f4aa0 [0056.294] GetWindowLongPtrW (hWnd=0x302ea, nIndex=-4) returned 0x1ac90c0c [0056.294] GetWindowLongPtrW (hWnd=0x302ea, nIndex=-16) returned 0x4601000b [0056.294] GetWindowLongPtrW (hWnd=0x302ea, nIndex=-12) returned 0x0 [0056.294] SetWindowLongPtrW (hWnd=0x302ea, nIndex=-12, dwNewLong=0x302ea) returned 0x0 [0056.294] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0056.294] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0056.295] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0056.295] GetWindow (hWnd=0x302ea, uCmd=0x3) returned 0x602d4 [0056.295] GetClientRect (in: hWnd=0x302ea, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.295] GetWindowRect (in: hWnd=0x302ea, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.295] GetParent (hWnd=0x302ea) returned 0x70020 [0056.295] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -3670050 [0056.295] SetWindowTextW (hWnd=0x302ea, lpString="e^") returned 1 [0056.295] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0xc, wParam=0x0, lParam=0x2247714) returned 0x1 [0056.296] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x5, wParam=0x0, lParam=0x170021) returned 0x0 [0056.296] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x3, wParam=0x0, lParam=0x760097) returned 0x0 [0056.296] GetClientRect (in: hWnd=0x302ea, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.296] GetWindowRect (in: hWnd=0x302ea, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.296] GetParent (hWnd=0x302ea) returned 0x70020 [0056.296] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -3670050 [0056.296] SendMessageW (hWnd=0x302ea, Msg=0x2210, wParam=0x2ea0001, lParam=0x302ea) returned 0x0 [0056.296] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x2210, wParam=0x2ea0001, lParam=0x302ea) returned 0x0 [0056.296] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.296] GetParent (hWnd=0x302ea) returned 0x70020 [0056.296] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.296] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.296] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="/", dwStyle=0x5601000b, X=151, Y=89, nWidth=26, nHeight=23, hWndParent=0x70020, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x3035a [0056.297] SetWindowLongPtrW (hWnd=0x3035a, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x1ac90acc [0056.297] GetWindowLongPtrW (hWnd=0x3035a, nIndex=-4) returned 0x7ffd0d9f4aa0 [0056.297] SetWindowLongPtrW (hWnd=0x3035a, nIndex=-4, dwNewLong=0x1ac90c5c) returned 0x7ffd0d9f4aa0 [0056.297] GetWindowLongPtrW (hWnd=0x3035a, nIndex=-4) returned 0x1ac90c5c [0056.297] GetWindowLongPtrW (hWnd=0x3035a, nIndex=-16) returned 0x4601000b [0056.297] GetWindowLongPtrW (hWnd=0x3035a, nIndex=-12) returned 0x0 [0056.297] SetWindowLongPtrW (hWnd=0x3035a, nIndex=-12, dwNewLong=0x3035a) returned 0x0 [0056.297] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0056.298] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0056.298] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0056.298] GetWindow (hWnd=0x3035a, uCmd=0x3) returned 0x302ea [0056.298] GetClientRect (in: hWnd=0x3035a, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.298] GetWindowRect (in: hWnd=0x3035a, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.298] GetParent (hWnd=0x3035a) returned 0x70020 [0056.298] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -3670050 [0056.299] SetWindowTextW (hWnd=0x3035a, lpString="/") returned 1 [0056.299] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0xc, wParam=0x0, lParam=0x2246ecc) returned 0x1 [0056.299] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0056.299] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x3, wParam=0x0, lParam=0x590097) returned 0x0 [0056.299] GetClientRect (in: hWnd=0x3035a, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.299] GetWindowRect (in: hWnd=0x3035a, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.299] GetParent (hWnd=0x3035a) returned 0x70020 [0056.299] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -3670050 [0056.299] SendMessageW (hWnd=0x3035a, Msg=0x2210, wParam=0x35a0001, lParam=0x3035a) returned 0x0 [0056.299] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x2210, wParam=0x35a0001, lParam=0x3035a) returned 0x0 [0056.299] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.300] GetParent (hWnd=0x3035a) returned 0x70020 [0056.300] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.300] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.300] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName=";", dwStyle=0x5601000b, X=119, Y=118, nWidth=26, nHeight=23, hWndParent=0x70020, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x30362 [0056.300] SetWindowLongPtrW (hWnd=0x30362, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x1ac90acc [0056.301] GetWindowLongPtrW (hWnd=0x30362, nIndex=-4) returned 0x7ffd0d9f4aa0 [0056.301] SetWindowLongPtrW (hWnd=0x30362, nIndex=-4, dwNewLong=0x1ac90cac) returned 0x7ffd0d9f4aa0 [0056.301] GetWindowLongPtrW (hWnd=0x30362, nIndex=-4) returned 0x1ac90cac [0056.301] GetWindowLongPtrW (hWnd=0x30362, nIndex=-16) returned 0x4601000b [0056.301] GetWindowLongPtrW (hWnd=0x30362, nIndex=-12) returned 0x0 [0056.301] SetWindowLongPtrW (hWnd=0x30362, nIndex=-12, dwNewLong=0x30362) returned 0x0 [0056.301] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0056.302] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0056.302] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0056.302] GetWindow (hWnd=0x30362, uCmd=0x3) returned 0x3035a [0056.302] GetClientRect (in: hWnd=0x30362, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.302] GetWindowRect (in: hWnd=0x30362, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.302] GetParent (hWnd=0x30362) returned 0x70020 [0056.302] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -3670050 [0056.302] SetWindowTextW (hWnd=0x30362, lpString=";") returned 1 [0056.302] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0xc, wParam=0x0, lParam=0x2247624) returned 0x1 [0056.303] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0056.303] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x3, wParam=0x0, lParam=0x760077) returned 0x0 [0056.303] GetClientRect (in: hWnd=0x30362, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.303] GetWindowRect (in: hWnd=0x30362, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.303] GetParent (hWnd=0x30362) returned 0x70020 [0056.303] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -3670050 [0056.303] SendMessageW (hWnd=0x30362, Msg=0x2210, wParam=0x3620001, lParam=0x30362) returned 0x0 [0056.303] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x2210, wParam=0x3620001, lParam=0x30362) returned 0x0 [0056.303] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.304] GetParent (hWnd=0x30362) returned 0x70020 [0056.304] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.304] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.304] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="-", dwStyle=0x5601000b, X=183, Y=60, nWidth=26, nHeight=23, hWndParent=0x70020, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x3033e [0056.305] SetWindowLongPtrW (hWnd=0x3033e, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x1ac90acc [0056.305] GetWindowLongPtrW (hWnd=0x3033e, nIndex=-4) returned 0x7ffd0d9f4aa0 [0056.306] SetWindowLongPtrW (hWnd=0x3033e, nIndex=-4, dwNewLong=0x1ac90cfc) returned 0x7ffd0d9f4aa0 [0056.306] GetWindowLongPtrW (hWnd=0x3033e, nIndex=-4) returned 0x1ac90cfc [0056.306] GetWindowLongPtrW (hWnd=0x3033e, nIndex=-16) returned 0x4601000b [0056.306] GetWindowLongPtrW (hWnd=0x3033e, nIndex=-12) returned 0x0 [0056.306] SetWindowLongPtrW (hWnd=0x3033e, nIndex=-12, dwNewLong=0x3033e) returned 0x0 [0056.306] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0056.306] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0056.308] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0056.308] GetWindow (hWnd=0x3033e, uCmd=0x3) returned 0x30362 [0056.308] GetClientRect (in: hWnd=0x3033e, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.308] GetWindowRect (in: hWnd=0x3033e, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.308] GetParent (hWnd=0x3033e) returned 0x70020 [0056.309] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -3670050 [0056.309] SetWindowTextW (hWnd=0x3033e, lpString="-") returned 1 [0056.309] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0xc, wParam=0x0, lParam=0x2246944) returned 0x1 [0056.310] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0056.310] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x3, wParam=0x0, lParam=0x3c00b7) returned 0x0 [0056.310] GetClientRect (in: hWnd=0x3033e, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.310] GetWindowRect (in: hWnd=0x3033e, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.310] GetParent (hWnd=0x3033e) returned 0x70020 [0056.310] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -3670050 [0056.310] SendMessageW (hWnd=0x3033e, Msg=0x2210, wParam=0x33e0001, lParam=0x3033e) returned 0x0 [0056.310] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x2210, wParam=0x33e0001, lParam=0x3033e) returned 0x0 [0056.310] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.310] GetParent (hWnd=0x3033e) returned 0x70020 [0056.310] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.311] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.311] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="8", dwStyle=0x5601000b, X=119, Y=89, nWidth=26, nHeight=23, hWndParent=0x70020, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x30340 [0056.311] SetWindowLongPtrW (hWnd=0x30340, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x1ac90acc [0056.311] GetWindowLongPtrW (hWnd=0x30340, nIndex=-4) returned 0x7ffd0d9f4aa0 [0056.311] SetWindowLongPtrW (hWnd=0x30340, nIndex=-4, dwNewLong=0x1ac90d4c) returned 0x7ffd0d9f4aa0 [0056.311] GetWindowLongPtrW (hWnd=0x30340, nIndex=-4) returned 0x1ac90d4c [0056.311] GetWindowLongPtrW (hWnd=0x30340, nIndex=-16) returned 0x4601000b [0056.311] GetWindowLongPtrW (hWnd=0x30340, nIndex=-12) returned 0x0 [0056.311] SetWindowLongPtrW (hWnd=0x30340, nIndex=-12, dwNewLong=0x30340) returned 0x0 [0056.312] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0056.313] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0056.313] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0056.313] GetWindow (hWnd=0x30340, uCmd=0x3) returned 0x3033e [0056.313] GetClientRect (in: hWnd=0x30340, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.313] GetWindowRect (in: hWnd=0x30340, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.313] GetParent (hWnd=0x30340) returned 0x70020 [0056.313] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -3670050 [0056.314] SetWindowTextW (hWnd=0x30340, lpString="8") returned 1 [0056.314] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0xc, wParam=0x0, lParam=0x2246ddc) returned 0x1 [0056.314] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0056.314] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x3, wParam=0x0, lParam=0x590077) returned 0x0 [0056.314] GetClientRect (in: hWnd=0x30340, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.314] GetWindowRect (in: hWnd=0x30340, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.314] GetParent (hWnd=0x30340) returned 0x70020 [0056.314] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -3670050 [0056.314] SendMessageW (hWnd=0x30340, Msg=0x2210, wParam=0x3400001, lParam=0x30340) returned 0x0 [0056.314] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x2210, wParam=0x3400001, lParam=0x30340) returned 0x0 [0056.314] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.315] GetParent (hWnd=0x30340) returned 0x70020 [0056.315] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.315] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.315] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="c", dwStyle=0x5601000b, X=87, Y=118, nWidth=26, nHeight=23, hWndParent=0x70020, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x3032e [0056.315] SetWindowLongPtrW (hWnd=0x3032e, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x1ac90acc [0056.315] GetWindowLongPtrW (hWnd=0x3032e, nIndex=-4) returned 0x7ffd0d9f4aa0 [0056.316] SetWindowLongPtrW (hWnd=0x3032e, nIndex=-4, dwNewLong=0x1ac90d9c) returned 0x7ffd0d9f4aa0 [0056.316] GetWindowLongPtrW (hWnd=0x3032e, nIndex=-4) returned 0x1ac90d9c [0056.316] GetWindowLongPtrW (hWnd=0x3032e, nIndex=-16) returned 0x4601000b [0056.316] GetWindowLongPtrW (hWnd=0x3032e, nIndex=-12) returned 0x0 [0056.316] SetWindowLongPtrW (hWnd=0x3032e, nIndex=-12, dwNewLong=0x3032e) returned 0x0 [0056.316] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0056.316] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0056.317] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0056.317] GetWindow (hWnd=0x3032e, uCmd=0x3) returned 0x30340 [0056.317] GetClientRect (in: hWnd=0x3032e, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.317] GetWindowRect (in: hWnd=0x3032e, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.317] GetParent (hWnd=0x3032e) returned 0x70020 [0056.317] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -3670050 [0056.317] SetWindowTextW (hWnd=0x3032e, lpString="c") returned 1 [0056.317] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0xc, wParam=0x0, lParam=0x224728c) returned 0x1 [0056.318] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0056.319] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x3, wParam=0x0, lParam=0x760057) returned 0x0 [0056.320] GetClientRect (in: hWnd=0x3032e, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.320] GetWindowRect (in: hWnd=0x3032e, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.320] GetParent (hWnd=0x3032e) returned 0x70020 [0056.320] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -3670050 [0056.320] SendMessageW (hWnd=0x3032e, Msg=0x2210, wParam=0x32e0001, lParam=0x3032e) returned 0x0 [0056.320] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x2210, wParam=0x32e0001, lParam=0x3032e) returned 0x0 [0056.320] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.320] GetParent (hWnd=0x3032e) returned 0x70020 [0056.320] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.320] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.320] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="+", dwStyle=0x5601000b, X=151, Y=60, nWidth=26, nHeight=23, hWndParent=0x70020, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x30338 [0056.321] SetWindowLongPtrW (hWnd=0x30338, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x1ac90acc [0056.321] GetWindowLongPtrW (hWnd=0x30338, nIndex=-4) returned 0x7ffd0d9f4aa0 [0056.322] SetWindowLongPtrW (hWnd=0x30338, nIndex=-4, dwNewLong=0x1ac9074c) returned 0x7ffd0d9f4aa0 [0056.322] GetWindowLongPtrW (hWnd=0x30338, nIndex=-4) returned 0x1ac9074c [0056.322] GetWindowLongPtrW (hWnd=0x30338, nIndex=-16) returned 0x4601000b [0056.322] GetWindowLongPtrW (hWnd=0x30338, nIndex=-12) returned 0x0 [0056.322] SetWindowLongPtrW (hWnd=0x30338, nIndex=-12, dwNewLong=0x30338) returned 0x0 [0056.322] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0056.323] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0056.323] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0056.323] GetWindow (hWnd=0x30338, uCmd=0x3) returned 0x3032e [0056.323] GetClientRect (in: hWnd=0x30338, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.323] GetWindowRect (in: hWnd=0x30338, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.323] GetParent (hWnd=0x30338) returned 0x70020 [0056.323] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -3670050 [0056.324] SetWindowTextW (hWnd=0x30338, lpString="+") returned 1 [0056.324] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0xc, wParam=0x0, lParam=0x224685c) returned 0x1 [0056.324] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0056.324] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x3, wParam=0x0, lParam=0x3c0097) returned 0x0 [0056.324] GetClientRect (in: hWnd=0x30338, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.324] GetWindowRect (in: hWnd=0x30338, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.324] GetParent (hWnd=0x30338) returned 0x70020 [0056.324] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -3670050 [0056.324] SendMessageW (hWnd=0x30338, Msg=0x2210, wParam=0x3380001, lParam=0x30338) returned 0x0 [0056.324] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x2210, wParam=0x3380001, lParam=0x30338) returned 0x0 [0056.324] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.325] GetParent (hWnd=0x30338) returned 0x70020 [0056.325] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.325] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.325] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="7", dwStyle=0x5601000b, X=87, Y=89, nWidth=26, nHeight=23, hWndParent=0x70020, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x30326 [0056.325] SetWindowLongPtrW (hWnd=0x30326, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x1ac90acc [0056.325] GetWindowLongPtrW (hWnd=0x30326, nIndex=-4) returned 0x7ffd0d9f4aa0 [0056.326] SetWindowLongPtrW (hWnd=0x30326, nIndex=-4, dwNewLong=0x1ac9389c) returned 0x7ffd0d9f4aa0 [0056.326] GetWindowLongPtrW (hWnd=0x30326, nIndex=-4) returned 0x1ac9389c [0056.326] GetWindowLongPtrW (hWnd=0x30326, nIndex=-16) returned 0x4601000b [0056.326] GetWindowLongPtrW (hWnd=0x30326, nIndex=-12) returned 0x0 [0056.326] SetWindowLongPtrW (hWnd=0x30326, nIndex=-12, dwNewLong=0x30326) returned 0x0 [0056.326] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0056.326] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0056.327] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0056.327] GetWindow (hWnd=0x30326, uCmd=0x3) returned 0x30338 [0056.327] GetClientRect (in: hWnd=0x30326, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.327] GetWindowRect (in: hWnd=0x30326, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.327] GetParent (hWnd=0x30326) returned 0x70020 [0056.327] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -3670050 [0056.327] SetWindowTextW (hWnd=0x30326, lpString="7") returned 1 [0056.327] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0xc, wParam=0x0, lParam=0x2246cec) returned 0x1 [0056.328] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0056.328] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x3, wParam=0x0, lParam=0x590057) returned 0x0 [0056.328] GetClientRect (in: hWnd=0x30326, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.328] GetWindowRect (in: hWnd=0x30326, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.328] GetParent (hWnd=0x30326) returned 0x70020 [0056.328] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -3670050 [0056.328] SendMessageW (hWnd=0x30326, Msg=0x2210, wParam=0x3260001, lParam=0x30326) returned 0x0 [0056.328] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x2210, wParam=0x3260001, lParam=0x30326) returned 0x0 [0056.328] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.328] GetParent (hWnd=0x30326) returned 0x70020 [0056.329] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.330] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.330] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="0", dwStyle=0x5601000b, X=55, Y=118, nWidth=26, nHeight=23, hWndParent=0x70020, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x3032c [0056.331] SetWindowLongPtrW (hWnd=0x3032c, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x1ac90acc [0056.331] GetWindowLongPtrW (hWnd=0x3032c, nIndex=-4) returned 0x7ffd0d9f4aa0 [0056.331] SetWindowLongPtrW (hWnd=0x3032c, nIndex=-4, dwNewLong=0x1ac93a2c) returned 0x7ffd0d9f4aa0 [0056.331] GetWindowLongPtrW (hWnd=0x3032c, nIndex=-4) returned 0x1ac93a2c [0056.331] GetWindowLongPtrW (hWnd=0x3032c, nIndex=-16) returned 0x4601000b [0056.331] GetWindowLongPtrW (hWnd=0x3032c, nIndex=-12) returned 0x0 [0056.331] SetWindowLongPtrW (hWnd=0x3032c, nIndex=-12, dwNewLong=0x3032c) returned 0x0 [0056.331] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0056.332] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0056.332] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0056.332] GetWindow (hWnd=0x3032c, uCmd=0x3) returned 0x30326 [0056.332] GetClientRect (in: hWnd=0x3032c, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.332] GetWindowRect (in: hWnd=0x3032c, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.332] GetParent (hWnd=0x3032c) returned 0x70020 [0056.332] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -3670050 [0056.332] SetWindowTextW (hWnd=0x3032c, lpString="0") returned 1 [0056.333] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0xc, wParam=0x0, lParam=0x224719c) returned 0x1 [0056.333] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0056.333] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x3, wParam=0x0, lParam=0x760037) returned 0x0 [0056.333] GetClientRect (in: hWnd=0x3032c, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.333] GetWindowRect (in: hWnd=0x3032c, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.333] GetParent (hWnd=0x3032c) returned 0x70020 [0056.333] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -3670050 [0056.333] SendMessageW (hWnd=0x3032c, Msg=0x2210, wParam=0x32c0001, lParam=0x3032c) returned 0x0 [0056.333] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x2210, wParam=0x32c0001, lParam=0x3032c) returned 0x0 [0056.334] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.334] GetParent (hWnd=0x3032c) returned 0x70020 [0056.334] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.334] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.334] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="4", dwStyle=0x5601000b, X=119, Y=60, nWidth=26, nHeight=23, hWndParent=0x70020, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x30320 [0056.334] SetWindowLongPtrW (hWnd=0x30320, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x1ac90acc [0056.334] GetWindowLongPtrW (hWnd=0x30320, nIndex=-4) returned 0x7ffd0d9f4aa0 [0056.335] SetWindowLongPtrW (hWnd=0x30320, nIndex=-4, dwNewLong=0x1ac938ec) returned 0x7ffd0d9f4aa0 [0056.335] GetWindowLongPtrW (hWnd=0x30320, nIndex=-4) returned 0x1ac938ec [0056.335] GetWindowLongPtrW (hWnd=0x30320, nIndex=-16) returned 0x4601000b [0056.335] GetWindowLongPtrW (hWnd=0x30320, nIndex=-12) returned 0x0 [0056.335] SetWindowLongPtrW (hWnd=0x30320, nIndex=-12, dwNewLong=0x30320) returned 0x0 [0056.335] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0056.336] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0056.336] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0056.336] GetWindow (hWnd=0x30320, uCmd=0x3) returned 0x3032c [0056.336] GetClientRect (in: hWnd=0x30320, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.336] GetWindowRect (in: hWnd=0x30320, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.336] GetParent (hWnd=0x30320) returned 0x70020 [0056.336] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -3670050 [0056.337] SetWindowTextW (hWnd=0x30320, lpString="4") returned 1 [0056.337] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0xc, wParam=0x0, lParam=0x2246774) returned 0x1 [0056.337] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0056.337] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x3, wParam=0x0, lParam=0x3c0077) returned 0x0 [0056.337] GetClientRect (in: hWnd=0x30320, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.337] GetWindowRect (in: hWnd=0x30320, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.337] GetParent (hWnd=0x30320) returned 0x70020 [0056.338] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -3670050 [0056.338] SendMessageW (hWnd=0x30320, Msg=0x2210, wParam=0x3200001, lParam=0x30320) returned 0x0 [0056.338] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x2210, wParam=0x3200001, lParam=0x30320) returned 0x0 [0056.338] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.338] GetParent (hWnd=0x30320) returned 0x70020 [0056.338] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.338] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.338] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="6", dwStyle=0x5601000b, X=55, Y=89, nWidth=26, nHeight=23, hWndParent=0x70020, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x30328 [0056.338] SetWindowLongPtrW (hWnd=0x30328, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x1ac90acc [0056.339] GetWindowLongPtrW (hWnd=0x30328, nIndex=-4) returned 0x7ffd0d9f4aa0 [0056.339] SetWindowLongPtrW (hWnd=0x30328, nIndex=-4, dwNewLong=0x1ac935cc) returned 0x7ffd0d9f4aa0 [0056.339] GetWindowLongPtrW (hWnd=0x30328, nIndex=-4) returned 0x1ac935cc [0056.339] GetWindowLongPtrW (hWnd=0x30328, nIndex=-16) returned 0x4601000b [0056.339] GetWindowLongPtrW (hWnd=0x30328, nIndex=-12) returned 0x0 [0056.339] SetWindowLongPtrW (hWnd=0x30328, nIndex=-12, dwNewLong=0x30328) returned 0x0 [0056.339] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0056.340] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0056.340] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0056.340] GetWindow (hWnd=0x30328, uCmd=0x3) returned 0x30320 [0056.340] GetClientRect (in: hWnd=0x30328, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.340] GetWindowRect (in: hWnd=0x30328, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.340] GetParent (hWnd=0x30328) returned 0x70020 [0056.340] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -3670050 [0056.340] SetWindowTextW (hWnd=0x30328, lpString="6") returned 1 [0056.341] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0xc, wParam=0x0, lParam=0x2246bfc) returned 0x1 [0056.341] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0056.341] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x3, wParam=0x0, lParam=0x590037) returned 0x0 [0056.341] GetClientRect (in: hWnd=0x30328, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.341] GetWindowRect (in: hWnd=0x30328, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.341] GetParent (hWnd=0x30328) returned 0x70020 [0056.341] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -3670050 [0056.341] SendMessageW (hWnd=0x30328, Msg=0x2210, wParam=0x3280001, lParam=0x30328) returned 0x0 [0056.341] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x2210, wParam=0x3280001, lParam=0x30328) returned 0x0 [0056.341] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.342] GetParent (hWnd=0x30328) returned 0x70020 [0056.342] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.342] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.342] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="9", dwStyle=0x5601000b, X=23, Y=118, nWidth=26, nHeight=23, hWndParent=0x70020, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x3031c [0056.342] SetWindowLongPtrW (hWnd=0x3031c, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x1ac90acc [0056.342] GetWindowLongPtrW (hWnd=0x3031c, nIndex=-4) returned 0x7ffd0d9f4aa0 [0056.343] SetWindowLongPtrW (hWnd=0x3031c, nIndex=-4, dwNewLong=0x1ac9348c) returned 0x7ffd0d9f4aa0 [0056.343] GetWindowLongPtrW (hWnd=0x3031c, nIndex=-4) returned 0x1ac9348c [0056.343] GetWindowLongPtrW (hWnd=0x3031c, nIndex=-16) returned 0x4601000b [0056.343] GetWindowLongPtrW (hWnd=0x3031c, nIndex=-12) returned 0x0 [0056.343] SetWindowLongPtrW (hWnd=0x3031c, nIndex=-12, dwNewLong=0x3031c) returned 0x0 [0056.343] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0056.343] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0056.344] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0056.344] GetWindow (hWnd=0x3031c, uCmd=0x3) returned 0x30328 [0056.344] GetClientRect (in: hWnd=0x3031c, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.344] GetWindowRect (in: hWnd=0x3031c, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.344] GetParent (hWnd=0x3031c) returned 0x70020 [0056.344] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -3670050 [0056.344] SetWindowTextW (hWnd=0x3031c, lpString="9") returned 1 [0056.344] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0xc, wParam=0x0, lParam=0x22470ac) returned 0x1 [0056.345] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0056.345] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x3, wParam=0x0, lParam=0x760017) returned 0x0 [0056.345] GetClientRect (in: hWnd=0x3031c, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.345] GetWindowRect (in: hWnd=0x3031c, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.345] GetParent (hWnd=0x3031c) returned 0x70020 [0056.345] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -3670050 [0056.345] SendMessageW (hWnd=0x3031c, Msg=0x2210, wParam=0x31c0001, lParam=0x3031c) returned 0x0 [0056.345] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x2210, wParam=0x31c0001, lParam=0x3031c) returned 0x0 [0056.345] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.345] GetParent (hWnd=0x3031c) returned 0x70020 [0056.345] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.346] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.346] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="3", dwStyle=0x5601000b, X=87, Y=60, nWidth=26, nHeight=23, hWndParent=0x70020, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x3031e [0056.346] SetWindowLongPtrW (hWnd=0x3031e, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x1ac90acc [0056.346] GetWindowLongPtrW (hWnd=0x3031e, nIndex=-4) returned 0x7ffd0d9f4aa0 [0056.346] SetWindowLongPtrW (hWnd=0x3031e, nIndex=-4, dwNewLong=0x1ac939dc) returned 0x7ffd0d9f4aa0 [0056.346] GetWindowLongPtrW (hWnd=0x3031e, nIndex=-4) returned 0x1ac939dc [0056.346] GetWindowLongPtrW (hWnd=0x3031e, nIndex=-16) returned 0x4601000b [0056.346] GetWindowLongPtrW (hWnd=0x3031e, nIndex=-12) returned 0x0 [0056.346] SetWindowLongPtrW (hWnd=0x3031e, nIndex=-12, dwNewLong=0x3031e) returned 0x0 [0056.346] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0056.347] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0056.347] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0056.347] GetWindow (hWnd=0x3031e, uCmd=0x3) returned 0x3031c [0056.347] GetClientRect (in: hWnd=0x3031e, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.347] GetWindowRect (in: hWnd=0x3031e, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.347] GetParent (hWnd=0x3031e) returned 0x70020 [0056.347] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -3670050 [0056.348] SetWindowTextW (hWnd=0x3031e, lpString="3") returned 1 [0056.348] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0xc, wParam=0x0, lParam=0x224668c) returned 0x1 [0056.348] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0056.348] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x3, wParam=0x0, lParam=0x3c0057) returned 0x0 [0056.348] GetClientRect (in: hWnd=0x3031e, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.348] GetWindowRect (in: hWnd=0x3031e, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.348] GetParent (hWnd=0x3031e) returned 0x70020 [0056.348] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -3670050 [0056.348] SendMessageW (hWnd=0x3031e, Msg=0x2210, wParam=0x31e0001, lParam=0x3031e) returned 0x0 [0056.348] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x2210, wParam=0x31e0001, lParam=0x3031e) returned 0x0 [0056.349] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.349] GetParent (hWnd=0x3031e) returned 0x70020 [0056.349] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.349] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.349] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="5", dwStyle=0x5601000b, X=23, Y=89, nWidth=26, nHeight=23, hWndParent=0x70020, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x30308 [0056.350] SetWindowLongPtrW (hWnd=0x30308, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x1ac90acc [0056.350] GetWindowLongPtrW (hWnd=0x30308, nIndex=-4) returned 0x7ffd0d9f4aa0 [0056.350] SetWindowLongPtrW (hWnd=0x30308, nIndex=-4, dwNewLong=0x1ac932fc) returned 0x7ffd0d9f4aa0 [0056.350] GetWindowLongPtrW (hWnd=0x30308, nIndex=-4) returned 0x1ac932fc [0056.350] GetWindowLongPtrW (hWnd=0x30308, nIndex=-16) returned 0x4601000b [0056.350] GetWindowLongPtrW (hWnd=0x30308, nIndex=-12) returned 0x0 [0056.350] SetWindowLongPtrW (hWnd=0x30308, nIndex=-12, dwNewLong=0x30308) returned 0x0 [0056.350] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0056.350] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0056.353] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0056.353] GetWindow (hWnd=0x30308, uCmd=0x3) returned 0x3031e [0056.353] GetClientRect (in: hWnd=0x30308, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.353] GetWindowRect (in: hWnd=0x30308, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.353] GetParent (hWnd=0x30308) returned 0x70020 [0056.353] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -3670050 [0056.354] SetWindowTextW (hWnd=0x30308, lpString="5") returned 1 [0056.354] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0xc, wParam=0x0, lParam=0x2246b14) returned 0x1 [0056.355] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0056.355] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x3, wParam=0x0, lParam=0x590017) returned 0x0 [0056.355] GetClientRect (in: hWnd=0x30308, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.355] GetWindowRect (in: hWnd=0x30308, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.355] GetParent (hWnd=0x30308) returned 0x70020 [0056.355] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -3670050 [0056.355] SendMessageW (hWnd=0x30308, Msg=0x2210, wParam=0x3080001, lParam=0x30308) returned 0x0 [0056.355] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x2210, wParam=0x3080001, lParam=0x30308) returned 0x0 [0056.355] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.355] GetParent (hWnd=0x30308) returned 0x70020 [0056.355] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.355] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.355] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="2", dwStyle=0x5601000b, X=55, Y=60, nWidth=26, nHeight=23, hWndParent=0x70020, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x3030c [0056.356] SetWindowLongPtrW (hWnd=0x3030c, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x1ac90acc [0056.356] GetWindowLongPtrW (hWnd=0x3030c, nIndex=-4) returned 0x7ffd0d9f4aa0 [0056.356] SetWindowLongPtrW (hWnd=0x3030c, nIndex=-4, dwNewLong=0x1ac937fc) returned 0x7ffd0d9f4aa0 [0056.356] GetWindowLongPtrW (hWnd=0x3030c, nIndex=-4) returned 0x1ac937fc [0056.356] GetWindowLongPtrW (hWnd=0x3030c, nIndex=-16) returned 0x4601000b [0056.356] GetWindowLongPtrW (hWnd=0x3030c, nIndex=-12) returned 0x0 [0056.356] SetWindowLongPtrW (hWnd=0x3030c, nIndex=-12, dwNewLong=0x3030c) returned 0x0 [0056.356] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0056.357] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0056.357] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0056.357] GetWindow (hWnd=0x3030c, uCmd=0x3) returned 0x30308 [0056.357] GetClientRect (in: hWnd=0x3030c, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.357] GetWindowRect (in: hWnd=0x3030c, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.357] GetParent (hWnd=0x3030c) returned 0x70020 [0056.357] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -3670050 [0056.358] SetWindowTextW (hWnd=0x3030c, lpString="2") returned 1 [0056.358] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0xc, wParam=0x0, lParam=0x22465a4) returned 0x1 [0056.358] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0056.358] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x3, wParam=0x0, lParam=0x3c0037) returned 0x0 [0056.358] GetClientRect (in: hWnd=0x3030c, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.358] GetWindowRect (in: hWnd=0x3030c, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.358] GetParent (hWnd=0x3030c) returned 0x70020 [0056.358] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -3670050 [0056.358] SendMessageW (hWnd=0x3030c, Msg=0x2210, wParam=0x30c0001, lParam=0x3030c) returned 0x0 [0056.358] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x2210, wParam=0x30c0001, lParam=0x3030c) returned 0x0 [0056.358] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.359] GetParent (hWnd=0x3030c) returned 0x70020 [0056.359] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.359] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.359] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="1", dwStyle=0x5601000b, X=23, Y=60, nWidth=26, nHeight=23, hWndParent=0x70020, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x302e4 [0056.359] SetWindowLongPtrW (hWnd=0x302e4, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x1ac90acc [0056.359] GetWindowLongPtrW (hWnd=0x302e4, nIndex=-4) returned 0x7ffd0d9f4aa0 [0056.360] SetWindowLongPtrW (hWnd=0x302e4, nIndex=-4, dwNewLong=0x1ac9334c) returned 0x7ffd0d9f4aa0 [0056.360] GetWindowLongPtrW (hWnd=0x302e4, nIndex=-4) returned 0x1ac9334c [0056.360] GetWindowLongPtrW (hWnd=0x302e4, nIndex=-16) returned 0x4601000b [0056.360] GetWindowLongPtrW (hWnd=0x302e4, nIndex=-12) returned 0x0 [0056.360] SetWindowLongPtrW (hWnd=0x302e4, nIndex=-12, dwNewLong=0x302e4) returned 0x0 [0056.360] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0056.360] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0056.361] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0056.361] GetWindow (hWnd=0x302e4, uCmd=0x3) returned 0x3030c [0056.361] GetClientRect (in: hWnd=0x302e4, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.361] GetWindowRect (in: hWnd=0x302e4, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0056.361] GetParent (hWnd=0x302e4) returned 0x70020 [0056.361] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -3670050 [0056.361] SetWindowTextW (hWnd=0x302e4, lpString="1") returned 1 [0056.361] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0xc, wParam=0x0, lParam=0x22464bc) returned 0x1 [0056.363] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0056.364] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x3, wParam=0x0, lParam=0x3c0017) returned 0x0 [0056.364] GetClientRect (in: hWnd=0x302e4, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.364] GetWindowRect (in: hWnd=0x302e4, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0056.364] GetParent (hWnd=0x302e4) returned 0x70020 [0056.364] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -3670050 [0056.364] SendMessageW (hWnd=0x302e4, Msg=0x2210, wParam=0x2e40001, lParam=0x302e4) returned 0x0 [0056.364] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x2210, wParam=0x2e40001, lParam=0x302e4) returned 0x0 [0056.364] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.364] GetParent (hWnd=0x302e4) returned 0x70020 [0056.364] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0056.364] GetClassInfoW (in: hInstance=0x0, lpClassName="EDIT", lpWndClass=0x2250bb0 | out: lpWndClass=0x2250bb0) returned 1 [0056.365] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.365] CoTaskMemAlloc (cb=0x52) returned 0x574c30 [0056.365] RegisterClassW (lpWndClass=0x14e2c0) returned 0xc214 [0056.365] CoTaskMemFree (pv=0x574c30) [0056.365] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0056.365] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.1ca0192_r8_ad1", lpWindowName="0", dwStyle=0x56010046, X=23, Y=12, nWidth=218, nHeight=41, hWndParent=0x70020, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x302de [0056.366] SetWindowLongPtrW (hWnd=0x302de, nIndex=-4, dwNewLong=0x7ffd0d9f4b20) returned 0x1ac9361c [0056.366] GetWindowLongPtrW (hWnd=0x302de, nIndex=-4) returned 0x7ffd0d9f4b20 [0056.366] SetWindowLongPtrW (hWnd=0x302de, nIndex=-4, dwNewLong=0x1ac9393c) returned 0x7ffd0d9f4b20 [0056.366] GetWindowLongPtrW (hWnd=0x302de, nIndex=-4) returned 0x1ac9393c [0056.366] GetWindowLongPtrW (hWnd=0x302de, nIndex=-16) returned 0x46010046 [0056.366] GetWindowLongPtrW (hWnd=0x302de, nIndex=-12) returned 0x0 [0056.366] SetWindowLongPtrW (hWnd=0x302de, nIndex=-12, dwNewLong=0x302de) returned 0x0 [0056.366] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x81, wParam=0x0, lParam=0x14dc50) returned 0x1 [0056.407] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x83, wParam=0x0, lParam=0x14dd00) returned 0x0 [0056.407] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x1, wParam=0x0, lParam=0x14dc40) returned 0x1 [0056.418] GetWindow (hWnd=0x302de, uCmd=0x3) returned 0x302e4 [0056.418] GetClientRect (in: hWnd=0x302de, lpRect=0x14d680 | out: lpRect=0x14d680) returned 1 [0056.418] GetWindowRect (in: hWnd=0x302de, lpRect=0x14d680 | out: lpRect=0x14d680) returned 1 [0056.418] GetParent (hWnd=0x302de) returned 0x70020 [0056.418] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d680, cPoints=0x2 | out: lpPoints=0x14d680) returned -3670050 [0056.418] GetDC (hWnd=0x0) returned 0x1b0107ae [0056.418] GdipCreateFromHDC (hdc=0x1b0107ae, graphics=0x14d348) returned 0x0 [0056.419] CoTaskMemAlloc (cb=0x5c) returned 0x566980 [0056.419] GdipGetLogFontW (font=0x1abe34f0, graphics=0x1beb67f0, logfontW=0x566980) returned 0x0 [0056.419] CoTaskMemFree (pv=0x566980) [0056.419] CoTaskMemAlloc (cb=0x5c) returned 0x566d70 [0056.419] CoTaskMemFree (pv=0x566d70) [0056.419] CoTaskMemAlloc (cb=0x5c) returned 0x566600 [0056.419] CoTaskMemFree (pv=0x566600) [0056.419] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0056.419] ReleaseDC (hWnd=0x0, hDC=0x1b0107ae) returned 1 [0056.420] CoTaskMemAlloc (cb=0x5c) returned 0x566980 [0056.420] CreateFontIndirectW (lplf=0x566980) returned 0x270a06e2 [0056.420] CoTaskMemFree (pv=0x566980) [0056.420] SendMessageW (hWnd=0x302de, Msg=0x30, wParam=0x270a06e2, lParam=0x0) returned 0x1 [0056.420] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x30, wParam=0x270a06e2, lParam=0x0) returned 0x1 [0056.436] SetWindowTextW (hWnd=0x302de, lpString="0") returned 1 [0056.436] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0xc, wParam=0x0, lParam=0x2245454) returned 0x1 [0056.437] GetSystemMetrics (nIndex=5) returned 1 [0056.437] GetSystemMetrics (nIndex=6) returned 1 [0056.437] SendMessageW (hWnd=0x302de, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0056.437] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0056.437] SendMessageW (hWnd=0x302de, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0056.454] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0056.540] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x5, wParam=0x0, lParam=0x2500d6) returned 0x1 [0056.543] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x3, wParam=0x0, lParam=0xe0019) returned 0x0 [0056.543] GetClientRect (in: hWnd=0x302de, lpRect=0x14d7a0 | out: lpRect=0x14d7a0) returned 1 [0056.543] GetWindowRect (in: hWnd=0x302de, lpRect=0x14d7a0 | out: lpRect=0x14d7a0) returned 1 [0056.543] GetParent (hWnd=0x302de) returned 0x70020 [0056.543] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x70020, lpPoints=0x14d7a0, cPoints=0x2 | out: lpPoints=0x14d7a0) returned -3670050 [0056.543] SendMessageW (hWnd=0x302de, Msg=0x2210, wParam=0x2de0001, lParam=0x302de) returned 0x0 [0056.543] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x2210, wParam=0x2de0001, lParam=0x302de) returned 0x0 [0056.543] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0056.544] GetParent (hWnd=0x302de) returned 0x70020 [0056.544] GetWindowTextLengthW (hWnd=0x70020) returned 5 [0056.544] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0056.544] GetSystemMetrics (nIndex=42) returned 0 [0056.544] GetWindowTextW (in: hWnd=0x70020, lpString=0x14e590, nMaxCount=6 | out: lpString="Form1") returned 5 [0056.544] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xd, wParam=0x6, lParam=0x14e590) returned 0x5 [0057.792] CoTaskMemAlloc (cb=0x20c) returned 0x57ee20 [0057.792] SHGetFolderPathW (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x57ee20 | out: pszPath="C:\\ProgramData") returned 0x0 [0057.797] CoTaskMemFree (pv=0x57ee20) [0057.805] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x14b2c8 | out: phkResult=0x14b2c8*=0x0) returned 0x2 [0057.809] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x14dd00, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0057.829] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe", nBufferLength=0x105, lpBuffer=0x14dd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe", lpFilePart=0x0) returned 0x62 [0057.832] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe", nBufferLength=0x105, lpBuffer=0x14dd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe", lpFilePart=0x0) returned 0x62 [0057.869] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe", nBufferLength=0x105, lpBuffer=0x14de60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe", lpFilePart=0x0) returned 0x62 [0057.869] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\WindowsDataC.exe", nBufferLength=0x105, lpBuffer=0x14de60, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\WindowsDataC.exe", lpFilePart=0x0) returned 0x1f [0057.873] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe"), lpNewFileName="C:\\ProgramData\\WindowsDataC.exe" (normalized: "c:\\programdata\\windowsdatac.exe"), bFailIfExists=0) returned 1 [0058.152] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x14e288 | out: phkResult=0x14e288*=0x31c) returned 0x0 [0058.159] RegQueryValueExW (in: hKey=0x31c, lpValueName="WindowsDataC.exe", lpReserved=0x0, lpType=0x14e3a8, lpData=0x0, lpcbData=0x14e3a0*=0x0 | out: lpType=0x14e3a8*=0x0, lpData=0x0, lpcbData=0x14e3a0*=0x0) returned 0x2 [0058.160] RegSetValueExW (in: hKey=0x31c, lpValueName="WindowsDataC.exe", Reserved=0x0, dwType=0x1, lpData="C:\\ProgramData\\WindowsDataC.exe", cbData=0x40 | out: lpData="C:\\ProgramData\\WindowsDataC.exe") returned 0x0 [0058.186] LocalAlloc (uFlags=0x0, uBytes=0x40) returned 0x568be0 [0058.189] ShellExecuteExW (in: pExecInfo=0x2255990*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\ProgramData\\WindowsDataC.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x2255990*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\ProgramData\\WindowsDataC.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x498)) returned 1 [0058.788] LocalFree (hMem=0x568be0) returned 0x0 [0059.051] CoTaskMemAlloc (cb=0x20c) returned 0x57f480 [0059.051] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x57f480 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0059.051] CoTaskMemFree (pv=0x57f480) [0059.051] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x14df10, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0059.051] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x14df30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29 [0059.053] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x14df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29 [0059.054] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x14def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x28 [0059.056] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x14def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23 [0059.056] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x14def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x28 [0059.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e340) returned 1 [0059.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0x14e420 | out: lpFileInformation=0x14e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xa9433335, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xa9433335, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0059.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e300) returned 1 [0059.057] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x14dee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x28 [0059.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e330) returned 1 [0059.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0x14e410 | out: lpFileInformation=0x14e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xa9433335, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xa9433335, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0059.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e2f0) returned 1 [0059.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e370) returned 1 [0059.060] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x14de50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23 [0059.102] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp"), lpFindFileData=0x14e080 | out: lpFindFileData=0x14e080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xa9433335, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xa9433335, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0x1d90f880 [0059.105] FindNextFileW (in: hFindFile=0x1d90f880, lpFindFileData=0x14e040 | out: lpFindFileData=0x14e040*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.106] FindClose (in: hFindFile=0x1d90f880 | out: hFindFile=0x1d90f880) returned 1 [0059.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e2a0) returned 1 [0059.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e260) returned 1 [0059.239] EtwEventRegister () returned 0x0 [0059.240] EtwEventSetInformation () returned 0x0 [0059.244] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe.config", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe.config", lpFilePart=0x0) returned 0x69 [0059.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dfa0) returned 1 [0059.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe.config" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x14e080 | out: lpFileInformation=0x14e080*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0059.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df60) returned 1 [0059.507] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe", nBufferLength=0x105, lpBuffer=0x14ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe", lpFilePart=0x0) returned 0x32 [0059.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e2d0) returned 1 [0059.507] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\runit.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x490 [0059.507] GetFileType (hFile=0x490) returned 0x1 [0059.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e240) returned 1 [0059.507] GetFileType (hFile=0x490) returned 0x1 [0059.507] WriteFile (in: hFile=0x490, lpBuffer=0x122f9198*, nNumberOfBytesToWrite=0x23e00, lpNumberOfBytesWritten=0x14e3f8, lpOverlapped=0x0 | out: lpBuffer=0x122f9198*, lpNumberOfBytesWritten=0x14e3f8*=0x23e00, lpOverlapped=0x0) returned 1 [0059.511] CloseHandle (hObject=0x490) returned 1 [0059.516] CoTaskMemAlloc (cb=0x20c) returned 0x56e540 [0059.516] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x56e540 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0059.516] CoTaskMemFree (pv=0x56e540) [0059.516] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x14df10, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0059.516] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x14df30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29 [0059.517] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x14df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29 [0059.517] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x14def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x28 [0059.517] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x14def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23 [0059.517] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x14def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x28 [0059.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e340) returned 1 [0059.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0x14e420 | out: lpFileInformation=0x14e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xa9ba693d, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xa9ba693d, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0059.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e300) returned 1 [0059.517] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x14dee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x28 [0059.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e330) returned 1 [0059.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0x14e410 | out: lpFileInformation=0x14e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xa9ba693d, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xa9ba693d, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0059.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e2f0) returned 1 [0059.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e370) returned 1 [0059.518] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x14de50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23 [0059.518] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp"), lpFindFileData=0x14e080 | out: lpFindFileData=0x14e080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xa9ba693d, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xa9ba693d, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0x1d90fee0 [0059.518] FindNextFileW (in: hFindFile=0x1d90fee0, lpFindFileData=0x14e040 | out: lpFindFileData=0x14e040*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0059.518] FindClose (in: hFindFile=0x1d90fee0 | out: hFindFile=0x1d90fee0) returned 1 [0059.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e2a0) returned 1 [0059.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e260) returned 1 [0059.518] LocalAlloc (uFlags=0x0, uBytes=0x66) returned 0x1d8f3370 [0059.519] ShellExecuteExW (in: pExecInfo=0x2272d58*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x2272d58*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x51c)) returned 1 [0059.803] LocalFree (hMem=0x1d8f3370) returned 0x0 [0059.804] InvalidateRect (hWnd=0x40206, lpRect=0x0, bErase=0) returned 1 [0059.805] InvalidateRect (hWnd=0x60204, lpRect=0x0, bErase=0) returned 1 [0059.805] InvalidateRect (hWnd=0x602d4, lpRect=0x0, bErase=0) returned 1 [0059.805] InvalidateRect (hWnd=0x302ea, lpRect=0x0, bErase=0) returned 1 [0059.805] InvalidateRect (hWnd=0x3035a, lpRect=0x0, bErase=0) returned 1 [0059.805] InvalidateRect (hWnd=0x30362, lpRect=0x0, bErase=0) returned 1 [0059.805] InvalidateRect (hWnd=0x3033e, lpRect=0x0, bErase=0) returned 1 [0059.805] InvalidateRect (hWnd=0x30340, lpRect=0x0, bErase=0) returned 1 [0059.805] InvalidateRect (hWnd=0x3032e, lpRect=0x0, bErase=0) returned 1 [0059.805] InvalidateRect (hWnd=0x30338, lpRect=0x0, bErase=0) returned 1 [0059.805] InvalidateRect (hWnd=0x30326, lpRect=0x0, bErase=0) returned 1 [0059.805] InvalidateRect (hWnd=0x3032c, lpRect=0x0, bErase=0) returned 1 [0059.805] InvalidateRect (hWnd=0x30320, lpRect=0x0, bErase=0) returned 1 [0059.805] InvalidateRect (hWnd=0x30328, lpRect=0x0, bErase=0) returned 1 [0059.805] InvalidateRect (hWnd=0x3031c, lpRect=0x0, bErase=0) returned 1 [0059.805] InvalidateRect (hWnd=0x3031e, lpRect=0x0, bErase=0) returned 1 [0059.806] InvalidateRect (hWnd=0x30308, lpRect=0x0, bErase=0) returned 1 [0059.806] InvalidateRect (hWnd=0x3030c, lpRect=0x0, bErase=0) returned 1 [0059.806] InvalidateRect (hWnd=0x302e4, lpRect=0x0, bErase=0) returned 1 [0059.806] InvalidateRect (hWnd=0x302de, lpRect=0x0, bErase=1) returned 1 [0059.807] GetWindowThreadProcessId (in: hWnd=0x70020, lpdwProcessId=0x14e650 | out: lpdwProcessId=0x14e650) returned 0x13c8 [0059.807] GetCurrentThreadId () returned 0x13c8 [0059.808] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc215 [0059.808] PostMessageW (hWnd=0x70020, Msg=0xc215, wParam=0x0, lParam=0x0) returned 1 [0059.808] GetWindowTextLengthW (hWnd=0x70020) returned 5 [0059.808] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0059.808] GetSystemMetrics (nIndex=42) returned 0 [0059.808] GetWindowTextW (in: hWnd=0x70020, lpString=0x14e560, nMaxCount=6 | out: lpString="Form1") returned 5 [0059.808] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xd, wParam=0x6, lParam=0x14e560) returned 0x5 [0059.809] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x46, wParam=0x0, lParam=0x14ed90) returned 0x0 [0059.814] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x46, wParam=0x0, lParam=0x14ed90) returned 0x0 [0059.815] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x602d0, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0059.815] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0059.815] NtdllDefWindowProc_W (hWnd=0x50208, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0059.828] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0059.829] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0059.829] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0059.829] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0060.502] OleInitialize (pvReserved=0x0) returned 0x0 [0060.502] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x14e948 | out: lplpMessageFilter=0x14e948*=0x0) returned 0x0 [0060.513] GetFocus () returned 0x0 [0060.514] GetFocus () returned 0x0 [0060.514] SetFocus (hWnd=0x302de) returned 0x0 [0060.754] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0060.760] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0060.760] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0060.761] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0060.762] GetParent (hWnd=0x70020) returned 0x0 [0060.765] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x1 [0060.766] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0060.766] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0 [0060.766] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0060.766] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x282, wParam=0xf, lParam=0x10037b) returned 0x0 [0060.767] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0060.767] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0 [0060.768] SendMessageW (hWnd=0x302de, Msg=0x2111, wParam=0x10002de, lParam=0x302de) returned 0x0 [0060.772] SendMessageW (hWnd=0x302de, Msg=0xb0, wParam=0x14e200, lParam=0x14e1a0) returned 0x0 [0060.773] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0xb0, wParam=0x14e200, lParam=0x14e1a0) returned 0x0 [0060.773] GetKeyState (nVirtKey=1) returned 0 [0060.773] GetKeyState (nVirtKey=2) returned 0 [0060.773] GetKeyState (nVirtKey=4) returned 0 [0060.774] GetKeyState (nVirtKey=5) returned 0 [0060.774] GetKeyState (nVirtKey=6) returned 0 [0060.774] GetWindowTextLengthW (hWnd=0x302de) returned 1 [0060.774] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1 [0060.774] SendMessageW (hWnd=0x302de, Msg=0xb1, wParam=0x0, lParam=0x1) returned 0x1 [0060.774] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0xb1, wParam=0x0, lParam=0x1) returned 0x1 [0060.776] SetTextColor (hdc=0x220106d6, color=0x0) returned 0x0 [0060.776] SetBkColor (hdc=0x220106d6, color=0xffffff) returned 0xffffff [0060.776] GetSysColorBrush (nIndex=5) returned 0x110007b [0060.779] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0060.779] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0 [0060.779] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0060.781] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0060.781] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0060.781] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0060.787] GetWindowPlacement (in: hWnd=0x70020, lpwndpl=0x14e958 | out: lpwndpl=0x14e958) returned 1 [0060.787] GetClientRect (in: hWnd=0x70020, lpRect=0x14e870 | out: lpRect=0x14e870) returned 1 [0060.787] GetWindowTextLengthW (hWnd=0x70020) returned 5 [0060.787] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0060.787] GetSystemMetrics (nIndex=42) returned 0 [0060.787] GetWindowTextW (in: hWnd=0x70020, lpString=0x14e5e0, nMaxCount=6 | out: lpString="Form1") returned 5 [0060.787] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xd, wParam=0x6, lParam=0x14e5e0) returned 0x5 [0060.787] GetClientRect (in: hWnd=0x70020, lpRect=0x14e658 | out: lpRect=0x14e658) returned 1 [0060.792] GetSystemMetrics (nIndex=80) returned 1 [0060.793] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1ac936bc, dwData=0x0) returned 1 [0060.795] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14de50 | out: lpmi=0x14de50) returned 1 [0060.795] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x23010693 [0060.796] GetDeviceCaps (hdc=0x23010693, index=12) returned 32 [0060.796] GetDeviceCaps (hdc=0x23010693, index=14) returned 1 [0060.796] DeleteDC (hdc=0x23010693) returned 1 [0060.801] GetCurrentObject (hdc=0x1b0107ae, type=0x1) returned 0x1b00017 [0060.801] GetCurrentObject (hdc=0x1b0107ae, type=0x2) returned 0x1900010 [0060.801] GetCurrentObject (hdc=0x1b0107ae, type=0x7) returned 0x1b0509b1 [0060.801] GetCurrentObject (hdc=0x1b0107ae, type=0x6) returned 0x18a0048 [0060.804] SaveDC (hdc=0x1b0107ae) returned 1 [0060.805] GetNearestColor (hdc=0x1b0107ae, color=0xf0f0f0) returned 0xf0f0f0 [0060.809] CreateSolidBrush (color=0xf0f0f0) returned 0x20100559 [0060.810] FillRect (hDC=0x1b0107ae, lprc=0x14e348, hbr=0x20100559) returned 1 [0060.812] DeleteObject (ho=0x20100559) returned 1 [0061.032] RestoreDC (hdc=0x1b0107ae, nSavedDC=-1) returned 1 [0061.034] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.034] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.034] GetStockObject (i=5) returned 0x1900015 [0061.034] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.034] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.034] GetStockObject (i=5) returned 0x1900015 [0061.035] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.035] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0061.035] GetStockObject (i=5) returned 0x1900015 [0061.035] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.035] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.035] GetStockObject (i=5) returned 0x1900015 [0061.035] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.036] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.036] GetStockObject (i=5) returned 0x1900015 [0061.036] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.036] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0061.036] GetStockObject (i=5) returned 0x1900015 [0061.036] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.036] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.036] GetStockObject (i=5) returned 0x1900015 [0061.037] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.037] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.037] GetStockObject (i=5) returned 0x1900015 [0061.037] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.037] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0061.037] GetStockObject (i=5) returned 0x1900015 [0061.037] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.038] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.038] GetStockObject (i=5) returned 0x1900015 [0061.038] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.038] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.038] GetStockObject (i=5) returned 0x1900015 [0061.038] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.038] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0061.038] GetStockObject (i=5) returned 0x1900015 [0061.039] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.039] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.039] GetStockObject (i=5) returned 0x1900015 [0061.039] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.039] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.039] GetStockObject (i=5) returned 0x1900015 [0061.039] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.039] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0061.040] GetStockObject (i=5) returned 0x1900015 [0061.040] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.040] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.040] GetStockObject (i=5) returned 0x1900015 [0061.040] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.040] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.040] GetStockObject (i=5) returned 0x1900015 [0061.040] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.041] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0061.041] GetStockObject (i=5) returned 0x1900015 [0061.041] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.041] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.041] GetStockObject (i=5) returned 0x1900015 [0061.041] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.042] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.042] SetTextColor (hdc=0x1b0107ae, color=0x0) returned 0x0 [0061.042] SetBkColor (hdc=0x1b0107ae, color=0xffffff) returned 0xffffff [0061.042] GetWindowPlacement (in: hWnd=0x70020, lpwndpl=0x14e938 | out: lpwndpl=0x14e938) returned 1 [0061.042] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x47, wParam=0x0, lParam=0x14ed90) returned 0x0 [0061.042] GetClientRect (in: hWnd=0x70020, lpRect=0x14e7d0 | out: lpRect=0x14e7d0) returned 1 [0061.042] GetWindowRect (in: hWnd=0x70020, lpRect=0x14e7d0 | out: lpRect=0x14e7d0) returned 1 [0061.044] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0061.044] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0061.044] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0061.044] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x5, wParam=0x0, lParam=0xa90102) returned 0x0 [0061.044] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x3, wParam=0x0, lParam=0x390022) returned 0x0 [0061.044] GetClientRect (in: hWnd=0x70020, lpRect=0x14e860 | out: lpRect=0x14e860) returned 1 [0061.044] GetWindowRect (in: hWnd=0x70020, lpRect=0x14e860 | out: lpRect=0x14e860) returned 1 [0061.045] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0061.046] IsWindowUnicode (hWnd=0x70020) returned 1 [0061.046] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0061.047] TranslateMessage (lpMsg=0x14ef10) returned 0 [0061.047] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0061.050] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x46, wParam=0x0, lParam=0x14eae0) returned 0x0 [0061.050] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x83, wParam=0x1, lParam=0x14eab0) returned 0x0 [0061.050] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.051] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0061.052] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0061.052] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0061.052] GetWindowPlacement (in: hWnd=0x70020, lpwndpl=0x14e6a8 | out: lpwndpl=0x14e6a8) returned 1 [0061.052] GetClientRect (in: hWnd=0x70020, lpRect=0x14e5c0 | out: lpRect=0x14e5c0) returned 1 [0061.052] GetWindowTextLengthW (hWnd=0x70020) returned 5 [0061.052] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0061.052] GetSystemMetrics (nIndex=42) returned 0 [0061.052] GetWindowTextW (in: hWnd=0x70020, lpString=0x14e330, nMaxCount=6 | out: lpString="Form1") returned 5 [0061.052] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xd, wParam=0x6, lParam=0x14e330) returned 0x5 [0061.053] GetClientRect (in: hWnd=0x70020, lpRect=0x14e3a8 | out: lpRect=0x14e3a8) returned 1 [0061.053] GetCurrentObject (hdc=0xc0100ae, type=0x1) returned 0x1b00017 [0061.053] GetCurrentObject (hdc=0xc0100ae, type=0x2) returned 0x1900010 [0061.053] GetCurrentObject (hdc=0xc0100ae, type=0x7) returned 0x1b0509b1 [0061.053] GetCurrentObject (hdc=0xc0100ae, type=0x6) returned 0x18a0048 [0061.053] SaveDC (hdc=0xc0100ae) returned 1 [0061.053] GetNearestColor (hdc=0xc0100ae, color=0xf0f0f0) returned 0xf0f0f0 [0061.053] CreateSolidBrush (color=0xf0f0f0) returned 0x21100559 [0061.053] FillRect (hDC=0xc0100ae, lprc=0x14e098, hbr=0x21100559) returned 1 [0061.053] DeleteObject (ho=0x21100559) returned 1 [0061.053] RestoreDC (hdc=0xc0100ae, nSavedDC=-1) returned 1 [0061.054] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.054] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.054] GetStockObject (i=5) returned 0x1900015 [0061.054] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.054] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.054] GetStockObject (i=5) returned 0x1900015 [0061.054] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.054] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0061.055] GetStockObject (i=5) returned 0x1900015 [0061.055] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.055] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.055] GetStockObject (i=5) returned 0x1900015 [0061.055] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.055] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.055] GetStockObject (i=5) returned 0x1900015 [0061.056] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.056] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0061.056] GetStockObject (i=5) returned 0x1900015 [0061.056] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.056] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.056] GetStockObject (i=5) returned 0x1900015 [0061.056] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.056] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.057] GetStockObject (i=5) returned 0x1900015 [0061.057] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.057] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0061.057] GetStockObject (i=5) returned 0x1900015 [0061.057] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.057] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.057] GetStockObject (i=5) returned 0x1900015 [0061.058] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.058] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.058] GetStockObject (i=5) returned 0x1900015 [0061.058] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.058] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0061.058] GetStockObject (i=5) returned 0x1900015 [0061.058] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.058] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.059] GetStockObject (i=5) returned 0x1900015 [0061.059] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.059] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.059] GetStockObject (i=5) returned 0x1900015 [0061.059] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.059] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0061.059] GetStockObject (i=5) returned 0x1900015 [0061.059] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.060] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.060] GetStockObject (i=5) returned 0x1900015 [0061.060] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.060] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.060] GetStockObject (i=5) returned 0x1900015 [0061.060] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.060] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0061.061] GetStockObject (i=5) returned 0x1900015 [0061.061] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.061] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.061] GetStockObject (i=5) returned 0x1900015 [0061.061] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.061] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.061] SetTextColor (hdc=0x220106d6, color=0x0) returned 0x0 [0061.061] SetBkColor (hdc=0x220106d6, color=0xffffff) returned 0xffffff [0061.062] GetWindowPlacement (in: hWnd=0x70020, lpwndpl=0x14e688 | out: lpwndpl=0x14e688) returned 1 [0061.062] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x47, wParam=0x0, lParam=0x14eae0) returned 0x0 [0061.062] GetClientRect (in: hWnd=0x70020, lpRect=0x14e520 | out: lpRect=0x14e520) returned 1 [0061.062] GetWindowRect (in: hWnd=0x70020, lpRect=0x14e520 | out: lpRect=0x14e520) returned 1 [0061.063] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0061.063] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0061.064] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0061.064] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x83, wParam=0x1, lParam=0x14e380) returned 0x0 [0061.065] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.066] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0061.066] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0061.066] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0061.067] GetWindowPlacement (in: hWnd=0x70020, lpwndpl=0x14df78 | out: lpwndpl=0x14df78) returned 1 [0061.067] GetClientRect (in: hWnd=0x70020, lpRect=0x14de90 | out: lpRect=0x14de90) returned 1 [0061.067] GetWindowTextLengthW (hWnd=0x70020) returned 5 [0061.067] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0061.067] GetSystemMetrics (nIndex=42) returned 0 [0061.067] GetWindowTextW (in: hWnd=0x70020, lpString=0x14dc00, nMaxCount=6 | out: lpString="Form1") returned 5 [0061.067] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xd, wParam=0x6, lParam=0x14dc00) returned 0x5 [0061.067] GetClientRect (in: hWnd=0x70020, lpRect=0x14dc78 | out: lpRect=0x14dc78) returned 1 [0061.067] GetCurrentObject (hdc=0xc0100ae, type=0x1) returned 0x1b00017 [0061.067] GetCurrentObject (hdc=0xc0100ae, type=0x2) returned 0x1900010 [0061.067] GetCurrentObject (hdc=0xc0100ae, type=0x7) returned 0x1b0509b1 [0061.067] GetCurrentObject (hdc=0xc0100ae, type=0x6) returned 0x18a0048 [0061.067] SaveDC (hdc=0xc0100ae) returned 1 [0061.067] GetNearestColor (hdc=0xc0100ae, color=0xf0f0f0) returned 0xf0f0f0 [0061.067] CreateSolidBrush (color=0xf0f0f0) returned 0x22100559 [0061.067] FillRect (hDC=0xc0100ae, lprc=0x14d968, hbr=0x22100559) returned 1 [0061.126] DeleteObject (ho=0x22100559) returned 1 [0061.126] RestoreDC (hdc=0xc0100ae, nSavedDC=-1) returned 1 [0061.126] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.126] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.126] GetStockObject (i=5) returned 0x1900015 [0061.126] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.127] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.127] GetStockObject (i=5) returned 0x1900015 [0061.127] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.127] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0061.127] GetStockObject (i=5) returned 0x1900015 [0061.127] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.127] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.127] GetStockObject (i=5) returned 0x1900015 [0061.128] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.128] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.128] GetStockObject (i=5) returned 0x1900015 [0061.128] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.128] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0061.128] GetStockObject (i=5) returned 0x1900015 [0061.128] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.128] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.128] GetStockObject (i=5) returned 0x1900015 [0061.129] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.129] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.129] GetStockObject (i=5) returned 0x1900015 [0061.129] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.129] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0061.129] GetStockObject (i=5) returned 0x1900015 [0061.129] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.129] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.130] GetStockObject (i=5) returned 0x1900015 [0061.130] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.130] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.130] GetStockObject (i=5) returned 0x1900015 [0061.130] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.130] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0061.130] GetStockObject (i=5) returned 0x1900015 [0061.130] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.131] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.131] GetStockObject (i=5) returned 0x1900015 [0061.131] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.131] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.131] GetStockObject (i=5) returned 0x1900015 [0061.131] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.131] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0061.131] GetStockObject (i=5) returned 0x1900015 [0061.131] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.132] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.132] GetStockObject (i=5) returned 0x1900015 [0061.132] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.132] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.132] GetStockObject (i=5) returned 0x1900015 [0061.132] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.132] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0061.132] GetStockObject (i=5) returned 0x1900015 [0061.133] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.133] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.133] GetStockObject (i=5) returned 0x1900015 [0061.133] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.135] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0061.135] SetTextColor (hdc=0x1b0107ae, color=0x0) returned 0x0 [0061.135] SetBkColor (hdc=0x1b0107ae, color=0xffffff) returned 0xffffff [0061.135] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0061.135] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0061.135] IsWindowUnicode (hWnd=0x602d0) returned 1 [0061.135] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0061.135] TranslateMessage (lpMsg=0x14ef10) returned 0 [0061.135] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0061.136] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x602d0, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0061.136] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0061.136] IsWindowUnicode (hWnd=0x70020) returned 1 [0061.136] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0061.136] TranslateMessage (lpMsg=0x14ef10) returned 0 [0061.136] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0061.137] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0061.137] IsWindowUnicode (hWnd=0x70020) returned 1 [0061.137] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0061.137] TranslateMessage (lpMsg=0x14ef10) returned 0 [0061.137] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0061.138] BeginPaint (in: hWnd=0x70020, lpPaint=0x14e618 | out: lpPaint=0x14e618) returned 0x220106d6 [0061.139] GdipCreateHalftonePalette () returned 0xffffffffab080693 [0061.140] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0061.140] GetWindowTextLengthW (hWnd=0x70020) returned 5 [0061.140] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0061.140] GetSystemMetrics (nIndex=42) returned 0 [0061.140] GetWindowTextW (in: hWnd=0x70020, lpString=0x14e4c0, nMaxCount=6 | out: lpString="Form1") returned 5 [0061.140] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xd, wParam=0x6, lParam=0x14e4c0) returned 0x5 [0061.140] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0061.140] EndPaint (hWnd=0x70020, lpPaint=0x14e5b8) returned 1 [0061.140] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0061.140] IsWindowUnicode (hWnd=0x40206) returned 1 [0061.140] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0061.140] TranslateMessage (lpMsg=0x14ef10) returned 0 [0061.140] DispatchMessageW (lpMsg=0x14ef10) [0061.141] BeginPaint (in: hWnd=0x40206, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0061.141] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0061.251] CreateCompatibleDC (hdc=0x1b0107ae) returned 0xffffffff8b010965 [0061.251] GetObjectType (h=0x1b0107ae) returned 0x3 [0061.251] CreateCompatibleBitmap (hdc=0x1b0107ae, cx=1, cy=1) returned 0x5f0506b1 [0061.252] GetDIBits (in: hdc=0x1b0107ae, hbm=0x5f0506b1, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x14df38, usage=0x0 | out: lpvBits=0x0, lpbmi=0x14df38) returned 1 [0061.252] GetDIBits (in: hdc=0x1b0107ae, hbm=0x5f0506b1, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x14df38, usage=0x0 | out: lpvBits=0x0, lpbmi=0x14df38) returned 1 [0061.252] DeleteObject (ho=0x5f0506b1) returned 1 [0061.252] CreateDIBSection (in: hdc=0x1b0107ae, lpbmi=0x14dfe8, usage=0x0, ppvBits=0x14e5a8, hSection=0x0, offset=0x0 | out: ppvBits=0x14e5a8) returned 0x150506a9 [0061.252] SelectObject (hdc=0xffffffff8b010965, h=0x150506a9) returned 0x185000f [0061.253] GdipCreateFromHDC (hdc=0xffffffff8b010965, graphics=0x14e528) returned 0x0 [0061.255] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0061.256] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0061.258] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0061.258] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb15e0) returned 0x0 [0061.259] GdipIsMatrixIdentity (matrix=0x1beb15e0, result=0x14e5b8) returned 0x0 [0061.260] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0061.260] GdipGetMatrixElements (matrix=0x1beb15e0, matrixOut=0x1d92cf10) returned 0x0 [0061.261] LocalFree (hMem=0x1d92cf10) returned 0x0 [0061.261] GdipDeleteMatrix (matrix=0x1beb15e0) returned 0x0 [0061.263] GdipCreateRegion (region=0x14e550) returned 0x0 [0061.264] GdipGetClip (graphics=0x1beb67f0, region=0x1beb1620) returned 0x0 [0061.267] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0061.267] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0061.268] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffdb40dbd) returned 0x0 [0061.269] GdipDeleteRegion (region=0x1beb1620) returned 0x0 [0061.271] SystemParametersInfoW (in: uiAction=0x42, uiParam=0x10, pvParam=0x14e3b8, fWinIni=0x0 | out: pvParam=0x14e3b8) returned 1 [0061.272] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0061.272] GetCurrentObject (hdc=0xffffffff8b010965, type=0x1) returned 0x1b00017 [0061.272] GetCurrentObject (hdc=0xffffffff8b010965, type=0x2) returned 0x1900010 [0061.272] GetCurrentObject (hdc=0xffffffff8b010965, type=0x7) returned 0x150506a9 [0061.272] GetCurrentObject (hdc=0xffffffff8b010965, type=0x6) returned 0x18a0048 [0061.272] SaveDC (hdc=0xffffffff8b010965) returned 1 [0061.272] GetNearestColor (hdc=0xffffffff8b010965, color=0xf0f0f0) returned 0xf0f0f0 [0061.272] GetNearestColor (hdc=0xffffffff8b010965, color=0xa0a0a0) returned 0xa0a0a0 [0061.272] GetNearestColor (hdc=0xffffffff8b010965, color=0x696969) returned 0x696969 [0061.273] GetNearestColor (hdc=0xffffffff8b010965, color=0xa0a0a0) returned 0xa0a0a0 [0061.273] GetNearestColor (hdc=0xffffffff8b010965, color=0x0) returned 0x0 [0061.273] GetNearestColor (hdc=0xffffffff8b010965, color=0xffffff) returned 0xffffff [0061.273] GetNearestColor (hdc=0xffffffff8b010965, color=0xe5e5e5) returned 0xe5e5e5 [0061.273] GetNearestColor (hdc=0xffffffff8b010965, color=0xd8d8d8) returned 0xd8d8d8 [0061.273] GetNearestColor (hdc=0xffffffff8b010965, color=0x0) returned 0x0 [0061.273] RestoreDC (hdc=0xffffffff8b010965, nSavedDC=-1) returned 1 [0061.273] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff8b010965) returned 0x0 [0061.273] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0061.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExi'\x02", lpUsedDefaultChar=0x0) returned 17 [0061.274] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0061.279] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2276fe8) returned 0x0 [0061.280] GdipSetStringFormatAlign (format=0x1beb1620, align=0x1) returned 0x0 [0061.281] GdipSetStringFormatLineAlign (format=0x1beb1620, align=0x1) returned 0x0 [0061.281] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x14e368, fWinIni=0x0 | out: pvParam=0x14e368) returned 1 [0061.281] SendMessageW (hWnd=0x70020, Msg=0x127, wParam=0x30001, lParam=0x0) [0061.281] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x127, wParam=0x30001, lParam=0x0) [0061.281] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x128, wParam=0x30001, lParam=0x0) [0061.281] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0061.282] GetStockObject (i=5) returned 0x1900015 [0061.282] GetStockObject (i=5) returned 0x1900015 [0061.282] GetDlgItem (hDlg=0x70020, nIDDlgItem=262662) returned 0x40206 [0061.282] SendMessageW (hWnd=0x40206, Msg=0x202b, wParam=0x40206, lParam=0x14c6f0) returned 0x0 [0061.282] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x202b, wParam=0x40206, lParam=0x14c6f0) returned 0x0 [0061.283] RedrawWindow (hWnd=0x40206, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0061.283] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0061.283] GetStockObject (i=5) returned 0x1900015 [0061.283] GetStockObject (i=5) returned 0x1900015 [0061.283] GetDlgItem (hDlg=0x70020, nIDDlgItem=393732) returned 0x60204 [0061.283] SendMessageW (hWnd=0x60204, Msg=0x202b, wParam=0x60204, lParam=0x14c6f0) returned 0x0 [0061.283] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x202b, wParam=0x60204, lParam=0x14c6f0) returned 0x0 [0061.283] RedrawWindow (hWnd=0x60204, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0061.283] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0061.284] GetStockObject (i=5) returned 0x1900015 [0061.284] GetStockObject (i=5) returned 0x1900015 [0061.284] GetDlgItem (hDlg=0x70020, nIDDlgItem=393940) returned 0x602d4 [0061.284] SendMessageW (hWnd=0x602d4, Msg=0x202b, wParam=0x602d4, lParam=0x14c6f0) returned 0x0 [0061.284] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x202b, wParam=0x602d4, lParam=0x14c6f0) returned 0x0 [0061.284] RedrawWindow (hWnd=0x602d4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0061.284] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0061.284] GetStockObject (i=5) returned 0x1900015 [0061.284] GetStockObject (i=5) returned 0x1900015 [0061.284] GetDlgItem (hDlg=0x70020, nIDDlgItem=197354) returned 0x302ea [0061.284] SendMessageW (hWnd=0x302ea, Msg=0x202b, wParam=0x302ea, lParam=0x14c6f0) returned 0x0 [0061.284] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x202b, wParam=0x302ea, lParam=0x14c6f0) returned 0x0 [0061.285] RedrawWindow (hWnd=0x302ea, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0061.285] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0061.285] GetStockObject (i=5) returned 0x1900015 [0061.285] GetStockObject (i=5) returned 0x1900015 [0061.285] GetDlgItem (hDlg=0x70020, nIDDlgItem=197466) returned 0x3035a [0061.285] SendMessageW (hWnd=0x3035a, Msg=0x202b, wParam=0x3035a, lParam=0x14c6f0) returned 0x0 [0061.285] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x202b, wParam=0x3035a, lParam=0x14c6f0) returned 0x0 [0061.285] RedrawWindow (hWnd=0x3035a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0061.285] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0061.286] GetStockObject (i=5) returned 0x1900015 [0061.286] GetStockObject (i=5) returned 0x1900015 [0061.286] GetDlgItem (hDlg=0x70020, nIDDlgItem=197474) returned 0x30362 [0061.286] SendMessageW (hWnd=0x30362, Msg=0x202b, wParam=0x30362, lParam=0x14c6f0) returned 0x0 [0061.286] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x202b, wParam=0x30362, lParam=0x14c6f0) returned 0x0 [0061.286] RedrawWindow (hWnd=0x30362, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0061.286] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0061.286] GetStockObject (i=5) returned 0x1900015 [0061.287] GetStockObject (i=5) returned 0x1900015 [0061.287] GetDlgItem (hDlg=0x70020, nIDDlgItem=197438) returned 0x3033e [0061.287] SendMessageW (hWnd=0x3033e, Msg=0x202b, wParam=0x3033e, lParam=0x14c6f0) returned 0x0 [0061.287] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x202b, wParam=0x3033e, lParam=0x14c6f0) returned 0x0 [0061.287] RedrawWindow (hWnd=0x3033e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0061.287] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x128, wParam=0x30001, lParam=0x0) [0061.287] GetStockObject (i=5) returned 0x1900015 [0061.287] GetStockObject (i=5) returned 0x1900015 [0061.288] GetDlgItem (hDlg=0x70020, nIDDlgItem=197440) returned 0x30340 [0061.288] SendMessageW (hWnd=0x30340, Msg=0x202b, wParam=0x30340, lParam=0x14c6f0) [0061.288] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x202b, wParam=0x30340, lParam=0x14c6f0) returned 0x0 [0061.288] RedrawWindow (hWnd=0x30340, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0061.288] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x128, wParam=0x30001, lParam=0x0) [0061.289] GetStockObject (i=5) returned 0x1900015 [0061.289] GetStockObject (i=5) returned 0x1900015 [0061.289] GetDlgItem (hDlg=0x70020, nIDDlgItem=197422) returned 0x3032e [0061.289] SendMessageW (hWnd=0x3032e, Msg=0x202b, wParam=0x3032e, lParam=0x14c6f0) [0061.289] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x202b, wParam=0x3032e, lParam=0x14c6f0) returned 0x0 [0061.289] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x128, wParam=0x30001, lParam=0x0) [0061.289] GetStockObject (i=5) returned 0x1900015 [0061.289] GetStockObject (i=5) returned 0x1900015 [0061.290] GetDlgItem (hDlg=0x70020, nIDDlgItem=197432) returned 0x30338 [0061.290] SendMessageW (hWnd=0x30338, Msg=0x202b, wParam=0x30338, lParam=0x14c6f0) [0061.290] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x202b, wParam=0x30338, lParam=0x14c6f0) returned 0x0 [0061.290] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x128, wParam=0x30001, lParam=0x0) [0061.290] GetStockObject (i=5) returned 0x1900015 [0061.290] GetStockObject (i=5) returned 0x1900015 [0061.290] GetDlgItem (hDlg=0x70020, nIDDlgItem=197414) returned 0x30326 [0061.290] SendMessageW (hWnd=0x30326, Msg=0x202b, wParam=0x30326, lParam=0x14c6f0) [0061.290] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x202b, wParam=0x30326, lParam=0x14c6f0) returned 0x0 [0061.290] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x128, wParam=0x30001, lParam=0x0) [0061.290] GetStockObject (i=5) returned 0x1900015 [0061.291] GetStockObject (i=5) returned 0x1900015 [0061.291] GetDlgItem (hDlg=0x70020, nIDDlgItem=197420) returned 0x3032c [0061.291] SendMessageW (hWnd=0x3032c, Msg=0x202b, wParam=0x3032c, lParam=0x14c6f0) [0061.291] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x202b, wParam=0x3032c, lParam=0x14c6f0) returned 0x0 [0061.291] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x128, wParam=0x30001, lParam=0x0) [0061.291] GetStockObject (i=5) returned 0x1900015 [0061.291] GetStockObject (i=5) returned 0x1900015 [0061.292] GetDlgItem (hDlg=0x70020, nIDDlgItem=197408) returned 0x30320 [0061.292] SendMessageW (hWnd=0x30320, Msg=0x202b, wParam=0x30320, lParam=0x14c6f0) [0061.292] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x202b, wParam=0x30320, lParam=0x14c6f0) returned 0x0 [0061.292] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x128, wParam=0x30001, lParam=0x0) [0061.292] GetStockObject (i=5) returned 0x1900015 [0061.292] GetStockObject (i=5) returned 0x1900015 [0061.292] GetDlgItem (hDlg=0x70020, nIDDlgItem=197416) returned 0x30328 [0061.292] SendMessageW (hWnd=0x30328, Msg=0x202b, wParam=0x30328, lParam=0x14c6f0) [0061.292] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x202b, wParam=0x30328, lParam=0x14c6f0) returned 0x0 [0061.292] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x128, wParam=0x30001, lParam=0x0) [0061.292] GetStockObject (i=5) returned 0x1900015 [0061.292] GetStockObject (i=5) returned 0x1900015 [0061.292] GetDlgItem (hDlg=0x70020, nIDDlgItem=197404) returned 0x3031c [0061.292] SendMessageW (hWnd=0x3031c, Msg=0x202b, wParam=0x3031c, lParam=0x14c6f0) [0061.293] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x202b, wParam=0x3031c, lParam=0x14c6f0) returned 0x0 [0061.293] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x128, wParam=0x30001, lParam=0x0) [0061.293] GetStockObject (i=5) returned 0x1900015 [0061.293] GetStockObject (i=5) returned 0x1900015 [0061.293] GetDlgItem (hDlg=0x70020, nIDDlgItem=197406) returned 0x3031e [0061.293] SendMessageW (hWnd=0x3031e, Msg=0x202b, wParam=0x3031e, lParam=0x14c6f0) [0061.293] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x202b, wParam=0x3031e, lParam=0x14c6f0) returned 0x0 [0061.293] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x128, wParam=0x30001, lParam=0x0) [0061.293] GetStockObject (i=5) returned 0x1900015 [0061.293] GetStockObject (i=5) returned 0x1900015 [0061.293] GetDlgItem (hDlg=0x70020, nIDDlgItem=197384) returned 0x30308 [0061.294] SendMessageW (hWnd=0x30308, Msg=0x202b, wParam=0x30308, lParam=0x14c6f0) [0061.294] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x202b, wParam=0x30308, lParam=0x14c6f0) returned 0x0 [0061.294] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x128, wParam=0x30001, lParam=0x0) [0061.294] GetStockObject (i=5) returned 0x1900015 [0061.294] GetStockObject (i=5) returned 0x1900015 [0061.294] GetDlgItem (hDlg=0x70020, nIDDlgItem=197388) returned 0x3030c [0061.294] SendMessageW (hWnd=0x3030c, Msg=0x202b, wParam=0x3030c, lParam=0x14c6f0) [0061.294] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x202b, wParam=0x3030c, lParam=0x14c6f0) returned 0x0 [0061.294] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x128, wParam=0x30001, lParam=0x0) [0061.294] GetStockObject (i=5) returned 0x1900015 [0061.294] GetStockObject (i=5) returned 0x1900015 [0061.295] GetDlgItem (hDlg=0x70020, nIDDlgItem=197348) returned 0x302e4 [0061.295] SendMessageW (hWnd=0x302e4, Msg=0x202b, wParam=0x302e4, lParam=0x14c6f0) [0061.295] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x202b, wParam=0x302e4, lParam=0x14c6f0) returned 0x0 [0061.295] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0061.296] RedrawWindow (hWnd=0x302de, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0061.676] GdipSetStringFormatHotkeyPrefix (format=0x1beb1620, hotkeyPrefix=2) returned 0x0 [0061.677] GdipGetStringFormatFlags (format=0x1beb1620, flags=0x14e378) returned 0x0 [0061.678] GdipGetStringFormatTrimming (format=0x1beb1620, trimming=0x14e378) returned 0x0 [0061.678] GdipGetStringFormatHotkeyPrefix (format=0x1beb1620, hotkeyPrefix=0x14e378) returned 0x0 [0061.679] GdipGetFontSize (font=0x1beb1620, size=0x14e378) returned 0x0 [0061.679] GdipGetFontStyle (font=0x1beb1620, style=0x14e378) returned 0x0 [0061.680] GdipDeleteStringFormat (format=0x1beb1620) returned 0x0 [0061.680] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0061.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0061.680] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0061.681] CreateCompatibleDC (hdc=0x0) returned 0x6a01069d [0061.681] GetCurrentObject (hdc=0x6a01069d, type=0x1) returned 0x1b00017 [0061.681] GetCurrentObject (hdc=0x6a01069d, type=0x2) returned 0x1900010 [0061.681] GetCurrentObject (hdc=0x6a01069d, type=0x7) returned 0x185000f [0061.681] GetCurrentObject (hdc=0x6a01069d, type=0x6) returned 0x18a0048 [0061.681] SaveDC (hdc=0x6a01069d) returned 1 [0061.681] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0061.682] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2277888) returned 0x0 [0061.682] GdipSetStringFormatFlags (format=0x1beb16b0, flags=0) returned 0x0 [0061.683] GdipSetStringFormatTrimming (format=0x1beb16b0, trimming=0x1) returned 0x0 [0061.683] GdipSetStringFormatHotkeyPrefix (format=0x1beb16b0, hotkeyPrefix=2) returned 0x0 [0061.683] GdipSetStringFormatAlign (format=0x1beb16b0, align=0x1) returned 0x0 [0061.683] GdipSetStringFormatLineAlign (format=0x1beb16b0, align=0x1) returned 0x0 [0061.685] GdipMeasureString (graphics=0x1beb6bc0, string="*", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb16b0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0061.689] GdipDeleteStringFormat (format=0x1beb16b0) returned 0x0 [0061.689] GdipDeleteGraphics (graphics=0x1beb6bc0) returned 0x0 [0061.690] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0061.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0061.690] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0061.691] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0061.691] GdipGetClip (graphics=0x1beb67f0, region=0x1beb1620) returned 0x0 [0061.691] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0061.691] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb16e0) returned 0x0 [0061.691] GdipIsMatrixIdentity (matrix=0x1beb16e0, result=0x14e128) returned 0x0 [0061.691] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d110 [0061.691] GdipGetMatrixElements (matrix=0x1beb16e0, matrixOut=0x1d92d110) returned 0x0 [0061.692] LocalFree (hMem=0x1d92d110) returned 0x0 [0061.692] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0061.692] GdipGetMatrixElements (matrix=0x1beb16e0, matrixOut=0x1d92d650) returned 0x0 [0061.692] LocalFree (hMem=0x1d92d650) returned 0x0 [0061.692] GdipDeleteMatrix (matrix=0x1beb16e0) returned 0x0 [0061.693] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0061.693] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0061.693] GdipGetRegionHRgn (region=0x1beb1620, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0061.697] GdipDeleteRegion (region=0x1beb1620) returned 0x0 [0061.697] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0061.697] GetCurrentObject (hdc=0xffffffff8b010965, type=0x1) returned 0x1b00017 [0061.697] GetCurrentObject (hdc=0xffffffff8b010965, type=0x2) returned 0x1900010 [0061.697] GetCurrentObject (hdc=0xffffffff8b010965, type=0x7) returned 0x150506a9 [0061.697] GetCurrentObject (hdc=0xffffffff8b010965, type=0x6) returned 0x18a0048 [0061.698] SaveDC (hdc=0xffffffff8b010965) returned 1 [0061.699] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5b04095c [0061.699] GetClipRgn (hdc=0xffffffff8b010965, hrgn=0x5b04095c) returned 0 [0061.699] SelectClipRgn (hdc=0xffffffff8b010965, hrgn=0x1c0406c7) returned 2 [0061.700] DeleteObject (ho=0x5b04095c) returned 1 [0061.700] DeleteObject (ho=0x1c0406c7) returned 1 [0061.700] OffsetViewportOrgEx (in: hdc=0xffffffff8b010965, x=0, y=0, lppt=0x2277c60 | out: lppt=0x2277c60) returned 1 [0061.700] GetNearestColor (hdc=0xffffffff8b010965, color=0xf0f0f0) returned 0xf0f0f0 [0061.700] CreateSolidBrush (color=0xf0f0f0) returned 0x23100559 [0061.700] FillRect (hDC=0xffffffff8b010965, lprc=0x14e1c8, hbr=0x23100559) returned 1 [0061.701] DeleteObject (ho=0x23100559) returned 1 [0061.701] RestoreDC (hdc=0xffffffff8b010965, nSavedDC=-1) returned 1 [0061.701] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff8b010965) returned 0x0 [0061.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0061.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0061.702] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0061.702] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2277d60) returned 0x0 [0061.702] GdipSetStringFormatAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0061.702] GdipSetStringFormatLineAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0061.702] GdipSetStringFormatHotkeyPrefix (format=0x1beb15e0, hotkeyPrefix=2) returned 0x0 [0061.703] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0061.704] GdipDrawString (graphics=0x1beb67f0, string="*", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb15e0, brush=0x1beb1720) returned 0x0 [0061.902] GdipDeleteBrush (brush=0x1beb1720) returned 0x0 [0061.902] GdipDeleteStringFormat (format=0x1beb15e0) returned 0x0 [0061.902] GetFocus () returned 0x302de [0061.902] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0061.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExV¾\x1a", lpUsedDefaultChar=0x0) returned 17 [0061.903] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0061.903] GdipCreateRegion (region=0x14e030) returned 0x0 [0061.903] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0061.903] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0061.903] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb16a0) returned 0x0 [0061.903] GdipIsMatrixIdentity (matrix=0x1beb16a0, result=0x14e098) returned 0x0 [0061.903] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cbd0 [0061.903] GdipGetMatrixElements (matrix=0x1beb16a0, matrixOut=0x1d92cbd0) returned 0x0 [0061.904] LocalFree (hMem=0x1d92cbd0) returned 0x0 [0061.904] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d490 [0061.904] GdipGetMatrixElements (matrix=0x1beb16a0, matrixOut=0x1d92d490) returned 0x0 [0061.904] LocalFree (hMem=0x1d92d490) returned 0x0 [0061.904] GdipDeleteMatrix (matrix=0x1beb16a0) returned 0x0 [0061.904] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0061.904] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0061.905] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0061.905] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0061.905] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0061.905] GetCurrentObject (hdc=0xffffffff8b010965, type=0x1) returned 0x1b00017 [0061.905] GetCurrentObject (hdc=0xffffffff8b010965, type=0x2) returned 0x1900010 [0061.905] GetCurrentObject (hdc=0xffffffff8b010965, type=0x7) returned 0x150506a9 [0061.905] GetCurrentObject (hdc=0xffffffff8b010965, type=0x6) returned 0x18a0048 [0061.905] SaveDC (hdc=0xffffffff8b010965) returned 1 [0061.905] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1d0406c7 [0061.905] GetClipRgn (hdc=0xffffffff8b010965, hrgn=0x1d0406c7) returned 0 [0061.905] SelectClipRgn (hdc=0xffffffff8b010965, hrgn=0x5c04095c) returned 2 [0061.905] DeleteObject (ho=0x1d0406c7) returned 1 [0061.905] DeleteObject (ho=0x5c04095c) returned 1 [0061.905] OffsetViewportOrgEx (in: hdc=0xffffffff8b010965, x=0, y=0, lppt=0x2278148 | out: lppt=0x2278148) returned 1 [0061.909] GetROP2 (hdc=0xffffffff8b010965) returned 13 [0061.910] GetBkMode (hdc=0xffffffff8b010965) returned 2 [0061.911] SetBkMode (hdc=0xffffffff8b010965, mode=1) returned 2 [0061.911] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x123009d5 [0061.912] SelectObject (hdc=0xffffffff8b010965, h=0x123009d5) returned 0x1b00017 [0061.912] MoveToEx (in: hdc=0xffffffff8b010965, x=25, y=0, lppt=0x22781b0 | out: lppt=0x22781b0) returned 1 [0061.912] LineTo (hdc=0xffffffff8b010965, x=0, y=0) returned 1 [0061.912] SetBkMode (hdc=0xffffffff8b010965, mode=2) returned 1 [0061.912] MoveToEx (in: hdc=0xffffffff8b010965, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0061.912] GetROP2 (hdc=0xffffffff8b010965) returned 13 [0061.912] GetBkMode (hdc=0xffffffff8b010965) returned 2 [0061.912] SetBkMode (hdc=0xffffffff8b010965, mode=1) returned 2 [0061.912] SelectObject (hdc=0xffffffff8b010965, h=0x123009d5) returned 0x123009d5 [0061.913] MoveToEx (in: hdc=0xffffffff8b010965, x=0, y=0, lppt=0x22781c8 | out: lppt=0x22781c8) returned 1 [0061.913] LineTo (hdc=0xffffffff8b010965, x=0, y=22) returned 1 [0061.913] SetBkMode (hdc=0xffffffff8b010965, mode=2) returned 1 [0061.913] MoveToEx (in: hdc=0xffffffff8b010965, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0061.913] SelectObject (hdc=0xffffffff8b010965, h=0x1b00017) returned 0x123009d5 [0061.913] DeleteObject (ho=0x123009d5) returned 1 [0061.913] GetROP2 (hdc=0xffffffff8b010965) returned 13 [0061.913] GetBkMode (hdc=0xffffffff8b010965) returned 2 [0061.913] SetBkMode (hdc=0xffffffff8b010965, mode=1) returned 2 [0061.913] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x243009ae [0061.913] SelectObject (hdc=0xffffffff8b010965, h=0x243009ae) returned 0x1b00017 [0061.913] MoveToEx (in: hdc=0xffffffff8b010965, x=0, y=22, lppt=0x2278230 | out: lppt=0x2278230) returned 1 [0061.913] LineTo (hdc=0xffffffff8b010965, x=25, y=22) returned 1 [0061.913] SetBkMode (hdc=0xffffffff8b010965, mode=2) returned 1 [0061.913] MoveToEx (in: hdc=0xffffffff8b010965, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0061.913] GetROP2 (hdc=0xffffffff8b010965) returned 13 [0061.913] GetBkMode (hdc=0xffffffff8b010965) returned 2 [0061.913] SetBkMode (hdc=0xffffffff8b010965, mode=1) returned 2 [0061.913] SelectObject (hdc=0xffffffff8b010965, h=0x243009ae) returned 0x243009ae [0061.913] MoveToEx (in: hdc=0xffffffff8b010965, x=25, y=22, lppt=0x2278248 | out: lppt=0x2278248) returned 1 [0061.913] LineTo (hdc=0xffffffff8b010965, x=25, y=-1) returned 1 [0061.914] SetBkMode (hdc=0xffffffff8b010965, mode=2) returned 1 [0061.914] MoveToEx (in: hdc=0xffffffff8b010965, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0061.914] SelectObject (hdc=0xffffffff8b010965, h=0x1b00017) returned 0x243009ae [0061.914] DeleteObject (ho=0x243009ae) returned 1 [0061.914] GetROP2 (hdc=0xffffffff8b010965) returned 13 [0061.914] GetBkMode (hdc=0xffffffff8b010965) returned 2 [0061.914] SetBkMode (hdc=0xffffffff8b010965, mode=1) returned 2 [0061.914] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x133009d5 [0061.914] SelectObject (hdc=0xffffffff8b010965, h=0x133009d5) returned 0x1b00017 [0061.914] MoveToEx (in: hdc=0xffffffff8b010965, x=24, y=1, lppt=0x22782b0 | out: lppt=0x22782b0) returned 1 [0061.914] LineTo (hdc=0xffffffff8b010965, x=1, y=1) returned 1 [0061.914] SetBkMode (hdc=0xffffffff8b010965, mode=2) returned 1 [0061.914] MoveToEx (in: hdc=0xffffffff8b010965, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0061.914] GetROP2 (hdc=0xffffffff8b010965) returned 13 [0061.914] GetBkMode (hdc=0xffffffff8b010965) returned 2 [0061.914] SetBkMode (hdc=0xffffffff8b010965, mode=1) returned 2 [0061.914] SelectObject (hdc=0xffffffff8b010965, h=0x133009d5) returned 0x133009d5 [0061.914] MoveToEx (in: hdc=0xffffffff8b010965, x=1, y=1, lppt=0x22782c8 | out: lppt=0x22782c8) returned 1 [0061.914] LineTo (hdc=0xffffffff8b010965, x=1, y=21) returned 1 [0061.914] SetBkMode (hdc=0xffffffff8b010965, mode=2) returned 1 [0061.914] MoveToEx (in: hdc=0xffffffff8b010965, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0061.914] SelectObject (hdc=0xffffffff8b010965, h=0x1b00017) returned 0x133009d5 [0061.915] DeleteObject (ho=0x133009d5) returned 1 [0061.915] GetROP2 (hdc=0xffffffff8b010965) returned 13 [0061.915] GetBkMode (hdc=0xffffffff8b010965) returned 2 [0061.915] SetBkMode (hdc=0xffffffff8b010965, mode=1) returned 2 [0061.915] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x253009ae [0061.915] SelectObject (hdc=0xffffffff8b010965, h=0x253009ae) returned 0x1b00017 [0061.915] MoveToEx (in: hdc=0xffffffff8b010965, x=1, y=21, lppt=0x2278330 | out: lppt=0x2278330) returned 1 [0061.915] LineTo (hdc=0xffffffff8b010965, x=24, y=21) returned 1 [0061.915] SetBkMode (hdc=0xffffffff8b010965, mode=2) returned 1 [0061.915] MoveToEx (in: hdc=0xffffffff8b010965, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0061.915] GetROP2 (hdc=0xffffffff8b010965) returned 13 [0061.915] GetBkMode (hdc=0xffffffff8b010965) returned 2 [0061.915] SetBkMode (hdc=0xffffffff8b010965, mode=1) returned 2 [0061.915] SelectObject (hdc=0xffffffff8b010965, h=0x253009ae) returned 0x253009ae [0061.915] MoveToEx (in: hdc=0xffffffff8b010965, x=24, y=21, lppt=0x2278348 | out: lppt=0x2278348) returned 1 [0061.915] LineTo (hdc=0xffffffff8b010965, x=24, y=0) returned 1 [0061.915] SetBkMode (hdc=0xffffffff8b010965, mode=2) returned 1 [0061.915] MoveToEx (in: hdc=0xffffffff8b010965, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0061.915] SelectObject (hdc=0xffffffff8b010965, h=0x1b00017) returned 0x253009ae [0061.915] DeleteObject (ho=0x253009ae) returned 1 [0061.915] RestoreDC (hdc=0xffffffff8b010965, nSavedDC=-1) returned 1 [0061.915] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff8b010965) returned 0x0 [0061.916] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0061.916] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0xffffffff8b010965, x1=0, y1=0, rop=0xcc0020) returned 1 [0061.916] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff8b010965) returned 0x0 [0061.916] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0061.917] SelectObject (hdc=0xffffffff8b010965, h=0x185000f) returned 0x150506a9 [0061.917] DeleteDC (hdc=0xffffffff8b010965) returned 1 [0061.917] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0061.917] EndPaint (hWnd=0x40206, lpPaint=0x14e548) returned 1 [0061.922] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0061.922] TranslateMessage (lpMsg=0x14ef10) returned 0 [0061.922] DispatchMessageW (lpMsg=0x14ef10) [0061.922] BeginPaint (hWnd=0x70020, lpPaint=0x14e618) [0061.922] GetWindowPlacement (in: hWnd=0x70020, lpwndpl=0x14e108 | out: lpwndpl=0x14e108) returned 1 [0061.922] GetClientRect (in: hWnd=0x70020, lpRect=0x14e020 | out: lpRect=0x14e020) returned 1 [0061.922] GetWindowTextLengthW (hWnd=0x70020) [0061.922] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0061.922] GetSystemMetrics (nIndex=42) returned 0 [0061.922] GetWindowTextW (hWnd=0x70020, lpString=0x14dd90, nMaxCount=6) [0061.922] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xd, wParam=0x6, lParam=0x14dd90) returned 0x5 [0061.922] GetCurrentObject (hdc=0x1b0107ae, type=0x1) returned 0x1b00017 [0061.922] GetCurrentObject (hdc=0x1b0107ae, type=0x2) returned 0x1900010 [0061.922] GetCurrentObject (hdc=0x1b0107ae, type=0x7) returned 0x1b0509b1 [0061.923] GetCurrentObject (hdc=0x1b0107ae, type=0x6) returned 0x18a0048 [0061.923] SaveDC (hdc=0x1b0107ae) returned 1 [0061.923] GetNearestColor (hdc=0x1b0107ae, color=0xf0f0f0) returned 0xf0f0f0 [0061.923] CreateSolidBrush (color=0xf0f0f0) returned 0x24100559 [0061.923] FillRect (hDC=0x1b0107ae, lprc=0x14daf8, hbr=0x24100559) returned 1 [0061.923] DeleteObject (ho=0x24100559) returned 1 [0061.923] RestoreDC (hdc=0x1b0107ae, nSavedDC=-1) returned 1 [0061.923] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0061.923] GetWindowTextLengthW (hWnd=0x70020) [0061.923] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0061.924] GetSystemMetrics (nIndex=42) returned 0 [0061.924] GetWindowTextW (hWnd=0x70020, lpString=0x14e4c0, nMaxCount=6) [0061.924] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xd, wParam=0x6, lParam=0x14e4c0) returned 0x5 [0061.924] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0061.924] EndPaint (hWnd=0x70020, lpPaint=0x14e5b8) returned 1 [0061.924] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0061.924] TranslateMessage (lpMsg=0x14ef10) returned 0 [0061.924] DispatchMessageW (lpMsg=0x14ef10) [0061.924] BeginPaint (hWnd=0x40206, lpPaint=0x14e5a8) [0061.924] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0061.924] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0061.925] GetStockObject (i=5) returned 0x1900015 [0061.925] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0061.925] CreateCompatibleDC (hdc=0x220106d6) returned 0x450109b9 [0061.925] SelectObject (hdc=0x450109b9, h=0x150506a9) returned 0x185000f [0061.925] GdipCreateFromHDC (hdc=0x450109b9, graphics=0x14e528) returned 0x0 [0061.925] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0061.925] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0061.925] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0061.925] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb15e0) returned 0x0 [0061.925] GdipIsMatrixIdentity (matrix=0x1beb15e0, result=0x14e5b8) returned 0x0 [0061.926] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf90 [0061.926] GdipGetMatrixElements (matrix=0x1beb15e0, matrixOut=0x1d92cf90) returned 0x0 [0061.926] LocalFree (hMem=0x1d92cf90) returned 0x0 [0061.926] GdipDeleteMatrix (matrix=0x1beb15e0) returned 0x0 [0061.926] GdipCreateRegion (region=0x14e550) returned 0x0 [0061.926] GdipGetClip (graphics=0x1beb67f0, region=0x1beb1620) returned 0x0 [0061.926] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0061.926] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0061.926] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffdb10dbd) returned 0x0 [0061.926] GdipDeleteRegion (region=0x1beb1620) returned 0x0 [0061.926] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0061.926] GetCurrentObject (hdc=0x450109b9, type=0x1) returned 0x1b00017 [0061.926] GetCurrentObject (hdc=0x450109b9, type=0x2) returned 0x1900010 [0061.926] GetCurrentObject (hdc=0x450109b9, type=0x7) returned 0x150506a9 [0061.926] GetCurrentObject (hdc=0x450109b9, type=0x6) returned 0x18a0048 [0061.927] SaveDC (hdc=0x450109b9) returned 1 [0061.927] GetNearestColor (hdc=0x450109b9, color=0xf0f0f0) returned 0xf0f0f0 [0061.927] GetNearestColor (hdc=0x450109b9, color=0xa0a0a0) returned 0xa0a0a0 [0061.927] GetNearestColor (hdc=0x450109b9, color=0x696969) returned 0x696969 [0061.927] GetNearestColor (hdc=0x450109b9, color=0xa0a0a0) returned 0xa0a0a0 [0061.927] GetNearestColor (hdc=0x450109b9, color=0x0) returned 0x0 [0061.927] GetNearestColor (hdc=0x450109b9, color=0xffffff) returned 0xffffff [0061.927] GetNearestColor (hdc=0x450109b9, color=0xe5e5e5) returned 0xe5e5e5 [0061.927] GetNearestColor (hdc=0x450109b9, color=0xd8d8d8) returned 0xd8d8d8 [0061.927] GetNearestColor (hdc=0x450109b9, color=0x0) returned 0x0 [0061.927] RestoreDC (hdc=0x450109b9, nSavedDC=-1) returned 1 [0061.927] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x450109b9) returned 0x0 [0061.927] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0061.928] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x8b'\x02", lpUsedDefaultChar=0x0) returned 17 [0061.928] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0061.928] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2279190) returned 0x0 [0061.928] GdipSetStringFormatAlign (format=0x1beb1620, align=0x1) returned 0x0 [0061.928] GdipSetStringFormatLineAlign (format=0x1beb1620, align=0x1) returned 0x0 [0061.928] GdipSetStringFormatHotkeyPrefix (format=0x1beb1620, hotkeyPrefix=2) returned 0x0 [0061.928] GdipGetStringFormatFlags (format=0x1beb1620, flags=0x14e378) returned 0x0 [0061.928] GdipGetStringFormatTrimming (format=0x1beb1620, trimming=0x14e378) returned 0x0 [0061.928] GdipGetStringFormatHotkeyPrefix (format=0x1beb1620, hotkeyPrefix=0x14e378) returned 0x0 [0061.928] GdipGetFontSize (font=0x1beb1620, size=0x14e378) returned 0x0 [0061.928] GdipGetFontStyle (font=0x1beb1620, style=0x14e378) returned 0x0 [0061.928] GdipDeleteStringFormat (format=0x1beb1620) returned 0x0 [0061.928] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0061.929] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0061.929] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0061.929] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0061.929] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22792c0) returned 0x0 [0061.929] GdipSetStringFormatFlags (format=0x1beb16b0, flags=0) returned 0x0 [0061.929] GdipSetStringFormatTrimming (format=0x1beb16b0, trimming=0x1) returned 0x0 [0061.929] GdipSetStringFormatHotkeyPrefix (format=0x1beb16b0, hotkeyPrefix=2) returned 0x0 [0061.929] GdipSetStringFormatAlign (format=0x1beb16b0, align=0x1) returned 0x0 [0061.929] GdipSetStringFormatLineAlign (format=0x1beb16b0, align=0x1) returned 0x0 [0061.929] GdipMeasureString (graphics=0x1beb6d20, string="*", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb16b0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0061.929] GdipDeleteStringFormat (format=0x1beb16b0) returned 0x0 [0061.929] GdipDeleteGraphics (graphics=0x1beb6d20) returned 0x0 [0061.929] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0061.930] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0061.930] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0061.930] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0061.930] GdipGetClip (graphics=0x1beb67f0, region=0x1beb1620) returned 0x0 [0061.930] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0061.930] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb16e0) returned 0x0 [0061.930] GdipIsMatrixIdentity (matrix=0x1beb16e0, result=0x14e128) returned 0x0 [0061.930] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d110 [0061.930] GdipGetMatrixElements (matrix=0x1beb16e0, matrixOut=0x1d92d110) returned 0x0 [0061.930] LocalFree (hMem=0x1d92d110) returned 0x0 [0061.930] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0061.930] GdipGetMatrixElements (matrix=0x1beb16e0, matrixOut=0x1d92d2d0) returned 0x0 [0061.931] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0061.931] GdipDeleteMatrix (matrix=0x1beb16e0) returned 0x0 [0061.931] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0061.931] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0061.931] GdipGetRegionHRgn (region=0x1beb1620, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0061.931] GdipDeleteRegion (region=0x1beb1620) returned 0x0 [0061.931] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0061.931] GetCurrentObject (hdc=0x450109b9, type=0x1) returned 0x1b00017 [0061.931] GetCurrentObject (hdc=0x450109b9, type=0x2) returned 0x1900010 [0061.931] GetCurrentObject (hdc=0x450109b9, type=0x7) returned 0x150506a9 [0061.931] GetCurrentObject (hdc=0x450109b9, type=0x6) returned 0x18a0048 [0061.931] SaveDC (hdc=0x450109b9) returned 1 [0061.931] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5d04095c [0061.931] GetClipRgn (hdc=0x450109b9, hrgn=0x5d04095c) returned 0 [0061.931] SelectClipRgn (hdc=0x450109b9, hrgn=0x1e0406c7) returned 2 [0061.931] DeleteObject (ho=0x5d04095c) returned 1 [0061.931] DeleteObject (ho=0x1e0406c7) returned 1 [0061.931] OffsetViewportOrgEx (in: hdc=0x450109b9, x=0, y=0, lppt=0x2279680 | out: lppt=0x2279680) returned 1 [0061.932] GetNearestColor (hdc=0x450109b9, color=0xf0f0f0) returned 0xf0f0f0 [0061.932] CreateSolidBrush (color=0xf0f0f0) returned 0x25100559 [0061.932] FillRect (hDC=0x450109b9, lprc=0x14e1c8, hbr=0x25100559) returned 1 [0061.932] DeleteObject (ho=0x25100559) returned 1 [0061.932] RestoreDC (hdc=0x450109b9, nSavedDC=-1) returned 1 [0061.932] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x450109b9) returned 0x0 [0061.932] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0061.932] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0061.932] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0061.932] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2279780) returned 0x0 [0061.932] GdipSetStringFormatAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0061.932] GdipSetStringFormatLineAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0061.932] GdipSetStringFormatHotkeyPrefix (format=0x1beb15e0, hotkeyPrefix=2) returned 0x0 [0061.932] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0061.933] GdipDrawString (graphics=0x1beb67f0, string="*", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb15e0, brush=0x1beb1720) returned 0x0 [0061.933] GdipDeleteBrush (brush=0x1beb1720) returned 0x0 [0061.933] GdipDeleteStringFormat (format=0x1beb15e0) returned 0x0 [0061.933] GetFocus () returned 0x302de [0061.933] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0061.933] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x88'\x02", lpUsedDefaultChar=0x0) returned 17 [0061.933] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0061.933] GdipCreateRegion (region=0x14e030) returned 0x0 [0061.933] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0061.933] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0061.934] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb16a0) returned 0x0 [0061.934] GdipIsMatrixIdentity (matrix=0x1beb16a0, result=0x14e098) returned 0x0 [0061.934] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92ccd0 [0061.934] GdipGetMatrixElements (matrix=0x1beb16a0, matrixOut=0x1d92ccd0) returned 0x0 [0061.934] LocalFree (hMem=0x1d92ccd0) returned 0x0 [0061.934] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0061.934] GdipGetMatrixElements (matrix=0x1beb16a0, matrixOut=0x1d92d2d0) returned 0x0 [0061.934] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0061.934] GdipDeleteMatrix (matrix=0x1beb16a0) returned 0x0 [0061.934] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0061.934] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0061.934] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0061.934] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0061.934] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0061.935] GetCurrentObject (hdc=0x450109b9, type=0x1) returned 0x1b00017 [0061.935] GetCurrentObject (hdc=0x450109b9, type=0x2) returned 0x1900010 [0061.935] GetCurrentObject (hdc=0x450109b9, type=0x7) returned 0x150506a9 [0061.935] GetCurrentObject (hdc=0x450109b9, type=0x6) returned 0x18a0048 [0061.935] SaveDC (hdc=0x450109b9) returned 1 [0061.935] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1f0406c7 [0061.935] GetClipRgn (hdc=0x450109b9, hrgn=0x1f0406c7) returned 0 [0061.935] SelectClipRgn (hdc=0x450109b9, hrgn=0x5e04095c) returned 2 [0061.935] DeleteObject (ho=0x1f0406c7) returned 1 [0061.935] DeleteObject (ho=0x5e04095c) returned 1 [0061.935] OffsetViewportOrgEx (in: hdc=0x450109b9, x=0, y=0, lppt=0x2279b68 | out: lppt=0x2279b68) returned 1 [0061.935] GetROP2 (hdc=0x450109b9) returned 13 [0061.935] GetBkMode (hdc=0x450109b9) returned 2 [0061.935] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x263009ae [0061.935] MoveToEx (in: hdc=0x450109b9, x=25, y=0, lppt=0x2279bd0 | out: lppt=0x2279bd0) returned 1 [0061.935] LineTo (hdc=0x450109b9, x=0, y=0) returned 1 [0061.935] MoveToEx (in: hdc=0x450109b9, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0061.935] GetROP2 (hdc=0x450109b9) returned 13 [0061.935] MoveToEx (in: hdc=0x450109b9, x=0, y=0, lppt=0x2279be8 | out: lppt=0x2279be8) returned 1 [0061.935] LineTo (hdc=0x450109b9, x=0, y=22) returned 1 [0061.936] MoveToEx (in: hdc=0x450109b9, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0061.936] DeleteObject (ho=0x263009ae) returned 1 [0061.936] GetROP2 (hdc=0x450109b9) returned 13 [0061.936] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x143009d5 [0061.936] MoveToEx (in: hdc=0x450109b9, x=0, y=22, lppt=0x2279c50 | out: lppt=0x2279c50) returned 1 [0061.936] LineTo (hdc=0x450109b9, x=25, y=22) returned 1 [0061.936] MoveToEx (in: hdc=0x450109b9, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0061.936] GetROP2 (hdc=0x450109b9) returned 13 [0061.936] MoveToEx (in: hdc=0x450109b9, x=25, y=22, lppt=0x2279c68 | out: lppt=0x2279c68) returned 1 [0061.936] LineTo (hdc=0x450109b9, x=25, y=-1) returned 1 [0061.936] MoveToEx (in: hdc=0x450109b9, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0061.936] DeleteObject (ho=0x143009d5) returned 1 [0061.936] GetROP2 (hdc=0x450109b9) returned 13 [0061.936] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x273009ae [0061.936] MoveToEx (in: hdc=0x450109b9, x=24, y=1, lppt=0x2279cd0 | out: lppt=0x2279cd0) returned 1 [0061.936] LineTo (hdc=0x450109b9, x=1, y=1) returned 1 [0061.936] MoveToEx (in: hdc=0x450109b9, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0061.936] GetROP2 (hdc=0x450109b9) returned 13 [0061.936] MoveToEx (in: hdc=0x450109b9, x=1, y=1, lppt=0x2279ce8 | out: lppt=0x2279ce8) returned 1 [0061.936] LineTo (hdc=0x450109b9, x=1, y=21) returned 1 [0061.936] MoveToEx (in: hdc=0x450109b9, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0061.936] DeleteObject (ho=0x273009ae) returned 1 [0061.936] GetROP2 (hdc=0x450109b9) returned 13 [0061.937] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x153009d5 [0061.937] MoveToEx (in: hdc=0x450109b9, x=1, y=21, lppt=0x2279d50 | out: lppt=0x2279d50) returned 1 [0061.937] LineTo (hdc=0x450109b9, x=24, y=21) returned 1 [0061.937] MoveToEx (in: hdc=0x450109b9, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0061.937] GetROP2 (hdc=0x450109b9) returned 13 [0061.937] MoveToEx (in: hdc=0x450109b9, x=24, y=21, lppt=0x2279d68 | out: lppt=0x2279d68) returned 1 [0061.937] LineTo (hdc=0x450109b9, x=24, y=0) returned 1 [0061.937] MoveToEx (in: hdc=0x450109b9, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0061.937] DeleteObject (ho=0x153009d5) returned 1 [0061.937] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x450109b9) returned 0x0 [0061.937] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0061.937] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x450109b9) returned 0x0 [0061.937] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0061.938] DeleteDC (hdc=0x450109b9) returned 1 [0061.938] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0062.174] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0062.174] TranslateMessage (lpMsg=0x14ef10) returned 0 [0062.174] DispatchMessageW (lpMsg=0x14ef10) [0062.174] BeginPaint (hWnd=0x60204, lpPaint=0x14e5a8) [0062.174] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0062.174] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0062.174] GetStockObject (i=5) returned 0x1900015 [0062.174] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0062.175] DeleteObject (ho=0x150506a9) returned 1 [0062.175] CreateCompatibleBitmap (hdc=0xc0100ae, cx=1, cy=1) returned 0x610506b1 [0062.175] GetDIBits (in: hdc=0xc0100ae, hbm=0x610506b1, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x14df38, usage=0x0 | out: lpvBits=0x0, lpbmi=0x14df38) returned 1 [0062.175] GetDIBits (in: hdc=0xc0100ae, hbm=0x610506b1, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x14df38, usage=0x0 | out: lpvBits=0x0, lpbmi=0x14df38) returned 1 [0062.175] DeleteObject (ho=0x610506b1) returned 1 [0062.175] CreateDIBSection (in: hdc=0xc0100ae, lpbmi=0x14dfe8, usage=0x0, ppvBits=0x14e5a8, hSection=0x0, offset=0x0 | out: ppvBits=0x14e5a8) returned 0x160506a9 [0062.175] GdipCreateFromHDC (hdc=0x1a0109be, graphics=0x14e528) returned 0x0 [0062.175] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0062.176] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=58, height=23, combineMode=0x0) returned 0x0 [0062.176] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0062.176] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb15e0) returned 0x0 [0062.176] GdipIsMatrixIdentity (matrix=0x1beb15e0, result=0x14e5b8) returned 0x0 [0062.176] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92ccd0 [0062.176] GdipGetMatrixElements (matrix=0x1beb15e0, matrixOut=0x1d92ccd0) returned 0x0 [0062.176] LocalFree (hMem=0x1d92ccd0) returned 0x0 [0062.176] GdipDeleteMatrix (matrix=0x1beb15e0) returned 0x0 [0062.176] GdipCreateRegion (region=0x14e550) returned 0x0 [0062.176] GdipGetClip (graphics=0x1beb67f0, region=0x1beb1620) returned 0x0 [0062.176] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0062.176] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0062.176] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffdae0dbd) returned 0x0 [0062.176] GdipDeleteRegion (region=0x1beb1620) returned 0x0 [0062.176] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0062.176] GetCurrentObject (hdc=0x1a0109be, type=0x1) returned 0x1b00017 [0062.177] GetCurrentObject (hdc=0x1a0109be, type=0x2) returned 0x1900010 [0062.177] GetCurrentObject (hdc=0x1a0109be, type=0x7) returned 0x160506a9 [0062.177] GetCurrentObject (hdc=0x1a0109be, type=0x6) returned 0x18a0048 [0062.177] GetNearestColor (hdc=0x1a0109be, color=0xf0f0f0) returned 0xf0f0f0 [0062.177] GetNearestColor (hdc=0x1a0109be, color=0xa0a0a0) returned 0xa0a0a0 [0062.177] GetNearestColor (hdc=0x1a0109be, color=0x696969) returned 0x696969 [0062.177] GetNearestColor (hdc=0x1a0109be, color=0xa0a0a0) returned 0xa0a0a0 [0062.177] GetNearestColor (hdc=0x1a0109be, color=0x0) returned 0x0 [0062.177] GetNearestColor (hdc=0x1a0109be, color=0xffffff) returned 0xffffff [0062.177] GetNearestColor (hdc=0x1a0109be, color=0xe5e5e5) returned 0xe5e5e5 [0062.177] GetNearestColor (hdc=0x1a0109be, color=0xd8d8d8) returned 0xd8d8d8 [0062.177] GetNearestColor (hdc=0x1a0109be, color=0x0) returned 0x0 [0062.177] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x1a0109be) returned 0x0 [0062.178] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx°'\x02", lpUsedDefaultChar=0x0) returned 17 [0062.178] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.178] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x227b700) returned 0x0 [0062.178] GdipSetStringFormatAlign (format=0x1beb1620, align=0x1) returned 0x0 [0062.178] GdipSetStringFormatLineAlign (format=0x1beb1620, align=0x1) returned 0x0 [0062.178] GdipSetStringFormatHotkeyPrefix (format=0x1beb1620, hotkeyPrefix=2) returned 0x0 [0062.178] GdipGetStringFormatFlags (format=0x1beb1620, flags=0x14e378) returned 0x0 [0062.178] GdipGetStringFormatTrimming (format=0x1beb1620, trimming=0x14e378) returned 0x0 [0062.178] GdipGetStringFormatHotkeyPrefix (format=0x1beb1620, hotkeyPrefix=0x14e378) returned 0x0 [0062.178] GdipGetFontSize (font=0x1beb1620, size=0x14e378) returned 0x0 [0062.178] GdipGetFontStyle (font=0x1beb1620, style=0x14e378) returned 0x0 [0062.178] GdipDeleteStringFormat (format=0x1beb1620) returned 0x0 [0062.179] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0062.179] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.179] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0062.179] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x227b830) returned 0x0 [0062.179] GdipSetStringFormatFlags (format=0x1beb16b0, flags=0) returned 0x0 [0062.179] GdipSetStringFormatTrimming (format=0x1beb16b0, trimming=0x1) returned 0x0 [0062.179] GdipSetStringFormatHotkeyPrefix (format=0x1beb16b0, hotkeyPrefix=2) returned 0x0 [0062.179] GdipSetStringFormatAlign (format=0x1beb16b0, align=0x1) returned 0x0 [0062.179] GdipSetStringFormatLineAlign (format=0x1beb16b0, align=0x1) returned 0x0 [0062.179] GdipMeasureString (graphics=0x1beb6d20, string="=", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb16b0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0062.179] GdipDeleteStringFormat (format=0x1beb16b0) returned 0x0 [0062.179] GdipDeleteGraphics (graphics=0x1beb6d20) returned 0x0 [0062.179] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0062.180] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.180] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0062.180] GdipGetClip (graphics=0x1beb67f0, region=0x1beb1620) returned 0x0 [0062.180] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0062.180] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb16e0) returned 0x0 [0062.180] GdipIsMatrixIdentity (matrix=0x1beb16e0, result=0x14e128) returned 0x0 [0062.180] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0062.180] GdipGetMatrixElements (matrix=0x1beb16e0, matrixOut=0x1d92d2d0) returned 0x0 [0062.180] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0062.180] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0062.180] GdipGetMatrixElements (matrix=0x1beb16e0, matrixOut=0x1d92d710) returned 0x0 [0062.181] LocalFree (hMem=0x1d92d710) returned 0x0 [0062.181] GdipDeleteMatrix (matrix=0x1beb16e0) returned 0x0 [0062.181] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0062.181] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0062.181] GdipGetRegionHRgn (region=0x1beb1620, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0062.181] GdipDeleteRegion (region=0x1beb1620) returned 0x0 [0062.181] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0062.181] GetCurrentObject (hdc=0x1a0109be, type=0x1) returned 0x1b00017 [0062.181] GetCurrentObject (hdc=0x1a0109be, type=0x2) returned 0x1900010 [0062.181] GetCurrentObject (hdc=0x1a0109be, type=0x7) returned 0x160506a9 [0062.181] GetCurrentObject (hdc=0x1a0109be, type=0x6) returned 0x18a0048 [0062.181] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5f04095c [0062.181] DeleteObject (ho=0x5f04095c) returned 1 [0062.181] DeleteObject (ho=0x200406c7) returned 1 [0062.181] OffsetViewportOrgEx (in: hdc=0x1a0109be, x=0, y=0, lppt=0x227bbf0 | out: lppt=0x227bbf0) returned 1 [0062.181] GetNearestColor (hdc=0x1a0109be, color=0xf0f0f0) returned 0xf0f0f0 [0062.181] CreateSolidBrush (color=0xf0f0f0) returned 0x26100559 [0062.181] FillRect (hDC=0x1a0109be, lprc=0x14e1c8, hbr=0x26100559) returned 1 [0062.181] DeleteObject (ho=0x26100559) returned 1 [0062.181] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x1a0109be) returned 0x0 [0062.182] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0062.182] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.182] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x227bcf0) returned 0x0 [0062.182] GdipSetStringFormatAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0062.182] GdipSetStringFormatLineAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0062.182] GdipSetStringFormatHotkeyPrefix (format=0x1beb15e0, hotkeyPrefix=2) returned 0x0 [0062.182] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0062.182] GdipDrawString (graphics=0x1beb67f0, string="=", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb15e0, brush=0x1beb1720) returned 0x0 [0062.186] GdipDeleteBrush (brush=0x1beb1720) returned 0x0 [0062.186] GdipDeleteStringFormat (format=0x1beb15e0) returned 0x0 [0062.186] GetFocus () returned 0x302de [0062.187] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx®'\x02", lpUsedDefaultChar=0x0) returned 17 [0062.187] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.187] GdipCreateRegion (region=0x14e030) returned 0x0 [0062.187] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0062.187] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0062.187] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb16a0) returned 0x0 [0062.187] GdipIsMatrixIdentity (matrix=0x1beb16a0, result=0x14e098) returned 0x0 [0062.187] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0062.187] GdipGetMatrixElements (matrix=0x1beb16a0, matrixOut=0x1d92d710) returned 0x0 [0062.187] LocalFree (hMem=0x1d92d710) returned 0x0 [0062.187] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d810 [0062.187] GdipGetMatrixElements (matrix=0x1beb16a0, matrixOut=0x1d92d810) returned 0x0 [0062.188] LocalFree (hMem=0x1d92d810) returned 0x0 [0062.188] GdipDeleteMatrix (matrix=0x1beb16a0) returned 0x0 [0062.188] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0062.188] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0062.188] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0062.188] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0062.188] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0062.188] GetCurrentObject (hdc=0x1a0109be, type=0x1) returned 0x1b00017 [0062.188] GetCurrentObject (hdc=0x1a0109be, type=0x2) returned 0x1900010 [0062.188] GetCurrentObject (hdc=0x1a0109be, type=0x7) returned 0x160506a9 [0062.189] GetCurrentObject (hdc=0x1a0109be, type=0x6) returned 0x18a0048 [0062.189] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x210406c7 [0062.189] DeleteObject (ho=0x210406c7) returned 1 [0062.189] DeleteObject (ho=0x6004095c) returned 1 [0062.189] OffsetViewportOrgEx (in: hdc=0x1a0109be, x=0, y=0, lppt=0x227c0d8 | out: lppt=0x227c0d8) returned 1 [0062.189] GetROP2 (hdc=0x1a0109be) returned 13 [0062.189] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x163009cc [0062.189] MoveToEx (in: hdc=0x1a0109be, x=57, y=0, lppt=0x227c140 | out: lppt=0x227c140) returned 1 [0062.189] LineTo (hdc=0x1a0109be, x=0, y=0) returned 1 [0062.189] MoveToEx (in: hdc=0x1a0109be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.189] GetROP2 (hdc=0x1a0109be) returned 13 [0062.189] MoveToEx (in: hdc=0x1a0109be, x=0, y=0, lppt=0x227c158 | out: lppt=0x227c158) returned 1 [0062.189] LineTo (hdc=0x1a0109be, x=0, y=22) returned 1 [0062.189] MoveToEx (in: hdc=0x1a0109be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.189] DeleteObject (ho=0x163009cc) returned 1 [0062.189] GetROP2 (hdc=0x1a0109be) returned 13 [0062.189] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x24300679 [0062.189] MoveToEx (in: hdc=0x1a0109be, x=0, y=22, lppt=0x227c1c0 | out: lppt=0x227c1c0) returned 1 [0062.189] LineTo (hdc=0x1a0109be, x=57, y=22) returned 1 [0062.190] MoveToEx (in: hdc=0x1a0109be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.190] GetROP2 (hdc=0x1a0109be) returned 13 [0062.190] MoveToEx (in: hdc=0x1a0109be, x=57, y=22, lppt=0x227c1d8 | out: lppt=0x227c1d8) returned 1 [0062.190] LineTo (hdc=0x1a0109be, x=57, y=-1) returned 1 [0062.190] MoveToEx (in: hdc=0x1a0109be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.190] DeleteObject (ho=0x24300679) returned 1 [0062.190] GetROP2 (hdc=0x1a0109be) returned 13 [0062.190] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x173009cc [0062.190] MoveToEx (in: hdc=0x1a0109be, x=56, y=1, lppt=0x227c240 | out: lppt=0x227c240) returned 1 [0062.190] LineTo (hdc=0x1a0109be, x=1, y=1) returned 1 [0062.190] MoveToEx (in: hdc=0x1a0109be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.190] GetROP2 (hdc=0x1a0109be) returned 13 [0062.190] MoveToEx (in: hdc=0x1a0109be, x=1, y=1, lppt=0x227c258 | out: lppt=0x227c258) returned 1 [0062.190] LineTo (hdc=0x1a0109be, x=1, y=21) returned 1 [0062.190] MoveToEx (in: hdc=0x1a0109be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.190] DeleteObject (ho=0x173009cc) returned 1 [0062.190] GetROP2 (hdc=0x1a0109be) returned 13 [0062.190] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x25300679 [0062.190] MoveToEx (in: hdc=0x1a0109be, x=1, y=21, lppt=0x227c2c0 | out: lppt=0x227c2c0) returned 1 [0062.190] LineTo (hdc=0x1a0109be, x=56, y=21) returned 1 [0062.190] MoveToEx (in: hdc=0x1a0109be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.190] GetROP2 (hdc=0x1a0109be) returned 13 [0062.190] MoveToEx (in: hdc=0x1a0109be, x=56, y=21, lppt=0x227c2d8 | out: lppt=0x227c2d8) returned 1 [0062.191] LineTo (hdc=0x1a0109be, x=56, y=0) returned 1 [0062.191] MoveToEx (in: hdc=0x1a0109be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.191] DeleteObject (ho=0x25300679) returned 1 [0062.191] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x1a0109be) returned 0x0 [0062.191] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0062.191] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x1a0109be) returned 0x0 [0062.191] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0062.196] DeleteDC (hdc=0x1a0109be) returned 1 [0062.196] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0062.197] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0062.197] TranslateMessage (lpMsg=0x14ef10) returned 0 [0062.197] DispatchMessageW (lpMsg=0x14ef10) [0062.197] BeginPaint (hWnd=0x602d4, lpPaint=0x14e5a8) [0062.197] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0062.197] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0062.197] GetStockObject (i=5) returned 0x1900015 [0062.197] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0062.197] GdipCreateFromHDC (hdc=0xffffffff880105ed, graphics=0x14e528) returned 0x0 [0062.197] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0062.197] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=58, height=23, combineMode=0x0) returned 0x0 [0062.198] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0062.198] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb15e0) returned 0x0 [0062.198] GdipIsMatrixIdentity (matrix=0x1beb15e0, result=0x14e5b8) returned 0x0 [0062.198] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d050 [0062.198] GdipGetMatrixElements (matrix=0x1beb15e0, matrixOut=0x1d92d050) returned 0x0 [0062.198] LocalFree (hMem=0x1d92d050) returned 0x0 [0062.198] GdipDeleteMatrix (matrix=0x1beb15e0) returned 0x0 [0062.198] GdipCreateRegion (region=0x14e550) returned 0x0 [0062.198] GdipGetClip (graphics=0x1beb67f0, region=0x1beb1620) returned 0x0 [0062.198] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0062.198] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0062.198] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffdab0dbd) returned 0x0 [0062.198] GdipDeleteRegion (region=0x1beb1620) returned 0x0 [0062.198] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0062.198] GetCurrentObject (hdc=0xffffffff880105ed, type=0x1) returned 0x1b00017 [0062.198] GetCurrentObject (hdc=0xffffffff880105ed, type=0x2) returned 0x1900010 [0062.198] GetCurrentObject (hdc=0xffffffff880105ed, type=0x7) returned 0x160506a9 [0062.199] GetCurrentObject (hdc=0xffffffff880105ed, type=0x6) returned 0x18a0048 [0062.199] GetNearestColor (hdc=0xffffffff880105ed, color=0xf0f0f0) returned 0xf0f0f0 [0062.199] GetNearestColor (hdc=0xffffffff880105ed, color=0xa0a0a0) returned 0xa0a0a0 [0062.199] GetNearestColor (hdc=0xffffffff880105ed, color=0x696969) returned 0x696969 [0062.199] GetNearestColor (hdc=0xffffffff880105ed, color=0xa0a0a0) returned 0xa0a0a0 [0062.199] GetNearestColor (hdc=0xffffffff880105ed, color=0x0) returned 0x0 [0062.199] GetNearestColor (hdc=0xffffffff880105ed, color=0xffffff) returned 0xffffff [0062.199] GetNearestColor (hdc=0xffffffff880105ed, color=0xe5e5e5) returned 0xe5e5e5 [0062.199] GetNearestColor (hdc=0xffffffff880105ed, color=0xd8d8d8) returned 0xd8d8d8 [0062.199] GetNearestColor (hdc=0xffffffff880105ed, color=0x0) returned 0x0 [0062.199] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff880105ed) returned 0x0 [0062.199] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.200] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÅ'\x02", lpUsedDefaultChar=0x0) returned 17 [0062.200] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.200] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x227cc10) returned 0x0 [0062.200] GdipSetStringFormatAlign (format=0x1beb1620, align=0x1) returned 0x0 [0062.200] GdipSetStringFormatLineAlign (format=0x1beb1620, align=0x1) returned 0x0 [0062.200] GdipSetStringFormatHotkeyPrefix (format=0x1beb1620, hotkeyPrefix=2) returned 0x0 [0062.200] GdipGetStringFormatFlags (format=0x1beb1620, flags=0x14e378) returned 0x0 [0062.200] GdipGetStringFormatTrimming (format=0x1beb1620, trimming=0x14e378) returned 0x0 [0062.200] GdipGetStringFormatHotkeyPrefix (format=0x1beb1620, hotkeyPrefix=0x14e378) returned 0x0 [0062.200] GdipGetFontSize (font=0x1beb1620, size=0x14e378) returned 0x0 [0062.200] GdipGetFontStyle (font=0x1beb1620, style=0x14e378) returned 0x0 [0062.200] GdipDeleteStringFormat (format=0x1beb1620) returned 0x0 [0062.200] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0062.201] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.201] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0062.201] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x227cd40) returned 0x0 [0062.201] GdipSetStringFormatFlags (format=0x1beb16b0, flags=0) returned 0x0 [0062.201] GdipSetStringFormatTrimming (format=0x1beb16b0, trimming=0x1) returned 0x0 [0062.201] GdipSetStringFormatHotkeyPrefix (format=0x1beb16b0, hotkeyPrefix=2) returned 0x0 [0062.201] GdipSetStringFormatAlign (format=0x1beb16b0, align=0x1) returned 0x0 [0062.201] GdipSetStringFormatLineAlign (format=0x1beb16b0, align=0x1) returned 0x0 [0062.201] GdipMeasureString (graphics=0x1beb6d20, string="log", length=3, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb16b0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0062.201] GdipDeleteStringFormat (format=0x1beb16b0) returned 0x0 [0062.201] GdipDeleteGraphics (graphics=0x1beb6d20) returned 0x0 [0062.202] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.202] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0062.202] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.202] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0062.202] GdipGetClip (graphics=0x1beb67f0, region=0x1beb1620) returned 0x0 [0062.202] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0062.202] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb16e0) returned 0x0 [0062.202] GdipIsMatrixIdentity (matrix=0x1beb16e0, result=0x14e128) returned 0x0 [0062.202] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cbd0 [0062.202] GdipGetMatrixElements (matrix=0x1beb16e0, matrixOut=0x1d92cbd0) returned 0x0 [0062.203] LocalFree (hMem=0x1d92cbd0) returned 0x0 [0062.203] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cbd0 [0062.203] GdipGetMatrixElements (matrix=0x1beb16e0, matrixOut=0x1d92cbd0) returned 0x0 [0062.203] LocalFree (hMem=0x1d92cbd0) returned 0x0 [0062.203] GdipDeleteMatrix (matrix=0x1beb16e0) returned 0x0 [0062.203] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0062.203] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0062.203] GdipGetRegionHRgn (region=0x1beb1620, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0062.203] GdipDeleteRegion (region=0x1beb1620) returned 0x0 [0062.203] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0062.203] GetCurrentObject (hdc=0xffffffff880105ed, type=0x1) returned 0x1b00017 [0062.204] GetCurrentObject (hdc=0xffffffff880105ed, type=0x2) returned 0x1900010 [0062.204] GetCurrentObject (hdc=0xffffffff880105ed, type=0x7) returned 0x160506a9 [0062.204] GetCurrentObject (hdc=0xffffffff880105ed, type=0x6) returned 0x18a0048 [0062.204] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6104095c [0062.204] DeleteObject (ho=0x6104095c) returned 1 [0062.204] DeleteObject (ho=0x220406c7) returned 1 [0062.204] OffsetViewportOrgEx (in: hdc=0xffffffff880105ed, x=0, y=0, lppt=0x227d100 | out: lppt=0x227d100) returned 1 [0062.204] GetNearestColor (hdc=0xffffffff880105ed, color=0xf0f0f0) returned 0xf0f0f0 [0062.204] CreateSolidBrush (color=0xf0f0f0) returned 0x27100559 [0062.204] FillRect (hDC=0xffffffff880105ed, lprc=0x14e1c8, hbr=0x27100559) returned 1 [0062.204] DeleteObject (ho=0x27100559) returned 1 [0062.204] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff880105ed) returned 0x0 [0062.204] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0062.205] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.205] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x227d200) returned 0x0 [0062.205] GdipSetStringFormatAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0062.205] GdipSetStringFormatLineAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0062.205] GdipSetStringFormatHotkeyPrefix (format=0x1beb15e0, hotkeyPrefix=2) returned 0x0 [0062.205] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0062.205] GdipDrawString (graphics=0x1beb67f0, string="log", length=3, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb15e0, brush=0x1beb1720) returned 0x0 [0062.210] GdipDeleteBrush (brush=0x1beb1720) returned 0x0 [0062.210] GdipDeleteStringFormat (format=0x1beb15e0) returned 0x0 [0062.210] GetFocus () returned 0x302de [0062.211] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÃ'\x02", lpUsedDefaultChar=0x0) returned 17 [0062.211] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.211] GdipCreateRegion (region=0x14e030) returned 0x0 [0062.211] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0062.211] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0062.211] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb16a0) returned 0x0 [0062.211] GdipIsMatrixIdentity (matrix=0x1beb16a0, result=0x14e098) returned 0x0 [0062.211] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d110 [0062.211] GdipGetMatrixElements (matrix=0x1beb16a0, matrixOut=0x1d92d110) returned 0x0 [0062.211] LocalFree (hMem=0x1d92d110) returned 0x0 [0062.211] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0062.211] GdipGetMatrixElements (matrix=0x1beb16a0, matrixOut=0x1d92d650) returned 0x0 [0062.212] LocalFree (hMem=0x1d92d650) returned 0x0 [0062.212] GdipDeleteMatrix (matrix=0x1beb16a0) returned 0x0 [0062.212] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0062.212] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0062.212] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0062.212] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0062.212] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0062.212] GetCurrentObject (hdc=0xffffffff880105ed, type=0x1) returned 0x1b00017 [0062.212] GetCurrentObject (hdc=0xffffffff880105ed, type=0x2) returned 0x1900010 [0062.212] GetCurrentObject (hdc=0xffffffff880105ed, type=0x7) returned 0x160506a9 [0062.212] GetCurrentObject (hdc=0xffffffff880105ed, type=0x6) returned 0x18a0048 [0062.212] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x230406c7 [0062.212] DeleteObject (ho=0x230406c7) returned 1 [0062.212] DeleteObject (ho=0x6204095c) returned 1 [0062.212] OffsetViewportOrgEx (in: hdc=0xffffffff880105ed, x=0, y=0, lppt=0x227d5e8 | out: lppt=0x227d5e8) returned 1 [0062.212] GetROP2 (hdc=0xffffffff880105ed) returned 13 [0062.212] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x26300679 [0062.212] MoveToEx (in: hdc=0xffffffff880105ed, x=57, y=0, lppt=0x227d650 | out: lppt=0x227d650) returned 1 [0062.212] LineTo (hdc=0xffffffff880105ed, x=0, y=0) returned 1 [0062.213] MoveToEx (in: hdc=0xffffffff880105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.213] GetROP2 (hdc=0xffffffff880105ed) returned 13 [0062.213] MoveToEx (in: hdc=0xffffffff880105ed, x=0, y=0, lppt=0x227d668 | out: lppt=0x227d668) returned 1 [0062.213] LineTo (hdc=0xffffffff880105ed, x=0, y=22) returned 1 [0062.213] MoveToEx (in: hdc=0xffffffff880105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.213] DeleteObject (ho=0x26300679) returned 1 [0062.213] GetROP2 (hdc=0xffffffff880105ed) returned 13 [0062.213] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x183009cc [0062.213] MoveToEx (in: hdc=0xffffffff880105ed, x=0, y=22, lppt=0x227d6d0 | out: lppt=0x227d6d0) returned 1 [0062.213] LineTo (hdc=0xffffffff880105ed, x=57, y=22) returned 1 [0062.213] MoveToEx (in: hdc=0xffffffff880105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.213] GetROP2 (hdc=0xffffffff880105ed) returned 13 [0062.213] MoveToEx (in: hdc=0xffffffff880105ed, x=57, y=22, lppt=0x227d6e8 | out: lppt=0x227d6e8) returned 1 [0062.213] LineTo (hdc=0xffffffff880105ed, x=57, y=-1) returned 1 [0062.213] MoveToEx (in: hdc=0xffffffff880105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.213] DeleteObject (ho=0x183009cc) returned 1 [0062.213] GetROP2 (hdc=0xffffffff880105ed) returned 13 [0062.213] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x27300679 [0062.213] MoveToEx (in: hdc=0xffffffff880105ed, x=56, y=1, lppt=0x227d750 | out: lppt=0x227d750) returned 1 [0062.213] LineTo (hdc=0xffffffff880105ed, x=1, y=1) returned 1 [0062.213] MoveToEx (in: hdc=0xffffffff880105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.214] GetROP2 (hdc=0xffffffff880105ed) returned 13 [0062.214] MoveToEx (in: hdc=0xffffffff880105ed, x=1, y=1, lppt=0x227d768 | out: lppt=0x227d768) returned 1 [0062.214] LineTo (hdc=0xffffffff880105ed, x=1, y=21) returned 1 [0062.214] MoveToEx (in: hdc=0xffffffff880105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.214] DeleteObject (ho=0x27300679) returned 1 [0062.214] GetROP2 (hdc=0xffffffff880105ed) returned 13 [0062.214] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x193009cc [0062.214] MoveToEx (in: hdc=0xffffffff880105ed, x=1, y=21, lppt=0x227d7d0 | out: lppt=0x227d7d0) returned 1 [0062.214] LineTo (hdc=0xffffffff880105ed, x=56, y=21) returned 1 [0062.214] MoveToEx (in: hdc=0xffffffff880105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.214] GetROP2 (hdc=0xffffffff880105ed) returned 13 [0062.214] MoveToEx (in: hdc=0xffffffff880105ed, x=56, y=21, lppt=0x227d7e8 | out: lppt=0x227d7e8) returned 1 [0062.214] LineTo (hdc=0xffffffff880105ed, x=56, y=0) returned 1 [0062.214] MoveToEx (in: hdc=0xffffffff880105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.214] DeleteObject (ho=0x193009cc) returned 1 [0062.214] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff880105ed) returned 0x0 [0062.214] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0062.214] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff880105ed) returned 0x0 [0062.214] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0062.214] DeleteDC (hdc=0xffffffff880105ed) returned 1 [0062.215] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0062.215] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0062.215] TranslateMessage (lpMsg=0x14ef10) returned 0 [0062.215] DispatchMessageW (lpMsg=0x14ef10) [0062.215] BeginPaint (hWnd=0x302ea, lpPaint=0x14e5a8) [0062.215] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0062.215] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0062.215] GetStockObject (i=5) returned 0x1900015 [0062.215] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0062.215] GdipCreateFromHDC (hdc=0xffffffff8a010600, graphics=0x14e528) returned 0x0 [0062.215] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0062.216] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=32, height=23, combineMode=0x0) returned 0x0 [0062.216] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0062.216] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb15e0) returned 0x0 [0062.216] GdipIsMatrixIdentity (matrix=0x1beb15e0, result=0x14e5b8) returned 0x0 [0062.216] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d350 [0062.216] GdipGetMatrixElements (matrix=0x1beb15e0, matrixOut=0x1d92d350) returned 0x0 [0062.216] LocalFree (hMem=0x1d92d350) returned 0x0 [0062.216] GdipDeleteMatrix (matrix=0x1beb15e0) returned 0x0 [0062.216] GdipCreateRegion (region=0x14e550) returned 0x0 [0062.216] GdipGetClip (graphics=0x1beb67f0, region=0x1beb1620) returned 0x0 [0062.216] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0062.216] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0062.216] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffda80dbd) returned 0x0 [0062.216] GdipDeleteRegion (region=0x1beb1620) returned 0x0 [0062.216] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0062.216] GetCurrentObject (hdc=0xffffffff8a010600, type=0x1) returned 0x1b00017 [0062.216] GetCurrentObject (hdc=0xffffffff8a010600, type=0x2) returned 0x1900010 [0062.216] GetCurrentObject (hdc=0xffffffff8a010600, type=0x7) returned 0x160506a9 [0062.216] GetCurrentObject (hdc=0xffffffff8a010600, type=0x6) returned 0x18a0048 [0062.217] GetNearestColor (hdc=0xffffffff8a010600, color=0xf0f0f0) returned 0xf0f0f0 [0062.217] GetNearestColor (hdc=0xffffffff8a010600, color=0xa0a0a0) returned 0xa0a0a0 [0062.217] GetNearestColor (hdc=0xffffffff8a010600, color=0x696969) returned 0x696969 [0062.217] GetNearestColor (hdc=0xffffffff8a010600, color=0xa0a0a0) returned 0xa0a0a0 [0062.217] GetNearestColor (hdc=0xffffffff8a010600, color=0x0) returned 0x0 [0062.217] GetNearestColor (hdc=0xffffffff8a010600, color=0xffffff) returned 0xffffff [0062.217] GetNearestColor (hdc=0xffffffff8a010600, color=0xe5e5e5) returned 0xe5e5e5 [0062.217] GetNearestColor (hdc=0xffffffff8a010600, color=0xd8d8d8) returned 0xd8d8d8 [0062.217] GetNearestColor (hdc=0xffffffff8a010600, color=0x0) returned 0x0 [0062.217] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff8a010600) returned 0x0 [0062.217] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÛ'\x02", lpUsedDefaultChar=0x0) returned 17 [0062.218] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.218] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x227e120) returned 0x0 [0062.218] GdipSetStringFormatAlign (format=0x1beb1620, align=0x1) returned 0x0 [0062.218] GdipSetStringFormatLineAlign (format=0x1beb1620, align=0x1) returned 0x0 [0062.218] GdipSetStringFormatHotkeyPrefix (format=0x1beb1620, hotkeyPrefix=2) returned 0x0 [0062.218] GdipGetStringFormatFlags (format=0x1beb1620, flags=0x14e378) returned 0x0 [0062.218] GdipGetStringFormatTrimming (format=0x1beb1620, trimming=0x14e378) returned 0x0 [0062.218] GdipGetStringFormatHotkeyPrefix (format=0x1beb1620, hotkeyPrefix=0x14e378) returned 0x0 [0062.218] GdipGetFontSize (font=0x1beb1620, size=0x14e378) returned 0x0 [0062.218] GdipGetFontStyle (font=0x1beb1620, style=0x14e378) returned 0x0 [0062.218] GdipDeleteStringFormat (format=0x1beb1620) returned 0x0 [0062.218] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.218] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0062.218] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.218] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0062.219] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x227e250) returned 0x0 [0062.219] GdipSetStringFormatFlags (format=0x1beb16b0, flags=0) returned 0x0 [0062.219] GdipSetStringFormatTrimming (format=0x1beb16b0, trimming=0x1) returned 0x0 [0062.219] GdipSetStringFormatHotkeyPrefix (format=0x1beb16b0, hotkeyPrefix=2) returned 0x0 [0062.219] GdipSetStringFormatAlign (format=0x1beb16b0, align=0x1) returned 0x0 [0062.219] GdipSetStringFormatLineAlign (format=0x1beb16b0, align=0x1) returned 0x0 [0062.315] GdipMeasureString (graphics=0x1beb6d20, string="e^", length=2, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb16b0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0062.315] GdipDeleteStringFormat (format=0x1beb16b0) returned 0x0 [0062.315] GdipDeleteGraphics (graphics=0x1beb6d20) returned 0x0 [0062.316] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.316] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0062.316] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.316] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0062.316] GdipGetClip (graphics=0x1beb67f0, region=0x1beb1620) returned 0x0 [0062.316] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0062.316] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb16e0) returned 0x0 [0062.316] GdipIsMatrixIdentity (matrix=0x1beb16e0, result=0x14e128) returned 0x0 [0062.316] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0062.316] GdipGetMatrixElements (matrix=0x1beb16e0, matrixOut=0x1d92d710) returned 0x0 [0062.316] LocalFree (hMem=0x1d92d710) returned 0x0 [0062.316] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0062.316] GdipGetMatrixElements (matrix=0x1beb16e0, matrixOut=0x1d92d650) returned 0x0 [0062.317] LocalFree (hMem=0x1d92d650) returned 0x0 [0062.317] GdipDeleteMatrix (matrix=0x1beb16e0) returned 0x0 [0062.317] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0062.317] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0062.317] GdipGetRegionHRgn (region=0x1beb1620, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0062.317] GdipDeleteRegion (region=0x1beb1620) returned 0x0 [0062.317] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0062.317] GetCurrentObject (hdc=0xffffffff8a010600, type=0x1) returned 0x1b00017 [0062.317] GetCurrentObject (hdc=0xffffffff8a010600, type=0x2) returned 0x1900010 [0062.317] GetCurrentObject (hdc=0xffffffff8a010600, type=0x7) returned 0x160506a9 [0062.317] GetCurrentObject (hdc=0xffffffff8a010600, type=0x6) returned 0x18a0048 [0062.317] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6304095c [0062.317] DeleteObject (ho=0x6304095c) returned 1 [0062.317] DeleteObject (ho=0x240406c7) returned 1 [0062.317] OffsetViewportOrgEx (in: hdc=0xffffffff8a010600, x=0, y=0, lppt=0x227e610 | out: lppt=0x227e610) returned 1 [0062.317] GetNearestColor (hdc=0xffffffff8a010600, color=0xf0f0f0) returned 0xf0f0f0 [0062.317] CreateSolidBrush (color=0xf0f0f0) returned 0x28100559 [0062.318] FillRect (hDC=0xffffffff8a010600, lprc=0x14e1c8, hbr=0x28100559) returned 1 [0062.318] DeleteObject (ho=0x28100559) returned 1 [0062.318] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff8a010600) returned 0x0 [0062.318] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.318] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0062.318] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.318] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x227e710) returned 0x0 [0062.318] GdipSetStringFormatAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0062.318] GdipSetStringFormatLineAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0062.318] GdipSetStringFormatHotkeyPrefix (format=0x1beb15e0, hotkeyPrefix=2) returned 0x0 [0062.318] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0062.318] GdipDrawString (graphics=0x1beb67f0, string="e^", length=2, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb15e0, brush=0x1beb1720) returned 0x0 [0062.322] GdipDeleteBrush (brush=0x1beb1720) returned 0x0 [0062.322] GdipDeleteStringFormat (format=0x1beb15e0) returned 0x0 [0062.322] GetFocus () returned 0x302de [0062.323] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.323] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExØ'\x02", lpUsedDefaultChar=0x0) returned 17 [0062.323] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.323] GdipCreateRegion (region=0x14e030) returned 0x0 [0062.323] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0062.323] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0062.323] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb16a0) returned 0x0 [0062.323] GdipIsMatrixIdentity (matrix=0x1beb16a0, result=0x14e098) returned 0x0 [0062.323] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0062.323] GdipGetMatrixElements (matrix=0x1beb16a0, matrixOut=0x1d92d2d0) returned 0x0 [0062.323] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0062.323] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d410 [0062.324] GdipGetMatrixElements (matrix=0x1beb16a0, matrixOut=0x1d92d410) returned 0x0 [0062.324] LocalFree (hMem=0x1d92d410) returned 0x0 [0062.324] GdipDeleteMatrix (matrix=0x1beb16a0) returned 0x0 [0062.324] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0062.324] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0062.324] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0062.324] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0062.324] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0062.324] GetCurrentObject (hdc=0xffffffff8a010600, type=0x1) returned 0x1b00017 [0062.324] GetCurrentObject (hdc=0xffffffff8a010600, type=0x2) returned 0x1900010 [0062.324] GetCurrentObject (hdc=0xffffffff8a010600, type=0x7) returned 0x160506a9 [0062.324] GetCurrentObject (hdc=0xffffffff8a010600, type=0x6) returned 0x18a0048 [0062.324] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x250406c7 [0062.324] DeleteObject (ho=0x250406c7) returned 1 [0062.324] DeleteObject (ho=0x6404095c) returned 1 [0062.324] OffsetViewportOrgEx (in: hdc=0xffffffff8a010600, x=0, y=0, lppt=0x227eaf8 | out: lppt=0x227eaf8) returned 1 [0062.324] GetROP2 (hdc=0xffffffff8a010600) returned 13 [0062.325] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x1a3009cc [0062.325] MoveToEx (in: hdc=0xffffffff8a010600, x=32, y=0, lppt=0x227eb60 | out: lppt=0x227eb60) returned 1 [0062.325] LineTo (hdc=0xffffffff8a010600, x=0, y=0) returned 1 [0062.325] MoveToEx (in: hdc=0xffffffff8a010600, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.325] GetROP2 (hdc=0xffffffff8a010600) returned 13 [0062.325] MoveToEx (in: hdc=0xffffffff8a010600, x=0, y=0, lppt=0x227eb78 | out: lppt=0x227eb78) returned 1 [0062.325] LineTo (hdc=0xffffffff8a010600, x=0, y=22) returned 1 [0062.325] MoveToEx (in: hdc=0xffffffff8a010600, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.325] DeleteObject (ho=0x1a3009cc) returned 1 [0062.325] GetROP2 (hdc=0xffffffff8a010600) returned 13 [0062.325] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x28300679 [0062.325] MoveToEx (in: hdc=0xffffffff8a010600, x=0, y=22, lppt=0x227ebe0 | out: lppt=0x227ebe0) returned 1 [0062.325] LineTo (hdc=0xffffffff8a010600, x=32, y=22) returned 1 [0062.325] MoveToEx (in: hdc=0xffffffff8a010600, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.325] GetROP2 (hdc=0xffffffff8a010600) returned 13 [0062.325] MoveToEx (in: hdc=0xffffffff8a010600, x=32, y=22, lppt=0x227ebf8 | out: lppt=0x227ebf8) returned 1 [0062.325] LineTo (hdc=0xffffffff8a010600, x=32, y=-1) returned 1 [0062.325] MoveToEx (in: hdc=0xffffffff8a010600, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.325] DeleteObject (ho=0x28300679) returned 1 [0062.325] GetROP2 (hdc=0xffffffff8a010600) returned 13 [0062.326] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x1b3009cc [0062.326] MoveToEx (in: hdc=0xffffffff8a010600, x=31, y=1, lppt=0x227ec60 | out: lppt=0x227ec60) returned 1 [0062.326] LineTo (hdc=0xffffffff8a010600, x=1, y=1) returned 1 [0062.326] MoveToEx (in: hdc=0xffffffff8a010600, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.326] GetROP2 (hdc=0xffffffff8a010600) returned 13 [0062.326] MoveToEx (in: hdc=0xffffffff8a010600, x=1, y=1, lppt=0x227ec78 | out: lppt=0x227ec78) returned 1 [0062.326] LineTo (hdc=0xffffffff8a010600, x=1, y=21) returned 1 [0062.326] MoveToEx (in: hdc=0xffffffff8a010600, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.326] DeleteObject (ho=0x1b3009cc) returned 1 [0062.326] GetROP2 (hdc=0xffffffff8a010600) returned 13 [0062.326] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x29300679 [0062.326] MoveToEx (in: hdc=0xffffffff8a010600, x=1, y=21, lppt=0x227ece0 | out: lppt=0x227ece0) returned 1 [0062.326] LineTo (hdc=0xffffffff8a010600, x=31, y=21) returned 1 [0062.326] MoveToEx (in: hdc=0xffffffff8a010600, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.326] GetROP2 (hdc=0xffffffff8a010600) returned 13 [0062.326] MoveToEx (in: hdc=0xffffffff8a010600, x=31, y=21, lppt=0x227ecf8 | out: lppt=0x227ecf8) returned 1 [0062.326] LineTo (hdc=0xffffffff8a010600, x=31, y=0) returned 1 [0062.326] MoveToEx (in: hdc=0xffffffff8a010600, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.326] DeleteObject (ho=0x29300679) returned 1 [0062.326] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff8a010600) returned 0x0 [0062.326] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0062.327] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff8a010600) returned 0x0 [0062.327] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0062.327] DeleteDC (hdc=0xffffffff8a010600) returned 1 [0062.327] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0062.327] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0062.327] TranslateMessage (lpMsg=0x14ef10) returned 0 [0062.327] DispatchMessageW (lpMsg=0x14ef10) [0062.327] BeginPaint (hWnd=0x3035a, lpPaint=0x14e5a8) [0062.327] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0062.327] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0062.327] GetStockObject (i=5) returned 0x1900015 [0062.333] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0062.333] GdipCreateFromHDC (hdc=0x230109be, graphics=0x14e528) returned 0x0 [0062.333] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0062.334] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0062.334] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0062.334] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb15e0) returned 0x0 [0062.334] GdipIsMatrixIdentity (matrix=0x1beb15e0, result=0x14e5b8) returned 0x0 [0062.334] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0062.334] GdipGetMatrixElements (matrix=0x1beb15e0, matrixOut=0x1d92d650) returned 0x0 [0062.334] LocalFree (hMem=0x1d92d650) returned 0x0 [0062.334] GdipDeleteMatrix (matrix=0x1beb15e0) returned 0x0 [0062.334] GdipCreateRegion (region=0x14e550) returned 0x0 [0062.334] GdipGetClip (graphics=0x1beb67f0, region=0x1beb1620) returned 0x0 [0062.334] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0062.335] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0062.335] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffda50dbd) returned 0x0 [0062.335] GdipDeleteRegion (region=0x1beb1620) returned 0x0 [0062.335] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0062.335] GetCurrentObject (hdc=0x230109be, type=0x1) returned 0x1b00017 [0062.335] GetCurrentObject (hdc=0x230109be, type=0x2) returned 0x1900010 [0062.335] GetCurrentObject (hdc=0x230109be, type=0x7) returned 0x160506a9 [0062.335] GetCurrentObject (hdc=0x230109be, type=0x6) returned 0x18a0048 [0062.335] GetNearestColor (hdc=0x230109be, color=0xf0f0f0) returned 0xf0f0f0 [0062.335] GetNearestColor (hdc=0x230109be, color=0xa0a0a0) returned 0xa0a0a0 [0062.335] GetNearestColor (hdc=0x230109be, color=0x696969) returned 0x696969 [0062.335] GetNearestColor (hdc=0x230109be, color=0xa0a0a0) returned 0xa0a0a0 [0062.335] GetNearestColor (hdc=0x230109be, color=0x0) returned 0x0 [0062.335] GetNearestColor (hdc=0x230109be, color=0xffffff) returned 0xffffff [0062.335] GetNearestColor (hdc=0x230109be, color=0xe5e5e5) returned 0xe5e5e5 [0062.335] GetNearestColor (hdc=0x230109be, color=0xd8d8d8) returned 0xd8d8d8 [0062.335] GetNearestColor (hdc=0x230109be, color=0x0) returned 0x0 [0062.335] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x230109be) returned 0x0 [0062.336] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExð'\x02", lpUsedDefaultChar=0x0) returned 17 [0062.336] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.336] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x227f630) returned 0x0 [0062.336] GdipSetStringFormatAlign (format=0x1beb1620, align=0x1) returned 0x0 [0062.336] GdipSetStringFormatLineAlign (format=0x1beb1620, align=0x1) returned 0x0 [0062.336] GdipSetStringFormatHotkeyPrefix (format=0x1beb1620, hotkeyPrefix=2) returned 0x0 [0062.336] GdipGetStringFormatFlags (format=0x1beb1620, flags=0x14e378) returned 0x0 [0062.336] GdipGetStringFormatTrimming (format=0x1beb1620, trimming=0x14e378) returned 0x0 [0062.336] GdipGetStringFormatHotkeyPrefix (format=0x1beb1620, hotkeyPrefix=0x14e378) returned 0x0 [0062.336] GdipGetFontSize (font=0x1beb1620, size=0x14e378) returned 0x0 [0062.336] GdipGetFontStyle (font=0x1beb1620, style=0x14e378) returned 0x0 [0062.336] GdipDeleteStringFormat (format=0x1beb1620) returned 0x0 [0062.337] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0062.337] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.337] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0062.337] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x227f760) returned 0x0 [0062.337] GdipSetStringFormatFlags (format=0x1beb16b0, flags=0) returned 0x0 [0062.337] GdipSetStringFormatTrimming (format=0x1beb16b0, trimming=0x1) returned 0x0 [0062.337] GdipSetStringFormatHotkeyPrefix (format=0x1beb16b0, hotkeyPrefix=2) returned 0x0 [0062.337] GdipSetStringFormatAlign (format=0x1beb16b0, align=0x1) returned 0x0 [0062.337] GdipSetStringFormatLineAlign (format=0x1beb16b0, align=0x1) returned 0x0 [0062.337] GdipMeasureString (graphics=0x1beb6d20, string="/", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb16b0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0062.337] GdipDeleteStringFormat (format=0x1beb16b0) returned 0x0 [0062.337] GdipDeleteGraphics (graphics=0x1beb6d20) returned 0x0 [0062.338] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0062.338] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.338] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0062.338] GdipGetClip (graphics=0x1beb67f0, region=0x1beb1620) returned 0x0 [0062.338] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0062.338] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb16e0) returned 0x0 [0062.338] GdipIsMatrixIdentity (matrix=0x1beb16e0, result=0x14e128) returned 0x0 [0062.338] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d350 [0062.338] GdipGetMatrixElements (matrix=0x1beb16e0, matrixOut=0x1d92d350) returned 0x0 [0062.338] LocalFree (hMem=0x1d92d350) returned 0x0 [0062.338] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf90 [0062.338] GdipGetMatrixElements (matrix=0x1beb16e0, matrixOut=0x1d92cf90) returned 0x0 [0062.339] LocalFree (hMem=0x1d92cf90) returned 0x0 [0062.339] GdipDeleteMatrix (matrix=0x1beb16e0) returned 0x0 [0062.339] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0062.339] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0062.339] GdipGetRegionHRgn (region=0x1beb1620, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0062.339] GdipDeleteRegion (region=0x1beb1620) returned 0x0 [0062.339] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0062.339] GetCurrentObject (hdc=0x230109be, type=0x1) returned 0x1b00017 [0062.339] GetCurrentObject (hdc=0x230109be, type=0x2) returned 0x1900010 [0062.339] GetCurrentObject (hdc=0x230109be, type=0x7) returned 0x160506a9 [0062.339] GetCurrentObject (hdc=0x230109be, type=0x6) returned 0x18a0048 [0062.339] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6504095c [0062.339] DeleteObject (ho=0x6504095c) returned 1 [0062.339] DeleteObject (ho=0x260406c7) returned 1 [0062.339] OffsetViewportOrgEx (in: hdc=0x230109be, x=0, y=0, lppt=0x227fb20 | out: lppt=0x227fb20) returned 1 [0062.339] GetNearestColor (hdc=0x230109be, color=0xf0f0f0) returned 0xf0f0f0 [0062.339] CreateSolidBrush (color=0xf0f0f0) returned 0x29100559 [0062.339] FillRect (hDC=0x230109be, lprc=0x14e1c8, hbr=0x29100559) returned 1 [0062.340] DeleteObject (ho=0x29100559) returned 1 [0062.340] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x230109be) returned 0x0 [0062.340] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0062.340] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.340] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x227fc20) returned 0x0 [0062.340] GdipSetStringFormatAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0062.340] GdipSetStringFormatLineAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0062.340] GdipSetStringFormatHotkeyPrefix (format=0x1beb15e0, hotkeyPrefix=2) returned 0x0 [0062.340] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0062.340] GdipDrawString (graphics=0x1beb67f0, string="/", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb15e0, brush=0x1beb1720) returned 0x0 [0062.345] GdipDeleteBrush (brush=0x1beb1720) returned 0x0 [0062.345] GdipDeleteStringFormat (format=0x1beb15e0) returned 0x0 [0062.345] GetFocus () returned 0x302de [0062.345] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.345] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExí'\x02", lpUsedDefaultChar=0x0) returned 17 [0062.345] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.345] GdipCreateRegion (region=0x14e030) returned 0x0 [0062.345] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0062.345] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0062.345] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb16a0) returned 0x0 [0062.345] GdipIsMatrixIdentity (matrix=0x1beb16a0, result=0x14e098) returned 0x0 [0062.345] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0062.346] GdipGetMatrixElements (matrix=0x1beb16a0, matrixOut=0x1d92d2d0) returned 0x0 [0062.346] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0062.346] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d050 [0062.346] GdipGetMatrixElements (matrix=0x1beb16a0, matrixOut=0x1d92d050) returned 0x0 [0062.346] LocalFree (hMem=0x1d92d050) returned 0x0 [0062.346] GdipDeleteMatrix (matrix=0x1beb16a0) returned 0x0 [0062.346] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0062.346] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0062.346] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0062.346] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0062.346] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0062.346] GetCurrentObject (hdc=0x230109be, type=0x1) returned 0x1b00017 [0062.346] GetCurrentObject (hdc=0x230109be, type=0x2) returned 0x1900010 [0062.347] GetCurrentObject (hdc=0x230109be, type=0x7) returned 0x160506a9 [0062.347] GetCurrentObject (hdc=0x230109be, type=0x6) returned 0x18a0048 [0062.347] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x270406c7 [0062.347] DeleteObject (ho=0x270406c7) returned 1 [0062.347] DeleteObject (ho=0x6604095c) returned 1 [0062.347] OffsetViewportOrgEx (in: hdc=0x230109be, x=0, y=0, lppt=0x2280008 | out: lppt=0x2280008) returned 1 [0062.347] GetROP2 (hdc=0x230109be) returned 13 [0062.347] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x2a300679 [0062.347] MoveToEx (in: hdc=0x230109be, x=25, y=0, lppt=0x2280070 | out: lppt=0x2280070) returned 1 [0062.347] LineTo (hdc=0x230109be, x=0, y=0) returned 1 [0062.347] MoveToEx (in: hdc=0x230109be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.347] GetROP2 (hdc=0x230109be) returned 13 [0062.347] MoveToEx (in: hdc=0x230109be, x=0, y=0, lppt=0x2280088 | out: lppt=0x2280088) returned 1 [0062.347] LineTo (hdc=0x230109be, x=0, y=22) returned 1 [0062.347] MoveToEx (in: hdc=0x230109be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.347] DeleteObject (ho=0x2a300679) returned 1 [0062.347] GetROP2 (hdc=0x230109be) returned 13 [0062.347] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x1c3009cc [0062.348] MoveToEx (in: hdc=0x230109be, x=0, y=22, lppt=0x22800f0 | out: lppt=0x22800f0) returned 1 [0062.348] LineTo (hdc=0x230109be, x=25, y=22) returned 1 [0062.348] MoveToEx (in: hdc=0x230109be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.348] GetROP2 (hdc=0x230109be) returned 13 [0062.348] MoveToEx (in: hdc=0x230109be, x=25, y=22, lppt=0x2280108 | out: lppt=0x2280108) returned 1 [0062.348] LineTo (hdc=0x230109be, x=25, y=-1) returned 1 [0062.348] MoveToEx (in: hdc=0x230109be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.348] DeleteObject (ho=0x1c3009cc) returned 1 [0062.348] GetROP2 (hdc=0x230109be) returned 13 [0062.348] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x2b300679 [0062.348] MoveToEx (in: hdc=0x230109be, x=24, y=1, lppt=0x2280170 | out: lppt=0x2280170) returned 1 [0062.348] LineTo (hdc=0x230109be, x=1, y=1) returned 1 [0062.348] MoveToEx (in: hdc=0x230109be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.348] GetROP2 (hdc=0x230109be) returned 13 [0062.348] MoveToEx (in: hdc=0x230109be, x=1, y=1, lppt=0x2280188 | out: lppt=0x2280188) returned 1 [0062.348] LineTo (hdc=0x230109be, x=1, y=21) returned 1 [0062.348] MoveToEx (in: hdc=0x230109be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.348] DeleteObject (ho=0x2b300679) returned 1 [0062.348] GetROP2 (hdc=0x230109be) returned 13 [0062.348] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x1d3009cc [0062.349] MoveToEx (in: hdc=0x230109be, x=1, y=21, lppt=0x22801f0 | out: lppt=0x22801f0) returned 1 [0062.349] LineTo (hdc=0x230109be, x=24, y=21) returned 1 [0062.349] MoveToEx (in: hdc=0x230109be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.349] GetROP2 (hdc=0x230109be) returned 13 [0062.349] MoveToEx (in: hdc=0x230109be, x=24, y=21, lppt=0x2280208 | out: lppt=0x2280208) returned 1 [0062.349] LineTo (hdc=0x230109be, x=24, y=0) returned 1 [0062.349] MoveToEx (in: hdc=0x230109be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.349] DeleteObject (ho=0x1d3009cc) returned 1 [0062.349] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x230109be) returned 0x0 [0062.349] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0062.349] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x230109be) returned 0x0 [0062.349] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0062.349] DeleteDC (hdc=0x230109be) returned 1 [0062.349] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0062.349] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0062.349] TranslateMessage (lpMsg=0x14ef10) returned 0 [0062.349] DispatchMessageW (lpMsg=0x14ef10) [0062.350] BeginPaint (hWnd=0x30362, lpPaint=0x14e5a8) [0062.350] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0062.350] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0062.350] GetStockObject (i=5) returned 0x1900015 [0062.350] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0062.350] GdipCreateFromHDC (hdc=0xffffffff930105ed, graphics=0x14e528) returned 0x0 [0062.350] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0062.350] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0062.350] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0062.350] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb15e0) returned 0x0 [0062.350] GdipIsMatrixIdentity (matrix=0x1beb15e0, result=0x14e5b8) returned 0x0 [0062.350] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf90 [0062.351] GdipGetMatrixElements (matrix=0x1beb15e0, matrixOut=0x1d92cf90) returned 0x0 [0062.351] LocalFree (hMem=0x1d92cf90) returned 0x0 [0062.351] GdipDeleteMatrix (matrix=0x1beb15e0) returned 0x0 [0062.351] GdipCreateRegion (region=0x14e550) returned 0x0 [0062.351] GdipGetClip (graphics=0x1beb67f0, region=0x1beb1620) returned 0x0 [0062.351] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0062.351] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0062.351] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffda20dbd) returned 0x0 [0062.351] GdipDeleteRegion (region=0x1beb1620) returned 0x0 [0062.351] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0062.351] GetCurrentObject (hdc=0xffffffff930105ed, type=0x1) returned 0x1b00017 [0062.351] GetCurrentObject (hdc=0xffffffff930105ed, type=0x2) returned 0x1900010 [0062.351] GetCurrentObject (hdc=0xffffffff930105ed, type=0x7) returned 0x160506a9 [0062.351] GetCurrentObject (hdc=0xffffffff930105ed, type=0x6) returned 0x18a0048 [0062.351] GetNearestColor (hdc=0xffffffff930105ed, color=0xf0f0f0) returned 0xf0f0f0 [0062.351] GetNearestColor (hdc=0xffffffff930105ed, color=0xa0a0a0) returned 0xa0a0a0 [0062.351] GetNearestColor (hdc=0xffffffff930105ed, color=0x696969) returned 0x696969 [0062.352] GetNearestColor (hdc=0xffffffff930105ed, color=0xa0a0a0) returned 0xa0a0a0 [0062.352] GetNearestColor (hdc=0xffffffff930105ed, color=0x0) returned 0x0 [0062.352] GetNearestColor (hdc=0xffffffff930105ed, color=0xffffff) returned 0xffffff [0062.352] GetNearestColor (hdc=0xffffffff930105ed, color=0xe5e5e5) returned 0xe5e5e5 [0062.352] GetNearestColor (hdc=0xffffffff930105ed, color=0xd8d8d8) returned 0xd8d8d8 [0062.352] GetNearestColor (hdc=0xffffffff930105ed, color=0x0) returned 0x0 [0062.352] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff930105ed) returned 0x0 [0062.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x05(\x02", lpUsedDefaultChar=0x0) returned 17 [0062.352] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.352] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2280b40) returned 0x0 [0062.352] GdipSetStringFormatAlign (format=0x1beb1620, align=0x1) returned 0x0 [0062.352] GdipSetStringFormatLineAlign (format=0x1beb1620, align=0x1) returned 0x0 [0062.352] GdipSetStringFormatHotkeyPrefix (format=0x1beb1620, hotkeyPrefix=2) returned 0x0 [0062.353] GdipGetStringFormatFlags (format=0x1beb1620, flags=0x14e378) returned 0x0 [0062.353] GdipGetStringFormatTrimming (format=0x1beb1620, trimming=0x14e378) returned 0x0 [0062.353] GdipGetStringFormatHotkeyPrefix (format=0x1beb1620, hotkeyPrefix=0x14e378) returned 0x0 [0062.353] GdipGetFontSize (font=0x1beb1620, size=0x14e378) returned 0x0 [0062.353] GdipGetFontStyle (font=0x1beb1620, style=0x14e378) returned 0x0 [0062.353] GdipDeleteStringFormat (format=0x1beb1620) returned 0x0 [0062.353] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0062.353] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.353] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0062.353] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2280c70) returned 0x0 [0062.353] GdipSetStringFormatFlags (format=0x1beb16b0, flags=0) returned 0x0 [0062.354] GdipSetStringFormatTrimming (format=0x1beb16b0, trimming=0x1) returned 0x0 [0062.354] GdipSetStringFormatHotkeyPrefix (format=0x1beb16b0, hotkeyPrefix=2) returned 0x0 [0062.354] GdipSetStringFormatAlign (format=0x1beb16b0, align=0x1) returned 0x0 [0062.354] GdipSetStringFormatLineAlign (format=0x1beb16b0, align=0x1) returned 0x0 [0062.354] GdipMeasureString (graphics=0x1beb6d20, string=";", length=1, font=0x1abeedb0, layoutRect=0x14dfb8, stringFormat=0x1beb16b0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0062.595] GdipDeleteStringFormat (format=0x1beb16b0) returned 0x0 [0062.595] GdipDeleteGraphics (graphics=0x1beb6d20) returned 0x0 [0062.595] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0062.595] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.595] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0062.595] GdipGetClip (graphics=0x1beb67f0, region=0x1beb1620) returned 0x0 [0062.595] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0062.595] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb16e0) returned 0x0 [0062.596] GdipIsMatrixIdentity (matrix=0x1beb16e0, result=0x14e128) returned 0x0 [0062.596] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d550 [0062.596] GdipGetMatrixElements (matrix=0x1beb16e0, matrixOut=0x1d92d550) returned 0x0 [0062.596] LocalFree (hMem=0x1d92d550) returned 0x0 [0062.596] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cd10 [0062.596] GdipGetMatrixElements (matrix=0x1beb16e0, matrixOut=0x1d92cd10) returned 0x0 [0062.596] LocalFree (hMem=0x1d92cd10) returned 0x0 [0062.596] GdipDeleteMatrix (matrix=0x1beb16e0) returned 0x0 [0062.596] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0062.596] GdipIsInfiniteRegion (region=0x1beb1620, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0062.596] GdipGetRegionHRgn (region=0x1beb1620, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0062.597] GdipDeleteRegion (region=0x1beb1620) returned 0x0 [0062.597] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0062.597] GetCurrentObject (hdc=0xffffffff930105ed, type=0x1) returned 0x1b00017 [0062.597] GetCurrentObject (hdc=0xffffffff930105ed, type=0x2) returned 0x1900010 [0062.597] GetCurrentObject (hdc=0xffffffff930105ed, type=0x7) returned 0x160506a9 [0062.597] GetCurrentObject (hdc=0xffffffff930105ed, type=0x6) returned 0x18a0048 [0062.597] SaveDC (hdc=0xffffffff930105ed) returned 1 [0062.597] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6704095c [0062.597] DeleteObject (ho=0x6704095c) returned 1 [0062.597] DeleteObject (ho=0x280406c7) returned 1 [0062.597] OffsetViewportOrgEx (in: hdc=0xffffffff930105ed, x=0, y=0, lppt=0x2281030 | out: lppt=0x2281030) returned 1 [0062.597] GetNearestColor (hdc=0xffffffff930105ed, color=0xf0f0f0) returned 0xf0f0f0 [0062.597] CreateSolidBrush (color=0xf0f0f0) returned 0x2a100559 [0062.597] FillRect (hDC=0xffffffff930105ed, lprc=0x14e1c8, hbr=0x2a100559) returned 1 [0062.597] DeleteObject (ho=0x2a100559) returned 1 [0062.597] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff930105ed) returned 0x0 [0062.598] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.598] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0062.598] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.598] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2281130) returned 0x0 [0062.598] GdipSetStringFormatAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0062.598] GdipSetStringFormatLineAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0062.598] GdipSetStringFormatHotkeyPrefix (format=0x1beb15e0, hotkeyPrefix=2) returned 0x0 [0062.598] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0062.598] GdipDrawString (graphics=0x1beb67f0, string=";", length=1, font=0x1abeedb0, layoutRect=0x14e338, stringFormat=0x1beb15e0, brush=0x1beb1720) returned 0x0 [0062.603] GdipDeleteBrush (brush=0x1beb1720) returned 0x0 [0062.603] GdipDeleteStringFormat (format=0x1beb15e0) returned 0x0 [0062.603] GetFocus () returned 0x302de [0062.604] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.604] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x02(\x02", lpUsedDefaultChar=0x0) returned 17 [0062.604] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.604] GdipCreateRegion (region=0x14e030) returned 0x0 [0062.604] GdipGetClip (graphics=0x1beb67f0, region=0x1beb6e80) returned 0x0 [0062.604] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0062.604] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb15e0) returned 0x0 [0062.604] GdipIsMatrixIdentity (matrix=0x1beb15e0, result=0x14e098) returned 0x0 [0062.604] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cbd0 [0062.604] GdipGetMatrixElements (matrix=0x1beb15e0, matrixOut=0x1d92cbd0) returned 0x0 [0062.604] LocalFree (hMem=0x1d92cbd0) returned 0x0 [0062.605] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0062.605] GdipGetMatrixElements (matrix=0x1beb15e0, matrixOut=0x1d92d2d0) returned 0x0 [0062.605] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0062.605] GdipDeleteMatrix (matrix=0x1beb15e0) returned 0x0 [0062.605] GdipIsInfiniteRegion (region=0x1beb6e80, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0062.605] GdipIsInfiniteRegion (region=0x1beb6e80, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0062.605] GdipGetRegionHRgn (region=0x1beb6e80, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0062.605] GdipDeleteRegion (region=0x1beb6e80) returned 0x0 [0062.605] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0062.605] GetCurrentObject (hdc=0xffffffff930105ed, type=0x1) returned 0x1b00017 [0062.605] GetCurrentObject (hdc=0xffffffff930105ed, type=0x2) returned 0x1900010 [0062.605] GetCurrentObject (hdc=0xffffffff930105ed, type=0x7) returned 0x160506a9 [0062.605] GetCurrentObject (hdc=0xffffffff930105ed, type=0x6) returned 0x18a0048 [0062.605] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x290406c7 [0062.605] DeleteObject (ho=0x290406c7) returned 1 [0062.605] DeleteObject (ho=0x6804095c) returned 1 [0062.605] OffsetViewportOrgEx (in: hdc=0xffffffff930105ed, x=0, y=0, lppt=0x2281518 | out: lppt=0x2281518) returned 1 [0062.606] GetROP2 (hdc=0xffffffff930105ed) returned 13 [0062.606] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x2c300679 [0062.606] MoveToEx (in: hdc=0xffffffff930105ed, x=25, y=0, lppt=0x2281580 | out: lppt=0x2281580) returned 1 [0062.606] LineTo (hdc=0xffffffff930105ed, x=0, y=0) returned 1 [0062.606] MoveToEx (in: hdc=0xffffffff930105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.606] GetROP2 (hdc=0xffffffff930105ed) returned 13 [0062.606] MoveToEx (in: hdc=0xffffffff930105ed, x=0, y=0, lppt=0x2281598 | out: lppt=0x2281598) returned 1 [0062.606] LineTo (hdc=0xffffffff930105ed, x=0, y=22) returned 1 [0062.606] MoveToEx (in: hdc=0xffffffff930105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.606] DeleteObject (ho=0x2c300679) returned 1 [0062.606] GetROP2 (hdc=0xffffffff930105ed) returned 13 [0062.606] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x3330099d [0062.606] MoveToEx (in: hdc=0xffffffff930105ed, x=0, y=22, lppt=0x2281600 | out: lppt=0x2281600) returned 1 [0062.606] LineTo (hdc=0xffffffff930105ed, x=25, y=22) returned 1 [0062.606] MoveToEx (in: hdc=0xffffffff930105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.606] GetROP2 (hdc=0xffffffff930105ed) returned 13 [0062.606] MoveToEx (in: hdc=0xffffffff930105ed, x=25, y=22, lppt=0x2281618 | out: lppt=0x2281618) returned 1 [0062.606] LineTo (hdc=0xffffffff930105ed, x=25, y=-1) returned 1 [0062.606] MoveToEx (in: hdc=0xffffffff930105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.606] DeleteObject (ho=0x3330099d) returned 1 [0062.607] GetROP2 (hdc=0xffffffff930105ed) returned 13 [0062.607] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x2d300679 [0062.607] MoveToEx (in: hdc=0xffffffff930105ed, x=24, y=1, lppt=0x2281680 | out: lppt=0x2281680) returned 1 [0062.607] LineTo (hdc=0xffffffff930105ed, x=1, y=1) returned 1 [0062.607] MoveToEx (in: hdc=0xffffffff930105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.607] GetROP2 (hdc=0xffffffff930105ed) returned 13 [0062.607] MoveToEx (in: hdc=0xffffffff930105ed, x=1, y=1, lppt=0x2281698 | out: lppt=0x2281698) returned 1 [0062.607] LineTo (hdc=0xffffffff930105ed, x=1, y=21) returned 1 [0062.607] MoveToEx (in: hdc=0xffffffff930105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.607] DeleteObject (ho=0x2d300679) returned 1 [0062.607] GetROP2 (hdc=0xffffffff930105ed) returned 13 [0062.607] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x3430099d [0062.607] MoveToEx (in: hdc=0xffffffff930105ed, x=1, y=21, lppt=0x2281700 | out: lppt=0x2281700) returned 1 [0062.607] LineTo (hdc=0xffffffff930105ed, x=24, y=21) returned 1 [0062.607] MoveToEx (in: hdc=0xffffffff930105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.607] GetROP2 (hdc=0xffffffff930105ed) returned 13 [0062.607] MoveToEx (in: hdc=0xffffffff930105ed, x=24, y=21, lppt=0x2281718 | out: lppt=0x2281718) returned 1 [0062.607] LineTo (hdc=0xffffffff930105ed, x=24, y=0) returned 1 [0062.607] MoveToEx (in: hdc=0xffffffff930105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.607] DeleteObject (ho=0x3430099d) returned 1 [0062.607] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff930105ed) returned 0x0 [0062.607] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0062.608] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff930105ed) returned 0x0 [0062.608] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0062.608] DeleteDC (hdc=0xffffffff930105ed) returned 1 [0062.608] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0062.608] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0062.608] TranslateMessage (lpMsg=0x14ef10) returned 0 [0062.608] DispatchMessageW (lpMsg=0x14ef10) [0062.608] BeginPaint (hWnd=0x3033e, lpPaint=0x14e5a8) [0062.608] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0062.608] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0062.608] GetStockObject (i=5) returned 0x1900015 [0062.609] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0062.609] GdipCreateFromHDC (hdc=0xffffffff960105ed, graphics=0x14e528) returned 0x0 [0062.609] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0062.609] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0062.609] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0062.609] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0062.609] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0062.609] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0062.609] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d2d0) returned 0x0 [0062.609] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0062.609] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0062.609] GdipCreateRegion (region=0x14e550) returned 0x0 [0062.609] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0062.611] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0062.611] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0062.612] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd9f0dbd) returned 0x0 [0062.612] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0062.612] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0062.612] GetCurrentObject (hdc=0xffffffff960105ed, type=0x1) returned 0x1b00017 [0062.612] GetCurrentObject (hdc=0xffffffff960105ed, type=0x2) returned 0x1900010 [0062.612] GetCurrentObject (hdc=0xffffffff960105ed, type=0x7) returned 0x160506a9 [0062.612] GetCurrentObject (hdc=0xffffffff960105ed, type=0x6) returned 0x18a0048 [0062.612] GetNearestColor (hdc=0xffffffff960105ed, color=0xf0f0f0) returned 0xf0f0f0 [0062.612] GetNearestColor (hdc=0xffffffff960105ed, color=0xa0a0a0) returned 0xa0a0a0 [0062.612] GetNearestColor (hdc=0xffffffff960105ed, color=0x696969) returned 0x696969 [0062.612] GetNearestColor (hdc=0xffffffff960105ed, color=0xa0a0a0) returned 0xa0a0a0 [0062.612] GetNearestColor (hdc=0xffffffff960105ed, color=0x0) returned 0x0 [0062.612] GetNearestColor (hdc=0xffffffff960105ed, color=0xffffff) returned 0xffffff [0062.612] GetNearestColor (hdc=0xffffffff960105ed, color=0xe5e5e5) returned 0xe5e5e5 [0062.612] GetNearestColor (hdc=0xffffffff960105ed, color=0xd8d8d8) returned 0xd8d8d8 [0062.612] GetNearestColor (hdc=0xffffffff960105ed, color=0x0) returned 0x0 [0062.612] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff960105ed) returned 0x0 [0062.613] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.613] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x1a(\x02", lpUsedDefaultChar=0x0) returned 17 [0062.613] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.613] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2282050) returned 0x0 [0062.613] GdipSetStringFormatAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0062.613] GdipSetStringFormatLineAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0062.614] GdipSetStringFormatHotkeyPrefix (format=0x1beb6ec0, hotkeyPrefix=2) returned 0x0 [0062.614] GdipGetStringFormatFlags (format=0x1beb6ec0, flags=0x14e378) returned 0x0 [0062.614] GdipGetStringFormatTrimming (format=0x1beb6ec0, trimming=0x14e378) returned 0x0 [0062.614] GdipGetStringFormatHotkeyPrefix (format=0x1beb6ec0, hotkeyPrefix=0x14e378) returned 0x0 [0062.614] GdipGetFontSize (font=0x1beb6ec0, size=0x14e378) returned 0x0 [0062.614] GdipGetFontStyle (font=0x1beb6ec0, style=0x14e378) returned 0x0 [0062.614] GdipDeleteStringFormat (format=0x1beb6ec0) returned 0x0 [0062.614] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.614] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0062.614] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.614] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0062.614] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2282180) returned 0x0 [0062.614] GdipSetStringFormatFlags (format=0x1beb6ec0, flags=0) returned 0x0 [0062.615] GdipSetStringFormatTrimming (format=0x1beb6ec0, trimming=0x1) returned 0x0 [0062.615] GdipSetStringFormatHotkeyPrefix (format=0x1beb6ec0, hotkeyPrefix=2) returned 0x0 [0062.615] GdipSetStringFormatAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0062.615] GdipSetStringFormatLineAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0062.615] GdipMeasureString (graphics=0x1beb7860, string="-", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb6ec0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0062.615] GdipDeleteStringFormat (format=0x1beb6ec0) returned 0x0 [0062.615] GdipDeleteGraphics (graphics=0x1beb7860) returned 0x0 [0062.615] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.615] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0062.615] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.615] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0062.615] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0062.615] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0062.615] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0062.615] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0062.615] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0062.615] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d710) returned 0x0 [0062.616] LocalFree (hMem=0x1d92d710) returned 0x0 [0062.616] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0062.616] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d650) returned 0x0 [0062.616] LocalFree (hMem=0x1d92d650) returned 0x0 [0062.616] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0062.616] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0062.616] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0062.616] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0062.616] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0062.616] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0062.616] GetCurrentObject (hdc=0xffffffff960105ed, type=0x1) returned 0x1b00017 [0062.616] GetCurrentObject (hdc=0xffffffff960105ed, type=0x2) returned 0x1900010 [0062.616] GetCurrentObject (hdc=0xffffffff960105ed, type=0x7) returned 0x160506a9 [0062.616] GetCurrentObject (hdc=0xffffffff960105ed, type=0x6) returned 0x18a0048 [0062.616] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6904095c [0062.616] DeleteObject (ho=0x6904095c) returned 1 [0062.617] DeleteObject (ho=0x2a0406c7) returned 1 [0062.617] OffsetViewportOrgEx (in: hdc=0xffffffff960105ed, x=0, y=0, lppt=0x2282540 | out: lppt=0x2282540) returned 1 [0062.617] GetNearestColor (hdc=0xffffffff960105ed, color=0xf0f0f0) returned 0xf0f0f0 [0062.617] CreateSolidBrush (color=0xf0f0f0) returned 0x2b100559 [0062.617] FillRect (hDC=0xffffffff960105ed, lprc=0x14e1c8, hbr=0x2b100559) returned 1 [0062.617] DeleteObject (ho=0x2b100559) returned 1 [0062.617] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff960105ed) returned 0x0 [0062.617] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0062.617] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.617] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2282640) returned 0x0 [0062.617] GdipSetStringFormatAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0062.617] GdipSetStringFormatLineAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0062.617] GdipSetStringFormatHotkeyPrefix (format=0x1beb15e0, hotkeyPrefix=2) returned 0x0 [0062.618] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0062.618] GdipDrawString (graphics=0x1beb67f0, string="-", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb15e0, brush=0x1beb1650) returned 0x0 [0062.622] GdipDeleteBrush (brush=0x1beb1650) returned 0x0 [0062.622] GdipDeleteStringFormat (format=0x1beb15e0) returned 0x0 [0062.622] GetFocus () returned 0x302de [0062.622] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x17(\x02", lpUsedDefaultChar=0x0) returned 17 [0062.622] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.622] GdipCreateRegion (region=0x14e030) returned 0x0 [0062.622] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0062.622] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0062.622] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0062.622] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0062.622] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0062.622] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d2d0) returned 0x0 [0062.623] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0062.623] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0062.623] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0062.623] LocalFree (hMem=0x1d92cf10) returned 0x0 [0062.623] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0062.623] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0062.623] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0062.623] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0062.623] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0062.623] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0062.623] GetCurrentObject (hdc=0xffffffff960105ed, type=0x1) returned 0x1b00017 [0062.623] GetCurrentObject (hdc=0xffffffff960105ed, type=0x2) returned 0x1900010 [0062.623] GetCurrentObject (hdc=0xffffffff960105ed, type=0x7) returned 0x160506a9 [0062.623] GetCurrentObject (hdc=0xffffffff960105ed, type=0x6) returned 0x18a0048 [0062.624] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2b0406c7 [0062.624] DeleteObject (ho=0x2b0406c7) returned 1 [0062.624] DeleteObject (ho=0x6a04095c) returned 1 [0062.624] OffsetViewportOrgEx (in: hdc=0xffffffff960105ed, x=0, y=0, lppt=0x2282a28 | out: lppt=0x2282a28) returned 1 [0062.624] GetROP2 (hdc=0xffffffff960105ed) returned 13 [0062.624] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x2e300679 [0062.624] MoveToEx (in: hdc=0xffffffff960105ed, x=25, y=0, lppt=0x2282a90 | out: lppt=0x2282a90) returned 1 [0062.624] LineTo (hdc=0xffffffff960105ed, x=0, y=0) returned 1 [0062.624] MoveToEx (in: hdc=0xffffffff960105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.624] GetROP2 (hdc=0xffffffff960105ed) returned 13 [0062.624] MoveToEx (in: hdc=0xffffffff960105ed, x=0, y=0, lppt=0x2282aa8 | out: lppt=0x2282aa8) returned 1 [0062.624] LineTo (hdc=0xffffffff960105ed, x=0, y=22) returned 1 [0062.624] MoveToEx (in: hdc=0xffffffff960105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.624] DeleteObject (ho=0x2e300679) returned 1 [0062.624] GetROP2 (hdc=0xffffffff960105ed) returned 13 [0062.624] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x513009bc [0062.624] MoveToEx (in: hdc=0xffffffff960105ed, x=0, y=22, lppt=0x2282b10 | out: lppt=0x2282b10) returned 1 [0062.624] LineTo (hdc=0xffffffff960105ed, x=25, y=22) returned 1 [0062.624] MoveToEx (in: hdc=0xffffffff960105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.624] GetROP2 (hdc=0xffffffff960105ed) returned 13 [0062.624] MoveToEx (in: hdc=0xffffffff960105ed, x=25, y=22, lppt=0x2282b28 | out: lppt=0x2282b28) returned 1 [0062.624] LineTo (hdc=0xffffffff960105ed, x=25, y=-1) returned 1 [0062.625] MoveToEx (in: hdc=0xffffffff960105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.625] DeleteObject (ho=0x513009bc) returned 1 [0062.625] GetROP2 (hdc=0xffffffff960105ed) returned 13 [0062.625] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x2f300679 [0062.625] MoveToEx (in: hdc=0xffffffff960105ed, x=24, y=1, lppt=0x2282b90 | out: lppt=0x2282b90) returned 1 [0062.625] LineTo (hdc=0xffffffff960105ed, x=1, y=1) returned 1 [0062.625] MoveToEx (in: hdc=0xffffffff960105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.625] GetROP2 (hdc=0xffffffff960105ed) returned 13 [0062.625] MoveToEx (in: hdc=0xffffffff960105ed, x=1, y=1, lppt=0x2282ba8 | out: lppt=0x2282ba8) returned 1 [0062.625] LineTo (hdc=0xffffffff960105ed, x=1, y=21) returned 1 [0062.625] MoveToEx (in: hdc=0xffffffff960105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.625] DeleteObject (ho=0x2f300679) returned 1 [0062.625] GetROP2 (hdc=0xffffffff960105ed) returned 13 [0062.625] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x523009bc [0062.625] MoveToEx (in: hdc=0xffffffff960105ed, x=1, y=21, lppt=0x2282c10 | out: lppt=0x2282c10) returned 1 [0062.625] LineTo (hdc=0xffffffff960105ed, x=24, y=21) returned 1 [0062.625] MoveToEx (in: hdc=0xffffffff960105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.625] GetROP2 (hdc=0xffffffff960105ed) returned 13 [0062.625] MoveToEx (in: hdc=0xffffffff960105ed, x=24, y=21, lppt=0x2282c28 | out: lppt=0x2282c28) returned 1 [0062.625] LineTo (hdc=0xffffffff960105ed, x=24, y=0) returned 1 [0062.625] MoveToEx (in: hdc=0xffffffff960105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.625] DeleteObject (ho=0x523009bc) returned 1 [0062.626] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff960105ed) returned 0x0 [0062.626] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0062.626] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff960105ed) returned 0x0 [0062.626] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0062.813] DeleteDC (hdc=0xffffffff960105ed) returned 1 [0062.813] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0062.813] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0062.813] TranslateMessage (lpMsg=0x14ef10) returned 0 [0062.813] DispatchMessageW (lpMsg=0x14ef10) [0062.814] BeginPaint (hWnd=0x30340, lpPaint=0x14e5a8) [0062.814] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0062.814] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0062.814] GetStockObject (i=5) returned 0x1900015 [0062.814] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0062.814] GdipCreateFromHDC (hdc=0x3801099d, graphics=0x14e528) returned 0x0 [0062.814] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0062.814] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0062.814] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0062.814] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0062.815] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0062.815] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d490 [0062.815] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d490) returned 0x0 [0062.815] LocalFree (hMem=0x1d92d490) returned 0x0 [0062.816] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0062.816] GdipCreateRegion (region=0x14e550) returned 0x0 [0062.816] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0062.816] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0062.816] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0062.816] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd9c0dbd) returned 0x0 [0062.816] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0062.816] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0062.816] GetCurrentObject (hdc=0x3801099d, type=0x1) returned 0x1b00017 [0062.816] GetCurrentObject (hdc=0x3801099d, type=0x2) returned 0x1900010 [0062.816] GetCurrentObject (hdc=0x3801099d, type=0x7) returned 0x160506a9 [0062.816] GetCurrentObject (hdc=0x3801099d, type=0x6) returned 0x18a0048 [0062.816] GetNearestColor (hdc=0x3801099d, color=0xf0f0f0) returned 0xf0f0f0 [0062.816] GetNearestColor (hdc=0x3801099d, color=0xa0a0a0) returned 0xa0a0a0 [0062.816] GetNearestColor (hdc=0x3801099d, color=0x696969) returned 0x696969 [0062.816] GetNearestColor (hdc=0x3801099d, color=0xa0a0a0) returned 0xa0a0a0 [0062.816] GetNearestColor (hdc=0x3801099d, color=0x0) returned 0x0 [0062.816] GetNearestColor (hdc=0x3801099d, color=0xffffff) returned 0xffffff [0062.816] GetNearestColor (hdc=0x3801099d, color=0xe5e5e5) returned 0xe5e5e5 [0062.817] GetNearestColor (hdc=0x3801099d, color=0xd8d8d8) returned 0xd8d8d8 [0062.817] GetNearestColor (hdc=0x3801099d, color=0x0) returned 0x0 [0062.817] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x3801099d) returned 0x0 [0062.817] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx/(\x02", lpUsedDefaultChar=0x0) returned 17 [0062.817] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.817] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2283560) returned 0x0 [0062.817] GdipSetStringFormatAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0062.817] GdipSetStringFormatLineAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0062.817] GdipSetStringFormatHotkeyPrefix (format=0x1beb15e0, hotkeyPrefix=2) returned 0x0 [0062.817] GdipGetStringFormatFlags (format=0x1beb15e0, flags=0x14e378) returned 0x0 [0062.818] GdipGetStringFormatTrimming (format=0x1beb15e0, trimming=0x14e378) returned 0x0 [0062.818] GdipGetStringFormatHotkeyPrefix (format=0x1beb15e0, hotkeyPrefix=0x14e378) returned 0x0 [0062.818] GdipGetFontSize (font=0x1beb15e0, size=0x14e378) returned 0x0 [0062.818] GdipGetFontStyle (font=0x1beb15e0, style=0x14e378) returned 0x0 [0062.818] GdipDeleteStringFormat (format=0x1beb15e0) returned 0x0 [0062.818] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0062.818] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.818] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0062.818] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2283690) returned 0x0 [0062.818] GdipSetStringFormatFlags (format=0x1beb1670, flags=0) returned 0x0 [0062.818] GdipSetStringFormatTrimming (format=0x1beb1670, trimming=0x1) returned 0x0 [0062.818] GdipSetStringFormatHotkeyPrefix (format=0x1beb1670, hotkeyPrefix=2) returned 0x0 [0062.819] GdipSetStringFormatAlign (format=0x1beb1670, align=0x1) returned 0x0 [0062.819] GdipSetStringFormatLineAlign (format=0x1beb1670, align=0x1) returned 0x0 [0062.819] GdipMeasureString (graphics=0x1beb7860, string="8", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb1670, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0062.820] GdipDeleteStringFormat (format=0x1beb1670) returned 0x0 [0062.820] GdipDeleteGraphics (graphics=0x1beb7860) returned 0x0 [0062.820] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.820] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0062.820] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.821] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0062.821] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0062.821] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0062.821] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0062.821] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0062.821] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d4d0 [0062.821] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d4d0) returned 0x0 [0062.822] LocalFree (hMem=0x1d92d4d0) returned 0x0 [0062.822] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0062.822] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d710) returned 0x0 [0062.822] LocalFree (hMem=0x1d92d710) returned 0x0 [0062.822] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0062.822] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0062.822] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0062.822] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0062.822] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0062.822] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0062.822] GetCurrentObject (hdc=0x3801099d, type=0x1) returned 0x1b00017 [0062.822] GetCurrentObject (hdc=0x3801099d, type=0x2) returned 0x1900010 [0062.822] GetCurrentObject (hdc=0x3801099d, type=0x7) returned 0x160506a9 [0062.823] GetCurrentObject (hdc=0x3801099d, type=0x6) returned 0x18a0048 [0062.823] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6b04095c [0062.823] DeleteObject (ho=0x6b04095c) returned 1 [0062.823] DeleteObject (ho=0x2c0406c7) returned 1 [0062.823] OffsetViewportOrgEx (in: hdc=0x3801099d, x=0, y=0, lppt=0x2283a50 | out: lppt=0x2283a50) returned 1 [0062.823] GetNearestColor (hdc=0x3801099d, color=0xf0f0f0) returned 0xf0f0f0 [0062.823] CreateSolidBrush (color=0xf0f0f0) returned 0x2c100559 [0062.823] FillRect (hDC=0x3801099d, lprc=0x14e1c8, hbr=0x2c100559) returned 1 [0062.823] DeleteObject (ho=0x2c100559) returned 1 [0062.823] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x3801099d) returned 0x0 [0062.823] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.823] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0062.823] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.823] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2283b50) returned 0x0 [0062.824] GdipSetStringFormatAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0062.824] GdipSetStringFormatLineAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0062.824] GdipSetStringFormatHotkeyPrefix (format=0x1beb6ec0, hotkeyPrefix=2) returned 0x0 [0062.824] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0062.824] GdipDrawString (graphics=0x1beb67f0, string="8", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb6ec0, brush=0x1beb15e0) returned 0x0 [0062.828] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0062.828] GdipDeleteStringFormat (format=0x1beb6ec0) returned 0x0 [0062.828] GetFocus () returned 0x302de [0062.828] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx,(\x02", lpUsedDefaultChar=0x0) returned 17 [0062.957] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.958] GdipCreateRegion (region=0x14e030) returned 0x0 [0062.958] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0062.958] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0062.958] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0062.958] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0062.958] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0062.958] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cf10) returned 0x0 [0062.959] LocalFree (hMem=0x1d92cf10) returned 0x0 [0062.959] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d810 [0062.959] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d810) returned 0x0 [0062.959] LocalFree (hMem=0x1d92d810) returned 0x0 [0062.959] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0062.959] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0062.959] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0062.959] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0062.960] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0062.960] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0062.960] GetCurrentObject (hdc=0x3801099d, type=0x1) returned 0x1b00017 [0062.960] GetCurrentObject (hdc=0x3801099d, type=0x2) returned 0x1900010 [0062.960] GetCurrentObject (hdc=0x3801099d, type=0x7) returned 0x160506a9 [0062.960] GetCurrentObject (hdc=0x3801099d, type=0x6) returned 0x18a0048 [0062.960] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2d0406c7 [0062.960] DeleteObject (ho=0x2d0406c7) returned 1 [0062.960] DeleteObject (ho=0x6c04095c) returned 1 [0062.960] OffsetViewportOrgEx (in: hdc=0x3801099d, x=0, y=0, lppt=0x2283f38 | out: lppt=0x2283f38) returned 1 [0062.960] GetROP2 (hdc=0x3801099d) returned 13 [0062.960] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x533009bc [0062.960] MoveToEx (in: hdc=0x3801099d, x=25, y=0, lppt=0x2283fa0 | out: lppt=0x2283fa0) returned 1 [0062.960] LineTo (hdc=0x3801099d, x=0, y=0) returned 1 [0062.960] MoveToEx (in: hdc=0x3801099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.960] GetROP2 (hdc=0x3801099d) returned 13 [0062.960] MoveToEx (in: hdc=0x3801099d, x=0, y=0, lppt=0x2283fb8 | out: lppt=0x2283fb8) returned 1 [0062.960] LineTo (hdc=0x3801099d, x=0, y=22) returned 1 [0062.960] MoveToEx (in: hdc=0x3801099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.960] DeleteObject (ho=0x533009bc) returned 1 [0062.961] GetROP2 (hdc=0x3801099d) returned 13 [0062.961] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x30300679 [0062.961] MoveToEx (in: hdc=0x3801099d, x=0, y=22, lppt=0x2284020 | out: lppt=0x2284020) returned 1 [0062.961] LineTo (hdc=0x3801099d, x=25, y=22) returned 1 [0062.961] MoveToEx (in: hdc=0x3801099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.961] GetROP2 (hdc=0x3801099d) returned 13 [0062.961] MoveToEx (in: hdc=0x3801099d, x=25, y=22, lppt=0x2284038 | out: lppt=0x2284038) returned 1 [0062.961] LineTo (hdc=0x3801099d, x=25, y=-1) returned 1 [0062.961] MoveToEx (in: hdc=0x3801099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.961] DeleteObject (ho=0x30300679) returned 1 [0062.961] GetROP2 (hdc=0x3801099d) returned 13 [0062.961] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x543009bc [0062.961] MoveToEx (in: hdc=0x3801099d, x=24, y=1, lppt=0x22840a0 | out: lppt=0x22840a0) returned 1 [0062.961] LineTo (hdc=0x3801099d, x=1, y=1) returned 1 [0062.961] MoveToEx (in: hdc=0x3801099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.961] GetROP2 (hdc=0x3801099d) returned 13 [0062.961] MoveToEx (in: hdc=0x3801099d, x=1, y=1, lppt=0x22840b8 | out: lppt=0x22840b8) returned 1 [0062.961] LineTo (hdc=0x3801099d, x=1, y=21) returned 1 [0062.961] MoveToEx (in: hdc=0x3801099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.962] DeleteObject (ho=0x543009bc) returned 1 [0062.962] GetROP2 (hdc=0x3801099d) returned 13 [0062.962] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x31300679 [0062.962] MoveToEx (in: hdc=0x3801099d, x=1, y=21, lppt=0x2284120 | out: lppt=0x2284120) returned 1 [0062.962] LineTo (hdc=0x3801099d, x=24, y=21) returned 1 [0062.962] MoveToEx (in: hdc=0x3801099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.962] GetROP2 (hdc=0x3801099d) returned 13 [0062.962] MoveToEx (in: hdc=0x3801099d, x=24, y=21, lppt=0x2284138 | out: lppt=0x2284138) returned 1 [0062.962] LineTo (hdc=0x3801099d, x=24, y=0) returned 1 [0062.962] MoveToEx (in: hdc=0x3801099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.962] DeleteObject (ho=0x31300679) returned 1 [0062.962] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x3801099d) returned 0x0 [0062.962] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0062.962] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x3801099d) returned 0x0 [0062.962] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0062.965] DeleteDC (hdc=0x3801099d) returned 1 [0062.965] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0062.965] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0062.966] TranslateMessage (lpMsg=0x14ef10) returned 0 [0062.966] DispatchMessageW (lpMsg=0x14ef10) [0062.966] BeginPaint (hWnd=0x3032e, lpPaint=0x14e5a8) [0062.966] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0062.966] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0062.966] GetStockObject (i=5) returned 0x1900015 [0062.966] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0062.966] GdipCreateFromHDC (hdc=0x270109cc, graphics=0x14e528) returned 0x0 [0062.967] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0062.967] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0062.967] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0062.967] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0062.967] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0062.967] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0062.967] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d710) returned 0x0 [0062.968] LocalFree (hMem=0x1d92d710) returned 0x0 [0062.968] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0062.968] GdipCreateRegion (region=0x14e550) returned 0x0 [0062.968] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0062.968] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0062.968] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0062.968] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd990dbd) returned 0x0 [0062.968] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0062.968] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0062.968] GetCurrentObject (hdc=0x270109cc, type=0x1) returned 0x1b00017 [0062.968] GetCurrentObject (hdc=0x270109cc, type=0x2) returned 0x1900010 [0062.968] GetCurrentObject (hdc=0x270109cc, type=0x7) returned 0x160506a9 [0062.968] GetCurrentObject (hdc=0x270109cc, type=0x6) returned 0x18a0048 [0062.968] SaveDC (hdc=0x270109cc) returned 1 [0062.968] GetNearestColor (hdc=0x270109cc, color=0xf0f0f0) returned 0xf0f0f0 [0062.968] GetNearestColor (hdc=0x270109cc, color=0xa0a0a0) returned 0xa0a0a0 [0062.968] GetNearestColor (hdc=0x270109cc, color=0x696969) returned 0x696969 [0062.969] GetNearestColor (hdc=0x270109cc, color=0xa0a0a0) returned 0xa0a0a0 [0062.969] GetNearestColor (hdc=0x270109cc, color=0x0) returned 0x0 [0062.969] GetNearestColor (hdc=0x270109cc, color=0xffffff) returned 0xffffff [0062.969] GetNearestColor (hdc=0x270109cc, color=0xe5e5e5) returned 0xe5e5e5 [0062.969] GetNearestColor (hdc=0x270109cc, color=0xd8d8d8) returned 0xd8d8d8 [0062.969] GetNearestColor (hdc=0x270109cc, color=0x0) returned 0x0 [0062.969] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x270109cc) returned 0x0 [0062.969] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.970] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExD(\x02", lpUsedDefaultChar=0x0) returned 17 [0062.970] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.970] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2284a70) returned 0x0 [0062.970] GdipSetStringFormatAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0062.970] GdipSetStringFormatLineAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0062.970] GdipSetStringFormatHotkeyPrefix (format=0x1beb6ec0, hotkeyPrefix=2) returned 0x0 [0062.970] GdipGetStringFormatFlags (format=0x1beb6ec0, flags=0x14e378) returned 0x0 [0062.970] GdipGetStringFormatTrimming (format=0x1beb6ec0, trimming=0x14e378) returned 0x0 [0062.970] GdipGetStringFormatHotkeyPrefix (format=0x1beb6ec0, hotkeyPrefix=0x14e378) returned 0x0 [0062.970] GdipGetFontSize (font=0x1beb6ec0, size=0x14e378) returned 0x0 [0062.970] GdipGetFontStyle (font=0x1beb6ec0, style=0x14e378) returned 0x0 [0062.970] GdipDeleteStringFormat (format=0x1beb6ec0) returned 0x0 [0062.970] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.970] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0062.971] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.971] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0062.971] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2284ba0) returned 0x0 [0062.971] GdipSetStringFormatFlags (format=0x1beb6ec0, flags=0) returned 0x0 [0062.971] GdipSetStringFormatTrimming (format=0x1beb6ec0, trimming=0x1) returned 0x0 [0062.971] GdipSetStringFormatHotkeyPrefix (format=0x1beb6ec0, hotkeyPrefix=2) returned 0x0 [0062.971] GdipSetStringFormatAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0062.971] GdipSetStringFormatLineAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0062.971] GdipMeasureString (graphics=0x1beb7860, string="c", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb6ec0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0062.971] GdipDeleteStringFormat (format=0x1beb6ec0) returned 0x0 [0062.971] GdipDeleteGraphics (graphics=0x1beb7860) returned 0x0 [0062.971] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.971] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0062.971] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.972] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0062.972] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0062.972] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0062.972] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0062.972] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0062.972] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d350 [0062.972] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d350) returned 0x0 [0062.972] LocalFree (hMem=0x1d92d350) returned 0x0 [0062.972] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92ca90 [0062.972] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92ca90) returned 0x0 [0062.973] LocalFree (hMem=0x1d92ca90) returned 0x0 [0062.973] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0062.973] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0062.973] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0062.973] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0062.973] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0062.973] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0062.973] GetCurrentObject (hdc=0x270109cc, type=0x1) returned 0x1b00017 [0062.973] GetCurrentObject (hdc=0x270109cc, type=0x2) returned 0x1900010 [0062.973] GetCurrentObject (hdc=0x270109cc, type=0x7) returned 0x160506a9 [0062.974] GetCurrentObject (hdc=0x270109cc, type=0x6) returned 0x18a0048 [0062.974] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6d04095c [0062.974] DeleteObject (ho=0x6d04095c) returned 1 [0062.974] DeleteObject (ho=0x2e0406c7) returned 1 [0062.974] OffsetViewportOrgEx (in: hdc=0x270109cc, x=0, y=0, lppt=0x2284f60 | out: lppt=0x2284f60) returned 1 [0062.974] GetNearestColor (hdc=0x270109cc, color=0xf0f0f0) returned 0xf0f0f0 [0062.974] CreateSolidBrush (color=0xf0f0f0) returned 0x2d100559 [0062.974] FillRect (hDC=0x270109cc, lprc=0x14e1c8, hbr=0x2d100559) returned 1 [0062.974] DeleteObject (ho=0x2d100559) returned 1 [0062.974] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x270109cc) returned 0x0 [0062.974] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.974] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0062.975] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.975] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2285060) returned 0x0 [0062.975] GdipSetStringFormatAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0062.975] GdipSetStringFormatLineAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0062.975] GdipSetStringFormatHotkeyPrefix (format=0x1beb15e0, hotkeyPrefix=2) returned 0x0 [0062.975] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0062.975] GdipDrawString (graphics=0x1beb67f0, string="c", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb15e0, brush=0x1beb1650) returned 0x0 [0062.979] GdipDeleteBrush (brush=0x1beb1650) returned 0x0 [0062.979] GdipDeleteStringFormat (format=0x1beb15e0) returned 0x0 [0062.979] GetFocus () returned 0x302de [0062.979] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0062.979] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExA(\x02", lpUsedDefaultChar=0x0) returned 17 [0062.979] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0062.979] GdipCreateRegion (region=0x14e030) returned 0x0 [0062.979] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0062.979] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0062.979] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0062.979] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0062.980] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0062.980] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d710) returned 0x0 [0062.980] LocalFree (hMem=0x1d92d710) returned 0x0 [0062.980] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0062.980] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d650) returned 0x0 [0062.981] LocalFree (hMem=0x1d92d650) returned 0x0 [0062.981] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0062.981] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0062.981] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0062.981] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0062.981] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0062.981] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0062.981] GetCurrentObject (hdc=0x270109cc, type=0x1) returned 0x1b00017 [0062.981] GetCurrentObject (hdc=0x270109cc, type=0x2) returned 0x1900010 [0062.981] GetCurrentObject (hdc=0x270109cc, type=0x7) returned 0x160506a9 [0062.981] GetCurrentObject (hdc=0x270109cc, type=0x6) returned 0x18a0048 [0062.981] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2f0406c7 [0062.981] DeleteObject (ho=0x2f0406c7) returned 1 [0062.981] DeleteObject (ho=0x6e04095c) returned 1 [0062.981] OffsetViewportOrgEx (in: hdc=0x270109cc, x=0, y=0, lppt=0x2285448 | out: lppt=0x2285448) returned 1 [0062.981] GetROP2 (hdc=0x270109cc) returned 13 [0062.982] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x32300679 [0062.982] MoveToEx (in: hdc=0x270109cc, x=25, y=0, lppt=0x22854b0 | out: lppt=0x22854b0) returned 1 [0062.982] LineTo (hdc=0x270109cc, x=0, y=0) returned 1 [0062.982] MoveToEx (in: hdc=0x270109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.982] GetROP2 (hdc=0x270109cc) returned 13 [0062.982] MoveToEx (in: hdc=0x270109cc, x=0, y=0, lppt=0x22854c8 | out: lppt=0x22854c8) returned 1 [0062.982] LineTo (hdc=0x270109cc, x=0, y=22) returned 1 [0062.982] MoveToEx (in: hdc=0x270109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.982] DeleteObject (ho=0x32300679) returned 1 [0062.982] GetROP2 (hdc=0x270109cc) returned 13 [0062.982] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x553009bc [0062.982] MoveToEx (in: hdc=0x270109cc, x=0, y=22, lppt=0x2285530 | out: lppt=0x2285530) returned 1 [0062.982] LineTo (hdc=0x270109cc, x=25, y=22) returned 1 [0062.982] MoveToEx (in: hdc=0x270109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.982] GetROP2 (hdc=0x270109cc) returned 13 [0062.982] MoveToEx (in: hdc=0x270109cc, x=25, y=22, lppt=0x2285548 | out: lppt=0x2285548) returned 1 [0062.982] LineTo (hdc=0x270109cc, x=25, y=-1) returned 1 [0062.982] MoveToEx (in: hdc=0x270109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.982] DeleteObject (ho=0x553009bc) returned 1 [0062.982] GetROP2 (hdc=0x270109cc) returned 13 [0062.983] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x33300679 [0062.983] MoveToEx (in: hdc=0x270109cc, x=24, y=1, lppt=0x22855b0 | out: lppt=0x22855b0) returned 1 [0062.983] LineTo (hdc=0x270109cc, x=1, y=1) returned 1 [0062.983] MoveToEx (in: hdc=0x270109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.983] GetROP2 (hdc=0x270109cc) returned 13 [0062.983] MoveToEx (in: hdc=0x270109cc, x=1, y=1, lppt=0x22855c8 | out: lppt=0x22855c8) returned 1 [0062.983] LineTo (hdc=0x270109cc, x=1, y=21) returned 1 [0062.983] MoveToEx (in: hdc=0x270109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.983] DeleteObject (ho=0x33300679) returned 1 [0062.983] GetROP2 (hdc=0x270109cc) returned 13 [0062.983] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x563009bc [0062.983] MoveToEx (in: hdc=0x270109cc, x=1, y=21, lppt=0x2285630 | out: lppt=0x2285630) returned 1 [0062.983] LineTo (hdc=0x270109cc, x=24, y=21) returned 1 [0062.983] MoveToEx (in: hdc=0x270109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.983] GetROP2 (hdc=0x270109cc) returned 13 [0062.983] MoveToEx (in: hdc=0x270109cc, x=24, y=21, lppt=0x2285648 | out: lppt=0x2285648) returned 1 [0062.983] LineTo (hdc=0x270109cc, x=24, y=0) returned 1 [0062.983] MoveToEx (in: hdc=0x270109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0062.983] DeleteObject (ho=0x563009bc) returned 1 [0062.983] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x270109cc) returned 0x0 [0062.983] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0062.984] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x270109cc) returned 0x0 [0062.984] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0062.984] DeleteDC (hdc=0x270109cc) returned 1 [0062.984] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0062.984] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0062.984] TranslateMessage (lpMsg=0x14ef10) returned 0 [0062.984] DispatchMessageW (lpMsg=0x14ef10) [0062.984] BeginPaint (hWnd=0x30338, lpPaint=0x14e5a8) [0062.984] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0062.984] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0062.984] GetStockObject (i=5) returned 0x1900015 [0063.080] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0063.080] GdipCreateFromHDC (hdc=0xffffffff9f0105ed, graphics=0x14e528) returned 0x0 [0063.080] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0063.080] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0063.080] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0063.080] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0063.080] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0063.080] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0063.080] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d2d0) returned 0x0 [0063.081] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0063.081] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0063.081] GdipCreateRegion (region=0x14e550) returned 0x0 [0063.081] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.081] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0063.081] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0063.082] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd960dbd) returned 0x0 [0063.082] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.082] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0063.082] GetCurrentObject (hdc=0xffffffff9f0105ed, type=0x1) returned 0x1b00017 [0063.082] GetCurrentObject (hdc=0xffffffff9f0105ed, type=0x2) returned 0x1900010 [0063.082] GetCurrentObject (hdc=0xffffffff9f0105ed, type=0x7) returned 0x160506a9 [0063.082] GetCurrentObject (hdc=0xffffffff9f0105ed, type=0x6) returned 0x18a0048 [0063.082] GetNearestColor (hdc=0xffffffff9f0105ed, color=0xf0f0f0) returned 0xf0f0f0 [0063.082] GetNearestColor (hdc=0xffffffff9f0105ed, color=0xa0a0a0) returned 0xa0a0a0 [0063.082] GetNearestColor (hdc=0xffffffff9f0105ed, color=0x696969) returned 0x696969 [0063.082] GetNearestColor (hdc=0xffffffff9f0105ed, color=0xa0a0a0) returned 0xa0a0a0 [0063.082] GetNearestColor (hdc=0xffffffff9f0105ed, color=0x0) returned 0x0 [0063.082] GetNearestColor (hdc=0xffffffff9f0105ed, color=0xffffff) returned 0xffffff [0063.083] GetNearestColor (hdc=0xffffffff9f0105ed, color=0xe5e5e5) returned 0xe5e5e5 [0063.083] GetNearestColor (hdc=0xffffffff9f0105ed, color=0xd8d8d8) returned 0xd8d8d8 [0063.083] GetNearestColor (hdc=0xffffffff9f0105ed, color=0x0) returned 0x0 [0063.083] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff9f0105ed) returned 0x0 [0063.083] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.083] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExY(\x02", lpUsedDefaultChar=0x0) returned 17 [0063.083] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.083] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2285f80) returned 0x0 [0063.083] GdipSetStringFormatAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0063.084] GdipSetStringFormatLineAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0063.084] GdipSetStringFormatHotkeyPrefix (format=0x1beb15e0, hotkeyPrefix=2) returned 0x0 [0063.084] GdipGetStringFormatFlags (format=0x1beb15e0, flags=0x14e378) returned 0x0 [0063.084] GdipGetStringFormatTrimming (format=0x1beb15e0, trimming=0x14e378) returned 0x0 [0063.084] GdipGetStringFormatHotkeyPrefix (format=0x1beb15e0, hotkeyPrefix=0x14e378) returned 0x0 [0063.084] GdipGetFontSize (font=0x1beb15e0, size=0x14e378) returned 0x0 [0063.084] GdipGetFontStyle (font=0x1beb15e0, style=0x14e378) returned 0x0 [0063.084] GdipDeleteStringFormat (format=0x1beb15e0) returned 0x0 [0063.084] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.084] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0063.084] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.084] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0063.085] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22860b0) returned 0x0 [0063.085] GdipSetStringFormatFlags (format=0x1beb1670, flags=0) returned 0x0 [0063.085] GdipSetStringFormatTrimming (format=0x1beb1670, trimming=0x1) returned 0x0 [0063.085] GdipSetStringFormatHotkeyPrefix (format=0x1beb1670, hotkeyPrefix=2) returned 0x0 [0063.085] GdipSetStringFormatAlign (format=0x1beb1670, align=0x1) returned 0x0 [0063.085] GdipSetStringFormatLineAlign (format=0x1beb1670, align=0x1) returned 0x0 [0063.085] GdipMeasureString (graphics=0x1beb7860, string="+", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb1670, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0063.085] GdipDeleteStringFormat (format=0x1beb1670) returned 0x0 [0063.085] GdipDeleteGraphics (graphics=0x1beb7860) returned 0x0 [0063.085] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.085] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0063.086] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.087] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0063.087] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.087] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0063.087] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0063.087] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0063.087] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0063.087] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d650) returned 0x0 [0063.088] LocalFree (hMem=0x1d92d650) returned 0x0 [0063.088] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0063.088] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0063.088] LocalFree (hMem=0x1d92cf10) returned 0x0 [0063.089] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0063.089] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0063.089] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0063.089] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0063.089] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.089] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0063.089] GetCurrentObject (hdc=0xffffffff9f0105ed, type=0x1) returned 0x1b00017 [0063.089] GetCurrentObject (hdc=0xffffffff9f0105ed, type=0x2) returned 0x1900010 [0063.089] GetCurrentObject (hdc=0xffffffff9f0105ed, type=0x7) returned 0x160506a9 [0063.089] GetCurrentObject (hdc=0xffffffff9f0105ed, type=0x6) returned 0x18a0048 [0063.089] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6f04095c [0063.089] DeleteObject (ho=0x6f04095c) returned 1 [0063.089] DeleteObject (ho=0x300406c7) returned 1 [0063.089] OffsetViewportOrgEx (in: hdc=0xffffffff9f0105ed, x=0, y=0, lppt=0x2286470 | out: lppt=0x2286470) returned 1 [0063.089] GetNearestColor (hdc=0xffffffff9f0105ed, color=0xf0f0f0) returned 0xf0f0f0 [0063.089] CreateSolidBrush (color=0xf0f0f0) returned 0x2e100559 [0063.089] FillRect (hDC=0xffffffff9f0105ed, lprc=0x14e1c8, hbr=0x2e100559) returned 1 [0063.089] DeleteObject (ho=0x2e100559) returned 1 [0063.089] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff9f0105ed) returned 0x0 [0063.090] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.090] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0063.090] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.090] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2286570) returned 0x0 [0063.090] GdipSetStringFormatAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0063.090] GdipSetStringFormatLineAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0063.090] GdipSetStringFormatHotkeyPrefix (format=0x1beb6ec0, hotkeyPrefix=2) returned 0x0 [0063.090] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0063.090] GdipDrawString (graphics=0x1beb67f0, string="+", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb6ec0, brush=0x1beb15e0) returned 0x0 [0063.094] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0063.094] GdipDeleteStringFormat (format=0x1beb6ec0) returned 0x0 [0063.094] GetFocus () returned 0x302de [0063.094] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.094] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExV(\x02", lpUsedDefaultChar=0x0) returned 17 [0063.095] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.095] GdipCreateRegion (region=0x14e030) returned 0x0 [0063.095] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.095] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0063.095] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0063.095] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0063.095] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92ccd0 [0063.095] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92ccd0) returned 0x0 [0063.095] LocalFree (hMem=0x1d92ccd0) returned 0x0 [0063.096] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d050 [0063.096] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d050) returned 0x0 [0063.096] LocalFree (hMem=0x1d92d050) returned 0x0 [0063.096] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0063.096] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0063.096] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0063.096] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0063.096] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.096] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0063.096] GetCurrentObject (hdc=0xffffffff9f0105ed, type=0x1) returned 0x1b00017 [0063.096] GetCurrentObject (hdc=0xffffffff9f0105ed, type=0x2) returned 0x1900010 [0063.096] GetCurrentObject (hdc=0xffffffff9f0105ed, type=0x7) returned 0x160506a9 [0063.097] GetCurrentObject (hdc=0xffffffff9f0105ed, type=0x6) returned 0x18a0048 [0063.097] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x310406c7 [0063.097] DeleteObject (ho=0x310406c7) returned 1 [0063.097] DeleteObject (ho=0x7004095c) returned 1 [0063.097] OffsetViewportOrgEx (in: hdc=0xffffffff9f0105ed, x=0, y=0, lppt=0x2286958 | out: lppt=0x2286958) returned 1 [0063.097] GetROP2 (hdc=0xffffffff9f0105ed) returned 13 [0063.097] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x573009bc [0063.097] MoveToEx (in: hdc=0xffffffff9f0105ed, x=25, y=0, lppt=0x22869c0 | out: lppt=0x22869c0) returned 1 [0063.097] LineTo (hdc=0xffffffff9f0105ed, x=0, y=0) returned 1 [0063.097] MoveToEx (in: hdc=0xffffffff9f0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.097] GetROP2 (hdc=0xffffffff9f0105ed) returned 13 [0063.097] MoveToEx (in: hdc=0xffffffff9f0105ed, x=0, y=0, lppt=0x22869d8 | out: lppt=0x22869d8) returned 1 [0063.097] LineTo (hdc=0xffffffff9f0105ed, x=0, y=22) returned 1 [0063.097] MoveToEx (in: hdc=0xffffffff9f0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.097] DeleteObject (ho=0x573009bc) returned 1 [0063.097] GetROP2 (hdc=0xffffffff9f0105ed) returned 13 [0063.097] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x34300679 [0063.097] MoveToEx (in: hdc=0xffffffff9f0105ed, x=0, y=22, lppt=0x2286a40 | out: lppt=0x2286a40) returned 1 [0063.097] LineTo (hdc=0xffffffff9f0105ed, x=25, y=22) returned 1 [0063.097] MoveToEx (in: hdc=0xffffffff9f0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.097] GetROP2 (hdc=0xffffffff9f0105ed) returned 13 [0063.098] MoveToEx (in: hdc=0xffffffff9f0105ed, x=25, y=22, lppt=0x2286a58 | out: lppt=0x2286a58) returned 1 [0063.098] LineTo (hdc=0xffffffff9f0105ed, x=25, y=-1) returned 1 [0063.098] MoveToEx (in: hdc=0xffffffff9f0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.098] DeleteObject (ho=0x34300679) returned 1 [0063.098] GetROP2 (hdc=0xffffffff9f0105ed) returned 13 [0063.098] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x583009bc [0063.098] MoveToEx (in: hdc=0xffffffff9f0105ed, x=24, y=1, lppt=0x2286ac0 | out: lppt=0x2286ac0) returned 1 [0063.098] LineTo (hdc=0xffffffff9f0105ed, x=1, y=1) returned 1 [0063.098] MoveToEx (in: hdc=0xffffffff9f0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.098] GetROP2 (hdc=0xffffffff9f0105ed) returned 13 [0063.098] MoveToEx (in: hdc=0xffffffff9f0105ed, x=1, y=1, lppt=0x2286ad8 | out: lppt=0x2286ad8) returned 1 [0063.098] LineTo (hdc=0xffffffff9f0105ed, x=1, y=21) returned 1 [0063.098] MoveToEx (in: hdc=0xffffffff9f0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.099] DeleteObject (ho=0x583009bc) returned 1 [0063.099] GetROP2 (hdc=0xffffffff9f0105ed) returned 13 [0063.099] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x35300679 [0063.099] MoveToEx (in: hdc=0xffffffff9f0105ed, x=1, y=21, lppt=0x2286b40 | out: lppt=0x2286b40) returned 1 [0063.099] LineTo (hdc=0xffffffff9f0105ed, x=24, y=21) returned 1 [0063.099] MoveToEx (in: hdc=0xffffffff9f0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.099] GetROP2 (hdc=0xffffffff9f0105ed) returned 13 [0063.099] MoveToEx (in: hdc=0xffffffff9f0105ed, x=24, y=21, lppt=0x2286b58 | out: lppt=0x2286b58) returned 1 [0063.099] LineTo (hdc=0xffffffff9f0105ed, x=24, y=0) returned 1 [0063.099] MoveToEx (in: hdc=0xffffffff9f0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.099] DeleteObject (ho=0x35300679) returned 1 [0063.099] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff9f0105ed) returned 0x0 [0063.099] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0063.099] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff9f0105ed) returned 0x0 [0063.099] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0063.099] DeleteDC (hdc=0xffffffff9f0105ed) returned 1 [0063.099] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0063.100] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x86, wParam=0x1, lParam=0x0) [0063.102] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0063.102] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0063.102] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0063.105] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x46, wParam=0x0, lParam=0x14ed60) returned 0x0 [0063.105] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x602d0, Msg=0x46, wParam=0x0, lParam=0x14ed60) returned 0x0 [0063.106] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0063.106] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x14, wParam=0x220106d6, lParam=0x0) [0063.106] GetStockObject (i=5) returned 0x1900015 [0063.106] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0063.106] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) [0063.107] GetStockObject (i=5) returned 0x1900015 [0063.107] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0063.107] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x14, wParam=0xc0100ae, lParam=0x0) [0063.107] GetStockObject (i=5) returned 0x1900015 [0063.107] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0063.107] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x14, wParam=0x220106d6, lParam=0x0) [0063.107] GetStockObject (i=5) returned 0x1900015 [0063.107] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0063.107] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) [0063.108] GetStockObject (i=5) returned 0x1900015 [0063.108] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0063.108] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x14, wParam=0xc0100ae, lParam=0x0) [0063.108] GetStockObject (i=5) returned 0x1900015 [0063.108] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0063.108] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x14, wParam=0x220106d6, lParam=0x0) [0063.108] GetStockObject (i=5) returned 0x1900015 [0063.108] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0063.109] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) [0063.109] GetStockObject (i=5) returned 0x1900015 [0063.109] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0063.109] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x14, wParam=0xc0100ae, lParam=0x0) [0063.109] GetStockObject (i=5) returned 0x1900015 [0063.109] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0063.109] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x14, wParam=0x220106d6, lParam=0x0) [0063.110] SetTextColor (hdc=0x220106d6, color=0x0) returned 0x0 [0063.110] GetWindowPlacement (in: hWnd=0x70020, lpwndpl=0x14e908 | out: lpwndpl=0x14e908) returned 1 [0063.110] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x47, wParam=0x0, lParam=0x14ed60) returned 0x0 [0063.110] GetClientRect (in: hWnd=0x70020, lpRect=0x14e7a0 | out: lpRect=0x14e7a0) returned 1 [0063.110] GetWindowRect (in: hWnd=0x70020, lpRect=0x14e7a0 | out: lpRect=0x14e7a0) returned 1 [0063.111] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0063.111] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0063.111] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0063.111] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x602d0, Msg=0x47, wParam=0x0, lParam=0x14ed60) returned 0x0 [0063.115] GetKeyState (nVirtKey=16) returned 0 [0063.115] GetKeyState (nVirtKey=17) returned 0 [0063.115] GetKeyState (nVirtKey=18) returned -127 [0063.116] TranslateMessage (lpMsg=0x14ef10) returned 1 [0063.118] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0063.121] GetKeyState (nVirtKey=16) returned 0 [0063.121] GetKeyState (nVirtKey=17) returned 0 [0063.121] GetKeyState (nVirtKey=18) returned -127 [0063.121] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0063.122] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.122] IsWindowUnicode (hWnd=0x302de) returned 1 [0063.122] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.122] GetKeyState (nVirtKey=16) returned 0 [0063.122] GetKeyState (nVirtKey=17) returned 0 [0063.122] GetKeyState (nVirtKey=18) returned 1 [0063.122] TranslateMessage (lpMsg=0x14ef10) returned 1 [0063.122] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0063.122] GetKeyState (nVirtKey=16) returned 0 [0063.122] GetKeyState (nVirtKey=17) returned 0 [0063.122] GetKeyState (nVirtKey=18) returned 1 [0063.122] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0063.123] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.123] IsWindowUnicode (hWnd=0x30326) returned 1 [0063.123] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.123] TranslateMessage (lpMsg=0x14ef10) returned 0 [0063.123] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0063.123] BeginPaint (in: hWnd=0x30326, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0063.123] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0063.123] CreateCompatibleDC (hdc=0x220106d6) returned 0xffffffffba0105ed [0063.123] SelectObject (hdc=0xffffffffba0105ed, h=0x160506a9) returned 0x185000f [0063.123] GdipCreateFromHDC (hdc=0xffffffffba0105ed, graphics=0x14e528) returned 0x0 [0063.123] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0063.123] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0063.123] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0063.123] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0063.123] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0063.124] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d950 [0063.124] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d950) returned 0x0 [0063.124] LocalFree (hMem=0x1d92d950) returned 0x0 [0063.124] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0063.124] GdipCreateRegion (region=0x14e550) returned 0x0 [0063.124] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.124] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0063.124] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0063.124] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd930dbd) returned 0x0 [0063.125] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.125] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0063.125] GetCurrentObject (hdc=0xffffffffba0105ed, type=0x1) returned 0x1b00017 [0063.125] GetCurrentObject (hdc=0xffffffffba0105ed, type=0x2) returned 0x1900010 [0063.125] GetCurrentObject (hdc=0xffffffffba0105ed, type=0x7) returned 0x160506a9 [0063.125] GetCurrentObject (hdc=0xffffffffba0105ed, type=0x6) returned 0x18a0048 [0063.125] SaveDC (hdc=0xffffffffba0105ed) returned 1 [0063.125] GetNearestColor (hdc=0xffffffffba0105ed, color=0xf0f0f0) returned 0xf0f0f0 [0063.125] GetNearestColor (hdc=0xffffffffba0105ed, color=0xa0a0a0) returned 0xa0a0a0 [0063.125] GetNearestColor (hdc=0xffffffffba0105ed, color=0x696969) returned 0x696969 [0063.125] GetNearestColor (hdc=0xffffffffba0105ed, color=0xa0a0a0) returned 0xa0a0a0 [0063.125] GetNearestColor (hdc=0xffffffffba0105ed, color=0x0) returned 0x0 [0063.125] GetNearestColor (hdc=0xffffffffba0105ed, color=0xffffff) returned 0xffffff [0063.125] GetNearestColor (hdc=0xffffffffba0105ed, color=0xe5e5e5) returned 0xe5e5e5 [0063.125] GetNearestColor (hdc=0xffffffffba0105ed, color=0xd8d8d8) returned 0xd8d8d8 [0063.125] GetNearestColor (hdc=0xffffffffba0105ed, color=0x0) returned 0x0 [0063.125] RestoreDC (hdc=0xffffffffba0105ed, nSavedDC=-1) returned 1 [0063.125] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffffba0105ed) returned 0x0 [0063.126] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExn(\x02", lpUsedDefaultChar=0x0) returned 17 [0063.126] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.126] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22874c0) returned 0x0 [0063.126] GdipSetStringFormatAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0063.126] GdipSetStringFormatLineAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0063.126] GdipSetStringFormatHotkeyPrefix (format=0x1beb6ec0, hotkeyPrefix=2) returned 0x0 [0063.126] GdipGetStringFormatFlags (format=0x1beb6ec0, flags=0x14e378) returned 0x0 [0063.126] GdipGetStringFormatTrimming (format=0x1beb6ec0, trimming=0x14e378) returned 0x0 [0063.126] GdipGetStringFormatHotkeyPrefix (format=0x1beb6ec0, hotkeyPrefix=0x14e378) returned 0x0 [0063.126] GdipGetFontSize (font=0x1beb6ec0, size=0x14e378) returned 0x0 [0063.126] GdipGetFontStyle (font=0x1beb6ec0, style=0x14e378) returned 0x0 [0063.126] GdipDeleteStringFormat (format=0x1beb6ec0) returned 0x0 [0063.127] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0063.127] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.127] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0063.127] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22875f0) returned 0x0 [0063.127] GdipSetStringFormatFlags (format=0x1beb6ec0, flags=0) returned 0x0 [0063.127] GdipSetStringFormatTrimming (format=0x1beb6ec0, trimming=0x1) returned 0x0 [0063.127] GdipSetStringFormatHotkeyPrefix (format=0x1beb6ec0, hotkeyPrefix=2) returned 0x0 [0063.127] GdipSetStringFormatAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0063.127] GdipSetStringFormatLineAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0063.127] GdipMeasureString (graphics=0x1beb7860, string="7", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb6ec0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0063.127] GdipDeleteStringFormat (format=0x1beb6ec0) returned 0x0 [0063.127] GdipDeleteGraphics (graphics=0x1beb7860) returned 0x0 [0063.127] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0063.128] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.128] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0063.128] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.128] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0063.128] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0063.128] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0063.128] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0063.128] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d650) returned 0x0 [0063.129] LocalFree (hMem=0x1d92d650) returned 0x0 [0063.129] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d350 [0063.129] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d350) returned 0x0 [0063.129] LocalFree (hMem=0x1d92d350) returned 0x0 [0063.130] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0063.131] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0063.131] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0063.131] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0063.131] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.131] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0063.131] GetCurrentObject (hdc=0xffffffffba0105ed, type=0x1) returned 0x1b00017 [0063.131] GetCurrentObject (hdc=0xffffffffba0105ed, type=0x2) returned 0x1900010 [0063.131] GetCurrentObject (hdc=0xffffffffba0105ed, type=0x7) returned 0x160506a9 [0063.131] GetCurrentObject (hdc=0xffffffffba0105ed, type=0x6) returned 0x18a0048 [0063.131] SaveDC (hdc=0xffffffffba0105ed) returned 1 [0063.131] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7104095c [0063.131] GetClipRgn (hdc=0xffffffffba0105ed, hrgn=0x7104095c) returned 0 [0063.131] SelectClipRgn (hdc=0xffffffffba0105ed, hrgn=0x320406c7) returned 2 [0063.131] DeleteObject (ho=0x7104095c) returned 1 [0063.131] DeleteObject (ho=0x320406c7) returned 1 [0063.131] OffsetViewportOrgEx (in: hdc=0xffffffffba0105ed, x=0, y=0, lppt=0x22879b0 | out: lppt=0x22879b0) returned 1 [0063.131] GetNearestColor (hdc=0xffffffffba0105ed, color=0xf0f0f0) returned 0xf0f0f0 [0063.131] CreateSolidBrush (color=0xf0f0f0) returned 0x2f100559 [0063.131] FillRect (hDC=0xffffffffba0105ed, lprc=0x14e1c8, hbr=0x2f100559) returned 1 [0063.131] DeleteObject (ho=0x2f100559) returned 1 [0063.131] RestoreDC (hdc=0xffffffffba0105ed, nSavedDC=-1) returned 1 [0063.132] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffffba0105ed) returned 0x0 [0063.132] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0063.132] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.132] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2287ab0) returned 0x0 [0063.132] GdipSetStringFormatAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0063.132] GdipSetStringFormatLineAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0063.132] GdipSetStringFormatHotkeyPrefix (format=0x1beb15e0, hotkeyPrefix=2) returned 0x0 [0063.132] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0063.132] GdipDrawString (graphics=0x1beb67f0, string="7", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb15e0, brush=0x1beb1650) returned 0x0 [0063.136] GdipDeleteBrush (brush=0x1beb1650) returned 0x0 [0063.136] GdipDeleteStringFormat (format=0x1beb15e0) returned 0x0 [0063.136] GetFocus () returned 0x302de [0063.136] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExk(\x02", lpUsedDefaultChar=0x0) returned 17 [0063.136] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.136] GdipCreateRegion (region=0x14e030) returned 0x0 [0063.136] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.136] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0063.136] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0063.136] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0063.136] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d510 [0063.136] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d510) returned 0x0 [0063.137] LocalFree (hMem=0x1d92d510) returned 0x0 [0063.137] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d350 [0063.137] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d350) returned 0x0 [0063.138] LocalFree (hMem=0x1d92d350) returned 0x0 [0063.138] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0063.138] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0063.138] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0063.138] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0063.138] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.138] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0063.138] GetCurrentObject (hdc=0xffffffffba0105ed, type=0x1) returned 0x1b00017 [0063.138] GetCurrentObject (hdc=0xffffffffba0105ed, type=0x2) returned 0x1900010 [0063.138] GetCurrentObject (hdc=0xffffffffba0105ed, type=0x7) returned 0x160506a9 [0063.138] GetCurrentObject (hdc=0xffffffffba0105ed, type=0x6) returned 0x18a0048 [0063.138] SaveDC (hdc=0xffffffffba0105ed) returned 1 [0063.138] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x330406c7 [0063.138] GetClipRgn (hdc=0xffffffffba0105ed, hrgn=0x330406c7) returned 0 [0063.138] SelectClipRgn (hdc=0xffffffffba0105ed, hrgn=0x7204095c) returned 2 [0063.139] DeleteObject (ho=0x330406c7) returned 1 [0063.139] DeleteObject (ho=0x7204095c) returned 1 [0063.139] OffsetViewportOrgEx (in: hdc=0xffffffffba0105ed, x=0, y=0, lppt=0x2287e98 | out: lppt=0x2287e98) returned 1 [0063.139] GetROP2 (hdc=0xffffffffba0105ed) returned 13 [0063.139] GetBkMode (hdc=0xffffffffba0105ed) returned 2 [0063.139] SetBkMode (hdc=0xffffffffba0105ed, mode=1) returned 2 [0063.139] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x36300679 [0063.139] SelectObject (hdc=0xffffffffba0105ed, h=0x36300679) returned 0x1b00017 [0063.139] MoveToEx (in: hdc=0xffffffffba0105ed, x=25, y=0, lppt=0x2287f00 | out: lppt=0x2287f00) returned 1 [0063.139] LineTo (hdc=0xffffffffba0105ed, x=0, y=0) returned 1 [0063.139] SetBkMode (hdc=0xffffffffba0105ed, mode=2) returned 1 [0063.139] MoveToEx (in: hdc=0xffffffffba0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.139] GetROP2 (hdc=0xffffffffba0105ed) returned 13 [0063.139] GetBkMode (hdc=0xffffffffba0105ed) returned 2 [0063.139] SetBkMode (hdc=0xffffffffba0105ed, mode=1) returned 2 [0063.139] SelectObject (hdc=0xffffffffba0105ed, h=0x36300679) returned 0x36300679 [0063.139] MoveToEx (in: hdc=0xffffffffba0105ed, x=0, y=0, lppt=0x2287f18 | out: lppt=0x2287f18) returned 1 [0063.139] LineTo (hdc=0xffffffffba0105ed, x=0, y=22) returned 1 [0063.139] SetBkMode (hdc=0xffffffffba0105ed, mode=2) returned 1 [0063.139] MoveToEx (in: hdc=0xffffffffba0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.139] SelectObject (hdc=0xffffffffba0105ed, h=0x1b00017) returned 0x36300679 [0063.139] DeleteObject (ho=0x36300679) returned 1 [0063.139] GetROP2 (hdc=0xffffffffba0105ed) returned 13 [0063.139] GetBkMode (hdc=0xffffffffba0105ed) returned 2 [0063.140] SetBkMode (hdc=0xffffffffba0105ed, mode=1) returned 2 [0063.140] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x593009bc [0063.140] SelectObject (hdc=0xffffffffba0105ed, h=0x593009bc) returned 0x1b00017 [0063.140] MoveToEx (in: hdc=0xffffffffba0105ed, x=0, y=22, lppt=0x2287f80 | out: lppt=0x2287f80) returned 1 [0063.140] LineTo (hdc=0xffffffffba0105ed, x=25, y=22) returned 1 [0063.140] SetBkMode (hdc=0xffffffffba0105ed, mode=2) returned 1 [0063.140] MoveToEx (in: hdc=0xffffffffba0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.140] GetROP2 (hdc=0xffffffffba0105ed) returned 13 [0063.140] GetBkMode (hdc=0xffffffffba0105ed) returned 2 [0063.140] SetBkMode (hdc=0xffffffffba0105ed, mode=1) returned 2 [0063.140] SelectObject (hdc=0xffffffffba0105ed, h=0x593009bc) returned 0x593009bc [0063.140] MoveToEx (in: hdc=0xffffffffba0105ed, x=25, y=22, lppt=0x2287f98 | out: lppt=0x2287f98) returned 1 [0063.140] LineTo (hdc=0xffffffffba0105ed, x=25, y=-1) returned 1 [0063.140] SetBkMode (hdc=0xffffffffba0105ed, mode=2) returned 1 [0063.140] MoveToEx (in: hdc=0xffffffffba0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.140] SelectObject (hdc=0xffffffffba0105ed, h=0x1b00017) returned 0x593009bc [0063.140] DeleteObject (ho=0x593009bc) returned 1 [0063.140] GetROP2 (hdc=0xffffffffba0105ed) returned 13 [0063.140] GetBkMode (hdc=0xffffffffba0105ed) returned 2 [0063.141] SetBkMode (hdc=0xffffffffba0105ed, mode=1) returned 2 [0063.141] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x37300679 [0063.141] SelectObject (hdc=0xffffffffba0105ed, h=0x37300679) returned 0x1b00017 [0063.141] MoveToEx (in: hdc=0xffffffffba0105ed, x=24, y=1, lppt=0x2288000 | out: lppt=0x2288000) returned 1 [0063.141] LineTo (hdc=0xffffffffba0105ed, x=1, y=1) returned 1 [0063.141] SetBkMode (hdc=0xffffffffba0105ed, mode=2) returned 1 [0063.141] MoveToEx (in: hdc=0xffffffffba0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.141] GetROP2 (hdc=0xffffffffba0105ed) returned 13 [0063.141] GetBkMode (hdc=0xffffffffba0105ed) returned 2 [0063.141] SetBkMode (hdc=0xffffffffba0105ed, mode=1) returned 2 [0063.141] SelectObject (hdc=0xffffffffba0105ed, h=0x37300679) returned 0x37300679 [0063.141] MoveToEx (in: hdc=0xffffffffba0105ed, x=1, y=1, lppt=0x2288018 | out: lppt=0x2288018) returned 1 [0063.141] LineTo (hdc=0xffffffffba0105ed, x=1, y=21) returned 1 [0063.141] SetBkMode (hdc=0xffffffffba0105ed, mode=2) returned 1 [0063.141] MoveToEx (in: hdc=0xffffffffba0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.141] SelectObject (hdc=0xffffffffba0105ed, h=0x1b00017) returned 0x37300679 [0063.141] DeleteObject (ho=0x37300679) returned 1 [0063.141] GetROP2 (hdc=0xffffffffba0105ed) returned 13 [0063.141] GetBkMode (hdc=0xffffffffba0105ed) returned 2 [0063.141] SetBkMode (hdc=0xffffffffba0105ed, mode=1) returned 2 [0063.141] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x5a3009bc [0063.141] SelectObject (hdc=0xffffffffba0105ed, h=0x5a3009bc) returned 0x1b00017 [0063.141] MoveToEx (in: hdc=0xffffffffba0105ed, x=1, y=21, lppt=0x2288080 | out: lppt=0x2288080) returned 1 [0063.141] LineTo (hdc=0xffffffffba0105ed, x=24, y=21) returned 1 [0063.142] SetBkMode (hdc=0xffffffffba0105ed, mode=2) returned 1 [0063.142] MoveToEx (in: hdc=0xffffffffba0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.142] GetROP2 (hdc=0xffffffffba0105ed) returned 13 [0063.142] GetBkMode (hdc=0xffffffffba0105ed) returned 2 [0063.142] SetBkMode (hdc=0xffffffffba0105ed, mode=1) returned 2 [0063.142] SelectObject (hdc=0xffffffffba0105ed, h=0x5a3009bc) returned 0x5a3009bc [0063.142] MoveToEx (in: hdc=0xffffffffba0105ed, x=24, y=21, lppt=0x2288098 | out: lppt=0x2288098) returned 1 [0063.142] LineTo (hdc=0xffffffffba0105ed, x=24, y=0) returned 1 [0063.142] SetBkMode (hdc=0xffffffffba0105ed, mode=2) returned 1 [0063.142] MoveToEx (in: hdc=0xffffffffba0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.142] SelectObject (hdc=0xffffffffba0105ed, h=0x1b00017) returned 0x5a3009bc [0063.142] DeleteObject (ho=0x5a3009bc) returned 1 [0063.142] RestoreDC (hdc=0xffffffffba0105ed, nSavedDC=-1) returned 1 [0063.142] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffffba0105ed) returned 0x0 [0063.142] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0063.142] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0xffffffffba0105ed, x1=0, y1=0, rop=0xcc0020) returned 1 [0063.143] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffffba0105ed) returned 0x0 [0063.143] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0063.143] SelectObject (hdc=0xffffffffba0105ed, h=0x185000f) returned 0x160506a9 [0063.143] DeleteDC (hdc=0xffffffffba0105ed) returned 1 [0063.143] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0063.143] EndPaint (hWnd=0x30326, lpPaint=0x14e548) returned 1 [0063.143] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.143] IsWindowUnicode (hWnd=0x3032c) returned 1 [0063.143] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.143] TranslateMessage (lpMsg=0x14ef10) returned 0 [0063.143] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0063.143] BeginPaint (in: hWnd=0x3032c, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0063.143] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0063.143] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x300109cc [0063.143] SelectObject (hdc=0x300109cc, h=0x160506a9) returned 0x185000f [0063.144] GdipCreateFromHDC (hdc=0x300109cc, graphics=0x14e528) returned 0x0 [0063.144] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0063.144] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0063.144] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0063.144] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0063.144] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0063.144] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92ccd0 [0063.144] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92ccd0) returned 0x0 [0063.145] LocalFree (hMem=0x1d92ccd0) returned 0x0 [0063.145] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0063.145] GdipCreateRegion (region=0x14e550) returned 0x0 [0063.145] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.145] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0063.145] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0063.145] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd900dbd) returned 0x0 [0063.146] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.146] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0063.146] GetCurrentObject (hdc=0x300109cc, type=0x1) returned 0x1b00017 [0063.146] GetCurrentObject (hdc=0x300109cc, type=0x2) returned 0x1900010 [0063.146] GetCurrentObject (hdc=0x300109cc, type=0x7) returned 0x160506a9 [0063.146] GetCurrentObject (hdc=0x300109cc, type=0x6) returned 0x18a0048 [0063.146] SaveDC (hdc=0x300109cc) returned 1 [0063.146] GetNearestColor (hdc=0x300109cc, color=0xf0f0f0) returned 0xf0f0f0 [0063.146] GetNearestColor (hdc=0x300109cc, color=0xa0a0a0) returned 0xa0a0a0 [0063.146] GetNearestColor (hdc=0x300109cc, color=0x696969) returned 0x696969 [0063.146] GetNearestColor (hdc=0x300109cc, color=0xa0a0a0) returned 0xa0a0a0 [0063.146] GetNearestColor (hdc=0x300109cc, color=0x0) returned 0x0 [0063.146] GetNearestColor (hdc=0x300109cc, color=0xffffff) returned 0xffffff [0063.146] GetNearestColor (hdc=0x300109cc, color=0xe5e5e5) returned 0xe5e5e5 [0063.146] GetNearestColor (hdc=0x300109cc, color=0xd8d8d8) returned 0xd8d8d8 [0063.146] GetNearestColor (hdc=0x300109cc, color=0x0) returned 0x0 [0063.146] RestoreDC (hdc=0x300109cc, nSavedDC=-1) returned 1 [0063.146] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x300109cc) returned 0x0 [0063.147] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.147] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x83(\x02", lpUsedDefaultChar=0x0) returned 17 [0063.147] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.147] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22889d0) returned 0x0 [0063.147] GdipSetStringFormatAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0063.147] GdipSetStringFormatLineAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0063.147] GdipSetStringFormatHotkeyPrefix (format=0x1beb15e0, hotkeyPrefix=2) returned 0x0 [0063.147] GdipGetStringFormatFlags (format=0x1beb15e0, flags=0x14e378) returned 0x0 [0063.147] GdipGetStringFormatTrimming (format=0x1beb15e0, trimming=0x14e378) returned 0x0 [0063.147] GdipGetStringFormatHotkeyPrefix (format=0x1beb15e0, hotkeyPrefix=0x14e378) returned 0x0 [0063.147] GdipGetFontSize (font=0x1beb15e0, size=0x14e378) returned 0x0 [0063.147] GdipGetFontStyle (font=0x1beb15e0, style=0x14e378) returned 0x0 [0063.147] GdipDeleteStringFormat (format=0x1beb15e0) returned 0x0 [0063.147] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.148] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0063.148] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.148] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0063.148] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2288b00) returned 0x0 [0063.148] GdipSetStringFormatFlags (format=0x1beb1670, flags=0) returned 0x0 [0063.148] GdipSetStringFormatTrimming (format=0x1beb1670, trimming=0x1) returned 0x0 [0063.148] GdipSetStringFormatHotkeyPrefix (format=0x1beb1670, hotkeyPrefix=2) returned 0x0 [0063.148] GdipSetStringFormatAlign (format=0x1beb1670, align=0x1) returned 0x0 [0063.148] GdipSetStringFormatLineAlign (format=0x1beb1670, align=0x1) returned 0x0 [0063.148] GdipMeasureString (graphics=0x1beb7860, string="0", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb1670, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0063.148] GdipDeleteStringFormat (format=0x1beb1670) returned 0x0 [0063.148] GdipDeleteGraphics (graphics=0x1beb7860) returned 0x0 [0063.148] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.149] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0063.149] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.149] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0063.149] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.149] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0063.149] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0063.149] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0063.149] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d410 [0063.149] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d410) returned 0x0 [0063.150] LocalFree (hMem=0x1d92d410) returned 0x0 [0063.150] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0063.150] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d650) returned 0x0 [0063.150] LocalFree (hMem=0x1d92d650) returned 0x0 [0063.150] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0063.150] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0063.150] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0063.150] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0063.151] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.151] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0063.151] GetCurrentObject (hdc=0x300109cc, type=0x1) returned 0x1b00017 [0063.151] GetCurrentObject (hdc=0x300109cc, type=0x2) returned 0x1900010 [0063.151] GetCurrentObject (hdc=0x300109cc, type=0x7) returned 0x160506a9 [0063.151] GetCurrentObject (hdc=0x300109cc, type=0x6) returned 0x18a0048 [0063.151] SaveDC (hdc=0x300109cc) returned 1 [0063.151] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7304095c [0063.151] GetClipRgn (hdc=0x300109cc, hrgn=0x7304095c) returned 0 [0063.151] SelectClipRgn (hdc=0x300109cc, hrgn=0x340406c7) returned 2 [0063.151] DeleteObject (ho=0x7304095c) returned 1 [0063.151] DeleteObject (ho=0x340406c7) returned 1 [0063.151] OffsetViewportOrgEx (in: hdc=0x300109cc, x=0, y=0, lppt=0x2288ec0 | out: lppt=0x2288ec0) returned 1 [0063.151] GetNearestColor (hdc=0x300109cc, color=0xf0f0f0) returned 0xf0f0f0 [0063.151] CreateSolidBrush (color=0xf0f0f0) returned 0x30100559 [0063.151] FillRect (hDC=0x300109cc, lprc=0x14e1c8, hbr=0x30100559) returned 1 [0063.151] DeleteObject (ho=0x30100559) returned 1 [0063.151] RestoreDC (hdc=0x300109cc, nSavedDC=-1) returned 1 [0063.151] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x300109cc) returned 0x0 [0063.152] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.152] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0063.152] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.152] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2288fc0) returned 0x0 [0063.152] GdipSetStringFormatAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0063.152] GdipSetStringFormatLineAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0063.152] GdipSetStringFormatHotkeyPrefix (format=0x1beb6ec0, hotkeyPrefix=2) returned 0x0 [0063.152] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0063.152] GdipDrawString (graphics=0x1beb67f0, string="0", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb6ec0, brush=0x1beb15e0) returned 0x0 [0063.156] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0063.156] GdipDeleteStringFormat (format=0x1beb6ec0) returned 0x0 [0063.156] GetFocus () returned 0x302de [0063.156] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x80(\x02", lpUsedDefaultChar=0x0) returned 17 [0063.156] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.156] GdipCreateRegion (region=0x14e030) returned 0x0 [0063.156] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.156] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0063.156] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0063.156] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0063.156] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cbd0 [0063.157] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cbd0) returned 0x0 [0063.157] LocalFree (hMem=0x1d92cbd0) returned 0x0 [0063.157] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cbd0 [0063.157] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cbd0) returned 0x0 [0063.158] LocalFree (hMem=0x1d92cbd0) returned 0x0 [0063.158] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0063.158] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0063.158] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0063.158] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0063.158] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.158] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0063.158] GetCurrentObject (hdc=0x300109cc, type=0x1) returned 0x1b00017 [0063.158] GetCurrentObject (hdc=0x300109cc, type=0x2) returned 0x1900010 [0063.158] GetCurrentObject (hdc=0x300109cc, type=0x7) returned 0x160506a9 [0063.158] GetCurrentObject (hdc=0x300109cc, type=0x6) returned 0x18a0048 [0063.158] SaveDC (hdc=0x300109cc) returned 1 [0063.158] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x350406c7 [0063.158] GetClipRgn (hdc=0x300109cc, hrgn=0x350406c7) returned 0 [0063.158] SelectClipRgn (hdc=0x300109cc, hrgn=0x7404095c) returned 2 [0063.158] DeleteObject (ho=0x350406c7) returned 1 [0063.159] DeleteObject (ho=0x7404095c) returned 1 [0063.159] OffsetViewportOrgEx (in: hdc=0x300109cc, x=0, y=0, lppt=0x22893a8 | out: lppt=0x22893a8) returned 1 [0063.159] GetROP2 (hdc=0x300109cc) returned 13 [0063.159] GetBkMode (hdc=0x300109cc) returned 2 [0063.159] SetBkMode (hdc=0x300109cc, mode=1) returned 2 [0063.159] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x5b3009bc [0063.159] SelectObject (hdc=0x300109cc, h=0x5b3009bc) returned 0x1b00017 [0063.159] MoveToEx (in: hdc=0x300109cc, x=25, y=0, lppt=0x2289410 | out: lppt=0x2289410) returned 1 [0063.159] LineTo (hdc=0x300109cc, x=0, y=0) returned 1 [0063.159] SetBkMode (hdc=0x300109cc, mode=2) returned 1 [0063.159] MoveToEx (in: hdc=0x300109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.159] GetROP2 (hdc=0x300109cc) returned 13 [0063.159] GetBkMode (hdc=0x300109cc) returned 2 [0063.159] SetBkMode (hdc=0x300109cc, mode=1) returned 2 [0063.159] SelectObject (hdc=0x300109cc, h=0x5b3009bc) returned 0x5b3009bc [0063.159] MoveToEx (in: hdc=0x300109cc, x=0, y=0, lppt=0x2289428 | out: lppt=0x2289428) returned 1 [0063.159] LineTo (hdc=0x300109cc, x=0, y=22) returned 1 [0063.159] SetBkMode (hdc=0x300109cc, mode=2) returned 1 [0063.159] MoveToEx (in: hdc=0x300109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.159] SelectObject (hdc=0x300109cc, h=0x1b00017) returned 0x5b3009bc [0063.159] DeleteObject (ho=0x5b3009bc) returned 1 [0063.159] GetROP2 (hdc=0x300109cc) returned 13 [0063.159] GetBkMode (hdc=0x300109cc) returned 2 [0063.160] SetBkMode (hdc=0x300109cc, mode=1) returned 2 [0063.160] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x38300679 [0063.160] SelectObject (hdc=0x300109cc, h=0x38300679) returned 0x1b00017 [0063.160] MoveToEx (in: hdc=0x300109cc, x=0, y=22, lppt=0x2289490 | out: lppt=0x2289490) returned 1 [0063.160] LineTo (hdc=0x300109cc, x=25, y=22) returned 1 [0063.160] SetBkMode (hdc=0x300109cc, mode=2) returned 1 [0063.160] MoveToEx (in: hdc=0x300109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.160] GetROP2 (hdc=0x300109cc) returned 13 [0063.160] GetBkMode (hdc=0x300109cc) returned 2 [0063.160] SetBkMode (hdc=0x300109cc, mode=1) returned 2 [0063.160] SelectObject (hdc=0x300109cc, h=0x38300679) returned 0x38300679 [0063.160] MoveToEx (in: hdc=0x300109cc, x=25, y=22, lppt=0x22894a8 | out: lppt=0x22894a8) returned 1 [0063.160] LineTo (hdc=0x300109cc, x=25, y=-1) returned 1 [0063.160] SetBkMode (hdc=0x300109cc, mode=2) returned 1 [0063.160] MoveToEx (in: hdc=0x300109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.160] SelectObject (hdc=0x300109cc, h=0x1b00017) returned 0x38300679 [0063.160] DeleteObject (ho=0x38300679) returned 1 [0063.160] GetROP2 (hdc=0x300109cc) returned 13 [0063.160] GetBkMode (hdc=0x300109cc) returned 2 [0063.160] SetBkMode (hdc=0x300109cc, mode=1) returned 2 [0063.160] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x5c3009bc [0063.160] SelectObject (hdc=0x300109cc, h=0x5c3009bc) returned 0x1b00017 [0063.160] MoveToEx (in: hdc=0x300109cc, x=24, y=1, lppt=0x2289510 | out: lppt=0x2289510) returned 1 [0063.162] LineTo (hdc=0x300109cc, x=1, y=1) returned 1 [0063.162] SetBkMode (hdc=0x300109cc, mode=2) returned 1 [0063.162] MoveToEx (in: hdc=0x300109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.162] GetROP2 (hdc=0x300109cc) returned 13 [0063.162] GetBkMode (hdc=0x300109cc) returned 2 [0063.162] SetBkMode (hdc=0x300109cc, mode=1) returned 2 [0063.162] SelectObject (hdc=0x300109cc, h=0x5c3009bc) returned 0x5c3009bc [0063.163] MoveToEx (in: hdc=0x300109cc, x=1, y=1, lppt=0x2289528 | out: lppt=0x2289528) returned 1 [0063.163] LineTo (hdc=0x300109cc, x=1, y=21) returned 1 [0063.163] SetBkMode (hdc=0x300109cc, mode=2) returned 1 [0063.163] MoveToEx (in: hdc=0x300109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.163] SelectObject (hdc=0x300109cc, h=0x1b00017) returned 0x5c3009bc [0063.163] DeleteObject (ho=0x5c3009bc) returned 1 [0063.163] GetROP2 (hdc=0x300109cc) returned 13 [0063.163] GetBkMode (hdc=0x300109cc) returned 2 [0063.163] SetBkMode (hdc=0x300109cc, mode=1) returned 2 [0063.163] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x39300679 [0063.163] SelectObject (hdc=0x300109cc, h=0x39300679) returned 0x1b00017 [0063.163] MoveToEx (in: hdc=0x300109cc, x=1, y=21, lppt=0x2289590 | out: lppt=0x2289590) returned 1 [0063.163] LineTo (hdc=0x300109cc, x=24, y=21) returned 1 [0063.163] SetBkMode (hdc=0x300109cc, mode=2) returned 1 [0063.163] MoveToEx (in: hdc=0x300109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.163] GetROP2 (hdc=0x300109cc) returned 13 [0063.163] GetBkMode (hdc=0x300109cc) returned 2 [0063.163] SetBkMode (hdc=0x300109cc, mode=1) returned 2 [0063.163] SelectObject (hdc=0x300109cc, h=0x39300679) returned 0x39300679 [0063.163] MoveToEx (in: hdc=0x300109cc, x=24, y=21, lppt=0x22895a8 | out: lppt=0x22895a8) returned 1 [0063.163] LineTo (hdc=0x300109cc, x=24, y=0) returned 1 [0063.163] SetBkMode (hdc=0x300109cc, mode=2) returned 1 [0063.163] MoveToEx (in: hdc=0x300109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.163] SelectObject (hdc=0x300109cc, h=0x1b00017) returned 0x39300679 [0063.164] DeleteObject (ho=0x39300679) returned 1 [0063.164] RestoreDC (hdc=0x300109cc, nSavedDC=-1) returned 1 [0063.164] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x300109cc) returned 0x0 [0063.164] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0063.164] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x300109cc, x1=0, y1=0, rop=0xcc0020) returned 1 [0063.164] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x300109cc) returned 0x0 [0063.164] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0063.164] SelectObject (hdc=0x300109cc, h=0x185000f) returned 0x160506a9 [0063.164] DeleteDC (hdc=0x300109cc) returned 1 [0063.164] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0063.164] EndPaint (hWnd=0x3032c, lpPaint=0x14e548) returned 1 [0063.165] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.165] IsWindowUnicode (hWnd=0x30320) returned 1 [0063.165] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.165] TranslateMessage (lpMsg=0x14ef10) returned 0 [0063.165] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0063.165] BeginPaint (in: hWnd=0x30320, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0063.165] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0063.165] CreateCompatibleDC (hdc=0xc0100ae) returned 0x4d01099d [0063.165] SelectObject (hdc=0x4d01099d, h=0x160506a9) returned 0x185000f [0063.165] GdipCreateFromHDC (hdc=0x4d01099d, graphics=0x14e528) returned 0x0 [0063.165] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0063.165] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0063.165] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0063.165] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0063.165] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0063.165] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0063.166] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0063.166] LocalFree (hMem=0x1d92cf10) returned 0x0 [0063.166] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0063.166] GdipCreateRegion (region=0x14e550) returned 0x0 [0063.166] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.166] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0063.166] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0063.166] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd8d0dbd) returned 0x0 [0063.166] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.166] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0063.167] GetCurrentObject (hdc=0x4d01099d, type=0x1) returned 0x1b00017 [0063.167] GetCurrentObject (hdc=0x4d01099d, type=0x2) returned 0x1900010 [0063.167] GetCurrentObject (hdc=0x4d01099d, type=0x7) returned 0x160506a9 [0063.167] GetCurrentObject (hdc=0x4d01099d, type=0x6) returned 0x18a0048 [0063.167] SaveDC (hdc=0x4d01099d) returned 1 [0063.167] GetNearestColor (hdc=0x4d01099d, color=0xf0f0f0) returned 0xf0f0f0 [0063.167] GetNearestColor (hdc=0x4d01099d, color=0xa0a0a0) returned 0xa0a0a0 [0063.167] GetNearestColor (hdc=0x4d01099d, color=0x696969) returned 0x696969 [0063.167] GetNearestColor (hdc=0x4d01099d, color=0xa0a0a0) returned 0xa0a0a0 [0063.167] GetNearestColor (hdc=0x4d01099d, color=0x0) returned 0x0 [0063.167] GetNearestColor (hdc=0x4d01099d, color=0xffffff) returned 0xffffff [0063.167] GetNearestColor (hdc=0x4d01099d, color=0xe5e5e5) returned 0xe5e5e5 [0063.167] GetNearestColor (hdc=0x4d01099d, color=0xd8d8d8) returned 0xd8d8d8 [0063.167] GetNearestColor (hdc=0x4d01099d, color=0x0) returned 0x0 [0063.167] RestoreDC (hdc=0x4d01099d, nSavedDC=-1) returned 1 [0063.167] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x4d01099d) returned 0x0 [0063.168] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98(\x02", lpUsedDefaultChar=0x0) returned 17 [0063.168] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.168] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2289ee0) returned 0x0 [0063.168] GdipSetStringFormatAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0063.168] GdipSetStringFormatLineAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0063.168] GdipSetStringFormatHotkeyPrefix (format=0x1beb6ec0, hotkeyPrefix=2) returned 0x0 [0063.168] GdipGetStringFormatFlags (format=0x1beb6ec0, flags=0x14e378) returned 0x0 [0063.168] GdipGetStringFormatTrimming (format=0x1beb6ec0, trimming=0x14e378) returned 0x0 [0063.168] GdipGetStringFormatHotkeyPrefix (format=0x1beb6ec0, hotkeyPrefix=0x14e378) returned 0x0 [0063.168] GdipGetFontSize (font=0x1beb6ec0, size=0x14e378) returned 0x0 [0063.168] GdipGetFontStyle (font=0x1beb6ec0, style=0x14e378) returned 0x0 [0063.168] GdipDeleteStringFormat (format=0x1beb6ec0) returned 0x0 [0063.168] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.168] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0063.169] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.169] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0063.169] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x228a010) returned 0x0 [0063.169] GdipSetStringFormatFlags (format=0x1beb6ec0, flags=0) returned 0x0 [0063.169] GdipSetStringFormatTrimming (format=0x1beb6ec0, trimming=0x1) returned 0x0 [0063.169] GdipSetStringFormatHotkeyPrefix (format=0x1beb6ec0, hotkeyPrefix=2) returned 0x0 [0063.169] GdipSetStringFormatAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0063.169] GdipSetStringFormatLineAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0063.169] GdipMeasureString (graphics=0x1beb7860, string="4", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb6ec0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0063.169] GdipDeleteStringFormat (format=0x1beb6ec0) returned 0x0 [0063.169] GdipDeleteGraphics (graphics=0x1beb7860) returned 0x0 [0063.169] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.170] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0063.170] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.170] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0063.170] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.170] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0063.170] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0063.170] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0063.170] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0063.170] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d2d0) returned 0x0 [0063.171] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0063.171] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d850 [0063.171] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d850) returned 0x0 [0063.171] LocalFree (hMem=0x1d92d850) returned 0x0 [0063.171] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0063.171] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0063.171] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0063.171] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0063.171] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.172] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0063.172] GetCurrentObject (hdc=0x4d01099d, type=0x1) returned 0x1b00017 [0063.172] GetCurrentObject (hdc=0x4d01099d, type=0x2) returned 0x1900010 [0063.172] GetCurrentObject (hdc=0x4d01099d, type=0x7) returned 0x160506a9 [0063.172] GetCurrentObject (hdc=0x4d01099d, type=0x6) returned 0x18a0048 [0063.172] SaveDC (hdc=0x4d01099d) returned 1 [0063.172] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7504095c [0063.172] GetClipRgn (hdc=0x4d01099d, hrgn=0x7504095c) returned 0 [0063.172] SelectClipRgn (hdc=0x4d01099d, hrgn=0x360406c7) returned 2 [0063.172] DeleteObject (ho=0x7504095c) returned 1 [0063.172] DeleteObject (ho=0x360406c7) returned 1 [0063.172] OffsetViewportOrgEx (in: hdc=0x4d01099d, x=0, y=0, lppt=0x228a3d0 | out: lppt=0x228a3d0) returned 1 [0063.172] GetNearestColor (hdc=0x4d01099d, color=0xf0f0f0) returned 0xf0f0f0 [0063.172] CreateSolidBrush (color=0xf0f0f0) returned 0x31100559 [0063.172] FillRect (hDC=0x4d01099d, lprc=0x14e1c8, hbr=0x31100559) returned 1 [0063.172] DeleteObject (ho=0x31100559) returned 1 [0063.172] RestoreDC (hdc=0x4d01099d, nSavedDC=-1) returned 1 [0063.172] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x4d01099d) returned 0x0 [0063.173] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.173] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0063.173] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.173] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x228a4d0) returned 0x0 [0063.173] GdipSetStringFormatAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0063.173] GdipSetStringFormatLineAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0063.173] GdipSetStringFormatHotkeyPrefix (format=0x1beb15e0, hotkeyPrefix=2) returned 0x0 [0063.173] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0063.173] GdipDrawString (graphics=0x1beb67f0, string="4", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb15e0, brush=0x1beb1650) returned 0x0 [0063.177] GdipDeleteBrush (brush=0x1beb1650) returned 0x0 [0063.177] GdipDeleteStringFormat (format=0x1beb15e0) returned 0x0 [0063.177] GetFocus () returned 0x302de [0063.178] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x95(\x02", lpUsedDefaultChar=0x0) returned 17 [0063.178] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.178] GdipCreateRegion (region=0x14e030) returned 0x0 [0063.178] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.178] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0063.178] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0063.178] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0063.178] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d050 [0063.178] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d050) returned 0x0 [0063.179] LocalFree (hMem=0x1d92d050) returned 0x0 [0063.179] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0063.179] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0063.180] LocalFree (hMem=0x1d92cf10) returned 0x0 [0063.180] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0063.180] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0063.180] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0063.180] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0063.180] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.180] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0063.180] GetCurrentObject (hdc=0x4d01099d, type=0x1) returned 0x1b00017 [0063.180] GetCurrentObject (hdc=0x4d01099d, type=0x2) returned 0x1900010 [0063.180] GetCurrentObject (hdc=0x4d01099d, type=0x7) returned 0x160506a9 [0063.180] GetCurrentObject (hdc=0x4d01099d, type=0x6) returned 0x18a0048 [0063.180] SaveDC (hdc=0x4d01099d) returned 1 [0063.180] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x370406c7 [0063.180] GetClipRgn (hdc=0x4d01099d, hrgn=0x370406c7) returned 0 [0063.180] SelectClipRgn (hdc=0x4d01099d, hrgn=0x7604095c) returned 2 [0063.180] DeleteObject (ho=0x370406c7) returned 1 [0063.180] DeleteObject (ho=0x7604095c) returned 1 [0063.180] OffsetViewportOrgEx (in: hdc=0x4d01099d, x=0, y=0, lppt=0x228a8b8 | out: lppt=0x228a8b8) returned 1 [0063.180] GetROP2 (hdc=0x4d01099d) returned 13 [0063.180] GetBkMode (hdc=0x4d01099d) returned 2 [0063.180] SetBkMode (hdc=0x4d01099d, mode=1) returned 2 [0063.181] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x3a300679 [0063.181] SelectObject (hdc=0x4d01099d, h=0x3a300679) returned 0x1b00017 [0063.181] MoveToEx (in: hdc=0x4d01099d, x=25, y=0, lppt=0x228a920 | out: lppt=0x228a920) returned 1 [0063.181] LineTo (hdc=0x4d01099d, x=0, y=0) returned 1 [0063.181] SetBkMode (hdc=0x4d01099d, mode=2) returned 1 [0063.181] MoveToEx (in: hdc=0x4d01099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.181] GetROP2 (hdc=0x4d01099d) returned 13 [0063.181] GetBkMode (hdc=0x4d01099d) returned 2 [0063.181] SetBkMode (hdc=0x4d01099d, mode=1) returned 2 [0063.181] SelectObject (hdc=0x4d01099d, h=0x3a300679) returned 0x3a300679 [0063.181] MoveToEx (in: hdc=0x4d01099d, x=0, y=0, lppt=0x228a938 | out: lppt=0x228a938) returned 1 [0063.181] LineTo (hdc=0x4d01099d, x=0, y=22) returned 1 [0063.181] SetBkMode (hdc=0x4d01099d, mode=2) returned 1 [0063.181] MoveToEx (in: hdc=0x4d01099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.181] SelectObject (hdc=0x4d01099d, h=0x1b00017) returned 0x3a300679 [0063.181] DeleteObject (ho=0x3a300679) returned 1 [0063.181] GetROP2 (hdc=0x4d01099d) returned 13 [0063.181] GetBkMode (hdc=0x4d01099d) returned 2 [0063.181] SetBkMode (hdc=0x4d01099d, mode=1) returned 2 [0063.181] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x5d3009bc [0063.181] SelectObject (hdc=0x4d01099d, h=0x5d3009bc) returned 0x1b00017 [0063.181] MoveToEx (in: hdc=0x4d01099d, x=0, y=22, lppt=0x228a9a0 | out: lppt=0x228a9a0) returned 1 [0063.181] LineTo (hdc=0x4d01099d, x=25, y=22) returned 1 [0063.182] SetBkMode (hdc=0x4d01099d, mode=2) returned 1 [0063.182] MoveToEx (in: hdc=0x4d01099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.182] GetROP2 (hdc=0x4d01099d) returned 13 [0063.182] GetBkMode (hdc=0x4d01099d) returned 2 [0063.182] SetBkMode (hdc=0x4d01099d, mode=1) returned 2 [0063.182] SelectObject (hdc=0x4d01099d, h=0x5d3009bc) returned 0x5d3009bc [0063.182] MoveToEx (in: hdc=0x4d01099d, x=25, y=22, lppt=0x228a9b8 | out: lppt=0x228a9b8) returned 1 [0063.182] LineTo (hdc=0x4d01099d, x=25, y=-1) returned 1 [0063.182] SetBkMode (hdc=0x4d01099d, mode=2) returned 1 [0063.182] MoveToEx (in: hdc=0x4d01099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.182] SelectObject (hdc=0x4d01099d, h=0x1b00017) returned 0x5d3009bc [0063.182] DeleteObject (ho=0x5d3009bc) returned 1 [0063.182] GetROP2 (hdc=0x4d01099d) returned 13 [0063.182] GetBkMode (hdc=0x4d01099d) returned 2 [0063.182] SetBkMode (hdc=0x4d01099d, mode=1) returned 2 [0063.182] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x3b300679 [0063.182] SelectObject (hdc=0x4d01099d, h=0x3b300679) returned 0x1b00017 [0063.182] MoveToEx (in: hdc=0x4d01099d, x=24, y=1, lppt=0x228aa20 | out: lppt=0x228aa20) returned 1 [0063.182] LineTo (hdc=0x4d01099d, x=1, y=1) returned 1 [0063.182] SetBkMode (hdc=0x4d01099d, mode=2) returned 1 [0063.182] MoveToEx (in: hdc=0x4d01099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.182] GetROP2 (hdc=0x4d01099d) returned 13 [0063.182] GetBkMode (hdc=0x4d01099d) returned 2 [0063.183] SetBkMode (hdc=0x4d01099d, mode=1) returned 2 [0063.183] SelectObject (hdc=0x4d01099d, h=0x3b300679) returned 0x3b300679 [0063.183] MoveToEx (in: hdc=0x4d01099d, x=1, y=1, lppt=0x228aa38 | out: lppt=0x228aa38) returned 1 [0063.183] LineTo (hdc=0x4d01099d, x=1, y=21) returned 1 [0063.183] SetBkMode (hdc=0x4d01099d, mode=2) returned 1 [0063.183] MoveToEx (in: hdc=0x4d01099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.183] SelectObject (hdc=0x4d01099d, h=0x1b00017) returned 0x3b300679 [0063.183] DeleteObject (ho=0x3b300679) returned 1 [0063.183] GetROP2 (hdc=0x4d01099d) returned 13 [0063.183] GetBkMode (hdc=0x4d01099d) returned 2 [0063.183] SetBkMode (hdc=0x4d01099d, mode=1) returned 2 [0063.183] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x5e3009bc [0063.183] SelectObject (hdc=0x4d01099d, h=0x5e3009bc) returned 0x1b00017 [0063.183] MoveToEx (in: hdc=0x4d01099d, x=1, y=21, lppt=0x228aaa0 | out: lppt=0x228aaa0) returned 1 [0063.183] LineTo (hdc=0x4d01099d, x=24, y=21) returned 1 [0063.183] SetBkMode (hdc=0x4d01099d, mode=2) returned 1 [0063.183] MoveToEx (in: hdc=0x4d01099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.183] GetROP2 (hdc=0x4d01099d) returned 13 [0063.183] GetBkMode (hdc=0x4d01099d) returned 2 [0063.183] SetBkMode (hdc=0x4d01099d, mode=1) returned 2 [0063.183] SelectObject (hdc=0x4d01099d, h=0x5e3009bc) returned 0x5e3009bc [0063.183] MoveToEx (in: hdc=0x4d01099d, x=24, y=21, lppt=0x228aab8 | out: lppt=0x228aab8) returned 1 [0063.183] LineTo (hdc=0x4d01099d, x=24, y=0) returned 1 [0063.183] SetBkMode (hdc=0x4d01099d, mode=2) returned 1 [0063.183] MoveToEx (in: hdc=0x4d01099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.183] SelectObject (hdc=0x4d01099d, h=0x1b00017) returned 0x5e3009bc [0063.184] DeleteObject (ho=0x5e3009bc) returned 1 [0063.184] RestoreDC (hdc=0x4d01099d, nSavedDC=-1) returned 1 [0063.184] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x4d01099d) returned 0x0 [0063.184] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0063.184] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x4d01099d, x1=0, y1=0, rop=0xcc0020) returned 1 [0063.184] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x4d01099d) returned 0x0 [0063.184] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0063.184] SelectObject (hdc=0x4d01099d, h=0x185000f) returned 0x160506a9 [0063.184] DeleteDC (hdc=0x4d01099d) returned 1 [0063.184] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0063.184] EndPaint (hWnd=0x30320, lpPaint=0x14e548) returned 1 [0063.184] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.184] IsWindowUnicode (hWnd=0x30328) returned 1 [0063.184] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.184] TranslateMessage (lpMsg=0x14ef10) returned 0 [0063.184] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0063.185] BeginPaint (in: hWnd=0x30328, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0063.185] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0063.186] CreateCompatibleDC (hdc=0x220106d6) returned 0xffffffffc20105ed [0063.186] SelectObject (hdc=0xffffffffc20105ed, h=0x160506a9) returned 0x185000f [0063.186] GdipCreateFromHDC (hdc=0xffffffffc20105ed, graphics=0x14e528) returned 0x0 [0063.186] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0063.186] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0063.186] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0063.186] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0063.186] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0063.186] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0063.186] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cf10) returned 0x0 [0063.187] LocalFree (hMem=0x1d92cf10) returned 0x0 [0063.187] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0063.187] GdipCreateRegion (region=0x14e550) returned 0x0 [0063.187] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.187] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0063.187] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0063.187] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd8a0dbd) returned 0x0 [0063.187] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.187] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0063.187] GetCurrentObject (hdc=0xffffffffc20105ed, type=0x1) returned 0x1b00017 [0063.187] GetCurrentObject (hdc=0xffffffffc20105ed, type=0x2) returned 0x1900010 [0063.187] GetCurrentObject (hdc=0xffffffffc20105ed, type=0x7) returned 0x160506a9 [0063.187] GetCurrentObject (hdc=0xffffffffc20105ed, type=0x6) returned 0x18a0048 [0063.187] SaveDC (hdc=0xffffffffc20105ed) returned 1 [0063.188] GetNearestColor (hdc=0xffffffffc20105ed, color=0xf0f0f0) returned 0xf0f0f0 [0063.188] GetNearestColor (hdc=0xffffffffc20105ed, color=0xa0a0a0) returned 0xa0a0a0 [0063.188] GetNearestColor (hdc=0xffffffffc20105ed, color=0x696969) returned 0x696969 [0063.188] GetNearestColor (hdc=0xffffffffc20105ed, color=0xa0a0a0) returned 0xa0a0a0 [0063.188] GetNearestColor (hdc=0xffffffffc20105ed, color=0x0) returned 0x0 [0063.188] GetNearestColor (hdc=0xffffffffc20105ed, color=0xffffff) returned 0xffffff [0063.188] GetNearestColor (hdc=0xffffffffc20105ed, color=0xe5e5e5) returned 0xe5e5e5 [0063.188] GetNearestColor (hdc=0xffffffffc20105ed, color=0xd8d8d8) returned 0xd8d8d8 [0063.188] GetNearestColor (hdc=0xffffffffc20105ed, color=0x0) returned 0x0 [0063.188] RestoreDC (hdc=0xffffffffc20105ed, nSavedDC=-1) returned 1 [0063.188] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffffc20105ed) returned 0x0 [0063.188] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.188] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx­(\x02", lpUsedDefaultChar=0x0) returned 17 [0063.188] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.189] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x228b3f0) returned 0x0 [0063.189] GdipSetStringFormatAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0063.189] GdipSetStringFormatLineAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0063.189] GdipSetStringFormatHotkeyPrefix (format=0x1beb15e0, hotkeyPrefix=2) returned 0x0 [0063.189] GdipGetStringFormatFlags (format=0x1beb15e0, flags=0x14e378) returned 0x0 [0063.189] GdipGetStringFormatTrimming (format=0x1beb15e0, trimming=0x14e378) returned 0x0 [0063.189] GdipGetStringFormatHotkeyPrefix (format=0x1beb15e0, hotkeyPrefix=0x14e378) returned 0x0 [0063.189] GdipGetFontSize (font=0x1beb15e0, size=0x14e378) returned 0x0 [0063.189] GdipGetFontStyle (font=0x1beb15e0, style=0x14e378) returned 0x0 [0063.189] GdipDeleteStringFormat (format=0x1beb15e0) returned 0x0 [0063.189] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0063.189] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.189] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0063.190] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x228b520) returned 0x0 [0063.190] GdipSetStringFormatFlags (format=0x1beb1670, flags=0) returned 0x0 [0063.190] GdipSetStringFormatTrimming (format=0x1beb1670, trimming=0x1) returned 0x0 [0063.190] GdipSetStringFormatHotkeyPrefix (format=0x1beb1670, hotkeyPrefix=2) returned 0x0 [0063.190] GdipSetStringFormatAlign (format=0x1beb1670, align=0x1) returned 0x0 [0063.190] GdipSetStringFormatLineAlign (format=0x1beb1670, align=0x1) returned 0x0 [0063.190] GdipMeasureString (graphics=0x1beb7860, string="6", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb1670, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0063.190] GdipDeleteStringFormat (format=0x1beb1670) returned 0x0 [0063.190] GdipDeleteGraphics (graphics=0x1beb7860) returned 0x0 [0063.190] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0063.190] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.190] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0063.190] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.190] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0063.191] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0063.191] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0063.191] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0063.191] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d710) returned 0x0 [0063.191] LocalFree (hMem=0x1d92d710) returned 0x0 [0063.191] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92ccd0 [0063.191] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92ccd0) returned 0x0 [0063.192] LocalFree (hMem=0x1d92ccd0) returned 0x0 [0063.224] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0063.224] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0063.224] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0063.224] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0063.224] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.224] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0063.224] GetCurrentObject (hdc=0xffffffffc20105ed, type=0x1) returned 0x1b00017 [0063.224] GetCurrentObject (hdc=0xffffffffc20105ed, type=0x2) returned 0x1900010 [0063.224] GetCurrentObject (hdc=0xffffffffc20105ed, type=0x7) returned 0x160506a9 [0063.224] GetCurrentObject (hdc=0xffffffffc20105ed, type=0x6) returned 0x18a0048 [0063.224] SaveDC (hdc=0xffffffffc20105ed) returned 1 [0063.224] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7704095c [0063.224] GetClipRgn (hdc=0xffffffffc20105ed, hrgn=0x7704095c) returned 0 [0063.224] SelectClipRgn (hdc=0xffffffffc20105ed, hrgn=0x380406c7) returned 2 [0063.225] DeleteObject (ho=0x7704095c) returned 1 [0063.225] DeleteObject (ho=0x380406c7) returned 1 [0063.225] OffsetViewportOrgEx (in: hdc=0xffffffffc20105ed, x=0, y=0, lppt=0x228b8e0 | out: lppt=0x228b8e0) returned 1 [0063.225] GetNearestColor (hdc=0xffffffffc20105ed, color=0xf0f0f0) returned 0xf0f0f0 [0063.225] CreateSolidBrush (color=0xf0f0f0) returned 0x32100559 [0063.225] FillRect (hDC=0xffffffffc20105ed, lprc=0x14e1c8, hbr=0x32100559) returned 1 [0063.225] DeleteObject (ho=0x32100559) returned 1 [0063.225] RestoreDC (hdc=0xffffffffc20105ed, nSavedDC=-1) returned 1 [0063.225] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffffc20105ed) returned 0x0 [0063.225] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0063.225] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.225] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x228b9e0) returned 0x0 [0063.226] GdipSetStringFormatAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0063.226] GdipSetStringFormatLineAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0063.226] GdipSetStringFormatHotkeyPrefix (format=0x1beb6ec0, hotkeyPrefix=2) returned 0x0 [0063.226] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0063.226] GdipDrawString (graphics=0x1beb67f0, string="6", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb6ec0, brush=0x1beb15e0) returned 0x0 [0063.229] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0063.229] GdipDeleteStringFormat (format=0x1beb6ec0) returned 0x0 [0063.229] GetFocus () returned 0x302de [0063.229] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx«(\x02", lpUsedDefaultChar=0x0) returned 17 [0063.230] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.230] GdipCreateRegion (region=0x14e030) returned 0x0 [0063.230] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.230] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0063.230] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0063.230] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0063.230] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0063.230] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d650) returned 0x0 [0063.231] LocalFree (hMem=0x1d92d650) returned 0x0 [0063.231] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d350 [0063.231] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d350) returned 0x0 [0063.231] LocalFree (hMem=0x1d92d350) returned 0x0 [0063.231] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0063.231] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0063.231] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0063.231] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0063.231] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.232] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0063.232] GetCurrentObject (hdc=0xffffffffc20105ed, type=0x1) returned 0x1b00017 [0063.232] GetCurrentObject (hdc=0xffffffffc20105ed, type=0x2) returned 0x1900010 [0063.232] GetCurrentObject (hdc=0xffffffffc20105ed, type=0x7) returned 0x160506a9 [0063.232] GetCurrentObject (hdc=0xffffffffc20105ed, type=0x6) returned 0x18a0048 [0063.232] SaveDC (hdc=0xffffffffc20105ed) returned 1 [0063.232] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x390406c7 [0063.232] GetClipRgn (hdc=0xffffffffc20105ed, hrgn=0x390406c7) returned 0 [0063.232] SelectClipRgn (hdc=0xffffffffc20105ed, hrgn=0x7804095c) returned 2 [0063.232] DeleteObject (ho=0x390406c7) returned 1 [0063.232] DeleteObject (ho=0x7804095c) returned 1 [0063.232] OffsetViewportOrgEx (in: hdc=0xffffffffc20105ed, x=0, y=0, lppt=0x228bdc8 | out: lppt=0x228bdc8) returned 1 [0063.232] GetROP2 (hdc=0xffffffffc20105ed) returned 13 [0063.232] GetBkMode (hdc=0xffffffffc20105ed) returned 2 [0063.232] SetBkMode (hdc=0xffffffffc20105ed, mode=1) returned 2 [0063.232] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x5f3009bc [0063.232] SelectObject (hdc=0xffffffffc20105ed, h=0x5f3009bc) returned 0x1b00017 [0063.232] MoveToEx (in: hdc=0xffffffffc20105ed, x=25, y=0, lppt=0x228be30 | out: lppt=0x228be30) returned 1 [0063.232] LineTo (hdc=0xffffffffc20105ed, x=0, y=0) returned 1 [0063.232] SetBkMode (hdc=0xffffffffc20105ed, mode=2) returned 1 [0063.232] MoveToEx (in: hdc=0xffffffffc20105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.233] GetROP2 (hdc=0xffffffffc20105ed) returned 13 [0063.233] GetBkMode (hdc=0xffffffffc20105ed) returned 2 [0063.233] SetBkMode (hdc=0xffffffffc20105ed, mode=1) returned 2 [0063.233] SelectObject (hdc=0xffffffffc20105ed, h=0x5f3009bc) returned 0x5f3009bc [0063.233] MoveToEx (in: hdc=0xffffffffc20105ed, x=0, y=0, lppt=0x228be48 | out: lppt=0x228be48) returned 1 [0063.233] LineTo (hdc=0xffffffffc20105ed, x=0, y=22) returned 1 [0063.233] SetBkMode (hdc=0xffffffffc20105ed, mode=2) returned 1 [0063.233] MoveToEx (in: hdc=0xffffffffc20105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.233] SelectObject (hdc=0xffffffffc20105ed, h=0x1b00017) returned 0x5f3009bc [0063.233] DeleteObject (ho=0x5f3009bc) returned 1 [0063.233] GetROP2 (hdc=0xffffffffc20105ed) returned 13 [0063.233] GetBkMode (hdc=0xffffffffc20105ed) returned 2 [0063.233] SetBkMode (hdc=0xffffffffc20105ed, mode=1) returned 2 [0063.233] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x3c300679 [0063.233] SelectObject (hdc=0xffffffffc20105ed, h=0x3c300679) returned 0x1b00017 [0063.233] MoveToEx (in: hdc=0xffffffffc20105ed, x=0, y=22, lppt=0x228beb0 | out: lppt=0x228beb0) returned 1 [0063.233] LineTo (hdc=0xffffffffc20105ed, x=25, y=22) returned 1 [0063.233] SetBkMode (hdc=0xffffffffc20105ed, mode=2) returned 1 [0063.233] MoveToEx (in: hdc=0xffffffffc20105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.233] GetROP2 (hdc=0xffffffffc20105ed) returned 13 [0063.233] GetBkMode (hdc=0xffffffffc20105ed) returned 2 [0063.233] SetBkMode (hdc=0xffffffffc20105ed, mode=1) returned 2 [0063.233] SelectObject (hdc=0xffffffffc20105ed, h=0x3c300679) returned 0x3c300679 [0063.233] MoveToEx (in: hdc=0xffffffffc20105ed, x=25, y=22, lppt=0x228bec8 | out: lppt=0x228bec8) returned 1 [0063.234] LineTo (hdc=0xffffffffc20105ed, x=25, y=-1) returned 1 [0063.234] SetBkMode (hdc=0xffffffffc20105ed, mode=2) returned 1 [0063.234] MoveToEx (in: hdc=0xffffffffc20105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.234] SelectObject (hdc=0xffffffffc20105ed, h=0x1b00017) returned 0x3c300679 [0063.234] DeleteObject (ho=0x3c300679) returned 1 [0063.234] GetROP2 (hdc=0xffffffffc20105ed) returned 13 [0063.234] GetBkMode (hdc=0xffffffffc20105ed) returned 2 [0063.234] SetBkMode (hdc=0xffffffffc20105ed, mode=1) returned 2 [0063.234] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x603009bc [0063.234] SelectObject (hdc=0xffffffffc20105ed, h=0x603009bc) returned 0x1b00017 [0063.234] MoveToEx (in: hdc=0xffffffffc20105ed, x=24, y=1, lppt=0x228bf30 | out: lppt=0x228bf30) returned 1 [0063.234] LineTo (hdc=0xffffffffc20105ed, x=1, y=1) returned 1 [0063.234] SetBkMode (hdc=0xffffffffc20105ed, mode=2) returned 1 [0063.234] MoveToEx (in: hdc=0xffffffffc20105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.234] GetROP2 (hdc=0xffffffffc20105ed) returned 13 [0063.234] GetBkMode (hdc=0xffffffffc20105ed) returned 2 [0063.234] SetBkMode (hdc=0xffffffffc20105ed, mode=1) returned 2 [0063.234] SelectObject (hdc=0xffffffffc20105ed, h=0x603009bc) returned 0x603009bc [0063.234] MoveToEx (in: hdc=0xffffffffc20105ed, x=1, y=1, lppt=0x228bf48 | out: lppt=0x228bf48) returned 1 [0063.234] LineTo (hdc=0xffffffffc20105ed, x=1, y=21) returned 1 [0063.234] SetBkMode (hdc=0xffffffffc20105ed, mode=2) returned 1 [0063.234] MoveToEx (in: hdc=0xffffffffc20105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.234] SelectObject (hdc=0xffffffffc20105ed, h=0x1b00017) returned 0x603009bc [0063.234] DeleteObject (ho=0x603009bc) returned 1 [0063.235] GetROP2 (hdc=0xffffffffc20105ed) returned 13 [0063.235] GetBkMode (hdc=0xffffffffc20105ed) returned 2 [0063.235] SetBkMode (hdc=0xffffffffc20105ed, mode=1) returned 2 [0063.235] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x3d300679 [0063.235] SelectObject (hdc=0xffffffffc20105ed, h=0x3d300679) returned 0x1b00017 [0063.235] MoveToEx (in: hdc=0xffffffffc20105ed, x=1, y=21, lppt=0x228bfb0 | out: lppt=0x228bfb0) returned 1 [0063.235] LineTo (hdc=0xffffffffc20105ed, x=24, y=21) returned 1 [0063.235] SetBkMode (hdc=0xffffffffc20105ed, mode=2) returned 1 [0063.235] MoveToEx (in: hdc=0xffffffffc20105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.235] GetROP2 (hdc=0xffffffffc20105ed) returned 13 [0063.235] GetBkMode (hdc=0xffffffffc20105ed) returned 2 [0063.235] SetBkMode (hdc=0xffffffffc20105ed, mode=1) returned 2 [0063.235] SelectObject (hdc=0xffffffffc20105ed, h=0x3d300679) returned 0x3d300679 [0063.235] MoveToEx (in: hdc=0xffffffffc20105ed, x=24, y=21, lppt=0x228bfc8 | out: lppt=0x228bfc8) returned 1 [0063.235] LineTo (hdc=0xffffffffc20105ed, x=24, y=0) returned 1 [0063.235] SetBkMode (hdc=0xffffffffc20105ed, mode=2) returned 1 [0063.235] MoveToEx (in: hdc=0xffffffffc20105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.235] SelectObject (hdc=0xffffffffc20105ed, h=0x1b00017) returned 0x3d300679 [0063.235] DeleteObject (ho=0x3d300679) returned 1 [0063.235] RestoreDC (hdc=0xffffffffc20105ed, nSavedDC=-1) returned 1 [0063.235] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffffc20105ed) returned 0x0 [0063.236] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0063.236] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0xffffffffc20105ed, x1=0, y1=0, rop=0xcc0020) returned 1 [0063.236] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffffc20105ed) returned 0x0 [0063.236] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0063.236] SelectObject (hdc=0xffffffffc20105ed, h=0x185000f) returned 0x160506a9 [0063.236] DeleteDC (hdc=0xffffffffc20105ed) returned 1 [0063.236] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0063.236] EndPaint (hWnd=0x30328, lpPaint=0x14e548) returned 1 [0063.236] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.236] IsWindowUnicode (hWnd=0x3031c) returned 1 [0063.236] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.237] TranslateMessage (lpMsg=0x14ef10) returned 0 [0063.237] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0063.237] BeginPaint (in: hWnd=0x3031c, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0063.237] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0063.237] CreateCompatibleDC (hdc=0xc0100ae) returned 0x5401099d [0063.237] SelectObject (hdc=0x5401099d, h=0x160506a9) returned 0x185000f [0063.237] GdipCreateFromHDC (hdc=0x5401099d, graphics=0x14e528) returned 0x0 [0063.237] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0063.237] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0063.237] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0063.237] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0063.237] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0063.237] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0063.237] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d2d0) returned 0x0 [0063.238] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0063.238] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0063.238] GdipCreateRegion (region=0x14e550) returned 0x0 [0063.238] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.238] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0063.238] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0063.238] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd870dbd) returned 0x0 [0063.238] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.238] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0063.238] GetCurrentObject (hdc=0x5401099d, type=0x1) returned 0x1b00017 [0063.238] GetCurrentObject (hdc=0x5401099d, type=0x2) returned 0x1900010 [0063.239] GetCurrentObject (hdc=0x5401099d, type=0x7) returned 0x160506a9 [0063.239] GetCurrentObject (hdc=0x5401099d, type=0x6) returned 0x18a0048 [0063.239] SaveDC (hdc=0x5401099d) returned 1 [0063.239] GetNearestColor (hdc=0x5401099d, color=0xf0f0f0) returned 0xf0f0f0 [0063.239] GetNearestColor (hdc=0x5401099d, color=0xa0a0a0) returned 0xa0a0a0 [0063.239] GetNearestColor (hdc=0x5401099d, color=0x696969) returned 0x696969 [0063.239] GetNearestColor (hdc=0x5401099d, color=0xa0a0a0) returned 0xa0a0a0 [0063.239] GetNearestColor (hdc=0x5401099d, color=0x0) returned 0x0 [0063.239] GetNearestColor (hdc=0x5401099d, color=0xffffff) returned 0xffffff [0063.239] GetNearestColor (hdc=0x5401099d, color=0xe5e5e5) returned 0xe5e5e5 [0063.239] GetNearestColor (hdc=0x5401099d, color=0xd8d8d8) returned 0xd8d8d8 [0063.239] GetNearestColor (hdc=0x5401099d, color=0x0) returned 0x0 [0063.239] RestoreDC (hdc=0x5401099d, nSavedDC=-1) returned 1 [0063.240] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5401099d) returned 0x0 [0063.240] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÂ(\x02", lpUsedDefaultChar=0x0) returned 17 [0063.240] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.240] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x228c900) returned 0x0 [0063.240] GdipSetStringFormatAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0063.240] GdipSetStringFormatLineAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0063.240] GdipSetStringFormatHotkeyPrefix (format=0x1beb6ec0, hotkeyPrefix=2) returned 0x0 [0063.240] GdipGetStringFormatFlags (format=0x1beb6ec0, flags=0x14e378) returned 0x0 [0063.240] GdipGetStringFormatTrimming (format=0x1beb6ec0, trimming=0x14e378) returned 0x0 [0063.240] GdipGetStringFormatHotkeyPrefix (format=0x1beb6ec0, hotkeyPrefix=0x14e378) returned 0x0 [0063.240] GdipGetFontSize (font=0x1beb6ec0, size=0x14e378) returned 0x0 [0063.240] GdipGetFontStyle (font=0x1beb6ec0, style=0x14e378) returned 0x0 [0063.240] GdipDeleteStringFormat (format=0x1beb6ec0) returned 0x0 [0063.241] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0063.241] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.241] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0063.241] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x228ca30) returned 0x0 [0063.241] GdipSetStringFormatFlags (format=0x1beb6ec0, flags=0) returned 0x0 [0063.241] GdipSetStringFormatTrimming (format=0x1beb6ec0, trimming=0x1) returned 0x0 [0063.241] GdipSetStringFormatHotkeyPrefix (format=0x1beb6ec0, hotkeyPrefix=2) returned 0x0 [0063.241] GdipSetStringFormatAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0063.241] GdipSetStringFormatLineAlign (format=0x1beb6ec0, align=0x1) returned 0x0 [0063.241] GdipMeasureString (graphics=0x1beb7860, string="9", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb6ec0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0063.241] GdipDeleteStringFormat (format=0x1beb6ec0) returned 0x0 [0063.241] GdipDeleteGraphics (graphics=0x1beb7860) returned 0x0 [0063.242] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0063.242] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.242] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0063.242] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.242] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0063.242] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0063.242] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0063.242] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0063.242] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d650) returned 0x0 [0063.243] LocalFree (hMem=0x1d92d650) returned 0x0 [0063.243] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cbd0 [0063.243] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cbd0) returned 0x0 [0063.244] LocalFree (hMem=0x1d92cbd0) returned 0x0 [0063.244] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0063.244] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0063.244] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0063.244] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0063.244] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.244] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0063.244] GetCurrentObject (hdc=0x5401099d, type=0x1) returned 0x1b00017 [0063.244] GetCurrentObject (hdc=0x5401099d, type=0x2) returned 0x1900010 [0063.244] GetCurrentObject (hdc=0x5401099d, type=0x7) returned 0x160506a9 [0063.244] GetCurrentObject (hdc=0x5401099d, type=0x6) returned 0x18a0048 [0063.244] SaveDC (hdc=0x5401099d) returned 1 [0063.244] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7904095c [0063.244] GetClipRgn (hdc=0x5401099d, hrgn=0x7904095c) returned 0 [0063.244] SelectClipRgn (hdc=0x5401099d, hrgn=0x3a0406c7) returned 2 [0063.244] DeleteObject (ho=0x7904095c) returned 1 [0063.245] DeleteObject (ho=0x3a0406c7) returned 1 [0063.245] OffsetViewportOrgEx (in: hdc=0x5401099d, x=0, y=0, lppt=0x228cdf0 | out: lppt=0x228cdf0) returned 1 [0063.245] GetNearestColor (hdc=0x5401099d, color=0xf0f0f0) returned 0xf0f0f0 [0063.245] CreateSolidBrush (color=0xf0f0f0) returned 0x33100559 [0063.245] FillRect (hDC=0x5401099d, lprc=0x14e1c8, hbr=0x33100559) returned 1 [0063.245] DeleteObject (ho=0x33100559) returned 1 [0063.245] RestoreDC (hdc=0x5401099d, nSavedDC=-1) returned 1 [0063.245] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5401099d) returned 0x0 [0063.245] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0063.245] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.245] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x228cef0) returned 0x0 [0063.245] GdipSetStringFormatAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0063.245] GdipSetStringFormatLineAlign (format=0x1beb15e0, align=0x1) returned 0x0 [0063.246] GdipSetStringFormatHotkeyPrefix (format=0x1beb15e0, hotkeyPrefix=2) returned 0x0 [0063.246] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0063.246] GdipDrawString (graphics=0x1beb67f0, string="9", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb15e0, brush=0x1beb1650) returned 0x0 [0063.249] GdipDeleteBrush (brush=0x1beb1650) returned 0x0 [0063.249] GdipDeleteStringFormat (format=0x1beb15e0) returned 0x0 [0063.249] GetFocus () returned 0x302de [0063.249] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÀ(\x02", lpUsedDefaultChar=0x0) returned 17 [0063.250] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.250] GdipCreateRegion (region=0x14e030) returned 0x0 [0063.250] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.250] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0063.250] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0063.250] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0063.250] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d410 [0063.250] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d410) returned 0x0 [0063.251] LocalFree (hMem=0x1d92d410) returned 0x0 [0063.251] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0063.251] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d650) returned 0x0 [0063.251] LocalFree (hMem=0x1d92d650) returned 0x0 [0063.251] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0063.251] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0063.251] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0063.251] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0063.251] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.251] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0063.252] GetCurrentObject (hdc=0x5401099d, type=0x1) returned 0x1b00017 [0063.252] GetCurrentObject (hdc=0x5401099d, type=0x2) returned 0x1900010 [0063.252] GetCurrentObject (hdc=0x5401099d, type=0x7) returned 0x160506a9 [0063.252] GetCurrentObject (hdc=0x5401099d, type=0x6) returned 0x18a0048 [0063.252] SaveDC (hdc=0x5401099d) returned 1 [0063.252] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3b0406c7 [0063.252] GetClipRgn (hdc=0x5401099d, hrgn=0x3b0406c7) returned 0 [0063.252] SelectClipRgn (hdc=0x5401099d, hrgn=0x7a04095c) returned 2 [0063.252] DeleteObject (ho=0x3b0406c7) returned 1 [0063.252] DeleteObject (ho=0x7a04095c) returned 1 [0063.252] OffsetViewportOrgEx (in: hdc=0x5401099d, x=0, y=0, lppt=0x228d2d8 | out: lppt=0x228d2d8) returned 1 [0063.252] GetROP2 (hdc=0x5401099d) returned 13 [0063.252] GetBkMode (hdc=0x5401099d) returned 2 [0063.252] SetBkMode (hdc=0x5401099d, mode=1) returned 2 [0063.252] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x3e300679 [0063.252] SelectObject (hdc=0x5401099d, h=0x3e300679) returned 0x1b00017 [0063.252] MoveToEx (in: hdc=0x5401099d, x=25, y=0, lppt=0x228d340 | out: lppt=0x228d340) returned 1 [0063.252] LineTo (hdc=0x5401099d, x=0, y=0) returned 1 [0063.252] SetBkMode (hdc=0x5401099d, mode=2) returned 1 [0063.252] MoveToEx (in: hdc=0x5401099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.252] GetROP2 (hdc=0x5401099d) returned 13 [0063.252] GetBkMode (hdc=0x5401099d) returned 2 [0063.253] SetBkMode (hdc=0x5401099d, mode=1) returned 2 [0063.253] SelectObject (hdc=0x5401099d, h=0x3e300679) returned 0x3e300679 [0063.253] MoveToEx (in: hdc=0x5401099d, x=0, y=0, lppt=0x228d358 | out: lppt=0x228d358) returned 1 [0063.253] LineTo (hdc=0x5401099d, x=0, y=22) returned 1 [0063.253] SetBkMode (hdc=0x5401099d, mode=2) returned 1 [0063.253] MoveToEx (in: hdc=0x5401099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.253] SelectObject (hdc=0x5401099d, h=0x1b00017) returned 0x3e300679 [0063.253] DeleteObject (ho=0x3e300679) returned 1 [0063.253] GetROP2 (hdc=0x5401099d) returned 13 [0063.253] GetBkMode (hdc=0x5401099d) returned 2 [0063.253] SetBkMode (hdc=0x5401099d, mode=1) returned 2 [0063.253] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x613009bc [0063.253] SelectObject (hdc=0x5401099d, h=0x613009bc) returned 0x1b00017 [0063.253] MoveToEx (in: hdc=0x5401099d, x=0, y=22, lppt=0x228d3c0 | out: lppt=0x228d3c0) returned 1 [0063.253] LineTo (hdc=0x5401099d, x=25, y=22) returned 1 [0063.253] SetBkMode (hdc=0x5401099d, mode=2) returned 1 [0063.253] MoveToEx (in: hdc=0x5401099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.253] GetROP2 (hdc=0x5401099d) returned 13 [0063.253] GetBkMode (hdc=0x5401099d) returned 2 [0063.253] SetBkMode (hdc=0x5401099d, mode=1) returned 2 [0063.253] SelectObject (hdc=0x5401099d, h=0x613009bc) returned 0x613009bc [0063.253] MoveToEx (in: hdc=0x5401099d, x=25, y=22, lppt=0x228d3d8 | out: lppt=0x228d3d8) returned 1 [0063.253] LineTo (hdc=0x5401099d, x=25, y=-1) returned 1 [0063.254] SetBkMode (hdc=0x5401099d, mode=2) returned 1 [0063.254] MoveToEx (in: hdc=0x5401099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.254] SelectObject (hdc=0x5401099d, h=0x1b00017) returned 0x613009bc [0063.254] DeleteObject (ho=0x613009bc) returned 1 [0063.254] GetROP2 (hdc=0x5401099d) returned 13 [0063.254] GetBkMode (hdc=0x5401099d) returned 2 [0063.254] SetBkMode (hdc=0x5401099d, mode=1) returned 2 [0063.254] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x3f300679 [0063.254] SelectObject (hdc=0x5401099d, h=0x3f300679) returned 0x1b00017 [0063.254] MoveToEx (in: hdc=0x5401099d, x=24, y=1, lppt=0x228d440 | out: lppt=0x228d440) returned 1 [0063.254] LineTo (hdc=0x5401099d, x=1, y=1) returned 1 [0063.254] SetBkMode (hdc=0x5401099d, mode=2) returned 1 [0063.254] MoveToEx (in: hdc=0x5401099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.254] GetROP2 (hdc=0x5401099d) returned 13 [0063.254] GetBkMode (hdc=0x5401099d) returned 2 [0063.254] SetBkMode (hdc=0x5401099d, mode=1) returned 2 [0063.254] SelectObject (hdc=0x5401099d, h=0x3f300679) returned 0x3f300679 [0063.254] MoveToEx (in: hdc=0x5401099d, x=1, y=1, lppt=0x228d458 | out: lppt=0x228d458) returned 1 [0063.254] LineTo (hdc=0x5401099d, x=1, y=21) returned 1 [0063.256] SetBkMode (hdc=0x5401099d, mode=2) returned 1 [0063.256] MoveToEx (in: hdc=0x5401099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.256] SelectObject (hdc=0x5401099d, h=0x1b00017) returned 0x3f300679 [0063.256] DeleteObject (ho=0x3f300679) returned 1 [0063.256] GetROP2 (hdc=0x5401099d) returned 13 [0063.256] GetBkMode (hdc=0x5401099d) returned 2 [0063.256] SetBkMode (hdc=0x5401099d, mode=1) returned 2 [0063.256] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x623009bc [0063.256] SelectObject (hdc=0x5401099d, h=0x623009bc) returned 0x1b00017 [0063.256] MoveToEx (in: hdc=0x5401099d, x=1, y=21, lppt=0x228d4c0 | out: lppt=0x228d4c0) returned 1 [0063.256] LineTo (hdc=0x5401099d, x=24, y=21) returned 1 [0063.256] SetBkMode (hdc=0x5401099d, mode=2) returned 1 [0063.256] MoveToEx (in: hdc=0x5401099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.257] GetROP2 (hdc=0x5401099d) returned 13 [0063.257] GetBkMode (hdc=0x5401099d) returned 2 [0063.257] SetBkMode (hdc=0x5401099d, mode=1) returned 2 [0063.257] SelectObject (hdc=0x5401099d, h=0x623009bc) returned 0x623009bc [0063.257] MoveToEx (in: hdc=0x5401099d, x=24, y=21, lppt=0x228d4d8 | out: lppt=0x228d4d8) returned 1 [0063.257] LineTo (hdc=0x5401099d, x=24, y=0) returned 1 [0063.257] SetBkMode (hdc=0x5401099d, mode=2) returned 1 [0063.257] MoveToEx (in: hdc=0x5401099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.257] SelectObject (hdc=0x5401099d, h=0x1b00017) returned 0x623009bc [0063.257] DeleteObject (ho=0x623009bc) returned 1 [0063.257] RestoreDC (hdc=0x5401099d, nSavedDC=-1) returned 1 [0063.257] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5401099d) returned 0x0 [0063.257] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0063.257] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x5401099d, x1=0, y1=0, rop=0xcc0020) returned 1 [0063.257] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5401099d) returned 0x0 [0063.257] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0063.257] SelectObject (hdc=0x5401099d, h=0x185000f) returned 0x160506a9 [0063.257] DeleteDC (hdc=0x5401099d) returned 1 [0063.258] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0063.258] EndPaint (hWnd=0x3031c, lpPaint=0x14e548) returned 1 [0063.258] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.258] IsWindowUnicode (hWnd=0x3031e) returned 1 [0063.258] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.258] TranslateMessage (lpMsg=0x14ef10) returned 0 [0063.258] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0063.258] BeginPaint (in: hWnd=0x3031e, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0063.258] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0063.258] CreateCompatibleDC (hdc=0x220106d6) returned 0x3f0109cc [0063.258] SelectObject (hdc=0x3f0109cc, h=0x160506a9) returned 0x185000f [0063.258] GdipCreateFromHDC (hdc=0x3f0109cc, graphics=0x14e528) returned 0x0 [0063.258] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0063.258] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0063.258] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0063.259] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0063.259] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0063.259] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d410 [0063.259] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d410) returned 0x0 [0063.259] LocalFree (hMem=0x1d92d410) returned 0x0 [0063.259] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0063.259] GdipCreateRegion (region=0x14e550) returned 0x0 [0063.259] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.259] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0063.259] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0063.260] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd840dbd) returned 0x0 [0063.260] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.260] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0063.260] GetCurrentObject (hdc=0x3f0109cc, type=0x1) returned 0x1b00017 [0063.260] GetCurrentObject (hdc=0x3f0109cc, type=0x2) returned 0x1900010 [0063.260] GetCurrentObject (hdc=0x3f0109cc, type=0x7) returned 0x160506a9 [0063.260] GetCurrentObject (hdc=0x3f0109cc, type=0x6) returned 0x18a0048 [0063.260] SaveDC (hdc=0x3f0109cc) returned 1 [0063.260] GetNearestColor (hdc=0x3f0109cc, color=0xf0f0f0) returned 0xf0f0f0 [0063.260] GetNearestColor (hdc=0x3f0109cc, color=0xa0a0a0) returned 0xa0a0a0 [0063.260] GetNearestColor (hdc=0x3f0109cc, color=0x696969) returned 0x696969 [0063.260] GetNearestColor (hdc=0x3f0109cc, color=0xa0a0a0) returned 0xa0a0a0 [0063.260] GetNearestColor (hdc=0x3f0109cc, color=0x0) returned 0x0 [0063.260] GetNearestColor (hdc=0x3f0109cc, color=0xffffff) returned 0xffffff [0063.260] GetNearestColor (hdc=0x3f0109cc, color=0xe5e5e5) returned 0xe5e5e5 [0063.260] GetNearestColor (hdc=0x3f0109cc, color=0xd8d8d8) returned 0xd8d8d8 [0063.260] GetNearestColor (hdc=0x3f0109cc, color=0x0) returned 0x0 [0063.260] RestoreDC (hdc=0x3f0109cc, nSavedDC=-1) returned 1 [0063.260] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x3f0109cc) returned 0x0 [0063.261] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.261] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx×(\x02", lpUsedDefaultChar=0x0) returned 17 [0063.261] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.261] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x228de10) returned 0x0 [0063.261] GdipSetStringFormatAlign (format=0x1beb7fb0, align=0x1) returned 0x0 [0063.261] GdipSetStringFormatLineAlign (format=0x1beb7fb0, align=0x1) returned 0x0 [0063.261] GdipSetStringFormatHotkeyPrefix (format=0x1beb7fb0, hotkeyPrefix=2) returned 0x0 [0063.261] GdipGetStringFormatFlags (format=0x1beb7fb0, flags=0x14e378) returned 0x0 [0063.261] GdipGetStringFormatTrimming (format=0x1beb7fb0, trimming=0x14e378) returned 0x0 [0063.261] GdipGetStringFormatHotkeyPrefix (format=0x1beb7fb0, hotkeyPrefix=0x14e378) returned 0x0 [0063.261] GdipGetFontSize (font=0x1beb7fb0, size=0x14e378) returned 0x0 [0063.262] GdipGetFontStyle (font=0x1beb7fb0, style=0x14e378) returned 0x0 [0063.262] GdipDeleteStringFormat (format=0x1beb7fb0) returned 0x0 [0063.262] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.262] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0063.262] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.262] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0063.262] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x228df40) returned 0x0 [0063.262] GdipSetStringFormatFlags (format=0x1beb7b50, flags=0) returned 0x0 [0063.262] GdipSetStringFormatTrimming (format=0x1beb7b50, trimming=0x1) returned 0x0 [0063.262] GdipSetStringFormatHotkeyPrefix (format=0x1beb7b50, hotkeyPrefix=2) returned 0x0 [0063.262] GdipSetStringFormatAlign (format=0x1beb7b50, align=0x1) returned 0x0 [0063.262] GdipSetStringFormatLineAlign (format=0x1beb7b50, align=0x1) returned 0x0 [0063.262] GdipMeasureString (graphics=0x1beb8070, string="3", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7b50, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0063.263] GdipDeleteStringFormat (format=0x1beb7b50) returned 0x0 [0063.263] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0063.263] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.263] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0063.263] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.263] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0063.263] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.263] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0063.263] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0063.263] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0063.263] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d410 [0063.263] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d410) returned 0x0 [0063.264] LocalFree (hMem=0x1d92d410) returned 0x0 [0063.264] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0063.264] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d650) returned 0x0 [0063.265] LocalFree (hMem=0x1d92d650) returned 0x0 [0063.265] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0063.265] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0063.265] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0063.265] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0063.265] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.265] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0063.265] GetCurrentObject (hdc=0x3f0109cc, type=0x1) returned 0x1b00017 [0063.265] GetCurrentObject (hdc=0x3f0109cc, type=0x2) returned 0x1900010 [0063.265] GetCurrentObject (hdc=0x3f0109cc, type=0x7) returned 0x160506a9 [0063.265] GetCurrentObject (hdc=0x3f0109cc, type=0x6) returned 0x18a0048 [0063.265] SaveDC (hdc=0x3f0109cc) returned 1 [0063.265] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7b04095c [0063.265] GetClipRgn (hdc=0x3f0109cc, hrgn=0x7b04095c) returned 0 [0063.265] SelectClipRgn (hdc=0x3f0109cc, hrgn=0x3c0406c7) returned 2 [0063.265] DeleteObject (ho=0x7b04095c) returned 1 [0063.265] DeleteObject (ho=0x3c0406c7) returned 1 [0063.265] OffsetViewportOrgEx (in: hdc=0x3f0109cc, x=0, y=0, lppt=0x228e300 | out: lppt=0x228e300) returned 1 [0063.265] GetNearestColor (hdc=0x3f0109cc, color=0xf0f0f0) returned 0xf0f0f0 [0063.265] CreateSolidBrush (color=0xf0f0f0) returned 0x34100559 [0063.265] FillRect (hDC=0x3f0109cc, lprc=0x14e1c8, hbr=0x34100559) returned 1 [0063.266] DeleteObject (ho=0x34100559) returned 1 [0063.266] RestoreDC (hdc=0x3f0109cc, nSavedDC=-1) returned 1 [0063.266] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x3f0109cc) returned 0x0 [0063.266] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0063.266] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.266] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x228e400) returned 0x0 [0063.266] GdipSetStringFormatAlign (format=0x1beb7bc0, align=0x1) returned 0x0 [0063.266] GdipSetStringFormatLineAlign (format=0x1beb7bc0, align=0x1) returned 0x0 [0063.266] GdipSetStringFormatHotkeyPrefix (format=0x1beb7bc0, hotkeyPrefix=2) returned 0x0 [0063.266] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0063.266] GdipDrawString (graphics=0x1beb67f0, string="3", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7bc0, brush=0x1beb15e0) returned 0x0 [0063.270] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0063.270] GdipDeleteStringFormat (format=0x1beb7bc0) returned 0x0 [0063.270] GetFocus () returned 0x302de [0063.270] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.270] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÕ(\x02", lpUsedDefaultChar=0x0) returned 17 [0063.271] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.271] GdipCreateRegion (region=0x14e030) returned 0x0 [0063.271] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.271] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0063.271] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0063.271] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0063.271] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d550 [0063.271] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d550) returned 0x0 [0063.272] LocalFree (hMem=0x1d92d550) returned 0x0 [0063.272] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0063.272] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d2d0) returned 0x0 [0063.272] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0063.272] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0063.272] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0063.272] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0063.272] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0063.272] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.272] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0063.273] GetCurrentObject (hdc=0x3f0109cc, type=0x1) returned 0x1b00017 [0063.273] GetCurrentObject (hdc=0x3f0109cc, type=0x2) returned 0x1900010 [0063.273] GetCurrentObject (hdc=0x3f0109cc, type=0x7) returned 0x160506a9 [0063.273] GetCurrentObject (hdc=0x3f0109cc, type=0x6) returned 0x18a0048 [0063.273] SaveDC (hdc=0x3f0109cc) returned 1 [0063.273] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3d0406c7 [0063.273] GetClipRgn (hdc=0x3f0109cc, hrgn=0x3d0406c7) returned 0 [0063.273] SelectClipRgn (hdc=0x3f0109cc, hrgn=0x7c04095c) returned 2 [0063.273] DeleteObject (ho=0x3d0406c7) returned 1 [0063.273] DeleteObject (ho=0x7c04095c) returned 1 [0063.273] OffsetViewportOrgEx (in: hdc=0x3f0109cc, x=0, y=0, lppt=0x228e7e8 | out: lppt=0x228e7e8) returned 1 [0063.273] GetROP2 (hdc=0x3f0109cc) returned 13 [0063.273] GetBkMode (hdc=0x3f0109cc) returned 2 [0063.273] SetBkMode (hdc=0x3f0109cc, mode=1) returned 2 [0063.273] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x633009bc [0063.273] SelectObject (hdc=0x3f0109cc, h=0x633009bc) returned 0x1b00017 [0063.273] MoveToEx (in: hdc=0x3f0109cc, x=25, y=0, lppt=0x228e850 | out: lppt=0x228e850) returned 1 [0063.273] LineTo (hdc=0x3f0109cc, x=0, y=0) returned 1 [0063.273] SetBkMode (hdc=0x3f0109cc, mode=2) returned 1 [0063.273] MoveToEx (in: hdc=0x3f0109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.273] GetROP2 (hdc=0x3f0109cc) returned 13 [0063.274] GetBkMode (hdc=0x3f0109cc) returned 2 [0063.274] SetBkMode (hdc=0x3f0109cc, mode=1) returned 2 [0063.274] SelectObject (hdc=0x3f0109cc, h=0x633009bc) returned 0x633009bc [0063.274] MoveToEx (in: hdc=0x3f0109cc, x=0, y=0, lppt=0x228e868 | out: lppt=0x228e868) returned 1 [0063.274] LineTo (hdc=0x3f0109cc, x=0, y=22) returned 1 [0063.274] SetBkMode (hdc=0x3f0109cc, mode=2) returned 1 [0063.274] MoveToEx (in: hdc=0x3f0109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.274] SelectObject (hdc=0x3f0109cc, h=0x1b00017) returned 0x633009bc [0063.274] DeleteObject (ho=0x633009bc) returned 1 [0063.274] GetROP2 (hdc=0x3f0109cc) returned 13 [0063.274] GetBkMode (hdc=0x3f0109cc) returned 2 [0063.274] SetBkMode (hdc=0x3f0109cc, mode=1) returned 2 [0063.274] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x40300679 [0063.274] SelectObject (hdc=0x3f0109cc, h=0x40300679) returned 0x1b00017 [0063.274] MoveToEx (in: hdc=0x3f0109cc, x=0, y=22, lppt=0x228e8d0 | out: lppt=0x228e8d0) returned 1 [0063.274] LineTo (hdc=0x3f0109cc, x=25, y=22) returned 1 [0063.274] SetBkMode (hdc=0x3f0109cc, mode=2) returned 1 [0063.274] MoveToEx (in: hdc=0x3f0109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.274] GetROP2 (hdc=0x3f0109cc) returned 13 [0063.274] GetBkMode (hdc=0x3f0109cc) returned 2 [0063.274] SetBkMode (hdc=0x3f0109cc, mode=1) returned 2 [0063.274] SelectObject (hdc=0x3f0109cc, h=0x40300679) returned 0x40300679 [0063.274] MoveToEx (in: hdc=0x3f0109cc, x=25, y=22, lppt=0x228e8e8 | out: lppt=0x228e8e8) returned 1 [0063.274] LineTo (hdc=0x3f0109cc, x=25, y=-1) returned 1 [0063.275] SetBkMode (hdc=0x3f0109cc, mode=2) returned 1 [0063.275] MoveToEx (in: hdc=0x3f0109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.275] SelectObject (hdc=0x3f0109cc, h=0x1b00017) returned 0x40300679 [0063.275] DeleteObject (ho=0x40300679) returned 1 [0063.275] GetROP2 (hdc=0x3f0109cc) returned 13 [0063.275] GetBkMode (hdc=0x3f0109cc) returned 2 [0063.275] SetBkMode (hdc=0x3f0109cc, mode=1) returned 2 [0063.275] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x643009bc [0063.275] SelectObject (hdc=0x3f0109cc, h=0x643009bc) returned 0x1b00017 [0063.275] MoveToEx (in: hdc=0x3f0109cc, x=24, y=1, lppt=0x228e950 | out: lppt=0x228e950) returned 1 [0063.275] LineTo (hdc=0x3f0109cc, x=1, y=1) returned 1 [0063.275] SetBkMode (hdc=0x3f0109cc, mode=2) returned 1 [0063.275] MoveToEx (in: hdc=0x3f0109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.275] GetROP2 (hdc=0x3f0109cc) returned 13 [0063.275] GetBkMode (hdc=0x3f0109cc) returned 2 [0063.275] SetBkMode (hdc=0x3f0109cc, mode=1) returned 2 [0063.275] SelectObject (hdc=0x3f0109cc, h=0x643009bc) returned 0x643009bc [0063.275] MoveToEx (in: hdc=0x3f0109cc, x=1, y=1, lppt=0x228e968 | out: lppt=0x228e968) returned 1 [0063.275] LineTo (hdc=0x3f0109cc, x=1, y=21) returned 1 [0063.275] SetBkMode (hdc=0x3f0109cc, mode=2) returned 1 [0063.275] MoveToEx (in: hdc=0x3f0109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.275] SelectObject (hdc=0x3f0109cc, h=0x1b00017) returned 0x643009bc [0063.275] DeleteObject (ho=0x643009bc) returned 1 [0063.275] GetROP2 (hdc=0x3f0109cc) returned 13 [0063.275] GetBkMode (hdc=0x3f0109cc) returned 2 [0063.275] SetBkMode (hdc=0x3f0109cc, mode=1) returned 2 [0063.276] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x41300679 [0063.276] SelectObject (hdc=0x3f0109cc, h=0x41300679) returned 0x1b00017 [0063.276] MoveToEx (in: hdc=0x3f0109cc, x=1, y=21, lppt=0x228e9d0 | out: lppt=0x228e9d0) returned 1 [0063.276] LineTo (hdc=0x3f0109cc, x=24, y=21) returned 1 [0063.276] SetBkMode (hdc=0x3f0109cc, mode=2) returned 1 [0063.276] MoveToEx (in: hdc=0x3f0109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.276] GetROP2 (hdc=0x3f0109cc) returned 13 [0063.276] GetBkMode (hdc=0x3f0109cc) returned 2 [0063.276] SetBkMode (hdc=0x3f0109cc, mode=1) returned 2 [0063.276] SelectObject (hdc=0x3f0109cc, h=0x41300679) returned 0x41300679 [0063.276] MoveToEx (in: hdc=0x3f0109cc, x=24, y=21, lppt=0x228e9e8 | out: lppt=0x228e9e8) returned 1 [0063.276] LineTo (hdc=0x3f0109cc, x=24, y=0) returned 1 [0063.276] SetBkMode (hdc=0x3f0109cc, mode=2) returned 1 [0063.276] MoveToEx (in: hdc=0x3f0109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.276] SelectObject (hdc=0x3f0109cc, h=0x1b00017) returned 0x41300679 [0063.276] DeleteObject (ho=0x41300679) returned 1 [0063.276] RestoreDC (hdc=0x3f0109cc, nSavedDC=-1) returned 1 [0063.276] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x3f0109cc) returned 0x0 [0063.276] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0063.276] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x3f0109cc, x1=0, y1=0, rop=0xcc0020) returned 1 [0063.277] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x3f0109cc) returned 0x0 [0063.277] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0063.278] SelectObject (hdc=0x3f0109cc, h=0x185000f) returned 0x160506a9 [0063.278] DeleteDC (hdc=0x3f0109cc) returned 1 [0063.278] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0063.278] EndPaint (hWnd=0x3031e, lpPaint=0x14e548) returned 1 [0063.278] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.278] IsWindowUnicode (hWnd=0x30308) returned 1 [0063.278] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.279] TranslateMessage (lpMsg=0x14ef10) returned 0 [0063.279] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0063.279] BeginPaint (in: hWnd=0x30308, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0063.279] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0063.279] CreateCompatibleDC (hdc=0x1b0107ae) returned 0xffffffffca0105ed [0063.279] SelectObject (hdc=0xffffffffca0105ed, h=0x160506a9) returned 0x185000f [0063.279] GdipCreateFromHDC (hdc=0xffffffffca0105ed, graphics=0x14e528) returned 0x0 [0063.279] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0063.279] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0063.279] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0063.279] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0063.279] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0063.279] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d490 [0063.279] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d490) returned 0x0 [0063.280] LocalFree (hMem=0x1d92d490) returned 0x0 [0063.280] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0063.280] GdipCreateRegion (region=0x14e550) returned 0x0 [0063.280] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.280] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0063.280] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0063.280] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd810dbd) returned 0x0 [0063.280] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.280] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0063.280] GetCurrentObject (hdc=0xffffffffca0105ed, type=0x1) returned 0x1b00017 [0063.280] GetCurrentObject (hdc=0xffffffffca0105ed, type=0x2) returned 0x1900010 [0063.280] GetCurrentObject (hdc=0xffffffffca0105ed, type=0x7) returned 0x160506a9 [0063.280] GetCurrentObject (hdc=0xffffffffca0105ed, type=0x6) returned 0x18a0048 [0063.280] SaveDC (hdc=0xffffffffca0105ed) returned 1 [0063.281] GetNearestColor (hdc=0xffffffffca0105ed, color=0xf0f0f0) returned 0xf0f0f0 [0063.281] GetNearestColor (hdc=0xffffffffca0105ed, color=0xa0a0a0) returned 0xa0a0a0 [0063.281] GetNearestColor (hdc=0xffffffffca0105ed, color=0x696969) returned 0x696969 [0063.281] GetNearestColor (hdc=0xffffffffca0105ed, color=0xa0a0a0) returned 0xa0a0a0 [0063.281] GetNearestColor (hdc=0xffffffffca0105ed, color=0x0) returned 0x0 [0063.281] GetNearestColor (hdc=0xffffffffca0105ed, color=0xffffff) returned 0xffffff [0063.281] GetNearestColor (hdc=0xffffffffca0105ed, color=0xe5e5e5) returned 0xe5e5e5 [0063.281] GetNearestColor (hdc=0xffffffffca0105ed, color=0xd8d8d8) returned 0xd8d8d8 [0063.281] GetNearestColor (hdc=0xffffffffca0105ed, color=0x0) returned 0x0 [0063.281] RestoreDC (hdc=0xffffffffca0105ed, nSavedDC=-1) returned 1 [0063.281] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffffca0105ed) returned 0x0 [0063.281] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExí(\x02", lpUsedDefaultChar=0x0) returned 17 [0063.282] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.282] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x228f320) returned 0x0 [0063.282] GdipSetStringFormatAlign (format=0x1beb7f40, align=0x1) returned 0x0 [0063.282] GdipSetStringFormatLineAlign (format=0x1beb7f40, align=0x1) returned 0x0 [0063.282] GdipSetStringFormatHotkeyPrefix (format=0x1beb7f40, hotkeyPrefix=2) returned 0x0 [0063.282] GdipGetStringFormatFlags (format=0x1beb7f40, flags=0x14e378) returned 0x0 [0063.282] GdipGetStringFormatTrimming (format=0x1beb7f40, trimming=0x14e378) returned 0x0 [0063.282] GdipGetStringFormatHotkeyPrefix (format=0x1beb7f40, hotkeyPrefix=0x14e378) returned 0x0 [0063.282] GdipGetFontSize (font=0x1beb7f40, size=0x14e378) returned 0x0 [0063.282] GdipGetFontStyle (font=0x1beb7f40, style=0x14e378) returned 0x0 [0063.282] GdipDeleteStringFormat (format=0x1beb7f40) returned 0x0 [0063.282] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0063.282] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.283] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0063.283] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x228f450) returned 0x0 [0063.283] GdipSetStringFormatFlags (format=0x1beb7c30, flags=0) returned 0x0 [0063.283] GdipSetStringFormatTrimming (format=0x1beb7c30, trimming=0x1) returned 0x0 [0063.283] GdipSetStringFormatHotkeyPrefix (format=0x1beb7c30, hotkeyPrefix=2) returned 0x0 [0063.283] GdipSetStringFormatAlign (format=0x1beb7c30, align=0x1) returned 0x0 [0063.283] GdipSetStringFormatLineAlign (format=0x1beb7c30, align=0x1) returned 0x0 [0063.283] GdipMeasureString (graphics=0x1beb8070, string="5", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7c30, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0063.283] GdipDeleteStringFormat (format=0x1beb7c30) returned 0x0 [0063.283] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0063.283] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0063.284] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.284] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0063.284] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.284] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0063.284] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0063.284] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0063.284] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0063.284] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d2d0) returned 0x0 [0063.284] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0063.285] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d490 [0063.285] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d490) returned 0x0 [0063.285] LocalFree (hMem=0x1d92d490) returned 0x0 [0063.285] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0063.285] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0063.285] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0063.285] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0063.285] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.285] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0063.285] GetCurrentObject (hdc=0xffffffffca0105ed, type=0x1) returned 0x1b00017 [0063.285] GetCurrentObject (hdc=0xffffffffca0105ed, type=0x2) returned 0x1900010 [0063.287] GetCurrentObject (hdc=0xffffffffca0105ed, type=0x7) returned 0x160506a9 [0063.287] GetCurrentObject (hdc=0xffffffffca0105ed, type=0x6) returned 0x18a0048 [0063.287] SaveDC (hdc=0xffffffffca0105ed) returned 1 [0063.287] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7d04095c [0063.287] GetClipRgn (hdc=0xffffffffca0105ed, hrgn=0x7d04095c) returned 0 [0063.288] SelectClipRgn (hdc=0xffffffffca0105ed, hrgn=0x3e0406c7) returned 2 [0063.288] DeleteObject (ho=0x7d04095c) returned 1 [0063.288] DeleteObject (ho=0x3e0406c7) returned 1 [0063.288] OffsetViewportOrgEx (in: hdc=0xffffffffca0105ed, x=0, y=0, lppt=0x228f810 | out: lppt=0x228f810) returned 1 [0063.288] GetNearestColor (hdc=0xffffffffca0105ed, color=0xf0f0f0) returned 0xf0f0f0 [0063.288] CreateSolidBrush (color=0xf0f0f0) returned 0x35100559 [0063.288] FillRect (hDC=0xffffffffca0105ed, lprc=0x14e1c8, hbr=0x35100559) returned 1 [0063.288] DeleteObject (ho=0x35100559) returned 1 [0063.288] RestoreDC (hdc=0xffffffffca0105ed, nSavedDC=-1) returned 1 [0063.288] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffffca0105ed) returned 0x0 [0063.288] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0063.288] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.288] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x228f910) returned 0x0 [0063.289] GdipSetStringFormatAlign (format=0x1beb7ca0, align=0x1) returned 0x0 [0063.289] GdipSetStringFormatLineAlign (format=0x1beb7ca0, align=0x1) returned 0x0 [0063.289] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ca0, hotkeyPrefix=2) returned 0x0 [0063.289] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0063.289] GdipDrawString (graphics=0x1beb67f0, string="5", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7ca0, brush=0x1beb15e0) returned 0x0 [0063.292] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0063.292] GdipDeleteStringFormat (format=0x1beb7ca0) returned 0x0 [0063.292] GetFocus () returned 0x302de [0063.293] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExê(\x02", lpUsedDefaultChar=0x0) returned 17 [0063.293] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.293] GdipCreateRegion (region=0x14e030) returned 0x0 [0063.293] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.293] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0063.293] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0063.293] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0063.293] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d110 [0063.293] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d110) returned 0x0 [0063.294] LocalFree (hMem=0x1d92d110) returned 0x0 [0063.294] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d490 [0063.294] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d490) returned 0x0 [0063.294] LocalFree (hMem=0x1d92d490) returned 0x0 [0063.294] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0063.294] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0063.294] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0063.294] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0063.294] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.294] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0063.295] GetCurrentObject (hdc=0xffffffffca0105ed, type=0x1) returned 0x1b00017 [0063.295] GetCurrentObject (hdc=0xffffffffca0105ed, type=0x2) returned 0x1900010 [0063.295] GetCurrentObject (hdc=0xffffffffca0105ed, type=0x7) returned 0x160506a9 [0063.295] GetCurrentObject (hdc=0xffffffffca0105ed, type=0x6) returned 0x18a0048 [0063.295] SaveDC (hdc=0xffffffffca0105ed) returned 1 [0063.295] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3f0406c7 [0063.295] GetClipRgn (hdc=0xffffffffca0105ed, hrgn=0x3f0406c7) returned 0 [0063.295] SelectClipRgn (hdc=0xffffffffca0105ed, hrgn=0x7e04095c) returned 2 [0063.295] DeleteObject (ho=0x3f0406c7) returned 1 [0063.295] DeleteObject (ho=0x7e04095c) returned 1 [0063.295] OffsetViewportOrgEx (in: hdc=0xffffffffca0105ed, x=0, y=0, lppt=0x228fcf8 | out: lppt=0x228fcf8) returned 1 [0063.295] GetROP2 (hdc=0xffffffffca0105ed) returned 13 [0063.295] GetBkMode (hdc=0xffffffffca0105ed) returned 2 [0063.295] SetBkMode (hdc=0xffffffffca0105ed, mode=1) returned 2 [0063.295] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x42300679 [0063.295] SelectObject (hdc=0xffffffffca0105ed, h=0x42300679) returned 0x1b00017 [0063.295] MoveToEx (in: hdc=0xffffffffca0105ed, x=25, y=0, lppt=0x228fd60 | out: lppt=0x228fd60) returned 1 [0063.295] LineTo (hdc=0xffffffffca0105ed, x=0, y=0) returned 1 [0063.295] SetBkMode (hdc=0xffffffffca0105ed, mode=2) returned 1 [0063.295] MoveToEx (in: hdc=0xffffffffca0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.295] GetROP2 (hdc=0xffffffffca0105ed) returned 13 [0063.296] GetBkMode (hdc=0xffffffffca0105ed) returned 2 [0063.296] SetBkMode (hdc=0xffffffffca0105ed, mode=1) returned 2 [0063.296] SelectObject (hdc=0xffffffffca0105ed, h=0x42300679) returned 0x42300679 [0063.296] MoveToEx (in: hdc=0xffffffffca0105ed, x=0, y=0, lppt=0x228fd78 | out: lppt=0x228fd78) returned 1 [0063.296] LineTo (hdc=0xffffffffca0105ed, x=0, y=22) returned 1 [0063.296] SetBkMode (hdc=0xffffffffca0105ed, mode=2) returned 1 [0063.296] MoveToEx (in: hdc=0xffffffffca0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.296] SelectObject (hdc=0xffffffffca0105ed, h=0x1b00017) returned 0x42300679 [0063.296] DeleteObject (ho=0x42300679) returned 1 [0063.296] GetROP2 (hdc=0xffffffffca0105ed) returned 13 [0063.296] GetBkMode (hdc=0xffffffffca0105ed) returned 2 [0063.296] SetBkMode (hdc=0xffffffffca0105ed, mode=1) returned 2 [0063.296] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x653009bc [0063.296] SelectObject (hdc=0xffffffffca0105ed, h=0x653009bc) returned 0x1b00017 [0063.296] MoveToEx (in: hdc=0xffffffffca0105ed, x=0, y=22, lppt=0x228fde0 | out: lppt=0x228fde0) returned 1 [0063.296] LineTo (hdc=0xffffffffca0105ed, x=25, y=22) returned 1 [0063.296] SetBkMode (hdc=0xffffffffca0105ed, mode=2) returned 1 [0063.296] MoveToEx (in: hdc=0xffffffffca0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.296] GetROP2 (hdc=0xffffffffca0105ed) returned 13 [0063.296] GetBkMode (hdc=0xffffffffca0105ed) returned 2 [0063.296] SetBkMode (hdc=0xffffffffca0105ed, mode=1) returned 2 [0063.296] SelectObject (hdc=0xffffffffca0105ed, h=0x653009bc) returned 0x653009bc [0063.296] MoveToEx (in: hdc=0xffffffffca0105ed, x=25, y=22, lppt=0x228fdf8 | out: lppt=0x228fdf8) returned 1 [0063.296] LineTo (hdc=0xffffffffca0105ed, x=25, y=-1) returned 1 [0063.297] SetBkMode (hdc=0xffffffffca0105ed, mode=2) returned 1 [0063.297] MoveToEx (in: hdc=0xffffffffca0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.297] SelectObject (hdc=0xffffffffca0105ed, h=0x1b00017) returned 0x653009bc [0063.297] DeleteObject (ho=0x653009bc) returned 1 [0063.297] GetROP2 (hdc=0xffffffffca0105ed) returned 13 [0063.297] GetBkMode (hdc=0xffffffffca0105ed) returned 2 [0063.297] SetBkMode (hdc=0xffffffffca0105ed, mode=1) returned 2 [0063.297] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x43300679 [0063.297] SelectObject (hdc=0xffffffffca0105ed, h=0x43300679) returned 0x1b00017 [0063.297] MoveToEx (in: hdc=0xffffffffca0105ed, x=24, y=1, lppt=0x228fe60 | out: lppt=0x228fe60) returned 1 [0063.297] LineTo (hdc=0xffffffffca0105ed, x=1, y=1) returned 1 [0063.297] SetBkMode (hdc=0xffffffffca0105ed, mode=2) returned 1 [0063.297] MoveToEx (in: hdc=0xffffffffca0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.297] GetROP2 (hdc=0xffffffffca0105ed) returned 13 [0063.297] GetBkMode (hdc=0xffffffffca0105ed) returned 2 [0063.297] SetBkMode (hdc=0xffffffffca0105ed, mode=1) returned 2 [0063.297] SelectObject (hdc=0xffffffffca0105ed, h=0x43300679) returned 0x43300679 [0063.297] MoveToEx (in: hdc=0xffffffffca0105ed, x=1, y=1, lppt=0x228fe78 | out: lppt=0x228fe78) returned 1 [0063.297] LineTo (hdc=0xffffffffca0105ed, x=1, y=21) returned 1 [0063.297] SetBkMode (hdc=0xffffffffca0105ed, mode=2) returned 1 [0063.297] MoveToEx (in: hdc=0xffffffffca0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.297] SelectObject (hdc=0xffffffffca0105ed, h=0x1b00017) returned 0x43300679 [0063.297] DeleteObject (ho=0x43300679) returned 1 [0063.298] GetROP2 (hdc=0xffffffffca0105ed) returned 13 [0063.298] GetBkMode (hdc=0xffffffffca0105ed) returned 2 [0063.298] SetBkMode (hdc=0xffffffffca0105ed, mode=1) returned 2 [0063.298] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x663009bc [0063.298] SelectObject (hdc=0xffffffffca0105ed, h=0x663009bc) returned 0x1b00017 [0063.298] MoveToEx (in: hdc=0xffffffffca0105ed, x=1, y=21, lppt=0x228fee0 | out: lppt=0x228fee0) returned 1 [0063.298] LineTo (hdc=0xffffffffca0105ed, x=24, y=21) returned 1 [0063.298] SetBkMode (hdc=0xffffffffca0105ed, mode=2) returned 1 [0063.298] MoveToEx (in: hdc=0xffffffffca0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.298] GetROP2 (hdc=0xffffffffca0105ed) returned 13 [0063.298] GetBkMode (hdc=0xffffffffca0105ed) returned 2 [0063.298] SetBkMode (hdc=0xffffffffca0105ed, mode=1) returned 2 [0063.298] SelectObject (hdc=0xffffffffca0105ed, h=0x663009bc) returned 0x663009bc [0063.298] MoveToEx (in: hdc=0xffffffffca0105ed, x=24, y=21, lppt=0x228fef8 | out: lppt=0x228fef8) returned 1 [0063.298] LineTo (hdc=0xffffffffca0105ed, x=24, y=0) returned 1 [0063.298] SetBkMode (hdc=0xffffffffca0105ed, mode=2) returned 1 [0063.298] MoveToEx (in: hdc=0xffffffffca0105ed, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.298] SelectObject (hdc=0xffffffffca0105ed, h=0x1b00017) returned 0x663009bc [0063.298] DeleteObject (ho=0x663009bc) returned 1 [0063.298] RestoreDC (hdc=0xffffffffca0105ed, nSavedDC=-1) returned 1 [0063.298] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffffca0105ed) returned 0x0 [0063.298] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0063.299] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0xffffffffca0105ed, x1=0, y1=0, rop=0xcc0020) returned 1 [0063.299] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffffca0105ed) returned 0x0 [0063.299] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0063.299] SelectObject (hdc=0xffffffffca0105ed, h=0x185000f) returned 0x160506a9 [0063.299] DeleteDC (hdc=0xffffffffca0105ed) returned 1 [0063.299] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0063.299] EndPaint (hWnd=0x30308, lpPaint=0x14e548) returned 1 [0063.299] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.299] IsWindowUnicode (hWnd=0x3030c) returned 1 [0063.299] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.299] TranslateMessage (lpMsg=0x14ef10) returned 0 [0063.299] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0063.299] BeginPaint (in: hWnd=0x3030c, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0063.299] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0063.299] CreateCompatibleDC (hdc=0xc0100ae) returned 0x5c01099d [0063.299] SelectObject (hdc=0x5c01099d, h=0x160506a9) returned 0x185000f [0063.300] GdipCreateFromHDC (hdc=0x5c01099d, graphics=0x14e528) returned 0x0 [0063.300] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0063.300] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0063.300] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0063.300] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0063.300] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0063.300] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0063.300] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d2d0) returned 0x0 [0063.301] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0063.301] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0063.301] GdipCreateRegion (region=0x14e550) returned 0x0 [0063.301] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.301] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0063.301] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0063.301] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd7e0dbd) returned 0x0 [0063.301] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.301] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0063.301] GetCurrentObject (hdc=0x5c01099d, type=0x1) returned 0x1b00017 [0063.301] GetCurrentObject (hdc=0x5c01099d, type=0x2) returned 0x1900010 [0063.304] GetCurrentObject (hdc=0x5c01099d, type=0x7) returned 0x160506a9 [0063.304] GetCurrentObject (hdc=0x5c01099d, type=0x6) returned 0x18a0048 [0063.304] SaveDC (hdc=0x5c01099d) returned 1 [0063.304] GetNearestColor (hdc=0x5c01099d, color=0xf0f0f0) returned 0xf0f0f0 [0063.304] GetNearestColor (hdc=0x5c01099d, color=0xa0a0a0) returned 0xa0a0a0 [0063.304] GetNearestColor (hdc=0x5c01099d, color=0x696969) returned 0x696969 [0063.304] GetNearestColor (hdc=0x5c01099d, color=0xa0a0a0) returned 0xa0a0a0 [0063.304] GetNearestColor (hdc=0x5c01099d, color=0x0) returned 0x0 [0063.304] GetNearestColor (hdc=0x5c01099d, color=0xffffff) returned 0xffffff [0063.304] GetNearestColor (hdc=0x5c01099d, color=0xe5e5e5) returned 0xe5e5e5 [0063.304] GetNearestColor (hdc=0x5c01099d, color=0xd8d8d8) returned 0xd8d8d8 [0063.304] GetNearestColor (hdc=0x5c01099d, color=0x0) returned 0x0 [0063.304] RestoreDC (hdc=0x5c01099d, nSavedDC=-1) returned 1 [0063.304] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5c01099d) returned 0x0 [0063.305] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x02)\x02", lpUsedDefaultChar=0x0) returned 17 [0063.305] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.305] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2290830) returned 0x0 [0063.305] GdipSetStringFormatAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0063.305] GdipSetStringFormatLineAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0063.305] GdipSetStringFormatHotkeyPrefix (format=0x1beb7d10, hotkeyPrefix=2) returned 0x0 [0063.305] GdipGetStringFormatFlags (format=0x1beb7d10, flags=0x14e378) returned 0x0 [0063.305] GdipGetStringFormatTrimming (format=0x1beb7d10, trimming=0x14e378) returned 0x0 [0063.305] GdipGetStringFormatHotkeyPrefix (format=0x1beb7d10, hotkeyPrefix=0x14e378) returned 0x0 [0063.305] GdipGetFontSize (font=0x1beb7d10, size=0x14e378) returned 0x0 [0063.305] GdipGetFontStyle (font=0x1beb7d10, style=0x14e378) returned 0x0 [0063.305] GdipDeleteStringFormat (format=0x1beb7d10) returned 0x0 [0063.305] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.306] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0063.306] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.306] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0063.306] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2290960) returned 0x0 [0063.306] GdipSetStringFormatFlags (format=0x1beb7fb0, flags=0) returned 0x0 [0063.306] GdipSetStringFormatTrimming (format=0x1beb7fb0, trimming=0x1) returned 0x0 [0063.306] GdipSetStringFormatHotkeyPrefix (format=0x1beb7fb0, hotkeyPrefix=2) returned 0x0 [0063.306] GdipSetStringFormatAlign (format=0x1beb7fb0, align=0x1) returned 0x0 [0063.306] GdipSetStringFormatLineAlign (format=0x1beb7fb0, align=0x1) returned 0x0 [0063.306] GdipMeasureString (graphics=0x1beb8070, string="2", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7fb0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0063.306] GdipDeleteStringFormat (format=0x1beb7fb0) returned 0x0 [0063.306] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0063.306] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0063.307] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.307] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0063.307] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.307] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0063.307] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0063.307] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0063.307] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cbd0 [0063.307] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cbd0) returned 0x0 [0063.308] LocalFree (hMem=0x1d92cbd0) returned 0x0 [0063.308] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cbd0 [0063.308] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cbd0) returned 0x0 [0063.308] LocalFree (hMem=0x1d92cbd0) returned 0x0 [0063.308] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0063.308] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0063.308] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0063.308] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0063.309] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.309] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0063.309] GetCurrentObject (hdc=0x5c01099d, type=0x1) returned 0x1b00017 [0063.309] GetCurrentObject (hdc=0x5c01099d, type=0x2) returned 0x1900010 [0063.309] GetCurrentObject (hdc=0x5c01099d, type=0x7) returned 0x160506a9 [0063.309] GetCurrentObject (hdc=0x5c01099d, type=0x6) returned 0x18a0048 [0063.309] SaveDC (hdc=0x5c01099d) returned 1 [0063.309] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7f04095c [0063.309] GetClipRgn (hdc=0x5c01099d, hrgn=0x7f04095c) returned 0 [0063.309] SelectClipRgn (hdc=0x5c01099d, hrgn=0x400406c7) returned 2 [0063.309] DeleteObject (ho=0x7f04095c) returned 1 [0063.309] DeleteObject (ho=0x400406c7) returned 1 [0063.309] OffsetViewportOrgEx (in: hdc=0x5c01099d, x=0, y=0, lppt=0x2290d20 | out: lppt=0x2290d20) returned 1 [0063.309] GetNearestColor (hdc=0x5c01099d, color=0xf0f0f0) returned 0xf0f0f0 [0063.309] CreateSolidBrush (color=0xf0f0f0) returned 0x36100559 [0063.309] FillRect (hDC=0x5c01099d, lprc=0x14e1c8, hbr=0x36100559) returned 1 [0063.309] DeleteObject (ho=0x36100559) returned 1 [0063.309] RestoreDC (hdc=0x5c01099d, nSavedDC=-1) returned 1 [0063.309] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5c01099d) returned 0x0 [0063.310] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.310] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0063.310] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.310] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2290e20) returned 0x0 [0063.310] GdipSetStringFormatAlign (format=0x1beb78b0, align=0x1) returned 0x0 [0063.310] GdipSetStringFormatLineAlign (format=0x1beb78b0, align=0x1) returned 0x0 [0063.310] GdipSetStringFormatHotkeyPrefix (format=0x1beb78b0, hotkeyPrefix=2) returned 0x0 [0063.310] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0063.310] GdipDrawString (graphics=0x1beb67f0, string="2", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb78b0, brush=0x1beb15e0) returned 0x0 [0063.314] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0063.314] GdipDeleteStringFormat (format=0x1beb78b0) returned 0x0 [0063.314] GetFocus () returned 0x302de [0063.314] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.314] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÿ(\x02", lpUsedDefaultChar=0x0) returned 17 [0063.314] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.314] GdipCreateRegion (region=0x14e030) returned 0x0 [0063.314] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.315] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0063.315] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0063.315] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0063.315] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cbd0 [0063.315] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cbd0) returned 0x0 [0063.315] LocalFree (hMem=0x1d92cbd0) returned 0x0 [0063.315] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92ccd0 [0063.315] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92ccd0) returned 0x0 [0063.316] LocalFree (hMem=0x1d92ccd0) returned 0x0 [0063.316] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0063.316] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0063.316] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0063.316] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0063.316] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.316] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0063.316] GetCurrentObject (hdc=0x5c01099d, type=0x1) returned 0x1b00017 [0063.316] GetCurrentObject (hdc=0x5c01099d, type=0x2) returned 0x1900010 [0063.316] GetCurrentObject (hdc=0x5c01099d, type=0x7) returned 0x160506a9 [0063.316] GetCurrentObject (hdc=0x5c01099d, type=0x6) returned 0x18a0048 [0063.316] SaveDC (hdc=0x5c01099d) returned 1 [0063.316] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x410406c7 [0063.316] GetClipRgn (hdc=0x5c01099d, hrgn=0x410406c7) returned 0 [0063.317] SelectClipRgn (hdc=0x5c01099d, hrgn=0xffffffff8004095c) returned 2 [0063.317] DeleteObject (ho=0x410406c7) returned 1 [0063.317] DeleteObject (ho=0xffffffff8004095c) returned 1 [0063.317] OffsetViewportOrgEx (in: hdc=0x5c01099d, x=0, y=0, lppt=0x2291208 | out: lppt=0x2291208) returned 1 [0063.317] GetROP2 (hdc=0x5c01099d) returned 13 [0063.317] GetBkMode (hdc=0x5c01099d) returned 2 [0063.317] SetBkMode (hdc=0x5c01099d, mode=1) returned 2 [0063.317] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x673009bc [0063.317] SelectObject (hdc=0x5c01099d, h=0x673009bc) returned 0x1b00017 [0063.317] MoveToEx (in: hdc=0x5c01099d, x=25, y=0, lppt=0x2291270 | out: lppt=0x2291270) returned 1 [0063.317] LineTo (hdc=0x5c01099d, x=0, y=0) returned 1 [0063.317] SetBkMode (hdc=0x5c01099d, mode=2) returned 1 [0063.317] MoveToEx (in: hdc=0x5c01099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.317] GetROP2 (hdc=0x5c01099d) returned 13 [0063.317] GetBkMode (hdc=0x5c01099d) returned 2 [0063.317] SetBkMode (hdc=0x5c01099d, mode=1) returned 2 [0063.317] SelectObject (hdc=0x5c01099d, h=0x673009bc) returned 0x673009bc [0063.317] MoveToEx (in: hdc=0x5c01099d, x=0, y=0, lppt=0x2291288 | out: lppt=0x2291288) returned 1 [0063.317] LineTo (hdc=0x5c01099d, x=0, y=22) returned 1 [0063.317] SetBkMode (hdc=0x5c01099d, mode=2) returned 1 [0063.318] MoveToEx (in: hdc=0x5c01099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.318] SelectObject (hdc=0x5c01099d, h=0x1b00017) returned 0x673009bc [0063.318] DeleteObject (ho=0x673009bc) returned 1 [0063.318] GetROP2 (hdc=0x5c01099d) returned 13 [0063.318] GetBkMode (hdc=0x5c01099d) returned 2 [0063.318] SetBkMode (hdc=0x5c01099d, mode=1) returned 2 [0063.318] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x44300679 [0063.318] SelectObject (hdc=0x5c01099d, h=0x44300679) returned 0x1b00017 [0063.318] MoveToEx (in: hdc=0x5c01099d, x=0, y=22, lppt=0x22912f0 | out: lppt=0x22912f0) returned 1 [0063.318] LineTo (hdc=0x5c01099d, x=25, y=22) returned 1 [0063.318] SetBkMode (hdc=0x5c01099d, mode=2) returned 1 [0063.318] MoveToEx (in: hdc=0x5c01099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.318] GetROP2 (hdc=0x5c01099d) returned 13 [0063.318] GetBkMode (hdc=0x5c01099d) returned 2 [0063.318] SetBkMode (hdc=0x5c01099d, mode=1) returned 2 [0063.318] SelectObject (hdc=0x5c01099d, h=0x44300679) returned 0x44300679 [0063.318] MoveToEx (in: hdc=0x5c01099d, x=25, y=22, lppt=0x2291308 | out: lppt=0x2291308) returned 1 [0063.318] LineTo (hdc=0x5c01099d, x=25, y=-1) returned 1 [0063.318] SetBkMode (hdc=0x5c01099d, mode=2) returned 1 [0063.318] MoveToEx (in: hdc=0x5c01099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.318] SelectObject (hdc=0x5c01099d, h=0x1b00017) returned 0x44300679 [0063.318] DeleteObject (ho=0x44300679) returned 1 [0063.319] GetROP2 (hdc=0x5c01099d) returned 13 [0063.319] GetBkMode (hdc=0x5c01099d) returned 2 [0063.319] SetBkMode (hdc=0x5c01099d, mode=1) returned 2 [0063.319] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x683009bc [0063.319] SelectObject (hdc=0x5c01099d, h=0x683009bc) returned 0x1b00017 [0063.319] MoveToEx (in: hdc=0x5c01099d, x=24, y=1, lppt=0x2291370 | out: lppt=0x2291370) returned 1 [0063.319] LineTo (hdc=0x5c01099d, x=1, y=1) returned 1 [0063.319] SetBkMode (hdc=0x5c01099d, mode=2) returned 1 [0063.319] MoveToEx (in: hdc=0x5c01099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.319] GetROP2 (hdc=0x5c01099d) returned 13 [0063.319] GetBkMode (hdc=0x5c01099d) returned 2 [0063.319] SetBkMode (hdc=0x5c01099d, mode=1) returned 2 [0063.319] SelectObject (hdc=0x5c01099d, h=0x683009bc) returned 0x683009bc [0063.319] MoveToEx (in: hdc=0x5c01099d, x=1, y=1, lppt=0x2291388 | out: lppt=0x2291388) returned 1 [0063.319] LineTo (hdc=0x5c01099d, x=1, y=21) returned 1 [0063.319] SetBkMode (hdc=0x5c01099d, mode=2) returned 1 [0063.319] MoveToEx (in: hdc=0x5c01099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.319] SelectObject (hdc=0x5c01099d, h=0x1b00017) returned 0x683009bc [0063.319] DeleteObject (ho=0x683009bc) returned 1 [0063.319] GetROP2 (hdc=0x5c01099d) returned 13 [0063.319] GetBkMode (hdc=0x5c01099d) returned 2 [0063.319] SetBkMode (hdc=0x5c01099d, mode=1) returned 2 [0063.319] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x45300679 [0063.319] SelectObject (hdc=0x5c01099d, h=0x45300679) returned 0x1b00017 [0063.320] MoveToEx (in: hdc=0x5c01099d, x=1, y=21, lppt=0x22913f0 | out: lppt=0x22913f0) returned 1 [0063.320] LineTo (hdc=0x5c01099d, x=24, y=21) returned 1 [0063.320] SetBkMode (hdc=0x5c01099d, mode=2) returned 1 [0063.320] MoveToEx (in: hdc=0x5c01099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.320] GetROP2 (hdc=0x5c01099d) returned 13 [0063.320] GetBkMode (hdc=0x5c01099d) returned 2 [0063.320] SetBkMode (hdc=0x5c01099d, mode=1) returned 2 [0063.320] SelectObject (hdc=0x5c01099d, h=0x45300679) returned 0x45300679 [0063.320] MoveToEx (in: hdc=0x5c01099d, x=24, y=21, lppt=0x2291408 | out: lppt=0x2291408) returned 1 [0063.320] LineTo (hdc=0x5c01099d, x=24, y=0) returned 1 [0063.320] SetBkMode (hdc=0x5c01099d, mode=2) returned 1 [0063.320] MoveToEx (in: hdc=0x5c01099d, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.320] SelectObject (hdc=0x5c01099d, h=0x1b00017) returned 0x45300679 [0063.320] DeleteObject (ho=0x45300679) returned 1 [0063.320] RestoreDC (hdc=0x5c01099d, nSavedDC=-1) returned 1 [0063.320] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5c01099d) returned 0x0 [0063.320] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0063.320] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x5c01099d, x1=0, y1=0, rop=0xcc0020) returned 1 [0063.320] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5c01099d) returned 0x0 [0063.320] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0063.320] SelectObject (hdc=0x5c01099d, h=0x185000f) returned 0x160506a9 [0063.321] DeleteDC (hdc=0x5c01099d) returned 1 [0063.321] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0063.321] EndPaint (hWnd=0x3030c, lpPaint=0x14e548) returned 1 [0063.321] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.321] IsWindowUnicode (hWnd=0x302e4) returned 1 [0063.321] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.321] TranslateMessage (lpMsg=0x14ef10) returned 0 [0063.321] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0063.321] BeginPaint (in: hWnd=0x302e4, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0063.321] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0063.321] CreateCompatibleDC (hdc=0x220106d6) returned 0x470109cc [0063.321] SelectObject (hdc=0x470109cc, h=0x160506a9) returned 0x185000f [0063.321] GdipCreateFromHDC (hdc=0x470109cc, graphics=0x14e528) returned 0x0 [0063.321] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0063.321] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0063.322] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0063.322] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0063.322] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0063.322] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0063.322] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d650) returned 0x0 [0063.322] LocalFree (hMem=0x1d92d650) returned 0x0 [0063.322] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0063.322] GdipCreateRegion (region=0x14e550) returned 0x0 [0063.323] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.323] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0063.323] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0063.323] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd7b0dbd) returned 0x0 [0063.323] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.323] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0063.323] GetCurrentObject (hdc=0x470109cc, type=0x1) returned 0x1b00017 [0063.323] GetCurrentObject (hdc=0x470109cc, type=0x2) returned 0x1900010 [0063.323] GetCurrentObject (hdc=0x470109cc, type=0x7) returned 0x160506a9 [0063.323] GetCurrentObject (hdc=0x470109cc, type=0x6) returned 0x18a0048 [0063.323] SaveDC (hdc=0x470109cc) returned 1 [0063.323] GetNearestColor (hdc=0x470109cc, color=0xf0f0f0) returned 0xf0f0f0 [0063.323] GetNearestColor (hdc=0x470109cc, color=0xa0a0a0) returned 0xa0a0a0 [0063.323] GetNearestColor (hdc=0x470109cc, color=0x696969) returned 0x696969 [0063.323] GetNearestColor (hdc=0x470109cc, color=0xa0a0a0) returned 0xa0a0a0 [0063.323] GetNearestColor (hdc=0x470109cc, color=0x0) returned 0x0 [0063.323] GetNearestColor (hdc=0x470109cc, color=0xffffff) returned 0xffffff [0063.323] GetNearestColor (hdc=0x470109cc, color=0xe5e5e5) returned 0xe5e5e5 [0063.323] GetNearestColor (hdc=0x470109cc, color=0xd8d8d8) returned 0xd8d8d8 [0063.323] GetNearestColor (hdc=0x470109cc, color=0x0) returned 0x0 [0063.323] RestoreDC (hdc=0x470109cc, nSavedDC=-1) returned 1 [0063.324] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x470109cc) returned 0x0 [0063.324] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.324] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x17)\x02", lpUsedDefaultChar=0x0) returned 17 [0063.324] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.324] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2291d40) returned 0x0 [0063.324] GdipSetStringFormatAlign (format=0x1beb7ae0, align=0x1) returned 0x0 [0063.324] GdipSetStringFormatLineAlign (format=0x1beb7ae0, align=0x1) returned 0x0 [0063.324] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ae0, hotkeyPrefix=2) returned 0x0 [0063.324] GdipGetStringFormatFlags (format=0x1beb7ae0, flags=0x14e378) returned 0x0 [0063.324] GdipGetStringFormatTrimming (format=0x1beb7ae0, trimming=0x14e378) returned 0x0 [0063.324] GdipGetStringFormatHotkeyPrefix (format=0x1beb7ae0, hotkeyPrefix=0x14e378) returned 0x0 [0063.324] GdipGetFontSize (font=0x1beb7ae0, size=0x14e378) returned 0x0 [0063.324] GdipGetFontStyle (font=0x1beb7ae0, style=0x14e378) returned 0x0 [0063.324] GdipDeleteStringFormat (format=0x1beb7ae0) returned 0x0 [0063.325] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.325] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0063.325] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.325] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0063.325] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2291e70) returned 0x0 [0063.325] GdipSetStringFormatFlags (format=0x1beb7a70, flags=0) returned 0x0 [0063.325] GdipSetStringFormatTrimming (format=0x1beb7a70, trimming=0x1) returned 0x0 [0063.325] GdipSetStringFormatHotkeyPrefix (format=0x1beb7a70, hotkeyPrefix=2) returned 0x0 [0063.325] GdipSetStringFormatAlign (format=0x1beb7a70, align=0x1) returned 0x0 [0063.325] GdipSetStringFormatLineAlign (format=0x1beb7a70, align=0x1) returned 0x0 [0063.325] GdipMeasureString (graphics=0x1beb8070, string="1", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7a70, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0063.325] GdipDeleteStringFormat (format=0x1beb7a70) returned 0x0 [0063.325] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0063.326] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.326] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0063.326] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.326] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0063.326] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.326] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0063.326] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0063.326] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0063.326] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d490 [0063.326] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d490) returned 0x0 [0063.327] LocalFree (hMem=0x1d92d490) returned 0x0 [0063.327] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d410 [0063.327] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d410) returned 0x0 [0063.327] LocalFree (hMem=0x1d92d410) returned 0x0 [0063.327] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0063.327] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0063.327] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0063.327] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0063.327] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.327] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0063.328] GetCurrentObject (hdc=0x470109cc, type=0x1) returned 0x1b00017 [0063.328] GetCurrentObject (hdc=0x470109cc, type=0x2) returned 0x1900010 [0063.328] GetCurrentObject (hdc=0x470109cc, type=0x7) returned 0x160506a9 [0063.328] GetCurrentObject (hdc=0x470109cc, type=0x6) returned 0x18a0048 [0063.328] SaveDC (hdc=0x470109cc) returned 1 [0063.328] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8104095c [0063.328] GetClipRgn (hdc=0x470109cc, hrgn=0xffffffff8104095c) returned 0 [0063.328] SelectClipRgn (hdc=0x470109cc, hrgn=0x420406c7) returned 2 [0063.328] DeleteObject (ho=0xffffffff8104095c) returned 1 [0063.328] DeleteObject (ho=0x420406c7) returned 1 [0063.328] OffsetViewportOrgEx (in: hdc=0x470109cc, x=0, y=0, lppt=0x2292230 | out: lppt=0x2292230) returned 1 [0063.329] GetNearestColor (hdc=0x470109cc, color=0xf0f0f0) returned 0xf0f0f0 [0063.329] CreateSolidBrush (color=0xf0f0f0) returned 0x37100559 [0063.329] FillRect (hDC=0x470109cc, lprc=0x14e1c8, hbr=0x37100559) returned 1 [0063.329] DeleteObject (ho=0x37100559) returned 1 [0063.329] RestoreDC (hdc=0x470109cc, nSavedDC=-1) returned 1 [0063.329] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x470109cc) returned 0x0 [0063.329] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.329] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0063.329] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.329] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2292330) returned 0x0 [0063.329] GdipSetStringFormatAlign (format=0x1beb7ca0, align=0x1) returned 0x0 [0063.329] GdipSetStringFormatLineAlign (format=0x1beb7ca0, align=0x1) returned 0x0 [0063.329] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ca0, hotkeyPrefix=2) returned 0x0 [0063.329] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0063.330] GdipDrawString (graphics=0x1beb67f0, string="1", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7ca0, brush=0x1beb15e0) returned 0x0 [0063.366] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0063.366] GdipDeleteStringFormat (format=0x1beb7ca0) returned 0x0 [0063.366] GetFocus () returned 0x302de [0063.366] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0063.366] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x14)\x02", lpUsedDefaultChar=0x0) returned 17 [0063.366] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0063.366] GdipCreateRegion (region=0x14e030) returned 0x0 [0063.366] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0063.366] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0063.366] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0063.367] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0063.367] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0063.367] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d650) returned 0x0 [0063.367] LocalFree (hMem=0x1d92d650) returned 0x0 [0063.367] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d350 [0063.367] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d350) returned 0x0 [0063.368] LocalFree (hMem=0x1d92d350) returned 0x0 [0063.368] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0063.368] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0063.368] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0063.368] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0063.368] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0063.368] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0063.368] GetCurrentObject (hdc=0x470109cc, type=0x1) returned 0x1b00017 [0063.368] GetCurrentObject (hdc=0x470109cc, type=0x2) returned 0x1900010 [0063.368] GetCurrentObject (hdc=0x470109cc, type=0x7) returned 0x160506a9 [0063.368] GetCurrentObject (hdc=0x470109cc, type=0x6) returned 0x18a0048 [0063.368] SaveDC (hdc=0x470109cc) returned 1 [0063.368] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x430406c7 [0063.369] GetClipRgn (hdc=0x470109cc, hrgn=0x430406c7) returned 0 [0063.369] SelectClipRgn (hdc=0x470109cc, hrgn=0xffffffff8204095c) returned 2 [0063.369] DeleteObject (ho=0x430406c7) returned 1 [0063.369] DeleteObject (ho=0xffffffff8204095c) returned 1 [0063.369] OffsetViewportOrgEx (in: hdc=0x470109cc, x=0, y=0, lppt=0x2292718 | out: lppt=0x2292718) returned 1 [0063.369] GetROP2 (hdc=0x470109cc) returned 13 [0063.369] GetBkMode (hdc=0x470109cc) returned 2 [0063.369] SetBkMode (hdc=0x470109cc, mode=1) returned 2 [0063.369] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x6130099d [0063.369] SelectObject (hdc=0x470109cc, h=0x6130099d) returned 0x1b00017 [0063.369] MoveToEx (in: hdc=0x470109cc, x=25, y=0, lppt=0x2292780 | out: lppt=0x2292780) returned 1 [0063.369] LineTo (hdc=0x470109cc, x=0, y=0) returned 1 [0063.369] SetBkMode (hdc=0x470109cc, mode=2) returned 1 [0063.369] MoveToEx (in: hdc=0x470109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.369] GetROP2 (hdc=0x470109cc) returned 13 [0063.369] GetBkMode (hdc=0x470109cc) returned 2 [0063.369] SetBkMode (hdc=0x470109cc, mode=1) returned 2 [0063.369] SelectObject (hdc=0x470109cc, h=0x6130099d) returned 0x6130099d [0063.369] MoveToEx (in: hdc=0x470109cc, x=0, y=0, lppt=0x2292798 | out: lppt=0x2292798) returned 1 [0063.369] LineTo (hdc=0x470109cc, x=0, y=22) returned 1 [0063.369] SetBkMode (hdc=0x470109cc, mode=2) returned 1 [0063.369] MoveToEx (in: hdc=0x470109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.369] SelectObject (hdc=0x470109cc, h=0x1b00017) returned 0x6130099d [0063.370] DeleteObject (ho=0x6130099d) returned 1 [0063.370] GetROP2 (hdc=0x470109cc) returned 13 [0063.370] GetBkMode (hdc=0x470109cc) returned 2 [0063.370] SetBkMode (hdc=0x470109cc, mode=1) returned 2 [0063.370] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x283006cd [0063.370] SelectObject (hdc=0x470109cc, h=0x283006cd) returned 0x1b00017 [0063.370] MoveToEx (in: hdc=0x470109cc, x=0, y=22, lppt=0x2292800 | out: lppt=0x2292800) returned 1 [0063.370] LineTo (hdc=0x470109cc, x=25, y=22) returned 1 [0063.370] SetBkMode (hdc=0x470109cc, mode=2) returned 1 [0063.370] MoveToEx (in: hdc=0x470109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.370] GetROP2 (hdc=0x470109cc) returned 13 [0063.370] GetBkMode (hdc=0x470109cc) returned 2 [0063.370] SetBkMode (hdc=0x470109cc, mode=1) returned 2 [0063.370] SelectObject (hdc=0x470109cc, h=0x283006cd) returned 0x283006cd [0063.370] MoveToEx (in: hdc=0x470109cc, x=25, y=22, lppt=0x2292818 | out: lppt=0x2292818) returned 1 [0063.370] LineTo (hdc=0x470109cc, x=25, y=-1) returned 1 [0063.370] SetBkMode (hdc=0x470109cc, mode=2) returned 1 [0063.370] MoveToEx (in: hdc=0x470109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.370] SelectObject (hdc=0x470109cc, h=0x1b00017) returned 0x283006cd [0063.370] DeleteObject (ho=0x283006cd) returned 1 [0063.370] GetROP2 (hdc=0x470109cc) returned 13 [0063.370] GetBkMode (hdc=0x470109cc) returned 2 [0063.370] SetBkMode (hdc=0x470109cc, mode=1) returned 2 [0063.371] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x6230099d [0063.371] SelectObject (hdc=0x470109cc, h=0x6230099d) returned 0x1b00017 [0063.371] MoveToEx (in: hdc=0x470109cc, x=24, y=1, lppt=0x2292880 | out: lppt=0x2292880) returned 1 [0063.371] LineTo (hdc=0x470109cc, x=1, y=1) returned 1 [0063.371] SetBkMode (hdc=0x470109cc, mode=2) returned 1 [0063.371] MoveToEx (in: hdc=0x470109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.371] GetROP2 (hdc=0x470109cc) returned 13 [0063.371] GetBkMode (hdc=0x470109cc) returned 2 [0063.371] SetBkMode (hdc=0x470109cc, mode=1) returned 2 [0063.371] SelectObject (hdc=0x470109cc, h=0x6230099d) returned 0x6230099d [0063.371] MoveToEx (in: hdc=0x470109cc, x=1, y=1, lppt=0x2292898 | out: lppt=0x2292898) returned 1 [0063.371] LineTo (hdc=0x470109cc, x=1, y=21) returned 1 [0063.371] SetBkMode (hdc=0x470109cc, mode=2) returned 1 [0063.371] MoveToEx (in: hdc=0x470109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.371] SelectObject (hdc=0x470109cc, h=0x1b00017) returned 0x6230099d [0063.371] DeleteObject (ho=0x6230099d) returned 1 [0063.371] GetROP2 (hdc=0x470109cc) returned 13 [0063.371] GetBkMode (hdc=0x470109cc) returned 2 [0063.371] SetBkMode (hdc=0x470109cc, mode=1) returned 2 [0063.371] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x293006cd [0063.371] SelectObject (hdc=0x470109cc, h=0x293006cd) returned 0x1b00017 [0063.371] MoveToEx (in: hdc=0x470109cc, x=1, y=21, lppt=0x2292900 | out: lppt=0x2292900) returned 1 [0063.371] LineTo (hdc=0x470109cc, x=24, y=21) returned 1 [0063.371] SetBkMode (hdc=0x470109cc, mode=2) returned 1 [0063.372] MoveToEx (in: hdc=0x470109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.372] GetROP2 (hdc=0x470109cc) returned 13 [0063.372] GetBkMode (hdc=0x470109cc) returned 2 [0063.372] SetBkMode (hdc=0x470109cc, mode=1) returned 2 [0063.372] SelectObject (hdc=0x470109cc, h=0x293006cd) returned 0x293006cd [0063.372] MoveToEx (in: hdc=0x470109cc, x=24, y=21, lppt=0x2292918 | out: lppt=0x2292918) returned 1 [0063.372] LineTo (hdc=0x470109cc, x=24, y=0) returned 1 [0063.372] SetBkMode (hdc=0x470109cc, mode=2) returned 1 [0063.372] MoveToEx (in: hdc=0x470109cc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0063.372] SelectObject (hdc=0x470109cc, h=0x1b00017) returned 0x293006cd [0063.372] DeleteObject (ho=0x293006cd) returned 1 [0063.372] RestoreDC (hdc=0x470109cc, nSavedDC=-1) returned 1 [0063.372] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x470109cc) returned 0x0 [0063.372] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0063.372] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x470109cc, x1=0, y1=0, rop=0xcc0020) returned 1 [0063.372] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x470109cc) returned 0x0 [0063.372] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0063.374] SelectObject (hdc=0x470109cc, h=0x185000f) returned 0x160506a9 [0063.374] DeleteDC (hdc=0x470109cc) returned 1 [0063.374] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0063.374] EndPaint (hWnd=0x302e4, lpPaint=0x14e548) returned 1 [0063.374] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.374] IsWindowUnicode (hWnd=0x302de) returned 1 [0063.374] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.374] TranslateMessage (lpMsg=0x14ef10) returned 0 [0063.375] DispatchMessageW (lpMsg=0x14ef10) returned 0x1 [0063.375] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0063.375] SetTextColor (hdc=0xc0100ae, color=0x0) returned 0x0 [0063.375] SetBkColor (hdc=0xc0100ae, color=0xffffff) returned 0xffffff [0063.375] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.376] IsWindowUnicode (hWnd=0x50364) returned 1 [0063.376] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.376] TranslateMessage (lpMsg=0x14ef10) returned 0 [0063.376] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0063.376] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0063.376] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0063.377] WaitMessage () returned 1 [0063.895] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.895] IsWindowUnicode (hWnd=0x302de) returned 1 [0063.895] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0063.895] TranslateMessage (lpMsg=0x14ef10) returned 0 [0063.895] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0063.896] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0063.896] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0063.896] WaitMessage () returned 1 [0064.432] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0064.433] IsWindowUnicode (hWnd=0x302de) returned 1 [0064.433] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0064.433] TranslateMessage (lpMsg=0x14ef10) returned 0 [0064.433] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0064.433] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0064.433] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0064.433] WaitMessage () returned 1 [0065.027] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0065.027] IsWindowUnicode (hWnd=0x302de) returned 1 [0065.027] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0065.027] TranslateMessage (lpMsg=0x14ef10) returned 0 [0065.027] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0065.027] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0065.027] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0065.027] WaitMessage () returned 1 [0065.552] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0065.552] IsWindowUnicode (hWnd=0x302de) returned 1 [0065.552] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0065.552] TranslateMessage (lpMsg=0x14ef10) returned 0 [0065.552] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0065.552] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0065.553] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0065.553] WaitMessage () returned 1 [0066.086] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0066.086] IsWindowUnicode (hWnd=0x302de) returned 1 [0066.086] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0066.086] TranslateMessage (lpMsg=0x14ef10) returned 0 [0066.086] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0066.087] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0066.087] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0066.087] WaitMessage () returned 1 [0066.614] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0066.614] IsWindowUnicode (hWnd=0x302de) returned 1 [0066.614] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0066.614] TranslateMessage (lpMsg=0x14ef10) returned 0 [0066.614] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0066.614] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0066.614] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0066.614] WaitMessage () returned 1 [0067.150] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0067.150] IsWindowUnicode (hWnd=0x302de) returned 1 [0067.150] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0067.150] TranslateMessage (lpMsg=0x14ef10) returned 0 [0067.150] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0067.150] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0067.150] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0067.150] WaitMessage () returned 1 [0067.677] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0067.677] IsWindowUnicode (hWnd=0x302de) returned 1 [0067.677] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0067.677] TranslateMessage (lpMsg=0x14ef10) returned 0 [0067.677] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0067.677] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0067.677] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0067.677] WaitMessage () returned 1 [0068.069] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.069] IsWindowUnicode (hWnd=0x302de) returned 1 [0068.069] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.069] GetKeyState (nVirtKey=16) returned 0 [0068.069] GetKeyState (nVirtKey=17) returned 0 [0068.069] GetKeyState (nVirtKey=18) returned -128 [0068.070] SendMessageW (hWnd=0x302de, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0068.070] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0068.070] GetParent (hWnd=0x70020) returned 0x0 [0068.070] SendMessageW (hWnd=0x70020, Msg=0x127, wParam=0x20002, lParam=0x0) returned 0x0 [0068.070] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x127, wParam=0x20002, lParam=0x0) returned 0x0 [0068.070] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.070] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.071] GetStockObject (i=5) returned 0x1900015 [0068.071] GetStockObject (i=5) returned 0x1900015 [0068.071] GetDlgItem (hDlg=0x70020, nIDDlgItem=262662) returned 0x40206 [0068.071] SendMessageW (hWnd=0x40206, Msg=0x202b, wParam=0x40206, lParam=0x14d0f0) returned 0x0 [0068.071] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x202b, wParam=0x40206, lParam=0x14d0f0) returned 0x0 [0068.071] RedrawWindow (hWnd=0x40206, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.071] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.071] GetStockObject (i=5) returned 0x1900015 [0068.072] GetStockObject (i=5) returned 0x1900015 [0068.072] GetDlgItem (hDlg=0x70020, nIDDlgItem=393732) returned 0x60204 [0068.072] SendMessageW (hWnd=0x60204, Msg=0x202b, wParam=0x60204, lParam=0x14d0f0) returned 0x0 [0068.072] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x202b, wParam=0x60204, lParam=0x14d0f0) returned 0x0 [0068.072] RedrawWindow (hWnd=0x60204, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.072] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.072] GetStockObject (i=5) returned 0x1900015 [0068.072] GetStockObject (i=5) returned 0x1900015 [0068.072] GetDlgItem (hDlg=0x70020, nIDDlgItem=393940) returned 0x602d4 [0068.072] SendMessageW (hWnd=0x602d4, Msg=0x202b, wParam=0x602d4, lParam=0x14d0f0) returned 0x0 [0068.072] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x202b, wParam=0x602d4, lParam=0x14d0f0) returned 0x0 [0068.072] RedrawWindow (hWnd=0x602d4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.073] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.073] GetStockObject (i=5) returned 0x1900015 [0068.073] GetStockObject (i=5) returned 0x1900015 [0068.073] GetDlgItem (hDlg=0x70020, nIDDlgItem=197354) returned 0x302ea [0068.073] SendMessageW (hWnd=0x302ea, Msg=0x202b, wParam=0x302ea, lParam=0x14d0f0) returned 0x0 [0068.073] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x202b, wParam=0x302ea, lParam=0x14d0f0) returned 0x0 [0068.073] RedrawWindow (hWnd=0x302ea, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.073] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.073] GetStockObject (i=5) returned 0x1900015 [0068.073] GetStockObject (i=5) returned 0x1900015 [0068.074] GetDlgItem (hDlg=0x70020, nIDDlgItem=197466) returned 0x3035a [0068.074] SendMessageW (hWnd=0x3035a, Msg=0x202b, wParam=0x3035a, lParam=0x14d0f0) returned 0x0 [0068.074] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x202b, wParam=0x3035a, lParam=0x14d0f0) returned 0x0 [0068.074] RedrawWindow (hWnd=0x3035a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.074] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.074] GetStockObject (i=5) returned 0x1900015 [0068.074] GetStockObject (i=5) returned 0x1900015 [0068.074] GetDlgItem (hDlg=0x70020, nIDDlgItem=197474) returned 0x30362 [0068.074] SendMessageW (hWnd=0x30362, Msg=0x202b, wParam=0x30362, lParam=0x14d0f0) returned 0x0 [0068.074] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x202b, wParam=0x30362, lParam=0x14d0f0) returned 0x0 [0068.074] RedrawWindow (hWnd=0x30362, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.074] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.075] GetStockObject (i=5) returned 0x1900015 [0068.075] GetStockObject (i=5) returned 0x1900015 [0068.075] GetDlgItem (hDlg=0x70020, nIDDlgItem=197438) returned 0x3033e [0068.075] SendMessageW (hWnd=0x3033e, Msg=0x202b, wParam=0x3033e, lParam=0x14d0f0) returned 0x0 [0068.075] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x202b, wParam=0x3033e, lParam=0x14d0f0) returned 0x0 [0068.075] RedrawWindow (hWnd=0x3033e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.075] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.075] GetStockObject (i=5) returned 0x1900015 [0068.075] GetStockObject (i=5) returned 0x1900015 [0068.075] GetDlgItem (hDlg=0x70020, nIDDlgItem=197440) returned 0x30340 [0068.075] SendMessageW (hWnd=0x30340, Msg=0x202b, wParam=0x30340, lParam=0x14d0f0) returned 0x0 [0068.075] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x202b, wParam=0x30340, lParam=0x14d0f0) returned 0x0 [0068.076] RedrawWindow (hWnd=0x30340, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.076] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.076] GetStockObject (i=5) returned 0x1900015 [0068.076] GetStockObject (i=5) returned 0x1900015 [0068.076] GetDlgItem (hDlg=0x70020, nIDDlgItem=197422) returned 0x3032e [0068.076] SendMessageW (hWnd=0x3032e, Msg=0x202b, wParam=0x3032e, lParam=0x14d0f0) returned 0x0 [0068.076] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x202b, wParam=0x3032e, lParam=0x14d0f0) returned 0x0 [0068.076] RedrawWindow (hWnd=0x3032e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.076] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.077] GetStockObject (i=5) returned 0x1900015 [0068.077] GetStockObject (i=5) returned 0x1900015 [0068.077] GetDlgItem (hDlg=0x70020, nIDDlgItem=197432) returned 0x30338 [0068.077] SendMessageW (hWnd=0x30338, Msg=0x202b, wParam=0x30338, lParam=0x14d0f0) returned 0x0 [0068.077] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x202b, wParam=0x30338, lParam=0x14d0f0) returned 0x0 [0068.077] RedrawWindow (hWnd=0x30338, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.077] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.077] GetStockObject (i=5) returned 0x1900015 [0068.077] GetStockObject (i=5) returned 0x1900015 [0068.077] GetDlgItem (hDlg=0x70020, nIDDlgItem=197414) returned 0x30326 [0068.077] SendMessageW (hWnd=0x30326, Msg=0x202b, wParam=0x30326, lParam=0x14d0f0) returned 0x0 [0068.077] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x202b, wParam=0x30326, lParam=0x14d0f0) returned 0x0 [0068.078] RedrawWindow (hWnd=0x30326, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.078] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.079] GetStockObject (i=5) returned 0x1900015 [0068.079] GetStockObject (i=5) returned 0x1900015 [0068.079] GetDlgItem (hDlg=0x70020, nIDDlgItem=197420) returned 0x3032c [0068.079] SendMessageW (hWnd=0x3032c, Msg=0x202b, wParam=0x3032c, lParam=0x14d0f0) returned 0x0 [0068.079] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x202b, wParam=0x3032c, lParam=0x14d0f0) returned 0x0 [0068.079] RedrawWindow (hWnd=0x3032c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.079] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.079] GetStockObject (i=5) returned 0x1900015 [0068.079] GetStockObject (i=5) returned 0x1900015 [0068.079] GetDlgItem (hDlg=0x70020, nIDDlgItem=197408) returned 0x30320 [0068.079] SendMessageW (hWnd=0x30320, Msg=0x202b, wParam=0x30320, lParam=0x14d0f0) returned 0x0 [0068.080] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x202b, wParam=0x30320, lParam=0x14d0f0) returned 0x0 [0068.080] RedrawWindow (hWnd=0x30320, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.080] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.080] GetStockObject (i=5) returned 0x1900015 [0068.080] GetStockObject (i=5) returned 0x1900015 [0068.080] GetDlgItem (hDlg=0x70020, nIDDlgItem=197416) returned 0x30328 [0068.080] SendMessageW (hWnd=0x30328, Msg=0x202b, wParam=0x30328, lParam=0x14d0f0) returned 0x0 [0068.080] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x202b, wParam=0x30328, lParam=0x14d0f0) returned 0x0 [0068.080] RedrawWindow (hWnd=0x30328, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.080] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.080] GetStockObject (i=5) returned 0x1900015 [0068.081] GetStockObject (i=5) returned 0x1900015 [0068.081] GetDlgItem (hDlg=0x70020, nIDDlgItem=197404) returned 0x3031c [0068.081] SendMessageW (hWnd=0x3031c, Msg=0x202b, wParam=0x3031c, lParam=0x14d0f0) returned 0x0 [0068.081] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x202b, wParam=0x3031c, lParam=0x14d0f0) returned 0x0 [0068.081] RedrawWindow (hWnd=0x3031c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.081] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.081] GetStockObject (i=5) returned 0x1900015 [0068.081] GetStockObject (i=5) returned 0x1900015 [0068.081] GetDlgItem (hDlg=0x70020, nIDDlgItem=197406) returned 0x3031e [0068.081] SendMessageW (hWnd=0x3031e, Msg=0x202b, wParam=0x3031e, lParam=0x14d0f0) returned 0x0 [0068.081] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x202b, wParam=0x3031e, lParam=0x14d0f0) returned 0x0 [0068.082] RedrawWindow (hWnd=0x3031e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.082] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.082] GetStockObject (i=5) returned 0x1900015 [0068.082] GetStockObject (i=5) returned 0x1900015 [0068.082] GetDlgItem (hDlg=0x70020, nIDDlgItem=197384) returned 0x30308 [0068.082] SendMessageW (hWnd=0x30308, Msg=0x202b, wParam=0x30308, lParam=0x14d0f0) returned 0x0 [0068.082] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x202b, wParam=0x30308, lParam=0x14d0f0) returned 0x0 [0068.082] RedrawWindow (hWnd=0x30308, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.082] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.083] GetStockObject (i=5) returned 0x1900015 [0068.083] GetStockObject (i=5) returned 0x1900015 [0068.083] GetDlgItem (hDlg=0x70020, nIDDlgItem=197388) returned 0x3030c [0068.083] SendMessageW (hWnd=0x3030c, Msg=0x202b, wParam=0x3030c, lParam=0x14d0f0) returned 0x0 [0068.083] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x202b, wParam=0x3030c, lParam=0x14d0f0) returned 0x0 [0068.083] RedrawWindow (hWnd=0x3030c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.083] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.083] GetStockObject (i=5) returned 0x1900015 [0068.083] GetStockObject (i=5) returned 0x1900015 [0068.083] GetDlgItem (hDlg=0x70020, nIDDlgItem=197348) returned 0x302e4 [0068.083] SendMessageW (hWnd=0x302e4, Msg=0x202b, wParam=0x302e4, lParam=0x14d0f0) returned 0x0 [0068.083] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x202b, wParam=0x302e4, lParam=0x14d0f0) returned 0x0 [0068.084] RedrawWindow (hWnd=0x302e4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.084] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0068.084] RedrawWindow (hWnd=0x302de, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.084] RedrawWindow (hWnd=0x70020, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.085] GetKeyState (nVirtKey=16) returned 0 [0068.086] GetKeyState (nVirtKey=17) returned 0 [0068.086] GetKeyState (nVirtKey=18) returned -128 [0068.256] TranslateMessage (lpMsg=0x14ef10) returned 1 [0068.256] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0068.256] GetKeyState (nVirtKey=16) returned 0 [0068.256] GetKeyState (nVirtKey=17) returned 0 [0068.256] GetKeyState (nVirtKey=18) returned -128 [0068.256] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0068.256] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.257] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x602d0, Msg=0x46, wParam=0x0, lParam=0x14ed60) returned 0x0 [0068.258] GetWindowPlacement (in: hWnd=0x70020, lpwndpl=0x14e908 | out: lpwndpl=0x14e908) returned 1 [0068.258] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x47, wParam=0x0, lParam=0x14ed60) returned 0x0 [0068.258] GetClientRect (in: hWnd=0x70020, lpRect=0x14e7a0 | out: lpRect=0x14e7a0) returned 1 [0068.258] GetWindowRect (in: hWnd=0x70020, lpRect=0x14e7a0 | out: lpRect=0x14e7a0) returned 1 [0068.259] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0068.259] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0068.259] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0068.260] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x602d0, Msg=0x47, wParam=0x0, lParam=0x14ed60) returned 0x0 [0068.260] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0068.262] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0068.262] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0068.262] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0068.263] NtdllDefWindowProc_W (hWnd=0x50208, Msg=0x1c, wParam=0x0, lParam=0x10b0) returned 0x0 [0068.263] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x1c, wParam=0x0, lParam=0x10b0) returned 0x0 [0068.263] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x602d0, Msg=0x1c, wParam=0x0, lParam=0x10b0) returned 0x0 [0068.264] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x1 [0068.264] SetTextColor (hdc=0x220106d6, color=0x0) returned 0x0 [0068.265] SetBkColor (hdc=0x220106d6, color=0xffffff) returned 0xffffff [0068.265] SendMessageW (hWnd=0x302de, Msg=0x2111, wParam=0x20002de, lParam=0x302de) returned 0x0 [0068.266] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0068.266] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0068.266] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0068.266] IsWindowUnicode (hWnd=0x70020) returned 1 [0068.266] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.266] TranslateMessage (lpMsg=0x14ef10) returned 0 [0068.266] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0068.266] BeginPaint (in: hWnd=0x70020, lpPaint=0x14e618 | out: lpPaint=0x14e618) returned 0xc0100ae [0068.266] GetWindowPlacement (in: hWnd=0x70020, lpwndpl=0x14e108 | out: lpwndpl=0x14e108) returned 1 [0068.268] GetClientRect (in: hWnd=0x70020, lpRect=0x14e020 | out: lpRect=0x14e020) returned 1 [0068.268] GetWindowTextLengthW (hWnd=0x70020) returned 5 [0068.268] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0068.268] GetSystemMetrics (nIndex=42) returned 0 [0068.268] GetWindowTextW (in: hWnd=0x70020, lpString=0x14dd90, nMaxCount=6 | out: lpString="Form1") returned 5 [0068.268] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xd, wParam=0x6, lParam=0x14dd90) returned 0x5 [0068.269] GetClientRect (in: hWnd=0x70020, lpRect=0x14de08 | out: lpRect=0x14de08) returned 1 [0068.269] GetCurrentObject (hdc=0xc0100ae, type=0x1) returned 0x1b00017 [0068.269] GetCurrentObject (hdc=0xc0100ae, type=0x2) returned 0x1900010 [0068.269] GetCurrentObject (hdc=0xc0100ae, type=0x7) returned 0x1b0509b1 [0068.269] GetCurrentObject (hdc=0xc0100ae, type=0x6) returned 0x18a0048 [0068.269] SaveDC (hdc=0xc0100ae) returned 1 [0068.269] GetNearestColor (hdc=0xc0100ae, color=0xf0f0f0) returned 0xf0f0f0 [0068.269] CreateSolidBrush (color=0xf0f0f0) returned 0x38100559 [0068.269] FillRect (hDC=0xc0100ae, lprc=0x14daf8, hbr=0x38100559) returned 1 [0068.269] DeleteObject (ho=0x38100559) returned 1 [0068.269] RestoreDC (hdc=0xc0100ae, nSavedDC=-1) returned 1 [0068.270] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0068.270] GetWindowTextLengthW (hWnd=0x70020) returned 5 [0068.270] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0068.270] GetSystemMetrics (nIndex=42) returned 0 [0068.270] GetWindowTextW (in: hWnd=0x70020, lpString=0x14e4c0, nMaxCount=6 | out: lpString="Form1") returned 5 [0068.270] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xd, wParam=0x6, lParam=0x14e4c0) returned 0x5 [0068.270] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0068.273] EndPaint (hWnd=0x70020, lpPaint=0x14e5b8) returned 1 [0068.273] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.273] IsWindowUnicode (hWnd=0x40206) returned 1 [0068.273] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.273] TranslateMessage (lpMsg=0x14ef10) returned 0 [0068.273] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0068.273] BeginPaint (in: hWnd=0x40206, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0068.273] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0068.273] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0068.274] GetStockObject (i=5) returned 0x1900015 [0068.274] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0068.274] CreateCompatibleDC (hdc=0x220106d6) returned 0x360109aa [0068.274] SelectObject (hdc=0x360109aa, h=0x160506a9) returned 0x185000f [0068.274] GdipCreateFromHDC (hdc=0x360109aa, graphics=0x14e528) returned 0x0 [0068.274] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0068.274] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0068.274] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0068.274] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0068.274] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0068.274] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0068.274] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cf10) returned 0x0 [0068.275] LocalFree (hMem=0x1d92cf10) returned 0x0 [0068.275] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0068.275] GdipCreateRegion (region=0x14e550) returned 0x0 [0068.275] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.275] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0068.275] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0068.275] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd780dbd) returned 0x0 [0068.275] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.275] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0068.275] GetCurrentObject (hdc=0x360109aa, type=0x1) returned 0x1b00017 [0068.275] GetCurrentObject (hdc=0x360109aa, type=0x2) returned 0x1900010 [0068.275] GetCurrentObject (hdc=0x360109aa, type=0x7) returned 0x160506a9 [0068.275] GetCurrentObject (hdc=0x360109aa, type=0x6) returned 0x18a0048 [0068.275] SaveDC (hdc=0x360109aa) returned 1 [0068.276] GetNearestColor (hdc=0x360109aa, color=0xf0f0f0) returned 0xf0f0f0 [0068.276] GetNearestColor (hdc=0x360109aa, color=0xa0a0a0) returned 0xa0a0a0 [0068.276] GetNearestColor (hdc=0x360109aa, color=0x696969) returned 0x696969 [0068.276] GetNearestColor (hdc=0x360109aa, color=0xa0a0a0) returned 0xa0a0a0 [0068.276] GetNearestColor (hdc=0x360109aa, color=0x0) returned 0x0 [0068.276] GetNearestColor (hdc=0x360109aa, color=0xffffff) returned 0xffffff [0068.276] GetNearestColor (hdc=0x360109aa, color=0xe5e5e5) returned 0xe5e5e5 [0068.276] GetNearestColor (hdc=0x360109aa, color=0xd8d8d8) returned 0xd8d8d8 [0068.276] GetNearestColor (hdc=0x360109aa, color=0x0) returned 0x0 [0068.276] RestoreDC (hdc=0x360109aa, nSavedDC=-1) returned 1 [0068.276] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x360109aa) returned 0x0 [0068.276] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExH)\x02", lpUsedDefaultChar=0x0) returned 17 [0068.277] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.277] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2294ed0) returned 0x0 [0068.277] GdipSetStringFormatAlign (format=0x1beb7e60, align=0x1) returned 0x0 [0068.277] GdipSetStringFormatLineAlign (format=0x1beb7e60, align=0x1) returned 0x0 [0068.277] GdipSetStringFormatHotkeyPrefix (format=0x1beb7e60, hotkeyPrefix=1) returned 0x0 [0068.277] GdipGetStringFormatFlags (format=0x1beb7e60, flags=0x14e378) returned 0x0 [0068.277] GdipGetStringFormatTrimming (format=0x1beb7e60, trimming=0x14e378) returned 0x0 [0068.277] GdipGetStringFormatHotkeyPrefix (format=0x1beb7e60, hotkeyPrefix=0x14e378) returned 0x0 [0068.277] GdipGetFontSize (font=0x1beb7e60, size=0x14e378) returned 0x0 [0068.277] GdipGetFontStyle (font=0x1beb7e60, style=0x14e378) returned 0x0 [0068.277] GdipDeleteStringFormat (format=0x1beb7e60) returned 0x0 [0068.277] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.277] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0068.278] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.278] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0068.278] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2295000) returned 0x0 [0068.278] GdipSetStringFormatFlags (format=0x1beb7fb0, flags=0) returned 0x0 [0068.278] GdipSetStringFormatTrimming (format=0x1beb7fb0, trimming=0x1) returned 0x0 [0068.278] GdipSetStringFormatHotkeyPrefix (format=0x1beb7fb0, hotkeyPrefix=1) returned 0x0 [0068.278] GdipSetStringFormatAlign (format=0x1beb7fb0, align=0x1) returned 0x0 [0068.278] GdipSetStringFormatLineAlign (format=0x1beb7fb0, align=0x1) returned 0x0 [0068.278] GdipMeasureString (graphics=0x1beb8070, string="*", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7fb0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0068.278] GdipDeleteStringFormat (format=0x1beb7fb0) returned 0x0 [0068.278] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0068.278] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0068.279] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.279] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0068.279] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.279] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0068.279] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0068.279] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0068.279] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d810 [0068.279] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d810) returned 0x0 [0068.279] LocalFree (hMem=0x1d92d810) returned 0x0 [0068.279] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d950 [0068.279] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d950) returned 0x0 [0068.280] LocalFree (hMem=0x1d92d950) returned 0x0 [0068.280] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0068.280] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0068.280] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0068.280] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0068.280] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.280] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0068.280] GetCurrentObject (hdc=0x360109aa, type=0x1) returned 0x1b00017 [0068.280] GetCurrentObject (hdc=0x360109aa, type=0x2) returned 0x1900010 [0068.280] GetCurrentObject (hdc=0x360109aa, type=0x7) returned 0x160506a9 [0068.280] GetCurrentObject (hdc=0x360109aa, type=0x6) returned 0x18a0048 [0068.280] SaveDC (hdc=0x360109aa) returned 1 [0068.280] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8304095c [0068.280] GetClipRgn (hdc=0x360109aa, hrgn=0xffffffff8304095c) returned 0 [0068.280] SelectClipRgn (hdc=0x360109aa, hrgn=0x440406c7) returned 2 [0068.280] DeleteObject (ho=0xffffffff8304095c) returned 1 [0068.281] DeleteObject (ho=0x440406c7) returned 1 [0068.281] OffsetViewportOrgEx (in: hdc=0x360109aa, x=0, y=0, lppt=0x22953c0 | out: lppt=0x22953c0) returned 1 [0068.281] GetNearestColor (hdc=0x360109aa, color=0xf0f0f0) returned 0xf0f0f0 [0068.281] CreateSolidBrush (color=0xf0f0f0) returned 0x39100559 [0068.281] FillRect (hDC=0x360109aa, lprc=0x14e1c8, hbr=0x39100559) returned 1 [0068.281] DeleteObject (ho=0x39100559) returned 1 [0068.281] RestoreDC (hdc=0x360109aa, nSavedDC=-1) returned 1 [0068.281] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x360109aa) returned 0x0 [0068.281] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0068.281] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.281] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22954c0) returned 0x0 [0068.281] GdipSetStringFormatAlign (format=0x1beb7a70, align=0x1) returned 0x0 [0068.281] GdipSetStringFormatLineAlign (format=0x1beb7a70, align=0x1) returned 0x0 [0068.282] GdipSetStringFormatHotkeyPrefix (format=0x1beb7a70, hotkeyPrefix=1) returned 0x0 [0068.282] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0068.282] GdipDrawString (graphics=0x1beb67f0, string="*", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7a70, brush=0x1beb15e0) returned 0x0 [0068.282] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0068.282] GdipDeleteStringFormat (format=0x1beb7a70) returned 0x0 [0068.282] GetFocus () returned 0x0 [0068.284] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExF)\x02", lpUsedDefaultChar=0x0) returned 17 [0068.284] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.284] GdipCreateRegion (region=0x14e030) returned 0x0 [0068.284] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.284] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0068.284] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0068.284] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0068.284] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d850 [0068.284] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d850) returned 0x0 [0068.285] LocalFree (hMem=0x1d92d850) returned 0x0 [0068.285] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0068.285] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d710) returned 0x0 [0068.285] LocalFree (hMem=0x1d92d710) returned 0x0 [0068.285] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0068.285] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0068.285] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0068.285] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0068.285] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.285] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0068.285] GetCurrentObject (hdc=0x360109aa, type=0x1) returned 0x1b00017 [0068.285] GetCurrentObject (hdc=0x360109aa, type=0x2) returned 0x1900010 [0068.285] GetCurrentObject (hdc=0x360109aa, type=0x7) returned 0x160506a9 [0068.285] GetCurrentObject (hdc=0x360109aa, type=0x6) returned 0x18a0048 [0068.286] SaveDC (hdc=0x360109aa) returned 1 [0068.286] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x450406c7 [0068.286] GetClipRgn (hdc=0x360109aa, hrgn=0x450406c7) returned 0 [0068.286] SelectClipRgn (hdc=0x360109aa, hrgn=0xffffffff8404095c) returned 2 [0068.286] DeleteObject (ho=0x450406c7) returned 1 [0068.286] DeleteObject (ho=0xffffffff8404095c) returned 1 [0068.286] OffsetViewportOrgEx (in: hdc=0x360109aa, x=0, y=0, lppt=0x22958a8 | out: lppt=0x22958a8) returned 1 [0068.286] GetROP2 (hdc=0x360109aa) returned 13 [0068.286] GetBkMode (hdc=0x360109aa) returned 2 [0068.286] SetBkMode (hdc=0x360109aa, mode=1) returned 2 [0068.286] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x753009d0 [0068.286] SelectObject (hdc=0x360109aa, h=0x753009d0) returned 0x1b00017 [0068.286] MoveToEx (in: hdc=0x360109aa, x=25, y=0, lppt=0x2295910 | out: lppt=0x2295910) returned 1 [0068.286] LineTo (hdc=0x360109aa, x=0, y=0) returned 1 [0068.286] SetBkMode (hdc=0x360109aa, mode=2) returned 1 [0068.286] MoveToEx (in: hdc=0x360109aa, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.287] GetROP2 (hdc=0x360109aa) returned 13 [0068.287] GetBkMode (hdc=0x360109aa) returned 2 [0068.287] SetBkMode (hdc=0x360109aa, mode=1) returned 2 [0068.287] SelectObject (hdc=0x360109aa, h=0x753009d0) returned 0x753009d0 [0068.287] MoveToEx (in: hdc=0x360109aa, x=0, y=0, lppt=0x2295928 | out: lppt=0x2295928) returned 1 [0068.287] LineTo (hdc=0x360109aa, x=0, y=22) returned 1 [0068.287] SetBkMode (hdc=0x360109aa, mode=2) returned 1 [0068.287] MoveToEx (in: hdc=0x360109aa, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.287] SelectObject (hdc=0x360109aa, h=0x1b00017) returned 0x753009d0 [0068.287] DeleteObject (ho=0x753009d0) returned 1 [0068.287] GetROP2 (hdc=0x360109aa) returned 13 [0068.287] GetBkMode (hdc=0x360109aa) returned 2 [0068.287] SetBkMode (hdc=0x360109aa, mode=1) returned 2 [0068.287] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x553006b7 [0068.287] SelectObject (hdc=0x360109aa, h=0x553006b7) returned 0x1b00017 [0068.287] MoveToEx (in: hdc=0x360109aa, x=0, y=22, lppt=0x2295990 | out: lppt=0x2295990) returned 1 [0068.287] LineTo (hdc=0x360109aa, x=25, y=22) returned 1 [0068.287] SetBkMode (hdc=0x360109aa, mode=2) returned 1 [0068.287] MoveToEx (in: hdc=0x360109aa, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.287] GetROP2 (hdc=0x360109aa) returned 13 [0068.287] GetBkMode (hdc=0x360109aa) returned 2 [0068.287] SetBkMode (hdc=0x360109aa, mode=1) returned 2 [0068.287] SelectObject (hdc=0x360109aa, h=0x553006b7) returned 0x553006b7 [0068.288] MoveToEx (in: hdc=0x360109aa, x=25, y=22, lppt=0x22959a8 | out: lppt=0x22959a8) returned 1 [0068.288] LineTo (hdc=0x360109aa, x=25, y=-1) returned 1 [0068.288] SetBkMode (hdc=0x360109aa, mode=2) returned 1 [0068.288] MoveToEx (in: hdc=0x360109aa, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.288] SelectObject (hdc=0x360109aa, h=0x1b00017) returned 0x553006b7 [0068.288] DeleteObject (ho=0x553006b7) returned 1 [0068.288] GetROP2 (hdc=0x360109aa) returned 13 [0068.288] GetBkMode (hdc=0x360109aa) returned 2 [0068.288] SetBkMode (hdc=0x360109aa, mode=1) returned 2 [0068.288] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x763009d0 [0068.288] SelectObject (hdc=0x360109aa, h=0x763009d0) returned 0x1b00017 [0068.288] MoveToEx (in: hdc=0x360109aa, x=24, y=1, lppt=0x2295a10 | out: lppt=0x2295a10) returned 1 [0068.288] LineTo (hdc=0x360109aa, x=1, y=1) returned 1 [0068.288] SetBkMode (hdc=0x360109aa, mode=2) returned 1 [0068.288] MoveToEx (in: hdc=0x360109aa, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.288] GetROP2 (hdc=0x360109aa) returned 13 [0068.288] GetBkMode (hdc=0x360109aa) returned 2 [0068.288] SetBkMode (hdc=0x360109aa, mode=1) returned 2 [0068.288] SelectObject (hdc=0x360109aa, h=0x763009d0) returned 0x763009d0 [0068.288] MoveToEx (in: hdc=0x360109aa, x=1, y=1, lppt=0x2295a28 | out: lppt=0x2295a28) returned 1 [0068.288] LineTo (hdc=0x360109aa, x=1, y=21) returned 1 [0068.288] SetBkMode (hdc=0x360109aa, mode=2) returned 1 [0068.288] MoveToEx (in: hdc=0x360109aa, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.289] SelectObject (hdc=0x360109aa, h=0x1b00017) returned 0x763009d0 [0068.289] DeleteObject (ho=0x763009d0) returned 1 [0068.289] GetROP2 (hdc=0x360109aa) returned 13 [0068.289] GetBkMode (hdc=0x360109aa) returned 2 [0068.289] SetBkMode (hdc=0x360109aa, mode=1) returned 2 [0068.289] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x563006b7 [0068.289] SelectObject (hdc=0x360109aa, h=0x563006b7) returned 0x1b00017 [0068.289] MoveToEx (in: hdc=0x360109aa, x=1, y=21, lppt=0x2295a90 | out: lppt=0x2295a90) returned 1 [0068.289] LineTo (hdc=0x360109aa, x=24, y=21) returned 1 [0068.289] SetBkMode (hdc=0x360109aa, mode=2) returned 1 [0068.289] MoveToEx (in: hdc=0x360109aa, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.289] GetROP2 (hdc=0x360109aa) returned 13 [0068.289] GetBkMode (hdc=0x360109aa) returned 2 [0068.289] SetBkMode (hdc=0x360109aa, mode=1) returned 2 [0068.289] SelectObject (hdc=0x360109aa, h=0x563006b7) returned 0x563006b7 [0068.289] MoveToEx (in: hdc=0x360109aa, x=24, y=21, lppt=0x2295aa8 | out: lppt=0x2295aa8) returned 1 [0068.289] LineTo (hdc=0x360109aa, x=24, y=0) returned 1 [0068.289] SetBkMode (hdc=0x360109aa, mode=2) returned 1 [0068.289] MoveToEx (in: hdc=0x360109aa, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.289] SelectObject (hdc=0x360109aa, h=0x1b00017) returned 0x563006b7 [0068.289] DeleteObject (ho=0x563006b7) returned 1 [0068.290] RestoreDC (hdc=0x360109aa, nSavedDC=-1) returned 1 [0068.290] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x360109aa) returned 0x0 [0068.290] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0068.290] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x360109aa, x1=0, y1=0, rop=0xcc0020) returned 1 [0068.290] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x360109aa) returned 0x0 [0068.290] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0068.290] SelectObject (hdc=0x360109aa, h=0x185000f) returned 0x160506a9 [0068.290] DeleteDC (hdc=0x360109aa) returned 1 [0068.290] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0068.290] EndPaint (hWnd=0x40206, lpPaint=0x14e548) returned 1 [0068.290] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.290] IsWindowUnicode (hWnd=0x60204) returned 1 [0068.290] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.290] TranslateMessage (lpMsg=0x14ef10) returned 0 [0068.290] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0068.290] BeginPaint (in: hWnd=0x60204, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0068.291] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0068.291] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0068.291] GetStockObject (i=5) returned 0x1900015 [0068.291] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0068.291] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x3e010689 [0068.291] SelectObject (hdc=0x3e010689, h=0x160506a9) returned 0x185000f [0068.291] GdipCreateFromHDC (hdc=0x3e010689, graphics=0x14e528) returned 0x0 [0068.291] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0068.291] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=58, height=23, combineMode=0x0) returned 0x0 [0068.291] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0068.291] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0068.291] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0068.291] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0068.291] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d2d0) returned 0x0 [0068.292] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0068.292] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0068.292] GdipCreateRegion (region=0x14e550) returned 0x0 [0068.292] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.292] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0068.292] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0068.292] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd750dbd) returned 0x0 [0068.292] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.292] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0068.292] GetCurrentObject (hdc=0x3e010689, type=0x1) returned 0x1b00017 [0068.292] GetCurrentObject (hdc=0x3e010689, type=0x2) returned 0x1900010 [0068.292] GetCurrentObject (hdc=0x3e010689, type=0x7) returned 0x160506a9 [0068.292] GetCurrentObject (hdc=0x3e010689, type=0x6) returned 0x18a0048 [0068.292] SaveDC (hdc=0x3e010689) returned 1 [0068.292] GetNearestColor (hdc=0x3e010689, color=0xf0f0f0) returned 0xf0f0f0 [0068.293] GetNearestColor (hdc=0x3e010689, color=0xa0a0a0) returned 0xa0a0a0 [0068.293] GetNearestColor (hdc=0x3e010689, color=0x696969) returned 0x696969 [0068.293] GetNearestColor (hdc=0x3e010689, color=0xa0a0a0) returned 0xa0a0a0 [0068.293] GetNearestColor (hdc=0x3e010689, color=0x0) returned 0x0 [0068.293] GetNearestColor (hdc=0x3e010689, color=0xffffff) returned 0xffffff [0068.293] GetNearestColor (hdc=0x3e010689, color=0xe5e5e5) returned 0xe5e5e5 [0068.293] GetNearestColor (hdc=0x3e010689, color=0xd8d8d8) returned 0xd8d8d8 [0068.293] GetNearestColor (hdc=0x3e010689, color=0x0) returned 0x0 [0068.293] RestoreDC (hdc=0x3e010689, nSavedDC=-1) returned 1 [0068.293] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x3e010689) returned 0x0 [0068.293] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx])\x02", lpUsedDefaultChar=0x0) returned 17 [0068.293] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.294] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22963c8) returned 0x0 [0068.294] GdipSetStringFormatAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0068.294] GdipSetStringFormatLineAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0068.294] GdipSetStringFormatHotkeyPrefix (format=0x1beb7d10, hotkeyPrefix=1) returned 0x0 [0068.294] GdipGetStringFormatFlags (format=0x1beb7d10, flags=0x14e378) returned 0x0 [0068.294] GdipGetStringFormatTrimming (format=0x1beb7d10, trimming=0x14e378) returned 0x0 [0068.294] GdipGetStringFormatHotkeyPrefix (format=0x1beb7d10, hotkeyPrefix=0x14e378) returned 0x0 [0068.294] GdipGetFontSize (font=0x1beb7d10, size=0x14e378) returned 0x0 [0068.294] GdipGetFontStyle (font=0x1beb7d10, style=0x14e378) returned 0x0 [0068.294] GdipDeleteStringFormat (format=0x1beb7d10) returned 0x0 [0068.294] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0068.294] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.294] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0068.295] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22964f8) returned 0x0 [0068.295] GdipSetStringFormatFlags (format=0x1beb7f40, flags=0) returned 0x0 [0068.295] GdipSetStringFormatTrimming (format=0x1beb7f40, trimming=0x1) returned 0x0 [0068.295] GdipSetStringFormatHotkeyPrefix (format=0x1beb7f40, hotkeyPrefix=1) returned 0x0 [0068.295] GdipSetStringFormatAlign (format=0x1beb7f40, align=0x1) returned 0x0 [0068.295] GdipSetStringFormatLineAlign (format=0x1beb7f40, align=0x1) returned 0x0 [0068.295] GdipMeasureString (graphics=0x1beb8070, string="=", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7f40, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0068.295] GdipDeleteStringFormat (format=0x1beb7f40) returned 0x0 [0068.295] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0068.295] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.295] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0068.295] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.295] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0068.295] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.295] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0068.295] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0068.295] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0068.295] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0068.296] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d2d0) returned 0x0 [0068.296] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0068.296] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d050 [0068.296] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d050) returned 0x0 [0068.296] LocalFree (hMem=0x1d92d050) returned 0x0 [0068.296] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0068.296] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0068.296] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0068.296] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0068.296] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.296] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0068.296] GetCurrentObject (hdc=0x3e010689, type=0x1) returned 0x1b00017 [0068.297] GetCurrentObject (hdc=0x3e010689, type=0x2) returned 0x1900010 [0068.297] GetCurrentObject (hdc=0x3e010689, type=0x7) returned 0x160506a9 [0068.297] GetCurrentObject (hdc=0x3e010689, type=0x6) returned 0x18a0048 [0068.297] SaveDC (hdc=0x3e010689) returned 1 [0068.297] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8504095c [0068.297] GetClipRgn (hdc=0x3e010689, hrgn=0xffffffff8504095c) returned 0 [0068.297] SelectClipRgn (hdc=0x3e010689, hrgn=0x460406c7) returned 2 [0068.297] DeleteObject (ho=0xffffffff8504095c) returned 1 [0068.297] DeleteObject (ho=0x460406c7) returned 1 [0068.297] OffsetViewportOrgEx (in: hdc=0x3e010689, x=0, y=0, lppt=0x22968b8 | out: lppt=0x22968b8) returned 1 [0068.297] GetNearestColor (hdc=0x3e010689, color=0xf0f0f0) returned 0xf0f0f0 [0068.297] CreateSolidBrush (color=0xf0f0f0) returned 0x3a100559 [0068.297] FillRect (hDC=0x3e010689, lprc=0x14e1c8, hbr=0x3a100559) returned 1 [0068.297] DeleteObject (ho=0x3a100559) returned 1 [0068.297] RestoreDC (hdc=0x3e010689, nSavedDC=-1) returned 1 [0068.297] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x3e010689) returned 0x0 [0068.297] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.298] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0068.298] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.298] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22969b8) returned 0x0 [0068.298] GdipSetStringFormatAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0068.298] GdipSetStringFormatLineAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0068.298] GdipSetStringFormatHotkeyPrefix (format=0x1beb7d10, hotkeyPrefix=1) returned 0x0 [0068.298] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0068.298] GdipDrawString (graphics=0x1beb67f0, string="=", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7d10, brush=0x1beb15e0) returned 0x0 [0068.298] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0068.298] GdipDeleteStringFormat (format=0x1beb7d10) returned 0x0 [0068.298] GetFocus () returned 0x0 [0068.300] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExZ)\x02", lpUsedDefaultChar=0x0) returned 17 [0068.300] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.300] GdipCreateRegion (region=0x14e030) returned 0x0 [0068.300] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.300] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0068.300] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0068.300] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0068.300] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cd10 [0068.300] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cd10) returned 0x0 [0068.301] LocalFree (hMem=0x1d92cd10) returned 0x0 [0068.301] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0068.301] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0068.301] LocalFree (hMem=0x1d92cf10) returned 0x0 [0068.301] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0068.308] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0068.308] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0068.308] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0068.308] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.308] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0068.308] GetCurrentObject (hdc=0x3e010689, type=0x1) returned 0x1b00017 [0068.308] GetCurrentObject (hdc=0x3e010689, type=0x2) returned 0x1900010 [0068.308] GetCurrentObject (hdc=0x3e010689, type=0x7) returned 0x160506a9 [0068.308] GetCurrentObject (hdc=0x3e010689, type=0x6) returned 0x18a0048 [0068.308] SaveDC (hdc=0x3e010689) returned 1 [0068.308] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x470406c7 [0068.308] GetClipRgn (hdc=0x3e010689, hrgn=0x470406c7) returned 0 [0068.309] SelectClipRgn (hdc=0x3e010689, hrgn=0xffffffff8604095c) returned 2 [0068.309] DeleteObject (ho=0x470406c7) returned 1 [0068.309] DeleteObject (ho=0xffffffff8604095c) returned 1 [0068.309] OffsetViewportOrgEx (in: hdc=0x3e010689, x=0, y=0, lppt=0x2296da0 | out: lppt=0x2296da0) returned 1 [0068.309] GetROP2 (hdc=0x3e010689) returned 13 [0068.309] GetBkMode (hdc=0x3e010689) returned 2 [0068.309] SetBkMode (hdc=0x3e010689, mode=1) returned 2 [0068.309] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x593006b7 [0068.309] SelectObject (hdc=0x3e010689, h=0x593006b7) returned 0x1b00017 [0068.309] MoveToEx (in: hdc=0x3e010689, x=57, y=0, lppt=0x2296e08 | out: lppt=0x2296e08) returned 1 [0068.309] LineTo (hdc=0x3e010689, x=0, y=0) returned 1 [0068.309] SetBkMode (hdc=0x3e010689, mode=2) returned 1 [0068.309] MoveToEx (in: hdc=0x3e010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.309] GetROP2 (hdc=0x3e010689) returned 13 [0068.309] GetBkMode (hdc=0x3e010689) returned 2 [0068.309] SetBkMode (hdc=0x3e010689, mode=1) returned 2 [0068.309] SelectObject (hdc=0x3e010689, h=0x593006b7) returned 0x593006b7 [0068.309] MoveToEx (in: hdc=0x3e010689, x=0, y=0, lppt=0x2296e20 | out: lppt=0x2296e20) returned 1 [0068.309] LineTo (hdc=0x3e010689, x=0, y=22) returned 1 [0068.309] SetBkMode (hdc=0x3e010689, mode=2) returned 1 [0068.309] MoveToEx (in: hdc=0x3e010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.309] SelectObject (hdc=0x3e010689, h=0x1b00017) returned 0x593006b7 [0068.309] DeleteObject (ho=0x593006b7) returned 1 [0068.309] GetROP2 (hdc=0x3e010689) returned 13 [0068.310] GetBkMode (hdc=0x3e010689) returned 2 [0068.310] SetBkMode (hdc=0x3e010689, mode=1) returned 2 [0068.310] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x773009d0 [0068.310] SelectObject (hdc=0x3e010689, h=0x773009d0) returned 0x1b00017 [0068.310] MoveToEx (in: hdc=0x3e010689, x=0, y=22, lppt=0x2296e88 | out: lppt=0x2296e88) returned 1 [0068.310] LineTo (hdc=0x3e010689, x=57, y=22) returned 1 [0068.310] SetBkMode (hdc=0x3e010689, mode=2) returned 1 [0068.310] MoveToEx (in: hdc=0x3e010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.310] GetROP2 (hdc=0x3e010689) returned 13 [0068.310] GetBkMode (hdc=0x3e010689) returned 2 [0068.310] SetBkMode (hdc=0x3e010689, mode=1) returned 2 [0068.310] SelectObject (hdc=0x3e010689, h=0x773009d0) returned 0x773009d0 [0068.310] MoveToEx (in: hdc=0x3e010689, x=57, y=22, lppt=0x2296ea0 | out: lppt=0x2296ea0) returned 1 [0068.310] LineTo (hdc=0x3e010689, x=57, y=-1) returned 1 [0068.310] SetBkMode (hdc=0x3e010689, mode=2) returned 1 [0068.310] MoveToEx (in: hdc=0x3e010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.310] SelectObject (hdc=0x3e010689, h=0x1b00017) returned 0x773009d0 [0068.310] DeleteObject (ho=0x773009d0) returned 1 [0068.310] GetROP2 (hdc=0x3e010689) returned 13 [0068.310] GetBkMode (hdc=0x3e010689) returned 2 [0068.310] SetBkMode (hdc=0x3e010689, mode=1) returned 2 [0068.310] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x5a3006b7 [0068.310] SelectObject (hdc=0x3e010689, h=0x5a3006b7) returned 0x1b00017 [0068.310] MoveToEx (in: hdc=0x3e010689, x=56, y=1, lppt=0x2296f08 | out: lppt=0x2296f08) returned 1 [0068.311] LineTo (hdc=0x3e010689, x=1, y=1) returned 1 [0068.311] SetBkMode (hdc=0x3e010689, mode=2) returned 1 [0068.311] MoveToEx (in: hdc=0x3e010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.311] GetROP2 (hdc=0x3e010689) returned 13 [0068.311] GetBkMode (hdc=0x3e010689) returned 2 [0068.311] SetBkMode (hdc=0x3e010689, mode=1) returned 2 [0068.311] SelectObject (hdc=0x3e010689, h=0x5a3006b7) returned 0x5a3006b7 [0068.311] MoveToEx (in: hdc=0x3e010689, x=1, y=1, lppt=0x2296f20 | out: lppt=0x2296f20) returned 1 [0068.311] LineTo (hdc=0x3e010689, x=1, y=21) returned 1 [0068.311] SetBkMode (hdc=0x3e010689, mode=2) returned 1 [0068.311] MoveToEx (in: hdc=0x3e010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.311] SelectObject (hdc=0x3e010689, h=0x1b00017) returned 0x5a3006b7 [0068.311] DeleteObject (ho=0x5a3006b7) returned 1 [0068.311] GetROP2 (hdc=0x3e010689) returned 13 [0068.311] GetBkMode (hdc=0x3e010689) returned 2 [0068.311] SetBkMode (hdc=0x3e010689, mode=1) returned 2 [0068.311] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x783009d0 [0068.311] SelectObject (hdc=0x3e010689, h=0x783009d0) returned 0x1b00017 [0068.311] MoveToEx (in: hdc=0x3e010689, x=1, y=21, lppt=0x2296f88 | out: lppt=0x2296f88) returned 1 [0068.311] LineTo (hdc=0x3e010689, x=56, y=21) returned 1 [0068.311] SetBkMode (hdc=0x3e010689, mode=2) returned 1 [0068.311] MoveToEx (in: hdc=0x3e010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.311] GetROP2 (hdc=0x3e010689) returned 13 [0068.311] GetBkMode (hdc=0x3e010689) returned 2 [0068.311] SetBkMode (hdc=0x3e010689, mode=1) returned 2 [0068.312] SelectObject (hdc=0x3e010689, h=0x783009d0) returned 0x783009d0 [0068.312] MoveToEx (in: hdc=0x3e010689, x=56, y=21, lppt=0x2296fa0 | out: lppt=0x2296fa0) returned 1 [0068.312] LineTo (hdc=0x3e010689, x=56, y=0) returned 1 [0068.312] SetBkMode (hdc=0x3e010689, mode=2) returned 1 [0068.312] MoveToEx (in: hdc=0x3e010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.312] SelectObject (hdc=0x3e010689, h=0x1b00017) returned 0x783009d0 [0068.312] DeleteObject (ho=0x783009d0) returned 1 [0068.312] RestoreDC (hdc=0x3e010689, nSavedDC=-1) returned 1 [0068.312] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x3e010689) returned 0x0 [0068.312] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0068.312] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=58, cy=23, hdcSrc=0x3e010689, x1=0, y1=0, rop=0xcc0020) returned 1 [0068.312] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x3e010689) returned 0x0 [0068.312] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0068.312] SelectObject (hdc=0x3e010689, h=0x185000f) returned 0x160506a9 [0068.312] DeleteDC (hdc=0x3e010689) returned 1 [0068.313] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0068.313] EndPaint (hWnd=0x60204, lpPaint=0x14e548) returned 1 [0068.313] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.313] IsWindowUnicode (hWnd=0x602d4) returned 1 [0068.313] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.313] TranslateMessage (lpMsg=0x14ef10) returned 0 [0068.313] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0068.313] BeginPaint (in: hWnd=0x602d4, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0068.313] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0068.313] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0068.313] GetStockObject (i=5) returned 0x1900015 [0068.313] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0068.314] CreateCompatibleDC (hdc=0xc0100ae) returned 0x3c0109c0 [0068.314] SelectObject (hdc=0x3c0109c0, h=0x160506a9) returned 0x185000f [0068.314] GdipCreateFromHDC (hdc=0x3c0109c0, graphics=0x14e528) returned 0x0 [0068.314] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0068.314] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=58, height=23, combineMode=0x0) returned 0x0 [0068.314] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0068.314] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0068.314] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0068.314] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cb90 [0068.314] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cb90) returned 0x0 [0068.314] LocalFree (hMem=0x1d92cb90) returned 0x0 [0068.314] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0068.314] GdipCreateRegion (region=0x14e550) returned 0x0 [0068.314] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.314] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0068.314] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0068.314] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd720dbd) returned 0x0 [0068.315] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.315] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0068.315] GetCurrentObject (hdc=0x3c0109c0, type=0x1) returned 0x1b00017 [0068.315] GetCurrentObject (hdc=0x3c0109c0, type=0x2) returned 0x1900010 [0068.315] GetCurrentObject (hdc=0x3c0109c0, type=0x7) returned 0x160506a9 [0068.315] GetCurrentObject (hdc=0x3c0109c0, type=0x6) returned 0x18a0048 [0068.315] SaveDC (hdc=0x3c0109c0) returned 1 [0068.315] GetNearestColor (hdc=0x3c0109c0, color=0xf0f0f0) returned 0xf0f0f0 [0068.315] GetNearestColor (hdc=0x3c0109c0, color=0xa0a0a0) returned 0xa0a0a0 [0068.315] GetNearestColor (hdc=0x3c0109c0, color=0x696969) returned 0x696969 [0068.315] GetNearestColor (hdc=0x3c0109c0, color=0xa0a0a0) returned 0xa0a0a0 [0068.315] GetNearestColor (hdc=0x3c0109c0, color=0x0) returned 0x0 [0068.315] GetNearestColor (hdc=0x3c0109c0, color=0xffffff) returned 0xffffff [0068.315] GetNearestColor (hdc=0x3c0109c0, color=0xe5e5e5) returned 0xe5e5e5 [0068.315] GetNearestColor (hdc=0x3c0109c0, color=0xd8d8d8) returned 0xd8d8d8 [0068.315] GetNearestColor (hdc=0x3c0109c0, color=0x0) returned 0x0 [0068.315] RestoreDC (hdc=0x3c0109c0, nSavedDC=-1) returned 1 [0068.315] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x3c0109c0) returned 0x0 [0068.316] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.319] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExr)\x02", lpUsedDefaultChar=0x0) returned 17 [0068.319] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.319] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22978c0) returned 0x0 [0068.319] GdipSetStringFormatAlign (format=0x1beb7df0, align=0x1) returned 0x0 [0068.319] GdipSetStringFormatLineAlign (format=0x1beb7df0, align=0x1) returned 0x0 [0068.320] GdipSetStringFormatHotkeyPrefix (format=0x1beb7df0, hotkeyPrefix=1) returned 0x0 [0068.320] GdipGetStringFormatFlags (format=0x1beb7df0, flags=0x14e378) returned 0x0 [0068.320] GdipGetStringFormatTrimming (format=0x1beb7df0, trimming=0x14e378) returned 0x0 [0068.320] GdipGetStringFormatHotkeyPrefix (format=0x1beb7df0, hotkeyPrefix=0x14e378) returned 0x0 [0068.320] GdipGetFontSize (font=0x1beb7df0, size=0x14e378) returned 0x0 [0068.320] GdipGetFontStyle (font=0x1beb7df0, style=0x14e378) returned 0x0 [0068.320] GdipDeleteStringFormat (format=0x1beb7df0) returned 0x0 [0068.320] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.320] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0068.320] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.320] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0068.320] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22979f0) returned 0x0 [0068.320] GdipSetStringFormatFlags (format=0x1beb7920, flags=0) returned 0x0 [0068.320] GdipSetStringFormatTrimming (format=0x1beb7920, trimming=0x1) returned 0x0 [0068.321] GdipSetStringFormatHotkeyPrefix (format=0x1beb7920, hotkeyPrefix=1) returned 0x0 [0068.321] GdipSetStringFormatAlign (format=0x1beb7920, align=0x1) returned 0x0 [0068.321] GdipSetStringFormatLineAlign (format=0x1beb7920, align=0x1) returned 0x0 [0068.321] GdipMeasureString (graphics=0x1beb8070, string="log", length=3, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7920, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0068.321] GdipDeleteStringFormat (format=0x1beb7920) returned 0x0 [0068.321] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0068.321] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.321] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0068.321] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.321] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0068.321] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.321] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0068.321] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0068.321] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0068.321] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0068.321] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0068.322] LocalFree (hMem=0x1d92cf10) returned 0x0 [0068.322] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cbd0 [0068.322] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cbd0) returned 0x0 [0068.322] LocalFree (hMem=0x1d92cbd0) returned 0x0 [0068.322] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0068.322] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0068.322] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0068.322] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0068.322] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.322] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0068.322] GetCurrentObject (hdc=0x3c0109c0, type=0x1) returned 0x1b00017 [0068.322] GetCurrentObject (hdc=0x3c0109c0, type=0x2) returned 0x1900010 [0068.322] GetCurrentObject (hdc=0x3c0109c0, type=0x7) returned 0x160506a9 [0068.322] GetCurrentObject (hdc=0x3c0109c0, type=0x6) returned 0x18a0048 [0068.322] SaveDC (hdc=0x3c0109c0) returned 1 [0068.322] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8704095c [0068.322] GetClipRgn (hdc=0x3c0109c0, hrgn=0xffffffff8704095c) returned 0 [0068.322] SelectClipRgn (hdc=0x3c0109c0, hrgn=0x480406c7) returned 2 [0068.323] DeleteObject (ho=0xffffffff8704095c) returned 1 [0068.323] DeleteObject (ho=0x480406c7) returned 1 [0068.323] OffsetViewportOrgEx (in: hdc=0x3c0109c0, x=0, y=0, lppt=0x2297db0 | out: lppt=0x2297db0) returned 1 [0068.323] GetNearestColor (hdc=0x3c0109c0, color=0xf0f0f0) returned 0xf0f0f0 [0068.323] CreateSolidBrush (color=0xf0f0f0) returned 0x3b100559 [0068.323] FillRect (hDC=0x3c0109c0, lprc=0x14e1c8, hbr=0x3b100559) returned 1 [0068.323] DeleteObject (ho=0x3b100559) returned 1 [0068.323] RestoreDC (hdc=0x3c0109c0, nSavedDC=-1) returned 1 [0068.323] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x3c0109c0) returned 0x0 [0068.323] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.323] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0068.323] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.323] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2297eb0) returned 0x0 [0068.323] GdipSetStringFormatAlign (format=0x1beb7920, align=0x1) returned 0x0 [0068.324] GdipSetStringFormatLineAlign (format=0x1beb7920, align=0x1) returned 0x0 [0068.324] GdipSetStringFormatHotkeyPrefix (format=0x1beb7920, hotkeyPrefix=1) returned 0x0 [0068.324] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0068.324] GdipDrawString (graphics=0x1beb67f0, string="log", length=3, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7920, brush=0x1beb15e0) returned 0x0 [0068.324] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0068.324] GdipDeleteStringFormat (format=0x1beb7920) returned 0x0 [0068.324] GetFocus () returned 0x0 [0068.324] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.324] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExo)\x02", lpUsedDefaultChar=0x0) returned 17 [0068.324] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.324] GdipCreateRegion (region=0x14e030) returned 0x0 [0068.324] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.325] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0068.325] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0068.325] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0068.325] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cad0 [0068.325] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cad0) returned 0x0 [0068.325] LocalFree (hMem=0x1d92cad0) returned 0x0 [0068.325] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cb90 [0068.325] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cb90) returned 0x0 [0068.325] LocalFree (hMem=0x1d92cb90) returned 0x0 [0068.325] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0068.325] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0068.325] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0068.325] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0068.326] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.326] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0068.326] GetCurrentObject (hdc=0x3c0109c0, type=0x1) returned 0x1b00017 [0068.326] GetCurrentObject (hdc=0x3c0109c0, type=0x2) returned 0x1900010 [0068.326] GetCurrentObject (hdc=0x3c0109c0, type=0x7) returned 0x160506a9 [0068.326] GetCurrentObject (hdc=0x3c0109c0, type=0x6) returned 0x18a0048 [0068.326] SaveDC (hdc=0x3c0109c0) returned 1 [0068.326] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x490406c7 [0068.326] GetClipRgn (hdc=0x3c0109c0, hrgn=0x490406c7) returned 0 [0068.326] SelectClipRgn (hdc=0x3c0109c0, hrgn=0xffffffff8804095c) returned 2 [0068.326] DeleteObject (ho=0x490406c7) returned 1 [0068.326] DeleteObject (ho=0xffffffff8804095c) returned 1 [0068.326] OffsetViewportOrgEx (in: hdc=0x3c0109c0, x=0, y=0, lppt=0x2298298 | out: lppt=0x2298298) returned 1 [0068.326] GetROP2 (hdc=0x3c0109c0) returned 13 [0068.326] GetBkMode (hdc=0x3c0109c0) returned 2 [0068.326] SetBkMode (hdc=0x3c0109c0, mode=1) returned 2 [0068.326] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x793009d0 [0068.326] SelectObject (hdc=0x3c0109c0, h=0x793009d0) returned 0x1b00017 [0068.326] MoveToEx (in: hdc=0x3c0109c0, x=57, y=0, lppt=0x2298300 | out: lppt=0x2298300) returned 1 [0068.326] LineTo (hdc=0x3c0109c0, x=0, y=0) returned 1 [0068.326] SetBkMode (hdc=0x3c0109c0, mode=2) returned 1 [0068.326] MoveToEx (in: hdc=0x3c0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.327] GetROP2 (hdc=0x3c0109c0) returned 13 [0068.327] GetBkMode (hdc=0x3c0109c0) returned 2 [0068.327] SetBkMode (hdc=0x3c0109c0, mode=1) returned 2 [0068.327] SelectObject (hdc=0x3c0109c0, h=0x793009d0) returned 0x793009d0 [0068.327] MoveToEx (in: hdc=0x3c0109c0, x=0, y=0, lppt=0x2298318 | out: lppt=0x2298318) returned 1 [0068.327] LineTo (hdc=0x3c0109c0, x=0, y=22) returned 1 [0068.327] SetBkMode (hdc=0x3c0109c0, mode=2) returned 1 [0068.327] MoveToEx (in: hdc=0x3c0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.327] SelectObject (hdc=0x3c0109c0, h=0x1b00017) returned 0x793009d0 [0068.327] DeleteObject (ho=0x793009d0) returned 1 [0068.327] GetROP2 (hdc=0x3c0109c0) returned 13 [0068.327] GetBkMode (hdc=0x3c0109c0) returned 2 [0068.327] SetBkMode (hdc=0x3c0109c0, mode=1) returned 2 [0068.327] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x5b3006b7 [0068.327] SelectObject (hdc=0x3c0109c0, h=0x5b3006b7) returned 0x1b00017 [0068.327] MoveToEx (in: hdc=0x3c0109c0, x=0, y=22, lppt=0x2298380 | out: lppt=0x2298380) returned 1 [0068.327] LineTo (hdc=0x3c0109c0, x=57, y=22) returned 1 [0068.327] SetBkMode (hdc=0x3c0109c0, mode=2) returned 1 [0068.327] MoveToEx (in: hdc=0x3c0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.327] GetROP2 (hdc=0x3c0109c0) returned 13 [0068.327] GetBkMode (hdc=0x3c0109c0) returned 2 [0068.327] SetBkMode (hdc=0x3c0109c0, mode=1) returned 2 [0068.327] SelectObject (hdc=0x3c0109c0, h=0x5b3006b7) returned 0x5b3006b7 [0068.327] MoveToEx (in: hdc=0x3c0109c0, x=57, y=22, lppt=0x2298398 | out: lppt=0x2298398) returned 1 [0068.327] LineTo (hdc=0x3c0109c0, x=57, y=-1) returned 1 [0068.327] SetBkMode (hdc=0x3c0109c0, mode=2) returned 1 [0068.327] MoveToEx (in: hdc=0x3c0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.327] SelectObject (hdc=0x3c0109c0, h=0x1b00017) returned 0x5b3006b7 [0068.328] DeleteObject (ho=0x5b3006b7) returned 1 [0068.328] GetROP2 (hdc=0x3c0109c0) returned 13 [0068.328] GetBkMode (hdc=0x3c0109c0) returned 2 [0068.328] SetBkMode (hdc=0x3c0109c0, mode=1) returned 2 [0068.328] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x7a3009d0 [0068.328] SelectObject (hdc=0x3c0109c0, h=0x7a3009d0) returned 0x1b00017 [0068.328] MoveToEx (in: hdc=0x3c0109c0, x=56, y=1, lppt=0x2298400 | out: lppt=0x2298400) returned 1 [0068.328] LineTo (hdc=0x3c0109c0, x=1, y=1) returned 1 [0068.328] SetBkMode (hdc=0x3c0109c0, mode=2) returned 1 [0068.328] MoveToEx (in: hdc=0x3c0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.328] GetROP2 (hdc=0x3c0109c0) returned 13 [0068.328] GetBkMode (hdc=0x3c0109c0) returned 2 [0068.328] SetBkMode (hdc=0x3c0109c0, mode=1) returned 2 [0068.328] SelectObject (hdc=0x3c0109c0, h=0x7a3009d0) returned 0x7a3009d0 [0068.328] MoveToEx (in: hdc=0x3c0109c0, x=1, y=1, lppt=0x2298418 | out: lppt=0x2298418) returned 1 [0068.328] LineTo (hdc=0x3c0109c0, x=1, y=21) returned 1 [0068.328] SetBkMode (hdc=0x3c0109c0, mode=2) returned 1 [0068.328] MoveToEx (in: hdc=0x3c0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.328] SelectObject (hdc=0x3c0109c0, h=0x1b00017) returned 0x7a3009d0 [0068.328] DeleteObject (ho=0x7a3009d0) returned 1 [0068.328] GetROP2 (hdc=0x3c0109c0) returned 13 [0068.328] GetBkMode (hdc=0x3c0109c0) returned 2 [0068.328] SetBkMode (hdc=0x3c0109c0, mode=1) returned 2 [0068.329] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x5c3006b7 [0068.329] SelectObject (hdc=0x3c0109c0, h=0x5c3006b7) returned 0x1b00017 [0068.329] MoveToEx (in: hdc=0x3c0109c0, x=1, y=21, lppt=0x2298480 | out: lppt=0x2298480) returned 1 [0068.329] LineTo (hdc=0x3c0109c0, x=56, y=21) returned 1 [0068.329] SetBkMode (hdc=0x3c0109c0, mode=2) returned 1 [0068.329] MoveToEx (in: hdc=0x3c0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.329] GetROP2 (hdc=0x3c0109c0) returned 13 [0068.329] GetBkMode (hdc=0x3c0109c0) returned 2 [0068.329] SetBkMode (hdc=0x3c0109c0, mode=1) returned 2 [0068.329] SelectObject (hdc=0x3c0109c0, h=0x5c3006b7) returned 0x5c3006b7 [0068.329] MoveToEx (in: hdc=0x3c0109c0, x=56, y=21, lppt=0x2298498 | out: lppt=0x2298498) returned 1 [0068.329] LineTo (hdc=0x3c0109c0, x=56, y=0) returned 1 [0068.329] SetBkMode (hdc=0x3c0109c0, mode=2) returned 1 [0068.329] MoveToEx (in: hdc=0x3c0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.329] SelectObject (hdc=0x3c0109c0, h=0x1b00017) returned 0x5c3006b7 [0068.329] DeleteObject (ho=0x5c3006b7) returned 1 [0068.329] RestoreDC (hdc=0x3c0109c0, nSavedDC=-1) returned 1 [0068.329] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x3c0109c0) returned 0x0 [0068.329] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0068.329] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=58, cy=23, hdcSrc=0x3c0109c0, x1=0, y1=0, rop=0xcc0020) returned 1 [0068.329] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x3c0109c0) returned 0x0 [0068.330] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0068.330] SelectObject (hdc=0x3c0109c0, h=0x185000f) returned 0x160506a9 [0068.330] DeleteDC (hdc=0x3c0109c0) returned 1 [0068.330] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0068.330] EndPaint (hWnd=0x602d4, lpPaint=0x14e548) returned 1 [0068.330] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.330] IsWindowUnicode (hWnd=0x302ea) returned 1 [0068.330] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.330] TranslateMessage (lpMsg=0x14ef10) returned 0 [0068.330] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0068.330] BeginPaint (in: hWnd=0x302ea, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0068.330] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0068.330] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0068.330] GetStockObject (i=5) returned 0x1900015 [0068.331] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0068.331] CreateCompatibleDC (hdc=0x220106d6) returned 0x3f0109aa [0068.331] SelectObject (hdc=0x3f0109aa, h=0x160506a9) returned 0x185000f [0068.331] GdipCreateFromHDC (hdc=0x3f0109aa, graphics=0x14e528) returned 0x0 [0068.331] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0068.331] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=32, height=23, combineMode=0x0) returned 0x0 [0068.331] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0068.331] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0068.331] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0068.331] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92ccd0 [0068.331] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92ccd0) returned 0x0 [0068.332] LocalFree (hMem=0x1d92ccd0) returned 0x0 [0068.332] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0068.332] GdipCreateRegion (region=0x14e550) returned 0x0 [0068.332] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.332] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0068.332] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0068.332] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd6f0dbd) returned 0x0 [0068.332] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.332] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0068.332] GetCurrentObject (hdc=0x3f0109aa, type=0x1) returned 0x1b00017 [0068.332] GetCurrentObject (hdc=0x3f0109aa, type=0x2) returned 0x1900010 [0068.332] GetCurrentObject (hdc=0x3f0109aa, type=0x7) returned 0x160506a9 [0068.332] GetCurrentObject (hdc=0x3f0109aa, type=0x6) returned 0x18a0048 [0068.332] SaveDC (hdc=0x3f0109aa) returned 1 [0068.332] GetNearestColor (hdc=0x3f0109aa, color=0xf0f0f0) returned 0xf0f0f0 [0068.332] GetNearestColor (hdc=0x3f0109aa, color=0xa0a0a0) returned 0xa0a0a0 [0068.332] GetNearestColor (hdc=0x3f0109aa, color=0x696969) returned 0x696969 [0068.333] GetNearestColor (hdc=0x3f0109aa, color=0xa0a0a0) returned 0xa0a0a0 [0068.333] GetNearestColor (hdc=0x3f0109aa, color=0x0) returned 0x0 [0068.333] GetNearestColor (hdc=0x3f0109aa, color=0xffffff) returned 0xffffff [0068.333] GetNearestColor (hdc=0x3f0109aa, color=0xe5e5e5) returned 0xe5e5e5 [0068.333] GetNearestColor (hdc=0x3f0109aa, color=0xd8d8d8) returned 0xd8d8d8 [0068.333] GetNearestColor (hdc=0x3f0109aa, color=0x0) returned 0x0 [0068.333] RestoreDC (hdc=0x3f0109aa, nSavedDC=-1) returned 1 [0068.333] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x3f0109aa) returned 0x0 [0068.333] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.333] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x87)\x02", lpUsedDefaultChar=0x0) returned 17 [0068.334] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.334] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2298db8) returned 0x0 [0068.334] GdipSetStringFormatAlign (format=0x1beb7e60, align=0x1) returned 0x0 [0068.334] GdipSetStringFormatLineAlign (format=0x1beb7e60, align=0x1) returned 0x0 [0068.334] GdipSetStringFormatHotkeyPrefix (format=0x1beb7e60, hotkeyPrefix=1) returned 0x0 [0068.334] GdipGetStringFormatFlags (format=0x1beb7e60, flags=0x14e378) returned 0x0 [0068.334] GdipGetStringFormatTrimming (format=0x1beb7e60, trimming=0x14e378) returned 0x0 [0068.334] GdipGetStringFormatHotkeyPrefix (format=0x1beb7e60, hotkeyPrefix=0x14e378) returned 0x0 [0068.334] GdipGetFontSize (font=0x1beb7e60, size=0x14e378) returned 0x0 [0068.334] GdipGetFontStyle (font=0x1beb7e60, style=0x14e378) returned 0x0 [0068.334] GdipDeleteStringFormat (format=0x1beb7e60) returned 0x0 [0068.334] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0068.334] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.334] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0068.335] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2298ee8) returned 0x0 [0068.335] GdipSetStringFormatFlags (format=0x1beb7ed0, flags=0) returned 0x0 [0068.335] GdipSetStringFormatTrimming (format=0x1beb7ed0, trimming=0x1) returned 0x0 [0068.335] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ed0, hotkeyPrefix=1) returned 0x0 [0068.335] GdipSetStringFormatAlign (format=0x1beb7ed0, align=0x1) returned 0x0 [0068.335] GdipSetStringFormatLineAlign (format=0x1beb7ed0, align=0x1) returned 0x0 [0068.335] GdipMeasureString (graphics=0x1beb8070, string="e^", length=2, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7ed0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0068.335] GdipDeleteStringFormat (format=0x1beb7ed0) returned 0x0 [0068.335] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0068.335] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0068.335] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.335] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0068.335] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.335] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0068.335] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0068.336] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0068.336] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0068.336] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d2d0) returned 0x0 [0068.336] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0068.336] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0068.336] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cf10) returned 0x0 [0068.337] LocalFree (hMem=0x1d92cf10) returned 0x0 [0068.337] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0068.337] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0068.337] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0068.337] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0068.337] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.337] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0068.337] GetCurrentObject (hdc=0x3f0109aa, type=0x1) returned 0x1b00017 [0068.337] GetCurrentObject (hdc=0x3f0109aa, type=0x2) returned 0x1900010 [0068.337] GetCurrentObject (hdc=0x3f0109aa, type=0x7) returned 0x160506a9 [0068.337] GetCurrentObject (hdc=0x3f0109aa, type=0x6) returned 0x18a0048 [0068.337] SaveDC (hdc=0x3f0109aa) returned 1 [0068.337] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8904095c [0068.337] GetClipRgn (hdc=0x3f0109aa, hrgn=0xffffffff8904095c) returned 0 [0068.337] SelectClipRgn (hdc=0x3f0109aa, hrgn=0x4a0406c7) returned 2 [0068.337] DeleteObject (ho=0xffffffff8904095c) returned 1 [0068.337] DeleteObject (ho=0x4a0406c7) returned 1 [0068.337] OffsetViewportOrgEx (in: hdc=0x3f0109aa, x=0, y=0, lppt=0x22992a8 | out: lppt=0x22992a8) returned 1 [0068.337] GetNearestColor (hdc=0x3f0109aa, color=0xf0f0f0) returned 0xf0f0f0 [0068.338] CreateSolidBrush (color=0xf0f0f0) returned 0x3c100559 [0068.338] FillRect (hDC=0x3f0109aa, lprc=0x14e1c8, hbr=0x3c100559) returned 1 [0068.338] DeleteObject (ho=0x3c100559) returned 1 [0068.338] RestoreDC (hdc=0x3f0109aa, nSavedDC=-1) returned 1 [0068.338] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x3f0109aa) returned 0x0 [0068.338] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0068.338] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.338] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22993a8) returned 0x0 [0068.338] GdipSetStringFormatAlign (format=0x1beb7920, align=0x1) returned 0x0 [0068.338] GdipSetStringFormatLineAlign (format=0x1beb7920, align=0x1) returned 0x0 [0068.338] GdipSetStringFormatHotkeyPrefix (format=0x1beb7920, hotkeyPrefix=1) returned 0x0 [0068.338] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0068.338] GdipDrawString (graphics=0x1beb67f0, string="e^", length=2, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7920, brush=0x1beb15e0) returned 0x0 [0068.339] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0068.339] GdipDeleteStringFormat (format=0x1beb7920) returned 0x0 [0068.339] GetFocus () returned 0x0 [0068.339] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x84)\x02", lpUsedDefaultChar=0x0) returned 17 [0068.339] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.339] GdipCreateRegion (region=0x14e030) returned 0x0 [0068.339] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.339] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0068.339] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0068.339] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0068.339] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0068.339] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d2d0) returned 0x0 [0068.340] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0068.340] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92ca90 [0068.340] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92ca90) returned 0x0 [0068.341] LocalFree (hMem=0x1d92ca90) returned 0x0 [0068.341] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0068.341] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0068.341] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0068.341] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0068.341] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.341] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0068.341] GetCurrentObject (hdc=0x3f0109aa, type=0x1) returned 0x1b00017 [0068.341] GetCurrentObject (hdc=0x3f0109aa, type=0x2) returned 0x1900010 [0068.341] GetCurrentObject (hdc=0x3f0109aa, type=0x7) returned 0x160506a9 [0068.341] GetCurrentObject (hdc=0x3f0109aa, type=0x6) returned 0x18a0048 [0068.341] SaveDC (hdc=0x3f0109aa) returned 1 [0068.341] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4b0406c7 [0068.341] GetClipRgn (hdc=0x3f0109aa, hrgn=0x4b0406c7) returned 0 [0068.341] SelectClipRgn (hdc=0x3f0109aa, hrgn=0xffffffff8a04095c) returned 2 [0068.341] DeleteObject (ho=0x4b0406c7) returned 1 [0068.341] DeleteObject (ho=0xffffffff8a04095c) returned 1 [0068.341] OffsetViewportOrgEx (in: hdc=0x3f0109aa, x=0, y=0, lppt=0x2299790 | out: lppt=0x2299790) returned 1 [0068.341] GetROP2 (hdc=0x3f0109aa) returned 13 [0068.341] GetBkMode (hdc=0x3f0109aa) returned 2 [0068.342] SetBkMode (hdc=0x3f0109aa, mode=1) returned 2 [0068.342] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x5d3006b7 [0068.342] SelectObject (hdc=0x3f0109aa, h=0x5d3006b7) returned 0x1b00017 [0068.342] MoveToEx (in: hdc=0x3f0109aa, x=32, y=0, lppt=0x22997f8 | out: lppt=0x22997f8) returned 1 [0068.342] LineTo (hdc=0x3f0109aa, x=0, y=0) returned 1 [0068.342] SetBkMode (hdc=0x3f0109aa, mode=2) returned 1 [0068.342] MoveToEx (in: hdc=0x3f0109aa, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.342] GetROP2 (hdc=0x3f0109aa) returned 13 [0068.342] GetBkMode (hdc=0x3f0109aa) returned 2 [0068.342] SetBkMode (hdc=0x3f0109aa, mode=1) returned 2 [0068.342] SelectObject (hdc=0x3f0109aa, h=0x5d3006b7) returned 0x5d3006b7 [0068.342] MoveToEx (in: hdc=0x3f0109aa, x=0, y=0, lppt=0x2299810 | out: lppt=0x2299810) returned 1 [0068.342] LineTo (hdc=0x3f0109aa, x=0, y=22) returned 1 [0068.342] SetBkMode (hdc=0x3f0109aa, mode=2) returned 1 [0068.342] MoveToEx (in: hdc=0x3f0109aa, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.342] SelectObject (hdc=0x3f0109aa, h=0x1b00017) returned 0x5d3006b7 [0068.342] DeleteObject (ho=0x5d3006b7) returned 1 [0068.342] GetROP2 (hdc=0x3f0109aa) returned 13 [0068.342] GetBkMode (hdc=0x3f0109aa) returned 2 [0068.342] SetBkMode (hdc=0x3f0109aa, mode=1) returned 2 [0068.342] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x7b3009d0 [0068.342] SelectObject (hdc=0x3f0109aa, h=0x7b3009d0) returned 0x1b00017 [0068.342] MoveToEx (in: hdc=0x3f0109aa, x=0, y=22, lppt=0x2299878 | out: lppt=0x2299878) returned 1 [0068.342] LineTo (hdc=0x3f0109aa, x=32, y=22) returned 1 [0068.343] SetBkMode (hdc=0x3f0109aa, mode=2) returned 1 [0068.343] MoveToEx (in: hdc=0x3f0109aa, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.343] GetROP2 (hdc=0x3f0109aa) returned 13 [0068.343] GetBkMode (hdc=0x3f0109aa) returned 2 [0068.343] SetBkMode (hdc=0x3f0109aa, mode=1) returned 2 [0068.343] SelectObject (hdc=0x3f0109aa, h=0x7b3009d0) returned 0x7b3009d0 [0068.343] MoveToEx (in: hdc=0x3f0109aa, x=32, y=22, lppt=0x2299890 | out: lppt=0x2299890) returned 1 [0068.343] LineTo (hdc=0x3f0109aa, x=32, y=-1) returned 1 [0068.343] SetBkMode (hdc=0x3f0109aa, mode=2) returned 1 [0068.343] MoveToEx (in: hdc=0x3f0109aa, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.343] SelectObject (hdc=0x3f0109aa, h=0x1b00017) returned 0x7b3009d0 [0068.343] DeleteObject (ho=0x7b3009d0) returned 1 [0068.343] GetROP2 (hdc=0x3f0109aa) returned 13 [0068.343] GetBkMode (hdc=0x3f0109aa) returned 2 [0068.343] SetBkMode (hdc=0x3f0109aa, mode=1) returned 2 [0068.343] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x5e3006b7 [0068.343] SelectObject (hdc=0x3f0109aa, h=0x5e3006b7) returned 0x1b00017 [0068.343] MoveToEx (in: hdc=0x3f0109aa, x=31, y=1, lppt=0x22998f8 | out: lppt=0x22998f8) returned 1 [0068.343] LineTo (hdc=0x3f0109aa, x=1, y=1) returned 1 [0068.343] SetBkMode (hdc=0x3f0109aa, mode=2) returned 1 [0068.343] MoveToEx (in: hdc=0x3f0109aa, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.343] GetROP2 (hdc=0x3f0109aa) returned 13 [0068.343] GetBkMode (hdc=0x3f0109aa) returned 2 [0068.343] SetBkMode (hdc=0x3f0109aa, mode=1) returned 2 [0068.343] SelectObject (hdc=0x3f0109aa, h=0x5e3006b7) returned 0x5e3006b7 [0068.344] MoveToEx (in: hdc=0x3f0109aa, x=1, y=1, lppt=0x2299910 | out: lppt=0x2299910) returned 1 [0068.344] LineTo (hdc=0x3f0109aa, x=1, y=21) returned 1 [0068.344] SetBkMode (hdc=0x3f0109aa, mode=2) returned 1 [0068.344] MoveToEx (in: hdc=0x3f0109aa, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.344] SelectObject (hdc=0x3f0109aa, h=0x1b00017) returned 0x5e3006b7 [0068.344] DeleteObject (ho=0x5e3006b7) returned 1 [0068.344] GetROP2 (hdc=0x3f0109aa) returned 13 [0068.344] GetBkMode (hdc=0x3f0109aa) returned 2 [0068.344] SetBkMode (hdc=0x3f0109aa, mode=1) returned 2 [0068.344] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x7c3009d0 [0068.344] SelectObject (hdc=0x3f0109aa, h=0x7c3009d0) returned 0x1b00017 [0068.344] MoveToEx (in: hdc=0x3f0109aa, x=1, y=21, lppt=0x2299978 | out: lppt=0x2299978) returned 1 [0068.344] LineTo (hdc=0x3f0109aa, x=31, y=21) returned 1 [0068.344] SetBkMode (hdc=0x3f0109aa, mode=2) returned 1 [0068.344] MoveToEx (in: hdc=0x3f0109aa, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.344] GetROP2 (hdc=0x3f0109aa) returned 13 [0068.344] GetBkMode (hdc=0x3f0109aa) returned 2 [0068.344] SetBkMode (hdc=0x3f0109aa, mode=1) returned 2 [0068.344] SelectObject (hdc=0x3f0109aa, h=0x7c3009d0) returned 0x7c3009d0 [0068.344] MoveToEx (in: hdc=0x3f0109aa, x=31, y=21, lppt=0x2299990 | out: lppt=0x2299990) returned 1 [0068.344] LineTo (hdc=0x3f0109aa, x=31, y=0) returned 1 [0068.344] SetBkMode (hdc=0x3f0109aa, mode=2) returned 1 [0068.344] MoveToEx (in: hdc=0x3f0109aa, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.344] SelectObject (hdc=0x3f0109aa, h=0x1b00017) returned 0x7c3009d0 [0068.344] DeleteObject (ho=0x7c3009d0) returned 1 [0068.345] RestoreDC (hdc=0x3f0109aa, nSavedDC=-1) returned 1 [0068.345] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x3f0109aa) returned 0x0 [0068.345] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0068.345] BitBlt (hdc=0x220106d6, x=0, y=0, cx=33, cy=23, hdcSrc=0x3f0109aa, x1=0, y1=0, rop=0xcc0020) returned 1 [0068.345] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x3f0109aa) returned 0x0 [0068.345] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0068.345] SelectObject (hdc=0x3f0109aa, h=0x185000f) returned 0x160506a9 [0068.345] DeleteDC (hdc=0x3f0109aa) returned 1 [0068.345] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0068.345] EndPaint (hWnd=0x302ea, lpPaint=0x14e548) returned 1 [0068.345] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.345] IsWindowUnicode (hWnd=0x3035a) returned 1 [0068.345] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.345] TranslateMessage (lpMsg=0x14ef10) returned 0 [0068.345] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0068.345] BeginPaint (in: hWnd=0x3035a, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0068.346] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0068.346] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0068.346] GetStockObject (i=5) returned 0x1900015 [0068.346] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0068.346] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x47010689 [0068.346] SelectObject (hdc=0x47010689, h=0x160506a9) returned 0x185000f [0068.346] GdipCreateFromHDC (hdc=0x47010689, graphics=0x14e528) returned 0x0 [0068.346] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0068.346] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0068.346] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0068.346] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0068.346] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0068.346] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d350 [0068.346] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d350) returned 0x0 [0068.347] LocalFree (hMem=0x1d92d350) returned 0x0 [0068.347] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0068.347] GdipCreateRegion (region=0x14e550) returned 0x0 [0068.347] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.347] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0068.347] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0068.347] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd6c0dbd) returned 0x0 [0068.347] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.347] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0068.347] GetCurrentObject (hdc=0x47010689, type=0x1) returned 0x1b00017 [0068.347] GetCurrentObject (hdc=0x47010689, type=0x2) returned 0x1900010 [0068.347] GetCurrentObject (hdc=0x47010689, type=0x7) returned 0x160506a9 [0068.348] GetCurrentObject (hdc=0x47010689, type=0x6) returned 0x18a0048 [0068.348] SaveDC (hdc=0x47010689) returned 1 [0068.348] GetNearestColor (hdc=0x47010689, color=0xf0f0f0) returned 0xf0f0f0 [0068.348] GetNearestColor (hdc=0x47010689, color=0xa0a0a0) returned 0xa0a0a0 [0068.348] GetNearestColor (hdc=0x47010689, color=0x696969) returned 0x696969 [0068.348] GetNearestColor (hdc=0x47010689, color=0xa0a0a0) returned 0xa0a0a0 [0068.348] GetNearestColor (hdc=0x47010689, color=0x0) returned 0x0 [0068.348] GetNearestColor (hdc=0x47010689, color=0xffffff) returned 0xffffff [0068.348] GetNearestColor (hdc=0x47010689, color=0xe5e5e5) returned 0xe5e5e5 [0068.585] GetNearestColor (hdc=0x47010689, color=0xd8d8d8) returned 0xd8d8d8 [0068.585] GetNearestColor (hdc=0x47010689, color=0x0) returned 0x0 [0068.585] RestoreDC (hdc=0x47010689, nSavedDC=-1) returned 1 [0068.586] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x47010689) returned 0x0 [0068.586] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.586] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9c)\x02", lpUsedDefaultChar=0x0) returned 17 [0068.586] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.586] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x229a2b0) returned 0x0 [0068.586] GdipSetStringFormatAlign (format=0x1beb7fb0, align=0x1) returned 0x0 [0068.586] GdipSetStringFormatLineAlign (format=0x1beb7fb0, align=0x1) returned 0x0 [0068.586] GdipSetStringFormatHotkeyPrefix (format=0x1beb7fb0, hotkeyPrefix=1) returned 0x0 [0068.586] GdipGetStringFormatFlags (format=0x1beb7fb0, flags=0x14e378) returned 0x0 [0068.586] GdipGetStringFormatTrimming (format=0x1beb7fb0, trimming=0x14e378) returned 0x0 [0068.587] GdipGetStringFormatHotkeyPrefix (format=0x1beb7fb0, hotkeyPrefix=0x14e378) returned 0x0 [0068.587] GdipGetFontSize (font=0x1beb7fb0, size=0x14e378) returned 0x0 [0068.587] GdipGetFontStyle (font=0x1beb7fb0, style=0x14e378) returned 0x0 [0068.587] GdipDeleteStringFormat (format=0x1beb7fb0) returned 0x0 [0068.587] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0068.587] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.587] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0068.587] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x229a3e0) returned 0x0 [0068.587] GdipSetStringFormatFlags (format=0x1beb7df0, flags=0) returned 0x0 [0068.587] GdipSetStringFormatTrimming (format=0x1beb7df0, trimming=0x1) returned 0x0 [0068.588] GdipSetStringFormatHotkeyPrefix (format=0x1beb7df0, hotkeyPrefix=1) returned 0x0 [0068.588] GdipSetStringFormatAlign (format=0x1beb7df0, align=0x1) returned 0x0 [0068.588] GdipSetStringFormatLineAlign (format=0x1beb7df0, align=0x1) returned 0x0 [0068.588] GdipMeasureString (graphics=0x1beb8070, string="/", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7df0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0068.588] GdipDeleteStringFormat (format=0x1beb7df0) returned 0x0 [0068.588] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0068.588] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0068.588] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.588] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0068.588] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.588] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0068.588] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0068.588] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0068.588] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92ca90 [0068.589] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92ca90) returned 0x0 [0068.589] LocalFree (hMem=0x1d92ca90) returned 0x0 [0068.589] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0068.589] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d710) returned 0x0 [0068.590] LocalFree (hMem=0x1d92d710) returned 0x0 [0068.590] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0068.590] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0068.590] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0068.590] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0068.590] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.590] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0068.590] GetCurrentObject (hdc=0x47010689, type=0x1) returned 0x1b00017 [0068.590] GetCurrentObject (hdc=0x47010689, type=0x2) returned 0x1900010 [0068.590] GetCurrentObject (hdc=0x47010689, type=0x7) returned 0x160506a9 [0068.590] GetCurrentObject (hdc=0x47010689, type=0x6) returned 0x18a0048 [0068.590] SaveDC (hdc=0x47010689) returned 1 [0068.590] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8b04095c [0068.590] GetClipRgn (hdc=0x47010689, hrgn=0xffffffff8b04095c) returned 0 [0068.590] SelectClipRgn (hdc=0x47010689, hrgn=0x4c0406c7) returned 2 [0068.591] DeleteObject (ho=0xffffffff8b04095c) returned 1 [0068.591] DeleteObject (ho=0x4c0406c7) returned 1 [0068.591] OffsetViewportOrgEx (in: hdc=0x47010689, x=0, y=0, lppt=0x229a7a0 | out: lppt=0x229a7a0) returned 1 [0068.591] GetNearestColor (hdc=0x47010689, color=0xf0f0f0) returned 0xf0f0f0 [0068.591] CreateSolidBrush (color=0xf0f0f0) returned 0x3d100559 [0068.591] FillRect (hDC=0x47010689, lprc=0x14e1c8, hbr=0x3d100559) returned 1 [0068.591] DeleteObject (ho=0x3d100559) returned 1 [0068.591] RestoreDC (hdc=0x47010689, nSavedDC=-1) returned 1 [0068.591] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x47010689) returned 0x0 [0068.591] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0068.591] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.591] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x229a8a0) returned 0x0 [0068.591] GdipSetStringFormatAlign (format=0x1beb7fb0, align=0x1) returned 0x0 [0068.591] GdipSetStringFormatLineAlign (format=0x1beb7fb0, align=0x1) returned 0x0 [0068.591] GdipSetStringFormatHotkeyPrefix (format=0x1beb7fb0, hotkeyPrefix=1) returned 0x0 [0068.592] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0068.592] GdipDrawString (graphics=0x1beb67f0, string="/", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7fb0, brush=0x1beb15e0) returned 0x0 [0068.592] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0068.592] GdipDeleteStringFormat (format=0x1beb7fb0) returned 0x0 [0068.592] GetFocus () returned 0x0 [0068.592] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x99)\x02", lpUsedDefaultChar=0x0) returned 17 [0068.592] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.592] GdipCreateRegion (region=0x14e030) returned 0x0 [0068.593] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.593] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0068.593] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0068.593] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0068.593] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d350 [0068.593] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d350) returned 0x0 [0068.593] LocalFree (hMem=0x1d92d350) returned 0x0 [0068.593] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0068.593] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d2d0) returned 0x0 [0068.594] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0068.594] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0068.594] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0068.594] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0068.594] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0068.594] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.594] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0068.594] GetCurrentObject (hdc=0x47010689, type=0x1) returned 0x1b00017 [0068.594] GetCurrentObject (hdc=0x47010689, type=0x2) returned 0x1900010 [0068.594] GetCurrentObject (hdc=0x47010689, type=0x7) returned 0x160506a9 [0068.594] GetCurrentObject (hdc=0x47010689, type=0x6) returned 0x18a0048 [0068.594] SaveDC (hdc=0x47010689) returned 1 [0068.595] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4d0406c7 [0068.595] GetClipRgn (hdc=0x47010689, hrgn=0x4d0406c7) returned 0 [0068.595] SelectClipRgn (hdc=0x47010689, hrgn=0xffffffff8c04095c) returned 2 [0068.595] DeleteObject (ho=0x4d0406c7) returned 1 [0068.595] DeleteObject (ho=0xffffffff8c04095c) returned 1 [0068.595] OffsetViewportOrgEx (in: hdc=0x47010689, x=0, y=0, lppt=0x229ac88 | out: lppt=0x229ac88) returned 1 [0068.595] GetROP2 (hdc=0x47010689) returned 13 [0068.595] GetBkMode (hdc=0x47010689) returned 2 [0068.595] SetBkMode (hdc=0x47010689, mode=1) returned 2 [0068.595] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x7d3009d0 [0068.595] SelectObject (hdc=0x47010689, h=0x7d3009d0) returned 0x1b00017 [0068.595] MoveToEx (in: hdc=0x47010689, x=25, y=0, lppt=0x229acf0 | out: lppt=0x229acf0) returned 1 [0068.595] LineTo (hdc=0x47010689, x=0, y=0) returned 1 [0068.595] SetBkMode (hdc=0x47010689, mode=2) returned 1 [0068.595] MoveToEx (in: hdc=0x47010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.595] GetROP2 (hdc=0x47010689) returned 13 [0068.595] GetBkMode (hdc=0x47010689) returned 2 [0068.595] SetBkMode (hdc=0x47010689, mode=1) returned 2 [0068.595] SelectObject (hdc=0x47010689, h=0x7d3009d0) returned 0x7d3009d0 [0068.595] MoveToEx (in: hdc=0x47010689, x=0, y=0, lppt=0x229ad08 | out: lppt=0x229ad08) returned 1 [0068.595] LineTo (hdc=0x47010689, x=0, y=22) returned 1 [0068.595] SetBkMode (hdc=0x47010689, mode=2) returned 1 [0068.595] MoveToEx (in: hdc=0x47010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.596] SelectObject (hdc=0x47010689, h=0x1b00017) returned 0x7d3009d0 [0068.596] DeleteObject (ho=0x7d3009d0) returned 1 [0068.596] GetROP2 (hdc=0x47010689) returned 13 [0068.596] GetBkMode (hdc=0x47010689) returned 2 [0068.596] SetBkMode (hdc=0x47010689, mode=1) returned 2 [0068.596] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x5f3006b7 [0068.596] SelectObject (hdc=0x47010689, h=0x5f3006b7) returned 0x1b00017 [0068.596] MoveToEx (in: hdc=0x47010689, x=0, y=22, lppt=0x229ad70 | out: lppt=0x229ad70) returned 1 [0068.596] LineTo (hdc=0x47010689, x=25, y=22) returned 1 [0068.596] SetBkMode (hdc=0x47010689, mode=2) returned 1 [0068.596] MoveToEx (in: hdc=0x47010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.596] GetROP2 (hdc=0x47010689) returned 13 [0068.596] GetBkMode (hdc=0x47010689) returned 2 [0068.596] SetBkMode (hdc=0x47010689, mode=1) returned 2 [0068.596] SelectObject (hdc=0x47010689, h=0x5f3006b7) returned 0x5f3006b7 [0068.596] MoveToEx (in: hdc=0x47010689, x=25, y=22, lppt=0x229ad88 | out: lppt=0x229ad88) returned 1 [0068.596] LineTo (hdc=0x47010689, x=25, y=-1) returned 1 [0068.596] SetBkMode (hdc=0x47010689, mode=2) returned 1 [0068.596] MoveToEx (in: hdc=0x47010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.596] SelectObject (hdc=0x47010689, h=0x1b00017) returned 0x5f3006b7 [0068.596] DeleteObject (ho=0x5f3006b7) returned 1 [0068.596] GetROP2 (hdc=0x47010689) returned 13 [0068.596] GetBkMode (hdc=0x47010689) returned 2 [0068.597] SetBkMode (hdc=0x47010689, mode=1) returned 2 [0068.597] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x7e3009d0 [0068.597] SelectObject (hdc=0x47010689, h=0x7e3009d0) returned 0x1b00017 [0068.597] MoveToEx (in: hdc=0x47010689, x=24, y=1, lppt=0x229adf0 | out: lppt=0x229adf0) returned 1 [0068.597] LineTo (hdc=0x47010689, x=1, y=1) returned 1 [0068.597] SetBkMode (hdc=0x47010689, mode=2) returned 1 [0068.597] MoveToEx (in: hdc=0x47010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.597] GetROP2 (hdc=0x47010689) returned 13 [0068.597] GetBkMode (hdc=0x47010689) returned 2 [0068.597] SetBkMode (hdc=0x47010689, mode=1) returned 2 [0068.597] SelectObject (hdc=0x47010689, h=0x7e3009d0) returned 0x7e3009d0 [0068.597] MoveToEx (in: hdc=0x47010689, x=1, y=1, lppt=0x229ae08 | out: lppt=0x229ae08) returned 1 [0068.597] LineTo (hdc=0x47010689, x=1, y=21) returned 1 [0068.597] SetBkMode (hdc=0x47010689, mode=2) returned 1 [0068.597] MoveToEx (in: hdc=0x47010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.597] SelectObject (hdc=0x47010689, h=0x1b00017) returned 0x7e3009d0 [0068.597] DeleteObject (ho=0x7e3009d0) returned 1 [0068.597] GetROP2 (hdc=0x47010689) returned 13 [0068.597] GetBkMode (hdc=0x47010689) returned 2 [0068.597] SetBkMode (hdc=0x47010689, mode=1) returned 2 [0068.597] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x603006b7 [0068.597] SelectObject (hdc=0x47010689, h=0x603006b7) returned 0x1b00017 [0068.597] MoveToEx (in: hdc=0x47010689, x=1, y=21, lppt=0x229ae70 | out: lppt=0x229ae70) returned 1 [0068.598] LineTo (hdc=0x47010689, x=24, y=21) returned 1 [0068.598] SetBkMode (hdc=0x47010689, mode=2) returned 1 [0068.598] MoveToEx (in: hdc=0x47010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.598] GetROP2 (hdc=0x47010689) returned 13 [0068.598] GetBkMode (hdc=0x47010689) returned 2 [0068.598] SetBkMode (hdc=0x47010689, mode=1) returned 2 [0068.598] SelectObject (hdc=0x47010689, h=0x603006b7) returned 0x603006b7 [0068.598] MoveToEx (in: hdc=0x47010689, x=24, y=21, lppt=0x229ae88 | out: lppt=0x229ae88) returned 1 [0068.598] LineTo (hdc=0x47010689, x=24, y=0) returned 1 [0068.598] SetBkMode (hdc=0x47010689, mode=2) returned 1 [0068.598] MoveToEx (in: hdc=0x47010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.598] SelectObject (hdc=0x47010689, h=0x1b00017) returned 0x603006b7 [0068.598] DeleteObject (ho=0x603006b7) returned 1 [0068.598] RestoreDC (hdc=0x47010689, nSavedDC=-1) returned 1 [0068.598] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x47010689) returned 0x0 [0068.598] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0068.599] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x47010689, x1=0, y1=0, rop=0xcc0020) returned 1 [0068.599] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x47010689) returned 0x0 [0068.599] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0068.599] SelectObject (hdc=0x47010689, h=0x185000f) returned 0x160506a9 [0068.599] DeleteDC (hdc=0x47010689) returned 1 [0068.599] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0068.599] EndPaint (hWnd=0x3035a, lpPaint=0x14e548) returned 1 [0068.599] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.599] IsWindowUnicode (hWnd=0x30362) returned 1 [0068.599] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.599] TranslateMessage (lpMsg=0x14ef10) returned 0 [0068.599] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0068.600] BeginPaint (in: hWnd=0x30362, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0068.600] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0068.600] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0068.600] GetStockObject (i=5) returned 0x1900015 [0068.600] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0068.600] CreateCompatibleDC (hdc=0xc0100ae) returned 0x470109c0 [0068.600] SelectObject (hdc=0x470109c0, h=0x160506a9) returned 0x185000f [0068.600] GdipCreateFromHDC (hdc=0x470109c0, graphics=0x14e528) returned 0x0 [0068.600] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0068.600] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0068.600] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0068.600] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0068.600] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0068.601] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d090 [0068.601] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d090) returned 0x0 [0068.601] LocalFree (hMem=0x1d92d090) returned 0x0 [0068.601] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0068.601] GdipCreateRegion (region=0x14e550) returned 0x0 [0068.601] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.601] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0068.601] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0068.601] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd690dbd) returned 0x0 [0068.602] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.602] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0068.602] GetCurrentObject (hdc=0x470109c0, type=0x1) returned 0x1b00017 [0068.602] GetCurrentObject (hdc=0x470109c0, type=0x2) returned 0x1900010 [0068.602] GetCurrentObject (hdc=0x470109c0, type=0x7) returned 0x160506a9 [0068.602] GetCurrentObject (hdc=0x470109c0, type=0x6) returned 0x18a0048 [0068.602] SaveDC (hdc=0x470109c0) returned 1 [0068.602] GetNearestColor (hdc=0x470109c0, color=0xf0f0f0) returned 0xf0f0f0 [0068.602] GetNearestColor (hdc=0x470109c0, color=0xa0a0a0) returned 0xa0a0a0 [0068.602] GetNearestColor (hdc=0x470109c0, color=0x696969) returned 0x696969 [0068.602] GetNearestColor (hdc=0x470109c0, color=0xa0a0a0) returned 0xa0a0a0 [0068.602] GetNearestColor (hdc=0x470109c0, color=0x0) returned 0x0 [0068.602] GetNearestColor (hdc=0x470109c0, color=0xffffff) returned 0xffffff [0068.602] GetNearestColor (hdc=0x470109c0, color=0xe5e5e5) returned 0xe5e5e5 [0068.602] GetNearestColor (hdc=0x470109c0, color=0xd8d8d8) returned 0xd8d8d8 [0068.602] GetNearestColor (hdc=0x470109c0, color=0x0) returned 0x0 [0068.602] RestoreDC (hdc=0x470109c0, nSavedDC=-1) returned 1 [0068.602] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x470109c0) returned 0x0 [0068.603] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx±)\x02", lpUsedDefaultChar=0x0) returned 17 [0068.603] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.603] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x229b7a8) returned 0x0 [0068.603] GdipSetStringFormatAlign (format=0x1beb7a00, align=0x1) returned 0x0 [0068.603] GdipSetStringFormatLineAlign (format=0x1beb7a00, align=0x1) returned 0x0 [0068.603] GdipSetStringFormatHotkeyPrefix (format=0x1beb7a00, hotkeyPrefix=1) returned 0x0 [0068.603] GdipGetStringFormatFlags (format=0x1beb7a00, flags=0x14e378) returned 0x0 [0068.603] GdipGetStringFormatTrimming (format=0x1beb7a00, trimming=0x14e378) returned 0x0 [0068.603] GdipGetStringFormatHotkeyPrefix (format=0x1beb7a00, hotkeyPrefix=0x14e378) returned 0x0 [0068.603] GdipGetFontSize (font=0x1beb7a00, size=0x14e378) returned 0x0 [0068.603] GdipGetFontStyle (font=0x1beb7a00, style=0x14e378) returned 0x0 [0068.603] GdipDeleteStringFormat (format=0x1beb7a00) returned 0x0 [0068.603] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.604] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0068.604] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.604] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0068.604] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x229b8d8) returned 0x0 [0068.604] GdipSetStringFormatFlags (format=0x1beb7e60, flags=0) returned 0x0 [0068.604] GdipSetStringFormatTrimming (format=0x1beb7e60, trimming=0x1) returned 0x0 [0068.604] GdipSetStringFormatHotkeyPrefix (format=0x1beb7e60, hotkeyPrefix=1) returned 0x0 [0068.604] GdipSetStringFormatAlign (format=0x1beb7e60, align=0x1) returned 0x0 [0068.604] GdipSetStringFormatLineAlign (format=0x1beb7e60, align=0x1) returned 0x0 [0068.604] GdipMeasureString (graphics=0x1beb8070, string=";", length=1, font=0x1abeedb0, layoutRect=0x14dfb8, stringFormat=0x1beb7e60, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0068.604] GdipDeleteStringFormat (format=0x1beb7e60) returned 0x0 [0068.604] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0068.604] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.605] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0068.605] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.605] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0068.605] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.605] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0068.605] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0068.605] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0068.605] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0068.605] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d650) returned 0x0 [0068.606] LocalFree (hMem=0x1d92d650) returned 0x0 [0068.606] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d490 [0068.606] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d490) returned 0x0 [0068.606] LocalFree (hMem=0x1d92d490) returned 0x0 [0068.606] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0068.606] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0068.606] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0068.606] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0068.606] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.606] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0068.606] GetCurrentObject (hdc=0x470109c0, type=0x1) returned 0x1b00017 [0068.606] GetCurrentObject (hdc=0x470109c0, type=0x2) returned 0x1900010 [0068.606] GetCurrentObject (hdc=0x470109c0, type=0x7) returned 0x160506a9 [0068.606] GetCurrentObject (hdc=0x470109c0, type=0x6) returned 0x18a0048 [0068.606] SaveDC (hdc=0x470109c0) returned 1 [0068.607] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8d04095c [0068.607] GetClipRgn (hdc=0x470109c0, hrgn=0xffffffff8d04095c) returned 0 [0068.607] SelectClipRgn (hdc=0x470109c0, hrgn=0x4e0406c7) returned 2 [0068.607] DeleteObject (ho=0xffffffff8d04095c) returned 1 [0068.607] DeleteObject (ho=0x4e0406c7) returned 1 [0068.607] OffsetViewportOrgEx (in: hdc=0x470109c0, x=0, y=0, lppt=0x229bc98 | out: lppt=0x229bc98) returned 1 [0068.607] GetNearestColor (hdc=0x470109c0, color=0xf0f0f0) returned 0xf0f0f0 [0068.607] CreateSolidBrush (color=0xf0f0f0) returned 0x3e100559 [0068.607] FillRect (hDC=0x470109c0, lprc=0x14e1c8, hbr=0x3e100559) returned 1 [0068.607] DeleteObject (ho=0x3e100559) returned 1 [0068.607] RestoreDC (hdc=0x470109c0, nSavedDC=-1) returned 1 [0068.607] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x470109c0) returned 0x0 [0068.607] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.607] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0068.608] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.608] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x229bd98) returned 0x0 [0068.608] GdipSetStringFormatAlign (format=0x1beb7920, align=0x1) returned 0x0 [0068.608] GdipSetStringFormatLineAlign (format=0x1beb7920, align=0x1) returned 0x0 [0068.608] GdipSetStringFormatHotkeyPrefix (format=0x1beb7920, hotkeyPrefix=1) returned 0x0 [0068.608] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0068.608] GdipDrawString (graphics=0x1beb67f0, string=";", length=1, font=0x1abeedb0, layoutRect=0x14e338, stringFormat=0x1beb7920, brush=0x1beb15e0) returned 0x0 [0068.608] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0068.608] GdipDeleteStringFormat (format=0x1beb7920) returned 0x0 [0068.608] GetFocus () returned 0x0 [0068.616] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx®)\x02", lpUsedDefaultChar=0x0) returned 17 [0068.617] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.617] GdipCreateRegion (region=0x14e030) returned 0x0 [0068.617] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.617] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0068.617] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0068.617] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0068.617] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cb90 [0068.617] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cb90) returned 0x0 [0068.618] LocalFree (hMem=0x1d92cb90) returned 0x0 [0068.618] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0068.618] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d2d0) returned 0x0 [0068.619] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0068.619] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0068.619] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0068.619] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0068.619] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0068.619] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.619] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0068.619] GetCurrentObject (hdc=0x470109c0, type=0x1) returned 0x1b00017 [0068.619] GetCurrentObject (hdc=0x470109c0, type=0x2) returned 0x1900010 [0068.619] GetCurrentObject (hdc=0x470109c0, type=0x7) returned 0x160506a9 [0068.619] GetCurrentObject (hdc=0x470109c0, type=0x6) returned 0x18a0048 [0068.619] SaveDC (hdc=0x470109c0) returned 1 [0068.619] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4f0406c7 [0068.620] GetClipRgn (hdc=0x470109c0, hrgn=0x4f0406c7) returned 0 [0068.620] SelectClipRgn (hdc=0x470109c0, hrgn=0xffffffff8e04095c) returned 2 [0068.620] DeleteObject (ho=0x4f0406c7) returned 1 [0068.620] DeleteObject (ho=0xffffffff8e04095c) returned 1 [0068.620] OffsetViewportOrgEx (in: hdc=0x470109c0, x=0, y=0, lppt=0x229c180 | out: lppt=0x229c180) returned 1 [0068.620] GetROP2 (hdc=0x470109c0) returned 13 [0068.620] GetBkMode (hdc=0x470109c0) returned 2 [0068.620] SetBkMode (hdc=0x470109c0, mode=1) returned 2 [0068.620] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x453009aa [0068.620] SelectObject (hdc=0x470109c0, h=0x453009aa) returned 0x1b00017 [0068.620] MoveToEx (in: hdc=0x470109c0, x=25, y=0, lppt=0x229c1e8 | out: lppt=0x229c1e8) returned 1 [0068.620] LineTo (hdc=0x470109c0, x=0, y=0) returned 1 [0068.620] SetBkMode (hdc=0x470109c0, mode=2) returned 1 [0068.620] MoveToEx (in: hdc=0x470109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.620] GetROP2 (hdc=0x470109c0) returned 13 [0068.620] GetBkMode (hdc=0x470109c0) returned 2 [0068.620] SetBkMode (hdc=0x470109c0, mode=1) returned 2 [0068.620] SelectObject (hdc=0x470109c0, h=0x453009aa) returned 0x453009aa [0068.620] MoveToEx (in: hdc=0x470109c0, x=0, y=0, lppt=0x229c200 | out: lppt=0x229c200) returned 1 [0068.620] LineTo (hdc=0x470109c0, x=0, y=22) returned 1 [0068.620] SetBkMode (hdc=0x470109c0, mode=2) returned 1 [0068.620] MoveToEx (in: hdc=0x470109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.620] SelectObject (hdc=0x470109c0, h=0x1b00017) returned 0x453009aa [0068.620] DeleteObject (ho=0x453009aa) returned 1 [0068.621] GetROP2 (hdc=0x470109c0) returned 13 [0068.621] GetBkMode (hdc=0x470109c0) returned 2 [0068.621] SetBkMode (hdc=0x470109c0, mode=1) returned 2 [0068.621] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x613006b7 [0068.621] SelectObject (hdc=0x470109c0, h=0x613006b7) returned 0x1b00017 [0068.621] MoveToEx (in: hdc=0x470109c0, x=0, y=22, lppt=0x229c268 | out: lppt=0x229c268) returned 1 [0068.621] LineTo (hdc=0x470109c0, x=25, y=22) returned 1 [0068.621] SetBkMode (hdc=0x470109c0, mode=2) returned 1 [0068.621] MoveToEx (in: hdc=0x470109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.621] GetROP2 (hdc=0x470109c0) returned 13 [0068.621] GetBkMode (hdc=0x470109c0) returned 2 [0068.621] SetBkMode (hdc=0x470109c0, mode=1) returned 2 [0068.621] SelectObject (hdc=0x470109c0, h=0x613006b7) returned 0x613006b7 [0068.621] MoveToEx (in: hdc=0x470109c0, x=25, y=22, lppt=0x229c280 | out: lppt=0x229c280) returned 1 [0068.621] LineTo (hdc=0x470109c0, x=25, y=-1) returned 1 [0068.621] SetBkMode (hdc=0x470109c0, mode=2) returned 1 [0068.621] MoveToEx (in: hdc=0x470109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.621] SelectObject (hdc=0x470109c0, h=0x1b00017) returned 0x613006b7 [0068.621] DeleteObject (ho=0x613006b7) returned 1 [0068.621] GetROP2 (hdc=0x470109c0) returned 13 [0068.621] GetBkMode (hdc=0x470109c0) returned 2 [0068.621] SetBkMode (hdc=0x470109c0, mode=1) returned 2 [0068.621] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x463009aa [0068.622] SelectObject (hdc=0x470109c0, h=0x463009aa) returned 0x1b00017 [0068.622] MoveToEx (in: hdc=0x470109c0, x=24, y=1, lppt=0x229c2e8 | out: lppt=0x229c2e8) returned 1 [0068.622] LineTo (hdc=0x470109c0, x=1, y=1) returned 1 [0068.622] SetBkMode (hdc=0x470109c0, mode=2) returned 1 [0068.622] MoveToEx (in: hdc=0x470109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.622] GetROP2 (hdc=0x470109c0) returned 13 [0068.622] GetBkMode (hdc=0x470109c0) returned 2 [0068.622] SetBkMode (hdc=0x470109c0, mode=1) returned 2 [0068.622] SelectObject (hdc=0x470109c0, h=0x463009aa) returned 0x463009aa [0068.622] MoveToEx (in: hdc=0x470109c0, x=1, y=1, lppt=0x229c300 | out: lppt=0x229c300) returned 1 [0068.622] LineTo (hdc=0x470109c0, x=1, y=21) returned 1 [0068.622] SetBkMode (hdc=0x470109c0, mode=2) returned 1 [0068.622] MoveToEx (in: hdc=0x470109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.622] SelectObject (hdc=0x470109c0, h=0x1b00017) returned 0x463009aa [0068.622] DeleteObject (ho=0x463009aa) returned 1 [0068.622] GetROP2 (hdc=0x470109c0) returned 13 [0068.622] GetBkMode (hdc=0x470109c0) returned 2 [0068.622] SetBkMode (hdc=0x470109c0, mode=1) returned 2 [0068.622] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x623006b7 [0068.622] SelectObject (hdc=0x470109c0, h=0x623006b7) returned 0x1b00017 [0068.622] MoveToEx (in: hdc=0x470109c0, x=1, y=21, lppt=0x229c368 | out: lppt=0x229c368) returned 1 [0068.622] LineTo (hdc=0x470109c0, x=24, y=21) returned 1 [0068.623] SetBkMode (hdc=0x470109c0, mode=2) returned 1 [0068.623] MoveToEx (in: hdc=0x470109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.623] GetROP2 (hdc=0x470109c0) returned 13 [0068.623] GetBkMode (hdc=0x470109c0) returned 2 [0068.623] SetBkMode (hdc=0x470109c0, mode=1) returned 2 [0068.623] SelectObject (hdc=0x470109c0, h=0x623006b7) returned 0x623006b7 [0068.623] MoveToEx (in: hdc=0x470109c0, x=24, y=21, lppt=0x229c380 | out: lppt=0x229c380) returned 1 [0068.623] LineTo (hdc=0x470109c0, x=24, y=0) returned 1 [0068.623] SetBkMode (hdc=0x470109c0, mode=2) returned 1 [0068.623] MoveToEx (in: hdc=0x470109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.623] SelectObject (hdc=0x470109c0, h=0x1b00017) returned 0x623006b7 [0068.623] DeleteObject (ho=0x623006b7) returned 1 [0068.623] RestoreDC (hdc=0x470109c0, nSavedDC=-1) returned 1 [0068.623] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x470109c0) returned 0x0 [0068.623] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0068.623] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x470109c0, x1=0, y1=0, rop=0xcc0020) returned 1 [0068.623] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x470109c0) returned 0x0 [0068.623] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0068.623] SelectObject (hdc=0x470109c0, h=0x185000f) returned 0x160506a9 [0068.623] DeleteDC (hdc=0x470109c0) returned 1 [0068.623] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0068.624] EndPaint (hWnd=0x30362, lpPaint=0x14e548) returned 1 [0068.624] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.624] IsWindowUnicode (hWnd=0x3033e) returned 1 [0068.624] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.624] TranslateMessage (lpMsg=0x14ef10) returned 0 [0068.624] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0068.624] BeginPaint (in: hWnd=0x3033e, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0068.624] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0068.624] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0068.624] GetStockObject (i=5) returned 0x1900015 [0068.624] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0068.624] CreateCompatibleDC (hdc=0x220106d6) returned 0x4a0109c0 [0068.625] SelectObject (hdc=0x4a0109c0, h=0x160506a9) returned 0x185000f [0068.625] GdipCreateFromHDC (hdc=0x4a0109c0, graphics=0x14e528) returned 0x0 [0068.625] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0068.625] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0068.625] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0068.625] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0068.625] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0068.625] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0068.625] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cf10) returned 0x0 [0068.626] LocalFree (hMem=0x1d92cf10) returned 0x0 [0068.626] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0068.626] GdipCreateRegion (region=0x14e550) returned 0x0 [0068.626] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.626] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0068.626] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0068.626] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd660dbd) returned 0x0 [0068.626] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.626] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0068.626] GetCurrentObject (hdc=0x4a0109c0, type=0x1) returned 0x1b00017 [0068.626] GetCurrentObject (hdc=0x4a0109c0, type=0x2) returned 0x1900010 [0068.626] GetCurrentObject (hdc=0x4a0109c0, type=0x7) returned 0x160506a9 [0068.626] GetCurrentObject (hdc=0x4a0109c0, type=0x6) returned 0x18a0048 [0068.626] SaveDC (hdc=0x4a0109c0) returned 1 [0068.626] GetNearestColor (hdc=0x4a0109c0, color=0xf0f0f0) returned 0xf0f0f0 [0068.626] GetNearestColor (hdc=0x4a0109c0, color=0xa0a0a0) returned 0xa0a0a0 [0068.626] GetNearestColor (hdc=0x4a0109c0, color=0x696969) returned 0x696969 [0068.626] GetNearestColor (hdc=0x4a0109c0, color=0xa0a0a0) returned 0xa0a0a0 [0068.626] GetNearestColor (hdc=0x4a0109c0, color=0x0) returned 0x0 [0068.626] GetNearestColor (hdc=0x4a0109c0, color=0xffffff) returned 0xffffff [0068.627] GetNearestColor (hdc=0x4a0109c0, color=0xe5e5e5) returned 0xe5e5e5 [0068.627] GetNearestColor (hdc=0x4a0109c0, color=0xd8d8d8) returned 0xd8d8d8 [0068.627] GetNearestColor (hdc=0x4a0109c0, color=0x0) returned 0x0 [0068.627] RestoreDC (hdc=0x4a0109c0, nSavedDC=-1) returned 1 [0068.627] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x4a0109c0) returned 0x0 [0068.627] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÆ)\x02", lpUsedDefaultChar=0x0) returned 17 [0068.627] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.627] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x229cca0) returned 0x0 [0068.627] GdipSetStringFormatAlign (format=0x1beb7e60, align=0x1) returned 0x0 [0068.627] GdipSetStringFormatLineAlign (format=0x1beb7e60, align=0x1) returned 0x0 [0068.627] GdipSetStringFormatHotkeyPrefix (format=0x1beb7e60, hotkeyPrefix=1) returned 0x0 [0068.627] GdipGetStringFormatFlags (format=0x1beb7e60, flags=0x14e378) returned 0x0 [0068.627] GdipGetStringFormatTrimming (format=0x1beb7e60, trimming=0x14e378) returned 0x0 [0068.628] GdipGetStringFormatHotkeyPrefix (format=0x1beb7e60, hotkeyPrefix=0x14e378) returned 0x0 [0068.628] GdipGetFontSize (font=0x1beb7e60, size=0x14e378) returned 0x0 [0068.628] GdipGetFontStyle (font=0x1beb7e60, style=0x14e378) returned 0x0 [0068.628] GdipDeleteStringFormat (format=0x1beb7e60) returned 0x0 [0068.628] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0068.628] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.628] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0068.628] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x229cdd0) returned 0x0 [0068.628] GdipSetStringFormatFlags (format=0x1beb7d10, flags=0) returned 0x0 [0068.628] GdipSetStringFormatTrimming (format=0x1beb7d10, trimming=0x1) returned 0x0 [0068.628] GdipSetStringFormatHotkeyPrefix (format=0x1beb7d10, hotkeyPrefix=1) returned 0x0 [0068.629] GdipSetStringFormatAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0068.629] GdipSetStringFormatLineAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0068.629] GdipMeasureString (graphics=0x1beb8070, string="-", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7d10, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0068.629] GdipDeleteStringFormat (format=0x1beb7d10) returned 0x0 [0068.629] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0068.629] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0068.629] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.629] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0068.629] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.629] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0068.849] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0068.849] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0068.849] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0068.849] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d710) returned 0x0 [0068.850] LocalFree (hMem=0x1d92d710) returned 0x0 [0068.850] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d810 [0068.850] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d810) returned 0x0 [0068.851] LocalFree (hMem=0x1d92d810) returned 0x0 [0068.851] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0068.851] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0068.851] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0068.851] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0068.851] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.851] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0068.851] GetCurrentObject (hdc=0x4a0109c0, type=0x1) returned 0x1b00017 [0068.851] GetCurrentObject (hdc=0x4a0109c0, type=0x2) returned 0x1900010 [0068.851] GetCurrentObject (hdc=0x4a0109c0, type=0x7) returned 0x160506a9 [0068.851] GetCurrentObject (hdc=0x4a0109c0, type=0x6) returned 0x18a0048 [0068.851] SaveDC (hdc=0x4a0109c0) returned 1 [0068.851] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8f04095c [0068.852] GetClipRgn (hdc=0x4a0109c0, hrgn=0xffffffff8f04095c) returned 0 [0068.852] SelectClipRgn (hdc=0x4a0109c0, hrgn=0x500406c7) returned 2 [0068.852] DeleteObject (ho=0xffffffff8f04095c) returned 1 [0068.852] DeleteObject (ho=0x500406c7) returned 1 [0068.852] OffsetViewportOrgEx (in: hdc=0x4a0109c0, x=0, y=0, lppt=0x229d190 | out: lppt=0x229d190) returned 1 [0068.852] GetNearestColor (hdc=0x4a0109c0, color=0xf0f0f0) returned 0xf0f0f0 [0068.852] CreateSolidBrush (color=0xf0f0f0) returned 0x3f100559 [0068.852] FillRect (hDC=0x4a0109c0, lprc=0x14e1c8, hbr=0x3f100559) returned 1 [0068.852] DeleteObject (ho=0x3f100559) returned 1 [0068.852] RestoreDC (hdc=0x4a0109c0, nSavedDC=-1) returned 1 [0068.852] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x4a0109c0) returned 0x0 [0068.852] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0068.853] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.853] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x229d290) returned 0x0 [0068.853] GdipSetStringFormatAlign (format=0x1beb7b50, align=0x1) returned 0x0 [0068.853] GdipSetStringFormatLineAlign (format=0x1beb7b50, align=0x1) returned 0x0 [0068.853] GdipSetStringFormatHotkeyPrefix (format=0x1beb7b50, hotkeyPrefix=1) returned 0x0 [0068.853] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0068.853] GdipDrawString (graphics=0x1beb67f0, string="-", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7b50, brush=0x1beb15e0) returned 0x0 [0068.853] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0068.853] GdipDeleteStringFormat (format=0x1beb7b50) returned 0x0 [0068.853] GetFocus () returned 0x0 [0068.853] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÃ)\x02", lpUsedDefaultChar=0x0) returned 17 [0068.854] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.854] GdipCreateRegion (region=0x14e030) returned 0x0 [0068.854] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.854] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0068.854] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0068.854] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0068.854] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d890 [0068.854] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d890) returned 0x0 [0068.855] LocalFree (hMem=0x1d92d890) returned 0x0 [0068.855] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0068.855] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cf10) returned 0x0 [0068.855] LocalFree (hMem=0x1d92cf10) returned 0x0 [0068.855] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0068.855] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0068.855] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0068.855] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0068.855] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.855] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0068.856] GetCurrentObject (hdc=0x4a0109c0, type=0x1) returned 0x1b00017 [0068.856] GetCurrentObject (hdc=0x4a0109c0, type=0x2) returned 0x1900010 [0068.856] GetCurrentObject (hdc=0x4a0109c0, type=0x7) returned 0x160506a9 [0068.856] GetCurrentObject (hdc=0x4a0109c0, type=0x6) returned 0x18a0048 [0068.856] SaveDC (hdc=0x4a0109c0) returned 1 [0068.856] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x510406c7 [0068.856] GetClipRgn (hdc=0x4a0109c0, hrgn=0x510406c7) returned 0 [0068.856] SelectClipRgn (hdc=0x4a0109c0, hrgn=0xffffffff9004095c) returned 2 [0068.856] DeleteObject (ho=0x510406c7) returned 1 [0068.856] DeleteObject (ho=0xffffffff9004095c) returned 1 [0068.856] OffsetViewportOrgEx (in: hdc=0x4a0109c0, x=0, y=0, lppt=0x229d678 | out: lppt=0x229d678) returned 1 [0068.856] GetROP2 (hdc=0x4a0109c0) returned 13 [0068.856] GetBkMode (hdc=0x4a0109c0) returned 2 [0068.856] SetBkMode (hdc=0x4a0109c0, mode=1) returned 2 [0068.856] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x473009aa [0068.856] SelectObject (hdc=0x4a0109c0, h=0x473009aa) returned 0x1b00017 [0068.856] MoveToEx (in: hdc=0x4a0109c0, x=25, y=0, lppt=0x229d6e0 | out: lppt=0x229d6e0) returned 1 [0068.856] LineTo (hdc=0x4a0109c0, x=0, y=0) returned 1 [0068.856] SetBkMode (hdc=0x4a0109c0, mode=2) returned 1 [0068.856] MoveToEx (in: hdc=0x4a0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.856] GetROP2 (hdc=0x4a0109c0) returned 13 [0068.857] GetBkMode (hdc=0x4a0109c0) returned 2 [0068.857] SetBkMode (hdc=0x4a0109c0, mode=1) returned 2 [0068.857] SelectObject (hdc=0x4a0109c0, h=0x473009aa) returned 0x473009aa [0068.857] MoveToEx (in: hdc=0x4a0109c0, x=0, y=0, lppt=0x229d6f8 | out: lppt=0x229d6f8) returned 1 [0068.857] LineTo (hdc=0x4a0109c0, x=0, y=22) returned 1 [0068.857] SetBkMode (hdc=0x4a0109c0, mode=2) returned 1 [0068.857] MoveToEx (in: hdc=0x4a0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.857] SelectObject (hdc=0x4a0109c0, h=0x1b00017) returned 0x473009aa [0068.857] DeleteObject (ho=0x473009aa) returned 1 [0068.857] GetROP2 (hdc=0x4a0109c0) returned 13 [0068.857] GetBkMode (hdc=0x4a0109c0) returned 2 [0068.857] SetBkMode (hdc=0x4a0109c0, mode=1) returned 2 [0068.857] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x7f3009d0 [0068.857] SelectObject (hdc=0x4a0109c0, h=0x7f3009d0) returned 0x1b00017 [0068.857] MoveToEx (in: hdc=0x4a0109c0, x=0, y=22, lppt=0x229d760 | out: lppt=0x229d760) returned 1 [0068.857] LineTo (hdc=0x4a0109c0, x=25, y=22) returned 1 [0068.857] SetBkMode (hdc=0x4a0109c0, mode=2) returned 1 [0068.857] MoveToEx (in: hdc=0x4a0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.857] GetROP2 (hdc=0x4a0109c0) returned 13 [0068.857] GetBkMode (hdc=0x4a0109c0) returned 2 [0068.857] SetBkMode (hdc=0x4a0109c0, mode=1) returned 2 [0068.857] SelectObject (hdc=0x4a0109c0, h=0x7f3009d0) returned 0x7f3009d0 [0068.857] MoveToEx (in: hdc=0x4a0109c0, x=25, y=22, lppt=0x229d778 | out: lppt=0x229d778) returned 1 [0068.857] LineTo (hdc=0x4a0109c0, x=25, y=-1) returned 1 [0068.858] SetBkMode (hdc=0x4a0109c0, mode=2) returned 1 [0068.858] MoveToEx (in: hdc=0x4a0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.858] SelectObject (hdc=0x4a0109c0, h=0x1b00017) returned 0x7f3009d0 [0068.858] DeleteObject (ho=0x7f3009d0) returned 1 [0068.858] GetROP2 (hdc=0x4a0109c0) returned 13 [0068.858] GetBkMode (hdc=0x4a0109c0) returned 2 [0068.858] SetBkMode (hdc=0x4a0109c0, mode=1) returned 2 [0068.858] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x483009aa [0068.858] SelectObject (hdc=0x4a0109c0, h=0x483009aa) returned 0x1b00017 [0068.858] MoveToEx (in: hdc=0x4a0109c0, x=24, y=1, lppt=0x229d7e0 | out: lppt=0x229d7e0) returned 1 [0068.858] LineTo (hdc=0x4a0109c0, x=1, y=1) returned 1 [0068.858] SetBkMode (hdc=0x4a0109c0, mode=2) returned 1 [0068.858] MoveToEx (in: hdc=0x4a0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.858] GetROP2 (hdc=0x4a0109c0) returned 13 [0068.858] GetBkMode (hdc=0x4a0109c0) returned 2 [0068.858] SetBkMode (hdc=0x4a0109c0, mode=1) returned 2 [0068.858] SelectObject (hdc=0x4a0109c0, h=0x483009aa) returned 0x483009aa [0068.858] MoveToEx (in: hdc=0x4a0109c0, x=1, y=1, lppt=0x229d7f8 | out: lppt=0x229d7f8) returned 1 [0068.858] LineTo (hdc=0x4a0109c0, x=1, y=21) returned 1 [0068.858] SetBkMode (hdc=0x4a0109c0, mode=2) returned 1 [0068.858] MoveToEx (in: hdc=0x4a0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.858] SelectObject (hdc=0x4a0109c0, h=0x1b00017) returned 0x483009aa [0068.858] DeleteObject (ho=0x483009aa) returned 1 [0068.858] GetROP2 (hdc=0x4a0109c0) returned 13 [0068.859] GetBkMode (hdc=0x4a0109c0) returned 2 [0068.859] SetBkMode (hdc=0x4a0109c0, mode=1) returned 2 [0068.859] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xffffffff803009d0 [0068.859] SelectObject (hdc=0x4a0109c0, h=0xffffffff803009d0) returned 0x1b00017 [0068.859] MoveToEx (in: hdc=0x4a0109c0, x=1, y=21, lppt=0x229d860 | out: lppt=0x229d860) returned 1 [0068.859] LineTo (hdc=0x4a0109c0, x=24, y=21) returned 1 [0068.859] SetBkMode (hdc=0x4a0109c0, mode=2) returned 1 [0068.859] MoveToEx (in: hdc=0x4a0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.859] GetROP2 (hdc=0x4a0109c0) returned 13 [0068.859] GetBkMode (hdc=0x4a0109c0) returned 2 [0068.859] SetBkMode (hdc=0x4a0109c0, mode=1) returned 2 [0068.859] SelectObject (hdc=0x4a0109c0, h=0xffffffff803009d0) returned 0xffffffff803009d0 [0068.859] MoveToEx (in: hdc=0x4a0109c0, x=24, y=21, lppt=0x229d878 | out: lppt=0x229d878) returned 1 [0068.859] LineTo (hdc=0x4a0109c0, x=24, y=0) returned 1 [0068.859] SetBkMode (hdc=0x4a0109c0, mode=2) returned 1 [0068.859] MoveToEx (in: hdc=0x4a0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.859] SelectObject (hdc=0x4a0109c0, h=0x1b00017) returned 0xffffffff803009d0 [0068.859] DeleteObject (ho=0xffffffff803009d0) returned 1 [0068.859] RestoreDC (hdc=0x4a0109c0, nSavedDC=-1) returned 1 [0068.859] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x4a0109c0) returned 0x0 [0068.859] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0068.859] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x4a0109c0, x1=0, y1=0, rop=0xcc0020) returned 1 [0068.860] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x4a0109c0) returned 0x0 [0068.860] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0068.860] SelectObject (hdc=0x4a0109c0, h=0x185000f) returned 0x160506a9 [0068.860] DeleteDC (hdc=0x4a0109c0) returned 1 [0068.860] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0068.860] EndPaint (hWnd=0x3033e, lpPaint=0x14e548) returned 1 [0068.860] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.860] IsWindowUnicode (hWnd=0x30340) returned 1 [0068.860] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.860] TranslateMessage (lpMsg=0x14ef10) returned 0 [0068.860] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0068.860] BeginPaint (in: hWnd=0x30340, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0068.860] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0068.861] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0068.861] GetStockObject (i=5) returned 0x1900015 [0068.861] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0068.861] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x660106b7 [0068.861] SelectObject (hdc=0x660106b7, h=0x160506a9) returned 0x185000f [0068.861] GdipCreateFromHDC (hdc=0x660106b7, graphics=0x14e528) returned 0x0 [0068.861] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0068.861] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0068.861] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0068.861] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0068.861] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0068.861] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0068.861] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d650) returned 0x0 [0068.862] LocalFree (hMem=0x1d92d650) returned 0x0 [0068.862] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0068.862] GdipCreateRegion (region=0x14e550) returned 0x0 [0068.862] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.862] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0068.862] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0068.862] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd630dbd) returned 0x0 [0068.862] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.862] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0068.862] GetCurrentObject (hdc=0x660106b7, type=0x1) returned 0x1b00017 [0068.862] GetCurrentObject (hdc=0x660106b7, type=0x2) returned 0x1900010 [0068.863] GetCurrentObject (hdc=0x660106b7, type=0x7) returned 0x160506a9 [0068.863] GetCurrentObject (hdc=0x660106b7, type=0x6) returned 0x18a0048 [0068.863] SaveDC (hdc=0x660106b7) returned 1 [0068.863] GetNearestColor (hdc=0x660106b7, color=0xf0f0f0) returned 0xf0f0f0 [0068.863] GetNearestColor (hdc=0x660106b7, color=0xa0a0a0) returned 0xa0a0a0 [0068.863] GetNearestColor (hdc=0x660106b7, color=0x696969) returned 0x696969 [0068.863] GetNearestColor (hdc=0x660106b7, color=0xa0a0a0) returned 0xa0a0a0 [0068.863] GetNearestColor (hdc=0x660106b7, color=0x0) returned 0x0 [0068.863] GetNearestColor (hdc=0x660106b7, color=0xffffff) returned 0xffffff [0068.863] GetNearestColor (hdc=0x660106b7, color=0xe5e5e5) returned 0xe5e5e5 [0068.863] GetNearestColor (hdc=0x660106b7, color=0xd8d8d8) returned 0xd8d8d8 [0068.863] GetNearestColor (hdc=0x660106b7, color=0x0) returned 0x0 [0068.863] RestoreDC (hdc=0x660106b7, nSavedDC=-1) returned 1 [0068.863] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x660106b7) returned 0x0 [0068.864] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÛ)\x02", lpUsedDefaultChar=0x0) returned 17 [0068.864] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.864] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x229e198) returned 0x0 [0068.864] GdipSetStringFormatAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0068.864] GdipSetStringFormatLineAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0068.864] GdipSetStringFormatHotkeyPrefix (format=0x1beb7d10, hotkeyPrefix=1) returned 0x0 [0068.864] GdipGetStringFormatFlags (format=0x1beb7d10, flags=0x14e378) returned 0x0 [0068.864] GdipGetStringFormatTrimming (format=0x1beb7d10, trimming=0x14e378) returned 0x0 [0068.864] GdipGetStringFormatHotkeyPrefix (format=0x1beb7d10, hotkeyPrefix=0x14e378) returned 0x0 [0068.864] GdipGetFontSize (font=0x1beb7d10, size=0x14e378) returned 0x0 [0068.864] GdipGetFontStyle (font=0x1beb7d10, style=0x14e378) returned 0x0 [0068.864] GdipDeleteStringFormat (format=0x1beb7d10) returned 0x0 [0068.864] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0068.865] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.865] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0068.865] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x229e2c8) returned 0x0 [0068.865] GdipSetStringFormatFlags (format=0x1beb7ca0, flags=0) returned 0x0 [0068.865] GdipSetStringFormatTrimming (format=0x1beb7ca0, trimming=0x1) returned 0x0 [0068.865] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ca0, hotkeyPrefix=1) returned 0x0 [0068.865] GdipSetStringFormatAlign (format=0x1beb7ca0, align=0x1) returned 0x0 [0068.865] GdipSetStringFormatLineAlign (format=0x1beb7ca0, align=0x1) returned 0x0 [0068.865] GdipMeasureString (graphics=0x1beb8070, string="8", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7ca0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0068.865] GdipDeleteStringFormat (format=0x1beb7ca0) returned 0x0 [0068.865] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0068.865] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0068.866] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.866] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0068.866] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.866] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0068.866] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0068.866] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0068.866] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0068.866] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d650) returned 0x0 [0068.867] LocalFree (hMem=0x1d92d650) returned 0x0 [0068.867] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0068.867] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cf10) returned 0x0 [0068.867] LocalFree (hMem=0x1d92cf10) returned 0x0 [0068.867] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0068.867] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0068.867] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0068.867] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0068.867] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.867] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0068.867] GetCurrentObject (hdc=0x660106b7, type=0x1) returned 0x1b00017 [0068.867] GetCurrentObject (hdc=0x660106b7, type=0x2) returned 0x1900010 [0068.868] GetCurrentObject (hdc=0x660106b7, type=0x7) returned 0x160506a9 [0068.868] GetCurrentObject (hdc=0x660106b7, type=0x6) returned 0x18a0048 [0068.868] SaveDC (hdc=0x660106b7) returned 1 [0068.868] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9104095c [0068.868] GetClipRgn (hdc=0x660106b7, hrgn=0xffffffff9104095c) returned 0 [0068.868] SelectClipRgn (hdc=0x660106b7, hrgn=0x520406c7) returned 2 [0068.868] DeleteObject (ho=0xffffffff9104095c) returned 1 [0068.868] DeleteObject (ho=0x520406c7) returned 1 [0068.868] OffsetViewportOrgEx (in: hdc=0x660106b7, x=0, y=0, lppt=0x229e688 | out: lppt=0x229e688) returned 1 [0068.868] GetNearestColor (hdc=0x660106b7, color=0xf0f0f0) returned 0xf0f0f0 [0068.868] CreateSolidBrush (color=0xf0f0f0) returned 0x40100559 [0068.868] FillRect (hDC=0x660106b7, lprc=0x14e1c8, hbr=0x40100559) returned 1 [0068.868] DeleteObject (ho=0x40100559) returned 1 [0068.868] RestoreDC (hdc=0x660106b7, nSavedDC=-1) returned 1 [0068.869] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x660106b7) returned 0x0 [0068.869] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0068.869] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.869] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x229e788) returned 0x0 [0068.869] GdipSetStringFormatAlign (format=0x1beb7ca0, align=0x1) returned 0x0 [0068.869] GdipSetStringFormatLineAlign (format=0x1beb7ca0, align=0x1) returned 0x0 [0068.869] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ca0, hotkeyPrefix=1) returned 0x0 [0068.869] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0068.869] GdipDrawString (graphics=0x1beb67f0, string="8", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7ca0, brush=0x1beb15e0) returned 0x0 [0068.869] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0068.869] GdipDeleteStringFormat (format=0x1beb7ca0) returned 0x0 [0068.869] GetFocus () returned 0x0 [0068.870] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExØ)\x02", lpUsedDefaultChar=0x0) returned 17 [0068.870] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.870] GdipCreateRegion (region=0x14e030) returned 0x0 [0068.870] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.870] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0068.870] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0068.870] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0068.870] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0068.870] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d650) returned 0x0 [0068.871] LocalFree (hMem=0x1d92d650) returned 0x0 [0068.871] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d350 [0068.871] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d350) returned 0x0 [0068.872] LocalFree (hMem=0x1d92d350) returned 0x0 [0068.872] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0068.872] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0068.872] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0068.872] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0068.872] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.872] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0068.872] GetCurrentObject (hdc=0x660106b7, type=0x1) returned 0x1b00017 [0068.872] GetCurrentObject (hdc=0x660106b7, type=0x2) returned 0x1900010 [0068.872] GetCurrentObject (hdc=0x660106b7, type=0x7) returned 0x160506a9 [0068.872] GetCurrentObject (hdc=0x660106b7, type=0x6) returned 0x18a0048 [0068.872] SaveDC (hdc=0x660106b7) returned 1 [0068.872] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x530406c7 [0068.872] GetClipRgn (hdc=0x660106b7, hrgn=0x530406c7) returned 0 [0068.872] SelectClipRgn (hdc=0x660106b7, hrgn=0xffffffff9204095c) returned 2 [0068.872] DeleteObject (ho=0x530406c7) returned 1 [0068.872] DeleteObject (ho=0xffffffff9204095c) returned 1 [0068.872] OffsetViewportOrgEx (in: hdc=0x660106b7, x=0, y=0, lppt=0x229eb70 | out: lppt=0x229eb70) returned 1 [0068.872] GetROP2 (hdc=0x660106b7) returned 13 [0068.872] GetBkMode (hdc=0x660106b7) returned 2 [0068.872] SetBkMode (hdc=0x660106b7, mode=1) returned 2 [0068.873] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0xffffffff813009d0 [0068.873] SelectObject (hdc=0x660106b7, h=0xffffffff813009d0) returned 0x1b00017 [0068.873] MoveToEx (in: hdc=0x660106b7, x=25, y=0, lppt=0x229ebd8 | out: lppt=0x229ebd8) returned 1 [0068.873] LineTo (hdc=0x660106b7, x=0, y=0) returned 1 [0068.873] SetBkMode (hdc=0x660106b7, mode=2) returned 1 [0068.873] MoveToEx (in: hdc=0x660106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.873] GetROP2 (hdc=0x660106b7) returned 13 [0068.873] GetBkMode (hdc=0x660106b7) returned 2 [0068.873] SetBkMode (hdc=0x660106b7, mode=1) returned 2 [0068.873] SelectObject (hdc=0x660106b7, h=0xffffffff813009d0) returned 0xffffffff813009d0 [0068.873] MoveToEx (in: hdc=0x660106b7, x=0, y=0, lppt=0x229ebf0 | out: lppt=0x229ebf0) returned 1 [0068.873] LineTo (hdc=0x660106b7, x=0, y=22) returned 1 [0068.873] SetBkMode (hdc=0x660106b7, mode=2) returned 1 [0068.873] MoveToEx (in: hdc=0x660106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.873] SelectObject (hdc=0x660106b7, h=0x1b00017) returned 0xffffffff813009d0 [0068.873] DeleteObject (ho=0xffffffff813009d0) returned 1 [0068.873] GetROP2 (hdc=0x660106b7) returned 13 [0068.873] GetBkMode (hdc=0x660106b7) returned 2 [0068.873] SetBkMode (hdc=0x660106b7, mode=1) returned 2 [0068.873] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x493009aa [0068.873] SelectObject (hdc=0x660106b7, h=0x493009aa) returned 0x1b00017 [0068.873] MoveToEx (in: hdc=0x660106b7, x=0, y=22, lppt=0x229ec58 | out: lppt=0x229ec58) returned 1 [0068.873] LineTo (hdc=0x660106b7, x=25, y=22) returned 1 [0068.874] SetBkMode (hdc=0x660106b7, mode=2) returned 1 [0068.874] MoveToEx (in: hdc=0x660106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.874] GetROP2 (hdc=0x660106b7) returned 13 [0068.874] GetBkMode (hdc=0x660106b7) returned 2 [0068.874] SetBkMode (hdc=0x660106b7, mode=1) returned 2 [0068.874] SelectObject (hdc=0x660106b7, h=0x493009aa) returned 0x493009aa [0068.874] MoveToEx (in: hdc=0x660106b7, x=25, y=22, lppt=0x229ec70 | out: lppt=0x229ec70) returned 1 [0068.874] LineTo (hdc=0x660106b7, x=25, y=-1) returned 1 [0068.874] SetBkMode (hdc=0x660106b7, mode=2) returned 1 [0068.874] MoveToEx (in: hdc=0x660106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.874] SelectObject (hdc=0x660106b7, h=0x1b00017) returned 0x493009aa [0068.874] DeleteObject (ho=0x493009aa) returned 1 [0068.874] GetROP2 (hdc=0x660106b7) returned 13 [0068.874] GetBkMode (hdc=0x660106b7) returned 2 [0068.874] SetBkMode (hdc=0x660106b7, mode=1) returned 2 [0068.874] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xffffffff823009d0 [0068.874] SelectObject (hdc=0x660106b7, h=0xffffffff823009d0) returned 0x1b00017 [0068.874] MoveToEx (in: hdc=0x660106b7, x=24, y=1, lppt=0x229ecd8 | out: lppt=0x229ecd8) returned 1 [0068.874] LineTo (hdc=0x660106b7, x=1, y=1) returned 1 [0068.874] SetBkMode (hdc=0x660106b7, mode=2) returned 1 [0068.874] MoveToEx (in: hdc=0x660106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.874] GetROP2 (hdc=0x660106b7) returned 13 [0068.874] GetBkMode (hdc=0x660106b7) returned 2 [0068.874] SetBkMode (hdc=0x660106b7, mode=1) returned 2 [0068.874] SelectObject (hdc=0x660106b7, h=0xffffffff823009d0) returned 0xffffffff823009d0 [0068.875] MoveToEx (in: hdc=0x660106b7, x=1, y=1, lppt=0x229ecf0 | out: lppt=0x229ecf0) returned 1 [0068.875] LineTo (hdc=0x660106b7, x=1, y=21) returned 1 [0068.875] SetBkMode (hdc=0x660106b7, mode=2) returned 1 [0068.875] MoveToEx (in: hdc=0x660106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.875] SelectObject (hdc=0x660106b7, h=0x1b00017) returned 0xffffffff823009d0 [0068.875] DeleteObject (ho=0xffffffff823009d0) returned 1 [0068.875] GetROP2 (hdc=0x660106b7) returned 13 [0068.875] GetBkMode (hdc=0x660106b7) returned 2 [0068.875] SetBkMode (hdc=0x660106b7, mode=1) returned 2 [0068.875] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x4a3009aa [0068.875] SelectObject (hdc=0x660106b7, h=0x4a3009aa) returned 0x1b00017 [0068.875] MoveToEx (in: hdc=0x660106b7, x=1, y=21, lppt=0x229ed58 | out: lppt=0x229ed58) returned 1 [0068.875] LineTo (hdc=0x660106b7, x=24, y=21) returned 1 [0068.875] SetBkMode (hdc=0x660106b7, mode=2) returned 1 [0068.875] MoveToEx (in: hdc=0x660106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.875] GetROP2 (hdc=0x660106b7) returned 13 [0068.875] GetBkMode (hdc=0x660106b7) returned 2 [0068.875] SetBkMode (hdc=0x660106b7, mode=1) returned 2 [0068.875] SelectObject (hdc=0x660106b7, h=0x4a3009aa) returned 0x4a3009aa [0068.875] MoveToEx (in: hdc=0x660106b7, x=24, y=21, lppt=0x229ed70 | out: lppt=0x229ed70) returned 1 [0068.875] LineTo (hdc=0x660106b7, x=24, y=0) returned 1 [0068.875] SetBkMode (hdc=0x660106b7, mode=2) returned 1 [0068.875] MoveToEx (in: hdc=0x660106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0068.875] SelectObject (hdc=0x660106b7, h=0x1b00017) returned 0x4a3009aa [0068.875] DeleteObject (ho=0x4a3009aa) returned 1 [0068.876] RestoreDC (hdc=0x660106b7, nSavedDC=-1) returned 1 [0068.876] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x660106b7) returned 0x0 [0068.876] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0068.876] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x660106b7, x1=0, y1=0, rop=0xcc0020) returned 1 [0068.876] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x660106b7) returned 0x0 [0068.876] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0068.876] SelectObject (hdc=0x660106b7, h=0x185000f) returned 0x160506a9 [0068.876] DeleteDC (hdc=0x660106b7) returned 1 [0068.876] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0068.876] EndPaint (hWnd=0x30340, lpPaint=0x14e548) returned 1 [0068.876] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.876] IsWindowUnicode (hWnd=0x3032e) returned 1 [0068.876] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0068.876] TranslateMessage (lpMsg=0x14ef10) returned 0 [0068.876] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0068.877] BeginPaint (in: hWnd=0x3032e, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0068.877] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0068.877] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0068.877] GetStockObject (i=5) returned 0x1900015 [0068.877] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0068.877] CreateCompatibleDC (hdc=0xc0100ae) returned 0x54010689 [0068.877] SelectObject (hdc=0x54010689, h=0x160506a9) returned 0x185000f [0068.877] GdipCreateFromHDC (hdc=0x54010689, graphics=0x14e528) returned 0x0 [0068.877] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0068.877] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0068.877] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0068.877] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0068.877] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0068.877] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf90 [0068.878] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cf90) returned 0x0 [0068.878] LocalFree (hMem=0x1d92cf90) returned 0x0 [0068.878] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0068.878] GdipCreateRegion (region=0x14e550) returned 0x0 [0068.878] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.878] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0068.878] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0068.878] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd600dbd) returned 0x0 [0068.878] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.878] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0068.878] GetCurrentObject (hdc=0x54010689, type=0x1) returned 0x1b00017 [0068.879] GetCurrentObject (hdc=0x54010689, type=0x2) returned 0x1900010 [0068.879] GetCurrentObject (hdc=0x54010689, type=0x7) returned 0x160506a9 [0068.879] GetCurrentObject (hdc=0x54010689, type=0x6) returned 0x18a0048 [0068.879] SaveDC (hdc=0x54010689) returned 1 [0068.879] GetNearestColor (hdc=0x54010689, color=0xf0f0f0) returned 0xf0f0f0 [0068.879] GetNearestColor (hdc=0x54010689, color=0xa0a0a0) returned 0xa0a0a0 [0068.879] GetNearestColor (hdc=0x54010689, color=0x696969) returned 0x696969 [0068.879] GetNearestColor (hdc=0x54010689, color=0xa0a0a0) returned 0xa0a0a0 [0068.879] GetNearestColor (hdc=0x54010689, color=0x0) returned 0x0 [0068.879] GetNearestColor (hdc=0x54010689, color=0xffffff) returned 0xffffff [0068.879] GetNearestColor (hdc=0x54010689, color=0xe5e5e5) returned 0xe5e5e5 [0068.879] GetNearestColor (hdc=0x54010689, color=0xd8d8d8) returned 0xd8d8d8 [0068.879] GetNearestColor (hdc=0x54010689, color=0x0) returned 0x0 [0068.879] RestoreDC (hdc=0x54010689, nSavedDC=-1) returned 1 [0068.879] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x54010689) returned 0x0 [0068.879] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExð)\x02", lpUsedDefaultChar=0x0) returned 17 [0068.882] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.882] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x229f690) returned 0x0 [0068.882] GdipSetStringFormatAlign (format=0x1beb7c30, align=0x1) returned 0x0 [0068.882] GdipSetStringFormatLineAlign (format=0x1beb7c30, align=0x1) returned 0x0 [0068.882] GdipSetStringFormatHotkeyPrefix (format=0x1beb7c30, hotkeyPrefix=1) returned 0x0 [0068.882] GdipGetStringFormatFlags (format=0x1beb7c30, flags=0x14e378) returned 0x0 [0068.882] GdipGetStringFormatTrimming (format=0x1beb7c30, trimming=0x14e378) returned 0x0 [0068.882] GdipGetStringFormatHotkeyPrefix (format=0x1beb7c30, hotkeyPrefix=0x14e378) returned 0x0 [0068.882] GdipGetFontSize (font=0x1beb7c30, size=0x14e378) returned 0x0 [0068.882] GdipGetFontStyle (font=0x1beb7c30, style=0x14e378) returned 0x0 [0068.882] GdipDeleteStringFormat (format=0x1beb7c30) returned 0x0 [0068.882] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0068.883] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.883] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0068.883] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x229f7c0) returned 0x0 [0068.883] GdipSetStringFormatFlags (format=0x1beb7f40, flags=0) returned 0x0 [0068.883] GdipSetStringFormatTrimming (format=0x1beb7f40, trimming=0x1) returned 0x0 [0068.883] GdipSetStringFormatHotkeyPrefix (format=0x1beb7f40, hotkeyPrefix=1) returned 0x0 [0068.883] GdipSetStringFormatAlign (format=0x1beb7f40, align=0x1) returned 0x0 [0068.883] GdipSetStringFormatLineAlign (format=0x1beb7f40, align=0x1) returned 0x0 [0068.883] GdipMeasureString (graphics=0x1beb8070, string="c", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7f40, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0068.883] GdipDeleteStringFormat (format=0x1beb7f40) returned 0x0 [0068.883] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0068.883] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0068.884] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.884] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0068.884] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.884] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0068.884] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0068.884] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0068.884] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0068.884] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0068.884] LocalFree (hMem=0x1d92cf10) returned 0x0 [0068.884] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92ccd0 [0068.885] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92ccd0) returned 0x0 [0068.885] LocalFree (hMem=0x1d92ccd0) returned 0x0 [0068.885] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0068.885] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0068.885] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0068.885] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0068.885] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.885] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0068.885] GetCurrentObject (hdc=0x54010689, type=0x1) returned 0x1b00017 [0068.885] GetCurrentObject (hdc=0x54010689, type=0x2) returned 0x1900010 [0068.885] GetCurrentObject (hdc=0x54010689, type=0x7) returned 0x160506a9 [0068.885] GetCurrentObject (hdc=0x54010689, type=0x6) returned 0x18a0048 [0068.885] SaveDC (hdc=0x54010689) returned 1 [0068.886] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9304095c [0068.886] GetClipRgn (hdc=0x54010689, hrgn=0xffffffff9304095c) returned 0 [0068.886] SelectClipRgn (hdc=0x54010689, hrgn=0x540406c7) returned 2 [0068.886] DeleteObject (ho=0xffffffff9304095c) returned 1 [0068.886] DeleteObject (ho=0x540406c7) returned 1 [0068.886] OffsetViewportOrgEx (in: hdc=0x54010689, x=0, y=0, lppt=0x229fb80 | out: lppt=0x229fb80) returned 1 [0068.886] GetNearestColor (hdc=0x54010689, color=0xf0f0f0) returned 0xf0f0f0 [0068.886] CreateSolidBrush (color=0xf0f0f0) returned 0x41100559 [0068.886] FillRect (hDC=0x54010689, lprc=0x14e1c8, hbr=0x41100559) returned 1 [0068.886] DeleteObject (ho=0x41100559) returned 1 [0068.886] RestoreDC (hdc=0x54010689, nSavedDC=-1) returned 1 [0068.886] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x54010689) returned 0x0 [0068.886] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0068.887] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.887] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x229fc80) returned 0x0 [0068.887] GdipSetStringFormatAlign (format=0x1beb7990, align=0x1) returned 0x0 [0068.887] GdipSetStringFormatLineAlign (format=0x1beb7990, align=0x1) returned 0x0 [0068.887] GdipSetStringFormatHotkeyPrefix (format=0x1beb7990, hotkeyPrefix=1) returned 0x0 [0068.887] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0068.887] GdipDrawString (graphics=0x1beb67f0, string="c", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7990, brush=0x1beb15e0) returned 0x0 [0068.887] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0068.887] GdipDeleteStringFormat (format=0x1beb7990) returned 0x0 [0068.887] GetFocus () returned 0x0 [0068.892] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.892] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExí)\x02", lpUsedDefaultChar=0x0) returned 17 [0068.892] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0068.893] GdipCreateRegion (region=0x14e030) returned 0x0 [0068.893] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0068.893] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0068.893] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0068.893] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0068.893] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cbd0 [0068.893] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cbd0) returned 0x0 [0068.893] LocalFree (hMem=0x1d92cbd0) returned 0x0 [0068.893] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0068.893] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cf10) returned 0x0 [0068.894] LocalFree (hMem=0x1d92cf10) returned 0x0 [0068.894] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0068.894] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0068.894] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0068.894] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0068.894] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0068.894] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0068.894] GetCurrentObject (hdc=0x54010689, type=0x1) returned 0x1b00017 [0068.894] GetCurrentObject (hdc=0x54010689, type=0x2) returned 0x1900010 [0068.894] GetCurrentObject (hdc=0x54010689, type=0x7) returned 0x160506a9 [0068.894] GetCurrentObject (hdc=0x54010689, type=0x6) returned 0x18a0048 [0068.895] SaveDC (hdc=0x54010689) returned 1 [0068.895] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x550406c7 [0068.895] GetClipRgn (hdc=0x54010689, hrgn=0x550406c7) returned 0 [0068.895] SelectClipRgn (hdc=0x54010689, hrgn=0xffffffff9404095c) returned 2 [0068.895] DeleteObject (ho=0x550406c7) returned 1 [0069.022] DeleteObject (ho=0xffffffff9404095c) returned 1 [0069.022] OffsetViewportOrgEx (in: hdc=0x54010689, x=0, y=0, lppt=0x22a0068 | out: lppt=0x22a0068) returned 1 [0069.022] GetROP2 (hdc=0x54010689) returned 13 [0069.022] GetBkMode (hdc=0x54010689) returned 2 [0069.022] SetBkMode (hdc=0x54010689, mode=1) returned 2 [0069.022] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x4b3009aa [0069.022] SelectObject (hdc=0x54010689, h=0x4b3009aa) returned 0x1b00017 [0069.023] MoveToEx (in: hdc=0x54010689, x=25, y=0, lppt=0x22a00d0 | out: lppt=0x22a00d0) returned 1 [0069.023] LineTo (hdc=0x54010689, x=0, y=0) returned 1 [0069.023] SetBkMode (hdc=0x54010689, mode=2) returned 1 [0069.023] MoveToEx (in: hdc=0x54010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.023] GetROP2 (hdc=0x54010689) returned 13 [0069.023] GetBkMode (hdc=0x54010689) returned 2 [0069.023] SetBkMode (hdc=0x54010689, mode=1) returned 2 [0069.023] SelectObject (hdc=0x54010689, h=0x4b3009aa) returned 0x4b3009aa [0069.023] MoveToEx (in: hdc=0x54010689, x=0, y=0, lppt=0x22a00e8 | out: lppt=0x22a00e8) returned 1 [0069.023] LineTo (hdc=0x54010689, x=0, y=22) returned 1 [0069.023] SetBkMode (hdc=0x54010689, mode=2) returned 1 [0069.023] MoveToEx (in: hdc=0x54010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.023] SelectObject (hdc=0x54010689, h=0x1b00017) returned 0x4b3009aa [0069.023] DeleteObject (ho=0x4b3009aa) returned 1 [0069.023] GetROP2 (hdc=0x54010689) returned 13 [0069.023] GetBkMode (hdc=0x54010689) returned 2 [0069.023] SetBkMode (hdc=0x54010689, mode=1) returned 2 [0069.023] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0xffffffff833009d0 [0069.023] SelectObject (hdc=0x54010689, h=0xffffffff833009d0) returned 0x1b00017 [0069.023] MoveToEx (in: hdc=0x54010689, x=0, y=22, lppt=0x22a0150 | out: lppt=0x22a0150) returned 1 [0069.023] LineTo (hdc=0x54010689, x=25, y=22) returned 1 [0069.023] SetBkMode (hdc=0x54010689, mode=2) returned 1 [0069.024] MoveToEx (in: hdc=0x54010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.024] GetROP2 (hdc=0x54010689) returned 13 [0069.024] GetBkMode (hdc=0x54010689) returned 2 [0069.024] SetBkMode (hdc=0x54010689, mode=1) returned 2 [0069.024] SelectObject (hdc=0x54010689, h=0xffffffff833009d0) returned 0xffffffff833009d0 [0069.024] MoveToEx (in: hdc=0x54010689, x=25, y=22, lppt=0x22a0168 | out: lppt=0x22a0168) returned 1 [0069.024] LineTo (hdc=0x54010689, x=25, y=-1) returned 1 [0069.024] SetBkMode (hdc=0x54010689, mode=2) returned 1 [0069.024] MoveToEx (in: hdc=0x54010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.024] SelectObject (hdc=0x54010689, h=0x1b00017) returned 0xffffffff833009d0 [0069.024] DeleteObject (ho=0xffffffff833009d0) returned 1 [0069.024] GetROP2 (hdc=0x54010689) returned 13 [0069.024] GetBkMode (hdc=0x54010689) returned 2 [0069.024] SetBkMode (hdc=0x54010689, mode=1) returned 2 [0069.024] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x4c3009aa [0069.024] SelectObject (hdc=0x54010689, h=0x4c3009aa) returned 0x1b00017 [0069.024] MoveToEx (in: hdc=0x54010689, x=24, y=1, lppt=0x22a01d0 | out: lppt=0x22a01d0) returned 1 [0069.024] LineTo (hdc=0x54010689, x=1, y=1) returned 1 [0069.024] SetBkMode (hdc=0x54010689, mode=2) returned 1 [0069.024] MoveToEx (in: hdc=0x54010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.024] GetROP2 (hdc=0x54010689) returned 13 [0069.024] GetBkMode (hdc=0x54010689) returned 2 [0069.024] SetBkMode (hdc=0x54010689, mode=1) returned 2 [0069.024] SelectObject (hdc=0x54010689, h=0x4c3009aa) returned 0x4c3009aa [0069.025] MoveToEx (in: hdc=0x54010689, x=1, y=1, lppt=0x22a01e8 | out: lppt=0x22a01e8) returned 1 [0069.025] LineTo (hdc=0x54010689, x=1, y=21) returned 1 [0069.025] SetBkMode (hdc=0x54010689, mode=2) returned 1 [0069.025] MoveToEx (in: hdc=0x54010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.025] SelectObject (hdc=0x54010689, h=0x1b00017) returned 0x4c3009aa [0069.025] DeleteObject (ho=0x4c3009aa) returned 1 [0069.025] GetROP2 (hdc=0x54010689) returned 13 [0069.025] GetBkMode (hdc=0x54010689) returned 2 [0069.025] SetBkMode (hdc=0x54010689, mode=1) returned 2 [0069.025] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xffffffff843009d0 [0069.025] SelectObject (hdc=0x54010689, h=0xffffffff843009d0) returned 0x1b00017 [0069.025] MoveToEx (in: hdc=0x54010689, x=1, y=21, lppt=0x22a0250 | out: lppt=0x22a0250) returned 1 [0069.025] LineTo (hdc=0x54010689, x=24, y=21) returned 1 [0069.025] SetBkMode (hdc=0x54010689, mode=2) returned 1 [0069.025] MoveToEx (in: hdc=0x54010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.025] GetROP2 (hdc=0x54010689) returned 13 [0069.025] GetBkMode (hdc=0x54010689) returned 2 [0069.025] SetBkMode (hdc=0x54010689, mode=1) returned 2 [0069.025] SelectObject (hdc=0x54010689, h=0xffffffff843009d0) returned 0xffffffff843009d0 [0069.025] MoveToEx (in: hdc=0x54010689, x=24, y=21, lppt=0x22a0268 | out: lppt=0x22a0268) returned 1 [0069.025] LineTo (hdc=0x54010689, x=24, y=0) returned 1 [0069.025] SetBkMode (hdc=0x54010689, mode=2) returned 1 [0069.025] MoveToEx (in: hdc=0x54010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.025] SelectObject (hdc=0x54010689, h=0x1b00017) returned 0xffffffff843009d0 [0069.025] DeleteObject (ho=0xffffffff843009d0) returned 1 [0069.026] RestoreDC (hdc=0x54010689, nSavedDC=-1) returned 1 [0069.026] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x54010689) returned 0x0 [0069.026] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0069.026] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x54010689, x1=0, y1=0, rop=0xcc0020) returned 1 [0069.026] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x54010689) returned 0x0 [0069.026] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0069.026] SelectObject (hdc=0x54010689, h=0x185000f) returned 0x160506a9 [0069.026] DeleteDC (hdc=0x54010689) returned 1 [0069.026] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0069.026] EndPaint (hWnd=0x3032e, lpPaint=0x14e548) returned 1 [0069.026] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.026] IsWindowUnicode (hWnd=0x30338) returned 1 [0069.026] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.026] TranslateMessage (lpMsg=0x14ef10) returned 0 [0069.026] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0069.027] BeginPaint (in: hWnd=0x30338, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0069.027] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.027] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0069.027] GetStockObject (i=5) returned 0x1900015 [0069.027] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0069.027] CreateCompatibleDC (hdc=0x220106d6) returned 0x530109c0 [0069.027] SelectObject (hdc=0x530109c0, h=0x160506a9) returned 0x185000f [0069.027] GdipCreateFromHDC (hdc=0x530109c0, graphics=0x14e528) returned 0x0 [0069.027] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0069.027] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0069.027] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0069.027] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0069.027] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0069.027] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d0d0 [0069.028] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d0d0) returned 0x0 [0069.028] LocalFree (hMem=0x1d92d0d0) returned 0x0 [0069.028] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0069.029] GdipCreateRegion (region=0x14e550) returned 0x0 [0069.029] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.029] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0069.029] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0069.029] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd5d0dbd) returned 0x0 [0069.029] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.029] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0069.029] GetCurrentObject (hdc=0x530109c0, type=0x1) returned 0x1b00017 [0069.029] GetCurrentObject (hdc=0x530109c0, type=0x2) returned 0x1900010 [0069.029] GetCurrentObject (hdc=0x530109c0, type=0x7) returned 0x160506a9 [0069.029] GetCurrentObject (hdc=0x530109c0, type=0x6) returned 0x18a0048 [0069.029] SaveDC (hdc=0x530109c0) returned 1 [0069.029] GetNearestColor (hdc=0x530109c0, color=0xf0f0f0) returned 0xf0f0f0 [0069.029] GetNearestColor (hdc=0x530109c0, color=0xa0a0a0) returned 0xa0a0a0 [0069.029] GetNearestColor (hdc=0x530109c0, color=0x696969) returned 0x696969 [0069.029] GetNearestColor (hdc=0x530109c0, color=0xa0a0a0) returned 0xa0a0a0 [0069.029] GetNearestColor (hdc=0x530109c0, color=0x0) returned 0x0 [0069.029] GetNearestColor (hdc=0x530109c0, color=0xffffff) returned 0xffffff [0069.029] GetNearestColor (hdc=0x530109c0, color=0xe5e5e5) returned 0xe5e5e5 [0069.029] GetNearestColor (hdc=0x530109c0, color=0xd8d8d8) returned 0xd8d8d8 [0069.030] GetNearestColor (hdc=0x530109c0, color=0x0) returned 0x0 [0069.030] RestoreDC (hdc=0x530109c0, nSavedDC=-1) returned 1 [0069.030] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x530109c0) returned 0x0 [0069.030] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.030] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x05*\x02", lpUsedDefaultChar=0x0) returned 17 [0069.030] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.030] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a0b88) returned 0x0 [0069.030] GdipSetStringFormatAlign (format=0x1beb7990, align=0x1) returned 0x0 [0069.030] GdipSetStringFormatLineAlign (format=0x1beb7990, align=0x1) returned 0x0 [0069.030] GdipSetStringFormatHotkeyPrefix (format=0x1beb7990, hotkeyPrefix=1) returned 0x0 [0069.030] GdipGetStringFormatFlags (format=0x1beb7990, flags=0x14e378) returned 0x0 [0069.030] GdipGetStringFormatTrimming (format=0x1beb7990, trimming=0x14e378) returned 0x0 [0069.030] GdipGetStringFormatHotkeyPrefix (format=0x1beb7990, hotkeyPrefix=0x14e378) returned 0x0 [0069.030] GdipGetFontSize (font=0x1beb7990, size=0x14e378) returned 0x0 [0069.030] GdipGetFontStyle (font=0x1beb7990, style=0x14e378) returned 0x0 [0069.031] GdipDeleteStringFormat (format=0x1beb7990) returned 0x0 [0069.031] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.031] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0069.031] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.031] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0069.031] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a0cb8) returned 0x0 [0069.031] GdipSetStringFormatFlags (format=0x1beb7ae0, flags=0) returned 0x0 [0069.031] GdipSetStringFormatTrimming (format=0x1beb7ae0, trimming=0x1) returned 0x0 [0069.031] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ae0, hotkeyPrefix=1) returned 0x0 [0069.031] GdipSetStringFormatAlign (format=0x1beb7ae0, align=0x1) returned 0x0 [0069.031] GdipSetStringFormatLineAlign (format=0x1beb7ae0, align=0x1) returned 0x0 [0069.031] GdipMeasureString (graphics=0x1beb8070, string="+", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7ae0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0069.031] GdipDeleteStringFormat (format=0x1beb7ae0) returned 0x0 [0069.031] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0069.032] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.032] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0069.032] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.032] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0069.032] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.032] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0069.032] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0069.032] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0069.032] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0069.032] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d2d0) returned 0x0 [0069.033] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0069.033] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d4d0 [0069.033] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d4d0) returned 0x0 [0069.034] LocalFree (hMem=0x1d92d4d0) returned 0x0 [0069.034] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0069.034] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0069.034] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0069.034] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0069.034] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.034] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0069.034] GetCurrentObject (hdc=0x530109c0, type=0x1) returned 0x1b00017 [0069.034] GetCurrentObject (hdc=0x530109c0, type=0x2) returned 0x1900010 [0069.034] GetCurrentObject (hdc=0x530109c0, type=0x7) returned 0x160506a9 [0069.034] GetCurrentObject (hdc=0x530109c0, type=0x6) returned 0x18a0048 [0069.034] SaveDC (hdc=0x530109c0) returned 1 [0069.034] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9504095c [0069.034] GetClipRgn (hdc=0x530109c0, hrgn=0xffffffff9504095c) returned 0 [0069.034] SelectClipRgn (hdc=0x530109c0, hrgn=0x560406c7) returned 2 [0069.034] DeleteObject (ho=0xffffffff9504095c) returned 1 [0069.034] DeleteObject (ho=0x560406c7) returned 1 [0069.034] OffsetViewportOrgEx (in: hdc=0x530109c0, x=0, y=0, lppt=0x22a1078 | out: lppt=0x22a1078) returned 1 [0069.034] GetNearestColor (hdc=0x530109c0, color=0xf0f0f0) returned 0xf0f0f0 [0069.034] CreateSolidBrush (color=0xf0f0f0) returned 0x42100559 [0069.034] FillRect (hDC=0x530109c0, lprc=0x14e1c8, hbr=0x42100559) returned 1 [0069.034] DeleteObject (ho=0x42100559) returned 1 [0069.035] RestoreDC (hdc=0x530109c0, nSavedDC=-1) returned 1 [0069.035] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x530109c0) returned 0x0 [0069.035] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.035] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0069.035] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.035] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a1178) returned 0x0 [0069.035] GdipSetStringFormatAlign (format=0x1beb7ca0, align=0x1) returned 0x0 [0069.035] GdipSetStringFormatLineAlign (format=0x1beb7ca0, align=0x1) returned 0x0 [0069.035] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ca0, hotkeyPrefix=1) returned 0x0 [0069.035] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0069.035] GdipDrawString (graphics=0x1beb67f0, string="+", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7ca0, brush=0x1beb15e0) returned 0x0 [0069.035] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0069.036] GdipDeleteStringFormat (format=0x1beb7ca0) returned 0x0 [0069.036] GetFocus () returned 0x0 [0069.037] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x02*\x02", lpUsedDefaultChar=0x0) returned 17 [0069.038] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.038] GdipCreateRegion (region=0x14e030) returned 0x0 [0069.038] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.038] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0069.038] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0069.038] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0069.038] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0069.038] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d2d0) returned 0x0 [0069.039] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0069.039] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d490 [0069.039] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d490) returned 0x0 [0069.039] LocalFree (hMem=0x1d92d490) returned 0x0 [0069.039] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0069.039] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0069.039] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0069.039] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0069.039] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.040] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0069.040] GetCurrentObject (hdc=0x530109c0, type=0x1) returned 0x1b00017 [0069.040] GetCurrentObject (hdc=0x530109c0, type=0x2) returned 0x1900010 [0069.040] GetCurrentObject (hdc=0x530109c0, type=0x7) returned 0x160506a9 [0069.040] GetCurrentObject (hdc=0x530109c0, type=0x6) returned 0x18a0048 [0069.040] SaveDC (hdc=0x530109c0) returned 1 [0069.040] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x570406c7 [0069.040] GetClipRgn (hdc=0x530109c0, hrgn=0x570406c7) returned 0 [0069.040] SelectClipRgn (hdc=0x530109c0, hrgn=0xffffffff9604095c) returned 2 [0069.040] DeleteObject (ho=0x570406c7) returned 1 [0069.040] DeleteObject (ho=0xffffffff9604095c) returned 1 [0069.040] OffsetViewportOrgEx (in: hdc=0x530109c0, x=0, y=0, lppt=0x22a1560 | out: lppt=0x22a1560) returned 1 [0069.040] GetROP2 (hdc=0x530109c0) returned 13 [0069.040] GetBkMode (hdc=0x530109c0) returned 2 [0069.040] SetBkMode (hdc=0x530109c0, mode=1) returned 2 [0069.040] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0xffffffff853009d0 [0069.040] SelectObject (hdc=0x530109c0, h=0xffffffff853009d0) returned 0x1b00017 [0069.040] MoveToEx (in: hdc=0x530109c0, x=25, y=0, lppt=0x22a15c8 | out: lppt=0x22a15c8) returned 1 [0069.040] LineTo (hdc=0x530109c0, x=0, y=0) returned 1 [0069.040] SetBkMode (hdc=0x530109c0, mode=2) returned 1 [0069.040] MoveToEx (in: hdc=0x530109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.040] GetROP2 (hdc=0x530109c0) returned 13 [0069.040] GetBkMode (hdc=0x530109c0) returned 2 [0069.041] SetBkMode (hdc=0x530109c0, mode=1) returned 2 [0069.041] SelectObject (hdc=0x530109c0, h=0xffffffff853009d0) returned 0xffffffff853009d0 [0069.041] MoveToEx (in: hdc=0x530109c0, x=0, y=0, lppt=0x22a15e0 | out: lppt=0x22a15e0) returned 1 [0069.041] LineTo (hdc=0x530109c0, x=0, y=22) returned 1 [0069.041] SetBkMode (hdc=0x530109c0, mode=2) returned 1 [0069.041] MoveToEx (in: hdc=0x530109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.041] SelectObject (hdc=0x530109c0, h=0x1b00017) returned 0xffffffff853009d0 [0069.041] DeleteObject (ho=0xffffffff853009d0) returned 1 [0069.041] GetROP2 (hdc=0x530109c0) returned 13 [0069.041] GetBkMode (hdc=0x530109c0) returned 2 [0069.041] SetBkMode (hdc=0x530109c0, mode=1) returned 2 [0069.041] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x4d3009aa [0069.041] SelectObject (hdc=0x530109c0, h=0x4d3009aa) returned 0x1b00017 [0069.041] MoveToEx (in: hdc=0x530109c0, x=0, y=22, lppt=0x22a1648 | out: lppt=0x22a1648) returned 1 [0069.041] LineTo (hdc=0x530109c0, x=25, y=22) returned 1 [0069.041] SetBkMode (hdc=0x530109c0, mode=2) returned 1 [0069.041] MoveToEx (in: hdc=0x530109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.041] GetROP2 (hdc=0x530109c0) returned 13 [0069.041] GetBkMode (hdc=0x530109c0) returned 2 [0069.041] SetBkMode (hdc=0x530109c0, mode=1) returned 2 [0069.041] SelectObject (hdc=0x530109c0, h=0x4d3009aa) returned 0x4d3009aa [0069.041] MoveToEx (in: hdc=0x530109c0, x=25, y=22, lppt=0x22a1660 | out: lppt=0x22a1660) returned 1 [0069.041] LineTo (hdc=0x530109c0, x=25, y=-1) returned 1 [0069.042] SetBkMode (hdc=0x530109c0, mode=2) returned 1 [0069.042] MoveToEx (in: hdc=0x530109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.042] SelectObject (hdc=0x530109c0, h=0x1b00017) returned 0x4d3009aa [0069.042] DeleteObject (ho=0x4d3009aa) returned 1 [0069.042] GetROP2 (hdc=0x530109c0) returned 13 [0069.042] GetBkMode (hdc=0x530109c0) returned 2 [0069.042] SetBkMode (hdc=0x530109c0, mode=1) returned 2 [0069.042] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xffffffff863009d0 [0069.042] SelectObject (hdc=0x530109c0, h=0xffffffff863009d0) returned 0x1b00017 [0069.042] MoveToEx (in: hdc=0x530109c0, x=24, y=1, lppt=0x22a16c8 | out: lppt=0x22a16c8) returned 1 [0069.042] LineTo (hdc=0x530109c0, x=1, y=1) returned 1 [0069.042] SetBkMode (hdc=0x530109c0, mode=2) returned 1 [0069.042] MoveToEx (in: hdc=0x530109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.042] GetROP2 (hdc=0x530109c0) returned 13 [0069.042] GetBkMode (hdc=0x530109c0) returned 2 [0069.042] SetBkMode (hdc=0x530109c0, mode=1) returned 2 [0069.042] SelectObject (hdc=0x530109c0, h=0xffffffff863009d0) returned 0xffffffff863009d0 [0069.042] MoveToEx (in: hdc=0x530109c0, x=1, y=1, lppt=0x22a16e0 | out: lppt=0x22a16e0) returned 1 [0069.042] LineTo (hdc=0x530109c0, x=1, y=21) returned 1 [0069.042] SetBkMode (hdc=0x530109c0, mode=2) returned 1 [0069.042] MoveToEx (in: hdc=0x530109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.042] SelectObject (hdc=0x530109c0, h=0x1b00017) returned 0xffffffff863009d0 [0069.042] DeleteObject (ho=0xffffffff863009d0) returned 1 [0069.042] GetROP2 (hdc=0x530109c0) returned 13 [0069.043] GetBkMode (hdc=0x530109c0) returned 2 [0069.043] SetBkMode (hdc=0x530109c0, mode=1) returned 2 [0069.043] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x4e3009aa [0069.043] SelectObject (hdc=0x530109c0, h=0x4e3009aa) returned 0x1b00017 [0069.043] MoveToEx (in: hdc=0x530109c0, x=1, y=21, lppt=0x22a1748 | out: lppt=0x22a1748) returned 1 [0069.043] LineTo (hdc=0x530109c0, x=24, y=21) returned 1 [0069.043] SetBkMode (hdc=0x530109c0, mode=2) returned 1 [0069.043] MoveToEx (in: hdc=0x530109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.043] GetROP2 (hdc=0x530109c0) returned 13 [0069.043] GetBkMode (hdc=0x530109c0) returned 2 [0069.043] SetBkMode (hdc=0x530109c0, mode=1) returned 2 [0069.043] SelectObject (hdc=0x530109c0, h=0x4e3009aa) returned 0x4e3009aa [0069.043] MoveToEx (in: hdc=0x530109c0, x=24, y=21, lppt=0x22a1760 | out: lppt=0x22a1760) returned 1 [0069.043] LineTo (hdc=0x530109c0, x=24, y=0) returned 1 [0069.043] SetBkMode (hdc=0x530109c0, mode=2) returned 1 [0069.043] MoveToEx (in: hdc=0x530109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.043] SelectObject (hdc=0x530109c0, h=0x1b00017) returned 0x4e3009aa [0069.043] DeleteObject (ho=0x4e3009aa) returned 1 [0069.043] RestoreDC (hdc=0x530109c0, nSavedDC=-1) returned 1 [0069.043] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x530109c0) returned 0x0 [0069.043] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0069.043] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x530109c0, x1=0, y1=0, rop=0xcc0020) returned 1 [0069.044] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x530109c0) returned 0x0 [0069.044] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0069.044] SelectObject (hdc=0x530109c0, h=0x185000f) returned 0x160506a9 [0069.044] DeleteDC (hdc=0x530109c0) returned 1 [0069.044] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0069.044] EndPaint (hWnd=0x30338, lpPaint=0x14e548) returned 1 [0069.044] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.044] IsWindowUnicode (hWnd=0x30326) returned 1 [0069.044] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.044] TranslateMessage (lpMsg=0x14ef10) returned 0 [0069.044] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0069.044] BeginPaint (in: hWnd=0x30326, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0069.044] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.044] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0069.044] GetStockObject (i=5) returned 0x1900015 [0069.045] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0069.045] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x6f0106b7 [0069.045] SelectObject (hdc=0x6f0106b7, h=0x160506a9) returned 0x185000f [0069.045] GdipCreateFromHDC (hdc=0x6f0106b7, graphics=0x14e528) returned 0x0 [0069.045] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0069.045] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0069.045] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0069.045] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0069.045] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0069.045] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0069.045] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d710) returned 0x0 [0069.046] LocalFree (hMem=0x1d92d710) returned 0x0 [0069.046] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0069.046] GdipCreateRegion (region=0x14e550) returned 0x0 [0069.046] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.046] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0069.046] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0069.046] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd5a0dbd) returned 0x0 [0069.046] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.046] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0069.046] GetCurrentObject (hdc=0x6f0106b7, type=0x1) returned 0x1b00017 [0069.046] GetCurrentObject (hdc=0x6f0106b7, type=0x2) returned 0x1900010 [0069.046] GetCurrentObject (hdc=0x6f0106b7, type=0x7) returned 0x160506a9 [0069.046] GetCurrentObject (hdc=0x6f0106b7, type=0x6) returned 0x18a0048 [0069.046] SaveDC (hdc=0x6f0106b7) returned 1 [0069.046] GetNearestColor (hdc=0x6f0106b7, color=0xf0f0f0) returned 0xf0f0f0 [0069.046] GetNearestColor (hdc=0x6f0106b7, color=0xa0a0a0) returned 0xa0a0a0 [0069.047] GetNearestColor (hdc=0x6f0106b7, color=0x696969) returned 0x696969 [0069.047] GetNearestColor (hdc=0x6f0106b7, color=0xa0a0a0) returned 0xa0a0a0 [0069.047] GetNearestColor (hdc=0x6f0106b7, color=0x0) returned 0x0 [0069.047] GetNearestColor (hdc=0x6f0106b7, color=0xffffff) returned 0xffffff [0069.047] GetNearestColor (hdc=0x6f0106b7, color=0xe5e5e5) returned 0xe5e5e5 [0069.047] GetNearestColor (hdc=0x6f0106b7, color=0xd8d8d8) returned 0xd8d8d8 [0069.047] GetNearestColor (hdc=0x6f0106b7, color=0x0) returned 0x0 [0069.047] RestoreDC (hdc=0x6f0106b7, nSavedDC=-1) returned 1 [0069.047] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6f0106b7) returned 0x0 [0069.048] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.048] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x1a*\x02", lpUsedDefaultChar=0x0) returned 17 [0069.048] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.048] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a2080) returned 0x0 [0069.048] GdipSetStringFormatAlign (format=0x1beb78b0, align=0x1) returned 0x0 [0069.048] GdipSetStringFormatLineAlign (format=0x1beb78b0, align=0x1) returned 0x0 [0069.048] GdipSetStringFormatHotkeyPrefix (format=0x1beb78b0, hotkeyPrefix=1) returned 0x0 [0069.048] GdipGetStringFormatFlags (format=0x1beb78b0, flags=0x14e378) returned 0x0 [0069.048] GdipGetStringFormatTrimming (format=0x1beb78b0, trimming=0x14e378) returned 0x0 [0069.048] GdipGetStringFormatHotkeyPrefix (format=0x1beb78b0, hotkeyPrefix=0x14e378) returned 0x0 [0069.048] GdipGetFontSize (font=0x1beb78b0, size=0x14e378) returned 0x0 [0069.048] GdipGetFontStyle (font=0x1beb78b0, style=0x14e378) returned 0x0 [0069.048] GdipDeleteStringFormat (format=0x1beb78b0) returned 0x0 [0069.049] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0069.049] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.049] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0069.049] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a21b0) returned 0x0 [0069.049] GdipSetStringFormatFlags (format=0x1beb7d10, flags=0) returned 0x0 [0069.049] GdipSetStringFormatTrimming (format=0x1beb7d10, trimming=0x1) returned 0x0 [0069.049] GdipSetStringFormatHotkeyPrefix (format=0x1beb7d10, hotkeyPrefix=1) returned 0x0 [0069.049] GdipSetStringFormatAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0069.049] GdipSetStringFormatLineAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0069.049] GdipMeasureString (graphics=0x1beb8070, string="7", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7d10, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0069.049] GdipDeleteStringFormat (format=0x1beb7d10) returned 0x0 [0069.049] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0069.050] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.050] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0069.050] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.050] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0069.050] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.050] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0069.050] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0069.050] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0069.050] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cb90 [0069.050] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cb90) returned 0x0 [0069.051] LocalFree (hMem=0x1d92cb90) returned 0x0 [0069.051] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cb90 [0069.051] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cb90) returned 0x0 [0069.051] LocalFree (hMem=0x1d92cb90) returned 0x0 [0069.051] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0069.051] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0069.051] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0069.051] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0069.051] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.052] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0069.052] GetCurrentObject (hdc=0x6f0106b7, type=0x1) returned 0x1b00017 [0069.052] GetCurrentObject (hdc=0x6f0106b7, type=0x2) returned 0x1900010 [0069.052] GetCurrentObject (hdc=0x6f0106b7, type=0x7) returned 0x160506a9 [0069.052] GetCurrentObject (hdc=0x6f0106b7, type=0x6) returned 0x18a0048 [0069.052] SaveDC (hdc=0x6f0106b7) returned 1 [0069.052] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9704095c [0069.052] GetClipRgn (hdc=0x6f0106b7, hrgn=0xffffffff9704095c) returned 0 [0069.052] SelectClipRgn (hdc=0x6f0106b7, hrgn=0x580406c7) returned 2 [0069.052] DeleteObject (ho=0xffffffff9704095c) returned 1 [0069.052] DeleteObject (ho=0x580406c7) returned 1 [0069.052] OffsetViewportOrgEx (in: hdc=0x6f0106b7, x=0, y=0, lppt=0x22a2570 | out: lppt=0x22a2570) returned 1 [0069.052] GetNearestColor (hdc=0x6f0106b7, color=0xf0f0f0) returned 0xf0f0f0 [0069.052] CreateSolidBrush (color=0xf0f0f0) returned 0x43100559 [0069.052] FillRect (hDC=0x6f0106b7, lprc=0x14e1c8, hbr=0x43100559) returned 1 [0069.052] DeleteObject (ho=0x43100559) returned 1 [0069.052] RestoreDC (hdc=0x6f0106b7, nSavedDC=-1) returned 1 [0069.052] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6f0106b7) returned 0x0 [0069.053] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0069.053] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.053] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a2670) returned 0x0 [0069.053] GdipSetStringFormatAlign (format=0x1beb7ca0, align=0x1) returned 0x0 [0069.053] GdipSetStringFormatLineAlign (format=0x1beb7ca0, align=0x1) returned 0x0 [0069.053] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ca0, hotkeyPrefix=1) returned 0x0 [0069.053] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0069.053] GdipDrawString (graphics=0x1beb67f0, string="7", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7ca0, brush=0x1beb15e0) returned 0x0 [0069.053] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0069.053] GdipDeleteStringFormat (format=0x1beb7ca0) returned 0x0 [0069.053] GetFocus () returned 0x0 [0069.057] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.057] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x17*\x02", lpUsedDefaultChar=0x0) returned 17 [0069.057] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.057] GdipCreateRegion (region=0x14e030) returned 0x0 [0069.057] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.057] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0069.057] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0069.057] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0069.057] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0069.057] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cf10) returned 0x0 [0069.058] LocalFree (hMem=0x1d92cf10) returned 0x0 [0069.058] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cbd0 [0069.058] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cbd0) returned 0x0 [0069.058] LocalFree (hMem=0x1d92cbd0) returned 0x0 [0069.058] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0069.058] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0069.059] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0069.059] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0069.059] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.059] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0069.059] GetCurrentObject (hdc=0x6f0106b7, type=0x1) returned 0x1b00017 [0069.059] GetCurrentObject (hdc=0x6f0106b7, type=0x2) returned 0x1900010 [0069.059] GetCurrentObject (hdc=0x6f0106b7, type=0x7) returned 0x160506a9 [0069.059] GetCurrentObject (hdc=0x6f0106b7, type=0x6) returned 0x18a0048 [0069.059] SaveDC (hdc=0x6f0106b7) returned 1 [0069.059] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x590406c7 [0069.059] GetClipRgn (hdc=0x6f0106b7, hrgn=0x590406c7) returned 0 [0069.059] SelectClipRgn (hdc=0x6f0106b7, hrgn=0xffffffff9804095c) returned 2 [0069.059] DeleteObject (ho=0x590406c7) returned 1 [0069.059] DeleteObject (ho=0xffffffff9804095c) returned 1 [0069.059] OffsetViewportOrgEx (in: hdc=0x6f0106b7, x=0, y=0, lppt=0x22a2a58 | out: lppt=0x22a2a58) returned 1 [0069.059] GetROP2 (hdc=0x6f0106b7) returned 13 [0069.059] GetBkMode (hdc=0x6f0106b7) returned 2 [0069.059] SetBkMode (hdc=0x6f0106b7, mode=1) returned 2 [0069.059] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x4f3009aa [0069.059] SelectObject (hdc=0x6f0106b7, h=0x4f3009aa) returned 0x1b00017 [0069.059] MoveToEx (in: hdc=0x6f0106b7, x=25, y=0, lppt=0x22a2ac0 | out: lppt=0x22a2ac0) returned 1 [0069.060] LineTo (hdc=0x6f0106b7, x=0, y=0) returned 1 [0069.060] SetBkMode (hdc=0x6f0106b7, mode=2) returned 1 [0069.060] MoveToEx (in: hdc=0x6f0106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.060] GetROP2 (hdc=0x6f0106b7) returned 13 [0069.060] GetBkMode (hdc=0x6f0106b7) returned 2 [0069.060] SetBkMode (hdc=0x6f0106b7, mode=1) returned 2 [0069.060] SelectObject (hdc=0x6f0106b7, h=0x4f3009aa) returned 0x4f3009aa [0069.060] MoveToEx (in: hdc=0x6f0106b7, x=0, y=0, lppt=0x22a2ad8 | out: lppt=0x22a2ad8) returned 1 [0069.060] LineTo (hdc=0x6f0106b7, x=0, y=22) returned 1 [0069.060] SetBkMode (hdc=0x6f0106b7, mode=2) returned 1 [0069.060] MoveToEx (in: hdc=0x6f0106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.060] SelectObject (hdc=0x6f0106b7, h=0x1b00017) returned 0x4f3009aa [0069.060] DeleteObject (ho=0x4f3009aa) returned 1 [0069.060] GetROP2 (hdc=0x6f0106b7) returned 13 [0069.060] GetBkMode (hdc=0x6f0106b7) returned 2 [0069.060] SetBkMode (hdc=0x6f0106b7, mode=1) returned 2 [0069.060] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0xffffffff873009d0 [0069.060] SelectObject (hdc=0x6f0106b7, h=0xffffffff873009d0) returned 0x1b00017 [0069.060] MoveToEx (in: hdc=0x6f0106b7, x=0, y=22, lppt=0x22a2b40 | out: lppt=0x22a2b40) returned 1 [0069.060] LineTo (hdc=0x6f0106b7, x=25, y=22) returned 1 [0069.060] SetBkMode (hdc=0x6f0106b7, mode=2) returned 1 [0069.060] MoveToEx (in: hdc=0x6f0106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.060] GetROP2 (hdc=0x6f0106b7) returned 13 [0069.060] GetBkMode (hdc=0x6f0106b7) returned 2 [0069.061] SetBkMode (hdc=0x6f0106b7, mode=1) returned 2 [0069.061] SelectObject (hdc=0x6f0106b7, h=0xffffffff873009d0) returned 0xffffffff873009d0 [0069.061] MoveToEx (in: hdc=0x6f0106b7, x=25, y=22, lppt=0x22a2b58 | out: lppt=0x22a2b58) returned 1 [0069.061] LineTo (hdc=0x6f0106b7, x=25, y=-1) returned 1 [0069.061] SetBkMode (hdc=0x6f0106b7, mode=2) returned 1 [0069.061] MoveToEx (in: hdc=0x6f0106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.061] SelectObject (hdc=0x6f0106b7, h=0x1b00017) returned 0xffffffff873009d0 [0069.061] DeleteObject (ho=0xffffffff873009d0) returned 1 [0069.061] GetROP2 (hdc=0x6f0106b7) returned 13 [0069.061] GetBkMode (hdc=0x6f0106b7) returned 2 [0069.061] SetBkMode (hdc=0x6f0106b7, mode=1) returned 2 [0069.061] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x503009aa [0069.061] SelectObject (hdc=0x6f0106b7, h=0x503009aa) returned 0x1b00017 [0069.061] MoveToEx (in: hdc=0x6f0106b7, x=24, y=1, lppt=0x22a2bc0 | out: lppt=0x22a2bc0) returned 1 [0069.061] LineTo (hdc=0x6f0106b7, x=1, y=1) returned 1 [0069.061] SetBkMode (hdc=0x6f0106b7, mode=2) returned 1 [0069.061] MoveToEx (in: hdc=0x6f0106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.061] GetROP2 (hdc=0x6f0106b7) returned 13 [0069.061] GetBkMode (hdc=0x6f0106b7) returned 2 [0069.061] SetBkMode (hdc=0x6f0106b7, mode=1) returned 2 [0069.061] SelectObject (hdc=0x6f0106b7, h=0x503009aa) returned 0x503009aa [0069.061] MoveToEx (in: hdc=0x6f0106b7, x=1, y=1, lppt=0x22a2bd8 | out: lppt=0x22a2bd8) returned 1 [0069.061] LineTo (hdc=0x6f0106b7, x=1, y=21) returned 1 [0069.062] SetBkMode (hdc=0x6f0106b7, mode=2) returned 1 [0069.062] MoveToEx (in: hdc=0x6f0106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.062] SelectObject (hdc=0x6f0106b7, h=0x1b00017) returned 0x503009aa [0069.062] DeleteObject (ho=0x503009aa) returned 1 [0069.062] GetROP2 (hdc=0x6f0106b7) returned 13 [0069.062] GetBkMode (hdc=0x6f0106b7) returned 2 [0069.062] SetBkMode (hdc=0x6f0106b7, mode=1) returned 2 [0069.062] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xffffffff883009d0 [0069.062] SelectObject (hdc=0x6f0106b7, h=0xffffffff883009d0) returned 0x1b00017 [0069.062] MoveToEx (in: hdc=0x6f0106b7, x=1, y=21, lppt=0x22a2c40 | out: lppt=0x22a2c40) returned 1 [0069.062] LineTo (hdc=0x6f0106b7, x=24, y=21) returned 1 [0069.062] SetBkMode (hdc=0x6f0106b7, mode=2) returned 1 [0069.062] MoveToEx (in: hdc=0x6f0106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.062] GetROP2 (hdc=0x6f0106b7) returned 13 [0069.062] GetBkMode (hdc=0x6f0106b7) returned 2 [0069.062] SetBkMode (hdc=0x6f0106b7, mode=1) returned 2 [0069.062] SelectObject (hdc=0x6f0106b7, h=0xffffffff883009d0) returned 0xffffffff883009d0 [0069.062] MoveToEx (in: hdc=0x6f0106b7, x=24, y=21, lppt=0x22a2c58 | out: lppt=0x22a2c58) returned 1 [0069.062] LineTo (hdc=0x6f0106b7, x=24, y=0) returned 1 [0069.062] SetBkMode (hdc=0x6f0106b7, mode=2) returned 1 [0069.062] MoveToEx (in: hdc=0x6f0106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.062] SelectObject (hdc=0x6f0106b7, h=0x1b00017) returned 0xffffffff883009d0 [0069.062] DeleteObject (ho=0xffffffff883009d0) returned 1 [0069.063] RestoreDC (hdc=0x6f0106b7, nSavedDC=-1) returned 1 [0069.063] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6f0106b7) returned 0x0 [0069.063] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0069.063] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x6f0106b7, x1=0, y1=0, rop=0xcc0020) returned 1 [0069.063] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6f0106b7) returned 0x0 [0069.063] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0069.063] SelectObject (hdc=0x6f0106b7, h=0x185000f) returned 0x160506a9 [0069.063] DeleteDC (hdc=0x6f0106b7) returned 1 [0069.063] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0069.063] EndPaint (hWnd=0x30326, lpPaint=0x14e548) returned 1 [0069.063] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.063] IsWindowUnicode (hWnd=0x3032c) returned 1 [0069.063] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.063] TranslateMessage (lpMsg=0x14ef10) returned 0 [0069.063] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0069.063] BeginPaint (in: hWnd=0x3032c, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0069.064] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.064] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0069.064] GetStockObject (i=5) returned 0x1900015 [0069.064] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0069.064] CreateCompatibleDC (hdc=0xc0100ae) returned 0x5d010689 [0069.064] SelectObject (hdc=0x5d010689, h=0x160506a9) returned 0x185000f [0069.064] GdipCreateFromHDC (hdc=0x5d010689, graphics=0x14e528) returned 0x0 [0069.064] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0069.064] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0069.064] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0069.064] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0069.064] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0069.065] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cd10 [0069.065] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cd10) returned 0x0 [0069.065] LocalFree (hMem=0x1d92cd10) returned 0x0 [0069.065] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0069.065] GdipCreateRegion (region=0x14e550) returned 0x0 [0069.065] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.065] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0069.065] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0069.065] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd570dbd) returned 0x0 [0069.065] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.066] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0069.066] GetCurrentObject (hdc=0x5d010689, type=0x1) returned 0x1b00017 [0069.066] GetCurrentObject (hdc=0x5d010689, type=0x2) returned 0x1900010 [0069.066] GetCurrentObject (hdc=0x5d010689, type=0x7) returned 0x160506a9 [0069.066] GetCurrentObject (hdc=0x5d010689, type=0x6) returned 0x18a0048 [0069.066] SaveDC (hdc=0x5d010689) returned 1 [0069.066] GetNearestColor (hdc=0x5d010689, color=0xf0f0f0) returned 0xf0f0f0 [0069.066] GetNearestColor (hdc=0x5d010689, color=0xa0a0a0) returned 0xa0a0a0 [0069.066] GetNearestColor (hdc=0x5d010689, color=0x696969) returned 0x696969 [0069.066] GetNearestColor (hdc=0x5d010689, color=0xa0a0a0) returned 0xa0a0a0 [0069.066] GetNearestColor (hdc=0x5d010689, color=0x0) returned 0x0 [0069.066] GetNearestColor (hdc=0x5d010689, color=0xffffff) returned 0xffffff [0069.066] GetNearestColor (hdc=0x5d010689, color=0xe5e5e5) returned 0xe5e5e5 [0069.066] GetNearestColor (hdc=0x5d010689, color=0xd8d8d8) returned 0xd8d8d8 [0069.066] GetNearestColor (hdc=0x5d010689, color=0x0) returned 0x0 [0069.066] RestoreDC (hdc=0x5d010689, nSavedDC=-1) returned 1 [0069.066] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5d010689) returned 0x0 [0069.067] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.067] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx/*\x02", lpUsedDefaultChar=0x0) returned 17 [0069.067] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.196] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a3578) returned 0x0 [0069.196] GdipSetStringFormatAlign (format=0x1beb7ae0, align=0x1) returned 0x0 [0069.196] GdipSetStringFormatLineAlign (format=0x1beb7ae0, align=0x1) returned 0x0 [0069.196] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ae0, hotkeyPrefix=1) returned 0x0 [0069.196] GdipGetStringFormatFlags (format=0x1beb7ae0, flags=0x14e378) returned 0x0 [0069.196] GdipGetStringFormatTrimming (format=0x1beb7ae0, trimming=0x14e378) returned 0x0 [0069.196] GdipGetStringFormatHotkeyPrefix (format=0x1beb7ae0, hotkeyPrefix=0x14e378) returned 0x0 [0069.196] GdipGetFontSize (font=0x1beb7ae0, size=0x14e378) returned 0x0 [0069.196] GdipGetFontStyle (font=0x1beb7ae0, style=0x14e378) returned 0x0 [0069.196] GdipDeleteStringFormat (format=0x1beb7ae0) returned 0x0 [0069.197] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0069.197] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.197] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0069.197] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a36a8) returned 0x0 [0069.197] GdipSetStringFormatFlags (format=0x1beb7ae0, flags=0) returned 0x0 [0069.197] GdipSetStringFormatTrimming (format=0x1beb7ae0, trimming=0x1) returned 0x0 [0069.197] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ae0, hotkeyPrefix=1) returned 0x0 [0069.197] GdipSetStringFormatAlign (format=0x1beb7ae0, align=0x1) returned 0x0 [0069.197] GdipSetStringFormatLineAlign (format=0x1beb7ae0, align=0x1) returned 0x0 [0069.197] GdipMeasureString (graphics=0x1beb8070, string="0", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7ae0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0069.197] GdipDeleteStringFormat (format=0x1beb7ae0) returned 0x0 [0069.197] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0069.198] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0069.198] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.198] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0069.198] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.198] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0069.198] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0069.198] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0069.198] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d0d0 [0069.198] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d0d0) returned 0x0 [0069.199] LocalFree (hMem=0x1d92d0d0) returned 0x0 [0069.199] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cad0 [0069.199] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cad0) returned 0x0 [0069.199] LocalFree (hMem=0x1d92cad0) returned 0x0 [0069.199] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0069.200] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0069.200] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0069.200] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0069.200] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.200] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0069.200] GetCurrentObject (hdc=0x5d010689, type=0x1) returned 0x1b00017 [0069.200] GetCurrentObject (hdc=0x5d010689, type=0x2) returned 0x1900010 [0069.200] GetCurrentObject (hdc=0x5d010689, type=0x7) returned 0x160506a9 [0069.200] GetCurrentObject (hdc=0x5d010689, type=0x6) returned 0x18a0048 [0069.200] SaveDC (hdc=0x5d010689) returned 1 [0069.200] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9904095c [0069.200] GetClipRgn (hdc=0x5d010689, hrgn=0xffffffff9904095c) returned 0 [0069.200] SelectClipRgn (hdc=0x5d010689, hrgn=0x5a0406c7) returned 2 [0069.200] DeleteObject (ho=0xffffffff9904095c) returned 1 [0069.200] DeleteObject (ho=0x5a0406c7) returned 1 [0069.200] OffsetViewportOrgEx (in: hdc=0x5d010689, x=0, y=0, lppt=0x22a3a68 | out: lppt=0x22a3a68) returned 1 [0069.200] GetNearestColor (hdc=0x5d010689, color=0xf0f0f0) returned 0xf0f0f0 [0069.200] CreateSolidBrush (color=0xf0f0f0) returned 0x44100559 [0069.200] FillRect (hDC=0x5d010689, lprc=0x14e1c8, hbr=0x44100559) returned 1 [0069.200] DeleteObject (ho=0x44100559) returned 1 [0069.200] RestoreDC (hdc=0x5d010689, nSavedDC=-1) returned 1 [0069.201] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5d010689) returned 0x0 [0069.201] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0069.201] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.201] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a3b68) returned 0x0 [0069.201] GdipSetStringFormatAlign (format=0x1beb7990, align=0x1) returned 0x0 [0069.201] GdipSetStringFormatLineAlign (format=0x1beb7990, align=0x1) returned 0x0 [0069.201] GdipSetStringFormatHotkeyPrefix (format=0x1beb7990, hotkeyPrefix=1) returned 0x0 [0069.201] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0069.201] GdipDrawString (graphics=0x1beb67f0, string="0", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7990, brush=0x1beb15e0) returned 0x0 [0069.201] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0069.201] GdipDeleteStringFormat (format=0x1beb7990) returned 0x0 [0069.202] GetFocus () returned 0x0 [0069.202] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.202] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx,*\x02", lpUsedDefaultChar=0x0) returned 17 [0069.202] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.202] GdipCreateRegion (region=0x14e030) returned 0x0 [0069.202] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.202] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0069.202] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0069.202] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0069.202] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0069.202] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0069.203] LocalFree (hMem=0x1d92cf10) returned 0x0 [0069.203] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d050 [0069.203] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d050) returned 0x0 [0069.203] LocalFree (hMem=0x1d92d050) returned 0x0 [0069.204] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0069.204] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0069.204] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0069.204] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0069.204] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.204] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0069.204] GetCurrentObject (hdc=0x5d010689, type=0x1) returned 0x1b00017 [0069.204] GetCurrentObject (hdc=0x5d010689, type=0x2) returned 0x1900010 [0069.204] GetCurrentObject (hdc=0x5d010689, type=0x7) returned 0x160506a9 [0069.204] GetCurrentObject (hdc=0x5d010689, type=0x6) returned 0x18a0048 [0069.204] SaveDC (hdc=0x5d010689) returned 1 [0069.204] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5b0406c7 [0069.204] GetClipRgn (hdc=0x5d010689, hrgn=0x5b0406c7) returned 0 [0069.204] SelectClipRgn (hdc=0x5d010689, hrgn=0xffffffff9a04095c) returned 2 [0069.204] DeleteObject (ho=0x5b0406c7) returned 1 [0069.204] DeleteObject (ho=0xffffffff9a04095c) returned 1 [0069.204] OffsetViewportOrgEx (in: hdc=0x5d010689, x=0, y=0, lppt=0x22a3f50 | out: lppt=0x22a3f50) returned 1 [0069.204] GetROP2 (hdc=0x5d010689) returned 13 [0069.204] GetBkMode (hdc=0x5d010689) returned 2 [0069.204] SetBkMode (hdc=0x5d010689, mode=1) returned 2 [0069.204] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0xffffffff893009d0 [0069.204] SelectObject (hdc=0x5d010689, h=0xffffffff893009d0) returned 0x1b00017 [0069.205] MoveToEx (in: hdc=0x5d010689, x=25, y=0, lppt=0x22a3fb8 | out: lppt=0x22a3fb8) returned 1 [0069.205] LineTo (hdc=0x5d010689, x=0, y=0) returned 1 [0069.205] SetBkMode (hdc=0x5d010689, mode=2) returned 1 [0069.205] MoveToEx (in: hdc=0x5d010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.205] GetROP2 (hdc=0x5d010689) returned 13 [0069.205] GetBkMode (hdc=0x5d010689) returned 2 [0069.205] SetBkMode (hdc=0x5d010689, mode=1) returned 2 [0069.205] SelectObject (hdc=0x5d010689, h=0xffffffff893009d0) returned 0xffffffff893009d0 [0069.205] MoveToEx (in: hdc=0x5d010689, x=0, y=0, lppt=0x22a3fd0 | out: lppt=0x22a3fd0) returned 1 [0069.205] LineTo (hdc=0x5d010689, x=0, y=22) returned 1 [0069.205] SetBkMode (hdc=0x5d010689, mode=2) returned 1 [0069.205] MoveToEx (in: hdc=0x5d010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.205] SelectObject (hdc=0x5d010689, h=0x1b00017) returned 0xffffffff893009d0 [0069.205] DeleteObject (ho=0xffffffff893009d0) returned 1 [0069.205] GetROP2 (hdc=0x5d010689) returned 13 [0069.205] GetBkMode (hdc=0x5d010689) returned 2 [0069.205] SetBkMode (hdc=0x5d010689, mode=1) returned 2 [0069.205] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x513009aa [0069.205] SelectObject (hdc=0x5d010689, h=0x513009aa) returned 0x1b00017 [0069.205] MoveToEx (in: hdc=0x5d010689, x=0, y=22, lppt=0x22a4038 | out: lppt=0x22a4038) returned 1 [0069.206] LineTo (hdc=0x5d010689, x=25, y=22) returned 1 [0069.206] SetBkMode (hdc=0x5d010689, mode=2) returned 1 [0069.206] MoveToEx (in: hdc=0x5d010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.206] GetROP2 (hdc=0x5d010689) returned 13 [0069.206] GetBkMode (hdc=0x5d010689) returned 2 [0069.206] SetBkMode (hdc=0x5d010689, mode=1) returned 2 [0069.206] SelectObject (hdc=0x5d010689, h=0x513009aa) returned 0x513009aa [0069.206] MoveToEx (in: hdc=0x5d010689, x=25, y=22, lppt=0x22a4050 | out: lppt=0x22a4050) returned 1 [0069.206] LineTo (hdc=0x5d010689, x=25, y=-1) returned 1 [0069.206] SetBkMode (hdc=0x5d010689, mode=2) returned 1 [0069.206] MoveToEx (in: hdc=0x5d010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.206] SelectObject (hdc=0x5d010689, h=0x1b00017) returned 0x513009aa [0069.206] DeleteObject (ho=0x513009aa) returned 1 [0069.206] GetROP2 (hdc=0x5d010689) returned 13 [0069.206] GetBkMode (hdc=0x5d010689) returned 2 [0069.206] SetBkMode (hdc=0x5d010689, mode=1) returned 2 [0069.206] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xffffffff8a3009d0 [0069.206] SelectObject (hdc=0x5d010689, h=0xffffffff8a3009d0) returned 0x1b00017 [0069.206] MoveToEx (in: hdc=0x5d010689, x=24, y=1, lppt=0x22a40b8 | out: lppt=0x22a40b8) returned 1 [0069.206] LineTo (hdc=0x5d010689, x=1, y=1) returned 1 [0069.206] SetBkMode (hdc=0x5d010689, mode=2) returned 1 [0069.206] MoveToEx (in: hdc=0x5d010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.206] GetROP2 (hdc=0x5d010689) returned 13 [0069.206] GetBkMode (hdc=0x5d010689) returned 2 [0069.207] SetBkMode (hdc=0x5d010689, mode=1) returned 2 [0069.207] SelectObject (hdc=0x5d010689, h=0xffffffff8a3009d0) returned 0xffffffff8a3009d0 [0069.207] MoveToEx (in: hdc=0x5d010689, x=1, y=1, lppt=0x22a40d0 | out: lppt=0x22a40d0) returned 1 [0069.207] LineTo (hdc=0x5d010689, x=1, y=21) returned 1 [0069.207] SetBkMode (hdc=0x5d010689, mode=2) returned 1 [0069.207] MoveToEx (in: hdc=0x5d010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.207] SelectObject (hdc=0x5d010689, h=0x1b00017) returned 0xffffffff8a3009d0 [0069.207] DeleteObject (ho=0xffffffff8a3009d0) returned 1 [0069.207] GetROP2 (hdc=0x5d010689) returned 13 [0069.207] GetBkMode (hdc=0x5d010689) returned 2 [0069.207] SetBkMode (hdc=0x5d010689, mode=1) returned 2 [0069.207] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x523009aa [0069.207] SelectObject (hdc=0x5d010689, h=0x523009aa) returned 0x1b00017 [0069.207] MoveToEx (in: hdc=0x5d010689, x=1, y=21, lppt=0x22a4138 | out: lppt=0x22a4138) returned 1 [0069.207] LineTo (hdc=0x5d010689, x=24, y=21) returned 1 [0069.207] SetBkMode (hdc=0x5d010689, mode=2) returned 1 [0069.207] MoveToEx (in: hdc=0x5d010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.207] GetROP2 (hdc=0x5d010689) returned 13 [0069.207] GetBkMode (hdc=0x5d010689) returned 2 [0069.207] SetBkMode (hdc=0x5d010689, mode=1) returned 2 [0069.207] SelectObject (hdc=0x5d010689, h=0x523009aa) returned 0x523009aa [0069.207] MoveToEx (in: hdc=0x5d010689, x=24, y=21, lppt=0x22a4150 | out: lppt=0x22a4150) returned 1 [0069.207] LineTo (hdc=0x5d010689, x=24, y=0) returned 1 [0069.208] SetBkMode (hdc=0x5d010689, mode=2) returned 1 [0069.208] MoveToEx (in: hdc=0x5d010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.208] SelectObject (hdc=0x5d010689, h=0x1b00017) returned 0x523009aa [0069.208] DeleteObject (ho=0x523009aa) returned 1 [0069.208] RestoreDC (hdc=0x5d010689, nSavedDC=-1) returned 1 [0069.208] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5d010689) returned 0x0 [0069.208] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0069.208] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x5d010689, x1=0, y1=0, rop=0xcc0020) returned 1 [0069.208] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5d010689) returned 0x0 [0069.208] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0069.208] SelectObject (hdc=0x5d010689, h=0x185000f) returned 0x160506a9 [0069.208] DeleteDC (hdc=0x5d010689) returned 1 [0069.208] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0069.209] EndPaint (hWnd=0x3032c, lpPaint=0x14e548) returned 1 [0069.209] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.209] IsWindowUnicode (hWnd=0x30320) returned 1 [0069.209] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.209] TranslateMessage (lpMsg=0x14ef10) returned 0 [0069.209] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0069.209] BeginPaint (in: hWnd=0x30320, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0069.209] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.209] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0069.209] GetStockObject (i=5) returned 0x1900015 [0069.209] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0069.210] CreateCompatibleDC (hdc=0x220106d6) returned 0x5c0109c0 [0069.210] SelectObject (hdc=0x5c0109c0, h=0x160506a9) returned 0x185000f [0069.210] GdipCreateFromHDC (hdc=0x5c0109c0, graphics=0x14e528) returned 0x0 [0069.210] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0069.210] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0069.210] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0069.210] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0069.210] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0069.210] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d490 [0069.210] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d490) returned 0x0 [0069.211] LocalFree (hMem=0x1d92d490) returned 0x0 [0069.211] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0069.211] GdipCreateRegion (region=0x14e550) returned 0x0 [0069.211] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.211] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0069.211] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0069.211] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd540dbd) returned 0x0 [0069.211] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.211] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0069.211] GetCurrentObject (hdc=0x5c0109c0, type=0x1) returned 0x1b00017 [0069.211] GetCurrentObject (hdc=0x5c0109c0, type=0x2) returned 0x1900010 [0069.211] GetCurrentObject (hdc=0x5c0109c0, type=0x7) returned 0x160506a9 [0069.211] GetCurrentObject (hdc=0x5c0109c0, type=0x6) returned 0x18a0048 [0069.211] SaveDC (hdc=0x5c0109c0) returned 1 [0069.211] GetNearestColor (hdc=0x5c0109c0, color=0xf0f0f0) returned 0xf0f0f0 [0069.211] GetNearestColor (hdc=0x5c0109c0, color=0xa0a0a0) returned 0xa0a0a0 [0069.212] GetNearestColor (hdc=0x5c0109c0, color=0x696969) returned 0x696969 [0069.212] GetNearestColor (hdc=0x5c0109c0, color=0xa0a0a0) returned 0xa0a0a0 [0069.212] GetNearestColor (hdc=0x5c0109c0, color=0x0) returned 0x0 [0069.212] GetNearestColor (hdc=0x5c0109c0, color=0xffffff) returned 0xffffff [0069.212] GetNearestColor (hdc=0x5c0109c0, color=0xe5e5e5) returned 0xe5e5e5 [0069.212] GetNearestColor (hdc=0x5c0109c0, color=0xd8d8d8) returned 0xd8d8d8 [0069.212] GetNearestColor (hdc=0x5c0109c0, color=0x0) returned 0x0 [0069.212] RestoreDC (hdc=0x5c0109c0, nSavedDC=-1) returned 1 [0069.212] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5c0109c0) returned 0x0 [0069.212] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExD*\x02", lpUsedDefaultChar=0x0) returned 17 [0069.212] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.212] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a4a70) returned 0x0 [0069.212] GdipSetStringFormatAlign (format=0x1beb7fb0, align=0x1) returned 0x0 [0069.213] GdipSetStringFormatLineAlign (format=0x1beb7fb0, align=0x1) returned 0x0 [0069.213] GdipSetStringFormatHotkeyPrefix (format=0x1beb7fb0, hotkeyPrefix=1) returned 0x0 [0069.213] GdipGetStringFormatFlags (format=0x1beb7fb0, flags=0x14e378) returned 0x0 [0069.213] GdipGetStringFormatTrimming (format=0x1beb7fb0, trimming=0x14e378) returned 0x0 [0069.213] GdipGetStringFormatHotkeyPrefix (format=0x1beb7fb0, hotkeyPrefix=0x14e378) returned 0x0 [0069.213] GdipGetFontSize (font=0x1beb7fb0, size=0x14e378) returned 0x0 [0069.213] GdipGetFontStyle (font=0x1beb7fb0, style=0x14e378) returned 0x0 [0069.213] GdipDeleteStringFormat (format=0x1beb7fb0) returned 0x0 [0069.213] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0069.213] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.213] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0069.213] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a4ba0) returned 0x0 [0069.213] GdipSetStringFormatFlags (format=0x1beb7920, flags=0) returned 0x0 [0069.214] GdipSetStringFormatTrimming (format=0x1beb7920, trimming=0x1) returned 0x0 [0069.214] GdipSetStringFormatHotkeyPrefix (format=0x1beb7920, hotkeyPrefix=1) returned 0x0 [0069.214] GdipSetStringFormatAlign (format=0x1beb7920, align=0x1) returned 0x0 [0069.214] GdipSetStringFormatLineAlign (format=0x1beb7920, align=0x1) returned 0x0 [0069.214] GdipMeasureString (graphics=0x1beb8070, string="4", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7920, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0069.214] GdipDeleteStringFormat (format=0x1beb7920) returned 0x0 [0069.214] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0069.214] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0069.214] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.214] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0069.214] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.214] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0069.214] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0069.214] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0069.214] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0069.214] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d2d0) returned 0x0 [0069.215] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0069.215] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92ca90 [0069.215] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92ca90) returned 0x0 [0069.216] LocalFree (hMem=0x1d92ca90) returned 0x0 [0069.216] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0069.216] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0069.216] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0069.216] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0069.216] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.216] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0069.216] GetCurrentObject (hdc=0x5c0109c0, type=0x1) returned 0x1b00017 [0069.216] GetCurrentObject (hdc=0x5c0109c0, type=0x2) returned 0x1900010 [0069.216] GetCurrentObject (hdc=0x5c0109c0, type=0x7) returned 0x160506a9 [0069.216] GetCurrentObject (hdc=0x5c0109c0, type=0x6) returned 0x18a0048 [0069.216] SaveDC (hdc=0x5c0109c0) returned 1 [0069.216] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9b04095c [0069.216] GetClipRgn (hdc=0x5c0109c0, hrgn=0xffffffff9b04095c) returned 0 [0069.216] SelectClipRgn (hdc=0x5c0109c0, hrgn=0x5c0406c7) returned 2 [0069.216] DeleteObject (ho=0xffffffff9b04095c) returned 1 [0069.216] DeleteObject (ho=0x5c0406c7) returned 1 [0069.216] OffsetViewportOrgEx (in: hdc=0x5c0109c0, x=0, y=0, lppt=0x22a4f60 | out: lppt=0x22a4f60) returned 1 [0069.216] GetNearestColor (hdc=0x5c0109c0, color=0xf0f0f0) returned 0xf0f0f0 [0069.217] CreateSolidBrush (color=0xf0f0f0) returned 0x45100559 [0069.217] FillRect (hDC=0x5c0109c0, lprc=0x14e1c8, hbr=0x45100559) returned 1 [0069.217] DeleteObject (ho=0x45100559) returned 1 [0069.217] RestoreDC (hdc=0x5c0109c0, nSavedDC=-1) returned 1 [0069.217] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5c0109c0) returned 0x0 [0069.217] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0069.217] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.217] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a5060) returned 0x0 [0069.217] GdipSetStringFormatAlign (format=0x1beb7ca0, align=0x1) returned 0x0 [0069.217] GdipSetStringFormatLineAlign (format=0x1beb7ca0, align=0x1) returned 0x0 [0069.217] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ca0, hotkeyPrefix=1) returned 0x0 [0069.217] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0069.217] GdipDrawString (graphics=0x1beb67f0, string="4", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7ca0, brush=0x1beb15e0) returned 0x0 [0069.218] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0069.218] GdipDeleteStringFormat (format=0x1beb7ca0) returned 0x0 [0069.218] GetFocus () returned 0x0 [0069.218] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.218] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExA*\x02", lpUsedDefaultChar=0x0) returned 17 [0069.218] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.218] GdipCreateRegion (region=0x14e030) returned 0x0 [0069.218] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.218] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0069.218] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0069.218] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0069.218] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0069.218] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d2d0) returned 0x0 [0069.219] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0069.219] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0069.219] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d650) returned 0x0 [0069.220] LocalFree (hMem=0x1d92d650) returned 0x0 [0069.220] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0069.220] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0069.220] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0069.220] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0069.220] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.220] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0069.220] GetCurrentObject (hdc=0x5c0109c0, type=0x1) returned 0x1b00017 [0069.220] GetCurrentObject (hdc=0x5c0109c0, type=0x2) returned 0x1900010 [0069.220] GetCurrentObject (hdc=0x5c0109c0, type=0x7) returned 0x160506a9 [0069.220] GetCurrentObject (hdc=0x5c0109c0, type=0x6) returned 0x18a0048 [0069.220] SaveDC (hdc=0x5c0109c0) returned 1 [0069.220] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5d0406c7 [0069.220] GetClipRgn (hdc=0x5c0109c0, hrgn=0x5d0406c7) returned 0 [0069.220] SelectClipRgn (hdc=0x5c0109c0, hrgn=0xffffffff9c04095c) returned 2 [0069.220] DeleteObject (ho=0x5d0406c7) returned 1 [0069.220] DeleteObject (ho=0xffffffff9c04095c) returned 1 [0069.220] OffsetViewportOrgEx (in: hdc=0x5c0109c0, x=0, y=0, lppt=0x22a5448 | out: lppt=0x22a5448) returned 1 [0069.220] GetROP2 (hdc=0x5c0109c0) returned 13 [0069.221] GetBkMode (hdc=0x5c0109c0) returned 2 [0069.221] SetBkMode (hdc=0x5c0109c0, mode=1) returned 2 [0069.221] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x533009aa [0069.221] SelectObject (hdc=0x5c0109c0, h=0x533009aa) returned 0x1b00017 [0069.221] MoveToEx (in: hdc=0x5c0109c0, x=25, y=0, lppt=0x22a54b0 | out: lppt=0x22a54b0) returned 1 [0069.221] LineTo (hdc=0x5c0109c0, x=0, y=0) returned 1 [0069.221] SetBkMode (hdc=0x5c0109c0, mode=2) returned 1 [0069.221] MoveToEx (in: hdc=0x5c0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.221] GetROP2 (hdc=0x5c0109c0) returned 13 [0069.221] GetBkMode (hdc=0x5c0109c0) returned 2 [0069.221] SetBkMode (hdc=0x5c0109c0, mode=1) returned 2 [0069.221] SelectObject (hdc=0x5c0109c0, h=0x533009aa) returned 0x533009aa [0069.221] MoveToEx (in: hdc=0x5c0109c0, x=0, y=0, lppt=0x22a54c8 | out: lppt=0x22a54c8) returned 1 [0069.221] LineTo (hdc=0x5c0109c0, x=0, y=22) returned 1 [0069.221] SetBkMode (hdc=0x5c0109c0, mode=2) returned 1 [0069.221] MoveToEx (in: hdc=0x5c0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.221] SelectObject (hdc=0x5c0109c0, h=0x1b00017) returned 0x533009aa [0069.221] DeleteObject (ho=0x533009aa) returned 1 [0069.221] GetROP2 (hdc=0x5c0109c0) returned 13 [0069.221] GetBkMode (hdc=0x5c0109c0) returned 2 [0069.221] SetBkMode (hdc=0x5c0109c0, mode=1) returned 2 [0069.221] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0xffffffff8b3009d0 [0069.221] SelectObject (hdc=0x5c0109c0, h=0xffffffff8b3009d0) returned 0x1b00017 [0069.222] MoveToEx (in: hdc=0x5c0109c0, x=0, y=22, lppt=0x22a5530 | out: lppt=0x22a5530) returned 1 [0069.222] LineTo (hdc=0x5c0109c0, x=25, y=22) returned 1 [0069.222] SetBkMode (hdc=0x5c0109c0, mode=2) returned 1 [0069.222] MoveToEx (in: hdc=0x5c0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.222] GetROP2 (hdc=0x5c0109c0) returned 13 [0069.222] GetBkMode (hdc=0x5c0109c0) returned 2 [0069.222] SetBkMode (hdc=0x5c0109c0, mode=1) returned 2 [0069.222] SelectObject (hdc=0x5c0109c0, h=0xffffffff8b3009d0) returned 0xffffffff8b3009d0 [0069.222] MoveToEx (in: hdc=0x5c0109c0, x=25, y=22, lppt=0x22a5548 | out: lppt=0x22a5548) returned 1 [0069.222] LineTo (hdc=0x5c0109c0, x=25, y=-1) returned 1 [0069.222] SetBkMode (hdc=0x5c0109c0, mode=2) returned 1 [0069.222] MoveToEx (in: hdc=0x5c0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.222] SelectObject (hdc=0x5c0109c0, h=0x1b00017) returned 0xffffffff8b3009d0 [0069.222] DeleteObject (ho=0xffffffff8b3009d0) returned 1 [0069.222] GetROP2 (hdc=0x5c0109c0) returned 13 [0069.222] GetBkMode (hdc=0x5c0109c0) returned 2 [0069.222] SetBkMode (hdc=0x5c0109c0, mode=1) returned 2 [0069.222] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x543009aa [0069.222] SelectObject (hdc=0x5c0109c0, h=0x543009aa) returned 0x1b00017 [0069.222] MoveToEx (in: hdc=0x5c0109c0, x=24, y=1, lppt=0x22a55b0 | out: lppt=0x22a55b0) returned 1 [0069.222] LineTo (hdc=0x5c0109c0, x=1, y=1) returned 1 [0069.222] SetBkMode (hdc=0x5c0109c0, mode=2) returned 1 [0069.222] MoveToEx (in: hdc=0x5c0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.223] GetROP2 (hdc=0x5c0109c0) returned 13 [0069.223] GetBkMode (hdc=0x5c0109c0) returned 2 [0069.223] SetBkMode (hdc=0x5c0109c0, mode=1) returned 2 [0069.223] SelectObject (hdc=0x5c0109c0, h=0x543009aa) returned 0x543009aa [0069.223] MoveToEx (in: hdc=0x5c0109c0, x=1, y=1, lppt=0x22a55c8 | out: lppt=0x22a55c8) returned 1 [0069.223] LineTo (hdc=0x5c0109c0, x=1, y=21) returned 1 [0069.223] SetBkMode (hdc=0x5c0109c0, mode=2) returned 1 [0069.223] MoveToEx (in: hdc=0x5c0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.223] SelectObject (hdc=0x5c0109c0, h=0x1b00017) returned 0x543009aa [0069.223] DeleteObject (ho=0x543009aa) returned 1 [0069.223] GetROP2 (hdc=0x5c0109c0) returned 13 [0069.223] GetBkMode (hdc=0x5c0109c0) returned 2 [0069.223] SetBkMode (hdc=0x5c0109c0, mode=1) returned 2 [0069.223] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xffffffff8c3009d0 [0069.225] SelectObject (hdc=0x5c0109c0, h=0xffffffff8c3009d0) returned 0x1b00017 [0069.225] MoveToEx (in: hdc=0x5c0109c0, x=1, y=21, lppt=0x22a5630 | out: lppt=0x22a5630) returned 1 [0069.225] LineTo (hdc=0x5c0109c0, x=24, y=21) returned 1 [0069.225] SetBkMode (hdc=0x5c0109c0, mode=2) returned 1 [0069.226] MoveToEx (in: hdc=0x5c0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.226] GetROP2 (hdc=0x5c0109c0) returned 13 [0069.226] GetBkMode (hdc=0x5c0109c0) returned 2 [0069.226] SetBkMode (hdc=0x5c0109c0, mode=1) returned 2 [0069.226] SelectObject (hdc=0x5c0109c0, h=0xffffffff8c3009d0) returned 0xffffffff8c3009d0 [0069.226] MoveToEx (in: hdc=0x5c0109c0, x=24, y=21, lppt=0x22a5648 | out: lppt=0x22a5648) returned 1 [0069.226] LineTo (hdc=0x5c0109c0, x=24, y=0) returned 1 [0069.226] SetBkMode (hdc=0x5c0109c0, mode=2) returned 1 [0069.226] MoveToEx (in: hdc=0x5c0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.226] SelectObject (hdc=0x5c0109c0, h=0x1b00017) returned 0xffffffff8c3009d0 [0069.226] DeleteObject (ho=0xffffffff8c3009d0) returned 1 [0069.226] RestoreDC (hdc=0x5c0109c0, nSavedDC=-1) returned 1 [0069.226] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5c0109c0) returned 0x0 [0069.226] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0069.226] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x5c0109c0, x1=0, y1=0, rop=0xcc0020) returned 1 [0069.226] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5c0109c0) returned 0x0 [0069.226] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0069.226] SelectObject (hdc=0x5c0109c0, h=0x185000f) returned 0x160506a9 [0069.226] DeleteDC (hdc=0x5c0109c0) returned 1 [0069.227] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0069.227] EndPaint (hWnd=0x30320, lpPaint=0x14e548) returned 1 [0069.227] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.227] IsWindowUnicode (hWnd=0x30328) returned 1 [0069.227] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.227] TranslateMessage (lpMsg=0x14ef10) returned 0 [0069.227] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0069.227] BeginPaint (in: hWnd=0x30328, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0069.227] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.227] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0069.227] GetStockObject (i=5) returned 0x1900015 [0069.227] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0069.227] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x780106b7 [0069.228] SelectObject (hdc=0x780106b7, h=0x160506a9) returned 0x185000f [0069.228] GdipCreateFromHDC (hdc=0x780106b7, graphics=0x14e528) returned 0x0 [0069.228] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0069.228] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0069.228] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0069.228] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0069.228] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0069.228] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0069.228] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d2d0) returned 0x0 [0069.229] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0069.229] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0069.229] GdipCreateRegion (region=0x14e550) returned 0x0 [0069.229] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.229] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0069.229] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0069.229] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd510dbd) returned 0x0 [0069.229] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.229] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0069.229] GetCurrentObject (hdc=0x780106b7, type=0x1) returned 0x1b00017 [0069.229] GetCurrentObject (hdc=0x780106b7, type=0x2) returned 0x1900010 [0069.229] GetCurrentObject (hdc=0x780106b7, type=0x7) returned 0x160506a9 [0069.229] GetCurrentObject (hdc=0x780106b7, type=0x6) returned 0x18a0048 [0069.229] SaveDC (hdc=0x780106b7) returned 1 [0069.229] GetNearestColor (hdc=0x780106b7, color=0xf0f0f0) returned 0xf0f0f0 [0069.229] GetNearestColor (hdc=0x780106b7, color=0xa0a0a0) returned 0xa0a0a0 [0069.229] GetNearestColor (hdc=0x780106b7, color=0x696969) returned 0x696969 [0069.229] GetNearestColor (hdc=0x780106b7, color=0xa0a0a0) returned 0xa0a0a0 [0069.229] GetNearestColor (hdc=0x780106b7, color=0x0) returned 0x0 [0069.230] GetNearestColor (hdc=0x780106b7, color=0xffffff) returned 0xffffff [0069.230] GetNearestColor (hdc=0x780106b7, color=0xe5e5e5) returned 0xe5e5e5 [0069.230] GetNearestColor (hdc=0x780106b7, color=0xd8d8d8) returned 0xd8d8d8 [0069.230] GetNearestColor (hdc=0x780106b7, color=0x0) returned 0x0 [0069.230] RestoreDC (hdc=0x780106b7, nSavedDC=-1) returned 1 [0069.230] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x780106b7) returned 0x0 [0069.230] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExY*\x02", lpUsedDefaultChar=0x0) returned 17 [0069.230] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.230] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a5f68) returned 0x0 [0069.230] GdipSetStringFormatAlign (format=0x1beb7df0, align=0x1) returned 0x0 [0069.230] GdipSetStringFormatLineAlign (format=0x1beb7df0, align=0x1) returned 0x0 [0069.230] GdipSetStringFormatHotkeyPrefix (format=0x1beb7df0, hotkeyPrefix=1) returned 0x0 [0069.231] GdipGetStringFormatFlags (format=0x1beb7df0, flags=0x14e378) returned 0x0 [0069.231] GdipGetStringFormatTrimming (format=0x1beb7df0, trimming=0x14e378) returned 0x0 [0069.231] GdipGetStringFormatHotkeyPrefix (format=0x1beb7df0, hotkeyPrefix=0x14e378) returned 0x0 [0069.231] GdipGetFontSize (font=0x1beb7df0, size=0x14e378) returned 0x0 [0069.231] GdipGetFontStyle (font=0x1beb7df0, style=0x14e378) returned 0x0 [0069.231] GdipDeleteStringFormat (format=0x1beb7df0) returned 0x0 [0069.231] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0069.231] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.231] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0069.232] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a6098) returned 0x0 [0069.232] GdipSetStringFormatFlags (format=0x1beb7e60, flags=0) returned 0x0 [0069.232] GdipSetStringFormatTrimming (format=0x1beb7e60, trimming=0x1) returned 0x0 [0069.232] GdipSetStringFormatHotkeyPrefix (format=0x1beb7e60, hotkeyPrefix=1) returned 0x0 [0069.232] GdipSetStringFormatAlign (format=0x1beb7e60, align=0x1) returned 0x0 [0069.232] GdipSetStringFormatLineAlign (format=0x1beb7e60, align=0x1) returned 0x0 [0069.232] GdipMeasureString (graphics=0x1beb8070, string="6", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7e60, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0069.232] GdipDeleteStringFormat (format=0x1beb7e60) returned 0x0 [0069.232] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0069.232] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.232] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0069.232] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.232] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0069.232] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.232] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0069.233] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0069.233] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0069.233] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d350 [0069.233] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d350) returned 0x0 [0069.233] LocalFree (hMem=0x1d92d350) returned 0x0 [0069.233] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0069.233] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d2d0) returned 0x0 [0069.234] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0069.234] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0069.234] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0069.234] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0069.234] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0069.234] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.234] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0069.234] GetCurrentObject (hdc=0x780106b7, type=0x1) returned 0x1b00017 [0069.234] GetCurrentObject (hdc=0x780106b7, type=0x2) returned 0x1900010 [0069.234] GetCurrentObject (hdc=0x780106b7, type=0x7) returned 0x160506a9 [0069.234] GetCurrentObject (hdc=0x780106b7, type=0x6) returned 0x18a0048 [0069.234] SaveDC (hdc=0x780106b7) returned 1 [0069.234] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9d04095c [0069.234] GetClipRgn (hdc=0x780106b7, hrgn=0xffffffff9d04095c) returned 0 [0069.234] SelectClipRgn (hdc=0x780106b7, hrgn=0x5e0406c7) returned 2 [0069.234] DeleteObject (ho=0xffffffff9d04095c) returned 1 [0069.235] DeleteObject (ho=0x5e0406c7) returned 1 [0069.235] OffsetViewportOrgEx (in: hdc=0x780106b7, x=0, y=0, lppt=0x22a6458 | out: lppt=0x22a6458) returned 1 [0069.235] GetNearestColor (hdc=0x780106b7, color=0xf0f0f0) returned 0xf0f0f0 [0069.235] CreateSolidBrush (color=0xf0f0f0) returned 0x46100559 [0069.235] FillRect (hDC=0x780106b7, lprc=0x14e1c8, hbr=0x46100559) returned 1 [0069.235] DeleteObject (ho=0x46100559) returned 1 [0069.235] RestoreDC (hdc=0x780106b7, nSavedDC=-1) returned 1 [0069.235] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x780106b7) returned 0x0 [0069.235] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.235] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0069.235] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.235] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a6558) returned 0x0 [0069.235] GdipSetStringFormatAlign (format=0x1beb7e60, align=0x1) returned 0x0 [0069.235] GdipSetStringFormatLineAlign (format=0x1beb7e60, align=0x1) returned 0x0 [0069.235] GdipSetStringFormatHotkeyPrefix (format=0x1beb7e60, hotkeyPrefix=1) returned 0x0 [0069.236] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0069.236] GdipDrawString (graphics=0x1beb67f0, string="6", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7e60, brush=0x1beb15e0) returned 0x0 [0069.236] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0069.236] GdipDeleteStringFormat (format=0x1beb7e60) returned 0x0 [0069.236] GetFocus () returned 0x0 [0069.236] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.236] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExV*\x02", lpUsedDefaultChar=0x0) returned 17 [0069.236] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.236] GdipCreateRegion (region=0x14e030) returned 0x0 [0069.236] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.236] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0069.237] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0069.237] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0069.237] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d490 [0069.237] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d490) returned 0x0 [0069.237] LocalFree (hMem=0x1d92d490) returned 0x0 [0069.237] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d350 [0069.237] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d350) returned 0x0 [0069.238] LocalFree (hMem=0x1d92d350) returned 0x0 [0069.238] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0069.238] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0069.238] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0069.238] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0069.238] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.238] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0069.238] GetCurrentObject (hdc=0x780106b7, type=0x1) returned 0x1b00017 [0069.238] GetCurrentObject (hdc=0x780106b7, type=0x2) returned 0x1900010 [0069.238] GetCurrentObject (hdc=0x780106b7, type=0x7) returned 0x160506a9 [0069.238] GetCurrentObject (hdc=0x780106b7, type=0x6) returned 0x18a0048 [0069.238] SaveDC (hdc=0x780106b7) returned 1 [0069.238] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5f0406c7 [0069.238] GetClipRgn (hdc=0x780106b7, hrgn=0x5f0406c7) returned 0 [0069.238] SelectClipRgn (hdc=0x780106b7, hrgn=0xffffffff9e04095c) returned 2 [0069.238] DeleteObject (ho=0x5f0406c7) returned 1 [0069.239] DeleteObject (ho=0xffffffff9e04095c) returned 1 [0069.239] OffsetViewportOrgEx (in: hdc=0x780106b7, x=0, y=0, lppt=0x22a6940 | out: lppt=0x22a6940) returned 1 [0069.239] GetROP2 (hdc=0x780106b7) returned 13 [0069.239] GetBkMode (hdc=0x780106b7) returned 2 [0069.239] SetBkMode (hdc=0x780106b7, mode=1) returned 2 [0069.367] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x243006cb [0069.367] SelectObject (hdc=0x780106b7, h=0x243006cb) returned 0x1b00017 [0069.367] MoveToEx (in: hdc=0x780106b7, x=25, y=0, lppt=0x22a69a8 | out: lppt=0x22a69a8) returned 1 [0069.367] LineTo (hdc=0x780106b7, x=0, y=0) returned 1 [0069.367] SetBkMode (hdc=0x780106b7, mode=2) returned 1 [0069.367] MoveToEx (in: hdc=0x780106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.367] GetROP2 (hdc=0x780106b7) returned 13 [0069.367] GetBkMode (hdc=0x780106b7) returned 2 [0069.367] SetBkMode (hdc=0x780106b7, mode=1) returned 2 [0069.367] SelectObject (hdc=0x780106b7, h=0x243006cb) returned 0x243006cb [0069.367] MoveToEx (in: hdc=0x780106b7, x=0, y=0, lppt=0x22a69c0 | out: lppt=0x22a69c0) returned 1 [0069.367] LineTo (hdc=0x780106b7, x=0, y=22) returned 1 [0069.367] SetBkMode (hdc=0x780106b7, mode=2) returned 1 [0069.367] MoveToEx (in: hdc=0x780106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.367] SelectObject (hdc=0x780106b7, h=0x1b00017) returned 0x243006cb [0069.367] DeleteObject (ho=0x243006cb) returned 1 [0069.367] GetROP2 (hdc=0x780106b7) returned 13 [0069.367] GetBkMode (hdc=0x780106b7) returned 2 [0069.367] SetBkMode (hdc=0x780106b7, mode=1) returned 2 [0069.367] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x31300983 [0069.368] SelectObject (hdc=0x780106b7, h=0x31300983) returned 0x1b00017 [0069.368] MoveToEx (in: hdc=0x780106b7, x=0, y=22, lppt=0x22a6a28 | out: lppt=0x22a6a28) returned 1 [0069.368] LineTo (hdc=0x780106b7, x=25, y=22) returned 1 [0069.368] SetBkMode (hdc=0x780106b7, mode=2) returned 1 [0069.368] MoveToEx (in: hdc=0x780106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.368] GetROP2 (hdc=0x780106b7) returned 13 [0069.368] GetBkMode (hdc=0x780106b7) returned 2 [0069.368] SetBkMode (hdc=0x780106b7, mode=1) returned 2 [0069.368] SelectObject (hdc=0x780106b7, h=0x31300983) returned 0x31300983 [0069.368] MoveToEx (in: hdc=0x780106b7, x=25, y=22, lppt=0x22a6a40 | out: lppt=0x22a6a40) returned 1 [0069.368] LineTo (hdc=0x780106b7, x=25, y=-1) returned 1 [0069.368] SetBkMode (hdc=0x780106b7, mode=2) returned 1 [0069.368] MoveToEx (in: hdc=0x780106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.368] SelectObject (hdc=0x780106b7, h=0x1b00017) returned 0x31300983 [0069.368] DeleteObject (ho=0x31300983) returned 1 [0069.368] GetROP2 (hdc=0x780106b7) returned 13 [0069.368] GetBkMode (hdc=0x780106b7) returned 2 [0069.368] SetBkMode (hdc=0x780106b7, mode=1) returned 2 [0069.368] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x253006cb [0069.368] SelectObject (hdc=0x780106b7, h=0x253006cb) returned 0x1b00017 [0069.368] MoveToEx (in: hdc=0x780106b7, x=24, y=1, lppt=0x22a6aa8 | out: lppt=0x22a6aa8) returned 1 [0069.368] LineTo (hdc=0x780106b7, x=1, y=1) returned 1 [0069.369] SetBkMode (hdc=0x780106b7, mode=2) returned 1 [0069.369] MoveToEx (in: hdc=0x780106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.369] GetROP2 (hdc=0x780106b7) returned 13 [0069.369] GetBkMode (hdc=0x780106b7) returned 2 [0069.369] SetBkMode (hdc=0x780106b7, mode=1) returned 2 [0069.369] SelectObject (hdc=0x780106b7, h=0x253006cb) returned 0x253006cb [0069.369] MoveToEx (in: hdc=0x780106b7, x=1, y=1, lppt=0x22a6ac0 | out: lppt=0x22a6ac0) returned 1 [0069.369] LineTo (hdc=0x780106b7, x=1, y=21) returned 1 [0069.369] SetBkMode (hdc=0x780106b7, mode=2) returned 1 [0069.369] MoveToEx (in: hdc=0x780106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.369] SelectObject (hdc=0x780106b7, h=0x1b00017) returned 0x253006cb [0069.369] DeleteObject (ho=0x253006cb) returned 1 [0069.369] GetROP2 (hdc=0x780106b7) returned 13 [0069.369] GetBkMode (hdc=0x780106b7) returned 2 [0069.369] SetBkMode (hdc=0x780106b7, mode=1) returned 2 [0069.369] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x32300983 [0069.369] SelectObject (hdc=0x780106b7, h=0x32300983) returned 0x1b00017 [0069.369] MoveToEx (in: hdc=0x780106b7, x=1, y=21, lppt=0x22a6b28 | out: lppt=0x22a6b28) returned 1 [0069.369] LineTo (hdc=0x780106b7, x=24, y=21) returned 1 [0069.369] SetBkMode (hdc=0x780106b7, mode=2) returned 1 [0069.369] MoveToEx (in: hdc=0x780106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.369] GetROP2 (hdc=0x780106b7) returned 13 [0069.369] GetBkMode (hdc=0x780106b7) returned 2 [0069.370] SetBkMode (hdc=0x780106b7, mode=1) returned 2 [0069.370] SelectObject (hdc=0x780106b7, h=0x32300983) returned 0x32300983 [0069.370] MoveToEx (in: hdc=0x780106b7, x=24, y=21, lppt=0x22a6b40 | out: lppt=0x22a6b40) returned 1 [0069.370] LineTo (hdc=0x780106b7, x=24, y=0) returned 1 [0069.370] SetBkMode (hdc=0x780106b7, mode=2) returned 1 [0069.370] MoveToEx (in: hdc=0x780106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.370] SelectObject (hdc=0x780106b7, h=0x1b00017) returned 0x32300983 [0069.370] DeleteObject (ho=0x32300983) returned 1 [0069.370] RestoreDC (hdc=0x780106b7, nSavedDC=-1) returned 1 [0069.370] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x780106b7) returned 0x0 [0069.370] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0069.370] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x780106b7, x1=0, y1=0, rop=0xcc0020) returned 1 [0069.370] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x780106b7) returned 0x0 [0069.370] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0069.370] SelectObject (hdc=0x780106b7, h=0x185000f) returned 0x160506a9 [0069.370] DeleteDC (hdc=0x780106b7) returned 1 [0069.370] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0069.370] EndPaint (hWnd=0x30328, lpPaint=0x14e548) returned 1 [0069.371] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.371] IsWindowUnicode (hWnd=0x3031c) returned 1 [0069.371] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.371] TranslateMessage (lpMsg=0x14ef10) returned 0 [0069.371] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0069.371] BeginPaint (in: hWnd=0x3031c, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0069.371] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.371] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0069.371] GetStockObject (i=5) returned 0x1900015 [0069.371] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0069.371] CreateCompatibleDC (hdc=0xc0100ae) returned 0x66010689 [0069.371] SelectObject (hdc=0x66010689, h=0x160506a9) returned 0x185000f [0069.372] GdipCreateFromHDC (hdc=0x66010689, graphics=0x14e528) returned 0x0 [0069.372] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0069.372] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0069.372] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0069.372] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0069.372] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0069.372] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d8d0 [0069.372] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d8d0) returned 0x0 [0069.373] LocalFree (hMem=0x1d92d8d0) returned 0x0 [0069.378] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0069.378] GdipCreateRegion (region=0x14e550) returned 0x0 [0069.378] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.378] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0069.378] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0069.378] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd4e0dbd) returned 0x0 [0069.378] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.378] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0069.378] GetCurrentObject (hdc=0x66010689, type=0x1) returned 0x1b00017 [0069.378] GetCurrentObject (hdc=0x66010689, type=0x2) returned 0x1900010 [0069.378] GetCurrentObject (hdc=0x66010689, type=0x7) returned 0x160506a9 [0069.378] GetCurrentObject (hdc=0x66010689, type=0x6) returned 0x18a0048 [0069.378] SaveDC (hdc=0x66010689) returned 1 [0069.378] GetNearestColor (hdc=0x66010689, color=0xf0f0f0) returned 0xf0f0f0 [0069.378] GetNearestColor (hdc=0x66010689, color=0xa0a0a0) returned 0xa0a0a0 [0069.378] GetNearestColor (hdc=0x66010689, color=0x696969) returned 0x696969 [0069.378] GetNearestColor (hdc=0x66010689, color=0xa0a0a0) returned 0xa0a0a0 [0069.379] GetNearestColor (hdc=0x66010689, color=0x0) returned 0x0 [0069.379] GetNearestColor (hdc=0x66010689, color=0xffffff) returned 0xffffff [0069.379] GetNearestColor (hdc=0x66010689, color=0xe5e5e5) returned 0xe5e5e5 [0069.379] GetNearestColor (hdc=0x66010689, color=0xd8d8d8) returned 0xd8d8d8 [0069.379] GetNearestColor (hdc=0x66010689, color=0x0) returned 0x0 [0069.379] RestoreDC (hdc=0x66010689, nSavedDC=-1) returned 1 [0069.379] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x66010689) returned 0x0 [0069.379] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.379] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExn*\x02", lpUsedDefaultChar=0x0) returned 17 [0069.379] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.381] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a7460) returned 0x0 [0069.381] GdipSetStringFormatAlign (format=0x1beb78b0, align=0x1) returned 0x0 [0069.381] GdipSetStringFormatLineAlign (format=0x1beb78b0, align=0x1) returned 0x0 [0069.381] GdipSetStringFormatHotkeyPrefix (format=0x1beb78b0, hotkeyPrefix=1) returned 0x0 [0069.381] GdipGetStringFormatFlags (format=0x1beb78b0, flags=0x14e378) returned 0x0 [0069.381] GdipGetStringFormatTrimming (format=0x1beb78b0, trimming=0x14e378) returned 0x0 [0069.381] GdipGetStringFormatHotkeyPrefix (format=0x1beb78b0, hotkeyPrefix=0x14e378) returned 0x0 [0069.381] GdipGetFontSize (font=0x1beb78b0, size=0x14e378) returned 0x0 [0069.382] GdipGetFontStyle (font=0x1beb78b0, style=0x14e378) returned 0x0 [0069.382] GdipDeleteStringFormat (format=0x1beb78b0) returned 0x0 [0069.382] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.382] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0069.382] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.382] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0069.382] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a7590) returned 0x0 [0069.382] GdipSetStringFormatFlags (format=0x1beb7b50, flags=0) returned 0x0 [0069.382] GdipSetStringFormatTrimming (format=0x1beb7b50, trimming=0x1) returned 0x0 [0069.383] GdipSetStringFormatHotkeyPrefix (format=0x1beb7b50, hotkeyPrefix=1) returned 0x0 [0069.383] GdipSetStringFormatAlign (format=0x1beb7b50, align=0x1) returned 0x0 [0069.383] GdipSetStringFormatLineAlign (format=0x1beb7b50, align=0x1) returned 0x0 [0069.383] GdipMeasureString (graphics=0x1beb8070, string="9", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7b50, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0069.383] GdipDeleteStringFormat (format=0x1beb7b50) returned 0x0 [0069.383] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0069.383] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.383] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0069.383] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.383] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0069.383] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.383] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0069.384] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0069.384] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0069.384] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d110 [0069.384] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d110) returned 0x0 [0069.384] LocalFree (hMem=0x1d92d110) returned 0x0 [0069.384] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0069.384] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d710) returned 0x0 [0069.385] LocalFree (hMem=0x1d92d710) returned 0x0 [0069.385] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0069.385] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0069.385] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0069.385] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0069.385] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.385] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0069.385] GetCurrentObject (hdc=0x66010689, type=0x1) returned 0x1b00017 [0069.385] GetCurrentObject (hdc=0x66010689, type=0x2) returned 0x1900010 [0069.385] GetCurrentObject (hdc=0x66010689, type=0x7) returned 0x160506a9 [0069.385] GetCurrentObject (hdc=0x66010689, type=0x6) returned 0x18a0048 [0069.386] SaveDC (hdc=0x66010689) returned 1 [0069.386] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9f04095c [0069.386] GetClipRgn (hdc=0x66010689, hrgn=0xffffffff9f04095c) returned 0 [0069.386] SelectClipRgn (hdc=0x66010689, hrgn=0x600406c7) returned 2 [0069.386] DeleteObject (ho=0xffffffff9f04095c) returned 1 [0069.386] DeleteObject (ho=0x600406c7) returned 1 [0069.386] OffsetViewportOrgEx (in: hdc=0x66010689, x=0, y=0, lppt=0x22a7950 | out: lppt=0x22a7950) returned 1 [0069.386] GetNearestColor (hdc=0x66010689, color=0xf0f0f0) returned 0xf0f0f0 [0069.386] CreateSolidBrush (color=0xf0f0f0) returned 0x47100559 [0069.386] FillRect (hDC=0x66010689, lprc=0x14e1c8, hbr=0x47100559) returned 1 [0069.386] DeleteObject (ho=0x47100559) returned 1 [0069.386] RestoreDC (hdc=0x66010689, nSavedDC=-1) returned 1 [0069.386] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x66010689) returned 0x0 [0069.386] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.387] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0069.387] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.387] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a7a50) returned 0x0 [0069.387] GdipSetStringFormatAlign (format=0x1beb7a70, align=0x1) returned 0x0 [0069.387] GdipSetStringFormatLineAlign (format=0x1beb7a70, align=0x1) returned 0x0 [0069.387] GdipSetStringFormatHotkeyPrefix (format=0x1beb7a70, hotkeyPrefix=1) returned 0x0 [0069.387] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0069.387] GdipDrawString (graphics=0x1beb67f0, string="9", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7a70, brush=0x1beb15e0) returned 0x0 [0069.387] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0069.387] GdipDeleteStringFormat (format=0x1beb7a70) returned 0x0 [0069.387] GetFocus () returned 0x0 [0069.388] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.388] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExk*\x02", lpUsedDefaultChar=0x0) returned 17 [0069.388] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.388] GdipCreateRegion (region=0x14e030) returned 0x0 [0069.388] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.388] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0069.388] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0069.388] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0069.388] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d4d0 [0069.388] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d4d0) returned 0x0 [0069.389] LocalFree (hMem=0x1d92d4d0) returned 0x0 [0069.389] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0069.389] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d710) returned 0x0 [0069.390] LocalFree (hMem=0x1d92d710) returned 0x0 [0069.390] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0069.390] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0069.390] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0069.390] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0069.390] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.390] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0069.390] GetCurrentObject (hdc=0x66010689, type=0x1) returned 0x1b00017 [0069.390] GetCurrentObject (hdc=0x66010689, type=0x2) returned 0x1900010 [0069.390] GetCurrentObject (hdc=0x66010689, type=0x7) returned 0x160506a9 [0069.390] GetCurrentObject (hdc=0x66010689, type=0x6) returned 0x18a0048 [0069.390] SaveDC (hdc=0x66010689) returned 1 [0069.390] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x610406c7 [0069.390] GetClipRgn (hdc=0x66010689, hrgn=0x610406c7) returned 0 [0069.390] SelectClipRgn (hdc=0x66010689, hrgn=0xffffffffa004095c) returned 2 [0069.390] DeleteObject (ho=0x610406c7) returned 1 [0069.390] DeleteObject (ho=0xffffffffa004095c) returned 1 [0069.390] OffsetViewportOrgEx (in: hdc=0x66010689, x=0, y=0, lppt=0x22a7e38 | out: lppt=0x22a7e38) returned 1 [0069.390] GetROP2 (hdc=0x66010689) returned 13 [0069.391] GetBkMode (hdc=0x66010689) returned 2 [0069.391] SetBkMode (hdc=0x66010689, mode=1) returned 2 [0069.391] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x33300983 [0069.391] SelectObject (hdc=0x66010689, h=0x33300983) returned 0x1b00017 [0069.391] MoveToEx (in: hdc=0x66010689, x=25, y=0, lppt=0x22a7ea0 | out: lppt=0x22a7ea0) returned 1 [0069.391] LineTo (hdc=0x66010689, x=0, y=0) returned 1 [0069.391] SetBkMode (hdc=0x66010689, mode=2) returned 1 [0069.391] MoveToEx (in: hdc=0x66010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.391] GetROP2 (hdc=0x66010689) returned 13 [0069.391] GetBkMode (hdc=0x66010689) returned 2 [0069.391] SetBkMode (hdc=0x66010689, mode=1) returned 2 [0069.391] SelectObject (hdc=0x66010689, h=0x33300983) returned 0x33300983 [0069.391] MoveToEx (in: hdc=0x66010689, x=0, y=0, lppt=0x22a7eb8 | out: lppt=0x22a7eb8) returned 1 [0069.391] LineTo (hdc=0x66010689, x=0, y=22) returned 1 [0069.391] SetBkMode (hdc=0x66010689, mode=2) returned 1 [0069.391] MoveToEx (in: hdc=0x66010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.391] SelectObject (hdc=0x66010689, h=0x1b00017) returned 0x33300983 [0069.391] DeleteObject (ho=0x33300983) returned 1 [0069.391] GetROP2 (hdc=0x66010689) returned 13 [0069.391] GetBkMode (hdc=0x66010689) returned 2 [0069.392] SetBkMode (hdc=0x66010689, mode=1) returned 2 [0069.392] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x263006cb [0069.392] SelectObject (hdc=0x66010689, h=0x263006cb) returned 0x1b00017 [0069.392] MoveToEx (in: hdc=0x66010689, x=0, y=22, lppt=0x22a7f20 | out: lppt=0x22a7f20) returned 1 [0069.392] LineTo (hdc=0x66010689, x=25, y=22) returned 1 [0069.392] SetBkMode (hdc=0x66010689, mode=2) returned 1 [0069.392] MoveToEx (in: hdc=0x66010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.392] GetROP2 (hdc=0x66010689) returned 13 [0069.392] GetBkMode (hdc=0x66010689) returned 2 [0069.392] SetBkMode (hdc=0x66010689, mode=1) returned 2 [0069.392] SelectObject (hdc=0x66010689, h=0x263006cb) returned 0x263006cb [0069.392] MoveToEx (in: hdc=0x66010689, x=25, y=22, lppt=0x22a7f38 | out: lppt=0x22a7f38) returned 1 [0069.392] LineTo (hdc=0x66010689, x=25, y=-1) returned 1 [0069.392] SetBkMode (hdc=0x66010689, mode=2) returned 1 [0069.392] MoveToEx (in: hdc=0x66010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.392] SelectObject (hdc=0x66010689, h=0x1b00017) returned 0x263006cb [0069.392] DeleteObject (ho=0x263006cb) returned 1 [0069.392] GetROP2 (hdc=0x66010689) returned 13 [0069.392] GetBkMode (hdc=0x66010689) returned 2 [0069.392] SetBkMode (hdc=0x66010689, mode=1) returned 2 [0069.393] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x34300983 [0069.393] SelectObject (hdc=0x66010689, h=0x34300983) returned 0x1b00017 [0069.393] MoveToEx (in: hdc=0x66010689, x=24, y=1, lppt=0x22a7fa0 | out: lppt=0x22a7fa0) returned 1 [0069.393] LineTo (hdc=0x66010689, x=1, y=1) returned 1 [0069.393] SetBkMode (hdc=0x66010689, mode=2) returned 1 [0069.393] MoveToEx (in: hdc=0x66010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.393] GetROP2 (hdc=0x66010689) returned 13 [0069.393] GetBkMode (hdc=0x66010689) returned 2 [0069.393] SetBkMode (hdc=0x66010689, mode=1) returned 2 [0069.393] SelectObject (hdc=0x66010689, h=0x34300983) returned 0x34300983 [0069.393] MoveToEx (in: hdc=0x66010689, x=1, y=1, lppt=0x22a7fb8 | out: lppt=0x22a7fb8) returned 1 [0069.393] LineTo (hdc=0x66010689, x=1, y=21) returned 1 [0069.393] SetBkMode (hdc=0x66010689, mode=2) returned 1 [0069.393] MoveToEx (in: hdc=0x66010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.393] SelectObject (hdc=0x66010689, h=0x1b00017) returned 0x34300983 [0069.393] DeleteObject (ho=0x34300983) returned 1 [0069.393] GetROP2 (hdc=0x66010689) returned 13 [0069.393] GetBkMode (hdc=0x66010689) returned 2 [0069.394] SetBkMode (hdc=0x66010689, mode=1) returned 2 [0069.394] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x273006cb [0069.394] SelectObject (hdc=0x66010689, h=0x273006cb) returned 0x1b00017 [0069.394] MoveToEx (in: hdc=0x66010689, x=1, y=21, lppt=0x22a8020 | out: lppt=0x22a8020) returned 1 [0069.394] LineTo (hdc=0x66010689, x=24, y=21) returned 1 [0069.394] SetBkMode (hdc=0x66010689, mode=2) returned 1 [0069.394] MoveToEx (in: hdc=0x66010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.394] GetROP2 (hdc=0x66010689) returned 13 [0069.394] GetBkMode (hdc=0x66010689) returned 2 [0069.394] SetBkMode (hdc=0x66010689, mode=1) returned 2 [0069.394] SelectObject (hdc=0x66010689, h=0x273006cb) returned 0x273006cb [0069.394] MoveToEx (in: hdc=0x66010689, x=24, y=21, lppt=0x22a8038 | out: lppt=0x22a8038) returned 1 [0069.394] LineTo (hdc=0x66010689, x=24, y=0) returned 1 [0069.394] SetBkMode (hdc=0x66010689, mode=2) returned 1 [0069.394] MoveToEx (in: hdc=0x66010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.394] SelectObject (hdc=0x66010689, h=0x1b00017) returned 0x273006cb [0069.394] DeleteObject (ho=0x273006cb) returned 1 [0069.394] RestoreDC (hdc=0x66010689, nSavedDC=-1) returned 1 [0069.394] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x66010689) returned 0x0 [0069.394] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0069.394] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x66010689, x1=0, y1=0, rop=0xcc0020) returned 1 [0069.394] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x66010689) returned 0x0 [0069.394] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0069.395] SelectObject (hdc=0x66010689, h=0x185000f) returned 0x160506a9 [0069.395] DeleteDC (hdc=0x66010689) returned 1 [0069.395] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0069.395] EndPaint (hWnd=0x3031c, lpPaint=0x14e548) returned 1 [0069.395] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.395] IsWindowUnicode (hWnd=0x3031e) returned 1 [0069.395] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.396] TranslateMessage (lpMsg=0x14ef10) returned 0 [0069.396] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0069.396] BeginPaint (in: hWnd=0x3031e, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0069.396] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.396] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0069.396] GetStockObject (i=5) returned 0x1900015 [0069.396] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0069.396] CreateCompatibleDC (hdc=0x220106d6) returned 0x650109c0 [0069.396] SelectObject (hdc=0x650109c0, h=0x160506a9) returned 0x185000f [0069.396] GdipCreateFromHDC (hdc=0x650109c0, graphics=0x14e528) returned 0x0 [0069.396] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0069.396] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0069.396] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0069.397] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0069.397] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0069.397] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d810 [0069.397] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d810) returned 0x0 [0069.397] LocalFree (hMem=0x1d92d810) returned 0x0 [0069.397] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0069.397] GdipCreateRegion (region=0x14e550) returned 0x0 [0069.397] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.397] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0069.397] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0069.398] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd4b0dbd) returned 0x0 [0069.398] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.398] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0069.398] GetCurrentObject (hdc=0x650109c0, type=0x1) returned 0x1b00017 [0069.398] GetCurrentObject (hdc=0x650109c0, type=0x2) returned 0x1900010 [0069.398] GetCurrentObject (hdc=0x650109c0, type=0x7) returned 0x160506a9 [0069.398] GetCurrentObject (hdc=0x650109c0, type=0x6) returned 0x18a0048 [0069.398] SaveDC (hdc=0x650109c0) returned 1 [0069.398] GetNearestColor (hdc=0x650109c0, color=0xf0f0f0) returned 0xf0f0f0 [0069.398] GetNearestColor (hdc=0x650109c0, color=0xa0a0a0) returned 0xa0a0a0 [0069.398] GetNearestColor (hdc=0x650109c0, color=0x696969) returned 0x696969 [0069.398] GetNearestColor (hdc=0x650109c0, color=0xa0a0a0) returned 0xa0a0a0 [0069.398] GetNearestColor (hdc=0x650109c0, color=0x0) returned 0x0 [0069.398] GetNearestColor (hdc=0x650109c0, color=0xffffff) returned 0xffffff [0069.398] GetNearestColor (hdc=0x650109c0, color=0xe5e5e5) returned 0xe5e5e5 [0069.398] GetNearestColor (hdc=0x650109c0, color=0xd8d8d8) returned 0xd8d8d8 [0069.398] GetNearestColor (hdc=0x650109c0, color=0x0) returned 0x0 [0069.398] RestoreDC (hdc=0x650109c0, nSavedDC=-1) returned 1 [0069.399] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x650109c0) returned 0x0 [0069.399] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.399] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x83*\x02", lpUsedDefaultChar=0x0) returned 17 [0069.399] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.399] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a8958) returned 0x0 [0069.399] GdipSetStringFormatAlign (format=0x1beb7b50, align=0x1) returned 0x0 [0069.399] GdipSetStringFormatLineAlign (format=0x1beb7b50, align=0x1) returned 0x0 [0069.399] GdipSetStringFormatHotkeyPrefix (format=0x1beb7b50, hotkeyPrefix=1) returned 0x0 [0069.399] GdipGetStringFormatFlags (format=0x1beb7b50, flags=0x14e378) returned 0x0 [0069.399] GdipGetStringFormatTrimming (format=0x1beb7b50, trimming=0x14e378) returned 0x0 [0069.399] GdipGetStringFormatHotkeyPrefix (format=0x1beb7b50, hotkeyPrefix=0x14e378) returned 0x0 [0069.399] GdipGetFontSize (font=0x1beb7b50, size=0x14e378) returned 0x0 [0069.399] GdipGetFontStyle (font=0x1beb7b50, style=0x14e378) returned 0x0 [0069.399] GdipDeleteStringFormat (format=0x1beb7b50) returned 0x0 [0069.400] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.400] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0069.400] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.400] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0069.400] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a8a88) returned 0x0 [0069.400] GdipSetStringFormatFlags (format=0x1beb7990, flags=0) returned 0x0 [0069.400] GdipSetStringFormatTrimming (format=0x1beb7990, trimming=0x1) returned 0x0 [0069.400] GdipSetStringFormatHotkeyPrefix (format=0x1beb7990, hotkeyPrefix=1) returned 0x0 [0069.400] GdipSetStringFormatAlign (format=0x1beb7990, align=0x1) returned 0x0 [0069.400] GdipSetStringFormatLineAlign (format=0x1beb7990, align=0x1) returned 0x0 [0069.400] GdipMeasureString (graphics=0x1beb8070, string="3", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7990, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0069.400] GdipDeleteStringFormat (format=0x1beb7990) returned 0x0 [0069.400] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0069.401] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.401] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0069.401] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.401] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0069.401] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.401] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0069.401] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0069.401] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0069.401] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92ccd0 [0069.401] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92ccd0) returned 0x0 [0069.402] LocalFree (hMem=0x1d92ccd0) returned 0x0 [0069.402] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf90 [0069.402] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cf90) returned 0x0 [0069.402] LocalFree (hMem=0x1d92cf90) returned 0x0 [0069.402] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0069.402] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0069.402] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0069.402] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0069.402] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.402] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0069.403] GetCurrentObject (hdc=0x650109c0, type=0x1) returned 0x1b00017 [0069.403] GetCurrentObject (hdc=0x650109c0, type=0x2) returned 0x1900010 [0069.403] GetCurrentObject (hdc=0x650109c0, type=0x7) returned 0x160506a9 [0069.403] GetCurrentObject (hdc=0x650109c0, type=0x6) returned 0x18a0048 [0069.403] SaveDC (hdc=0x650109c0) returned 1 [0069.403] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa104095c [0069.403] GetClipRgn (hdc=0x650109c0, hrgn=0xffffffffa104095c) returned 0 [0069.403] SelectClipRgn (hdc=0x650109c0, hrgn=0x620406c7) returned 2 [0069.403] DeleteObject (ho=0xffffffffa104095c) returned 1 [0069.403] DeleteObject (ho=0x620406c7) returned 1 [0069.403] OffsetViewportOrgEx (in: hdc=0x650109c0, x=0, y=0, lppt=0x22a8e48 | out: lppt=0x22a8e48) returned 1 [0069.403] GetNearestColor (hdc=0x650109c0, color=0xf0f0f0) returned 0xf0f0f0 [0069.404] CreateSolidBrush (color=0xf0f0f0) returned 0x48100559 [0069.404] FillRect (hDC=0x650109c0, lprc=0x14e1c8, hbr=0x48100559) returned 1 [0069.404] DeleteObject (ho=0x48100559) returned 1 [0069.404] RestoreDC (hdc=0x650109c0, nSavedDC=-1) returned 1 [0069.404] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x650109c0) returned 0x0 [0069.404] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.404] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0069.404] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.404] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a8f48) returned 0x0 [0069.404] GdipSetStringFormatAlign (format=0x1beb78b0, align=0x1) returned 0x0 [0069.404] GdipSetStringFormatLineAlign (format=0x1beb78b0, align=0x1) returned 0x0 [0069.404] GdipSetStringFormatHotkeyPrefix (format=0x1beb78b0, hotkeyPrefix=1) returned 0x0 [0069.404] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0069.404] GdipDrawString (graphics=0x1beb67f0, string="3", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb78b0, brush=0x1beb15e0) returned 0x0 [0069.405] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0069.405] GdipDeleteStringFormat (format=0x1beb78b0) returned 0x0 [0069.405] GetFocus () returned 0x0 [0069.405] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.405] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x80*\x02", lpUsedDefaultChar=0x0) returned 17 [0069.405] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.405] GdipCreateRegion (region=0x14e030) returned 0x0 [0069.405] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.405] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0069.405] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0069.405] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0069.405] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0069.406] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d650) returned 0x0 [0069.406] LocalFree (hMem=0x1d92d650) returned 0x0 [0069.406] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0069.406] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0069.407] LocalFree (hMem=0x1d92cf10) returned 0x0 [0069.407] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0069.407] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0069.407] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0069.407] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0069.407] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.407] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0069.407] GetCurrentObject (hdc=0x650109c0, type=0x1) returned 0x1b00017 [0069.407] GetCurrentObject (hdc=0x650109c0, type=0x2) returned 0x1900010 [0069.407] GetCurrentObject (hdc=0x650109c0, type=0x7) returned 0x160506a9 [0069.407] GetCurrentObject (hdc=0x650109c0, type=0x6) returned 0x18a0048 [0069.407] SaveDC (hdc=0x650109c0) returned 1 [0069.407] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x630406c7 [0069.407] GetClipRgn (hdc=0x650109c0, hrgn=0x630406c7) returned 0 [0069.407] SelectClipRgn (hdc=0x650109c0, hrgn=0xffffffffa204095c) returned 2 [0069.407] DeleteObject (ho=0x630406c7) returned 1 [0069.407] DeleteObject (ho=0xffffffffa204095c) returned 1 [0069.407] OffsetViewportOrgEx (in: hdc=0x650109c0, x=0, y=0, lppt=0x22a9330 | out: lppt=0x22a9330) returned 1 [0069.407] GetROP2 (hdc=0x650109c0) returned 13 [0069.408] GetBkMode (hdc=0x650109c0) returned 2 [0069.408] SetBkMode (hdc=0x650109c0, mode=1) returned 2 [0069.408] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x283006cb [0069.408] SelectObject (hdc=0x650109c0, h=0x283006cb) returned 0x1b00017 [0069.408] MoveToEx (in: hdc=0x650109c0, x=25, y=0, lppt=0x22a9398 | out: lppt=0x22a9398) returned 1 [0069.408] LineTo (hdc=0x650109c0, x=0, y=0) returned 1 [0069.408] SetBkMode (hdc=0x650109c0, mode=2) returned 1 [0069.408] MoveToEx (in: hdc=0x650109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.408] GetROP2 (hdc=0x650109c0) returned 13 [0069.408] GetBkMode (hdc=0x650109c0) returned 2 [0069.408] SetBkMode (hdc=0x650109c0, mode=1) returned 2 [0069.408] SelectObject (hdc=0x650109c0, h=0x283006cb) returned 0x283006cb [0069.408] MoveToEx (in: hdc=0x650109c0, x=0, y=0, lppt=0x22a93b0 | out: lppt=0x22a93b0) returned 1 [0069.408] LineTo (hdc=0x650109c0, x=0, y=22) returned 1 [0069.408] SetBkMode (hdc=0x650109c0, mode=2) returned 1 [0069.408] MoveToEx (in: hdc=0x650109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.408] SelectObject (hdc=0x650109c0, h=0x1b00017) returned 0x283006cb [0069.408] DeleteObject (ho=0x283006cb) returned 1 [0069.408] GetROP2 (hdc=0x650109c0) returned 13 [0069.408] GetBkMode (hdc=0x650109c0) returned 2 [0069.408] SetBkMode (hdc=0x650109c0, mode=1) returned 2 [0069.408] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x35300983 [0069.408] SelectObject (hdc=0x650109c0, h=0x35300983) returned 0x1b00017 [0069.409] MoveToEx (in: hdc=0x650109c0, x=0, y=22, lppt=0x22a9418 | out: lppt=0x22a9418) returned 1 [0069.409] LineTo (hdc=0x650109c0, x=25, y=22) returned 1 [0069.409] SetBkMode (hdc=0x650109c0, mode=2) returned 1 [0069.409] MoveToEx (in: hdc=0x650109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.409] GetROP2 (hdc=0x650109c0) returned 13 [0069.409] GetBkMode (hdc=0x650109c0) returned 2 [0069.409] SetBkMode (hdc=0x650109c0, mode=1) returned 2 [0069.409] SelectObject (hdc=0x650109c0, h=0x35300983) returned 0x35300983 [0069.409] MoveToEx (in: hdc=0x650109c0, x=25, y=22, lppt=0x22a9430 | out: lppt=0x22a9430) returned 1 [0069.409] LineTo (hdc=0x650109c0, x=25, y=-1) returned 1 [0069.409] SetBkMode (hdc=0x650109c0, mode=2) returned 1 [0069.409] MoveToEx (in: hdc=0x650109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.409] SelectObject (hdc=0x650109c0, h=0x1b00017) returned 0x35300983 [0069.409] DeleteObject (ho=0x35300983) returned 1 [0069.409] GetROP2 (hdc=0x650109c0) returned 13 [0069.409] GetBkMode (hdc=0x650109c0) returned 2 [0069.409] SetBkMode (hdc=0x650109c0, mode=1) returned 2 [0069.409] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x293006cb [0069.409] SelectObject (hdc=0x650109c0, h=0x293006cb) returned 0x1b00017 [0069.409] MoveToEx (in: hdc=0x650109c0, x=24, y=1, lppt=0x22a9498 | out: lppt=0x22a9498) returned 1 [0069.409] LineTo (hdc=0x650109c0, x=1, y=1) returned 1 [0069.409] SetBkMode (hdc=0x650109c0, mode=2) returned 1 [0069.409] MoveToEx (in: hdc=0x650109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.410] GetROP2 (hdc=0x650109c0) returned 13 [0069.410] GetBkMode (hdc=0x650109c0) returned 2 [0069.410] SetBkMode (hdc=0x650109c0, mode=1) returned 2 [0069.410] SelectObject (hdc=0x650109c0, h=0x293006cb) returned 0x293006cb [0069.410] MoveToEx (in: hdc=0x650109c0, x=1, y=1, lppt=0x22a94b0 | out: lppt=0x22a94b0) returned 1 [0069.410] LineTo (hdc=0x650109c0, x=1, y=21) returned 1 [0069.410] SetBkMode (hdc=0x650109c0, mode=2) returned 1 [0069.410] MoveToEx (in: hdc=0x650109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.410] SelectObject (hdc=0x650109c0, h=0x1b00017) returned 0x293006cb [0069.410] DeleteObject (ho=0x293006cb) returned 1 [0069.410] GetROP2 (hdc=0x650109c0) returned 13 [0069.410] GetBkMode (hdc=0x650109c0) returned 2 [0069.410] SetBkMode (hdc=0x650109c0, mode=1) returned 2 [0069.410] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x36300983 [0069.410] SelectObject (hdc=0x650109c0, h=0x36300983) returned 0x1b00017 [0069.410] MoveToEx (in: hdc=0x650109c0, x=1, y=21, lppt=0x22a9518 | out: lppt=0x22a9518) returned 1 [0069.410] LineTo (hdc=0x650109c0, x=24, y=21) returned 1 [0069.410] SetBkMode (hdc=0x650109c0, mode=2) returned 1 [0069.410] MoveToEx (in: hdc=0x650109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.410] GetROP2 (hdc=0x650109c0) returned 13 [0069.410] GetBkMode (hdc=0x650109c0) returned 2 [0069.410] SetBkMode (hdc=0x650109c0, mode=1) returned 2 [0069.410] SelectObject (hdc=0x650109c0, h=0x36300983) returned 0x36300983 [0069.411] MoveToEx (in: hdc=0x650109c0, x=24, y=21, lppt=0x22a9530 | out: lppt=0x22a9530) returned 1 [0069.551] LineTo (hdc=0x650109c0, x=24, y=0) returned 1 [0069.551] SetBkMode (hdc=0x650109c0, mode=2) returned 1 [0069.552] MoveToEx (in: hdc=0x650109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.552] SelectObject (hdc=0x650109c0, h=0x1b00017) returned 0x36300983 [0069.552] DeleteObject (ho=0x36300983) returned 1 [0069.552] RestoreDC (hdc=0x650109c0, nSavedDC=-1) returned 1 [0069.552] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x650109c0) returned 0x0 [0069.552] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0069.552] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x650109c0, x1=0, y1=0, rop=0xcc0020) returned 1 [0069.552] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x650109c0) returned 0x0 [0069.552] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0069.552] SelectObject (hdc=0x650109c0, h=0x185000f) returned 0x160506a9 [0069.552] DeleteDC (hdc=0x650109c0) returned 1 [0069.552] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0069.552] EndPaint (hWnd=0x3031e, lpPaint=0x14e548) returned 1 [0069.552] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.553] IsWindowUnicode (hWnd=0x30308) returned 1 [0069.553] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.553] TranslateMessage (lpMsg=0x14ef10) returned 0 [0069.553] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0069.553] BeginPaint (in: hWnd=0x30308, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0069.553] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.553] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0069.553] GetStockObject (i=5) returned 0x1900015 [0069.553] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0069.553] CreateCompatibleDC (hdc=0x1b0107ae) returned 0xffffffff810106b7 [0069.553] SelectObject (hdc=0xffffffff810106b7, h=0x160506a9) returned 0x185000f [0069.554] GdipCreateFromHDC (hdc=0xffffffff810106b7, graphics=0x14e528) returned 0x0 [0069.554] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0069.554] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0069.554] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0069.554] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0069.554] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0069.554] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d090 [0069.554] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d090) returned 0x0 [0069.555] LocalFree (hMem=0x1d92d090) returned 0x0 [0069.555] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0069.555] GdipCreateRegion (region=0x14e550) returned 0x0 [0069.555] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.555] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0069.555] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0069.555] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd480dbd) returned 0x0 [0069.555] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.555] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0069.555] GetCurrentObject (hdc=0xffffffff810106b7, type=0x1) returned 0x1b00017 [0069.555] GetCurrentObject (hdc=0xffffffff810106b7, type=0x2) returned 0x1900010 [0069.555] GetCurrentObject (hdc=0xffffffff810106b7, type=0x7) returned 0x160506a9 [0069.555] GetCurrentObject (hdc=0xffffffff810106b7, type=0x6) returned 0x18a0048 [0069.555] SaveDC (hdc=0xffffffff810106b7) returned 1 [0069.555] GetNearestColor (hdc=0xffffffff810106b7, color=0xf0f0f0) returned 0xf0f0f0 [0069.555] GetNearestColor (hdc=0xffffffff810106b7, color=0xa0a0a0) returned 0xa0a0a0 [0069.556] GetNearestColor (hdc=0xffffffff810106b7, color=0x696969) returned 0x696969 [0069.556] GetNearestColor (hdc=0xffffffff810106b7, color=0xa0a0a0) returned 0xa0a0a0 [0069.556] GetNearestColor (hdc=0xffffffff810106b7, color=0x0) returned 0x0 [0069.556] GetNearestColor (hdc=0xffffffff810106b7, color=0xffffff) returned 0xffffff [0069.556] GetNearestColor (hdc=0xffffffff810106b7, color=0xe5e5e5) returned 0xe5e5e5 [0069.556] GetNearestColor (hdc=0xffffffff810106b7, color=0xd8d8d8) returned 0xd8d8d8 [0069.556] GetNearestColor (hdc=0xffffffff810106b7, color=0x0) returned 0x0 [0069.556] RestoreDC (hdc=0xffffffff810106b7, nSavedDC=-1) returned 1 [0069.556] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff810106b7) returned 0x0 [0069.556] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.556] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98*\x02", lpUsedDefaultChar=0x0) returned 17 [0069.557] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.557] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a9e50) returned 0x0 [0069.557] GdipSetStringFormatAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0069.557] GdipSetStringFormatLineAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0069.557] GdipSetStringFormatHotkeyPrefix (format=0x1beb7d10, hotkeyPrefix=1) returned 0x0 [0069.557] GdipGetStringFormatFlags (format=0x1beb7d10, flags=0x14e378) returned 0x0 [0069.557] GdipGetStringFormatTrimming (format=0x1beb7d10, trimming=0x14e378) returned 0x0 [0069.557] GdipGetStringFormatHotkeyPrefix (format=0x1beb7d10, hotkeyPrefix=0x14e378) returned 0x0 [0069.557] GdipGetFontSize (font=0x1beb7d10, size=0x14e378) returned 0x0 [0069.557] GdipGetFontStyle (font=0x1beb7d10, style=0x14e378) returned 0x0 [0069.557] GdipDeleteStringFormat (format=0x1beb7d10) returned 0x0 [0069.557] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.557] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0069.557] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.557] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0069.558] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22a9f80) returned 0x0 [0069.558] GdipSetStringFormatFlags (format=0x1beb7990, flags=0) returned 0x0 [0069.558] GdipSetStringFormatTrimming (format=0x1beb7990, trimming=0x1) returned 0x0 [0069.558] GdipSetStringFormatHotkeyPrefix (format=0x1beb7990, hotkeyPrefix=1) returned 0x0 [0069.558] GdipSetStringFormatAlign (format=0x1beb7990, align=0x1) returned 0x0 [0069.558] GdipSetStringFormatLineAlign (format=0x1beb7990, align=0x1) returned 0x0 [0069.558] GdipMeasureString (graphics=0x1beb8070, string="5", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7990, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0069.558] GdipDeleteStringFormat (format=0x1beb7990) returned 0x0 [0069.558] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0069.558] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.558] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0069.559] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.559] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0069.559] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.559] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0069.559] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0069.559] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0069.559] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d950 [0069.559] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d950) returned 0x0 [0069.560] LocalFree (hMem=0x1d92d950) returned 0x0 [0069.560] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cd10 [0069.560] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cd10) returned 0x0 [0069.561] LocalFree (hMem=0x1d92cd10) returned 0x0 [0069.561] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0069.561] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0069.561] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0069.561] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0069.561] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.561] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0069.561] GetCurrentObject (hdc=0xffffffff810106b7, type=0x1) returned 0x1b00017 [0069.561] GetCurrentObject (hdc=0xffffffff810106b7, type=0x2) returned 0x1900010 [0069.561] GetCurrentObject (hdc=0xffffffff810106b7, type=0x7) returned 0x160506a9 [0069.561] GetCurrentObject (hdc=0xffffffff810106b7, type=0x6) returned 0x18a0048 [0069.561] SaveDC (hdc=0xffffffff810106b7) returned 1 [0069.561] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa304095c [0069.561] GetClipRgn (hdc=0xffffffff810106b7, hrgn=0xffffffffa304095c) returned 0 [0069.561] SelectClipRgn (hdc=0xffffffff810106b7, hrgn=0x640406c7) returned 2 [0069.561] DeleteObject (ho=0xffffffffa304095c) returned 1 [0069.561] DeleteObject (ho=0x640406c7) returned 1 [0069.561] OffsetViewportOrgEx (in: hdc=0xffffffff810106b7, x=0, y=0, lppt=0x22aa340 | out: lppt=0x22aa340) returned 1 [0069.561] GetNearestColor (hdc=0xffffffff810106b7, color=0xf0f0f0) returned 0xf0f0f0 [0069.561] CreateSolidBrush (color=0xf0f0f0) returned 0x49100559 [0069.562] FillRect (hDC=0xffffffff810106b7, lprc=0x14e1c8, hbr=0x49100559) returned 1 [0069.562] DeleteObject (ho=0x49100559) returned 1 [0069.562] RestoreDC (hdc=0xffffffff810106b7, nSavedDC=-1) returned 1 [0069.562] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff810106b7) returned 0x0 [0069.562] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0069.562] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.562] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22aa440) returned 0x0 [0069.562] GdipSetStringFormatAlign (format=0x1beb7ed0, align=0x1) returned 0x0 [0069.562] GdipSetStringFormatLineAlign (format=0x1beb7ed0, align=0x1) returned 0x0 [0069.562] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ed0, hotkeyPrefix=1) returned 0x0 [0069.562] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0069.562] GdipDrawString (graphics=0x1beb67f0, string="5", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7ed0, brush=0x1beb15e0) returned 0x0 [0069.563] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0069.563] GdipDeleteStringFormat (format=0x1beb7ed0) returned 0x0 [0069.563] GetFocus () returned 0x0 [0069.563] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x95*\x02", lpUsedDefaultChar=0x0) returned 17 [0069.563] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.563] GdipCreateRegion (region=0x14e030) returned 0x0 [0069.563] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.563] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0069.563] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0069.563] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0069.563] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0069.563] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cf10) returned 0x0 [0069.564] LocalFree (hMem=0x1d92cf10) returned 0x0 [0069.564] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92ccd0 [0069.564] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92ccd0) returned 0x0 [0069.565] LocalFree (hMem=0x1d92ccd0) returned 0x0 [0069.565] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0069.565] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0069.565] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0069.565] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0069.565] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.565] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0069.565] GetCurrentObject (hdc=0xffffffff810106b7, type=0x1) returned 0x1b00017 [0069.565] GetCurrentObject (hdc=0xffffffff810106b7, type=0x2) returned 0x1900010 [0069.565] GetCurrentObject (hdc=0xffffffff810106b7, type=0x7) returned 0x160506a9 [0069.565] GetCurrentObject (hdc=0xffffffff810106b7, type=0x6) returned 0x18a0048 [0069.565] SaveDC (hdc=0xffffffff810106b7) returned 1 [0069.565] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x650406c7 [0069.565] GetClipRgn (hdc=0xffffffff810106b7, hrgn=0x650406c7) returned 0 [0069.565] SelectClipRgn (hdc=0xffffffff810106b7, hrgn=0xffffffffa404095c) returned 2 [0069.565] DeleteObject (ho=0x650406c7) returned 1 [0069.565] DeleteObject (ho=0xffffffffa404095c) returned 1 [0069.566] OffsetViewportOrgEx (in: hdc=0xffffffff810106b7, x=0, y=0, lppt=0x22aa828 | out: lppt=0x22aa828) returned 1 [0069.566] GetROP2 (hdc=0xffffffff810106b7) returned 13 [0069.566] GetBkMode (hdc=0xffffffff810106b7) returned 2 [0069.566] SetBkMode (hdc=0xffffffff810106b7, mode=1) returned 2 [0069.566] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x37300983 [0069.566] SelectObject (hdc=0xffffffff810106b7, h=0x37300983) returned 0x1b00017 [0069.566] MoveToEx (in: hdc=0xffffffff810106b7, x=25, y=0, lppt=0x22aa890 | out: lppt=0x22aa890) returned 1 [0069.566] LineTo (hdc=0xffffffff810106b7, x=0, y=0) returned 1 [0069.566] SetBkMode (hdc=0xffffffff810106b7, mode=2) returned 1 [0069.566] MoveToEx (in: hdc=0xffffffff810106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.566] GetROP2 (hdc=0xffffffff810106b7) returned 13 [0069.566] GetBkMode (hdc=0xffffffff810106b7) returned 2 [0069.566] SetBkMode (hdc=0xffffffff810106b7, mode=1) returned 2 [0069.566] SelectObject (hdc=0xffffffff810106b7, h=0x37300983) returned 0x37300983 [0069.566] MoveToEx (in: hdc=0xffffffff810106b7, x=0, y=0, lppt=0x22aa8a8 | out: lppt=0x22aa8a8) returned 1 [0069.566] LineTo (hdc=0xffffffff810106b7, x=0, y=22) returned 1 [0069.566] SetBkMode (hdc=0xffffffff810106b7, mode=2) returned 1 [0069.566] MoveToEx (in: hdc=0xffffffff810106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.566] SelectObject (hdc=0xffffffff810106b7, h=0x1b00017) returned 0x37300983 [0069.566] DeleteObject (ho=0x37300983) returned 1 [0069.566] GetROP2 (hdc=0xffffffff810106b7) returned 13 [0069.566] GetBkMode (hdc=0xffffffff810106b7) returned 2 [0069.566] SetBkMode (hdc=0xffffffff810106b7, mode=1) returned 2 [0069.566] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x2a3006cb [0069.567] SelectObject (hdc=0xffffffff810106b7, h=0x2a3006cb) returned 0x1b00017 [0069.567] MoveToEx (in: hdc=0xffffffff810106b7, x=0, y=22, lppt=0x22aa910 | out: lppt=0x22aa910) returned 1 [0069.567] LineTo (hdc=0xffffffff810106b7, x=25, y=22) returned 1 [0069.567] SetBkMode (hdc=0xffffffff810106b7, mode=2) returned 1 [0069.567] MoveToEx (in: hdc=0xffffffff810106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.567] GetROP2 (hdc=0xffffffff810106b7) returned 13 [0069.567] GetBkMode (hdc=0xffffffff810106b7) returned 2 [0069.567] SetBkMode (hdc=0xffffffff810106b7, mode=1) returned 2 [0069.567] SelectObject (hdc=0xffffffff810106b7, h=0x2a3006cb) returned 0x2a3006cb [0069.567] MoveToEx (in: hdc=0xffffffff810106b7, x=25, y=22, lppt=0x22aa928 | out: lppt=0x22aa928) returned 1 [0069.567] LineTo (hdc=0xffffffff810106b7, x=25, y=-1) returned 1 [0069.567] SetBkMode (hdc=0xffffffff810106b7, mode=2) returned 1 [0069.567] MoveToEx (in: hdc=0xffffffff810106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.567] SelectObject (hdc=0xffffffff810106b7, h=0x1b00017) returned 0x2a3006cb [0069.567] DeleteObject (ho=0x2a3006cb) returned 1 [0069.568] GetROP2 (hdc=0xffffffff810106b7) returned 13 [0069.568] GetBkMode (hdc=0xffffffff810106b7) returned 2 [0069.568] SetBkMode (hdc=0xffffffff810106b7, mode=1) returned 2 [0069.568] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x38300983 [0069.568] SelectObject (hdc=0xffffffff810106b7, h=0x38300983) returned 0x1b00017 [0069.568] MoveToEx (in: hdc=0xffffffff810106b7, x=24, y=1, lppt=0x22aa990 | out: lppt=0x22aa990) returned 1 [0069.568] LineTo (hdc=0xffffffff810106b7, x=1, y=1) returned 1 [0069.568] SetBkMode (hdc=0xffffffff810106b7, mode=2) returned 1 [0069.568] MoveToEx (in: hdc=0xffffffff810106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.568] GetROP2 (hdc=0xffffffff810106b7) returned 13 [0069.568] GetBkMode (hdc=0xffffffff810106b7) returned 2 [0069.568] SetBkMode (hdc=0xffffffff810106b7, mode=1) returned 2 [0069.568] SelectObject (hdc=0xffffffff810106b7, h=0x38300983) returned 0x38300983 [0069.568] MoveToEx (in: hdc=0xffffffff810106b7, x=1, y=1, lppt=0x22aa9a8 | out: lppt=0x22aa9a8) returned 1 [0069.568] LineTo (hdc=0xffffffff810106b7, x=1, y=21) returned 1 [0069.568] SetBkMode (hdc=0xffffffff810106b7, mode=2) returned 1 [0069.568] MoveToEx (in: hdc=0xffffffff810106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.568] SelectObject (hdc=0xffffffff810106b7, h=0x1b00017) returned 0x38300983 [0069.568] DeleteObject (ho=0x38300983) returned 1 [0069.568] GetROP2 (hdc=0xffffffff810106b7) returned 13 [0069.568] GetBkMode (hdc=0xffffffff810106b7) returned 2 [0069.568] SetBkMode (hdc=0xffffffff810106b7, mode=1) returned 2 [0069.568] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x2b3006cb [0069.568] SelectObject (hdc=0xffffffff810106b7, h=0x2b3006cb) returned 0x1b00017 [0069.568] MoveToEx (in: hdc=0xffffffff810106b7, x=1, y=21, lppt=0x22aaa10 | out: lppt=0x22aaa10) returned 1 [0069.569] LineTo (hdc=0xffffffff810106b7, x=24, y=21) returned 1 [0069.569] SetBkMode (hdc=0xffffffff810106b7, mode=2) returned 1 [0069.569] MoveToEx (in: hdc=0xffffffff810106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.569] GetROP2 (hdc=0xffffffff810106b7) returned 13 [0069.569] GetBkMode (hdc=0xffffffff810106b7) returned 2 [0069.569] SetBkMode (hdc=0xffffffff810106b7, mode=1) returned 2 [0069.569] SelectObject (hdc=0xffffffff810106b7, h=0x2b3006cb) returned 0x2b3006cb [0069.569] MoveToEx (in: hdc=0xffffffff810106b7, x=24, y=21, lppt=0x22aaa28 | out: lppt=0x22aaa28) returned 1 [0069.569] LineTo (hdc=0xffffffff810106b7, x=24, y=0) returned 1 [0069.569] SetBkMode (hdc=0xffffffff810106b7, mode=2) returned 1 [0069.569] MoveToEx (in: hdc=0xffffffff810106b7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.569] SelectObject (hdc=0xffffffff810106b7, h=0x1b00017) returned 0x2b3006cb [0069.569] DeleteObject (ho=0x2b3006cb) returned 1 [0069.569] RestoreDC (hdc=0xffffffff810106b7, nSavedDC=-1) returned 1 [0069.569] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff810106b7) returned 0x0 [0069.569] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0069.569] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0xffffffff810106b7, x1=0, y1=0, rop=0xcc0020) returned 1 [0069.569] GdipReleaseDC (graphics=0x1beb67f0, hdc=0xffffffff810106b7) returned 0x0 [0069.569] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0069.569] SelectObject (hdc=0xffffffff810106b7, h=0x185000f) returned 0x160506a9 [0069.570] DeleteDC (hdc=0xffffffff810106b7) returned 1 [0069.570] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0069.570] EndPaint (hWnd=0x30308, lpPaint=0x14e548) returned 1 [0069.570] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.570] IsWindowUnicode (hWnd=0x3030c) returned 1 [0069.570] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.570] TranslateMessage (lpMsg=0x14ef10) returned 0 [0069.570] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0069.570] BeginPaint (in: hWnd=0x3030c, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0069.570] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.570] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0069.570] GetStockObject (i=5) returned 0x1900015 [0069.571] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0069.571] CreateCompatibleDC (hdc=0xc0100ae) returned 0x6f010689 [0069.571] SelectObject (hdc=0x6f010689, h=0x160506a9) returned 0x185000f [0069.571] GdipCreateFromHDC (hdc=0x6f010689, graphics=0x14e528) returned 0x0 [0069.571] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0069.571] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0069.571] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0069.571] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0069.571] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0069.571] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0069.571] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0069.572] LocalFree (hMem=0x1d92cf10) returned 0x0 [0069.572] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0069.572] GdipCreateRegion (region=0x14e550) returned 0x0 [0069.572] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.572] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0069.572] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0069.572] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd450dbd) returned 0x0 [0069.572] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.572] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0069.572] GetCurrentObject (hdc=0x6f010689, type=0x1) returned 0x1b00017 [0069.572] GetCurrentObject (hdc=0x6f010689, type=0x2) returned 0x1900010 [0069.572] GetCurrentObject (hdc=0x6f010689, type=0x7) returned 0x160506a9 [0069.572] GetCurrentObject (hdc=0x6f010689, type=0x6) returned 0x18a0048 [0069.572] SaveDC (hdc=0x6f010689) returned 1 [0069.572] GetNearestColor (hdc=0x6f010689, color=0xf0f0f0) returned 0xf0f0f0 [0069.572] GetNearestColor (hdc=0x6f010689, color=0xa0a0a0) returned 0xa0a0a0 [0069.572] GetNearestColor (hdc=0x6f010689, color=0x696969) returned 0x696969 [0069.573] GetNearestColor (hdc=0x6f010689, color=0xa0a0a0) returned 0xa0a0a0 [0069.573] GetNearestColor (hdc=0x6f010689, color=0x0) returned 0x0 [0069.573] GetNearestColor (hdc=0x6f010689, color=0xffffff) returned 0xffffff [0069.573] GetNearestColor (hdc=0x6f010689, color=0xe5e5e5) returned 0xe5e5e5 [0069.573] GetNearestColor (hdc=0x6f010689, color=0xd8d8d8) returned 0xd8d8d8 [0069.573] GetNearestColor (hdc=0x6f010689, color=0x0) returned 0x0 [0069.573] RestoreDC (hdc=0x6f010689, nSavedDC=-1) returned 1 [0069.573] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6f010689) returned 0x0 [0069.573] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx­*\x02", lpUsedDefaultChar=0x0) returned 17 [0069.573] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.573] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22ab348) returned 0x0 [0069.573] GdipSetStringFormatAlign (format=0x1beb7d80, align=0x1) returned 0x0 [0069.574] GdipSetStringFormatLineAlign (format=0x1beb7d80, align=0x1) returned 0x0 [0069.574] GdipSetStringFormatHotkeyPrefix (format=0x1beb7d80, hotkeyPrefix=1) returned 0x0 [0069.574] GdipGetStringFormatFlags (format=0x1beb7d80, flags=0x14e378) returned 0x0 [0069.574] GdipGetStringFormatTrimming (format=0x1beb7d80, trimming=0x14e378) returned 0x0 [0069.574] GdipGetStringFormatHotkeyPrefix (format=0x1beb7d80, hotkeyPrefix=0x14e378) returned 0x0 [0069.574] GdipGetFontSize (font=0x1beb7d80, size=0x14e378) returned 0x0 [0069.574] GdipGetFontStyle (font=0x1beb7d80, style=0x14e378) returned 0x0 [0069.574] GdipDeleteStringFormat (format=0x1beb7d80) returned 0x0 [0069.574] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0069.574] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.574] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0069.574] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22ab478) returned 0x0 [0069.575] GdipSetStringFormatFlags (format=0x1beb7d10, flags=0) returned 0x0 [0069.575] GdipSetStringFormatTrimming (format=0x1beb7d10, trimming=0x1) returned 0x0 [0069.575] GdipSetStringFormatHotkeyPrefix (format=0x1beb7d10, hotkeyPrefix=1) returned 0x0 [0069.575] GdipSetStringFormatAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0069.575] GdipSetStringFormatLineAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0069.575] GdipMeasureString (graphics=0x1beb8070, string="2", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7d10, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0069.575] GdipDeleteStringFormat (format=0x1beb7d10) returned 0x0 [0069.575] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0069.575] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0069.575] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.575] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0069.575] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.575] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0069.575] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0069.575] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0069.575] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0069.576] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cf10) returned 0x0 [0069.576] LocalFree (hMem=0x1d92cf10) returned 0x0 [0069.576] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cb90 [0069.576] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cb90) returned 0x0 [0069.577] LocalFree (hMem=0x1d92cb90) returned 0x0 [0069.577] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0069.577] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0069.577] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0069.577] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0069.577] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.577] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0069.577] GetCurrentObject (hdc=0x6f010689, type=0x1) returned 0x1b00017 [0069.577] GetCurrentObject (hdc=0x6f010689, type=0x2) returned 0x1900010 [0069.577] GetCurrentObject (hdc=0x6f010689, type=0x7) returned 0x160506a9 [0069.577] GetCurrentObject (hdc=0x6f010689, type=0x6) returned 0x18a0048 [0069.577] SaveDC (hdc=0x6f010689) returned 1 [0069.577] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa504095c [0069.577] GetClipRgn (hdc=0x6f010689, hrgn=0xffffffffa504095c) returned 0 [0069.578] SelectClipRgn (hdc=0x6f010689, hrgn=0x660406c7) returned 2 [0069.578] DeleteObject (ho=0xffffffffa504095c) returned 1 [0069.578] DeleteObject (ho=0x660406c7) returned 1 [0069.578] OffsetViewportOrgEx (in: hdc=0x6f010689, x=0, y=0, lppt=0x22ab838 | out: lppt=0x22ab838) returned 1 [0069.578] GetNearestColor (hdc=0x6f010689, color=0xf0f0f0) returned 0xf0f0f0 [0069.578] CreateSolidBrush (color=0xf0f0f0) returned 0x4a100559 [0069.578] FillRect (hDC=0x6f010689, lprc=0x14e1c8, hbr=0x4a100559) returned 1 [0069.578] DeleteObject (ho=0x4a100559) returned 1 [0069.578] RestoreDC (hdc=0x6f010689, nSavedDC=-1) returned 1 [0069.578] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6f010689) returned 0x0 [0069.578] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0069.578] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.578] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22ab938) returned 0x0 [0069.578] GdipSetStringFormatAlign (format=0x1beb7ae0, align=0x1) returned 0x0 [0069.579] GdipSetStringFormatLineAlign (format=0x1beb7ae0, align=0x1) returned 0x0 [0069.579] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ae0, hotkeyPrefix=1) returned 0x0 [0069.579] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0069.579] GdipDrawString (graphics=0x1beb67f0, string="2", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7ae0, brush=0x1beb15e0) returned 0x0 [0069.579] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0069.579] GdipDeleteStringFormat (format=0x1beb7ae0) returned 0x0 [0069.579] GetFocus () returned 0x0 [0069.579] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.579] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExª*\x02", lpUsedDefaultChar=0x0) returned 17 [0069.579] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.579] GdipCreateRegion (region=0x14e030) returned 0x0 [0069.579] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.579] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0069.580] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0069.580] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0069.580] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0069.580] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d2d0) returned 0x0 [0069.580] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0069.580] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d4d0 [0069.580] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d4d0) returned 0x0 [0069.581] LocalFree (hMem=0x1d92d4d0) returned 0x0 [0069.581] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0069.581] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0069.581] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0069.581] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0069.581] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.581] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0069.581] GetCurrentObject (hdc=0x6f010689, type=0x1) returned 0x1b00017 [0069.581] GetCurrentObject (hdc=0x6f010689, type=0x2) returned 0x1900010 [0069.581] GetCurrentObject (hdc=0x6f010689, type=0x7) returned 0x160506a9 [0069.581] GetCurrentObject (hdc=0x6f010689, type=0x6) returned 0x18a0048 [0069.581] SaveDC (hdc=0x6f010689) returned 1 [0069.581] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x670406c7 [0069.581] GetClipRgn (hdc=0x6f010689, hrgn=0x670406c7) returned 0 [0069.581] SelectClipRgn (hdc=0x6f010689, hrgn=0xffffffffa604095c) returned 2 [0069.582] DeleteObject (ho=0x670406c7) returned 1 [0069.582] DeleteObject (ho=0xffffffffa604095c) returned 1 [0069.582] OffsetViewportOrgEx (in: hdc=0x6f010689, x=0, y=0, lppt=0x22abd20 | out: lppt=0x22abd20) returned 1 [0069.582] GetROP2 (hdc=0x6f010689) returned 13 [0069.582] GetBkMode (hdc=0x6f010689) returned 2 [0069.582] SetBkMode (hdc=0x6f010689, mode=1) returned 2 [0069.582] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x2c3006cb [0069.582] SelectObject (hdc=0x6f010689, h=0x2c3006cb) returned 0x1b00017 [0069.582] MoveToEx (in: hdc=0x6f010689, x=25, y=0, lppt=0x22abd88 | out: lppt=0x22abd88) returned 1 [0069.582] LineTo (hdc=0x6f010689, x=0, y=0) returned 1 [0069.582] SetBkMode (hdc=0x6f010689, mode=2) returned 1 [0069.582] MoveToEx (in: hdc=0x6f010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.582] GetROP2 (hdc=0x6f010689) returned 13 [0069.582] GetBkMode (hdc=0x6f010689) returned 2 [0069.582] SetBkMode (hdc=0x6f010689, mode=1) returned 2 [0069.582] SelectObject (hdc=0x6f010689, h=0x2c3006cb) returned 0x2c3006cb [0069.582] MoveToEx (in: hdc=0x6f010689, x=0, y=0, lppt=0x22abda0 | out: lppt=0x22abda0) returned 1 [0069.582] LineTo (hdc=0x6f010689, x=0, y=22) returned 1 [0069.582] SetBkMode (hdc=0x6f010689, mode=2) returned 1 [0069.582] MoveToEx (in: hdc=0x6f010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.582] SelectObject (hdc=0x6f010689, h=0x1b00017) returned 0x2c3006cb [0069.582] DeleteObject (ho=0x2c3006cb) returned 1 [0069.733] GetROP2 (hdc=0x6f010689) returned 13 [0069.733] GetBkMode (hdc=0x6f010689) returned 2 [0069.733] SetBkMode (hdc=0x6f010689, mode=1) returned 2 [0069.733] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x39300983 [0069.733] SelectObject (hdc=0x6f010689, h=0x39300983) returned 0x1b00017 [0069.733] MoveToEx (in: hdc=0x6f010689, x=0, y=22, lppt=0x22abe08 | out: lppt=0x22abe08) returned 1 [0069.733] LineTo (hdc=0x6f010689, x=25, y=22) returned 1 [0069.733] SetBkMode (hdc=0x6f010689, mode=2) returned 1 [0069.733] MoveToEx (in: hdc=0x6f010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.733] GetROP2 (hdc=0x6f010689) returned 13 [0069.733] GetBkMode (hdc=0x6f010689) returned 2 [0069.733] SetBkMode (hdc=0x6f010689, mode=1) returned 2 [0069.733] SelectObject (hdc=0x6f010689, h=0x39300983) returned 0x39300983 [0069.733] MoveToEx (in: hdc=0x6f010689, x=25, y=22, lppt=0x22abe20 | out: lppt=0x22abe20) returned 1 [0069.733] LineTo (hdc=0x6f010689, x=25, y=-1) returned 1 [0069.733] SetBkMode (hdc=0x6f010689, mode=2) returned 1 [0069.733] MoveToEx (in: hdc=0x6f010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.734] SelectObject (hdc=0x6f010689, h=0x1b00017) returned 0x39300983 [0069.734] DeleteObject (ho=0x39300983) returned 1 [0069.734] GetROP2 (hdc=0x6f010689) returned 13 [0069.734] GetBkMode (hdc=0x6f010689) returned 2 [0069.734] SetBkMode (hdc=0x6f010689, mode=1) returned 2 [0069.734] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x2d3006cb [0069.734] SelectObject (hdc=0x6f010689, h=0x2d3006cb) returned 0x1b00017 [0069.734] MoveToEx (in: hdc=0x6f010689, x=24, y=1, lppt=0x22abe88 | out: lppt=0x22abe88) returned 1 [0069.734] LineTo (hdc=0x6f010689, x=1, y=1) returned 1 [0069.734] SetBkMode (hdc=0x6f010689, mode=2) returned 1 [0069.734] MoveToEx (in: hdc=0x6f010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.734] GetROP2 (hdc=0x6f010689) returned 13 [0069.734] GetBkMode (hdc=0x6f010689) returned 2 [0069.734] SetBkMode (hdc=0x6f010689, mode=1) returned 2 [0069.734] SelectObject (hdc=0x6f010689, h=0x2d3006cb) returned 0x2d3006cb [0069.734] MoveToEx (in: hdc=0x6f010689, x=1, y=1, lppt=0x22abea0 | out: lppt=0x22abea0) returned 1 [0069.734] LineTo (hdc=0x6f010689, x=1, y=21) returned 1 [0069.734] SetBkMode (hdc=0x6f010689, mode=2) returned 1 [0069.734] MoveToEx (in: hdc=0x6f010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.734] SelectObject (hdc=0x6f010689, h=0x1b00017) returned 0x2d3006cb [0069.734] DeleteObject (ho=0x2d3006cb) returned 1 [0069.734] GetROP2 (hdc=0x6f010689) returned 13 [0069.734] GetBkMode (hdc=0x6f010689) returned 2 [0069.735] SetBkMode (hdc=0x6f010689, mode=1) returned 2 [0069.735] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x3a300983 [0069.735] SelectObject (hdc=0x6f010689, h=0x3a300983) returned 0x1b00017 [0069.735] MoveToEx (in: hdc=0x6f010689, x=1, y=21, lppt=0x22abf08 | out: lppt=0x22abf08) returned 1 [0069.735] LineTo (hdc=0x6f010689, x=24, y=21) returned 1 [0069.735] SetBkMode (hdc=0x6f010689, mode=2) returned 1 [0069.735] MoveToEx (in: hdc=0x6f010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.735] GetROP2 (hdc=0x6f010689) returned 13 [0069.735] GetBkMode (hdc=0x6f010689) returned 2 [0069.735] SetBkMode (hdc=0x6f010689, mode=1) returned 2 [0069.735] SelectObject (hdc=0x6f010689, h=0x3a300983) returned 0x3a300983 [0069.735] MoveToEx (in: hdc=0x6f010689, x=24, y=21, lppt=0x22abf20 | out: lppt=0x22abf20) returned 1 [0069.735] LineTo (hdc=0x6f010689, x=24, y=0) returned 1 [0069.735] SetBkMode (hdc=0x6f010689, mode=2) returned 1 [0069.735] MoveToEx (in: hdc=0x6f010689, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.735] SelectObject (hdc=0x6f010689, h=0x1b00017) returned 0x3a300983 [0069.735] DeleteObject (ho=0x3a300983) returned 1 [0069.735] RestoreDC (hdc=0x6f010689, nSavedDC=-1) returned 1 [0069.735] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6f010689) returned 0x0 [0069.735] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0069.735] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x6f010689, x1=0, y1=0, rop=0xcc0020) returned 1 [0069.736] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6f010689) returned 0x0 [0069.736] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0069.736] SelectObject (hdc=0x6f010689, h=0x185000f) returned 0x160506a9 [0069.736] DeleteDC (hdc=0x6f010689) returned 1 [0069.736] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0069.736] EndPaint (hWnd=0x3030c, lpPaint=0x14e548) returned 1 [0069.736] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.736] IsWindowUnicode (hWnd=0x302e4) returned 1 [0069.736] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.736] TranslateMessage (lpMsg=0x14ef10) returned 0 [0069.736] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0069.736] BeginPaint (in: hWnd=0x302e4, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0069.736] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.737] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0069.737] GetStockObject (i=5) returned 0x1900015 [0069.737] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0069.737] CreateCompatibleDC (hdc=0x220106d6) returned 0x6e0109c0 [0069.737] SelectObject (hdc=0x6e0109c0, h=0x160506a9) returned 0x185000f [0069.737] GdipCreateFromHDC (hdc=0x6e0109c0, graphics=0x14e528) returned 0x0 [0069.737] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0069.737] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0069.737] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0069.737] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0069.738] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0069.738] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d550 [0069.738] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d550) returned 0x0 [0069.738] LocalFree (hMem=0x1d92d550) returned 0x0 [0069.738] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0069.739] GdipCreateRegion (region=0x14e550) returned 0x0 [0069.739] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.739] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0069.741] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0069.741] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd420dbd) returned 0x0 [0069.741] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.741] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0069.741] GetCurrentObject (hdc=0x6e0109c0, type=0x1) returned 0x1b00017 [0069.741] GetCurrentObject (hdc=0x6e0109c0, type=0x2) returned 0x1900010 [0069.741] GetCurrentObject (hdc=0x6e0109c0, type=0x7) returned 0x160506a9 [0069.741] GetCurrentObject (hdc=0x6e0109c0, type=0x6) returned 0x18a0048 [0069.741] SaveDC (hdc=0x6e0109c0) returned 1 [0069.741] GetNearestColor (hdc=0x6e0109c0, color=0xf0f0f0) returned 0xf0f0f0 [0069.741] GetNearestColor (hdc=0x6e0109c0, color=0xa0a0a0) returned 0xa0a0a0 [0069.741] GetNearestColor (hdc=0x6e0109c0, color=0x696969) returned 0x696969 [0069.741] GetNearestColor (hdc=0x6e0109c0, color=0xa0a0a0) returned 0xa0a0a0 [0069.741] GetNearestColor (hdc=0x6e0109c0, color=0x0) returned 0x0 [0069.741] GetNearestColor (hdc=0x6e0109c0, color=0xffffff) returned 0xffffff [0069.741] GetNearestColor (hdc=0x6e0109c0, color=0xe5e5e5) returned 0xe5e5e5 [0069.742] GetNearestColor (hdc=0x6e0109c0, color=0xd8d8d8) returned 0xd8d8d8 [0069.742] GetNearestColor (hdc=0x6e0109c0, color=0x0) returned 0x0 [0069.742] RestoreDC (hdc=0x6e0109c0, nSavedDC=-1) returned 1 [0069.742] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6e0109c0) returned 0x0 [0069.742] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÂ*\x02", lpUsedDefaultChar=0x0) returned 17 [0069.742] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.742] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22ac840) returned 0x0 [0069.742] GdipSetStringFormatAlign (format=0x1beb7ae0, align=0x1) returned 0x0 [0069.742] GdipSetStringFormatLineAlign (format=0x1beb7ae0, align=0x1) returned 0x0 [0069.742] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ae0, hotkeyPrefix=1) returned 0x0 [0069.742] GdipGetStringFormatFlags (format=0x1beb7ae0, flags=0x14e378) returned 0x0 [0069.743] GdipGetStringFormatTrimming (format=0x1beb7ae0, trimming=0x14e378) returned 0x0 [0069.743] GdipGetStringFormatHotkeyPrefix (format=0x1beb7ae0, hotkeyPrefix=0x14e378) returned 0x0 [0069.743] GdipGetFontSize (font=0x1beb7ae0, size=0x14e378) returned 0x0 [0069.743] GdipGetFontStyle (font=0x1beb7ae0, style=0x14e378) returned 0x0 [0069.743] GdipDeleteStringFormat (format=0x1beb7ae0) returned 0x0 [0069.743] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0069.743] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.743] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0069.743] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22ac970) returned 0x0 [0069.743] GdipSetStringFormatFlags (format=0x1beb7a70, flags=0) returned 0x0 [0069.743] GdipSetStringFormatTrimming (format=0x1beb7a70, trimming=0x1) returned 0x0 [0069.744] GdipSetStringFormatHotkeyPrefix (format=0x1beb7a70, hotkeyPrefix=1) returned 0x0 [0069.744] GdipSetStringFormatAlign (format=0x1beb7a70, align=0x1) returned 0x0 [0069.744] GdipSetStringFormatLineAlign (format=0x1beb7a70, align=0x1) returned 0x0 [0069.744] GdipMeasureString (graphics=0x1beb8070, string="1", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7a70, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0069.744] GdipDeleteStringFormat (format=0x1beb7a70) returned 0x0 [0069.744] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0069.744] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0069.744] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.744] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0069.744] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.744] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0069.744] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0069.744] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0069.744] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf90 [0069.744] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf90) returned 0x0 [0069.745] LocalFree (hMem=0x1d92cf90) returned 0x0 [0069.745] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0069.745] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d650) returned 0x0 [0069.746] LocalFree (hMem=0x1d92d650) returned 0x0 [0069.746] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0069.746] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0069.746] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0069.746] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0069.746] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.746] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0069.746] GetCurrentObject (hdc=0x6e0109c0, type=0x1) returned 0x1b00017 [0069.746] GetCurrentObject (hdc=0x6e0109c0, type=0x2) returned 0x1900010 [0069.746] GetCurrentObject (hdc=0x6e0109c0, type=0x7) returned 0x160506a9 [0069.746] GetCurrentObject (hdc=0x6e0109c0, type=0x6) returned 0x18a0048 [0069.746] SaveDC (hdc=0x6e0109c0) returned 1 [0069.746] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa704095c [0069.746] GetClipRgn (hdc=0x6e0109c0, hrgn=0xffffffffa704095c) returned 0 [0069.746] SelectClipRgn (hdc=0x6e0109c0, hrgn=0x680406c7) returned 2 [0069.746] DeleteObject (ho=0xffffffffa704095c) returned 1 [0069.746] DeleteObject (ho=0x680406c7) returned 1 [0069.746] OffsetViewportOrgEx (in: hdc=0x6e0109c0, x=0, y=0, lppt=0x22acd30 | out: lppt=0x22acd30) returned 1 [0069.746] GetNearestColor (hdc=0x6e0109c0, color=0xf0f0f0) returned 0xf0f0f0 [0069.746] CreateSolidBrush (color=0xf0f0f0) returned 0x4b100559 [0069.747] FillRect (hDC=0x6e0109c0, lprc=0x14e1c8, hbr=0x4b100559) returned 1 [0069.747] DeleteObject (ho=0x4b100559) returned 1 [0069.747] RestoreDC (hdc=0x6e0109c0, nSavedDC=-1) returned 1 [0069.747] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6e0109c0) returned 0x0 [0069.747] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0069.747] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.747] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22ace30) returned 0x0 [0069.747] GdipSetStringFormatAlign (format=0x1beb7ed0, align=0x1) returned 0x0 [0069.747] GdipSetStringFormatLineAlign (format=0x1beb7ed0, align=0x1) returned 0x0 [0069.747] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ed0, hotkeyPrefix=1) returned 0x0 [0069.747] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0069.747] GdipDrawString (graphics=0x1beb67f0, string="1", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7ed0, brush=0x1beb15e0) returned 0x0 [0069.748] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0069.748] GdipDeleteStringFormat (format=0x1beb7ed0) returned 0x0 [0069.748] GetFocus () returned 0x0 [0069.748] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx¿*\x02", lpUsedDefaultChar=0x0) returned 17 [0069.748] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0069.748] GdipCreateRegion (region=0x14e030) returned 0x0 [0069.748] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0069.748] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0069.748] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0069.748] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0069.748] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cb90 [0069.749] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cb90) returned 0x0 [0069.749] LocalFree (hMem=0x1d92cb90) returned 0x0 [0069.749] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cb90 [0069.749] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cb90) returned 0x0 [0069.750] LocalFree (hMem=0x1d92cb90) returned 0x0 [0069.750] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0069.750] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0069.750] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0069.750] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0069.750] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0069.750] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0069.750] GetCurrentObject (hdc=0x6e0109c0, type=0x1) returned 0x1b00017 [0069.750] GetCurrentObject (hdc=0x6e0109c0, type=0x2) returned 0x1900010 [0069.750] GetCurrentObject (hdc=0x6e0109c0, type=0x7) returned 0x160506a9 [0069.750] GetCurrentObject (hdc=0x6e0109c0, type=0x6) returned 0x18a0048 [0069.750] SaveDC (hdc=0x6e0109c0) returned 1 [0069.750] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x690406c7 [0069.750] GetClipRgn (hdc=0x6e0109c0, hrgn=0x690406c7) returned 0 [0069.750] SelectClipRgn (hdc=0x6e0109c0, hrgn=0xffffffffa804095c) returned 2 [0069.750] DeleteObject (ho=0x690406c7) returned 1 [0069.750] DeleteObject (ho=0xffffffffa804095c) returned 1 [0069.750] OffsetViewportOrgEx (in: hdc=0x6e0109c0, x=0, y=0, lppt=0x22ad218 | out: lppt=0x22ad218) returned 1 [0069.750] GetROP2 (hdc=0x6e0109c0) returned 13 [0069.750] GetBkMode (hdc=0x6e0109c0) returned 2 [0069.751] SetBkMode (hdc=0x6e0109c0, mode=1) returned 2 [0069.751] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x3b300983 [0069.751] SelectObject (hdc=0x6e0109c0, h=0x3b300983) returned 0x1b00017 [0069.751] MoveToEx (in: hdc=0x6e0109c0, x=25, y=0, lppt=0x22ad280 | out: lppt=0x22ad280) returned 1 [0069.751] LineTo (hdc=0x6e0109c0, x=0, y=0) returned 1 [0069.751] SetBkMode (hdc=0x6e0109c0, mode=2) returned 1 [0069.751] MoveToEx (in: hdc=0x6e0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.751] GetROP2 (hdc=0x6e0109c0) returned 13 [0069.751] GetBkMode (hdc=0x6e0109c0) returned 2 [0069.751] SetBkMode (hdc=0x6e0109c0, mode=1) returned 2 [0069.751] SelectObject (hdc=0x6e0109c0, h=0x3b300983) returned 0x3b300983 [0069.751] MoveToEx (in: hdc=0x6e0109c0, x=0, y=0, lppt=0x22ad298 | out: lppt=0x22ad298) returned 1 [0069.751] LineTo (hdc=0x6e0109c0, x=0, y=22) returned 1 [0069.751] SetBkMode (hdc=0x6e0109c0, mode=2) returned 1 [0069.751] MoveToEx (in: hdc=0x6e0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.751] SelectObject (hdc=0x6e0109c0, h=0x1b00017) returned 0x3b300983 [0069.751] DeleteObject (ho=0x3b300983) returned 1 [0069.751] GetROP2 (hdc=0x6e0109c0) returned 13 [0069.751] GetBkMode (hdc=0x6e0109c0) returned 2 [0069.751] SetBkMode (hdc=0x6e0109c0, mode=1) returned 2 [0069.751] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x2e3006cb [0069.751] SelectObject (hdc=0x6e0109c0, h=0x2e3006cb) returned 0x1b00017 [0069.751] MoveToEx (in: hdc=0x6e0109c0, x=0, y=22, lppt=0x22ad300 | out: lppt=0x22ad300) returned 1 [0069.751] LineTo (hdc=0x6e0109c0, x=25, y=22) returned 1 [0069.752] SetBkMode (hdc=0x6e0109c0, mode=2) returned 1 [0069.752] MoveToEx (in: hdc=0x6e0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.752] GetROP2 (hdc=0x6e0109c0) returned 13 [0069.752] GetBkMode (hdc=0x6e0109c0) returned 2 [0069.752] SetBkMode (hdc=0x6e0109c0, mode=1) returned 2 [0069.752] SelectObject (hdc=0x6e0109c0, h=0x2e3006cb) returned 0x2e3006cb [0069.752] MoveToEx (in: hdc=0x6e0109c0, x=25, y=22, lppt=0x22ad318 | out: lppt=0x22ad318) returned 1 [0069.752] LineTo (hdc=0x6e0109c0, x=25, y=-1) returned 1 [0069.752] SetBkMode (hdc=0x6e0109c0, mode=2) returned 1 [0069.752] MoveToEx (in: hdc=0x6e0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.752] SelectObject (hdc=0x6e0109c0, h=0x1b00017) returned 0x2e3006cb [0069.752] DeleteObject (ho=0x2e3006cb) returned 1 [0069.752] GetROP2 (hdc=0x6e0109c0) returned 13 [0069.752] GetBkMode (hdc=0x6e0109c0) returned 2 [0069.752] SetBkMode (hdc=0x6e0109c0, mode=1) returned 2 [0069.752] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x3c300983 [0069.752] SelectObject (hdc=0x6e0109c0, h=0x3c300983) returned 0x1b00017 [0069.752] MoveToEx (in: hdc=0x6e0109c0, x=24, y=1, lppt=0x22ad380 | out: lppt=0x22ad380) returned 1 [0069.752] LineTo (hdc=0x6e0109c0, x=1, y=1) returned 1 [0069.752] SetBkMode (hdc=0x6e0109c0, mode=2) returned 1 [0069.752] MoveToEx (in: hdc=0x6e0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.752] GetROP2 (hdc=0x6e0109c0) returned 13 [0069.752] GetBkMode (hdc=0x6e0109c0) returned 2 [0069.752] SetBkMode (hdc=0x6e0109c0, mode=1) returned 2 [0069.753] SelectObject (hdc=0x6e0109c0, h=0x3c300983) returned 0x3c300983 [0069.753] MoveToEx (in: hdc=0x6e0109c0, x=1, y=1, lppt=0x22ad398 | out: lppt=0x22ad398) returned 1 [0069.753] LineTo (hdc=0x6e0109c0, x=1, y=21) returned 1 [0069.753] SetBkMode (hdc=0x6e0109c0, mode=2) returned 1 [0069.753] MoveToEx (in: hdc=0x6e0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.753] SelectObject (hdc=0x6e0109c0, h=0x1b00017) returned 0x3c300983 [0069.753] DeleteObject (ho=0x3c300983) returned 1 [0069.753] GetROP2 (hdc=0x6e0109c0) returned 13 [0069.753] GetBkMode (hdc=0x6e0109c0) returned 2 [0069.753] SetBkMode (hdc=0x6e0109c0, mode=1) returned 2 [0069.753] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x2f3006cb [0069.753] SelectObject (hdc=0x6e0109c0, h=0x2f3006cb) returned 0x1b00017 [0069.753] MoveToEx (in: hdc=0x6e0109c0, x=1, y=21, lppt=0x22ad400 | out: lppt=0x22ad400) returned 1 [0069.753] LineTo (hdc=0x6e0109c0, x=24, y=21) returned 1 [0069.753] SetBkMode (hdc=0x6e0109c0, mode=2) returned 1 [0069.753] MoveToEx (in: hdc=0x6e0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.753] GetROP2 (hdc=0x6e0109c0) returned 13 [0069.753] GetBkMode (hdc=0x6e0109c0) returned 2 [0069.753] SetBkMode (hdc=0x6e0109c0, mode=1) returned 2 [0069.753] SelectObject (hdc=0x6e0109c0, h=0x2f3006cb) returned 0x2f3006cb [0069.753] MoveToEx (in: hdc=0x6e0109c0, x=24, y=21, lppt=0x22ad418 | out: lppt=0x22ad418) returned 1 [0069.753] LineTo (hdc=0x6e0109c0, x=24, y=0) returned 1 [0069.753] SetBkMode (hdc=0x6e0109c0, mode=2) returned 1 [0069.754] MoveToEx (in: hdc=0x6e0109c0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0069.754] SelectObject (hdc=0x6e0109c0, h=0x1b00017) returned 0x2f3006cb [0069.754] DeleteObject (ho=0x2f3006cb) returned 1 [0069.754] RestoreDC (hdc=0x6e0109c0, nSavedDC=-1) returned 1 [0069.754] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6e0109c0) returned 0x0 [0069.754] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0069.754] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x6e0109c0, x1=0, y1=0, rop=0xcc0020) returned 1 [0069.754] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6e0109c0) returned 0x0 [0069.754] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0069.760] SelectObject (hdc=0x6e0109c0, h=0x185000f) returned 0x160506a9 [0069.760] DeleteDC (hdc=0x6e0109c0) returned 1 [0069.760] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0069.760] EndPaint (hWnd=0x302e4, lpPaint=0x14e548) returned 1 [0069.760] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.760] IsWindowUnicode (hWnd=0x302de) returned 1 [0069.760] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.760] TranslateMessage (lpMsg=0x14ef10) returned 0 [0069.760] DispatchMessageW (lpMsg=0x14ef10) returned 0x1 [0069.760] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0069.760] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.761] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0069.761] SetTextColor (hdc=0x1b0107ae, color=0x0) returned 0x0 [0069.761] SetBkColor (hdc=0x1b0107ae, color=0xffffff) returned 0xffffff [0069.761] SetTextColor (hdc=0x1b0107ae, color=0x0) returned 0x0 [0069.761] SetBkColor (hdc=0x1b0107ae, color=0xffffff) returned 0xffffff [0069.761] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.762] IsWindowUnicode (hWnd=0x50364) returned 1 [0069.762] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0069.762] TranslateMessage (lpMsg=0x14ef10) returned 0 [0069.762] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0069.762] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0069.762] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0069.762] WaitMessage () returned 1 [0079.641] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.641] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x88, wParam=0x4, lParam=0x0) returned 0x0 [0079.641] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.642] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0079.642] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0079.642] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0079.643] GetWindowPlacement (in: hWnd=0x70020, lpwndpl=0x14e018 | out: lpwndpl=0x14e018) returned 1 [0079.643] GetClientRect (in: hWnd=0x70020, lpRect=0x14df30 | out: lpRect=0x14df30) returned 1 [0079.643] GetWindowTextLengthW (hWnd=0x70020) returned 5 [0079.643] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0079.643] GetSystemMetrics (nIndex=42) returned 0 [0079.644] GetWindowTextW (in: hWnd=0x70020, lpString=0x14dca0, nMaxCount=6 | out: lpString="Form1") returned 5 [0079.644] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xd, wParam=0x6, lParam=0x14dca0) returned 0x5 [0079.644] GetClientRect (in: hWnd=0x70020, lpRect=0x14dd18 | out: lpRect=0x14dd18) returned 1 [0079.644] GetCurrentObject (hdc=0x220106d6, type=0x1) returned 0x1b00017 [0079.644] GetCurrentObject (hdc=0x220106d6, type=0x2) returned 0x1900010 [0079.644] GetCurrentObject (hdc=0x220106d6, type=0x7) returned 0x1b0509b1 [0079.644] GetCurrentObject (hdc=0x220106d6, type=0x6) returned 0x18a0048 [0079.644] SaveDC (hdc=0x220106d6) returned 1 [0079.644] GetNearestColor (hdc=0x220106d6, color=0xf0f0f0) returned 0xf0f0f0 [0079.644] CreateSolidBrush (color=0xf0f0f0) returned 0x4c100559 [0079.644] FillRect (hDC=0x220106d6, lprc=0x14da08, hbr=0x4c100559) returned 1 [0079.646] DeleteObject (ho=0x4c100559) returned 1 [0079.646] RestoreDC (hdc=0x220106d6, nSavedDC=-1) returned 1 [0079.647] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.647] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x40206, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.647] GetStockObject (i=5) returned 0x1900015 [0079.647] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.647] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x60204, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.647] GetStockObject (i=5) returned 0x1900015 [0079.647] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.648] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x602d4, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.648] GetStockObject (i=5) returned 0x1900015 [0079.648] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.648] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302ea, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.648] GetStockObject (i=5) returned 0x1900015 [0079.648] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.648] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3035a, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.648] GetStockObject (i=5) returned 0x1900015 [0079.649] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.649] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30362, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.649] GetStockObject (i=5) returned 0x1900015 [0079.649] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.649] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3033e, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.649] GetStockObject (i=5) returned 0x1900015 [0079.649] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.649] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30340, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.650] GetStockObject (i=5) returned 0x1900015 [0079.650] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.650] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032e, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.650] GetStockObject (i=5) returned 0x1900015 [0079.650] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.650] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30338, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.650] GetStockObject (i=5) returned 0x1900015 [0079.650] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.651] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30326, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.651] GetStockObject (i=5) returned 0x1900015 [0079.651] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.651] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3032c, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.651] GetStockObject (i=5) returned 0x1900015 [0079.651] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.651] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30320, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.651] GetStockObject (i=5) returned 0x1900015 [0079.651] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.652] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30328, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.652] GetStockObject (i=5) returned 0x1900015 [0079.652] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.652] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031c, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.652] GetStockObject (i=5) returned 0x1900015 [0079.652] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.652] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3031e, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.652] GetStockObject (i=5) returned 0x1900015 [0079.653] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.653] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x30308, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.653] GetStockObject (i=5) returned 0x1900015 [0079.653] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.653] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x3030c, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.653] GetStockObject (i=5) returned 0x1900015 [0079.653] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.653] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x302e4, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.653] GetStockObject (i=5) returned 0x1900015 [0079.654] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.654] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.654] SetTextColor (hdc=0x220106d6, color=0x0) returned 0x0 [0079.654] SetBkColor (hdc=0x220106d6, color=0xffffff) returned 0xffffff [0079.654] IsWindowUnicode (hWnd=0x70020) returned 1 [0079.654] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.654] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.654] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.654] BeginPaint (in: hWnd=0x70020, lpPaint=0x14e618 | out: lpPaint=0x14e618) returned 0xc0100ae [0079.657] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0079.657] GetWindowTextLengthW (hWnd=0x70020) returned 5 [0079.657] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0079.657] GetSystemMetrics (nIndex=42) returned 0 [0079.657] GetWindowTextW (in: hWnd=0x70020, lpString=0x14e4c0, nMaxCount=6 | out: lpString="Form1") returned 5 [0079.657] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x70020, Msg=0xd, wParam=0x6, lParam=0x14e4c0) returned 0x5 [0079.657] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0079.657] EndPaint (hWnd=0x70020, lpPaint=0x14e5b8) returned 1 [0079.657] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.657] IsWindowUnicode (hWnd=0x40206) returned 1 [0079.657] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.657] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.657] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.658] BeginPaint (in: hWnd=0x40206, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0079.658] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0079.658] CreateCompatibleDC (hdc=0x220106d6) returned 0x450109dc [0079.658] SelectObject (hdc=0x450109dc, h=0x160506a9) returned 0x185000f [0079.658] GdipCreateFromHDC (hdc=0x450109dc, graphics=0x14e528) returned 0x0 [0079.658] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0079.658] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0079.658] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0079.658] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0079.658] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0079.658] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d490 [0079.659] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d490) returned 0x0 [0079.659] LocalFree (hMem=0x1d92d490) returned 0x0 [0079.659] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0079.659] GdipCreateRegion (region=0x14e550) returned 0x0 [0079.659] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0079.659] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0079.659] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0079.659] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd3f0dbd) returned 0x0 [0079.659] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0079.659] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0079.659] GetCurrentObject (hdc=0x450109dc, type=0x1) returned 0x1b00017 [0079.659] GetCurrentObject (hdc=0x450109dc, type=0x2) returned 0x1900010 [0079.659] GetCurrentObject (hdc=0x450109dc, type=0x7) returned 0x160506a9 [0079.659] GetCurrentObject (hdc=0x450109dc, type=0x6) returned 0x18a0048 [0079.659] SaveDC (hdc=0x450109dc) returned 1 [0079.659] GetNearestColor (hdc=0x450109dc, color=0xf0f0f0) returned 0xf0f0f0 [0079.660] GetNearestColor (hdc=0x450109dc, color=0xa0a0a0) returned 0xa0a0a0 [0079.660] GetNearestColor (hdc=0x450109dc, color=0x696969) returned 0x696969 [0079.660] GetNearestColor (hdc=0x450109dc, color=0xa0a0a0) returned 0xa0a0a0 [0079.660] GetNearestColor (hdc=0x450109dc, color=0x0) returned 0x0 [0079.660] GetNearestColor (hdc=0x450109dc, color=0xffffff) returned 0xffffff [0079.660] GetNearestColor (hdc=0x450109dc, color=0xe5e5e5) returned 0xe5e5e5 [0079.660] GetNearestColor (hdc=0x450109dc, color=0xd8d8d8) returned 0xd8d8d8 [0079.660] GetNearestColor (hdc=0x450109dc, color=0x0) returned 0x0 [0079.660] RestoreDC (hdc=0x450109dc, nSavedDC=-1) returned 1 [0079.660] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x450109dc) returned 0x0 [0079.660] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.663] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÜ*\x02", lpUsedDefaultChar=0x0) returned 17 [0079.663] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.663] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22ae298) returned 0x0 [0079.663] GdipSetStringFormatAlign (format=0x1beb7ed0, align=0x1) returned 0x0 [0079.663] GdipSetStringFormatLineAlign (format=0x1beb7ed0, align=0x1) returned 0x0 [0079.663] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ed0, hotkeyPrefix=1) returned 0x0 [0079.663] GdipGetStringFormatFlags (format=0x1beb7ed0, flags=0x14e378) returned 0x0 [0079.663] GdipGetStringFormatTrimming (format=0x1beb7ed0, trimming=0x14e378) returned 0x0 [0079.663] GdipGetStringFormatHotkeyPrefix (format=0x1beb7ed0, hotkeyPrefix=0x14e378) returned 0x0 [0079.663] GdipGetFontSize (font=0x1beb7ed0, size=0x14e378) returned 0x0 [0079.663] GdipGetFontStyle (font=0x1beb7ed0, style=0x14e378) returned 0x0 [0079.663] GdipDeleteStringFormat (format=0x1beb7ed0) returned 0x0 [0079.664] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.664] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.664] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.664] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0079.664] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22ae3c8) returned 0x0 [0079.664] GdipSetStringFormatFlags (format=0x1beb7bc0, flags=0) returned 0x0 [0079.664] GdipSetStringFormatTrimming (format=0x1beb7bc0, trimming=0x1) returned 0x0 [0079.664] GdipSetStringFormatHotkeyPrefix (format=0x1beb7bc0, hotkeyPrefix=1) returned 0x0 [0079.664] GdipSetStringFormatAlign (format=0x1beb7bc0, align=0x1) returned 0x0 [0079.664] GdipSetStringFormatLineAlign (format=0x1beb7bc0, align=0x1) returned 0x0 [0079.664] GdipMeasureString (graphics=0x1beb8070, string="*", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7bc0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0079.665] GdipDeleteStringFormat (format=0x1beb7bc0) returned 0x0 [0079.665] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0079.665] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.665] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.665] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.665] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0079.665] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0079.665] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0079.665] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0079.665] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0079.665] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d890 [0079.665] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d890) returned 0x0 [0079.666] LocalFree (hMem=0x1d92d890) returned 0x0 [0079.666] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0079.666] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d650) returned 0x0 [0079.666] LocalFree (hMem=0x1d92d650) returned 0x0 [0079.666] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0079.666] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0079.666] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0079.666] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0079.666] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0079.666] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0079.666] GetCurrentObject (hdc=0x450109dc, type=0x1) returned 0x1b00017 [0079.666] GetCurrentObject (hdc=0x450109dc, type=0x2) returned 0x1900010 [0079.666] GetCurrentObject (hdc=0x450109dc, type=0x7) returned 0x160506a9 [0079.666] GetCurrentObject (hdc=0x450109dc, type=0x6) returned 0x18a0048 [0079.666] SaveDC (hdc=0x450109dc) returned 1 [0079.666] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa904095c [0079.666] GetClipRgn (hdc=0x450109dc, hrgn=0xffffffffa904095c) returned 0 [0079.666] SelectClipRgn (hdc=0x450109dc, hrgn=0x6a0406c7) returned 2 [0079.666] DeleteObject (ho=0xffffffffa904095c) returned 1 [0079.666] DeleteObject (ho=0x6a0406c7) returned 1 [0079.666] OffsetViewportOrgEx (in: hdc=0x450109dc, x=0, y=0, lppt=0x22ae788 | out: lppt=0x22ae788) returned 1 [0079.667] GetNearestColor (hdc=0x450109dc, color=0xf0f0f0) returned 0xf0f0f0 [0079.667] CreateSolidBrush (color=0xf0f0f0) returned 0x4d100559 [0079.667] FillRect (hDC=0x450109dc, lprc=0x14e1c8, hbr=0x4d100559) returned 1 [0079.667] DeleteObject (ho=0x4d100559) returned 1 [0079.667] RestoreDC (hdc=0x450109dc, nSavedDC=-1) returned 1 [0079.667] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x450109dc) returned 0x0 [0079.667] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.667] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0079.667] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.667] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22ae888) returned 0x0 [0079.667] GdipSetStringFormatAlign (format=0x1beb7bc0, align=0x1) returned 0x0 [0079.667] GdipSetStringFormatLineAlign (format=0x1beb7bc0, align=0x1) returned 0x0 [0079.667] GdipSetStringFormatHotkeyPrefix (format=0x1beb7bc0, hotkeyPrefix=1) returned 0x0 [0079.667] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0079.667] GdipDrawString (graphics=0x1beb67f0, string="*", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7bc0, brush=0x1beb15e0) returned 0x0 [0079.668] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0079.668] GdipDeleteStringFormat (format=0x1beb7bc0) returned 0x0 [0079.668] GetFocus () returned 0x0 [0079.668] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.668] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÙ*\x02", lpUsedDefaultChar=0x0) returned 17 [0079.668] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.668] GdipCreateRegion (region=0x14e030) returned 0x0 [0079.669] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0079.669] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0079.669] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0079.669] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0079.669] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d0d0 [0079.669] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d0d0) returned 0x0 [0079.669] LocalFree (hMem=0x1d92d0d0) returned 0x0 [0079.669] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cad0 [0079.669] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cad0) returned 0x0 [0079.669] LocalFree (hMem=0x1d92cad0) returned 0x0 [0079.669] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0079.669] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0079.669] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0079.669] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0079.669] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0079.669] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0079.669] GetCurrentObject (hdc=0x450109dc, type=0x1) returned 0x1b00017 [0079.669] GetCurrentObject (hdc=0x450109dc, type=0x2) returned 0x1900010 [0079.669] GetCurrentObject (hdc=0x450109dc, type=0x7) returned 0x160506a9 [0079.669] GetCurrentObject (hdc=0x450109dc, type=0x6) returned 0x18a0048 [0079.669] SaveDC (hdc=0x450109dc) returned 1 [0079.670] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6b0406c7 [0079.670] GetClipRgn (hdc=0x450109dc, hrgn=0x6b0406c7) returned 0 [0079.670] SelectClipRgn (hdc=0x450109dc, hrgn=0xffffffffaa04095c) returned 2 [0079.670] DeleteObject (ho=0x6b0406c7) returned 1 [0079.670] DeleteObject (ho=0xffffffffaa04095c) returned 1 [0079.670] OffsetViewportOrgEx (in: hdc=0x450109dc, x=0, y=0, lppt=0x22aec70 | out: lppt=0x22aec70) returned 1 [0079.670] GetROP2 (hdc=0x450109dc) returned 13 [0079.670] GetBkMode (hdc=0x450109dc) returned 2 [0079.670] SetBkMode (hdc=0x450109dc, mode=1) returned 2 [0079.670] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x46300991 [0079.670] SelectObject (hdc=0x450109dc, h=0x46300991) returned 0x1b00017 [0079.670] MoveToEx (in: hdc=0x450109dc, x=25, y=0, lppt=0x22aecd8 | out: lppt=0x22aecd8) returned 1 [0079.670] LineTo (hdc=0x450109dc, x=0, y=0) returned 1 [0079.670] SetBkMode (hdc=0x450109dc, mode=2) returned 1 [0079.670] MoveToEx (in: hdc=0x450109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.670] GetROP2 (hdc=0x450109dc) returned 13 [0079.670] GetBkMode (hdc=0x450109dc) returned 2 [0079.670] SetBkMode (hdc=0x450109dc, mode=1) returned 2 [0079.670] SelectObject (hdc=0x450109dc, h=0x46300991) returned 0x46300991 [0079.670] MoveToEx (in: hdc=0x450109dc, x=0, y=0, lppt=0x22aecf0 | out: lppt=0x22aecf0) returned 1 [0079.670] LineTo (hdc=0x450109dc, x=0, y=22) returned 1 [0079.671] SetBkMode (hdc=0x450109dc, mode=2) returned 1 [0079.671] MoveToEx (in: hdc=0x450109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.671] SelectObject (hdc=0x450109dc, h=0x1b00017) returned 0x46300991 [0079.671] DeleteObject (ho=0x46300991) returned 1 [0079.671] GetROP2 (hdc=0x450109dc) returned 13 [0079.671] GetBkMode (hdc=0x450109dc) returned 2 [0079.671] SetBkMode (hdc=0x450109dc, mode=1) returned 2 [0079.671] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x2530065f [0079.671] SelectObject (hdc=0x450109dc, h=0x2530065f) returned 0x1b00017 [0079.671] MoveToEx (in: hdc=0x450109dc, x=0, y=22, lppt=0x22aed58 | out: lppt=0x22aed58) returned 1 [0079.671] LineTo (hdc=0x450109dc, x=25, y=22) returned 1 [0079.671] SetBkMode (hdc=0x450109dc, mode=2) returned 1 [0079.671] MoveToEx (in: hdc=0x450109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.671] GetROP2 (hdc=0x450109dc) returned 13 [0079.671] GetBkMode (hdc=0x450109dc) returned 2 [0079.671] SetBkMode (hdc=0x450109dc, mode=1) returned 2 [0079.671] SelectObject (hdc=0x450109dc, h=0x2530065f) returned 0x2530065f [0079.671] MoveToEx (in: hdc=0x450109dc, x=25, y=22, lppt=0x22aed70 | out: lppt=0x22aed70) returned 1 [0079.671] LineTo (hdc=0x450109dc, x=25, y=-1) returned 1 [0079.671] SetBkMode (hdc=0x450109dc, mode=2) returned 1 [0079.671] MoveToEx (in: hdc=0x450109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.671] SelectObject (hdc=0x450109dc, h=0x1b00017) returned 0x2530065f [0079.671] DeleteObject (ho=0x2530065f) returned 1 [0079.672] GetROP2 (hdc=0x450109dc) returned 13 [0079.672] GetBkMode (hdc=0x450109dc) returned 2 [0079.672] SetBkMode (hdc=0x450109dc, mode=1) returned 2 [0079.672] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x47300991 [0079.672] SelectObject (hdc=0x450109dc, h=0x47300991) returned 0x1b00017 [0079.672] MoveToEx (in: hdc=0x450109dc, x=24, y=1, lppt=0x22aedd8 | out: lppt=0x22aedd8) returned 1 [0079.672] LineTo (hdc=0x450109dc, x=1, y=1) returned 1 [0079.672] SetBkMode (hdc=0x450109dc, mode=2) returned 1 [0079.672] MoveToEx (in: hdc=0x450109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.672] GetROP2 (hdc=0x450109dc) returned 13 [0079.672] GetBkMode (hdc=0x450109dc) returned 2 [0079.672] SetBkMode (hdc=0x450109dc, mode=1) returned 2 [0079.672] SelectObject (hdc=0x450109dc, h=0x47300991) returned 0x47300991 [0079.672] MoveToEx (in: hdc=0x450109dc, x=1, y=1, lppt=0x22aedf0 | out: lppt=0x22aedf0) returned 1 [0079.672] LineTo (hdc=0x450109dc, x=1, y=21) returned 1 [0079.672] SetBkMode (hdc=0x450109dc, mode=2) returned 1 [0079.672] MoveToEx (in: hdc=0x450109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.672] SelectObject (hdc=0x450109dc, h=0x1b00017) returned 0x47300991 [0079.672] DeleteObject (ho=0x47300991) returned 1 [0079.672] GetROP2 (hdc=0x450109dc) returned 13 [0079.672] GetBkMode (hdc=0x450109dc) returned 2 [0079.672] SetBkMode (hdc=0x450109dc, mode=1) returned 2 [0079.672] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x2630065f [0079.673] SelectObject (hdc=0x450109dc, h=0x2630065f) returned 0x1b00017 [0079.673] MoveToEx (in: hdc=0x450109dc, x=1, y=21, lppt=0x22aee58 | out: lppt=0x22aee58) returned 1 [0079.673] LineTo (hdc=0x450109dc, x=24, y=21) returned 1 [0079.673] SetBkMode (hdc=0x450109dc, mode=2) returned 1 [0079.673] MoveToEx (in: hdc=0x450109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.673] GetROP2 (hdc=0x450109dc) returned 13 [0079.673] GetBkMode (hdc=0x450109dc) returned 2 [0079.673] SetBkMode (hdc=0x450109dc, mode=1) returned 2 [0079.673] SelectObject (hdc=0x450109dc, h=0x2630065f) returned 0x2630065f [0079.673] MoveToEx (in: hdc=0x450109dc, x=24, y=21, lppt=0x22aee70 | out: lppt=0x22aee70) returned 1 [0079.673] LineTo (hdc=0x450109dc, x=24, y=0) returned 1 [0079.673] SetBkMode (hdc=0x450109dc, mode=2) returned 1 [0079.673] MoveToEx (in: hdc=0x450109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.673] SelectObject (hdc=0x450109dc, h=0x1b00017) returned 0x2630065f [0079.673] DeleteObject (ho=0x2630065f) returned 1 [0079.673] RestoreDC (hdc=0x450109dc, nSavedDC=-1) returned 1 [0079.673] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x450109dc) returned 0x0 [0079.673] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0079.673] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x450109dc, x1=0, y1=0, rop=0xcc0020) returned 1 [0079.673] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x450109dc) returned 0x0 [0079.674] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0079.674] SelectObject (hdc=0x450109dc, h=0x185000f) returned 0x160506a9 [0079.674] DeleteDC (hdc=0x450109dc) returned 1 [0079.674] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0079.674] EndPaint (hWnd=0x40206, lpPaint=0x14e548) returned 1 [0079.674] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.674] IsWindowUnicode (hWnd=0x60204) returned 1 [0079.674] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.674] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.674] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.674] BeginPaint (in: hWnd=0x60204, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0079.675] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0079.675] CreateCompatibleDC (hdc=0xc0100ae) returned 0x1f0109db [0079.675] SelectObject (hdc=0x1f0109db, h=0x160506a9) returned 0x185000f [0079.675] GdipCreateFromHDC (hdc=0x1f0109db, graphics=0x14e528) returned 0x0 [0079.675] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0079.675] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=58, height=23, combineMode=0x0) returned 0x0 [0079.675] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0079.675] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0079.675] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0079.675] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cb90 [0079.675] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cb90) returned 0x0 [0079.675] LocalFree (hMem=0x1d92cb90) returned 0x0 [0079.675] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0079.675] GdipCreateRegion (region=0x14e550) returned 0x0 [0079.675] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0079.675] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0079.675] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0079.675] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd3c0dbd) returned 0x0 [0079.676] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0079.676] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0079.676] GetCurrentObject (hdc=0x1f0109db, type=0x1) returned 0x1b00017 [0079.676] GetCurrentObject (hdc=0x1f0109db, type=0x2) returned 0x1900010 [0079.676] GetCurrentObject (hdc=0x1f0109db, type=0x7) returned 0x160506a9 [0079.676] GetCurrentObject (hdc=0x1f0109db, type=0x6) returned 0x18a0048 [0079.676] SaveDC (hdc=0x1f0109db) returned 1 [0079.676] GetNearestColor (hdc=0x1f0109db, color=0xf0f0f0) returned 0xf0f0f0 [0079.676] GetNearestColor (hdc=0x1f0109db, color=0xa0a0a0) returned 0xa0a0a0 [0079.676] GetNearestColor (hdc=0x1f0109db, color=0x696969) returned 0x696969 [0079.676] GetNearestColor (hdc=0x1f0109db, color=0xa0a0a0) returned 0xa0a0a0 [0079.676] GetNearestColor (hdc=0x1f0109db, color=0x0) returned 0x0 [0079.676] GetNearestColor (hdc=0x1f0109db, color=0xffffff) returned 0xffffff [0080.044] GetNearestColor (hdc=0x1f0109db, color=0xe5e5e5) returned 0xe5e5e5 [0080.044] GetNearestColor (hdc=0x1f0109db, color=0xd8d8d8) returned 0xd8d8d8 [0080.044] GetNearestColor (hdc=0x1f0109db, color=0x0) returned 0x0 [0080.044] RestoreDC (hdc=0x1f0109db, nSavedDC=-1) returned 1 [0080.044] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x1f0109db) returned 0x0 [0080.045] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.045] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExñ*\x02", lpUsedDefaultChar=0x0) returned 17 [0080.045] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.045] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22af790) returned 0x0 [0080.045] GdipSetStringFormatAlign (format=0x1beb7f40, align=0x1) returned 0x0 [0080.045] GdipSetStringFormatLineAlign (format=0x1beb7f40, align=0x1) returned 0x0 [0080.045] GdipSetStringFormatHotkeyPrefix (format=0x1beb7f40, hotkeyPrefix=1) returned 0x0 [0080.045] GdipGetStringFormatFlags (format=0x1beb7f40, flags=0x14e378) returned 0x0 [0080.045] GdipGetStringFormatTrimming (format=0x1beb7f40, trimming=0x14e378) returned 0x0 [0080.045] GdipGetStringFormatHotkeyPrefix (format=0x1beb7f40, hotkeyPrefix=0x14e378) returned 0x0 [0080.045] GdipGetFontSize (font=0x1beb7f40, size=0x14e378) returned 0x0 [0080.045] GdipGetFontStyle (font=0x1beb7f40, style=0x14e378) returned 0x0 [0080.045] GdipDeleteStringFormat (format=0x1beb7f40) returned 0x0 [0080.045] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.046] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.046] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0080.046] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22af8c0) returned 0x0 [0080.046] GdipSetStringFormatFlags (format=0x1beb7e60, flags=0) returned 0x0 [0080.046] GdipSetStringFormatTrimming (format=0x1beb7e60, trimming=0x1) returned 0x0 [0080.046] GdipSetStringFormatHotkeyPrefix (format=0x1beb7e60, hotkeyPrefix=1) returned 0x0 [0080.046] GdipSetStringFormatAlign (format=0x1beb7e60, align=0x1) returned 0x0 [0080.046] GdipSetStringFormatLineAlign (format=0x1beb7e60, align=0x1) returned 0x0 [0080.046] GdipMeasureString (graphics=0x1beb8070, string="=", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7e60, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0080.046] GdipDeleteStringFormat (format=0x1beb7e60) returned 0x0 [0080.046] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0080.046] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.047] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.047] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0080.047] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.047] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0080.047] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.047] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0080.047] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0080.047] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d2d0) returned 0x0 [0080.047] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0080.047] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0080.047] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d2d0) returned 0x0 [0080.047] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0080.047] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.047] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0080.047] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0080.047] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0080.047] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.047] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0080.047] GetCurrentObject (hdc=0x1f0109db, type=0x1) returned 0x1b00017 [0080.047] GetCurrentObject (hdc=0x1f0109db, type=0x2) returned 0x1900010 [0080.048] GetCurrentObject (hdc=0x1f0109db, type=0x7) returned 0x160506a9 [0080.048] GetCurrentObject (hdc=0x1f0109db, type=0x6) returned 0x18a0048 [0080.048] SaveDC (hdc=0x1f0109db) returned 1 [0080.048] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffab04095c [0080.048] GetClipRgn (hdc=0x1f0109db, hrgn=0xffffffffab04095c) returned 0 [0080.048] SelectClipRgn (hdc=0x1f0109db, hrgn=0x6c0406c7) returned 2 [0080.048] DeleteObject (ho=0xffffffffab04095c) returned 1 [0080.048] DeleteObject (ho=0x6c0406c7) returned 1 [0080.048] OffsetViewportOrgEx (in: hdc=0x1f0109db, x=0, y=0, lppt=0x22afc80 | out: lppt=0x22afc80) returned 1 [0080.048] GetNearestColor (hdc=0x1f0109db, color=0xf0f0f0) returned 0xf0f0f0 [0080.048] CreateSolidBrush (color=0xf0f0f0) returned 0x4e100559 [0080.048] FillRect (hDC=0x1f0109db, lprc=0x14e1c8, hbr=0x4e100559) returned 1 [0080.048] DeleteObject (ho=0x4e100559) returned 1 [0080.048] RestoreDC (hdc=0x1f0109db, nSavedDC=-1) returned 1 [0080.048] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x1f0109db) returned 0x0 [0080.048] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0080.049] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.049] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22afd80) returned 0x0 [0080.049] GdipSetStringFormatAlign (format=0x1beb7bc0, align=0x1) returned 0x0 [0080.049] GdipSetStringFormatLineAlign (format=0x1beb7bc0, align=0x1) returned 0x0 [0080.049] GdipSetStringFormatHotkeyPrefix (format=0x1beb7bc0, hotkeyPrefix=1) returned 0x0 [0080.049] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0080.049] GdipDrawString (graphics=0x1beb67f0, string="=", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7bc0, brush=0x1beb15e0) returned 0x0 [0080.049] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0080.049] GdipDeleteStringFormat (format=0x1beb7bc0) returned 0x0 [0080.049] GetFocus () returned 0x0 [0080.053] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExî*\x02", lpUsedDefaultChar=0x0) returned 17 [0080.053] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.053] GdipCreateRegion (region=0x14e030) returned 0x0 [0080.053] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.053] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0080.053] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.053] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0080.053] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0080.053] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d2d0) returned 0x0 [0080.053] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0080.053] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92ca90 [0080.053] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92ca90) returned 0x0 [0080.053] LocalFree (hMem=0x1d92ca90) returned 0x0 [0080.053] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.053] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0080.053] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0080.054] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0080.054] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.054] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0080.054] GetCurrentObject (hdc=0x1f0109db, type=0x1) returned 0x1b00017 [0080.054] GetCurrentObject (hdc=0x1f0109db, type=0x2) returned 0x1900010 [0080.054] GetCurrentObject (hdc=0x1f0109db, type=0x7) returned 0x160506a9 [0080.054] GetCurrentObject (hdc=0x1f0109db, type=0x6) returned 0x18a0048 [0080.054] SaveDC (hdc=0x1f0109db) returned 1 [0080.054] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6d0406c7 [0080.054] GetClipRgn (hdc=0x1f0109db, hrgn=0x6d0406c7) returned 0 [0080.054] SelectClipRgn (hdc=0x1f0109db, hrgn=0xffffffffac04095c) returned 2 [0080.054] DeleteObject (ho=0x6d0406c7) returned 1 [0080.054] DeleteObject (ho=0xffffffffac04095c) returned 1 [0080.054] OffsetViewportOrgEx (in: hdc=0x1f0109db, x=0, y=0, lppt=0x22b0168 | out: lppt=0x22b0168) returned 1 [0080.054] GetROP2 (hdc=0x1f0109db) returned 13 [0080.054] GetBkMode (hdc=0x1f0109db) returned 2 [0080.054] SetBkMode (hdc=0x1f0109db, mode=1) returned 2 [0080.055] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x7e30066f [0080.055] SelectObject (hdc=0x1f0109db, h=0x7e30066f) returned 0x1b00017 [0080.055] MoveToEx (in: hdc=0x1f0109db, x=57, y=0, lppt=0x22b01d0 | out: lppt=0x22b01d0) returned 1 [0080.055] LineTo (hdc=0x1f0109db, x=0, y=0) returned 1 [0080.055] SetBkMode (hdc=0x1f0109db, mode=2) returned 1 [0080.055] MoveToEx (in: hdc=0x1f0109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.055] GetROP2 (hdc=0x1f0109db) returned 13 [0080.055] GetBkMode (hdc=0x1f0109db) returned 2 [0080.055] SetBkMode (hdc=0x1f0109db, mode=1) returned 2 [0080.055] SelectObject (hdc=0x1f0109db, h=0x7e30066f) returned 0x7e30066f [0080.055] MoveToEx (in: hdc=0x1f0109db, x=0, y=0, lppt=0x22b01e8 | out: lppt=0x22b01e8) returned 1 [0080.055] LineTo (hdc=0x1f0109db, x=0, y=22) returned 1 [0080.055] SetBkMode (hdc=0x1f0109db, mode=2) returned 1 [0080.055] MoveToEx (in: hdc=0x1f0109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.055] SelectObject (hdc=0x1f0109db, h=0x1b00017) returned 0x7e30066f [0080.055] DeleteObject (ho=0x7e30066f) returned 1 [0080.055] GetROP2 (hdc=0x1f0109db) returned 13 [0080.055] GetBkMode (hdc=0x1f0109db) returned 2 [0080.055] SetBkMode (hdc=0x1f0109db, mode=1) returned 2 [0080.055] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x653009e0 [0080.055] SelectObject (hdc=0x1f0109db, h=0x653009e0) returned 0x1b00017 [0080.055] MoveToEx (in: hdc=0x1f0109db, x=0, y=22, lppt=0x22b0250 | out: lppt=0x22b0250) returned 1 [0080.055] LineTo (hdc=0x1f0109db, x=57, y=22) returned 1 [0080.056] SetBkMode (hdc=0x1f0109db, mode=2) returned 1 [0080.056] MoveToEx (in: hdc=0x1f0109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.056] GetROP2 (hdc=0x1f0109db) returned 13 [0080.056] GetBkMode (hdc=0x1f0109db) returned 2 [0080.056] SetBkMode (hdc=0x1f0109db, mode=1) returned 2 [0080.056] SelectObject (hdc=0x1f0109db, h=0x653009e0) returned 0x653009e0 [0080.056] MoveToEx (in: hdc=0x1f0109db, x=57, y=22, lppt=0x22b0268 | out: lppt=0x22b0268) returned 1 [0080.056] LineTo (hdc=0x1f0109db, x=57, y=-1) returned 1 [0080.056] SetBkMode (hdc=0x1f0109db, mode=2) returned 1 [0080.056] MoveToEx (in: hdc=0x1f0109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.056] SelectObject (hdc=0x1f0109db, h=0x1b00017) returned 0x653009e0 [0080.056] DeleteObject (ho=0x653009e0) returned 1 [0080.056] GetROP2 (hdc=0x1f0109db) returned 13 [0080.056] GetBkMode (hdc=0x1f0109db) returned 2 [0080.056] SetBkMode (hdc=0x1f0109db, mode=1) returned 2 [0080.056] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x7f30066f [0080.056] SelectObject (hdc=0x1f0109db, h=0x7f30066f) returned 0x1b00017 [0080.056] MoveToEx (in: hdc=0x1f0109db, x=56, y=1, lppt=0x22b02d0 | out: lppt=0x22b02d0) returned 1 [0080.056] LineTo (hdc=0x1f0109db, x=1, y=1) returned 1 [0080.056] SetBkMode (hdc=0x1f0109db, mode=2) returned 1 [0080.056] MoveToEx (in: hdc=0x1f0109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.056] GetROP2 (hdc=0x1f0109db) returned 13 [0080.057] GetBkMode (hdc=0x1f0109db) returned 2 [0080.057] SetBkMode (hdc=0x1f0109db, mode=1) returned 2 [0080.057] SelectObject (hdc=0x1f0109db, h=0x7f30066f) returned 0x7f30066f [0080.057] MoveToEx (in: hdc=0x1f0109db, x=1, y=1, lppt=0x22b02e8 | out: lppt=0x22b02e8) returned 1 [0080.057] LineTo (hdc=0x1f0109db, x=1, y=21) returned 1 [0080.057] SetBkMode (hdc=0x1f0109db, mode=2) returned 1 [0080.057] MoveToEx (in: hdc=0x1f0109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.057] SelectObject (hdc=0x1f0109db, h=0x1b00017) returned 0x7f30066f [0080.057] DeleteObject (ho=0x7f30066f) returned 1 [0080.057] GetROP2 (hdc=0x1f0109db) returned 13 [0080.057] GetBkMode (hdc=0x1f0109db) returned 2 [0080.057] SetBkMode (hdc=0x1f0109db, mode=1) returned 2 [0080.057] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x663009e0 [0080.057] SelectObject (hdc=0x1f0109db, h=0x663009e0) returned 0x1b00017 [0080.057] MoveToEx (in: hdc=0x1f0109db, x=1, y=21, lppt=0x22b0350 | out: lppt=0x22b0350) returned 1 [0080.057] LineTo (hdc=0x1f0109db, x=56, y=21) returned 1 [0080.057] SetBkMode (hdc=0x1f0109db, mode=2) returned 1 [0080.057] MoveToEx (in: hdc=0x1f0109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.057] GetROP2 (hdc=0x1f0109db) returned 13 [0080.057] GetBkMode (hdc=0x1f0109db) returned 2 [0080.057] SetBkMode (hdc=0x1f0109db, mode=1) returned 2 [0080.057] SelectObject (hdc=0x1f0109db, h=0x663009e0) returned 0x663009e0 [0080.058] MoveToEx (in: hdc=0x1f0109db, x=56, y=21, lppt=0x22b0368 | out: lppt=0x22b0368) returned 1 [0080.058] LineTo (hdc=0x1f0109db, x=56, y=0) returned 1 [0080.058] SetBkMode (hdc=0x1f0109db, mode=2) returned 1 [0080.058] MoveToEx (in: hdc=0x1f0109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.058] SelectObject (hdc=0x1f0109db, h=0x1b00017) returned 0x663009e0 [0080.058] DeleteObject (ho=0x663009e0) returned 1 [0080.058] RestoreDC (hdc=0x1f0109db, nSavedDC=-1) returned 1 [0080.058] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x1f0109db) returned 0x0 [0080.058] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0080.058] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=58, cy=23, hdcSrc=0x1f0109db, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.058] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x1f0109db) returned 0x0 [0080.058] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0080.058] SelectObject (hdc=0x1f0109db, h=0x185000f) returned 0x160506a9 [0080.059] DeleteDC (hdc=0x1f0109db) returned 1 [0080.059] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0080.059] EndPaint (hWnd=0x60204, lpPaint=0x14e548) returned 1 [0080.059] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.059] IsWindowUnicode (hWnd=0x602d4) returned 1 [0080.059] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.059] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.059] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0080.059] BeginPaint (in: hWnd=0x602d4, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0080.059] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0080.059] CreateCompatibleDC (hdc=0xc0100ae) returned 0x4c01065f [0080.059] SelectObject (hdc=0x4c01065f, h=0x160506a9) returned 0x185000f [0080.059] GdipCreateFromHDC (hdc=0x4c01065f, graphics=0x14e528) returned 0x0 [0080.060] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0080.060] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=58, height=23, combineMode=0x0) returned 0x0 [0080.060] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0080.060] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.060] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0080.060] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d350 [0080.060] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d350) returned 0x0 [0080.060] LocalFree (hMem=0x1d92d350) returned 0x0 [0080.060] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.060] GdipCreateRegion (region=0x14e550) returned 0x0 [0080.060] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.060] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0080.060] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0080.060] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd390dbd) returned 0x0 [0080.060] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.060] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0080.060] GetCurrentObject (hdc=0x4c01065f, type=0x1) returned 0x1b00017 [0080.060] GetCurrentObject (hdc=0x4c01065f, type=0x2) returned 0x1900010 [0080.060] GetCurrentObject (hdc=0x4c01065f, type=0x7) returned 0x160506a9 [0080.060] GetCurrentObject (hdc=0x4c01065f, type=0x6) returned 0x18a0048 [0080.061] SaveDC (hdc=0x4c01065f) returned 1 [0080.061] GetNearestColor (hdc=0x4c01065f, color=0xf0f0f0) returned 0xf0f0f0 [0080.061] GetNearestColor (hdc=0x4c01065f, color=0xa0a0a0) returned 0xa0a0a0 [0080.061] GetNearestColor (hdc=0x4c01065f, color=0x696969) returned 0x696969 [0080.061] GetNearestColor (hdc=0x4c01065f, color=0xa0a0a0) returned 0xa0a0a0 [0080.061] GetNearestColor (hdc=0x4c01065f, color=0x0) returned 0x0 [0080.061] GetNearestColor (hdc=0x4c01065f, color=0xffffff) returned 0xffffff [0080.061] GetNearestColor (hdc=0x4c01065f, color=0xe5e5e5) returned 0xe5e5e5 [0080.061] GetNearestColor (hdc=0x4c01065f, color=0xd8d8d8) returned 0xd8d8d8 [0080.061] GetNearestColor (hdc=0x4c01065f, color=0x0) returned 0x0 [0080.061] RestoreDC (hdc=0x4c01065f, nSavedDC=-1) returned 1 [0080.061] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x4c01065f) returned 0x0 [0080.061] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.062] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x06+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.062] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.062] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b0c88) returned 0x0 [0080.062] GdipSetStringFormatAlign (format=0x1beb7fb0, align=0x1) returned 0x0 [0080.062] GdipSetStringFormatLineAlign (format=0x1beb7fb0, align=0x1) returned 0x0 [0080.062] GdipSetStringFormatHotkeyPrefix (format=0x1beb7fb0, hotkeyPrefix=1) returned 0x0 [0080.062] GdipGetStringFormatFlags (format=0x1beb7fb0, flags=0x14e378) returned 0x0 [0080.062] GdipGetStringFormatTrimming (format=0x1beb7fb0, trimming=0x14e378) returned 0x0 [0080.062] GdipGetStringFormatHotkeyPrefix (format=0x1beb7fb0, hotkeyPrefix=0x14e378) returned 0x0 [0080.062] GdipGetFontSize (font=0x1beb7fb0, size=0x14e378) returned 0x0 [0080.062] GdipGetFontStyle (font=0x1beb7fb0, style=0x14e378) returned 0x0 [0080.062] GdipDeleteStringFormat (format=0x1beb7fb0) returned 0x0 [0080.062] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.062] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.063] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.063] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0080.063] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b0db8) returned 0x0 [0080.063] GdipSetStringFormatFlags (format=0x1beb7df0, flags=0) returned 0x0 [0080.063] GdipSetStringFormatTrimming (format=0x1beb7df0, trimming=0x1) returned 0x0 [0080.063] GdipSetStringFormatHotkeyPrefix (format=0x1beb7df0, hotkeyPrefix=1) returned 0x0 [0080.063] GdipSetStringFormatAlign (format=0x1beb7df0, align=0x1) returned 0x0 [0080.063] GdipSetStringFormatLineAlign (format=0x1beb7df0, align=0x1) returned 0x0 [0080.063] GdipMeasureString (graphics=0x1beb8070, string="log", length=3, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7df0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0080.063] GdipDeleteStringFormat (format=0x1beb7df0) returned 0x0 [0080.063] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0080.063] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.063] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.064] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.064] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0080.064] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.064] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0080.064] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.064] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0080.064] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92ca90 [0080.064] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92ca90) returned 0x0 [0080.064] LocalFree (hMem=0x1d92ca90) returned 0x0 [0080.064] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0080.064] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d710) returned 0x0 [0080.064] LocalFree (hMem=0x1d92d710) returned 0x0 [0080.064] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.064] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0080.064] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0080.064] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0080.064] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.064] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0080.064] GetCurrentObject (hdc=0x4c01065f, type=0x1) returned 0x1b00017 [0080.064] GetCurrentObject (hdc=0x4c01065f, type=0x2) returned 0x1900010 [0080.064] GetCurrentObject (hdc=0x4c01065f, type=0x7) returned 0x160506a9 [0080.065] GetCurrentObject (hdc=0x4c01065f, type=0x6) returned 0x18a0048 [0080.065] SaveDC (hdc=0x4c01065f) returned 1 [0080.065] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffad04095c [0080.065] GetClipRgn (hdc=0x4c01065f, hrgn=0xffffffffad04095c) returned 0 [0080.065] SelectClipRgn (hdc=0x4c01065f, hrgn=0x6e0406c7) returned 2 [0080.065] DeleteObject (ho=0xffffffffad04095c) returned 1 [0080.065] DeleteObject (ho=0x6e0406c7) returned 1 [0080.065] OffsetViewportOrgEx (in: hdc=0x4c01065f, x=0, y=0, lppt=0x22b1178 | out: lppt=0x22b1178) returned 1 [0080.065] GetNearestColor (hdc=0x4c01065f, color=0xf0f0f0) returned 0xf0f0f0 [0080.065] CreateSolidBrush (color=0xf0f0f0) returned 0x4f100559 [0080.065] FillRect (hDC=0x4c01065f, lprc=0x14e1c8, hbr=0x4f100559) returned 1 [0080.065] DeleteObject (ho=0x4f100559) returned 1 [0080.065] RestoreDC (hdc=0x4c01065f, nSavedDC=-1) returned 1 [0080.065] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x4c01065f) returned 0x0 [0080.065] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.065] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0080.066] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.066] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b1278) returned 0x0 [0080.066] GdipSetStringFormatAlign (format=0x1beb7fb0, align=0x1) returned 0x0 [0080.066] GdipSetStringFormatLineAlign (format=0x1beb7fb0, align=0x1) returned 0x0 [0080.066] GdipSetStringFormatHotkeyPrefix (format=0x1beb7fb0, hotkeyPrefix=1) returned 0x0 [0080.066] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0080.066] GdipDrawString (graphics=0x1beb67f0, string="log", length=3, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7fb0, brush=0x1beb15e0) returned 0x0 [0080.066] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0080.066] GdipDeleteStringFormat (format=0x1beb7fb0) returned 0x0 [0080.066] GetFocus () returned 0x0 [0080.066] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.067] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x03+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.067] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.067] GdipCreateRegion (region=0x14e030) returned 0x0 [0080.068] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.068] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0080.068] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.068] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0080.068] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d810 [0080.069] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d810) returned 0x0 [0080.069] LocalFree (hMem=0x1d92d810) returned 0x0 [0080.069] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d950 [0080.069] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d950) returned 0x0 [0080.069] LocalFree (hMem=0x1d92d950) returned 0x0 [0080.069] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.069] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0080.069] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0080.069] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0080.069] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.069] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0080.069] GetCurrentObject (hdc=0x4c01065f, type=0x1) returned 0x1b00017 [0080.069] GetCurrentObject (hdc=0x4c01065f, type=0x2) returned 0x1900010 [0080.069] GetCurrentObject (hdc=0x4c01065f, type=0x7) returned 0x160506a9 [0080.069] GetCurrentObject (hdc=0x4c01065f, type=0x6) returned 0x18a0048 [0080.069] SaveDC (hdc=0x4c01065f) returned 1 [0080.069] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6f0406c7 [0080.069] GetClipRgn (hdc=0x4c01065f, hrgn=0x6f0406c7) returned 0 [0080.069] SelectClipRgn (hdc=0x4c01065f, hrgn=0xffffffffae04095c) returned 2 [0080.069] DeleteObject (ho=0x6f0406c7) returned 1 [0080.069] DeleteObject (ho=0xffffffffae04095c) returned 1 [0080.070] OffsetViewportOrgEx (in: hdc=0x4c01065f, x=0, y=0, lppt=0x22b1660 | out: lppt=0x22b1660) returned 1 [0080.070] GetROP2 (hdc=0x4c01065f) returned 13 [0080.070] GetBkMode (hdc=0x4c01065f) returned 2 [0080.070] SetBkMode (hdc=0x4c01065f, mode=1) returned 2 [0080.070] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x673009e0 [0080.070] SelectObject (hdc=0x4c01065f, h=0x673009e0) returned 0x1b00017 [0080.070] MoveToEx (in: hdc=0x4c01065f, x=57, y=0, lppt=0x22b16c8 | out: lppt=0x22b16c8) returned 1 [0080.070] LineTo (hdc=0x4c01065f, x=0, y=0) returned 1 [0080.070] SetBkMode (hdc=0x4c01065f, mode=2) returned 1 [0080.070] MoveToEx (in: hdc=0x4c01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.070] GetROP2 (hdc=0x4c01065f) returned 13 [0080.070] GetBkMode (hdc=0x4c01065f) returned 2 [0080.070] SetBkMode (hdc=0x4c01065f, mode=1) returned 2 [0080.070] SelectObject (hdc=0x4c01065f, h=0x673009e0) returned 0x673009e0 [0080.070] MoveToEx (in: hdc=0x4c01065f, x=0, y=0, lppt=0x22b16e0 | out: lppt=0x22b16e0) returned 1 [0080.070] LineTo (hdc=0x4c01065f, x=0, y=22) returned 1 [0080.070] SetBkMode (hdc=0x4c01065f, mode=2) returned 1 [0080.070] MoveToEx (in: hdc=0x4c01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.070] SelectObject (hdc=0x4c01065f, h=0x1b00017) returned 0x673009e0 [0080.070] DeleteObject (ho=0x673009e0) returned 1 [0080.070] GetROP2 (hdc=0x4c01065f) returned 13 [0080.070] GetBkMode (hdc=0x4c01065f) returned 2 [0080.071] SetBkMode (hdc=0x4c01065f, mode=1) returned 2 [0080.071] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0xffffffff8030066f [0080.071] SelectObject (hdc=0x4c01065f, h=0xffffffff8030066f) returned 0x1b00017 [0080.071] MoveToEx (in: hdc=0x4c01065f, x=0, y=22, lppt=0x22b1748 | out: lppt=0x22b1748) returned 1 [0080.071] LineTo (hdc=0x4c01065f, x=57, y=22) returned 1 [0080.071] SetBkMode (hdc=0x4c01065f, mode=2) returned 1 [0080.071] MoveToEx (in: hdc=0x4c01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.071] GetROP2 (hdc=0x4c01065f) returned 13 [0080.071] GetBkMode (hdc=0x4c01065f) returned 2 [0080.071] SetBkMode (hdc=0x4c01065f, mode=1) returned 2 [0080.071] SelectObject (hdc=0x4c01065f, h=0xffffffff8030066f) returned 0xffffffff8030066f [0080.071] MoveToEx (in: hdc=0x4c01065f, x=57, y=22, lppt=0x22b1760 | out: lppt=0x22b1760) returned 1 [0080.071] LineTo (hdc=0x4c01065f, x=57, y=-1) returned 1 [0080.071] SetBkMode (hdc=0x4c01065f, mode=2) returned 1 [0080.071] MoveToEx (in: hdc=0x4c01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.071] SelectObject (hdc=0x4c01065f, h=0x1b00017) returned 0xffffffff8030066f [0080.071] DeleteObject (ho=0xffffffff8030066f) returned 1 [0080.071] GetROP2 (hdc=0x4c01065f) returned 13 [0080.071] GetBkMode (hdc=0x4c01065f) returned 2 [0080.071] SetBkMode (hdc=0x4c01065f, mode=1) returned 2 [0080.071] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x683009e0 [0080.071] SelectObject (hdc=0x4c01065f, h=0x683009e0) returned 0x1b00017 [0080.072] MoveToEx (in: hdc=0x4c01065f, x=56, y=1, lppt=0x22b17c8 | out: lppt=0x22b17c8) returned 1 [0080.072] LineTo (hdc=0x4c01065f, x=1, y=1) returned 1 [0080.072] SetBkMode (hdc=0x4c01065f, mode=2) returned 1 [0080.072] MoveToEx (in: hdc=0x4c01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.072] GetROP2 (hdc=0x4c01065f) returned 13 [0080.072] GetBkMode (hdc=0x4c01065f) returned 2 [0080.072] SetBkMode (hdc=0x4c01065f, mode=1) returned 2 [0080.072] SelectObject (hdc=0x4c01065f, h=0x683009e0) returned 0x683009e0 [0080.072] MoveToEx (in: hdc=0x4c01065f, x=1, y=1, lppt=0x22b17e0 | out: lppt=0x22b17e0) returned 1 [0080.072] LineTo (hdc=0x4c01065f, x=1, y=21) returned 1 [0080.072] SetBkMode (hdc=0x4c01065f, mode=2) returned 1 [0080.072] MoveToEx (in: hdc=0x4c01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.072] SelectObject (hdc=0x4c01065f, h=0x1b00017) returned 0x683009e0 [0080.072] DeleteObject (ho=0x683009e0) returned 1 [0080.072] GetROP2 (hdc=0x4c01065f) returned 13 [0080.072] GetBkMode (hdc=0x4c01065f) returned 2 [0080.072] SetBkMode (hdc=0x4c01065f, mode=1) returned 2 [0080.072] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xffffffff8130066f [0080.072] SelectObject (hdc=0x4c01065f, h=0xffffffff8130066f) returned 0x1b00017 [0080.072] MoveToEx (in: hdc=0x4c01065f, x=1, y=21, lppt=0x22b1848 | out: lppt=0x22b1848) returned 1 [0080.072] LineTo (hdc=0x4c01065f, x=56, y=21) returned 1 [0080.072] SetBkMode (hdc=0x4c01065f, mode=2) returned 1 [0080.072] MoveToEx (in: hdc=0x4c01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.073] GetROP2 (hdc=0x4c01065f) returned 13 [0080.073] GetBkMode (hdc=0x4c01065f) returned 2 [0080.073] SetBkMode (hdc=0x4c01065f, mode=1) returned 2 [0080.073] SelectObject (hdc=0x4c01065f, h=0xffffffff8130066f) returned 0xffffffff8130066f [0080.073] MoveToEx (in: hdc=0x4c01065f, x=56, y=21, lppt=0x22b1860 | out: lppt=0x22b1860) returned 1 [0080.073] LineTo (hdc=0x4c01065f, x=56, y=0) returned 1 [0080.073] SetBkMode (hdc=0x4c01065f, mode=2) returned 1 [0080.073] MoveToEx (in: hdc=0x4c01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.073] SelectObject (hdc=0x4c01065f, h=0x1b00017) returned 0xffffffff8130066f [0080.073] DeleteObject (ho=0xffffffff8130066f) returned 1 [0080.073] RestoreDC (hdc=0x4c01065f, nSavedDC=-1) returned 1 [0080.073] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x4c01065f) returned 0x0 [0080.073] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0080.073] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=58, cy=23, hdcSrc=0x4c01065f, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.073] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x4c01065f) returned 0x0 [0080.073] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0080.073] SelectObject (hdc=0x4c01065f, h=0x185000f) returned 0x160506a9 [0080.074] DeleteDC (hdc=0x4c01065f) returned 1 [0080.074] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0080.074] EndPaint (hWnd=0x602d4, lpPaint=0x14e548) returned 1 [0080.074] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.074] IsWindowUnicode (hWnd=0x302ea) returned 1 [0080.074] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.074] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.074] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0080.074] BeginPaint (in: hWnd=0x302ea, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0080.074] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0080.074] CreateCompatibleDC (hdc=0x220106d6) returned 0x4d0109dc [0080.074] SelectObject (hdc=0x4d0109dc, h=0x160506a9) returned 0x185000f [0080.074] GdipCreateFromHDC (hdc=0x4d0109dc, graphics=0x14e528) returned 0x0 [0080.074] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0080.075] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=32, height=23, combineMode=0x0) returned 0x0 [0080.075] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0080.075] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.075] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0080.075] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0080.075] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d710) returned 0x0 [0080.075] LocalFree (hMem=0x1d92d710) returned 0x0 [0080.075] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.075] GdipCreateRegion (region=0x14e550) returned 0x0 [0080.075] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.075] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0080.075] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0080.075] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd360dbd) returned 0x0 [0080.075] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.075] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0080.075] GetCurrentObject (hdc=0x4d0109dc, type=0x1) returned 0x1b00017 [0080.075] GetCurrentObject (hdc=0x4d0109dc, type=0x2) returned 0x1900010 [0080.075] GetCurrentObject (hdc=0x4d0109dc, type=0x7) returned 0x160506a9 [0080.075] GetCurrentObject (hdc=0x4d0109dc, type=0x6) returned 0x18a0048 [0080.075] SaveDC (hdc=0x4d0109dc) returned 1 [0080.075] GetNearestColor (hdc=0x4d0109dc, color=0xf0f0f0) returned 0xf0f0f0 [0080.076] GetNearestColor (hdc=0x4d0109dc, color=0xa0a0a0) returned 0xa0a0a0 [0080.076] GetNearestColor (hdc=0x4d0109dc, color=0x696969) returned 0x696969 [0080.076] GetNearestColor (hdc=0x4d0109dc, color=0xa0a0a0) returned 0xa0a0a0 [0080.076] GetNearestColor (hdc=0x4d0109dc, color=0x0) returned 0x0 [0080.076] GetNearestColor (hdc=0x4d0109dc, color=0xffffff) returned 0xffffff [0080.076] GetNearestColor (hdc=0x4d0109dc, color=0xe5e5e5) returned 0xe5e5e5 [0080.076] GetNearestColor (hdc=0x4d0109dc, color=0xd8d8d8) returned 0xd8d8d8 [0080.076] GetNearestColor (hdc=0x4d0109dc, color=0x0) returned 0x0 [0080.076] RestoreDC (hdc=0x4d0109dc, nSavedDC=-1) returned 1 [0080.077] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x4d0109dc) returned 0x0 [0080.077] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.077] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x1b+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.077] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.077] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b2180) returned 0x0 [0080.077] GdipSetStringFormatAlign (format=0x1beb7b50, align=0x1) returned 0x0 [0080.077] GdipSetStringFormatLineAlign (format=0x1beb7b50, align=0x1) returned 0x0 [0080.077] GdipSetStringFormatHotkeyPrefix (format=0x1beb7b50, hotkeyPrefix=1) returned 0x0 [0080.077] GdipGetStringFormatFlags (format=0x1beb7b50, flags=0x14e378) returned 0x0 [0080.077] GdipGetStringFormatTrimming (format=0x1beb7b50, trimming=0x14e378) returned 0x0 [0080.077] GdipGetStringFormatHotkeyPrefix (format=0x1beb7b50, hotkeyPrefix=0x14e378) returned 0x0 [0080.077] GdipGetFontSize (font=0x1beb7b50, size=0x14e378) returned 0x0 [0080.077] GdipGetFontStyle (font=0x1beb7b50, style=0x14e378) returned 0x0 [0080.077] GdipDeleteStringFormat (format=0x1beb7b50) returned 0x0 [0080.078] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.078] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.078] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.078] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0080.078] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b22b0) returned 0x0 [0080.078] GdipSetStringFormatFlags (format=0x1beb7b50, flags=0) returned 0x0 [0080.078] GdipSetStringFormatTrimming (format=0x1beb7b50, trimming=0x1) returned 0x0 [0080.078] GdipSetStringFormatHotkeyPrefix (format=0x1beb7b50, hotkeyPrefix=1) returned 0x0 [0080.078] GdipSetStringFormatAlign (format=0x1beb7b50, align=0x1) returned 0x0 [0080.078] GdipSetStringFormatLineAlign (format=0x1beb7b50, align=0x1) returned 0x0 [0080.078] GdipMeasureString (graphics=0x1beb8070, string="e^", length=2, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7b50, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0080.078] GdipDeleteStringFormat (format=0x1beb7b50) returned 0x0 [0080.078] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0080.079] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.079] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.079] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.079] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0080.079] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.079] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0080.079] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.079] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0080.079] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d350 [0080.079] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d350) returned 0x0 [0080.079] LocalFree (hMem=0x1d92d350) returned 0x0 [0080.079] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d8d0 [0080.079] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d8d0) returned 0x0 [0080.079] LocalFree (hMem=0x1d92d8d0) returned 0x0 [0080.079] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.079] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0080.079] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0080.079] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0080.079] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.080] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0080.080] GetCurrentObject (hdc=0x4d0109dc, type=0x1) returned 0x1b00017 [0080.080] GetCurrentObject (hdc=0x4d0109dc, type=0x2) returned 0x1900010 [0080.080] GetCurrentObject (hdc=0x4d0109dc, type=0x7) returned 0x160506a9 [0080.080] GetCurrentObject (hdc=0x4d0109dc, type=0x6) returned 0x18a0048 [0080.080] SaveDC (hdc=0x4d0109dc) returned 1 [0080.080] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffaf04095c [0080.080] GetClipRgn (hdc=0x4d0109dc, hrgn=0xffffffffaf04095c) returned 0 [0080.080] SelectClipRgn (hdc=0x4d0109dc, hrgn=0x700406c7) returned 2 [0080.080] DeleteObject (ho=0xffffffffaf04095c) returned 1 [0080.080] DeleteObject (ho=0x700406c7) returned 1 [0080.080] OffsetViewportOrgEx (in: hdc=0x4d0109dc, x=0, y=0, lppt=0x22b2670 | out: lppt=0x22b2670) returned 1 [0080.080] GetNearestColor (hdc=0x4d0109dc, color=0xf0f0f0) returned 0xf0f0f0 [0080.080] CreateSolidBrush (color=0xf0f0f0) returned 0x50100559 [0080.080] FillRect (hDC=0x4d0109dc, lprc=0x14e1c8, hbr=0x50100559) returned 1 [0080.080] DeleteObject (ho=0x50100559) returned 1 [0080.080] RestoreDC (hdc=0x4d0109dc, nSavedDC=-1) returned 1 [0080.080] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x4d0109dc) returned 0x0 [0080.081] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.081] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0080.081] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.081] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b2770) returned 0x0 [0080.081] GdipSetStringFormatAlign (format=0x1beb78b0, align=0x1) returned 0x0 [0080.081] GdipSetStringFormatLineAlign (format=0x1beb78b0, align=0x1) returned 0x0 [0080.081] GdipSetStringFormatHotkeyPrefix (format=0x1beb78b0, hotkeyPrefix=1) returned 0x0 [0080.081] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0080.081] GdipDrawString (graphics=0x1beb67f0, string="e^", length=2, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb78b0, brush=0x1beb15e0) returned 0x0 [0080.081] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0080.081] GdipDeleteStringFormat (format=0x1beb78b0) returned 0x0 [0080.081] GetFocus () returned 0x0 [0080.082] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.082] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x18+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.082] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.082] GdipCreateRegion (region=0x14e030) returned 0x0 [0080.082] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.082] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0080.082] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.082] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0080.082] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0080.082] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cf10) returned 0x0 [0080.082] LocalFree (hMem=0x1d92cf10) returned 0x0 [0080.082] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cb90 [0080.082] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cb90) returned 0x0 [0080.216] LocalFree (hMem=0x1d92cb90) returned 0x0 [0080.216] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.216] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0080.216] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0080.216] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0080.216] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.216] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0080.216] GetCurrentObject (hdc=0x4d0109dc, type=0x1) returned 0x1b00017 [0080.216] GetCurrentObject (hdc=0x4d0109dc, type=0x2) returned 0x1900010 [0080.216] GetCurrentObject (hdc=0x4d0109dc, type=0x7) returned 0x160506a9 [0080.216] GetCurrentObject (hdc=0x4d0109dc, type=0x6) returned 0x18a0048 [0080.216] SaveDC (hdc=0x4d0109dc) returned 1 [0080.216] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x710406c7 [0080.216] GetClipRgn (hdc=0x4d0109dc, hrgn=0x710406c7) returned 0 [0080.217] SelectClipRgn (hdc=0x4d0109dc, hrgn=0xffffffffb004095c) returned 2 [0080.217] DeleteObject (ho=0x710406c7) returned 1 [0080.217] DeleteObject (ho=0xffffffffb004095c) returned 1 [0080.217] OffsetViewportOrgEx (in: hdc=0x4d0109dc, x=0, y=0, lppt=0x22b2b58 | out: lppt=0x22b2b58) returned 1 [0080.217] GetROP2 (hdc=0x4d0109dc) returned 13 [0080.217] GetBkMode (hdc=0x4d0109dc) returned 2 [0080.217] SetBkMode (hdc=0x4d0109dc, mode=1) returned 2 [0080.217] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x43009e4 [0080.217] SelectObject (hdc=0x4d0109dc, h=0x43009e4) returned 0x1b00017 [0080.217] MoveToEx (in: hdc=0x4d0109dc, x=32, y=0, lppt=0x22b2bc0 | out: lppt=0x22b2bc0) returned 1 [0080.217] LineTo (hdc=0x4d0109dc, x=0, y=0) returned 1 [0080.217] SetBkMode (hdc=0x4d0109dc, mode=2) returned 1 [0080.217] MoveToEx (in: hdc=0x4d0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.217] GetROP2 (hdc=0x4d0109dc) returned 13 [0080.217] GetBkMode (hdc=0x4d0109dc) returned 2 [0080.217] SetBkMode (hdc=0x4d0109dc, mode=1) returned 2 [0080.217] SelectObject (hdc=0x4d0109dc, h=0x43009e4) returned 0x43009e4 [0080.217] MoveToEx (in: hdc=0x4d0109dc, x=0, y=0, lppt=0x22b2bd8 | out: lppt=0x22b2bd8) returned 1 [0080.217] LineTo (hdc=0x4d0109dc, x=0, y=22) returned 1 [0080.217] SetBkMode (hdc=0x4d0109dc, mode=2) returned 1 [0080.217] MoveToEx (in: hdc=0x4d0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.218] SelectObject (hdc=0x4d0109dc, h=0x1b00017) returned 0x43009e4 [0080.218] DeleteObject (ho=0x43009e4) returned 1 [0080.218] GetROP2 (hdc=0x4d0109dc) returned 13 [0080.218] GetBkMode (hdc=0x4d0109dc) returned 2 [0080.218] SetBkMode (hdc=0x4d0109dc, mode=1) returned 2 [0080.218] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x43009e5 [0080.218] SelectObject (hdc=0x4d0109dc, h=0x43009e5) returned 0x1b00017 [0080.218] MoveToEx (in: hdc=0x4d0109dc, x=0, y=22, lppt=0x22b2c40 | out: lppt=0x22b2c40) returned 1 [0080.218] LineTo (hdc=0x4d0109dc, x=32, y=22) returned 1 [0080.218] SetBkMode (hdc=0x4d0109dc, mode=2) returned 1 [0080.218] MoveToEx (in: hdc=0x4d0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.218] GetROP2 (hdc=0x4d0109dc) returned 13 [0080.218] GetBkMode (hdc=0x4d0109dc) returned 2 [0080.218] SetBkMode (hdc=0x4d0109dc, mode=1) returned 2 [0080.218] SelectObject (hdc=0x4d0109dc, h=0x43009e5) returned 0x43009e5 [0080.218] MoveToEx (in: hdc=0x4d0109dc, x=32, y=22, lppt=0x22b2c58 | out: lppt=0x22b2c58) returned 1 [0080.218] LineTo (hdc=0x4d0109dc, x=32, y=-1) returned 1 [0080.218] SetBkMode (hdc=0x4d0109dc, mode=2) returned 1 [0080.218] MoveToEx (in: hdc=0x4d0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.218] SelectObject (hdc=0x4d0109dc, h=0x1b00017) returned 0x43009e5 [0080.218] DeleteObject (ho=0x43009e5) returned 1 [0080.218] GetROP2 (hdc=0x4d0109dc) returned 13 [0080.218] GetBkMode (hdc=0x4d0109dc) returned 2 [0080.219] SetBkMode (hdc=0x4d0109dc, mode=1) returned 2 [0080.219] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x53009e4 [0080.219] SelectObject (hdc=0x4d0109dc, h=0x53009e4) returned 0x1b00017 [0080.219] MoveToEx (in: hdc=0x4d0109dc, x=31, y=1, lppt=0x22b2cc0 | out: lppt=0x22b2cc0) returned 1 [0080.219] LineTo (hdc=0x4d0109dc, x=1, y=1) returned 1 [0080.219] SetBkMode (hdc=0x4d0109dc, mode=2) returned 1 [0080.219] MoveToEx (in: hdc=0x4d0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.219] GetROP2 (hdc=0x4d0109dc) returned 13 [0080.219] GetBkMode (hdc=0x4d0109dc) returned 2 [0080.219] SetBkMode (hdc=0x4d0109dc, mode=1) returned 2 [0080.219] SelectObject (hdc=0x4d0109dc, h=0x53009e4) returned 0x53009e4 [0080.219] MoveToEx (in: hdc=0x4d0109dc, x=1, y=1, lppt=0x22b2cd8 | out: lppt=0x22b2cd8) returned 1 [0080.219] LineTo (hdc=0x4d0109dc, x=1, y=21) returned 1 [0080.219] SetBkMode (hdc=0x4d0109dc, mode=2) returned 1 [0080.219] MoveToEx (in: hdc=0x4d0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.219] SelectObject (hdc=0x4d0109dc, h=0x1b00017) returned 0x53009e4 [0080.219] DeleteObject (ho=0x53009e4) returned 1 [0080.219] GetROP2 (hdc=0x4d0109dc) returned 13 [0080.219] GetBkMode (hdc=0x4d0109dc) returned 2 [0080.219] SetBkMode (hdc=0x4d0109dc, mode=1) returned 2 [0080.219] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x53009e5 [0080.219] SelectObject (hdc=0x4d0109dc, h=0x53009e5) returned 0x1b00017 [0080.219] MoveToEx (in: hdc=0x4d0109dc, x=1, y=21, lppt=0x22b2d40 | out: lppt=0x22b2d40) returned 1 [0080.220] LineTo (hdc=0x4d0109dc, x=31, y=21) returned 1 [0080.220] SetBkMode (hdc=0x4d0109dc, mode=2) returned 1 [0080.220] MoveToEx (in: hdc=0x4d0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.220] GetROP2 (hdc=0x4d0109dc) returned 13 [0080.220] GetBkMode (hdc=0x4d0109dc) returned 2 [0080.220] SetBkMode (hdc=0x4d0109dc, mode=1) returned 2 [0080.220] SelectObject (hdc=0x4d0109dc, h=0x53009e5) returned 0x53009e5 [0080.220] MoveToEx (in: hdc=0x4d0109dc, x=31, y=21, lppt=0x22b2d58 | out: lppt=0x22b2d58) returned 1 [0080.220] LineTo (hdc=0x4d0109dc, x=31, y=0) returned 1 [0080.220] SetBkMode (hdc=0x4d0109dc, mode=2) returned 1 [0080.220] MoveToEx (in: hdc=0x4d0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.220] SelectObject (hdc=0x4d0109dc, h=0x1b00017) returned 0x53009e5 [0080.220] DeleteObject (ho=0x53009e5) returned 1 [0080.220] RestoreDC (hdc=0x4d0109dc, nSavedDC=-1) returned 1 [0080.220] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x4d0109dc) returned 0x0 [0080.220] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0080.220] BitBlt (hdc=0x220106d6, x=0, y=0, cx=33, cy=23, hdcSrc=0x4d0109dc, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.221] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x4d0109dc) returned 0x0 [0080.221] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0080.221] SelectObject (hdc=0x4d0109dc, h=0x185000f) returned 0x160506a9 [0080.221] DeleteDC (hdc=0x4d0109dc) returned 1 [0080.221] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0080.221] EndPaint (hWnd=0x302ea, lpPaint=0x14e548) returned 1 [0080.221] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.221] IsWindowUnicode (hWnd=0x3035a) returned 1 [0080.221] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.222] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.222] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0080.222] BeginPaint (in: hWnd=0x3035a, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0080.222] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0080.222] CreateCompatibleDC (hdc=0x220106d6) returned 0x270109db [0080.222] SelectObject (hdc=0x270109db, h=0x160506a9) returned 0x185000f [0080.222] GdipCreateFromHDC (hdc=0x270109db, graphics=0x14e528) returned 0x0 [0080.222] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0080.222] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0080.222] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0080.222] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.222] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0080.222] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0080.222] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d2d0) returned 0x0 [0080.222] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0080.222] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.222] GdipCreateRegion (region=0x14e550) returned 0x0 [0080.223] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.223] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0080.223] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0080.223] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd330dbd) returned 0x0 [0080.223] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.223] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0080.223] GetCurrentObject (hdc=0x270109db, type=0x1) returned 0x1b00017 [0080.223] GetCurrentObject (hdc=0x270109db, type=0x2) returned 0x1900010 [0080.223] GetCurrentObject (hdc=0x270109db, type=0x7) returned 0x160506a9 [0080.223] GetCurrentObject (hdc=0x270109db, type=0x6) returned 0x18a0048 [0080.225] SaveDC (hdc=0x270109db) returned 1 [0080.225] GetNearestColor (hdc=0x270109db, color=0xf0f0f0) returned 0xf0f0f0 [0080.225] GetNearestColor (hdc=0x270109db, color=0xa0a0a0) returned 0xa0a0a0 [0080.225] GetNearestColor (hdc=0x270109db, color=0x696969) returned 0x696969 [0080.225] GetNearestColor (hdc=0x270109db, color=0xa0a0a0) returned 0xa0a0a0 [0080.225] GetNearestColor (hdc=0x270109db, color=0x0) returned 0x0 [0080.225] GetNearestColor (hdc=0x270109db, color=0xffffff) returned 0xffffff [0080.225] GetNearestColor (hdc=0x270109db, color=0xe5e5e5) returned 0xe5e5e5 [0080.225] GetNearestColor (hdc=0x270109db, color=0xd8d8d8) returned 0xd8d8d8 [0080.225] GetNearestColor (hdc=0x270109db, color=0x0) returned 0x0 [0080.225] RestoreDC (hdc=0x270109db, nSavedDC=-1) returned 1 [0080.225] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x270109db) returned 0x0 [0080.225] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx0+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.226] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.226] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b3678) returned 0x0 [0080.226] GdipSetStringFormatAlign (format=0x1beb7920, align=0x1) returned 0x0 [0080.226] GdipSetStringFormatLineAlign (format=0x1beb7920, align=0x1) returned 0x0 [0080.226] GdipSetStringFormatHotkeyPrefix (format=0x1beb7920, hotkeyPrefix=1) returned 0x0 [0080.226] GdipGetStringFormatFlags (format=0x1beb7920, flags=0x14e378) returned 0x0 [0080.226] GdipGetStringFormatTrimming (format=0x1beb7920, trimming=0x14e378) returned 0x0 [0080.226] GdipGetStringFormatHotkeyPrefix (format=0x1beb7920, hotkeyPrefix=0x14e378) returned 0x0 [0080.226] GdipGetFontSize (font=0x1beb7920, size=0x14e378) returned 0x0 [0080.226] GdipGetFontStyle (font=0x1beb7920, style=0x14e378) returned 0x0 [0080.226] GdipDeleteStringFormat (format=0x1beb7920) returned 0x0 [0080.226] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.227] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.227] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0080.227] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b37a8) returned 0x0 [0080.227] GdipSetStringFormatFlags (format=0x1beb7a00, flags=0) returned 0x0 [0080.227] GdipSetStringFormatTrimming (format=0x1beb7a00, trimming=0x1) returned 0x0 [0080.227] GdipSetStringFormatHotkeyPrefix (format=0x1beb7a00, hotkeyPrefix=1) returned 0x0 [0080.227] GdipSetStringFormatAlign (format=0x1beb7a00, align=0x1) returned 0x0 [0080.227] GdipSetStringFormatLineAlign (format=0x1beb7a00, align=0x1) returned 0x0 [0080.227] GdipMeasureString (graphics=0x1beb8070, string="/", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7a00, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0080.227] GdipDeleteStringFormat (format=0x1beb7a00) returned 0x0 [0080.227] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0080.227] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.228] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.228] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0080.228] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.228] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0080.228] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.228] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0080.228] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d4d0 [0080.228] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d4d0) returned 0x0 [0080.228] LocalFree (hMem=0x1d92d4d0) returned 0x0 [0080.228] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0080.228] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d710) returned 0x0 [0080.228] LocalFree (hMem=0x1d92d710) returned 0x0 [0080.228] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.228] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0080.228] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0080.228] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0080.229] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.229] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0080.229] GetCurrentObject (hdc=0x270109db, type=0x1) returned 0x1b00017 [0080.229] GetCurrentObject (hdc=0x270109db, type=0x2) returned 0x1900010 [0080.229] GetCurrentObject (hdc=0x270109db, type=0x7) returned 0x160506a9 [0080.229] GetCurrentObject (hdc=0x270109db, type=0x6) returned 0x18a0048 [0080.229] SaveDC (hdc=0x270109db) returned 1 [0080.229] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb104095c [0080.229] GetClipRgn (hdc=0x270109db, hrgn=0xffffffffb104095c) returned 0 [0080.229] SelectClipRgn (hdc=0x270109db, hrgn=0x720406c7) returned 2 [0080.229] DeleteObject (ho=0xffffffffb104095c) returned 1 [0080.229] DeleteObject (ho=0x720406c7) returned 1 [0080.229] OffsetViewportOrgEx (in: hdc=0x270109db, x=0, y=0, lppt=0x22b3b68 | out: lppt=0x22b3b68) returned 1 [0080.229] GetNearestColor (hdc=0x270109db, color=0xf0f0f0) returned 0xf0f0f0 [0080.229] CreateSolidBrush (color=0xf0f0f0) returned 0x51100559 [0080.229] FillRect (hDC=0x270109db, lprc=0x14e1c8, hbr=0x51100559) returned 1 [0080.229] DeleteObject (ho=0x51100559) returned 1 [0080.229] RestoreDC (hdc=0x270109db, nSavedDC=-1) returned 1 [0080.229] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x270109db) returned 0x0 [0080.230] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.230] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0080.230] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.230] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b3c68) returned 0x0 [0080.230] GdipSetStringFormatAlign (format=0x1beb7920, align=0x1) returned 0x0 [0080.230] GdipSetStringFormatLineAlign (format=0x1beb7920, align=0x1) returned 0x0 [0080.230] GdipSetStringFormatHotkeyPrefix (format=0x1beb7920, hotkeyPrefix=1) returned 0x0 [0080.230] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0080.230] GdipDrawString (graphics=0x1beb67f0, string="/", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7920, brush=0x1beb15e0) returned 0x0 [0080.230] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0080.230] GdipDeleteStringFormat (format=0x1beb7920) returned 0x0 [0080.230] GetFocus () returned 0x0 [0080.231] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx-+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.231] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.231] GdipCreateRegion (region=0x14e030) returned 0x0 [0080.231] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.231] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0080.231] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.231] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0080.231] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d890 [0080.231] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d890) returned 0x0 [0080.231] LocalFree (hMem=0x1d92d890) returned 0x0 [0080.231] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0080.231] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0080.231] LocalFree (hMem=0x1d92cf10) returned 0x0 [0080.231] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.231] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0080.232] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0080.232] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0080.232] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.232] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0080.232] GetCurrentObject (hdc=0x270109db, type=0x1) returned 0x1b00017 [0080.232] GetCurrentObject (hdc=0x270109db, type=0x2) returned 0x1900010 [0080.232] GetCurrentObject (hdc=0x270109db, type=0x7) returned 0x160506a9 [0080.232] GetCurrentObject (hdc=0x270109db, type=0x6) returned 0x18a0048 [0080.232] SaveDC (hdc=0x270109db) returned 1 [0080.232] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x730406c7 [0080.232] GetClipRgn (hdc=0x270109db, hrgn=0x730406c7) returned 0 [0080.232] SelectClipRgn (hdc=0x270109db, hrgn=0xffffffffb204095c) returned 2 [0080.232] DeleteObject (ho=0x730406c7) returned 1 [0080.232] DeleteObject (ho=0xffffffffb204095c) returned 1 [0080.232] OffsetViewportOrgEx (in: hdc=0x270109db, x=0, y=0, lppt=0x22b4050 | out: lppt=0x22b4050) returned 1 [0080.232] GetROP2 (hdc=0x270109db) returned 13 [0080.232] GetBkMode (hdc=0x270109db) returned 2 [0080.233] SetBkMode (hdc=0x270109db, mode=1) returned 2 [0080.233] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x63009e5 [0080.233] SelectObject (hdc=0x270109db, h=0x63009e5) returned 0x1b00017 [0080.233] MoveToEx (in: hdc=0x270109db, x=25, y=0, lppt=0x22b40b8 | out: lppt=0x22b40b8) returned 1 [0080.233] LineTo (hdc=0x270109db, x=0, y=0) returned 1 [0080.233] SetBkMode (hdc=0x270109db, mode=2) returned 1 [0080.233] MoveToEx (in: hdc=0x270109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.233] GetROP2 (hdc=0x270109db) returned 13 [0080.233] GetBkMode (hdc=0x270109db) returned 2 [0080.233] SetBkMode (hdc=0x270109db, mode=1) returned 2 [0080.233] SelectObject (hdc=0x270109db, h=0x63009e5) returned 0x63009e5 [0080.233] MoveToEx (in: hdc=0x270109db, x=0, y=0, lppt=0x22b40d0 | out: lppt=0x22b40d0) returned 1 [0080.233] LineTo (hdc=0x270109db, x=0, y=22) returned 1 [0080.233] SetBkMode (hdc=0x270109db, mode=2) returned 1 [0080.233] MoveToEx (in: hdc=0x270109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.233] SelectObject (hdc=0x270109db, h=0x1b00017) returned 0x63009e5 [0080.233] DeleteObject (ho=0x63009e5) returned 1 [0080.233] GetROP2 (hdc=0x270109db) returned 13 [0080.233] GetBkMode (hdc=0x270109db) returned 2 [0080.233] SetBkMode (hdc=0x270109db, mode=1) returned 2 [0080.233] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x63009e4 [0080.233] SelectObject (hdc=0x270109db, h=0x63009e4) returned 0x1b00017 [0080.234] MoveToEx (in: hdc=0x270109db, x=0, y=22, lppt=0x22b4138 | out: lppt=0x22b4138) returned 1 [0080.234] LineTo (hdc=0x270109db, x=25, y=22) returned 1 [0080.234] SetBkMode (hdc=0x270109db, mode=2) returned 1 [0080.234] MoveToEx (in: hdc=0x270109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.234] GetROP2 (hdc=0x270109db) returned 13 [0080.234] GetBkMode (hdc=0x270109db) returned 2 [0080.234] SetBkMode (hdc=0x270109db, mode=1) returned 2 [0080.234] SelectObject (hdc=0x270109db, h=0x63009e4) returned 0x63009e4 [0080.234] MoveToEx (in: hdc=0x270109db, x=25, y=22, lppt=0x22b4150 | out: lppt=0x22b4150) returned 1 [0080.234] LineTo (hdc=0x270109db, x=25, y=-1) returned 1 [0080.234] SetBkMode (hdc=0x270109db, mode=2) returned 1 [0080.234] MoveToEx (in: hdc=0x270109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.234] SelectObject (hdc=0x270109db, h=0x1b00017) returned 0x63009e4 [0080.234] DeleteObject (ho=0x63009e4) returned 1 [0080.234] GetROP2 (hdc=0x270109db) returned 13 [0080.234] GetBkMode (hdc=0x270109db) returned 2 [0080.234] SetBkMode (hdc=0x270109db, mode=1) returned 2 [0080.234] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x73009e5 [0080.234] SelectObject (hdc=0x270109db, h=0x73009e5) returned 0x1b00017 [0080.234] MoveToEx (in: hdc=0x270109db, x=24, y=1, lppt=0x22b41b8 | out: lppt=0x22b41b8) returned 1 [0080.234] LineTo (hdc=0x270109db, x=1, y=1) returned 1 [0080.234] SetBkMode (hdc=0x270109db, mode=2) returned 1 [0080.234] MoveToEx (in: hdc=0x270109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.235] GetROP2 (hdc=0x270109db) returned 13 [0080.235] GetBkMode (hdc=0x270109db) returned 2 [0080.235] SetBkMode (hdc=0x270109db, mode=1) returned 2 [0080.235] SelectObject (hdc=0x270109db, h=0x73009e5) returned 0x73009e5 [0080.235] MoveToEx (in: hdc=0x270109db, x=1, y=1, lppt=0x22b41d0 | out: lppt=0x22b41d0) returned 1 [0080.235] LineTo (hdc=0x270109db, x=1, y=21) returned 1 [0080.235] SetBkMode (hdc=0x270109db, mode=2) returned 1 [0080.235] MoveToEx (in: hdc=0x270109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.235] SelectObject (hdc=0x270109db, h=0x1b00017) returned 0x73009e5 [0080.235] DeleteObject (ho=0x73009e5) returned 1 [0080.235] GetROP2 (hdc=0x270109db) returned 13 [0080.235] GetBkMode (hdc=0x270109db) returned 2 [0080.235] SetBkMode (hdc=0x270109db, mode=1) returned 2 [0080.235] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x73009e4 [0080.235] SelectObject (hdc=0x270109db, h=0x73009e4) returned 0x1b00017 [0080.235] MoveToEx (in: hdc=0x270109db, x=1, y=21, lppt=0x22b4238 | out: lppt=0x22b4238) returned 1 [0080.235] LineTo (hdc=0x270109db, x=24, y=21) returned 1 [0080.235] SetBkMode (hdc=0x270109db, mode=2) returned 1 [0080.235] MoveToEx (in: hdc=0x270109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.235] GetROP2 (hdc=0x270109db) returned 13 [0080.235] GetBkMode (hdc=0x270109db) returned 2 [0080.235] SetBkMode (hdc=0x270109db, mode=1) returned 2 [0080.235] SelectObject (hdc=0x270109db, h=0x73009e4) returned 0x73009e4 [0080.235] MoveToEx (in: hdc=0x270109db, x=24, y=21, lppt=0x22b4250 | out: lppt=0x22b4250) returned 1 [0080.236] LineTo (hdc=0x270109db, x=24, y=0) returned 1 [0080.236] SetBkMode (hdc=0x270109db, mode=2) returned 1 [0080.236] MoveToEx (in: hdc=0x270109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.236] SelectObject (hdc=0x270109db, h=0x1b00017) returned 0x73009e4 [0080.236] DeleteObject (ho=0x73009e4) returned 1 [0080.236] RestoreDC (hdc=0x270109db, nSavedDC=-1) returned 1 [0080.236] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x270109db) returned 0x0 [0080.236] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0080.236] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x270109db, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.236] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x270109db) returned 0x0 [0080.236] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0080.236] SelectObject (hdc=0x270109db, h=0x185000f) returned 0x160506a9 [0080.236] DeleteDC (hdc=0x270109db) returned 1 [0080.236] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0080.236] EndPaint (hWnd=0x3035a, lpPaint=0x14e548) returned 1 [0080.237] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.237] IsWindowUnicode (hWnd=0x30362) returned 1 [0080.237] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.237] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.237] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0080.237] BeginPaint (in: hWnd=0x30362, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0080.237] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0080.237] CreateCompatibleDC (hdc=0xc0100ae) returned 0x5501065f [0080.237] SelectObject (hdc=0x5501065f, h=0x160506a9) returned 0x185000f [0080.237] GdipCreateFromHDC (hdc=0x5501065f, graphics=0x14e528) returned 0x0 [0080.237] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0080.237] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0080.237] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0080.237] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.237] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0080.237] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0080.238] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d650) returned 0x0 [0080.238] LocalFree (hMem=0x1d92d650) returned 0x0 [0080.238] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.238] GdipCreateRegion (region=0x14e550) returned 0x0 [0080.238] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.238] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0080.238] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0080.238] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd300dbd) returned 0x0 [0080.238] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.238] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0080.238] GetCurrentObject (hdc=0x5501065f, type=0x1) returned 0x1b00017 [0080.238] GetCurrentObject (hdc=0x5501065f, type=0x2) returned 0x1900010 [0080.238] GetCurrentObject (hdc=0x5501065f, type=0x7) returned 0x160506a9 [0080.238] GetCurrentObject (hdc=0x5501065f, type=0x6) returned 0x18a0048 [0080.238] SaveDC (hdc=0x5501065f) returned 1 [0080.238] GetNearestColor (hdc=0x5501065f, color=0xf0f0f0) returned 0xf0f0f0 [0080.238] GetNearestColor (hdc=0x5501065f, color=0xa0a0a0) returned 0xa0a0a0 [0080.238] GetNearestColor (hdc=0x5501065f, color=0x696969) returned 0x696969 [0080.238] GetNearestColor (hdc=0x5501065f, color=0xa0a0a0) returned 0xa0a0a0 [0080.238] GetNearestColor (hdc=0x5501065f, color=0x0) returned 0x0 [0080.239] GetNearestColor (hdc=0x5501065f, color=0xffffff) returned 0xffffff [0080.239] GetNearestColor (hdc=0x5501065f, color=0xe5e5e5) returned 0xe5e5e5 [0080.239] GetNearestColor (hdc=0x5501065f, color=0xd8d8d8) returned 0xd8d8d8 [0080.240] GetNearestColor (hdc=0x5501065f, color=0x0) returned 0x0 [0080.240] RestoreDC (hdc=0x5501065f, nSavedDC=-1) returned 1 [0080.240] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5501065f) returned 0x0 [0080.241] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExE+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.241] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.241] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b4b70) returned 0x0 [0080.241] GdipSetStringFormatAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0080.241] GdipSetStringFormatLineAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0080.241] GdipSetStringFormatHotkeyPrefix (format=0x1beb7d10, hotkeyPrefix=1) returned 0x0 [0080.241] GdipGetStringFormatFlags (format=0x1beb7d10, flags=0x14e378) returned 0x0 [0080.241] GdipGetStringFormatTrimming (format=0x1beb7d10, trimming=0x14e378) returned 0x0 [0080.241] GdipGetStringFormatHotkeyPrefix (format=0x1beb7d10, hotkeyPrefix=0x14e378) returned 0x0 [0080.241] GdipGetFontSize (font=0x1beb7d10, size=0x14e378) returned 0x0 [0080.241] GdipGetFontStyle (font=0x1beb7d10, style=0x14e378) returned 0x0 [0080.241] GdipDeleteStringFormat (format=0x1beb7d10) returned 0x0 [0080.241] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.242] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.242] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0080.242] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b4ca0) returned 0x0 [0080.242] GdipSetStringFormatFlags (format=0x1beb7ca0, flags=0) returned 0x0 [0080.242] GdipSetStringFormatTrimming (format=0x1beb7ca0, trimming=0x1) returned 0x0 [0080.242] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ca0, hotkeyPrefix=1) returned 0x0 [0080.242] GdipSetStringFormatAlign (format=0x1beb7ca0, align=0x1) returned 0x0 [0080.242] GdipSetStringFormatLineAlign (format=0x1beb7ca0, align=0x1) returned 0x0 [0080.242] GdipMeasureString (graphics=0x1beb8070, string=";", length=1, font=0x1abeedb0, layoutRect=0x14dfb8, stringFormat=0x1beb7ca0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0080.242] GdipDeleteStringFormat (format=0x1beb7ca0) returned 0x0 [0080.242] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0080.243] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.243] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.243] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.243] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0080.243] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.243] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0080.243] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.243] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0080.243] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0080.243] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0080.243] LocalFree (hMem=0x1d92cf10) returned 0x0 [0080.243] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d090 [0080.243] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d090) returned 0x0 [0080.243] LocalFree (hMem=0x1d92d090) returned 0x0 [0080.243] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.243] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0080.243] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0080.243] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0080.243] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.244] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0080.244] GetCurrentObject (hdc=0x5501065f, type=0x1) returned 0x1b00017 [0080.244] GetCurrentObject (hdc=0x5501065f, type=0x2) returned 0x1900010 [0080.244] GetCurrentObject (hdc=0x5501065f, type=0x7) returned 0x160506a9 [0080.244] GetCurrentObject (hdc=0x5501065f, type=0x6) returned 0x18a0048 [0080.244] SaveDC (hdc=0x5501065f) returned 1 [0080.244] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb304095c [0080.244] GetClipRgn (hdc=0x5501065f, hrgn=0xffffffffb304095c) returned 0 [0080.244] SelectClipRgn (hdc=0x5501065f, hrgn=0x740406c7) returned 2 [0080.244] DeleteObject (ho=0xffffffffb304095c) returned 1 [0080.244] DeleteObject (ho=0x740406c7) returned 1 [0080.244] OffsetViewportOrgEx (in: hdc=0x5501065f, x=0, y=0, lppt=0x22b5060 | out: lppt=0x22b5060) returned 1 [0080.244] GetNearestColor (hdc=0x5501065f, color=0xf0f0f0) returned 0xf0f0f0 [0080.244] CreateSolidBrush (color=0xf0f0f0) returned 0x52100559 [0080.244] FillRect (hDC=0x5501065f, lprc=0x14e1c8, hbr=0x52100559) returned 1 [0080.244] DeleteObject (ho=0x52100559) returned 1 [0080.244] RestoreDC (hdc=0x5501065f, nSavedDC=-1) returned 1 [0080.244] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5501065f) returned 0x0 [0080.245] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.245] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0080.245] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.245] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b5160) returned 0x0 [0080.245] GdipSetStringFormatAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0080.245] GdipSetStringFormatLineAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0080.245] GdipSetStringFormatHotkeyPrefix (format=0x1beb7d10, hotkeyPrefix=1) returned 0x0 [0080.245] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0080.245] GdipDrawString (graphics=0x1beb67f0, string=";", length=1, font=0x1abeedb0, layoutRect=0x14e338, stringFormat=0x1beb7d10, brush=0x1beb15e0) returned 0x0 [0080.245] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0080.245] GdipDeleteStringFormat (format=0x1beb7d10) returned 0x0 [0080.245] GetFocus () returned 0x0 [0080.246] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExB+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.246] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.246] GdipCreateRegion (region=0x14e030) returned 0x0 [0080.246] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.246] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0080.246] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.246] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0080.246] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d750 [0080.246] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d750) returned 0x0 [0080.246] LocalFree (hMem=0x1d92d750) returned 0x0 [0080.246] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0080.246] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d2d0) returned 0x0 [0080.246] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0080.246] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.246] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0080.246] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0080.246] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0080.246] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.247] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0080.247] GetCurrentObject (hdc=0x5501065f, type=0x1) returned 0x1b00017 [0080.247] GetCurrentObject (hdc=0x5501065f, type=0x2) returned 0x1900010 [0080.247] GetCurrentObject (hdc=0x5501065f, type=0x7) returned 0x160506a9 [0080.247] GetCurrentObject (hdc=0x5501065f, type=0x6) returned 0x18a0048 [0080.247] SaveDC (hdc=0x5501065f) returned 1 [0080.247] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x750406c7 [0080.247] GetClipRgn (hdc=0x5501065f, hrgn=0x750406c7) returned 0 [0080.247] SelectClipRgn (hdc=0x5501065f, hrgn=0xffffffffb404095c) returned 2 [0080.247] DeleteObject (ho=0x750406c7) returned 1 [0080.247] DeleteObject (ho=0xffffffffb404095c) returned 1 [0080.247] OffsetViewportOrgEx (in: hdc=0x5501065f, x=0, y=0, lppt=0x22b5548 | out: lppt=0x22b5548) returned 1 [0080.247] GetROP2 (hdc=0x5501065f) returned 13 [0080.247] GetBkMode (hdc=0x5501065f) returned 2 [0080.247] SetBkMode (hdc=0x5501065f, mode=1) returned 2 [0080.247] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x533009dc [0080.247] SelectObject (hdc=0x5501065f, h=0x533009dc) returned 0x1b00017 [0080.247] MoveToEx (in: hdc=0x5501065f, x=25, y=0, lppt=0x22b55b0 | out: lppt=0x22b55b0) returned 1 [0080.247] LineTo (hdc=0x5501065f, x=0, y=0) returned 1 [0080.248] SetBkMode (hdc=0x5501065f, mode=2) returned 1 [0080.248] MoveToEx (in: hdc=0x5501065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.248] GetROP2 (hdc=0x5501065f) returned 13 [0080.248] GetBkMode (hdc=0x5501065f) returned 2 [0080.248] SetBkMode (hdc=0x5501065f, mode=1) returned 2 [0080.248] SelectObject (hdc=0x5501065f, h=0x533009dc) returned 0x533009dc [0080.248] MoveToEx (in: hdc=0x5501065f, x=0, y=0, lppt=0x22b55c8 | out: lppt=0x22b55c8) returned 1 [0080.248] LineTo (hdc=0x5501065f, x=0, y=22) returned 1 [0080.248] SetBkMode (hdc=0x5501065f, mode=2) returned 1 [0080.248] MoveToEx (in: hdc=0x5501065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.248] SelectObject (hdc=0x5501065f, h=0x1b00017) returned 0x533009dc [0080.248] DeleteObject (ho=0x533009dc) returned 1 [0080.248] GetROP2 (hdc=0x5501065f) returned 13 [0080.248] GetBkMode (hdc=0x5501065f) returned 2 [0080.248] SetBkMode (hdc=0x5501065f, mode=1) returned 2 [0080.248] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x83009e4 [0080.248] SelectObject (hdc=0x5501065f, h=0x83009e4) returned 0x1b00017 [0080.248] MoveToEx (in: hdc=0x5501065f, x=0, y=22, lppt=0x22b5630 | out: lppt=0x22b5630) returned 1 [0080.248] LineTo (hdc=0x5501065f, x=25, y=22) returned 1 [0080.248] SetBkMode (hdc=0x5501065f, mode=2) returned 1 [0080.248] MoveToEx (in: hdc=0x5501065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.248] GetROP2 (hdc=0x5501065f) returned 13 [0080.249] GetBkMode (hdc=0x5501065f) returned 2 [0080.249] SetBkMode (hdc=0x5501065f, mode=1) returned 2 [0080.249] SelectObject (hdc=0x5501065f, h=0x83009e4) returned 0x83009e4 [0080.249] MoveToEx (in: hdc=0x5501065f, x=25, y=22, lppt=0x22b5648 | out: lppt=0x22b5648) returned 1 [0080.249] LineTo (hdc=0x5501065f, x=25, y=-1) returned 1 [0080.249] SetBkMode (hdc=0x5501065f, mode=2) returned 1 [0080.249] MoveToEx (in: hdc=0x5501065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.249] SelectObject (hdc=0x5501065f, h=0x1b00017) returned 0x83009e4 [0080.249] DeleteObject (ho=0x83009e4) returned 1 [0080.249] GetROP2 (hdc=0x5501065f) returned 13 [0080.249] GetBkMode (hdc=0x5501065f) returned 2 [0080.249] SetBkMode (hdc=0x5501065f, mode=1) returned 2 [0080.249] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x543009dc [0080.249] SelectObject (hdc=0x5501065f, h=0x543009dc) returned 0x1b00017 [0080.249] MoveToEx (in: hdc=0x5501065f, x=24, y=1, lppt=0x22b56b0 | out: lppt=0x22b56b0) returned 1 [0080.249] LineTo (hdc=0x5501065f, x=1, y=1) returned 1 [0080.249] SetBkMode (hdc=0x5501065f, mode=2) returned 1 [0080.249] MoveToEx (in: hdc=0x5501065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.249] GetROP2 (hdc=0x5501065f) returned 13 [0080.249] GetBkMode (hdc=0x5501065f) returned 2 [0080.249] SetBkMode (hdc=0x5501065f, mode=1) returned 2 [0080.250] SelectObject (hdc=0x5501065f, h=0x543009dc) returned 0x543009dc [0080.250] MoveToEx (in: hdc=0x5501065f, x=1, y=1, lppt=0x22b56c8 | out: lppt=0x22b56c8) returned 1 [0080.250] LineTo (hdc=0x5501065f, x=1, y=21) returned 1 [0080.250] SetBkMode (hdc=0x5501065f, mode=2) returned 1 [0080.250] MoveToEx (in: hdc=0x5501065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.250] SelectObject (hdc=0x5501065f, h=0x1b00017) returned 0x543009dc [0080.250] DeleteObject (ho=0x543009dc) returned 1 [0080.250] GetROP2 (hdc=0x5501065f) returned 13 [0080.250] GetBkMode (hdc=0x5501065f) returned 2 [0080.250] SetBkMode (hdc=0x5501065f, mode=1) returned 2 [0080.250] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x93009e4 [0080.250] SelectObject (hdc=0x5501065f, h=0x93009e4) returned 0x1b00017 [0080.250] MoveToEx (in: hdc=0x5501065f, x=1, y=21, lppt=0x22b5730 | out: lppt=0x22b5730) returned 1 [0080.250] LineTo (hdc=0x5501065f, x=24, y=21) returned 1 [0080.250] SetBkMode (hdc=0x5501065f, mode=2) returned 1 [0080.250] MoveToEx (in: hdc=0x5501065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.250] GetROP2 (hdc=0x5501065f) returned 13 [0080.250] GetBkMode (hdc=0x5501065f) returned 2 [0080.250] SetBkMode (hdc=0x5501065f, mode=1) returned 2 [0080.250] SelectObject (hdc=0x5501065f, h=0x93009e4) returned 0x93009e4 [0080.250] MoveToEx (in: hdc=0x5501065f, x=24, y=21, lppt=0x22b5748 | out: lppt=0x22b5748) returned 1 [0080.250] LineTo (hdc=0x5501065f, x=24, y=0) returned 1 [0080.251] SetBkMode (hdc=0x5501065f, mode=2) returned 1 [0080.251] MoveToEx (in: hdc=0x5501065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.251] SelectObject (hdc=0x5501065f, h=0x1b00017) returned 0x93009e4 [0080.251] DeleteObject (ho=0x93009e4) returned 1 [0080.251] RestoreDC (hdc=0x5501065f, nSavedDC=-1) returned 1 [0080.251] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5501065f) returned 0x0 [0080.251] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0080.251] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x5501065f, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.251] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5501065f) returned 0x0 [0080.251] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0080.252] SelectObject (hdc=0x5501065f, h=0x185000f) returned 0x160506a9 [0080.252] DeleteDC (hdc=0x5501065f) returned 1 [0080.252] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0080.252] EndPaint (hWnd=0x30362, lpPaint=0x14e548) returned 1 [0080.253] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.253] IsWindowUnicode (hWnd=0x3033e) returned 1 [0080.253] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.253] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.253] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0080.253] BeginPaint (in: hWnd=0x3033e, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0080.253] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0080.253] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x5701065f [0080.253] SelectObject (hdc=0x5701065f, h=0x160506a9) returned 0x185000f [0080.253] GdipCreateFromHDC (hdc=0x5701065f, graphics=0x14e528) returned 0x0 [0080.253] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0080.253] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0080.253] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0080.253] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.253] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0080.253] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0080.254] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0080.254] LocalFree (hMem=0x1d92cf10) returned 0x0 [0080.254] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.254] GdipCreateRegion (region=0x14e550) returned 0x0 [0080.254] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.254] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0080.254] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0080.254] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd2d0dbd) returned 0x0 [0080.254] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.254] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0080.254] GetCurrentObject (hdc=0x5701065f, type=0x1) returned 0x1b00017 [0080.254] GetCurrentObject (hdc=0x5701065f, type=0x2) returned 0x1900010 [0080.254] GetCurrentObject (hdc=0x5701065f, type=0x7) returned 0x160506a9 [0080.254] GetCurrentObject (hdc=0x5701065f, type=0x6) returned 0x18a0048 [0080.254] SaveDC (hdc=0x5701065f) returned 1 [0080.254] GetNearestColor (hdc=0x5701065f, color=0xf0f0f0) returned 0xf0f0f0 [0080.254] GetNearestColor (hdc=0x5701065f, color=0xa0a0a0) returned 0xa0a0a0 [0080.323] GetNearestColor (hdc=0x5701065f, color=0x696969) returned 0x696969 [0080.323] GetNearestColor (hdc=0x5701065f, color=0xa0a0a0) returned 0xa0a0a0 [0080.323] GetNearestColor (hdc=0x5701065f, color=0x0) returned 0x0 [0080.323] GetNearestColor (hdc=0x5701065f, color=0xffffff) returned 0xffffff [0080.326] GetNearestColor (hdc=0x5701065f, color=0xd8d8d8) returned 0xd8d8d8 [0080.326] GetNearestColor (hdc=0x5701065f, color=0x0) returned 0x0 [0080.326] RestoreDC (hdc=0x5701065f, nSavedDC=-1) returned 1 [0080.326] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5701065f) returned 0x0 [0080.326] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExZ+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.336] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.337] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b6068) returned 0x0 [0080.337] GdipSetStringFormatAlign (format=0x1beb7a70, align=0x1) returned 0x0 [0080.337] GdipSetStringFormatLineAlign (format=0x1beb7a70, align=0x1) returned 0x0 [0080.337] GdipSetStringFormatHotkeyPrefix (format=0x1beb7a70, hotkeyPrefix=1) returned 0x0 [0080.337] GdipGetStringFormatFlags (format=0x1beb7a70, flags=0x14e378) returned 0x0 [0080.337] GdipGetStringFormatTrimming (format=0x1beb7a70, trimming=0x14e378) returned 0x0 [0080.337] GdipGetStringFormatHotkeyPrefix (format=0x1beb7a70, hotkeyPrefix=0x14e378) returned 0x0 [0080.337] GdipGetFontSize (font=0x1beb7a70, size=0x14e378) returned 0x0 [0080.337] GdipGetFontStyle (font=0x1beb7a70, style=0x14e378) returned 0x0 [0080.337] GdipDeleteStringFormat (format=0x1beb7a70) returned 0x0 [0080.337] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.338] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.338] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0080.338] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b6198) returned 0x0 [0080.338] GdipSetStringFormatFlags (format=0x1beb7a70, flags=0) returned 0x0 [0080.338] GdipSetStringFormatTrimming (format=0x1beb7a70, trimming=0x1) returned 0x0 [0080.338] GdipSetStringFormatHotkeyPrefix (format=0x1beb7a70, hotkeyPrefix=1) returned 0x0 [0080.338] GdipSetStringFormatAlign (format=0x1beb7a70, align=0x1) returned 0x0 [0080.338] GdipSetStringFormatLineAlign (format=0x1beb7a70, align=0x1) returned 0x0 [0080.338] GdipMeasureString (graphics=0x1beb8070, string="-", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7a70, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0080.338] GdipDeleteStringFormat (format=0x1beb7a70) returned 0x0 [0080.338] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0080.338] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.339] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.339] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0080.339] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.339] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0080.339] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.339] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0080.339] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0080.339] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cf10) returned 0x0 [0080.339] LocalFree (hMem=0x1d92cf10) returned 0x0 [0080.339] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0080.339] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d650) returned 0x0 [0080.339] LocalFree (hMem=0x1d92d650) returned 0x0 [0080.339] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.339] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0080.339] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0080.339] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0080.339] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.339] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0080.339] GetCurrentObject (hdc=0x5701065f, type=0x1) returned 0x1b00017 [0080.339] GetCurrentObject (hdc=0x5701065f, type=0x2) returned 0x1900010 [0080.339] GetCurrentObject (hdc=0x5701065f, type=0x7) returned 0x160506a9 [0080.340] GetCurrentObject (hdc=0x5701065f, type=0x6) returned 0x18a0048 [0080.340] SaveDC (hdc=0x5701065f) returned 1 [0080.340] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb504095c [0080.340] GetClipRgn (hdc=0x5701065f, hrgn=0xffffffffb504095c) returned 0 [0080.340] SelectClipRgn (hdc=0x5701065f, hrgn=0x760406c7) returned 2 [0080.340] DeleteObject (ho=0xffffffffb504095c) returned 1 [0080.340] DeleteObject (ho=0x760406c7) returned 1 [0080.340] OffsetViewportOrgEx (in: hdc=0x5701065f, x=0, y=0, lppt=0x22b6558 | out: lppt=0x22b6558) returned 1 [0080.340] GetNearestColor (hdc=0x5701065f, color=0xf0f0f0) returned 0xf0f0f0 [0080.340] CreateSolidBrush (color=0xf0f0f0) returned 0x53100559 [0080.340] FillRect (hDC=0x5701065f, lprc=0x14e1c8, hbr=0x53100559) returned 1 [0080.340] DeleteObject (ho=0x53100559) returned 1 [0080.340] RestoreDC (hdc=0x5701065f, nSavedDC=-1) returned 1 [0080.340] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5701065f) returned 0x0 [0080.340] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0080.341] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.341] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b6658) returned 0x0 [0080.341] GdipSetStringFormatAlign (format=0x1beb7fb0, align=0x1) returned 0x0 [0080.341] GdipSetStringFormatLineAlign (format=0x1beb7fb0, align=0x1) returned 0x0 [0080.341] GdipSetStringFormatHotkeyPrefix (format=0x1beb7fb0, hotkeyPrefix=1) returned 0x0 [0080.341] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0080.341] GdipDrawString (graphics=0x1beb67f0, string="-", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7fb0, brush=0x1beb15e0) returned 0x0 [0080.341] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0080.341] GdipDeleteStringFormat (format=0x1beb7fb0) returned 0x0 [0080.341] GetFocus () returned 0x0 [0080.341] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExW+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.342] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.342] GdipCreateRegion (region=0x14e030) returned 0x0 [0080.342] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.342] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0080.342] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.342] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0080.342] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d0d0 [0080.342] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d0d0) returned 0x0 [0080.342] LocalFree (hMem=0x1d92d0d0) returned 0x0 [0080.342] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0080.342] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0080.342] LocalFree (hMem=0x1d92cf10) returned 0x0 [0080.342] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.342] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0080.342] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0080.342] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0080.342] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.342] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0080.342] GetCurrentObject (hdc=0x5701065f, type=0x1) returned 0x1b00017 [0080.343] GetCurrentObject (hdc=0x5701065f, type=0x2) returned 0x1900010 [0080.343] GetCurrentObject (hdc=0x5701065f, type=0x7) returned 0x160506a9 [0080.343] GetCurrentObject (hdc=0x5701065f, type=0x6) returned 0x18a0048 [0080.343] SaveDC (hdc=0x5701065f) returned 1 [0080.343] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x770406c7 [0080.343] GetClipRgn (hdc=0x5701065f, hrgn=0x770406c7) returned 0 [0080.343] SelectClipRgn (hdc=0x5701065f, hrgn=0xffffffffb604095c) returned 2 [0080.343] DeleteObject (ho=0x770406c7) returned 1 [0080.343] DeleteObject (ho=0xffffffffb604095c) returned 1 [0080.343] OffsetViewportOrgEx (in: hdc=0x5701065f, x=0, y=0, lppt=0x22b6a40 | out: lppt=0x22b6a40) returned 1 [0080.343] GetROP2 (hdc=0x5701065f) returned 13 [0080.343] GetBkMode (hdc=0x5701065f) returned 2 [0080.343] SetBkMode (hdc=0x5701065f, mode=1) returned 2 [0080.343] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x83009e5 [0080.343] SelectObject (hdc=0x5701065f, h=0x83009e5) returned 0x1b00017 [0080.343] MoveToEx (in: hdc=0x5701065f, x=25, y=0, lppt=0x22b6aa8 | out: lppt=0x22b6aa8) returned 1 [0080.343] LineTo (hdc=0x5701065f, x=0, y=0) returned 1 [0080.343] SetBkMode (hdc=0x5701065f, mode=2) returned 1 [0080.343] MoveToEx (in: hdc=0x5701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.343] GetROP2 (hdc=0x5701065f) returned 13 [0080.344] GetBkMode (hdc=0x5701065f) returned 2 [0080.344] SetBkMode (hdc=0x5701065f, mode=1) returned 2 [0080.344] SelectObject (hdc=0x5701065f, h=0x83009e5) returned 0x83009e5 [0080.344] MoveToEx (in: hdc=0x5701065f, x=0, y=0, lppt=0x22b6ac0 | out: lppt=0x22b6ac0) returned 1 [0080.344] LineTo (hdc=0x5701065f, x=0, y=22) returned 1 [0080.344] SetBkMode (hdc=0x5701065f, mode=2) returned 1 [0080.344] MoveToEx (in: hdc=0x5701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.344] SelectObject (hdc=0x5701065f, h=0x1b00017) returned 0x83009e5 [0080.344] DeleteObject (ho=0x83009e5) returned 1 [0080.344] GetROP2 (hdc=0x5701065f) returned 13 [0080.344] GetBkMode (hdc=0x5701065f) returned 2 [0080.344] SetBkMode (hdc=0x5701065f, mode=1) returned 2 [0080.344] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x43009e3 [0080.344] SelectObject (hdc=0x5701065f, h=0x43009e3) returned 0x1b00017 [0080.344] MoveToEx (in: hdc=0x5701065f, x=0, y=22, lppt=0x22b6b28 | out: lppt=0x22b6b28) returned 1 [0080.344] LineTo (hdc=0x5701065f, x=25, y=22) returned 1 [0080.344] SetBkMode (hdc=0x5701065f, mode=2) returned 1 [0080.344] MoveToEx (in: hdc=0x5701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.344] GetROP2 (hdc=0x5701065f) returned 13 [0080.344] GetBkMode (hdc=0x5701065f) returned 2 [0080.344] SetBkMode (hdc=0x5701065f, mode=1) returned 2 [0080.344] SelectObject (hdc=0x5701065f, h=0x43009e3) returned 0x43009e3 [0080.344] MoveToEx (in: hdc=0x5701065f, x=25, y=22, lppt=0x22b6b40 | out: lppt=0x22b6b40) returned 1 [0080.345] LineTo (hdc=0x5701065f, x=25, y=-1) returned 1 [0080.345] SetBkMode (hdc=0x5701065f, mode=2) returned 1 [0080.345] MoveToEx (in: hdc=0x5701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.345] SelectObject (hdc=0x5701065f, h=0x1b00017) returned 0x43009e3 [0080.345] DeleteObject (ho=0x43009e3) returned 1 [0080.345] GetROP2 (hdc=0x5701065f) returned 13 [0080.345] GetBkMode (hdc=0x5701065f) returned 2 [0080.345] SetBkMode (hdc=0x5701065f, mode=1) returned 2 [0080.345] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x93009e5 [0080.345] SelectObject (hdc=0x5701065f, h=0x93009e5) returned 0x1b00017 [0080.345] MoveToEx (in: hdc=0x5701065f, x=24, y=1, lppt=0x22b6ba8 | out: lppt=0x22b6ba8) returned 1 [0080.345] LineTo (hdc=0x5701065f, x=1, y=1) returned 1 [0080.345] SetBkMode (hdc=0x5701065f, mode=2) returned 1 [0080.345] MoveToEx (in: hdc=0x5701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.345] GetROP2 (hdc=0x5701065f) returned 13 [0080.345] GetBkMode (hdc=0x5701065f) returned 2 [0080.345] SetBkMode (hdc=0x5701065f, mode=1) returned 2 [0080.345] SelectObject (hdc=0x5701065f, h=0x93009e5) returned 0x93009e5 [0080.345] MoveToEx (in: hdc=0x5701065f, x=1, y=1, lppt=0x22b6bc0 | out: lppt=0x22b6bc0) returned 1 [0080.345] LineTo (hdc=0x5701065f, x=1, y=21) returned 1 [0080.345] SetBkMode (hdc=0x5701065f, mode=2) returned 1 [0080.345] MoveToEx (in: hdc=0x5701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.346] SelectObject (hdc=0x5701065f, h=0x1b00017) returned 0x93009e5 [0080.346] DeleteObject (ho=0x93009e5) returned 1 [0080.346] GetROP2 (hdc=0x5701065f) returned 13 [0080.346] GetBkMode (hdc=0x5701065f) returned 2 [0080.346] SetBkMode (hdc=0x5701065f, mode=1) returned 2 [0080.346] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x53009e3 [0080.346] SelectObject (hdc=0x5701065f, h=0x53009e3) returned 0x1b00017 [0080.346] MoveToEx (in: hdc=0x5701065f, x=1, y=21, lppt=0x22b6c28 | out: lppt=0x22b6c28) returned 1 [0080.346] LineTo (hdc=0x5701065f, x=24, y=21) returned 1 [0080.346] SetBkMode (hdc=0x5701065f, mode=2) returned 1 [0080.346] MoveToEx (in: hdc=0x5701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.346] GetROP2 (hdc=0x5701065f) returned 13 [0080.346] GetBkMode (hdc=0x5701065f) returned 2 [0080.346] SetBkMode (hdc=0x5701065f, mode=1) returned 2 [0080.346] SelectObject (hdc=0x5701065f, h=0x53009e3) returned 0x53009e3 [0080.346] MoveToEx (in: hdc=0x5701065f, x=24, y=21, lppt=0x22b6c40 | out: lppt=0x22b6c40) returned 1 [0080.346] LineTo (hdc=0x5701065f, x=24, y=0) returned 1 [0080.346] SetBkMode (hdc=0x5701065f, mode=2) returned 1 [0080.346] MoveToEx (in: hdc=0x5701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.346] SelectObject (hdc=0x5701065f, h=0x1b00017) returned 0x53009e3 [0080.346] DeleteObject (ho=0x53009e3) returned 1 [0080.346] RestoreDC (hdc=0x5701065f, nSavedDC=-1) returned 1 [0080.347] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5701065f) returned 0x0 [0080.347] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0080.347] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x5701065f, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.347] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5701065f) returned 0x0 [0080.347] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0080.347] SelectObject (hdc=0x5701065f, h=0x185000f) returned 0x160506a9 [0080.347] DeleteDC (hdc=0x5701065f) returned 1 [0080.347] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0080.347] EndPaint (hWnd=0x3033e, lpPaint=0x14e548) returned 1 [0080.347] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.347] IsWindowUnicode (hWnd=0x30340) returned 1 [0080.347] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.348] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.348] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0080.348] BeginPaint (in: hWnd=0x30340, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0080.348] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0080.348] CreateCompatibleDC (hdc=0xc0100ae) returned 0x570109dc [0080.348] SelectObject (hdc=0x570109dc, h=0x160506a9) returned 0x185000f [0080.348] GdipCreateFromHDC (hdc=0x570109dc, graphics=0x14e528) returned 0x0 [0080.348] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0080.348] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0080.348] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0080.348] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.348] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0080.348] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0080.348] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d2d0) returned 0x0 [0080.349] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0080.349] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.349] GdipCreateRegion (region=0x14e550) returned 0x0 [0080.349] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.349] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0080.349] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0080.349] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd2a0dbd) returned 0x0 [0080.349] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.349] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0080.349] GetCurrentObject (hdc=0x570109dc, type=0x1) returned 0x1b00017 [0080.349] GetCurrentObject (hdc=0x570109dc, type=0x2) returned 0x1900010 [0080.349] GetCurrentObject (hdc=0x570109dc, type=0x7) returned 0x160506a9 [0080.349] GetCurrentObject (hdc=0x570109dc, type=0x6) returned 0x18a0048 [0080.349] SaveDC (hdc=0x570109dc) returned 1 [0080.349] GetNearestColor (hdc=0x570109dc, color=0xf0f0f0) returned 0xf0f0f0 [0080.349] GetNearestColor (hdc=0x570109dc, color=0xa0a0a0) returned 0xa0a0a0 [0080.349] GetNearestColor (hdc=0x570109dc, color=0x696969) returned 0x696969 [0080.349] GetNearestColor (hdc=0x570109dc, color=0xa0a0a0) returned 0xa0a0a0 [0080.349] GetNearestColor (hdc=0x570109dc, color=0x0) returned 0x0 [0080.349] GetNearestColor (hdc=0x570109dc, color=0xffffff) returned 0xffffff [0080.350] GetNearestColor (hdc=0x570109dc, color=0xe5e5e5) returned 0xe5e5e5 [0080.350] GetNearestColor (hdc=0x570109dc, color=0xd8d8d8) returned 0xd8d8d8 [0080.350] GetNearestColor (hdc=0x570109dc, color=0x0) returned 0x0 [0080.350] RestoreDC (hdc=0x570109dc, nSavedDC=-1) returned 1 [0080.350] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x570109dc) returned 0x0 [0080.350] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExo+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.350] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.350] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b7560) returned 0x0 [0080.350] GdipSetStringFormatAlign (format=0x1beb7bc0, align=0x1) returned 0x0 [0080.350] GdipSetStringFormatLineAlign (format=0x1beb7bc0, align=0x1) returned 0x0 [0080.350] GdipSetStringFormatHotkeyPrefix (format=0x1beb7bc0, hotkeyPrefix=1) returned 0x0 [0080.350] GdipGetStringFormatFlags (format=0x1beb7bc0, flags=0x14e378) returned 0x0 [0080.351] GdipGetStringFormatTrimming (format=0x1beb7bc0, trimming=0x14e378) returned 0x0 [0080.351] GdipGetStringFormatHotkeyPrefix (format=0x1beb7bc0, hotkeyPrefix=0x14e378) returned 0x0 [0080.351] GdipGetFontSize (font=0x1beb7bc0, size=0x14e378) returned 0x0 [0080.351] GdipGetFontStyle (font=0x1beb7bc0, style=0x14e378) returned 0x0 [0080.351] GdipDeleteStringFormat (format=0x1beb7bc0) returned 0x0 [0080.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.351] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.351] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0080.351] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b7690) returned 0x0 [0080.351] GdipSetStringFormatFlags (format=0x1beb7f40, flags=0) returned 0x0 [0080.351] GdipSetStringFormatTrimming (format=0x1beb7f40, trimming=0x1) returned 0x0 [0080.351] GdipSetStringFormatHotkeyPrefix (format=0x1beb7f40, hotkeyPrefix=1) returned 0x0 [0080.351] GdipSetStringFormatAlign (format=0x1beb7f40, align=0x1) returned 0x0 [0080.351] GdipSetStringFormatLineAlign (format=0x1beb7f40, align=0x1) returned 0x0 [0080.352] GdipMeasureString (graphics=0x1beb8070, string="8", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7f40, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0080.352] GdipDeleteStringFormat (format=0x1beb7f40) returned 0x0 [0080.352] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0080.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.352] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.352] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0080.352] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.352] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0080.352] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.352] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0080.352] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d550 [0080.352] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d550) returned 0x0 [0080.352] LocalFree (hMem=0x1d92d550) returned 0x0 [0080.352] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0080.352] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d2d0) returned 0x0 [0080.352] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0080.353] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.353] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0080.353] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0080.353] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0080.353] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.353] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0080.353] GetCurrentObject (hdc=0x570109dc, type=0x1) returned 0x1b00017 [0080.353] GetCurrentObject (hdc=0x570109dc, type=0x2) returned 0x1900010 [0080.353] GetCurrentObject (hdc=0x570109dc, type=0x7) returned 0x160506a9 [0080.353] GetCurrentObject (hdc=0x570109dc, type=0x6) returned 0x18a0048 [0080.353] SaveDC (hdc=0x570109dc) returned 1 [0080.353] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb704095c [0080.353] GetClipRgn (hdc=0x570109dc, hrgn=0xffffffffb704095c) returned 0 [0080.353] SelectClipRgn (hdc=0x570109dc, hrgn=0x780406c7) returned 2 [0080.353] DeleteObject (ho=0xffffffffb704095c) returned 1 [0080.353] DeleteObject (ho=0x780406c7) returned 1 [0080.353] OffsetViewportOrgEx (in: hdc=0x570109dc, x=0, y=0, lppt=0x22b7a50 | out: lppt=0x22b7a50) returned 1 [0080.353] GetNearestColor (hdc=0x570109dc, color=0xf0f0f0) returned 0xf0f0f0 [0080.353] CreateSolidBrush (color=0xf0f0f0) returned 0x54100559 [0080.353] FillRect (hDC=0x570109dc, lprc=0x14e1c8, hbr=0x54100559) returned 1 [0080.354] DeleteObject (ho=0x54100559) returned 1 [0080.354] RestoreDC (hdc=0x570109dc, nSavedDC=-1) returned 1 [0080.354] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x570109dc) returned 0x0 [0080.354] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0080.354] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.354] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b7b50) returned 0x0 [0080.354] GdipSetStringFormatAlign (format=0x1beb7ed0, align=0x1) returned 0x0 [0080.354] GdipSetStringFormatLineAlign (format=0x1beb7ed0, align=0x1) returned 0x0 [0080.354] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ed0, hotkeyPrefix=1) returned 0x0 [0080.354] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0080.354] GdipDrawString (graphics=0x1beb67f0, string="8", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7ed0, brush=0x1beb15e0) returned 0x0 [0080.355] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0080.355] GdipDeleteStringFormat (format=0x1beb7ed0) returned 0x0 [0080.355] GetFocus () returned 0x0 [0080.355] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.355] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExl+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.355] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.355] GdipCreateRegion (region=0x14e030) returned 0x0 [0080.355] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.355] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0080.355] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.355] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0080.355] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0080.355] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d710) returned 0x0 [0080.355] LocalFree (hMem=0x1d92d710) returned 0x0 [0080.355] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d810 [0080.356] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d810) returned 0x0 [0080.356] LocalFree (hMem=0x1d92d810) returned 0x0 [0080.356] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.356] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0080.356] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0080.356] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0080.356] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.356] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0080.356] GetCurrentObject (hdc=0x570109dc, type=0x1) returned 0x1b00017 [0080.356] GetCurrentObject (hdc=0x570109dc, type=0x2) returned 0x1900010 [0080.356] GetCurrentObject (hdc=0x570109dc, type=0x7) returned 0x160506a9 [0080.356] GetCurrentObject (hdc=0x570109dc, type=0x6) returned 0x18a0048 [0080.356] SaveDC (hdc=0x570109dc) returned 1 [0080.356] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x790406c7 [0080.356] GetClipRgn (hdc=0x570109dc, hrgn=0x790406c7) returned 0 [0080.356] SelectClipRgn (hdc=0x570109dc, hrgn=0xffffffffb804095c) returned 2 [0080.356] DeleteObject (ho=0x790406c7) returned 1 [0080.356] DeleteObject (ho=0xffffffffb804095c) returned 1 [0080.356] OffsetViewportOrgEx (in: hdc=0x570109dc, x=0, y=0, lppt=0x22b7f38 | out: lppt=0x22b7f38) returned 1 [0080.356] GetROP2 (hdc=0x570109dc) returned 13 [0080.356] GetBkMode (hdc=0x570109dc) returned 2 [0080.357] SetBkMode (hdc=0x570109dc, mode=1) returned 2 [0080.357] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x63009e3 [0080.357] SelectObject (hdc=0x570109dc, h=0x63009e3) returned 0x1b00017 [0080.357] MoveToEx (in: hdc=0x570109dc, x=25, y=0, lppt=0x22b7fa0 | out: lppt=0x22b7fa0) returned 1 [0080.357] LineTo (hdc=0x570109dc, x=0, y=0) returned 1 [0080.357] SetBkMode (hdc=0x570109dc, mode=2) returned 1 [0080.357] MoveToEx (in: hdc=0x570109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.357] GetROP2 (hdc=0x570109dc) returned 13 [0080.357] GetBkMode (hdc=0x570109dc) returned 2 [0080.357] SetBkMode (hdc=0x570109dc, mode=1) returned 2 [0080.357] SelectObject (hdc=0x570109dc, h=0x63009e3) returned 0x63009e3 [0080.357] MoveToEx (in: hdc=0x570109dc, x=0, y=0, lppt=0x22b7fb8 | out: lppt=0x22b7fb8) returned 1 [0080.357] LineTo (hdc=0x570109dc, x=0, y=22) returned 1 [0080.357] SetBkMode (hdc=0x570109dc, mode=2) returned 1 [0080.357] MoveToEx (in: hdc=0x570109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.357] SelectObject (hdc=0x570109dc, h=0x1b00017) returned 0x63009e3 [0080.357] DeleteObject (ho=0x63009e3) returned 1 [0080.357] GetROP2 (hdc=0x570109dc) returned 13 [0080.357] GetBkMode (hdc=0x570109dc) returned 2 [0080.357] SetBkMode (hdc=0x570109dc, mode=1) returned 2 [0080.358] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0xa3009e5 [0080.358] SelectObject (hdc=0x570109dc, h=0xa3009e5) returned 0x1b00017 [0080.358] MoveToEx (in: hdc=0x570109dc, x=0, y=22, lppt=0x22b8020 | out: lppt=0x22b8020) returned 1 [0080.358] LineTo (hdc=0x570109dc, x=25, y=22) returned 1 [0080.358] SetBkMode (hdc=0x570109dc, mode=2) returned 1 [0080.358] MoveToEx (in: hdc=0x570109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.358] GetROP2 (hdc=0x570109dc) returned 13 [0080.358] GetBkMode (hdc=0x570109dc) returned 2 [0080.358] SetBkMode (hdc=0x570109dc, mode=1) returned 2 [0080.358] SelectObject (hdc=0x570109dc, h=0xa3009e5) returned 0xa3009e5 [0080.358] MoveToEx (in: hdc=0x570109dc, x=25, y=22, lppt=0x22b8038 | out: lppt=0x22b8038) returned 1 [0080.358] LineTo (hdc=0x570109dc, x=25, y=-1) returned 1 [0080.358] SetBkMode (hdc=0x570109dc, mode=2) returned 1 [0080.358] MoveToEx (in: hdc=0x570109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.358] SelectObject (hdc=0x570109dc, h=0x1b00017) returned 0xa3009e5 [0080.358] DeleteObject (ho=0xa3009e5) returned 1 [0080.358] GetROP2 (hdc=0x570109dc) returned 13 [0080.358] GetBkMode (hdc=0x570109dc) returned 2 [0080.358] SetBkMode (hdc=0x570109dc, mode=1) returned 2 [0080.358] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x73009e3 [0080.358] SelectObject (hdc=0x570109dc, h=0x73009e3) returned 0x1b00017 [0080.359] MoveToEx (in: hdc=0x570109dc, x=24, y=1, lppt=0x22b80a0 | out: lppt=0x22b80a0) returned 1 [0080.359] LineTo (hdc=0x570109dc, x=1, y=1) returned 1 [0080.359] SetBkMode (hdc=0x570109dc, mode=2) returned 1 [0080.359] MoveToEx (in: hdc=0x570109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.359] GetROP2 (hdc=0x570109dc) returned 13 [0080.359] GetBkMode (hdc=0x570109dc) returned 2 [0080.359] SetBkMode (hdc=0x570109dc, mode=1) returned 2 [0080.359] SelectObject (hdc=0x570109dc, h=0x73009e3) returned 0x73009e3 [0080.359] MoveToEx (in: hdc=0x570109dc, x=1, y=1, lppt=0x22b80b8 | out: lppt=0x22b80b8) returned 1 [0080.359] LineTo (hdc=0x570109dc, x=1, y=21) returned 1 [0080.359] SetBkMode (hdc=0x570109dc, mode=2) returned 1 [0080.359] MoveToEx (in: hdc=0x570109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.359] SelectObject (hdc=0x570109dc, h=0x1b00017) returned 0x73009e3 [0080.359] DeleteObject (ho=0x73009e3) returned 1 [0080.359] GetROP2 (hdc=0x570109dc) returned 13 [0080.359] GetBkMode (hdc=0x570109dc) returned 2 [0080.359] SetBkMode (hdc=0x570109dc, mode=1) returned 2 [0080.359] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xb3009e5 [0080.359] SelectObject (hdc=0x570109dc, h=0xb3009e5) returned 0x1b00017 [0080.359] MoveToEx (in: hdc=0x570109dc, x=1, y=21, lppt=0x22b8120 | out: lppt=0x22b8120) returned 1 [0080.359] LineTo (hdc=0x570109dc, x=24, y=21) returned 1 [0080.359] SetBkMode (hdc=0x570109dc, mode=2) returned 1 [0080.360] MoveToEx (in: hdc=0x570109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.360] GetROP2 (hdc=0x570109dc) returned 13 [0080.360] GetBkMode (hdc=0x570109dc) returned 2 [0080.360] SetBkMode (hdc=0x570109dc, mode=1) returned 2 [0080.360] SelectObject (hdc=0x570109dc, h=0xb3009e5) returned 0xb3009e5 [0080.360] MoveToEx (in: hdc=0x570109dc, x=24, y=21, lppt=0x22b8138 | out: lppt=0x22b8138) returned 1 [0080.360] LineTo (hdc=0x570109dc, x=24, y=0) returned 1 [0080.360] SetBkMode (hdc=0x570109dc, mode=2) returned 1 [0080.360] MoveToEx (in: hdc=0x570109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.360] SelectObject (hdc=0x570109dc, h=0x1b00017) returned 0xb3009e5 [0080.360] DeleteObject (ho=0xb3009e5) returned 1 [0080.360] RestoreDC (hdc=0x570109dc, nSavedDC=-1) returned 1 [0080.360] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x570109dc) returned 0x0 [0080.360] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0080.360] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x570109dc, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.360] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x570109dc) returned 0x0 [0080.360] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0080.361] SelectObject (hdc=0x570109dc, h=0x185000f) returned 0x160506a9 [0080.361] DeleteDC (hdc=0x570109dc) returned 1 [0080.361] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0080.362] EndPaint (hWnd=0x30340, lpPaint=0x14e548) returned 1 [0080.362] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.362] IsWindowUnicode (hWnd=0x3032e) returned 1 [0080.362] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.362] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.362] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0080.362] BeginPaint (in: hWnd=0x3032e, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0080.362] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0080.362] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x100109e4 [0080.362] SelectObject (hdc=0x100109e4, h=0x160506a9) returned 0x185000f [0080.362] GdipCreateFromHDC (hdc=0x100109e4, graphics=0x14e528) returned 0x0 [0080.362] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0080.362] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0080.362] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0080.362] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.362] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0080.362] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d050 [0080.363] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d050) returned 0x0 [0080.363] LocalFree (hMem=0x1d92d050) returned 0x0 [0080.363] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.363] GdipCreateRegion (region=0x14e550) returned 0x0 [0080.363] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.363] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0080.363] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0080.363] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd270dbd) returned 0x0 [0080.363] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.363] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0080.363] GetCurrentObject (hdc=0x100109e4, type=0x1) returned 0x1b00017 [0080.363] GetCurrentObject (hdc=0x100109e4, type=0x2) returned 0x1900010 [0080.363] GetCurrentObject (hdc=0x100109e4, type=0x7) returned 0x160506a9 [0080.363] GetCurrentObject (hdc=0x100109e4, type=0x6) returned 0x18a0048 [0080.363] SaveDC (hdc=0x100109e4) returned 1 [0080.363] GetNearestColor (hdc=0x100109e4, color=0xf0f0f0) returned 0xf0f0f0 [0080.363] GetNearestColor (hdc=0x100109e4, color=0xa0a0a0) returned 0xa0a0a0 [0080.363] GetNearestColor (hdc=0x100109e4, color=0x696969) returned 0x696969 [0080.363] GetNearestColor (hdc=0x100109e4, color=0xa0a0a0) returned 0xa0a0a0 [0080.363] GetNearestColor (hdc=0x100109e4, color=0x0) returned 0x0 [0080.364] GetNearestColor (hdc=0x100109e4, color=0xffffff) returned 0xffffff [0080.364] GetNearestColor (hdc=0x100109e4, color=0xe5e5e5) returned 0xe5e5e5 [0080.364] GetNearestColor (hdc=0x100109e4, color=0xd8d8d8) returned 0xd8d8d8 [0080.366] GetNearestColor (hdc=0x100109e4, color=0x0) returned 0x0 [0080.366] RestoreDC (hdc=0x100109e4, nSavedDC=-1) returned 1 [0080.366] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x100109e4) returned 0x0 [0080.366] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.367] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x84+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.367] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.367] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b8a58) returned 0x0 [0080.367] GdipSetStringFormatAlign (format=0x1beb7f40, align=0x1) returned 0x0 [0080.367] GdipSetStringFormatLineAlign (format=0x1beb7f40, align=0x1) returned 0x0 [0080.367] GdipSetStringFormatHotkeyPrefix (format=0x1beb7f40, hotkeyPrefix=1) returned 0x0 [0080.367] GdipGetStringFormatFlags (format=0x1beb7f40, flags=0x14e378) returned 0x0 [0080.367] GdipGetStringFormatTrimming (format=0x1beb7f40, trimming=0x14e378) returned 0x0 [0080.367] GdipGetStringFormatHotkeyPrefix (format=0x1beb7f40, hotkeyPrefix=0x14e378) returned 0x0 [0080.367] GdipGetFontSize (font=0x1beb7f40, size=0x14e378) returned 0x0 [0080.367] GdipGetFontStyle (font=0x1beb7f40, style=0x14e378) returned 0x0 [0080.367] GdipDeleteStringFormat (format=0x1beb7f40) returned 0x0 [0080.367] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.367] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.368] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.368] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0080.368] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b8b88) returned 0x0 [0080.368] GdipSetStringFormatFlags (format=0x1beb7990, flags=0) returned 0x0 [0080.368] GdipSetStringFormatTrimming (format=0x1beb7990, trimming=0x1) returned 0x0 [0080.368] GdipSetStringFormatHotkeyPrefix (format=0x1beb7990, hotkeyPrefix=1) returned 0x0 [0080.368] GdipSetStringFormatAlign (format=0x1beb7990, align=0x1) returned 0x0 [0080.368] GdipSetStringFormatLineAlign (format=0x1beb7990, align=0x1) returned 0x0 [0080.368] GdipMeasureString (graphics=0x1beb8070, string="c", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7990, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0080.368] GdipDeleteStringFormat (format=0x1beb7990) returned 0x0 [0080.368] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0080.368] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.368] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.369] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.369] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0080.369] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.369] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0080.369] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.369] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0080.369] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d490 [0080.369] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d490) returned 0x0 [0080.369] LocalFree (hMem=0x1d92d490) returned 0x0 [0080.369] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0080.369] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d710) returned 0x0 [0080.369] LocalFree (hMem=0x1d92d710) returned 0x0 [0080.369] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.369] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0080.369] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0080.369] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0080.369] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.369] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0080.369] GetCurrentObject (hdc=0x100109e4, type=0x1) returned 0x1b00017 [0080.369] GetCurrentObject (hdc=0x100109e4, type=0x2) returned 0x1900010 [0080.369] GetCurrentObject (hdc=0x100109e4, type=0x7) returned 0x160506a9 [0080.369] GetCurrentObject (hdc=0x100109e4, type=0x6) returned 0x18a0048 [0080.370] SaveDC (hdc=0x100109e4) returned 1 [0080.370] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb904095c [0080.370] GetClipRgn (hdc=0x100109e4, hrgn=0xffffffffb904095c) returned 0 [0080.370] SelectClipRgn (hdc=0x100109e4, hrgn=0x7a0406c7) returned 2 [0080.370] DeleteObject (ho=0xffffffffb904095c) returned 1 [0080.370] DeleteObject (ho=0x7a0406c7) returned 1 [0080.370] OffsetViewportOrgEx (in: hdc=0x100109e4, x=0, y=0, lppt=0x22b8f48 | out: lppt=0x22b8f48) returned 1 [0080.370] GetNearestColor (hdc=0x100109e4, color=0xf0f0f0) returned 0xf0f0f0 [0080.370] CreateSolidBrush (color=0xf0f0f0) returned 0x55100559 [0080.370] FillRect (hDC=0x100109e4, lprc=0x14e1c8, hbr=0x55100559) returned 1 [0080.370] DeleteObject (ho=0x55100559) returned 1 [0080.370] RestoreDC (hdc=0x100109e4, nSavedDC=-1) returned 1 [0080.370] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x100109e4) returned 0x0 [0080.370] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0080.371] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.371] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b9048) returned 0x0 [0080.371] GdipSetStringFormatAlign (format=0x1beb7ed0, align=0x1) returned 0x0 [0080.371] GdipSetStringFormatLineAlign (format=0x1beb7ed0, align=0x1) returned 0x0 [0080.371] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ed0, hotkeyPrefix=1) returned 0x0 [0080.371] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0080.371] GdipDrawString (graphics=0x1beb67f0, string="c", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7ed0, brush=0x1beb15e0) returned 0x0 [0080.371] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0080.371] GdipDeleteStringFormat (format=0x1beb7ed0) returned 0x0 [0080.371] GetFocus () returned 0x0 [0080.371] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.372] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x81+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.372] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.372] GdipCreateRegion (region=0x14e030) returned 0x0 [0080.372] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.372] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0080.372] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.372] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0080.372] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cd10 [0080.372] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cd10) returned 0x0 [0080.372] LocalFree (hMem=0x1d92cd10) returned 0x0 [0080.372] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d0d0 [0080.372] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d0d0) returned 0x0 [0080.372] LocalFree (hMem=0x1d92d0d0) returned 0x0 [0080.372] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.372] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0080.372] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0080.372] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0080.372] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.372] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0080.372] GetCurrentObject (hdc=0x100109e4, type=0x1) returned 0x1b00017 [0080.373] GetCurrentObject (hdc=0x100109e4, type=0x2) returned 0x1900010 [0080.373] GetCurrentObject (hdc=0x100109e4, type=0x7) returned 0x160506a9 [0080.373] GetCurrentObject (hdc=0x100109e4, type=0x6) returned 0x18a0048 [0080.373] SaveDC (hdc=0x100109e4) returned 1 [0080.373] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7b0406c7 [0080.373] GetClipRgn (hdc=0x100109e4, hrgn=0x7b0406c7) returned 0 [0080.373] SelectClipRgn (hdc=0x100109e4, hrgn=0xffffffffba04095c) returned 2 [0080.373] DeleteObject (ho=0x7b0406c7) returned 1 [0080.373] DeleteObject (ho=0xffffffffba04095c) returned 1 [0080.373] OffsetViewportOrgEx (in: hdc=0x100109e4, x=0, y=0, lppt=0x22b9430 | out: lppt=0x22b9430) returned 1 [0080.373] GetROP2 (hdc=0x100109e4) returned 13 [0080.373] GetBkMode (hdc=0x100109e4) returned 2 [0080.373] SetBkMode (hdc=0x100109e4, mode=1) returned 2 [0080.373] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0xc3009e5 [0080.373] SelectObject (hdc=0x100109e4, h=0xc3009e5) returned 0x1b00017 [0080.373] MoveToEx (in: hdc=0x100109e4, x=25, y=0, lppt=0x22b9498 | out: lppt=0x22b9498) returned 1 [0080.373] LineTo (hdc=0x100109e4, x=0, y=0) returned 1 [0080.373] SetBkMode (hdc=0x100109e4, mode=2) returned 1 [0080.373] MoveToEx (in: hdc=0x100109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.373] GetROP2 (hdc=0x100109e4) returned 13 [0080.374] GetBkMode (hdc=0x100109e4) returned 2 [0080.374] SetBkMode (hdc=0x100109e4, mode=1) returned 2 [0080.374] SelectObject (hdc=0x100109e4, h=0xc3009e5) returned 0xc3009e5 [0080.374] MoveToEx (in: hdc=0x100109e4, x=0, y=0, lppt=0x22b94b0 | out: lppt=0x22b94b0) returned 1 [0080.374] LineTo (hdc=0x100109e4, x=0, y=22) returned 1 [0080.374] SetBkMode (hdc=0x100109e4, mode=2) returned 1 [0080.374] MoveToEx (in: hdc=0x100109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.374] SelectObject (hdc=0x100109e4, h=0x1b00017) returned 0xc3009e5 [0080.374] DeleteObject (ho=0xc3009e5) returned 1 [0080.374] GetROP2 (hdc=0x100109e4) returned 13 [0080.374] GetBkMode (hdc=0x100109e4) returned 2 [0080.374] SetBkMode (hdc=0x100109e4, mode=1) returned 2 [0080.374] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x83009e3 [0080.374] SelectObject (hdc=0x100109e4, h=0x83009e3) returned 0x1b00017 [0080.374] MoveToEx (in: hdc=0x100109e4, x=0, y=22, lppt=0x22b9518 | out: lppt=0x22b9518) returned 1 [0080.374] LineTo (hdc=0x100109e4, x=25, y=22) returned 1 [0080.374] SetBkMode (hdc=0x100109e4, mode=2) returned 1 [0080.374] MoveToEx (in: hdc=0x100109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.374] GetROP2 (hdc=0x100109e4) returned 13 [0080.374] GetBkMode (hdc=0x100109e4) returned 2 [0080.374] SetBkMode (hdc=0x100109e4, mode=1) returned 2 [0080.374] SelectObject (hdc=0x100109e4, h=0x83009e3) returned 0x83009e3 [0080.375] MoveToEx (in: hdc=0x100109e4, x=25, y=22, lppt=0x22b9530 | out: lppt=0x22b9530) returned 1 [0080.375] LineTo (hdc=0x100109e4, x=25, y=-1) returned 1 [0080.375] SetBkMode (hdc=0x100109e4, mode=2) returned 1 [0080.375] MoveToEx (in: hdc=0x100109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.375] SelectObject (hdc=0x100109e4, h=0x1b00017) returned 0x83009e3 [0080.375] DeleteObject (ho=0x83009e3) returned 1 [0080.375] GetROP2 (hdc=0x100109e4) returned 13 [0080.375] GetBkMode (hdc=0x100109e4) returned 2 [0080.375] SetBkMode (hdc=0x100109e4, mode=1) returned 2 [0080.375] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xd3009e5 [0080.375] SelectObject (hdc=0x100109e4, h=0xd3009e5) returned 0x1b00017 [0080.375] MoveToEx (in: hdc=0x100109e4, x=24, y=1, lppt=0x22b9598 | out: lppt=0x22b9598) returned 1 [0080.375] LineTo (hdc=0x100109e4, x=1, y=1) returned 1 [0080.375] SetBkMode (hdc=0x100109e4, mode=2) returned 1 [0080.375] MoveToEx (in: hdc=0x100109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.375] GetROP2 (hdc=0x100109e4) returned 13 [0080.375] GetBkMode (hdc=0x100109e4) returned 2 [0080.375] SetBkMode (hdc=0x100109e4, mode=1) returned 2 [0080.375] SelectObject (hdc=0x100109e4, h=0xd3009e5) returned 0xd3009e5 [0080.375] MoveToEx (in: hdc=0x100109e4, x=1, y=1, lppt=0x22b95b0 | out: lppt=0x22b95b0) returned 1 [0080.375] LineTo (hdc=0x100109e4, x=1, y=21) returned 1 [0080.375] SetBkMode (hdc=0x100109e4, mode=2) returned 1 [0080.375] MoveToEx (in: hdc=0x100109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.376] SelectObject (hdc=0x100109e4, h=0x1b00017) returned 0xd3009e5 [0080.376] DeleteObject (ho=0xd3009e5) returned 1 [0080.376] GetROP2 (hdc=0x100109e4) returned 13 [0080.376] GetBkMode (hdc=0x100109e4) returned 2 [0080.376] SetBkMode (hdc=0x100109e4, mode=1) returned 2 [0080.376] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x93009e3 [0080.376] SelectObject (hdc=0x100109e4, h=0x93009e3) returned 0x1b00017 [0080.376] MoveToEx (in: hdc=0x100109e4, x=1, y=21, lppt=0x22b9618 | out: lppt=0x22b9618) returned 1 [0080.376] LineTo (hdc=0x100109e4, x=24, y=21) returned 1 [0080.376] SetBkMode (hdc=0x100109e4, mode=2) returned 1 [0080.376] MoveToEx (in: hdc=0x100109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.376] GetROP2 (hdc=0x100109e4) returned 13 [0080.376] GetBkMode (hdc=0x100109e4) returned 2 [0080.376] SetBkMode (hdc=0x100109e4, mode=1) returned 2 [0080.376] SelectObject (hdc=0x100109e4, h=0x93009e3) returned 0x93009e3 [0080.376] MoveToEx (in: hdc=0x100109e4, x=24, y=21, lppt=0x22b9630 | out: lppt=0x22b9630) returned 1 [0080.376] LineTo (hdc=0x100109e4, x=24, y=0) returned 1 [0080.376] SetBkMode (hdc=0x100109e4, mode=2) returned 1 [0080.376] MoveToEx (in: hdc=0x100109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.376] SelectObject (hdc=0x100109e4, h=0x1b00017) returned 0x93009e3 [0080.376] DeleteObject (ho=0x93009e3) returned 1 [0080.376] RestoreDC (hdc=0x100109e4, nSavedDC=-1) returned 1 [0080.377] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x100109e4) returned 0x0 [0080.377] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0080.377] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x100109e4, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.377] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x100109e4) returned 0x0 [0080.377] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0080.377] SelectObject (hdc=0x100109e4, h=0x185000f) returned 0x160506a9 [0080.377] DeleteDC (hdc=0x100109e4) returned 1 [0080.377] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0080.377] EndPaint (hWnd=0x3032e, lpPaint=0x14e548) returned 1 [0080.377] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.377] IsWindowUnicode (hWnd=0x30338) returned 1 [0080.377] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.377] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.377] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0080.377] BeginPaint (in: hWnd=0x30338, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0080.378] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0080.378] CreateCompatibleDC (hdc=0x220106d6) returned 0x5f01065f [0080.378] SelectObject (hdc=0x5f01065f, h=0x160506a9) returned 0x185000f [0080.378] GdipCreateFromHDC (hdc=0x5f01065f, graphics=0x14e528) returned 0x0 [0080.378] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0080.378] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0080.378] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0080.378] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.378] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0080.378] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d890 [0080.378] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d890) returned 0x0 [0080.378] LocalFree (hMem=0x1d92d890) returned 0x0 [0080.378] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.378] GdipCreateRegion (region=0x14e550) returned 0x0 [0080.378] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.378] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0080.378] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0080.378] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd240dbd) returned 0x0 [0080.378] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.379] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0080.379] GetCurrentObject (hdc=0x5f01065f, type=0x1) returned 0x1b00017 [0080.379] GetCurrentObject (hdc=0x5f01065f, type=0x2) returned 0x1900010 [0080.379] GetCurrentObject (hdc=0x5f01065f, type=0x7) returned 0x160506a9 [0080.379] GetCurrentObject (hdc=0x5f01065f, type=0x6) returned 0x18a0048 [0080.379] SaveDC (hdc=0x5f01065f) returned 1 [0080.379] GetNearestColor (hdc=0x5f01065f, color=0xf0f0f0) returned 0xf0f0f0 [0080.379] GetNearestColor (hdc=0x5f01065f, color=0xa0a0a0) returned 0xa0a0a0 [0080.379] GetNearestColor (hdc=0x5f01065f, color=0x696969) returned 0x696969 [0080.379] GetNearestColor (hdc=0x5f01065f, color=0xa0a0a0) returned 0xa0a0a0 [0080.379] GetNearestColor (hdc=0x5f01065f, color=0x0) returned 0x0 [0080.379] GetNearestColor (hdc=0x5f01065f, color=0xffffff) returned 0xffffff [0080.379] GetNearestColor (hdc=0x5f01065f, color=0xe5e5e5) returned 0xe5e5e5 [0080.379] GetNearestColor (hdc=0x5f01065f, color=0xd8d8d8) returned 0xd8d8d8 [0080.438] GetNearestColor (hdc=0x5f01065f, color=0x0) returned 0x0 [0080.438] RestoreDC (hdc=0x5f01065f, nSavedDC=-1) returned 1 [0080.438] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5f01065f) returned 0x0 [0080.438] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.438] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x99+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.439] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.439] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22b9f50) returned 0x0 [0080.439] GdipSetStringFormatAlign (format=0x1beb7a00, align=0x1) returned 0x0 [0080.439] GdipSetStringFormatLineAlign (format=0x1beb7a00, align=0x1) returned 0x0 [0080.439] GdipSetStringFormatHotkeyPrefix (format=0x1beb7a00, hotkeyPrefix=1) returned 0x0 [0080.439] GdipGetStringFormatFlags (format=0x1beb7a00, flags=0x14e378) returned 0x0 [0080.439] GdipGetStringFormatTrimming (format=0x1beb7a00, trimming=0x14e378) returned 0x0 [0080.439] GdipGetStringFormatHotkeyPrefix (format=0x1beb7a00, hotkeyPrefix=0x14e378) returned 0x0 [0080.439] GdipGetFontSize (font=0x1beb7a00, size=0x14e378) returned 0x0 [0080.439] GdipGetFontStyle (font=0x1beb7a00, style=0x14e378) returned 0x0 [0080.439] GdipDeleteStringFormat (format=0x1beb7a00) returned 0x0 [0080.439] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.439] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.439] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.440] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0080.440] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22ba080) returned 0x0 [0080.440] GdipSetStringFormatFlags (format=0x1beb7c30, flags=0) returned 0x0 [0080.440] GdipSetStringFormatTrimming (format=0x1beb7c30, trimming=0x1) returned 0x0 [0080.440] GdipSetStringFormatHotkeyPrefix (format=0x1beb7c30, hotkeyPrefix=1) returned 0x0 [0080.440] GdipSetStringFormatAlign (format=0x1beb7c30, align=0x1) returned 0x0 [0080.440] GdipSetStringFormatLineAlign (format=0x1beb7c30, align=0x1) returned 0x0 [0080.440] GdipMeasureString (graphics=0x1beb8070, string="+", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7c30, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0080.440] GdipDeleteStringFormat (format=0x1beb7c30) returned 0x0 [0080.440] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0080.440] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.440] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.441] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.441] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0080.441] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.441] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0080.441] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.441] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0080.441] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cb90 [0080.441] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cb90) returned 0x0 [0080.441] LocalFree (hMem=0x1d92cb90) returned 0x0 [0080.441] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92ccd0 [0080.441] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92ccd0) returned 0x0 [0080.441] LocalFree (hMem=0x1d92ccd0) returned 0x0 [0080.441] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.441] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0080.441] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0080.441] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0080.441] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.441] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0080.441] GetCurrentObject (hdc=0x5f01065f, type=0x1) returned 0x1b00017 [0080.441] GetCurrentObject (hdc=0x5f01065f, type=0x2) returned 0x1900010 [0080.441] GetCurrentObject (hdc=0x5f01065f, type=0x7) returned 0x160506a9 [0080.442] GetCurrentObject (hdc=0x5f01065f, type=0x6) returned 0x18a0048 [0080.442] SaveDC (hdc=0x5f01065f) returned 1 [0080.442] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffbb04095c [0080.442] GetClipRgn (hdc=0x5f01065f, hrgn=0xffffffffbb04095c) returned 0 [0080.442] SelectClipRgn (hdc=0x5f01065f, hrgn=0x7c0406c7) returned 2 [0080.442] DeleteObject (ho=0xffffffffbb04095c) returned 1 [0080.442] DeleteObject (ho=0x7c0406c7) returned 1 [0080.442] OffsetViewportOrgEx (in: hdc=0x5f01065f, x=0, y=0, lppt=0x22ba440 | out: lppt=0x22ba440) returned 1 [0080.442] GetNearestColor (hdc=0x5f01065f, color=0xf0f0f0) returned 0xf0f0f0 [0080.442] CreateSolidBrush (color=0xf0f0f0) returned 0x56100559 [0080.442] FillRect (hDC=0x5f01065f, lprc=0x14e1c8, hbr=0x56100559) returned 1 [0080.442] DeleteObject (ho=0x56100559) returned 1 [0080.442] RestoreDC (hdc=0x5f01065f, nSavedDC=-1) returned 1 [0080.443] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5f01065f) returned 0x0 [0080.443] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.443] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0080.443] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.443] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22ba540) returned 0x0 [0080.443] GdipSetStringFormatAlign (format=0x1beb7e60, align=0x1) returned 0x0 [0080.443] GdipSetStringFormatLineAlign (format=0x1beb7e60, align=0x1) returned 0x0 [0080.443] GdipSetStringFormatHotkeyPrefix (format=0x1beb7e60, hotkeyPrefix=1) returned 0x0 [0080.443] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0080.443] GdipDrawString (graphics=0x1beb67f0, string="+", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7e60, brush=0x1beb15e0) returned 0x0 [0080.443] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0080.443] GdipDeleteStringFormat (format=0x1beb7e60) returned 0x0 [0080.444] GetFocus () returned 0x0 [0080.444] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.444] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.444] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.444] GdipCreateRegion (region=0x14e030) returned 0x0 [0080.444] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.444] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0080.444] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.444] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0080.444] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d490 [0080.444] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d490) returned 0x0 [0080.444] LocalFree (hMem=0x1d92d490) returned 0x0 [0080.444] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d0d0 [0080.444] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d0d0) returned 0x0 [0080.444] LocalFree (hMem=0x1d92d0d0) returned 0x0 [0080.445] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.445] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0080.445] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0080.445] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0080.445] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.445] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0080.445] GetCurrentObject (hdc=0x5f01065f, type=0x1) returned 0x1b00017 [0080.445] GetCurrentObject (hdc=0x5f01065f, type=0x2) returned 0x1900010 [0080.445] GetCurrentObject (hdc=0x5f01065f, type=0x7) returned 0x160506a9 [0080.445] GetCurrentObject (hdc=0x5f01065f, type=0x6) returned 0x18a0048 [0080.445] SaveDC (hdc=0x5f01065f) returned 1 [0080.445] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7d0406c7 [0080.445] GetClipRgn (hdc=0x5f01065f, hrgn=0x7d0406c7) returned 0 [0080.445] SelectClipRgn (hdc=0x5f01065f, hrgn=0xffffffffbc04095c) returned 2 [0080.445] DeleteObject (ho=0x7d0406c7) returned 1 [0080.445] DeleteObject (ho=0xffffffffbc04095c) returned 1 [0080.445] OffsetViewportOrgEx (in: hdc=0x5f01065f, x=0, y=0, lppt=0x22ba928 | out: lppt=0x22ba928) returned 1 [0080.445] GetROP2 (hdc=0x5f01065f) returned 13 [0080.445] GetBkMode (hdc=0x5f01065f) returned 2 [0080.445] SetBkMode (hdc=0x5f01065f, mode=1) returned 2 [0080.445] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0xa3009e3 [0080.446] SelectObject (hdc=0x5f01065f, h=0xa3009e3) returned 0x1b00017 [0080.446] MoveToEx (in: hdc=0x5f01065f, x=25, y=0, lppt=0x22ba990 | out: lppt=0x22ba990) returned 1 [0080.446] LineTo (hdc=0x5f01065f, x=0, y=0) returned 1 [0080.446] SetBkMode (hdc=0x5f01065f, mode=2) returned 1 [0080.446] MoveToEx (in: hdc=0x5f01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.446] GetROP2 (hdc=0x5f01065f) returned 13 [0080.446] GetBkMode (hdc=0x5f01065f) returned 2 [0080.446] SetBkMode (hdc=0x5f01065f, mode=1) returned 2 [0080.446] SelectObject (hdc=0x5f01065f, h=0xa3009e3) returned 0xa3009e3 [0080.446] MoveToEx (in: hdc=0x5f01065f, x=0, y=0, lppt=0x22ba9a8 | out: lppt=0x22ba9a8) returned 1 [0080.446] LineTo (hdc=0x5f01065f, x=0, y=22) returned 1 [0080.446] SetBkMode (hdc=0x5f01065f, mode=2) returned 1 [0080.446] MoveToEx (in: hdc=0x5f01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.446] SelectObject (hdc=0x5f01065f, h=0x1b00017) returned 0xa3009e3 [0080.446] DeleteObject (ho=0xa3009e3) returned 1 [0080.446] GetROP2 (hdc=0x5f01065f) returned 13 [0080.446] GetBkMode (hdc=0x5f01065f) returned 2 [0080.446] SetBkMode (hdc=0x5f01065f, mode=1) returned 2 [0080.446] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0xe3009e5 [0080.446] SelectObject (hdc=0x5f01065f, h=0xe3009e5) returned 0x1b00017 [0080.446] MoveToEx (in: hdc=0x5f01065f, x=0, y=22, lppt=0x22baa10 | out: lppt=0x22baa10) returned 1 [0080.446] LineTo (hdc=0x5f01065f, x=25, y=22) returned 1 [0080.447] SetBkMode (hdc=0x5f01065f, mode=2) returned 1 [0080.447] MoveToEx (in: hdc=0x5f01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.447] GetROP2 (hdc=0x5f01065f) returned 13 [0080.447] GetBkMode (hdc=0x5f01065f) returned 2 [0080.447] SetBkMode (hdc=0x5f01065f, mode=1) returned 2 [0080.447] SelectObject (hdc=0x5f01065f, h=0xe3009e5) returned 0xe3009e5 [0080.447] MoveToEx (in: hdc=0x5f01065f, x=25, y=22, lppt=0x22baa28 | out: lppt=0x22baa28) returned 1 [0080.447] LineTo (hdc=0x5f01065f, x=25, y=-1) returned 1 [0080.447] SetBkMode (hdc=0x5f01065f, mode=2) returned 1 [0080.447] MoveToEx (in: hdc=0x5f01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.447] SelectObject (hdc=0x5f01065f, h=0x1b00017) returned 0xe3009e5 [0080.447] DeleteObject (ho=0xe3009e5) returned 1 [0080.447] GetROP2 (hdc=0x5f01065f) returned 13 [0080.447] GetBkMode (hdc=0x5f01065f) returned 2 [0080.447] SetBkMode (hdc=0x5f01065f, mode=1) returned 2 [0080.447] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xb3009e3 [0080.447] SelectObject (hdc=0x5f01065f, h=0xb3009e3) returned 0x1b00017 [0080.447] MoveToEx (in: hdc=0x5f01065f, x=24, y=1, lppt=0x22baa90 | out: lppt=0x22baa90) returned 1 [0080.447] LineTo (hdc=0x5f01065f, x=1, y=1) returned 1 [0080.447] SetBkMode (hdc=0x5f01065f, mode=2) returned 1 [0080.447] MoveToEx (in: hdc=0x5f01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.447] GetROP2 (hdc=0x5f01065f) returned 13 [0080.447] GetBkMode (hdc=0x5f01065f) returned 2 [0080.447] SetBkMode (hdc=0x5f01065f, mode=1) returned 2 [0080.448] SelectObject (hdc=0x5f01065f, h=0xb3009e3) returned 0xb3009e3 [0080.448] MoveToEx (in: hdc=0x5f01065f, x=1, y=1, lppt=0x22baaa8 | out: lppt=0x22baaa8) returned 1 [0080.448] LineTo (hdc=0x5f01065f, x=1, y=21) returned 1 [0080.448] SetBkMode (hdc=0x5f01065f, mode=2) returned 1 [0080.448] MoveToEx (in: hdc=0x5f01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.448] SelectObject (hdc=0x5f01065f, h=0x1b00017) returned 0xb3009e3 [0080.448] DeleteObject (ho=0xb3009e3) returned 1 [0080.448] GetROP2 (hdc=0x5f01065f) returned 13 [0080.448] GetBkMode (hdc=0x5f01065f) returned 2 [0080.448] SetBkMode (hdc=0x5f01065f, mode=1) returned 2 [0080.448] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xf3009e5 [0080.448] SelectObject (hdc=0x5f01065f, h=0xf3009e5) returned 0x1b00017 [0080.448] MoveToEx (in: hdc=0x5f01065f, x=1, y=21, lppt=0x22bab10 | out: lppt=0x22bab10) returned 1 [0080.448] LineTo (hdc=0x5f01065f, x=24, y=21) returned 1 [0080.448] SetBkMode (hdc=0x5f01065f, mode=2) returned 1 [0080.448] MoveToEx (in: hdc=0x5f01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.448] GetROP2 (hdc=0x5f01065f) returned 13 [0080.448] GetBkMode (hdc=0x5f01065f) returned 2 [0080.448] SetBkMode (hdc=0x5f01065f, mode=1) returned 2 [0080.448] SelectObject (hdc=0x5f01065f, h=0xf3009e5) returned 0xf3009e5 [0080.448] MoveToEx (in: hdc=0x5f01065f, x=24, y=21, lppt=0x22bab28 | out: lppt=0x22bab28) returned 1 [0080.448] LineTo (hdc=0x5f01065f, x=24, y=0) returned 1 [0080.448] SetBkMode (hdc=0x5f01065f, mode=2) returned 1 [0080.449] MoveToEx (in: hdc=0x5f01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.449] SelectObject (hdc=0x5f01065f, h=0x1b00017) returned 0xf3009e5 [0080.449] DeleteObject (ho=0xf3009e5) returned 1 [0080.449] RestoreDC (hdc=0x5f01065f, nSavedDC=-1) returned 1 [0080.449] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5f01065f) returned 0x0 [0080.449] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0080.449] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x5f01065f, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.449] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5f01065f) returned 0x0 [0080.449] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0080.449] SelectObject (hdc=0x5f01065f, h=0x185000f) returned 0x160506a9 [0080.449] DeleteDC (hdc=0x5f01065f) returned 1 [0080.449] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0080.449] EndPaint (hWnd=0x30338, lpPaint=0x14e548) returned 1 [0080.449] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.449] IsWindowUnicode (hWnd=0x30326) returned 1 [0080.449] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.450] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.450] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0080.450] BeginPaint (in: hWnd=0x30326, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0080.450] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0080.450] CreateCompatibleDC (hdc=0xc0100ae) returned 0x5f0109dc [0080.450] SelectObject (hdc=0x5f0109dc, h=0x160506a9) returned 0x185000f [0080.450] GdipCreateFromHDC (hdc=0x5f0109dc, graphics=0x14e528) returned 0x0 [0080.450] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0080.450] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0080.450] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0080.450] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.450] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0080.450] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cb90 [0080.450] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cb90) returned 0x0 [0080.450] LocalFree (hMem=0x1d92cb90) returned 0x0 [0080.450] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.450] GdipCreateRegion (region=0x14e550) returned 0x0 [0080.451] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.451] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0080.451] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0080.451] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd210dbd) returned 0x0 [0080.451] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.451] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0080.451] GetCurrentObject (hdc=0x5f0109dc, type=0x1) returned 0x1b00017 [0080.451] GetCurrentObject (hdc=0x5f0109dc, type=0x2) returned 0x1900010 [0080.451] GetCurrentObject (hdc=0x5f0109dc, type=0x7) returned 0x160506a9 [0080.451] GetCurrentObject (hdc=0x5f0109dc, type=0x6) returned 0x18a0048 [0080.451] SaveDC (hdc=0x5f0109dc) returned 1 [0080.451] GetNearestColor (hdc=0x5f0109dc, color=0xf0f0f0) returned 0xf0f0f0 [0080.451] GetNearestColor (hdc=0x5f0109dc, color=0xa0a0a0) returned 0xa0a0a0 [0080.451] GetNearestColor (hdc=0x5f0109dc, color=0x696969) returned 0x696969 [0080.451] GetNearestColor (hdc=0x5f0109dc, color=0xa0a0a0) returned 0xa0a0a0 [0080.451] GetNearestColor (hdc=0x5f0109dc, color=0x0) returned 0x0 [0080.451] GetNearestColor (hdc=0x5f0109dc, color=0xffffff) returned 0xffffff [0080.451] GetNearestColor (hdc=0x5f0109dc, color=0xe5e5e5) returned 0xe5e5e5 [0080.451] GetNearestColor (hdc=0x5f0109dc, color=0xd8d8d8) returned 0xd8d8d8 [0080.451] GetNearestColor (hdc=0x5f0109dc, color=0x0) returned 0x0 [0080.452] RestoreDC (hdc=0x5f0109dc, nSavedDC=-1) returned 1 [0080.452] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5f0109dc) returned 0x0 [0080.452] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.452] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx®+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.452] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.452] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22bb448) returned 0x0 [0080.452] GdipSetStringFormatAlign (format=0x1beb7ca0, align=0x1) returned 0x0 [0080.452] GdipSetStringFormatLineAlign (format=0x1beb7ca0, align=0x1) returned 0x0 [0080.452] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ca0, hotkeyPrefix=1) returned 0x0 [0080.452] GdipGetStringFormatFlags (format=0x1beb7ca0, flags=0x14e378) returned 0x0 [0080.452] GdipGetStringFormatTrimming (format=0x1beb7ca0, trimming=0x14e378) returned 0x0 [0080.452] GdipGetStringFormatHotkeyPrefix (format=0x1beb7ca0, hotkeyPrefix=0x14e378) returned 0x0 [0080.452] GdipGetFontSize (font=0x1beb7ca0, size=0x14e378) returned 0x0 [0080.452] GdipGetFontStyle (font=0x1beb7ca0, style=0x14e378) returned 0x0 [0080.452] GdipDeleteStringFormat (format=0x1beb7ca0) returned 0x0 [0080.453] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.453] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.453] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.453] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0080.453] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22bb578) returned 0x0 [0080.453] GdipSetStringFormatFlags (format=0x1beb7c30, flags=0) returned 0x0 [0080.453] GdipSetStringFormatTrimming (format=0x1beb7c30, trimming=0x1) returned 0x0 [0080.453] GdipSetStringFormatHotkeyPrefix (format=0x1beb7c30, hotkeyPrefix=1) returned 0x0 [0080.453] GdipSetStringFormatAlign (format=0x1beb7c30, align=0x1) returned 0x0 [0080.453] GdipSetStringFormatLineAlign (format=0x1beb7c30, align=0x1) returned 0x0 [0080.453] GdipMeasureString (graphics=0x1beb8070, string="7", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7c30, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0080.453] GdipDeleteStringFormat (format=0x1beb7c30) returned 0x0 [0080.453] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0080.454] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.454] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.454] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.454] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0080.454] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.454] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0080.454] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.454] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0080.454] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d350 [0080.454] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d350) returned 0x0 [0080.454] LocalFree (hMem=0x1d92d350) returned 0x0 [0080.454] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0080.454] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cf10) returned 0x0 [0080.454] LocalFree (hMem=0x1d92cf10) returned 0x0 [0080.454] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.454] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0080.455] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0080.455] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0080.455] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.455] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0080.455] GetCurrentObject (hdc=0x5f0109dc, type=0x1) returned 0x1b00017 [0080.455] GetCurrentObject (hdc=0x5f0109dc, type=0x2) returned 0x1900010 [0080.455] GetCurrentObject (hdc=0x5f0109dc, type=0x7) returned 0x160506a9 [0080.455] GetCurrentObject (hdc=0x5f0109dc, type=0x6) returned 0x18a0048 [0080.455] SaveDC (hdc=0x5f0109dc) returned 1 [0080.455] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffbd04095c [0080.455] GetClipRgn (hdc=0x5f0109dc, hrgn=0xffffffffbd04095c) returned 0 [0080.455] SelectClipRgn (hdc=0x5f0109dc, hrgn=0x7e0406c7) returned 2 [0080.455] DeleteObject (ho=0xffffffffbd04095c) returned 1 [0080.455] DeleteObject (ho=0x7e0406c7) returned 1 [0080.455] OffsetViewportOrgEx (in: hdc=0x5f0109dc, x=0, y=0, lppt=0x22bb938 | out: lppt=0x22bb938) returned 1 [0080.455] GetNearestColor (hdc=0x5f0109dc, color=0xf0f0f0) returned 0xf0f0f0 [0080.455] CreateSolidBrush (color=0xf0f0f0) returned 0x57100559 [0080.455] FillRect (hDC=0x5f0109dc, lprc=0x14e1c8, hbr=0x57100559) returned 1 [0080.455] DeleteObject (ho=0x57100559) returned 1 [0080.455] RestoreDC (hdc=0x5f0109dc, nSavedDC=-1) returned 1 [0080.456] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5f0109dc) returned 0x0 [0080.456] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.456] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0080.456] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.456] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22bba38) returned 0x0 [0080.456] GdipSetStringFormatAlign (format=0x1beb7ed0, align=0x1) returned 0x0 [0080.456] GdipSetStringFormatLineAlign (format=0x1beb7ed0, align=0x1) returned 0x0 [0080.456] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ed0, hotkeyPrefix=1) returned 0x0 [0080.456] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0080.456] GdipDrawString (graphics=0x1beb67f0, string="7", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7ed0, brush=0x1beb15e0) returned 0x0 [0080.456] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0080.456] GdipDeleteStringFormat (format=0x1beb7ed0) returned 0x0 [0080.457] GetFocus () returned 0x0 [0080.457] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.457] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx«+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.457] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.457] GdipCreateRegion (region=0x14e030) returned 0x0 [0080.457] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.457] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0080.457] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.457] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0080.457] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0080.457] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d2d0) returned 0x0 [0080.457] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0080.572] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d950 [0080.572] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d950) returned 0x0 [0080.572] LocalFree (hMem=0x1d92d950) returned 0x0 [0080.572] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.572] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0080.572] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0080.572] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0080.572] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.572] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0080.572] GetCurrentObject (hdc=0x5f0109dc, type=0x1) returned 0x1b00017 [0080.573] GetCurrentObject (hdc=0x5f0109dc, type=0x2) returned 0x1900010 [0080.573] GetCurrentObject (hdc=0x5f0109dc, type=0x7) returned 0x160506a9 [0080.573] GetCurrentObject (hdc=0x5f0109dc, type=0x6) returned 0x18a0048 [0080.573] SaveDC (hdc=0x5f0109dc) returned 1 [0080.573] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7f0406c7 [0080.573] GetClipRgn (hdc=0x5f0109dc, hrgn=0x7f0406c7) returned 0 [0080.573] SelectClipRgn (hdc=0x5f0109dc, hrgn=0xffffffffbe04095c) returned 2 [0080.573] DeleteObject (ho=0x7f0406c7) returned 1 [0080.573] DeleteObject (ho=0xffffffffbe04095c) returned 1 [0080.573] OffsetViewportOrgEx (in: hdc=0x5f0109dc, x=0, y=0, lppt=0x22bbe20 | out: lppt=0x22bbe20) returned 1 [0080.573] GetROP2 (hdc=0x5f0109dc) returned 13 [0080.573] GetBkMode (hdc=0x5f0109dc) returned 2 [0080.573] SetBkMode (hdc=0x5f0109dc, mode=1) returned 2 [0080.573] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x113009e5 [0080.573] SelectObject (hdc=0x5f0109dc, h=0x113009e5) returned 0x1b00017 [0080.573] MoveToEx (in: hdc=0x5f0109dc, x=25, y=0, lppt=0x22bbe88 | out: lppt=0x22bbe88) returned 1 [0080.573] LineTo (hdc=0x5f0109dc, x=0, y=0) returned 1 [0080.573] SetBkMode (hdc=0x5f0109dc, mode=2) returned 1 [0080.573] MoveToEx (in: hdc=0x5f0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.574] GetROP2 (hdc=0x5f0109dc) returned 13 [0080.574] GetBkMode (hdc=0x5f0109dc) returned 2 [0080.574] SetBkMode (hdc=0x5f0109dc, mode=1) returned 2 [0080.574] SelectObject (hdc=0x5f0109dc, h=0x113009e5) returned 0x113009e5 [0080.574] MoveToEx (in: hdc=0x5f0109dc, x=0, y=0, lppt=0x22bbea0 | out: lppt=0x22bbea0) returned 1 [0080.574] LineTo (hdc=0x5f0109dc, x=0, y=22) returned 1 [0080.574] SetBkMode (hdc=0x5f0109dc, mode=2) returned 1 [0080.574] MoveToEx (in: hdc=0x5f0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.574] SelectObject (hdc=0x5f0109dc, h=0x1b00017) returned 0x113009e5 [0080.574] DeleteObject (ho=0x113009e5) returned 1 [0080.574] GetROP2 (hdc=0x5f0109dc) returned 13 [0080.574] GetBkMode (hdc=0x5f0109dc) returned 2 [0080.574] SetBkMode (hdc=0x5f0109dc, mode=1) returned 2 [0080.574] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0xc3009e3 [0080.574] SelectObject (hdc=0x5f0109dc, h=0xc3009e3) returned 0x1b00017 [0080.574] MoveToEx (in: hdc=0x5f0109dc, x=0, y=22, lppt=0x22bbf08 | out: lppt=0x22bbf08) returned 1 [0080.574] LineTo (hdc=0x5f0109dc, x=25, y=22) returned 1 [0080.574] SetBkMode (hdc=0x5f0109dc, mode=2) returned 1 [0080.574] MoveToEx (in: hdc=0x5f0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.574] GetROP2 (hdc=0x5f0109dc) returned 13 [0080.574] GetBkMode (hdc=0x5f0109dc) returned 2 [0080.574] SetBkMode (hdc=0x5f0109dc, mode=1) returned 2 [0080.574] SelectObject (hdc=0x5f0109dc, h=0xc3009e3) returned 0xc3009e3 [0080.575] MoveToEx (in: hdc=0x5f0109dc, x=25, y=22, lppt=0x22bbf20 | out: lppt=0x22bbf20) returned 1 [0080.575] LineTo (hdc=0x5f0109dc, x=25, y=-1) returned 1 [0080.575] SetBkMode (hdc=0x5f0109dc, mode=2) returned 1 [0080.575] MoveToEx (in: hdc=0x5f0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.575] SelectObject (hdc=0x5f0109dc, h=0x1b00017) returned 0xc3009e3 [0080.575] DeleteObject (ho=0xc3009e3) returned 1 [0080.575] GetROP2 (hdc=0x5f0109dc) returned 13 [0080.575] GetBkMode (hdc=0x5f0109dc) returned 2 [0080.575] SetBkMode (hdc=0x5f0109dc, mode=1) returned 2 [0080.575] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x123009e5 [0080.575] SelectObject (hdc=0x5f0109dc, h=0x123009e5) returned 0x1b00017 [0080.575] MoveToEx (in: hdc=0x5f0109dc, x=24, y=1, lppt=0x22bbf88 | out: lppt=0x22bbf88) returned 1 [0080.575] LineTo (hdc=0x5f0109dc, x=1, y=1) returned 1 [0080.575] SetBkMode (hdc=0x5f0109dc, mode=2) returned 1 [0080.575] MoveToEx (in: hdc=0x5f0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.575] GetROP2 (hdc=0x5f0109dc) returned 13 [0080.575] GetBkMode (hdc=0x5f0109dc) returned 2 [0080.575] SetBkMode (hdc=0x5f0109dc, mode=1) returned 2 [0080.575] SelectObject (hdc=0x5f0109dc, h=0x123009e5) returned 0x123009e5 [0080.575] MoveToEx (in: hdc=0x5f0109dc, x=1, y=1, lppt=0x22bbfa0 | out: lppt=0x22bbfa0) returned 1 [0080.575] LineTo (hdc=0x5f0109dc, x=1, y=21) returned 1 [0080.575] SetBkMode (hdc=0x5f0109dc, mode=2) returned 1 [0080.575] MoveToEx (in: hdc=0x5f0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.575] SelectObject (hdc=0x5f0109dc, h=0x1b00017) returned 0x123009e5 [0080.576] DeleteObject (ho=0x123009e5) returned 1 [0080.576] GetROP2 (hdc=0x5f0109dc) returned 13 [0080.576] GetBkMode (hdc=0x5f0109dc) returned 2 [0080.576] SetBkMode (hdc=0x5f0109dc, mode=1) returned 2 [0080.576] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xd3009e3 [0080.576] SelectObject (hdc=0x5f0109dc, h=0xd3009e3) returned 0x1b00017 [0080.576] MoveToEx (in: hdc=0x5f0109dc, x=1, y=21, lppt=0x22bc008 | out: lppt=0x22bc008) returned 1 [0080.576] LineTo (hdc=0x5f0109dc, x=24, y=21) returned 1 [0080.576] SetBkMode (hdc=0x5f0109dc, mode=2) returned 1 [0080.576] MoveToEx (in: hdc=0x5f0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.576] GetROP2 (hdc=0x5f0109dc) returned 13 [0080.576] GetBkMode (hdc=0x5f0109dc) returned 2 [0080.576] SetBkMode (hdc=0x5f0109dc, mode=1) returned 2 [0080.576] SelectObject (hdc=0x5f0109dc, h=0xd3009e3) returned 0xd3009e3 [0080.576] MoveToEx (in: hdc=0x5f0109dc, x=24, y=21, lppt=0x22bc020 | out: lppt=0x22bc020) returned 1 [0080.576] LineTo (hdc=0x5f0109dc, x=24, y=0) returned 1 [0080.576] SetBkMode (hdc=0x5f0109dc, mode=2) returned 1 [0080.576] MoveToEx (in: hdc=0x5f0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.576] SelectObject (hdc=0x5f0109dc, h=0x1b00017) returned 0xd3009e3 [0080.577] DeleteObject (ho=0xd3009e3) returned 1 [0080.577] RestoreDC (hdc=0x5f0109dc, nSavedDC=-1) returned 1 [0080.577] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5f0109dc) returned 0x0 [0080.577] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0080.577] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x5f0109dc, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.577] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x5f0109dc) returned 0x0 [0080.577] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0080.577] SelectObject (hdc=0x5f0109dc, h=0x185000f) returned 0x160506a9 [0080.577] DeleteDC (hdc=0x5f0109dc) returned 1 [0080.577] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0080.577] EndPaint (hWnd=0x30326, lpPaint=0x14e548) returned 1 [0080.577] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.577] IsWindowUnicode (hWnd=0x3032c) returned 1 [0080.577] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.578] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.578] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0080.578] BeginPaint (in: hWnd=0x3032c, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0080.578] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0080.578] CreateCompatibleDC (hdc=0x220106d6) returned 0x180109e4 [0080.578] SelectObject (hdc=0x180109e4, h=0x160506a9) returned 0x185000f [0080.578] GdipCreateFromHDC (hdc=0x180109e4, graphics=0x14e528) returned 0x0 [0080.578] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0080.578] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0080.578] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0080.578] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.578] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0080.578] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d110 [0080.578] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d110) returned 0x0 [0080.578] LocalFree (hMem=0x1d92d110) returned 0x0 [0080.578] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.578] GdipCreateRegion (region=0x14e550) returned 0x0 [0080.578] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.579] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0080.579] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0080.579] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd1e0dbd) returned 0x0 [0080.579] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.579] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0080.579] GetCurrentObject (hdc=0x180109e4, type=0x1) returned 0x1b00017 [0080.579] GetCurrentObject (hdc=0x180109e4, type=0x2) returned 0x1900010 [0080.579] GetCurrentObject (hdc=0x180109e4, type=0x7) returned 0x160506a9 [0080.579] GetCurrentObject (hdc=0x180109e4, type=0x6) returned 0x18a0048 [0080.579] SaveDC (hdc=0x180109e4) returned 1 [0080.579] GetNearestColor (hdc=0x180109e4, color=0xf0f0f0) returned 0xf0f0f0 [0080.579] GetNearestColor (hdc=0x180109e4, color=0xa0a0a0) returned 0xa0a0a0 [0080.579] GetNearestColor (hdc=0x180109e4, color=0x696969) returned 0x696969 [0080.579] GetNearestColor (hdc=0x180109e4, color=0xa0a0a0) returned 0xa0a0a0 [0080.579] GetNearestColor (hdc=0x180109e4, color=0x0) returned 0x0 [0080.579] GetNearestColor (hdc=0x180109e4, color=0xffffff) returned 0xffffff [0080.579] GetNearestColor (hdc=0x180109e4, color=0xe5e5e5) returned 0xe5e5e5 [0080.579] GetNearestColor (hdc=0x180109e4, color=0xd8d8d8) returned 0xd8d8d8 [0080.579] GetNearestColor (hdc=0x180109e4, color=0x0) returned 0x0 [0080.579] RestoreDC (hdc=0x180109e4, nSavedDC=-1) returned 1 [0080.580] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x180109e4) returned 0x0 [0080.580] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÃ+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.580] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.580] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22bc940) returned 0x0 [0080.580] GdipSetStringFormatAlign (format=0x1beb7b50, align=0x1) returned 0x0 [0080.580] GdipSetStringFormatLineAlign (format=0x1beb7b50, align=0x1) returned 0x0 [0080.580] GdipSetStringFormatHotkeyPrefix (format=0x1beb7b50, hotkeyPrefix=1) returned 0x0 [0080.580] GdipGetStringFormatFlags (format=0x1beb7b50, flags=0x14e378) returned 0x0 [0080.580] GdipGetStringFormatTrimming (format=0x1beb7b50, trimming=0x14e378) returned 0x0 [0080.581] GdipGetStringFormatHotkeyPrefix (format=0x1beb7b50, hotkeyPrefix=0x14e378) returned 0x0 [0080.581] GdipGetFontSize (font=0x1beb7b50, size=0x14e378) returned 0x0 [0080.581] GdipGetFontStyle (font=0x1beb7b50, style=0x14e378) returned 0x0 [0080.581] GdipDeleteStringFormat (format=0x1beb7b50) returned 0x0 [0080.581] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.581] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.581] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0080.581] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22bca70) returned 0x0 [0080.581] GdipSetStringFormatFlags (format=0x1beb7bc0, flags=0) returned 0x0 [0080.582] GdipSetStringFormatTrimming (format=0x1beb7bc0, trimming=0x1) returned 0x0 [0080.582] GdipSetStringFormatHotkeyPrefix (format=0x1beb7bc0, hotkeyPrefix=1) returned 0x0 [0080.582] GdipSetStringFormatAlign (format=0x1beb7bc0, align=0x1) returned 0x0 [0080.582] GdipSetStringFormatLineAlign (format=0x1beb7bc0, align=0x1) returned 0x0 [0080.582] GdipMeasureString (graphics=0x1beb8070, string="0", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7bc0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0080.582] GdipDeleteStringFormat (format=0x1beb7bc0) returned 0x0 [0080.582] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0080.582] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.582] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.582] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0080.582] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.582] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0080.583] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.583] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0080.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d090 [0080.583] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d090) returned 0x0 [0080.583] LocalFree (hMem=0x1d92d090) returned 0x0 [0080.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d810 [0080.583] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d810) returned 0x0 [0080.583] LocalFree (hMem=0x1d92d810) returned 0x0 [0080.583] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.583] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0080.583] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0080.583] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0080.583] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.583] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0080.583] GetCurrentObject (hdc=0x180109e4, type=0x1) returned 0x1b00017 [0080.583] GetCurrentObject (hdc=0x180109e4, type=0x2) returned 0x1900010 [0080.583] GetCurrentObject (hdc=0x180109e4, type=0x7) returned 0x160506a9 [0080.583] GetCurrentObject (hdc=0x180109e4, type=0x6) returned 0x18a0048 [0080.583] SaveDC (hdc=0x180109e4) returned 1 [0080.583] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffbf04095c [0080.584] GetClipRgn (hdc=0x180109e4, hrgn=0xffffffffbf04095c) returned 0 [0080.584] SelectClipRgn (hdc=0x180109e4, hrgn=0xffffffff800406c7) returned 2 [0080.584] DeleteObject (ho=0xffffffffbf04095c) returned 1 [0080.584] DeleteObject (ho=0xffffffff800406c7) returned 1 [0080.584] OffsetViewportOrgEx (in: hdc=0x180109e4, x=0, y=0, lppt=0x22bce30 | out: lppt=0x22bce30) returned 1 [0080.584] GetNearestColor (hdc=0x180109e4, color=0xf0f0f0) returned 0xf0f0f0 [0080.584] CreateSolidBrush (color=0xf0f0f0) returned 0x58100559 [0080.584] FillRect (hDC=0x180109e4, lprc=0x14e1c8, hbr=0x58100559) returned 1 [0080.584] DeleteObject (ho=0x58100559) returned 1 [0080.584] RestoreDC (hdc=0x180109e4, nSavedDC=-1) returned 1 [0080.584] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x180109e4) returned 0x0 [0080.584] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0080.584] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.584] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22bcf30) returned 0x0 [0080.585] GdipSetStringFormatAlign (format=0x1beb7a00, align=0x1) returned 0x0 [0080.585] GdipSetStringFormatLineAlign (format=0x1beb7a00, align=0x1) returned 0x0 [0080.585] GdipSetStringFormatHotkeyPrefix (format=0x1beb7a00, hotkeyPrefix=1) returned 0x0 [0080.585] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0080.585] GdipDrawString (graphics=0x1beb67f0, string="0", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7a00, brush=0x1beb15e0) returned 0x0 [0080.585] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0080.585] GdipDeleteStringFormat (format=0x1beb7a00) returned 0x0 [0080.585] GetFocus () returned 0x0 [0080.585] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.585] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÀ+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.586] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.586] GdipCreateRegion (region=0x14e030) returned 0x0 [0080.586] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.586] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0080.586] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.586] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0080.586] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d8d0 [0080.586] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d8d0) returned 0x0 [0080.586] LocalFree (hMem=0x1d92d8d0) returned 0x0 [0080.586] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0080.586] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d2d0) returned 0x0 [0080.586] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0080.586] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.586] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0080.586] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0080.586] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0080.586] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.586] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0080.586] GetCurrentObject (hdc=0x180109e4, type=0x1) returned 0x1b00017 [0080.586] GetCurrentObject (hdc=0x180109e4, type=0x2) returned 0x1900010 [0080.586] GetCurrentObject (hdc=0x180109e4, type=0x7) returned 0x160506a9 [0080.587] GetCurrentObject (hdc=0x180109e4, type=0x6) returned 0x18a0048 [0080.587] SaveDC (hdc=0x180109e4) returned 1 [0080.587] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff810406c7 [0080.587] GetClipRgn (hdc=0x180109e4, hrgn=0xffffffff810406c7) returned 0 [0080.587] SelectClipRgn (hdc=0x180109e4, hrgn=0xffffffffc004095c) returned 2 [0080.587] DeleteObject (ho=0xffffffff810406c7) returned 1 [0080.587] DeleteObject (ho=0xffffffffc004095c) returned 1 [0080.587] OffsetViewportOrgEx (in: hdc=0x180109e4, x=0, y=0, lppt=0x22bd318 | out: lppt=0x22bd318) returned 1 [0080.587] GetROP2 (hdc=0x180109e4) returned 13 [0080.587] GetBkMode (hdc=0x180109e4) returned 2 [0080.587] SetBkMode (hdc=0x180109e4, mode=1) returned 2 [0080.587] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0xe3009e3 [0080.587] SelectObject (hdc=0x180109e4, h=0xe3009e3) returned 0x1b00017 [0080.587] MoveToEx (in: hdc=0x180109e4, x=25, y=0, lppt=0x22bd380 | out: lppt=0x22bd380) returned 1 [0080.587] LineTo (hdc=0x180109e4, x=0, y=0) returned 1 [0080.587] SetBkMode (hdc=0x180109e4, mode=2) returned 1 [0080.587] MoveToEx (in: hdc=0x180109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.587] GetROP2 (hdc=0x180109e4) returned 13 [0080.587] GetBkMode (hdc=0x180109e4) returned 2 [0080.587] SetBkMode (hdc=0x180109e4, mode=1) returned 2 [0080.587] SelectObject (hdc=0x180109e4, h=0xe3009e3) returned 0xe3009e3 [0080.588] MoveToEx (in: hdc=0x180109e4, x=0, y=0, lppt=0x22bd398 | out: lppt=0x22bd398) returned 1 [0080.588] LineTo (hdc=0x180109e4, x=0, y=22) returned 1 [0080.588] SetBkMode (hdc=0x180109e4, mode=2) returned 1 [0080.588] MoveToEx (in: hdc=0x180109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.588] SelectObject (hdc=0x180109e4, h=0x1b00017) returned 0xe3009e3 [0080.588] DeleteObject (ho=0xe3009e3) returned 1 [0080.588] GetROP2 (hdc=0x180109e4) returned 13 [0080.588] GetBkMode (hdc=0x180109e4) returned 2 [0080.588] SetBkMode (hdc=0x180109e4, mode=1) returned 2 [0080.588] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x133009e5 [0080.588] SelectObject (hdc=0x180109e4, h=0x133009e5) returned 0x1b00017 [0080.588] MoveToEx (in: hdc=0x180109e4, x=0, y=22, lppt=0x22bd400 | out: lppt=0x22bd400) returned 1 [0080.588] LineTo (hdc=0x180109e4, x=25, y=22) returned 1 [0080.588] SetBkMode (hdc=0x180109e4, mode=2) returned 1 [0080.588] MoveToEx (in: hdc=0x180109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.588] GetROP2 (hdc=0x180109e4) returned 13 [0080.588] GetBkMode (hdc=0x180109e4) returned 2 [0080.588] SetBkMode (hdc=0x180109e4, mode=1) returned 2 [0080.588] SelectObject (hdc=0x180109e4, h=0x133009e5) returned 0x133009e5 [0080.588] MoveToEx (in: hdc=0x180109e4, x=25, y=22, lppt=0x22bd418 | out: lppt=0x22bd418) returned 1 [0080.588] LineTo (hdc=0x180109e4, x=25, y=-1) returned 1 [0080.588] SetBkMode (hdc=0x180109e4, mode=2) returned 1 [0080.589] MoveToEx (in: hdc=0x180109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.589] SelectObject (hdc=0x180109e4, h=0x1b00017) returned 0x133009e5 [0080.589] DeleteObject (ho=0x133009e5) returned 1 [0080.589] GetROP2 (hdc=0x180109e4) returned 13 [0080.589] GetBkMode (hdc=0x180109e4) returned 2 [0080.589] SetBkMode (hdc=0x180109e4, mode=1) returned 2 [0080.589] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xf3009e3 [0080.589] SelectObject (hdc=0x180109e4, h=0xf3009e3) returned 0x1b00017 [0080.589] MoveToEx (in: hdc=0x180109e4, x=24, y=1, lppt=0x22bd480 | out: lppt=0x22bd480) returned 1 [0080.589] LineTo (hdc=0x180109e4, x=1, y=1) returned 1 [0080.589] SetBkMode (hdc=0x180109e4, mode=2) returned 1 [0080.589] MoveToEx (in: hdc=0x180109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.589] GetROP2 (hdc=0x180109e4) returned 13 [0080.589] GetBkMode (hdc=0x180109e4) returned 2 [0080.589] SetBkMode (hdc=0x180109e4, mode=1) returned 2 [0080.589] SelectObject (hdc=0x180109e4, h=0xf3009e3) returned 0xf3009e3 [0080.589] MoveToEx (in: hdc=0x180109e4, x=1, y=1, lppt=0x22bd498 | out: lppt=0x22bd498) returned 1 [0080.589] LineTo (hdc=0x180109e4, x=1, y=21) returned 1 [0080.589] SetBkMode (hdc=0x180109e4, mode=2) returned 1 [0080.589] MoveToEx (in: hdc=0x180109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.589] SelectObject (hdc=0x180109e4, h=0x1b00017) returned 0xf3009e3 [0080.589] DeleteObject (ho=0xf3009e3) returned 1 [0080.590] GetROP2 (hdc=0x180109e4) returned 13 [0080.590] GetBkMode (hdc=0x180109e4) returned 2 [0080.590] SetBkMode (hdc=0x180109e4, mode=1) returned 2 [0080.590] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x143009e5 [0080.590] SelectObject (hdc=0x180109e4, h=0x143009e5) returned 0x1b00017 [0080.590] MoveToEx (in: hdc=0x180109e4, x=1, y=21, lppt=0x22bd500 | out: lppt=0x22bd500) returned 1 [0080.590] LineTo (hdc=0x180109e4, x=24, y=21) returned 1 [0080.590] SetBkMode (hdc=0x180109e4, mode=2) returned 1 [0080.590] MoveToEx (in: hdc=0x180109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.590] GetROP2 (hdc=0x180109e4) returned 13 [0080.590] GetBkMode (hdc=0x180109e4) returned 2 [0080.590] SetBkMode (hdc=0x180109e4, mode=1) returned 2 [0080.590] SelectObject (hdc=0x180109e4, h=0x143009e5) returned 0x143009e5 [0080.590] MoveToEx (in: hdc=0x180109e4, x=24, y=21, lppt=0x22bd518 | out: lppt=0x22bd518) returned 1 [0080.590] LineTo (hdc=0x180109e4, x=24, y=0) returned 1 [0080.590] SetBkMode (hdc=0x180109e4, mode=2) returned 1 [0080.590] MoveToEx (in: hdc=0x180109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.590] SelectObject (hdc=0x180109e4, h=0x1b00017) returned 0x143009e5 [0080.590] DeleteObject (ho=0x143009e5) returned 1 [0080.590] RestoreDC (hdc=0x180109e4, nSavedDC=-1) returned 1 [0080.590] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x180109e4) returned 0x0 [0080.590] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0080.591] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x180109e4, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.591] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x180109e4) returned 0x0 [0080.591] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0080.591] SelectObject (hdc=0x180109e4, h=0x185000f) returned 0x160506a9 [0080.591] DeleteDC (hdc=0x180109e4) returned 1 [0080.591] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0080.591] EndPaint (hWnd=0x3032c, lpPaint=0x14e548) returned 1 [0080.591] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.591] IsWindowUnicode (hWnd=0x30320) returned 1 [0080.591] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.591] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.591] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0080.591] BeginPaint (in: hWnd=0x30320, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0080.591] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0080.592] CreateCompatibleDC (hdc=0xc0100ae) returned 0x6701065f [0080.592] SelectObject (hdc=0x6701065f, h=0x160506a9) returned 0x185000f [0080.592] GdipCreateFromHDC (hdc=0x6701065f, graphics=0x14e528) returned 0x0 [0080.592] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0080.592] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0080.592] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0080.592] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.592] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0080.592] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92ccd0 [0080.592] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92ccd0) returned 0x0 [0080.592] LocalFree (hMem=0x1d92ccd0) returned 0x0 [0080.592] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.592] GdipCreateRegion (region=0x14e550) returned 0x0 [0080.592] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.592] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0080.592] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0080.592] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd1b0dbd) returned 0x0 [0080.592] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.593] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0080.593] GetCurrentObject (hdc=0x6701065f, type=0x1) returned 0x1b00017 [0080.593] GetCurrentObject (hdc=0x6701065f, type=0x2) returned 0x1900010 [0080.593] GetCurrentObject (hdc=0x6701065f, type=0x7) returned 0x160506a9 [0080.593] GetCurrentObject (hdc=0x6701065f, type=0x6) returned 0x18a0048 [0080.593] SaveDC (hdc=0x6701065f) returned 1 [0080.593] GetNearestColor (hdc=0x6701065f, color=0xf0f0f0) returned 0xf0f0f0 [0080.593] GetNearestColor (hdc=0x6701065f, color=0xa0a0a0) returned 0xa0a0a0 [0080.593] GetNearestColor (hdc=0x6701065f, color=0x696969) returned 0x696969 [0080.593] GetNearestColor (hdc=0x6701065f, color=0xa0a0a0) returned 0xa0a0a0 [0080.593] GetNearestColor (hdc=0x6701065f, color=0x0) returned 0x0 [0080.593] GetNearestColor (hdc=0x6701065f, color=0xffffff) returned 0xffffff [0080.593] GetNearestColor (hdc=0x6701065f, color=0xe5e5e5) returned 0xe5e5e5 [0080.593] GetNearestColor (hdc=0x6701065f, color=0xd8d8d8) returned 0xd8d8d8 [0080.593] GetNearestColor (hdc=0x6701065f, color=0x0) returned 0x0 [0080.593] RestoreDC (hdc=0x6701065f, nSavedDC=-1) returned 1 [0080.593] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6701065f) returned 0x0 [0080.594] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExØ+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.594] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.594] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22bde38) returned 0x0 [0080.594] GdipSetStringFormatAlign (format=0x1beb7df0, align=0x1) returned 0x0 [0080.594] GdipSetStringFormatLineAlign (format=0x1beb7df0, align=0x1) returned 0x0 [0080.594] GdipSetStringFormatHotkeyPrefix (format=0x1beb7df0, hotkeyPrefix=1) returned 0x0 [0080.594] GdipGetStringFormatFlags (format=0x1beb7df0, flags=0x14e378) returned 0x0 [0080.594] GdipGetStringFormatTrimming (format=0x1beb7df0, trimming=0x14e378) returned 0x0 [0080.594] GdipGetStringFormatHotkeyPrefix (format=0x1beb7df0, hotkeyPrefix=0x14e378) returned 0x0 [0080.594] GdipGetFontSize (font=0x1beb7df0, size=0x14e378) returned 0x0 [0080.594] GdipGetFontStyle (font=0x1beb7df0, style=0x14e378) returned 0x0 [0080.594] GdipDeleteStringFormat (format=0x1beb7df0) returned 0x0 [0080.595] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.595] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.595] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0080.595] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22bdf68) returned 0x0 [0080.595] GdipSetStringFormatFlags (format=0x1beb7ae0, flags=0) returned 0x0 [0080.595] GdipSetStringFormatTrimming (format=0x1beb7ae0, trimming=0x1) returned 0x0 [0080.595] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ae0, hotkeyPrefix=1) returned 0x0 [0080.595] GdipSetStringFormatAlign (format=0x1beb7ae0, align=0x1) returned 0x0 [0080.595] GdipSetStringFormatLineAlign (format=0x1beb7ae0, align=0x1) returned 0x0 [0080.595] GdipMeasureString (graphics=0x1beb8070, string="4", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7ae0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0080.595] GdipDeleteStringFormat (format=0x1beb7ae0) returned 0x0 [0080.595] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0080.596] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.596] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.596] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.596] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0080.596] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.596] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0080.596] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.596] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0080.596] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0080.596] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cf10) returned 0x0 [0080.596] LocalFree (hMem=0x1d92cf10) returned 0x0 [0080.596] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cb90 [0080.596] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cb90) returned 0x0 [0080.596] LocalFree (hMem=0x1d92cb90) returned 0x0 [0080.596] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.597] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0080.597] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0080.597] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0080.597] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.597] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0080.597] GetCurrentObject (hdc=0x6701065f, type=0x1) returned 0x1b00017 [0080.597] GetCurrentObject (hdc=0x6701065f, type=0x2) returned 0x1900010 [0080.597] GetCurrentObject (hdc=0x6701065f, type=0x7) returned 0x160506a9 [0080.597] GetCurrentObject (hdc=0x6701065f, type=0x6) returned 0x18a0048 [0080.597] SaveDC (hdc=0x6701065f) returned 1 [0080.597] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc104095c [0080.597] GetClipRgn (hdc=0x6701065f, hrgn=0xffffffffc104095c) returned 0 [0080.597] SelectClipRgn (hdc=0x6701065f, hrgn=0xffffffff820406c7) returned 2 [0080.597] DeleteObject (ho=0xffffffffc104095c) returned 1 [0080.597] DeleteObject (ho=0xffffffff820406c7) returned 1 [0080.597] OffsetViewportOrgEx (in: hdc=0x6701065f, x=0, y=0, lppt=0x22be328 | out: lppt=0x22be328) returned 1 [0080.597] GetNearestColor (hdc=0x6701065f, color=0xf0f0f0) returned 0xf0f0f0 [0080.597] CreateSolidBrush (color=0xf0f0f0) returned 0x59100559 [0080.597] FillRect (hDC=0x6701065f, lprc=0x14e1c8, hbr=0x59100559) returned 1 [0080.598] DeleteObject (ho=0x59100559) returned 1 [0080.598] RestoreDC (hdc=0x6701065f, nSavedDC=-1) returned 1 [0080.598] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6701065f) returned 0x0 [0080.598] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.598] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0080.598] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.681] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22be428) returned 0x0 [0080.681] GdipSetStringFormatAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0080.682] GdipSetStringFormatLineAlign (format=0x1beb7d10, align=0x1) returned 0x0 [0080.682] GdipSetStringFormatHotkeyPrefix (format=0x1beb7d10, hotkeyPrefix=1) returned 0x0 [0080.682] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0080.682] GdipDrawString (graphics=0x1beb67f0, string="4", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7d10, brush=0x1beb15e0) returned 0x0 [0080.682] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0080.682] GdipDeleteStringFormat (format=0x1beb7d10) returned 0x0 [0080.682] GetFocus () returned 0x0 [0080.683] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÕ+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.683] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.683] GdipCreateRegion (region=0x14e030) returned 0x0 [0080.683] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.683] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0080.684] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.684] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0080.684] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d810 [0080.684] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d810) returned 0x0 [0080.684] LocalFree (hMem=0x1d92d810) returned 0x0 [0080.684] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0080.684] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d650) returned 0x0 [0080.684] LocalFree (hMem=0x1d92d650) returned 0x0 [0080.684] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.684] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0080.684] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0080.684] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0080.684] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.684] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0080.684] GetCurrentObject (hdc=0x6701065f, type=0x1) returned 0x1b00017 [0080.684] GetCurrentObject (hdc=0x6701065f, type=0x2) returned 0x1900010 [0080.684] GetCurrentObject (hdc=0x6701065f, type=0x7) returned 0x160506a9 [0080.684] GetCurrentObject (hdc=0x6701065f, type=0x6) returned 0x18a0048 [0080.685] SaveDC (hdc=0x6701065f) returned 1 [0080.685] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff830406c7 [0080.685] GetClipRgn (hdc=0x6701065f, hrgn=0xffffffff830406c7) returned 0 [0080.685] SelectClipRgn (hdc=0x6701065f, hrgn=0xffffffffc204095c) returned 2 [0080.685] DeleteObject (ho=0xffffffff830406c7) returned 1 [0080.685] DeleteObject (ho=0xffffffffc204095c) returned 1 [0080.685] OffsetViewportOrgEx (in: hdc=0x6701065f, x=0, y=0, lppt=0x22be810 | out: lppt=0x22be810) returned 1 [0080.685] GetROP2 (hdc=0x6701065f) returned 13 [0080.685] GetBkMode (hdc=0x6701065f) returned 2 [0080.685] SetBkMode (hdc=0x6701065f, mode=1) returned 2 [0080.685] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x153009e5 [0080.685] SelectObject (hdc=0x6701065f, h=0x153009e5) returned 0x1b00017 [0080.685] MoveToEx (in: hdc=0x6701065f, x=25, y=0, lppt=0x22be878 | out: lppt=0x22be878) returned 1 [0080.685] LineTo (hdc=0x6701065f, x=0, y=0) returned 1 [0080.685] SetBkMode (hdc=0x6701065f, mode=2) returned 1 [0080.685] MoveToEx (in: hdc=0x6701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.685] GetROP2 (hdc=0x6701065f) returned 13 [0080.685] GetBkMode (hdc=0x6701065f) returned 2 [0080.685] SetBkMode (hdc=0x6701065f, mode=1) returned 2 [0080.686] SelectObject (hdc=0x6701065f, h=0x153009e5) returned 0x153009e5 [0080.686] MoveToEx (in: hdc=0x6701065f, x=0, y=0, lppt=0x22be890 | out: lppt=0x22be890) returned 1 [0080.686] LineTo (hdc=0x6701065f, x=0, y=22) returned 1 [0080.686] SetBkMode (hdc=0x6701065f, mode=2) returned 1 [0080.686] MoveToEx (in: hdc=0x6701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.686] SelectObject (hdc=0x6701065f, h=0x1b00017) returned 0x153009e5 [0080.686] DeleteObject (ho=0x153009e5) returned 1 [0080.686] GetROP2 (hdc=0x6701065f) returned 13 [0080.686] GetBkMode (hdc=0x6701065f) returned 2 [0080.686] SetBkMode (hdc=0x6701065f, mode=1) returned 2 [0080.686] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x103009e3 [0080.686] SelectObject (hdc=0x6701065f, h=0x103009e3) returned 0x1b00017 [0080.686] MoveToEx (in: hdc=0x6701065f, x=0, y=22, lppt=0x22be8f8 | out: lppt=0x22be8f8) returned 1 [0080.686] LineTo (hdc=0x6701065f, x=25, y=22) returned 1 [0080.686] SetBkMode (hdc=0x6701065f, mode=2) returned 1 [0080.686] MoveToEx (in: hdc=0x6701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.686] GetROP2 (hdc=0x6701065f) returned 13 [0080.686] GetBkMode (hdc=0x6701065f) returned 2 [0080.686] SetBkMode (hdc=0x6701065f, mode=1) returned 2 [0080.686] SelectObject (hdc=0x6701065f, h=0x103009e3) returned 0x103009e3 [0080.686] MoveToEx (in: hdc=0x6701065f, x=25, y=22, lppt=0x22be910 | out: lppt=0x22be910) returned 1 [0080.686] LineTo (hdc=0x6701065f, x=25, y=-1) returned 1 [0080.687] SetBkMode (hdc=0x6701065f, mode=2) returned 1 [0080.687] MoveToEx (in: hdc=0x6701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.687] SelectObject (hdc=0x6701065f, h=0x1b00017) returned 0x103009e3 [0080.687] DeleteObject (ho=0x103009e3) returned 1 [0080.687] GetROP2 (hdc=0x6701065f) returned 13 [0080.687] GetBkMode (hdc=0x6701065f) returned 2 [0080.687] SetBkMode (hdc=0x6701065f, mode=1) returned 2 [0080.687] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x163009e5 [0080.687] SelectObject (hdc=0x6701065f, h=0x163009e5) returned 0x1b00017 [0080.687] MoveToEx (in: hdc=0x6701065f, x=24, y=1, lppt=0x22be978 | out: lppt=0x22be978) returned 1 [0080.687] LineTo (hdc=0x6701065f, x=1, y=1) returned 1 [0080.687] SetBkMode (hdc=0x6701065f, mode=2) returned 1 [0080.687] MoveToEx (in: hdc=0x6701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.687] GetROP2 (hdc=0x6701065f) returned 13 [0080.687] GetBkMode (hdc=0x6701065f) returned 2 [0080.687] SetBkMode (hdc=0x6701065f, mode=1) returned 2 [0080.687] SelectObject (hdc=0x6701065f, h=0x163009e5) returned 0x163009e5 [0080.687] MoveToEx (in: hdc=0x6701065f, x=1, y=1, lppt=0x22be990 | out: lppt=0x22be990) returned 1 [0080.687] LineTo (hdc=0x6701065f, x=1, y=21) returned 1 [0080.687] SetBkMode (hdc=0x6701065f, mode=2) returned 1 [0080.687] MoveToEx (in: hdc=0x6701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.687] SelectObject (hdc=0x6701065f, h=0x1b00017) returned 0x163009e5 [0080.687] DeleteObject (ho=0x163009e5) returned 1 [0080.688] GetROP2 (hdc=0x6701065f) returned 13 [0080.688] GetBkMode (hdc=0x6701065f) returned 2 [0080.688] SetBkMode (hdc=0x6701065f, mode=1) returned 2 [0080.688] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x113009e3 [0080.688] SelectObject (hdc=0x6701065f, h=0x113009e3) returned 0x1b00017 [0080.688] MoveToEx (in: hdc=0x6701065f, x=1, y=21, lppt=0x22be9f8 | out: lppt=0x22be9f8) returned 1 [0080.688] LineTo (hdc=0x6701065f, x=24, y=21) returned 1 [0080.688] SetBkMode (hdc=0x6701065f, mode=2) returned 1 [0080.688] MoveToEx (in: hdc=0x6701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.688] GetROP2 (hdc=0x6701065f) returned 13 [0080.688] GetBkMode (hdc=0x6701065f) returned 2 [0080.688] SetBkMode (hdc=0x6701065f, mode=1) returned 2 [0080.688] SelectObject (hdc=0x6701065f, h=0x113009e3) returned 0x113009e3 [0080.688] MoveToEx (in: hdc=0x6701065f, x=24, y=21, lppt=0x22bea10 | out: lppt=0x22bea10) returned 1 [0080.688] LineTo (hdc=0x6701065f, x=24, y=0) returned 1 [0080.688] SetBkMode (hdc=0x6701065f, mode=2) returned 1 [0080.688] MoveToEx (in: hdc=0x6701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.688] SelectObject (hdc=0x6701065f, h=0x1b00017) returned 0x113009e3 [0080.688] DeleteObject (ho=0x113009e3) returned 1 [0080.688] RestoreDC (hdc=0x6701065f, nSavedDC=-1) returned 1 [0080.688] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6701065f) returned 0x0 [0080.689] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0080.689] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x6701065f, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.689] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6701065f) returned 0x0 [0080.689] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0080.690] SelectObject (hdc=0x6701065f, h=0x185000f) returned 0x160506a9 [0080.690] DeleteDC (hdc=0x6701065f) returned 1 [0080.690] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0080.690] EndPaint (hWnd=0x30320, lpPaint=0x14e548) returned 1 [0080.691] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.691] IsWindowUnicode (hWnd=0x30328) returned 1 [0080.691] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.691] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.691] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0080.691] BeginPaint (in: hWnd=0x30328, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0080.691] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0080.691] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x670109dc [0080.691] SelectObject (hdc=0x670109dc, h=0x160506a9) returned 0x185000f [0080.692] GdipCreateFromHDC (hdc=0x670109dc, graphics=0x14e528) returned 0x0 [0080.692] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0080.692] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0080.692] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0080.692] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.692] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0080.692] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d950 [0080.692] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d950) returned 0x0 [0080.692] LocalFree (hMem=0x1d92d950) returned 0x0 [0080.692] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.693] GdipCreateRegion (region=0x14e550) returned 0x0 [0080.693] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.693] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0080.693] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0080.693] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd180dbd) returned 0x0 [0080.693] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.693] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0080.693] GetCurrentObject (hdc=0x670109dc, type=0x1) returned 0x1b00017 [0080.693] GetCurrentObject (hdc=0x670109dc, type=0x2) returned 0x1900010 [0080.693] GetCurrentObject (hdc=0x670109dc, type=0x7) returned 0x160506a9 [0080.693] GetCurrentObject (hdc=0x670109dc, type=0x6) returned 0x18a0048 [0080.693] SaveDC (hdc=0x670109dc) returned 1 [0080.693] GetNearestColor (hdc=0x670109dc, color=0xf0f0f0) returned 0xf0f0f0 [0080.693] GetNearestColor (hdc=0x670109dc, color=0xa0a0a0) returned 0xa0a0a0 [0080.693] GetNearestColor (hdc=0x670109dc, color=0x696969) returned 0x696969 [0080.693] GetNearestColor (hdc=0x670109dc, color=0xa0a0a0) returned 0xa0a0a0 [0080.693] GetNearestColor (hdc=0x670109dc, color=0x0) returned 0x0 [0080.693] GetNearestColor (hdc=0x670109dc, color=0xffffff) returned 0xffffff [0080.694] GetNearestColor (hdc=0x670109dc, color=0xe5e5e5) returned 0xe5e5e5 [0080.694] GetNearestColor (hdc=0x670109dc, color=0xd8d8d8) returned 0xd8d8d8 [0080.694] GetNearestColor (hdc=0x670109dc, color=0x0) returned 0x0 [0080.694] RestoreDC (hdc=0x670109dc, nSavedDC=-1) returned 1 [0080.694] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x670109dc) returned 0x0 [0080.694] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExí+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.694] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.694] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22bf330) returned 0x0 [0080.694] GdipSetStringFormatAlign (format=0x1beb7d80, align=0x1) returned 0x0 [0080.694] GdipSetStringFormatLineAlign (format=0x1beb7d80, align=0x1) returned 0x0 [0080.694] GdipSetStringFormatHotkeyPrefix (format=0x1beb7d80, hotkeyPrefix=1) returned 0x0 [0080.694] GdipGetStringFormatFlags (format=0x1beb7d80, flags=0x14e378) returned 0x0 [0080.695] GdipGetStringFormatTrimming (format=0x1beb7d80, trimming=0x14e378) returned 0x0 [0080.695] GdipGetStringFormatHotkeyPrefix (format=0x1beb7d80, hotkeyPrefix=0x14e378) returned 0x0 [0080.695] GdipGetFontSize (font=0x1beb7d80, size=0x14e378) returned 0x0 [0080.695] GdipGetFontStyle (font=0x1beb7d80, style=0x14e378) returned 0x0 [0080.695] GdipDeleteStringFormat (format=0x1beb7d80) returned 0x0 [0080.695] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.695] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.695] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0080.695] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22bf460) returned 0x0 [0080.695] GdipSetStringFormatFlags (format=0x1beb7920, flags=0) returned 0x0 [0080.695] GdipSetStringFormatTrimming (format=0x1beb7920, trimming=0x1) returned 0x0 [0080.695] GdipSetStringFormatHotkeyPrefix (format=0x1beb7920, hotkeyPrefix=1) returned 0x0 [0080.696] GdipSetStringFormatAlign (format=0x1beb7920, align=0x1) returned 0x0 [0080.696] GdipSetStringFormatLineAlign (format=0x1beb7920, align=0x1) returned 0x0 [0080.696] GdipMeasureString (graphics=0x1beb8070, string="6", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7920, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0080.696] GdipDeleteStringFormat (format=0x1beb7920) returned 0x0 [0080.696] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0080.696] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.696] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.696] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0080.696] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.696] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0080.696] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.696] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0080.696] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d890 [0080.696] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d890) returned 0x0 [0080.697] LocalFree (hMem=0x1d92d890) returned 0x0 [0080.697] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0080.697] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0080.697] LocalFree (hMem=0x1d92cf10) returned 0x0 [0080.697] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.697] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0080.697] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0080.697] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0080.697] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.697] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0080.697] GetCurrentObject (hdc=0x670109dc, type=0x1) returned 0x1b00017 [0080.697] GetCurrentObject (hdc=0x670109dc, type=0x2) returned 0x1900010 [0080.697] GetCurrentObject (hdc=0x670109dc, type=0x7) returned 0x160506a9 [0080.697] GetCurrentObject (hdc=0x670109dc, type=0x6) returned 0x18a0048 [0080.697] SaveDC (hdc=0x670109dc) returned 1 [0080.697] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc304095c [0080.697] GetClipRgn (hdc=0x670109dc, hrgn=0xffffffffc304095c) returned 0 [0080.697] SelectClipRgn (hdc=0x670109dc, hrgn=0xffffffff840406c7) returned 2 [0080.697] DeleteObject (ho=0xffffffffc304095c) returned 1 [0080.697] DeleteObject (ho=0xffffffff840406c7) returned 1 [0080.697] OffsetViewportOrgEx (in: hdc=0x670109dc, x=0, y=0, lppt=0x22bf820 | out: lppt=0x22bf820) returned 1 [0080.698] GetNearestColor (hdc=0x670109dc, color=0xf0f0f0) returned 0xf0f0f0 [0080.698] CreateSolidBrush (color=0xf0f0f0) returned 0x5a100559 [0080.698] FillRect (hDC=0x670109dc, lprc=0x14e1c8, hbr=0x5a100559) returned 1 [0080.698] DeleteObject (ho=0x5a100559) returned 1 [0080.698] RestoreDC (hdc=0x670109dc, nSavedDC=-1) returned 1 [0080.698] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x670109dc) returned 0x0 [0080.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0080.698] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.698] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22bf920) returned 0x0 [0080.698] GdipSetStringFormatAlign (format=0x1beb7df0, align=0x1) returned 0x0 [0080.698] GdipSetStringFormatLineAlign (format=0x1beb7df0, align=0x1) returned 0x0 [0080.698] GdipSetStringFormatHotkeyPrefix (format=0x1beb7df0, hotkeyPrefix=1) returned 0x0 [0080.698] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0080.699] GdipDrawString (graphics=0x1beb67f0, string="6", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7df0, brush=0x1beb15e0) returned 0x0 [0080.699] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0080.699] GdipDeleteStringFormat (format=0x1beb7df0) returned 0x0 [0080.699] GetFocus () returned 0x0 [0080.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExê+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.699] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.699] GdipCreateRegion (region=0x14e030) returned 0x0 [0080.699] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.699] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0080.699] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.700] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0080.700] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d090 [0080.700] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d090) returned 0x0 [0080.700] LocalFree (hMem=0x1d92d090) returned 0x0 [0080.700] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d750 [0080.700] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d750) returned 0x0 [0080.700] LocalFree (hMem=0x1d92d750) returned 0x0 [0080.700] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.700] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0080.700] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0080.700] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0080.700] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.700] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0080.700] GetCurrentObject (hdc=0x670109dc, type=0x1) returned 0x1b00017 [0080.700] GetCurrentObject (hdc=0x670109dc, type=0x2) returned 0x1900010 [0080.700] GetCurrentObject (hdc=0x670109dc, type=0x7) returned 0x160506a9 [0080.700] GetCurrentObject (hdc=0x670109dc, type=0x6) returned 0x18a0048 [0080.700] SaveDC (hdc=0x670109dc) returned 1 [0080.700] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff850406c7 [0080.700] GetClipRgn (hdc=0x670109dc, hrgn=0xffffffff850406c7) returned 0 [0080.700] SelectClipRgn (hdc=0x670109dc, hrgn=0xffffffffc404095c) returned 2 [0080.700] DeleteObject (ho=0xffffffff850406c7) returned 1 [0080.701] DeleteObject (ho=0xffffffffc404095c) returned 1 [0080.701] OffsetViewportOrgEx (in: hdc=0x670109dc, x=0, y=0, lppt=0x22bfd08 | out: lppt=0x22bfd08) returned 1 [0080.701] GetROP2 (hdc=0x670109dc) returned 13 [0080.701] GetBkMode (hdc=0x670109dc) returned 2 [0080.701] SetBkMode (hdc=0x670109dc, mode=1) returned 2 [0080.701] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x123009e3 [0080.701] SelectObject (hdc=0x670109dc, h=0x123009e3) returned 0x1b00017 [0080.701] MoveToEx (in: hdc=0x670109dc, x=25, y=0, lppt=0x22bfd70 | out: lppt=0x22bfd70) returned 1 [0080.701] LineTo (hdc=0x670109dc, x=0, y=0) returned 1 [0080.701] SetBkMode (hdc=0x670109dc, mode=2) returned 1 [0080.701] MoveToEx (in: hdc=0x670109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.701] GetROP2 (hdc=0x670109dc) returned 13 [0080.701] GetBkMode (hdc=0x670109dc) returned 2 [0080.701] SetBkMode (hdc=0x670109dc, mode=1) returned 2 [0080.701] SelectObject (hdc=0x670109dc, h=0x123009e3) returned 0x123009e3 [0080.701] MoveToEx (in: hdc=0x670109dc, x=0, y=0, lppt=0x22bfd88 | out: lppt=0x22bfd88) returned 1 [0080.701] LineTo (hdc=0x670109dc, x=0, y=22) returned 1 [0080.701] SetBkMode (hdc=0x670109dc, mode=2) returned 1 [0080.701] MoveToEx (in: hdc=0x670109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.701] SelectObject (hdc=0x670109dc, h=0x1b00017) returned 0x123009e3 [0080.701] DeleteObject (ho=0x123009e3) returned 1 [0080.702] GetROP2 (hdc=0x670109dc) returned 13 [0080.702] GetBkMode (hdc=0x670109dc) returned 2 [0080.702] SetBkMode (hdc=0x670109dc, mode=1) returned 2 [0080.702] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x173009e5 [0080.702] SelectObject (hdc=0x670109dc, h=0x173009e5) returned 0x1b00017 [0080.702] MoveToEx (in: hdc=0x670109dc, x=0, y=22, lppt=0x22bfdf0 | out: lppt=0x22bfdf0) returned 1 [0080.702] LineTo (hdc=0x670109dc, x=25, y=22) returned 1 [0080.702] SetBkMode (hdc=0x670109dc, mode=2) returned 1 [0080.702] MoveToEx (in: hdc=0x670109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.702] GetROP2 (hdc=0x670109dc) returned 13 [0080.702] GetBkMode (hdc=0x670109dc) returned 2 [0080.702] SetBkMode (hdc=0x670109dc, mode=1) returned 2 [0080.702] SelectObject (hdc=0x670109dc, h=0x173009e5) returned 0x173009e5 [0080.702] MoveToEx (in: hdc=0x670109dc, x=25, y=22, lppt=0x22bfe08 | out: lppt=0x22bfe08) returned 1 [0080.702] LineTo (hdc=0x670109dc, x=25, y=-1) returned 1 [0080.702] SetBkMode (hdc=0x670109dc, mode=2) returned 1 [0080.702] MoveToEx (in: hdc=0x670109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.702] SelectObject (hdc=0x670109dc, h=0x1b00017) returned 0x173009e5 [0080.702] DeleteObject (ho=0x173009e5) returned 1 [0080.702] GetROP2 (hdc=0x670109dc) returned 13 [0080.702] GetBkMode (hdc=0x670109dc) returned 2 [0080.702] SetBkMode (hdc=0x670109dc, mode=1) returned 2 [0080.703] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x133009e3 [0080.703] SelectObject (hdc=0x670109dc, h=0x133009e3) returned 0x1b00017 [0080.703] MoveToEx (in: hdc=0x670109dc, x=24, y=1, lppt=0x22bfe70 | out: lppt=0x22bfe70) returned 1 [0080.703] LineTo (hdc=0x670109dc, x=1, y=1) returned 1 [0080.703] SetBkMode (hdc=0x670109dc, mode=2) returned 1 [0080.703] MoveToEx (in: hdc=0x670109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.703] GetROP2 (hdc=0x670109dc) returned 13 [0080.703] GetBkMode (hdc=0x670109dc) returned 2 [0080.703] SetBkMode (hdc=0x670109dc, mode=1) returned 2 [0080.703] SelectObject (hdc=0x670109dc, h=0x133009e3) returned 0x133009e3 [0080.703] MoveToEx (in: hdc=0x670109dc, x=1, y=1, lppt=0x22bfe88 | out: lppt=0x22bfe88) returned 1 [0080.703] LineTo (hdc=0x670109dc, x=1, y=21) returned 1 [0080.703] SetBkMode (hdc=0x670109dc, mode=2) returned 1 [0080.703] MoveToEx (in: hdc=0x670109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.703] SelectObject (hdc=0x670109dc, h=0x1b00017) returned 0x133009e3 [0080.703] DeleteObject (ho=0x133009e3) returned 1 [0080.703] GetROP2 (hdc=0x670109dc) returned 13 [0080.703] GetBkMode (hdc=0x670109dc) returned 2 [0080.704] SetBkMode (hdc=0x670109dc, mode=1) returned 2 [0080.704] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x183009e5 [0080.704] SelectObject (hdc=0x670109dc, h=0x183009e5) returned 0x1b00017 [0080.704] MoveToEx (in: hdc=0x670109dc, x=1, y=21, lppt=0x22bfef0 | out: lppt=0x22bfef0) returned 1 [0080.704] LineTo (hdc=0x670109dc, x=24, y=21) returned 1 [0080.704] SetBkMode (hdc=0x670109dc, mode=2) returned 1 [0080.704] MoveToEx (in: hdc=0x670109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.704] GetROP2 (hdc=0x670109dc) returned 13 [0080.704] GetBkMode (hdc=0x670109dc) returned 2 [0080.704] SetBkMode (hdc=0x670109dc, mode=1) returned 2 [0080.704] SelectObject (hdc=0x670109dc, h=0x183009e5) returned 0x183009e5 [0080.704] MoveToEx (in: hdc=0x670109dc, x=24, y=21, lppt=0x22bff08 | out: lppt=0x22bff08) returned 1 [0080.704] LineTo (hdc=0x670109dc, x=24, y=0) returned 1 [0080.704] SetBkMode (hdc=0x670109dc, mode=2) returned 1 [0080.704] MoveToEx (in: hdc=0x670109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.704] SelectObject (hdc=0x670109dc, h=0x1b00017) returned 0x183009e5 [0080.704] DeleteObject (ho=0x183009e5) returned 1 [0080.704] RestoreDC (hdc=0x670109dc, nSavedDC=-1) returned 1 [0080.704] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x670109dc) returned 0x0 [0080.704] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0080.704] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x670109dc, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.705] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x670109dc) returned 0x0 [0080.705] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0080.705] SelectObject (hdc=0x670109dc, h=0x185000f) returned 0x160506a9 [0080.705] DeleteDC (hdc=0x670109dc) returned 1 [0080.705] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0080.705] EndPaint (hWnd=0x30328, lpPaint=0x14e548) returned 1 [0080.705] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.705] IsWindowUnicode (hWnd=0x3031c) returned 1 [0080.705] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.705] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.705] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0080.705] BeginPaint (in: hWnd=0x3031c, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0080.705] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0080.706] CreateCompatibleDC (hdc=0x220106d6) returned 0x200109e4 [0080.706] SelectObject (hdc=0x200109e4, h=0x160506a9) returned 0x185000f [0080.706] GdipCreateFromHDC (hdc=0x200109e4, graphics=0x14e528) returned 0x0 [0080.706] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0080.706] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0080.706] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0080.706] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.706] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0080.706] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0080.706] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0080.706] LocalFree (hMem=0x1d92cf10) returned 0x0 [0080.706] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.706] GdipCreateRegion (region=0x14e550) returned 0x0 [0080.706] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.706] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0080.706] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0080.707] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd150dbd) returned 0x0 [0080.707] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.707] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0080.707] GetCurrentObject (hdc=0x200109e4, type=0x1) returned 0x1b00017 [0080.707] GetCurrentObject (hdc=0x200109e4, type=0x2) returned 0x1900010 [0080.707] GetCurrentObject (hdc=0x200109e4, type=0x7) returned 0x160506a9 [0080.707] GetCurrentObject (hdc=0x200109e4, type=0x6) returned 0x18a0048 [0080.707] SaveDC (hdc=0x200109e4) returned 1 [0080.707] GetNearestColor (hdc=0x200109e4, color=0xf0f0f0) returned 0xf0f0f0 [0080.707] GetNearestColor (hdc=0x200109e4, color=0xa0a0a0) returned 0xa0a0a0 [0080.707] GetNearestColor (hdc=0x200109e4, color=0x696969) returned 0x696969 [0080.707] GetNearestColor (hdc=0x200109e4, color=0xa0a0a0) returned 0xa0a0a0 [0080.707] GetNearestColor (hdc=0x200109e4, color=0x0) returned 0x0 [0080.707] GetNearestColor (hdc=0x200109e4, color=0xffffff) returned 0xffffff [0080.707] GetNearestColor (hdc=0x200109e4, color=0xe5e5e5) returned 0xe5e5e5 [0080.707] GetNearestColor (hdc=0x200109e4, color=0xd8d8d8) returned 0xd8d8d8 [0080.716] GetNearestColor (hdc=0x200109e4, color=0x0) returned 0x0 [0080.717] RestoreDC (hdc=0x200109e4, nSavedDC=-1) returned 1 [0080.717] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x200109e4) returned 0x0 [0080.717] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x02,\x02", lpUsedDefaultChar=0x0) returned 17 [0080.717] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.717] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22c0828) returned 0x0 [0080.717] GdipSetStringFormatAlign (format=0x1beb7a00, align=0x1) returned 0x0 [0080.717] GdipSetStringFormatLineAlign (format=0x1beb7a00, align=0x1) returned 0x0 [0080.717] GdipSetStringFormatHotkeyPrefix (format=0x1beb7a00, hotkeyPrefix=1) returned 0x0 [0080.718] GdipGetStringFormatFlags (format=0x1beb7a00, flags=0x14e378) returned 0x0 [0080.718] GdipGetStringFormatTrimming (format=0x1beb7a00, trimming=0x14e378) returned 0x0 [0080.718] GdipGetStringFormatHotkeyPrefix (format=0x1beb7a00, hotkeyPrefix=0x14e378) returned 0x0 [0080.718] GdipGetFontSize (font=0x1beb7a00, size=0x14e378) returned 0x0 [0080.718] GdipGetFontStyle (font=0x1beb7a00, style=0x14e378) returned 0x0 [0080.718] GdipDeleteStringFormat (format=0x1beb7a00) returned 0x0 [0080.718] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.718] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.718] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0080.718] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22c0958) returned 0x0 [0080.718] GdipSetStringFormatFlags (format=0x1beb7990, flags=0) returned 0x0 [0080.719] GdipSetStringFormatTrimming (format=0x1beb7990, trimming=0x1) returned 0x0 [0080.719] GdipSetStringFormatHotkeyPrefix (format=0x1beb7990, hotkeyPrefix=1) returned 0x0 [0080.719] GdipSetStringFormatAlign (format=0x1beb7990, align=0x1) returned 0x0 [0080.719] GdipSetStringFormatLineAlign (format=0x1beb7990, align=0x1) returned 0x0 [0080.719] GdipMeasureString (graphics=0x1beb8070, string="9", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7990, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0080.719] GdipDeleteStringFormat (format=0x1beb7990) returned 0x0 [0080.719] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0080.719] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.719] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.719] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0080.719] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.719] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0080.719] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.719] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0080.720] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0080.720] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d650) returned 0x0 [0080.720] LocalFree (hMem=0x1d92d650) returned 0x0 [0080.720] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d350 [0080.720] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d350) returned 0x0 [0080.720] LocalFree (hMem=0x1d92d350) returned 0x0 [0080.720] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.720] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0080.720] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0080.720] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0080.720] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.720] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0080.720] GetCurrentObject (hdc=0x200109e4, type=0x1) returned 0x1b00017 [0080.720] GetCurrentObject (hdc=0x200109e4, type=0x2) returned 0x1900010 [0080.720] GetCurrentObject (hdc=0x200109e4, type=0x7) returned 0x160506a9 [0080.720] GetCurrentObject (hdc=0x200109e4, type=0x6) returned 0x18a0048 [0080.720] SaveDC (hdc=0x200109e4) returned 1 [0080.720] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc504095c [0080.720] GetClipRgn (hdc=0x200109e4, hrgn=0xffffffffc504095c) returned 0 [0080.720] SelectClipRgn (hdc=0x200109e4, hrgn=0xffffffff860406c7) returned 2 [0080.720] DeleteObject (ho=0xffffffffc504095c) returned 1 [0080.721] DeleteObject (ho=0xffffffff860406c7) returned 1 [0080.721] OffsetViewportOrgEx (in: hdc=0x200109e4, x=0, y=0, lppt=0x22c0d18 | out: lppt=0x22c0d18) returned 1 [0080.721] GetNearestColor (hdc=0x200109e4, color=0xf0f0f0) returned 0xf0f0f0 [0080.721] CreateSolidBrush (color=0xf0f0f0) returned 0x5b100559 [0080.721] FillRect (hDC=0x200109e4, lprc=0x14e1c8, hbr=0x5b100559) returned 1 [0080.721] DeleteObject (ho=0x5b100559) returned 1 [0080.721] RestoreDC (hdc=0x200109e4, nSavedDC=-1) returned 1 [0080.721] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x200109e4) returned 0x0 [0080.721] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.721] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0080.721] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.721] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22c0e18) returned 0x0 [0080.721] GdipSetStringFormatAlign (format=0x1beb7a00, align=0x1) returned 0x0 [0080.722] GdipSetStringFormatLineAlign (format=0x1beb7a00, align=0x1) returned 0x0 [0080.722] GdipSetStringFormatHotkeyPrefix (format=0x1beb7a00, hotkeyPrefix=1) returned 0x0 [0080.722] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0080.722] GdipDrawString (graphics=0x1beb67f0, string="9", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7a00, brush=0x1beb15e0) returned 0x0 [0080.722] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0080.722] GdipDeleteStringFormat (format=0x1beb7a00) returned 0x0 [0080.722] GetFocus () returned 0x0 [0080.722] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.722] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÿ+\x02", lpUsedDefaultChar=0x0) returned 17 [0080.722] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.722] GdipCreateRegion (region=0x14e030) returned 0x0 [0080.722] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.723] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0080.723] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.723] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0080.723] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0080.723] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0080.723] LocalFree (hMem=0x1d92cf10) returned 0x0 [0080.723] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0080.723] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0080.723] LocalFree (hMem=0x1d92cf10) returned 0x0 [0080.723] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.723] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0080.723] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0080.782] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0080.782] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.782] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0080.782] GetCurrentObject (hdc=0x200109e4, type=0x1) returned 0x1b00017 [0080.782] GetCurrentObject (hdc=0x200109e4, type=0x2) returned 0x1900010 [0080.782] GetCurrentObject (hdc=0x200109e4, type=0x7) returned 0x160506a9 [0080.782] GetCurrentObject (hdc=0x200109e4, type=0x6) returned 0x18a0048 [0080.782] SaveDC (hdc=0x200109e4) returned 1 [0080.782] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff870406c7 [0080.782] GetClipRgn (hdc=0x200109e4, hrgn=0xffffffff870406c7) returned 0 [0080.783] SelectClipRgn (hdc=0x200109e4, hrgn=0xffffffffc604095c) returned 2 [0080.783] DeleteObject (ho=0xffffffff870406c7) returned 1 [0080.783] DeleteObject (ho=0xffffffffc604095c) returned 1 [0080.783] OffsetViewportOrgEx (in: hdc=0x200109e4, x=0, y=0, lppt=0x22c1200 | out: lppt=0x22c1200) returned 1 [0080.783] GetROP2 (hdc=0x200109e4) returned 13 [0080.783] GetBkMode (hdc=0x200109e4) returned 2 [0080.783] SetBkMode (hdc=0x200109e4, mode=1) returned 2 [0080.783] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x193009e5 [0080.783] SelectObject (hdc=0x200109e4, h=0x193009e5) returned 0x1b00017 [0080.783] MoveToEx (in: hdc=0x200109e4, x=25, y=0, lppt=0x22c1268 | out: lppt=0x22c1268) returned 1 [0080.783] LineTo (hdc=0x200109e4, x=0, y=0) returned 1 [0080.783] SetBkMode (hdc=0x200109e4, mode=2) returned 1 [0080.783] MoveToEx (in: hdc=0x200109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.783] GetROP2 (hdc=0x200109e4) returned 13 [0080.783] GetBkMode (hdc=0x200109e4) returned 2 [0080.783] SetBkMode (hdc=0x200109e4, mode=1) returned 2 [0080.783] SelectObject (hdc=0x200109e4, h=0x193009e5) returned 0x193009e5 [0080.783] MoveToEx (in: hdc=0x200109e4, x=0, y=0, lppt=0x22c1280 | out: lppt=0x22c1280) returned 1 [0080.783] LineTo (hdc=0x200109e4, x=0, y=22) returned 1 [0080.783] SetBkMode (hdc=0x200109e4, mode=2) returned 1 [0080.783] MoveToEx (in: hdc=0x200109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.783] SelectObject (hdc=0x200109e4, h=0x1b00017) returned 0x193009e5 [0080.783] DeleteObject (ho=0x193009e5) returned 1 [0080.784] GetROP2 (hdc=0x200109e4) returned 13 [0080.784] GetBkMode (hdc=0x200109e4) returned 2 [0080.784] SetBkMode (hdc=0x200109e4, mode=1) returned 2 [0080.784] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x143009e3 [0080.784] SelectObject (hdc=0x200109e4, h=0x143009e3) returned 0x1b00017 [0080.784] MoveToEx (in: hdc=0x200109e4, x=0, y=22, lppt=0x22c12e8 | out: lppt=0x22c12e8) returned 1 [0080.784] LineTo (hdc=0x200109e4, x=25, y=22) returned 1 [0080.784] SetBkMode (hdc=0x200109e4, mode=2) returned 1 [0080.784] MoveToEx (in: hdc=0x200109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.784] GetROP2 (hdc=0x200109e4) returned 13 [0080.784] GetBkMode (hdc=0x200109e4) returned 2 [0080.784] SetBkMode (hdc=0x200109e4, mode=1) returned 2 [0080.784] SelectObject (hdc=0x200109e4, h=0x143009e3) returned 0x143009e3 [0080.784] MoveToEx (in: hdc=0x200109e4, x=25, y=22, lppt=0x22c1300 | out: lppt=0x22c1300) returned 1 [0080.784] LineTo (hdc=0x200109e4, x=25, y=-1) returned 1 [0080.784] SetBkMode (hdc=0x200109e4, mode=2) returned 1 [0080.784] MoveToEx (in: hdc=0x200109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.784] SelectObject (hdc=0x200109e4, h=0x1b00017) returned 0x143009e3 [0080.784] DeleteObject (ho=0x143009e3) returned 1 [0080.784] GetROP2 (hdc=0x200109e4) returned 13 [0080.784] GetBkMode (hdc=0x200109e4) returned 2 [0080.785] SetBkMode (hdc=0x200109e4, mode=1) returned 2 [0080.785] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x1a3009e5 [0080.785] SelectObject (hdc=0x200109e4, h=0x1a3009e5) returned 0x1b00017 [0080.785] MoveToEx (in: hdc=0x200109e4, x=24, y=1, lppt=0x22c1368 | out: lppt=0x22c1368) returned 1 [0080.785] LineTo (hdc=0x200109e4, x=1, y=1) returned 1 [0080.785] SetBkMode (hdc=0x200109e4, mode=2) returned 1 [0080.785] MoveToEx (in: hdc=0x200109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.785] GetROP2 (hdc=0x200109e4) returned 13 [0080.785] GetBkMode (hdc=0x200109e4) returned 2 [0080.785] SetBkMode (hdc=0x200109e4, mode=1) returned 2 [0080.785] SelectObject (hdc=0x200109e4, h=0x1a3009e5) returned 0x1a3009e5 [0080.785] MoveToEx (in: hdc=0x200109e4, x=1, y=1, lppt=0x22c1380 | out: lppt=0x22c1380) returned 1 [0080.785] LineTo (hdc=0x200109e4, x=1, y=21) returned 1 [0080.785] SetBkMode (hdc=0x200109e4, mode=2) returned 1 [0080.785] MoveToEx (in: hdc=0x200109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.785] SelectObject (hdc=0x200109e4, h=0x1b00017) returned 0x1a3009e5 [0080.785] DeleteObject (ho=0x1a3009e5) returned 1 [0080.785] GetROP2 (hdc=0x200109e4) returned 13 [0080.785] GetBkMode (hdc=0x200109e4) returned 2 [0080.785] SetBkMode (hdc=0x200109e4, mode=1) returned 2 [0080.785] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x153009e3 [0080.785] SelectObject (hdc=0x200109e4, h=0x153009e3) returned 0x1b00017 [0080.786] MoveToEx (in: hdc=0x200109e4, x=1, y=21, lppt=0x22c13e8 | out: lppt=0x22c13e8) returned 1 [0080.786] LineTo (hdc=0x200109e4, x=24, y=21) returned 1 [0080.786] SetBkMode (hdc=0x200109e4, mode=2) returned 1 [0080.786] MoveToEx (in: hdc=0x200109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.786] GetROP2 (hdc=0x200109e4) returned 13 [0080.786] GetBkMode (hdc=0x200109e4) returned 2 [0080.786] SetBkMode (hdc=0x200109e4, mode=1) returned 2 [0080.786] SelectObject (hdc=0x200109e4, h=0x153009e3) returned 0x153009e3 [0080.786] MoveToEx (in: hdc=0x200109e4, x=24, y=21, lppt=0x22c1400 | out: lppt=0x22c1400) returned 1 [0080.786] LineTo (hdc=0x200109e4, x=24, y=0) returned 1 [0080.786] SetBkMode (hdc=0x200109e4, mode=2) returned 1 [0080.786] MoveToEx (in: hdc=0x200109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.786] SelectObject (hdc=0x200109e4, h=0x1b00017) returned 0x153009e3 [0080.786] DeleteObject (ho=0x153009e3) returned 1 [0080.786] RestoreDC (hdc=0x200109e4, nSavedDC=-1) returned 1 [0080.786] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x200109e4) returned 0x0 [0080.787] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0080.787] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x200109e4, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.787] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x200109e4) returned 0x0 [0080.787] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0080.787] SelectObject (hdc=0x200109e4, h=0x185000f) returned 0x160506a9 [0080.787] DeleteDC (hdc=0x200109e4) returned 1 [0080.787] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0080.787] EndPaint (hWnd=0x3031c, lpPaint=0x14e548) returned 1 [0080.787] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.788] IsWindowUnicode (hWnd=0x3031e) returned 1 [0080.788] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.788] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.788] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0080.788] BeginPaint (in: hWnd=0x3031e, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0080.788] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0080.788] CreateCompatibleDC (hdc=0xc0100ae) returned 0x6f01065f [0080.788] SelectObject (hdc=0x6f01065f, h=0x160506a9) returned 0x185000f [0080.788] GdipCreateFromHDC (hdc=0x6f01065f, graphics=0x14e528) returned 0x0 [0080.788] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0080.788] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0080.788] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0080.788] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.788] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0080.788] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0080.788] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d650) returned 0x0 [0080.788] LocalFree (hMem=0x1d92d650) returned 0x0 [0080.789] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.789] GdipCreateRegion (region=0x14e550) returned 0x0 [0080.789] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.789] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0080.789] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0080.789] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd120dbd) returned 0x0 [0080.789] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.789] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0080.789] GetCurrentObject (hdc=0x6f01065f, type=0x1) returned 0x1b00017 [0080.789] GetCurrentObject (hdc=0x6f01065f, type=0x2) returned 0x1900010 [0080.789] GetCurrentObject (hdc=0x6f01065f, type=0x7) returned 0x160506a9 [0080.789] GetCurrentObject (hdc=0x6f01065f, type=0x6) returned 0x18a0048 [0080.789] SaveDC (hdc=0x6f01065f) returned 1 [0080.789] GetNearestColor (hdc=0x6f01065f, color=0xf0f0f0) returned 0xf0f0f0 [0080.789] GetNearestColor (hdc=0x6f01065f, color=0xa0a0a0) returned 0xa0a0a0 [0080.789] GetNearestColor (hdc=0x6f01065f, color=0x696969) returned 0x696969 [0080.789] GetNearestColor (hdc=0x6f01065f, color=0xa0a0a0) returned 0xa0a0a0 [0080.789] GetNearestColor (hdc=0x6f01065f, color=0x0) returned 0x0 [0080.789] GetNearestColor (hdc=0x6f01065f, color=0xffffff) returned 0xffffff [0080.790] GetNearestColor (hdc=0x6f01065f, color=0xe5e5e5) returned 0xe5e5e5 [0080.790] GetNearestColor (hdc=0x6f01065f, color=0xd8d8d8) returned 0xd8d8d8 [0080.790] GetNearestColor (hdc=0x6f01065f, color=0x0) returned 0x0 [0080.790] RestoreDC (hdc=0x6f01065f, nSavedDC=-1) returned 1 [0080.790] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6f01065f) returned 0x0 [0080.790] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.790] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x17,\x02", lpUsedDefaultChar=0x0) returned 17 [0080.790] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.790] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22c1d20) returned 0x0 [0080.790] GdipSetStringFormatAlign (format=0x1beb7fb0, align=0x1) returned 0x0 [0080.790] GdipSetStringFormatLineAlign (format=0x1beb7fb0, align=0x1) returned 0x0 [0080.791] GdipSetStringFormatHotkeyPrefix (format=0x1beb7fb0, hotkeyPrefix=1) returned 0x0 [0080.791] GdipGetStringFormatFlags (format=0x1beb7fb0, flags=0x14e378) returned 0x0 [0080.791] GdipGetStringFormatTrimming (format=0x1beb7fb0, trimming=0x14e378) returned 0x0 [0080.791] GdipGetStringFormatHotkeyPrefix (format=0x1beb7fb0, hotkeyPrefix=0x14e378) returned 0x0 [0080.791] GdipGetFontSize (font=0x1beb7fb0, size=0x14e378) returned 0x0 [0080.791] GdipGetFontStyle (font=0x1beb7fb0, style=0x14e378) returned 0x0 [0080.791] GdipDeleteStringFormat (format=0x1beb7fb0) returned 0x0 [0080.791] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.791] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.791] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.791] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0080.791] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22c1e50) returned 0x0 [0080.791] GdipSetStringFormatFlags (format=0x1beb7ed0, flags=0) returned 0x0 [0080.791] GdipSetStringFormatTrimming (format=0x1beb7ed0, trimming=0x1) returned 0x0 [0080.792] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ed0, hotkeyPrefix=1) returned 0x0 [0080.792] GdipSetStringFormatAlign (format=0x1beb7ed0, align=0x1) returned 0x0 [0080.792] GdipSetStringFormatLineAlign (format=0x1beb7ed0, align=0x1) returned 0x0 [0080.792] GdipMeasureString (graphics=0x1beb8070, string="3", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7ed0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0080.792] GdipDeleteStringFormat (format=0x1beb7ed0) returned 0x0 [0080.792] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0080.792] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.792] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.792] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0080.792] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.792] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0080.792] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.792] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0080.792] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cbd0 [0080.792] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cbd0) returned 0x0 [0080.793] LocalFree (hMem=0x1d92cbd0) returned 0x0 [0080.793] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0080.793] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0080.793] LocalFree (hMem=0x1d92cf10) returned 0x0 [0080.793] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.793] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0080.793] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0080.793] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0080.793] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.793] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0080.793] GetCurrentObject (hdc=0x6f01065f, type=0x1) returned 0x1b00017 [0080.793] GetCurrentObject (hdc=0x6f01065f, type=0x2) returned 0x1900010 [0080.793] GetCurrentObject (hdc=0x6f01065f, type=0x7) returned 0x160506a9 [0080.794] GetCurrentObject (hdc=0x6f01065f, type=0x6) returned 0x18a0048 [0080.794] SaveDC (hdc=0x6f01065f) returned 1 [0080.794] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc704095c [0080.794] GetClipRgn (hdc=0x6f01065f, hrgn=0xffffffffc704095c) returned 0 [0080.794] SelectClipRgn (hdc=0x6f01065f, hrgn=0xffffffff880406c7) returned 2 [0080.794] DeleteObject (ho=0xffffffffc704095c) returned 1 [0080.794] DeleteObject (ho=0xffffffff880406c7) returned 1 [0080.794] OffsetViewportOrgEx (in: hdc=0x6f01065f, x=0, y=0, lppt=0x22c2210 | out: lppt=0x22c2210) returned 1 [0080.794] GetNearestColor (hdc=0x6f01065f, color=0xf0f0f0) returned 0xf0f0f0 [0080.794] CreateSolidBrush (color=0xf0f0f0) returned 0x5c100559 [0080.794] FillRect (hDC=0x6f01065f, lprc=0x14e1c8, hbr=0x5c100559) returned 1 [0080.794] DeleteObject (ho=0x5c100559) returned 1 [0080.794] RestoreDC (hdc=0x6f01065f, nSavedDC=-1) returned 1 [0080.794] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6f01065f) returned 0x0 [0080.794] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.795] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0080.795] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.795] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22c2310) returned 0x0 [0080.795] GdipSetStringFormatAlign (format=0x1beb7d80, align=0x1) returned 0x0 [0080.795] GdipSetStringFormatLineAlign (format=0x1beb7d80, align=0x1) returned 0x0 [0080.795] GdipSetStringFormatHotkeyPrefix (format=0x1beb7d80, hotkeyPrefix=1) returned 0x0 [0080.795] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0080.795] GdipDrawString (graphics=0x1beb67f0, string="3", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7d80, brush=0x1beb15e0) returned 0x0 [0080.795] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0080.795] GdipDeleteStringFormat (format=0x1beb7d80) returned 0x0 [0080.795] GetFocus () returned 0x0 [0080.795] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x14,\x02", lpUsedDefaultChar=0x0) returned 17 [0080.796] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.796] GdipCreateRegion (region=0x14e030) returned 0x0 [0080.796] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.796] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0080.796] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.796] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0080.796] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d550 [0080.796] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d550) returned 0x0 [0080.796] LocalFree (hMem=0x1d92d550) returned 0x0 [0080.796] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0080.796] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d2d0) returned 0x0 [0080.796] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0080.796] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.796] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0080.796] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0080.796] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0080.796] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.796] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0080.797] GetCurrentObject (hdc=0x6f01065f, type=0x1) returned 0x1b00017 [0080.797] GetCurrentObject (hdc=0x6f01065f, type=0x2) returned 0x1900010 [0080.797] GetCurrentObject (hdc=0x6f01065f, type=0x7) returned 0x160506a9 [0080.797] GetCurrentObject (hdc=0x6f01065f, type=0x6) returned 0x18a0048 [0080.797] SaveDC (hdc=0x6f01065f) returned 1 [0080.797] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff890406c7 [0080.797] GetClipRgn (hdc=0x6f01065f, hrgn=0xffffffff890406c7) returned 0 [0080.797] SelectClipRgn (hdc=0x6f01065f, hrgn=0xffffffffc804095c) returned 2 [0080.797] DeleteObject (ho=0xffffffff890406c7) returned 1 [0080.797] DeleteObject (ho=0xffffffffc804095c) returned 1 [0080.797] OffsetViewportOrgEx (in: hdc=0x6f01065f, x=0, y=0, lppt=0x22c26f8 | out: lppt=0x22c26f8) returned 1 [0080.797] GetROP2 (hdc=0x6f01065f) returned 13 [0080.797] GetBkMode (hdc=0x6f01065f) returned 2 [0080.797] SetBkMode (hdc=0x6f01065f, mode=1) returned 2 [0080.797] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x163009e3 [0080.797] SelectObject (hdc=0x6f01065f, h=0x163009e3) returned 0x1b00017 [0080.797] MoveToEx (in: hdc=0x6f01065f, x=25, y=0, lppt=0x22c2760 | out: lppt=0x22c2760) returned 1 [0080.797] LineTo (hdc=0x6f01065f, x=0, y=0) returned 1 [0080.797] SetBkMode (hdc=0x6f01065f, mode=2) returned 1 [0080.797] MoveToEx (in: hdc=0x6f01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.797] GetROP2 (hdc=0x6f01065f) returned 13 [0080.798] GetBkMode (hdc=0x6f01065f) returned 2 [0080.798] SetBkMode (hdc=0x6f01065f, mode=1) returned 2 [0080.798] SelectObject (hdc=0x6f01065f, h=0x163009e3) returned 0x163009e3 [0080.798] MoveToEx (in: hdc=0x6f01065f, x=0, y=0, lppt=0x22c2778 | out: lppt=0x22c2778) returned 1 [0080.798] LineTo (hdc=0x6f01065f, x=0, y=22) returned 1 [0080.798] SetBkMode (hdc=0x6f01065f, mode=2) returned 1 [0080.798] MoveToEx (in: hdc=0x6f01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.798] SelectObject (hdc=0x6f01065f, h=0x1b00017) returned 0x163009e3 [0080.798] DeleteObject (ho=0x163009e3) returned 1 [0080.798] GetROP2 (hdc=0x6f01065f) returned 13 [0080.798] GetBkMode (hdc=0x6f01065f) returned 2 [0080.798] SetBkMode (hdc=0x6f01065f, mode=1) returned 2 [0080.798] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x1b3009e5 [0080.798] SelectObject (hdc=0x6f01065f, h=0x1b3009e5) returned 0x1b00017 [0080.798] MoveToEx (in: hdc=0x6f01065f, x=0, y=22, lppt=0x22c27e0 | out: lppt=0x22c27e0) returned 1 [0080.798] LineTo (hdc=0x6f01065f, x=25, y=22) returned 1 [0080.798] SetBkMode (hdc=0x6f01065f, mode=2) returned 1 [0080.798] MoveToEx (in: hdc=0x6f01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.798] GetROP2 (hdc=0x6f01065f) returned 13 [0080.798] GetBkMode (hdc=0x6f01065f) returned 2 [0080.798] SetBkMode (hdc=0x6f01065f, mode=1) returned 2 [0080.798] SelectObject (hdc=0x6f01065f, h=0x1b3009e5) returned 0x1b3009e5 [0080.799] MoveToEx (in: hdc=0x6f01065f, x=25, y=22, lppt=0x22c27f8 | out: lppt=0x22c27f8) returned 1 [0080.799] LineTo (hdc=0x6f01065f, x=25, y=-1) returned 1 [0080.799] SetBkMode (hdc=0x6f01065f, mode=2) returned 1 [0080.799] MoveToEx (in: hdc=0x6f01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.799] SelectObject (hdc=0x6f01065f, h=0x1b00017) returned 0x1b3009e5 [0080.799] DeleteObject (ho=0x1b3009e5) returned 1 [0080.799] GetROP2 (hdc=0x6f01065f) returned 13 [0080.799] GetBkMode (hdc=0x6f01065f) returned 2 [0080.799] SetBkMode (hdc=0x6f01065f, mode=1) returned 2 [0080.799] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x173009e3 [0080.799] SelectObject (hdc=0x6f01065f, h=0x173009e3) returned 0x1b00017 [0080.799] MoveToEx (in: hdc=0x6f01065f, x=24, y=1, lppt=0x22c2860 | out: lppt=0x22c2860) returned 1 [0080.799] LineTo (hdc=0x6f01065f, x=1, y=1) returned 1 [0080.799] SetBkMode (hdc=0x6f01065f, mode=2) returned 1 [0080.799] MoveToEx (in: hdc=0x6f01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.799] GetROP2 (hdc=0x6f01065f) returned 13 [0080.799] GetBkMode (hdc=0x6f01065f) returned 2 [0080.799] SetBkMode (hdc=0x6f01065f, mode=1) returned 2 [0080.799] SelectObject (hdc=0x6f01065f, h=0x173009e3) returned 0x173009e3 [0080.799] MoveToEx (in: hdc=0x6f01065f, x=1, y=1, lppt=0x22c2878 | out: lppt=0x22c2878) returned 1 [0080.799] LineTo (hdc=0x6f01065f, x=1, y=21) returned 1 [0080.799] SetBkMode (hdc=0x6f01065f, mode=2) returned 1 [0080.800] MoveToEx (in: hdc=0x6f01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.800] SelectObject (hdc=0x6f01065f, h=0x1b00017) returned 0x173009e3 [0080.800] DeleteObject (ho=0x173009e3) returned 1 [0080.800] GetROP2 (hdc=0x6f01065f) returned 13 [0080.800] GetBkMode (hdc=0x6f01065f) returned 2 [0080.800] SetBkMode (hdc=0x6f01065f, mode=1) returned 2 [0080.800] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x1c3009e5 [0080.800] SelectObject (hdc=0x6f01065f, h=0x1c3009e5) returned 0x1b00017 [0080.800] MoveToEx (in: hdc=0x6f01065f, x=1, y=21, lppt=0x22c28e0 | out: lppt=0x22c28e0) returned 1 [0080.800] LineTo (hdc=0x6f01065f, x=24, y=21) returned 1 [0080.800] SetBkMode (hdc=0x6f01065f, mode=2) returned 1 [0080.800] MoveToEx (in: hdc=0x6f01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.800] GetROP2 (hdc=0x6f01065f) returned 13 [0080.800] GetBkMode (hdc=0x6f01065f) returned 2 [0080.800] SetBkMode (hdc=0x6f01065f, mode=1) returned 2 [0080.800] SelectObject (hdc=0x6f01065f, h=0x1c3009e5) returned 0x1c3009e5 [0080.800] MoveToEx (in: hdc=0x6f01065f, x=24, y=21, lppt=0x22c28f8 | out: lppt=0x22c28f8) returned 1 [0080.800] LineTo (hdc=0x6f01065f, x=24, y=0) returned 1 [0080.800] SetBkMode (hdc=0x6f01065f, mode=2) returned 1 [0080.800] MoveToEx (in: hdc=0x6f01065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.800] SelectObject (hdc=0x6f01065f, h=0x1b00017) returned 0x1c3009e5 [0080.800] DeleteObject (ho=0x1c3009e5) returned 1 [0080.801] RestoreDC (hdc=0x6f01065f, nSavedDC=-1) returned 1 [0080.801] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6f01065f) returned 0x0 [0080.801] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0080.801] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x6f01065f, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.801] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6f01065f) returned 0x0 [0080.801] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0080.801] SelectObject (hdc=0x6f01065f, h=0x185000f) returned 0x160506a9 [0080.801] DeleteDC (hdc=0x6f01065f) returned 1 [0080.801] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0080.801] EndPaint (hWnd=0x3031e, lpPaint=0x14e548) returned 1 [0080.801] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.802] IsWindowUnicode (hWnd=0x30308) returned 1 [0080.802] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.802] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.802] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0080.802] BeginPaint (in: hWnd=0x30308, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0080.802] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0080.802] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x6f0109dc [0080.802] SelectObject (hdc=0x6f0109dc, h=0x160506a9) returned 0x185000f [0080.802] GdipCreateFromHDC (hdc=0x6f0109dc, graphics=0x14e528) returned 0x0 [0080.802] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0080.802] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0080.802] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0080.802] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.802] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0080.802] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d490 [0080.802] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d490) returned 0x0 [0080.802] LocalFree (hMem=0x1d92d490) returned 0x0 [0080.803] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.803] GdipCreateRegion (region=0x14e550) returned 0x0 [0080.803] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.803] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0080.803] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0080.803] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd0f0dbd) returned 0x0 [0080.803] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.803] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0080.803] GetCurrentObject (hdc=0x6f0109dc, type=0x1) returned 0x1b00017 [0080.803] GetCurrentObject (hdc=0x6f0109dc, type=0x2) returned 0x1900010 [0080.803] GetCurrentObject (hdc=0x6f0109dc, type=0x7) returned 0x160506a9 [0080.803] GetCurrentObject (hdc=0x6f0109dc, type=0x6) returned 0x18a0048 [0080.803] SaveDC (hdc=0x6f0109dc) returned 1 [0080.803] GetNearestColor (hdc=0x6f0109dc, color=0xf0f0f0) returned 0xf0f0f0 [0080.803] GetNearestColor (hdc=0x6f0109dc, color=0xa0a0a0) returned 0xa0a0a0 [0080.803] GetNearestColor (hdc=0x6f0109dc, color=0x696969) returned 0x696969 [0080.803] GetNearestColor (hdc=0x6f0109dc, color=0xa0a0a0) returned 0xa0a0a0 [0080.803] GetNearestColor (hdc=0x6f0109dc, color=0x0) returned 0x0 [0080.803] GetNearestColor (hdc=0x6f0109dc, color=0xffffff) returned 0xffffff [0080.803] GetNearestColor (hdc=0x6f0109dc, color=0xe5e5e5) returned 0xe5e5e5 [0080.804] GetNearestColor (hdc=0x6f0109dc, color=0xd8d8d8) returned 0xd8d8d8 [0080.804] GetNearestColor (hdc=0x6f0109dc, color=0x0) returned 0x0 [0080.804] RestoreDC (hdc=0x6f0109dc, nSavedDC=-1) returned 1 [0080.804] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6f0109dc) returned 0x0 [0080.804] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx+,\x02", lpUsedDefaultChar=0x0) returned 17 [0080.804] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.804] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22c3218) returned 0x0 [0080.804] GdipSetStringFormatAlign (format=0x1beb7f40, align=0x1) returned 0x0 [0080.804] GdipSetStringFormatLineAlign (format=0x1beb7f40, align=0x1) returned 0x0 [0080.804] GdipSetStringFormatHotkeyPrefix (format=0x1beb7f40, hotkeyPrefix=1) returned 0x0 [0080.804] GdipGetStringFormatFlags (format=0x1beb7f40, flags=0x14e378) returned 0x0 [0080.804] GdipGetStringFormatTrimming (format=0x1beb7f40, trimming=0x14e378) returned 0x0 [0080.805] GdipGetStringFormatHotkeyPrefix (format=0x1beb7f40, hotkeyPrefix=0x14e378) returned 0x0 [0080.805] GdipGetFontSize (font=0x1beb7f40, size=0x14e378) returned 0x0 [0080.805] GdipGetFontStyle (font=0x1beb7f40, style=0x14e378) returned 0x0 [0080.805] GdipDeleteStringFormat (format=0x1beb7f40) returned 0x0 [0080.805] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.805] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.805] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0080.805] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22c3348) returned 0x0 [0080.805] GdipSetStringFormatFlags (format=0x1beb7c30, flags=0) returned 0x0 [0080.805] GdipSetStringFormatTrimming (format=0x1beb7c30, trimming=0x1) returned 0x0 [0080.805] GdipSetStringFormatHotkeyPrefix (format=0x1beb7c30, hotkeyPrefix=1) returned 0x0 [0080.805] GdipSetStringFormatAlign (format=0x1beb7c30, align=0x1) returned 0x0 [0080.806] GdipSetStringFormatLineAlign (format=0x1beb7c30, align=0x1) returned 0x0 [0080.806] GdipMeasureString (graphics=0x1beb8070, string="5", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7c30, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0080.806] GdipDeleteStringFormat (format=0x1beb7c30) returned 0x0 [0080.806] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0080.806] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.806] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.806] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0080.806] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.806] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0080.806] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.806] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0080.806] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d2d0 [0080.806] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d2d0) returned 0x0 [0080.806] LocalFree (hMem=0x1d92d2d0) returned 0x0 [0080.806] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d490 [0080.807] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d490) returned 0x0 [0080.807] LocalFree (hMem=0x1d92d490) returned 0x0 [0080.807] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.807] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0080.807] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0080.807] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0080.807] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.807] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0080.807] GetCurrentObject (hdc=0x6f0109dc, type=0x1) returned 0x1b00017 [0080.807] GetCurrentObject (hdc=0x6f0109dc, type=0x2) returned 0x1900010 [0080.807] GetCurrentObject (hdc=0x6f0109dc, type=0x7) returned 0x160506a9 [0080.807] GetCurrentObject (hdc=0x6f0109dc, type=0x6) returned 0x18a0048 [0080.807] SaveDC (hdc=0x6f0109dc) returned 1 [0080.807] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc904095c [0080.807] GetClipRgn (hdc=0x6f0109dc, hrgn=0xffffffffc904095c) returned 0 [0080.807] SelectClipRgn (hdc=0x6f0109dc, hrgn=0xffffffff8a0406c7) returned 2 [0080.807] DeleteObject (ho=0xffffffffc904095c) returned 1 [0080.807] DeleteObject (ho=0xffffffff8a0406c7) returned 1 [0080.807] OffsetViewportOrgEx (in: hdc=0x6f0109dc, x=0, y=0, lppt=0x22c3708 | out: lppt=0x22c3708) returned 1 [0080.807] GetNearestColor (hdc=0x6f0109dc, color=0xf0f0f0) returned 0xf0f0f0 [0080.807] CreateSolidBrush (color=0xf0f0f0) returned 0x5d100559 [0080.808] FillRect (hDC=0x6f0109dc, lprc=0x14e1c8, hbr=0x5d100559) returned 1 [0080.808] DeleteObject (ho=0x5d100559) returned 1 [0080.808] RestoreDC (hdc=0x6f0109dc, nSavedDC=-1) returned 1 [0080.808] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6f0109dc) returned 0x0 [0080.808] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.808] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0080.808] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.808] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22c3808) returned 0x0 [0080.808] GdipSetStringFormatAlign (format=0x1beb7ca0, align=0x1) returned 0x0 [0080.808] GdipSetStringFormatLineAlign (format=0x1beb7ca0, align=0x1) returned 0x0 [0080.808] GdipSetStringFormatHotkeyPrefix (format=0x1beb7ca0, hotkeyPrefix=1) returned 0x0 [0080.808] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0080.808] GdipDrawString (graphics=0x1beb67f0, string="5", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7ca0, brush=0x1beb15e0) returned 0x0 [0080.809] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0080.809] GdipDeleteStringFormat (format=0x1beb7ca0) returned 0x0 [0080.809] GetFocus () returned 0x0 [0080.809] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx),\x02", lpUsedDefaultChar=0x0) returned 17 [0080.809] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.809] GdipCreateRegion (region=0x14e030) returned 0x0 [0080.809] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.809] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0080.809] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.809] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0080.809] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d490 [0080.809] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d490) returned 0x0 [0080.810] LocalFree (hMem=0x1d92d490) returned 0x0 [0080.810] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0080.810] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d710) returned 0x0 [0080.810] LocalFree (hMem=0x1d92d710) returned 0x0 [0080.810] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.810] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0080.810] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0080.810] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0080.810] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.810] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0080.810] GetCurrentObject (hdc=0x6f0109dc, type=0x1) returned 0x1b00017 [0080.810] GetCurrentObject (hdc=0x6f0109dc, type=0x2) returned 0x1900010 [0080.810] GetCurrentObject (hdc=0x6f0109dc, type=0x7) returned 0x160506a9 [0080.810] GetCurrentObject (hdc=0x6f0109dc, type=0x6) returned 0x18a0048 [0080.810] SaveDC (hdc=0x6f0109dc) returned 1 [0080.810] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8b0406c7 [0080.810] GetClipRgn (hdc=0x6f0109dc, hrgn=0xffffffff8b0406c7) returned 0 [0080.810] SelectClipRgn (hdc=0x6f0109dc, hrgn=0xffffffffca04095c) returned 2 [0080.810] DeleteObject (ho=0xffffffff8b0406c7) returned 1 [0080.810] DeleteObject (ho=0xffffffffca04095c) returned 1 [0080.811] OffsetViewportOrgEx (in: hdc=0x6f0109dc, x=0, y=0, lppt=0x22c3bf0 | out: lppt=0x22c3bf0) returned 1 [0080.811] GetROP2 (hdc=0x6f0109dc) returned 13 [0080.811] GetBkMode (hdc=0x6f0109dc) returned 2 [0080.811] SetBkMode (hdc=0x6f0109dc, mode=1) returned 2 [0080.811] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x1d3009e5 [0080.811] SelectObject (hdc=0x6f0109dc, h=0x1d3009e5) returned 0x1b00017 [0080.811] MoveToEx (in: hdc=0x6f0109dc, x=25, y=0, lppt=0x22c3c58 | out: lppt=0x22c3c58) returned 1 [0080.811] LineTo (hdc=0x6f0109dc, x=0, y=0) returned 1 [0080.811] SetBkMode (hdc=0x6f0109dc, mode=2) returned 1 [0080.811] MoveToEx (in: hdc=0x6f0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.811] GetROP2 (hdc=0x6f0109dc) returned 13 [0080.811] GetBkMode (hdc=0x6f0109dc) returned 2 [0080.811] SetBkMode (hdc=0x6f0109dc, mode=1) returned 2 [0080.811] SelectObject (hdc=0x6f0109dc, h=0x1d3009e5) returned 0x1d3009e5 [0080.811] MoveToEx (in: hdc=0x6f0109dc, x=0, y=0, lppt=0x22c3c70 | out: lppt=0x22c3c70) returned 1 [0080.811] LineTo (hdc=0x6f0109dc, x=0, y=22) returned 1 [0080.811] SetBkMode (hdc=0x6f0109dc, mode=2) returned 1 [0080.811] MoveToEx (in: hdc=0x6f0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.811] SelectObject (hdc=0x6f0109dc, h=0x1b00017) returned 0x1d3009e5 [0080.811] DeleteObject (ho=0x1d3009e5) returned 1 [0080.811] GetROP2 (hdc=0x6f0109dc) returned 13 [0080.811] GetBkMode (hdc=0x6f0109dc) returned 2 [0080.811] SetBkMode (hdc=0x6f0109dc, mode=1) returned 2 [0080.812] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x183009e3 [0080.812] SelectObject (hdc=0x6f0109dc, h=0x183009e3) returned 0x1b00017 [0080.812] MoveToEx (in: hdc=0x6f0109dc, x=0, y=22, lppt=0x22c3cd8 | out: lppt=0x22c3cd8) returned 1 [0080.812] LineTo (hdc=0x6f0109dc, x=25, y=22) returned 1 [0080.812] SetBkMode (hdc=0x6f0109dc, mode=2) returned 1 [0080.812] MoveToEx (in: hdc=0x6f0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.812] GetROP2 (hdc=0x6f0109dc) returned 13 [0080.812] GetBkMode (hdc=0x6f0109dc) returned 2 [0080.812] SetBkMode (hdc=0x6f0109dc, mode=1) returned 2 [0080.812] SelectObject (hdc=0x6f0109dc, h=0x183009e3) returned 0x183009e3 [0080.812] MoveToEx (in: hdc=0x6f0109dc, x=25, y=22, lppt=0x22c3cf0 | out: lppt=0x22c3cf0) returned 1 [0080.812] LineTo (hdc=0x6f0109dc, x=25, y=-1) returned 1 [0080.812] SetBkMode (hdc=0x6f0109dc, mode=2) returned 1 [0080.812] MoveToEx (in: hdc=0x6f0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.812] SelectObject (hdc=0x6f0109dc, h=0x1b00017) returned 0x183009e3 [0080.812] DeleteObject (ho=0x183009e3) returned 1 [0080.812] GetROP2 (hdc=0x6f0109dc) returned 13 [0080.812] GetBkMode (hdc=0x6f0109dc) returned 2 [0080.812] SetBkMode (hdc=0x6f0109dc, mode=1) returned 2 [0080.812] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x1e3009e5 [0080.812] SelectObject (hdc=0x6f0109dc, h=0x1e3009e5) returned 0x1b00017 [0080.812] MoveToEx (in: hdc=0x6f0109dc, x=24, y=1, lppt=0x22c3d58 | out: lppt=0x22c3d58) returned 1 [0080.813] LineTo (hdc=0x6f0109dc, x=1, y=1) returned 1 [0080.813] SetBkMode (hdc=0x6f0109dc, mode=2) returned 1 [0080.813] MoveToEx (in: hdc=0x6f0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.813] GetROP2 (hdc=0x6f0109dc) returned 13 [0080.813] GetBkMode (hdc=0x6f0109dc) returned 2 [0080.813] SetBkMode (hdc=0x6f0109dc, mode=1) returned 2 [0080.813] SelectObject (hdc=0x6f0109dc, h=0x1e3009e5) returned 0x1e3009e5 [0080.813] MoveToEx (in: hdc=0x6f0109dc, x=1, y=1, lppt=0x22c3d70 | out: lppt=0x22c3d70) returned 1 [0080.813] LineTo (hdc=0x6f0109dc, x=1, y=21) returned 1 [0080.813] SetBkMode (hdc=0x6f0109dc, mode=2) returned 1 [0080.813] MoveToEx (in: hdc=0x6f0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.813] SelectObject (hdc=0x6f0109dc, h=0x1b00017) returned 0x1e3009e5 [0080.813] DeleteObject (ho=0x1e3009e5) returned 1 [0080.813] GetROP2 (hdc=0x6f0109dc) returned 13 [0080.813] GetBkMode (hdc=0x6f0109dc) returned 2 [0080.813] SetBkMode (hdc=0x6f0109dc, mode=1) returned 2 [0080.813] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x193009e3 [0080.813] SelectObject (hdc=0x6f0109dc, h=0x193009e3) returned 0x1b00017 [0080.813] MoveToEx (in: hdc=0x6f0109dc, x=1, y=21, lppt=0x22c3dd8 | out: lppt=0x22c3dd8) returned 1 [0080.813] LineTo (hdc=0x6f0109dc, x=24, y=21) returned 1 [0080.813] SetBkMode (hdc=0x6f0109dc, mode=2) returned 1 [0080.814] MoveToEx (in: hdc=0x6f0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.814] GetROP2 (hdc=0x6f0109dc) returned 13 [0080.814] GetBkMode (hdc=0x6f0109dc) returned 2 [0080.814] SetBkMode (hdc=0x6f0109dc, mode=1) returned 2 [0080.814] SelectObject (hdc=0x6f0109dc, h=0x193009e3) returned 0x193009e3 [0080.814] MoveToEx (in: hdc=0x6f0109dc, x=24, y=21, lppt=0x22c3df0 | out: lppt=0x22c3df0) returned 1 [0080.814] LineTo (hdc=0x6f0109dc, x=24, y=0) returned 1 [0080.814] SetBkMode (hdc=0x6f0109dc, mode=2) returned 1 [0080.814] MoveToEx (in: hdc=0x6f0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.814] SelectObject (hdc=0x6f0109dc, h=0x1b00017) returned 0x193009e3 [0080.814] DeleteObject (ho=0x193009e3) returned 1 [0080.814] RestoreDC (hdc=0x6f0109dc, nSavedDC=-1) returned 1 [0080.814] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6f0109dc) returned 0x0 [0080.814] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0080.814] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x6f0109dc, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.814] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x6f0109dc) returned 0x0 [0080.814] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0080.814] SelectObject (hdc=0x6f0109dc, h=0x185000f) returned 0x160506a9 [0080.814] DeleteDC (hdc=0x6f0109dc) returned 1 [0080.815] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0080.815] EndPaint (hWnd=0x30308, lpPaint=0x14e548) returned 1 [0080.815] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.815] IsWindowUnicode (hWnd=0x3030c) returned 1 [0080.815] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.815] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.815] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0080.815] BeginPaint (in: hWnd=0x3030c, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0080.815] SelectPalette (hdc=0x220106d6, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0080.815] CreateCompatibleDC (hdc=0x220106d6) returned 0x280109e4 [0080.815] SelectObject (hdc=0x280109e4, h=0x160506a9) returned 0x185000f [0080.815] GdipCreateFromHDC (hdc=0x280109e4, graphics=0x14e528) returned 0x0 [0080.815] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0080.815] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0080.815] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0080.816] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.816] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e5b8) returned 0x0 [0080.816] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d650 [0080.816] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d650) returned 0x0 [0080.816] LocalFree (hMem=0x1d92d650) returned 0x0 [0080.816] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.816] GdipCreateRegion (region=0x14e550) returned 0x0 [0080.816] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.816] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0080.816] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0080.816] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd0c0dbd) returned 0x0 [0080.816] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.816] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0080.816] GetCurrentObject (hdc=0x280109e4, type=0x1) returned 0x1b00017 [0080.816] GetCurrentObject (hdc=0x280109e4, type=0x2) returned 0x1900010 [0080.816] GetCurrentObject (hdc=0x280109e4, type=0x7) returned 0x160506a9 [0080.816] GetCurrentObject (hdc=0x280109e4, type=0x6) returned 0x18a0048 [0080.816] SaveDC (hdc=0x280109e4) returned 1 [0080.816] GetNearestColor (hdc=0x280109e4, color=0xf0f0f0) returned 0xf0f0f0 [0080.817] GetNearestColor (hdc=0x280109e4, color=0xa0a0a0) returned 0xa0a0a0 [0080.817] GetNearestColor (hdc=0x280109e4, color=0x696969) returned 0x696969 [0080.817] GetNearestColor (hdc=0x280109e4, color=0xa0a0a0) returned 0xa0a0a0 [0080.817] GetNearestColor (hdc=0x280109e4, color=0x0) returned 0x0 [0080.868] GetNearestColor (hdc=0x280109e4, color=0xffffff) returned 0xffffff [0080.868] GetNearestColor (hdc=0x280109e4, color=0xe5e5e5) returned 0xe5e5e5 [0080.868] GetNearestColor (hdc=0x280109e4, color=0xd8d8d8) returned 0xd8d8d8 [0080.868] GetNearestColor (hdc=0x280109e4, color=0x0) returned 0x0 [0080.868] RestoreDC (hdc=0x280109e4, nSavedDC=-1) returned 1 [0080.868] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x280109e4) returned 0x0 [0080.868] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx@,\x02", lpUsedDefaultChar=0x0) returned 17 [0080.869] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.869] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22c4710) returned 0x0 [0080.869] GdipSetStringFormatAlign (format=0x1beb7920, align=0x1) returned 0x0 [0080.869] GdipSetStringFormatLineAlign (format=0x1beb7920, align=0x1) returned 0x0 [0080.869] GdipSetStringFormatHotkeyPrefix (format=0x1beb7920, hotkeyPrefix=1) returned 0x0 [0080.869] GdipGetStringFormatFlags (format=0x1beb7920, flags=0x14e378) returned 0x0 [0080.869] GdipGetStringFormatTrimming (format=0x1beb7920, trimming=0x14e378) returned 0x0 [0080.869] GdipGetStringFormatHotkeyPrefix (format=0x1beb7920, hotkeyPrefix=0x14e378) returned 0x0 [0080.869] GdipGetFontSize (font=0x1beb7920, size=0x14e378) returned 0x0 [0080.869] GdipGetFontStyle (font=0x1beb7920, style=0x14e378) returned 0x0 [0080.869] GdipDeleteStringFormat (format=0x1beb7920) returned 0x0 [0080.869] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.869] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.869] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0080.870] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22c4840) returned 0x0 [0080.870] GdipSetStringFormatFlags (format=0x1beb7a00, flags=0) returned 0x0 [0080.870] GdipSetStringFormatTrimming (format=0x1beb7a00, trimming=0x1) returned 0x0 [0080.870] GdipSetStringFormatHotkeyPrefix (format=0x1beb7a00, hotkeyPrefix=1) returned 0x0 [0080.870] GdipSetStringFormatAlign (format=0x1beb7a00, align=0x1) returned 0x0 [0080.870] GdipSetStringFormatLineAlign (format=0x1beb7a00, align=0x1) returned 0x0 [0080.870] GdipMeasureString (graphics=0x1beb8070, string="2", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7a00, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0080.870] GdipDeleteStringFormat (format=0x1beb7a00) returned 0x0 [0080.870] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0080.870] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.871] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.871] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0080.871] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.871] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0080.871] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.871] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e128) returned 0x0 [0080.871] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0080.871] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0080.871] LocalFree (hMem=0x1d92cf10) returned 0x0 [0080.871] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cbd0 [0080.871] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cbd0) returned 0x0 [0080.871] LocalFree (hMem=0x1d92cbd0) returned 0x0 [0080.871] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.871] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0080.871] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0080.871] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0080.871] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.871] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0080.871] GetCurrentObject (hdc=0x280109e4, type=0x1) returned 0x1b00017 [0080.871] GetCurrentObject (hdc=0x280109e4, type=0x2) returned 0x1900010 [0080.871] GetCurrentObject (hdc=0x280109e4, type=0x7) returned 0x160506a9 [0080.871] GetCurrentObject (hdc=0x280109e4, type=0x6) returned 0x18a0048 [0080.872] SaveDC (hdc=0x280109e4) returned 1 [0080.872] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffcb04095c [0080.872] GetClipRgn (hdc=0x280109e4, hrgn=0xffffffffcb04095c) returned 0 [0080.872] SelectClipRgn (hdc=0x280109e4, hrgn=0xffffffff8c0406c7) returned 2 [0080.872] DeleteObject (ho=0xffffffffcb04095c) returned 1 [0080.872] DeleteObject (ho=0xffffffff8c0406c7) returned 1 [0080.872] OffsetViewportOrgEx (in: hdc=0x280109e4, x=0, y=0, lppt=0x22c4c00 | out: lppt=0x22c4c00) returned 1 [0080.872] GetNearestColor (hdc=0x280109e4, color=0xf0f0f0) returned 0xf0f0f0 [0080.872] CreateSolidBrush (color=0xf0f0f0) returned 0x5e100559 [0080.872] FillRect (hDC=0x280109e4, lprc=0x14e1c8, hbr=0x5e100559) returned 1 [0080.872] DeleteObject (ho=0x5e100559) returned 1 [0080.872] RestoreDC (hdc=0x280109e4, nSavedDC=-1) returned 1 [0080.872] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x280109e4) returned 0x0 [0080.872] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0080.873] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.873] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22c4d00) returned 0x0 [0080.873] GdipSetStringFormatAlign (format=0x1beb7e60, align=0x1) returned 0x0 [0080.873] GdipSetStringFormatLineAlign (format=0x1beb7e60, align=0x1) returned 0x0 [0080.873] GdipSetStringFormatHotkeyPrefix (format=0x1beb7e60, hotkeyPrefix=1) returned 0x0 [0080.873] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0080.873] GdipDrawString (graphics=0x1beb67f0, string="2", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7e60, brush=0x1beb15e0) returned 0x0 [0080.873] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0080.873] GdipDeleteStringFormat (format=0x1beb7e60) returned 0x0 [0080.873] GetFocus () returned 0x0 [0080.874] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx>,\x02", lpUsedDefaultChar=0x0) returned 17 [0080.874] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.874] GdipCreateRegion (region=0x14e030) returned 0x0 [0080.874] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.874] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0080.874] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.874] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e098) returned 0x0 [0080.874] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cb90 [0080.874] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cb90) returned 0x0 [0080.874] LocalFree (hMem=0x1d92cb90) returned 0x0 [0080.874] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92ccd0 [0080.874] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92ccd0) returned 0x0 [0080.874] LocalFree (hMem=0x1d92ccd0) returned 0x0 [0080.874] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.874] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0080.874] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0080.874] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0080.874] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.875] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0080.875] GetCurrentObject (hdc=0x280109e4, type=0x1) returned 0x1b00017 [0080.875] GetCurrentObject (hdc=0x280109e4, type=0x2) returned 0x1900010 [0080.875] GetCurrentObject (hdc=0x280109e4, type=0x7) returned 0x160506a9 [0080.875] GetCurrentObject (hdc=0x280109e4, type=0x6) returned 0x18a0048 [0080.875] SaveDC (hdc=0x280109e4) returned 1 [0080.875] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8d0406c7 [0080.875] GetClipRgn (hdc=0x280109e4, hrgn=0xffffffff8d0406c7) returned 0 [0080.875] SelectClipRgn (hdc=0x280109e4, hrgn=0xffffffffcc04095c) returned 2 [0080.875] DeleteObject (ho=0xffffffff8d0406c7) returned 1 [0080.875] DeleteObject (ho=0xffffffffcc04095c) returned 1 [0080.875] OffsetViewportOrgEx (in: hdc=0x280109e4, x=0, y=0, lppt=0x22c50e8 | out: lppt=0x22c50e8) returned 1 [0080.875] GetROP2 (hdc=0x280109e4) returned 13 [0080.875] GetBkMode (hdc=0x280109e4) returned 2 [0080.875] SetBkMode (hdc=0x280109e4, mode=1) returned 2 [0080.875] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x1a3009e3 [0080.875] SelectObject (hdc=0x280109e4, h=0x1a3009e3) returned 0x1b00017 [0080.875] MoveToEx (in: hdc=0x280109e4, x=25, y=0, lppt=0x22c5150 | out: lppt=0x22c5150) returned 1 [0080.875] LineTo (hdc=0x280109e4, x=0, y=0) returned 1 [0080.876] SetBkMode (hdc=0x280109e4, mode=2) returned 1 [0080.876] MoveToEx (in: hdc=0x280109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.876] GetROP2 (hdc=0x280109e4) returned 13 [0080.876] GetBkMode (hdc=0x280109e4) returned 2 [0080.876] SetBkMode (hdc=0x280109e4, mode=1) returned 2 [0080.876] SelectObject (hdc=0x280109e4, h=0x1a3009e3) returned 0x1a3009e3 [0080.876] MoveToEx (in: hdc=0x280109e4, x=0, y=0, lppt=0x22c5168 | out: lppt=0x22c5168) returned 1 [0080.876] LineTo (hdc=0x280109e4, x=0, y=22) returned 1 [0080.876] SetBkMode (hdc=0x280109e4, mode=2) returned 1 [0080.876] MoveToEx (in: hdc=0x280109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.876] SelectObject (hdc=0x280109e4, h=0x1b00017) returned 0x1a3009e3 [0080.876] DeleteObject (ho=0x1a3009e3) returned 1 [0080.876] GetROP2 (hdc=0x280109e4) returned 13 [0080.876] GetBkMode (hdc=0x280109e4) returned 2 [0080.876] SetBkMode (hdc=0x280109e4, mode=1) returned 2 [0080.876] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x1f3009e5 [0080.876] SelectObject (hdc=0x280109e4, h=0x1f3009e5) returned 0x1b00017 [0080.876] MoveToEx (in: hdc=0x280109e4, x=0, y=22, lppt=0x22c51d0 | out: lppt=0x22c51d0) returned 1 [0080.876] LineTo (hdc=0x280109e4, x=25, y=22) returned 1 [0080.876] SetBkMode (hdc=0x280109e4, mode=2) returned 1 [0080.876] MoveToEx (in: hdc=0x280109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.876] GetROP2 (hdc=0x280109e4) returned 13 [0080.877] GetBkMode (hdc=0x280109e4) returned 2 [0080.877] SetBkMode (hdc=0x280109e4, mode=1) returned 2 [0080.877] SelectObject (hdc=0x280109e4, h=0x1f3009e5) returned 0x1f3009e5 [0080.877] MoveToEx (in: hdc=0x280109e4, x=25, y=22, lppt=0x22c51e8 | out: lppt=0x22c51e8) returned 1 [0080.877] LineTo (hdc=0x280109e4, x=25, y=-1) returned 1 [0080.877] SetBkMode (hdc=0x280109e4, mode=2) returned 1 [0080.877] MoveToEx (in: hdc=0x280109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.877] SelectObject (hdc=0x280109e4, h=0x1b00017) returned 0x1f3009e5 [0080.877] DeleteObject (ho=0x1f3009e5) returned 1 [0080.877] GetROP2 (hdc=0x280109e4) returned 13 [0080.877] GetBkMode (hdc=0x280109e4) returned 2 [0080.877] SetBkMode (hdc=0x280109e4, mode=1) returned 2 [0080.877] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x1b3009e3 [0080.877] SelectObject (hdc=0x280109e4, h=0x1b3009e3) returned 0x1b00017 [0080.877] MoveToEx (in: hdc=0x280109e4, x=24, y=1, lppt=0x22c5250 | out: lppt=0x22c5250) returned 1 [0080.877] LineTo (hdc=0x280109e4, x=1, y=1) returned 1 [0080.877] SetBkMode (hdc=0x280109e4, mode=2) returned 1 [0080.877] MoveToEx (in: hdc=0x280109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.877] GetROP2 (hdc=0x280109e4) returned 13 [0080.877] GetBkMode (hdc=0x280109e4) returned 2 [0080.877] SetBkMode (hdc=0x280109e4, mode=1) returned 2 [0080.877] SelectObject (hdc=0x280109e4, h=0x1b3009e3) returned 0x1b3009e3 [0080.878] MoveToEx (in: hdc=0x280109e4, x=1, y=1, lppt=0x22c5268 | out: lppt=0x22c5268) returned 1 [0080.878] LineTo (hdc=0x280109e4, x=1, y=21) returned 1 [0080.878] SetBkMode (hdc=0x280109e4, mode=2) returned 1 [0080.878] MoveToEx (in: hdc=0x280109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.878] SelectObject (hdc=0x280109e4, h=0x1b00017) returned 0x1b3009e3 [0080.878] DeleteObject (ho=0x1b3009e3) returned 1 [0080.878] GetROP2 (hdc=0x280109e4) returned 13 [0080.878] GetBkMode (hdc=0x280109e4) returned 2 [0080.878] SetBkMode (hdc=0x280109e4, mode=1) returned 2 [0080.878] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x203009e5 [0080.878] SelectObject (hdc=0x280109e4, h=0x203009e5) returned 0x1b00017 [0080.878] MoveToEx (in: hdc=0x280109e4, x=1, y=21, lppt=0x22c52d0 | out: lppt=0x22c52d0) returned 1 [0080.878] LineTo (hdc=0x280109e4, x=24, y=21) returned 1 [0080.878] SetBkMode (hdc=0x280109e4, mode=2) returned 1 [0080.878] MoveToEx (in: hdc=0x280109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.878] GetROP2 (hdc=0x280109e4) returned 13 [0080.878] GetBkMode (hdc=0x280109e4) returned 2 [0080.878] SetBkMode (hdc=0x280109e4, mode=1) returned 2 [0080.878] SelectObject (hdc=0x280109e4, h=0x203009e5) returned 0x203009e5 [0080.878] MoveToEx (in: hdc=0x280109e4, x=24, y=21, lppt=0x22c52e8 | out: lppt=0x22c52e8) returned 1 [0080.878] LineTo (hdc=0x280109e4, x=24, y=0) returned 1 [0080.878] SetBkMode (hdc=0x280109e4, mode=2) returned 1 [0080.878] MoveToEx (in: hdc=0x280109e4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.879] SelectObject (hdc=0x280109e4, h=0x1b00017) returned 0x203009e5 [0080.879] DeleteObject (ho=0x203009e5) returned 1 [0080.879] RestoreDC (hdc=0x280109e4, nSavedDC=-1) returned 1 [0080.879] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x280109e4) returned 0x0 [0080.879] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0080.879] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x280109e4, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.879] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x280109e4) returned 0x0 [0080.879] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0080.879] SelectObject (hdc=0x280109e4, h=0x185000f) returned 0x160506a9 [0080.879] DeleteDC (hdc=0x280109e4) returned 1 [0080.879] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0080.879] EndPaint (hWnd=0x3030c, lpPaint=0x14e548) returned 1 [0080.882] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.882] IsWindowUnicode (hWnd=0x302e4) returned 1 [0080.882] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.882] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.882] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0080.882] BeginPaint (in: hWnd=0x302e4, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0080.882] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffab080693, bForceBkgd=1) returned 0x188000b [0080.882] CreateCompatibleDC (hdc=0xc0100ae) returned 0x7701065f [0080.882] SelectObject (hdc=0x7701065f, h=0x160506a9) returned 0x185000f [0080.883] GdipCreateFromHDC (hdc=0x7701065f, graphics=0x14e528) returned 0x0 [0080.883] GdipTranslateWorldTransform (graphics=0x1beb67f0, dx=0x7ffcf3e0e692, dy=0xf6a1d78c108b, order=0x0) returned 0x0 [0080.883] GdipSetClipRectI (graphics=0x1beb67f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0080.883] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0080.883] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.883] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e5b8) returned 0x0 [0080.883] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d710 [0080.883] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d710) returned 0x0 [0080.883] LocalFree (hMem=0x1d92d710) returned 0x0 [0080.883] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.883] GdipCreateRegion (region=0x14e550) returned 0x0 [0080.883] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.883] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e5b0) returned 0x0 [0080.883] GdipSaveGraphics (graphics=0x1beb67f0, state=0x14e650) returned 0x0 [0080.883] GdipRestoreGraphics (graphics=0x1beb67f0, state=0xfffffffffd090dbd) returned 0x0 [0080.883] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.883] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e2c8) returned 0x0 [0080.883] GetCurrentObject (hdc=0x7701065f, type=0x1) returned 0x1b00017 [0080.883] GetCurrentObject (hdc=0x7701065f, type=0x2) returned 0x1900010 [0080.883] GetCurrentObject (hdc=0x7701065f, type=0x7) returned 0x160506a9 [0080.884] GetCurrentObject (hdc=0x7701065f, type=0x6) returned 0x18a0048 [0080.884] SaveDC (hdc=0x7701065f) returned 1 [0080.884] GetNearestColor (hdc=0x7701065f, color=0xf0f0f0) returned 0xf0f0f0 [0080.884] GetNearestColor (hdc=0x7701065f, color=0xa0a0a0) returned 0xa0a0a0 [0080.884] GetNearestColor (hdc=0x7701065f, color=0x696969) returned 0x696969 [0080.884] GetNearestColor (hdc=0x7701065f, color=0xa0a0a0) returned 0xa0a0a0 [0080.884] GetNearestColor (hdc=0x7701065f, color=0x0) returned 0x0 [0080.884] GetNearestColor (hdc=0x7701065f, color=0xffffff) returned 0xffffff [0080.884] GetNearestColor (hdc=0x7701065f, color=0xe5e5e5) returned 0xe5e5e5 [0080.884] GetNearestColor (hdc=0x7701065f, color=0xd8d8d8) returned 0xd8d8d8 [0080.884] GetNearestColor (hdc=0x7701065f, color=0x0) returned 0x0 [0080.884] RestoreDC (hdc=0x7701065f, nSavedDC=-1) returned 1 [0080.884] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x7701065f) returned 0x0 [0080.884] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExU,\x02", lpUsedDefaultChar=0x0) returned 17 [0080.885] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.885] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22c5c08) returned 0x0 [0080.885] GdipSetStringFormatAlign (format=0x1beb7d80, align=0x1) returned 0x0 [0080.885] GdipSetStringFormatLineAlign (format=0x1beb7d80, align=0x1) returned 0x0 [0080.885] GdipSetStringFormatHotkeyPrefix (format=0x1beb7d80, hotkeyPrefix=1) returned 0x0 [0080.885] GdipGetStringFormatFlags (format=0x1beb7d80, flags=0x14e378) returned 0x0 [0080.885] GdipGetStringFormatTrimming (format=0x1beb7d80, trimming=0x14e378) returned 0x0 [0080.885] GdipGetStringFormatHotkeyPrefix (format=0x1beb7d80, hotkeyPrefix=0x14e378) returned 0x0 [0080.885] GdipGetFontSize (font=0x1beb7d80, size=0x14e378) returned 0x0 [0080.885] GdipGetFontStyle (font=0x1beb7d80, style=0x14e378) returned 0x0 [0080.885] GdipDeleteStringFormat (format=0x1beb7d80) returned 0x0 [0080.885] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.886] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.886] GdipCreateFromHDC (hdc=0x6a01069d, graphics=0x14dfe8) returned 0x0 [0080.886] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22c5d38) returned 0x0 [0080.886] GdipSetStringFormatFlags (format=0x1beb7bc0, flags=0) returned 0x0 [0080.886] GdipSetStringFormatTrimming (format=0x1beb7bc0, trimming=0x1) returned 0x0 [0080.886] GdipSetStringFormatHotkeyPrefix (format=0x1beb7bc0, hotkeyPrefix=1) returned 0x0 [0080.886] GdipSetStringFormatAlign (format=0x1beb7bc0, align=0x1) returned 0x0 [0080.886] GdipSetStringFormatLineAlign (format=0x1beb7bc0, align=0x1) returned 0x0 [0080.886] GdipMeasureString (graphics=0x1beb8070, string="1", length=1, font=0x1abeed70, layoutRect=0x14dfb8, stringFormat=0x1beb7bc0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0080.886] GdipDeleteStringFormat (format=0x1beb7bc0) returned 0x0 [0080.886] GdipDeleteGraphics (graphics=0x1beb8070) returned 0x0 [0080.886] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.887] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.887] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0080.887] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.887] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0080.887] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6ec0) returned 0x0 [0080.887] GdipIsMatrixIdentity (matrix=0x1beb6ec0, result=0x14e128) returned 0x0 [0080.887] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0080.887] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92cf10) returned 0x0 [0080.887] LocalFree (hMem=0x1d92cf10) returned 0x0 [0080.887] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d050 [0080.887] GdipGetMatrixElements (matrix=0x1beb6ec0, matrixOut=0x1d92d050) returned 0x0 [0080.887] LocalFree (hMem=0x1d92d050) returned 0x0 [0080.887] GdipDeleteMatrix (matrix=0x1beb6ec0) returned 0x0 [0080.887] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e190) returned 0x0 [0080.887] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e150) returned 0x0 [0080.887] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e150) returned 0x0 [0080.887] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.887] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e198) returned 0x0 [0080.887] GetCurrentObject (hdc=0x7701065f, type=0x1) returned 0x1b00017 [0080.887] GetCurrentObject (hdc=0x7701065f, type=0x2) returned 0x1900010 [0080.887] GetCurrentObject (hdc=0x7701065f, type=0x7) returned 0x160506a9 [0080.888] GetCurrentObject (hdc=0x7701065f, type=0x6) returned 0x18a0048 [0080.888] SaveDC (hdc=0x7701065f) returned 1 [0080.888] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffcd04095c [0080.888] GetClipRgn (hdc=0x7701065f, hrgn=0xffffffffcd04095c) returned 0 [0080.888] SelectClipRgn (hdc=0x7701065f, hrgn=0xffffffff8e0406c7) returned 2 [0080.888] DeleteObject (ho=0xffffffffcd04095c) returned 1 [0080.888] DeleteObject (ho=0xffffffff8e0406c7) returned 1 [0080.888] OffsetViewportOrgEx (in: hdc=0x7701065f, x=0, y=0, lppt=0x22c60f8 | out: lppt=0x22c60f8) returned 1 [0080.888] GetNearestColor (hdc=0x7701065f, color=0xf0f0f0) returned 0xf0f0f0 [0080.888] CreateSolidBrush (color=0xf0f0f0) returned 0x5f100559 [0080.888] FillRect (hDC=0x7701065f, lprc=0x14e1c8, hbr=0x5f100559) returned 1 [0080.888] DeleteObject (ho=0x5f100559) returned 1 [0080.888] RestoreDC (hdc=0x7701065f, nSavedDC=-1) returned 1 [0080.888] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x7701065f) returned 0x0 [0080.889] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.889] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x9a#\x02", lpUsedDefaultChar=0x0) returned 17 [0080.889] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.889] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22c61f8) returned 0x0 [0080.889] GdipSetStringFormatAlign (format=0x1beb7f40, align=0x1) returned 0x0 [0080.889] GdipSetStringFormatLineAlign (format=0x1beb7f40, align=0x1) returned 0x0 [0080.889] GdipSetStringFormatHotkeyPrefix (format=0x1beb7f40, hotkeyPrefix=1) returned 0x0 [0080.889] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0080.889] GdipDrawString (graphics=0x1beb67f0, string="1", length=1, font=0x1abeed70, layoutRect=0x14e338, stringFormat=0x1beb7f40, brush=0x1beb15e0) returned 0x0 [0080.889] GdipDeleteBrush (brush=0x1beb15e0) returned 0x0 [0080.889] GdipDeleteStringFormat (format=0x1beb7f40) returned 0x0 [0080.889] GetFocus () returned 0x0 [0080.891] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.891] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExS,\x02", lpUsedDefaultChar=0x0) returned 17 [0080.891] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.891] GdipCreateRegion (region=0x14e030) returned 0x0 [0080.891] GdipGetClip (graphics=0x1beb67f0, region=0x1beb15e0) returned 0x0 [0080.891] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0080.892] GdipGetWorldTransform (graphics=0x1beb67f0, matrix=0x1beb6e80) returned 0x0 [0080.892] GdipIsMatrixIdentity (matrix=0x1beb6e80, result=0x14e098) returned 0x0 [0080.892] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92d350 [0080.892] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92d350) returned 0x0 [0080.892] LocalFree (hMem=0x1d92d350) returned 0x0 [0080.892] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d92cf10 [0080.892] GdipGetMatrixElements (matrix=0x1beb6e80, matrixOut=0x1d92cf10) returned 0x0 [0080.892] LocalFree (hMem=0x1d92cf10) returned 0x0 [0080.892] GdipDeleteMatrix (matrix=0x1beb6e80) returned 0x0 [0080.892] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e100) returned 0x0 [0080.892] GdipIsInfiniteRegion (region=0x1beb15e0, graphics=0x1beb67f0, result=0x14e0c0) returned 0x0 [0080.892] GdipGetRegionHRgn (region=0x1beb15e0, graphics=0x1beb67f0, hRgn=0x14e0c0) returned 0x0 [0080.892] GdipDeleteRegion (region=0x1beb15e0) returned 0x0 [0080.892] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e108) returned 0x0 [0080.892] GetCurrentObject (hdc=0x7701065f, type=0x1) returned 0x1b00017 [0080.892] GetCurrentObject (hdc=0x7701065f, type=0x2) returned 0x1900010 [0080.892] GetCurrentObject (hdc=0x7701065f, type=0x7) returned 0x160506a9 [0080.892] GetCurrentObject (hdc=0x7701065f, type=0x6) returned 0x18a0048 [0080.892] SaveDC (hdc=0x7701065f) returned 1 [0080.892] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8f0406c7 [0080.892] GetClipRgn (hdc=0x7701065f, hrgn=0xffffffff8f0406c7) returned 0 [0080.893] SelectClipRgn (hdc=0x7701065f, hrgn=0xffffffffce04095c) returned 2 [0080.893] DeleteObject (ho=0xffffffff8f0406c7) returned 1 [0080.893] DeleteObject (ho=0xffffffffce04095c) returned 1 [0080.893] OffsetViewportOrgEx (in: hdc=0x7701065f, x=0, y=0, lppt=0x22c65e0 | out: lppt=0x22c65e0) returned 1 [0080.893] GetROP2 (hdc=0x7701065f) returned 13 [0080.893] GetBkMode (hdc=0x7701065f) returned 2 [0080.893] SetBkMode (hdc=0x7701065f, mode=1) returned 2 [0080.893] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x213009e5 [0080.893] SelectObject (hdc=0x7701065f, h=0x213009e5) returned 0x1b00017 [0080.893] MoveToEx (in: hdc=0x7701065f, x=25, y=0, lppt=0x22c6648 | out: lppt=0x22c6648) returned 1 [0080.893] LineTo (hdc=0x7701065f, x=0, y=0) returned 1 [0080.893] SetBkMode (hdc=0x7701065f, mode=2) returned 1 [0080.893] MoveToEx (in: hdc=0x7701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.893] GetROP2 (hdc=0x7701065f) returned 13 [0080.893] GetBkMode (hdc=0x7701065f) returned 2 [0080.893] SetBkMode (hdc=0x7701065f, mode=1) returned 2 [0080.893] SelectObject (hdc=0x7701065f, h=0x213009e5) returned 0x213009e5 [0080.893] MoveToEx (in: hdc=0x7701065f, x=0, y=0, lppt=0x22c6660 | out: lppt=0x22c6660) returned 1 [0080.893] LineTo (hdc=0x7701065f, x=0, y=22) returned 1 [0080.893] SetBkMode (hdc=0x7701065f, mode=2) returned 1 [0080.893] MoveToEx (in: hdc=0x7701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.893] SelectObject (hdc=0x7701065f, h=0x1b00017) returned 0x213009e5 [0080.894] DeleteObject (ho=0x213009e5) returned 1 [0080.894] GetROP2 (hdc=0x7701065f) returned 13 [0080.894] GetBkMode (hdc=0x7701065f) returned 2 [0080.894] SetBkMode (hdc=0x7701065f, mode=1) returned 2 [0080.894] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x1c3009e3 [0080.894] SelectObject (hdc=0x7701065f, h=0x1c3009e3) returned 0x1b00017 [0080.894] MoveToEx (in: hdc=0x7701065f, x=0, y=22, lppt=0x22c66c8 | out: lppt=0x22c66c8) returned 1 [0080.894] LineTo (hdc=0x7701065f, x=25, y=22) returned 1 [0080.894] SetBkMode (hdc=0x7701065f, mode=2) returned 1 [0080.894] MoveToEx (in: hdc=0x7701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.894] GetROP2 (hdc=0x7701065f) returned 13 [0080.894] GetBkMode (hdc=0x7701065f) returned 2 [0080.894] SetBkMode (hdc=0x7701065f, mode=1) returned 2 [0080.894] SelectObject (hdc=0x7701065f, h=0x1c3009e3) returned 0x1c3009e3 [0080.894] MoveToEx (in: hdc=0x7701065f, x=25, y=22, lppt=0x22c66e0 | out: lppt=0x22c66e0) returned 1 [0080.894] LineTo (hdc=0x7701065f, x=25, y=-1) returned 1 [0080.894] SetBkMode (hdc=0x7701065f, mode=2) returned 1 [0080.894] MoveToEx (in: hdc=0x7701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.894] SelectObject (hdc=0x7701065f, h=0x1b00017) returned 0x1c3009e3 [0080.894] DeleteObject (ho=0x1c3009e3) returned 1 [0080.894] GetROP2 (hdc=0x7701065f) returned 13 [0080.894] GetBkMode (hdc=0x7701065f) returned 2 [0080.894] SetBkMode (hdc=0x7701065f, mode=1) returned 2 [0080.895] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x223009e5 [0080.895] SelectObject (hdc=0x7701065f, h=0x223009e5) returned 0x1b00017 [0080.895] MoveToEx (in: hdc=0x7701065f, x=24, y=1, lppt=0x22c6748 | out: lppt=0x22c6748) returned 1 [0080.895] LineTo (hdc=0x7701065f, x=1, y=1) returned 1 [0080.895] SetBkMode (hdc=0x7701065f, mode=2) returned 1 [0080.895] MoveToEx (in: hdc=0x7701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.895] GetROP2 (hdc=0x7701065f) returned 13 [0080.895] GetBkMode (hdc=0x7701065f) returned 2 [0080.895] SetBkMode (hdc=0x7701065f, mode=1) returned 2 [0080.895] SelectObject (hdc=0x7701065f, h=0x223009e5) returned 0x223009e5 [0080.895] MoveToEx (in: hdc=0x7701065f, x=1, y=1, lppt=0x22c6760 | out: lppt=0x22c6760) returned 1 [0080.895] LineTo (hdc=0x7701065f, x=1, y=21) returned 1 [0080.895] SetBkMode (hdc=0x7701065f, mode=2) returned 1 [0080.895] MoveToEx (in: hdc=0x7701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.895] SelectObject (hdc=0x7701065f, h=0x1b00017) returned 0x223009e5 [0080.896] DeleteObject (ho=0x223009e5) returned 1 [0080.896] GetROP2 (hdc=0x7701065f) returned 13 [0080.896] GetBkMode (hdc=0x7701065f) returned 2 [0080.896] SetBkMode (hdc=0x7701065f, mode=1) returned 2 [0080.896] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x1d3009e3 [0080.896] SelectObject (hdc=0x7701065f, h=0x1d3009e3) returned 0x1b00017 [0080.896] MoveToEx (in: hdc=0x7701065f, x=1, y=21, lppt=0x22c67c8 | out: lppt=0x22c67c8) returned 1 [0080.896] LineTo (hdc=0x7701065f, x=24, y=21) returned 1 [0080.896] SetBkMode (hdc=0x7701065f, mode=2) returned 1 [0080.896] MoveToEx (in: hdc=0x7701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.896] GetROP2 (hdc=0x7701065f) returned 13 [0080.896] GetBkMode (hdc=0x7701065f) returned 2 [0080.896] SetBkMode (hdc=0x7701065f, mode=1) returned 2 [0080.896] SelectObject (hdc=0x7701065f, h=0x1d3009e3) returned 0x1d3009e3 [0080.896] MoveToEx (in: hdc=0x7701065f, x=24, y=21, lppt=0x22c67e0 | out: lppt=0x22c67e0) returned 1 [0080.896] LineTo (hdc=0x7701065f, x=24, y=0) returned 1 [0080.896] SetBkMode (hdc=0x7701065f, mode=2) returned 1 [0080.896] MoveToEx (in: hdc=0x7701065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.896] SelectObject (hdc=0x7701065f, h=0x1b00017) returned 0x1d3009e3 [0080.896] DeleteObject (ho=0x1d3009e3) returned 1 [0080.896] RestoreDC (hdc=0x7701065f, nSavedDC=-1) returned 1 [0080.896] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x7701065f) returned 0x0 [0080.897] GdipGetDC (graphics=0x1beb67f0, hdc=0x14e568) returned 0x0 [0080.897] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x7701065f, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.897] GdipReleaseDC (graphics=0x1beb67f0, hdc=0x7701065f) returned 0x0 [0080.897] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffab080693 [0080.897] SelectObject (hdc=0x7701065f, h=0x185000f) returned 0x160506a9 [0080.897] DeleteDC (hdc=0x7701065f) returned 1 [0080.897] GdipDeleteGraphics (graphics=0x1beb67f0) returned 0x0 [0080.897] EndPaint (hWnd=0x302e4, lpPaint=0x14e548) returned 1 [0080.897] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.897] IsWindowUnicode (hWnd=0x302de) returned 1 [0080.897] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.897] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.897] DispatchMessageW (lpMsg=0x14ef10) returned 0x1 [0080.897] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x302de, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0080.898] SetTextColor (hdc=0x1b0107ae, color=0x0) returned 0x0 [0080.898] SetBkColor (hdc=0x1b0107ae, color=0xffffff) returned 0xffffff [0080.899] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0080.899] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0080.899] WaitMessage () Thread: id = 2 os_tid = 0x13cc Thread: id = 3 os_tid = 0x13d8 Thread: id = 4 os_tid = 0x13dc [0051.844] CoGetContextToken (in: pToken=0x1a7afa80 | out: pToken=0x1a7afa80) returned 0x800401f0 [0051.844] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0051.844] RoInitialize () returned 0x1 [0051.844] RoUninitialize () returned 0x0 Thread: id = 5 os_tid = 0x13e8 Thread: id = 6 os_tid = 0x13f4 [0056.747] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0056.747] RoInitialize () returned 0x1 [0056.747] RoUninitialize () returned 0x0 [0058.574] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x51c00, lpName=0x0) returned 0x414 [0058.597] memcpy (in: _Dst=0x1e130000, _Src=0x122a7560, _Size=0x51c00 | out: _Dst=0x1e130000) returned 0x1e130000 [0058.678] GetEnvironmentVariableW (in: lpName="Temp", lpBuffer=0x1dbdf1a0, nSize=0x80 | out: lpBuffer="") returned 0x24 [0058.713] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x1dbded70, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0058.713] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\wwst.exe", nBufferLength=0x105, lpBuffer=0x1dbded90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\wwst.exe", lpFilePart=0x0) returned 0x31 [0058.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1dbdf270) returned 1 [0058.714] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\wwst.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\wwst.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x470 [0058.715] GetFileType (hFile=0x470) returned 0x1 [0058.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1dbdf1e0) returned 1 [0058.715] GetFileType (hFile=0x470) returned 0x1 [0058.722] WriteFile (in: hFile=0x470, lpBuffer=0x2257b28*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x1dbdf328, lpOverlapped=0x0 | out: lpBuffer=0x2257b28*, lpNumberOfBytesWritten=0x1dbdf328*=0x14000, lpOverlapped=0x0) returned 1 [0058.724] WriteFile (in: hFile=0x470, lpBuffer=0x2257b28*, nNumberOfBytesToWrite=0x14000, lpNumberOfBytesWritten=0x1dbdf328, lpOverlapped=0x0 | out: lpBuffer=0x2257b28*, lpNumberOfBytesWritten=0x1dbdf328*=0x14000, lpOverlapped=0x0) returned 1 [0058.726] WriteFile (in: hFile=0x470, lpBuffer=0x2257b28*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x1dbdf328, lpOverlapped=0x0 | out: lpBuffer=0x2257b28*, lpNumberOfBytesWritten=0x1dbdf328*=0x3c00, lpOverlapped=0x0) returned 1 [0058.729] CloseHandle (hObject=0x470) returned 1 [0058.735] GetEnvironmentVariableW (in: lpName="Temp", lpBuffer=0x1dbdf1a0, nSize=0x80 | out: lpBuffer="") returned 0x24 [0058.738] LocalAlloc (uFlags=0x0, uBytes=0x5c) returned 0x1d8f2c00 [0059.622] LocalFree (hMem=0x1d8f2c00) returned 0x0 [0059.622] CoUninitialize () Thread: id = 7 os_tid = 0x13f8 Thread: id = 8 os_tid = 0x13fc Thread: id = 9 os_tid = 0x838 Thread: id = 10 os_tid = 0x9e8 Thread: id = 11 os_tid = 0x8a4 Thread: id = 12 os_tid = 0x6b4 [0058.791] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0058.826] RoInitialize () returned 0x1 [0058.826] RoUninitialize () returned 0x0 [0058.826] ShellExecuteExW (in: pExecInfo=0x226bfd8*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\wwst.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x226bfd8*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\wwst.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x4b0)) returned 1 [0059.497] CoGetContextToken (in: pToken=0x1e28fb70 | out: pToken=0x1e28fb70) returned 0x0 [0059.498] CoUninitialize () Process: id = "2" image_name = "windowsdatac.exe" filename = "c:\\programdata\\windowsdatac.exe" page_root = "0x56492000" os_pid = "0x73c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13c4" cmd_line = "\"C:\\ProgramData\\WindowsDataC.exe\" " cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f213" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 636 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 637 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 638 start_va = 0x50000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 639 start_va = 0x150000 end_va = 0x153fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 640 start_va = 0x160000 end_va = 0x160fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 641 start_va = 0x170000 end_va = 0x171fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 642 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 643 start_va = 0x400000 end_va = 0x45bfff monitored = 1 entry_point = 0x454e8e region_type = mapped_file name = "windowsdatac.exe" filename = "\\ProgramData\\WindowsDataC.exe" (normalized: "c:\\programdata\\windowsdatac.exe") Region: id = 644 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 645 start_va = 0x7ff5fffd0000 end_va = 0x7ff5ffff2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5fffd0000" filename = "" Region: id = 646 start_va = 0x7ffd0d950000 end_va = 0x7ffd0db10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 665 start_va = 0x460000 end_va = 0x56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 666 start_va = 0x7ffd02120000 end_va = 0x7ffd02187fff monitored = 1 entry_point = 0x7ffd02124970 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 667 start_va = 0x7ffd0c220000 end_va = 0x7ffd0c2ccfff monitored = 0 entry_point = 0x7ffd0c2381a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 668 start_va = 0x7ffd0a070000 end_va = 0x7ffd0a257fff monitored = 0 entry_point = 0x7ffd0a09ba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 669 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 670 start_va = 0x7ff5ffed0000 end_va = 0x7ff5fffcffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ffed0000" filename = "" Region: id = 671 start_va = 0x570000 end_va = 0x62dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 672 start_va = 0x630000 end_va = 0x7dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000630000" filename = "" Region: id = 673 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 674 start_va = 0x7ffd07cf0000 end_va = 0x7ffd07d68fff monitored = 0 entry_point = 0x7ffd07d0fb90 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 675 start_va = 0x7ff5ffe50000 end_va = 0x7ff5ffecdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\apppatch64\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\apppatch64\\sysmain.sdb") Region: id = 676 start_va = 0x7ffd0b140000 end_va = 0x7ffd0b1e6fff monitored = 0 entry_point = 0x7ffd0b1558d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 677 start_va = 0x7ffd0b040000 end_va = 0x7ffd0b0dcfff monitored = 0 entry_point = 0x7ffd0b0478a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 678 start_va = 0x630000 end_va = 0x72ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000630000" filename = "" Region: id = 679 start_va = 0x7d0000 end_va = 0x7dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007d0000" filename = "" Region: id = 680 start_va = 0x180000 end_va = 0x186fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 681 start_va = 0x7ffd0ae20000 end_va = 0x7ffd0ae7afff monitored = 0 entry_point = 0x7ffd0ae338b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 682 start_va = 0x7ffd0b370000 end_va = 0x7ffd0b48bfff monitored = 0 entry_point = 0x7ffd0b3b02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 683 start_va = 0x7e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007e0000" filename = "" Region: id = 684 start_va = 0x190000 end_va = 0x196fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 685 start_va = 0x7ffcf5410000 end_va = 0x7ffcf54acfff monitored = 1 entry_point = 0x7ffcf5411010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 687 start_va = 0x7ffd0b310000 end_va = 0x7ffd0b361fff monitored = 0 entry_point = 0x7ffd0b31f530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 688 start_va = 0x7ffd0bfa0000 end_va = 0x7ffd0c21cfff monitored = 0 entry_point = 0x7ffd0c074970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 689 start_va = 0x7ffd0a000000 end_va = 0x7ffd0a069fff monitored = 0 entry_point = 0x7ffd0a036d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 690 start_va = 0x7ffd0b850000 end_va = 0x7ffd0b9d5fff monitored = 0 entry_point = 0x7ffd0b89ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 691 start_va = 0x7ffd0b490000 end_va = 0x7ffd0b5e5fff monitored = 0 entry_point = 0x7ffd0b49a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 692 start_va = 0x1a0000 end_va = 0x1d8fff monitored = 0 entry_point = 0x1a12f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 693 start_va = 0x8f0000 end_va = 0xa77fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008f0000" filename = "" Region: id = 694 start_va = 0x7ffd0b270000 end_va = 0x7ffd0b2aafff monitored = 0 entry_point = 0x7ffd0b2712f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 695 start_va = 0x1a0000 end_va = 0x1a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 696 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 697 start_va = 0xa80000 end_va = 0xc00fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a80000" filename = "" Region: id = 698 start_va = 0xc10000 end_va = 0x200ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c10000" filename = "" Region: id = 699 start_va = 0x730000 end_va = 0x783fff monitored = 1 entry_point = 0x784e8e region_type = mapped_file name = "windowsdatac.exe" filename = "\\ProgramData\\WindowsDataC.exe" (normalized: "c:\\programdata\\windowsdatac.exe") Region: id = 700 start_va = 0x7ffd09ff0000 end_va = 0x7ffd09ffefff monitored = 0 entry_point = 0x7ffd09ff3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 701 start_va = 0x7ffcfccf0000 end_va = 0x7ffcfccf9fff monitored = 0 entry_point = 0x7ffcfccf1350 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 702 start_va = 0x7ffcf08d0000 end_va = 0x7ffcf12b5fff monitored = 1 entry_point = 0x7ffcf08d5b60 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 703 start_va = 0x7ffcf3f90000 end_va = 0x7ffcf4086fff monitored = 0 entry_point = 0x7ffcf3fb4d80 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\System32\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll") Region: id = 704 start_va = 0x1c0000 end_va = 0x1c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 705 start_va = 0x1d0000 end_va = 0x1dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 706 start_va = 0x1e0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 707 start_va = 0x7ffc911d0000 end_va = 0x7ffc911dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc911d0000" filename = "" Region: id = 708 start_va = 0x7ffc911e0000 end_va = 0x7ffc911effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc911e0000" filename = "" Region: id = 709 start_va = 0x7ffc911f0000 end_va = 0x7ffc9127ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc911f0000" filename = "" Region: id = 710 start_va = 0x7ffc91280000 end_va = 0x7ffc912effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc91280000" filename = "" Region: id = 711 start_va = 0x1f0000 end_va = 0x1f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 712 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 713 start_va = 0x470000 end_va = 0x56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 714 start_va = 0x730000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000730000" filename = "" Region: id = 715 start_va = 0x7e0000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007e0000" filename = "" Region: id = 716 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 717 start_va = 0x2010000 end_va = 0x210ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002010000" filename = "" Region: id = 718 start_va = 0x730000 end_va = 0x73ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000730000" filename = "" Region: id = 719 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 720 start_va = 0x2110000 end_va = 0x1a10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002110000" filename = "" Region: id = 722 start_va = 0x1a110000 end_va = 0x1a47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a110000" filename = "" Region: id = 723 start_va = 0x1a480000 end_va = 0x1a589fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a480000" filename = "" Region: id = 724 start_va = 0x1a590000 end_va = 0x1a68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a590000" filename = "" Region: id = 746 start_va = 0x1a690000 end_va = 0x1a9c6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 747 start_va = 0x7ffcef3e0000 end_va = 0x7ffcf08c7fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\f89061884b75dab0e3967d7221e5290d\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\f89061884b75dab0e3967d7221e5290d\\mscorlib.ni.dll") Region: id = 762 start_va = 0x7ffd0ae80000 end_va = 0x7ffd0afc2fff monitored = 0 entry_point = 0x7ffd0aea8210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 763 start_va = 0x1a9d0000 end_va = 0x1aa8ffff monitored = 0 entry_point = 0x1a9f0da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 764 start_va = 0x1a9d0000 end_va = 0x1aaacfff monitored = 0 entry_point = 0x1aa2e0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 781 start_va = 0x7ffd088f0000 end_va = 0x7ffd08985fff monitored = 0 entry_point = 0x7ffd08915570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 782 start_va = 0x1a9d0000 end_va = 0x1abaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a9d0000" filename = "" Region: id = 809 start_va = 0x7ff5ffe30000 end_va = 0x7ff5ffecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff5ffe30000" filename = "" Region: id = 810 start_va = 0x7ff5ffe20000 end_va = 0x7ff5ffe2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff5ffe20000" filename = "" Region: id = 811 start_va = 0x7ffc912f0000 end_va = 0x7ffc912fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc912f0000" filename = "" Region: id = 827 start_va = 0x7ffcee790000 end_va = 0x7ffcef3d3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\60b77585c8aa9cfd1b30a64092c81041\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\60b77585c8aa9cfd1b30a64092c81041\\system.ni.dll") Region: id = 828 start_va = 0x7ffcf3da0000 end_va = 0x7ffcf3f8afff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\43de4a177616225e9b6262468e1c3b53\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\43de4a177616225e9b6262468e1c3b53\\system.drawing.ni.dll") Region: id = 849 start_va = 0x7ffced890000 end_va = 0x7ffcee780fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\37004ddc6f466d807c52ca3b7f9f9827\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\37004ddc6f466d807c52ca3b7f9f9827\\system.windows.forms.ni.dll") Region: id = 856 start_va = 0x7ffc91300000 end_va = 0x7ffc9133ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc91300000" filename = "" Region: id = 859 start_va = 0x7ffced780000 end_va = 0x7ffced88dfff monitored = 1 entry_point = 0x7ffced781080 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 862 start_va = 0x7ffd0ad50000 end_va = 0x7ffd0ae10fff monitored = 0 entry_point = 0x7ffd0ad70da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 865 start_va = 0x730000 end_va = 0x73ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000730000" filename = "" Region: id = 882 start_va = 0x860000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 898 start_va = 0x7ffcecdf0000 end_va = 0x7ffced771fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Core\\d1da4b8a843ec63bb8be25f8202bedc1\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.core\\d1da4b8a843ec63bb8be25f8202bedc1\\system.core.ni.dll") Region: id = 905 start_va = 0x7ffcecbc0000 end_va = 0x7ffcecde3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "microsoft.visualbasic.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.V9921e851#\\85a40a6654f0aac2a2c52d1deb4d3f17\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\microsoft.v9921e851#\\85a40a6654f0aac2a2c52d1deb4d3f17\\microsoft.visualbasic.ni.dll") Region: id = 908 start_va = 0x740000 end_va = 0x74ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000740000" filename = "" Region: id = 909 start_va = 0x740000 end_va = 0x74ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000740000" filename = "" Region: id = 910 start_va = 0x750000 end_va = 0x75ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000750000" filename = "" Region: id = 911 start_va = 0x760000 end_va = 0x76ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000760000" filename = "" Region: id = 912 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 915 start_va = 0x780000 end_va = 0x78ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000780000" filename = "" Region: id = 917 start_va = 0x740000 end_va = 0x74ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000740000" filename = "" Region: id = 918 start_va = 0x750000 end_va = 0x75ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000750000" filename = "" Region: id = 919 start_va = 0x760000 end_va = 0x76ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000760000" filename = "" Region: id = 924 start_va = 0x1a9d0000 end_va = 0x1aa75fff monitored = 0 entry_point = 0x1a9d93e0 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_396e892957c7fb25\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_396e892957c7fb25\\comctl32.dll") Region: id = 925 start_va = 0x1aba0000 end_va = 0x1abaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aba0000" filename = "" Region: id = 926 start_va = 0x7ffcf40a0000 end_va = 0x7ffcf4149fff monitored = 0 entry_point = 0x7ffcf40a93e0 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_396e892957c7fb25\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_396e892957c7fb25\\comctl32.dll") Region: id = 927 start_va = 0x1a9d0000 end_va = 0x1ab1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a9d0000" filename = "" Region: id = 928 start_va = 0x740000 end_va = 0x740fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000740000" filename = "" Region: id = 929 start_va = 0x1a9d0000 end_va = 0x1aa8bfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001a9d0000" filename = "" Region: id = 930 start_va = 0x1ab10000 end_va = 0x1ab1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab10000" filename = "" Region: id = 931 start_va = 0x740000 end_va = 0x743fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000740000" filename = "" Region: id = 932 start_va = 0x750000 end_va = 0x756fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000750000" filename = "" Region: id = 935 start_va = 0x7ffd077f0000 end_va = 0x7ffd07811fff monitored = 0 entry_point = 0x7ffd077f1a40 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 937 start_va = 0x760000 end_va = 0x76ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000760000" filename = "" Region: id = 938 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 948 start_va = 0x760000 end_va = 0x76ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000760000" filename = "" Region: id = 949 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 950 start_va = 0x780000 end_va = 0x78ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000780000" filename = "" Region: id = 951 start_va = 0x7a0000 end_va = 0x7affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007a0000" filename = "" Region: id = 952 start_va = 0x7b0000 end_va = 0x7bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007b0000" filename = "" Region: id = 953 start_va = 0x7c0000 end_va = 0x7cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007c0000" filename = "" Region: id = 954 start_va = 0x7e0000 end_va = 0x7effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007e0000" filename = "" Region: id = 955 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 956 start_va = 0x7f0000 end_va = 0x7fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007f0000" filename = "" Region: id = 957 start_va = 0x800000 end_va = 0x80ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000800000" filename = "" Region: id = 958 start_va = 0x810000 end_va = 0x81ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000810000" filename = "" Region: id = 959 start_va = 0x820000 end_va = 0x82ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000820000" filename = "" Region: id = 960 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 961 start_va = 0x840000 end_va = 0x84ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 962 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 963 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 971 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 972 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 973 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 974 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 975 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 976 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 977 start_va = 0x1aa90000 end_va = 0x1aa9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa90000" filename = "" Region: id = 978 start_va = 0x1aaa0000 end_va = 0x1aaaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aaa0000" filename = "" Region: id = 979 start_va = 0x1aab0000 end_va = 0x1aabffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aab0000" filename = "" Region: id = 980 start_va = 0x1aac0000 end_va = 0x1aacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aac0000" filename = "" Region: id = 984 start_va = 0x1aad0000 end_va = 0x1aadffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aad0000" filename = "" Region: id = 985 start_va = 0x1aae0000 end_va = 0x1aaeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aae0000" filename = "" Region: id = 986 start_va = 0x1aaf0000 end_va = 0x1aafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aaf0000" filename = "" Region: id = 987 start_va = 0x1ab00000 end_va = 0x1ab0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab00000" filename = "" Region: id = 988 start_va = 0x1ab20000 end_va = 0x1ab2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab20000" filename = "" Region: id = 989 start_va = 0x1ab30000 end_va = 0x1ab3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab30000" filename = "" Region: id = 990 start_va = 0x1ab40000 end_va = 0x1ab4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab40000" filename = "" Region: id = 991 start_va = 0x1ab50000 end_va = 0x1ab5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab50000" filename = "" Region: id = 992 start_va = 0x1ab60000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab60000" filename = "" Region: id = 993 start_va = 0x1ab70000 end_va = 0x1ab7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab70000" filename = "" Region: id = 994 start_va = 0x1ab80000 end_va = 0x1ab8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab80000" filename = "" Region: id = 995 start_va = 0x1ab90000 end_va = 0x1ab9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab90000" filename = "" Region: id = 996 start_va = 0x1abb0000 end_va = 0x1abbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abb0000" filename = "" Region: id = 997 start_va = 0x1abc0000 end_va = 0x1abcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abc0000" filename = "" Region: id = 998 start_va = 0x1abd0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abd0000" filename = "" Region: id = 999 start_va = 0x1abf0000 end_va = 0x1ac0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 1000 start_va = 0x1ac10000 end_va = 0x1ac3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 1001 start_va = 0x1ac40000 end_va = 0x1ac6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac40000" filename = "" Region: id = 1002 start_va = 0x1ac70000 end_va = 0x1ac7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac70000" filename = "" Region: id = 1003 start_va = 0x1ac80000 end_va = 0x1ac8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac80000" filename = "" Region: id = 1004 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 1005 start_va = 0x1aca0000 end_va = 0x1acaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aca0000" filename = "" Region: id = 1006 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1007 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1008 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1009 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1010 start_va = 0x1acf0000 end_va = 0x1acfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acf0000" filename = "" Region: id = 1011 start_va = 0x1ad00000 end_va = 0x1ad0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad00000" filename = "" Region: id = 1012 start_va = 0x1ad10000 end_va = 0x1ad1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad10000" filename = "" Region: id = 1013 start_va = 0x1ad20000 end_va = 0x1ad2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad20000" filename = "" Region: id = 1014 start_va = 0x1ad30000 end_va = 0x1ad3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad30000" filename = "" Region: id = 1015 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 1016 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 1017 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 1018 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 1019 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 1020 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 1021 start_va = 0x760000 end_va = 0x76ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000760000" filename = "" Region: id = 1022 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1023 start_va = 0x780000 end_va = 0x78ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000780000" filename = "" Region: id = 1024 start_va = 0x7a0000 end_va = 0x7affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007a0000" filename = "" Region: id = 1025 start_va = 0x7b0000 end_va = 0x7bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007b0000" filename = "" Region: id = 1026 start_va = 0x7c0000 end_va = 0x7cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007c0000" filename = "" Region: id = 1027 start_va = 0x7e0000 end_va = 0x7effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007e0000" filename = "" Region: id = 1028 start_va = 0x7f0000 end_va = 0x7fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007f0000" filename = "" Region: id = 1029 start_va = 0x800000 end_va = 0x80ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000800000" filename = "" Region: id = 1030 start_va = 0x810000 end_va = 0x81ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000810000" filename = "" Region: id = 1031 start_va = 0x820000 end_va = 0x82ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000820000" filename = "" Region: id = 1032 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1033 start_va = 0x840000 end_va = 0x84ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 1034 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 1035 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 1036 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 1037 start_va = 0x890000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 1038 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 1039 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 1040 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1041 start_va = 0x1aa90000 end_va = 0x1aa9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa90000" filename = "" Region: id = 1042 start_va = 0x1aaa0000 end_va = 0x1aaaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aaa0000" filename = "" Region: id = 1044 start_va = 0x1aab0000 end_va = 0x1aabffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aab0000" filename = "" Region: id = 1045 start_va = 0x1aac0000 end_va = 0x1aacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aac0000" filename = "" Region: id = 1046 start_va = 0x1aad0000 end_va = 0x1aadffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aad0000" filename = "" Region: id = 1047 start_va = 0x1aae0000 end_va = 0x1aaeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aae0000" filename = "" Region: id = 1048 start_va = 0x1aaf0000 end_va = 0x1ab0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aaf0000" filename = "" Region: id = 1049 start_va = 0x1ab20000 end_va = 0x1ab4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab20000" filename = "" Region: id = 1050 start_va = 0x1ab50000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab50000" filename = "" Region: id = 1051 start_va = 0x1abb0000 end_va = 0x1ac0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abb0000" filename = "" Region: id = 1052 start_va = 0x1ab70000 end_va = 0x1ab9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab70000" filename = "" Region: id = 1053 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 1054 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 1055 start_va = 0x1ac30000 end_va = 0x1ac3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac30000" filename = "" Region: id = 1056 start_va = 0x1ac40000 end_va = 0x1ac4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac40000" filename = "" Region: id = 1057 start_va = 0x1ac50000 end_va = 0x1ac5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac50000" filename = "" Region: id = 1058 start_va = 0x1ac60000 end_va = 0x1ac6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac60000" filename = "" Region: id = 1059 start_va = 0x1ac70000 end_va = 0x1ac7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac70000" filename = "" Region: id = 1060 start_va = 0x1ac80000 end_va = 0x1ac8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac80000" filename = "" Region: id = 1063 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 1065 start_va = 0x7ffcf8190000 end_va = 0x7ffcf8338fff monitored = 0 entry_point = 0x7ffcf81e4060 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_0bdd1d3064f6384a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_0bdd1d3064f6384a\\gdiplus.dll") Region: id = 1066 start_va = 0x1abb0000 end_va = 0x1ad3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abb0000" filename = "" Region: id = 1067 start_va = 0x1abb0000 end_va = 0x1acaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abb0000" filename = "" Region: id = 1068 start_va = 0x1ad30000 end_va = 0x1ad3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad30000" filename = "" Region: id = 1069 start_va = 0x7ffd03990000 end_va = 0x7ffd03beffff monitored = 0 entry_point = 0x7ffd03a3b5b0 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\System32\\DWrite.dll" (normalized: "c:\\windows\\system32\\dwrite.dll") Region: id = 1070 start_va = 0x7e0000 end_va = 0x828fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-system.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-System.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-system.dat") Region: id = 1071 start_va = 0x1ad40000 end_va = 0x1ae3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 1072 start_va = 0x7ffd0ba00000 end_va = 0x7ffd0bb59fff monitored = 0 entry_point = 0x7ffd0ba438e0 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1073 start_va = 0x1ae40000 end_va = 0x1be3ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-fontface.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-FontFace.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-fontface.dat") Region: id = 1074 start_va = 0x760000 end_va = 0x766fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000760000" filename = "" Region: id = 1075 start_va = 0x1be40000 end_va = 0x1bf3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001be40000" filename = "" Region: id = 1076 start_va = 0x1bf40000 end_va = 0x1c431fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bf40000" filename = "" Region: id = 1077 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1078 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1079 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1080 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1081 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1083 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1084 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1085 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1088 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1089 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1090 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1091 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1092 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1097 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1098 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1099 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1103 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1104 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1108 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1109 start_va = 0x780000 end_va = 0x78ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000780000" filename = "" Region: id = 1114 start_va = 0x7ffc91340000 end_va = 0x7ffc9134ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc91340000" filename = "" Region: id = 1118 start_va = 0x7ffc91350000 end_va = 0x7ffc9135ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc91350000" filename = "" Region: id = 1136 start_va = 0x860000 end_va = 0x897fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000860000" filename = "" Region: id = 1137 start_va = 0x770000 end_va = 0x770fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000770000" filename = "" Region: id = 1138 start_va = 0x7ffd0a260000 end_va = 0x7ffd0a314fff monitored = 0 entry_point = 0x7ffd0a2a22e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 1139 start_va = 0x780000 end_va = 0x780fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000780000" filename = "" Region: id = 1140 start_va = 0x7a0000 end_va = 0x7a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007a0000" filename = "" Region: id = 1141 start_va = 0x1c440000 end_va = 0x1d47ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 1142 start_va = 0x1d480000 end_va = 0x1d57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d480000" filename = "" Region: id = 1146 start_va = 0x7b0000 end_va = 0x7b4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 1147 start_va = 0x7c0000 end_va = 0x7c6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007c0000" filename = "" Region: id = 1148 start_va = 0x1d580000 end_va = 0x1d67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d580000" filename = "" Region: id = 1149 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1150 start_va = 0x840000 end_va = 0x84ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 1151 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1152 start_va = 0x1d680000 end_va = 0x1d77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d680000" filename = "" Region: id = 1153 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1154 start_va = 0x840000 end_va = 0x84ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 1155 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 1156 start_va = 0x840000 end_va = 0x84ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 1157 start_va = 0x7ffc91360000 end_va = 0x7ffc9136ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc91360000" filename = "" Region: id = 1158 start_va = 0x840000 end_va = 0x84ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 1159 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 1160 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 1161 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1165 start_va = 0x840000 end_va = 0x84ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 1166 start_va = 0x840000 end_va = 0x84ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 1167 start_va = 0x840000 end_va = 0x84ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 1168 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1169 start_va = 0x840000 end_va = 0x84ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 1170 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 1171 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 1172 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1173 start_va = 0x1aa90000 end_va = 0x1aa9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa90000" filename = "" Region: id = 1174 start_va = 0x1aaa0000 end_va = 0x1aaaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aaa0000" filename = "" Region: id = 1175 start_va = 0x1aab0000 end_va = 0x1aabffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aab0000" filename = "" Region: id = 1176 start_va = 0x1aac0000 end_va = 0x1aacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aac0000" filename = "" Region: id = 1177 start_va = 0x1aad0000 end_va = 0x1aadffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aad0000" filename = "" Region: id = 1178 start_va = 0x1aae0000 end_va = 0x1aaeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aae0000" filename = "" Region: id = 1179 start_va = 0x1aaf0000 end_va = 0x1aafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aaf0000" filename = "" Region: id = 1180 start_va = 0x1ab00000 end_va = 0x1ab0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab00000" filename = "" Region: id = 1181 start_va = 0x1ab20000 end_va = 0x1ab2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab20000" filename = "" Region: id = 1182 start_va = 0x1ab30000 end_va = 0x1ab3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab30000" filename = "" Region: id = 1183 start_va = 0x1ab40000 end_va = 0x1ab4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab40000" filename = "" Region: id = 1184 start_va = 0x1ab50000 end_va = 0x1ab5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab50000" filename = "" Region: id = 1188 start_va = 0x7ffd0c2d0000 end_va = 0x7ffd0d82efff monitored = 0 entry_point = 0x7ffd0c4311f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 1189 start_va = 0x7ffd0ac50000 end_va = 0x7ffd0ac92fff monitored = 0 entry_point = 0x7ffd0ac64b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1190 start_va = 0x7ffd0a320000 end_va = 0x7ffd0a963fff monitored = 0 entry_point = 0x7ffd0a4e64b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 1191 start_va = 0x7ffd09f90000 end_va = 0x7ffd09fdafff monitored = 0 entry_point = 0x7ffd09f935f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 1192 start_va = 0x7ffd09f70000 end_va = 0x7ffd09f83fff monitored = 0 entry_point = 0x7ffd09f752e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1193 start_va = 0x1ab60000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab60000" filename = "" Region: id = 1194 start_va = 0x1ab60000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab60000" filename = "" Region: id = 1195 start_va = 0x1ab70000 end_va = 0x1ab7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab70000" filename = "" Region: id = 1196 start_va = 0x1ab80000 end_va = 0x1ab8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab80000" filename = "" Region: id = 1197 start_va = 0x1ab90000 end_va = 0x1ab9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab90000" filename = "" Region: id = 1199 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1200 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1201 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1202 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1203 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1204 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 1205 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 1206 start_va = 0x1acf0000 end_va = 0x1acfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acf0000" filename = "" Region: id = 1207 start_va = 0x1ad00000 end_va = 0x1ad0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad00000" filename = "" Region: id = 1208 start_va = 0x1ad10000 end_va = 0x1ad1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad10000" filename = "" Region: id = 1209 start_va = 0x1ad20000 end_va = 0x1ad2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad20000" filename = "" Region: id = 1210 start_va = 0x1d780000 end_va = 0x1d78ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d780000" filename = "" Region: id = 1214 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1215 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1216 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1217 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1218 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 1219 start_va = 0x1d790000 end_va = 0x1d79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d790000" filename = "" Region: id = 1220 start_va = 0x1d7a0000 end_va = 0x1d7affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d7a0000" filename = "" Region: id = 1221 start_va = 0x1d7b0000 end_va = 0x1d7bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d7b0000" filename = "" Region: id = 1222 start_va = 0x1d7c0000 end_va = 0x1d7cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d7c0000" filename = "" Region: id = 1223 start_va = 0x1d7d0000 end_va = 0x1d7dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d7d0000" filename = "" Region: id = 1224 start_va = 0x1d7e0000 end_va = 0x1d7effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d7e0000" filename = "" Region: id = 1225 start_va = 0x1d7f0000 end_va = 0x1d7fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d7f0000" filename = "" Region: id = 1226 start_va = 0x1d800000 end_va = 0x1d81ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d800000" filename = "" Region: id = 1227 start_va = 0x1d820000 end_va = 0x1d83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d820000" filename = "" Region: id = 1228 start_va = 0x1d840000 end_va = 0x1d86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d840000" filename = "" Region: id = 1229 start_va = 0x1d870000 end_va = 0x1d89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d870000" filename = "" Region: id = 1230 start_va = 0x1d8a0000 end_va = 0x1d8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d8a0000" filename = "" Region: id = 1231 start_va = 0x1d8b0000 end_va = 0x1d8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d8b0000" filename = "" Region: id = 1232 start_va = 0x1d8c0000 end_va = 0x1d8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d8c0000" filename = "" Region: id = 1233 start_va = 0x1d8d0000 end_va = 0x1d8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d8d0000" filename = "" Region: id = 1234 start_va = 0x1d8e0000 end_va = 0x1d8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d8e0000" filename = "" Region: id = 1235 start_va = 0x1d8f0000 end_va = 0x1d8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d8f0000" filename = "" Region: id = 1236 start_va = 0x1d900000 end_va = 0x1d90ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d900000" filename = "" Region: id = 1237 start_va = 0x1d910000 end_va = 0x1d91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d910000" filename = "" Region: id = 1238 start_va = 0x1d920000 end_va = 0x1d92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d920000" filename = "" Region: id = 1239 start_va = 0x1d930000 end_va = 0x1d93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d930000" filename = "" Region: id = 1240 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1241 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1242 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1243 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1244 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 1245 start_va = 0x1d940000 end_va = 0x1d94ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d940000" filename = "" Region: id = 1246 start_va = 0x1d950000 end_va = 0x1d95ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d950000" filename = "" Region: id = 1247 start_va = 0x1d960000 end_va = 0x1d96ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d960000" filename = "" Region: id = 1248 start_va = 0x1d970000 end_va = 0x1d97ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d970000" filename = "" Region: id = 1249 start_va = 0x1d980000 end_va = 0x1d98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d980000" filename = "" Region: id = 1250 start_va = 0x1d990000 end_va = 0x1d99ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d990000" filename = "" Region: id = 1252 start_va = 0x1ab60000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab60000" filename = "" Region: id = 1255 start_va = 0x1ab60000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab60000" filename = "" Region: id = 1256 start_va = 0x1ab60000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab60000" filename = "" Region: id = 1257 start_va = 0x1ab60000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab60000" filename = "" Region: id = 1258 start_va = 0x1ab60000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab60000" filename = "" Region: id = 1260 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1261 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1262 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1263 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1264 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1265 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1266 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1267 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1268 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1273 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1274 start_va = 0x840000 end_va = 0x84ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 1275 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 1276 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 1277 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1278 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1279 start_va = 0x1aa90000 end_va = 0x1aaf1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscorrc.dll") Region: id = 1280 start_va = 0x1ab20000 end_va = 0x1ab71fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ab20000" filename = "" Region: id = 1283 start_va = 0x1d680000 end_va = 0x1d75cfff monitored = 0 entry_point = 0x1d6de0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 1291 start_va = 0x1d780000 end_va = 0x1d87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d780000" filename = "" Region: id = 1292 start_va = 0x1d880000 end_va = 0x1d97ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d880000" filename = "" Region: id = 1293 start_va = 0x1d980000 end_va = 0x1da7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d980000" filename = "" Region: id = 1300 start_va = 0x830000 end_va = 0x830fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000830000" filename = "" Region: id = 1326 start_va = 0x830000 end_va = 0x830fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1327 start_va = 0x860000 end_va = 0x897fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000860000" filename = "" Region: id = 1330 start_va = 0x1d680000 end_va = 0x1d73cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 1331 start_va = 0x1da80000 end_va = 0x1e27ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-s-1-5-21-1560258661-3990802383-1811730007-1000.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-S-1-5-21-1560258661-3990802383-1811730007-1000.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-s-1-5-21-1560258661-3990802383-1811730007-1000.dat") Region: id = 1333 start_va = 0x830000 end_va = 0x831fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1334 start_va = 0x840000 end_va = 0x840fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 1348 start_va = 0x860000 end_va = 0x897fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000860000" filename = "" Region: id = 1365 start_va = 0x860000 end_va = 0x897fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000860000" filename = "" Region: id = 1837 start_va = 0x1acb0000 end_va = 0x1ad29fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001acb0000" filename = "" Thread: id = 13 os_tid = 0xdbc [0060.551] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0061.148] RoInitialize () returned 0x1 [0061.148] RoUninitialize () returned 0x0 [0064.872] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc210 [0064.873] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc20f [0065.175] GetSystemMetrics (nIndex=75) returned 1 [0065.179] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0065.182] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7ffcf40a0000 [0065.206] AdjustWindowRectEx (in: lpRect=0x14e590, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x14e590) returned 1 [0065.263] GetCurrentProcess () returned 0xffffffffffffffff [0065.263] GetCurrentThread () returned 0xfffffffffffffffe [0065.263] GetCurrentProcess () returned 0xffffffffffffffff [0065.264] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x14e3a0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x14e3a0*=0x250) returned 1 [0065.280] GetCurrentThreadId () returned 0xdbc [0065.294] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0065.299] GetModuleHandleW (lpModuleName="user32.dll") returned 0x7ffd0b490000 [0065.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0x14dfd0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcW", lpUsedDefaultChar=0x0) returned 14 [0065.299] GetProcAddress (hModule=0x7ffd0b490000, lpProcName="DefWindowProcW") returned 0x7ffd0d9f4a40 [0065.300] GetStockObject (i=5) returned 0x1900015 [0065.305] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0065.306] CoTaskMemAlloc (cb=0x5a) returned 0x50c830 [0065.306] RegisterClassW (lpWndClass=0x14df90) returned 0xc150 [0065.307] CoTaskMemFree (pv=0x50c830) [0065.307] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0065.307] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.1ca0192_r8_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x30352 [0065.351] SetWindowLongPtrW (hWnd=0x30352, nIndex=-4, dwNewLong=0x7ffd0d9f4a40) returned 0x8d089c [0065.356] GetWindowLongPtrW (hWnd=0x30352, nIndex=-4) returned 0x7ffd0d9f4a40 [0065.364] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x14d358 | out: phkResult=0x14d358*=0x254) returned 0x0 [0065.366] RegQueryValueExW (in: hKey=0x254, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x14d3a8, lpData=0x0, lpcbData=0x14d3a0*=0x0 | out: lpType=0x14d3a8*=0x0, lpData=0x0, lpcbData=0x14d3a0*=0x0) returned 0x2 [0065.366] RegQueryValueExW (in: hKey=0x254, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x14d3a8, lpData=0x0, lpcbData=0x14d3a0*=0x0 | out: lpType=0x14d3a8*=0x0, lpData=0x0, lpcbData=0x14d3a0*=0x0) returned 0x2 [0065.367] RegCloseKey (hKey=0x254) returned 0x0 [0065.369] SetWindowLongPtrW (hWnd=0x30352, nIndex=-4, dwNewLong=0x8d08ec) returned 0x7ffd0d9f4a40 [0065.369] GetWindowLongPtrW (hWnd=0x30352, nIndex=-4) returned 0x8d08ec [0065.369] GetWindowLongPtrW (hWnd=0x30352, nIndex=-16) returned 0x6c10000 [0065.371] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc20b [0065.372] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x30352, Msg=0x24, wParam=0x0, lParam=0x14d9b0) returned 0x0 [0065.372] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc20c [0065.373] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x30352, Msg=0x81, wParam=0x0, lParam=0x14d920) returned 0x1 [0065.373] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x30352, Msg=0x83, wParam=0x0, lParam=0x14d9d0) returned 0x0 [0065.377] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x30352, Msg=0x1, wParam=0x0, lParam=0x14d920) returned 0x0 [0065.378] GetClientRect (in: hWnd=0x30352, lpRect=0x14d3b0 | out: lpRect=0x14d3b0) returned 1 [0065.378] GetWindowRect (in: hWnd=0x30352, lpRect=0x14d3b0 | out: lpRect=0x14d3b0) returned 1 [0065.382] GetParent (hWnd=0x30352) returned 0x0 [0067.361] GetSystemDefaultLCID () returned 0x409 [0067.361] GetStockObject (i=17) returned 0x10a0047 [0067.363] GetObjectW (in: h=0x10a0047, c=92, pv=0x14d6e0 | out: pv=0x14d6e0) returned 92 [0067.521] GetDC (hWnd=0x0) returned 0x220106d6 [0067.530] GdiplusStartup (in: token=0x7ffc911e6f40, input=0x14bfa8, output=0x14c058 | out: token=0x7ffc911e6f40, output=0x14c058) returned 0x0 [0067.536] CoTaskMemAlloc (cb=0x5c) returned 0x50ce50 [0067.537] GdipCreateFontFromLogfontW (hdc=0x220106d6, logfont=0x50ce50, font=0x14d820) returned 0x0 [0067.762] CoTaskMemFree (pv=0x50ce50) [0067.763] CoTaskMemAlloc (cb=0x5c) returned 0x50ce50 [0067.763] CoTaskMemFree (pv=0x50ce50) [0067.763] CoTaskMemAlloc (cb=0x5c) returned 0x50ce50 [0067.763] CoTaskMemFree (pv=0x50ce50) [0067.764] GdipGetFontUnit (font=0x1ad334f0, unit=0x14d790) returned 0x0 [0067.765] GdipGetFontSize (font=0x1ad334f0, size=0x14d79c) returned 0x0 [0067.765] GdipGetFontStyle (font=0x1ad334f0, style=0x14d788) returned 0x0 [0067.765] GdipGetFamily (font=0x1ad334f0, family=0x14d780) returned 0x0 [0067.767] GdipGetFontSize (font=0x1ad334f0, size=0x2120f58) returned 0x0 [0067.767] ReleaseDC (hWnd=0x0, hDC=0x220106d6) returned 1 [0067.769] GetDC (hWnd=0x0) returned 0x1b0107ae [0067.770] GdipCreateFromHDC (hdc=0x1b0107ae, graphics=0x14d798) returned 0x0 [0067.876] GdipGetDpiY (graphics=0x1be567f0, dpi=0x2121130) returned 0x0 [0067.877] GdipGetFontHeight (font=0x1ad334f0, graphics=0x1be567f0, height=0x14d794) returned 0x0 [0067.877] GdipGetEmHeight (family=0x1be48920, style=0, EmHeight=0x14d798) returned 0x0 [0067.879] GdipGetLineSpacing (family=0x1be48920, style=0, LineSpacing=0x14d798) returned 0x0 [0067.879] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0067.879] ReleaseDC (hWnd=0x0, hDC=0x1b0107ae) returned 1 [0067.885] GdipCreateFont (fontFamily=0x1be48920, emSize=0x7ffcf3e0d4a5, style=0, unit=0x3, font=0x21210c0) returned 0x0 [0067.885] GdipGetFontSize (font=0x1ad3ed70, size=0x21210c8) returned 0x0 [0067.885] GdipDeleteFont (font=0x1ad334f0) returned 0x0 [0067.887] GetDC (hWnd=0x0) returned 0x1b0107ae [0067.887] GdipCreateFromHDC (hdc=0x1b0107ae, graphics=0x14d8f8) returned 0x0 [0067.888] GdipGetFontHeight (font=0x1ad3ed70, graphics=0x1be567f0, height=0x14d8f4) returned 0x0 [0067.888] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0067.888] ReleaseDC (hWnd=0x0, hDC=0x1b0107ae) returned 1 [0067.888] GetSystemMetrics (nIndex=5) returned 1 [0067.888] GetSystemMetrics (nIndex=6) returned 1 [0067.889] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0067.889] AdjustWindowRectEx (in: lpRect=0x14dba0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14dba0) returned 1 [0067.902] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0067.903] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0068.031] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.031] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0068.512] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.512] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0068.538] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.539] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0068.825] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.825] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0068.992] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0068.992] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0069.019] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.019] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0069.181] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.181] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0069.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.351] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0069.509] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.510] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0069.678] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.678] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0069.706] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.706] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0069.846] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.846] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0069.875] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.875] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0069.997] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0069.997] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0070.149] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0070.150] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0070.271] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0070.271] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0070.298] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0070.298] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0070.418] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0070.418] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0070.560] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x14db50) returned 0x0 [0070.561] GdipCreateFont (fontFamily=0x1be48920, emSize=0x7ffcf3e0d4a5, style=1, unit=0x3, font=0x2124d38) returned 0x0 [0070.561] GdipGetFontSize (font=0x1ad334f0, size=0x2124d40) returned 0x0 [0070.568] GetDC (hWnd=0x0) returned 0x220106d6 [0070.568] GdipCreateFromHDC (hdc=0x220106d6, graphics=0x14da78) returned 0x0 [0070.569] GdipGetFontHeight (font=0x1ad334f0, graphics=0x1be567f0, height=0x14da74) returned 0x0 [0070.569] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0070.569] ReleaseDC (hWnd=0x0, hDC=0x220106d6) returned 1 [0070.575] GetDC (hWnd=0x0) returned 0x220106d6 [0070.575] GdipCreateFromHDC (hdc=0x220106d6, graphics=0x14d948) returned 0x0 [0070.575] GdipGetFontHeight (font=0x1ad334f0, graphics=0x1be567f0, height=0x14d944) returned 0x0 [0070.575] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0070.575] ReleaseDC (hWnd=0x0, hDC=0x220106d6) returned 1 [0070.575] GetSystemMetrics (nIndex=5) returned 1 [0070.576] GetSystemMetrics (nIndex=6) returned 1 [0070.576] GetSystemMetrics (nIndex=5) returned 1 [0070.576] GetSystemMetrics (nIndex=6) returned 1 [0070.576] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0070.577] AdjustWindowRectEx (in: lpRect=0x14d998, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d998) returned 1 [0070.582] GetSystemMetrics (nIndex=5) returned 1 [0070.582] GetSystemMetrics (nIndex=6) returned 1 [0070.582] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0070.660] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14da78) returned 1 [0070.680] GetSystemMetrics (nIndex=5) returned 1 [0070.680] GetSystemMetrics (nIndex=6) returned 1 [0070.680] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0070.680] AdjustWindowRectEx (in: lpRect=0x14d998, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d998) returned 1 [0070.680] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0070.680] AdjustWindowRectEx (in: lpRect=0x14d998, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d998) returned 1 [0070.689] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0070.689] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14da78) returned 1 [0070.776] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0070.777] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0070.800] GetProcessWindowStation () returned 0xcc [0070.801] GetUserObjectInformationA (in: hObj=0xcc, nIndex=1, pvInfo=0x21259c0, nLength=0xc, lpnLengthNeeded=0x14d6f0 | out: pvInfo=0x21259c0, lpnLengthNeeded=0x14d6f0) returned 1 [0070.803] SetConsoleCtrlHandler (HandlerRoutine=0x8d093c, Add=1) returned 1 [0070.803] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0070.804] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0070.805] GetClassInfoW (in: hInstance=0x400000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.1ca0192.0", lpWndClass=0x2125a80 | out: lpWndClass=0x2125a80) returned 0 [0070.806] CoTaskMemAlloc (cb=0x58) returned 0x510fe0 [0070.806] RegisterClassW (lpWndClass=0x14d500) returned 0xc211 [0070.806] CoTaskMemFree (pv=0x510fe0) [0070.807] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.1ca0192.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.1ca0192.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x30304 [0070.808] NtdllDefWindowProc_W (hWnd=0x30304, Msg=0x81, wParam=0x0, lParam=0x14ce20) returned 0x1 [0070.811] NtdllDefWindowProc_W (hWnd=0x30304, Msg=0x83, wParam=0x0, lParam=0x14ced0) returned 0x0 [0070.811] NtdllDefWindowProc_W (hWnd=0x30304, Msg=0x1, wParam=0x0, lParam=0x14cdc0) returned 0x0 [0070.811] NtdllDefWindowProc_W (hWnd=0x30304, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0070.811] NtdllDefWindowProc_W (hWnd=0x30304, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0070.814] GetSysColor (nIndex=10) returned 0xb4b4b4 [0070.814] GetSysColor (nIndex=2) returned 0xd1b499 [0070.814] GetSysColor (nIndex=9) returned 0x0 [0070.814] GetSysColor (nIndex=12) returned 0xababab [0070.814] GetSysColor (nIndex=15) returned 0xf0f0f0 [0070.814] GetSysColor (nIndex=20) returned 0xffffff [0070.814] GetSysColor (nIndex=16) returned 0xa0a0a0 [0070.814] GetSysColor (nIndex=15) returned 0xf0f0f0 [0070.814] GetSysColor (nIndex=16) returned 0xa0a0a0 [0070.814] GetSysColor (nIndex=21) returned 0x696969 [0070.814] GetSysColor (nIndex=22) returned 0xe3e3e3 [0070.814] GetSysColor (nIndex=20) returned 0xffffff [0070.814] GetSysColor (nIndex=18) returned 0x0 [0070.814] GetSysColor (nIndex=1) returned 0x0 [0070.815] GetSysColor (nIndex=27) returned 0xead1b9 [0070.815] GetSysColor (nIndex=28) returned 0xf2e4d7 [0070.815] GetSysColor (nIndex=17) returned 0x6d6d6d [0070.815] GetSysColor (nIndex=13) returned 0xff9933 [0070.815] GetSysColor (nIndex=14) returned 0xffffff [0070.815] GetSysColor (nIndex=26) returned 0xcc6600 [0070.815] GetSysColor (nIndex=11) returned 0xfcf7f4 [0070.815] GetSysColor (nIndex=3) returned 0xdbcdbf [0070.815] GetSysColor (nIndex=19) returned 0x0 [0070.815] GetSysColor (nIndex=24) returned 0xe1ffff [0070.815] GetSysColor (nIndex=23) returned 0x0 [0070.815] GetSysColor (nIndex=4) returned 0xf0f0f0 [0070.815] GetSysColor (nIndex=30) returned 0xf0f0f0 [0070.815] GetSysColor (nIndex=29) returned 0xff9933 [0070.815] GetSysColor (nIndex=7) returned 0x0 [0070.815] GetSysColor (nIndex=0) returned 0xc8c8c8 [0070.815] GetSysColor (nIndex=5) returned 0xffffff [0070.815] GetSysColor (nIndex=6) returned 0x646464 [0070.815] GetSysColor (nIndex=8) returned 0x0 [0070.816] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0070.816] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0070.910] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0070.910] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0070.912] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0070.912] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0070.921] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0070.921] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0070.921] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0070.921] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0070.929] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0070.929] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0070.929] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0070.929] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0070.939] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0070.939] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0070.939] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0070.939] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.028] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.028] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.028] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.028] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.036] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.037] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.037] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.037] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.045] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.045] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.045] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.045] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.055] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.055] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.056] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.056] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.064] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.064] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.064] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.064] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.253] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.253] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.254] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.254] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.262] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.262] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.262] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.262] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.271] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.271] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.271] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.271] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.280] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.280] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.280] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.280] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.370] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.371] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.376] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.376] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.384] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.384] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.384] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.384] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.393] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x14db50) returned 0x0 [0071.393] GdipCreateFont (fontFamily=0x1be48920, emSize=0x7ffcf3e0d4a5, style=1, unit=0x3, font=0x2127080) returned 0x0 [0071.393] GdipGetFontSize (font=0x1ad3edb0, size=0x2127088) returned 0x0 [0071.393] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.394] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.394] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.394] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.402] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.402] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.402] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.403] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.410] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.411] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.411] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.411] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0071.526] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.527] AdjustWindowRectEx (in: lpRect=0x14dad8, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14dad8) returned 1 [0071.527] GetSystemMetrics (nIndex=59) returned 1456 [0071.527] GetSystemMetrics (nIndex=60) returned 916 [0071.527] GetSystemMetrics (nIndex=34) returned 136 [0071.527] GetSystemMetrics (nIndex=35) returned 39 [0071.527] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.527] AdjustWindowRectEx (in: lpRect=0x14d898, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14d898) returned 1 [0071.537] GetCurrentThreadId () returned 0xdbc [0071.537] GetCurrentThreadId () returned 0xdbc [0071.541] GetCurrentThreadId () returned 0xdbc [0071.541] GetCurrentThreadId () returned 0xdbc [0071.541] GetCurrentThreadId () returned 0xdbc [0071.541] GetCurrentThreadId () returned 0xdbc [0071.541] GetCurrentThreadId () returned 0xdbc [0071.541] GetCurrentThreadId () returned 0xdbc [0071.541] GetCurrentThreadId () returned 0xdbc [0071.541] GetCurrentThreadId () returned 0xdbc [0071.541] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.542] GetCurrentThreadId () returned 0xdbc [0071.661] CreateCompatibleDC (hdc=0x0) returned 0xffffffff9f0106b7 [0071.727] GetDC (hWnd=0x0) returned 0x220106d6 [0071.727] GdipCreateFromHDC (hdc=0x220106d6, graphics=0x14d728) returned 0x0 [0071.727] CoTaskMemAlloc (cb=0x5c) returned 0x50c130 [0071.727] GdipGetLogFontW (font=0x1ad3ed70, graphics=0x1be567f0, logfontW=0x50c130) returned 0x0 [0071.728] CoTaskMemFree (pv=0x50c130) [0071.728] CoTaskMemAlloc (cb=0x5c) returned 0x50cb40 [0071.728] CoTaskMemFree (pv=0x50cb40) [0071.728] CoTaskMemAlloc (cb=0x5c) returned 0x50cc20 [0071.728] CoTaskMemFree (pv=0x50cc20) [0071.728] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0071.728] ReleaseDC (hWnd=0x0, hDC=0x220106d6) returned 1 [0071.729] CoTaskMemAlloc (cb=0x5c) returned 0x50c910 [0071.729] CreateFontIndirectW (lplf=0x50c910) returned 0x700a09c0 [0071.729] CoTaskMemFree (pv=0x50c910) [0071.730] SelectObject (hdc=0xffffffff9f0106b7, h=0x700a09c0) returned 0x18a0048 [0071.730] GetTextMetricsW (in: hdc=0xffffffff9f0106b7, lptm=0x14d9a8 | out: lptm=0x14d9a8) returned 1 [0071.731] GetTextExtentPoint32W (in: hdc=0xffffffff9f0106b7, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x2129e48 | out: psizl=0x2129e48) returned 1 [0071.732] SelectObject (hdc=0xffffffff9f0106b7, h=0x18a0048) returned 0x700a09c0 [0071.732] DeleteDC (hdc=0xffffffff9f0106b7) returned 1 [0071.733] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.733] AdjustWindowRectEx (in: lpRect=0x14d610, dwStyle=0x2cc0000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x14d610) returned 1 [0071.733] AdjustWindowRectEx (in: lpRect=0x14d890, dwStyle=0x2cc0000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x14d890) returned 1 [0071.733] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.733] AdjustWindowRectEx (in: lpRect=0x14d500, dwStyle=0x2cc0000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x14d500) returned 1 [0071.733] AdjustWindowRectEx (in: lpRect=0x14d680, dwStyle=0x2cc0000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x14d680) returned 1 [0071.734] GetSystemMetrics (nIndex=34) returned 136 [0071.734] GetSystemMetrics (nIndex=35) returned 39 [0071.734] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.735] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0071.735] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.736] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0071.736] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.736] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0071.736] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.736] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0071.736] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.736] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0071.736] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.736] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0071.737] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.737] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0071.737] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.737] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0071.737] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.737] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0071.737] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.737] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0071.737] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.737] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0071.738] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.738] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0071.738] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.738] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0071.738] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.738] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0071.738] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.738] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0071.738] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.738] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0071.739] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.739] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0071.739] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.739] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0071.739] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.739] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0071.739] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.739] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0071.739] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.739] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0071.740] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.740] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0071.740] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.740] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0071.740] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.740] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0071.740] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.740] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0071.740] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.740] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0071.741] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.741] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0071.741] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.741] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0071.741] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.741] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0071.741] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.741] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0071.741] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.741] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0071.742] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.742] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0071.742] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.742] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0071.742] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.742] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0071.742] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.742] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0071.742] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.742] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0071.742] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.742] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0071.743] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.743] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0071.743] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.743] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x56010046, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d8a0) returned 1 [0071.743] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.743] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x56010046, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d6f0) returned 1 [0071.750] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.750] AdjustWindowRectEx (in: lpRect=0x14eb70, dwStyle=0x2cc0000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x14eb70) returned 1 [0071.751] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.751] CreateWindowExW (dwExStyle=0x90001, lpClassName="WindowsForms10.Window.8.app.0.1ca0192_r8_ad1", lpWindowName="Form1", dwStyle=0x2cc0000, X=-2147483648, Y=-2147483648, nWidth=274, nHeight=208, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20372 [0071.751] SetWindowLongPtrW (hWnd=0x20372, nIndex=-4, dwNewLong=0x7ffd0d9f4a40) returned 0x8d089c [0071.751] GetWindowLongPtrW (hWnd=0x20372, nIndex=-4) returned 0x7ffd0d9f4a40 [0071.751] SetWindowLongPtrW (hWnd=0x20372, nIndex=-4, dwNewLong=0x8d09dc) returned 0x7ffd0d9f4a40 [0071.751] GetWindowLongPtrW (hWnd=0x20372, nIndex=-4) returned 0x8d09dc [0071.752] GetWindowLongPtrW (hWnd=0x20372, nIndex=-16) returned 0x6cc0000 [0071.752] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x81, wParam=0x0, lParam=0x14e2d0) returned 0x1 [0071.753] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x83, wParam=0x0, lParam=0x14e380) returned 0x0 [0071.754] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x1, wParam=0x0, lParam=0x14e2b0) returned 0x0 [0071.754] GetClientRect (in: hWnd=0x20372, lpRect=0x14dd00 | out: lpRect=0x14dd00) returned 1 [0071.754] GetWindowRect (in: hWnd=0x20372, lpRect=0x14dd00 | out: lpRect=0x14dd00) returned 1 [0071.755] SetWindowTextW (hWnd=0x20372, lpString="Form1") returned 1 [0071.755] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xc, wParam=0x0, lParam=0x212866c) returned 0x1 [0071.760] SetLayeredWindowAttributes (hwnd=0x20372, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0071.764] GetStartupInfoW (in: lpStartupInfo=0x212a9c0 | out: lpStartupInfo=0x212a9c0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\ProgramData\\WindowsDataC.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0071.765] GetParent (hWnd=0x20372) returned 0x0 [0071.766] GetStockObject (i=5) returned 0x1900015 [0071.766] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.766] CoTaskMemAlloc (cb=0x5a) returned 0x50c910 [0071.766] RegisterClassW (lpWndClass=0x14e950) returned 0xc212 [0071.766] CoTaskMemFree (pv=0x50c910) [0071.766] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.767] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.1ca0192_r8_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20374 [0071.767] SetWindowLongPtrW (hWnd=0x20374, nIndex=-4, dwNewLong=0x7ffd0d9f4a40) returned 0x8d0a2c [0071.767] GetWindowLongPtrW (hWnd=0x20374, nIndex=-4) returned 0x7ffd0d9f4a40 [0071.767] SetWindowLongPtrW (hWnd=0x20374, nIndex=-4, dwNewLong=0x8d0a7c) returned 0x7ffd0d9f4a40 [0071.767] GetWindowLongPtrW (hWnd=0x20374, nIndex=-4) returned 0x8d0a7c [0071.767] GetWindowLongPtrW (hWnd=0x20374, nIndex=-16) returned 0x4c00000 [0071.767] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x24, wParam=0x0, lParam=0x14e370) returned 0x0 [0071.767] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x81, wParam=0x0, lParam=0x14e2e0) returned 0x1 [0071.768] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x83, wParam=0x0, lParam=0x14e390) returned 0x0 [0071.768] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x1, wParam=0x0, lParam=0x14e2e0) returned 0x0 [0071.770] SetWindowLongPtrW (hWnd=0x20372, nIndex=-8, dwNewLong=0x20374) returned 0x0 [0071.772] SendMessageW (hWnd=0x20372, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0071.772] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0071.772] SendMessageW (hWnd=0x20372, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0071.772] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0071.781] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0071.781] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0071.781] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0071.853] GetSystemMenu (hWnd=0x20372, bRevert=0) returned 0x6f026d [0071.856] GetWindowPlacement (in: hWnd=0x20372, lpwndpl=0x14ec58 | out: lpwndpl=0x14ec58) returned 1 [0071.857] EnableMenuItem (hMenu=0x6f026d, uIDEnableItem=0xf020, uEnable=0x1) returned 0 [0071.857] EnableMenuItem (hMenu=0x6f026d, uIDEnableItem=0xf030, uEnable=0x1) returned 0 [0071.857] EnableMenuItem (hMenu=0x6f026d, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0071.857] EnableMenuItem (hMenu=0x6f026d, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0071.857] EnableMenuItem (hMenu=0x6f026d, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0071.857] GetClientRect (in: hWnd=0x20372, lpRect=0x14ed20 | out: lpRect=0x14ed20) returned 1 [0071.857] GetClientRect (in: hWnd=0x20372, lpRect=0x14ec50 | out: lpRect=0x14ec50) returned 1 [0071.857] GetWindowRect (in: hWnd=0x20372, lpRect=0x14ec50 | out: lpRect=0x14ec50) returned 1 [0071.857] SetWindowLongPtrW (hWnd=0x20372, nIndex=-8, dwNewLong=0x20374) returned 0x20374 [0071.862] GetSystemMetrics (nIndex=11) returned 32 [0071.862] GetSystemMetrics (nIndex=12) returned 32 [0071.862] GetDC (hWnd=0x0) returned 0xc0100ae [0071.862] GetDeviceCaps (hdc=0xc0100ae, index=12) returned 32 [0071.862] GetDeviceCaps (hdc=0xc0100ae, index=14) returned 1 [0071.862] ReleaseDC (hWnd=0x0, hDC=0xc0100ae) returned 1 [0071.863] CreateIconFromResourceEx (presbits=0x212da08, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0xa0205 [0071.865] SendMessageW (hWnd=0x20374, Msg=0x80, wParam=0x1, lParam=0xa0205) returned 0x0 [0071.865] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x80, wParam=0x1, lParam=0xa0205) returned 0x0 [0071.867] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.867] GetWindowLongPtrW (hWnd=0x20372, nIndex=-16) returned 0x6cc0000 [0071.867] GetWindowTextLengthW (hWnd=0x20372) returned 5 [0071.867] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0071.867] GetSystemMetrics (nIndex=42) returned 0 [0071.867] GetWindowTextW (in: hWnd=0x20372, lpString=0x14ea60, nMaxCount=6 | out: lpString="Form1") returned 5 [0071.868] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xd, wParam=0x6, lParam=0x14ea60) returned 0x5 [0071.868] GetWindowTextLengthW (hWnd=0x20372) returned 5 [0071.868] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0071.868] GetSystemMetrics (nIndex=42) returned 0 [0071.868] GetWindowTextW (in: hWnd=0x20372, lpString=0x14ea60, nMaxCount=6 | out: lpString="Form1") returned 5 [0071.868] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xd, wParam=0x6, lParam=0x14ea60) returned 0x5 [0071.868] GetWindowLongPtrW (hWnd=0x20372, nIndex=-16) returned 0x6cc0000 [0071.868] GetWindowLongPtrW (hWnd=0x20372, nIndex=-20) returned 0x90101 [0071.868] SetWindowLongPtrW (hWnd=0x20372, nIndex=-16, dwNewLong=0x2cc0000) returned 0x6cc0000 [0071.869] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x14eb20) returned 0x0 [0071.870] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x14eb20) returned 0x0 [0071.870] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0071.871] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0071.871] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0071.871] SetWindowLongPtrW (hWnd=0x20372, nIndex=-20, dwNewLong=0x90001) returned 0x90101 [0071.871] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x14eb20) returned 0x0 [0071.871] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x14eb20) returned 0x0 [0071.872] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0071.872] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0071.872] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0071.873] SetWindowPos (hWnd=0x20372, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0071.873] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x46, wParam=0x0, lParam=0x14eb80) returned 0x0 [0071.873] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x83, wParam=0x1, lParam=0x14eb50) returned 0x0 [0071.875] GetWindowPlacement (in: hWnd=0x20372, lpwndpl=0x14e728 | out: lpwndpl=0x14e728) returned 1 [0071.875] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x47, wParam=0x0, lParam=0x14eb80) returned 0x0 [0071.875] GetClientRect (in: hWnd=0x20372, lpRect=0x14e5c0 | out: lpRect=0x14e5c0) returned 1 [0071.875] GetWindowRect (in: hWnd=0x20372, lpRect=0x14e5c0 | out: lpRect=0x14e5c0) returned 1 [0071.880] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0071.880] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0071.880] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0071.882] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x83, wParam=0x1, lParam=0x14e420) returned 0x0 [0071.884] RedrawWindow (hWnd=0x20372, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0071.885] GetSystemMenu (hWnd=0x20372, bRevert=0) returned 0x6f026d [0071.885] GetWindowPlacement (in: hWnd=0x20372, lpwndpl=0x14ebf8 | out: lpwndpl=0x14ebf8) returned 1 [0071.885] EnableMenuItem (hMenu=0x6f026d, uIDEnableItem=0xf020, uEnable=0x1) returned 1 [0071.885] EnableMenuItem (hMenu=0x6f026d, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0071.885] EnableMenuItem (hMenu=0x6f026d, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0071.885] EnableMenuItem (hMenu=0x6f026d, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0071.885] EnableMenuItem (hMenu=0x6f026d, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0071.885] ShowWindow (hWnd=0x20372, nCmdShow=5) returned 0 [0071.885] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.886] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.887] GetClassInfoW (in: hInstance=0x0, lpClassName="BUTTON", lpWndClass=0x212edc0 | out: lpWndClass=0x212edc0) returned 1 [0071.888] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.888] CoTaskMemAlloc (cb=0x56) returned 0x511d00 [0071.888] RegisterClassW (lpWndClass=0x14e300) returned 0xc213 [0071.888] CoTaskMemFree (pv=0x511d00) [0071.888] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.888] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="*", dwStyle=0x5601000b, X=215, Y=60, nWidth=26, nHeight=23, hWndParent=0x20372, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2028c [0071.889] SetWindowLongPtrW (hWnd=0x2028c, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x8d0acc [0071.889] GetWindowLongPtrW (hWnd=0x2028c, nIndex=-4) returned 0x7ffd0d9f4aa0 [0071.889] SetWindowLongPtrW (hWnd=0x2028c, nIndex=-4, dwNewLong=0x8d0b1c) returned 0x7ffd0d9f4aa0 [0071.889] GetWindowLongPtrW (hWnd=0x2028c, nIndex=-4) returned 0x8d0b1c [0071.889] GetWindowLongPtrW (hWnd=0x2028c, nIndex=-16) returned 0x4601000b [0071.889] GetWindowLongPtrW (hWnd=0x2028c, nIndex=-12) returned 0x0 [0071.889] SetWindowLongPtrW (hWnd=0x2028c, nIndex=-12, dwNewLong=0x2028c) returned 0x0 [0071.889] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0071.890] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0071.890] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0071.891] GetWindow (hWnd=0x2028c, uCmd=0x3) returned 0x0 [0071.891] GetClientRect (in: hWnd=0x2028c, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.891] GetWindowRect (in: hWnd=0x2028c, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.891] GetParent (hWnd=0x2028c) returned 0x20372 [0071.891] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -5374012 [0071.892] SetWindowTextW (hWnd=0x2028c, lpString="*") returned 1 [0071.892] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0xc, wParam=0x0, lParam=0x2126784) returned 0x1 [0071.893] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0071.893] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x3, wParam=0x0, lParam=0x3c00d7) returned 0x0 [0071.893] GetClientRect (in: hWnd=0x2028c, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.893] GetWindowRect (in: hWnd=0x2028c, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.893] GetParent (hWnd=0x2028c) returned 0x20372 [0071.893] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -5374012 [0071.895] SendMessageW (hWnd=0x2028c, Msg=0x2210, wParam=0x28c0001, lParam=0x2028c) returned 0x0 [0071.895] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x2210, wParam=0x28c0001, lParam=0x2028c) returned 0x0 [0071.895] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.896] GetParent (hWnd=0x2028c) returned 0x20372 [0071.896] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.896] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.896] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="=", dwStyle=0x5601000b, X=183, Y=118, nWidth=58, nHeight=23, hWndParent=0x20372, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2028e [0071.896] SetWindowLongPtrW (hWnd=0x2028e, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x8d0acc [0071.896] GetWindowLongPtrW (hWnd=0x2028e, nIndex=-4) returned 0x7ffd0d9f4aa0 [0071.897] SetWindowLongPtrW (hWnd=0x2028e, nIndex=-4, dwNewLong=0x8d0b6c) returned 0x7ffd0d9f4aa0 [0071.897] GetWindowLongPtrW (hWnd=0x2028e, nIndex=-4) returned 0x8d0b6c [0071.897] GetWindowLongPtrW (hWnd=0x2028e, nIndex=-16) returned 0x4601000b [0071.897] GetWindowLongPtrW (hWnd=0x2028e, nIndex=-12) returned 0x0 [0071.897] SetWindowLongPtrW (hWnd=0x2028e, nIndex=-12, dwNewLong=0x2028e) returned 0x0 [0071.897] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0071.897] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0071.897] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0071.897] GetWindow (hWnd=0x2028e, uCmd=0x3) returned 0x2028c [0071.897] GetClientRect (in: hWnd=0x2028e, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.898] GetWindowRect (in: hWnd=0x2028e, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.898] GetParent (hWnd=0x2028e) returned 0x20372 [0071.898] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -5374012 [0071.898] SetWindowTextW (hWnd=0x2028e, lpString="=") returned 1 [0071.898] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0xc, wParam=0x0, lParam=0x212755c) returned 0x1 [0071.899] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x5, wParam=0x0, lParam=0x17003a) returned 0x0 [0071.899] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x3, wParam=0x0, lParam=0x7600b7) returned 0x0 [0071.899] GetClientRect (in: hWnd=0x2028e, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.899] GetWindowRect (in: hWnd=0x2028e, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.899] GetParent (hWnd=0x2028e) returned 0x20372 [0071.899] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -5374012 [0071.899] SendMessageW (hWnd=0x2028e, Msg=0x2210, wParam=0x28e0001, lParam=0x2028e) returned 0x0 [0071.899] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x2210, wParam=0x28e0001, lParam=0x2028e) returned 0x0 [0071.899] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.899] GetParent (hWnd=0x2028e) returned 0x20372 [0071.899] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.899] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.899] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="log", dwStyle=0x5601000b, X=183, Y=89, nWidth=58, nHeight=23, hWndParent=0x20372, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x90038 [0071.900] SetWindowLongPtrW (hWnd=0x90038, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x8d0acc [0071.900] GetWindowLongPtrW (hWnd=0x90038, nIndex=-4) returned 0x7ffd0d9f4aa0 [0071.900] SetWindowLongPtrW (hWnd=0x90038, nIndex=-4, dwNewLong=0x8d0bbc) returned 0x7ffd0d9f4aa0 [0071.900] GetWindowLongPtrW (hWnd=0x90038, nIndex=-4) returned 0x8d0bbc [0071.900] GetWindowLongPtrW (hWnd=0x90038, nIndex=-16) returned 0x4601000b [0071.900] GetWindowLongPtrW (hWnd=0x90038, nIndex=-12) returned 0x0 [0071.900] SetWindowLongPtrW (hWnd=0x90038, nIndex=-12, dwNewLong=0x90038) returned 0x0 [0071.900] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0071.901] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0071.901] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0071.901] GetWindow (hWnd=0x90038, uCmd=0x3) returned 0x2028e [0071.901] GetClientRect (in: hWnd=0x90038, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.901] GetWindowRect (in: hWnd=0x90038, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.901] GetParent (hWnd=0x90038) returned 0x20372 [0071.901] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -5374012 [0071.902] SetWindowTextW (hWnd=0x90038, lpString="log") returned 1 [0071.902] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0xc, wParam=0x0, lParam=0x2126d14) returned 0x1 [0071.902] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x5, wParam=0x0, lParam=0x17003a) returned 0x0 [0071.902] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x3, wParam=0x0, lParam=0x5900b7) returned 0x0 [0071.902] GetClientRect (in: hWnd=0x90038, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.902] GetWindowRect (in: hWnd=0x90038, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.902] GetParent (hWnd=0x90038) returned 0x20372 [0071.902] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -5374012 [0071.902] SendMessageW (hWnd=0x90038, Msg=0x2210, wParam=0x380001, lParam=0x90038) returned 0x0 [0071.902] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x2210, wParam=0x380001, lParam=0x90038) returned 0x0 [0071.902] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.902] GetParent (hWnd=0x90038) returned 0x20372 [0071.903] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.903] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.903] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="e^", dwStyle=0x5601000b, X=151, Y=118, nWidth=33, nHeight=23, hWndParent=0x20372, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20380 [0071.906] SetWindowLongPtrW (hWnd=0x20380, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x8d0acc [0071.906] GetWindowLongPtrW (hWnd=0x20380, nIndex=-4) returned 0x7ffd0d9f4aa0 [0071.906] SetWindowLongPtrW (hWnd=0x20380, nIndex=-4, dwNewLong=0x8d0c0c) returned 0x7ffd0d9f4aa0 [0071.906] GetWindowLongPtrW (hWnd=0x20380, nIndex=-4) returned 0x8d0c0c [0071.906] GetWindowLongPtrW (hWnd=0x20380, nIndex=-16) returned 0x4601000b [0071.906] GetWindowLongPtrW (hWnd=0x20380, nIndex=-12) returned 0x0 [0071.907] SetWindowLongPtrW (hWnd=0x20380, nIndex=-12, dwNewLong=0x20380) returned 0x0 [0071.907] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0071.907] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0071.907] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0071.907] GetWindow (hWnd=0x20380, uCmd=0x3) returned 0x90038 [0071.907] GetClientRect (in: hWnd=0x20380, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.907] GetWindowRect (in: hWnd=0x20380, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.907] GetParent (hWnd=0x20380) returned 0x20372 [0071.907] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -5374012 [0071.908] SetWindowTextW (hWnd=0x20380, lpString="e^") returned 1 [0071.908] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0xc, wParam=0x0, lParam=0x212746c) returned 0x1 [0071.908] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x5, wParam=0x0, lParam=0x170021) returned 0x0 [0071.908] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x3, wParam=0x0, lParam=0x760097) returned 0x0 [0071.908] GetClientRect (in: hWnd=0x20380, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.908] GetWindowRect (in: hWnd=0x20380, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.908] GetParent (hWnd=0x20380) returned 0x20372 [0071.908] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -5374012 [0071.908] SendMessageW (hWnd=0x20380, Msg=0x2210, wParam=0x3800001, lParam=0x20380) returned 0x0 [0071.909] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x2210, wParam=0x3800001, lParam=0x20380) returned 0x0 [0071.909] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.909] GetParent (hWnd=0x20380) returned 0x20372 [0071.909] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.909] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.909] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="/", dwStyle=0x5601000b, X=151, Y=89, nWidth=26, nHeight=23, hWndParent=0x20372, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20384 [0071.909] SetWindowLongPtrW (hWnd=0x20384, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x8d0acc [0071.910] GetWindowLongPtrW (hWnd=0x20384, nIndex=-4) returned 0x7ffd0d9f4aa0 [0071.910] SetWindowLongPtrW (hWnd=0x20384, nIndex=-4, dwNewLong=0x8d0c5c) returned 0x7ffd0d9f4aa0 [0071.910] GetWindowLongPtrW (hWnd=0x20384, nIndex=-4) returned 0x8d0c5c [0071.910] GetWindowLongPtrW (hWnd=0x20384, nIndex=-16) returned 0x4601000b [0071.910] GetWindowLongPtrW (hWnd=0x20384, nIndex=-12) returned 0x0 [0071.910] SetWindowLongPtrW (hWnd=0x20384, nIndex=-12, dwNewLong=0x20384) returned 0x0 [0071.910] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0071.910] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0071.911] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0071.911] GetWindow (hWnd=0x20384, uCmd=0x3) returned 0x20380 [0071.911] GetClientRect (in: hWnd=0x20384, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.911] GetWindowRect (in: hWnd=0x20384, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.911] GetParent (hWnd=0x20384) returned 0x20372 [0071.911] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -5374012 [0071.912] SetWindowTextW (hWnd=0x20384, lpString="/") returned 1 [0071.912] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0xc, wParam=0x0, lParam=0x2126c24) returned 0x1 [0071.912] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0071.912] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x3, wParam=0x0, lParam=0x590097) returned 0x0 [0071.912] GetClientRect (in: hWnd=0x20384, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.912] GetWindowRect (in: hWnd=0x20384, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.912] GetParent (hWnd=0x20384) returned 0x20372 [0071.912] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -5374012 [0071.912] SendMessageW (hWnd=0x20384, Msg=0x2210, wParam=0x3840001, lParam=0x20384) returned 0x0 [0071.912] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x2210, wParam=0x3840001, lParam=0x20384) returned 0x0 [0071.912] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.913] GetParent (hWnd=0x20384) returned 0x20372 [0071.913] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.913] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.913] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName=";", dwStyle=0x5601000b, X=119, Y=118, nWidth=26, nHeight=23, hWndParent=0x20372, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x50276 [0071.913] SetWindowLongPtrW (hWnd=0x50276, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x8d0acc [0071.913] GetWindowLongPtrW (hWnd=0x50276, nIndex=-4) returned 0x7ffd0d9f4aa0 [0071.913] SetWindowLongPtrW (hWnd=0x50276, nIndex=-4, dwNewLong=0x8d0cac) returned 0x7ffd0d9f4aa0 [0071.914] GetWindowLongPtrW (hWnd=0x50276, nIndex=-4) returned 0x8d0cac [0071.914] GetWindowLongPtrW (hWnd=0x50276, nIndex=-16) returned 0x4601000b [0071.914] GetWindowLongPtrW (hWnd=0x50276, nIndex=-12) returned 0x0 [0071.914] SetWindowLongPtrW (hWnd=0x50276, nIndex=-12, dwNewLong=0x50276) returned 0x0 [0071.914] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0071.914] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0071.914] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0071.914] GetWindow (hWnd=0x50276, uCmd=0x3) returned 0x20384 [0071.914] GetClientRect (in: hWnd=0x50276, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.914] GetWindowRect (in: hWnd=0x50276, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.914] GetParent (hWnd=0x50276) returned 0x20372 [0071.914] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -5374012 [0071.915] SetWindowTextW (hWnd=0x50276, lpString=";") returned 1 [0071.915] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0xc, wParam=0x0, lParam=0x212737c) returned 0x1 [0071.915] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0071.915] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x3, wParam=0x0, lParam=0x760077) returned 0x0 [0071.915] GetClientRect (in: hWnd=0x50276, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.916] GetWindowRect (in: hWnd=0x50276, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.916] GetParent (hWnd=0x50276) returned 0x20372 [0071.916] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -5374012 [0071.916] SendMessageW (hWnd=0x50276, Msg=0x2210, wParam=0x2760001, lParam=0x50276) returned 0x0 [0071.916] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x2210, wParam=0x2760001, lParam=0x50276) returned 0x0 [0071.916] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.916] GetParent (hWnd=0x50276) returned 0x20372 [0071.916] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.916] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.916] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="-", dwStyle=0x5601000b, X=183, Y=60, nWidth=26, nHeight=23, hWndParent=0x20372, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103ae [0071.917] SetWindowLongPtrW (hWnd=0x103ae, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x8d0acc [0071.917] GetWindowLongPtrW (hWnd=0x103ae, nIndex=-4) returned 0x7ffd0d9f4aa0 [0071.917] SetWindowLongPtrW (hWnd=0x103ae, nIndex=-4, dwNewLong=0x8d0cfc) returned 0x7ffd0d9f4aa0 [0071.917] GetWindowLongPtrW (hWnd=0x103ae, nIndex=-4) returned 0x8d0cfc [0071.917] GetWindowLongPtrW (hWnd=0x103ae, nIndex=-16) returned 0x4601000b [0071.917] GetWindowLongPtrW (hWnd=0x103ae, nIndex=-12) returned 0x0 [0071.917] SetWindowLongPtrW (hWnd=0x103ae, nIndex=-12, dwNewLong=0x103ae) returned 0x0 [0071.917] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0071.918] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0071.918] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0071.918] GetWindow (hWnd=0x103ae, uCmd=0x3) returned 0x50276 [0071.918] GetClientRect (in: hWnd=0x103ae, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.918] GetWindowRect (in: hWnd=0x103ae, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.918] GetParent (hWnd=0x103ae) returned 0x20372 [0071.918] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -5374012 [0071.918] SetWindowTextW (hWnd=0x103ae, lpString="-") returned 1 [0071.918] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0xc, wParam=0x0, lParam=0x212669c) returned 0x1 [0071.919] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0071.919] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x3, wParam=0x0, lParam=0x3c00b7) returned 0x0 [0071.919] GetClientRect (in: hWnd=0x103ae, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.919] GetWindowRect (in: hWnd=0x103ae, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.919] GetParent (hWnd=0x103ae) returned 0x20372 [0071.919] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -5374012 [0071.919] SendMessageW (hWnd=0x103ae, Msg=0x2210, wParam=0x3ae0001, lParam=0x103ae) returned 0x0 [0071.919] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x2210, wParam=0x3ae0001, lParam=0x103ae) returned 0x0 [0071.919] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.919] GetParent (hWnd=0x103ae) returned 0x20372 [0071.920] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.920] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.920] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="8", dwStyle=0x5601000b, X=119, Y=89, nWidth=26, nHeight=23, hWndParent=0x20372, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103b0 [0071.920] SetWindowLongPtrW (hWnd=0x103b0, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x8d0acc [0071.920] GetWindowLongPtrW (hWnd=0x103b0, nIndex=-4) returned 0x7ffd0d9f4aa0 [0071.920] SetWindowLongPtrW (hWnd=0x103b0, nIndex=-4, dwNewLong=0x8d0d4c) returned 0x7ffd0d9f4aa0 [0071.920] GetWindowLongPtrW (hWnd=0x103b0, nIndex=-4) returned 0x8d0d4c [0071.920] GetWindowLongPtrW (hWnd=0x103b0, nIndex=-16) returned 0x4601000b [0071.920] GetWindowLongPtrW (hWnd=0x103b0, nIndex=-12) returned 0x0 [0071.920] SetWindowLongPtrW (hWnd=0x103b0, nIndex=-12, dwNewLong=0x103b0) returned 0x0 [0071.920] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0071.921] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0071.921] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0071.921] GetWindow (hWnd=0x103b0, uCmd=0x3) returned 0x103ae [0071.921] GetClientRect (in: hWnd=0x103b0, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.921] GetWindowRect (in: hWnd=0x103b0, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.921] GetParent (hWnd=0x103b0) returned 0x20372 [0071.921] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -5374012 [0071.922] SetWindowTextW (hWnd=0x103b0, lpString="8") returned 1 [0071.922] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0xc, wParam=0x0, lParam=0x2126b34) returned 0x1 [0071.922] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0071.922] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x3, wParam=0x0, lParam=0x590077) returned 0x0 [0071.922] GetClientRect (in: hWnd=0x103b0, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.922] GetWindowRect (in: hWnd=0x103b0, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.922] GetParent (hWnd=0x103b0) returned 0x20372 [0071.922] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -5374012 [0071.923] SendMessageW (hWnd=0x103b0, Msg=0x2210, wParam=0x3b00001, lParam=0x103b0) returned 0x0 [0071.923] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x2210, wParam=0x3b00001, lParam=0x103b0) returned 0x0 [0071.923] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.923] GetParent (hWnd=0x103b0) returned 0x20372 [0071.923] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.923] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.923] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="c", dwStyle=0x5601000b, X=87, Y=118, nWidth=26, nHeight=23, hWndParent=0x20372, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103b2 [0071.923] SetWindowLongPtrW (hWnd=0x103b2, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x8d0acc [0071.924] GetWindowLongPtrW (hWnd=0x103b2, nIndex=-4) returned 0x7ffd0d9f4aa0 [0071.924] SetWindowLongPtrW (hWnd=0x103b2, nIndex=-4, dwNewLong=0x8d0d9c) returned 0x7ffd0d9f4aa0 [0071.924] GetWindowLongPtrW (hWnd=0x103b2, nIndex=-4) returned 0x8d0d9c [0071.924] GetWindowLongPtrW (hWnd=0x103b2, nIndex=-16) returned 0x4601000b [0071.924] GetWindowLongPtrW (hWnd=0x103b2, nIndex=-12) returned 0x0 [0071.924] SetWindowLongPtrW (hWnd=0x103b2, nIndex=-12, dwNewLong=0x103b2) returned 0x0 [0071.924] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0071.925] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0071.925] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0071.925] GetWindow (hWnd=0x103b2, uCmd=0x3) returned 0x103b0 [0071.925] GetClientRect (in: hWnd=0x103b2, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.925] GetWindowRect (in: hWnd=0x103b2, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.925] GetParent (hWnd=0x103b2) returned 0x20372 [0071.925] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -5374012 [0071.926] SetWindowTextW (hWnd=0x103b2, lpString="c") returned 1 [0071.926] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0xc, wParam=0x0, lParam=0x2126fe4) returned 0x1 [0071.927] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0071.927] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x3, wParam=0x0, lParam=0x760057) returned 0x0 [0071.927] GetClientRect (in: hWnd=0x103b2, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.927] GetWindowRect (in: hWnd=0x103b2, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.927] GetParent (hWnd=0x103b2) returned 0x20372 [0071.927] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -5374012 [0071.927] SendMessageW (hWnd=0x103b2, Msg=0x2210, wParam=0x3b20001, lParam=0x103b2) returned 0x0 [0071.927] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x2210, wParam=0x3b20001, lParam=0x103b2) returned 0x0 [0071.927] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.927] GetParent (hWnd=0x103b2) returned 0x20372 [0071.928] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.928] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.928] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="+", dwStyle=0x5601000b, X=151, Y=60, nWidth=26, nHeight=23, hWndParent=0x20372, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103b4 [0071.928] SetWindowLongPtrW (hWnd=0x103b4, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x8d0acc [0071.928] GetWindowLongPtrW (hWnd=0x103b4, nIndex=-4) returned 0x7ffd0d9f4aa0 [0071.929] SetWindowLongPtrW (hWnd=0x103b4, nIndex=-4, dwNewLong=0x8d074c) returned 0x7ffd0d9f4aa0 [0071.929] GetWindowLongPtrW (hWnd=0x103b4, nIndex=-4) returned 0x8d074c [0071.929] GetWindowLongPtrW (hWnd=0x103b4, nIndex=-16) returned 0x4601000b [0071.929] GetWindowLongPtrW (hWnd=0x103b4, nIndex=-12) returned 0x0 [0071.929] SetWindowLongPtrW (hWnd=0x103b4, nIndex=-12, dwNewLong=0x103b4) returned 0x0 [0071.929] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0071.930] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0071.930] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0071.930] GetWindow (hWnd=0x103b4, uCmd=0x3) returned 0x103b2 [0071.930] GetClientRect (in: hWnd=0x103b4, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.930] GetWindowRect (in: hWnd=0x103b4, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.930] GetParent (hWnd=0x103b4) returned 0x20372 [0071.930] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -5374012 [0071.931] SetWindowTextW (hWnd=0x103b4, lpString="+") returned 1 [0071.931] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0xc, wParam=0x0, lParam=0x21265b4) returned 0x1 [0071.934] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0071.934] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x3, wParam=0x0, lParam=0x3c0097) returned 0x0 [0071.934] GetClientRect (in: hWnd=0x103b4, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.934] GetWindowRect (in: hWnd=0x103b4, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.934] GetParent (hWnd=0x103b4) returned 0x20372 [0071.934] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -5374012 [0071.935] SendMessageW (hWnd=0x103b4, Msg=0x2210, wParam=0x3b40001, lParam=0x103b4) returned 0x0 [0071.935] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x2210, wParam=0x3b40001, lParam=0x103b4) returned 0x0 [0071.935] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.935] GetParent (hWnd=0x103b4) returned 0x20372 [0071.935] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.935] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.935] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="7", dwStyle=0x5601000b, X=87, Y=89, nWidth=26, nHeight=23, hWndParent=0x20372, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103b6 [0071.935] SetWindowLongPtrW (hWnd=0x103b6, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x8d0acc [0071.936] GetWindowLongPtrW (hWnd=0x103b6, nIndex=-4) returned 0x7ffd0d9f4aa0 [0071.936] SetWindowLongPtrW (hWnd=0x103b6, nIndex=-4, dwNewLong=0x8d357c) returned 0x7ffd0d9f4aa0 [0071.936] GetWindowLongPtrW (hWnd=0x103b6, nIndex=-4) returned 0x8d357c [0071.936] GetWindowLongPtrW (hWnd=0x103b6, nIndex=-16) returned 0x4601000b [0071.936] GetWindowLongPtrW (hWnd=0x103b6, nIndex=-12) returned 0x0 [0071.936] SetWindowLongPtrW (hWnd=0x103b6, nIndex=-12, dwNewLong=0x103b6) returned 0x0 [0071.936] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0071.936] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0071.937] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0071.937] GetWindow (hWnd=0x103b6, uCmd=0x3) returned 0x103b4 [0071.937] GetClientRect (in: hWnd=0x103b6, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.937] GetWindowRect (in: hWnd=0x103b6, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.937] GetParent (hWnd=0x103b6) returned 0x20372 [0071.937] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -5374012 [0071.937] SetWindowTextW (hWnd=0x103b6, lpString="7") returned 1 [0071.937] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0xc, wParam=0x0, lParam=0x2126a44) returned 0x1 [0071.938] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0071.938] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x3, wParam=0x0, lParam=0x590057) returned 0x0 [0071.938] GetClientRect (in: hWnd=0x103b6, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.938] GetWindowRect (in: hWnd=0x103b6, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.938] GetParent (hWnd=0x103b6) returned 0x20372 [0071.938] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -5374012 [0071.938] SendMessageW (hWnd=0x103b6, Msg=0x2210, wParam=0x3b60001, lParam=0x103b6) returned 0x0 [0071.938] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x2210, wParam=0x3b60001, lParam=0x103b6) returned 0x0 [0071.938] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.938] GetParent (hWnd=0x103b6) returned 0x20372 [0071.939] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.939] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.939] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="0", dwStyle=0x5601000b, X=55, Y=118, nWidth=26, nHeight=23, hWndParent=0x20372, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103b8 [0071.939] SetWindowLongPtrW (hWnd=0x103b8, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x8d0acc [0071.939] GetWindowLongPtrW (hWnd=0x103b8, nIndex=-4) returned 0x7ffd0d9f4aa0 [0071.939] SetWindowLongPtrW (hWnd=0x103b8, nIndex=-4, dwNewLong=0x8d343c) returned 0x7ffd0d9f4aa0 [0071.939] GetWindowLongPtrW (hWnd=0x103b8, nIndex=-4) returned 0x8d343c [0071.939] GetWindowLongPtrW (hWnd=0x103b8, nIndex=-16) returned 0x4601000b [0071.939] GetWindowLongPtrW (hWnd=0x103b8, nIndex=-12) returned 0x0 [0071.939] SetWindowLongPtrW (hWnd=0x103b8, nIndex=-12, dwNewLong=0x103b8) returned 0x0 [0071.939] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0071.940] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0071.940] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0071.940] GetWindow (hWnd=0x103b8, uCmd=0x3) returned 0x103b6 [0071.940] GetClientRect (in: hWnd=0x103b8, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.940] GetWindowRect (in: hWnd=0x103b8, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.940] GetParent (hWnd=0x103b8) returned 0x20372 [0071.940] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -5374012 [0071.941] SetWindowTextW (hWnd=0x103b8, lpString="0") returned 1 [0071.941] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0xc, wParam=0x0, lParam=0x2126ef4) returned 0x1 [0071.941] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0071.941] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x3, wParam=0x0, lParam=0x760037) returned 0x0 [0071.941] GetClientRect (in: hWnd=0x103b8, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.941] GetWindowRect (in: hWnd=0x103b8, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.941] GetParent (hWnd=0x103b8) returned 0x20372 [0071.941] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -5374012 [0071.941] SendMessageW (hWnd=0x103b8, Msg=0x2210, wParam=0x3b80001, lParam=0x103b8) returned 0x0 [0071.941] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x2210, wParam=0x3b80001, lParam=0x103b8) returned 0x0 [0071.942] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.942] GetParent (hWnd=0x103b8) returned 0x20372 [0071.942] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.943] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.943] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="4", dwStyle=0x5601000b, X=119, Y=60, nWidth=26, nHeight=23, hWndParent=0x20372, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103ba [0071.943] SetWindowLongPtrW (hWnd=0x103ba, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x8d0acc [0071.943] GetWindowLongPtrW (hWnd=0x103ba, nIndex=-4) returned 0x7ffd0d9f4aa0 [0071.943] SetWindowLongPtrW (hWnd=0x103ba, nIndex=-4, dwNewLong=0x8d39dc) returned 0x7ffd0d9f4aa0 [0071.943] GetWindowLongPtrW (hWnd=0x103ba, nIndex=-4) returned 0x8d39dc [0071.943] GetWindowLongPtrW (hWnd=0x103ba, nIndex=-16) returned 0x4601000b [0071.943] GetWindowLongPtrW (hWnd=0x103ba, nIndex=-12) returned 0x0 [0071.943] SetWindowLongPtrW (hWnd=0x103ba, nIndex=-12, dwNewLong=0x103ba) returned 0x0 [0071.943] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0071.944] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0071.944] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0071.944] GetWindow (hWnd=0x103ba, uCmd=0x3) returned 0x103b8 [0071.944] GetClientRect (in: hWnd=0x103ba, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.944] GetWindowRect (in: hWnd=0x103ba, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.944] GetParent (hWnd=0x103ba) returned 0x20372 [0071.944] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -5374012 [0071.945] SetWindowTextW (hWnd=0x103ba, lpString="4") returned 1 [0071.945] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0xc, wParam=0x0, lParam=0x21264cc) returned 0x1 [0071.945] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0071.945] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x3, wParam=0x0, lParam=0x3c0077) returned 0x0 [0071.945] GetClientRect (in: hWnd=0x103ba, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.945] GetWindowRect (in: hWnd=0x103ba, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.945] GetParent (hWnd=0x103ba) returned 0x20372 [0071.945] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -5374012 [0071.945] SendMessageW (hWnd=0x103ba, Msg=0x2210, wParam=0x3ba0001, lParam=0x103ba) returned 0x0 [0071.945] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x2210, wParam=0x3ba0001, lParam=0x103ba) returned 0x0 [0071.946] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.946] GetParent (hWnd=0x103ba) returned 0x20372 [0071.946] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.946] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.946] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="6", dwStyle=0x5601000b, X=55, Y=89, nWidth=26, nHeight=23, hWndParent=0x20372, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103bc [0071.946] SetWindowLongPtrW (hWnd=0x103bc, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x8d0acc [0071.946] GetWindowLongPtrW (hWnd=0x103bc, nIndex=-4) returned 0x7ffd0d9f4aa0 [0071.947] SetWindowLongPtrW (hWnd=0x103bc, nIndex=-4, dwNewLong=0x8d375c) returned 0x7ffd0d9f4aa0 [0071.947] GetWindowLongPtrW (hWnd=0x103bc, nIndex=-4) returned 0x8d375c [0071.947] GetWindowLongPtrW (hWnd=0x103bc, nIndex=-16) returned 0x4601000b [0071.947] GetWindowLongPtrW (hWnd=0x103bc, nIndex=-12) returned 0x0 [0071.947] SetWindowLongPtrW (hWnd=0x103bc, nIndex=-12, dwNewLong=0x103bc) returned 0x0 [0071.947] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0071.947] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0071.947] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0071.948] GetWindow (hWnd=0x103bc, uCmd=0x3) returned 0x103ba [0071.948] GetClientRect (in: hWnd=0x103bc, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.948] GetWindowRect (in: hWnd=0x103bc, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.948] GetParent (hWnd=0x103bc) returned 0x20372 [0071.948] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -5374012 [0071.948] SetWindowTextW (hWnd=0x103bc, lpString="6") returned 1 [0071.948] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0xc, wParam=0x0, lParam=0x2126954) returned 0x1 [0071.949] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0071.949] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x3, wParam=0x0, lParam=0x590037) returned 0x0 [0071.949] GetClientRect (in: hWnd=0x103bc, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.949] GetWindowRect (in: hWnd=0x103bc, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.949] GetParent (hWnd=0x103bc) returned 0x20372 [0071.949] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -5374012 [0071.949] SendMessageW (hWnd=0x103bc, Msg=0x2210, wParam=0x3bc0001, lParam=0x103bc) returned 0x0 [0071.949] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x2210, wParam=0x3bc0001, lParam=0x103bc) returned 0x0 [0071.949] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.949] GetParent (hWnd=0x103bc) returned 0x20372 [0071.949] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.949] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.950] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="9", dwStyle=0x5601000b, X=23, Y=118, nWidth=26, nHeight=23, hWndParent=0x20372, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103be [0071.950] SetWindowLongPtrW (hWnd=0x103be, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x8d0acc [0071.950] GetWindowLongPtrW (hWnd=0x103be, nIndex=-4) returned 0x7ffd0d9f4aa0 [0071.950] SetWindowLongPtrW (hWnd=0x103be, nIndex=-4, dwNewLong=0x8d366c) returned 0x7ffd0d9f4aa0 [0071.950] GetWindowLongPtrW (hWnd=0x103be, nIndex=-4) returned 0x8d366c [0071.950] GetWindowLongPtrW (hWnd=0x103be, nIndex=-16) returned 0x4601000b [0071.950] GetWindowLongPtrW (hWnd=0x103be, nIndex=-12) returned 0x0 [0071.950] SetWindowLongPtrW (hWnd=0x103be, nIndex=-12, dwNewLong=0x103be) returned 0x0 [0071.950] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0071.951] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0071.951] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0071.951] GetWindow (hWnd=0x103be, uCmd=0x3) returned 0x103bc [0071.951] GetClientRect (in: hWnd=0x103be, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.951] GetWindowRect (in: hWnd=0x103be, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.951] GetParent (hWnd=0x103be) returned 0x20372 [0071.951] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -5374012 [0071.951] SetWindowTextW (hWnd=0x103be, lpString="9") returned 1 [0071.952] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0xc, wParam=0x0, lParam=0x2126e04) returned 0x1 [0071.952] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0071.952] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x3, wParam=0x0, lParam=0x760017) returned 0x0 [0071.952] GetClientRect (in: hWnd=0x103be, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.952] GetWindowRect (in: hWnd=0x103be, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.952] GetParent (hWnd=0x103be) returned 0x20372 [0071.952] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -5374012 [0071.952] SendMessageW (hWnd=0x103be, Msg=0x2210, wParam=0x3be0001, lParam=0x103be) returned 0x0 [0071.952] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x2210, wParam=0x3be0001, lParam=0x103be) returned 0x0 [0071.952] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.952] GetParent (hWnd=0x103be) returned 0x20372 [0071.953] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.953] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.953] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="3", dwStyle=0x5601000b, X=87, Y=60, nWidth=26, nHeight=23, hWndParent=0x20372, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103c0 [0071.953] SetWindowLongPtrW (hWnd=0x103c0, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x8d0acc [0071.953] GetWindowLongPtrW (hWnd=0x103c0, nIndex=-4) returned 0x7ffd0d9f4aa0 [0071.953] SetWindowLongPtrW (hWnd=0x103c0, nIndex=-4, dwNewLong=0x8d34dc) returned 0x7ffd0d9f4aa0 [0071.953] GetWindowLongPtrW (hWnd=0x103c0, nIndex=-4) returned 0x8d34dc [0071.953] GetWindowLongPtrW (hWnd=0x103c0, nIndex=-16) returned 0x4601000b [0071.954] GetWindowLongPtrW (hWnd=0x103c0, nIndex=-12) returned 0x0 [0071.954] SetWindowLongPtrW (hWnd=0x103c0, nIndex=-12, dwNewLong=0x103c0) returned 0x0 [0071.954] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0071.954] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0071.954] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0071.954] GetWindow (hWnd=0x103c0, uCmd=0x3) returned 0x103be [0071.954] GetClientRect (in: hWnd=0x103c0, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.954] GetWindowRect (in: hWnd=0x103c0, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.954] GetParent (hWnd=0x103c0) returned 0x20372 [0071.954] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -5374012 [0071.955] SetWindowTextW (hWnd=0x103c0, lpString="3") returned 1 [0071.955] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0xc, wParam=0x0, lParam=0x21263e4) returned 0x1 [0071.955] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0071.955] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x3, wParam=0x0, lParam=0x3c0057) returned 0x0 [0071.955] GetClientRect (in: hWnd=0x103c0, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.955] GetWindowRect (in: hWnd=0x103c0, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.955] GetParent (hWnd=0x103c0) returned 0x20372 [0071.955] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -5374012 [0071.956] SendMessageW (hWnd=0x103c0, Msg=0x2210, wParam=0x3c00001, lParam=0x103c0) returned 0x0 [0071.956] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x2210, wParam=0x3c00001, lParam=0x103c0) returned 0x0 [0071.956] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.956] GetParent (hWnd=0x103c0) returned 0x20372 [0071.956] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.956] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.956] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="5", dwStyle=0x5601000b, X=23, Y=89, nWidth=26, nHeight=23, hWndParent=0x20372, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103c2 [0071.956] SetWindowLongPtrW (hWnd=0x103c2, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x8d0acc [0071.957] GetWindowLongPtrW (hWnd=0x103c2, nIndex=-4) returned 0x7ffd0d9f4aa0 [0071.957] SetWindowLongPtrW (hWnd=0x103c2, nIndex=-4, dwNewLong=0x8d32fc) returned 0x7ffd0d9f4aa0 [0071.957] GetWindowLongPtrW (hWnd=0x103c2, nIndex=-4) returned 0x8d32fc [0071.957] GetWindowLongPtrW (hWnd=0x103c2, nIndex=-16) returned 0x4601000b [0071.957] GetWindowLongPtrW (hWnd=0x103c2, nIndex=-12) returned 0x0 [0071.957] SetWindowLongPtrW (hWnd=0x103c2, nIndex=-12, dwNewLong=0x103c2) returned 0x0 [0071.957] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0071.958] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0071.958] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0071.958] GetWindow (hWnd=0x103c2, uCmd=0x3) returned 0x103c0 [0071.958] GetClientRect (in: hWnd=0x103c2, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.958] GetWindowRect (in: hWnd=0x103c2, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.958] GetParent (hWnd=0x103c2) returned 0x20372 [0071.958] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -5374012 [0071.958] SetWindowTextW (hWnd=0x103c2, lpString="5") returned 1 [0071.958] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0xc, wParam=0x0, lParam=0x212686c) returned 0x1 [0071.959] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0071.959] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x3, wParam=0x0, lParam=0x590017) returned 0x0 [0071.959] GetClientRect (in: hWnd=0x103c2, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.959] GetWindowRect (in: hWnd=0x103c2, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.959] GetParent (hWnd=0x103c2) returned 0x20372 [0071.959] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -5374012 [0071.959] SendMessageW (hWnd=0x103c2, Msg=0x2210, wParam=0x3c20001, lParam=0x103c2) returned 0x0 [0071.959] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x2210, wParam=0x3c20001, lParam=0x103c2) returned 0x0 [0071.959] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.959] GetParent (hWnd=0x103c2) returned 0x20372 [0071.960] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.960] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.960] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="2", dwStyle=0x5601000b, X=55, Y=60, nWidth=26, nHeight=23, hWndParent=0x20372, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103c4 [0071.964] SetWindowLongPtrW (hWnd=0x103c4, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x8d0acc [0071.964] GetWindowLongPtrW (hWnd=0x103c4, nIndex=-4) returned 0x7ffd0d9f4aa0 [0071.964] SetWindowLongPtrW (hWnd=0x103c4, nIndex=-4, dwNewLong=0x8d352c) returned 0x7ffd0d9f4aa0 [0071.965] GetWindowLongPtrW (hWnd=0x103c4, nIndex=-4) returned 0x8d352c [0071.965] GetWindowLongPtrW (hWnd=0x103c4, nIndex=-16) returned 0x4601000b [0071.965] GetWindowLongPtrW (hWnd=0x103c4, nIndex=-12) returned 0x0 [0071.965] SetWindowLongPtrW (hWnd=0x103c4, nIndex=-12, dwNewLong=0x103c4) returned 0x0 [0071.965] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0071.965] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0071.965] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0071.965] GetWindow (hWnd=0x103c4, uCmd=0x3) returned 0x103c2 [0071.965] GetClientRect (in: hWnd=0x103c4, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.965] GetWindowRect (in: hWnd=0x103c4, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.965] GetParent (hWnd=0x103c4) returned 0x20372 [0071.965] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -5374012 [0071.966] SetWindowTextW (hWnd=0x103c4, lpString="2") returned 1 [0071.966] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0xc, wParam=0x0, lParam=0x21262fc) returned 0x1 [0071.967] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0071.967] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x3, wParam=0x0, lParam=0x3c0037) returned 0x0 [0071.967] GetClientRect (in: hWnd=0x103c4, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.967] GetWindowRect (in: hWnd=0x103c4, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.967] GetParent (hWnd=0x103c4) returned 0x20372 [0071.967] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -5374012 [0071.967] SendMessageW (hWnd=0x103c4, Msg=0x2210, wParam=0x3c40001, lParam=0x103c4) returned 0x0 [0071.967] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x2210, wParam=0x3c40001, lParam=0x103c4) returned 0x0 [0071.967] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.967] GetParent (hWnd=0x103c4) returned 0x20372 [0071.967] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.967] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.968] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="1", dwStyle=0x5601000b, X=23, Y=60, nWidth=26, nHeight=23, hWndParent=0x20372, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103c6 [0071.968] SetWindowLongPtrW (hWnd=0x103c6, nIndex=-4, dwNewLong=0x7ffd0d9f4aa0) returned 0x8d0acc [0071.968] GetWindowLongPtrW (hWnd=0x103c6, nIndex=-4) returned 0x7ffd0d9f4aa0 [0071.968] SetWindowLongPtrW (hWnd=0x103c6, nIndex=-4, dwNewLong=0x8d361c) returned 0x7ffd0d9f4aa0 [0071.968] GetWindowLongPtrW (hWnd=0x103c6, nIndex=-4) returned 0x8d361c [0071.968] GetWindowLongPtrW (hWnd=0x103c6, nIndex=-16) returned 0x4601000b [0071.968] GetWindowLongPtrW (hWnd=0x103c6, nIndex=-12) returned 0x0 [0071.968] SetWindowLongPtrW (hWnd=0x103c6, nIndex=-12, dwNewLong=0x103c6) returned 0x0 [0071.968] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0071.970] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0071.970] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0071.970] GetWindow (hWnd=0x103c6, uCmd=0x3) returned 0x103c4 [0071.970] GetClientRect (in: hWnd=0x103c6, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.970] GetWindowRect (in: hWnd=0x103c6, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0071.970] GetParent (hWnd=0x103c6) returned 0x20372 [0071.970] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -5374012 [0071.971] SetWindowTextW (hWnd=0x103c6, lpString="1") returned 1 [0071.971] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0xc, wParam=0x0, lParam=0x2126214) returned 0x1 [0071.971] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0071.971] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x3, wParam=0x0, lParam=0x3c0017) returned 0x0 [0071.971] GetClientRect (in: hWnd=0x103c6, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.971] GetWindowRect (in: hWnd=0x103c6, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0071.971] GetParent (hWnd=0x103c6) returned 0x20372 [0071.971] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -5374012 [0071.971] SendMessageW (hWnd=0x103c6, Msg=0x2210, wParam=0x3c60001, lParam=0x103c6) returned 0x0 [0071.971] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x2210, wParam=0x3c60001, lParam=0x103c6) returned 0x0 [0071.971] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.972] GetParent (hWnd=0x103c6) returned 0x20372 [0071.972] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0071.972] GetClassInfoW (in: hInstance=0x0, lpClassName="EDIT", lpWndClass=0x2130908 | out: lpWndClass=0x2130908) returned 1 [0071.972] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.972] CoTaskMemAlloc (cb=0x52) returned 0x511460 [0071.972] RegisterClassW (lpWndClass=0x14e2c0) returned 0xc214 [0071.973] CoTaskMemFree (pv=0x511460) [0071.973] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0071.973] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.1ca0192_r8_ad1", lpWindowName="0", dwStyle=0x56010046, X=23, Y=12, nWidth=218, nHeight=41, hWndParent=0x20372, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x103c8 [0071.974] SetWindowLongPtrW (hWnd=0x103c8, nIndex=-4, dwNewLong=0x7ffd0d9f4b20) returned 0x8d393c [0071.974] GetWindowLongPtrW (hWnd=0x103c8, nIndex=-4) returned 0x7ffd0d9f4b20 [0071.974] SetWindowLongPtrW (hWnd=0x103c8, nIndex=-4, dwNewLong=0x8d37ac) returned 0x7ffd0d9f4b20 [0071.974] GetWindowLongPtrW (hWnd=0x103c8, nIndex=-4) returned 0x8d37ac [0071.974] GetWindowLongPtrW (hWnd=0x103c8, nIndex=-16) returned 0x46010046 [0071.974] GetWindowLongPtrW (hWnd=0x103c8, nIndex=-12) returned 0x0 [0071.974] SetWindowLongPtrW (hWnd=0x103c8, nIndex=-12, dwNewLong=0x103c8) returned 0x0 [0071.974] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x81, wParam=0x0, lParam=0x14dc50) returned 0x1 [0071.975] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x83, wParam=0x0, lParam=0x14dd00) returned 0x0 [0071.976] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x1, wParam=0x0, lParam=0x14dc40) returned 0x1 [0071.978] GetWindow (hWnd=0x103c8, uCmd=0x3) returned 0x103c6 [0071.978] GetClientRect (in: hWnd=0x103c8, lpRect=0x14d680 | out: lpRect=0x14d680) returned 1 [0071.978] GetWindowRect (in: hWnd=0x103c8, lpRect=0x14d680 | out: lpRect=0x14d680) returned 1 [0071.978] GetParent (hWnd=0x103c8) returned 0x20372 [0071.978] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d680, cPoints=0x2 | out: lpPoints=0x14d680) returned -5374012 [0071.979] GetDC (hWnd=0x0) returned 0xc0100ae [0071.979] GdipCreateFromHDC (hdc=0xc0100ae, graphics=0x14d348) returned 0x0 [0071.979] CoTaskMemAlloc (cb=0x5c) returned 0x50c130 [0071.979] GdipGetLogFontW (font=0x1ad334f0, graphics=0x1be567f0, logfontW=0x50c130) returned 0x0 [0071.979] CoTaskMemFree (pv=0x50c130) [0071.979] CoTaskMemAlloc (cb=0x5c) returned 0x50cbb0 [0071.979] CoTaskMemFree (pv=0x50cbb0) [0071.979] CoTaskMemAlloc (cb=0x5c) returned 0x50ce50 [0071.979] CoTaskMemFree (pv=0x50ce50) [0071.979] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0071.979] ReleaseDC (hWnd=0x0, hDC=0xc0100ae) returned 1 [0071.980] CoTaskMemAlloc (cb=0x5c) returned 0x50c910 [0071.980] CreateFontIndirectW (lplf=0x50c910) returned 0x360a09c1 [0071.980] CoTaskMemFree (pv=0x50c910) [0071.980] SendMessageW (hWnd=0x103c8, Msg=0x30, wParam=0x360a09c1, lParam=0x0) returned 0x1 [0071.980] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x30, wParam=0x360a09c1, lParam=0x0) returned 0x1 [0071.986] SetWindowTextW (hWnd=0x103c8, lpString="0") returned 1 [0071.986] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0xc, wParam=0x0, lParam=0x21251ac) returned 0x1 [0071.986] GetSystemMetrics (nIndex=5) returned 1 [0071.986] GetSystemMetrics (nIndex=6) returned 1 [0071.986] SendMessageW (hWnd=0x103c8, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0071.987] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0071.987] SendMessageW (hWnd=0x103c8, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0071.987] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0071.987] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x5, wParam=0x0, lParam=0x2500d6) returned 0x1 [0071.987] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x3, wParam=0x0, lParam=0xe0019) returned 0x0 [0071.987] GetClientRect (in: hWnd=0x103c8, lpRect=0x14d7a0 | out: lpRect=0x14d7a0) returned 1 [0071.987] GetWindowRect (in: hWnd=0x103c8, lpRect=0x14d7a0 | out: lpRect=0x14d7a0) returned 1 [0071.987] GetParent (hWnd=0x103c8) returned 0x20372 [0071.987] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20372, lpPoints=0x14d7a0, cPoints=0x2 | out: lpPoints=0x14d7a0) returned -5374012 [0071.987] SendMessageW (hWnd=0x103c8, Msg=0x2210, wParam=0x3c80001, lParam=0x103c8) returned 0x0 [0071.987] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x2210, wParam=0x3c80001, lParam=0x103c8) returned 0x0 [0071.987] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0071.988] GetParent (hWnd=0x103c8) returned 0x20372 [0071.988] GetWindowTextLengthW (hWnd=0x20372) returned 5 [0071.988] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0071.988] GetSystemMetrics (nIndex=42) returned 0 [0071.988] GetWindowTextW (in: hWnd=0x20372, lpString=0x14e590, nMaxCount=6 | out: lpString="Form1") returned 5 [0071.988] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xd, wParam=0x6, lParam=0x14e590) returned 0x5 [0072.468] CoTaskMemAlloc (cb=0x20c) returned 0x51d6d0 [0072.468] SHGetFolderPathW (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x51d6d0 | out: pszPath="C:\\ProgramData") returned 0x0 [0072.472] CoTaskMemFree (pv=0x51d6d0) [0072.479] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x14b2c8 | out: phkResult=0x14b2c8*=0x0) returned 0x2 [0072.482] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x14dd00, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0072.604] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\WindowsDataC.exe", nBufferLength=0x105, lpBuffer=0x14dd00, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\WindowsDataC.exe", lpFilePart=0x0) returned 0x1f [0072.858] CoTaskMemAlloc (cb=0x20c) returned 0x51bf70 [0072.858] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x51bf70 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0072.859] CoTaskMemFree (pv=0x51bf70) [0072.859] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x14df10, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0072.860] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x14df30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29 [0072.860] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x14df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29 [0072.861] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x14def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x28 [0072.863] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x14def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23 [0072.864] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x14def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x28 [0072.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e340) returned 1 [0072.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0x14e420 | out: lpFileInformation=0x14e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaffe6500, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xaffe6500, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0072.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e300) returned 1 [0072.865] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x14dee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x28 [0072.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e330) returned 1 [0072.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0x14e410 | out: lpFileInformation=0x14e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaffe6500, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xaffe6500, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0072.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e2f0) returned 1 [0072.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e370) returned 1 [0072.867] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x14de50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23 [0072.868] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp"), lpFindFileData=0x14e080 | out: lpFindFileData=0x14e080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaffe6500, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xaffe6500, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0x511dc0 [0072.917] FindNextFileW (in: hFindFile=0x511dc0, lpFindFileData=0x14e040 | out: lpFindFileData=0x14e040*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0072.918] FindClose (in: hFindFile=0x511dc0 | out: hFindFile=0x511dc0) returned 1 [0072.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e2a0) returned 1 [0072.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e260) returned 1 [0073.110] EtwEventRegister () returned 0x0 [0073.111] EtwEventSetInformation () returned 0x0 [0073.261] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\WindowsDataC.exe.config", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\WindowsDataC.exe.config", lpFilePart=0x0) returned 0x26 [0073.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dfa0) returned 1 [0073.262] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\WindowsDataC.exe.config" (normalized: "c:\\programdata\\windowsdatac.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x14e080 | out: lpFileInformation=0x14e080*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0073.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df60) returned 1 [0073.950] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe", nBufferLength=0x105, lpBuffer=0x14ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe", lpFilePart=0x0) returned 0x32 [0073.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e2d0) returned 1 [0073.951] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\runit.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0073.952] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x523af0*=0x31c, lpdwindex=0x14d424 | out: lpdwindex=0x14d424) returned 0x0 [0074.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14a610) returned 1 [0074.450] InvalidateRect (hWnd=0x2028c, lpRect=0x0, bErase=0) returned 1 [0074.450] InvalidateRect (hWnd=0x2028e, lpRect=0x0, bErase=0) returned 1 [0074.450] InvalidateRect (hWnd=0x90038, lpRect=0x0, bErase=0) returned 1 [0074.450] InvalidateRect (hWnd=0x20380, lpRect=0x0, bErase=0) returned 1 [0074.450] InvalidateRect (hWnd=0x20384, lpRect=0x0, bErase=0) returned 1 [0074.450] InvalidateRect (hWnd=0x50276, lpRect=0x0, bErase=0) returned 1 [0074.450] InvalidateRect (hWnd=0x103ae, lpRect=0x0, bErase=0) returned 1 [0074.450] InvalidateRect (hWnd=0x103b0, lpRect=0x0, bErase=0) returned 1 [0074.450] InvalidateRect (hWnd=0x103b2, lpRect=0x0, bErase=0) returned 1 [0074.450] InvalidateRect (hWnd=0x103b4, lpRect=0x0, bErase=0) returned 1 [0074.450] InvalidateRect (hWnd=0x103b6, lpRect=0x0, bErase=0) returned 1 [0074.450] InvalidateRect (hWnd=0x103b8, lpRect=0x0, bErase=0) returned 1 [0074.450] InvalidateRect (hWnd=0x103ba, lpRect=0x0, bErase=0) returned 1 [0074.450] InvalidateRect (hWnd=0x103bc, lpRect=0x0, bErase=0) returned 1 [0074.451] InvalidateRect (hWnd=0x103be, lpRect=0x0, bErase=0) returned 1 [0074.451] InvalidateRect (hWnd=0x103c0, lpRect=0x0, bErase=0) returned 1 [0074.451] InvalidateRect (hWnd=0x103c2, lpRect=0x0, bErase=0) returned 1 [0074.451] InvalidateRect (hWnd=0x103c4, lpRect=0x0, bErase=0) returned 1 [0074.451] InvalidateRect (hWnd=0x103c6, lpRect=0x0, bErase=0) returned 1 [0074.451] InvalidateRect (hWnd=0x103c8, lpRect=0x0, bErase=1) returned 1 [0074.452] GetWindowThreadProcessId (in: hWnd=0x20372, lpdwProcessId=0x14e650 | out: lpdwProcessId=0x14e650) returned 0xdbc [0074.452] GetCurrentThreadId () returned 0xdbc [0074.452] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc215 [0074.453] PostMessageW (hWnd=0x20372, Msg=0xc215, wParam=0x0, lParam=0x0) returned 1 [0074.453] GetWindowTextLengthW (hWnd=0x20372) returned 5 [0074.453] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0074.453] GetSystemMetrics (nIndex=42) returned 0 [0074.453] GetWindowTextW (in: hWnd=0x20372, lpString=0x14e560, nMaxCount=6 | out: lpString="Form1") returned 5 [0074.453] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xd, wParam=0x6, lParam=0x14e560) returned 0x5 [0074.454] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x46, wParam=0x0, lParam=0x14ed90) returned 0x0 [0074.462] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x46, wParam=0x0, lParam=0x14ed90) returned 0x0 [0074.462] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0074.463] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0074.463] NtdllDefWindowProc_W (hWnd=0x30304, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0074.463] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0074.464] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0074.464] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0074.464] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0074.700] OleInitialize (pvReserved=0x0) returned 0x0 [0074.701] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x14e948 | out: lplpMessageFilter=0x14e948*=0x0) returned 0x0 [0074.783] GetFocus () returned 0x0 [0074.784] GetFocus () returned 0x0 [0074.784] SetFocus (hWnd=0x103c8) returned 0x0 [0074.793] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0074.797] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0074.797] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0074.798] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0074.799] GetParent (hWnd=0x20372) returned 0x0 [0074.800] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x1 [0074.800] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0074.800] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0 [0074.801] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0074.801] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x282, wParam=0xf, lParam=0x30197) returned 0x0 [0074.803] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0074.803] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0 [0074.805] SendMessageW (hWnd=0x103c8, Msg=0x2111, wParam=0x10003c8, lParam=0x103c8) returned 0x0 [0074.807] SendMessageW (hWnd=0x103c8, Msg=0xb0, wParam=0x14e200, lParam=0x14e1a0) returned 0x0 [0074.807] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0xb0, wParam=0x14e200, lParam=0x14e1a0) returned 0x0 [0074.807] GetKeyState (nVirtKey=1) returned 0 [0074.807] GetKeyState (nVirtKey=2) returned 0 [0074.807] GetKeyState (nVirtKey=4) returned 0 [0074.807] GetKeyState (nVirtKey=5) returned 0 [0074.807] GetKeyState (nVirtKey=6) returned 0 [0074.807] GetWindowTextLengthW (hWnd=0x103c8) returned 1 [0074.807] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1 [0074.807] SendMessageW (hWnd=0x103c8, Msg=0xb1, wParam=0x0, lParam=0x1) returned 0x1 [0074.807] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0xb1, wParam=0x0, lParam=0x1) returned 0x1 [0074.808] SetTextColor (hdc=0x1b0107ae, color=0x0) returned 0x0 [0074.808] SetBkColor (hdc=0x1b0107ae, color=0xffffff) returned 0xffffff [0074.808] GetSysColorBrush (nIndex=5) returned 0x110007b [0074.810] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0074.810] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0 [0074.810] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.811] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0074.811] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0074.812] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0074.813] GetWindowPlacement (in: hWnd=0x20372, lpwndpl=0x14e958 | out: lpwndpl=0x14e958) returned 1 [0074.813] GetClientRect (in: hWnd=0x20372, lpRect=0x14e870 | out: lpRect=0x14e870) returned 1 [0074.813] GetWindowTextLengthW (hWnd=0x20372) returned 5 [0074.813] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0074.813] GetSystemMetrics (nIndex=42) returned 0 [0074.813] GetWindowTextW (in: hWnd=0x20372, lpString=0x14e5e0, nMaxCount=6 | out: lpString="Form1") returned 5 [0074.813] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xd, wParam=0x6, lParam=0x14e5e0) returned 0x5 [0074.813] GetClientRect (in: hWnd=0x20372, lpRect=0x14e658 | out: lpRect=0x14e658) returned 1 [0074.816] GetSystemMetrics (nIndex=80) returned 1 [0074.837] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x8d334c, dwData=0x0) returned 1 [0074.857] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14de50 | out: lpmi=0x14de50) returned 1 [0074.864] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x410108c4 [0074.864] GetDeviceCaps (hdc=0x410108c4, index=12) returned 32 [0074.864] GetDeviceCaps (hdc=0x410108c4, index=14) returned 1 [0074.864] DeleteDC (hdc=0x410108c4) returned 1 [0074.866] GetCurrentObject (hdc=0xc0100ae, type=0x1) returned 0x1b00017 [0074.866] GetCurrentObject (hdc=0xc0100ae, type=0x2) returned 0x1900010 [0074.866] GetCurrentObject (hdc=0xc0100ae, type=0x7) returned 0x6b0509bc [0074.866] GetCurrentObject (hdc=0xc0100ae, type=0x6) returned 0x18a0048 [0074.869] SaveDC (hdc=0xc0100ae) returned 1 [0074.870] GetNearestColor (hdc=0xc0100ae, color=0xf0f0f0) returned 0xf0f0f0 [0074.875] CreateSolidBrush (color=0xf0f0f0) returned 0x341009b2 [0074.875] FillRect (hDC=0xc0100ae, lprc=0x14e348, hbr=0x341009b2) returned 1 [0074.876] DeleteObject (ho=0x341009b2) returned 1 [0074.878] RestoreDC (hdc=0xc0100ae, nSavedDC=-1) returned 1 [0074.882] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.882] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0074.882] GetStockObject (i=5) returned 0x1900015 [0074.882] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.882] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0074.882] GetStockObject (i=5) returned 0x1900015 [0074.882] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.883] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0074.883] GetStockObject (i=5) returned 0x1900015 [0074.883] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.884] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0074.884] GetStockObject (i=5) returned 0x1900015 [0074.884] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.884] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0074.884] GetStockObject (i=5) returned 0x1900015 [0074.884] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.884] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0074.884] GetStockObject (i=5) returned 0x1900015 [0074.884] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.885] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0074.885] GetStockObject (i=5) returned 0x1900015 [0074.885] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.885] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0074.885] GetStockObject (i=5) returned 0x1900015 [0074.885] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.885] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0074.885] GetStockObject (i=5) returned 0x1900015 [0074.886] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.886] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0074.886] GetStockObject (i=5) returned 0x1900015 [0074.886] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.886] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0074.886] GetStockObject (i=5) returned 0x1900015 [0074.886] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.886] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0074.886] GetStockObject (i=5) returned 0x1900015 [0074.887] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.887] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0074.887] GetStockObject (i=5) returned 0x1900015 [0074.887] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.887] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0074.887] GetStockObject (i=5) returned 0x1900015 [0074.887] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.888] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0074.888] GetStockObject (i=5) returned 0x1900015 [0074.888] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.888] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0074.888] GetStockObject (i=5) returned 0x1900015 [0074.888] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.888] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0074.888] GetStockObject (i=5) returned 0x1900015 [0074.889] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.889] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0074.889] GetStockObject (i=5) returned 0x1900015 [0074.890] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.890] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0074.890] GetStockObject (i=5) returned 0x1900015 [0074.890] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.890] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0074.890] SetTextColor (hdc=0x220106d6, color=0x0) returned 0x0 [0074.890] SetBkColor (hdc=0x220106d6, color=0xffffff) returned 0xffffff [0074.891] GetWindowPlacement (in: hWnd=0x20372, lpwndpl=0x14e938 | out: lpwndpl=0x14e938) returned 1 [0074.891] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x47, wParam=0x0, lParam=0x14ed90) returned 0x0 [0074.891] GetClientRect (in: hWnd=0x20372, lpRect=0x14e7d0 | out: lpRect=0x14e7d0) returned 1 [0074.891] GetWindowRect (in: hWnd=0x20372, lpRect=0x14e7d0 | out: lpRect=0x14e7d0) returned 1 [0074.892] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0074.892] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0074.892] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0074.892] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x5, wParam=0x0, lParam=0xa90102) returned 0x0 [0074.893] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x3, wParam=0x0, lParam=0x53003c) returned 0x0 [0074.893] GetClientRect (in: hWnd=0x20372, lpRect=0x14e860 | out: lpRect=0x14e860) returned 1 [0074.893] GetWindowRect (in: hWnd=0x20372, lpRect=0x14e860 | out: lpRect=0x14e860) returned 1 [0074.893] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0074.894] IsWindowUnicode (hWnd=0x20372) returned 1 [0074.894] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0074.976] TranslateMessage (lpMsg=0x14ef10) returned 0 [0074.976] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0074.976] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x46, wParam=0x0, lParam=0x14eae0) returned 0x0 [0074.976] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x83, wParam=0x1, lParam=0x14eab0) returned 0x0 [0074.980] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.981] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0074.982] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0074.982] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0074.982] GetWindowPlacement (in: hWnd=0x20372, lpwndpl=0x14e6a8 | out: lpwndpl=0x14e6a8) returned 1 [0074.982] GetClientRect (in: hWnd=0x20372, lpRect=0x14e5c0 | out: lpRect=0x14e5c0) returned 1 [0074.982] GetWindowTextLengthW (hWnd=0x20372) returned 5 [0074.982] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0074.982] GetSystemMetrics (nIndex=42) returned 0 [0074.982] GetWindowTextW (in: hWnd=0x20372, lpString=0x14e330, nMaxCount=6 | out: lpString="Form1") returned 5 [0074.982] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xd, wParam=0x6, lParam=0x14e330) returned 0x5 [0074.982] GetClientRect (in: hWnd=0x20372, lpRect=0x14e3a8 | out: lpRect=0x14e3a8) returned 1 [0074.982] GetCurrentObject (hdc=0x1b0107ae, type=0x1) returned 0x1b00017 [0074.982] GetCurrentObject (hdc=0x1b0107ae, type=0x2) returned 0x1900010 [0074.983] GetCurrentObject (hdc=0x1b0107ae, type=0x7) returned 0x6b0509bc [0074.983] GetCurrentObject (hdc=0x1b0107ae, type=0x6) returned 0x18a0048 [0074.983] SaveDC (hdc=0x1b0107ae) returned 1 [0074.983] GetNearestColor (hdc=0x1b0107ae, color=0xf0f0f0) returned 0xf0f0f0 [0074.983] CreateSolidBrush (color=0xf0f0f0) returned 0x351009b2 [0074.983] FillRect (hDC=0x1b0107ae, lprc=0x14e098, hbr=0x351009b2) returned 1 [0074.984] DeleteObject (ho=0x351009b2) returned 1 [0074.984] RestoreDC (hdc=0x1b0107ae, nSavedDC=-1) returned 1 [0074.984] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.984] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0074.984] GetStockObject (i=5) returned 0x1900015 [0074.984] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.984] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0074.984] GetStockObject (i=5) returned 0x1900015 [0074.985] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.985] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0074.985] GetStockObject (i=5) returned 0x1900015 [0074.985] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.985] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0074.985] GetStockObject (i=5) returned 0x1900015 [0074.985] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.986] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0074.986] GetStockObject (i=5) returned 0x1900015 [0074.986] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.986] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0074.986] GetStockObject (i=5) returned 0x1900015 [0074.986] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.986] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0074.986] GetStockObject (i=5) returned 0x1900015 [0074.986] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.987] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0074.987] GetStockObject (i=5) returned 0x1900015 [0074.987] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.987] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0074.987] GetStockObject (i=5) returned 0x1900015 [0074.987] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.987] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0074.987] GetStockObject (i=5) returned 0x1900015 [0074.988] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.988] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0074.988] GetStockObject (i=5) returned 0x1900015 [0074.988] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.990] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0074.990] GetStockObject (i=5) returned 0x1900015 [0074.991] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.991] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0074.991] GetStockObject (i=5) returned 0x1900015 [0074.991] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.991] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0074.991] GetStockObject (i=5) returned 0x1900015 [0074.991] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.991] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0074.991] GetStockObject (i=5) returned 0x1900015 [0074.992] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.992] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0074.992] GetStockObject (i=5) returned 0x1900015 [0074.992] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.992] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0074.992] GetStockObject (i=5) returned 0x1900015 [0074.992] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.993] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0074.993] GetStockObject (i=5) returned 0x1900015 [0074.993] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.993] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0074.993] GetStockObject (i=5) returned 0x1900015 [0074.993] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.993] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0074.993] SetTextColor (hdc=0xc0100ae, color=0x0) returned 0x0 [0074.993] SetBkColor (hdc=0xc0100ae, color=0xffffff) returned 0xffffff [0074.994] GetWindowPlacement (in: hWnd=0x20372, lpwndpl=0x14e688 | out: lpwndpl=0x14e688) returned 1 [0074.994] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x47, wParam=0x0, lParam=0x14eae0) returned 0x0 [0074.994] GetClientRect (in: hWnd=0x20372, lpRect=0x14e520 | out: lpRect=0x14e520) returned 1 [0074.994] GetWindowRect (in: hWnd=0x20372, lpRect=0x14e520 | out: lpRect=0x14e520) returned 1 [0074.995] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0074.995] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0074.995] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0074.996] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x83, wParam=0x1, lParam=0x14e380) returned 0x0 [0075.000] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.000] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0075.001] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0075.001] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0075.001] GetWindowPlacement (in: hWnd=0x20372, lpwndpl=0x14df78 | out: lpwndpl=0x14df78) returned 1 [0075.001] GetClientRect (in: hWnd=0x20372, lpRect=0x14de90 | out: lpRect=0x14de90) returned 1 [0075.002] GetWindowTextLengthW (hWnd=0x20372) returned 5 [0075.002] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0075.002] GetSystemMetrics (nIndex=42) returned 0 [0075.002] GetWindowTextW (in: hWnd=0x20372, lpString=0x14dc00, nMaxCount=6 | out: lpString="Form1") returned 5 [0075.002] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xd, wParam=0x6, lParam=0x14dc00) returned 0x5 [0075.002] GetClientRect (in: hWnd=0x20372, lpRect=0x14dc78 | out: lpRect=0x14dc78) returned 1 [0075.002] GetCurrentObject (hdc=0x1b0107ae, type=0x1) returned 0x1b00017 [0075.002] GetCurrentObject (hdc=0x1b0107ae, type=0x2) returned 0x1900010 [0075.002] GetCurrentObject (hdc=0x1b0107ae, type=0x7) returned 0x6b0509bc [0075.002] GetCurrentObject (hdc=0x1b0107ae, type=0x6) returned 0x18a0048 [0075.002] SaveDC (hdc=0x1b0107ae) returned 1 [0075.002] GetNearestColor (hdc=0x1b0107ae, color=0xf0f0f0) returned 0xf0f0f0 [0075.002] CreateSolidBrush (color=0xf0f0f0) returned 0x361009b2 [0075.002] FillRect (hDC=0x1b0107ae, lprc=0x14d968, hbr=0x361009b2) returned 1 [0075.083] DeleteObject (ho=0x361009b2) returned 1 [0075.083] RestoreDC (hdc=0x1b0107ae, nSavedDC=-1) returned 1 [0075.083] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.083] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0075.083] GetStockObject (i=5) returned 0x1900015 [0075.083] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.084] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0075.084] GetStockObject (i=5) returned 0x1900015 [0075.084] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.084] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0075.084] GetStockObject (i=5) returned 0x1900015 [0075.084] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.084] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0075.084] GetStockObject (i=5) returned 0x1900015 [0075.085] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.085] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0075.085] GetStockObject (i=5) returned 0x1900015 [0075.085] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.085] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0075.085] GetStockObject (i=5) returned 0x1900015 [0075.086] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.086] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0075.086] GetStockObject (i=5) returned 0x1900015 [0075.086] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.086] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0075.086] GetStockObject (i=5) returned 0x1900015 [0075.086] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.086] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0075.087] GetStockObject (i=5) returned 0x1900015 [0075.087] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.087] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0075.087] GetStockObject (i=5) returned 0x1900015 [0075.087] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.087] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0075.087] GetStockObject (i=5) returned 0x1900015 [0075.087] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.088] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0075.088] GetStockObject (i=5) returned 0x1900015 [0075.088] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.088] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0075.088] GetStockObject (i=5) returned 0x1900015 [0075.088] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.088] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0075.088] GetStockObject (i=5) returned 0x1900015 [0075.089] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.089] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0075.089] GetStockObject (i=5) returned 0x1900015 [0075.089] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.089] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0075.089] GetStockObject (i=5) returned 0x1900015 [0075.090] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.090] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0075.090] GetStockObject (i=5) returned 0x1900015 [0075.090] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.090] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0075.090] GetStockObject (i=5) returned 0x1900015 [0075.090] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.091] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0075.091] GetStockObject (i=5) returned 0x1900015 [0075.091] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.091] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0075.091] SetTextColor (hdc=0x220106d6, color=0x0) returned 0x0 [0075.091] SetBkColor (hdc=0x220106d6, color=0xffffff) returned 0xffffff [0075.092] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0075.092] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.092] IsWindowUnicode (hWnd=0x20374) returned 1 [0075.092] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.092] TranslateMessage (lpMsg=0x14ef10) returned 0 [0075.092] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0075.092] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0075.092] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.092] IsWindowUnicode (hWnd=0x20372) returned 1 [0075.092] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.092] TranslateMessage (lpMsg=0x14ef10) returned 0 [0075.092] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0075.093] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.093] IsWindowUnicode (hWnd=0x20372) returned 1 [0075.093] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.094] TranslateMessage (lpMsg=0x14ef10) returned 0 [0075.094] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0075.095] BeginPaint (in: hWnd=0x20372, lpPaint=0x14e618 | out: lpPaint=0x14e618) returned 0xc0100ae [0075.096] GdipCreateHalftonePalette () returned 0xffffffffcf0808c4 [0075.096] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0075.096] GetWindowTextLengthW (hWnd=0x20372) returned 5 [0075.096] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0075.096] GetSystemMetrics (nIndex=42) returned 0 [0075.096] GetWindowTextW (in: hWnd=0x20372, lpString=0x14e4c0, nMaxCount=6 | out: lpString="Form1") returned 5 [0075.096] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xd, wParam=0x6, lParam=0x14e4c0) returned 0x5 [0075.096] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0075.097] EndPaint (hWnd=0x20372, lpPaint=0x14e5b8) returned 1 [0075.097] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.097] IsWindowUnicode (hWnd=0x2028c) returned 1 [0075.097] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.097] TranslateMessage (lpMsg=0x14ef10) returned 0 [0075.097] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0075.097] BeginPaint (in: hWnd=0x2028c, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0075.097] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0075.098] CreateCompatibleDC (hdc=0x220106d6) returned 0x290106e1 [0075.151] GetObjectType (h=0x220106d6) returned 0x3 [0075.159] CreateCompatibleBitmap (hdc=0x220106d6, cx=1, cy=1) returned 0x240509d2 [0075.159] GetDIBits (in: hdc=0x220106d6, hbm=0x240509d2, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x14df38, usage=0x0 | out: lpvBits=0x0, lpbmi=0x14df38) returned 1 [0075.160] GetDIBits (in: hdc=0x220106d6, hbm=0x240509d2, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x14df38, usage=0x0 | out: lpvBits=0x0, lpbmi=0x14df38) returned 1 [0075.160] DeleteObject (ho=0x240509d2) returned 1 [0075.160] CreateDIBSection (in: hdc=0x220106d6, lpbmi=0x14dfe8, usage=0x0, ppvBits=0x14e5a8, hSection=0x0, offset=0x0 | out: ppvBits=0x14e5a8) returned 0x2305099f [0075.160] SelectObject (hdc=0x290106e1, h=0x2305099f) returned 0x185000f [0075.160] GdipCreateFromHDC (hdc=0x290106e1, graphics=0x14e528) returned 0x0 [0075.188] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0075.189] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0075.193] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0075.193] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be515e0) returned 0x0 [0075.194] GdipIsMatrixIdentity (matrix=0x1be515e0, result=0x14e5b8) returned 0x0 [0075.195] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486010 [0075.195] GdipGetMatrixElements (matrix=0x1be515e0, matrixOut=0x1d486010) returned 0x0 [0075.197] LocalFree (hMem=0x1d486010) returned 0x0 [0075.197] GdipDeleteMatrix (matrix=0x1be515e0) returned 0x0 [0075.199] GdipCreateRegion (region=0x14e550) returned 0x0 [0075.199] GdipGetClip (graphics=0x1be567f0, region=0x1be51620) returned 0x0 [0075.200] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0075.200] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0075.202] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffdb40dbd) returned 0x0 [0075.203] GdipDeleteRegion (region=0x1be51620) returned 0x0 [0075.205] SystemParametersInfoW (in: uiAction=0x42, uiParam=0x10, pvParam=0x14e3b8, fWinIni=0x0 | out: pvParam=0x14e3b8) returned 1 [0075.206] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0075.206] GetCurrentObject (hdc=0x290106e1, type=0x1) returned 0x1b00017 [0075.206] GetCurrentObject (hdc=0x290106e1, type=0x2) returned 0x1900010 [0075.206] GetCurrentObject (hdc=0x290106e1, type=0x7) returned 0x2305099f [0075.206] GetCurrentObject (hdc=0x290106e1, type=0x6) returned 0x18a0048 [0075.207] SaveDC (hdc=0x290106e1) returned 1 [0075.207] GetNearestColor (hdc=0x290106e1, color=0xf0f0f0) returned 0xf0f0f0 [0075.207] GetNearestColor (hdc=0x290106e1, color=0xa0a0a0) returned 0xa0a0a0 [0075.207] GetNearestColor (hdc=0x290106e1, color=0x696969) returned 0x696969 [0075.207] GetNearestColor (hdc=0x290106e1, color=0xa0a0a0) returned 0xa0a0a0 [0075.207] GetNearestColor (hdc=0x290106e1, color=0x0) returned 0x0 [0075.207] GetNearestColor (hdc=0x290106e1, color=0xffffff) returned 0xffffff [0075.207] GetNearestColor (hdc=0x290106e1, color=0xe5e5e5) returned 0xe5e5e5 [0075.207] GetNearestColor (hdc=0x290106e1, color=0xd8d8d8) returned 0xd8d8d8 [0075.207] GetNearestColor (hdc=0x290106e1, color=0x0) returned 0x0 [0075.207] RestoreDC (hdc=0x290106e1, nSavedDC=-1) returned 1 [0075.208] GdipReleaseDC (graphics=0x1be567f0, hdc=0x290106e1) returned 0x0 [0075.208] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.208] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx<\x14\x02", lpUsedDefaultChar=0x0) returned 17 [0075.208] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.217] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21442e0) returned 0x0 [0075.219] GdipSetStringFormatAlign (format=0x1be51620, align=0x1) returned 0x0 [0075.220] GdipSetStringFormatLineAlign (format=0x1be51620, align=0x1) returned 0x0 [0075.220] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x14e368, fWinIni=0x0 | out: pvParam=0x14e368) returned 1 [0075.220] SendMessageW (hWnd=0x20372, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0075.220] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0075.220] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.220] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.220] GetStockObject (i=5) returned 0x1900015 [0075.221] GetStockObject (i=5) returned 0x1900015 [0075.221] GetDlgItem (hDlg=0x20372, nIDDlgItem=131724) returned 0x2028c [0075.221] SendMessageW (hWnd=0x2028c, Msg=0x202b, wParam=0x2028c, lParam=0x14c6f0) returned 0x0 [0075.221] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x202b, wParam=0x2028c, lParam=0x14c6f0) returned 0x0 [0075.221] RedrawWindow (hWnd=0x2028c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.221] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.221] GetStockObject (i=5) returned 0x1900015 [0075.221] GetStockObject (i=5) returned 0x1900015 [0075.222] GetDlgItem (hDlg=0x20372, nIDDlgItem=131726) returned 0x2028e [0075.222] SendMessageW (hWnd=0x2028e, Msg=0x202b, wParam=0x2028e, lParam=0x14c6f0) returned 0x0 [0075.222] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x202b, wParam=0x2028e, lParam=0x14c6f0) returned 0x0 [0075.222] RedrawWindow (hWnd=0x2028e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.222] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.222] GetStockObject (i=5) returned 0x1900015 [0075.222] GetStockObject (i=5) returned 0x1900015 [0075.222] GetDlgItem (hDlg=0x20372, nIDDlgItem=589880) returned 0x90038 [0075.222] SendMessageW (hWnd=0x90038, Msg=0x202b, wParam=0x90038, lParam=0x14c6f0) returned 0x0 [0075.222] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x202b, wParam=0x90038, lParam=0x14c6f0) returned 0x0 [0075.222] RedrawWindow (hWnd=0x90038, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.223] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.223] GetStockObject (i=5) returned 0x1900015 [0075.223] GetStockObject (i=5) returned 0x1900015 [0075.223] GetDlgItem (hDlg=0x20372, nIDDlgItem=131968) returned 0x20380 [0075.223] SendMessageW (hWnd=0x20380, Msg=0x202b, wParam=0x20380, lParam=0x14c6f0) returned 0x0 [0075.223] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x202b, wParam=0x20380, lParam=0x14c6f0) returned 0x0 [0075.274] RedrawWindow (hWnd=0x20380, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.274] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.274] GetStockObject (i=5) returned 0x1900015 [0075.317] GetStockObject (i=5) returned 0x1900015 [0075.317] GetDlgItem (hDlg=0x20372, nIDDlgItem=131972) returned 0x20384 [0075.317] SendMessageW (hWnd=0x20384, Msg=0x202b, wParam=0x20384, lParam=0x14c6f0) returned 0x0 [0075.317] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x202b, wParam=0x20384, lParam=0x14c6f0) returned 0x0 [0075.318] RedrawWindow (hWnd=0x20384, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.318] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.318] GetStockObject (i=5) returned 0x1900015 [0075.318] GetStockObject (i=5) returned 0x1900015 [0075.318] GetDlgItem (hDlg=0x20372, nIDDlgItem=328310) returned 0x50276 [0075.318] SendMessageW (hWnd=0x50276, Msg=0x202b, wParam=0x50276, lParam=0x14c6f0) returned 0x0 [0075.318] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x202b, wParam=0x50276, lParam=0x14c6f0) returned 0x0 [0075.318] RedrawWindow (hWnd=0x50276, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.318] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.319] GetStockObject (i=5) returned 0x1900015 [0075.319] GetStockObject (i=5) returned 0x1900015 [0075.319] GetDlgItem (hDlg=0x20372, nIDDlgItem=66478) returned 0x103ae [0075.319] SendMessageW (hWnd=0x103ae, Msg=0x202b, wParam=0x103ae, lParam=0x14c6f0) returned 0x0 [0075.319] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x202b, wParam=0x103ae, lParam=0x14c6f0) returned 0x0 [0075.319] RedrawWindow (hWnd=0x103ae, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.319] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.319] GetStockObject (i=5) returned 0x1900015 [0075.319] GetStockObject (i=5) returned 0x1900015 [0075.320] GetDlgItem (hDlg=0x20372, nIDDlgItem=66480) returned 0x103b0 [0075.320] SendMessageW (hWnd=0x103b0, Msg=0x202b, wParam=0x103b0, lParam=0x14c6f0) returned 0x0 [0075.320] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x202b, wParam=0x103b0, lParam=0x14c6f0) returned 0x0 [0075.320] RedrawWindow (hWnd=0x103b0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.320] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.320] GetStockObject (i=5) returned 0x1900015 [0075.320] GetStockObject (i=5) returned 0x1900015 [0075.320] GetDlgItem (hDlg=0x20372, nIDDlgItem=66482) returned 0x103b2 [0075.320] SendMessageW (hWnd=0x103b2, Msg=0x202b, wParam=0x103b2, lParam=0x14c6f0) returned 0x0 [0075.320] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x202b, wParam=0x103b2, lParam=0x14c6f0) returned 0x0 [0075.320] RedrawWindow (hWnd=0x103b2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.321] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.321] GetStockObject (i=5) returned 0x1900015 [0075.321] GetStockObject (i=5) returned 0x1900015 [0075.321] GetDlgItem (hDlg=0x20372, nIDDlgItem=66484) returned 0x103b4 [0075.321] SendMessageW (hWnd=0x103b4, Msg=0x202b, wParam=0x103b4, lParam=0x14c6f0) returned 0x0 [0075.321] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x202b, wParam=0x103b4, lParam=0x14c6f0) returned 0x0 [0075.321] RedrawWindow (hWnd=0x103b4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.321] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.322] GetStockObject (i=5) returned 0x1900015 [0075.322] GetStockObject (i=5) returned 0x1900015 [0075.322] GetDlgItem (hDlg=0x20372, nIDDlgItem=66486) returned 0x103b6 [0075.322] SendMessageW (hWnd=0x103b6, Msg=0x202b, wParam=0x103b6, lParam=0x14c6f0) returned 0x0 [0075.322] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x202b, wParam=0x103b6, lParam=0x14c6f0) returned 0x0 [0075.322] RedrawWindow (hWnd=0x103b6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.322] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.322] GetStockObject (i=5) returned 0x1900015 [0075.322] GetStockObject (i=5) returned 0x1900015 [0075.323] GetDlgItem (hDlg=0x20372, nIDDlgItem=66488) returned 0x103b8 [0075.323] SendMessageW (hWnd=0x103b8, Msg=0x202b, wParam=0x103b8, lParam=0x14c6f0) returned 0x0 [0075.323] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x202b, wParam=0x103b8, lParam=0x14c6f0) returned 0x0 [0075.323] RedrawWindow (hWnd=0x103b8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.323] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.323] GetStockObject (i=5) returned 0x1900015 [0075.323] GetStockObject (i=5) returned 0x1900015 [0075.323] GetDlgItem (hDlg=0x20372, nIDDlgItem=66490) returned 0x103ba [0075.323] SendMessageW (hWnd=0x103ba, Msg=0x202b, wParam=0x103ba, lParam=0x14c6f0) returned 0x0 [0075.323] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x202b, wParam=0x103ba, lParam=0x14c6f0) returned 0x0 [0075.323] RedrawWindow (hWnd=0x103ba, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.323] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.324] GetStockObject (i=5) returned 0x1900015 [0075.324] GetStockObject (i=5) returned 0x1900015 [0075.324] GetDlgItem (hDlg=0x20372, nIDDlgItem=66492) returned 0x103bc [0075.324] SendMessageW (hWnd=0x103bc, Msg=0x202b, wParam=0x103bc, lParam=0x14c6f0) returned 0x0 [0075.324] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x202b, wParam=0x103bc, lParam=0x14c6f0) returned 0x0 [0075.324] RedrawWindow (hWnd=0x103bc, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.324] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.324] GetStockObject (i=5) returned 0x1900015 [0075.325] GetStockObject (i=5) returned 0x1900015 [0075.325] GetDlgItem (hDlg=0x20372, nIDDlgItem=66494) returned 0x103be [0075.325] SendMessageW (hWnd=0x103be, Msg=0x202b, wParam=0x103be, lParam=0x14c6f0) returned 0x0 [0075.325] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x202b, wParam=0x103be, lParam=0x14c6f0) returned 0x0 [0075.325] RedrawWindow (hWnd=0x103be, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.325] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.325] GetStockObject (i=5) returned 0x1900015 [0075.325] GetStockObject (i=5) returned 0x1900015 [0075.325] GetDlgItem (hDlg=0x20372, nIDDlgItem=66496) returned 0x103c0 [0075.325] SendMessageW (hWnd=0x103c0, Msg=0x202b, wParam=0x103c0, lParam=0x14c6f0) returned 0x0 [0075.325] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x202b, wParam=0x103c0, lParam=0x14c6f0) returned 0x0 [0075.325] RedrawWindow (hWnd=0x103c0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.326] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.326] GetStockObject (i=5) returned 0x1900015 [0075.326] GetStockObject (i=5) returned 0x1900015 [0075.326] GetDlgItem (hDlg=0x20372, nIDDlgItem=66498) returned 0x103c2 [0075.326] SendMessageW (hWnd=0x103c2, Msg=0x202b, wParam=0x103c2, lParam=0x14c6f0) returned 0x0 [0075.326] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x202b, wParam=0x103c2, lParam=0x14c6f0) returned 0x0 [0075.326] RedrawWindow (hWnd=0x103c2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.326] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.326] GetStockObject (i=5) returned 0x1900015 [0075.326] GetStockObject (i=5) returned 0x1900015 [0075.327] GetDlgItem (hDlg=0x20372, nIDDlgItem=66500) returned 0x103c4 [0075.327] SendMessageW (hWnd=0x103c4, Msg=0x202b, wParam=0x103c4, lParam=0x14c6f0) returned 0x0 [0075.327] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x202b, wParam=0x103c4, lParam=0x14c6f0) returned 0x0 [0075.327] RedrawWindow (hWnd=0x103c4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.327] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.327] GetStockObject (i=5) returned 0x1900015 [0075.328] GetStockObject (i=5) returned 0x1900015 [0075.328] GetDlgItem (hDlg=0x20372, nIDDlgItem=66502) returned 0x103c6 [0075.328] SendMessageW (hWnd=0x103c6, Msg=0x202b, wParam=0x103c6, lParam=0x14c6f0) returned 0x0 [0075.328] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x202b, wParam=0x103c6, lParam=0x14c6f0) returned 0x0 [0075.328] RedrawWindow (hWnd=0x103c6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.328] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0075.328] RedrawWindow (hWnd=0x103c8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.328] RedrawWindow (hWnd=0x20372, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0075.329] GdipSetStringFormatHotkeyPrefix (format=0x1be51620, hotkeyPrefix=2) returned 0x0 [0075.330] GdipGetStringFormatFlags (format=0x1be51620, flags=0x14e378) returned 0x0 [0075.331] GdipGetStringFormatTrimming (format=0x1be51620, trimming=0x14e378) returned 0x0 [0075.332] GdipGetStringFormatHotkeyPrefix (format=0x1be51620, hotkeyPrefix=0x14e378) returned 0x0 [0075.334] GdipGetFontSize (font=0x1be51620, size=0x14e378) returned 0x0 [0075.335] GdipGetFontStyle (font=0x1be51620, style=0x14e378) returned 0x0 [0075.335] GdipDeleteStringFormat (format=0x1be51620) returned 0x0 [0075.335] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0075.336] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.336] CreateCompatibleDC (hdc=0x0) returned 0x3b01099b [0075.336] GetCurrentObject (hdc=0x3b01099b, type=0x1) returned 0x1b00017 [0075.336] GetCurrentObject (hdc=0x3b01099b, type=0x2) returned 0x1900010 [0075.336] GetCurrentObject (hdc=0x3b01099b, type=0x7) returned 0x185000f [0075.336] GetCurrentObject (hdc=0x3b01099b, type=0x6) returned 0x18a0048 [0075.336] SaveDC (hdc=0x3b01099b) returned 1 [0075.336] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0075.337] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2144b80) returned 0x0 [0075.338] GdipSetStringFormatFlags (format=0x1be516b0, flags=0) returned 0x0 [0075.339] GdipSetStringFormatTrimming (format=0x1be516b0, trimming=0x1) returned 0x0 [0075.339] GdipSetStringFormatHotkeyPrefix (format=0x1be516b0, hotkeyPrefix=2) returned 0x0 [0075.339] GdipSetStringFormatAlign (format=0x1be516b0, align=0x1) returned 0x0 [0075.339] GdipSetStringFormatLineAlign (format=0x1be516b0, align=0x1) returned 0x0 [0075.341] GdipMeasureString (graphics=0x1be56bc0, string="*", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be516b0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0075.341] GdipDeleteStringFormat (format=0x1be516b0) returned 0x0 [0075.341] GdipDeleteGraphics (graphics=0x1be56bc0) returned 0x0 [0075.342] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0075.342] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.343] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0075.343] GdipGetClip (graphics=0x1be567f0, region=0x1be51620) returned 0x0 [0075.343] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0075.343] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be516e0) returned 0x0 [0075.344] GdipIsMatrixIdentity (matrix=0x1be516e0, result=0x14e128) returned 0x0 [0075.344] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4868d0 [0075.344] GdipGetMatrixElements (matrix=0x1be516e0, matrixOut=0x1d4868d0) returned 0x0 [0075.345] LocalFree (hMem=0x1d4868d0) returned 0x0 [0075.345] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486450 [0075.345] GdipGetMatrixElements (matrix=0x1be516e0, matrixOut=0x1d486450) returned 0x0 [0075.345] LocalFree (hMem=0x1d486450) returned 0x0 [0075.345] GdipDeleteMatrix (matrix=0x1be516e0) returned 0x0 [0075.345] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0075.345] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0075.346] GdipGetRegionHRgn (region=0x1be51620, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0075.347] GdipDeleteRegion (region=0x1be51620) returned 0x0 [0075.347] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0075.347] GetCurrentObject (hdc=0x290106e1, type=0x1) returned 0x1b00017 [0075.348] GetCurrentObject (hdc=0x290106e1, type=0x2) returned 0x1900010 [0075.348] GetCurrentObject (hdc=0x290106e1, type=0x7) returned 0x2305099f [0075.348] GetCurrentObject (hdc=0x290106e1, type=0x6) returned 0x18a0048 [0075.348] SaveDC (hdc=0x290106e1) returned 1 [0075.447] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x230409d6 [0075.448] GetClipRgn (hdc=0x290106e1, hrgn=0x230409d6) returned 0 [0075.448] SelectClipRgn (hdc=0x290106e1, hrgn=0x350407ff) returned 2 [0075.448] DeleteObject (ho=0x230409d6) returned 1 [0075.448] DeleteObject (ho=0x350407ff) returned 1 [0075.449] OffsetViewportOrgEx (in: hdc=0x290106e1, x=0, y=0, lppt=0x2144f58 | out: lppt=0x2144f58) returned 1 [0075.449] GetNearestColor (hdc=0x290106e1, color=0xf0f0f0) returned 0xf0f0f0 [0075.449] CreateSolidBrush (color=0xf0f0f0) returned 0x371009b2 [0075.449] FillRect (hDC=0x290106e1, lprc=0x14e1c8, hbr=0x371009b2) returned 1 [0075.449] DeleteObject (ho=0x371009b2) returned 1 [0075.449] RestoreDC (hdc=0x290106e1, nSavedDC=-1) returned 1 [0075.450] GdipReleaseDC (graphics=0x1be567f0, hdc=0x290106e1) returned 0x0 [0075.450] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.451] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0075.451] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.451] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2145058) returned 0x0 [0075.451] GdipSetStringFormatAlign (format=0x1be515e0, align=0x1) returned 0x0 [0075.451] GdipSetStringFormatLineAlign (format=0x1be515e0, align=0x1) returned 0x0 [0075.451] GdipSetStringFormatHotkeyPrefix (format=0x1be515e0, hotkeyPrefix=2) returned 0x0 [0075.452] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0075.454] GdipDrawString (graphics=0x1be567f0, string="*", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be515e0, brush=0x1be51720) returned 0x0 [0075.464] GdipDeleteBrush (brush=0x1be51720) returned 0x0 [0075.464] GdipDeleteStringFormat (format=0x1be515e0) returned 0x0 [0075.464] GetFocus () returned 0x103c8 [0075.464] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.464] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExVÓ\x1a", lpUsedDefaultChar=0x0) returned 17 [0075.464] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.464] GdipCreateRegion (region=0x14e030) returned 0x0 [0075.464] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0075.464] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0075.465] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be516a0) returned 0x0 [0075.465] GdipIsMatrixIdentity (matrix=0x1be516a0, result=0x14e098) returned 0x0 [0075.465] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486010 [0075.465] GdipGetMatrixElements (matrix=0x1be516a0, matrixOut=0x1d486010) returned 0x0 [0075.465] LocalFree (hMem=0x1d486010) returned 0x0 [0075.465] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b90 [0075.466] GdipGetMatrixElements (matrix=0x1be516a0, matrixOut=0x1d486b90) returned 0x0 [0075.466] LocalFree (hMem=0x1d486b90) returned 0x0 [0075.466] GdipDeleteMatrix (matrix=0x1be516a0) returned 0x0 [0075.466] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0075.466] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0075.466] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0075.466] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0075.466] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0075.466] GetCurrentObject (hdc=0x290106e1, type=0x1) returned 0x1b00017 [0075.467] GetCurrentObject (hdc=0x290106e1, type=0x2) returned 0x1900010 [0075.467] GetCurrentObject (hdc=0x290106e1, type=0x7) returned 0x2305099f [0075.467] GetCurrentObject (hdc=0x290106e1, type=0x6) returned 0x18a0048 [0075.467] SaveDC (hdc=0x290106e1) returned 1 [0075.467] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x360407ff [0075.467] GetClipRgn (hdc=0x290106e1, hrgn=0x360407ff) returned 0 [0075.467] SelectClipRgn (hdc=0x290106e1, hrgn=0x240409d6) returned 2 [0075.467] DeleteObject (ho=0x360407ff) returned 1 [0075.467] DeleteObject (ho=0x240409d6) returned 1 [0075.467] OffsetViewportOrgEx (in: hdc=0x290106e1, x=0, y=0, lppt=0x2145440 | out: lppt=0x2145440) returned 1 [0075.470] GetROP2 (hdc=0x290106e1) returned 13 [0075.471] GetBkMode (hdc=0x290106e1) returned 2 [0075.473] SetBkMode (hdc=0x290106e1, mode=1) returned 2 [0075.474] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x573008c7 [0075.475] SelectObject (hdc=0x290106e1, h=0x573008c7) returned 0x1b00017 [0075.475] MoveToEx (in: hdc=0x290106e1, x=25, y=0, lppt=0x21454a8 | out: lppt=0x21454a8) returned 1 [0075.476] LineTo (hdc=0x290106e1, x=0, y=0) returned 1 [0075.476] SetBkMode (hdc=0x290106e1, mode=2) returned 1 [0075.476] MoveToEx (in: hdc=0x290106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.476] GetROP2 (hdc=0x290106e1) returned 13 [0075.476] GetBkMode (hdc=0x290106e1) returned 2 [0075.476] SetBkMode (hdc=0x290106e1, mode=1) returned 2 [0075.476] SelectObject (hdc=0x290106e1, h=0x573008c7) returned 0x573008c7 [0075.476] MoveToEx (in: hdc=0x290106e1, x=0, y=0, lppt=0x21454c0 | out: lppt=0x21454c0) returned 1 [0075.476] LineTo (hdc=0x290106e1, x=0, y=22) returned 1 [0075.476] SetBkMode (hdc=0x290106e1, mode=2) returned 1 [0075.476] MoveToEx (in: hdc=0x290106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.476] SelectObject (hdc=0x290106e1, h=0x1b00017) returned 0x573008c7 [0075.476] DeleteObject (ho=0x573008c7) returned 1 [0075.476] GetROP2 (hdc=0x290106e1) returned 13 [0075.476] GetBkMode (hdc=0x290106e1) returned 2 [0075.476] SetBkMode (hdc=0x290106e1, mode=1) returned 2 [0075.476] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x2d30097e [0075.476] SelectObject (hdc=0x290106e1, h=0x2d30097e) returned 0x1b00017 [0075.477] MoveToEx (in: hdc=0x290106e1, x=0, y=22, lppt=0x2145528 | out: lppt=0x2145528) returned 1 [0075.477] LineTo (hdc=0x290106e1, x=25, y=22) returned 1 [0075.477] SetBkMode (hdc=0x290106e1, mode=2) returned 1 [0075.477] MoveToEx (in: hdc=0x290106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.477] GetROP2 (hdc=0x290106e1) returned 13 [0075.477] GetBkMode (hdc=0x290106e1) returned 2 [0075.477] SetBkMode (hdc=0x290106e1, mode=1) returned 2 [0075.477] SelectObject (hdc=0x290106e1, h=0x2d30097e) returned 0x2d30097e [0075.477] MoveToEx (in: hdc=0x290106e1, x=25, y=22, lppt=0x2145540 | out: lppt=0x2145540) returned 1 [0075.477] LineTo (hdc=0x290106e1, x=25, y=-1) returned 1 [0075.477] SetBkMode (hdc=0x290106e1, mode=2) returned 1 [0075.477] MoveToEx (in: hdc=0x290106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.477] SelectObject (hdc=0x290106e1, h=0x1b00017) returned 0x2d30097e [0075.477] DeleteObject (ho=0x2d30097e) returned 1 [0075.477] GetROP2 (hdc=0x290106e1) returned 13 [0075.477] GetBkMode (hdc=0x290106e1) returned 2 [0075.477] SetBkMode (hdc=0x290106e1, mode=1) returned 2 [0075.477] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x583008c7 [0075.477] SelectObject (hdc=0x290106e1, h=0x583008c7) returned 0x1b00017 [0075.477] MoveToEx (in: hdc=0x290106e1, x=24, y=1, lppt=0x21455a8 | out: lppt=0x21455a8) returned 1 [0075.477] LineTo (hdc=0x290106e1, x=1, y=1) returned 1 [0075.477] SetBkMode (hdc=0x290106e1, mode=2) returned 1 [0075.478] MoveToEx (in: hdc=0x290106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.478] GetROP2 (hdc=0x290106e1) returned 13 [0075.478] GetBkMode (hdc=0x290106e1) returned 2 [0075.478] SetBkMode (hdc=0x290106e1, mode=1) returned 2 [0075.478] SelectObject (hdc=0x290106e1, h=0x583008c7) returned 0x583008c7 [0075.478] MoveToEx (in: hdc=0x290106e1, x=1, y=1, lppt=0x21455c0 | out: lppt=0x21455c0) returned 1 [0075.478] LineTo (hdc=0x290106e1, x=1, y=21) returned 1 [0075.478] SetBkMode (hdc=0x290106e1, mode=2) returned 1 [0075.478] MoveToEx (in: hdc=0x290106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.478] SelectObject (hdc=0x290106e1, h=0x1b00017) returned 0x583008c7 [0075.478] DeleteObject (ho=0x583008c7) returned 1 [0075.478] GetROP2 (hdc=0x290106e1) returned 13 [0075.478] GetBkMode (hdc=0x290106e1) returned 2 [0075.478] SetBkMode (hdc=0x290106e1, mode=1) returned 2 [0075.478] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x2e30097e [0075.478] SelectObject (hdc=0x290106e1, h=0x2e30097e) returned 0x1b00017 [0075.478] MoveToEx (in: hdc=0x290106e1, x=1, y=21, lppt=0x2145628 | out: lppt=0x2145628) returned 1 [0075.478] LineTo (hdc=0x290106e1, x=24, y=21) returned 1 [0075.478] SetBkMode (hdc=0x290106e1, mode=2) returned 1 [0075.478] MoveToEx (in: hdc=0x290106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.478] GetROP2 (hdc=0x290106e1) returned 13 [0075.479] GetBkMode (hdc=0x290106e1) returned 2 [0075.479] SetBkMode (hdc=0x290106e1, mode=1) returned 2 [0075.479] SelectObject (hdc=0x290106e1, h=0x2e30097e) returned 0x2e30097e [0075.479] MoveToEx (in: hdc=0x290106e1, x=24, y=21, lppt=0x2145640 | out: lppt=0x2145640) returned 1 [0075.479] LineTo (hdc=0x290106e1, x=24, y=0) returned 1 [0075.479] SetBkMode (hdc=0x290106e1, mode=2) returned 1 [0075.479] MoveToEx (in: hdc=0x290106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.479] SelectObject (hdc=0x290106e1, h=0x1b00017) returned 0x2e30097e [0075.479] DeleteObject (ho=0x2e30097e) returned 1 [0075.479] RestoreDC (hdc=0x290106e1, nSavedDC=-1) returned 1 [0075.479] GdipReleaseDC (graphics=0x1be567f0, hdc=0x290106e1) returned 0x0 [0075.479] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0075.480] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x290106e1, x1=0, y1=0, rop=0xcc0020) returned 1 [0075.480] GdipReleaseDC (graphics=0x1be567f0, hdc=0x290106e1) returned 0x0 [0075.480] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0075.480] SelectObject (hdc=0x290106e1, h=0x185000f) returned 0x2305099f [0075.480] DeleteDC (hdc=0x290106e1) returned 1 [0075.480] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0075.480] EndPaint (hWnd=0x2028c, lpPaint=0x14e548) returned 1 [0075.481] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.481] IsWindowUnicode (hWnd=0x20372) returned 1 [0075.481] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.481] TranslateMessage (lpMsg=0x14ef10) returned 0 [0075.481] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0075.481] BeginPaint (in: hWnd=0x20372, lpPaint=0x14e618 | out: lpPaint=0x14e618) returned 0x220106d6 [0075.481] GetWindowPlacement (in: hWnd=0x20372, lpwndpl=0x14e108 | out: lpwndpl=0x14e108) returned 1 [0075.481] GetClientRect (in: hWnd=0x20372, lpRect=0x14e020 | out: lpRect=0x14e020) returned 1 [0075.481] GetWindowTextLengthW (hWnd=0x20372) returned 5 [0075.481] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0075.481] GetSystemMetrics (nIndex=42) returned 0 [0075.481] GetWindowTextW (in: hWnd=0x20372, lpString=0x14dd90, nMaxCount=6 | out: lpString="Form1") returned 5 [0075.481] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xd, wParam=0x6, lParam=0x14dd90) returned 0x5 [0075.481] GetClientRect (in: hWnd=0x20372, lpRect=0x14de08 | out: lpRect=0x14de08) returned 1 [0075.481] GetCurrentObject (hdc=0x220106d6, type=0x1) returned 0x1b00017 [0075.482] GetCurrentObject (hdc=0x220106d6, type=0x2) returned 0x1900010 [0075.482] GetCurrentObject (hdc=0x220106d6, type=0x7) returned 0x6b0509bc [0075.482] GetCurrentObject (hdc=0x220106d6, type=0x6) returned 0x18a0048 [0075.482] SaveDC (hdc=0x220106d6) returned 1 [0075.482] GetNearestColor (hdc=0x220106d6, color=0xf0f0f0) returned 0xf0f0f0 [0075.482] CreateSolidBrush (color=0xf0f0f0) returned 0x381009b2 [0075.482] FillRect (hDC=0x220106d6, lprc=0x14daf8, hbr=0x381009b2) returned 1 [0075.482] DeleteObject (ho=0x381009b2) returned 1 [0075.482] RestoreDC (hdc=0x220106d6, nSavedDC=-1) returned 1 [0075.482] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0075.482] GetWindowTextLengthW (hWnd=0x20372) returned 5 [0075.482] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0075.482] GetSystemMetrics (nIndex=42) returned 0 [0075.482] GetWindowTextW (in: hWnd=0x20372, lpString=0x14e4c0, nMaxCount=6 | out: lpString="Form1") returned 5 [0075.482] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xd, wParam=0x6, lParam=0x14e4c0) returned 0x5 [0075.482] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0075.483] EndPaint (hWnd=0x20372, lpPaint=0x14e5b8) returned 1 [0075.483] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.483] IsWindowUnicode (hWnd=0x2028c) returned 1 [0075.483] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.483] TranslateMessage (lpMsg=0x14ef10) returned 0 [0075.483] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0075.483] BeginPaint (in: hWnd=0x2028c, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0075.483] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.483] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0075.483] GetStockObject (i=5) returned 0x1900015 [0075.484] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0075.484] CreateCompatibleDC (hdc=0xc0100ae) returned 0x30010988 [0075.484] SelectObject (hdc=0x30010988, h=0x2305099f) returned 0x185000f [0075.484] GdipCreateFromHDC (hdc=0x30010988, graphics=0x14e528) returned 0x0 [0075.484] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0075.484] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0075.484] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0075.484] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be515e0) returned 0x0 [0075.484] GdipIsMatrixIdentity (matrix=0x1be515e0, result=0x14e5b8) returned 0x0 [0075.484] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4868d0 [0075.484] GdipGetMatrixElements (matrix=0x1be515e0, matrixOut=0x1d4868d0) returned 0x0 [0075.485] LocalFree (hMem=0x1d4868d0) returned 0x0 [0075.485] GdipDeleteMatrix (matrix=0x1be515e0) returned 0x0 [0075.485] GdipCreateRegion (region=0x14e550) returned 0x0 [0075.485] GdipGetClip (graphics=0x1be567f0, region=0x1be51620) returned 0x0 [0075.485] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0075.485] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0075.486] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffdb10dbd) returned 0x0 [0075.486] GdipDeleteRegion (region=0x1be51620) returned 0x0 [0075.486] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0075.486] GetCurrentObject (hdc=0x30010988, type=0x1) returned 0x1b00017 [0075.486] GetCurrentObject (hdc=0x30010988, type=0x2) returned 0x1900010 [0075.486] GetCurrentObject (hdc=0x30010988, type=0x7) returned 0x2305099f [0075.486] GetCurrentObject (hdc=0x30010988, type=0x6) returned 0x18a0048 [0075.487] SaveDC (hdc=0x30010988) returned 1 [0075.487] GetNearestColor (hdc=0x30010988, color=0xf0f0f0) returned 0xf0f0f0 [0075.487] GetNearestColor (hdc=0x30010988, color=0xa0a0a0) returned 0xa0a0a0 [0075.487] GetNearestColor (hdc=0x30010988, color=0x696969) returned 0x696969 [0075.488] GetNearestColor (hdc=0x30010988, color=0xa0a0a0) returned 0xa0a0a0 [0075.488] GetNearestColor (hdc=0x30010988, color=0x0) returned 0x0 [0075.488] GetNearestColor (hdc=0x30010988, color=0xffffff) returned 0xffffff [0075.488] GetNearestColor (hdc=0x30010988, color=0xe5e5e5) returned 0xe5e5e5 [0075.488] GetNearestColor (hdc=0x30010988, color=0xd8d8d8) returned 0xd8d8d8 [0075.488] GetNearestColor (hdc=0x30010988, color=0x0) returned 0x0 [0075.489] RestoreDC (hdc=0x30010988, nSavedDC=-1) returned 1 [0075.599] GdipReleaseDC (graphics=0x1be567f0, hdc=0x30010988) returned 0x0 [0075.599] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.600] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx^\x14\x02", lpUsedDefaultChar=0x0) returned 17 [0075.600] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.600] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2146488) returned 0x0 [0075.600] GdipSetStringFormatAlign (format=0x1be51620, align=0x1) returned 0x0 [0075.600] GdipSetStringFormatLineAlign (format=0x1be51620, align=0x1) returned 0x0 [0075.600] GdipSetStringFormatHotkeyPrefix (format=0x1be51620, hotkeyPrefix=2) returned 0x0 [0075.600] GdipGetStringFormatFlags (format=0x1be51620, flags=0x14e378) returned 0x0 [0075.600] GdipGetStringFormatTrimming (format=0x1be51620, trimming=0x14e378) returned 0x0 [0075.600] GdipGetStringFormatHotkeyPrefix (format=0x1be51620, hotkeyPrefix=0x14e378) returned 0x0 [0075.600] GdipGetFontSize (font=0x1be51620, size=0x14e378) returned 0x0 [0075.600] GdipGetFontStyle (font=0x1be51620, style=0x14e378) returned 0x0 [0075.600] GdipDeleteStringFormat (format=0x1be51620) returned 0x0 [0075.600] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.600] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0075.601] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.601] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0075.601] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21465b8) returned 0x0 [0075.601] GdipSetStringFormatFlags (format=0x1be516b0, flags=0) returned 0x0 [0075.601] GdipSetStringFormatTrimming (format=0x1be516b0, trimming=0x1) returned 0x0 [0075.601] GdipSetStringFormatHotkeyPrefix (format=0x1be516b0, hotkeyPrefix=2) returned 0x0 [0075.601] GdipSetStringFormatAlign (format=0x1be516b0, align=0x1) returned 0x0 [0075.601] GdipSetStringFormatLineAlign (format=0x1be516b0, align=0x1) returned 0x0 [0075.601] GdipMeasureString (graphics=0x1be56d20, string="*", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be516b0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0075.601] GdipDeleteStringFormat (format=0x1be516b0) returned 0x0 [0075.601] GdipDeleteGraphics (graphics=0x1be56d20) returned 0x0 [0075.601] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.602] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0075.602] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.602] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0075.602] GdipGetClip (graphics=0x1be567f0, region=0x1be51620) returned 0x0 [0075.602] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0075.602] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be516e0) returned 0x0 [0075.602] GdipIsMatrixIdentity (matrix=0x1be516e0, result=0x14e128) returned 0x0 [0075.602] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486dd0 [0075.602] GdipGetMatrixElements (matrix=0x1be516e0, matrixOut=0x1d486dd0) returned 0x0 [0075.603] LocalFree (hMem=0x1d486dd0) returned 0x0 [0075.603] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4863d0 [0075.603] GdipGetMatrixElements (matrix=0x1be516e0, matrixOut=0x1d4863d0) returned 0x0 [0075.604] LocalFree (hMem=0x1d4863d0) returned 0x0 [0075.604] GdipDeleteMatrix (matrix=0x1be516e0) returned 0x0 [0075.604] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0075.604] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0075.604] GdipGetRegionHRgn (region=0x1be51620, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0075.604] GdipDeleteRegion (region=0x1be51620) returned 0x0 [0075.604] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0075.604] GetCurrentObject (hdc=0x30010988, type=0x1) returned 0x1b00017 [0075.604] GetCurrentObject (hdc=0x30010988, type=0x2) returned 0x1900010 [0075.604] GetCurrentObject (hdc=0x30010988, type=0x7) returned 0x2305099f [0075.604] GetCurrentObject (hdc=0x30010988, type=0x6) returned 0x18a0048 [0075.604] SaveDC (hdc=0x30010988) returned 1 [0075.604] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x250409d6 [0075.604] GetClipRgn (hdc=0x30010988, hrgn=0x250409d6) returned 0 [0075.604] SelectClipRgn (hdc=0x30010988, hrgn=0x370407ff) returned 2 [0075.604] DeleteObject (ho=0x250409d6) returned 1 [0075.604] DeleteObject (ho=0x370407ff) returned 1 [0075.604] OffsetViewportOrgEx (in: hdc=0x30010988, x=0, y=0, lppt=0x2146978 | out: lppt=0x2146978) returned 1 [0075.605] GetNearestColor (hdc=0x30010988, color=0xf0f0f0) returned 0xf0f0f0 [0075.605] CreateSolidBrush (color=0xf0f0f0) returned 0x391009b2 [0075.605] FillRect (hDC=0x30010988, lprc=0x14e1c8, hbr=0x391009b2) returned 1 [0075.605] DeleteObject (ho=0x391009b2) returned 1 [0075.605] RestoreDC (hdc=0x30010988, nSavedDC=-1) returned 1 [0075.605] GdipReleaseDC (graphics=0x1be567f0, hdc=0x30010988) returned 0x0 [0075.605] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.605] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0075.605] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.605] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2146a78) returned 0x0 [0075.605] GdipSetStringFormatAlign (format=0x1be515e0, align=0x1) returned 0x0 [0075.605] GdipSetStringFormatLineAlign (format=0x1be515e0, align=0x1) returned 0x0 [0075.605] GdipSetStringFormatHotkeyPrefix (format=0x1be515e0, hotkeyPrefix=2) returned 0x0 [0075.605] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0075.606] GdipDrawString (graphics=0x1be567f0, string="*", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be515e0, brush=0x1be51720) returned 0x0 [0075.606] GdipDeleteBrush (brush=0x1be51720) returned 0x0 [0075.606] GdipDeleteStringFormat (format=0x1be515e0) returned 0x0 [0075.606] GetFocus () returned 0x103c8 [0075.606] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.606] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx[\x14\x02", lpUsedDefaultChar=0x0) returned 17 [0075.606] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.606] GdipCreateRegion (region=0x14e030) returned 0x0 [0075.606] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0075.606] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0075.606] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be516a0) returned 0x0 [0075.606] GdipIsMatrixIdentity (matrix=0x1be516a0, result=0x14e098) returned 0x0 [0075.607] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486a90 [0075.607] GdipGetMatrixElements (matrix=0x1be516a0, matrixOut=0x1d486a90) returned 0x0 [0075.607] LocalFree (hMem=0x1d486a90) returned 0x0 [0075.607] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486750 [0075.607] GdipGetMatrixElements (matrix=0x1be516a0, matrixOut=0x1d486750) returned 0x0 [0075.608] LocalFree (hMem=0x1d486750) returned 0x0 [0075.608] GdipDeleteMatrix (matrix=0x1be516a0) returned 0x0 [0075.608] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0075.608] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0075.608] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0075.608] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0075.608] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0075.608] GetCurrentObject (hdc=0x30010988, type=0x1) returned 0x1b00017 [0075.608] GetCurrentObject (hdc=0x30010988, type=0x2) returned 0x1900010 [0075.608] GetCurrentObject (hdc=0x30010988, type=0x7) returned 0x2305099f [0075.608] GetCurrentObject (hdc=0x30010988, type=0x6) returned 0x18a0048 [0075.608] SaveDC (hdc=0x30010988) returned 1 [0075.608] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x380407ff [0075.608] GetClipRgn (hdc=0x30010988, hrgn=0x380407ff) returned 0 [0075.608] SelectClipRgn (hdc=0x30010988, hrgn=0x260409d6) returned 2 [0075.609] DeleteObject (ho=0x380407ff) returned 1 [0075.609] DeleteObject (ho=0x260409d6) returned 1 [0075.609] OffsetViewportOrgEx (in: hdc=0x30010988, x=0, y=0, lppt=0x2146e60 | out: lppt=0x2146e60) returned 1 [0075.609] GetROP2 (hdc=0x30010988) returned 13 [0075.609] GetBkMode (hdc=0x30010988) returned 2 [0075.609] SetBkMode (hdc=0x30010988, mode=1) returned 2 [0075.609] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x2f30097e [0075.609] SelectObject (hdc=0x30010988, h=0x2f30097e) returned 0x1b00017 [0075.609] MoveToEx (in: hdc=0x30010988, x=25, y=0, lppt=0x2146ec8 | out: lppt=0x2146ec8) returned 1 [0075.609] LineTo (hdc=0x30010988, x=0, y=0) returned 1 [0075.609] SetBkMode (hdc=0x30010988, mode=2) returned 1 [0075.609] MoveToEx (in: hdc=0x30010988, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.609] GetROP2 (hdc=0x30010988) returned 13 [0075.609] GetBkMode (hdc=0x30010988) returned 2 [0075.609] SetBkMode (hdc=0x30010988, mode=1) returned 2 [0075.609] SelectObject (hdc=0x30010988, h=0x2f30097e) returned 0x2f30097e [0075.609] MoveToEx (in: hdc=0x30010988, x=0, y=0, lppt=0x2146ee0 | out: lppt=0x2146ee0) returned 1 [0075.609] LineTo (hdc=0x30010988, x=0, y=22) returned 1 [0075.609] SetBkMode (hdc=0x30010988, mode=2) returned 1 [0075.609] MoveToEx (in: hdc=0x30010988, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.609] SelectObject (hdc=0x30010988, h=0x1b00017) returned 0x2f30097e [0075.609] DeleteObject (ho=0x2f30097e) returned 1 [0075.610] GetROP2 (hdc=0x30010988) returned 13 [0075.610] GetBkMode (hdc=0x30010988) returned 2 [0075.610] SetBkMode (hdc=0x30010988, mode=1) returned 2 [0075.610] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x593008c7 [0075.610] SelectObject (hdc=0x30010988, h=0x593008c7) returned 0x1b00017 [0075.610] MoveToEx (in: hdc=0x30010988, x=0, y=22, lppt=0x2146f48 | out: lppt=0x2146f48) returned 1 [0075.610] LineTo (hdc=0x30010988, x=25, y=22) returned 1 [0075.610] SetBkMode (hdc=0x30010988, mode=2) returned 1 [0075.610] MoveToEx (in: hdc=0x30010988, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.610] GetROP2 (hdc=0x30010988) returned 13 [0075.610] GetBkMode (hdc=0x30010988) returned 2 [0075.610] SetBkMode (hdc=0x30010988, mode=1) returned 2 [0075.610] SelectObject (hdc=0x30010988, h=0x593008c7) returned 0x593008c7 [0075.610] MoveToEx (in: hdc=0x30010988, x=25, y=22, lppt=0x2146f60 | out: lppt=0x2146f60) returned 1 [0075.610] LineTo (hdc=0x30010988, x=25, y=-1) returned 1 [0075.610] SetBkMode (hdc=0x30010988, mode=2) returned 1 [0075.610] MoveToEx (in: hdc=0x30010988, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.610] SelectObject (hdc=0x30010988, h=0x1b00017) returned 0x593008c7 [0075.610] DeleteObject (ho=0x593008c7) returned 1 [0075.610] GetROP2 (hdc=0x30010988) returned 13 [0075.610] GetBkMode (hdc=0x30010988) returned 2 [0075.611] SetBkMode (hdc=0x30010988, mode=1) returned 2 [0075.611] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x3030097e [0075.611] SelectObject (hdc=0x30010988, h=0x3030097e) returned 0x1b00017 [0075.611] MoveToEx (in: hdc=0x30010988, x=24, y=1, lppt=0x2146fc8 | out: lppt=0x2146fc8) returned 1 [0075.611] LineTo (hdc=0x30010988, x=1, y=1) returned 1 [0075.611] SetBkMode (hdc=0x30010988, mode=2) returned 1 [0075.611] MoveToEx (in: hdc=0x30010988, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.611] GetROP2 (hdc=0x30010988) returned 13 [0075.611] GetBkMode (hdc=0x30010988) returned 2 [0075.611] SetBkMode (hdc=0x30010988, mode=1) returned 2 [0075.611] SelectObject (hdc=0x30010988, h=0x3030097e) returned 0x3030097e [0075.611] MoveToEx (in: hdc=0x30010988, x=1, y=1, lppt=0x2146fe0 | out: lppt=0x2146fe0) returned 1 [0075.611] LineTo (hdc=0x30010988, x=1, y=21) returned 1 [0075.611] SetBkMode (hdc=0x30010988, mode=2) returned 1 [0075.611] MoveToEx (in: hdc=0x30010988, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.611] SelectObject (hdc=0x30010988, h=0x1b00017) returned 0x3030097e [0075.611] DeleteObject (ho=0x3030097e) returned 1 [0075.611] GetROP2 (hdc=0x30010988) returned 13 [0075.611] GetBkMode (hdc=0x30010988) returned 2 [0075.611] SetBkMode (hdc=0x30010988, mode=1) returned 2 [0075.611] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x5a3008c7 [0075.611] SelectObject (hdc=0x30010988, h=0x5a3008c7) returned 0x1b00017 [0075.612] MoveToEx (in: hdc=0x30010988, x=1, y=21, lppt=0x2147048 | out: lppt=0x2147048) returned 1 [0075.612] LineTo (hdc=0x30010988, x=24, y=21) returned 1 [0075.612] SetBkMode (hdc=0x30010988, mode=2) returned 1 [0075.612] MoveToEx (in: hdc=0x30010988, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.612] GetROP2 (hdc=0x30010988) returned 13 [0075.612] GetBkMode (hdc=0x30010988) returned 2 [0075.612] SetBkMode (hdc=0x30010988, mode=1) returned 2 [0075.612] SelectObject (hdc=0x30010988, h=0x5a3008c7) returned 0x5a3008c7 [0075.612] MoveToEx (in: hdc=0x30010988, x=24, y=21, lppt=0x2147060 | out: lppt=0x2147060) returned 1 [0075.612] LineTo (hdc=0x30010988, x=24, y=0) returned 1 [0075.612] SetBkMode (hdc=0x30010988, mode=2) returned 1 [0075.612] MoveToEx (in: hdc=0x30010988, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.612] SelectObject (hdc=0x30010988, h=0x1b00017) returned 0x5a3008c7 [0075.612] DeleteObject (ho=0x5a3008c7) returned 1 [0075.612] RestoreDC (hdc=0x30010988, nSavedDC=-1) returned 1 [0075.612] GdipReleaseDC (graphics=0x1be567f0, hdc=0x30010988) returned 0x0 [0075.612] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0075.612] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x30010988, x1=0, y1=0, rop=0xcc0020) returned 1 [0075.613] GdipReleaseDC (graphics=0x1be567f0, hdc=0x30010988) returned 0x0 [0075.613] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0075.613] SelectObject (hdc=0x30010988, h=0x185000f) returned 0x2305099f [0075.613] DeleteDC (hdc=0x30010988) returned 1 [0075.613] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0075.613] EndPaint (hWnd=0x2028c, lpPaint=0x14e548) returned 1 [0075.613] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.613] IsWindowUnicode (hWnd=0x2028e) returned 1 [0075.613] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.613] TranslateMessage (lpMsg=0x14ef10) returned 0 [0075.613] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0075.613] BeginPaint (in: hWnd=0x2028e, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0075.613] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.614] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0075.614] GetStockObject (i=5) returned 0x1900015 [0075.614] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0075.614] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x210109a0 [0075.614] DeleteObject (ho=0x2305099f) returned 1 [0075.614] GetObjectType (h=0x1b0107ae) returned 0x3 [0075.614] CreateCompatibleBitmap (hdc=0x1b0107ae, cx=1, cy=1) returned 0x260509d2 [0075.615] GetDIBits (in: hdc=0x1b0107ae, hbm=0x260509d2, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x14df38, usage=0x0 | out: lpvBits=0x0, lpbmi=0x14df38) returned 1 [0075.615] GetDIBits (in: hdc=0x1b0107ae, hbm=0x260509d2, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x14df38, usage=0x0 | out: lpvBits=0x0, lpbmi=0x14df38) returned 1 [0075.615] DeleteObject (ho=0x260509d2) returned 1 [0075.615] CreateDIBSection (in: hdc=0x1b0107ae, lpbmi=0x14dfe8, usage=0x0, ppvBits=0x14e5a8, hSection=0x0, offset=0x0 | out: ppvBits=0x14e5a8) returned 0x2405099f [0075.615] SelectObject (hdc=0x210109a0, h=0x2405099f) returned 0x185000f [0075.615] GdipCreateFromHDC (hdc=0x210109a0, graphics=0x14e528) returned 0x0 [0075.615] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0075.615] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=58, height=23, combineMode=0x0) returned 0x0 [0075.615] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0075.615] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be515e0) returned 0x0 [0075.615] GdipIsMatrixIdentity (matrix=0x1be515e0, result=0x14e5b8) returned 0x0 [0075.616] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d485f10 [0075.616] GdipGetMatrixElements (matrix=0x1be515e0, matrixOut=0x1d485f10) returned 0x0 [0075.616] LocalFree (hMem=0x1d485f10) returned 0x0 [0075.616] GdipDeleteMatrix (matrix=0x1be515e0) returned 0x0 [0075.616] GdipCreateRegion (region=0x14e550) returned 0x0 [0075.616] GdipGetClip (graphics=0x1be567f0, region=0x1be51620) returned 0x0 [0075.616] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0075.616] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0075.616] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffdae0dbd) returned 0x0 [0075.616] GdipDeleteRegion (region=0x1be51620) returned 0x0 [0075.616] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0075.616] GetCurrentObject (hdc=0x210109a0, type=0x1) returned 0x1b00017 [0075.617] GetCurrentObject (hdc=0x210109a0, type=0x2) returned 0x1900010 [0075.617] GetCurrentObject (hdc=0x210109a0, type=0x7) returned 0x2405099f [0075.617] GetCurrentObject (hdc=0x210109a0, type=0x6) returned 0x18a0048 [0075.617] SaveDC (hdc=0x210109a0) returned 1 [0075.617] GetNearestColor (hdc=0x210109a0, color=0xf0f0f0) returned 0xf0f0f0 [0075.617] GetNearestColor (hdc=0x210109a0, color=0xa0a0a0) returned 0xa0a0a0 [0075.617] GetNearestColor (hdc=0x210109a0, color=0x696969) returned 0x696969 [0075.617] GetNearestColor (hdc=0x210109a0, color=0xa0a0a0) returned 0xa0a0a0 [0075.617] GetNearestColor (hdc=0x210109a0, color=0x0) returned 0x0 [0075.617] GetNearestColor (hdc=0x210109a0, color=0xffffff) returned 0xffffff [0075.617] GetNearestColor (hdc=0x210109a0, color=0xe5e5e5) returned 0xe5e5e5 [0075.617] GetNearestColor (hdc=0x210109a0, color=0xd8d8d8) returned 0xd8d8d8 [0075.617] GetNearestColor (hdc=0x210109a0, color=0x0) returned 0x0 [0075.617] RestoreDC (hdc=0x210109a0, nSavedDC=-1) returned 1 [0075.617] GdipReleaseDC (graphics=0x1be567f0, hdc=0x210109a0) returned 0x0 [0075.618] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x83\x14\x02", lpUsedDefaultChar=0x0) returned 17 [0075.618] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.618] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21489f8) returned 0x0 [0075.618] GdipSetStringFormatAlign (format=0x1be51620, align=0x1) returned 0x0 [0075.618] GdipSetStringFormatLineAlign (format=0x1be51620, align=0x1) returned 0x0 [0075.618] GdipSetStringFormatHotkeyPrefix (format=0x1be51620, hotkeyPrefix=2) returned 0x0 [0075.618] GdipGetStringFormatFlags (format=0x1be51620, flags=0x14e378) returned 0x0 [0075.618] GdipGetStringFormatTrimming (format=0x1be51620, trimming=0x14e378) returned 0x0 [0075.618] GdipGetStringFormatHotkeyPrefix (format=0x1be51620, hotkeyPrefix=0x14e378) returned 0x0 [0075.618] GdipGetFontSize (font=0x1be51620, size=0x14e378) returned 0x0 [0075.618] GdipGetFontStyle (font=0x1be51620, style=0x14e378) returned 0x0 [0075.618] GdipDeleteStringFormat (format=0x1be51620) returned 0x0 [0075.618] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0075.619] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.619] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0075.619] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2148b28) returned 0x0 [0075.619] GdipSetStringFormatFlags (format=0x1be516b0, flags=0) returned 0x0 [0075.619] GdipSetStringFormatTrimming (format=0x1be516b0, trimming=0x1) returned 0x0 [0075.619] GdipSetStringFormatHotkeyPrefix (format=0x1be516b0, hotkeyPrefix=2) returned 0x0 [0075.619] GdipSetStringFormatAlign (format=0x1be516b0, align=0x1) returned 0x0 [0075.619] GdipSetStringFormatLineAlign (format=0x1be516b0, align=0x1) returned 0x0 [0075.619] GdipMeasureString (graphics=0x1be56d20, string="=", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be516b0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0075.619] GdipDeleteStringFormat (format=0x1be516b0) returned 0x0 [0075.619] GdipDeleteGraphics (graphics=0x1be56d20) returned 0x0 [0075.619] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0075.620] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.620] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0075.620] GdipGetClip (graphics=0x1be567f0, region=0x1be51620) returned 0x0 [0075.620] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0075.620] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be516e0) returned 0x0 [0075.620] GdipIsMatrixIdentity (matrix=0x1be516e0, result=0x14e128) returned 0x0 [0075.620] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486bd0 [0075.620] GdipGetMatrixElements (matrix=0x1be516e0, matrixOut=0x1d486bd0) returned 0x0 [0075.620] LocalFree (hMem=0x1d486bd0) returned 0x0 [0075.620] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486290 [0075.620] GdipGetMatrixElements (matrix=0x1be516e0, matrixOut=0x1d486290) returned 0x0 [0075.621] LocalFree (hMem=0x1d486290) returned 0x0 [0075.621] GdipDeleteMatrix (matrix=0x1be516e0) returned 0x0 [0075.621] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0075.621] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0075.621] GdipGetRegionHRgn (region=0x1be51620, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0075.621] GdipDeleteRegion (region=0x1be51620) returned 0x0 [0075.621] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0075.621] GetCurrentObject (hdc=0x210109a0, type=0x1) returned 0x1b00017 [0075.621] GetCurrentObject (hdc=0x210109a0, type=0x2) returned 0x1900010 [0075.621] GetCurrentObject (hdc=0x210109a0, type=0x7) returned 0x2405099f [0075.621] GetCurrentObject (hdc=0x210109a0, type=0x6) returned 0x18a0048 [0075.622] SaveDC (hdc=0x210109a0) returned 1 [0075.622] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x270409d6 [0075.622] GetClipRgn (hdc=0x210109a0, hrgn=0x270409d6) returned 0 [0075.622] SelectClipRgn (hdc=0x210109a0, hrgn=0x390407ff) returned 2 [0075.622] DeleteObject (ho=0x270409d6) returned 1 [0075.622] DeleteObject (ho=0x390407ff) returned 1 [0075.622] OffsetViewportOrgEx (in: hdc=0x210109a0, x=0, y=0, lppt=0x2148ee8 | out: lppt=0x2148ee8) returned 1 [0075.622] GetNearestColor (hdc=0x210109a0, color=0xf0f0f0) returned 0xf0f0f0 [0075.622] CreateSolidBrush (color=0xf0f0f0) returned 0x3a1009b2 [0075.622] FillRect (hDC=0x210109a0, lprc=0x14e1c8, hbr=0x3a1009b2) returned 1 [0075.622] DeleteObject (ho=0x3a1009b2) returned 1 [0075.622] RestoreDC (hdc=0x210109a0, nSavedDC=-1) returned 1 [0075.622] GdipReleaseDC (graphics=0x1be567f0, hdc=0x210109a0) returned 0x0 [0075.622] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0075.623] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.623] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2148fe8) returned 0x0 [0075.623] GdipSetStringFormatAlign (format=0x1be515e0, align=0x1) returned 0x0 [0075.623] GdipSetStringFormatLineAlign (format=0x1be515e0, align=0x1) returned 0x0 [0075.623] GdipSetStringFormatHotkeyPrefix (format=0x1be515e0, hotkeyPrefix=2) returned 0x0 [0075.623] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0075.623] GdipDrawString (graphics=0x1be567f0, string="=", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be515e0, brush=0x1be51720) returned 0x0 [0075.623] GdipDeleteBrush (brush=0x1be51720) returned 0x0 [0075.623] GdipDeleteStringFormat (format=0x1be515e0) returned 0x0 [0075.623] GetFocus () returned 0x103c8 [0075.623] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x81\x14\x02", lpUsedDefaultChar=0x0) returned 17 [0075.623] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.623] GdipCreateRegion (region=0x14e030) returned 0x0 [0075.624] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0075.624] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0075.624] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be516a0) returned 0x0 [0075.624] GdipIsMatrixIdentity (matrix=0x1be516a0, result=0x14e098) returned 0x0 [0075.624] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4866d0 [0075.624] GdipGetMatrixElements (matrix=0x1be516a0, matrixOut=0x1d4866d0) returned 0x0 [0075.624] LocalFree (hMem=0x1d4866d0) returned 0x0 [0075.624] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486510 [0075.624] GdipGetMatrixElements (matrix=0x1be516a0, matrixOut=0x1d486510) returned 0x0 [0075.625] LocalFree (hMem=0x1d486510) returned 0x0 [0075.625] GdipDeleteMatrix (matrix=0x1be516a0) returned 0x0 [0075.625] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0075.625] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0075.625] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0075.625] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0075.625] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0075.625] GetCurrentObject (hdc=0x210109a0, type=0x1) returned 0x1b00017 [0075.625] GetCurrentObject (hdc=0x210109a0, type=0x2) returned 0x1900010 [0075.625] GetCurrentObject (hdc=0x210109a0, type=0x7) returned 0x2405099f [0075.625] GetCurrentObject (hdc=0x210109a0, type=0x6) returned 0x18a0048 [0075.625] SaveDC (hdc=0x210109a0) returned 1 [0075.625] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3a0407ff [0075.625] GetClipRgn (hdc=0x210109a0, hrgn=0x3a0407ff) returned 0 [0075.626] SelectClipRgn (hdc=0x210109a0, hrgn=0x280409d6) returned 2 [0075.626] DeleteObject (ho=0x3a0407ff) returned 1 [0075.626] DeleteObject (ho=0x280409d6) returned 1 [0075.626] OffsetViewportOrgEx (in: hdc=0x210109a0, x=0, y=0, lppt=0x21493d0 | out: lppt=0x21493d0) returned 1 [0075.626] GetROP2 (hdc=0x210109a0) returned 13 [0075.626] GetBkMode (hdc=0x210109a0) returned 2 [0075.626] SetBkMode (hdc=0x210109a0, mode=1) returned 2 [0075.626] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x5b3008c7 [0075.626] SelectObject (hdc=0x210109a0, h=0x5b3008c7) returned 0x1b00017 [0075.626] MoveToEx (in: hdc=0x210109a0, x=57, y=0, lppt=0x2149438 | out: lppt=0x2149438) returned 1 [0075.626] LineTo (hdc=0x210109a0, x=0, y=0) returned 1 [0075.626] SetBkMode (hdc=0x210109a0, mode=2) returned 1 [0075.626] MoveToEx (in: hdc=0x210109a0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.626] GetROP2 (hdc=0x210109a0) returned 13 [0075.626] GetBkMode (hdc=0x210109a0) returned 2 [0075.626] SetBkMode (hdc=0x210109a0, mode=1) returned 2 [0075.626] SelectObject (hdc=0x210109a0, h=0x5b3008c7) returned 0x5b3008c7 [0075.626] MoveToEx (in: hdc=0x210109a0, x=0, y=0, lppt=0x2149450 | out: lppt=0x2149450) returned 1 [0075.626] LineTo (hdc=0x210109a0, x=0, y=22) returned 1 [0075.626] SetBkMode (hdc=0x210109a0, mode=2) returned 1 [0075.626] MoveToEx (in: hdc=0x210109a0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.626] SelectObject (hdc=0x210109a0, h=0x1b00017) returned 0x5b3008c7 [0075.627] DeleteObject (ho=0x5b3008c7) returned 1 [0075.627] GetROP2 (hdc=0x210109a0) returned 13 [0075.627] GetBkMode (hdc=0x210109a0) returned 2 [0075.627] SetBkMode (hdc=0x210109a0, mode=1) returned 2 [0075.627] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x3130097e [0075.627] SelectObject (hdc=0x210109a0, h=0x3130097e) returned 0x1b00017 [0075.627] MoveToEx (in: hdc=0x210109a0, x=0, y=22, lppt=0x21494b8 | out: lppt=0x21494b8) returned 1 [0075.627] LineTo (hdc=0x210109a0, x=57, y=22) returned 1 [0075.627] SetBkMode (hdc=0x210109a0, mode=2) returned 1 [0075.627] MoveToEx (in: hdc=0x210109a0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.627] GetROP2 (hdc=0x210109a0) returned 13 [0075.627] GetBkMode (hdc=0x210109a0) returned 2 [0075.627] SetBkMode (hdc=0x210109a0, mode=1) returned 2 [0075.627] SelectObject (hdc=0x210109a0, h=0x3130097e) returned 0x3130097e [0075.627] MoveToEx (in: hdc=0x210109a0, x=57, y=22, lppt=0x21494d0 | out: lppt=0x21494d0) returned 1 [0075.627] LineTo (hdc=0x210109a0, x=57, y=-1) returned 1 [0075.627] SetBkMode (hdc=0x210109a0, mode=2) returned 1 [0075.627] MoveToEx (in: hdc=0x210109a0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.627] SelectObject (hdc=0x210109a0, h=0x1b00017) returned 0x3130097e [0075.627] DeleteObject (ho=0x3130097e) returned 1 [0075.627] GetROP2 (hdc=0x210109a0) returned 13 [0075.628] GetBkMode (hdc=0x210109a0) returned 2 [0075.628] SetBkMode (hdc=0x210109a0, mode=1) returned 2 [0075.628] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x5c3008c7 [0075.628] SelectObject (hdc=0x210109a0, h=0x5c3008c7) returned 0x1b00017 [0075.628] MoveToEx (in: hdc=0x210109a0, x=56, y=1, lppt=0x2149538 | out: lppt=0x2149538) returned 1 [0075.628] LineTo (hdc=0x210109a0, x=1, y=1) returned 1 [0075.628] SetBkMode (hdc=0x210109a0, mode=2) returned 1 [0075.628] MoveToEx (in: hdc=0x210109a0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.628] GetROP2 (hdc=0x210109a0) returned 13 [0075.628] GetBkMode (hdc=0x210109a0) returned 2 [0075.628] SetBkMode (hdc=0x210109a0, mode=1) returned 2 [0075.628] SelectObject (hdc=0x210109a0, h=0x5c3008c7) returned 0x5c3008c7 [0075.628] MoveToEx (in: hdc=0x210109a0, x=1, y=1, lppt=0x2149550 | out: lppt=0x2149550) returned 1 [0075.628] LineTo (hdc=0x210109a0, x=1, y=21) returned 1 [0075.628] SetBkMode (hdc=0x210109a0, mode=2) returned 1 [0075.628] MoveToEx (in: hdc=0x210109a0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.628] SelectObject (hdc=0x210109a0, h=0x1b00017) returned 0x5c3008c7 [0075.628] DeleteObject (ho=0x5c3008c7) returned 1 [0075.628] GetROP2 (hdc=0x210109a0) returned 13 [0075.628] GetBkMode (hdc=0x210109a0) returned 2 [0075.628] SetBkMode (hdc=0x210109a0, mode=1) returned 2 [0075.628] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x3230097e [0075.629] SelectObject (hdc=0x210109a0, h=0x3230097e) returned 0x1b00017 [0075.629] MoveToEx (in: hdc=0x210109a0, x=1, y=21, lppt=0x21495b8 | out: lppt=0x21495b8) returned 1 [0075.629] LineTo (hdc=0x210109a0, x=56, y=21) returned 1 [0075.629] SetBkMode (hdc=0x210109a0, mode=2) returned 1 [0075.629] MoveToEx (in: hdc=0x210109a0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.629] GetROP2 (hdc=0x210109a0) returned 13 [0075.629] GetBkMode (hdc=0x210109a0) returned 2 [0075.629] SetBkMode (hdc=0x210109a0, mode=1) returned 2 [0075.629] SelectObject (hdc=0x210109a0, h=0x3230097e) returned 0x3230097e [0075.629] MoveToEx (in: hdc=0x210109a0, x=56, y=21, lppt=0x21495d0 | out: lppt=0x21495d0) returned 1 [0075.629] LineTo (hdc=0x210109a0, x=56, y=0) returned 1 [0075.629] SetBkMode (hdc=0x210109a0, mode=2) returned 1 [0075.629] MoveToEx (in: hdc=0x210109a0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.629] SelectObject (hdc=0x210109a0, h=0x1b00017) returned 0x3230097e [0075.629] DeleteObject (ho=0x3230097e) returned 1 [0075.629] RestoreDC (hdc=0x210109a0, nSavedDC=-1) returned 1 [0075.631] GdipReleaseDC (graphics=0x1be567f0, hdc=0x210109a0) returned 0x0 [0075.631] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0075.631] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=58, cy=23, hdcSrc=0x210109a0, x1=0, y1=0, rop=0xcc0020) returned 1 [0075.631] GdipReleaseDC (graphics=0x1be567f0, hdc=0x210109a0) returned 0x0 [0075.632] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0075.632] SelectObject (hdc=0x210109a0, h=0x185000f) returned 0x2405099f [0075.632] DeleteDC (hdc=0x210109a0) returned 1 [0075.632] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0075.632] EndPaint (hWnd=0x2028e, lpPaint=0x14e548) returned 1 [0075.632] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.632] IsWindowUnicode (hWnd=0x90038) returned 1 [0075.632] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.632] TranslateMessage (lpMsg=0x14ef10) returned 0 [0075.632] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0075.632] BeginPaint (in: hWnd=0x90038, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0075.632] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.632] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0075.632] GetStockObject (i=5) returned 0x1900015 [0075.633] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0075.633] CreateCompatibleDC (hdc=0x220106d6) returned 0x330106e1 [0075.633] SelectObject (hdc=0x330106e1, h=0x2405099f) returned 0x185000f [0075.633] GdipCreateFromHDC (hdc=0x330106e1, graphics=0x14e528) returned 0x0 [0075.633] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0075.633] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=58, height=23, combineMode=0x0) returned 0x0 [0075.633] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0075.633] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be515e0) returned 0x0 [0075.633] GdipIsMatrixIdentity (matrix=0x1be515e0, result=0x14e5b8) returned 0x0 [0075.633] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0075.633] GdipGetMatrixElements (matrix=0x1be515e0, matrixOut=0x1d486110) returned 0x0 [0075.634] LocalFree (hMem=0x1d486110) returned 0x0 [0075.634] GdipDeleteMatrix (matrix=0x1be515e0) returned 0x0 [0075.634] GdipCreateRegion (region=0x14e550) returned 0x0 [0075.634] GdipGetClip (graphics=0x1be567f0, region=0x1be51620) returned 0x0 [0075.634] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0075.634] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0075.634] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffdab0dbd) returned 0x0 [0075.634] GdipDeleteRegion (region=0x1be51620) returned 0x0 [0075.634] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0075.634] GetCurrentObject (hdc=0x330106e1, type=0x1) returned 0x1b00017 [0075.634] GetCurrentObject (hdc=0x330106e1, type=0x2) returned 0x1900010 [0075.634] GetCurrentObject (hdc=0x330106e1, type=0x7) returned 0x2405099f [0075.634] GetCurrentObject (hdc=0x330106e1, type=0x6) returned 0x18a0048 [0075.634] SaveDC (hdc=0x330106e1) returned 1 [0075.635] GetNearestColor (hdc=0x330106e1, color=0xf0f0f0) returned 0xf0f0f0 [0075.635] GetNearestColor (hdc=0x330106e1, color=0xa0a0a0) returned 0xa0a0a0 [0075.635] GetNearestColor (hdc=0x330106e1, color=0x696969) returned 0x696969 [0075.635] GetNearestColor (hdc=0x330106e1, color=0xa0a0a0) returned 0xa0a0a0 [0075.635] GetNearestColor (hdc=0x330106e1, color=0x0) returned 0x0 [0075.635] GetNearestColor (hdc=0x330106e1, color=0xffffff) returned 0xffffff [0075.635] GetNearestColor (hdc=0x330106e1, color=0xe5e5e5) returned 0xe5e5e5 [0075.635] GetNearestColor (hdc=0x330106e1, color=0xd8d8d8) returned 0xd8d8d8 [0075.635] GetNearestColor (hdc=0x330106e1, color=0x0) returned 0x0 [0075.635] RestoreDC (hdc=0x330106e1, nSavedDC=-1) returned 1 [0075.635] GdipReleaseDC (graphics=0x1be567f0, hdc=0x330106e1) returned 0x0 [0075.635] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x14\x02", lpUsedDefaultChar=0x0) returned 17 [0075.636] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.636] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2149f08) returned 0x0 [0075.636] GdipSetStringFormatAlign (format=0x1be51620, align=0x1) returned 0x0 [0075.636] GdipSetStringFormatLineAlign (format=0x1be51620, align=0x1) returned 0x0 [0075.636] GdipSetStringFormatHotkeyPrefix (format=0x1be51620, hotkeyPrefix=2) returned 0x0 [0075.636] GdipGetStringFormatFlags (format=0x1be51620, flags=0x14e378) returned 0x0 [0075.636] GdipGetStringFormatTrimming (format=0x1be51620, trimming=0x14e378) returned 0x0 [0075.636] GdipGetStringFormatHotkeyPrefix (format=0x1be51620, hotkeyPrefix=0x14e378) returned 0x0 [0075.636] GdipGetFontSize (font=0x1be51620, size=0x14e378) returned 0x0 [0075.636] GdipGetFontStyle (font=0x1be51620, style=0x14e378) returned 0x0 [0075.636] GdipDeleteStringFormat (format=0x1be51620) returned 0x0 [0075.636] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0075.636] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.636] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0075.637] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x214a038) returned 0x0 [0075.637] GdipSetStringFormatFlags (format=0x1be516b0, flags=0) returned 0x0 [0075.637] GdipSetStringFormatTrimming (format=0x1be516b0, trimming=0x1) returned 0x0 [0075.637] GdipSetStringFormatHotkeyPrefix (format=0x1be516b0, hotkeyPrefix=2) returned 0x0 [0075.637] GdipSetStringFormatAlign (format=0x1be516b0, align=0x1) returned 0x0 [0075.637] GdipSetStringFormatLineAlign (format=0x1be516b0, align=0x1) returned 0x0 [0075.637] GdipMeasureString (graphics=0x1be56d20, string="log", length=3, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be516b0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0075.637] GdipDeleteStringFormat (format=0x1be516b0) returned 0x0 [0075.637] GdipDeleteGraphics (graphics=0x1be56d20) returned 0x0 [0075.637] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0075.637] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.637] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0075.638] GdipGetClip (graphics=0x1be567f0, region=0x1be51620) returned 0x0 [0075.638] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0075.638] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be516e0) returned 0x0 [0075.638] GdipIsMatrixIdentity (matrix=0x1be516e0, result=0x14e128) returned 0x0 [0075.638] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486dd0 [0075.638] GdipGetMatrixElements (matrix=0x1be516e0, matrixOut=0x1d486dd0) returned 0x0 [0075.638] LocalFree (hMem=0x1d486dd0) returned 0x0 [0075.638] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b50 [0075.638] GdipGetMatrixElements (matrix=0x1be516e0, matrixOut=0x1d486b50) returned 0x0 [0075.639] LocalFree (hMem=0x1d486b50) returned 0x0 [0075.639] GdipDeleteMatrix (matrix=0x1be516e0) returned 0x0 [0075.639] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0075.639] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0075.639] GdipGetRegionHRgn (region=0x1be51620, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0075.639] GdipDeleteRegion (region=0x1be51620) returned 0x0 [0075.639] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0075.639] GetCurrentObject (hdc=0x330106e1, type=0x1) returned 0x1b00017 [0075.639] GetCurrentObject (hdc=0x330106e1, type=0x2) returned 0x1900010 [0075.639] GetCurrentObject (hdc=0x330106e1, type=0x7) returned 0x2405099f [0075.639] GetCurrentObject (hdc=0x330106e1, type=0x6) returned 0x18a0048 [0075.639] SaveDC (hdc=0x330106e1) returned 1 [0075.640] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x290409d6 [0075.640] GetClipRgn (hdc=0x330106e1, hrgn=0x290409d6) returned 0 [0075.640] SelectClipRgn (hdc=0x330106e1, hrgn=0x3b0407ff) returned 2 [0075.640] DeleteObject (ho=0x290409d6) returned 1 [0075.640] DeleteObject (ho=0x3b0407ff) returned 1 [0075.640] OffsetViewportOrgEx (in: hdc=0x330106e1, x=0, y=0, lppt=0x214a3f8 | out: lppt=0x214a3f8) returned 1 [0075.640] GetNearestColor (hdc=0x330106e1, color=0xf0f0f0) returned 0xf0f0f0 [0075.640] CreateSolidBrush (color=0xf0f0f0) returned 0x3b1009b2 [0075.640] FillRect (hDC=0x330106e1, lprc=0x14e1c8, hbr=0x3b1009b2) returned 1 [0075.640] DeleteObject (ho=0x3b1009b2) returned 1 [0075.640] RestoreDC (hdc=0x330106e1, nSavedDC=-1) returned 1 [0075.640] GdipReleaseDC (graphics=0x1be567f0, hdc=0x330106e1) returned 0x0 [0075.640] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0075.641] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.641] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x214a4f8) returned 0x0 [0075.641] GdipSetStringFormatAlign (format=0x1be515e0, align=0x1) returned 0x0 [0075.641] GdipSetStringFormatLineAlign (format=0x1be515e0, align=0x1) returned 0x0 [0075.641] GdipSetStringFormatHotkeyPrefix (format=0x1be515e0, hotkeyPrefix=2) returned 0x0 [0075.641] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0075.641] GdipDrawString (graphics=0x1be567f0, string="log", length=3, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be515e0, brush=0x1be51720) returned 0x0 [0075.641] GdipDeleteBrush (brush=0x1be51720) returned 0x0 [0075.641] GdipDeleteStringFormat (format=0x1be515e0) returned 0x0 [0075.641] GetFocus () returned 0x103c8 [0075.641] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x96\x14\x02", lpUsedDefaultChar=0x0) returned 17 [0075.642] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.642] GdipCreateRegion (region=0x14e030) returned 0x0 [0075.642] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0075.642] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0075.642] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be516a0) returned 0x0 [0075.642] GdipIsMatrixIdentity (matrix=0x1be516a0, result=0x14e098) returned 0x0 [0075.642] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486950 [0075.642] GdipGetMatrixElements (matrix=0x1be516a0, matrixOut=0x1d486950) returned 0x0 [0075.642] LocalFree (hMem=0x1d486950) returned 0x0 [0075.643] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486390 [0075.643] GdipGetMatrixElements (matrix=0x1be516a0, matrixOut=0x1d486390) returned 0x0 [0075.643] LocalFree (hMem=0x1d486390) returned 0x0 [0075.643] GdipDeleteMatrix (matrix=0x1be516a0) returned 0x0 [0075.643] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0075.643] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0075.643] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0075.643] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0075.643] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0075.643] GetCurrentObject (hdc=0x330106e1, type=0x1) returned 0x1b00017 [0075.643] GetCurrentObject (hdc=0x330106e1, type=0x2) returned 0x1900010 [0075.643] GetCurrentObject (hdc=0x330106e1, type=0x7) returned 0x2405099f [0075.644] GetCurrentObject (hdc=0x330106e1, type=0x6) returned 0x18a0048 [0075.644] SaveDC (hdc=0x330106e1) returned 1 [0075.644] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3c0407ff [0075.644] GetClipRgn (hdc=0x330106e1, hrgn=0x3c0407ff) returned 0 [0075.644] SelectClipRgn (hdc=0x330106e1, hrgn=0x2a0409d6) returned 2 [0075.644] DeleteObject (ho=0x3c0407ff) returned 1 [0075.644] DeleteObject (ho=0x2a0409d6) returned 1 [0075.644] OffsetViewportOrgEx (in: hdc=0x330106e1, x=0, y=0, lppt=0x214a8e0 | out: lppt=0x214a8e0) returned 1 [0075.644] GetROP2 (hdc=0x330106e1) returned 13 [0075.644] GetBkMode (hdc=0x330106e1) returned 2 [0075.644] SetBkMode (hdc=0x330106e1, mode=1) returned 2 [0075.644] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x3330097e [0075.644] SelectObject (hdc=0x330106e1, h=0x3330097e) returned 0x1b00017 [0075.644] MoveToEx (in: hdc=0x330106e1, x=57, y=0, lppt=0x214a948 | out: lppt=0x214a948) returned 1 [0075.644] LineTo (hdc=0x330106e1, x=0, y=0) returned 1 [0075.644] SetBkMode (hdc=0x330106e1, mode=2) returned 1 [0075.644] MoveToEx (in: hdc=0x330106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.644] GetROP2 (hdc=0x330106e1) returned 13 [0075.644] GetBkMode (hdc=0x330106e1) returned 2 [0075.644] SetBkMode (hdc=0x330106e1, mode=1) returned 2 [0075.644] SelectObject (hdc=0x330106e1, h=0x3330097e) returned 0x3330097e [0075.645] MoveToEx (in: hdc=0x330106e1, x=0, y=0, lppt=0x214a960 | out: lppt=0x214a960) returned 1 [0075.645] LineTo (hdc=0x330106e1, x=0, y=22) returned 1 [0075.645] SetBkMode (hdc=0x330106e1, mode=2) returned 1 [0075.645] MoveToEx (in: hdc=0x330106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.645] SelectObject (hdc=0x330106e1, h=0x1b00017) returned 0x3330097e [0075.645] DeleteObject (ho=0x3330097e) returned 1 [0075.645] GetROP2 (hdc=0x330106e1) returned 13 [0075.739] GetBkMode (hdc=0x330106e1) returned 2 [0075.739] SetBkMode (hdc=0x330106e1, mode=1) returned 2 [0075.739] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x5d3008c7 [0075.739] SelectObject (hdc=0x330106e1, h=0x5d3008c7) returned 0x1b00017 [0075.740] MoveToEx (in: hdc=0x330106e1, x=0, y=22, lppt=0x214a9c8 | out: lppt=0x214a9c8) returned 1 [0075.740] LineTo (hdc=0x330106e1, x=57, y=22) returned 1 [0075.740] SetBkMode (hdc=0x330106e1, mode=2) returned 1 [0075.740] MoveToEx (in: hdc=0x330106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.740] GetROP2 (hdc=0x330106e1) returned 13 [0075.740] GetBkMode (hdc=0x330106e1) returned 2 [0075.740] SetBkMode (hdc=0x330106e1, mode=1) returned 2 [0075.740] SelectObject (hdc=0x330106e1, h=0x5d3008c7) returned 0x5d3008c7 [0075.740] MoveToEx (in: hdc=0x330106e1, x=57, y=22, lppt=0x214a9e0 | out: lppt=0x214a9e0) returned 1 [0075.740] LineTo (hdc=0x330106e1, x=57, y=-1) returned 1 [0075.740] SetBkMode (hdc=0x330106e1, mode=2) returned 1 [0075.740] MoveToEx (in: hdc=0x330106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.740] SelectObject (hdc=0x330106e1, h=0x1b00017) returned 0x5d3008c7 [0075.740] DeleteObject (ho=0x5d3008c7) returned 1 [0075.740] GetROP2 (hdc=0x330106e1) returned 13 [0075.740] GetBkMode (hdc=0x330106e1) returned 2 [0075.740] SetBkMode (hdc=0x330106e1, mode=1) returned 2 [0075.740] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x3430097e [0075.740] SelectObject (hdc=0x330106e1, h=0x3430097e) returned 0x1b00017 [0075.740] MoveToEx (in: hdc=0x330106e1, x=56, y=1, lppt=0x214aa48 | out: lppt=0x214aa48) returned 1 [0075.740] LineTo (hdc=0x330106e1, x=1, y=1) returned 1 [0075.740] SetBkMode (hdc=0x330106e1, mode=2) returned 1 [0075.741] MoveToEx (in: hdc=0x330106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.741] GetROP2 (hdc=0x330106e1) returned 13 [0075.741] GetBkMode (hdc=0x330106e1) returned 2 [0075.741] SetBkMode (hdc=0x330106e1, mode=1) returned 2 [0075.741] SelectObject (hdc=0x330106e1, h=0x3430097e) returned 0x3430097e [0075.741] MoveToEx (in: hdc=0x330106e1, x=1, y=1, lppt=0x214aa60 | out: lppt=0x214aa60) returned 1 [0075.741] LineTo (hdc=0x330106e1, x=1, y=21) returned 1 [0075.741] SetBkMode (hdc=0x330106e1, mode=2) returned 1 [0075.741] MoveToEx (in: hdc=0x330106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.741] SelectObject (hdc=0x330106e1, h=0x1b00017) returned 0x3430097e [0075.741] DeleteObject (ho=0x3430097e) returned 1 [0075.741] GetROP2 (hdc=0x330106e1) returned 13 [0075.741] GetBkMode (hdc=0x330106e1) returned 2 [0075.741] SetBkMode (hdc=0x330106e1, mode=1) returned 2 [0075.741] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x5e3008c7 [0075.741] SelectObject (hdc=0x330106e1, h=0x5e3008c7) returned 0x1b00017 [0075.741] MoveToEx (in: hdc=0x330106e1, x=1, y=21, lppt=0x214aac8 | out: lppt=0x214aac8) returned 1 [0075.741] LineTo (hdc=0x330106e1, x=56, y=21) returned 1 [0075.741] SetBkMode (hdc=0x330106e1, mode=2) returned 1 [0075.741] MoveToEx (in: hdc=0x330106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.741] GetROP2 (hdc=0x330106e1) returned 13 [0075.741] GetBkMode (hdc=0x330106e1) returned 2 [0075.742] SetBkMode (hdc=0x330106e1, mode=1) returned 2 [0075.742] SelectObject (hdc=0x330106e1, h=0x5e3008c7) returned 0x5e3008c7 [0075.742] MoveToEx (in: hdc=0x330106e1, x=56, y=21, lppt=0x214aae0 | out: lppt=0x214aae0) returned 1 [0075.742] LineTo (hdc=0x330106e1, x=56, y=0) returned 1 [0075.742] SetBkMode (hdc=0x330106e1, mode=2) returned 1 [0075.742] MoveToEx (in: hdc=0x330106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.742] SelectObject (hdc=0x330106e1, h=0x1b00017) returned 0x5e3008c7 [0075.742] DeleteObject (ho=0x5e3008c7) returned 1 [0075.742] RestoreDC (hdc=0x330106e1, nSavedDC=-1) returned 1 [0075.742] GdipReleaseDC (graphics=0x1be567f0, hdc=0x330106e1) returned 0x0 [0075.742] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0075.742] BitBlt (hdc=0x220106d6, x=0, y=0, cx=58, cy=23, hdcSrc=0x330106e1, x1=0, y1=0, rop=0xcc0020) returned 1 [0075.742] GdipReleaseDC (graphics=0x1be567f0, hdc=0x330106e1) returned 0x0 [0075.742] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0075.742] SelectObject (hdc=0x330106e1, h=0x185000f) returned 0x2405099f [0075.742] DeleteDC (hdc=0x330106e1) returned 1 [0075.742] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0075.743] EndPaint (hWnd=0x90038, lpPaint=0x14e548) returned 1 [0075.743] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.743] IsWindowUnicode (hWnd=0x20380) returned 1 [0075.743] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.743] TranslateMessage (lpMsg=0x14ef10) returned 0 [0075.743] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0075.743] BeginPaint (in: hWnd=0x20380, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0075.743] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.743] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0075.743] GetStockObject (i=5) returned 0x1900015 [0075.744] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0075.744] CreateCompatibleDC (hdc=0xc0100ae) returned 0x39010988 [0075.744] SelectObject (hdc=0x39010988, h=0x2405099f) returned 0x185000f [0075.744] GdipCreateFromHDC (hdc=0x39010988, graphics=0x14e528) returned 0x0 [0075.744] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0075.744] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=32, height=23, combineMode=0x0) returned 0x0 [0075.744] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0075.744] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be515e0) returned 0x0 [0075.744] GdipIsMatrixIdentity (matrix=0x1be515e0, result=0x14e5b8) returned 0x0 [0075.744] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0075.744] GdipGetMatrixElements (matrix=0x1be515e0, matrixOut=0x1d486110) returned 0x0 [0075.745] LocalFree (hMem=0x1d486110) returned 0x0 [0075.745] GdipDeleteMatrix (matrix=0x1be515e0) returned 0x0 [0075.745] GdipCreateRegion (region=0x14e550) returned 0x0 [0075.745] GdipGetClip (graphics=0x1be567f0, region=0x1be51620) returned 0x0 [0075.745] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0075.745] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0075.745] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffda80dbd) returned 0x0 [0075.745] GdipDeleteRegion (region=0x1be51620) returned 0x0 [0075.745] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0075.745] GetCurrentObject (hdc=0x39010988, type=0x1) returned 0x1b00017 [0075.745] GetCurrentObject (hdc=0x39010988, type=0x2) returned 0x1900010 [0075.745] GetCurrentObject (hdc=0x39010988, type=0x7) returned 0x2405099f [0075.746] GetCurrentObject (hdc=0x39010988, type=0x6) returned 0x18a0048 [0075.746] SaveDC (hdc=0x39010988) returned 1 [0075.746] GetNearestColor (hdc=0x39010988, color=0xf0f0f0) returned 0xf0f0f0 [0075.746] GetNearestColor (hdc=0x39010988, color=0xa0a0a0) returned 0xa0a0a0 [0075.746] GetNearestColor (hdc=0x39010988, color=0x696969) returned 0x696969 [0075.746] GetNearestColor (hdc=0x39010988, color=0xa0a0a0) returned 0xa0a0a0 [0075.746] GetNearestColor (hdc=0x39010988, color=0x0) returned 0x0 [0075.746] GetNearestColor (hdc=0x39010988, color=0xffffff) returned 0xffffff [0075.746] GetNearestColor (hdc=0x39010988, color=0xe5e5e5) returned 0xe5e5e5 [0075.746] GetNearestColor (hdc=0x39010988, color=0xd8d8d8) returned 0xd8d8d8 [0075.746] GetNearestColor (hdc=0x39010988, color=0x0) returned 0x0 [0075.746] RestoreDC (hdc=0x39010988, nSavedDC=-1) returned 1 [0075.746] GdipReleaseDC (graphics=0x1be567f0, hdc=0x39010988) returned 0x0 [0075.746] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx­\x14\x02", lpUsedDefaultChar=0x0) returned 17 [0075.747] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.747] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x214b418) returned 0x0 [0075.747] GdipSetStringFormatAlign (format=0x1be51620, align=0x1) returned 0x0 [0075.747] GdipSetStringFormatLineAlign (format=0x1be51620, align=0x1) returned 0x0 [0075.747] GdipSetStringFormatHotkeyPrefix (format=0x1be51620, hotkeyPrefix=2) returned 0x0 [0075.747] GdipGetStringFormatFlags (format=0x1be51620, flags=0x14e378) returned 0x0 [0075.747] GdipGetStringFormatTrimming (format=0x1be51620, trimming=0x14e378) returned 0x0 [0075.747] GdipGetStringFormatHotkeyPrefix (format=0x1be51620, hotkeyPrefix=0x14e378) returned 0x0 [0075.747] GdipGetFontSize (font=0x1be51620, size=0x14e378) returned 0x0 [0075.747] GdipGetFontStyle (font=0x1be51620, style=0x14e378) returned 0x0 [0075.747] GdipDeleteStringFormat (format=0x1be51620) returned 0x0 [0075.747] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0075.748] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.748] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0075.748] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x214b548) returned 0x0 [0075.748] GdipSetStringFormatFlags (format=0x1be516b0, flags=0) returned 0x0 [0075.748] GdipSetStringFormatTrimming (format=0x1be516b0, trimming=0x1) returned 0x0 [0075.748] GdipSetStringFormatHotkeyPrefix (format=0x1be516b0, hotkeyPrefix=2) returned 0x0 [0075.748] GdipSetStringFormatAlign (format=0x1be516b0, align=0x1) returned 0x0 [0075.748] GdipSetStringFormatLineAlign (format=0x1be516b0, align=0x1) returned 0x0 [0075.748] GdipMeasureString (graphics=0x1be56d20, string="e^", length=2, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be516b0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0075.748] GdipDeleteStringFormat (format=0x1be516b0) returned 0x0 [0075.748] GdipDeleteGraphics (graphics=0x1be56d20) returned 0x0 [0075.748] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0075.749] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.749] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0075.749] GdipGetClip (graphics=0x1be567f0, region=0x1be51620) returned 0x0 [0075.749] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0075.749] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be516e0) returned 0x0 [0075.749] GdipIsMatrixIdentity (matrix=0x1be516e0, result=0x14e128) returned 0x0 [0075.749] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486290 [0075.749] GdipGetMatrixElements (matrix=0x1be516e0, matrixOut=0x1d486290) returned 0x0 [0075.750] LocalFree (hMem=0x1d486290) returned 0x0 [0075.750] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486490 [0075.750] GdipGetMatrixElements (matrix=0x1be516e0, matrixOut=0x1d486490) returned 0x0 [0075.750] LocalFree (hMem=0x1d486490) returned 0x0 [0075.750] GdipDeleteMatrix (matrix=0x1be516e0) returned 0x0 [0075.750] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0075.750] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0075.750] GdipGetRegionHRgn (region=0x1be51620, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0075.750] GdipDeleteRegion (region=0x1be51620) returned 0x0 [0075.750] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0075.750] GetCurrentObject (hdc=0x39010988, type=0x1) returned 0x1b00017 [0075.751] GetCurrentObject (hdc=0x39010988, type=0x2) returned 0x1900010 [0075.751] GetCurrentObject (hdc=0x39010988, type=0x7) returned 0x2405099f [0075.751] GetCurrentObject (hdc=0x39010988, type=0x6) returned 0x18a0048 [0075.751] SaveDC (hdc=0x39010988) returned 1 [0075.751] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2b0409d6 [0075.751] GetClipRgn (hdc=0x39010988, hrgn=0x2b0409d6) returned 0 [0075.751] SelectClipRgn (hdc=0x39010988, hrgn=0x3d0407ff) returned 2 [0075.751] DeleteObject (ho=0x2b0409d6) returned 1 [0075.751] DeleteObject (ho=0x3d0407ff) returned 1 [0075.751] OffsetViewportOrgEx (in: hdc=0x39010988, x=0, y=0, lppt=0x214b908 | out: lppt=0x214b908) returned 1 [0075.751] GetNearestColor (hdc=0x39010988, color=0xf0f0f0) returned 0xf0f0f0 [0075.751] CreateSolidBrush (color=0xf0f0f0) returned 0x3c1009b2 [0075.751] FillRect (hDC=0x39010988, lprc=0x14e1c8, hbr=0x3c1009b2) returned 1 [0075.751] DeleteObject (ho=0x3c1009b2) returned 1 [0075.751] RestoreDC (hdc=0x39010988, nSavedDC=-1) returned 1 [0075.751] GdipReleaseDC (graphics=0x1be567f0, hdc=0x39010988) returned 0x0 [0075.751] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0075.752] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.752] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x214ba08) returned 0x0 [0075.752] GdipSetStringFormatAlign (format=0x1be515e0, align=0x1) returned 0x0 [0075.752] GdipSetStringFormatLineAlign (format=0x1be515e0, align=0x1) returned 0x0 [0075.752] GdipSetStringFormatHotkeyPrefix (format=0x1be515e0, hotkeyPrefix=2) returned 0x0 [0075.752] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0075.752] GdipDrawString (graphics=0x1be567f0, string="e^", length=2, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be515e0, brush=0x1be51720) returned 0x0 [0075.752] GdipDeleteBrush (brush=0x1be51720) returned 0x0 [0075.752] GdipDeleteStringFormat (format=0x1be515e0) returned 0x0 [0075.752] GetFocus () returned 0x103c8 [0075.753] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx«\x14\x02", lpUsedDefaultChar=0x0) returned 17 [0075.753] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.753] GdipCreateRegion (region=0x14e030) returned 0x0 [0075.753] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0075.753] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0075.753] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be516a0) returned 0x0 [0075.753] GdipIsMatrixIdentity (matrix=0x1be516a0, result=0x14e098) returned 0x0 [0075.753] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d485f10 [0075.753] GdipGetMatrixElements (matrix=0x1be516a0, matrixOut=0x1d485f10) returned 0x0 [0075.754] LocalFree (hMem=0x1d485f10) returned 0x0 [0075.754] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486390 [0075.754] GdipGetMatrixElements (matrix=0x1be516a0, matrixOut=0x1d486390) returned 0x0 [0075.754] LocalFree (hMem=0x1d486390) returned 0x0 [0075.755] GdipDeleteMatrix (matrix=0x1be516a0) returned 0x0 [0075.755] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0075.755] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0075.755] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0075.755] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0075.755] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0075.755] GetCurrentObject (hdc=0x39010988, type=0x1) returned 0x1b00017 [0075.755] GetCurrentObject (hdc=0x39010988, type=0x2) returned 0x1900010 [0075.755] GetCurrentObject (hdc=0x39010988, type=0x7) returned 0x2405099f [0075.755] GetCurrentObject (hdc=0x39010988, type=0x6) returned 0x18a0048 [0075.755] SaveDC (hdc=0x39010988) returned 1 [0075.756] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3e0407ff [0075.756] GetClipRgn (hdc=0x39010988, hrgn=0x3e0407ff) returned 0 [0075.756] SelectClipRgn (hdc=0x39010988, hrgn=0x2c0409d6) returned 2 [0075.756] DeleteObject (ho=0x3e0407ff) returned 1 [0075.756] DeleteObject (ho=0x2c0409d6) returned 1 [0075.756] OffsetViewportOrgEx (in: hdc=0x39010988, x=0, y=0, lppt=0x214bdf0 | out: lppt=0x214bdf0) returned 1 [0075.756] GetROP2 (hdc=0x39010988) returned 13 [0075.756] GetBkMode (hdc=0x39010988) returned 2 [0075.756] SetBkMode (hdc=0x39010988, mode=1) returned 2 [0075.756] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x20300987 [0075.756] SelectObject (hdc=0x39010988, h=0x20300987) returned 0x1b00017 [0075.756] MoveToEx (in: hdc=0x39010988, x=32, y=0, lppt=0x214be58 | out: lppt=0x214be58) returned 1 [0075.756] LineTo (hdc=0x39010988, x=0, y=0) returned 1 [0075.756] SetBkMode (hdc=0x39010988, mode=2) returned 1 [0075.756] MoveToEx (in: hdc=0x39010988, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.756] GetROP2 (hdc=0x39010988) returned 13 [0075.756] GetBkMode (hdc=0x39010988) returned 2 [0075.756] SetBkMode (hdc=0x39010988, mode=1) returned 2 [0075.756] SelectObject (hdc=0x39010988, h=0x20300987) returned 0x20300987 [0075.756] MoveToEx (in: hdc=0x39010988, x=0, y=0, lppt=0x214be70 | out: lppt=0x214be70) returned 1 [0075.756] LineTo (hdc=0x39010988, x=0, y=22) returned 1 [0075.757] SetBkMode (hdc=0x39010988, mode=2) returned 1 [0075.757] MoveToEx (in: hdc=0x39010988, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.757] SelectObject (hdc=0x39010988, h=0x1b00017) returned 0x20300987 [0075.757] DeleteObject (ho=0x20300987) returned 1 [0075.757] GetROP2 (hdc=0x39010988) returned 13 [0075.757] GetBkMode (hdc=0x39010988) returned 2 [0075.757] SetBkMode (hdc=0x39010988, mode=1) returned 2 [0075.757] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x483009ce [0075.757] SelectObject (hdc=0x39010988, h=0x483009ce) returned 0x1b00017 [0075.757] MoveToEx (in: hdc=0x39010988, x=0, y=22, lppt=0x214bed8 | out: lppt=0x214bed8) returned 1 [0075.757] LineTo (hdc=0x39010988, x=32, y=22) returned 1 [0075.757] SetBkMode (hdc=0x39010988, mode=2) returned 1 [0075.757] MoveToEx (in: hdc=0x39010988, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.757] GetROP2 (hdc=0x39010988) returned 13 [0075.757] GetBkMode (hdc=0x39010988) returned 2 [0075.757] SetBkMode (hdc=0x39010988, mode=1) returned 2 [0075.757] SelectObject (hdc=0x39010988, h=0x483009ce) returned 0x483009ce [0075.757] MoveToEx (in: hdc=0x39010988, x=32, y=22, lppt=0x214bef0 | out: lppt=0x214bef0) returned 1 [0075.757] LineTo (hdc=0x39010988, x=32, y=-1) returned 1 [0075.757] SetBkMode (hdc=0x39010988, mode=2) returned 1 [0075.757] MoveToEx (in: hdc=0x39010988, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.757] SelectObject (hdc=0x39010988, h=0x1b00017) returned 0x483009ce [0075.758] DeleteObject (ho=0x483009ce) returned 1 [0075.758] GetROP2 (hdc=0x39010988) returned 13 [0075.758] GetBkMode (hdc=0x39010988) returned 2 [0075.758] SetBkMode (hdc=0x39010988, mode=1) returned 2 [0075.758] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x21300987 [0075.758] SelectObject (hdc=0x39010988, h=0x21300987) returned 0x1b00017 [0075.758] MoveToEx (in: hdc=0x39010988, x=31, y=1, lppt=0x214bf58 | out: lppt=0x214bf58) returned 1 [0075.758] LineTo (hdc=0x39010988, x=1, y=1) returned 1 [0075.758] SetBkMode (hdc=0x39010988, mode=2) returned 1 [0075.758] MoveToEx (in: hdc=0x39010988, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.758] GetROP2 (hdc=0x39010988) returned 13 [0075.758] GetBkMode (hdc=0x39010988) returned 2 [0075.758] SetBkMode (hdc=0x39010988, mode=1) returned 2 [0075.758] SelectObject (hdc=0x39010988, h=0x21300987) returned 0x21300987 [0075.758] MoveToEx (in: hdc=0x39010988, x=1, y=1, lppt=0x214bf70 | out: lppt=0x214bf70) returned 1 [0075.758] LineTo (hdc=0x39010988, x=1, y=21) returned 1 [0075.758] SetBkMode (hdc=0x39010988, mode=2) returned 1 [0075.758] MoveToEx (in: hdc=0x39010988, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.758] SelectObject (hdc=0x39010988, h=0x1b00017) returned 0x21300987 [0075.758] DeleteObject (ho=0x21300987) returned 1 [0075.758] GetROP2 (hdc=0x39010988) returned 13 [0075.758] GetBkMode (hdc=0x39010988) returned 2 [0075.759] SetBkMode (hdc=0x39010988, mode=1) returned 2 [0075.759] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x493009ce [0075.759] SelectObject (hdc=0x39010988, h=0x493009ce) returned 0x1b00017 [0075.759] MoveToEx (in: hdc=0x39010988, x=1, y=21, lppt=0x214bfd8 | out: lppt=0x214bfd8) returned 1 [0075.759] LineTo (hdc=0x39010988, x=31, y=21) returned 1 [0075.759] SetBkMode (hdc=0x39010988, mode=2) returned 1 [0075.759] MoveToEx (in: hdc=0x39010988, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.759] GetROP2 (hdc=0x39010988) returned 13 [0075.759] GetBkMode (hdc=0x39010988) returned 2 [0075.759] SetBkMode (hdc=0x39010988, mode=1) returned 2 [0075.759] SelectObject (hdc=0x39010988, h=0x493009ce) returned 0x493009ce [0075.759] MoveToEx (in: hdc=0x39010988, x=31, y=21, lppt=0x214bff0 | out: lppt=0x214bff0) returned 1 [0075.759] LineTo (hdc=0x39010988, x=31, y=0) returned 1 [0075.759] SetBkMode (hdc=0x39010988, mode=2) returned 1 [0075.759] MoveToEx (in: hdc=0x39010988, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.759] SelectObject (hdc=0x39010988, h=0x1b00017) returned 0x493009ce [0075.759] DeleteObject (ho=0x493009ce) returned 1 [0075.759] RestoreDC (hdc=0x39010988, nSavedDC=-1) returned 1 [0075.759] GdipReleaseDC (graphics=0x1be567f0, hdc=0x39010988) returned 0x0 [0075.759] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0075.760] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=33, cy=23, hdcSrc=0x39010988, x1=0, y1=0, rop=0xcc0020) returned 1 [0075.760] GdipReleaseDC (graphics=0x1be567f0, hdc=0x39010988) returned 0x0 [0075.760] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0075.760] SelectObject (hdc=0x39010988, h=0x185000f) returned 0x2405099f [0075.761] DeleteDC (hdc=0x39010988) returned 1 [0075.761] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0075.761] EndPaint (hWnd=0x20380, lpPaint=0x14e548) returned 1 [0075.761] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.761] IsWindowUnicode (hWnd=0x20384) returned 1 [0075.761] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.761] TranslateMessage (lpMsg=0x14ef10) returned 0 [0075.761] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0075.761] BeginPaint (in: hWnd=0x20384, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0075.761] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.761] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0075.761] GetStockObject (i=5) returned 0x1900015 [0075.762] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0075.762] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x2a0109a0 [0075.762] SelectObject (hdc=0x2a0109a0, h=0x2405099f) returned 0x185000f [0075.762] GdipCreateFromHDC (hdc=0x2a0109a0, graphics=0x14e528) returned 0x0 [0075.762] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0075.762] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0075.762] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0075.762] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be515e0) returned 0x0 [0075.762] GdipIsMatrixIdentity (matrix=0x1be515e0, result=0x14e5b8) returned 0x0 [0075.762] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486810 [0075.762] GdipGetMatrixElements (matrix=0x1be515e0, matrixOut=0x1d486810) returned 0x0 [0075.763] LocalFree (hMem=0x1d486810) returned 0x0 [0075.763] GdipDeleteMatrix (matrix=0x1be515e0) returned 0x0 [0075.763] GdipCreateRegion (region=0x14e550) returned 0x0 [0075.763] GdipGetClip (graphics=0x1be567f0, region=0x1be51620) returned 0x0 [0075.763] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0075.763] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0075.763] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffda50dbd) returned 0x0 [0075.763] GdipDeleteRegion (region=0x1be51620) returned 0x0 [0075.763] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0075.763] GetCurrentObject (hdc=0x2a0109a0, type=0x1) returned 0x1b00017 [0075.763] GetCurrentObject (hdc=0x2a0109a0, type=0x2) returned 0x1900010 [0075.763] GetCurrentObject (hdc=0x2a0109a0, type=0x7) returned 0x2405099f [0075.763] GetCurrentObject (hdc=0x2a0109a0, type=0x6) returned 0x18a0048 [0075.763] SaveDC (hdc=0x2a0109a0) returned 1 [0075.763] GetNearestColor (hdc=0x2a0109a0, color=0xf0f0f0) returned 0xf0f0f0 [0075.764] GetNearestColor (hdc=0x2a0109a0, color=0xa0a0a0) returned 0xa0a0a0 [0075.764] GetNearestColor (hdc=0x2a0109a0, color=0x696969) returned 0x696969 [0075.764] GetNearestColor (hdc=0x2a0109a0, color=0xa0a0a0) returned 0xa0a0a0 [0075.764] GetNearestColor (hdc=0x2a0109a0, color=0x0) returned 0x0 [0075.764] GetNearestColor (hdc=0x2a0109a0, color=0xffffff) returned 0xffffff [0075.764] GetNearestColor (hdc=0x2a0109a0, color=0xe5e5e5) returned 0xe5e5e5 [0075.764] GetNearestColor (hdc=0x2a0109a0, color=0xd8d8d8) returned 0xd8d8d8 [0075.764] GetNearestColor (hdc=0x2a0109a0, color=0x0) returned 0x0 [0075.764] RestoreDC (hdc=0x2a0109a0, nSavedDC=-1) returned 1 [0075.764] GdipReleaseDC (graphics=0x1be567f0, hdc=0x2a0109a0) returned 0x0 [0075.764] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.764] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÃ\x14\x02", lpUsedDefaultChar=0x0) returned 17 [0075.764] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.765] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x214c928) returned 0x0 [0075.765] GdipSetStringFormatAlign (format=0x1be51620, align=0x1) returned 0x0 [0075.765] GdipSetStringFormatLineAlign (format=0x1be51620, align=0x1) returned 0x0 [0075.765] GdipSetStringFormatHotkeyPrefix (format=0x1be51620, hotkeyPrefix=2) returned 0x0 [0075.765] GdipGetStringFormatFlags (format=0x1be51620, flags=0x14e378) returned 0x0 [0075.765] GdipGetStringFormatTrimming (format=0x1be51620, trimming=0x14e378) returned 0x0 [0075.765] GdipGetStringFormatHotkeyPrefix (format=0x1be51620, hotkeyPrefix=0x14e378) returned 0x0 [0075.765] GdipGetFontSize (font=0x1be51620, size=0x14e378) returned 0x0 [0075.765] GdipGetFontStyle (font=0x1be51620, style=0x14e378) returned 0x0 [0075.765] GdipDeleteStringFormat (format=0x1be51620) returned 0x0 [0075.765] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.765] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0075.765] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.765] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0075.766] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x214ca58) returned 0x0 [0075.766] GdipSetStringFormatFlags (format=0x1be516b0, flags=0) returned 0x0 [0075.766] GdipSetStringFormatTrimming (format=0x1be516b0, trimming=0x1) returned 0x0 [0075.766] GdipSetStringFormatHotkeyPrefix (format=0x1be516b0, hotkeyPrefix=2) returned 0x0 [0075.766] GdipSetStringFormatAlign (format=0x1be516b0, align=0x1) returned 0x0 [0075.766] GdipSetStringFormatLineAlign (format=0x1be516b0, align=0x1) returned 0x0 [0075.766] GdipMeasureString (graphics=0x1be56d20, string="/", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be516b0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0075.766] GdipDeleteStringFormat (format=0x1be516b0) returned 0x0 [0075.766] GdipDeleteGraphics (graphics=0x1be56d20) returned 0x0 [0075.766] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.766] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0075.766] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.766] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0075.766] GdipGetClip (graphics=0x1be567f0, region=0x1be51620) returned 0x0 [0075.766] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0075.766] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be516e0) returned 0x0 [0075.767] GdipIsMatrixIdentity (matrix=0x1be516e0, result=0x14e128) returned 0x0 [0075.767] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486150 [0075.767] GdipGetMatrixElements (matrix=0x1be516e0, matrixOut=0x1d486150) returned 0x0 [0075.767] LocalFree (hMem=0x1d486150) returned 0x0 [0075.767] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486390 [0075.767] GdipGetMatrixElements (matrix=0x1be516e0, matrixOut=0x1d486390) returned 0x0 [0075.768] LocalFree (hMem=0x1d486390) returned 0x0 [0075.768] GdipDeleteMatrix (matrix=0x1be516e0) returned 0x0 [0075.768] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0075.768] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0075.768] GdipGetRegionHRgn (region=0x1be51620, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0075.768] GdipDeleteRegion (region=0x1be51620) returned 0x0 [0075.768] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0075.768] GetCurrentObject (hdc=0x2a0109a0, type=0x1) returned 0x1b00017 [0075.768] GetCurrentObject (hdc=0x2a0109a0, type=0x2) returned 0x1900010 [0075.768] GetCurrentObject (hdc=0x2a0109a0, type=0x7) returned 0x2405099f [0075.768] GetCurrentObject (hdc=0x2a0109a0, type=0x6) returned 0x18a0048 [0075.768] SaveDC (hdc=0x2a0109a0) returned 1 [0075.768] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2d0409d6 [0075.768] GetClipRgn (hdc=0x2a0109a0, hrgn=0x2d0409d6) returned 0 [0075.768] SelectClipRgn (hdc=0x2a0109a0, hrgn=0x3f0407ff) returned 2 [0075.768] DeleteObject (ho=0x2d0409d6) returned 1 [0075.769] DeleteObject (ho=0x3f0407ff) returned 1 [0075.769] OffsetViewportOrgEx (in: hdc=0x2a0109a0, x=0, y=0, lppt=0x214ce18 | out: lppt=0x214ce18) returned 1 [0075.769] GetNearestColor (hdc=0x2a0109a0, color=0xf0f0f0) returned 0xf0f0f0 [0075.769] CreateSolidBrush (color=0xf0f0f0) returned 0x3d1009b2 [0075.769] FillRect (hDC=0x2a0109a0, lprc=0x14e1c8, hbr=0x3d1009b2) returned 1 [0075.769] DeleteObject (ho=0x3d1009b2) returned 1 [0075.769] RestoreDC (hdc=0x2a0109a0, nSavedDC=-1) returned 1 [0075.769] GdipReleaseDC (graphics=0x1be567f0, hdc=0x2a0109a0) returned 0x0 [0075.769] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.769] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0075.769] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.769] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x214cf18) returned 0x0 [0075.769] GdipSetStringFormatAlign (format=0x1be515e0, align=0x1) returned 0x0 [0075.769] GdipSetStringFormatLineAlign (format=0x1be515e0, align=0x1) returned 0x0 [0075.769] GdipSetStringFormatHotkeyPrefix (format=0x1be515e0, hotkeyPrefix=2) returned 0x0 [0075.770] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0075.770] GdipDrawString (graphics=0x1be567f0, string="/", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be515e0, brush=0x1be51720) returned 0x0 [0075.770] GdipDeleteBrush (brush=0x1be51720) returned 0x0 [0075.770] GdipDeleteStringFormat (format=0x1be515e0) returned 0x0 [0075.770] GetFocus () returned 0x103c8 [0075.773] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.773] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÀ\x14\x02", lpUsedDefaultChar=0x0) returned 17 [0075.773] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.773] GdipCreateRegion (region=0x14e030) returned 0x0 [0075.773] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0075.773] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0075.773] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be516a0) returned 0x0 [0075.773] GdipIsMatrixIdentity (matrix=0x1be516a0, result=0x14e098) returned 0x0 [0075.773] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4865d0 [0075.773] GdipGetMatrixElements (matrix=0x1be516a0, matrixOut=0x1d4865d0) returned 0x0 [0075.774] LocalFree (hMem=0x1d4865d0) returned 0x0 [0075.774] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4863d0 [0075.774] GdipGetMatrixElements (matrix=0x1be516a0, matrixOut=0x1d4863d0) returned 0x0 [0075.774] LocalFree (hMem=0x1d4863d0) returned 0x0 [0075.774] GdipDeleteMatrix (matrix=0x1be516a0) returned 0x0 [0075.775] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0075.775] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0075.775] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0075.775] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0075.775] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0075.775] GetCurrentObject (hdc=0x2a0109a0, type=0x1) returned 0x1b00017 [0075.775] GetCurrentObject (hdc=0x2a0109a0, type=0x2) returned 0x1900010 [0075.775] GetCurrentObject (hdc=0x2a0109a0, type=0x7) returned 0x2405099f [0075.775] GetCurrentObject (hdc=0x2a0109a0, type=0x6) returned 0x18a0048 [0075.775] SaveDC (hdc=0x2a0109a0) returned 1 [0075.775] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x400407ff [0075.775] GetClipRgn (hdc=0x2a0109a0, hrgn=0x400407ff) returned 0 [0075.775] SelectClipRgn (hdc=0x2a0109a0, hrgn=0x2e0409d6) returned 2 [0075.775] DeleteObject (ho=0x400407ff) returned 1 [0075.775] DeleteObject (ho=0x2e0409d6) returned 1 [0075.775] OffsetViewportOrgEx (in: hdc=0x2a0109a0, x=0, y=0, lppt=0x214d300 | out: lppt=0x214d300) returned 1 [0075.775] GetROP2 (hdc=0x2a0109a0) returned 13 [0075.775] GetBkMode (hdc=0x2a0109a0) returned 2 [0075.775] SetBkMode (hdc=0x2a0109a0, mode=1) returned 2 [0075.775] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x4a3009ce [0075.775] SelectObject (hdc=0x2a0109a0, h=0x4a3009ce) returned 0x1b00017 [0075.776] MoveToEx (in: hdc=0x2a0109a0, x=25, y=0, lppt=0x214d368 | out: lppt=0x214d368) returned 1 [0075.776] LineTo (hdc=0x2a0109a0, x=0, y=0) returned 1 [0075.776] SetBkMode (hdc=0x2a0109a0, mode=2) returned 1 [0075.776] MoveToEx (in: hdc=0x2a0109a0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.776] GetROP2 (hdc=0x2a0109a0) returned 13 [0075.776] GetBkMode (hdc=0x2a0109a0) returned 2 [0075.776] SetBkMode (hdc=0x2a0109a0, mode=1) returned 2 [0075.776] SelectObject (hdc=0x2a0109a0, h=0x4a3009ce) returned 0x4a3009ce [0075.776] MoveToEx (in: hdc=0x2a0109a0, x=0, y=0, lppt=0x214d380 | out: lppt=0x214d380) returned 1 [0075.776] LineTo (hdc=0x2a0109a0, x=0, y=22) returned 1 [0075.776] SetBkMode (hdc=0x2a0109a0, mode=2) returned 1 [0075.776] MoveToEx (in: hdc=0x2a0109a0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.776] SelectObject (hdc=0x2a0109a0, h=0x1b00017) returned 0x4a3009ce [0075.776] DeleteObject (ho=0x4a3009ce) returned 1 [0075.776] GetROP2 (hdc=0x2a0109a0) returned 13 [0075.776] GetBkMode (hdc=0x2a0109a0) returned 2 [0075.776] SetBkMode (hdc=0x2a0109a0, mode=1) returned 2 [0075.776] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x22300987 [0075.776] SelectObject (hdc=0x2a0109a0, h=0x22300987) returned 0x1b00017 [0075.776] MoveToEx (in: hdc=0x2a0109a0, x=0, y=22, lppt=0x214d3e8 | out: lppt=0x214d3e8) returned 1 [0075.776] LineTo (hdc=0x2a0109a0, x=25, y=22) returned 1 [0075.776] SetBkMode (hdc=0x2a0109a0, mode=2) returned 1 [0075.777] MoveToEx (in: hdc=0x2a0109a0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.777] GetROP2 (hdc=0x2a0109a0) returned 13 [0075.777] GetBkMode (hdc=0x2a0109a0) returned 2 [0075.777] SetBkMode (hdc=0x2a0109a0, mode=1) returned 2 [0075.777] SelectObject (hdc=0x2a0109a0, h=0x22300987) returned 0x22300987 [0075.777] MoveToEx (in: hdc=0x2a0109a0, x=25, y=22, lppt=0x214d400 | out: lppt=0x214d400) returned 1 [0075.777] LineTo (hdc=0x2a0109a0, x=25, y=-1) returned 1 [0075.777] SetBkMode (hdc=0x2a0109a0, mode=2) returned 1 [0075.777] MoveToEx (in: hdc=0x2a0109a0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.777] SelectObject (hdc=0x2a0109a0, h=0x1b00017) returned 0x22300987 [0075.777] DeleteObject (ho=0x22300987) returned 1 [0075.777] GetROP2 (hdc=0x2a0109a0) returned 13 [0075.777] GetBkMode (hdc=0x2a0109a0) returned 2 [0075.777] SetBkMode (hdc=0x2a0109a0, mode=1) returned 2 [0075.777] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x4b3009ce [0075.777] SelectObject (hdc=0x2a0109a0, h=0x4b3009ce) returned 0x1b00017 [0075.777] MoveToEx (in: hdc=0x2a0109a0, x=24, y=1, lppt=0x214d468 | out: lppt=0x214d468) returned 1 [0075.777] LineTo (hdc=0x2a0109a0, x=1, y=1) returned 1 [0075.777] SetBkMode (hdc=0x2a0109a0, mode=2) returned 1 [0075.777] MoveToEx (in: hdc=0x2a0109a0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.777] GetROP2 (hdc=0x2a0109a0) returned 13 [0075.778] GetBkMode (hdc=0x2a0109a0) returned 2 [0075.778] SetBkMode (hdc=0x2a0109a0, mode=1) returned 2 [0075.778] SelectObject (hdc=0x2a0109a0, h=0x4b3009ce) returned 0x4b3009ce [0075.778] MoveToEx (in: hdc=0x2a0109a0, x=1, y=1, lppt=0x214d480 | out: lppt=0x214d480) returned 1 [0075.778] LineTo (hdc=0x2a0109a0, x=1, y=21) returned 1 [0075.778] SetBkMode (hdc=0x2a0109a0, mode=2) returned 1 [0075.778] MoveToEx (in: hdc=0x2a0109a0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.778] SelectObject (hdc=0x2a0109a0, h=0x1b00017) returned 0x4b3009ce [0075.778] DeleteObject (ho=0x4b3009ce) returned 1 [0075.778] GetROP2 (hdc=0x2a0109a0) returned 13 [0075.778] GetBkMode (hdc=0x2a0109a0) returned 2 [0075.778] SetBkMode (hdc=0x2a0109a0, mode=1) returned 2 [0075.778] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x23300987 [0075.778] SelectObject (hdc=0x2a0109a0, h=0x23300987) returned 0x1b00017 [0075.778] MoveToEx (in: hdc=0x2a0109a0, x=1, y=21, lppt=0x214d4e8 | out: lppt=0x214d4e8) returned 1 [0075.778] LineTo (hdc=0x2a0109a0, x=24, y=21) returned 1 [0075.778] SetBkMode (hdc=0x2a0109a0, mode=2) returned 1 [0075.778] MoveToEx (in: hdc=0x2a0109a0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.778] GetROP2 (hdc=0x2a0109a0) returned 13 [0075.778] GetBkMode (hdc=0x2a0109a0) returned 2 [0075.778] SetBkMode (hdc=0x2a0109a0, mode=1) returned 2 [0075.778] SelectObject (hdc=0x2a0109a0, h=0x23300987) returned 0x23300987 [0075.779] MoveToEx (in: hdc=0x2a0109a0, x=24, y=21, lppt=0x214d500 | out: lppt=0x214d500) returned 1 [0075.779] LineTo (hdc=0x2a0109a0, x=24, y=0) returned 1 [0075.779] SetBkMode (hdc=0x2a0109a0, mode=2) returned 1 [0075.779] MoveToEx (in: hdc=0x2a0109a0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.779] SelectObject (hdc=0x2a0109a0, h=0x1b00017) returned 0x23300987 [0075.779] DeleteObject (ho=0x23300987) returned 1 [0075.779] RestoreDC (hdc=0x2a0109a0, nSavedDC=-1) returned 1 [0075.779] GdipReleaseDC (graphics=0x1be567f0, hdc=0x2a0109a0) returned 0x0 [0075.779] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0075.779] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x2a0109a0, x1=0, y1=0, rop=0xcc0020) returned 1 [0075.779] GdipReleaseDC (graphics=0x1be567f0, hdc=0x2a0109a0) returned 0x0 [0075.779] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0075.780] SelectObject (hdc=0x2a0109a0, h=0x185000f) returned 0x2405099f [0075.780] DeleteDC (hdc=0x2a0109a0) returned 1 [0075.780] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0075.780] EndPaint (hWnd=0x20384, lpPaint=0x14e548) returned 1 [0075.780] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.780] IsWindowUnicode (hWnd=0x50276) returned 1 [0075.780] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.780] TranslateMessage (lpMsg=0x14ef10) returned 0 [0075.780] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0075.781] BeginPaint (in: hWnd=0x50276, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0075.781] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.781] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0075.781] GetStockObject (i=5) returned 0x1900015 [0075.781] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0075.781] CreateCompatibleDC (hdc=0x220106d6) returned 0x3e0106e1 [0075.781] SelectObject (hdc=0x3e0106e1, h=0x2405099f) returned 0x185000f [0075.781] GdipCreateFromHDC (hdc=0x3e0106e1, graphics=0x14e528) returned 0x0 [0075.781] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0075.781] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0075.781] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0075.781] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be515e0) returned 0x0 [0075.781] GdipIsMatrixIdentity (matrix=0x1be515e0, result=0x14e5b8) returned 0x0 [0075.782] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486150 [0075.782] GdipGetMatrixElements (matrix=0x1be515e0, matrixOut=0x1d486150) returned 0x0 [0075.782] LocalFree (hMem=0x1d486150) returned 0x0 [0075.782] GdipDeleteMatrix (matrix=0x1be515e0) returned 0x0 [0075.782] GdipCreateRegion (region=0x14e550) returned 0x0 [0075.782] GdipGetClip (graphics=0x1be567f0, region=0x1be51620) returned 0x0 [0075.782] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0075.782] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0075.782] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffda20dbd) returned 0x0 [0075.783] GdipDeleteRegion (region=0x1be51620) returned 0x0 [0075.783] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0075.783] GetCurrentObject (hdc=0x3e0106e1, type=0x1) returned 0x1b00017 [0075.783] GetCurrentObject (hdc=0x3e0106e1, type=0x2) returned 0x1900010 [0075.783] GetCurrentObject (hdc=0x3e0106e1, type=0x7) returned 0x2405099f [0075.783] GetCurrentObject (hdc=0x3e0106e1, type=0x6) returned 0x18a0048 [0075.783] SaveDC (hdc=0x3e0106e1) returned 1 [0075.783] GetNearestColor (hdc=0x3e0106e1, color=0xf0f0f0) returned 0xf0f0f0 [0075.783] GetNearestColor (hdc=0x3e0106e1, color=0xa0a0a0) returned 0xa0a0a0 [0075.783] GetNearestColor (hdc=0x3e0106e1, color=0x696969) returned 0x696969 [0075.783] GetNearestColor (hdc=0x3e0106e1, color=0xa0a0a0) returned 0xa0a0a0 [0075.783] GetNearestColor (hdc=0x3e0106e1, color=0x0) returned 0x0 [0075.783] GetNearestColor (hdc=0x3e0106e1, color=0xffffff) returned 0xffffff [0075.783] GetNearestColor (hdc=0x3e0106e1, color=0xe5e5e5) returned 0xe5e5e5 [0075.783] GetNearestColor (hdc=0x3e0106e1, color=0xd8d8d8) returned 0xd8d8d8 [0075.783] GetNearestColor (hdc=0x3e0106e1, color=0x0) returned 0x0 [0075.783] RestoreDC (hdc=0x3e0106e1, nSavedDC=-1) returned 1 [0075.783] GdipReleaseDC (graphics=0x1be567f0, hdc=0x3e0106e1) returned 0x0 [0075.784] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExØ\x14\x02", lpUsedDefaultChar=0x0) returned 17 [0075.784] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.784] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x214de38) returned 0x0 [0075.784] GdipSetStringFormatAlign (format=0x1be51620, align=0x1) returned 0x0 [0075.784] GdipSetStringFormatLineAlign (format=0x1be51620, align=0x1) returned 0x0 [0075.784] GdipSetStringFormatHotkeyPrefix (format=0x1be51620, hotkeyPrefix=2) returned 0x0 [0075.784] GdipGetStringFormatFlags (format=0x1be51620, flags=0x14e378) returned 0x0 [0075.784] GdipGetStringFormatTrimming (format=0x1be51620, trimming=0x14e378) returned 0x0 [0075.784] GdipGetStringFormatHotkeyPrefix (format=0x1be51620, hotkeyPrefix=0x14e378) returned 0x0 [0075.784] GdipGetFontSize (font=0x1be51620, size=0x14e378) returned 0x0 [0075.784] GdipGetFontStyle (font=0x1be51620, style=0x14e378) returned 0x0 [0075.784] GdipDeleteStringFormat (format=0x1be51620) returned 0x0 [0075.785] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0075.785] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.785] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0075.785] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x214df68) returned 0x0 [0075.785] GdipSetStringFormatFlags (format=0x1be516b0, flags=0) returned 0x0 [0075.785] GdipSetStringFormatTrimming (format=0x1be516b0, trimming=0x1) returned 0x0 [0075.785] GdipSetStringFormatHotkeyPrefix (format=0x1be516b0, hotkeyPrefix=2) returned 0x0 [0075.785] GdipSetStringFormatAlign (format=0x1be516b0, align=0x1) returned 0x0 [0075.785] GdipSetStringFormatLineAlign (format=0x1be516b0, align=0x1) returned 0x0 [0075.785] GdipMeasureString (graphics=0x1be56d20, string=";", length=1, font=0x1ad3edb0, layoutRect=0x14dfb8, stringFormat=0x1be516b0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0075.785] GdipDeleteStringFormat (format=0x1be516b0) returned 0x0 [0075.785] GdipDeleteGraphics (graphics=0x1be56d20) returned 0x0 [0075.785] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0075.879] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.879] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0075.879] GdipGetClip (graphics=0x1be567f0, region=0x1be51620) returned 0x0 [0075.879] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0075.879] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be516e0) returned 0x0 [0075.879] GdipIsMatrixIdentity (matrix=0x1be516e0, result=0x14e128) returned 0x0 [0075.879] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486910 [0075.879] GdipGetMatrixElements (matrix=0x1be516e0, matrixOut=0x1d486910) returned 0x0 [0075.879] LocalFree (hMem=0x1d486910) returned 0x0 [0075.928] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4861d0 [0075.928] GdipGetMatrixElements (matrix=0x1be516e0, matrixOut=0x1d4861d0) returned 0x0 [0075.929] LocalFree (hMem=0x1d4861d0) returned 0x0 [0075.929] GdipDeleteMatrix (matrix=0x1be516e0) returned 0x0 [0075.929] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0075.929] GdipIsInfiniteRegion (region=0x1be51620, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0075.929] GdipGetRegionHRgn (region=0x1be51620, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0075.929] GdipDeleteRegion (region=0x1be51620) returned 0x0 [0075.929] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0075.929] GetCurrentObject (hdc=0x3e0106e1, type=0x1) returned 0x1b00017 [0075.929] GetCurrentObject (hdc=0x3e0106e1, type=0x2) returned 0x1900010 [0075.929] GetCurrentObject (hdc=0x3e0106e1, type=0x7) returned 0x2405099f [0075.929] GetCurrentObject (hdc=0x3e0106e1, type=0x6) returned 0x18a0048 [0075.930] SaveDC (hdc=0x3e0106e1) returned 1 [0075.930] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2f0409d6 [0075.930] GetClipRgn (hdc=0x3e0106e1, hrgn=0x2f0409d6) returned 0 [0075.930] SelectClipRgn (hdc=0x3e0106e1, hrgn=0x410407ff) returned 2 [0075.930] DeleteObject (ho=0x2f0409d6) returned 1 [0075.930] DeleteObject (ho=0x410407ff) returned 1 [0075.930] OffsetViewportOrgEx (in: hdc=0x3e0106e1, x=0, y=0, lppt=0x214e328 | out: lppt=0x214e328) returned 1 [0075.930] GetNearestColor (hdc=0x3e0106e1, color=0xf0f0f0) returned 0xf0f0f0 [0075.930] CreateSolidBrush (color=0xf0f0f0) returned 0x3e1009b2 [0075.930] FillRect (hDC=0x3e0106e1, lprc=0x14e1c8, hbr=0x3e1009b2) returned 1 [0075.930] DeleteObject (ho=0x3e1009b2) returned 1 [0075.930] RestoreDC (hdc=0x3e0106e1, nSavedDC=-1) returned 1 [0075.930] GdipReleaseDC (graphics=0x1be567f0, hdc=0x3e0106e1) returned 0x0 [0075.930] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0075.931] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.931] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x214e428) returned 0x0 [0075.931] GdipSetStringFormatAlign (format=0x1be515e0, align=0x1) returned 0x0 [0075.931] GdipSetStringFormatLineAlign (format=0x1be515e0, align=0x1) returned 0x0 [0075.931] GdipSetStringFormatHotkeyPrefix (format=0x1be515e0, hotkeyPrefix=2) returned 0x0 [0075.931] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0075.931] GdipDrawString (graphics=0x1be567f0, string=";", length=1, font=0x1ad3edb0, layoutRect=0x14e338, stringFormat=0x1be515e0, brush=0x1be51720) returned 0x0 [0075.931] GdipDeleteBrush (brush=0x1be51720) returned 0x0 [0075.931] GdipDeleteStringFormat (format=0x1be515e0) returned 0x0 [0075.931] GetFocus () returned 0x103c8 [0075.932] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.932] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÕ\x14\x02", lpUsedDefaultChar=0x0) returned 17 [0075.932] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.932] GdipCreateRegion (region=0x14e030) returned 0x0 [0075.932] GdipGetClip (graphics=0x1be567f0, region=0x1be56e80) returned 0x0 [0075.932] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0075.932] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be515e0) returned 0x0 [0075.932] GdipIsMatrixIdentity (matrix=0x1be515e0, result=0x14e098) returned 0x0 [0075.932] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486950 [0075.932] GdipGetMatrixElements (matrix=0x1be515e0, matrixOut=0x1d486950) returned 0x0 [0075.933] LocalFree (hMem=0x1d486950) returned 0x0 [0075.933] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b90 [0075.933] GdipGetMatrixElements (matrix=0x1be515e0, matrixOut=0x1d486b90) returned 0x0 [0075.934] LocalFree (hMem=0x1d486b90) returned 0x0 [0075.934] GdipDeleteMatrix (matrix=0x1be515e0) returned 0x0 [0075.934] GdipIsInfiniteRegion (region=0x1be56e80, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0075.934] GdipIsInfiniteRegion (region=0x1be56e80, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0075.934] GdipGetRegionHRgn (region=0x1be56e80, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0075.934] GdipDeleteRegion (region=0x1be56e80) returned 0x0 [0075.934] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0075.934] GetCurrentObject (hdc=0x3e0106e1, type=0x1) returned 0x1b00017 [0075.934] GetCurrentObject (hdc=0x3e0106e1, type=0x2) returned 0x1900010 [0075.934] GetCurrentObject (hdc=0x3e0106e1, type=0x7) returned 0x2405099f [0075.934] GetCurrentObject (hdc=0x3e0106e1, type=0x6) returned 0x18a0048 [0075.934] SaveDC (hdc=0x3e0106e1) returned 1 [0075.934] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x420407ff [0075.934] GetClipRgn (hdc=0x3e0106e1, hrgn=0x420407ff) returned 0 [0075.934] SelectClipRgn (hdc=0x3e0106e1, hrgn=0x300409d6) returned 2 [0075.934] DeleteObject (ho=0x420407ff) returned 1 [0075.934] DeleteObject (ho=0x300409d6) returned 1 [0075.934] OffsetViewportOrgEx (in: hdc=0x3e0106e1, x=0, y=0, lppt=0x214e810 | out: lppt=0x214e810) returned 1 [0075.934] GetROP2 (hdc=0x3e0106e1) returned 13 [0075.934] GetBkMode (hdc=0x3e0106e1) returned 2 [0075.934] SetBkMode (hdc=0x3e0106e1, mode=1) returned 2 [0075.935] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x4c3009ce [0075.935] SelectObject (hdc=0x3e0106e1, h=0x4c3009ce) returned 0x1b00017 [0075.935] MoveToEx (in: hdc=0x3e0106e1, x=25, y=0, lppt=0x214e878 | out: lppt=0x214e878) returned 1 [0075.935] LineTo (hdc=0x3e0106e1, x=0, y=0) returned 1 [0075.935] SetBkMode (hdc=0x3e0106e1, mode=2) returned 1 [0075.935] MoveToEx (in: hdc=0x3e0106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.935] GetROP2 (hdc=0x3e0106e1) returned 13 [0075.935] GetBkMode (hdc=0x3e0106e1) returned 2 [0075.935] SetBkMode (hdc=0x3e0106e1, mode=1) returned 2 [0075.935] SelectObject (hdc=0x3e0106e1, h=0x4c3009ce) returned 0x4c3009ce [0075.935] MoveToEx (in: hdc=0x3e0106e1, x=0, y=0, lppt=0x214e890 | out: lppt=0x214e890) returned 1 [0075.935] LineTo (hdc=0x3e0106e1, x=0, y=22) returned 1 [0075.935] SetBkMode (hdc=0x3e0106e1, mode=2) returned 1 [0075.935] MoveToEx (in: hdc=0x3e0106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.935] SelectObject (hdc=0x3e0106e1, h=0x1b00017) returned 0x4c3009ce [0075.935] DeleteObject (ho=0x4c3009ce) returned 1 [0075.935] GetROP2 (hdc=0x3e0106e1) returned 13 [0075.935] GetBkMode (hdc=0x3e0106e1) returned 2 [0075.935] SetBkMode (hdc=0x3e0106e1, mode=1) returned 2 [0075.935] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x5f3008c7 [0075.935] SelectObject (hdc=0x3e0106e1, h=0x5f3008c7) returned 0x1b00017 [0075.936] MoveToEx (in: hdc=0x3e0106e1, x=0, y=22, lppt=0x214e8f8 | out: lppt=0x214e8f8) returned 1 [0075.936] LineTo (hdc=0x3e0106e1, x=25, y=22) returned 1 [0075.936] SetBkMode (hdc=0x3e0106e1, mode=2) returned 1 [0075.936] MoveToEx (in: hdc=0x3e0106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.936] GetROP2 (hdc=0x3e0106e1) returned 13 [0075.936] GetBkMode (hdc=0x3e0106e1) returned 2 [0075.936] SetBkMode (hdc=0x3e0106e1, mode=1) returned 2 [0075.936] SelectObject (hdc=0x3e0106e1, h=0x5f3008c7) returned 0x5f3008c7 [0075.936] MoveToEx (in: hdc=0x3e0106e1, x=25, y=22, lppt=0x214e910 | out: lppt=0x214e910) returned 1 [0075.936] LineTo (hdc=0x3e0106e1, x=25, y=-1) returned 1 [0075.936] SetBkMode (hdc=0x3e0106e1, mode=2) returned 1 [0075.936] MoveToEx (in: hdc=0x3e0106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.936] SelectObject (hdc=0x3e0106e1, h=0x1b00017) returned 0x5f3008c7 [0075.936] DeleteObject (ho=0x5f3008c7) returned 1 [0075.936] GetROP2 (hdc=0x3e0106e1) returned 13 [0075.936] GetBkMode (hdc=0x3e0106e1) returned 2 [0075.936] SetBkMode (hdc=0x3e0106e1, mode=1) returned 2 [0075.936] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x4d3009ce [0075.936] SelectObject (hdc=0x3e0106e1, h=0x4d3009ce) returned 0x1b00017 [0075.936] MoveToEx (in: hdc=0x3e0106e1, x=24, y=1, lppt=0x214e978 | out: lppt=0x214e978) returned 1 [0075.936] LineTo (hdc=0x3e0106e1, x=1, y=1) returned 1 [0075.937] SetBkMode (hdc=0x3e0106e1, mode=2) returned 1 [0075.937] MoveToEx (in: hdc=0x3e0106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.937] GetROP2 (hdc=0x3e0106e1) returned 13 [0075.937] GetBkMode (hdc=0x3e0106e1) returned 2 [0075.937] SetBkMode (hdc=0x3e0106e1, mode=1) returned 2 [0075.937] SelectObject (hdc=0x3e0106e1, h=0x4d3009ce) returned 0x4d3009ce [0075.937] MoveToEx (in: hdc=0x3e0106e1, x=1, y=1, lppt=0x214e990 | out: lppt=0x214e990) returned 1 [0075.937] LineTo (hdc=0x3e0106e1, x=1, y=21) returned 1 [0075.937] SetBkMode (hdc=0x3e0106e1, mode=2) returned 1 [0075.937] MoveToEx (in: hdc=0x3e0106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.937] SelectObject (hdc=0x3e0106e1, h=0x1b00017) returned 0x4d3009ce [0075.937] DeleteObject (ho=0x4d3009ce) returned 1 [0075.937] GetROP2 (hdc=0x3e0106e1) returned 13 [0075.937] GetBkMode (hdc=0x3e0106e1) returned 2 [0075.937] SetBkMode (hdc=0x3e0106e1, mode=1) returned 2 [0075.937] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x603008c7 [0075.937] SelectObject (hdc=0x3e0106e1, h=0x603008c7) returned 0x1b00017 [0075.937] MoveToEx (in: hdc=0x3e0106e1, x=1, y=21, lppt=0x214e9f8 | out: lppt=0x214e9f8) returned 1 [0075.937] LineTo (hdc=0x3e0106e1, x=24, y=21) returned 1 [0075.937] SetBkMode (hdc=0x3e0106e1, mode=2) returned 1 [0075.937] MoveToEx (in: hdc=0x3e0106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.937] GetROP2 (hdc=0x3e0106e1) returned 13 [0075.938] GetBkMode (hdc=0x3e0106e1) returned 2 [0075.938] SetBkMode (hdc=0x3e0106e1, mode=1) returned 2 [0075.938] SelectObject (hdc=0x3e0106e1, h=0x603008c7) returned 0x603008c7 [0075.938] MoveToEx (in: hdc=0x3e0106e1, x=24, y=21, lppt=0x214ea10 | out: lppt=0x214ea10) returned 1 [0075.938] LineTo (hdc=0x3e0106e1, x=24, y=0) returned 1 [0075.938] SetBkMode (hdc=0x3e0106e1, mode=2) returned 1 [0075.938] MoveToEx (in: hdc=0x3e0106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.938] SelectObject (hdc=0x3e0106e1, h=0x1b00017) returned 0x603008c7 [0075.938] DeleteObject (ho=0x603008c7) returned 1 [0075.938] RestoreDC (hdc=0x3e0106e1, nSavedDC=-1) returned 1 [0075.938] GdipReleaseDC (graphics=0x1be567f0, hdc=0x3e0106e1) returned 0x0 [0075.938] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0075.938] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x3e0106e1, x1=0, y1=0, rop=0xcc0020) returned 1 [0075.938] GdipReleaseDC (graphics=0x1be567f0, hdc=0x3e0106e1) returned 0x0 [0075.938] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0075.938] SelectObject (hdc=0x3e0106e1, h=0x185000f) returned 0x2405099f [0075.938] DeleteDC (hdc=0x3e0106e1) returned 1 [0075.938] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0075.939] EndPaint (hWnd=0x50276, lpPaint=0x14e548) returned 1 [0075.939] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.939] IsWindowUnicode (hWnd=0x103ae) returned 1 [0075.939] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.939] TranslateMessage (lpMsg=0x14ef10) returned 0 [0075.939] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0075.939] BeginPaint (in: hWnd=0x103ae, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0075.939] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.939] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0075.939] GetStockObject (i=5) returned 0x1900015 [0075.939] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0075.939] CreateCompatibleDC (hdc=0xc0100ae) returned 0x410106e1 [0075.940] SelectObject (hdc=0x410106e1, h=0x2405099f) returned 0x185000f [0075.940] GdipCreateFromHDC (hdc=0x410106e1, graphics=0x14e528) returned 0x0 [0075.940] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0075.940] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0075.940] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0075.940] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0075.940] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0075.940] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4869d0 [0075.940] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4869d0) returned 0x0 [0075.941] LocalFree (hMem=0x1d4869d0) returned 0x0 [0075.941] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0075.941] GdipCreateRegion (region=0x14e550) returned 0x0 [0075.941] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0075.941] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0075.941] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0075.941] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd9f0dbd) returned 0x0 [0075.941] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0075.941] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0075.941] GetCurrentObject (hdc=0x410106e1, type=0x1) returned 0x1b00017 [0075.941] GetCurrentObject (hdc=0x410106e1, type=0x2) returned 0x1900010 [0075.941] GetCurrentObject (hdc=0x410106e1, type=0x7) returned 0x2405099f [0075.941] GetCurrentObject (hdc=0x410106e1, type=0x6) returned 0x18a0048 [0075.941] SaveDC (hdc=0x410106e1) returned 1 [0075.942] GetNearestColor (hdc=0x410106e1, color=0xf0f0f0) returned 0xf0f0f0 [0075.942] GetNearestColor (hdc=0x410106e1, color=0xa0a0a0) returned 0xa0a0a0 [0075.942] GetNearestColor (hdc=0x410106e1, color=0x696969) returned 0x696969 [0075.942] GetNearestColor (hdc=0x410106e1, color=0xa0a0a0) returned 0xa0a0a0 [0075.942] GetNearestColor (hdc=0x410106e1, color=0x0) returned 0x0 [0075.942] GetNearestColor (hdc=0x410106e1, color=0xffffff) returned 0xffffff [0075.942] GetNearestColor (hdc=0x410106e1, color=0xe5e5e5) returned 0xe5e5e5 [0075.942] GetNearestColor (hdc=0x410106e1, color=0xd8d8d8) returned 0xd8d8d8 [0075.942] GetNearestColor (hdc=0x410106e1, color=0x0) returned 0x0 [0075.942] RestoreDC (hdc=0x410106e1, nSavedDC=-1) returned 1 [0075.942] GdipReleaseDC (graphics=0x1be567f0, hdc=0x410106e1) returned 0x0 [0075.943] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.943] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExí\x14\x02", lpUsedDefaultChar=0x0) returned 17 [0075.943] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.943] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x214f348) returned 0x0 [0075.943] GdipSetStringFormatAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0075.943] GdipSetStringFormatLineAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0075.943] GdipSetStringFormatHotkeyPrefix (format=0x1be56ec0, hotkeyPrefix=2) returned 0x0 [0075.943] GdipGetStringFormatFlags (format=0x1be56ec0, flags=0x14e378) returned 0x0 [0075.943] GdipGetStringFormatTrimming (format=0x1be56ec0, trimming=0x14e378) returned 0x0 [0075.943] GdipGetStringFormatHotkeyPrefix (format=0x1be56ec0, hotkeyPrefix=0x14e378) returned 0x0 [0075.943] GdipGetFontSize (font=0x1be56ec0, size=0x14e378) returned 0x0 [0075.943] GdipGetFontStyle (font=0x1be56ec0, style=0x14e378) returned 0x0 [0075.943] GdipDeleteStringFormat (format=0x1be56ec0) returned 0x0 [0075.943] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.943] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0075.944] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.944] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0075.944] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x214f478) returned 0x0 [0075.944] GdipSetStringFormatFlags (format=0x1be56ec0, flags=0) returned 0x0 [0075.944] GdipSetStringFormatTrimming (format=0x1be56ec0, trimming=0x1) returned 0x0 [0075.944] GdipSetStringFormatHotkeyPrefix (format=0x1be56ec0, hotkeyPrefix=2) returned 0x0 [0075.944] GdipSetStringFormatAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0075.944] GdipSetStringFormatLineAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0075.944] GdipMeasureString (graphics=0x1be57860, string="-", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be56ec0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0075.944] GdipDeleteStringFormat (format=0x1be56ec0) returned 0x0 [0075.944] GdipDeleteGraphics (graphics=0x1be57860) returned 0x0 [0075.944] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.944] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0075.944] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.944] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0075.945] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0075.945] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0075.945] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0075.945] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0075.945] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486a90 [0075.945] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486a90) returned 0x0 [0075.945] LocalFree (hMem=0x1d486a90) returned 0x0 [0075.945] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486c10 [0075.946] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486c10) returned 0x0 [0075.946] LocalFree (hMem=0x1d486c10) returned 0x0 [0075.946] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0075.946] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0075.946] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0075.946] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0075.946] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0075.946] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0075.946] GetCurrentObject (hdc=0x410106e1, type=0x1) returned 0x1b00017 [0075.946] GetCurrentObject (hdc=0x410106e1, type=0x2) returned 0x1900010 [0075.946] GetCurrentObject (hdc=0x410106e1, type=0x7) returned 0x2405099f [0075.947] GetCurrentObject (hdc=0x410106e1, type=0x6) returned 0x18a0048 [0075.947] SaveDC (hdc=0x410106e1) returned 1 [0075.947] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x310409d6 [0075.947] GetClipRgn (hdc=0x410106e1, hrgn=0x310409d6) returned 0 [0075.947] SelectClipRgn (hdc=0x410106e1, hrgn=0x430407ff) returned 2 [0075.947] DeleteObject (ho=0x310409d6) returned 1 [0075.947] DeleteObject (ho=0x430407ff) returned 1 [0075.947] OffsetViewportOrgEx (in: hdc=0x410106e1, x=0, y=0, lppt=0x214f838 | out: lppt=0x214f838) returned 1 [0075.947] GetNearestColor (hdc=0x410106e1, color=0xf0f0f0) returned 0xf0f0f0 [0075.947] CreateSolidBrush (color=0xf0f0f0) returned 0x3f1009b2 [0075.947] FillRect (hDC=0x410106e1, lprc=0x14e1c8, hbr=0x3f1009b2) returned 1 [0075.947] DeleteObject (ho=0x3f1009b2) returned 1 [0075.947] RestoreDC (hdc=0x410106e1, nSavedDC=-1) returned 1 [0075.947] GdipReleaseDC (graphics=0x1be567f0, hdc=0x410106e1) returned 0x0 [0075.947] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0075.948] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.948] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x214f938) returned 0x0 [0075.948] GdipSetStringFormatAlign (format=0x1be515e0, align=0x1) returned 0x0 [0075.948] GdipSetStringFormatLineAlign (format=0x1be515e0, align=0x1) returned 0x0 [0075.948] GdipSetStringFormatHotkeyPrefix (format=0x1be515e0, hotkeyPrefix=2) returned 0x0 [0075.948] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0075.948] GdipDrawString (graphics=0x1be567f0, string="-", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be515e0, brush=0x1be51650) returned 0x0 [0075.948] GdipDeleteBrush (brush=0x1be51650) returned 0x0 [0075.948] GdipDeleteStringFormat (format=0x1be515e0) returned 0x0 [0075.948] GetFocus () returned 0x103c8 [0075.948] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExê\x14\x02", lpUsedDefaultChar=0x0) returned 17 [0075.949] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.949] GdipCreateRegion (region=0x14e030) returned 0x0 [0075.949] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0075.949] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0075.949] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0075.949] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0075.949] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486e10 [0075.949] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486e10) returned 0x0 [0075.950] LocalFree (hMem=0x1d486e10) returned 0x0 [0075.950] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486cd0 [0075.950] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486cd0) returned 0x0 [0075.951] LocalFree (hMem=0x1d486cd0) returned 0x0 [0075.951] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0075.951] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0075.951] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0075.951] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0075.951] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0075.951] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0075.951] GetCurrentObject (hdc=0x410106e1, type=0x1) returned 0x1b00017 [0075.951] GetCurrentObject (hdc=0x410106e1, type=0x2) returned 0x1900010 [0075.951] GetCurrentObject (hdc=0x410106e1, type=0x7) returned 0x2405099f [0075.951] GetCurrentObject (hdc=0x410106e1, type=0x6) returned 0x18a0048 [0075.951] SaveDC (hdc=0x410106e1) returned 1 [0075.951] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x440407ff [0075.951] GetClipRgn (hdc=0x410106e1, hrgn=0x440407ff) returned 0 [0075.951] SelectClipRgn (hdc=0x410106e1, hrgn=0x320409d6) returned 2 [0075.952] DeleteObject (ho=0x440407ff) returned 1 [0075.952] DeleteObject (ho=0x320409d6) returned 1 [0075.952] OffsetViewportOrgEx (in: hdc=0x410106e1, x=0, y=0, lppt=0x214fd20 | out: lppt=0x214fd20) returned 1 [0075.952] GetROP2 (hdc=0x410106e1) returned 13 [0075.952] GetBkMode (hdc=0x410106e1) returned 2 [0075.952] SetBkMode (hdc=0x410106e1, mode=1) returned 2 [0075.952] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x4e3009ce [0075.952] SelectObject (hdc=0x410106e1, h=0x4e3009ce) returned 0x1b00017 [0075.952] MoveToEx (in: hdc=0x410106e1, x=25, y=0, lppt=0x214fd88 | out: lppt=0x214fd88) returned 1 [0075.952] LineTo (hdc=0x410106e1, x=0, y=0) returned 1 [0075.952] SetBkMode (hdc=0x410106e1, mode=2) returned 1 [0075.952] MoveToEx (in: hdc=0x410106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.952] GetROP2 (hdc=0x410106e1) returned 13 [0075.952] GetBkMode (hdc=0x410106e1) returned 2 [0075.952] SetBkMode (hdc=0x410106e1, mode=1) returned 2 [0075.952] SelectObject (hdc=0x410106e1, h=0x4e3009ce) returned 0x4e3009ce [0075.952] MoveToEx (in: hdc=0x410106e1, x=0, y=0, lppt=0x214fda0 | out: lppt=0x214fda0) returned 1 [0075.952] LineTo (hdc=0x410106e1, x=0, y=22) returned 1 [0075.952] SetBkMode (hdc=0x410106e1, mode=2) returned 1 [0075.953] MoveToEx (in: hdc=0x410106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.953] SelectObject (hdc=0x410106e1, h=0x1b00017) returned 0x4e3009ce [0075.953] DeleteObject (ho=0x4e3009ce) returned 1 [0075.953] GetROP2 (hdc=0x410106e1) returned 13 [0075.953] GetBkMode (hdc=0x410106e1) returned 2 [0075.953] SetBkMode (hdc=0x410106e1, mode=1) returned 2 [0075.953] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x3530097e [0075.953] SelectObject (hdc=0x410106e1, h=0x3530097e) returned 0x1b00017 [0075.953] MoveToEx (in: hdc=0x410106e1, x=0, y=22, lppt=0x214fe08 | out: lppt=0x214fe08) returned 1 [0075.953] LineTo (hdc=0x410106e1, x=25, y=22) returned 1 [0075.953] SetBkMode (hdc=0x410106e1, mode=2) returned 1 [0075.953] MoveToEx (in: hdc=0x410106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.953] GetROP2 (hdc=0x410106e1) returned 13 [0075.953] GetBkMode (hdc=0x410106e1) returned 2 [0075.953] SetBkMode (hdc=0x410106e1, mode=1) returned 2 [0075.953] SelectObject (hdc=0x410106e1, h=0x3530097e) returned 0x3530097e [0075.953] MoveToEx (in: hdc=0x410106e1, x=25, y=22, lppt=0x214fe20 | out: lppt=0x214fe20) returned 1 [0075.953] LineTo (hdc=0x410106e1, x=25, y=-1) returned 1 [0075.953] SetBkMode (hdc=0x410106e1, mode=2) returned 1 [0075.953] MoveToEx (in: hdc=0x410106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.954] SelectObject (hdc=0x410106e1, h=0x1b00017) returned 0x3530097e [0075.954] DeleteObject (ho=0x3530097e) returned 1 [0075.954] GetROP2 (hdc=0x410106e1) returned 13 [0075.954] GetBkMode (hdc=0x410106e1) returned 2 [0075.954] SetBkMode (hdc=0x410106e1, mode=1) returned 2 [0075.954] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x4f3009ce [0075.954] SelectObject (hdc=0x410106e1, h=0x4f3009ce) returned 0x1b00017 [0075.954] MoveToEx (in: hdc=0x410106e1, x=24, y=1, lppt=0x214fe88 | out: lppt=0x214fe88) returned 1 [0075.954] LineTo (hdc=0x410106e1, x=1, y=1) returned 1 [0075.954] SetBkMode (hdc=0x410106e1, mode=2) returned 1 [0075.954] MoveToEx (in: hdc=0x410106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.954] GetROP2 (hdc=0x410106e1) returned 13 [0075.954] GetBkMode (hdc=0x410106e1) returned 2 [0075.954] SetBkMode (hdc=0x410106e1, mode=1) returned 2 [0075.954] SelectObject (hdc=0x410106e1, h=0x4f3009ce) returned 0x4f3009ce [0075.954] MoveToEx (in: hdc=0x410106e1, x=1, y=1, lppt=0x214fea0 | out: lppt=0x214fea0) returned 1 [0075.954] LineTo (hdc=0x410106e1, x=1, y=21) returned 1 [0075.954] SetBkMode (hdc=0x410106e1, mode=2) returned 1 [0075.954] MoveToEx (in: hdc=0x410106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.954] SelectObject (hdc=0x410106e1, h=0x1b00017) returned 0x4f3009ce [0075.954] DeleteObject (ho=0x4f3009ce) returned 1 [0075.954] GetROP2 (hdc=0x410106e1) returned 13 [0075.955] GetBkMode (hdc=0x410106e1) returned 2 [0075.955] SetBkMode (hdc=0x410106e1, mode=1) returned 2 [0075.955] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x3630097e [0075.955] SelectObject (hdc=0x410106e1, h=0x3630097e) returned 0x1b00017 [0075.955] MoveToEx (in: hdc=0x410106e1, x=1, y=21, lppt=0x214ff08 | out: lppt=0x214ff08) returned 1 [0075.955] LineTo (hdc=0x410106e1, x=24, y=21) returned 1 [0075.955] SetBkMode (hdc=0x410106e1, mode=2) returned 1 [0075.955] MoveToEx (in: hdc=0x410106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.955] GetROP2 (hdc=0x410106e1) returned 13 [0075.955] GetBkMode (hdc=0x410106e1) returned 2 [0075.955] SetBkMode (hdc=0x410106e1, mode=1) returned 2 [0075.955] SelectObject (hdc=0x410106e1, h=0x3630097e) returned 0x3630097e [0075.955] MoveToEx (in: hdc=0x410106e1, x=24, y=21, lppt=0x214ff20 | out: lppt=0x214ff20) returned 1 [0075.955] LineTo (hdc=0x410106e1, x=24, y=0) returned 1 [0075.955] SetBkMode (hdc=0x410106e1, mode=2) returned 1 [0075.955] MoveToEx (in: hdc=0x410106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.955] SelectObject (hdc=0x410106e1, h=0x1b00017) returned 0x3630097e [0075.955] DeleteObject (ho=0x3630097e) returned 1 [0075.955] RestoreDC (hdc=0x410106e1, nSavedDC=-1) returned 1 [0075.955] GdipReleaseDC (graphics=0x1be567f0, hdc=0x410106e1) returned 0x0 [0075.955] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0075.956] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x410106e1, x1=0, y1=0, rop=0xcc0020) returned 1 [0075.956] GdipReleaseDC (graphics=0x1be567f0, hdc=0x410106e1) returned 0x0 [0075.956] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0075.956] SelectObject (hdc=0x410106e1, h=0x185000f) returned 0x2405099f [0075.956] DeleteDC (hdc=0x410106e1) returned 1 [0075.956] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0075.956] EndPaint (hWnd=0x103ae, lpPaint=0x14e548) returned 1 [0075.956] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.956] IsWindowUnicode (hWnd=0x103b0) returned 1 [0075.956] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0075.956] TranslateMessage (lpMsg=0x14ef10) returned 0 [0075.956] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0075.956] BeginPaint (in: hWnd=0x103b0, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0075.956] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0075.957] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0075.957] GetStockObject (i=5) returned 0x1900015 [0075.957] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0075.957] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x640108c7 [0075.957] SelectObject (hdc=0x640108c7, h=0x2405099f) returned 0x185000f [0075.957] GdipCreateFromHDC (hdc=0x640108c7, graphics=0x14e528) returned 0x0 [0075.957] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0075.957] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0075.957] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0075.957] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0075.962] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0075.962] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486090 [0075.962] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486090) returned 0x0 [0075.962] LocalFree (hMem=0x1d486090) returned 0x0 [0075.962] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0075.962] GdipCreateRegion (region=0x14e550) returned 0x0 [0075.962] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0075.962] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0075.963] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0075.963] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd9c0dbd) returned 0x0 [0075.963] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0075.963] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0075.963] GetCurrentObject (hdc=0x640108c7, type=0x1) returned 0x1b00017 [0075.963] GetCurrentObject (hdc=0x640108c7, type=0x2) returned 0x1900010 [0075.963] GetCurrentObject (hdc=0x640108c7, type=0x7) returned 0x2405099f [0075.963] GetCurrentObject (hdc=0x640108c7, type=0x6) returned 0x18a0048 [0075.963] SaveDC (hdc=0x640108c7) returned 1 [0075.963] GetNearestColor (hdc=0x640108c7, color=0xf0f0f0) returned 0xf0f0f0 [0075.963] GetNearestColor (hdc=0x640108c7, color=0xa0a0a0) returned 0xa0a0a0 [0075.963] GetNearestColor (hdc=0x640108c7, color=0x696969) returned 0x696969 [0075.963] GetNearestColor (hdc=0x640108c7, color=0xa0a0a0) returned 0xa0a0a0 [0075.963] GetNearestColor (hdc=0x640108c7, color=0x0) returned 0x0 [0075.963] GetNearestColor (hdc=0x640108c7, color=0xffffff) returned 0xffffff [0075.963] GetNearestColor (hdc=0x640108c7, color=0xe5e5e5) returned 0xe5e5e5 [0075.963] GetNearestColor (hdc=0x640108c7, color=0xd8d8d8) returned 0xd8d8d8 [0075.963] GetNearestColor (hdc=0x640108c7, color=0x0) returned 0x0 [0075.963] RestoreDC (hdc=0x640108c7, nSavedDC=-1) returned 1 [0075.964] GdipReleaseDC (graphics=0x1be567f0, hdc=0x640108c7) returned 0x0 [0075.964] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x02\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0075.964] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.964] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2150858) returned 0x0 [0075.964] GdipSetStringFormatAlign (format=0x1be515e0, align=0x1) returned 0x0 [0075.964] GdipSetStringFormatLineAlign (format=0x1be515e0, align=0x1) returned 0x0 [0075.964] GdipSetStringFormatHotkeyPrefix (format=0x1be515e0, hotkeyPrefix=2) returned 0x0 [0075.964] GdipGetStringFormatFlags (format=0x1be515e0, flags=0x14e378) returned 0x0 [0075.964] GdipGetStringFormatTrimming (format=0x1be515e0, trimming=0x14e378) returned 0x0 [0075.964] GdipGetStringFormatHotkeyPrefix (format=0x1be515e0, hotkeyPrefix=0x14e378) returned 0x0 [0075.964] GdipGetFontSize (font=0x1be515e0, size=0x14e378) returned 0x0 [0075.964] GdipGetFontStyle (font=0x1be515e0, style=0x14e378) returned 0x0 [0075.964] GdipDeleteStringFormat (format=0x1be515e0) returned 0x0 [0075.965] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.965] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0075.965] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.965] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0075.965] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2150988) returned 0x0 [0075.965] GdipSetStringFormatFlags (format=0x1be51670, flags=0) returned 0x0 [0075.965] GdipSetStringFormatTrimming (format=0x1be51670, trimming=0x1) returned 0x0 [0075.965] GdipSetStringFormatHotkeyPrefix (format=0x1be51670, hotkeyPrefix=2) returned 0x0 [0075.965] GdipSetStringFormatAlign (format=0x1be51670, align=0x1) returned 0x0 [0075.965] GdipSetStringFormatLineAlign (format=0x1be51670, align=0x1) returned 0x0 [0075.965] GdipMeasureString (graphics=0x1be57860, string="8", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be51670, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0075.965] GdipDeleteStringFormat (format=0x1be51670) returned 0x0 [0075.965] GdipDeleteGraphics (graphics=0x1be57860) returned 0x0 [0075.966] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0075.966] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.966] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0075.966] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0075.966] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0075.966] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0075.966] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0075.966] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4867d0 [0075.966] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4867d0) returned 0x0 [0075.967] LocalFree (hMem=0x1d4867d0) returned 0x0 [0075.967] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486590 [0075.967] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486590) returned 0x0 [0075.967] LocalFree (hMem=0x1d486590) returned 0x0 [0075.967] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0075.967] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0075.967] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0075.967] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0075.968] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0075.968] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0075.968] GetCurrentObject (hdc=0x640108c7, type=0x1) returned 0x1b00017 [0075.968] GetCurrentObject (hdc=0x640108c7, type=0x2) returned 0x1900010 [0075.968] GetCurrentObject (hdc=0x640108c7, type=0x7) returned 0x2405099f [0075.968] GetCurrentObject (hdc=0x640108c7, type=0x6) returned 0x18a0048 [0075.968] SaveDC (hdc=0x640108c7) returned 1 [0075.968] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x330409d6 [0075.968] GetClipRgn (hdc=0x640108c7, hrgn=0x330409d6) returned 0 [0075.968] SelectClipRgn (hdc=0x640108c7, hrgn=0x450407ff) returned 2 [0075.968] DeleteObject (ho=0x330409d6) returned 1 [0075.968] DeleteObject (ho=0x450407ff) returned 1 [0075.968] OffsetViewportOrgEx (in: hdc=0x640108c7, x=0, y=0, lppt=0x2150d48 | out: lppt=0x2150d48) returned 1 [0075.968] GetNearestColor (hdc=0x640108c7, color=0xf0f0f0) returned 0xf0f0f0 [0075.968] CreateSolidBrush (color=0xf0f0f0) returned 0x401009b2 [0075.968] FillRect (hDC=0x640108c7, lprc=0x14e1c8, hbr=0x401009b2) returned 1 [0075.968] DeleteObject (ho=0x401009b2) returned 1 [0075.968] RestoreDC (hdc=0x640108c7, nSavedDC=-1) returned 1 [0075.968] GdipReleaseDC (graphics=0x1be567f0, hdc=0x640108c7) returned 0x0 [0075.969] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.969] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0075.969] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.969] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2150e48) returned 0x0 [0075.969] GdipSetStringFormatAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0075.969] GdipSetStringFormatLineAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0075.969] GdipSetStringFormatHotkeyPrefix (format=0x1be56ec0, hotkeyPrefix=2) returned 0x0 [0075.969] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0075.969] GdipDrawString (graphics=0x1be567f0, string="8", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be56ec0, brush=0x1be515e0) returned 0x0 [0075.969] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0075.969] GdipDeleteStringFormat (format=0x1be56ec0) returned 0x0 [0075.969] GetFocus () returned 0x103c8 [0075.970] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0075.970] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÿ\x14\x02", lpUsedDefaultChar=0x0) returned 17 [0075.970] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0075.970] GdipCreateRegion (region=0x14e030) returned 0x0 [0075.970] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0075.970] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0075.970] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0075.970] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0075.970] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486510 [0075.970] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486510) returned 0x0 [0075.971] LocalFree (hMem=0x1d486510) returned 0x0 [0075.971] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b50 [0075.971] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486b50) returned 0x0 [0075.972] LocalFree (hMem=0x1d486b50) returned 0x0 [0075.972] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0075.972] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0075.972] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0075.972] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0075.972] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0075.972] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0075.972] GetCurrentObject (hdc=0x640108c7, type=0x1) returned 0x1b00017 [0075.972] GetCurrentObject (hdc=0x640108c7, type=0x2) returned 0x1900010 [0075.972] GetCurrentObject (hdc=0x640108c7, type=0x7) returned 0x2405099f [0075.972] GetCurrentObject (hdc=0x640108c7, type=0x6) returned 0x18a0048 [0075.972] SaveDC (hdc=0x640108c7) returned 1 [0075.972] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x460407ff [0075.972] GetClipRgn (hdc=0x640108c7, hrgn=0x460407ff) returned 0 [0075.972] SelectClipRgn (hdc=0x640108c7, hrgn=0x340409d6) returned 2 [0075.972] DeleteObject (ho=0x460407ff) returned 1 [0075.972] DeleteObject (ho=0x340409d6) returned 1 [0075.972] OffsetViewportOrgEx (in: hdc=0x640108c7, x=0, y=0, lppt=0x2151230 | out: lppt=0x2151230) returned 1 [0075.973] GetROP2 (hdc=0x640108c7) returned 13 [0075.973] GetBkMode (hdc=0x640108c7) returned 2 [0075.973] SetBkMode (hdc=0x640108c7, mode=1) returned 2 [0075.973] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x3730097e [0075.973] SelectObject (hdc=0x640108c7, h=0x3730097e) returned 0x1b00017 [0075.973] MoveToEx (in: hdc=0x640108c7, x=25, y=0, lppt=0x2151298 | out: lppt=0x2151298) returned 1 [0075.973] LineTo (hdc=0x640108c7, x=0, y=0) returned 1 [0075.973] SetBkMode (hdc=0x640108c7, mode=2) returned 1 [0075.973] MoveToEx (in: hdc=0x640108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0075.973] GetROP2 (hdc=0x640108c7) returned 13 [0075.973] GetBkMode (hdc=0x640108c7) returned 2 [0076.071] SetBkMode (hdc=0x640108c7, mode=1) returned 2 [0076.071] SelectObject (hdc=0x640108c7, h=0x3730097e) returned 0x3730097e [0076.071] MoveToEx (in: hdc=0x640108c7, x=0, y=0, lppt=0x21512b0 | out: lppt=0x21512b0) returned 1 [0076.071] LineTo (hdc=0x640108c7, x=0, y=22) returned 1 [0076.072] SetBkMode (hdc=0x640108c7, mode=2) returned 1 [0076.072] MoveToEx (in: hdc=0x640108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.072] SelectObject (hdc=0x640108c7, h=0x1b00017) returned 0x3730097e [0076.073] DeleteObject (ho=0x3730097e) returned 1 [0076.073] GetROP2 (hdc=0x640108c7) returned 13 [0076.073] GetBkMode (hdc=0x640108c7) returned 2 [0076.073] SetBkMode (hdc=0x640108c7, mode=1) returned 2 [0076.077] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x5c3009ce [0076.077] SelectObject (hdc=0x640108c7, h=0x5c3009ce) returned 0x1b00017 [0076.077] MoveToEx (in: hdc=0x640108c7, x=0, y=22, lppt=0x2151318 | out: lppt=0x2151318) returned 1 [0076.078] LineTo (hdc=0x640108c7, x=25, y=22) returned 1 [0076.078] SetBkMode (hdc=0x640108c7, mode=2) returned 1 [0076.078] MoveToEx (in: hdc=0x640108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.078] GetROP2 (hdc=0x640108c7) returned 13 [0076.079] GetBkMode (hdc=0x640108c7) returned 2 [0076.079] SetBkMode (hdc=0x640108c7, mode=1) returned 2 [0076.079] SelectObject (hdc=0x640108c7, h=0x5c3009ce) returned 0x5c3009ce [0076.079] MoveToEx (in: hdc=0x640108c7, x=25, y=22, lppt=0x2151330 | out: lppt=0x2151330) returned 1 [0076.106] LineTo (hdc=0x640108c7, x=25, y=-1) returned 1 [0076.106] SetBkMode (hdc=0x640108c7, mode=2) returned 1 [0076.106] MoveToEx (in: hdc=0x640108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.106] SelectObject (hdc=0x640108c7, h=0x1b00017) returned 0x5c3009ce [0076.106] DeleteObject (ho=0x5c3009ce) returned 1 [0076.106] GetROP2 (hdc=0x640108c7) returned 13 [0076.106] GetBkMode (hdc=0x640108c7) returned 2 [0076.106] SetBkMode (hdc=0x640108c7, mode=1) returned 2 [0076.106] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x4e3008b5 [0076.106] SelectObject (hdc=0x640108c7, h=0x4e3008b5) returned 0x1b00017 [0076.106] MoveToEx (in: hdc=0x640108c7, x=24, y=1, lppt=0x2151398 | out: lppt=0x2151398) returned 1 [0076.106] LineTo (hdc=0x640108c7, x=1, y=1) returned 1 [0076.107] SetBkMode (hdc=0x640108c7, mode=2) returned 1 [0076.107] MoveToEx (in: hdc=0x640108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.107] GetROP2 (hdc=0x640108c7) returned 13 [0076.107] GetBkMode (hdc=0x640108c7) returned 2 [0076.107] SetBkMode (hdc=0x640108c7, mode=1) returned 2 [0076.107] SelectObject (hdc=0x640108c7, h=0x4e3008b5) returned 0x4e3008b5 [0076.107] MoveToEx (in: hdc=0x640108c7, x=1, y=1, lppt=0x21513b0 | out: lppt=0x21513b0) returned 1 [0076.107] LineTo (hdc=0x640108c7, x=1, y=21) returned 1 [0076.107] SetBkMode (hdc=0x640108c7, mode=2) returned 1 [0076.107] MoveToEx (in: hdc=0x640108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.107] SelectObject (hdc=0x640108c7, h=0x1b00017) returned 0x4e3008b5 [0076.107] DeleteObject (ho=0x4e3008b5) returned 1 [0076.107] GetROP2 (hdc=0x640108c7) returned 13 [0076.107] GetBkMode (hdc=0x640108c7) returned 2 [0076.107] SetBkMode (hdc=0x640108c7, mode=1) returned 2 [0076.107] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x5d3009ce [0076.107] SelectObject (hdc=0x640108c7, h=0x5d3009ce) returned 0x1b00017 [0076.107] MoveToEx (in: hdc=0x640108c7, x=1, y=21, lppt=0x2151418 | out: lppt=0x2151418) returned 1 [0076.107] LineTo (hdc=0x640108c7, x=24, y=21) returned 1 [0076.107] SetBkMode (hdc=0x640108c7, mode=2) returned 1 [0076.107] MoveToEx (in: hdc=0x640108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.107] GetROP2 (hdc=0x640108c7) returned 13 [0076.108] GetBkMode (hdc=0x640108c7) returned 2 [0076.108] SetBkMode (hdc=0x640108c7, mode=1) returned 2 [0076.108] SelectObject (hdc=0x640108c7, h=0x5d3009ce) returned 0x5d3009ce [0076.108] MoveToEx (in: hdc=0x640108c7, x=24, y=21, lppt=0x2151430 | out: lppt=0x2151430) returned 1 [0076.108] LineTo (hdc=0x640108c7, x=24, y=0) returned 1 [0076.108] SetBkMode (hdc=0x640108c7, mode=2) returned 1 [0076.108] MoveToEx (in: hdc=0x640108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.108] SelectObject (hdc=0x640108c7, h=0x1b00017) returned 0x5d3009ce [0076.108] DeleteObject (ho=0x5d3009ce) returned 1 [0076.108] RestoreDC (hdc=0x640108c7, nSavedDC=-1) returned 1 [0076.108] GdipReleaseDC (graphics=0x1be567f0, hdc=0x640108c7) returned 0x0 [0076.108] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0076.108] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x640108c7, x1=0, y1=0, rop=0xcc0020) returned 1 [0076.108] GdipReleaseDC (graphics=0x1be567f0, hdc=0x640108c7) returned 0x0 [0076.108] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0076.108] SelectObject (hdc=0x640108c7, h=0x185000f) returned 0x2405099f [0076.109] DeleteDC (hdc=0x640108c7) returned 1 [0076.109] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0076.109] EndPaint (hWnd=0x103b0, lpPaint=0x14e548) returned 1 [0076.109] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.109] IsWindowUnicode (hWnd=0x103b2) returned 1 [0076.109] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.109] TranslateMessage (lpMsg=0x14ef10) returned 0 [0076.109] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0076.109] BeginPaint (in: hWnd=0x103b2, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0076.109] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0076.109] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0076.110] GetStockObject (i=5) returned 0x1900015 [0076.110] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0076.110] CreateCompatibleDC (hdc=0xc0100ae) returned 0x2d010987 [0076.110] SelectObject (hdc=0x2d010987, h=0x2405099f) returned 0x185000f [0076.110] GdipCreateFromHDC (hdc=0x2d010987, graphics=0x14e528) returned 0x0 [0076.110] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0076.110] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0076.110] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0076.110] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0076.110] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0076.110] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486e50 [0076.110] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486e50) returned 0x0 [0076.111] LocalFree (hMem=0x1d486e50) returned 0x0 [0076.111] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0076.111] GdipCreateRegion (region=0x14e550) returned 0x0 [0076.111] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.111] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0076.111] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0076.111] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd990dbd) returned 0x0 [0076.111] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.111] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0076.112] GetCurrentObject (hdc=0x2d010987, type=0x1) returned 0x1b00017 [0076.112] GetCurrentObject (hdc=0x2d010987, type=0x2) returned 0x1900010 [0076.112] GetCurrentObject (hdc=0x2d010987, type=0x7) returned 0x2405099f [0076.112] GetCurrentObject (hdc=0x2d010987, type=0x6) returned 0x18a0048 [0076.112] SaveDC (hdc=0x2d010987) returned 1 [0076.112] GetNearestColor (hdc=0x2d010987, color=0xf0f0f0) returned 0xf0f0f0 [0076.112] GetNearestColor (hdc=0x2d010987, color=0xa0a0a0) returned 0xa0a0a0 [0076.112] GetNearestColor (hdc=0x2d010987, color=0x696969) returned 0x696969 [0076.112] GetNearestColor (hdc=0x2d010987, color=0xa0a0a0) returned 0xa0a0a0 [0076.112] GetNearestColor (hdc=0x2d010987, color=0x0) returned 0x0 [0076.112] GetNearestColor (hdc=0x2d010987, color=0xffffff) returned 0xffffff [0076.112] GetNearestColor (hdc=0x2d010987, color=0xe5e5e5) returned 0xe5e5e5 [0076.112] GetNearestColor (hdc=0x2d010987, color=0xd8d8d8) returned 0xd8d8d8 [0076.112] GetNearestColor (hdc=0x2d010987, color=0x0) returned 0x0 [0076.112] RestoreDC (hdc=0x2d010987, nSavedDC=-1) returned 1 [0076.112] GdipReleaseDC (graphics=0x1be567f0, hdc=0x2d010987) returned 0x0 [0076.113] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x17\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.113] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.113] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2151d68) returned 0x0 [0076.113] GdipSetStringFormatAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.113] GdipSetStringFormatLineAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.113] GdipSetStringFormatHotkeyPrefix (format=0x1be56ec0, hotkeyPrefix=2) returned 0x0 [0076.113] GdipGetStringFormatFlags (format=0x1be56ec0, flags=0x14e378) returned 0x0 [0076.113] GdipGetStringFormatTrimming (format=0x1be56ec0, trimming=0x14e378) returned 0x0 [0076.113] GdipGetStringFormatHotkeyPrefix (format=0x1be56ec0, hotkeyPrefix=0x14e378) returned 0x0 [0076.113] GdipGetFontSize (font=0x1be56ec0, size=0x14e378) returned 0x0 [0076.113] GdipGetFontStyle (font=0x1be56ec0, style=0x14e378) returned 0x0 [0076.113] GdipDeleteStringFormat (format=0x1be56ec0) returned 0x0 [0076.113] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.114] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.114] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0076.114] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2151e98) returned 0x0 [0076.114] GdipSetStringFormatFlags (format=0x1be56ec0, flags=0) returned 0x0 [0076.114] GdipSetStringFormatTrimming (format=0x1be56ec0, trimming=0x1) returned 0x0 [0076.114] GdipSetStringFormatHotkeyPrefix (format=0x1be56ec0, hotkeyPrefix=2) returned 0x0 [0076.114] GdipSetStringFormatAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.114] GdipSetStringFormatLineAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.115] GdipMeasureString (graphics=0x1be57860, string="c", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be56ec0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0076.115] GdipDeleteStringFormat (format=0x1be56ec0) returned 0x0 [0076.115] GdipDeleteGraphics (graphics=0x1be57860) returned 0x0 [0076.115] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.115] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.115] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0076.115] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.115] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0076.115] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0076.115] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0076.115] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4869d0 [0076.115] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d4869d0) returned 0x0 [0076.116] LocalFree (hMem=0x1d4869d0) returned 0x0 [0076.116] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486010 [0076.116] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486010) returned 0x0 [0076.116] LocalFree (hMem=0x1d486010) returned 0x0 [0076.116] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0076.116] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0076.117] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0076.117] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0076.117] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.117] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0076.117] GetCurrentObject (hdc=0x2d010987, type=0x1) returned 0x1b00017 [0076.117] GetCurrentObject (hdc=0x2d010987, type=0x2) returned 0x1900010 [0076.117] GetCurrentObject (hdc=0x2d010987, type=0x7) returned 0x2405099f [0076.117] GetCurrentObject (hdc=0x2d010987, type=0x6) returned 0x18a0048 [0076.117] SaveDC (hdc=0x2d010987) returned 1 [0076.118] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x350409d6 [0076.118] GetClipRgn (hdc=0x2d010987, hrgn=0x350409d6) returned 0 [0076.118] SelectClipRgn (hdc=0x2d010987, hrgn=0x470407ff) returned 2 [0076.118] DeleteObject (ho=0x350409d6) returned 1 [0076.118] DeleteObject (ho=0x470407ff) returned 1 [0076.118] OffsetViewportOrgEx (in: hdc=0x2d010987, x=0, y=0, lppt=0x2152258 | out: lppt=0x2152258) returned 1 [0076.118] GetNearestColor (hdc=0x2d010987, color=0xf0f0f0) returned 0xf0f0f0 [0076.118] CreateSolidBrush (color=0xf0f0f0) returned 0x411009b2 [0076.118] FillRect (hDC=0x2d010987, lprc=0x14e1c8, hbr=0x411009b2) returned 1 [0076.118] DeleteObject (ho=0x411009b2) returned 1 [0076.118] RestoreDC (hdc=0x2d010987, nSavedDC=-1) returned 1 [0076.118] GdipReleaseDC (graphics=0x1be567f0, hdc=0x2d010987) returned 0x0 [0076.118] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0076.118] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.119] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2152358) returned 0x0 [0076.119] GdipSetStringFormatAlign (format=0x1be515e0, align=0x1) returned 0x0 [0076.119] GdipSetStringFormatLineAlign (format=0x1be515e0, align=0x1) returned 0x0 [0076.119] GdipSetStringFormatHotkeyPrefix (format=0x1be515e0, hotkeyPrefix=2) returned 0x0 [0076.119] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0076.119] GdipDrawString (graphics=0x1be567f0, string="c", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be515e0, brush=0x1be51650) returned 0x0 [0076.119] GdipDeleteBrush (brush=0x1be51650) returned 0x0 [0076.119] GdipDeleteStringFormat (format=0x1be515e0) returned 0x0 [0076.119] GetFocus () returned 0x103c8 [0076.119] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x14\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.119] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.120] GdipCreateRegion (region=0x14e030) returned 0x0 [0076.120] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.120] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0076.120] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0076.120] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0076.120] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486dd0 [0076.120] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486dd0) returned 0x0 [0076.120] LocalFree (hMem=0x1d486dd0) returned 0x0 [0076.120] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d485f10 [0076.120] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d485f10) returned 0x0 [0076.121] LocalFree (hMem=0x1d485f10) returned 0x0 [0076.121] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0076.121] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0076.121] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0076.121] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0076.121] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.121] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0076.121] GetCurrentObject (hdc=0x2d010987, type=0x1) returned 0x1b00017 [0076.121] GetCurrentObject (hdc=0x2d010987, type=0x2) returned 0x1900010 [0076.121] GetCurrentObject (hdc=0x2d010987, type=0x7) returned 0x2405099f [0076.121] GetCurrentObject (hdc=0x2d010987, type=0x6) returned 0x18a0048 [0076.121] SaveDC (hdc=0x2d010987) returned 1 [0076.121] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x480407ff [0076.122] GetClipRgn (hdc=0x2d010987, hrgn=0x480407ff) returned 0 [0076.122] SelectClipRgn (hdc=0x2d010987, hrgn=0x360409d6) returned 2 [0076.122] DeleteObject (ho=0x480407ff) returned 1 [0076.122] DeleteObject (ho=0x360409d6) returned 1 [0076.122] OffsetViewportOrgEx (in: hdc=0x2d010987, x=0, y=0, lppt=0x2152740 | out: lppt=0x2152740) returned 1 [0076.122] GetROP2 (hdc=0x2d010987) returned 13 [0076.122] GetBkMode (hdc=0x2d010987) returned 2 [0076.122] SetBkMode (hdc=0x2d010987, mode=1) returned 2 [0076.122] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x5e3009ce [0076.122] SelectObject (hdc=0x2d010987, h=0x5e3009ce) returned 0x1b00017 [0076.122] MoveToEx (in: hdc=0x2d010987, x=25, y=0, lppt=0x21527a8 | out: lppt=0x21527a8) returned 1 [0076.122] LineTo (hdc=0x2d010987, x=0, y=0) returned 1 [0076.122] SetBkMode (hdc=0x2d010987, mode=2) returned 1 [0076.122] MoveToEx (in: hdc=0x2d010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.122] GetROP2 (hdc=0x2d010987) returned 13 [0076.122] GetBkMode (hdc=0x2d010987) returned 2 [0076.122] SetBkMode (hdc=0x2d010987, mode=1) returned 2 [0076.122] SelectObject (hdc=0x2d010987, h=0x5e3009ce) returned 0x5e3009ce [0076.122] MoveToEx (in: hdc=0x2d010987, x=0, y=0, lppt=0x21527c0 | out: lppt=0x21527c0) returned 1 [0076.122] LineTo (hdc=0x2d010987, x=0, y=22) returned 1 [0076.122] SetBkMode (hdc=0x2d010987, mode=2) returned 1 [0076.123] MoveToEx (in: hdc=0x2d010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.123] SelectObject (hdc=0x2d010987, h=0x1b00017) returned 0x5e3009ce [0076.123] DeleteObject (ho=0x5e3009ce) returned 1 [0076.123] GetROP2 (hdc=0x2d010987) returned 13 [0076.123] GetBkMode (hdc=0x2d010987) returned 2 [0076.123] SetBkMode (hdc=0x2d010987, mode=1) returned 2 [0076.123] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x4f3008b5 [0076.123] SelectObject (hdc=0x2d010987, h=0x4f3008b5) returned 0x1b00017 [0076.123] MoveToEx (in: hdc=0x2d010987, x=0, y=22, lppt=0x2152828 | out: lppt=0x2152828) returned 1 [0076.123] LineTo (hdc=0x2d010987, x=25, y=22) returned 1 [0076.123] SetBkMode (hdc=0x2d010987, mode=2) returned 1 [0076.123] MoveToEx (in: hdc=0x2d010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.123] GetROP2 (hdc=0x2d010987) returned 13 [0076.123] GetBkMode (hdc=0x2d010987) returned 2 [0076.123] SetBkMode (hdc=0x2d010987, mode=1) returned 2 [0076.123] SelectObject (hdc=0x2d010987, h=0x4f3008b5) returned 0x4f3008b5 [0076.123] MoveToEx (in: hdc=0x2d010987, x=25, y=22, lppt=0x2152840 | out: lppt=0x2152840) returned 1 [0076.123] LineTo (hdc=0x2d010987, x=25, y=-1) returned 1 [0076.123] SetBkMode (hdc=0x2d010987, mode=2) returned 1 [0076.123] MoveToEx (in: hdc=0x2d010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.123] SelectObject (hdc=0x2d010987, h=0x1b00017) returned 0x4f3008b5 [0076.123] DeleteObject (ho=0x4f3008b5) returned 1 [0076.124] GetROP2 (hdc=0x2d010987) returned 13 [0076.124] GetBkMode (hdc=0x2d010987) returned 2 [0076.124] SetBkMode (hdc=0x2d010987, mode=1) returned 2 [0076.124] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x5f3009ce [0076.124] SelectObject (hdc=0x2d010987, h=0x5f3009ce) returned 0x1b00017 [0076.124] MoveToEx (in: hdc=0x2d010987, x=24, y=1, lppt=0x21528a8 | out: lppt=0x21528a8) returned 1 [0076.124] LineTo (hdc=0x2d010987, x=1, y=1) returned 1 [0076.124] SetBkMode (hdc=0x2d010987, mode=2) returned 1 [0076.124] MoveToEx (in: hdc=0x2d010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.124] GetROP2 (hdc=0x2d010987) returned 13 [0076.124] GetBkMode (hdc=0x2d010987) returned 2 [0076.124] SetBkMode (hdc=0x2d010987, mode=1) returned 2 [0076.124] SelectObject (hdc=0x2d010987, h=0x5f3009ce) returned 0x5f3009ce [0076.124] MoveToEx (in: hdc=0x2d010987, x=1, y=1, lppt=0x21528c0 | out: lppt=0x21528c0) returned 1 [0076.124] LineTo (hdc=0x2d010987, x=1, y=21) returned 1 [0076.124] SetBkMode (hdc=0x2d010987, mode=2) returned 1 [0076.124] MoveToEx (in: hdc=0x2d010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.124] SelectObject (hdc=0x2d010987, h=0x1b00017) returned 0x5f3009ce [0076.124] DeleteObject (ho=0x5f3009ce) returned 1 [0076.124] GetROP2 (hdc=0x2d010987) returned 13 [0076.124] GetBkMode (hdc=0x2d010987) returned 2 [0076.124] SetBkMode (hdc=0x2d010987, mode=1) returned 2 [0076.124] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x503008b5 [0076.125] SelectObject (hdc=0x2d010987, h=0x503008b5) returned 0x1b00017 [0076.125] MoveToEx (in: hdc=0x2d010987, x=1, y=21, lppt=0x2152928 | out: lppt=0x2152928) returned 1 [0076.125] LineTo (hdc=0x2d010987, x=24, y=21) returned 1 [0076.125] SetBkMode (hdc=0x2d010987, mode=2) returned 1 [0076.125] MoveToEx (in: hdc=0x2d010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.125] GetROP2 (hdc=0x2d010987) returned 13 [0076.125] GetBkMode (hdc=0x2d010987) returned 2 [0076.125] SetBkMode (hdc=0x2d010987, mode=1) returned 2 [0076.125] SelectObject (hdc=0x2d010987, h=0x503008b5) returned 0x503008b5 [0076.125] MoveToEx (in: hdc=0x2d010987, x=24, y=21, lppt=0x2152940 | out: lppt=0x2152940) returned 1 [0076.125] LineTo (hdc=0x2d010987, x=24, y=0) returned 1 [0076.125] SetBkMode (hdc=0x2d010987, mode=2) returned 1 [0076.125] MoveToEx (in: hdc=0x2d010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.125] SelectObject (hdc=0x2d010987, h=0x1b00017) returned 0x503008b5 [0076.125] DeleteObject (ho=0x503008b5) returned 1 [0076.125] RestoreDC (hdc=0x2d010987, nSavedDC=-1) returned 1 [0076.125] GdipReleaseDC (graphics=0x1be567f0, hdc=0x2d010987) returned 0x0 [0076.125] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0076.125] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x2d010987, x1=0, y1=0, rop=0xcc0020) returned 1 [0076.125] GdipReleaseDC (graphics=0x1be567f0, hdc=0x2d010987) returned 0x0 [0076.126] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0076.126] SelectObject (hdc=0x2d010987, h=0x185000f) returned 0x2405099f [0076.126] DeleteDC (hdc=0x2d010987) returned 1 [0076.126] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0076.126] EndPaint (hWnd=0x103b2, lpPaint=0x14e548) returned 1 [0076.126] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.126] IsWindowUnicode (hWnd=0x103b4) returned 1 [0076.126] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.126] TranslateMessage (lpMsg=0x14ef10) returned 0 [0076.126] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0076.126] BeginPaint (in: hWnd=0x103b4, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0076.126] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0076.126] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0076.126] GetStockObject (i=5) returned 0x1900015 [0076.127] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0076.127] CreateCompatibleDC (hdc=0xc0100ae) returned 0x4a0106e1 [0076.127] SelectObject (hdc=0x4a0106e1, h=0x2405099f) returned 0x185000f [0076.127] GdipCreateFromHDC (hdc=0x4a0106e1, graphics=0x14e528) returned 0x0 [0076.127] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0076.127] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0076.127] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0076.127] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0076.127] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0076.127] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486050 [0076.127] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486050) returned 0x0 [0076.128] LocalFree (hMem=0x1d486050) returned 0x0 [0076.128] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0076.128] GdipCreateRegion (region=0x14e550) returned 0x0 [0076.128] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.128] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0076.128] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0076.128] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd960dbd) returned 0x0 [0076.128] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.128] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0076.128] GetCurrentObject (hdc=0x4a0106e1, type=0x1) returned 0x1b00017 [0076.129] GetCurrentObject (hdc=0x4a0106e1, type=0x2) returned 0x1900010 [0076.129] GetCurrentObject (hdc=0x4a0106e1, type=0x7) returned 0x2405099f [0076.129] GetCurrentObject (hdc=0x4a0106e1, type=0x6) returned 0x18a0048 [0076.129] SaveDC (hdc=0x4a0106e1) returned 1 [0076.129] GetNearestColor (hdc=0x4a0106e1, color=0xf0f0f0) returned 0xf0f0f0 [0076.129] GetNearestColor (hdc=0x4a0106e1, color=0xa0a0a0) returned 0xa0a0a0 [0076.129] GetNearestColor (hdc=0x4a0106e1, color=0x696969) returned 0x696969 [0076.129] GetNearestColor (hdc=0x4a0106e1, color=0xa0a0a0) returned 0xa0a0a0 [0076.129] GetNearestColor (hdc=0x4a0106e1, color=0x0) returned 0x0 [0076.129] GetNearestColor (hdc=0x4a0106e1, color=0xffffff) returned 0xffffff [0076.129] GetNearestColor (hdc=0x4a0106e1, color=0xe5e5e5) returned 0xe5e5e5 [0076.129] GetNearestColor (hdc=0x4a0106e1, color=0xd8d8d8) returned 0xd8d8d8 [0076.129] GetNearestColor (hdc=0x4a0106e1, color=0x0) returned 0x0 [0076.141] RestoreDC (hdc=0x4a0106e1, nSavedDC=-1) returned 1 [0076.141] GdipReleaseDC (graphics=0x1be567f0, hdc=0x4a0106e1) returned 0x0 [0076.141] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.141] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx,\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.142] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.142] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2153278) returned 0x0 [0076.142] GdipSetStringFormatAlign (format=0x1be515e0, align=0x1) returned 0x0 [0076.142] GdipSetStringFormatLineAlign (format=0x1be515e0, align=0x1) returned 0x0 [0076.142] GdipSetStringFormatHotkeyPrefix (format=0x1be515e0, hotkeyPrefix=2) returned 0x0 [0076.142] GdipGetStringFormatFlags (format=0x1be515e0, flags=0x14e378) returned 0x0 [0076.142] GdipGetStringFormatTrimming (format=0x1be515e0, trimming=0x14e378) returned 0x0 [0076.142] GdipGetStringFormatHotkeyPrefix (format=0x1be515e0, hotkeyPrefix=0x14e378) returned 0x0 [0076.142] GdipGetFontSize (font=0x1be515e0, size=0x14e378) returned 0x0 [0076.142] GdipGetFontStyle (font=0x1be515e0, style=0x14e378) returned 0x0 [0076.142] GdipDeleteStringFormat (format=0x1be515e0) returned 0x0 [0076.142] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.142] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.142] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.142] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0076.143] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21533a8) returned 0x0 [0076.143] GdipSetStringFormatFlags (format=0x1be51670, flags=0) returned 0x0 [0076.143] GdipSetStringFormatTrimming (format=0x1be51670, trimming=0x1) returned 0x0 [0076.143] GdipSetStringFormatHotkeyPrefix (format=0x1be51670, hotkeyPrefix=2) returned 0x0 [0076.143] GdipSetStringFormatAlign (format=0x1be51670, align=0x1) returned 0x0 [0076.143] GdipSetStringFormatLineAlign (format=0x1be51670, align=0x1) returned 0x0 [0076.143] GdipMeasureString (graphics=0x1be57860, string="+", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be51670, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0076.143] GdipDeleteStringFormat (format=0x1be51670) returned 0x0 [0076.143] GdipDeleteGraphics (graphics=0x1be57860) returned 0x0 [0076.143] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.144] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.144] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0076.144] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.144] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0076.144] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0076.144] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0076.144] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4862d0 [0076.144] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4862d0) returned 0x0 [0076.145] LocalFree (hMem=0x1d4862d0) returned 0x0 [0076.145] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486850 [0076.145] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486850) returned 0x0 [0076.145] LocalFree (hMem=0x1d486850) returned 0x0 [0076.146] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0076.146] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0076.146] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0076.146] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0076.146] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.146] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0076.146] GetCurrentObject (hdc=0x4a0106e1, type=0x1) returned 0x1b00017 [0076.146] GetCurrentObject (hdc=0x4a0106e1, type=0x2) returned 0x1900010 [0076.146] GetCurrentObject (hdc=0x4a0106e1, type=0x7) returned 0x2405099f [0076.146] GetCurrentObject (hdc=0x4a0106e1, type=0x6) returned 0x18a0048 [0076.146] SaveDC (hdc=0x4a0106e1) returned 1 [0076.146] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x370409d6 [0076.146] GetClipRgn (hdc=0x4a0106e1, hrgn=0x370409d6) returned 0 [0076.146] SelectClipRgn (hdc=0x4a0106e1, hrgn=0x490407ff) returned 2 [0076.146] DeleteObject (ho=0x370409d6) returned 1 [0076.146] DeleteObject (ho=0x490407ff) returned 1 [0076.146] OffsetViewportOrgEx (in: hdc=0x4a0106e1, x=0, y=0, lppt=0x2153768 | out: lppt=0x2153768) returned 1 [0076.147] GetNearestColor (hdc=0x4a0106e1, color=0xf0f0f0) returned 0xf0f0f0 [0076.147] CreateSolidBrush (color=0xf0f0f0) returned 0x421009b2 [0076.147] FillRect (hDC=0x4a0106e1, lprc=0x14e1c8, hbr=0x421009b2) returned 1 [0076.147] DeleteObject (ho=0x421009b2) returned 1 [0076.147] RestoreDC (hdc=0x4a0106e1, nSavedDC=-1) returned 1 [0076.147] GdipReleaseDC (graphics=0x1be567f0, hdc=0x4a0106e1) returned 0x0 [0076.147] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.147] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0076.147] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.147] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2153868) returned 0x0 [0076.147] GdipSetStringFormatAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.147] GdipSetStringFormatLineAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.147] GdipSetStringFormatHotkeyPrefix (format=0x1be56ec0, hotkeyPrefix=2) returned 0x0 [0076.147] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0076.148] GdipDrawString (graphics=0x1be567f0, string="+", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be56ec0, brush=0x1be515e0) returned 0x0 [0076.148] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0076.148] GdipDeleteStringFormat (format=0x1be56ec0) returned 0x0 [0076.148] GetFocus () returned 0x103c8 [0076.148] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.148] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx)\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.148] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.148] GdipCreateRegion (region=0x14e030) returned 0x0 [0076.148] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.148] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0076.149] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0076.149] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0076.149] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4867d0 [0076.149] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d4867d0) returned 0x0 [0076.149] LocalFree (hMem=0x1d4867d0) returned 0x0 [0076.149] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486e50 [0076.149] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486e50) returned 0x0 [0076.150] LocalFree (hMem=0x1d486e50) returned 0x0 [0076.150] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0076.150] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0076.150] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0076.150] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0076.150] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.150] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0076.150] GetCurrentObject (hdc=0x4a0106e1, type=0x1) returned 0x1b00017 [0076.150] GetCurrentObject (hdc=0x4a0106e1, type=0x2) returned 0x1900010 [0076.150] GetCurrentObject (hdc=0x4a0106e1, type=0x7) returned 0x2405099f [0076.150] GetCurrentObject (hdc=0x4a0106e1, type=0x6) returned 0x18a0048 [0076.150] SaveDC (hdc=0x4a0106e1) returned 1 [0076.150] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4a0407ff [0076.150] GetClipRgn (hdc=0x4a0106e1, hrgn=0x4a0407ff) returned 0 [0076.150] SelectClipRgn (hdc=0x4a0106e1, hrgn=0x380409d6) returned 2 [0076.150] DeleteObject (ho=0x4a0407ff) returned 1 [0076.150] DeleteObject (ho=0x380409d6) returned 1 [0076.151] OffsetViewportOrgEx (in: hdc=0x4a0106e1, x=0, y=0, lppt=0x2153c50 | out: lppt=0x2153c50) returned 1 [0076.151] GetROP2 (hdc=0x4a0106e1) returned 13 [0076.151] GetBkMode (hdc=0x4a0106e1) returned 2 [0076.151] SetBkMode (hdc=0x4a0106e1, mode=1) returned 2 [0076.151] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x513008b5 [0076.151] SelectObject (hdc=0x4a0106e1, h=0x513008b5) returned 0x1b00017 [0076.151] MoveToEx (in: hdc=0x4a0106e1, x=25, y=0, lppt=0x2153cb8 | out: lppt=0x2153cb8) returned 1 [0076.151] LineTo (hdc=0x4a0106e1, x=0, y=0) returned 1 [0076.151] SetBkMode (hdc=0x4a0106e1, mode=2) returned 1 [0076.151] MoveToEx (in: hdc=0x4a0106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.151] GetROP2 (hdc=0x4a0106e1) returned 13 [0076.151] GetBkMode (hdc=0x4a0106e1) returned 2 [0076.151] SetBkMode (hdc=0x4a0106e1, mode=1) returned 2 [0076.151] SelectObject (hdc=0x4a0106e1, h=0x513008b5) returned 0x513008b5 [0076.151] MoveToEx (in: hdc=0x4a0106e1, x=0, y=0, lppt=0x2153cd0 | out: lppt=0x2153cd0) returned 1 [0076.151] LineTo (hdc=0x4a0106e1, x=0, y=22) returned 1 [0076.151] SetBkMode (hdc=0x4a0106e1, mode=2) returned 1 [0076.151] MoveToEx (in: hdc=0x4a0106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.151] SelectObject (hdc=0x4a0106e1, h=0x1b00017) returned 0x513008b5 [0076.151] DeleteObject (ho=0x513008b5) returned 1 [0076.151] GetROP2 (hdc=0x4a0106e1) returned 13 [0076.151] GetBkMode (hdc=0x4a0106e1) returned 2 [0076.152] SetBkMode (hdc=0x4a0106e1, mode=1) returned 2 [0076.152] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x603009ce [0076.152] SelectObject (hdc=0x4a0106e1, h=0x603009ce) returned 0x1b00017 [0076.152] MoveToEx (in: hdc=0x4a0106e1, x=0, y=22, lppt=0x2153d38 | out: lppt=0x2153d38) returned 1 [0076.152] LineTo (hdc=0x4a0106e1, x=25, y=22) returned 1 [0076.152] SetBkMode (hdc=0x4a0106e1, mode=2) returned 1 [0076.152] MoveToEx (in: hdc=0x4a0106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.152] GetROP2 (hdc=0x4a0106e1) returned 13 [0076.152] GetBkMode (hdc=0x4a0106e1) returned 2 [0076.152] SetBkMode (hdc=0x4a0106e1, mode=1) returned 2 [0076.152] SelectObject (hdc=0x4a0106e1, h=0x603009ce) returned 0x603009ce [0076.152] MoveToEx (in: hdc=0x4a0106e1, x=25, y=22, lppt=0x2153d50 | out: lppt=0x2153d50) returned 1 [0076.152] LineTo (hdc=0x4a0106e1, x=25, y=-1) returned 1 [0076.152] SetBkMode (hdc=0x4a0106e1, mode=2) returned 1 [0076.152] MoveToEx (in: hdc=0x4a0106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.152] SelectObject (hdc=0x4a0106e1, h=0x1b00017) returned 0x603009ce [0076.152] DeleteObject (ho=0x603009ce) returned 1 [0076.152] GetROP2 (hdc=0x4a0106e1) returned 13 [0076.152] GetBkMode (hdc=0x4a0106e1) returned 2 [0076.152] SetBkMode (hdc=0x4a0106e1, mode=1) returned 2 [0076.152] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x523008b5 [0076.152] SelectObject (hdc=0x4a0106e1, h=0x523008b5) returned 0x1b00017 [0076.152] MoveToEx (in: hdc=0x4a0106e1, x=24, y=1, lppt=0x2153db8 | out: lppt=0x2153db8) returned 1 [0076.152] LineTo (hdc=0x4a0106e1, x=1, y=1) returned 1 [0076.153] SetBkMode (hdc=0x4a0106e1, mode=2) returned 1 [0076.153] MoveToEx (in: hdc=0x4a0106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.153] GetROP2 (hdc=0x4a0106e1) returned 13 [0076.153] GetBkMode (hdc=0x4a0106e1) returned 2 [0076.153] SetBkMode (hdc=0x4a0106e1, mode=1) returned 2 [0076.153] SelectObject (hdc=0x4a0106e1, h=0x523008b5) returned 0x523008b5 [0076.153] MoveToEx (in: hdc=0x4a0106e1, x=1, y=1, lppt=0x2153dd0 | out: lppt=0x2153dd0) returned 1 [0076.153] LineTo (hdc=0x4a0106e1, x=1, y=21) returned 1 [0076.153] SetBkMode (hdc=0x4a0106e1, mode=2) returned 1 [0076.153] MoveToEx (in: hdc=0x4a0106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.153] SelectObject (hdc=0x4a0106e1, h=0x1b00017) returned 0x523008b5 [0076.153] DeleteObject (ho=0x523008b5) returned 1 [0076.153] GetROP2 (hdc=0x4a0106e1) returned 13 [0076.153] GetBkMode (hdc=0x4a0106e1) returned 2 [0076.153] SetBkMode (hdc=0x4a0106e1, mode=1) returned 2 [0076.153] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x613009ce [0076.153] SelectObject (hdc=0x4a0106e1, h=0x613009ce) returned 0x1b00017 [0076.153] MoveToEx (in: hdc=0x4a0106e1, x=1, y=21, lppt=0x2153e38 | out: lppt=0x2153e38) returned 1 [0076.153] LineTo (hdc=0x4a0106e1, x=24, y=21) returned 1 [0076.153] SetBkMode (hdc=0x4a0106e1, mode=2) returned 1 [0076.154] MoveToEx (in: hdc=0x4a0106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.154] GetROP2 (hdc=0x4a0106e1) returned 13 [0076.154] GetBkMode (hdc=0x4a0106e1) returned 2 [0076.154] SetBkMode (hdc=0x4a0106e1, mode=1) returned 2 [0076.154] SelectObject (hdc=0x4a0106e1, h=0x613009ce) returned 0x613009ce [0076.154] MoveToEx (in: hdc=0x4a0106e1, x=24, y=21, lppt=0x2153e50 | out: lppt=0x2153e50) returned 1 [0076.154] LineTo (hdc=0x4a0106e1, x=24, y=0) returned 1 [0076.154] SetBkMode (hdc=0x4a0106e1, mode=2) returned 1 [0076.154] MoveToEx (in: hdc=0x4a0106e1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.154] SelectObject (hdc=0x4a0106e1, h=0x1b00017) returned 0x613009ce [0076.154] DeleteObject (ho=0x613009ce) returned 1 [0076.154] RestoreDC (hdc=0x4a0106e1, nSavedDC=-1) returned 1 [0076.154] GdipReleaseDC (graphics=0x1be567f0, hdc=0x4a0106e1) returned 0x0 [0076.154] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0076.154] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x4a0106e1, x1=0, y1=0, rop=0xcc0020) returned 1 [0076.154] GdipReleaseDC (graphics=0x1be567f0, hdc=0x4a0106e1) returned 0x0 [0076.154] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0076.154] SelectObject (hdc=0x4a0106e1, h=0x185000f) returned 0x2405099f [0076.154] DeleteDC (hdc=0x4a0106e1) returned 1 [0076.155] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0076.155] EndPaint (hWnd=0x103b4, lpPaint=0x14e548) returned 1 [0076.155] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.155] IsWindowUnicode (hWnd=0x103b6) returned 1 [0076.155] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.155] TranslateMessage (lpMsg=0x14ef10) returned 0 [0076.155] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0076.155] BeginPaint (in: hWnd=0x103b6, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0076.155] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0076.155] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0076.155] GetStockObject (i=5) returned 0x1900015 [0076.156] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0076.156] CreateCompatibleDC (hdc=0xc0100ae) returned 0x6d0108c7 [0076.156] SelectObject (hdc=0x6d0108c7, h=0x2405099f) returned 0x185000f [0076.156] GdipCreateFromHDC (hdc=0x6d0108c7, graphics=0x14e528) returned 0x0 [0076.156] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0076.156] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0076.156] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0076.156] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0076.156] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0076.156] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b50 [0076.156] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486b50) returned 0x0 [0076.157] LocalFree (hMem=0x1d486b50) returned 0x0 [0076.157] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0076.157] GdipCreateRegion (region=0x14e550) returned 0x0 [0076.157] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.157] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0076.157] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0076.157] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd930dbd) returned 0x0 [0076.157] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.157] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0076.157] GetCurrentObject (hdc=0x6d0108c7, type=0x1) returned 0x1b00017 [0076.157] GetCurrentObject (hdc=0x6d0108c7, type=0x2) returned 0x1900010 [0076.157] GetCurrentObject (hdc=0x6d0108c7, type=0x7) returned 0x2405099f [0076.158] GetCurrentObject (hdc=0x6d0108c7, type=0x6) returned 0x18a0048 [0076.158] SaveDC (hdc=0x6d0108c7) returned 1 [0076.158] GetNearestColor (hdc=0x6d0108c7, color=0xf0f0f0) returned 0xf0f0f0 [0076.158] GetNearestColor (hdc=0x6d0108c7, color=0xa0a0a0) returned 0xa0a0a0 [0076.158] GetNearestColor (hdc=0x6d0108c7, color=0x696969) returned 0x696969 [0076.158] GetNearestColor (hdc=0x6d0108c7, color=0xa0a0a0) returned 0xa0a0a0 [0076.158] GetNearestColor (hdc=0x6d0108c7, color=0x0) returned 0x0 [0076.158] GetNearestColor (hdc=0x6d0108c7, color=0xffffff) returned 0xffffff [0076.158] GetNearestColor (hdc=0x6d0108c7, color=0xe5e5e5) returned 0xe5e5e5 [0076.158] GetNearestColor (hdc=0x6d0108c7, color=0xd8d8d8) returned 0xd8d8d8 [0076.158] GetNearestColor (hdc=0x6d0108c7, color=0x0) returned 0x0 [0076.158] RestoreDC (hdc=0x6d0108c7, nSavedDC=-1) returned 1 [0076.158] GdipReleaseDC (graphics=0x1be567f0, hdc=0x6d0108c7) returned 0x0 [0076.158] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExA\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.159] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.159] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2154788) returned 0x0 [0076.159] GdipSetStringFormatAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.159] GdipSetStringFormatLineAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.159] GdipSetStringFormatHotkeyPrefix (format=0x1be56ec0, hotkeyPrefix=2) returned 0x0 [0076.159] GdipGetStringFormatFlags (format=0x1be56ec0, flags=0x14e378) returned 0x0 [0076.159] GdipGetStringFormatTrimming (format=0x1be56ec0, trimming=0x14e378) returned 0x0 [0076.159] GdipGetStringFormatHotkeyPrefix (format=0x1be56ec0, hotkeyPrefix=0x14e378) returned 0x0 [0076.159] GdipGetFontSize (font=0x1be56ec0, size=0x14e378) returned 0x0 [0076.159] GdipGetFontStyle (font=0x1be56ec0, style=0x14e378) returned 0x0 [0076.159] GdipDeleteStringFormat (format=0x1be56ec0) returned 0x0 [0076.159] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.160] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.160] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0076.160] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21548b8) returned 0x0 [0076.160] GdipSetStringFormatFlags (format=0x1be56ec0, flags=0) returned 0x0 [0076.160] GdipSetStringFormatTrimming (format=0x1be56ec0, trimming=0x1) returned 0x0 [0076.160] GdipSetStringFormatHotkeyPrefix (format=0x1be56ec0, hotkeyPrefix=2) returned 0x0 [0076.160] GdipSetStringFormatAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.160] GdipSetStringFormatLineAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.160] GdipMeasureString (graphics=0x1be57860, string="7", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be56ec0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0076.160] GdipDeleteStringFormat (format=0x1be56ec0) returned 0x0 [0076.160] GdipDeleteGraphics (graphics=0x1be57860) returned 0x0 [0076.160] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.160] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.160] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0076.218] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.218] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0076.218] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0076.219] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0076.219] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0076.219] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486110) returned 0x0 [0076.220] LocalFree (hMem=0x1d486110) returned 0x0 [0076.221] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b10 [0076.221] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486b10) returned 0x0 [0076.221] LocalFree (hMem=0x1d486b10) returned 0x0 [0076.224] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0076.224] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0076.224] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0076.224] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0076.224] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.224] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0076.238] GetCurrentObject (hdc=0x6d0108c7, type=0x1) returned 0x1b00017 [0076.238] GetCurrentObject (hdc=0x6d0108c7, type=0x2) returned 0x1900010 [0076.238] GetCurrentObject (hdc=0x6d0108c7, type=0x7) returned 0x2405099f [0076.239] GetCurrentObject (hdc=0x6d0108c7, type=0x6) returned 0x18a0048 [0076.240] SaveDC (hdc=0x6d0108c7) returned 1 [0076.240] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x390409d6 [0076.240] GetClipRgn (hdc=0x6d0108c7, hrgn=0x390409d6) returned 0 [0076.240] SelectClipRgn (hdc=0x6d0108c7, hrgn=0x4b0407ff) returned 2 [0076.240] DeleteObject (ho=0x390409d6) returned 1 [0076.240] DeleteObject (ho=0x4b0407ff) returned 1 [0076.244] OffsetViewportOrgEx (in: hdc=0x6d0108c7, x=0, y=0, lppt=0x2154c78 | out: lppt=0x2154c78) returned 1 [0076.244] GetNearestColor (hdc=0x6d0108c7, color=0xf0f0f0) returned 0xf0f0f0 [0076.244] CreateSolidBrush (color=0xf0f0f0) returned 0x431009b2 [0076.244] FillRect (hDC=0x6d0108c7, lprc=0x14e1c8, hbr=0x431009b2) returned 1 [0076.244] DeleteObject (ho=0x431009b2) returned 1 [0076.244] RestoreDC (hdc=0x6d0108c7, nSavedDC=-1) returned 1 [0076.251] GdipReleaseDC (graphics=0x1be567f0, hdc=0x6d0108c7) returned 0x0 [0076.251] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.251] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0076.251] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.251] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2154d78) returned 0x0 [0076.251] GdipSetStringFormatAlign (format=0x1be515e0, align=0x1) returned 0x0 [0076.251] GdipSetStringFormatLineAlign (format=0x1be515e0, align=0x1) returned 0x0 [0076.251] GdipSetStringFormatHotkeyPrefix (format=0x1be515e0, hotkeyPrefix=2) returned 0x0 [0076.251] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0076.251] GdipDrawString (graphics=0x1be567f0, string="7", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be515e0, brush=0x1be51650) returned 0x0 [0076.252] GdipDeleteBrush (brush=0x1be51650) returned 0x0 [0076.252] GdipDeleteStringFormat (format=0x1be515e0) returned 0x0 [0076.252] GetFocus () returned 0x103c8 [0076.252] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx>\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.252] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.252] GdipCreateRegion (region=0x14e030) returned 0x0 [0076.252] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.252] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0076.252] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0076.252] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0076.252] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d485fd0 [0076.252] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d485fd0) returned 0x0 [0076.253] LocalFree (hMem=0x1d485fd0) returned 0x0 [0076.253] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d485fd0 [0076.253] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d485fd0) returned 0x0 [0076.253] LocalFree (hMem=0x1d485fd0) returned 0x0 [0076.254] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0076.254] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0076.254] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0076.254] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0076.254] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.254] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0076.254] GetCurrentObject (hdc=0x6d0108c7, type=0x1) returned 0x1b00017 [0076.254] GetCurrentObject (hdc=0x6d0108c7, type=0x2) returned 0x1900010 [0076.254] GetCurrentObject (hdc=0x6d0108c7, type=0x7) returned 0x2405099f [0076.254] GetCurrentObject (hdc=0x6d0108c7, type=0x6) returned 0x18a0048 [0076.254] SaveDC (hdc=0x6d0108c7) returned 1 [0076.254] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4c0407ff [0076.254] GetClipRgn (hdc=0x6d0108c7, hrgn=0x4c0407ff) returned 0 [0076.254] SelectClipRgn (hdc=0x6d0108c7, hrgn=0x3a0409d6) returned 2 [0076.254] DeleteObject (ho=0x4c0407ff) returned 1 [0076.254] DeleteObject (ho=0x3a0409d6) returned 1 [0076.255] OffsetViewportOrgEx (in: hdc=0x6d0108c7, x=0, y=0, lppt=0x2155160 | out: lppt=0x2155160) returned 1 [0076.255] GetROP2 (hdc=0x6d0108c7) returned 13 [0076.255] GetBkMode (hdc=0x6d0108c7) returned 2 [0076.255] SetBkMode (hdc=0x6d0108c7, mode=1) returned 2 [0076.255] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x533008b5 [0076.255] SelectObject (hdc=0x6d0108c7, h=0x533008b5) returned 0x1b00017 [0076.255] MoveToEx (in: hdc=0x6d0108c7, x=25, y=0, lppt=0x21551c8 | out: lppt=0x21551c8) returned 1 [0076.255] LineTo (hdc=0x6d0108c7, x=0, y=0) returned 1 [0076.255] SetBkMode (hdc=0x6d0108c7, mode=2) returned 1 [0076.255] MoveToEx (in: hdc=0x6d0108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.255] GetROP2 (hdc=0x6d0108c7) returned 13 [0076.255] GetBkMode (hdc=0x6d0108c7) returned 2 [0076.255] SetBkMode (hdc=0x6d0108c7, mode=1) returned 2 [0076.255] SelectObject (hdc=0x6d0108c7, h=0x533008b5) returned 0x533008b5 [0076.255] MoveToEx (in: hdc=0x6d0108c7, x=0, y=0, lppt=0x21551e0 | out: lppt=0x21551e0) returned 1 [0076.255] LineTo (hdc=0x6d0108c7, x=0, y=22) returned 1 [0076.255] SetBkMode (hdc=0x6d0108c7, mode=2) returned 1 [0076.255] MoveToEx (in: hdc=0x6d0108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.255] SelectObject (hdc=0x6d0108c7, h=0x1b00017) returned 0x533008b5 [0076.255] DeleteObject (ho=0x533008b5) returned 1 [0076.256] GetROP2 (hdc=0x6d0108c7) returned 13 [0076.256] GetBkMode (hdc=0x6d0108c7) returned 2 [0076.256] SetBkMode (hdc=0x6d0108c7, mode=1) returned 2 [0076.256] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x193009a2 [0076.256] SelectObject (hdc=0x6d0108c7, h=0x193009a2) returned 0x1b00017 [0076.256] MoveToEx (in: hdc=0x6d0108c7, x=0, y=22, lppt=0x2155248 | out: lppt=0x2155248) returned 1 [0076.256] LineTo (hdc=0x6d0108c7, x=25, y=22) returned 1 [0076.256] SetBkMode (hdc=0x6d0108c7, mode=2) returned 1 [0076.256] MoveToEx (in: hdc=0x6d0108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.256] GetROP2 (hdc=0x6d0108c7) returned 13 [0076.256] GetBkMode (hdc=0x6d0108c7) returned 2 [0076.256] SetBkMode (hdc=0x6d0108c7, mode=1) returned 2 [0076.256] SelectObject (hdc=0x6d0108c7, h=0x193009a2) returned 0x193009a2 [0076.256] MoveToEx (in: hdc=0x6d0108c7, x=25, y=22, lppt=0x2155260 | out: lppt=0x2155260) returned 1 [0076.256] LineTo (hdc=0x6d0108c7, x=25, y=-1) returned 1 [0076.256] SetBkMode (hdc=0x6d0108c7, mode=2) returned 1 [0076.256] MoveToEx (in: hdc=0x6d0108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.256] SelectObject (hdc=0x6d0108c7, h=0x1b00017) returned 0x193009a2 [0076.256] DeleteObject (ho=0x193009a2) returned 1 [0076.256] GetROP2 (hdc=0x6d0108c7) returned 13 [0076.256] GetBkMode (hdc=0x6d0108c7) returned 2 [0076.256] SetBkMode (hdc=0x6d0108c7, mode=1) returned 2 [0076.257] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x543008b5 [0076.257] SelectObject (hdc=0x6d0108c7, h=0x543008b5) returned 0x1b00017 [0076.257] MoveToEx (in: hdc=0x6d0108c7, x=24, y=1, lppt=0x21552c8 | out: lppt=0x21552c8) returned 1 [0076.257] LineTo (hdc=0x6d0108c7, x=1, y=1) returned 1 [0076.257] SetBkMode (hdc=0x6d0108c7, mode=2) returned 1 [0076.257] MoveToEx (in: hdc=0x6d0108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.257] GetROP2 (hdc=0x6d0108c7) returned 13 [0076.257] GetBkMode (hdc=0x6d0108c7) returned 2 [0076.257] SetBkMode (hdc=0x6d0108c7, mode=1) returned 2 [0076.257] SelectObject (hdc=0x6d0108c7, h=0x543008b5) returned 0x543008b5 [0076.257] MoveToEx (in: hdc=0x6d0108c7, x=1, y=1, lppt=0x21552e0 | out: lppt=0x21552e0) returned 1 [0076.257] LineTo (hdc=0x6d0108c7, x=1, y=21) returned 1 [0076.257] SetBkMode (hdc=0x6d0108c7, mode=2) returned 1 [0076.257] MoveToEx (in: hdc=0x6d0108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.257] SelectObject (hdc=0x6d0108c7, h=0x1b00017) returned 0x543008b5 [0076.257] DeleteObject (ho=0x543008b5) returned 1 [0076.257] GetROP2 (hdc=0x6d0108c7) returned 13 [0076.257] GetBkMode (hdc=0x6d0108c7) returned 2 [0076.257] SetBkMode (hdc=0x6d0108c7, mode=1) returned 2 [0076.257] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x1a3009a2 [0076.257] SelectObject (hdc=0x6d0108c7, h=0x1a3009a2) returned 0x1b00017 [0076.258] MoveToEx (in: hdc=0x6d0108c7, x=1, y=21, lppt=0x2155348 | out: lppt=0x2155348) returned 1 [0076.258] LineTo (hdc=0x6d0108c7, x=24, y=21) returned 1 [0076.258] SetBkMode (hdc=0x6d0108c7, mode=2) returned 1 [0076.258] MoveToEx (in: hdc=0x6d0108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.258] GetROP2 (hdc=0x6d0108c7) returned 13 [0076.258] GetBkMode (hdc=0x6d0108c7) returned 2 [0076.258] SetBkMode (hdc=0x6d0108c7, mode=1) returned 2 [0076.258] SelectObject (hdc=0x6d0108c7, h=0x1a3009a2) returned 0x1a3009a2 [0076.258] MoveToEx (in: hdc=0x6d0108c7, x=24, y=21, lppt=0x2155360 | out: lppt=0x2155360) returned 1 [0076.258] LineTo (hdc=0x6d0108c7, x=24, y=0) returned 1 [0076.258] SetBkMode (hdc=0x6d0108c7, mode=2) returned 1 [0076.258] MoveToEx (in: hdc=0x6d0108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.258] SelectObject (hdc=0x6d0108c7, h=0x1b00017) returned 0x1a3009a2 [0076.258] DeleteObject (ho=0x1a3009a2) returned 1 [0076.258] RestoreDC (hdc=0x6d0108c7, nSavedDC=-1) returned 1 [0076.258] GdipReleaseDC (graphics=0x1be567f0, hdc=0x6d0108c7) returned 0x0 [0076.258] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0076.258] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x6d0108c7, x1=0, y1=0, rop=0xcc0020) returned 1 [0076.259] GdipReleaseDC (graphics=0x1be567f0, hdc=0x6d0108c7) returned 0x0 [0076.259] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0076.259] SelectObject (hdc=0x6d0108c7, h=0x185000f) returned 0x2405099f [0076.259] DeleteDC (hdc=0x6d0108c7) returned 1 [0076.259] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0076.259] EndPaint (hWnd=0x103b6, lpPaint=0x14e548) returned 1 [0076.259] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.259] IsWindowUnicode (hWnd=0x103b8) returned 1 [0076.259] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.259] TranslateMessage (lpMsg=0x14ef10) returned 0 [0076.259] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0076.259] BeginPaint (in: hWnd=0x103b8, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0076.259] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0076.259] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0076.260] GetStockObject (i=5) returned 0x1900015 [0076.260] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0076.260] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x650109ce [0076.260] SelectObject (hdc=0x650109ce, h=0x2405099f) returned 0x185000f [0076.260] GdipCreateFromHDC (hdc=0x650109ce, graphics=0x14e528) returned 0x0 [0076.260] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0076.260] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0076.260] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0076.260] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0076.260] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0076.260] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486210 [0076.260] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486210) returned 0x0 [0076.261] LocalFree (hMem=0x1d486210) returned 0x0 [0076.261] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0076.261] GdipCreateRegion (region=0x14e550) returned 0x0 [0076.261] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.261] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0076.261] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0076.261] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd900dbd) returned 0x0 [0076.261] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.261] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0076.261] GetCurrentObject (hdc=0x650109ce, type=0x1) returned 0x1b00017 [0076.261] GetCurrentObject (hdc=0x650109ce, type=0x2) returned 0x1900010 [0076.261] GetCurrentObject (hdc=0x650109ce, type=0x7) returned 0x2405099f [0076.262] GetCurrentObject (hdc=0x650109ce, type=0x6) returned 0x18a0048 [0076.262] SaveDC (hdc=0x650109ce) returned 1 [0076.262] GetNearestColor (hdc=0x650109ce, color=0xf0f0f0) returned 0xf0f0f0 [0076.262] GetNearestColor (hdc=0x650109ce, color=0xa0a0a0) returned 0xa0a0a0 [0076.262] GetNearestColor (hdc=0x650109ce, color=0x696969) returned 0x696969 [0076.262] GetNearestColor (hdc=0x650109ce, color=0xa0a0a0) returned 0xa0a0a0 [0076.262] GetNearestColor (hdc=0x650109ce, color=0x0) returned 0x0 [0076.262] GetNearestColor (hdc=0x650109ce, color=0xffffff) returned 0xffffff [0076.262] GetNearestColor (hdc=0x650109ce, color=0xe5e5e5) returned 0xe5e5e5 [0076.262] GetNearestColor (hdc=0x650109ce, color=0xd8d8d8) returned 0xd8d8d8 [0076.262] GetNearestColor (hdc=0x650109ce, color=0x0) returned 0x0 [0076.262] RestoreDC (hdc=0x650109ce, nSavedDC=-1) returned 1 [0076.262] GdipReleaseDC (graphics=0x1be567f0, hdc=0x650109ce) returned 0x0 [0076.262] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.263] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExV\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.263] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.263] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2155c98) returned 0x0 [0076.263] GdipSetStringFormatAlign (format=0x1be515e0, align=0x1) returned 0x0 [0076.263] GdipSetStringFormatLineAlign (format=0x1be515e0, align=0x1) returned 0x0 [0076.263] GdipSetStringFormatHotkeyPrefix (format=0x1be515e0, hotkeyPrefix=2) returned 0x0 [0076.263] GdipGetStringFormatFlags (format=0x1be515e0, flags=0x14e378) returned 0x0 [0076.263] GdipGetStringFormatTrimming (format=0x1be515e0, trimming=0x14e378) returned 0x0 [0076.263] GdipGetStringFormatHotkeyPrefix (format=0x1be515e0, hotkeyPrefix=0x14e378) returned 0x0 [0076.263] GdipGetFontSize (font=0x1be515e0, size=0x14e378) returned 0x0 [0076.263] GdipGetFontStyle (font=0x1be515e0, style=0x14e378) returned 0x0 [0076.263] GdipDeleteStringFormat (format=0x1be515e0) returned 0x0 [0076.263] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.263] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.263] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.263] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0076.264] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2155dc8) returned 0x0 [0076.264] GdipSetStringFormatFlags (format=0x1be51670, flags=0) returned 0x0 [0076.264] GdipSetStringFormatTrimming (format=0x1be51670, trimming=0x1) returned 0x0 [0076.264] GdipSetStringFormatHotkeyPrefix (format=0x1be51670, hotkeyPrefix=2) returned 0x0 [0076.264] GdipSetStringFormatAlign (format=0x1be51670, align=0x1) returned 0x0 [0076.264] GdipSetStringFormatLineAlign (format=0x1be51670, align=0x1) returned 0x0 [0076.264] GdipMeasureString (graphics=0x1be57860, string="0", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be51670, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0076.264] GdipDeleteStringFormat (format=0x1be51670) returned 0x0 [0076.264] GdipDeleteGraphics (graphics=0x1be57860) returned 0x0 [0076.264] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.264] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.264] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0076.265] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.265] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0076.265] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0076.265] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0076.265] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486e50 [0076.265] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486e50) returned 0x0 [0076.265] LocalFree (hMem=0x1d486e50) returned 0x0 [0076.265] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486dd0 [0076.266] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486dd0) returned 0x0 [0076.266] LocalFree (hMem=0x1d486dd0) returned 0x0 [0076.266] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0076.266] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0076.266] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0076.266] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0076.266] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.266] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0076.266] GetCurrentObject (hdc=0x650109ce, type=0x1) returned 0x1b00017 [0076.266] GetCurrentObject (hdc=0x650109ce, type=0x2) returned 0x1900010 [0076.266] GetCurrentObject (hdc=0x650109ce, type=0x7) returned 0x2405099f [0076.266] GetCurrentObject (hdc=0x650109ce, type=0x6) returned 0x18a0048 [0076.267] SaveDC (hdc=0x650109ce) returned 1 [0076.267] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3b0409d6 [0076.267] GetClipRgn (hdc=0x650109ce, hrgn=0x3b0409d6) returned 0 [0076.267] SelectClipRgn (hdc=0x650109ce, hrgn=0x4d0407ff) returned 2 [0076.267] DeleteObject (ho=0x3b0409d6) returned 1 [0076.267] DeleteObject (ho=0x4d0407ff) returned 1 [0076.267] OffsetViewportOrgEx (in: hdc=0x650109ce, x=0, y=0, lppt=0x2156188 | out: lppt=0x2156188) returned 1 [0076.267] GetNearestColor (hdc=0x650109ce, color=0xf0f0f0) returned 0xf0f0f0 [0076.267] CreateSolidBrush (color=0xf0f0f0) returned 0x441009b2 [0076.267] FillRect (hDC=0x650109ce, lprc=0x14e1c8, hbr=0x441009b2) returned 1 [0076.267] DeleteObject (ho=0x441009b2) returned 1 [0076.267] RestoreDC (hdc=0x650109ce, nSavedDC=-1) returned 1 [0076.267] GdipReleaseDC (graphics=0x1be567f0, hdc=0x650109ce) returned 0x0 [0076.267] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0076.268] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.268] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2156288) returned 0x0 [0076.268] GdipSetStringFormatAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.268] GdipSetStringFormatLineAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.268] GdipSetStringFormatHotkeyPrefix (format=0x1be56ec0, hotkeyPrefix=2) returned 0x0 [0076.268] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0076.268] GdipDrawString (graphics=0x1be567f0, string="0", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be56ec0, brush=0x1be515e0) returned 0x0 [0076.268] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0076.268] GdipDeleteStringFormat (format=0x1be56ec0) returned 0x0 [0076.268] GetFocus () returned 0x103c8 [0076.268] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExS\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.269] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.269] GdipCreateRegion (region=0x14e030) returned 0x0 [0076.269] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.269] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0076.269] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0076.269] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0076.269] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486450 [0076.269] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486450) returned 0x0 [0076.269] LocalFree (hMem=0x1d486450) returned 0x0 [0076.269] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4868d0 [0076.270] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d4868d0) returned 0x0 [0076.270] LocalFree (hMem=0x1d4868d0) returned 0x0 [0076.272] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0076.272] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0076.272] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0076.272] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0076.272] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.272] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0076.272] GetCurrentObject (hdc=0x650109ce, type=0x1) returned 0x1b00017 [0076.272] GetCurrentObject (hdc=0x650109ce, type=0x2) returned 0x1900010 [0076.272] GetCurrentObject (hdc=0x650109ce, type=0x7) returned 0x2405099f [0076.272] GetCurrentObject (hdc=0x650109ce, type=0x6) returned 0x18a0048 [0076.272] SaveDC (hdc=0x650109ce) returned 1 [0076.273] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4e0407ff [0076.273] GetClipRgn (hdc=0x650109ce, hrgn=0x4e0407ff) returned 0 [0076.273] SelectClipRgn (hdc=0x650109ce, hrgn=0x3c0409d6) returned 2 [0076.273] DeleteObject (ho=0x4e0407ff) returned 1 [0076.273] DeleteObject (ho=0x3c0409d6) returned 1 [0076.273] OffsetViewportOrgEx (in: hdc=0x650109ce, x=0, y=0, lppt=0x2156670 | out: lppt=0x2156670) returned 1 [0076.273] GetROP2 (hdc=0x650109ce) returned 13 [0076.273] GetBkMode (hdc=0x650109ce) returned 2 [0076.273] SetBkMode (hdc=0x650109ce, mode=1) returned 2 [0076.273] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x1b3009a2 [0076.273] SelectObject (hdc=0x650109ce, h=0x1b3009a2) returned 0x1b00017 [0076.273] MoveToEx (in: hdc=0x650109ce, x=25, y=0, lppt=0x21566d8 | out: lppt=0x21566d8) returned 1 [0076.273] LineTo (hdc=0x650109ce, x=0, y=0) returned 1 [0076.273] SetBkMode (hdc=0x650109ce, mode=2) returned 1 [0076.273] MoveToEx (in: hdc=0x650109ce, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.273] GetROP2 (hdc=0x650109ce) returned 13 [0076.273] GetBkMode (hdc=0x650109ce) returned 2 [0076.273] SetBkMode (hdc=0x650109ce, mode=1) returned 2 [0076.273] SelectObject (hdc=0x650109ce, h=0x1b3009a2) returned 0x1b3009a2 [0076.273] MoveToEx (in: hdc=0x650109ce, x=0, y=0, lppt=0x21566f0 | out: lppt=0x21566f0) returned 1 [0076.273] LineTo (hdc=0x650109ce, x=0, y=22) returned 1 [0076.274] SetBkMode (hdc=0x650109ce, mode=2) returned 1 [0076.274] MoveToEx (in: hdc=0x650109ce, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.274] SelectObject (hdc=0x650109ce, h=0x1b00017) returned 0x1b3009a2 [0076.274] DeleteObject (ho=0x1b3009a2) returned 1 [0076.274] GetROP2 (hdc=0x650109ce) returned 13 [0076.274] GetBkMode (hdc=0x650109ce) returned 2 [0076.274] SetBkMode (hdc=0x650109ce, mode=1) returned 2 [0076.274] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x553008b5 [0076.274] SelectObject (hdc=0x650109ce, h=0x553008b5) returned 0x1b00017 [0076.274] MoveToEx (in: hdc=0x650109ce, x=0, y=22, lppt=0x2156758 | out: lppt=0x2156758) returned 1 [0076.274] LineTo (hdc=0x650109ce, x=25, y=22) returned 1 [0076.274] SetBkMode (hdc=0x650109ce, mode=2) returned 1 [0076.274] MoveToEx (in: hdc=0x650109ce, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.274] GetROP2 (hdc=0x650109ce) returned 13 [0076.274] GetBkMode (hdc=0x650109ce) returned 2 [0076.274] SetBkMode (hdc=0x650109ce, mode=1) returned 2 [0076.274] SelectObject (hdc=0x650109ce, h=0x553008b5) returned 0x553008b5 [0076.274] MoveToEx (in: hdc=0x650109ce, x=25, y=22, lppt=0x2156770 | out: lppt=0x2156770) returned 1 [0076.274] LineTo (hdc=0x650109ce, x=25, y=-1) returned 1 [0076.274] SetBkMode (hdc=0x650109ce, mode=2) returned 1 [0076.274] MoveToEx (in: hdc=0x650109ce, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.274] SelectObject (hdc=0x650109ce, h=0x1b00017) returned 0x553008b5 [0076.275] DeleteObject (ho=0x553008b5) returned 1 [0076.275] GetROP2 (hdc=0x650109ce) returned 13 [0076.275] GetBkMode (hdc=0x650109ce) returned 2 [0076.275] SetBkMode (hdc=0x650109ce, mode=1) returned 2 [0076.275] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x1c3009a2 [0076.275] SelectObject (hdc=0x650109ce, h=0x1c3009a2) returned 0x1b00017 [0076.275] MoveToEx (in: hdc=0x650109ce, x=24, y=1, lppt=0x21567d8 | out: lppt=0x21567d8) returned 1 [0076.275] LineTo (hdc=0x650109ce, x=1, y=1) returned 1 [0076.275] SetBkMode (hdc=0x650109ce, mode=2) returned 1 [0076.275] MoveToEx (in: hdc=0x650109ce, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.275] GetROP2 (hdc=0x650109ce) returned 13 [0076.275] GetBkMode (hdc=0x650109ce) returned 2 [0076.275] SetBkMode (hdc=0x650109ce, mode=1) returned 2 [0076.275] SelectObject (hdc=0x650109ce, h=0x1c3009a2) returned 0x1c3009a2 [0076.275] MoveToEx (in: hdc=0x650109ce, x=1, y=1, lppt=0x21567f0 | out: lppt=0x21567f0) returned 1 [0076.275] LineTo (hdc=0x650109ce, x=1, y=21) returned 1 [0076.275] SetBkMode (hdc=0x650109ce, mode=2) returned 1 [0076.275] MoveToEx (in: hdc=0x650109ce, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.275] SelectObject (hdc=0x650109ce, h=0x1b00017) returned 0x1c3009a2 [0076.275] DeleteObject (ho=0x1c3009a2) returned 1 [0076.275] GetROP2 (hdc=0x650109ce) returned 13 [0076.276] GetBkMode (hdc=0x650109ce) returned 2 [0076.276] SetBkMode (hdc=0x650109ce, mode=1) returned 2 [0076.276] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x563008b5 [0076.276] SelectObject (hdc=0x650109ce, h=0x563008b5) returned 0x1b00017 [0076.276] MoveToEx (in: hdc=0x650109ce, x=1, y=21, lppt=0x2156858 | out: lppt=0x2156858) returned 1 [0076.276] LineTo (hdc=0x650109ce, x=24, y=21) returned 1 [0076.276] SetBkMode (hdc=0x650109ce, mode=2) returned 1 [0076.276] MoveToEx (in: hdc=0x650109ce, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.276] GetROP2 (hdc=0x650109ce) returned 13 [0076.276] GetBkMode (hdc=0x650109ce) returned 2 [0076.276] SetBkMode (hdc=0x650109ce, mode=1) returned 2 [0076.276] SelectObject (hdc=0x650109ce, h=0x563008b5) returned 0x563008b5 [0076.276] MoveToEx (in: hdc=0x650109ce, x=24, y=21, lppt=0x2156870 | out: lppt=0x2156870) returned 1 [0076.276] LineTo (hdc=0x650109ce, x=24, y=0) returned 1 [0076.276] SetBkMode (hdc=0x650109ce, mode=2) returned 1 [0076.276] MoveToEx (in: hdc=0x650109ce, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.276] SelectObject (hdc=0x650109ce, h=0x1b00017) returned 0x563008b5 [0076.276] DeleteObject (ho=0x563008b5) returned 1 [0076.276] RestoreDC (hdc=0x650109ce, nSavedDC=-1) returned 1 [0076.276] GdipReleaseDC (graphics=0x1be567f0, hdc=0x650109ce) returned 0x0 [0076.276] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0076.276] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x650109ce, x1=0, y1=0, rop=0xcc0020) returned 1 [0076.277] GdipReleaseDC (graphics=0x1be567f0, hdc=0x650109ce) returned 0x0 [0076.277] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0076.277] SelectObject (hdc=0x650109ce, h=0x185000f) returned 0x2405099f [0076.277] DeleteDC (hdc=0x650109ce) returned 1 [0076.277] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0076.277] EndPaint (hWnd=0x103b8, lpPaint=0x14e548) returned 1 [0076.277] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.277] IsWindowUnicode (hWnd=0x103ba) returned 1 [0076.277] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.277] TranslateMessage (lpMsg=0x14ef10) returned 0 [0076.277] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0076.277] BeginPaint (in: hWnd=0x103ba, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0076.277] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0076.278] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0076.278] GetStockObject (i=5) returned 0x1900015 [0076.278] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0076.278] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x3a010987 [0076.278] SelectObject (hdc=0x3a010987, h=0x2405099f) returned 0x185000f [0076.278] GdipCreateFromHDC (hdc=0x3a010987, graphics=0x14e528) returned 0x0 [0076.278] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0076.278] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0076.278] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0076.278] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0076.278] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0076.278] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486690 [0076.278] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486690) returned 0x0 [0076.279] LocalFree (hMem=0x1d486690) returned 0x0 [0076.279] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0076.279] GdipCreateRegion (region=0x14e550) returned 0x0 [0076.279] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.279] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0076.279] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0076.279] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd8d0dbd) returned 0x0 [0076.279] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.279] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0076.279] GetCurrentObject (hdc=0x3a010987, type=0x1) returned 0x1b00017 [0076.279] GetCurrentObject (hdc=0x3a010987, type=0x2) returned 0x1900010 [0076.279] GetCurrentObject (hdc=0x3a010987, type=0x7) returned 0x2405099f [0076.279] GetCurrentObject (hdc=0x3a010987, type=0x6) returned 0x18a0048 [0076.279] SaveDC (hdc=0x3a010987) returned 1 [0076.280] GetNearestColor (hdc=0x3a010987, color=0xf0f0f0) returned 0xf0f0f0 [0076.280] GetNearestColor (hdc=0x3a010987, color=0xa0a0a0) returned 0xa0a0a0 [0076.280] GetNearestColor (hdc=0x3a010987, color=0x696969) returned 0x696969 [0076.280] GetNearestColor (hdc=0x3a010987, color=0xa0a0a0) returned 0xa0a0a0 [0076.280] GetNearestColor (hdc=0x3a010987, color=0x0) returned 0x0 [0076.280] GetNearestColor (hdc=0x3a010987, color=0xffffff) returned 0xffffff [0076.280] GetNearestColor (hdc=0x3a010987, color=0xe5e5e5) returned 0xe5e5e5 [0076.280] GetNearestColor (hdc=0x3a010987, color=0xd8d8d8) returned 0xd8d8d8 [0076.280] GetNearestColor (hdc=0x3a010987, color=0x0) returned 0x0 [0076.280] RestoreDC (hdc=0x3a010987, nSavedDC=-1) returned 1 [0076.280] GdipReleaseDC (graphics=0x1be567f0, hdc=0x3a010987) returned 0x0 [0076.280] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExk\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.281] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.281] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21571a8) returned 0x0 [0076.281] GdipSetStringFormatAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.281] GdipSetStringFormatLineAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.281] GdipSetStringFormatHotkeyPrefix (format=0x1be56ec0, hotkeyPrefix=2) returned 0x0 [0076.281] GdipGetStringFormatFlags (format=0x1be56ec0, flags=0x14e378) returned 0x0 [0076.281] GdipGetStringFormatTrimming (format=0x1be56ec0, trimming=0x14e378) returned 0x0 [0076.281] GdipGetStringFormatHotkeyPrefix (format=0x1be56ec0, hotkeyPrefix=0x14e378) returned 0x0 [0076.281] GdipGetFontSize (font=0x1be56ec0, size=0x14e378) returned 0x0 [0076.281] GdipGetFontStyle (font=0x1be56ec0, style=0x14e378) returned 0x0 [0076.281] GdipDeleteStringFormat (format=0x1be56ec0) returned 0x0 [0076.281] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.281] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.281] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.281] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0076.282] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21572d8) returned 0x0 [0076.282] GdipSetStringFormatFlags (format=0x1be56ec0, flags=0) returned 0x0 [0076.282] GdipSetStringFormatTrimming (format=0x1be56ec0, trimming=0x1) returned 0x0 [0076.282] GdipSetStringFormatHotkeyPrefix (format=0x1be56ec0, hotkeyPrefix=2) returned 0x0 [0076.282] GdipSetStringFormatAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.282] GdipSetStringFormatLineAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.282] GdipMeasureString (graphics=0x1be57860, string="4", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be56ec0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0076.282] GdipDeleteStringFormat (format=0x1be56ec0) returned 0x0 [0076.282] GdipDeleteGraphics (graphics=0x1be57860) returned 0x0 [0076.282] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.282] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.282] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0076.282] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.282] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0076.283] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0076.283] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0076.283] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486390 [0076.283] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486390) returned 0x0 [0076.283] LocalFree (hMem=0x1d486390) returned 0x0 [0076.283] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0076.283] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486110) returned 0x0 [0076.284] LocalFree (hMem=0x1d486110) returned 0x0 [0076.284] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0076.284] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0076.284] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0076.284] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0076.284] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.284] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0076.284] GetCurrentObject (hdc=0x3a010987, type=0x1) returned 0x1b00017 [0076.284] GetCurrentObject (hdc=0x3a010987, type=0x2) returned 0x1900010 [0076.284] GetCurrentObject (hdc=0x3a010987, type=0x7) returned 0x2405099f [0076.284] GetCurrentObject (hdc=0x3a010987, type=0x6) returned 0x18a0048 [0076.284] SaveDC (hdc=0x3a010987) returned 1 [0076.285] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3d0409d6 [0076.285] GetClipRgn (hdc=0x3a010987, hrgn=0x3d0409d6) returned 0 [0076.285] SelectClipRgn (hdc=0x3a010987, hrgn=0x4f0407ff) returned 2 [0076.285] DeleteObject (ho=0x3d0409d6) returned 1 [0076.285] DeleteObject (ho=0x4f0407ff) returned 1 [0076.285] OffsetViewportOrgEx (in: hdc=0x3a010987, x=0, y=0, lppt=0x2157698 | out: lppt=0x2157698) returned 1 [0076.285] GetNearestColor (hdc=0x3a010987, color=0xf0f0f0) returned 0xf0f0f0 [0076.285] CreateSolidBrush (color=0xf0f0f0) returned 0x451009b2 [0076.285] FillRect (hDC=0x3a010987, lprc=0x14e1c8, hbr=0x451009b2) returned 1 [0076.285] DeleteObject (ho=0x451009b2) returned 1 [0076.285] RestoreDC (hdc=0x3a010987, nSavedDC=-1) returned 1 [0076.285] GdipReleaseDC (graphics=0x1be567f0, hdc=0x3a010987) returned 0x0 [0076.285] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.285] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0076.443] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.443] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2157798) returned 0x0 [0076.444] GdipSetStringFormatAlign (format=0x1be515e0, align=0x1) returned 0x0 [0076.444] GdipSetStringFormatLineAlign (format=0x1be515e0, align=0x1) returned 0x0 [0076.444] GdipSetStringFormatHotkeyPrefix (format=0x1be515e0, hotkeyPrefix=2) returned 0x0 [0076.444] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0076.444] GdipDrawString (graphics=0x1be567f0, string="4", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be515e0, brush=0x1be51650) returned 0x0 [0076.444] GdipDeleteBrush (brush=0x1be51650) returned 0x0 [0076.445] GdipDeleteStringFormat (format=0x1be515e0) returned 0x0 [0076.445] GetFocus () returned 0x103c8 [0076.445] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.446] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExh\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.446] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.454] GdipCreateRegion (region=0x14e030) returned 0x0 [0076.455] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.455] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0076.455] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0076.455] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0076.456] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486a90 [0076.456] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486a90) returned 0x0 [0076.457] LocalFree (hMem=0x1d486a90) returned 0x0 [0076.457] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b50 [0076.457] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486b50) returned 0x0 [0076.458] LocalFree (hMem=0x1d486b50) returned 0x0 [0076.459] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0076.459] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0076.459] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0076.459] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0076.459] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.459] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0076.460] GetCurrentObject (hdc=0x3a010987, type=0x1) returned 0x1b00017 [0076.460] GetCurrentObject (hdc=0x3a010987, type=0x2) returned 0x1900010 [0076.460] GetCurrentObject (hdc=0x3a010987, type=0x7) returned 0x2405099f [0076.460] GetCurrentObject (hdc=0x3a010987, type=0x6) returned 0x18a0048 [0076.460] SaveDC (hdc=0x3a010987) returned 1 [0076.460] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x500407ff [0076.461] GetClipRgn (hdc=0x3a010987, hrgn=0x500407ff) returned 0 [0076.461] SelectClipRgn (hdc=0x3a010987, hrgn=0x3e0409d6) returned 2 [0076.461] DeleteObject (ho=0x500407ff) returned 1 [0076.461] DeleteObject (ho=0x3e0409d6) returned 1 [0076.461] OffsetViewportOrgEx (in: hdc=0x3a010987, x=0, y=0, lppt=0x2157b80 | out: lppt=0x2157b80) returned 1 [0076.461] GetROP2 (hdc=0x3a010987) returned 13 [0076.461] GetBkMode (hdc=0x3a010987) returned 2 [0076.462] SetBkMode (hdc=0x3a010987, mode=1) returned 2 [0076.462] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x643006e1 [0076.462] SelectObject (hdc=0x3a010987, h=0x643006e1) returned 0x1b00017 [0076.462] MoveToEx (in: hdc=0x3a010987, x=25, y=0, lppt=0x2157be8 | out: lppt=0x2157be8) returned 1 [0076.462] LineTo (hdc=0x3a010987, x=0, y=0) returned 1 [0076.462] SetBkMode (hdc=0x3a010987, mode=2) returned 1 [0076.463] MoveToEx (in: hdc=0x3a010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.463] GetROP2 (hdc=0x3a010987) returned 13 [0076.463] GetBkMode (hdc=0x3a010987) returned 2 [0076.463] SetBkMode (hdc=0x3a010987, mode=1) returned 2 [0076.463] SelectObject (hdc=0x3a010987, h=0x643006e1) returned 0x643006e1 [0076.463] MoveToEx (in: hdc=0x3a010987, x=0, y=0, lppt=0x2157c00 | out: lppt=0x2157c00) returned 1 [0076.463] LineTo (hdc=0x3a010987, x=0, y=22) returned 1 [0076.463] SetBkMode (hdc=0x3a010987, mode=2) returned 1 [0076.464] MoveToEx (in: hdc=0x3a010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.464] SelectObject (hdc=0x3a010987, h=0x1b00017) returned 0x643006e1 [0076.464] DeleteObject (ho=0x643006e1) returned 1 [0076.464] GetROP2 (hdc=0x3a010987) returned 13 [0076.464] GetBkMode (hdc=0x3a010987) returned 2 [0076.464] SetBkMode (hdc=0x3a010987, mode=1) returned 2 [0076.464] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x7a3009ce [0076.465] SelectObject (hdc=0x3a010987, h=0x7a3009ce) returned 0x1b00017 [0076.465] MoveToEx (in: hdc=0x3a010987, x=0, y=22, lppt=0x2157c68 | out: lppt=0x2157c68) returned 1 [0076.465] LineTo (hdc=0x3a010987, x=25, y=22) returned 1 [0076.465] SetBkMode (hdc=0x3a010987, mode=2) returned 1 [0076.465] MoveToEx (in: hdc=0x3a010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.465] GetROP2 (hdc=0x3a010987) returned 13 [0076.465] GetBkMode (hdc=0x3a010987) returned 2 [0076.465] SetBkMode (hdc=0x3a010987, mode=1) returned 2 [0076.465] SelectObject (hdc=0x3a010987, h=0x7a3009ce) returned 0x7a3009ce [0076.465] MoveToEx (in: hdc=0x3a010987, x=25, y=22, lppt=0x2157c80 | out: lppt=0x2157c80) returned 1 [0076.465] LineTo (hdc=0x3a010987, x=25, y=-1) returned 1 [0076.465] SetBkMode (hdc=0x3a010987, mode=2) returned 1 [0076.465] MoveToEx (in: hdc=0x3a010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.465] SelectObject (hdc=0x3a010987, h=0x1b00017) returned 0x7a3009ce [0076.465] DeleteObject (ho=0x7a3009ce) returned 1 [0076.465] GetROP2 (hdc=0x3a010987) returned 13 [0076.465] GetBkMode (hdc=0x3a010987) returned 2 [0076.465] SetBkMode (hdc=0x3a010987, mode=1) returned 2 [0076.465] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x653006e1 [0076.466] SelectObject (hdc=0x3a010987, h=0x653006e1) returned 0x1b00017 [0076.466] MoveToEx (in: hdc=0x3a010987, x=24, y=1, lppt=0x2157ce8 | out: lppt=0x2157ce8) returned 1 [0076.466] LineTo (hdc=0x3a010987, x=1, y=1) returned 1 [0076.466] SetBkMode (hdc=0x3a010987, mode=2) returned 1 [0076.466] MoveToEx (in: hdc=0x3a010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.466] GetROP2 (hdc=0x3a010987) returned 13 [0076.466] GetBkMode (hdc=0x3a010987) returned 2 [0076.466] SetBkMode (hdc=0x3a010987, mode=1) returned 2 [0076.466] SelectObject (hdc=0x3a010987, h=0x653006e1) returned 0x653006e1 [0076.466] MoveToEx (in: hdc=0x3a010987, x=1, y=1, lppt=0x2157d00 | out: lppt=0x2157d00) returned 1 [0076.466] LineTo (hdc=0x3a010987, x=1, y=21) returned 1 [0076.466] SetBkMode (hdc=0x3a010987, mode=2) returned 1 [0076.466] MoveToEx (in: hdc=0x3a010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.466] SelectObject (hdc=0x3a010987, h=0x1b00017) returned 0x653006e1 [0076.466] DeleteObject (ho=0x653006e1) returned 1 [0076.466] GetROP2 (hdc=0x3a010987) returned 13 [0076.466] GetBkMode (hdc=0x3a010987) returned 2 [0076.466] SetBkMode (hdc=0x3a010987, mode=1) returned 2 [0076.466] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x7b3009ce [0076.466] SelectObject (hdc=0x3a010987, h=0x7b3009ce) returned 0x1b00017 [0076.466] MoveToEx (in: hdc=0x3a010987, x=1, y=21, lppt=0x2157d68 | out: lppt=0x2157d68) returned 1 [0076.467] LineTo (hdc=0x3a010987, x=24, y=21) returned 1 [0076.467] SetBkMode (hdc=0x3a010987, mode=2) returned 1 [0076.467] MoveToEx (in: hdc=0x3a010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.467] GetROP2 (hdc=0x3a010987) returned 13 [0076.467] GetBkMode (hdc=0x3a010987) returned 2 [0076.467] SetBkMode (hdc=0x3a010987, mode=1) returned 2 [0076.467] SelectObject (hdc=0x3a010987, h=0x7b3009ce) returned 0x7b3009ce [0076.467] MoveToEx (in: hdc=0x3a010987, x=24, y=21, lppt=0x2157d80 | out: lppt=0x2157d80) returned 1 [0076.467] LineTo (hdc=0x3a010987, x=24, y=0) returned 1 [0076.467] SetBkMode (hdc=0x3a010987, mode=2) returned 1 [0076.467] MoveToEx (in: hdc=0x3a010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.467] SelectObject (hdc=0x3a010987, h=0x1b00017) returned 0x7b3009ce [0076.467] DeleteObject (ho=0x7b3009ce) returned 1 [0076.467] RestoreDC (hdc=0x3a010987, nSavedDC=-1) returned 1 [0076.467] GdipReleaseDC (graphics=0x1be567f0, hdc=0x3a010987) returned 0x0 [0076.467] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0076.467] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x3a010987, x1=0, y1=0, rop=0xcc0020) returned 1 [0076.468] GdipReleaseDC (graphics=0x1be567f0, hdc=0x3a010987) returned 0x0 [0076.468] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0076.468] SelectObject (hdc=0x3a010987, h=0x185000f) returned 0x2405099f [0076.468] DeleteDC (hdc=0x3a010987) returned 1 [0076.468] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0076.468] EndPaint (hWnd=0x103ba, lpPaint=0x14e548) returned 1 [0076.468] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.468] IsWindowUnicode (hWnd=0x103bc) returned 1 [0076.468] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.468] TranslateMessage (lpMsg=0x14ef10) returned 0 [0076.468] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0076.468] BeginPaint (in: hWnd=0x103bc, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0076.469] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0076.469] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0076.469] GetStockObject (i=5) returned 0x1900015 [0076.469] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0076.469] CreateCompatibleDC (hdc=0xc0100ae) returned 0x5b0108b5 [0076.469] SelectObject (hdc=0x5b0108b5, h=0x2405099f) returned 0x185000f [0076.469] GdipCreateFromHDC (hdc=0x5b0108b5, graphics=0x14e528) returned 0x0 [0076.469] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0076.469] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0076.469] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0076.469] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0076.469] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0076.469] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d485fd0 [0076.470] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d485fd0) returned 0x0 [0076.470] LocalFree (hMem=0x1d485fd0) returned 0x0 [0076.470] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0076.470] GdipCreateRegion (region=0x14e550) returned 0x0 [0076.470] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.470] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0076.470] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0076.470] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd8a0dbd) returned 0x0 [0076.470] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.471] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0076.471] GetCurrentObject (hdc=0x5b0108b5, type=0x1) returned 0x1b00017 [0076.471] GetCurrentObject (hdc=0x5b0108b5, type=0x2) returned 0x1900010 [0076.471] GetCurrentObject (hdc=0x5b0108b5, type=0x7) returned 0x2405099f [0076.471] GetCurrentObject (hdc=0x5b0108b5, type=0x6) returned 0x18a0048 [0076.471] SaveDC (hdc=0x5b0108b5) returned 1 [0076.471] GetNearestColor (hdc=0x5b0108b5, color=0xf0f0f0) returned 0xf0f0f0 [0076.471] GetNearestColor (hdc=0x5b0108b5, color=0xa0a0a0) returned 0xa0a0a0 [0076.471] GetNearestColor (hdc=0x5b0108b5, color=0x696969) returned 0x696969 [0076.471] GetNearestColor (hdc=0x5b0108b5, color=0xa0a0a0) returned 0xa0a0a0 [0076.471] GetNearestColor (hdc=0x5b0108b5, color=0x0) returned 0x0 [0076.471] GetNearestColor (hdc=0x5b0108b5, color=0xffffff) returned 0xffffff [0076.471] GetNearestColor (hdc=0x5b0108b5, color=0xe5e5e5) returned 0xe5e5e5 [0076.471] GetNearestColor (hdc=0x5b0108b5, color=0xd8d8d8) returned 0xd8d8d8 [0076.471] GetNearestColor (hdc=0x5b0108b5, color=0x0) returned 0x0 [0076.471] RestoreDC (hdc=0x5b0108b5, nSavedDC=-1) returned 1 [0076.471] GdipReleaseDC (graphics=0x1be567f0, hdc=0x5b0108b5) returned 0x0 [0076.472] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.472] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x80\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.472] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.472] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21586b8) returned 0x0 [0076.472] GdipSetStringFormatAlign (format=0x1be515e0, align=0x1) returned 0x0 [0076.472] GdipSetStringFormatLineAlign (format=0x1be515e0, align=0x1) returned 0x0 [0076.472] GdipSetStringFormatHotkeyPrefix (format=0x1be515e0, hotkeyPrefix=2) returned 0x0 [0076.472] GdipGetStringFormatFlags (format=0x1be515e0, flags=0x14e378) returned 0x0 [0076.472] GdipGetStringFormatTrimming (format=0x1be515e0, trimming=0x14e378) returned 0x0 [0076.472] GdipGetStringFormatHotkeyPrefix (format=0x1be515e0, hotkeyPrefix=0x14e378) returned 0x0 [0076.472] GdipGetFontSize (font=0x1be515e0, size=0x14e378) returned 0x0 [0076.472] GdipGetFontStyle (font=0x1be515e0, style=0x14e378) returned 0x0 [0076.472] GdipDeleteStringFormat (format=0x1be515e0) returned 0x0 [0076.473] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.473] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.473] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0076.475] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21587e8) returned 0x0 [0076.475] GdipSetStringFormatFlags (format=0x1be51670, flags=0) returned 0x0 [0076.475] GdipSetStringFormatTrimming (format=0x1be51670, trimming=0x1) returned 0x0 [0076.475] GdipSetStringFormatHotkeyPrefix (format=0x1be51670, hotkeyPrefix=2) returned 0x0 [0076.475] GdipSetStringFormatAlign (format=0x1be51670, align=0x1) returned 0x0 [0076.475] GdipSetStringFormatLineAlign (format=0x1be51670, align=0x1) returned 0x0 [0076.475] GdipMeasureString (graphics=0x1be57860, string="6", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be51670, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0076.475] GdipDeleteStringFormat (format=0x1be51670) returned 0x0 [0076.475] GdipDeleteGraphics (graphics=0x1be57860) returned 0x0 [0076.476] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.476] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.476] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.476] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0076.476] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.476] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0076.476] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0076.476] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0076.476] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486810 [0076.476] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486810) returned 0x0 [0076.477] LocalFree (hMem=0x1d486810) returned 0x0 [0076.477] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486290 [0076.477] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486290) returned 0x0 [0076.478] LocalFree (hMem=0x1d486290) returned 0x0 [0076.478] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0076.478] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0076.478] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0076.478] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0076.478] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.478] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0076.478] GetCurrentObject (hdc=0x5b0108b5, type=0x1) returned 0x1b00017 [0076.478] GetCurrentObject (hdc=0x5b0108b5, type=0x2) returned 0x1900010 [0076.478] GetCurrentObject (hdc=0x5b0108b5, type=0x7) returned 0x2405099f [0076.478] GetCurrentObject (hdc=0x5b0108b5, type=0x6) returned 0x18a0048 [0076.478] SaveDC (hdc=0x5b0108b5) returned 1 [0076.478] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3f0409d6 [0076.478] GetClipRgn (hdc=0x5b0108b5, hrgn=0x3f0409d6) returned 0 [0076.479] SelectClipRgn (hdc=0x5b0108b5, hrgn=0x510407ff) returned 2 [0076.479] DeleteObject (ho=0x3f0409d6) returned 1 [0076.479] DeleteObject (ho=0x510407ff) returned 1 [0076.479] OffsetViewportOrgEx (in: hdc=0x5b0108b5, x=0, y=0, lppt=0x2158ba8 | out: lppt=0x2158ba8) returned 1 [0076.479] GetNearestColor (hdc=0x5b0108b5, color=0xf0f0f0) returned 0xf0f0f0 [0076.479] CreateSolidBrush (color=0xf0f0f0) returned 0x461009b2 [0076.479] FillRect (hDC=0x5b0108b5, lprc=0x14e1c8, hbr=0x461009b2) returned 1 [0076.479] DeleteObject (ho=0x461009b2) returned 1 [0076.479] RestoreDC (hdc=0x5b0108b5, nSavedDC=-1) returned 1 [0076.479] GdipReleaseDC (graphics=0x1be567f0, hdc=0x5b0108b5) returned 0x0 [0076.479] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0076.479] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.479] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2158ca8) returned 0x0 [0076.480] GdipSetStringFormatAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.480] GdipSetStringFormatLineAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.480] GdipSetStringFormatHotkeyPrefix (format=0x1be56ec0, hotkeyPrefix=2) returned 0x0 [0076.480] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0076.480] GdipDrawString (graphics=0x1be567f0, string="6", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be56ec0, brush=0x1be515e0) returned 0x0 [0076.480] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0076.480] GdipDeleteStringFormat (format=0x1be56ec0) returned 0x0 [0076.480] GetFocus () returned 0x103c8 [0076.480] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx}\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.480] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.480] GdipCreateRegion (region=0x14e030) returned 0x0 [0076.480] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.481] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0076.481] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0076.481] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0076.481] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4866d0 [0076.481] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d4866d0) returned 0x0 [0076.481] LocalFree (hMem=0x1d4866d0) returned 0x0 [0076.481] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b90 [0076.481] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486b90) returned 0x0 [0076.482] LocalFree (hMem=0x1d486b90) returned 0x0 [0076.482] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0076.482] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0076.482] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0076.482] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0076.482] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.482] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0076.482] GetCurrentObject (hdc=0x5b0108b5, type=0x1) returned 0x1b00017 [0076.482] GetCurrentObject (hdc=0x5b0108b5, type=0x2) returned 0x1900010 [0076.482] GetCurrentObject (hdc=0x5b0108b5, type=0x7) returned 0x2405099f [0076.482] GetCurrentObject (hdc=0x5b0108b5, type=0x6) returned 0x18a0048 [0076.482] SaveDC (hdc=0x5b0108b5) returned 1 [0076.482] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x520407ff [0076.483] GetClipRgn (hdc=0x5b0108b5, hrgn=0x520407ff) returned 0 [0076.483] SelectClipRgn (hdc=0x5b0108b5, hrgn=0x400409d6) returned 2 [0076.483] DeleteObject (ho=0x520407ff) returned 1 [0076.483] DeleteObject (ho=0x400409d6) returned 1 [0076.483] OffsetViewportOrgEx (in: hdc=0x5b0108b5, x=0, y=0, lppt=0x2159090 | out: lppt=0x2159090) returned 1 [0076.483] GetROP2 (hdc=0x5b0108b5) returned 13 [0076.483] GetBkMode (hdc=0x5b0108b5) returned 2 [0076.483] SetBkMode (hdc=0x5b0108b5, mode=1) returned 2 [0076.483] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x7c3009ce [0076.483] SelectObject (hdc=0x5b0108b5, h=0x7c3009ce) returned 0x1b00017 [0076.483] MoveToEx (in: hdc=0x5b0108b5, x=25, y=0, lppt=0x21590f8 | out: lppt=0x21590f8) returned 1 [0076.483] LineTo (hdc=0x5b0108b5, x=0, y=0) returned 1 [0076.483] SetBkMode (hdc=0x5b0108b5, mode=2) returned 1 [0076.483] MoveToEx (in: hdc=0x5b0108b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.483] GetROP2 (hdc=0x5b0108b5) returned 13 [0076.483] GetBkMode (hdc=0x5b0108b5) returned 2 [0076.483] SetBkMode (hdc=0x5b0108b5, mode=1) returned 2 [0076.483] SelectObject (hdc=0x5b0108b5, h=0x7c3009ce) returned 0x7c3009ce [0076.483] MoveToEx (in: hdc=0x5b0108b5, x=0, y=0, lppt=0x2159110 | out: lppt=0x2159110) returned 1 [0076.483] LineTo (hdc=0x5b0108b5, x=0, y=22) returned 1 [0076.484] SetBkMode (hdc=0x5b0108b5, mode=2) returned 1 [0076.484] MoveToEx (in: hdc=0x5b0108b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.484] SelectObject (hdc=0x5b0108b5, h=0x1b00017) returned 0x7c3009ce [0076.484] DeleteObject (ho=0x7c3009ce) returned 1 [0076.484] GetROP2 (hdc=0x5b0108b5) returned 13 [0076.484] GetBkMode (hdc=0x5b0108b5) returned 2 [0076.484] SetBkMode (hdc=0x5b0108b5, mode=1) returned 2 [0076.484] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x663006e1 [0076.484] SelectObject (hdc=0x5b0108b5, h=0x663006e1) returned 0x1b00017 [0076.484] MoveToEx (in: hdc=0x5b0108b5, x=0, y=22, lppt=0x2159178 | out: lppt=0x2159178) returned 1 [0076.484] LineTo (hdc=0x5b0108b5, x=25, y=22) returned 1 [0076.484] SetBkMode (hdc=0x5b0108b5, mode=2) returned 1 [0076.484] MoveToEx (in: hdc=0x5b0108b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.484] GetROP2 (hdc=0x5b0108b5) returned 13 [0076.484] GetBkMode (hdc=0x5b0108b5) returned 2 [0076.484] SetBkMode (hdc=0x5b0108b5, mode=1) returned 2 [0076.484] SelectObject (hdc=0x5b0108b5, h=0x663006e1) returned 0x663006e1 [0076.484] MoveToEx (in: hdc=0x5b0108b5, x=25, y=22, lppt=0x2159190 | out: lppt=0x2159190) returned 1 [0076.484] LineTo (hdc=0x5b0108b5, x=25, y=-1) returned 1 [0076.484] SetBkMode (hdc=0x5b0108b5, mode=2) returned 1 [0076.484] MoveToEx (in: hdc=0x5b0108b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.484] SelectObject (hdc=0x5b0108b5, h=0x1b00017) returned 0x663006e1 [0076.484] DeleteObject (ho=0x663006e1) returned 1 [0076.485] GetROP2 (hdc=0x5b0108b5) returned 13 [0076.485] GetBkMode (hdc=0x5b0108b5) returned 2 [0076.485] SetBkMode (hdc=0x5b0108b5, mode=1) returned 2 [0076.485] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x7d3009ce [0076.485] SelectObject (hdc=0x5b0108b5, h=0x7d3009ce) returned 0x1b00017 [0076.485] MoveToEx (in: hdc=0x5b0108b5, x=24, y=1, lppt=0x21591f8 | out: lppt=0x21591f8) returned 1 [0076.485] LineTo (hdc=0x5b0108b5, x=1, y=1) returned 1 [0076.485] SetBkMode (hdc=0x5b0108b5, mode=2) returned 1 [0076.485] MoveToEx (in: hdc=0x5b0108b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.485] GetROP2 (hdc=0x5b0108b5) returned 13 [0076.485] GetBkMode (hdc=0x5b0108b5) returned 2 [0076.485] SetBkMode (hdc=0x5b0108b5, mode=1) returned 2 [0076.485] SelectObject (hdc=0x5b0108b5, h=0x7d3009ce) returned 0x7d3009ce [0076.485] MoveToEx (in: hdc=0x5b0108b5, x=1, y=1, lppt=0x2159210 | out: lppt=0x2159210) returned 1 [0076.485] LineTo (hdc=0x5b0108b5, x=1, y=21) returned 1 [0076.485] SetBkMode (hdc=0x5b0108b5, mode=2) returned 1 [0076.485] MoveToEx (in: hdc=0x5b0108b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.485] SelectObject (hdc=0x5b0108b5, h=0x1b00017) returned 0x7d3009ce [0076.485] DeleteObject (ho=0x7d3009ce) returned 1 [0076.485] GetROP2 (hdc=0x5b0108b5) returned 13 [0076.485] GetBkMode (hdc=0x5b0108b5) returned 2 [0076.485] SetBkMode (hdc=0x5b0108b5, mode=1) returned 2 [0076.485] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x673006e1 [0076.486] SelectObject (hdc=0x5b0108b5, h=0x673006e1) returned 0x1b00017 [0076.486] MoveToEx (in: hdc=0x5b0108b5, x=1, y=21, lppt=0x2159278 | out: lppt=0x2159278) returned 1 [0076.486] LineTo (hdc=0x5b0108b5, x=24, y=21) returned 1 [0076.486] SetBkMode (hdc=0x5b0108b5, mode=2) returned 1 [0076.486] MoveToEx (in: hdc=0x5b0108b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.486] GetROP2 (hdc=0x5b0108b5) returned 13 [0076.486] GetBkMode (hdc=0x5b0108b5) returned 2 [0076.486] SetBkMode (hdc=0x5b0108b5, mode=1) returned 2 [0076.486] SelectObject (hdc=0x5b0108b5, h=0x673006e1) returned 0x673006e1 [0076.486] MoveToEx (in: hdc=0x5b0108b5, x=24, y=21, lppt=0x2159290 | out: lppt=0x2159290) returned 1 [0076.486] LineTo (hdc=0x5b0108b5, x=24, y=0) returned 1 [0076.486] SetBkMode (hdc=0x5b0108b5, mode=2) returned 1 [0076.486] MoveToEx (in: hdc=0x5b0108b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.486] SelectObject (hdc=0x5b0108b5, h=0x1b00017) returned 0x673006e1 [0076.486] DeleteObject (ho=0x673006e1) returned 1 [0076.486] RestoreDC (hdc=0x5b0108b5, nSavedDC=-1) returned 1 [0076.486] GdipReleaseDC (graphics=0x1be567f0, hdc=0x5b0108b5) returned 0x0 [0076.486] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0076.486] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x5b0108b5, x1=0, y1=0, rop=0xcc0020) returned 1 [0076.487] GdipReleaseDC (graphics=0x1be567f0, hdc=0x5b0108b5) returned 0x0 [0076.487] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0076.487] SelectObject (hdc=0x5b0108b5, h=0x185000f) returned 0x2405099f [0076.487] DeleteDC (hdc=0x5b0108b5) returned 1 [0076.487] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0076.487] EndPaint (hWnd=0x103bc, lpPaint=0x14e548) returned 1 [0076.487] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.487] IsWindowUnicode (hWnd=0x103be) returned 1 [0076.487] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.487] TranslateMessage (lpMsg=0x14ef10) returned 0 [0076.487] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0076.487] BeginPaint (in: hWnd=0x103be, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0076.487] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0076.487] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0076.488] GetStockObject (i=5) returned 0x1900015 [0076.488] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0076.488] CreateCompatibleDC (hdc=0xc0100ae) returned 0xffffffff8e0108c7 [0076.488] SelectObject (hdc=0xffffffff8e0108c7, h=0x2405099f) returned 0x185000f [0076.488] GdipCreateFromHDC (hdc=0xffffffff8e0108c7, graphics=0x14e528) returned 0x0 [0076.488] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0076.488] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0076.488] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0076.488] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0076.488] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0076.488] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d485f50 [0076.488] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d485f50) returned 0x0 [0076.489] LocalFree (hMem=0x1d485f50) returned 0x0 [0076.556] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0076.556] GdipCreateRegion (region=0x14e550) returned 0x0 [0076.556] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.556] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0076.556] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0076.556] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd870dbd) returned 0x0 [0076.556] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.556] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0076.556] GetCurrentObject (hdc=0xffffffff8e0108c7, type=0x1) returned 0x1b00017 [0076.556] GetCurrentObject (hdc=0xffffffff8e0108c7, type=0x2) returned 0x1900010 [0076.556] GetCurrentObject (hdc=0xffffffff8e0108c7, type=0x7) returned 0x2405099f [0076.558] GetCurrentObject (hdc=0xffffffff8e0108c7, type=0x6) returned 0x18a0048 [0076.558] SaveDC (hdc=0xffffffff8e0108c7) returned 1 [0076.558] GetNearestColor (hdc=0xffffffff8e0108c7, color=0xf0f0f0) returned 0xf0f0f0 [0076.558] GetNearestColor (hdc=0xffffffff8e0108c7, color=0xa0a0a0) returned 0xa0a0a0 [0076.558] GetNearestColor (hdc=0xffffffff8e0108c7, color=0x696969) returned 0x696969 [0076.558] GetNearestColor (hdc=0xffffffff8e0108c7, color=0xa0a0a0) returned 0xa0a0a0 [0076.558] GetNearestColor (hdc=0xffffffff8e0108c7, color=0x0) returned 0x0 [0076.559] GetNearestColor (hdc=0xffffffff8e0108c7, color=0xffffff) returned 0xffffff [0076.559] GetNearestColor (hdc=0xffffffff8e0108c7, color=0xe5e5e5) returned 0xe5e5e5 [0076.559] GetNearestColor (hdc=0xffffffff8e0108c7, color=0xd8d8d8) returned 0xd8d8d8 [0076.559] GetNearestColor (hdc=0xffffffff8e0108c7, color=0x0) returned 0x0 [0076.559] RestoreDC (hdc=0xffffffff8e0108c7, nSavedDC=-1) returned 1 [0076.559] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff8e0108c7) returned 0x0 [0076.559] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.560] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x95\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.560] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.560] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2159bc8) returned 0x0 [0076.560] GdipSetStringFormatAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.560] GdipSetStringFormatLineAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.560] GdipSetStringFormatHotkeyPrefix (format=0x1be56ec0, hotkeyPrefix=2) returned 0x0 [0076.560] GdipGetStringFormatFlags (format=0x1be56ec0, flags=0x14e378) returned 0x0 [0076.560] GdipGetStringFormatTrimming (format=0x1be56ec0, trimming=0x14e378) returned 0x0 [0076.560] GdipGetStringFormatHotkeyPrefix (format=0x1be56ec0, hotkeyPrefix=0x14e378) returned 0x0 [0076.560] GdipGetFontSize (font=0x1be56ec0, size=0x14e378) returned 0x0 [0076.560] GdipGetFontStyle (font=0x1be56ec0, style=0x14e378) returned 0x0 [0076.560] GdipDeleteStringFormat (format=0x1be56ec0) returned 0x0 [0076.560] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.560] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.561] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.561] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0076.561] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2159cf8) returned 0x0 [0076.561] GdipSetStringFormatFlags (format=0x1be56ec0, flags=0) returned 0x0 [0076.561] GdipSetStringFormatTrimming (format=0x1be56ec0, trimming=0x1) returned 0x0 [0076.561] GdipSetStringFormatHotkeyPrefix (format=0x1be56ec0, hotkeyPrefix=2) returned 0x0 [0076.561] GdipSetStringFormatAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.561] GdipSetStringFormatLineAlign (format=0x1be56ec0, align=0x1) returned 0x0 [0076.561] GdipMeasureString (graphics=0x1be57860, string="9", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be56ec0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0076.561] GdipDeleteStringFormat (format=0x1be56ec0) returned 0x0 [0076.561] GdipDeleteGraphics (graphics=0x1be57860) returned 0x0 [0076.561] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.561] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.562] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.562] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0076.562] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.562] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0076.562] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0076.562] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0076.562] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486150 [0076.562] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486150) returned 0x0 [0076.563] LocalFree (hMem=0x1d486150) returned 0x0 [0076.563] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486e50 [0076.563] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486e50) returned 0x0 [0076.564] LocalFree (hMem=0x1d486e50) returned 0x0 [0076.564] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0076.564] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0076.564] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0076.564] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0076.566] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.566] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0076.566] GetCurrentObject (hdc=0xffffffff8e0108c7, type=0x1) returned 0x1b00017 [0076.566] GetCurrentObject (hdc=0xffffffff8e0108c7, type=0x2) returned 0x1900010 [0076.566] GetCurrentObject (hdc=0xffffffff8e0108c7, type=0x7) returned 0x2405099f [0076.566] GetCurrentObject (hdc=0xffffffff8e0108c7, type=0x6) returned 0x18a0048 [0076.566] SaveDC (hdc=0xffffffff8e0108c7) returned 1 [0076.577] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x410409d6 [0076.577] GetClipRgn (hdc=0xffffffff8e0108c7, hrgn=0x410409d6) returned 0 [0076.577] SelectClipRgn (hdc=0xffffffff8e0108c7, hrgn=0x530407ff) returned 2 [0076.577] DeleteObject (ho=0x410409d6) returned 1 [0076.577] DeleteObject (ho=0x530407ff) returned 1 [0076.586] OffsetViewportOrgEx (in: hdc=0xffffffff8e0108c7, x=0, y=0, lppt=0x215a0b8 | out: lppt=0x215a0b8) returned 1 [0076.586] GetNearestColor (hdc=0xffffffff8e0108c7, color=0xf0f0f0) returned 0xf0f0f0 [0076.586] CreateSolidBrush (color=0xf0f0f0) returned 0x471009b2 [0076.586] FillRect (hDC=0xffffffff8e0108c7, lprc=0x14e1c8, hbr=0x471009b2) returned 1 [0076.586] DeleteObject (ho=0x471009b2) returned 1 [0076.586] RestoreDC (hdc=0xffffffff8e0108c7, nSavedDC=-1) returned 1 [0076.595] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff8e0108c7) returned 0x0 [0076.595] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0076.614] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.614] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x215a1b8) returned 0x0 [0076.614] GdipSetStringFormatAlign (format=0x1be515e0, align=0x1) returned 0x0 [0076.614] GdipSetStringFormatLineAlign (format=0x1be515e0, align=0x1) returned 0x0 [0076.614] GdipSetStringFormatHotkeyPrefix (format=0x1be515e0, hotkeyPrefix=2) returned 0x0 [0076.614] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0076.614] GdipDrawString (graphics=0x1be567f0, string="9", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be515e0, brush=0x1be51650) returned 0x0 [0076.615] GdipDeleteBrush (brush=0x1be51650) returned 0x0 [0076.615] GdipDeleteStringFormat (format=0x1be515e0) returned 0x0 [0076.615] GetFocus () returned 0x103c8 [0076.615] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.615] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x92\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.615] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.615] GdipCreateRegion (region=0x14e030) returned 0x0 [0076.615] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.615] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0076.615] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0076.615] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0076.616] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486dd0 [0076.616] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486dd0) returned 0x0 [0076.616] LocalFree (hMem=0x1d486dd0) returned 0x0 [0076.616] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486710 [0076.616] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486710) returned 0x0 [0076.617] LocalFree (hMem=0x1d486710) returned 0x0 [0076.617] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0076.617] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0076.617] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0076.617] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0076.617] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.617] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0076.617] GetCurrentObject (hdc=0xffffffff8e0108c7, type=0x1) returned 0x1b00017 [0076.617] GetCurrentObject (hdc=0xffffffff8e0108c7, type=0x2) returned 0x1900010 [0076.617] GetCurrentObject (hdc=0xffffffff8e0108c7, type=0x7) returned 0x2405099f [0076.617] GetCurrentObject (hdc=0xffffffff8e0108c7, type=0x6) returned 0x18a0048 [0076.617] SaveDC (hdc=0xffffffff8e0108c7) returned 1 [0076.617] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x540407ff [0076.617] GetClipRgn (hdc=0xffffffff8e0108c7, hrgn=0x540407ff) returned 0 [0076.618] SelectClipRgn (hdc=0xffffffff8e0108c7, hrgn=0x420409d6) returned 2 [0076.618] DeleteObject (ho=0x540407ff) returned 1 [0076.618] DeleteObject (ho=0x420409d6) returned 1 [0076.618] OffsetViewportOrgEx (in: hdc=0xffffffff8e0108c7, x=0, y=0, lppt=0x215a5a0 | out: lppt=0x215a5a0) returned 1 [0076.618] GetROP2 (hdc=0xffffffff8e0108c7) returned 13 [0076.618] GetBkMode (hdc=0xffffffff8e0108c7) returned 2 [0076.618] SetBkMode (hdc=0xffffffff8e0108c7, mode=1) returned 2 [0076.618] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x683006e1 [0076.618] SelectObject (hdc=0xffffffff8e0108c7, h=0x683006e1) returned 0x1b00017 [0076.618] MoveToEx (in: hdc=0xffffffff8e0108c7, x=25, y=0, lppt=0x215a608 | out: lppt=0x215a608) returned 1 [0076.618] LineTo (hdc=0xffffffff8e0108c7, x=0, y=0) returned 1 [0076.618] SetBkMode (hdc=0xffffffff8e0108c7, mode=2) returned 1 [0076.618] MoveToEx (in: hdc=0xffffffff8e0108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.618] GetROP2 (hdc=0xffffffff8e0108c7) returned 13 [0076.618] GetBkMode (hdc=0xffffffff8e0108c7) returned 2 [0076.618] SetBkMode (hdc=0xffffffff8e0108c7, mode=1) returned 2 [0076.618] SelectObject (hdc=0xffffffff8e0108c7, h=0x683006e1) returned 0x683006e1 [0076.618] MoveToEx (in: hdc=0xffffffff8e0108c7, x=0, y=0, lppt=0x215a620 | out: lppt=0x215a620) returned 1 [0076.618] LineTo (hdc=0xffffffff8e0108c7, x=0, y=22) returned 1 [0076.618] SetBkMode (hdc=0xffffffff8e0108c7, mode=2) returned 1 [0076.618] MoveToEx (in: hdc=0xffffffff8e0108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.619] SelectObject (hdc=0xffffffff8e0108c7, h=0x1b00017) returned 0x683006e1 [0076.619] DeleteObject (ho=0x683006e1) returned 1 [0076.619] GetROP2 (hdc=0xffffffff8e0108c7) returned 13 [0076.619] GetBkMode (hdc=0xffffffff8e0108c7) returned 2 [0076.619] SetBkMode (hdc=0xffffffff8e0108c7, mode=1) returned 2 [0076.619] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x7e3009ce [0076.619] SelectObject (hdc=0xffffffff8e0108c7, h=0x7e3009ce) returned 0x1b00017 [0076.619] MoveToEx (in: hdc=0xffffffff8e0108c7, x=0, y=22, lppt=0x215a688 | out: lppt=0x215a688) returned 1 [0076.619] LineTo (hdc=0xffffffff8e0108c7, x=25, y=22) returned 1 [0076.619] SetBkMode (hdc=0xffffffff8e0108c7, mode=2) returned 1 [0076.619] MoveToEx (in: hdc=0xffffffff8e0108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.619] GetROP2 (hdc=0xffffffff8e0108c7) returned 13 [0076.619] GetBkMode (hdc=0xffffffff8e0108c7) returned 2 [0076.619] SetBkMode (hdc=0xffffffff8e0108c7, mode=1) returned 2 [0076.619] SelectObject (hdc=0xffffffff8e0108c7, h=0x7e3009ce) returned 0x7e3009ce [0076.619] MoveToEx (in: hdc=0xffffffff8e0108c7, x=25, y=22, lppt=0x215a6a0 | out: lppt=0x215a6a0) returned 1 [0076.619] LineTo (hdc=0xffffffff8e0108c7, x=25, y=-1) returned 1 [0076.619] SetBkMode (hdc=0xffffffff8e0108c7, mode=2) returned 1 [0076.619] MoveToEx (in: hdc=0xffffffff8e0108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.619] SelectObject (hdc=0xffffffff8e0108c7, h=0x1b00017) returned 0x7e3009ce [0076.620] DeleteObject (ho=0x7e3009ce) returned 1 [0076.620] GetROP2 (hdc=0xffffffff8e0108c7) returned 13 [0076.620] GetBkMode (hdc=0xffffffff8e0108c7) returned 2 [0076.620] SetBkMode (hdc=0xffffffff8e0108c7, mode=1) returned 2 [0076.620] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x693006e1 [0076.620] SelectObject (hdc=0xffffffff8e0108c7, h=0x693006e1) returned 0x1b00017 [0076.620] MoveToEx (in: hdc=0xffffffff8e0108c7, x=24, y=1, lppt=0x215a708 | out: lppt=0x215a708) returned 1 [0076.620] LineTo (hdc=0xffffffff8e0108c7, x=1, y=1) returned 1 [0076.620] SetBkMode (hdc=0xffffffff8e0108c7, mode=2) returned 1 [0076.620] MoveToEx (in: hdc=0xffffffff8e0108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.620] GetROP2 (hdc=0xffffffff8e0108c7) returned 13 [0076.620] GetBkMode (hdc=0xffffffff8e0108c7) returned 2 [0076.620] SetBkMode (hdc=0xffffffff8e0108c7, mode=1) returned 2 [0076.620] SelectObject (hdc=0xffffffff8e0108c7, h=0x693006e1) returned 0x693006e1 [0076.620] MoveToEx (in: hdc=0xffffffff8e0108c7, x=1, y=1, lppt=0x215a720 | out: lppt=0x215a720) returned 1 [0076.620] LineTo (hdc=0xffffffff8e0108c7, x=1, y=21) returned 1 [0076.620] SetBkMode (hdc=0xffffffff8e0108c7, mode=2) returned 1 [0076.620] MoveToEx (in: hdc=0xffffffff8e0108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.620] SelectObject (hdc=0xffffffff8e0108c7, h=0x1b00017) returned 0x693006e1 [0076.620] DeleteObject (ho=0x693006e1) returned 1 [0076.620] GetROP2 (hdc=0xffffffff8e0108c7) returned 13 [0076.620] GetBkMode (hdc=0xffffffff8e0108c7) returned 2 [0076.621] SetBkMode (hdc=0xffffffff8e0108c7, mode=1) returned 2 [0076.621] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x7f3009ce [0076.621] SelectObject (hdc=0xffffffff8e0108c7, h=0x7f3009ce) returned 0x1b00017 [0076.621] MoveToEx (in: hdc=0xffffffff8e0108c7, x=1, y=21, lppt=0x215a788 | out: lppt=0x215a788) returned 1 [0076.621] LineTo (hdc=0xffffffff8e0108c7, x=24, y=21) returned 1 [0076.621] SetBkMode (hdc=0xffffffff8e0108c7, mode=2) returned 1 [0076.621] MoveToEx (in: hdc=0xffffffff8e0108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.621] GetROP2 (hdc=0xffffffff8e0108c7) returned 13 [0076.621] GetBkMode (hdc=0xffffffff8e0108c7) returned 2 [0076.621] SetBkMode (hdc=0xffffffff8e0108c7, mode=1) returned 2 [0076.621] SelectObject (hdc=0xffffffff8e0108c7, h=0x7f3009ce) returned 0x7f3009ce [0076.621] MoveToEx (in: hdc=0xffffffff8e0108c7, x=24, y=21, lppt=0x215a7a0 | out: lppt=0x215a7a0) returned 1 [0076.621] LineTo (hdc=0xffffffff8e0108c7, x=24, y=0) returned 1 [0076.621] SetBkMode (hdc=0xffffffff8e0108c7, mode=2) returned 1 [0076.621] MoveToEx (in: hdc=0xffffffff8e0108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.621] SelectObject (hdc=0xffffffff8e0108c7, h=0x1b00017) returned 0x7f3009ce [0076.621] DeleteObject (ho=0x7f3009ce) returned 1 [0076.621] RestoreDC (hdc=0xffffffff8e0108c7, nSavedDC=-1) returned 1 [0076.621] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff8e0108c7) returned 0x0 [0076.621] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0076.621] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0xffffffff8e0108c7, x1=0, y1=0, rop=0xcc0020) returned 1 [0076.623] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff8e0108c7) returned 0x0 [0076.623] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0076.623] SelectObject (hdc=0xffffffff8e0108c7, h=0x185000f) returned 0x2405099f [0076.623] DeleteDC (hdc=0xffffffff8e0108c7) returned 1 [0076.623] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0076.623] EndPaint (hWnd=0x103be, lpPaint=0x14e548) returned 1 [0076.627] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.627] IsWindowUnicode (hWnd=0x103c0) returned 1 [0076.627] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.627] TranslateMessage (lpMsg=0x14ef10) returned 0 [0076.627] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0076.627] BeginPaint (in: hWnd=0x103c0, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0076.627] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0076.627] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0076.627] GetStockObject (i=5) returned 0x1900015 [0076.627] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0076.628] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x43010987 [0076.628] SelectObject (hdc=0x43010987, h=0x2405099f) returned 0x185000f [0076.628] GdipCreateFromHDC (hdc=0x43010987, graphics=0x14e528) returned 0x0 [0076.628] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0076.628] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0076.628] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0076.628] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0076.628] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0076.628] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486010 [0076.628] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486010) returned 0x0 [0076.629] LocalFree (hMem=0x1d486010) returned 0x0 [0076.629] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0076.629] GdipCreateRegion (region=0x14e550) returned 0x0 [0076.629] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.629] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0076.629] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0076.629] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd840dbd) returned 0x0 [0076.629] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.629] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0076.629] GetCurrentObject (hdc=0x43010987, type=0x1) returned 0x1b00017 [0076.630] GetCurrentObject (hdc=0x43010987, type=0x2) returned 0x1900010 [0076.630] GetCurrentObject (hdc=0x43010987, type=0x7) returned 0x2405099f [0076.630] GetCurrentObject (hdc=0x43010987, type=0x6) returned 0x18a0048 [0076.630] SaveDC (hdc=0x43010987) returned 1 [0076.630] GetNearestColor (hdc=0x43010987, color=0xf0f0f0) returned 0xf0f0f0 [0076.630] GetNearestColor (hdc=0x43010987, color=0xa0a0a0) returned 0xa0a0a0 [0076.630] GetNearestColor (hdc=0x43010987, color=0x696969) returned 0x696969 [0076.630] GetNearestColor (hdc=0x43010987, color=0xa0a0a0) returned 0xa0a0a0 [0076.630] GetNearestColor (hdc=0x43010987, color=0x0) returned 0x0 [0076.630] GetNearestColor (hdc=0x43010987, color=0xffffff) returned 0xffffff [0076.630] GetNearestColor (hdc=0x43010987, color=0xe5e5e5) returned 0xe5e5e5 [0076.630] GetNearestColor (hdc=0x43010987, color=0xd8d8d8) returned 0xd8d8d8 [0076.630] GetNearestColor (hdc=0x43010987, color=0x0) returned 0x0 [0076.630] RestoreDC (hdc=0x43010987, nSavedDC=-1) returned 1 [0076.630] GdipReleaseDC (graphics=0x1be567f0, hdc=0x43010987) returned 0x0 [0076.631] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExª\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.631] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.631] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x215b0d8) returned 0x0 [0076.631] GdipSetStringFormatAlign (format=0x1be57a00, align=0x1) returned 0x0 [0076.631] GdipSetStringFormatLineAlign (format=0x1be57a00, align=0x1) returned 0x0 [0076.631] GdipSetStringFormatHotkeyPrefix (format=0x1be57a00, hotkeyPrefix=2) returned 0x0 [0076.631] GdipGetStringFormatFlags (format=0x1be57a00, flags=0x14e378) returned 0x0 [0076.631] GdipGetStringFormatTrimming (format=0x1be57a00, trimming=0x14e378) returned 0x0 [0076.631] GdipGetStringFormatHotkeyPrefix (format=0x1be57a00, hotkeyPrefix=0x14e378) returned 0x0 [0076.631] GdipGetFontSize (font=0x1be57a00, size=0x14e378) returned 0x0 [0076.631] GdipGetFontStyle (font=0x1be57a00, style=0x14e378) returned 0x0 [0076.631] GdipDeleteStringFormat (format=0x1be57a00) returned 0x0 [0076.632] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.632] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.632] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0076.632] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x215b208) returned 0x0 [0076.632] GdipSetStringFormatFlags (format=0x1be57e60, flags=0) returned 0x0 [0076.632] GdipSetStringFormatTrimming (format=0x1be57e60, trimming=0x1) returned 0x0 [0076.632] GdipSetStringFormatHotkeyPrefix (format=0x1be57e60, hotkeyPrefix=2) returned 0x0 [0076.632] GdipSetStringFormatAlign (format=0x1be57e60, align=0x1) returned 0x0 [0076.632] GdipSetStringFormatLineAlign (format=0x1be57e60, align=0x1) returned 0x0 [0076.632] GdipMeasureString (graphics=0x1be58070, string="3", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57e60, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0076.632] GdipDeleteStringFormat (format=0x1be57e60) returned 0x0 [0076.632] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0076.633] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.633] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.633] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0076.633] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.633] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0076.633] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0076.633] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0076.633] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4869d0 [0076.633] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4869d0) returned 0x0 [0076.634] LocalFree (hMem=0x1d4869d0) returned 0x0 [0076.634] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0076.634] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486110) returned 0x0 [0076.634] LocalFree (hMem=0x1d486110) returned 0x0 [0076.634] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0076.634] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0076.634] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0076.634] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0076.634] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.634] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0076.634] GetCurrentObject (hdc=0x43010987, type=0x1) returned 0x1b00017 [0076.634] GetCurrentObject (hdc=0x43010987, type=0x2) returned 0x1900010 [0076.634] GetCurrentObject (hdc=0x43010987, type=0x7) returned 0x2405099f [0076.634] GetCurrentObject (hdc=0x43010987, type=0x6) returned 0x18a0048 [0076.635] SaveDC (hdc=0x43010987) returned 1 [0076.635] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x430409d6 [0076.635] GetClipRgn (hdc=0x43010987, hrgn=0x430409d6) returned 0 [0076.635] SelectClipRgn (hdc=0x43010987, hrgn=0x550407ff) returned 2 [0076.635] DeleteObject (ho=0x430409d6) returned 1 [0076.635] DeleteObject (ho=0x550407ff) returned 1 [0076.635] OffsetViewportOrgEx (in: hdc=0x43010987, x=0, y=0, lppt=0x215b5c8 | out: lppt=0x215b5c8) returned 1 [0076.635] GetNearestColor (hdc=0x43010987, color=0xf0f0f0) returned 0xf0f0f0 [0076.635] CreateSolidBrush (color=0xf0f0f0) returned 0x481009b2 [0076.635] FillRect (hDC=0x43010987, lprc=0x14e1c8, hbr=0x481009b2) returned 1 [0076.635] DeleteObject (ho=0x481009b2) returned 1 [0076.635] RestoreDC (hdc=0x43010987, nSavedDC=-1) returned 1 [0076.635] GdipReleaseDC (graphics=0x1be567f0, hdc=0x43010987) returned 0x0 [0076.635] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0076.636] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.636] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x215b6c8) returned 0x0 [0076.636] GdipSetStringFormatAlign (format=0x1be57a00, align=0x1) returned 0x0 [0076.636] GdipSetStringFormatLineAlign (format=0x1be57a00, align=0x1) returned 0x0 [0076.636] GdipSetStringFormatHotkeyPrefix (format=0x1be57a00, hotkeyPrefix=2) returned 0x0 [0076.636] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0076.636] GdipDrawString (graphics=0x1be567f0, string="3", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57a00, brush=0x1be515e0) returned 0x0 [0076.636] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0076.636] GdipDeleteStringFormat (format=0x1be57a00) returned 0x0 [0076.636] GetFocus () returned 0x103c8 [0076.636] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx§\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.637] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.637] GdipCreateRegion (region=0x14e030) returned 0x0 [0076.637] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.637] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0076.637] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0076.637] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0076.637] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486450 [0076.637] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486450) returned 0x0 [0076.637] LocalFree (hMem=0x1d486450) returned 0x0 [0076.637] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486e50 [0076.637] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486e50) returned 0x0 [0076.638] LocalFree (hMem=0x1d486e50) returned 0x0 [0076.638] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0076.638] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0076.638] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0076.638] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0076.638] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.638] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0076.638] GetCurrentObject (hdc=0x43010987, type=0x1) returned 0x1b00017 [0076.638] GetCurrentObject (hdc=0x43010987, type=0x2) returned 0x1900010 [0076.638] GetCurrentObject (hdc=0x43010987, type=0x7) returned 0x2405099f [0076.638] GetCurrentObject (hdc=0x43010987, type=0x6) returned 0x18a0048 [0076.638] SaveDC (hdc=0x43010987) returned 1 [0076.638] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x560407ff [0076.638] GetClipRgn (hdc=0x43010987, hrgn=0x560407ff) returned 0 [0076.638] SelectClipRgn (hdc=0x43010987, hrgn=0x440409d6) returned 2 [0076.638] DeleteObject (ho=0x560407ff) returned 1 [0076.639] DeleteObject (ho=0x440409d6) returned 1 [0076.639] OffsetViewportOrgEx (in: hdc=0x43010987, x=0, y=0, lppt=0x215bab0 | out: lppt=0x215bab0) returned 1 [0076.639] GetROP2 (hdc=0x43010987) returned 13 [0076.639] GetBkMode (hdc=0x43010987) returned 2 [0076.639] SetBkMode (hdc=0x43010987, mode=1) returned 2 [0076.639] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0xffffffff803009ce [0076.639] SelectObject (hdc=0x43010987, h=0xffffffff803009ce) returned 0x1b00017 [0076.639] MoveToEx (in: hdc=0x43010987, x=25, y=0, lppt=0x215bb18 | out: lppt=0x215bb18) returned 1 [0076.639] LineTo (hdc=0x43010987, x=0, y=0) returned 1 [0076.639] SetBkMode (hdc=0x43010987, mode=2) returned 1 [0076.639] MoveToEx (in: hdc=0x43010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.639] GetROP2 (hdc=0x43010987) returned 13 [0076.639] GetBkMode (hdc=0x43010987) returned 2 [0076.639] SetBkMode (hdc=0x43010987, mode=1) returned 2 [0076.639] SelectObject (hdc=0x43010987, h=0xffffffff803009ce) returned 0xffffffff803009ce [0076.639] MoveToEx (in: hdc=0x43010987, x=0, y=0, lppt=0x215bb30 | out: lppt=0x215bb30) returned 1 [0076.639] LineTo (hdc=0x43010987, x=0, y=22) returned 1 [0076.639] SetBkMode (hdc=0x43010987, mode=2) returned 1 [0076.639] MoveToEx (in: hdc=0x43010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.639] SelectObject (hdc=0x43010987, h=0x1b00017) returned 0xffffffff803009ce [0076.639] DeleteObject (ho=0xffffffff803009ce) returned 1 [0076.640] GetROP2 (hdc=0x43010987) returned 13 [0076.640] GetBkMode (hdc=0x43010987) returned 2 [0076.640] SetBkMode (hdc=0x43010987, mode=1) returned 2 [0076.640] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x6a3006e1 [0076.640] SelectObject (hdc=0x43010987, h=0x6a3006e1) returned 0x1b00017 [0076.640] MoveToEx (in: hdc=0x43010987, x=0, y=22, lppt=0x215bb98 | out: lppt=0x215bb98) returned 1 [0076.640] LineTo (hdc=0x43010987, x=25, y=22) returned 1 [0076.640] SetBkMode (hdc=0x43010987, mode=2) returned 1 [0076.640] MoveToEx (in: hdc=0x43010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.640] GetROP2 (hdc=0x43010987) returned 13 [0076.640] GetBkMode (hdc=0x43010987) returned 2 [0076.640] SetBkMode (hdc=0x43010987, mode=1) returned 2 [0076.640] SelectObject (hdc=0x43010987, h=0x6a3006e1) returned 0x6a3006e1 [0076.640] MoveToEx (in: hdc=0x43010987, x=25, y=22, lppt=0x215bbb0 | out: lppt=0x215bbb0) returned 1 [0076.640] LineTo (hdc=0x43010987, x=25, y=-1) returned 1 [0076.640] SetBkMode (hdc=0x43010987, mode=2) returned 1 [0076.640] MoveToEx (in: hdc=0x43010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.640] SelectObject (hdc=0x43010987, h=0x1b00017) returned 0x6a3006e1 [0076.640] DeleteObject (ho=0x6a3006e1) returned 1 [0076.640] GetROP2 (hdc=0x43010987) returned 13 [0076.640] GetBkMode (hdc=0x43010987) returned 2 [0076.641] SetBkMode (hdc=0x43010987, mode=1) returned 2 [0076.641] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xffffffff813009ce [0076.641] SelectObject (hdc=0x43010987, h=0xffffffff813009ce) returned 0x1b00017 [0076.641] MoveToEx (in: hdc=0x43010987, x=24, y=1, lppt=0x215bc18 | out: lppt=0x215bc18) returned 1 [0076.641] LineTo (hdc=0x43010987, x=1, y=1) returned 1 [0076.641] SetBkMode (hdc=0x43010987, mode=2) returned 1 [0076.641] MoveToEx (in: hdc=0x43010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.641] GetROP2 (hdc=0x43010987) returned 13 [0076.641] GetBkMode (hdc=0x43010987) returned 2 [0076.641] SetBkMode (hdc=0x43010987, mode=1) returned 2 [0076.641] SelectObject (hdc=0x43010987, h=0xffffffff813009ce) returned 0xffffffff813009ce [0076.641] MoveToEx (in: hdc=0x43010987, x=1, y=1, lppt=0x215bc30 | out: lppt=0x215bc30) returned 1 [0076.641] LineTo (hdc=0x43010987, x=1, y=21) returned 1 [0076.641] SetBkMode (hdc=0x43010987, mode=2) returned 1 [0076.641] MoveToEx (in: hdc=0x43010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.641] SelectObject (hdc=0x43010987, h=0x1b00017) returned 0xffffffff813009ce [0076.641] DeleteObject (ho=0xffffffff813009ce) returned 1 [0076.641] GetROP2 (hdc=0x43010987) returned 13 [0076.641] GetBkMode (hdc=0x43010987) returned 2 [0076.641] SetBkMode (hdc=0x43010987, mode=1) returned 2 [0076.641] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x6b3006e1 [0076.642] SelectObject (hdc=0x43010987, h=0x6b3006e1) returned 0x1b00017 [0076.642] MoveToEx (in: hdc=0x43010987, x=1, y=21, lppt=0x215bc98 | out: lppt=0x215bc98) returned 1 [0076.642] LineTo (hdc=0x43010987, x=24, y=21) returned 1 [0076.642] SetBkMode (hdc=0x43010987, mode=2) returned 1 [0076.642] MoveToEx (in: hdc=0x43010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.642] GetROP2 (hdc=0x43010987) returned 13 [0076.642] GetBkMode (hdc=0x43010987) returned 2 [0076.642] SetBkMode (hdc=0x43010987, mode=1) returned 2 [0076.642] SelectObject (hdc=0x43010987, h=0x6b3006e1) returned 0x6b3006e1 [0076.642] MoveToEx (in: hdc=0x43010987, x=24, y=21, lppt=0x215bcb0 | out: lppt=0x215bcb0) returned 1 [0076.642] LineTo (hdc=0x43010987, x=24, y=0) returned 1 [0076.642] SetBkMode (hdc=0x43010987, mode=2) returned 1 [0076.642] MoveToEx (in: hdc=0x43010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.642] SelectObject (hdc=0x43010987, h=0x1b00017) returned 0x6b3006e1 [0076.642] DeleteObject (ho=0x6b3006e1) returned 1 [0076.642] RestoreDC (hdc=0x43010987, nSavedDC=-1) returned 1 [0076.642] GdipReleaseDC (graphics=0x1be567f0, hdc=0x43010987) returned 0x0 [0076.642] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0076.642] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x43010987, x1=0, y1=0, rop=0xcc0020) returned 1 [0076.642] GdipReleaseDC (graphics=0x1be567f0, hdc=0x43010987) returned 0x0 [0076.642] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0076.643] SelectObject (hdc=0x43010987, h=0x185000f) returned 0x2405099f [0076.643] DeleteDC (hdc=0x43010987) returned 1 [0076.643] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0076.643] EndPaint (hWnd=0x103c0, lpPaint=0x14e548) returned 1 [0076.643] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.643] IsWindowUnicode (hWnd=0x103c2) returned 1 [0076.643] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.643] TranslateMessage (lpMsg=0x14ef10) returned 0 [0076.643] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0076.643] BeginPaint (in: hWnd=0x103c2, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0076.643] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0076.643] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0076.644] GetStockObject (i=5) returned 0x1900015 [0076.644] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0076.644] CreateCompatibleDC (hdc=0x220106d6) returned 0x640108b5 [0076.644] SelectObject (hdc=0x640108b5, h=0x2405099f) returned 0x185000f [0076.644] GdipCreateFromHDC (hdc=0x640108b5, graphics=0x14e528) returned 0x0 [0076.644] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0076.644] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0076.644] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0076.644] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0076.644] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0076.644] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486310 [0076.644] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486310) returned 0x0 [0076.645] LocalFree (hMem=0x1d486310) returned 0x0 [0076.716] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0076.716] GdipCreateRegion (region=0x14e550) returned 0x0 [0076.716] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.716] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0076.718] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0076.718] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd810dbd) returned 0x0 [0076.718] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.719] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0076.719] GetCurrentObject (hdc=0x640108b5, type=0x1) returned 0x1b00017 [0076.719] GetCurrentObject (hdc=0x640108b5, type=0x2) returned 0x1900010 [0076.725] GetCurrentObject (hdc=0x640108b5, type=0x7) returned 0x2405099f [0076.725] GetCurrentObject (hdc=0x640108b5, type=0x6) returned 0x18a0048 [0076.725] SaveDC (hdc=0x640108b5) returned 1 [0076.725] GetNearestColor (hdc=0x640108b5, color=0xf0f0f0) returned 0xf0f0f0 [0076.725] GetNearestColor (hdc=0x640108b5, color=0xa0a0a0) returned 0xa0a0a0 [0076.725] GetNearestColor (hdc=0x640108b5, color=0x696969) returned 0x696969 [0076.725] GetNearestColor (hdc=0x640108b5, color=0xa0a0a0) returned 0xa0a0a0 [0076.725] GetNearestColor (hdc=0x640108b5, color=0x0) returned 0x0 [0076.728] GetNearestColor (hdc=0x640108b5, color=0xffffff) returned 0xffffff [0076.728] GetNearestColor (hdc=0x640108b5, color=0xe5e5e5) returned 0xe5e5e5 [0076.728] GetNearestColor (hdc=0x640108b5, color=0xd8d8d8) returned 0xd8d8d8 [0076.728] GetNearestColor (hdc=0x640108b5, color=0x0) returned 0x0 [0076.740] RestoreDC (hdc=0x640108b5, nSavedDC=-1) returned 1 [0076.740] GdipReleaseDC (graphics=0x1be567f0, hdc=0x640108b5) returned 0x0 [0076.740] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx¿\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.740] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.741] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x215c5e8) returned 0x0 [0076.741] GdipSetStringFormatAlign (format=0x1be57ca0, align=0x1) returned 0x0 [0076.741] GdipSetStringFormatLineAlign (format=0x1be57ca0, align=0x1) returned 0x0 [0076.741] GdipSetStringFormatHotkeyPrefix (format=0x1be57ca0, hotkeyPrefix=2) returned 0x0 [0076.741] GdipGetStringFormatFlags (format=0x1be57ca0, flags=0x14e378) returned 0x0 [0076.741] GdipGetStringFormatTrimming (format=0x1be57ca0, trimming=0x14e378) returned 0x0 [0076.741] GdipGetStringFormatHotkeyPrefix (format=0x1be57ca0, hotkeyPrefix=0x14e378) returned 0x0 [0076.741] GdipGetFontSize (font=0x1be57ca0, size=0x14e378) returned 0x0 [0076.741] GdipGetFontStyle (font=0x1be57ca0, style=0x14e378) returned 0x0 [0076.741] GdipDeleteStringFormat (format=0x1be57ca0) returned 0x0 [0076.741] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.741] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.741] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0076.742] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x215c718) returned 0x0 [0076.742] GdipSetStringFormatFlags (format=0x1be57920, flags=0) returned 0x0 [0076.742] GdipSetStringFormatTrimming (format=0x1be57920, trimming=0x1) returned 0x0 [0076.742] GdipSetStringFormatHotkeyPrefix (format=0x1be57920, hotkeyPrefix=2) returned 0x0 [0076.742] GdipSetStringFormatAlign (format=0x1be57920, align=0x1) returned 0x0 [0076.742] GdipSetStringFormatLineAlign (format=0x1be57920, align=0x1) returned 0x0 [0076.742] GdipMeasureString (graphics=0x1be58070, string="5", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57920, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0076.742] GdipDeleteStringFormat (format=0x1be57920) returned 0x0 [0076.742] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0076.742] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.742] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.742] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0076.742] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.742] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0076.743] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0076.743] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0076.743] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486a10 [0076.743] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486a10) returned 0x0 [0076.744] LocalFree (hMem=0x1d486a10) returned 0x0 [0076.744] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486c50 [0076.744] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486c50) returned 0x0 [0076.744] LocalFree (hMem=0x1d486c50) returned 0x0 [0076.744] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0076.744] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0076.744] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0076.744] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0076.744] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.744] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0076.744] GetCurrentObject (hdc=0x640108b5, type=0x1) returned 0x1b00017 [0076.744] GetCurrentObject (hdc=0x640108b5, type=0x2) returned 0x1900010 [0076.745] GetCurrentObject (hdc=0x640108b5, type=0x7) returned 0x2405099f [0076.745] GetCurrentObject (hdc=0x640108b5, type=0x6) returned 0x18a0048 [0076.745] SaveDC (hdc=0x640108b5) returned 1 [0076.745] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x450409d6 [0076.745] GetClipRgn (hdc=0x640108b5, hrgn=0x450409d6) returned 0 [0076.745] SelectClipRgn (hdc=0x640108b5, hrgn=0x570407ff) returned 2 [0076.745] DeleteObject (ho=0x450409d6) returned 1 [0076.745] DeleteObject (ho=0x570407ff) returned 1 [0076.745] OffsetViewportOrgEx (in: hdc=0x640108b5, x=0, y=0, lppt=0x215cad8 | out: lppt=0x215cad8) returned 1 [0076.745] GetNearestColor (hdc=0x640108b5, color=0xf0f0f0) returned 0xf0f0f0 [0076.745] CreateSolidBrush (color=0xf0f0f0) returned 0x491009b2 [0076.745] FillRect (hDC=0x640108b5, lprc=0x14e1c8, hbr=0x491009b2) returned 1 [0076.745] DeleteObject (ho=0x491009b2) returned 1 [0076.745] RestoreDC (hdc=0x640108b5, nSavedDC=-1) returned 1 [0076.745] GdipReleaseDC (graphics=0x1be567f0, hdc=0x640108b5) returned 0x0 [0076.746] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0076.746] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.746] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x215cbd8) returned 0x0 [0076.746] GdipSetStringFormatAlign (format=0x1be57a70, align=0x1) returned 0x0 [0076.746] GdipSetStringFormatLineAlign (format=0x1be57a70, align=0x1) returned 0x0 [0076.746] GdipSetStringFormatHotkeyPrefix (format=0x1be57a70, hotkeyPrefix=2) returned 0x0 [0076.746] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0076.746] GdipDrawString (graphics=0x1be567f0, string="5", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57a70, brush=0x1be515e0) returned 0x0 [0076.746] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0076.746] GdipDeleteStringFormat (format=0x1be57a70) returned 0x0 [0076.746] GetFocus () returned 0x103c8 [0076.747] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx½\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.747] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.747] GdipCreateRegion (region=0x14e030) returned 0x0 [0076.747] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.748] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0076.748] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0076.748] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0076.748] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486dd0 [0076.748] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486dd0) returned 0x0 [0076.748] LocalFree (hMem=0x1d486dd0) returned 0x0 [0076.748] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486c10 [0076.748] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486c10) returned 0x0 [0076.749] LocalFree (hMem=0x1d486c10) returned 0x0 [0076.749] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0076.749] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0076.749] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0076.749] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0076.749] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.749] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0076.749] GetCurrentObject (hdc=0x640108b5, type=0x1) returned 0x1b00017 [0076.749] GetCurrentObject (hdc=0x640108b5, type=0x2) returned 0x1900010 [0076.750] GetCurrentObject (hdc=0x640108b5, type=0x7) returned 0x2405099f [0076.750] GetCurrentObject (hdc=0x640108b5, type=0x6) returned 0x18a0048 [0076.750] SaveDC (hdc=0x640108b5) returned 1 [0076.750] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x580407ff [0076.750] GetClipRgn (hdc=0x640108b5, hrgn=0x580407ff) returned 0 [0076.750] SelectClipRgn (hdc=0x640108b5, hrgn=0x460409d6) returned 2 [0076.750] DeleteObject (ho=0x580407ff) returned 1 [0076.750] DeleteObject (ho=0x460409d6) returned 1 [0076.750] OffsetViewportOrgEx (in: hdc=0x640108b5, x=0, y=0, lppt=0x215cfc0 | out: lppt=0x215cfc0) returned 1 [0076.750] GetROP2 (hdc=0x640108b5) returned 13 [0076.750] GetBkMode (hdc=0x640108b5) returned 2 [0076.750] SetBkMode (hdc=0x640108b5, mode=1) returned 2 [0076.750] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x6c3006e1 [0076.750] SelectObject (hdc=0x640108b5, h=0x6c3006e1) returned 0x1b00017 [0076.750] MoveToEx (in: hdc=0x640108b5, x=25, y=0, lppt=0x215d028 | out: lppt=0x215d028) returned 1 [0076.750] LineTo (hdc=0x640108b5, x=0, y=0) returned 1 [0076.750] SetBkMode (hdc=0x640108b5, mode=2) returned 1 [0076.750] MoveToEx (in: hdc=0x640108b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.750] GetROP2 (hdc=0x640108b5) returned 13 [0076.751] GetBkMode (hdc=0x640108b5) returned 2 [0076.751] SetBkMode (hdc=0x640108b5, mode=1) returned 2 [0076.751] SelectObject (hdc=0x640108b5, h=0x6c3006e1) returned 0x6c3006e1 [0076.751] MoveToEx (in: hdc=0x640108b5, x=0, y=0, lppt=0x215d040 | out: lppt=0x215d040) returned 1 [0076.751] LineTo (hdc=0x640108b5, x=0, y=22) returned 1 [0076.751] SetBkMode (hdc=0x640108b5, mode=2) returned 1 [0076.751] MoveToEx (in: hdc=0x640108b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.751] SelectObject (hdc=0x640108b5, h=0x1b00017) returned 0x6c3006e1 [0076.751] DeleteObject (ho=0x6c3006e1) returned 1 [0076.751] GetROP2 (hdc=0x640108b5) returned 13 [0076.751] GetBkMode (hdc=0x640108b5) returned 2 [0076.751] SetBkMode (hdc=0x640108b5, mode=1) returned 2 [0076.751] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0xffffffff823009ce [0076.751] SelectObject (hdc=0x640108b5, h=0xffffffff823009ce) returned 0x1b00017 [0076.751] MoveToEx (in: hdc=0x640108b5, x=0, y=22, lppt=0x215d0a8 | out: lppt=0x215d0a8) returned 1 [0076.751] LineTo (hdc=0x640108b5, x=25, y=22) returned 1 [0076.751] SetBkMode (hdc=0x640108b5, mode=2) returned 1 [0076.751] MoveToEx (in: hdc=0x640108b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.751] GetROP2 (hdc=0x640108b5) returned 13 [0076.751] GetBkMode (hdc=0x640108b5) returned 2 [0076.751] SetBkMode (hdc=0x640108b5, mode=1) returned 2 [0076.752] SelectObject (hdc=0x640108b5, h=0xffffffff823009ce) returned 0xffffffff823009ce [0076.752] MoveToEx (in: hdc=0x640108b5, x=25, y=22, lppt=0x215d0c0 | out: lppt=0x215d0c0) returned 1 [0076.752] LineTo (hdc=0x640108b5, x=25, y=-1) returned 1 [0076.752] SetBkMode (hdc=0x640108b5, mode=2) returned 1 [0076.752] MoveToEx (in: hdc=0x640108b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.752] SelectObject (hdc=0x640108b5, h=0x1b00017) returned 0xffffffff823009ce [0076.752] DeleteObject (ho=0xffffffff823009ce) returned 1 [0076.752] GetROP2 (hdc=0x640108b5) returned 13 [0076.752] GetBkMode (hdc=0x640108b5) returned 2 [0076.752] SetBkMode (hdc=0x640108b5, mode=1) returned 2 [0076.752] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x6d3006e1 [0076.752] SelectObject (hdc=0x640108b5, h=0x6d3006e1) returned 0x1b00017 [0076.752] MoveToEx (in: hdc=0x640108b5, x=24, y=1, lppt=0x215d128 | out: lppt=0x215d128) returned 1 [0076.752] LineTo (hdc=0x640108b5, x=1, y=1) returned 1 [0076.752] SetBkMode (hdc=0x640108b5, mode=2) returned 1 [0076.752] MoveToEx (in: hdc=0x640108b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.752] GetROP2 (hdc=0x640108b5) returned 13 [0076.752] GetBkMode (hdc=0x640108b5) returned 2 [0076.752] SetBkMode (hdc=0x640108b5, mode=1) returned 2 [0076.752] SelectObject (hdc=0x640108b5, h=0x6d3006e1) returned 0x6d3006e1 [0076.752] MoveToEx (in: hdc=0x640108b5, x=1, y=1, lppt=0x215d140 | out: lppt=0x215d140) returned 1 [0076.752] LineTo (hdc=0x640108b5, x=1, y=21) returned 1 [0076.753] SetBkMode (hdc=0x640108b5, mode=2) returned 1 [0076.753] MoveToEx (in: hdc=0x640108b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.753] SelectObject (hdc=0x640108b5, h=0x1b00017) returned 0x6d3006e1 [0076.753] DeleteObject (ho=0x6d3006e1) returned 1 [0076.753] GetROP2 (hdc=0x640108b5) returned 13 [0076.753] GetBkMode (hdc=0x640108b5) returned 2 [0076.753] SetBkMode (hdc=0x640108b5, mode=1) returned 2 [0076.753] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xffffffff833009ce [0076.753] SelectObject (hdc=0x640108b5, h=0xffffffff833009ce) returned 0x1b00017 [0076.753] MoveToEx (in: hdc=0x640108b5, x=1, y=21, lppt=0x215d1a8 | out: lppt=0x215d1a8) returned 1 [0076.753] LineTo (hdc=0x640108b5, x=24, y=21) returned 1 [0076.753] SetBkMode (hdc=0x640108b5, mode=2) returned 1 [0076.753] MoveToEx (in: hdc=0x640108b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.753] GetROP2 (hdc=0x640108b5) returned 13 [0076.753] GetBkMode (hdc=0x640108b5) returned 2 [0076.753] SetBkMode (hdc=0x640108b5, mode=1) returned 2 [0076.753] SelectObject (hdc=0x640108b5, h=0xffffffff833009ce) returned 0xffffffff833009ce [0076.753] MoveToEx (in: hdc=0x640108b5, x=24, y=21, lppt=0x215d1c0 | out: lppt=0x215d1c0) returned 1 [0076.753] LineTo (hdc=0x640108b5, x=24, y=0) returned 1 [0076.753] SetBkMode (hdc=0x640108b5, mode=2) returned 1 [0076.753] MoveToEx (in: hdc=0x640108b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.753] SelectObject (hdc=0x640108b5, h=0x1b00017) returned 0xffffffff833009ce [0076.753] DeleteObject (ho=0xffffffff833009ce) returned 1 [0076.754] RestoreDC (hdc=0x640108b5, nSavedDC=-1) returned 1 [0076.754] GdipReleaseDC (graphics=0x1be567f0, hdc=0x640108b5) returned 0x0 [0076.754] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0076.754] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x640108b5, x1=0, y1=0, rop=0xcc0020) returned 1 [0076.754] GdipReleaseDC (graphics=0x1be567f0, hdc=0x640108b5) returned 0x0 [0076.754] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0076.754] SelectObject (hdc=0x640108b5, h=0x185000f) returned 0x2405099f [0076.754] DeleteDC (hdc=0x640108b5) returned 1 [0076.754] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0076.754] EndPaint (hWnd=0x103c2, lpPaint=0x14e548) returned 1 [0076.755] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.755] IsWindowUnicode (hWnd=0x103c4) returned 1 [0076.755] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.755] TranslateMessage (lpMsg=0x14ef10) returned 0 [0076.755] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0076.755] BeginPaint (in: hWnd=0x103c4, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0076.755] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0076.755] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0076.755] GetStockObject (i=5) returned 0x1900015 [0076.755] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0076.755] CreateCompatibleDC (hdc=0xc0100ae) returned 0xffffffff970108c7 [0076.756] SelectObject (hdc=0xffffffff970108c7, h=0x2405099f) returned 0x185000f [0076.756] GdipCreateFromHDC (hdc=0xffffffff970108c7, graphics=0x14e528) returned 0x0 [0076.756] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0076.756] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0076.756] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0076.756] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0076.756] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0076.756] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486750 [0076.756] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486750) returned 0x0 [0076.757] LocalFree (hMem=0x1d486750) returned 0x0 [0076.757] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0076.757] GdipCreateRegion (region=0x14e550) returned 0x0 [0076.757] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.757] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0076.757] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0076.757] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd7e0dbd) returned 0x0 [0076.757] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.757] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0076.758] GetCurrentObject (hdc=0xffffffff970108c7, type=0x1) returned 0x1b00017 [0076.758] GetCurrentObject (hdc=0xffffffff970108c7, type=0x2) returned 0x1900010 [0076.758] GetCurrentObject (hdc=0xffffffff970108c7, type=0x7) returned 0x2405099f [0076.758] GetCurrentObject (hdc=0xffffffff970108c7, type=0x6) returned 0x18a0048 [0076.758] SaveDC (hdc=0xffffffff970108c7) returned 1 [0076.758] GetNearestColor (hdc=0xffffffff970108c7, color=0xf0f0f0) returned 0xf0f0f0 [0076.758] GetNearestColor (hdc=0xffffffff970108c7, color=0xa0a0a0) returned 0xa0a0a0 [0076.758] GetNearestColor (hdc=0xffffffff970108c7, color=0x696969) returned 0x696969 [0076.758] GetNearestColor (hdc=0xffffffff970108c7, color=0xa0a0a0) returned 0xa0a0a0 [0076.758] GetNearestColor (hdc=0xffffffff970108c7, color=0x0) returned 0x0 [0076.758] GetNearestColor (hdc=0xffffffff970108c7, color=0xffffff) returned 0xffffff [0076.758] GetNearestColor (hdc=0xffffffff970108c7, color=0xe5e5e5) returned 0xe5e5e5 [0076.758] GetNearestColor (hdc=0xffffffff970108c7, color=0xd8d8d8) returned 0xd8d8d8 [0076.758] GetNearestColor (hdc=0xffffffff970108c7, color=0x0) returned 0x0 [0076.758] RestoreDC (hdc=0xffffffff970108c7, nSavedDC=-1) returned 1 [0076.758] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff970108c7) returned 0x0 [0076.759] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.759] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÔ\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.759] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.759] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x215daf8) returned 0x0 [0076.759] GdipSetStringFormatAlign (format=0x1be57e60, align=0x1) returned 0x0 [0076.759] GdipSetStringFormatLineAlign (format=0x1be57e60, align=0x1) returned 0x0 [0076.759] GdipSetStringFormatHotkeyPrefix (format=0x1be57e60, hotkeyPrefix=2) returned 0x0 [0076.759] GdipGetStringFormatFlags (format=0x1be57e60, flags=0x14e378) returned 0x0 [0076.759] GdipGetStringFormatTrimming (format=0x1be57e60, trimming=0x14e378) returned 0x0 [0076.759] GdipGetStringFormatHotkeyPrefix (format=0x1be57e60, hotkeyPrefix=0x14e378) returned 0x0 [0076.759] GdipGetFontSize (font=0x1be57e60, size=0x14e378) returned 0x0 [0076.759] GdipGetFontStyle (font=0x1be57e60, style=0x14e378) returned 0x0 [0076.759] GdipDeleteStringFormat (format=0x1be57e60) returned 0x0 [0076.759] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.760] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.760] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0076.760] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x215dc28) returned 0x0 [0076.760] GdipSetStringFormatFlags (format=0x1be57a00, flags=0) returned 0x0 [0076.760] GdipSetStringFormatTrimming (format=0x1be57a00, trimming=0x1) returned 0x0 [0076.760] GdipSetStringFormatHotkeyPrefix (format=0x1be57a00, hotkeyPrefix=2) returned 0x0 [0076.760] GdipSetStringFormatAlign (format=0x1be57a00, align=0x1) returned 0x0 [0076.760] GdipSetStringFormatLineAlign (format=0x1be57a00, align=0x1) returned 0x0 [0076.760] GdipMeasureString (graphics=0x1be58070, string="2", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57a00, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0076.760] GdipDeleteStringFormat (format=0x1be57a00) returned 0x0 [0076.760] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0076.760] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.761] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.761] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0076.761] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.761] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0076.761] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0076.761] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0076.761] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486dd0 [0076.761] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486dd0) returned 0x0 [0076.762] LocalFree (hMem=0x1d486dd0) returned 0x0 [0076.762] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486610 [0076.762] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486610) returned 0x0 [0076.762] LocalFree (hMem=0x1d486610) returned 0x0 [0076.762] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0076.762] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0076.762] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0076.762] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0076.762] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.762] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0076.763] GetCurrentObject (hdc=0xffffffff970108c7, type=0x1) returned 0x1b00017 [0076.763] GetCurrentObject (hdc=0xffffffff970108c7, type=0x2) returned 0x1900010 [0076.763] GetCurrentObject (hdc=0xffffffff970108c7, type=0x7) returned 0x2405099f [0076.763] GetCurrentObject (hdc=0xffffffff970108c7, type=0x6) returned 0x18a0048 [0076.763] SaveDC (hdc=0xffffffff970108c7) returned 1 [0076.763] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x470409d6 [0076.763] GetClipRgn (hdc=0xffffffff970108c7, hrgn=0x470409d6) returned 0 [0076.763] SelectClipRgn (hdc=0xffffffff970108c7, hrgn=0x590407ff) returned 2 [0076.763] DeleteObject (ho=0x470409d6) returned 1 [0076.763] DeleteObject (ho=0x590407ff) returned 1 [0076.763] OffsetViewportOrgEx (in: hdc=0xffffffff970108c7, x=0, y=0, lppt=0x215dfe8 | out: lppt=0x215dfe8) returned 1 [0076.763] GetNearestColor (hdc=0xffffffff970108c7, color=0xf0f0f0) returned 0xf0f0f0 [0076.763] CreateSolidBrush (color=0xf0f0f0) returned 0x4a1009b2 [0076.763] FillRect (hDC=0xffffffff970108c7, lprc=0x14e1c8, hbr=0x4a1009b2) returned 1 [0076.763] DeleteObject (ho=0x4a1009b2) returned 1 [0076.763] RestoreDC (hdc=0xffffffff970108c7, nSavedDC=-1) returned 1 [0076.763] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff970108c7) returned 0x0 [0076.764] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.764] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0076.764] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.764] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x215e0e8) returned 0x0 [0076.764] GdipSetStringFormatAlign (format=0x1be57d10, align=0x1) returned 0x0 [0076.764] GdipSetStringFormatLineAlign (format=0x1be57d10, align=0x1) returned 0x0 [0076.764] GdipSetStringFormatHotkeyPrefix (format=0x1be57d10, hotkeyPrefix=2) returned 0x0 [0076.764] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0076.764] GdipDrawString (graphics=0x1be567f0, string="2", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57d10, brush=0x1be515e0) returned 0x0 [0076.764] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0076.764] GdipDeleteStringFormat (format=0x1be57d10) returned 0x0 [0076.764] GetFocus () returned 0x103c8 [0076.765] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.765] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÒ\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.765] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.765] GdipCreateRegion (region=0x14e030) returned 0x0 [0076.765] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.765] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0076.765] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0076.765] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0076.765] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486a10 [0076.765] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486a10) returned 0x0 [0076.766] LocalFree (hMem=0x1d486a10) returned 0x0 [0076.766] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486490 [0076.766] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486490) returned 0x0 [0076.766] LocalFree (hMem=0x1d486490) returned 0x0 [0076.767] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0076.767] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0076.767] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0076.767] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0076.767] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.767] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0076.767] GetCurrentObject (hdc=0xffffffff970108c7, type=0x1) returned 0x1b00017 [0076.767] GetCurrentObject (hdc=0xffffffff970108c7, type=0x2) returned 0x1900010 [0076.767] GetCurrentObject (hdc=0xffffffff970108c7, type=0x7) returned 0x2405099f [0076.767] GetCurrentObject (hdc=0xffffffff970108c7, type=0x6) returned 0x18a0048 [0076.767] SaveDC (hdc=0xffffffff970108c7) returned 1 [0076.767] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5a0407ff [0076.767] GetClipRgn (hdc=0xffffffff970108c7, hrgn=0x5a0407ff) returned 0 [0076.767] SelectClipRgn (hdc=0xffffffff970108c7, hrgn=0x480409d6) returned 2 [0076.767] DeleteObject (ho=0x5a0407ff) returned 1 [0076.767] DeleteObject (ho=0x480409d6) returned 1 [0076.767] OffsetViewportOrgEx (in: hdc=0xffffffff970108c7, x=0, y=0, lppt=0x215e4d0 | out: lppt=0x215e4d0) returned 1 [0076.767] GetROP2 (hdc=0xffffffff970108c7) returned 13 [0076.767] GetBkMode (hdc=0xffffffff970108c7) returned 2 [0076.767] SetBkMode (hdc=0xffffffff970108c7, mode=1) returned 2 [0076.768] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0xffffffff843009ce [0076.768] SelectObject (hdc=0xffffffff970108c7, h=0xffffffff843009ce) returned 0x1b00017 [0076.768] MoveToEx (in: hdc=0xffffffff970108c7, x=25, y=0, lppt=0x215e538 | out: lppt=0x215e538) returned 1 [0076.768] LineTo (hdc=0xffffffff970108c7, x=0, y=0) returned 1 [0076.768] SetBkMode (hdc=0xffffffff970108c7, mode=2) returned 1 [0076.768] MoveToEx (in: hdc=0xffffffff970108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.768] GetROP2 (hdc=0xffffffff970108c7) returned 13 [0076.768] GetBkMode (hdc=0xffffffff970108c7) returned 2 [0076.768] SetBkMode (hdc=0xffffffff970108c7, mode=1) returned 2 [0076.768] SelectObject (hdc=0xffffffff970108c7, h=0xffffffff843009ce) returned 0xffffffff843009ce [0076.768] MoveToEx (in: hdc=0xffffffff970108c7, x=0, y=0, lppt=0x215e550 | out: lppt=0x215e550) returned 1 [0076.768] LineTo (hdc=0xffffffff970108c7, x=0, y=22) returned 1 [0076.768] SetBkMode (hdc=0xffffffff970108c7, mode=2) returned 1 [0076.768] MoveToEx (in: hdc=0xffffffff970108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.768] SelectObject (hdc=0xffffffff970108c7, h=0x1b00017) returned 0xffffffff843009ce [0076.768] DeleteObject (ho=0xffffffff843009ce) returned 1 [0076.768] GetROP2 (hdc=0xffffffff970108c7) returned 13 [0076.768] GetBkMode (hdc=0xffffffff970108c7) returned 2 [0076.768] SetBkMode (hdc=0xffffffff970108c7, mode=1) returned 2 [0076.768] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x6e3006e1 [0076.768] SelectObject (hdc=0xffffffff970108c7, h=0x6e3006e1) returned 0x1b00017 [0076.768] MoveToEx (in: hdc=0xffffffff970108c7, x=0, y=22, lppt=0x215e5b8 | out: lppt=0x215e5b8) returned 1 [0076.769] LineTo (hdc=0xffffffff970108c7, x=25, y=22) returned 1 [0076.769] SetBkMode (hdc=0xffffffff970108c7, mode=2) returned 1 [0076.769] MoveToEx (in: hdc=0xffffffff970108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.769] GetROP2 (hdc=0xffffffff970108c7) returned 13 [0076.769] GetBkMode (hdc=0xffffffff970108c7) returned 2 [0076.769] SetBkMode (hdc=0xffffffff970108c7, mode=1) returned 2 [0076.769] SelectObject (hdc=0xffffffff970108c7, h=0x6e3006e1) returned 0x6e3006e1 [0076.769] MoveToEx (in: hdc=0xffffffff970108c7, x=25, y=22, lppt=0x215e5d0 | out: lppt=0x215e5d0) returned 1 [0076.769] LineTo (hdc=0xffffffff970108c7, x=25, y=-1) returned 1 [0076.769] SetBkMode (hdc=0xffffffff970108c7, mode=2) returned 1 [0076.769] MoveToEx (in: hdc=0xffffffff970108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.769] SelectObject (hdc=0xffffffff970108c7, h=0x1b00017) returned 0x6e3006e1 [0076.769] DeleteObject (ho=0x6e3006e1) returned 1 [0076.769] GetROP2 (hdc=0xffffffff970108c7) returned 13 [0076.769] GetBkMode (hdc=0xffffffff970108c7) returned 2 [0076.769] SetBkMode (hdc=0xffffffff970108c7, mode=1) returned 2 [0076.769] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xffffffff853009ce [0076.769] SelectObject (hdc=0xffffffff970108c7, h=0xffffffff853009ce) returned 0x1b00017 [0076.769] MoveToEx (in: hdc=0xffffffff970108c7, x=24, y=1, lppt=0x215e638 | out: lppt=0x215e638) returned 1 [0076.769] LineTo (hdc=0xffffffff970108c7, x=1, y=1) returned 1 [0076.769] SetBkMode (hdc=0xffffffff970108c7, mode=2) returned 1 [0076.769] MoveToEx (in: hdc=0xffffffff970108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.770] GetROP2 (hdc=0xffffffff970108c7) returned 13 [0076.770] GetBkMode (hdc=0xffffffff970108c7) returned 2 [0076.770] SetBkMode (hdc=0xffffffff970108c7, mode=1) returned 2 [0076.770] SelectObject (hdc=0xffffffff970108c7, h=0xffffffff853009ce) returned 0xffffffff853009ce [0076.770] MoveToEx (in: hdc=0xffffffff970108c7, x=1, y=1, lppt=0x215e650 | out: lppt=0x215e650) returned 1 [0076.770] LineTo (hdc=0xffffffff970108c7, x=1, y=21) returned 1 [0076.770] SetBkMode (hdc=0xffffffff970108c7, mode=2) returned 1 [0076.770] MoveToEx (in: hdc=0xffffffff970108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.819] SelectObject (hdc=0xffffffff970108c7, h=0x1b00017) returned 0xffffffff853009ce [0076.821] DeleteObject (ho=0xffffffff853009ce) returned 1 [0076.821] GetROP2 (hdc=0xffffffff970108c7) returned 13 [0076.821] GetBkMode (hdc=0xffffffff970108c7) returned 2 [0076.821] SetBkMode (hdc=0xffffffff970108c7, mode=1) returned 2 [0076.821] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x6f3006e1 [0076.821] SelectObject (hdc=0xffffffff970108c7, h=0x6f3006e1) returned 0x1b00017 [0076.821] MoveToEx (in: hdc=0xffffffff970108c7, x=1, y=21, lppt=0x215e6b8 | out: lppt=0x215e6b8) returned 1 [0076.821] LineTo (hdc=0xffffffff970108c7, x=24, y=21) returned 1 [0076.821] SetBkMode (hdc=0xffffffff970108c7, mode=2) returned 1 [0076.821] MoveToEx (in: hdc=0xffffffff970108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.821] GetROP2 (hdc=0xffffffff970108c7) returned 13 [0076.821] GetBkMode (hdc=0xffffffff970108c7) returned 2 [0076.821] SetBkMode (hdc=0xffffffff970108c7, mode=1) returned 2 [0076.821] SelectObject (hdc=0xffffffff970108c7, h=0x6f3006e1) returned 0x6f3006e1 [0076.821] MoveToEx (in: hdc=0xffffffff970108c7, x=24, y=21, lppt=0x215e6d0 | out: lppt=0x215e6d0) returned 1 [0076.821] LineTo (hdc=0xffffffff970108c7, x=24, y=0) returned 1 [0076.821] SetBkMode (hdc=0xffffffff970108c7, mode=2) returned 1 [0076.821] MoveToEx (in: hdc=0xffffffff970108c7, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.821] SelectObject (hdc=0xffffffff970108c7, h=0x1b00017) returned 0x6f3006e1 [0076.821] DeleteObject (ho=0x6f3006e1) returned 1 [0076.822] RestoreDC (hdc=0xffffffff970108c7, nSavedDC=-1) returned 1 [0076.822] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff970108c7) returned 0x0 [0076.822] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0076.822] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0xffffffff970108c7, x1=0, y1=0, rop=0xcc0020) returned 1 [0076.822] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff970108c7) returned 0x0 [0076.822] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0076.823] SelectObject (hdc=0xffffffff970108c7, h=0x185000f) returned 0x2405099f [0076.831] DeleteDC (hdc=0xffffffff970108c7) returned 1 [0076.831] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0076.832] EndPaint (hWnd=0x103c4, lpPaint=0x14e548) returned 1 [0076.835] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.835] IsWindowUnicode (hWnd=0x103c6) returned 1 [0076.835] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.835] TranslateMessage (lpMsg=0x14ef10) returned 0 [0076.835] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0076.835] BeginPaint (in: hWnd=0x103c6, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0076.836] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0076.837] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0076.844] GetStockObject (i=5) returned 0x1900015 [0076.846] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0076.846] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x4c010987 [0076.846] SelectObject (hdc=0x4c010987, h=0x2405099f) returned 0x185000f [0076.848] GdipCreateFromHDC (hdc=0x4c010987, graphics=0x14e528) returned 0x0 [0076.848] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0076.848] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0076.848] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0076.848] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0076.848] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0076.850] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486dd0 [0076.850] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486dd0) returned 0x0 [0076.851] LocalFree (hMem=0x1d486dd0) returned 0x0 [0076.852] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0076.852] GdipCreateRegion (region=0x14e550) returned 0x0 [0076.852] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.852] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0076.852] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0076.852] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd7b0dbd) returned 0x0 [0076.852] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.861] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0076.861] GetCurrentObject (hdc=0x4c010987, type=0x1) returned 0x1b00017 [0076.861] GetCurrentObject (hdc=0x4c010987, type=0x2) returned 0x1900010 [0076.861] GetCurrentObject (hdc=0x4c010987, type=0x7) returned 0x2405099f [0076.861] GetCurrentObject (hdc=0x4c010987, type=0x6) returned 0x18a0048 [0076.865] SaveDC (hdc=0x4c010987) returned 1 [0076.865] GetNearestColor (hdc=0x4c010987, color=0xf0f0f0) returned 0xf0f0f0 [0076.866] GetNearestColor (hdc=0x4c010987, color=0xa0a0a0) returned 0xa0a0a0 [0076.866] GetNearestColor (hdc=0x4c010987, color=0x696969) returned 0x696969 [0076.866] GetNearestColor (hdc=0x4c010987, color=0xa0a0a0) returned 0xa0a0a0 [0076.866] GetNearestColor (hdc=0x4c010987, color=0x0) returned 0x0 [0076.866] GetNearestColor (hdc=0x4c010987, color=0xffffff) returned 0xffffff [0076.866] GetNearestColor (hdc=0x4c010987, color=0xe5e5e5) returned 0xe5e5e5 [0076.866] GetNearestColor (hdc=0x4c010987, color=0xd8d8d8) returned 0xd8d8d8 [0076.866] GetNearestColor (hdc=0x4c010987, color=0x0) returned 0x0 [0076.866] RestoreDC (hdc=0x4c010987, nSavedDC=-1) returned 1 [0076.866] GdipReleaseDC (graphics=0x1be567f0, hdc=0x4c010987) returned 0x0 [0076.866] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExé\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.867] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.867] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x215f008) returned 0x0 [0076.867] GdipSetStringFormatAlign (format=0x1be57990, align=0x1) returned 0x0 [0076.867] GdipSetStringFormatLineAlign (format=0x1be57990, align=0x1) returned 0x0 [0076.867] GdipSetStringFormatHotkeyPrefix (format=0x1be57990, hotkeyPrefix=2) returned 0x0 [0076.867] GdipGetStringFormatFlags (format=0x1be57990, flags=0x14e378) returned 0x0 [0076.867] GdipGetStringFormatTrimming (format=0x1be57990, trimming=0x14e378) returned 0x0 [0076.867] GdipGetStringFormatHotkeyPrefix (format=0x1be57990, hotkeyPrefix=0x14e378) returned 0x0 [0076.867] GdipGetFontSize (font=0x1be57990, size=0x14e378) returned 0x0 [0076.867] GdipGetFontStyle (font=0x1be57990, style=0x14e378) returned 0x0 [0076.867] GdipDeleteStringFormat (format=0x1be57990) returned 0x0 [0076.867] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.867] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.867] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0076.868] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x215f138) returned 0x0 [0076.868] GdipSetStringFormatFlags (format=0x1be57920, flags=0) returned 0x0 [0076.868] GdipSetStringFormatTrimming (format=0x1be57920, trimming=0x1) returned 0x0 [0076.868] GdipSetStringFormatHotkeyPrefix (format=0x1be57920, hotkeyPrefix=2) returned 0x0 [0076.868] GdipSetStringFormatAlign (format=0x1be57920, align=0x1) returned 0x0 [0076.868] GdipSetStringFormatLineAlign (format=0x1be57920, align=0x1) returned 0x0 [0076.868] GdipMeasureString (graphics=0x1be58070, string="1", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57920, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0076.868] GdipDeleteStringFormat (format=0x1be57920) returned 0x0 [0076.868] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0076.868] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0076.868] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.868] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0076.868] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.868] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0076.869] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0076.869] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0076.869] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4862d0 [0076.869] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d4862d0) returned 0x0 [0076.869] LocalFree (hMem=0x1d4862d0) returned 0x0 [0076.869] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486850 [0076.869] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486850) returned 0x0 [0076.870] LocalFree (hMem=0x1d486850) returned 0x0 [0076.870] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0076.870] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0076.870] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0076.870] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0076.870] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.870] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0076.870] GetCurrentObject (hdc=0x4c010987, type=0x1) returned 0x1b00017 [0076.870] GetCurrentObject (hdc=0x4c010987, type=0x2) returned 0x1900010 [0076.870] GetCurrentObject (hdc=0x4c010987, type=0x7) returned 0x2405099f [0076.870] GetCurrentObject (hdc=0x4c010987, type=0x6) returned 0x18a0048 [0076.870] SaveDC (hdc=0x4c010987) returned 1 [0076.870] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x490409d6 [0076.871] GetClipRgn (hdc=0x4c010987, hrgn=0x490409d6) returned 0 [0076.871] SelectClipRgn (hdc=0x4c010987, hrgn=0x5b0407ff) returned 2 [0076.871] DeleteObject (ho=0x490409d6) returned 1 [0076.871] DeleteObject (ho=0x5b0407ff) returned 1 [0076.871] OffsetViewportOrgEx (in: hdc=0x4c010987, x=0, y=0, lppt=0x215f4f8 | out: lppt=0x215f4f8) returned 1 [0076.871] GetNearestColor (hdc=0x4c010987, color=0xf0f0f0) returned 0xf0f0f0 [0076.871] CreateSolidBrush (color=0xf0f0f0) returned 0x4b1009b2 [0076.871] FillRect (hDC=0x4c010987, lprc=0x14e1c8, hbr=0x4b1009b2) returned 1 [0076.871] DeleteObject (ho=0x4b1009b2) returned 1 [0076.871] RestoreDC (hdc=0x4c010987, nSavedDC=-1) returned 1 [0076.871] GdipReleaseDC (graphics=0x1be567f0, hdc=0x4c010987) returned 0x0 [0076.871] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0076.871] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.872] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x215f5f8) returned 0x0 [0076.872] GdipSetStringFormatAlign (format=0x1be57ed0, align=0x1) returned 0x0 [0076.872] GdipSetStringFormatLineAlign (format=0x1be57ed0, align=0x1) returned 0x0 [0076.872] GdipSetStringFormatHotkeyPrefix (format=0x1be57ed0, hotkeyPrefix=2) returned 0x0 [0076.872] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0076.872] GdipDrawString (graphics=0x1be567f0, string="1", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57ed0, brush=0x1be515e0) returned 0x0 [0076.872] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0076.872] GdipDeleteStringFormat (format=0x1be57ed0) returned 0x0 [0076.872] GetFocus () returned 0x103c8 [0076.872] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0076.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExç\x15\x02", lpUsedDefaultChar=0x0) returned 17 [0076.872] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.873] GdipCreateRegion (region=0x14e030) returned 0x0 [0076.873] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0076.873] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0076.873] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0076.873] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0076.873] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486e50 [0076.873] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486e50) returned 0x0 [0076.873] LocalFree (hMem=0x1d486e50) returned 0x0 [0076.873] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b50 [0076.874] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486b50) returned 0x0 [0076.874] LocalFree (hMem=0x1d486b50) returned 0x0 [0076.874] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0076.874] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0076.874] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0076.874] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0076.874] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0076.874] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0076.874] GetCurrentObject (hdc=0x4c010987, type=0x1) returned 0x1b00017 [0076.874] GetCurrentObject (hdc=0x4c010987, type=0x2) returned 0x1900010 [0076.874] GetCurrentObject (hdc=0x4c010987, type=0x7) returned 0x2405099f [0076.874] GetCurrentObject (hdc=0x4c010987, type=0x6) returned 0x18a0048 [0076.875] SaveDC (hdc=0x4c010987) returned 1 [0076.875] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5c0407ff [0076.875] GetClipRgn (hdc=0x4c010987, hrgn=0x5c0407ff) returned 0 [0076.875] SelectClipRgn (hdc=0x4c010987, hrgn=0x4a0409d6) returned 2 [0076.875] DeleteObject (ho=0x5c0407ff) returned 1 [0076.875] DeleteObject (ho=0x4a0409d6) returned 1 [0076.875] OffsetViewportOrgEx (in: hdc=0x4c010987, x=0, y=0, lppt=0x215f9e0 | out: lppt=0x215f9e0) returned 1 [0076.875] GetROP2 (hdc=0x4c010987) returned 13 [0076.875] GetBkMode (hdc=0x4c010987) returned 2 [0076.875] SetBkMode (hdc=0x4c010987, mode=1) returned 2 [0076.875] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x703006e1 [0076.875] SelectObject (hdc=0x4c010987, h=0x703006e1) returned 0x1b00017 [0076.875] MoveToEx (in: hdc=0x4c010987, x=25, y=0, lppt=0x215fa48 | out: lppt=0x215fa48) returned 1 [0076.875] LineTo (hdc=0x4c010987, x=0, y=0) returned 1 [0076.875] SetBkMode (hdc=0x4c010987, mode=2) returned 1 [0076.875] MoveToEx (in: hdc=0x4c010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.875] GetROP2 (hdc=0x4c010987) returned 13 [0076.875] GetBkMode (hdc=0x4c010987) returned 2 [0076.875] SetBkMode (hdc=0x4c010987, mode=1) returned 2 [0076.875] SelectObject (hdc=0x4c010987, h=0x703006e1) returned 0x703006e1 [0076.875] MoveToEx (in: hdc=0x4c010987, x=0, y=0, lppt=0x215fa60 | out: lppt=0x215fa60) returned 1 [0076.876] LineTo (hdc=0x4c010987, x=0, y=22) returned 1 [0076.876] SetBkMode (hdc=0x4c010987, mode=2) returned 1 [0076.876] MoveToEx (in: hdc=0x4c010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.876] SelectObject (hdc=0x4c010987, h=0x1b00017) returned 0x703006e1 [0076.876] DeleteObject (ho=0x703006e1) returned 1 [0076.876] GetROP2 (hdc=0x4c010987) returned 13 [0076.876] GetBkMode (hdc=0x4c010987) returned 2 [0076.876] SetBkMode (hdc=0x4c010987, mode=1) returned 2 [0076.876] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0xffffffff863009ce [0076.876] SelectObject (hdc=0x4c010987, h=0xffffffff863009ce) returned 0x1b00017 [0076.876] MoveToEx (in: hdc=0x4c010987, x=0, y=22, lppt=0x215fac8 | out: lppt=0x215fac8) returned 1 [0076.876] LineTo (hdc=0x4c010987, x=25, y=22) returned 1 [0076.876] SetBkMode (hdc=0x4c010987, mode=2) returned 1 [0076.876] MoveToEx (in: hdc=0x4c010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.876] GetROP2 (hdc=0x4c010987) returned 13 [0076.876] GetBkMode (hdc=0x4c010987) returned 2 [0076.876] SetBkMode (hdc=0x4c010987, mode=1) returned 2 [0076.876] SelectObject (hdc=0x4c010987, h=0xffffffff863009ce) returned 0xffffffff863009ce [0076.876] MoveToEx (in: hdc=0x4c010987, x=25, y=22, lppt=0x215fae0 | out: lppt=0x215fae0) returned 1 [0076.876] LineTo (hdc=0x4c010987, x=25, y=-1) returned 1 [0076.876] SetBkMode (hdc=0x4c010987, mode=2) returned 1 [0076.876] MoveToEx (in: hdc=0x4c010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.877] SelectObject (hdc=0x4c010987, h=0x1b00017) returned 0xffffffff863009ce [0076.877] DeleteObject (ho=0xffffffff863009ce) returned 1 [0076.877] GetROP2 (hdc=0x4c010987) returned 13 [0076.877] GetBkMode (hdc=0x4c010987) returned 2 [0076.877] SetBkMode (hdc=0x4c010987, mode=1) returned 2 [0076.877] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x713006e1 [0076.877] SelectObject (hdc=0x4c010987, h=0x713006e1) returned 0x1b00017 [0076.877] MoveToEx (in: hdc=0x4c010987, x=24, y=1, lppt=0x215fb48 | out: lppt=0x215fb48) returned 1 [0076.877] LineTo (hdc=0x4c010987, x=1, y=1) returned 1 [0076.877] SetBkMode (hdc=0x4c010987, mode=2) returned 1 [0076.877] MoveToEx (in: hdc=0x4c010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.877] GetROP2 (hdc=0x4c010987) returned 13 [0076.877] GetBkMode (hdc=0x4c010987) returned 2 [0076.877] SetBkMode (hdc=0x4c010987, mode=1) returned 2 [0076.877] SelectObject (hdc=0x4c010987, h=0x713006e1) returned 0x713006e1 [0076.877] MoveToEx (in: hdc=0x4c010987, x=1, y=1, lppt=0x215fb60 | out: lppt=0x215fb60) returned 1 [0076.877] LineTo (hdc=0x4c010987, x=1, y=21) returned 1 [0076.877] SetBkMode (hdc=0x4c010987, mode=2) returned 1 [0076.877] MoveToEx (in: hdc=0x4c010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.877] SelectObject (hdc=0x4c010987, h=0x1b00017) returned 0x713006e1 [0076.877] DeleteObject (ho=0x713006e1) returned 1 [0076.878] GetROP2 (hdc=0x4c010987) returned 13 [0076.878] GetBkMode (hdc=0x4c010987) returned 2 [0076.878] SetBkMode (hdc=0x4c010987, mode=1) returned 2 [0076.878] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xffffffff873009ce [0076.878] SelectObject (hdc=0x4c010987, h=0xffffffff873009ce) returned 0x1b00017 [0076.878] MoveToEx (in: hdc=0x4c010987, x=1, y=21, lppt=0x215fbc8 | out: lppt=0x215fbc8) returned 1 [0076.878] LineTo (hdc=0x4c010987, x=24, y=21) returned 1 [0076.878] SetBkMode (hdc=0x4c010987, mode=2) returned 1 [0076.878] MoveToEx (in: hdc=0x4c010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.878] GetROP2 (hdc=0x4c010987) returned 13 [0076.878] GetBkMode (hdc=0x4c010987) returned 2 [0076.878] SetBkMode (hdc=0x4c010987, mode=1) returned 2 [0076.878] SelectObject (hdc=0x4c010987, h=0xffffffff873009ce) returned 0xffffffff873009ce [0076.878] MoveToEx (in: hdc=0x4c010987, x=24, y=21, lppt=0x215fbe0 | out: lppt=0x215fbe0) returned 1 [0076.878] LineTo (hdc=0x4c010987, x=24, y=0) returned 1 [0076.878] SetBkMode (hdc=0x4c010987, mode=2) returned 1 [0076.878] MoveToEx (in: hdc=0x4c010987, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0076.878] SelectObject (hdc=0x4c010987, h=0x1b00017) returned 0xffffffff873009ce [0076.878] DeleteObject (ho=0xffffffff873009ce) returned 1 [0076.878] RestoreDC (hdc=0x4c010987, nSavedDC=-1) returned 1 [0076.878] GdipReleaseDC (graphics=0x1be567f0, hdc=0x4c010987) returned 0x0 [0076.879] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0076.879] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x4c010987, x1=0, y1=0, rop=0xcc0020) returned 1 [0076.879] GdipReleaseDC (graphics=0x1be567f0, hdc=0x4c010987) returned 0x0 [0076.879] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0076.882] SelectObject (hdc=0x4c010987, h=0x185000f) returned 0x2405099f [0076.882] DeleteDC (hdc=0x4c010987) returned 1 [0076.882] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0076.882] EndPaint (hWnd=0x103c6, lpPaint=0x14e548) returned 1 [0076.882] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.883] IsWindowUnicode (hWnd=0x103c8) returned 1 [0076.883] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.883] TranslateMessage (lpMsg=0x14ef10) returned 0 [0076.883] DispatchMessageW (lpMsg=0x14ef10) returned 0x1 [0076.883] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0076.883] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0076.883] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0076.883] SetTextColor (hdc=0x220106d6, color=0x0) returned 0x0 [0076.883] SetBkColor (hdc=0x220106d6, color=0xffffff) returned 0xffffff [0076.884] SetTextColor (hdc=0x220106d6, color=0x0) returned 0x0 [0076.884] SetBkColor (hdc=0x220106d6, color=0xffffff) returned 0xffffff [0076.884] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.884] IsWindowUnicode (hWnd=0x103ca) returned 1 [0076.884] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0076.884] TranslateMessage (lpMsg=0x14ef10) returned 0 [0076.884] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0076.884] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0076.885] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0076.885] WaitMessage () returned 1 [0077.411] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0077.411] IsWindowUnicode (hWnd=0x103c8) returned 1 [0077.411] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0077.411] TranslateMessage (lpMsg=0x14ef10) returned 0 [0077.411] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0077.412] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0077.412] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0077.412] WaitMessage () returned 1 [0077.811] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0077.811] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0077.813] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0077.814] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0077.814] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0077.815] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x46, wParam=0x0, lParam=0x14ed60) returned 0x0 [0077.815] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x46, wParam=0x0, lParam=0x14ed60) returned 0x0 [0077.816] GetWindowPlacement (in: hWnd=0x20372, lpwndpl=0x14e908 | out: lpwndpl=0x14e908) returned 1 [0077.816] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x47, wParam=0x0, lParam=0x14ed60) returned 0x0 [0077.816] GetClientRect (in: hWnd=0x20372, lpRect=0x14e7a0 | out: lpRect=0x14e7a0) returned 1 [0077.816] GetWindowRect (in: hWnd=0x20372, lpRect=0x14e7a0 | out: lpRect=0x14e7a0) returned 1 [0077.819] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0077.819] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0077.819] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0077.820] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x47, wParam=0x0, lParam=0x14ed60) returned 0x0 [0077.820] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0077.820] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0077.821] IsWindowUnicode (hWnd=0x103c8) returned 1 [0077.821] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0077.822] GetKeyState (nVirtKey=16) returned 0 [0077.822] GetKeyState (nVirtKey=17) returned 0 [0077.822] GetKeyState (nVirtKey=18) returned -128 [0077.823] TranslateMessage (lpMsg=0x14ef10) returned 1 [0077.823] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0077.823] GetKeyState (nVirtKey=16) returned 0 [0077.823] GetKeyState (nVirtKey=17) returned 0 [0077.823] GetKeyState (nVirtKey=18) returned -128 [0077.823] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0077.823] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0077.823] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0077.823] WaitMessage () returned 1 [0077.830] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0077.830] IsWindowUnicode (hWnd=0x103c8) returned 1 [0077.830] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0077.831] GetKeyState (nVirtKey=16) returned 0 [0077.831] GetKeyState (nVirtKey=17) returned 0 [0077.831] GetKeyState (nVirtKey=18) returned 0 [0077.831] TranslateMessage (lpMsg=0x14ef10) returned 1 [0077.831] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0077.831] GetKeyState (nVirtKey=16) returned 0 [0077.831] GetKeyState (nVirtKey=17) returned 0 [0077.831] GetKeyState (nVirtKey=18) returned 0 [0077.831] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0077.831] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0077.831] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0077.831] WaitMessage () returned 1 [0077.942] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0077.942] IsWindowUnicode (hWnd=0x103c8) returned 1 [0077.942] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0077.942] TranslateMessage (lpMsg=0x14ef10) returned 0 [0077.942] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0077.943] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0077.943] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0077.943] WaitMessage () returned 1 [0078.771] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0078.771] IsWindowUnicode (hWnd=0x103c8) returned 1 [0078.771] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0078.772] GetKeyState (nVirtKey=16) returned 0 [0078.772] GetKeyState (nVirtKey=17) returned 0 [0078.772] GetKeyState (nVirtKey=18) returned 0 [0078.773] GetKeyState (nVirtKey=16) returned 0 [0078.773] GetKeyState (nVirtKey=17) returned 0 [0078.773] GetKeyState (nVirtKey=18) returned 0 [0078.781] SendMessageW (hWnd=0x103c8, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x89 [0078.781] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x8d [0078.788] SendMessageW (hWnd=0x103c8, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x89 [0078.788] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x8d [0078.788] TranslateMessage (lpMsg=0x14ef10) returned 1 [0078.788] DispatchMessageW (lpMsg=0x14ef10) returned 0x1 [0078.788] GetKeyState (nVirtKey=16) returned 0 [0078.788] GetKeyState (nVirtKey=17) returned 0 [0078.788] GetKeyState (nVirtKey=18) returned 0 [0078.788] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x100, wParam=0x5b, lParam=0x15b0001) returned 0x1 [0078.788] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0078.789] IsWindowUnicode (hWnd=0x103c8) returned 1 [0078.789] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0078.789] GetKeyState (nVirtKey=16) returned 0 [0078.789] GetKeyState (nVirtKey=17) returned 0 [0078.789] GetKeyState (nVirtKey=18) returned 0 [0078.789] TranslateMessage (lpMsg=0x14ef10) returned 1 [0078.789] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0078.789] GetKeyState (nVirtKey=16) returned 0 [0078.789] GetKeyState (nVirtKey=17) returned 0 [0078.790] GetKeyState (nVirtKey=18) returned 0 [0078.790] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x101, wParam=0x44, lParam=0x80200001) returned 0x0 [0078.790] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0078.790] IsWindowUnicode (hWnd=0x103c8) returned 1 [0078.790] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0078.790] GetKeyState (nVirtKey=16) returned 0 [0078.790] GetKeyState (nVirtKey=17) returned 0 [0078.790] GetKeyState (nVirtKey=18) returned 0 [0078.790] TranslateMessage (lpMsg=0x14ef10) returned 1 [0078.790] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0078.790] GetKeyState (nVirtKey=16) returned 0 [0078.790] GetKeyState (nVirtKey=17) returned 0 [0078.791] GetKeyState (nVirtKey=18) returned 0 [0078.791] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x101, wParam=0x5b, lParam=0xc15b0001) returned 0x0 [0078.791] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0078.791] IsWindowUnicode (hWnd=0x103c8) returned 1 [0078.791] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0078.791] TranslateMessage (lpMsg=0x14ef10) returned 0 [0078.791] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0078.791] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0078.791] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0078.791] WaitMessage () returned 1 [0078.921] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0078.921] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0078.923] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0078.923] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0078.923] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0078.924] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x1c, wParam=0x0, lParam=0x674) returned 0x0 [0078.924] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x1c, wParam=0x0, lParam=0x674) returned 0x0 [0078.924] NtdllDefWindowProc_W (hWnd=0x30304, Msg=0x1c, wParam=0x0, lParam=0x674) returned 0x0 [0078.925] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x1 [0078.925] SetTextColor (hdc=0x220106d6, color=0x0) returned 0x0 [0078.925] SetBkColor (hdc=0x220106d6, color=0xffffff) returned 0xffffff [0078.934] SendMessageW (hWnd=0x103c8, Msg=0x2111, wParam=0x20003c8, lParam=0x103c8) returned 0x0 [0078.934] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0078.934] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0078.934] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0078.934] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0078.935] WaitMessage () returned 1 [0079.358] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.358] IsWindowUnicode (hWnd=0x103ca) returned 1 [0079.358] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.358] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.358] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.358] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0079.358] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0079.358] WaitMessage () returned 1 [0079.451] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.452] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x46, wParam=0x0, lParam=0x14ed60) returned 0x0 [0079.452] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x46, wParam=0x0, lParam=0x14ed60) returned 0x0 [0079.470] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.471] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0079.471] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0079.471] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0079.472] GetWindowPlacement (in: hWnd=0x20372, lpwndpl=0x14e928 | out: lpwndpl=0x14e928) returned 1 [0079.472] GetClientRect (in: hWnd=0x20372, lpRect=0x14e840 | out: lpRect=0x14e840) returned 1 [0079.472] GetWindowTextLengthW (hWnd=0x20372) returned 5 [0079.472] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0079.472] GetSystemMetrics (nIndex=42) returned 0 [0079.472] GetWindowTextW (in: hWnd=0x20372, lpString=0x14e5b0, nMaxCount=6 | out: lpString="Form1") returned 5 [0079.472] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xd, wParam=0x6, lParam=0x14e5b0) returned 0x5 [0079.472] GetClientRect (in: hWnd=0x20372, lpRect=0x14e628 | out: lpRect=0x14e628) returned 1 [0079.472] GetCurrentObject (hdc=0xc0100ae, type=0x1) returned 0x1b00017 [0079.472] GetCurrentObject (hdc=0xc0100ae, type=0x2) returned 0x1900010 [0079.472] GetCurrentObject (hdc=0xc0100ae, type=0x7) returned 0x6b0509bc [0079.472] GetCurrentObject (hdc=0xc0100ae, type=0x6) returned 0x18a0048 [0079.472] SaveDC (hdc=0xc0100ae) returned 1 [0079.472] GetNearestColor (hdc=0xc0100ae, color=0xf0f0f0) returned 0xf0f0f0 [0079.472] CreateSolidBrush (color=0xf0f0f0) returned 0x4c1009b2 [0079.473] FillRect (hDC=0xc0100ae, lprc=0x14e318, hbr=0x4c1009b2) returned 1 [0079.476] DeleteObject (ho=0x4c1009b2) returned 1 [0079.476] RestoreDC (hdc=0xc0100ae, nSavedDC=-1) returned 1 [0079.477] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.477] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.477] GetStockObject (i=5) returned 0x1900015 [0079.477] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.477] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0079.477] GetStockObject (i=5) returned 0x1900015 [0079.477] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.478] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0079.478] GetStockObject (i=5) returned 0x1900015 [0079.478] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.478] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.478] GetStockObject (i=5) returned 0x1900015 [0079.478] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.478] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0079.478] GetStockObject (i=5) returned 0x1900015 [0079.479] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.479] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0079.479] GetStockObject (i=5) returned 0x1900015 [0079.479] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.479] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.479] GetStockObject (i=5) returned 0x1900015 [0079.479] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.480] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0079.480] GetStockObject (i=5) returned 0x1900015 [0079.480] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.480] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0079.480] GetStockObject (i=5) returned 0x1900015 [0079.480] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.480] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.480] GetStockObject (i=5) returned 0x1900015 [0079.481] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.481] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0079.481] GetStockObject (i=5) returned 0x1900015 [0079.481] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.481] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0079.481] GetStockObject (i=5) returned 0x1900015 [0079.481] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.481] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.482] GetStockObject (i=5) returned 0x1900015 [0079.482] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.482] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0079.482] GetStockObject (i=5) returned 0x1900015 [0079.482] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.482] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0079.483] GetStockObject (i=5) returned 0x1900015 [0079.483] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.484] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.484] GetStockObject (i=5) returned 0x1900015 [0079.484] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.485] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0079.485] GetStockObject (i=5) returned 0x1900015 [0079.486] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.486] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0079.486] GetStockObject (i=5) returned 0x1900015 [0079.487] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.488] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0079.488] GetStockObject (i=5) returned 0x1900015 [0079.488] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0079.490] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0079.490] SetTextColor (hdc=0x1b0107ae, color=0x0) returned 0x0 [0079.490] SetBkColor (hdc=0x1b0107ae, color=0xffffff) returned 0xffffff [0079.491] GetWindowPlacement (in: hWnd=0x20372, lpwndpl=0x14e908 | out: lpwndpl=0x14e908) returned 1 [0079.491] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x47, wParam=0x0, lParam=0x14ed60) returned 0x0 [0079.491] GetClientRect (in: hWnd=0x20372, lpRect=0x14e7a0 | out: lpRect=0x14e7a0) returned 1 [0079.491] GetWindowRect (in: hWnd=0x20372, lpRect=0x14e7a0 | out: lpRect=0x14e7a0) returned 1 [0079.493] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0079.493] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0079.494] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0079.494] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x47, wParam=0x0, lParam=0x14ed60) returned 0x0 [0079.495] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x1c, wParam=0x1, lParam=0x6e4) returned 0x0 [0079.495] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x1c, wParam=0x1, lParam=0x6e4) returned 0x0 [0079.495] NtdllDefWindowProc_W (hWnd=0x30304, Msg=0x1c, wParam=0x1, lParam=0x6e4) returned 0x0 [0079.495] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0079.497] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0079.497] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0079.497] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0079.498] GetFocus () returned 0x0 [0079.498] SetFocus (hWnd=0x103c8) returned 0x0 [0079.498] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0079.499] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0079.499] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0079.499] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0079.499] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x1 [0079.500] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0079.500] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0 [0079.500] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0079.500] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0 [0079.500] SetTextColor (hdc=0x1b0107ae, color=0x0) returned 0x0 [0079.500] SetBkColor (hdc=0x1b0107ae, color=0xffffff) returned 0xffffff [0079.501] SendMessageW (hWnd=0x103c8, Msg=0x2111, wParam=0x10003c8, lParam=0x103c8) returned 0x0 [0079.501] IsWindowUnicode (hWnd=0x103c8) returned 1 [0079.501] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.502] GetKeyState (nVirtKey=16) returned 0 [0079.502] GetKeyState (nVirtKey=17) returned 0 [0079.502] GetKeyState (nVirtKey=18) returned -128 [0079.502] TranslateMessage (lpMsg=0x14ef10) returned 1 [0079.502] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.502] GetKeyState (nVirtKey=16) returned 0 [0079.502] GetKeyState (nVirtKey=17) returned 0 [0079.502] GetKeyState (nVirtKey=18) returned -128 [0079.502] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0079.502] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.502] IsWindowUnicode (hWnd=0x103c8) returned 1 [0079.502] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.503] GetKeyState (nVirtKey=16) returned 0 [0079.503] GetKeyState (nVirtKey=17) returned 0 [0079.503] GetKeyState (nVirtKey=18) returned 0 [0079.503] TranslateMessage (lpMsg=0x14ef10) returned 1 [0079.503] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.503] GetKeyState (nVirtKey=16) returned 0 [0079.503] GetKeyState (nVirtKey=17) returned 0 [0079.503] GetKeyState (nVirtKey=18) returned 0 [0079.503] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0079.503] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.503] IsWindowUnicode (hWnd=0x20372) returned 1 [0079.503] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.503] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.503] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.503] BeginPaint (in: hWnd=0x20372, lpPaint=0x14e618 | out: lpPaint=0x14e618) returned 0x220106d6 [0079.503] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0079.503] GetWindowTextLengthW (hWnd=0x20372) returned 5 [0079.503] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0079.503] GetSystemMetrics (nIndex=42) returned 0 [0079.503] GetWindowTextW (in: hWnd=0x20372, lpString=0x14e4c0, nMaxCount=6 | out: lpString="Form1") returned 5 [0079.503] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xd, wParam=0x6, lParam=0x14e4c0) returned 0x5 [0079.503] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0079.504] EndPaint (hWnd=0x20372, lpPaint=0x14e5b8) returned 1 [0079.504] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.504] IsWindowUnicode (hWnd=0x2028c) returned 1 [0079.504] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.504] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.504] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.504] BeginPaint (in: hWnd=0x2028c, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0079.504] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0079.504] CreateCompatibleDC (hdc=0x1b0107ae) returned 0xd0109db [0079.510] SelectObject (hdc=0xd0109db, h=0x2405099f) returned 0x185000f [0079.510] GdipCreateFromHDC (hdc=0xd0109db, graphics=0x14e528) returned 0x0 [0079.510] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0079.510] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0079.510] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0079.510] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.510] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0079.510] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486510 [0079.510] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486510) returned 0x0 [0079.510] LocalFree (hMem=0x1d486510) returned 0x0 [0079.510] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.510] GdipCreateRegion (region=0x14e550) returned 0x0 [0079.510] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.510] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0079.511] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0079.511] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd780dbd) returned 0x0 [0079.511] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.511] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0079.511] GetCurrentObject (hdc=0xd0109db, type=0x1) returned 0x1b00017 [0079.511] GetCurrentObject (hdc=0xd0109db, type=0x2) returned 0x1900010 [0079.511] GetCurrentObject (hdc=0xd0109db, type=0x7) returned 0x2405099f [0079.511] GetCurrentObject (hdc=0xd0109db, type=0x6) returned 0x18a0048 [0079.511] SaveDC (hdc=0xd0109db) returned 1 [0079.511] GetNearestColor (hdc=0xd0109db, color=0xf0f0f0) returned 0xf0f0f0 [0079.511] GetNearestColor (hdc=0xd0109db, color=0xa0a0a0) returned 0xa0a0a0 [0079.511] GetNearestColor (hdc=0xd0109db, color=0x696969) returned 0x696969 [0079.511] GetNearestColor (hdc=0xd0109db, color=0xa0a0a0) returned 0xa0a0a0 [0079.511] GetNearestColor (hdc=0xd0109db, color=0x0) returned 0x0 [0079.511] GetNearestColor (hdc=0xd0109db, color=0xffffff) returned 0xffffff [0079.511] GetNearestColor (hdc=0xd0109db, color=0xe5e5e5) returned 0xe5e5e5 [0079.511] GetNearestColor (hdc=0xd0109db, color=0xd8d8d8) returned 0xd8d8d8 [0079.511] GetNearestColor (hdc=0xd0109db, color=0x0) returned 0x0 [0079.512] RestoreDC (hdc=0xd0109db, nSavedDC=-1) returned 1 [0079.512] GdipReleaseDC (graphics=0x1be567f0, hdc=0xd0109db) returned 0x0 [0079.512] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.512] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x16\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.512] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.512] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2161d18) returned 0x0 [0079.512] GdipSetStringFormatAlign (format=0x1be57a00, align=0x1) returned 0x0 [0079.512] GdipSetStringFormatLineAlign (format=0x1be57a00, align=0x1) returned 0x0 [0079.512] GdipSetStringFormatHotkeyPrefix (format=0x1be57a00, hotkeyPrefix=2) returned 0x0 [0079.512] GdipGetStringFormatFlags (format=0x1be57a00, flags=0x14e378) returned 0x0 [0079.512] GdipGetStringFormatTrimming (format=0x1be57a00, trimming=0x14e378) returned 0x0 [0079.513] GdipGetStringFormatHotkeyPrefix (format=0x1be57a00, hotkeyPrefix=0x14e378) returned 0x0 [0079.513] GdipGetFontSize (font=0x1be57a00, size=0x14e378) returned 0x0 [0079.513] GdipGetFontStyle (font=0x1be57a00, style=0x14e378) returned 0x0 [0079.513] GdipDeleteStringFormat (format=0x1be57a00) returned 0x0 [0079.513] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.513] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.513] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.513] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0079.513] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2161e48) returned 0x0 [0079.513] GdipSetStringFormatFlags (format=0x1be57ca0, flags=0) returned 0x0 [0079.513] GdipSetStringFormatTrimming (format=0x1be57ca0, trimming=0x1) returned 0x0 [0079.513] GdipSetStringFormatHotkeyPrefix (format=0x1be57ca0, hotkeyPrefix=2) returned 0x0 [0079.513] GdipSetStringFormatAlign (format=0x1be57ca0, align=0x1) returned 0x0 [0079.514] GdipSetStringFormatLineAlign (format=0x1be57ca0, align=0x1) returned 0x0 [0079.514] GdipMeasureString (graphics=0x1be58070, string="*", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57ca0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0079.514] GdipDeleteStringFormat (format=0x1be57ca0) returned 0x0 [0079.514] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0079.514] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.514] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.514] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.514] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0079.514] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.514] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0079.514] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.514] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0079.514] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b50 [0079.514] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486b50) returned 0x0 [0079.514] LocalFree (hMem=0x1d486b50) returned 0x0 [0079.514] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486dd0 [0079.514] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486dd0) returned 0x0 [0079.515] LocalFree (hMem=0x1d486dd0) returned 0x0 [0079.515] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.515] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0079.515] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0079.515] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0079.515] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.515] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0079.515] GetCurrentObject (hdc=0xd0109db, type=0x1) returned 0x1b00017 [0079.515] GetCurrentObject (hdc=0xd0109db, type=0x2) returned 0x1900010 [0079.515] GetCurrentObject (hdc=0xd0109db, type=0x7) returned 0x2405099f [0079.515] GetCurrentObject (hdc=0xd0109db, type=0x6) returned 0x18a0048 [0079.515] SaveDC (hdc=0xd0109db) returned 1 [0079.516] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4b0409d6 [0079.516] GetClipRgn (hdc=0xd0109db, hrgn=0x4b0409d6) returned 0 [0079.516] SelectClipRgn (hdc=0xd0109db, hrgn=0x5d0407ff) returned 2 [0079.516] DeleteObject (ho=0x4b0409d6) returned 1 [0079.516] DeleteObject (ho=0x5d0407ff) returned 1 [0079.516] OffsetViewportOrgEx (in: hdc=0xd0109db, x=0, y=0, lppt=0x2162208 | out: lppt=0x2162208) returned 1 [0079.516] GetNearestColor (hdc=0xd0109db, color=0xf0f0f0) returned 0xf0f0f0 [0079.516] CreateSolidBrush (color=0xf0f0f0) returned 0x4d1009b2 [0079.516] FillRect (hDC=0xd0109db, lprc=0x14e1c8, hbr=0x4d1009b2) returned 1 [0079.516] DeleteObject (ho=0x4d1009b2) returned 1 [0079.516] RestoreDC (hdc=0xd0109db, nSavedDC=-1) returned 1 [0079.516] GdipReleaseDC (graphics=0x1be567f0, hdc=0xd0109db) returned 0x0 [0079.516] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0079.517] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.517] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2162308) returned 0x0 [0079.517] GdipSetStringFormatAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0079.517] GdipSetStringFormatLineAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0079.517] GdipSetStringFormatHotkeyPrefix (format=0x1be57ae0, hotkeyPrefix=2) returned 0x0 [0079.517] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0079.517] GdipDrawString (graphics=0x1be567f0, string="*", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57ae0, brush=0x1be515e0) returned 0x0 [0079.517] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0079.517] GdipDeleteStringFormat (format=0x1be57ae0) returned 0x0 [0079.517] GetFocus () returned 0x103c8 [0079.517] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.517] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x14\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.518] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.518] GdipCreateRegion (region=0x14e030) returned 0x0 [0079.518] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.518] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0079.518] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.518] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0079.518] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486950 [0079.518] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486950) returned 0x0 [0079.518] LocalFree (hMem=0x1d486950) returned 0x0 [0079.518] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486390 [0079.518] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486390) returned 0x0 [0079.518] LocalFree (hMem=0x1d486390) returned 0x0 [0079.518] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.518] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0079.518] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0079.518] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0079.518] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.518] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0079.518] GetCurrentObject (hdc=0xd0109db, type=0x1) returned 0x1b00017 [0079.518] GetCurrentObject (hdc=0xd0109db, type=0x2) returned 0x1900010 [0079.518] GetCurrentObject (hdc=0xd0109db, type=0x7) returned 0x2405099f [0079.519] GetCurrentObject (hdc=0xd0109db, type=0x6) returned 0x18a0048 [0079.519] SaveDC (hdc=0xd0109db) returned 1 [0079.519] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5e0407ff [0079.519] GetClipRgn (hdc=0xd0109db, hrgn=0x5e0407ff) returned 0 [0079.519] SelectClipRgn (hdc=0xd0109db, hrgn=0x4c0409d6) returned 2 [0079.519] DeleteObject (ho=0x5e0407ff) returned 1 [0079.519] DeleteObject (ho=0x4c0409d6) returned 1 [0079.519] OffsetViewportOrgEx (in: hdc=0xd0109db, x=0, y=0, lppt=0x21626f0 | out: lppt=0x21626f0) returned 1 [0079.519] GetROP2 (hdc=0xd0109db) returned 13 [0079.519] GetBkMode (hdc=0xd0109db) returned 2 [0079.519] SetBkMode (hdc=0xd0109db, mode=1) returned 2 [0079.519] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x3c300991 [0079.519] SelectObject (hdc=0xd0109db, h=0x3c300991) returned 0x1b00017 [0079.519] MoveToEx (in: hdc=0xd0109db, x=25, y=0, lppt=0x2162758 | out: lppt=0x2162758) returned 1 [0079.519] LineTo (hdc=0xd0109db, x=0, y=0) returned 1 [0079.519] SetBkMode (hdc=0xd0109db, mode=2) returned 1 [0079.519] MoveToEx (in: hdc=0xd0109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.519] GetROP2 (hdc=0xd0109db) returned 13 [0079.519] GetBkMode (hdc=0xd0109db) returned 2 [0079.519] SetBkMode (hdc=0xd0109db, mode=1) returned 2 [0079.520] SelectObject (hdc=0xd0109db, h=0x3c300991) returned 0x3c300991 [0079.520] MoveToEx (in: hdc=0xd0109db, x=0, y=0, lppt=0x2162770 | out: lppt=0x2162770) returned 1 [0079.520] LineTo (hdc=0xd0109db, x=0, y=22) returned 1 [0079.520] SetBkMode (hdc=0xd0109db, mode=2) returned 1 [0079.520] MoveToEx (in: hdc=0xd0109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.520] SelectObject (hdc=0xd0109db, h=0x1b00017) returned 0x3c300991 [0079.520] DeleteObject (ho=0x3c300991) returned 1 [0079.520] GetROP2 (hdc=0xd0109db) returned 13 [0079.520] GetBkMode (hdc=0xd0109db) returned 2 [0079.520] SetBkMode (hdc=0xd0109db, mode=1) returned 2 [0079.520] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x193009e0 [0079.520] SelectObject (hdc=0xd0109db, h=0x193009e0) returned 0x1b00017 [0079.520] MoveToEx (in: hdc=0xd0109db, x=0, y=22, lppt=0x21627d8 | out: lppt=0x21627d8) returned 1 [0079.520] LineTo (hdc=0xd0109db, x=25, y=22) returned 1 [0079.521] SetBkMode (hdc=0xd0109db, mode=2) returned 1 [0079.521] MoveToEx (in: hdc=0xd0109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.521] GetROP2 (hdc=0xd0109db) returned 13 [0079.521] GetBkMode (hdc=0xd0109db) returned 2 [0079.521] SetBkMode (hdc=0xd0109db, mode=1) returned 2 [0079.521] SelectObject (hdc=0xd0109db, h=0x193009e0) returned 0x193009e0 [0079.521] MoveToEx (in: hdc=0xd0109db, x=25, y=22, lppt=0x21627f0 | out: lppt=0x21627f0) returned 1 [0079.521] LineTo (hdc=0xd0109db, x=25, y=-1) returned 1 [0079.521] SetBkMode (hdc=0xd0109db, mode=2) returned 1 [0079.521] MoveToEx (in: hdc=0xd0109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.521] SelectObject (hdc=0xd0109db, h=0x1b00017) returned 0x193009e0 [0079.521] DeleteObject (ho=0x193009e0) returned 1 [0079.521] GetROP2 (hdc=0xd0109db) returned 13 [0079.521] GetBkMode (hdc=0xd0109db) returned 2 [0079.521] SetBkMode (hdc=0xd0109db, mode=1) returned 2 [0079.521] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x3d300991 [0079.521] SelectObject (hdc=0xd0109db, h=0x3d300991) returned 0x1b00017 [0079.521] MoveToEx (in: hdc=0xd0109db, x=24, y=1, lppt=0x2162858 | out: lppt=0x2162858) returned 1 [0079.521] LineTo (hdc=0xd0109db, x=1, y=1) returned 1 [0079.521] SetBkMode (hdc=0xd0109db, mode=2) returned 1 [0079.521] MoveToEx (in: hdc=0xd0109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.522] GetROP2 (hdc=0xd0109db) returned 13 [0079.522] GetBkMode (hdc=0xd0109db) returned 2 [0079.522] SetBkMode (hdc=0xd0109db, mode=1) returned 2 [0079.522] SelectObject (hdc=0xd0109db, h=0x3d300991) returned 0x3d300991 [0079.522] MoveToEx (in: hdc=0xd0109db, x=1, y=1, lppt=0x2162870 | out: lppt=0x2162870) returned 1 [0079.522] LineTo (hdc=0xd0109db, x=1, y=21) returned 1 [0079.522] SetBkMode (hdc=0xd0109db, mode=2) returned 1 [0079.522] MoveToEx (in: hdc=0xd0109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.522] SelectObject (hdc=0xd0109db, h=0x1b00017) returned 0x3d300991 [0079.522] DeleteObject (ho=0x3d300991) returned 1 [0079.522] GetROP2 (hdc=0xd0109db) returned 13 [0079.522] GetBkMode (hdc=0xd0109db) returned 2 [0079.522] SetBkMode (hdc=0xd0109db, mode=1) returned 2 [0079.522] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x1a3009e0 [0079.522] SelectObject (hdc=0xd0109db, h=0x1a3009e0) returned 0x1b00017 [0079.522] MoveToEx (in: hdc=0xd0109db, x=1, y=21, lppt=0x21628d8 | out: lppt=0x21628d8) returned 1 [0079.522] LineTo (hdc=0xd0109db, x=24, y=21) returned 1 [0079.522] SetBkMode (hdc=0xd0109db, mode=2) returned 1 [0079.522] MoveToEx (in: hdc=0xd0109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.522] GetROP2 (hdc=0xd0109db) returned 13 [0079.522] GetBkMode (hdc=0xd0109db) returned 2 [0079.522] SetBkMode (hdc=0xd0109db, mode=1) returned 2 [0079.522] SelectObject (hdc=0xd0109db, h=0x1a3009e0) returned 0x1a3009e0 [0079.523] MoveToEx (in: hdc=0xd0109db, x=24, y=21, lppt=0x21628f0 | out: lppt=0x21628f0) returned 1 [0079.523] LineTo (hdc=0xd0109db, x=24, y=0) returned 1 [0079.523] SetBkMode (hdc=0xd0109db, mode=2) returned 1 [0079.523] MoveToEx (in: hdc=0xd0109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.523] SelectObject (hdc=0xd0109db, h=0x1b00017) returned 0x1a3009e0 [0079.523] DeleteObject (ho=0x1a3009e0) returned 1 [0079.523] RestoreDC (hdc=0xd0109db, nSavedDC=-1) returned 1 [0079.523] GdipReleaseDC (graphics=0x1be567f0, hdc=0xd0109db) returned 0x0 [0079.523] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0079.523] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0xd0109db, x1=0, y1=0, rop=0xcc0020) returned 1 [0079.523] GdipReleaseDC (graphics=0x1be567f0, hdc=0xd0109db) returned 0x0 [0079.523] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0079.523] SelectObject (hdc=0xd0109db, h=0x185000f) returned 0x2405099f [0079.524] DeleteDC (hdc=0xd0109db) returned 1 [0079.524] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0079.524] EndPaint (hWnd=0x2028c, lpPaint=0x14e548) returned 1 [0079.524] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.524] IsWindowUnicode (hWnd=0x2028e) returned 1 [0079.524] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.524] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.524] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.524] BeginPaint (in: hWnd=0x2028e, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0079.524] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0079.524] CreateCompatibleDC (hdc=0xc0100ae) returned 0x50109dc [0079.524] SelectObject (hdc=0x50109dc, h=0x2405099f) returned 0x185000f [0079.524] GdipCreateFromHDC (hdc=0x50109dc, graphics=0x14e528) returned 0x0 [0079.524] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0079.525] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=58, height=23, combineMode=0x0) returned 0x0 [0079.525] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0079.525] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.525] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0079.525] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0079.525] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486110) returned 0x0 [0079.525] LocalFree (hMem=0x1d486110) returned 0x0 [0079.525] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.525] GdipCreateRegion (region=0x14e550) returned 0x0 [0079.525] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.525] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0079.525] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0079.525] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd750dbd) returned 0x0 [0079.525] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.525] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0079.525] GetCurrentObject (hdc=0x50109dc, type=0x1) returned 0x1b00017 [0079.525] GetCurrentObject (hdc=0x50109dc, type=0x2) returned 0x1900010 [0079.525] GetCurrentObject (hdc=0x50109dc, type=0x7) returned 0x2405099f [0079.525] GetCurrentObject (hdc=0x50109dc, type=0x6) returned 0x18a0048 [0079.526] SaveDC (hdc=0x50109dc) returned 1 [0079.526] GetNearestColor (hdc=0x50109dc, color=0xf0f0f0) returned 0xf0f0f0 [0079.526] GetNearestColor (hdc=0x50109dc, color=0xa0a0a0) returned 0xa0a0a0 [0079.526] GetNearestColor (hdc=0x50109dc, color=0x696969) returned 0x696969 [0079.526] GetNearestColor (hdc=0x50109dc, color=0xa0a0a0) returned 0xa0a0a0 [0079.526] GetNearestColor (hdc=0x50109dc, color=0x0) returned 0x0 [0079.526] GetNearestColor (hdc=0x50109dc, color=0xffffff) returned 0xffffff [0079.526] GetNearestColor (hdc=0x50109dc, color=0xe5e5e5) returned 0xe5e5e5 [0079.526] GetNearestColor (hdc=0x50109dc, color=0xd8d8d8) returned 0xd8d8d8 [0079.526] GetNearestColor (hdc=0x50109dc, color=0x0) returned 0x0 [0079.526] RestoreDC (hdc=0x50109dc, nSavedDC=-1) returned 1 [0079.526] GdipReleaseDC (graphics=0x1be567f0, hdc=0x50109dc) returned 0x0 [0079.526] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx+\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.527] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.527] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2163210) returned 0x0 [0079.527] GdipSetStringFormatAlign (format=0x1be57ed0, align=0x1) returned 0x0 [0079.527] GdipSetStringFormatLineAlign (format=0x1be57ed0, align=0x1) returned 0x0 [0079.527] GdipSetStringFormatHotkeyPrefix (format=0x1be57ed0, hotkeyPrefix=2) returned 0x0 [0079.527] GdipGetStringFormatFlags (format=0x1be57ed0, flags=0x14e378) returned 0x0 [0079.527] GdipGetStringFormatTrimming (format=0x1be57ed0, trimming=0x14e378) returned 0x0 [0079.527] GdipGetStringFormatHotkeyPrefix (format=0x1be57ed0, hotkeyPrefix=0x14e378) returned 0x0 [0079.527] GdipGetFontSize (font=0x1be57ed0, size=0x14e378) returned 0x0 [0079.527] GdipGetFontStyle (font=0x1be57ed0, style=0x14e378) returned 0x0 [0079.527] GdipDeleteStringFormat (format=0x1be57ed0) returned 0x0 [0079.527] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.527] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.527] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0079.528] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2163340) returned 0x0 [0079.528] GdipSetStringFormatFlags (format=0x1be57ae0, flags=0) returned 0x0 [0079.528] GdipSetStringFormatTrimming (format=0x1be57ae0, trimming=0x1) returned 0x0 [0079.528] GdipSetStringFormatHotkeyPrefix (format=0x1be57ae0, hotkeyPrefix=2) returned 0x0 [0079.528] GdipSetStringFormatAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0079.528] GdipSetStringFormatLineAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0079.528] GdipMeasureString (graphics=0x1be58070, string="=", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57ae0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0079.528] GdipDeleteStringFormat (format=0x1be57ae0) returned 0x0 [0079.528] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0079.528] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.528] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.528] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0079.529] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.529] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0079.529] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.529] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0079.529] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486e10 [0079.529] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486e10) returned 0x0 [0079.529] LocalFree (hMem=0x1d486e10) returned 0x0 [0079.529] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b50 [0079.529] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486b50) returned 0x0 [0079.529] LocalFree (hMem=0x1d486b50) returned 0x0 [0079.529] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.529] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0079.529] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0079.529] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0079.529] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.529] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0079.529] GetCurrentObject (hdc=0x50109dc, type=0x1) returned 0x1b00017 [0079.529] GetCurrentObject (hdc=0x50109dc, type=0x2) returned 0x1900010 [0079.529] GetCurrentObject (hdc=0x50109dc, type=0x7) returned 0x2405099f [0079.529] GetCurrentObject (hdc=0x50109dc, type=0x6) returned 0x18a0048 [0079.529] SaveDC (hdc=0x50109dc) returned 1 [0079.530] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4d0409d6 [0079.530] GetClipRgn (hdc=0x50109dc, hrgn=0x4d0409d6) returned 0 [0079.530] SelectClipRgn (hdc=0x50109dc, hrgn=0x5f0407ff) returned 2 [0079.530] DeleteObject (ho=0x4d0409d6) returned 1 [0079.530] DeleteObject (ho=0x5f0407ff) returned 1 [0079.530] OffsetViewportOrgEx (in: hdc=0x50109dc, x=0, y=0, lppt=0x2163700 | out: lppt=0x2163700) returned 1 [0079.530] GetNearestColor (hdc=0x50109dc, color=0xf0f0f0) returned 0xf0f0f0 [0079.530] CreateSolidBrush (color=0xf0f0f0) returned 0x4e1009b2 [0079.530] FillRect (hDC=0x50109dc, lprc=0x14e1c8, hbr=0x4e1009b2) returned 1 [0079.530] DeleteObject (ho=0x4e1009b2) returned 1 [0079.530] RestoreDC (hdc=0x50109dc, nSavedDC=-1) returned 1 [0079.530] GdipReleaseDC (graphics=0x1be567f0, hdc=0x50109dc) returned 0x0 [0079.530] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0079.530] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.530] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2163800) returned 0x0 [0079.531] GdipSetStringFormatAlign (format=0x1be57b50, align=0x1) returned 0x0 [0079.531] GdipSetStringFormatLineAlign (format=0x1be57b50, align=0x1) returned 0x0 [0079.531] GdipSetStringFormatHotkeyPrefix (format=0x1be57b50, hotkeyPrefix=2) returned 0x0 [0079.531] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0079.531] GdipDrawString (graphics=0x1be567f0, string="=", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57b50, brush=0x1be515e0) returned 0x0 [0079.531] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0079.531] GdipDeleteStringFormat (format=0x1be57b50) returned 0x0 [0079.531] GetFocus () returned 0x103c8 [0079.531] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx)\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.531] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.531] GdipCreateRegion (region=0x14e030) returned 0x0 [0079.532] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.532] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0079.532] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.532] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0079.532] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4862d0 [0079.532] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4862d0) returned 0x0 [0079.532] LocalFree (hMem=0x1d4862d0) returned 0x0 [0079.532] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4867d0 [0079.532] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4867d0) returned 0x0 [0079.532] LocalFree (hMem=0x1d4867d0) returned 0x0 [0079.532] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.532] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0079.532] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0079.532] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0079.532] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.532] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0079.532] GetCurrentObject (hdc=0x50109dc, type=0x1) returned 0x1b00017 [0079.532] GetCurrentObject (hdc=0x50109dc, type=0x2) returned 0x1900010 [0079.532] GetCurrentObject (hdc=0x50109dc, type=0x7) returned 0x2405099f [0079.532] GetCurrentObject (hdc=0x50109dc, type=0x6) returned 0x18a0048 [0079.532] SaveDC (hdc=0x50109dc) returned 1 [0079.532] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x600407ff [0079.533] GetClipRgn (hdc=0x50109dc, hrgn=0x600407ff) returned 0 [0079.533] SelectClipRgn (hdc=0x50109dc, hrgn=0x4e0409d6) returned 2 [0079.533] DeleteObject (ho=0x600407ff) returned 1 [0079.533] DeleteObject (ho=0x4e0409d6) returned 1 [0079.533] OffsetViewportOrgEx (in: hdc=0x50109dc, x=0, y=0, lppt=0x2163be8 | out: lppt=0x2163be8) returned 1 [0079.533] GetROP2 (hdc=0x50109dc) returned 13 [0079.533] GetBkMode (hdc=0x50109dc) returned 2 [0079.533] SetBkMode (hdc=0x50109dc, mode=1) returned 2 [0079.533] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x1b3009e0 [0079.533] SelectObject (hdc=0x50109dc, h=0x1b3009e0) returned 0x1b00017 [0079.533] MoveToEx (in: hdc=0x50109dc, x=57, y=0, lppt=0x2163c50 | out: lppt=0x2163c50) returned 1 [0079.533] LineTo (hdc=0x50109dc, x=0, y=0) returned 1 [0079.533] SetBkMode (hdc=0x50109dc, mode=2) returned 1 [0079.533] MoveToEx (in: hdc=0x50109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.533] GetROP2 (hdc=0x50109dc) returned 13 [0079.533] GetBkMode (hdc=0x50109dc) returned 2 [0079.533] SetBkMode (hdc=0x50109dc, mode=1) returned 2 [0079.533] SelectObject (hdc=0x50109dc, h=0x1b3009e0) returned 0x1b3009e0 [0079.533] MoveToEx (in: hdc=0x50109dc, x=0, y=0, lppt=0x2163c68 | out: lppt=0x2163c68) returned 1 [0079.533] LineTo (hdc=0x50109dc, x=0, y=22) returned 1 [0079.533] SetBkMode (hdc=0x50109dc, mode=2) returned 1 [0079.534] MoveToEx (in: hdc=0x50109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.534] SelectObject (hdc=0x50109dc, h=0x1b00017) returned 0x1b3009e0 [0079.534] DeleteObject (ho=0x1b3009e0) returned 1 [0079.534] GetROP2 (hdc=0x50109dc) returned 13 [0079.534] GetBkMode (hdc=0x50109dc) returned 2 [0079.534] SetBkMode (hdc=0x50109dc, mode=1) returned 2 [0079.534] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x3e300991 [0079.534] SelectObject (hdc=0x50109dc, h=0x3e300991) returned 0x1b00017 [0079.534] MoveToEx (in: hdc=0x50109dc, x=0, y=22, lppt=0x2163cd0 | out: lppt=0x2163cd0) returned 1 [0079.534] LineTo (hdc=0x50109dc, x=57, y=22) returned 1 [0079.534] SetBkMode (hdc=0x50109dc, mode=2) returned 1 [0079.534] MoveToEx (in: hdc=0x50109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.534] GetROP2 (hdc=0x50109dc) returned 13 [0079.534] GetBkMode (hdc=0x50109dc) returned 2 [0079.534] SetBkMode (hdc=0x50109dc, mode=1) returned 2 [0079.534] SelectObject (hdc=0x50109dc, h=0x3e300991) returned 0x3e300991 [0079.534] MoveToEx (in: hdc=0x50109dc, x=57, y=22, lppt=0x2163ce8 | out: lppt=0x2163ce8) returned 1 [0079.534] LineTo (hdc=0x50109dc, x=57, y=-1) returned 1 [0079.534] SetBkMode (hdc=0x50109dc, mode=2) returned 1 [0079.534] MoveToEx (in: hdc=0x50109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.534] SelectObject (hdc=0x50109dc, h=0x1b00017) returned 0x3e300991 [0079.535] DeleteObject (ho=0x3e300991) returned 1 [0079.535] GetROP2 (hdc=0x50109dc) returned 13 [0079.535] GetBkMode (hdc=0x50109dc) returned 2 [0079.535] SetBkMode (hdc=0x50109dc, mode=1) returned 2 [0079.535] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x1c3009e0 [0079.535] SelectObject (hdc=0x50109dc, h=0x1c3009e0) returned 0x1b00017 [0079.535] MoveToEx (in: hdc=0x50109dc, x=56, y=1, lppt=0x2163d50 | out: lppt=0x2163d50) returned 1 [0079.535] LineTo (hdc=0x50109dc, x=1, y=1) returned 1 [0079.535] SetBkMode (hdc=0x50109dc, mode=2) returned 1 [0079.535] MoveToEx (in: hdc=0x50109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.535] GetROP2 (hdc=0x50109dc) returned 13 [0079.535] GetBkMode (hdc=0x50109dc) returned 2 [0079.535] SetBkMode (hdc=0x50109dc, mode=1) returned 2 [0079.535] SelectObject (hdc=0x50109dc, h=0x1c3009e0) returned 0x1c3009e0 [0079.535] MoveToEx (in: hdc=0x50109dc, x=1, y=1, lppt=0x2163d68 | out: lppt=0x2163d68) returned 1 [0079.535] LineTo (hdc=0x50109dc, x=1, y=21) returned 1 [0079.535] SetBkMode (hdc=0x50109dc, mode=2) returned 1 [0079.535] MoveToEx (in: hdc=0x50109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.535] SelectObject (hdc=0x50109dc, h=0x1b00017) returned 0x1c3009e0 [0079.535] DeleteObject (ho=0x1c3009e0) returned 1 [0079.535] GetROP2 (hdc=0x50109dc) returned 13 [0079.535] GetBkMode (hdc=0x50109dc) returned 2 [0079.536] SetBkMode (hdc=0x50109dc, mode=1) returned 2 [0079.536] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x3f300991 [0079.536] SelectObject (hdc=0x50109dc, h=0x3f300991) returned 0x1b00017 [0079.536] MoveToEx (in: hdc=0x50109dc, x=1, y=21, lppt=0x2163dd0 | out: lppt=0x2163dd0) returned 1 [0079.536] LineTo (hdc=0x50109dc, x=56, y=21) returned 1 [0079.536] SetBkMode (hdc=0x50109dc, mode=2) returned 1 [0079.536] MoveToEx (in: hdc=0x50109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.536] GetROP2 (hdc=0x50109dc) returned 13 [0079.536] GetBkMode (hdc=0x50109dc) returned 2 [0079.536] SetBkMode (hdc=0x50109dc, mode=1) returned 2 [0079.539] SelectObject (hdc=0x50109dc, h=0x3f300991) returned 0x3f300991 [0079.539] MoveToEx (in: hdc=0x50109dc, x=56, y=21, lppt=0x2163de8 | out: lppt=0x2163de8) returned 1 [0079.539] LineTo (hdc=0x50109dc, x=56, y=0) returned 1 [0079.539] SetBkMode (hdc=0x50109dc, mode=2) returned 1 [0079.539] MoveToEx (in: hdc=0x50109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.539] SelectObject (hdc=0x50109dc, h=0x1b00017) returned 0x3f300991 [0079.539] DeleteObject (ho=0x3f300991) returned 1 [0079.539] RestoreDC (hdc=0x50109dc, nSavedDC=-1) returned 1 [0079.539] GdipReleaseDC (graphics=0x1be567f0, hdc=0x50109dc) returned 0x0 [0079.539] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0079.539] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=58, cy=23, hdcSrc=0x50109dc, x1=0, y1=0, rop=0xcc0020) returned 1 [0079.539] GdipReleaseDC (graphics=0x1be567f0, hdc=0x50109dc) returned 0x0 [0079.539] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0079.539] SelectObject (hdc=0x50109dc, h=0x185000f) returned 0x2405099f [0079.539] DeleteDC (hdc=0x50109dc) returned 1 [0079.539] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0079.540] EndPaint (hWnd=0x2028e, lpPaint=0x14e548) returned 1 [0079.540] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.540] IsWindowUnicode (hWnd=0x90038) returned 1 [0079.540] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.540] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.540] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.540] BeginPaint (in: hWnd=0x90038, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0079.540] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0079.540] CreateCompatibleDC (hdc=0x220106d6) returned 0x5201066f [0079.540] SelectObject (hdc=0x5201066f, h=0x2405099f) returned 0x185000f [0079.540] GdipCreateFromHDC (hdc=0x5201066f, graphics=0x14e528) returned 0x0 [0079.540] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0079.540] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=58, height=23, combineMode=0x0) returned 0x0 [0079.540] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0079.540] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.540] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0079.541] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486c90 [0079.541] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486c90) returned 0x0 [0079.541] LocalFree (hMem=0x1d486c90) returned 0x0 [0079.541] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.541] GdipCreateRegion (region=0x14e550) returned 0x0 [0079.541] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.541] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0079.541] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0079.541] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd720dbd) returned 0x0 [0079.541] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.541] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0079.541] GetCurrentObject (hdc=0x5201066f, type=0x1) returned 0x1b00017 [0079.541] GetCurrentObject (hdc=0x5201066f, type=0x2) returned 0x1900010 [0079.541] GetCurrentObject (hdc=0x5201066f, type=0x7) returned 0x2405099f [0079.541] GetCurrentObject (hdc=0x5201066f, type=0x6) returned 0x18a0048 [0079.541] SaveDC (hdc=0x5201066f) returned 1 [0079.541] GetNearestColor (hdc=0x5201066f, color=0xf0f0f0) returned 0xf0f0f0 [0079.541] GetNearestColor (hdc=0x5201066f, color=0xa0a0a0) returned 0xa0a0a0 [0079.542] GetNearestColor (hdc=0x5201066f, color=0x696969) returned 0x696969 [0079.542] GetNearestColor (hdc=0x5201066f, color=0xa0a0a0) returned 0xa0a0a0 [0079.542] GetNearestColor (hdc=0x5201066f, color=0x0) returned 0x0 [0079.542] GetNearestColor (hdc=0x5201066f, color=0xffffff) returned 0xffffff [0079.542] GetNearestColor (hdc=0x5201066f, color=0xe5e5e5) returned 0xe5e5e5 [0079.542] GetNearestColor (hdc=0x5201066f, color=0xd8d8d8) returned 0xd8d8d8 [0079.542] GetNearestColor (hdc=0x5201066f, color=0x0) returned 0x0 [0079.542] RestoreDC (hdc=0x5201066f, nSavedDC=-1) returned 1 [0079.542] GdipReleaseDC (graphics=0x1be567f0, hdc=0x5201066f) returned 0x0 [0079.542] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.542] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx@\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.542] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.542] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2164708) returned 0x0 [0079.543] GdipSetStringFormatAlign (format=0x1be57e60, align=0x1) returned 0x0 [0079.543] GdipSetStringFormatLineAlign (format=0x1be57e60, align=0x1) returned 0x0 [0079.543] GdipSetStringFormatHotkeyPrefix (format=0x1be57e60, hotkeyPrefix=2) returned 0x0 [0079.543] GdipGetStringFormatFlags (format=0x1be57e60, flags=0x14e378) returned 0x0 [0079.543] GdipGetStringFormatTrimming (format=0x1be57e60, trimming=0x14e378) returned 0x0 [0079.543] GdipGetStringFormatHotkeyPrefix (format=0x1be57e60, hotkeyPrefix=0x14e378) returned 0x0 [0079.543] GdipGetFontSize (font=0x1be57e60, size=0x14e378) returned 0x0 [0079.543] GdipGetFontStyle (font=0x1be57e60, style=0x14e378) returned 0x0 [0079.543] GdipDeleteStringFormat (format=0x1be57e60) returned 0x0 [0079.543] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.543] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.543] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0079.543] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2164838) returned 0x0 [0079.544] GdipSetStringFormatFlags (format=0x1be57e60, flags=0) returned 0x0 [0079.544] GdipSetStringFormatTrimming (format=0x1be57e60, trimming=0x1) returned 0x0 [0079.544] GdipSetStringFormatHotkeyPrefix (format=0x1be57e60, hotkeyPrefix=2) returned 0x0 [0079.544] GdipSetStringFormatAlign (format=0x1be57e60, align=0x1) returned 0x0 [0079.544] GdipSetStringFormatLineAlign (format=0x1be57e60, align=0x1) returned 0x0 [0079.544] GdipMeasureString (graphics=0x1be58070, string="log", length=3, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57e60, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0079.544] GdipDeleteStringFormat (format=0x1be57e60) returned 0x0 [0079.544] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0079.544] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.544] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.544] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.544] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0079.544] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.544] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0079.544] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.544] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0079.544] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b90 [0079.544] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486b90) returned 0x0 [0079.545] LocalFree (hMem=0x1d486b90) returned 0x0 [0079.545] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d485f50 [0079.545] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d485f50) returned 0x0 [0079.545] LocalFree (hMem=0x1d485f50) returned 0x0 [0079.545] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.545] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0079.545] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0079.545] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0079.545] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.545] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0079.545] GetCurrentObject (hdc=0x5201066f, type=0x1) returned 0x1b00017 [0079.545] GetCurrentObject (hdc=0x5201066f, type=0x2) returned 0x1900010 [0079.545] GetCurrentObject (hdc=0x5201066f, type=0x7) returned 0x2405099f [0079.545] GetCurrentObject (hdc=0x5201066f, type=0x6) returned 0x18a0048 [0079.545] SaveDC (hdc=0x5201066f) returned 1 [0079.545] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4f0409d6 [0079.545] GetClipRgn (hdc=0x5201066f, hrgn=0x4f0409d6) returned 0 [0079.545] SelectClipRgn (hdc=0x5201066f, hrgn=0x610407ff) returned 2 [0079.545] DeleteObject (ho=0x4f0409d6) returned 1 [0079.546] DeleteObject (ho=0x610407ff) returned 1 [0079.546] OffsetViewportOrgEx (in: hdc=0x5201066f, x=0, y=0, lppt=0x2164bf8 | out: lppt=0x2164bf8) returned 1 [0079.546] GetNearestColor (hdc=0x5201066f, color=0xf0f0f0) returned 0xf0f0f0 [0079.546] CreateSolidBrush (color=0xf0f0f0) returned 0x4f1009b2 [0079.546] FillRect (hDC=0x5201066f, lprc=0x14e1c8, hbr=0x4f1009b2) returned 1 [0079.546] DeleteObject (ho=0x4f1009b2) returned 1 [0079.546] RestoreDC (hdc=0x5201066f, nSavedDC=-1) returned 1 [0079.546] GdipReleaseDC (graphics=0x1be567f0, hdc=0x5201066f) returned 0x0 [0079.546] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.546] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0079.546] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.546] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2164cf8) returned 0x0 [0079.546] GdipSetStringFormatAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0079.546] GdipSetStringFormatLineAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0079.546] GdipSetStringFormatHotkeyPrefix (format=0x1be57ae0, hotkeyPrefix=2) returned 0x0 [0079.547] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0079.547] GdipDrawString (graphics=0x1be567f0, string="log", length=3, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57ae0, brush=0x1be515e0) returned 0x0 [0079.547] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0079.547] GdipDeleteStringFormat (format=0x1be57ae0) returned 0x0 [0079.547] GetFocus () returned 0x103c8 [0079.547] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.547] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx>\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.547] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.547] GdipCreateRegion (region=0x14e030) returned 0x0 [0079.547] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.547] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0079.547] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.547] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0079.548] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486050 [0079.548] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486050) returned 0x0 [0079.548] LocalFree (hMem=0x1d486050) returned 0x0 [0079.548] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486990 [0079.548] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486990) returned 0x0 [0079.548] LocalFree (hMem=0x1d486990) returned 0x0 [0079.548] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.548] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0079.548] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0079.548] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0079.548] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.548] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0079.548] GetCurrentObject (hdc=0x5201066f, type=0x1) returned 0x1b00017 [0079.548] GetCurrentObject (hdc=0x5201066f, type=0x2) returned 0x1900010 [0079.548] GetCurrentObject (hdc=0x5201066f, type=0x7) returned 0x2405099f [0079.548] GetCurrentObject (hdc=0x5201066f, type=0x6) returned 0x18a0048 [0079.548] SaveDC (hdc=0x5201066f) returned 1 [0079.548] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x620407ff [0079.548] GetClipRgn (hdc=0x5201066f, hrgn=0x620407ff) returned 0 [0079.548] SelectClipRgn (hdc=0x5201066f, hrgn=0x500409d6) returned 2 [0079.548] DeleteObject (ho=0x620407ff) returned 1 [0079.549] DeleteObject (ho=0x500409d6) returned 1 [0079.549] OffsetViewportOrgEx (in: hdc=0x5201066f, x=0, y=0, lppt=0x21650e0 | out: lppt=0x21650e0) returned 1 [0079.549] GetROP2 (hdc=0x5201066f) returned 13 [0079.549] GetBkMode (hdc=0x5201066f) returned 2 [0079.549] SetBkMode (hdc=0x5201066f, mode=1) returned 2 [0079.549] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x40300991 [0079.549] SelectObject (hdc=0x5201066f, h=0x40300991) returned 0x1b00017 [0079.549] MoveToEx (in: hdc=0x5201066f, x=57, y=0, lppt=0x2165148 | out: lppt=0x2165148) returned 1 [0079.549] LineTo (hdc=0x5201066f, x=0, y=0) returned 1 [0079.549] SetBkMode (hdc=0x5201066f, mode=2) returned 1 [0079.549] MoveToEx (in: hdc=0x5201066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.549] GetROP2 (hdc=0x5201066f) returned 13 [0079.549] GetBkMode (hdc=0x5201066f) returned 2 [0079.549] SetBkMode (hdc=0x5201066f, mode=1) returned 2 [0079.549] SelectObject (hdc=0x5201066f, h=0x40300991) returned 0x40300991 [0079.549] MoveToEx (in: hdc=0x5201066f, x=0, y=0, lppt=0x2165160 | out: lppt=0x2165160) returned 1 [0079.549] LineTo (hdc=0x5201066f, x=0, y=22) returned 1 [0079.549] SetBkMode (hdc=0x5201066f, mode=2) returned 1 [0079.549] MoveToEx (in: hdc=0x5201066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.549] SelectObject (hdc=0x5201066f, h=0x1b00017) returned 0x40300991 [0079.549] DeleteObject (ho=0x40300991) returned 1 [0079.549] GetROP2 (hdc=0x5201066f) returned 13 [0079.550] GetBkMode (hdc=0x5201066f) returned 2 [0079.550] SetBkMode (hdc=0x5201066f, mode=1) returned 2 [0079.550] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x1d3009e0 [0079.550] SelectObject (hdc=0x5201066f, h=0x1d3009e0) returned 0x1b00017 [0079.550] MoveToEx (in: hdc=0x5201066f, x=0, y=22, lppt=0x21651c8 | out: lppt=0x21651c8) returned 1 [0079.550] LineTo (hdc=0x5201066f, x=57, y=22) returned 1 [0079.550] SetBkMode (hdc=0x5201066f, mode=2) returned 1 [0079.550] MoveToEx (in: hdc=0x5201066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.550] GetROP2 (hdc=0x5201066f) returned 13 [0079.550] GetBkMode (hdc=0x5201066f) returned 2 [0079.550] SetBkMode (hdc=0x5201066f, mode=1) returned 2 [0079.550] SelectObject (hdc=0x5201066f, h=0x1d3009e0) returned 0x1d3009e0 [0079.550] MoveToEx (in: hdc=0x5201066f, x=57, y=22, lppt=0x21651e0 | out: lppt=0x21651e0) returned 1 [0079.550] LineTo (hdc=0x5201066f, x=57, y=-1) returned 1 [0079.550] SetBkMode (hdc=0x5201066f, mode=2) returned 1 [0079.550] MoveToEx (in: hdc=0x5201066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.550] SelectObject (hdc=0x5201066f, h=0x1b00017) returned 0x1d3009e0 [0079.550] DeleteObject (ho=0x1d3009e0) returned 1 [0079.550] GetROP2 (hdc=0x5201066f) returned 13 [0079.550] GetBkMode (hdc=0x5201066f) returned 2 [0079.550] SetBkMode (hdc=0x5201066f, mode=1) returned 2 [0079.550] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x41300991 [0079.550] SelectObject (hdc=0x5201066f, h=0x41300991) returned 0x1b00017 [0079.551] MoveToEx (in: hdc=0x5201066f, x=56, y=1, lppt=0x2165248 | out: lppt=0x2165248) returned 1 [0079.551] LineTo (hdc=0x5201066f, x=1, y=1) returned 1 [0079.551] SetBkMode (hdc=0x5201066f, mode=2) returned 1 [0079.551] MoveToEx (in: hdc=0x5201066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.551] GetROP2 (hdc=0x5201066f) returned 13 [0079.551] GetBkMode (hdc=0x5201066f) returned 2 [0079.551] SetBkMode (hdc=0x5201066f, mode=1) returned 2 [0079.551] SelectObject (hdc=0x5201066f, h=0x41300991) returned 0x41300991 [0079.551] MoveToEx (in: hdc=0x5201066f, x=1, y=1, lppt=0x2165260 | out: lppt=0x2165260) returned 1 [0079.551] LineTo (hdc=0x5201066f, x=1, y=21) returned 1 [0079.551] SetBkMode (hdc=0x5201066f, mode=2) returned 1 [0079.551] MoveToEx (in: hdc=0x5201066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.551] SelectObject (hdc=0x5201066f, h=0x1b00017) returned 0x41300991 [0079.551] DeleteObject (ho=0x41300991) returned 1 [0079.552] GetROP2 (hdc=0x5201066f) returned 13 [0079.552] GetBkMode (hdc=0x5201066f) returned 2 [0079.552] SetBkMode (hdc=0x5201066f, mode=1) returned 2 [0079.552] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x1e3009e0 [0079.552] SelectObject (hdc=0x5201066f, h=0x1e3009e0) returned 0x1b00017 [0079.552] MoveToEx (in: hdc=0x5201066f, x=1, y=21, lppt=0x21652c8 | out: lppt=0x21652c8) returned 1 [0079.552] LineTo (hdc=0x5201066f, x=56, y=21) returned 1 [0079.552] SetBkMode (hdc=0x5201066f, mode=2) returned 1 [0079.552] MoveToEx (in: hdc=0x5201066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.552] GetROP2 (hdc=0x5201066f) returned 13 [0079.552] GetBkMode (hdc=0x5201066f) returned 2 [0079.552] SetBkMode (hdc=0x5201066f, mode=1) returned 2 [0079.552] SelectObject (hdc=0x5201066f, h=0x1e3009e0) returned 0x1e3009e0 [0079.552] MoveToEx (in: hdc=0x5201066f, x=56, y=21, lppt=0x21652e0 | out: lppt=0x21652e0) returned 1 [0079.552] LineTo (hdc=0x5201066f, x=56, y=0) returned 1 [0079.552] SetBkMode (hdc=0x5201066f, mode=2) returned 1 [0079.552] MoveToEx (in: hdc=0x5201066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.552] SelectObject (hdc=0x5201066f, h=0x1b00017) returned 0x1e3009e0 [0079.552] DeleteObject (ho=0x1e3009e0) returned 1 [0079.552] RestoreDC (hdc=0x5201066f, nSavedDC=-1) returned 1 [0079.552] GdipReleaseDC (graphics=0x1be567f0, hdc=0x5201066f) returned 0x0 [0079.552] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0079.553] BitBlt (hdc=0x220106d6, x=0, y=0, cx=58, cy=23, hdcSrc=0x5201066f, x1=0, y1=0, rop=0xcc0020) returned 1 [0079.553] GdipReleaseDC (graphics=0x1be567f0, hdc=0x5201066f) returned 0x0 [0079.553] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0079.553] SelectObject (hdc=0x5201066f, h=0x185000f) returned 0x2405099f [0079.553] DeleteDC (hdc=0x5201066f) returned 1 [0079.553] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0079.553] EndPaint (hWnd=0x90038, lpPaint=0x14e548) returned 1 [0079.553] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.553] IsWindowUnicode (hWnd=0x20380) returned 1 [0079.553] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.553] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.553] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.553] BeginPaint (in: hWnd=0x20380, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0079.553] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0079.553] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x150109db [0079.554] SelectObject (hdc=0x150109db, h=0x2405099f) returned 0x185000f [0079.554] GdipCreateFromHDC (hdc=0x150109db, graphics=0x14e528) returned 0x0 [0079.554] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0079.554] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=32, height=23, combineMode=0x0) returned 0x0 [0079.554] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0079.554] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.554] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0079.554] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0079.554] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486110) returned 0x0 [0079.554] LocalFree (hMem=0x1d486110) returned 0x0 [0079.554] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.554] GdipCreateRegion (region=0x14e550) returned 0x0 [0079.554] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.554] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0079.554] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0079.554] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd6f0dbd) returned 0x0 [0079.554] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.554] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0079.554] GetCurrentObject (hdc=0x150109db, type=0x1) returned 0x1b00017 [0079.554] GetCurrentObject (hdc=0x150109db, type=0x2) returned 0x1900010 [0079.555] GetCurrentObject (hdc=0x150109db, type=0x7) returned 0x2405099f [0079.555] GetCurrentObject (hdc=0x150109db, type=0x6) returned 0x18a0048 [0079.555] SaveDC (hdc=0x150109db) returned 1 [0079.555] GetNearestColor (hdc=0x150109db, color=0xf0f0f0) returned 0xf0f0f0 [0079.555] GetNearestColor (hdc=0x150109db, color=0xa0a0a0) returned 0xa0a0a0 [0079.555] GetNearestColor (hdc=0x150109db, color=0x696969) returned 0x696969 [0079.555] GetNearestColor (hdc=0x150109db, color=0xa0a0a0) returned 0xa0a0a0 [0079.555] GetNearestColor (hdc=0x150109db, color=0x0) returned 0x0 [0079.555] GetNearestColor (hdc=0x150109db, color=0xffffff) returned 0xffffff [0079.555] GetNearestColor (hdc=0x150109db, color=0xe5e5e5) returned 0xe5e5e5 [0079.555] GetNearestColor (hdc=0x150109db, color=0xd8d8d8) returned 0xd8d8d8 [0079.555] GetNearestColor (hdc=0x150109db, color=0x0) returned 0x0 [0079.555] RestoreDC (hdc=0x150109db, nSavedDC=-1) returned 1 [0079.555] GdipReleaseDC (graphics=0x1be567f0, hdc=0x150109db) returned 0x0 [0079.555] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.555] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExU\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.556] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.556] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2165c00) returned 0x0 [0079.556] GdipSetStringFormatAlign (format=0x1be57990, align=0x1) returned 0x0 [0079.556] GdipSetStringFormatLineAlign (format=0x1be57990, align=0x1) returned 0x0 [0079.556] GdipSetStringFormatHotkeyPrefix (format=0x1be57990, hotkeyPrefix=2) returned 0x0 [0079.556] GdipGetStringFormatFlags (format=0x1be57990, flags=0x14e378) returned 0x0 [0079.556] GdipGetStringFormatTrimming (format=0x1be57990, trimming=0x14e378) returned 0x0 [0079.556] GdipGetStringFormatHotkeyPrefix (format=0x1be57990, hotkeyPrefix=0x14e378) returned 0x0 [0079.556] GdipGetFontSize (font=0x1be57990, size=0x14e378) returned 0x0 [0079.556] GdipGetFontStyle (font=0x1be57990, style=0x14e378) returned 0x0 [0079.556] GdipDeleteStringFormat (format=0x1be57990) returned 0x0 [0079.556] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.556] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.556] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.556] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0079.557] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2165d30) returned 0x0 [0079.557] GdipSetStringFormatFlags (format=0x1be578b0, flags=0) returned 0x0 [0079.557] GdipSetStringFormatTrimming (format=0x1be578b0, trimming=0x1) returned 0x0 [0079.557] GdipSetStringFormatHotkeyPrefix (format=0x1be578b0, hotkeyPrefix=2) returned 0x0 [0079.557] GdipSetStringFormatAlign (format=0x1be578b0, align=0x1) returned 0x0 [0079.557] GdipSetStringFormatLineAlign (format=0x1be578b0, align=0x1) returned 0x0 [0079.557] GdipMeasureString (graphics=0x1be58070, string="e^", length=2, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be578b0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0079.557] GdipDeleteStringFormat (format=0x1be578b0) returned 0x0 [0079.557] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0079.557] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.557] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.557] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.557] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0079.557] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.557] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0079.557] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.557] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0079.558] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4869d0 [0079.558] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d4869d0) returned 0x0 [0079.558] LocalFree (hMem=0x1d4869d0) returned 0x0 [0079.558] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4861d0 [0079.558] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d4861d0) returned 0x0 [0079.558] LocalFree (hMem=0x1d4861d0) returned 0x0 [0079.558] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.558] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0079.558] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0079.558] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0079.558] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.558] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0079.558] GetCurrentObject (hdc=0x150109db, type=0x1) returned 0x1b00017 [0079.558] GetCurrentObject (hdc=0x150109db, type=0x2) returned 0x1900010 [0079.558] GetCurrentObject (hdc=0x150109db, type=0x7) returned 0x2405099f [0079.558] GetCurrentObject (hdc=0x150109db, type=0x6) returned 0x18a0048 [0079.558] SaveDC (hdc=0x150109db) returned 1 [0079.558] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x510409d6 [0079.558] GetClipRgn (hdc=0x150109db, hrgn=0x510409d6) returned 0 [0079.559] SelectClipRgn (hdc=0x150109db, hrgn=0x630407ff) returned 2 [0079.559] DeleteObject (ho=0x510409d6) returned 1 [0079.559] DeleteObject (ho=0x630407ff) returned 1 [0079.559] OffsetViewportOrgEx (in: hdc=0x150109db, x=0, y=0, lppt=0x21660f0 | out: lppt=0x21660f0) returned 1 [0079.559] GetNearestColor (hdc=0x150109db, color=0xf0f0f0) returned 0xf0f0f0 [0079.559] CreateSolidBrush (color=0xf0f0f0) returned 0x501009b2 [0079.559] FillRect (hDC=0x150109db, lprc=0x14e1c8, hbr=0x501009b2) returned 1 [0079.559] DeleteObject (ho=0x501009b2) returned 1 [0079.559] RestoreDC (hdc=0x150109db, nSavedDC=-1) returned 1 [0079.559] GdipReleaseDC (graphics=0x1be567f0, hdc=0x150109db) returned 0x0 [0079.559] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.559] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0079.559] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.559] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21661f0) returned 0x0 [0079.560] GdipSetStringFormatAlign (format=0x1be57e60, align=0x1) returned 0x0 [0079.560] GdipSetStringFormatLineAlign (format=0x1be57e60, align=0x1) returned 0x0 [0079.560] GdipSetStringFormatHotkeyPrefix (format=0x1be57e60, hotkeyPrefix=2) returned 0x0 [0079.560] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0079.560] GdipDrawString (graphics=0x1be567f0, string="e^", length=2, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57e60, brush=0x1be515e0) returned 0x0 [0079.560] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0079.560] GdipDeleteStringFormat (format=0x1be57e60) returned 0x0 [0079.560] GetFocus () returned 0x103c8 [0079.560] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.560] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExS\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.560] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.560] GdipCreateRegion (region=0x14e030) returned 0x0 [0079.560] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.560] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0079.561] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.561] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0079.561] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486a10 [0079.561] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486a10) returned 0x0 [0079.561] LocalFree (hMem=0x1d486a10) returned 0x0 [0079.561] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486810 [0079.561] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486810) returned 0x0 [0079.561] LocalFree (hMem=0x1d486810) returned 0x0 [0079.561] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.561] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0079.561] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0079.561] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0079.561] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.561] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0079.561] GetCurrentObject (hdc=0x150109db, type=0x1) returned 0x1b00017 [0079.561] GetCurrentObject (hdc=0x150109db, type=0x2) returned 0x1900010 [0079.561] GetCurrentObject (hdc=0x150109db, type=0x7) returned 0x2405099f [0079.561] GetCurrentObject (hdc=0x150109db, type=0x6) returned 0x18a0048 [0079.561] SaveDC (hdc=0x150109db) returned 1 [0079.561] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x640407ff [0079.561] GetClipRgn (hdc=0x150109db, hrgn=0x640407ff) returned 0 [0079.561] SelectClipRgn (hdc=0x150109db, hrgn=0x520409d6) returned 2 [0079.562] DeleteObject (ho=0x640407ff) returned 1 [0079.562] DeleteObject (ho=0x520409d6) returned 1 [0079.562] OffsetViewportOrgEx (in: hdc=0x150109db, x=0, y=0, lppt=0x21665d8 | out: lppt=0x21665d8) returned 1 [0079.562] GetROP2 (hdc=0x150109db) returned 13 [0079.562] GetBkMode (hdc=0x150109db) returned 2 [0079.562] SetBkMode (hdc=0x150109db, mode=1) returned 2 [0079.562] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x1f3009e0 [0079.562] SelectObject (hdc=0x150109db, h=0x1f3009e0) returned 0x1b00017 [0079.562] MoveToEx (in: hdc=0x150109db, x=32, y=0, lppt=0x2166640 | out: lppt=0x2166640) returned 1 [0079.562] LineTo (hdc=0x150109db, x=0, y=0) returned 1 [0079.562] SetBkMode (hdc=0x150109db, mode=2) returned 1 [0079.562] MoveToEx (in: hdc=0x150109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.562] GetROP2 (hdc=0x150109db) returned 13 [0079.562] GetBkMode (hdc=0x150109db) returned 2 [0079.562] SetBkMode (hdc=0x150109db, mode=1) returned 2 [0079.562] SelectObject (hdc=0x150109db, h=0x1f3009e0) returned 0x1f3009e0 [0079.562] MoveToEx (in: hdc=0x150109db, x=0, y=0, lppt=0x2166658 | out: lppt=0x2166658) returned 1 [0079.562] LineTo (hdc=0x150109db, x=0, y=22) returned 1 [0079.562] SetBkMode (hdc=0x150109db, mode=2) returned 1 [0079.562] MoveToEx (in: hdc=0x150109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.562] SelectObject (hdc=0x150109db, h=0x1b00017) returned 0x1f3009e0 [0079.563] DeleteObject (ho=0x1f3009e0) returned 1 [0079.563] GetROP2 (hdc=0x150109db) returned 13 [0079.563] GetBkMode (hdc=0x150109db) returned 2 [0079.563] SetBkMode (hdc=0x150109db, mode=1) returned 2 [0079.563] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x42300991 [0079.563] SelectObject (hdc=0x150109db, h=0x42300991) returned 0x1b00017 [0079.563] MoveToEx (in: hdc=0x150109db, x=0, y=22, lppt=0x21666c0 | out: lppt=0x21666c0) returned 1 [0079.563] LineTo (hdc=0x150109db, x=32, y=22) returned 1 [0079.563] SetBkMode (hdc=0x150109db, mode=2) returned 1 [0079.563] MoveToEx (in: hdc=0x150109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.563] GetROP2 (hdc=0x150109db) returned 13 [0079.563] GetBkMode (hdc=0x150109db) returned 2 [0079.563] SetBkMode (hdc=0x150109db, mode=1) returned 2 [0079.563] SelectObject (hdc=0x150109db, h=0x42300991) returned 0x42300991 [0079.563] MoveToEx (in: hdc=0x150109db, x=32, y=22, lppt=0x21666d8 | out: lppt=0x21666d8) returned 1 [0079.563] LineTo (hdc=0x150109db, x=32, y=-1) returned 1 [0079.563] SetBkMode (hdc=0x150109db, mode=2) returned 1 [0079.563] MoveToEx (in: hdc=0x150109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.563] SelectObject (hdc=0x150109db, h=0x1b00017) returned 0x42300991 [0079.563] DeleteObject (ho=0x42300991) returned 1 [0079.563] GetROP2 (hdc=0x150109db) returned 13 [0079.563] GetBkMode (hdc=0x150109db) returned 2 [0079.563] SetBkMode (hdc=0x150109db, mode=1) returned 2 [0079.564] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x203009e0 [0079.564] SelectObject (hdc=0x150109db, h=0x203009e0) returned 0x1b00017 [0079.564] MoveToEx (in: hdc=0x150109db, x=31, y=1, lppt=0x2166740 | out: lppt=0x2166740) returned 1 [0079.564] LineTo (hdc=0x150109db, x=1, y=1) returned 1 [0079.564] SetBkMode (hdc=0x150109db, mode=2) returned 1 [0079.564] MoveToEx (in: hdc=0x150109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.564] GetROP2 (hdc=0x150109db) returned 13 [0079.564] GetBkMode (hdc=0x150109db) returned 2 [0079.564] SetBkMode (hdc=0x150109db, mode=1) returned 2 [0079.564] SelectObject (hdc=0x150109db, h=0x203009e0) returned 0x203009e0 [0079.564] MoveToEx (in: hdc=0x150109db, x=1, y=1, lppt=0x2166758 | out: lppt=0x2166758) returned 1 [0079.564] LineTo (hdc=0x150109db, x=1, y=21) returned 1 [0079.564] SetBkMode (hdc=0x150109db, mode=2) returned 1 [0079.564] MoveToEx (in: hdc=0x150109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.564] SelectObject (hdc=0x150109db, h=0x1b00017) returned 0x203009e0 [0079.564] DeleteObject (ho=0x203009e0) returned 1 [0079.564] GetROP2 (hdc=0x150109db) returned 13 [0079.564] GetBkMode (hdc=0x150109db) returned 2 [0079.564] SetBkMode (hdc=0x150109db, mode=1) returned 2 [0079.564] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x43300991 [0079.564] SelectObject (hdc=0x150109db, h=0x43300991) returned 0x1b00017 [0079.564] MoveToEx (in: hdc=0x150109db, x=1, y=21, lppt=0x21667c0 | out: lppt=0x21667c0) returned 1 [0079.564] LineTo (hdc=0x150109db, x=31, y=21) returned 1 [0079.565] SetBkMode (hdc=0x150109db, mode=2) returned 1 [0079.565] MoveToEx (in: hdc=0x150109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.565] GetROP2 (hdc=0x150109db) returned 13 [0079.565] GetBkMode (hdc=0x150109db) returned 2 [0079.565] SetBkMode (hdc=0x150109db, mode=1) returned 2 [0079.565] SelectObject (hdc=0x150109db, h=0x43300991) returned 0x43300991 [0079.565] MoveToEx (in: hdc=0x150109db, x=31, y=21, lppt=0x21667d8 | out: lppt=0x21667d8) returned 1 [0079.565] LineTo (hdc=0x150109db, x=31, y=0) returned 1 [0079.565] SetBkMode (hdc=0x150109db, mode=2) returned 1 [0079.565] MoveToEx (in: hdc=0x150109db, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.565] SelectObject (hdc=0x150109db, h=0x1b00017) returned 0x43300991 [0079.565] DeleteObject (ho=0x43300991) returned 1 [0079.565] RestoreDC (hdc=0x150109db, nSavedDC=-1) returned 1 [0079.565] GdipReleaseDC (graphics=0x1be567f0, hdc=0x150109db) returned 0x0 [0079.565] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0079.565] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=33, cy=23, hdcSrc=0x150109db, x1=0, y1=0, rop=0xcc0020) returned 1 [0079.565] GdipReleaseDC (graphics=0x1be567f0, hdc=0x150109db) returned 0x0 [0079.565] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0079.565] SelectObject (hdc=0x150109db, h=0x185000f) returned 0x2405099f [0079.565] DeleteDC (hdc=0x150109db) returned 1 [0079.566] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0079.566] EndPaint (hWnd=0x20380, lpPaint=0x14e548) returned 1 [0079.569] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.569] IsWindowUnicode (hWnd=0x20384) returned 1 [0079.569] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.569] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.569] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.569] BeginPaint (in: hWnd=0x20384, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0079.569] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0079.569] CreateCompatibleDC (hdc=0xc0100ae) returned 0xd0109dc [0079.569] SelectObject (hdc=0xd0109dc, h=0x2405099f) returned 0x185000f [0079.569] GdipCreateFromHDC (hdc=0xd0109dc, graphics=0x14e528) returned 0x0 [0079.569] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0079.569] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0079.569] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0079.569] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.569] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0079.570] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b90 [0079.570] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486b90) returned 0x0 [0079.570] LocalFree (hMem=0x1d486b90) returned 0x0 [0079.570] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.570] GdipCreateRegion (region=0x14e550) returned 0x0 [0079.570] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.570] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0079.570] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0079.570] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd6c0dbd) returned 0x0 [0079.570] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.570] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0079.570] GetCurrentObject (hdc=0xd0109dc, type=0x1) returned 0x1b00017 [0079.570] GetCurrentObject (hdc=0xd0109dc, type=0x2) returned 0x1900010 [0079.570] GetCurrentObject (hdc=0xd0109dc, type=0x7) returned 0x2405099f [0079.570] GetCurrentObject (hdc=0xd0109dc, type=0x6) returned 0x18a0048 [0079.570] SaveDC (hdc=0xd0109dc) returned 1 [0079.570] GetNearestColor (hdc=0xd0109dc, color=0xf0f0f0) returned 0xf0f0f0 [0079.570] GetNearestColor (hdc=0xd0109dc, color=0xa0a0a0) returned 0xa0a0a0 [0079.570] GetNearestColor (hdc=0xd0109dc, color=0x696969) returned 0x696969 [0079.570] GetNearestColor (hdc=0xd0109dc, color=0xa0a0a0) returned 0xa0a0a0 [0079.571] GetNearestColor (hdc=0xd0109dc, color=0x0) returned 0x0 [0079.571] GetNearestColor (hdc=0xd0109dc, color=0xffffff) returned 0xffffff [0079.571] GetNearestColor (hdc=0xd0109dc, color=0xe5e5e5) returned 0xe5e5e5 [0079.571] GetNearestColor (hdc=0xd0109dc, color=0xd8d8d8) returned 0xd8d8d8 [0079.571] GetNearestColor (hdc=0xd0109dc, color=0x0) returned 0x0 [0079.571] RestoreDC (hdc=0xd0109dc, nSavedDC=-1) returned 1 [0079.571] GdipReleaseDC (graphics=0x1be567f0, hdc=0xd0109dc) returned 0x0 [0079.571] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExj\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.571] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.571] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21670f8) returned 0x0 [0079.571] GdipSetStringFormatAlign (format=0x1be57b50, align=0x1) returned 0x0 [0079.571] GdipSetStringFormatLineAlign (format=0x1be57b50, align=0x1) returned 0x0 [0079.571] GdipSetStringFormatHotkeyPrefix (format=0x1be57b50, hotkeyPrefix=2) returned 0x0 [0079.572] GdipGetStringFormatFlags (format=0x1be57b50, flags=0x14e378) returned 0x0 [0079.572] GdipGetStringFormatTrimming (format=0x1be57b50, trimming=0x14e378) returned 0x0 [0079.572] GdipGetStringFormatHotkeyPrefix (format=0x1be57b50, hotkeyPrefix=0x14e378) returned 0x0 [0079.572] GdipGetFontSize (font=0x1be57b50, size=0x14e378) returned 0x0 [0079.572] GdipGetFontStyle (font=0x1be57b50, style=0x14e378) returned 0x0 [0079.572] GdipDeleteStringFormat (format=0x1be57b50) returned 0x0 [0079.572] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.572] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.572] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0079.572] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2167228) returned 0x0 [0079.572] GdipSetStringFormatFlags (format=0x1be57ae0, flags=0) returned 0x0 [0079.572] GdipSetStringFormatTrimming (format=0x1be57ae0, trimming=0x1) returned 0x0 [0079.572] GdipSetStringFormatHotkeyPrefix (format=0x1be57ae0, hotkeyPrefix=2) returned 0x0 [0079.573] GdipSetStringFormatAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0079.573] GdipSetStringFormatLineAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0079.573] GdipMeasureString (graphics=0x1be58070, string="/", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57ae0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0079.573] GdipDeleteStringFormat (format=0x1be57ae0) returned 0x0 [0079.573] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0079.573] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.573] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.573] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0079.573] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.573] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0079.573] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.573] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0079.573] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0079.573] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486110) returned 0x0 [0079.573] LocalFree (hMem=0x1d486110) returned 0x0 [0079.573] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486010 [0079.574] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486010) returned 0x0 [0079.574] LocalFree (hMem=0x1d486010) returned 0x0 [0079.574] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.574] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0079.574] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0079.574] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0079.574] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.574] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0079.574] GetCurrentObject (hdc=0xd0109dc, type=0x1) returned 0x1b00017 [0079.574] GetCurrentObject (hdc=0xd0109dc, type=0x2) returned 0x1900010 [0079.574] GetCurrentObject (hdc=0xd0109dc, type=0x7) returned 0x2405099f [0079.574] GetCurrentObject (hdc=0xd0109dc, type=0x6) returned 0x18a0048 [0079.574] SaveDC (hdc=0xd0109dc) returned 1 [0079.574] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x530409d6 [0079.574] GetClipRgn (hdc=0xd0109dc, hrgn=0x530409d6) returned 0 [0079.574] SelectClipRgn (hdc=0xd0109dc, hrgn=0x650407ff) returned 2 [0079.574] DeleteObject (ho=0x530409d6) returned 1 [0079.574] DeleteObject (ho=0x650407ff) returned 1 [0079.574] OffsetViewportOrgEx (in: hdc=0xd0109dc, x=0, y=0, lppt=0x21675e8 | out: lppt=0x21675e8) returned 1 [0079.574] GetNearestColor (hdc=0xd0109dc, color=0xf0f0f0) returned 0xf0f0f0 [0079.574] CreateSolidBrush (color=0xf0f0f0) returned 0x511009b2 [0079.575] FillRect (hDC=0xd0109dc, lprc=0x14e1c8, hbr=0x511009b2) returned 1 [0079.575] DeleteObject (ho=0x511009b2) returned 1 [0079.575] RestoreDC (hdc=0xd0109dc, nSavedDC=-1) returned 1 [0079.575] GdipReleaseDC (graphics=0x1be567f0, hdc=0xd0109dc) returned 0x0 [0079.575] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.575] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0079.575] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.575] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21676e8) returned 0x0 [0079.575] GdipSetStringFormatAlign (format=0x1be57f40, align=0x1) returned 0x0 [0079.575] GdipSetStringFormatLineAlign (format=0x1be57f40, align=0x1) returned 0x0 [0079.575] GdipSetStringFormatHotkeyPrefix (format=0x1be57f40, hotkeyPrefix=2) returned 0x0 [0079.575] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0079.575] GdipDrawString (graphics=0x1be567f0, string="/", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57f40, brush=0x1be515e0) returned 0x0 [0079.575] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0079.576] GdipDeleteStringFormat (format=0x1be57f40) returned 0x0 [0079.576] GetFocus () returned 0x103c8 [0079.601] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.602] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExh\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.602] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.603] GdipCreateRegion (region=0x14e030) returned 0x0 [0079.604] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.604] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0079.604] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.604] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0079.604] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4867d0 [0079.604] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d4867d0) returned 0x0 [0079.605] LocalFree (hMem=0x1d4867d0) returned 0x0 [0079.605] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486590 [0079.605] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486590) returned 0x0 [0079.605] LocalFree (hMem=0x1d486590) returned 0x0 [0079.605] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.605] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0079.605] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0079.605] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0079.606] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.606] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0079.606] GetCurrentObject (hdc=0xd0109dc, type=0x1) returned 0x1b00017 [0079.606] GetCurrentObject (hdc=0xd0109dc, type=0x2) returned 0x1900010 [0079.606] GetCurrentObject (hdc=0xd0109dc, type=0x7) returned 0x2405099f [0079.606] GetCurrentObject (hdc=0xd0109dc, type=0x6) returned 0x18a0048 [0079.607] SaveDC (hdc=0xd0109dc) returned 1 [0079.607] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x660407ff [0079.607] GetClipRgn (hdc=0xd0109dc, hrgn=0x660407ff) returned 0 [0079.607] SelectClipRgn (hdc=0xd0109dc, hrgn=0x540409d6) returned 2 [0079.607] DeleteObject (ho=0x660407ff) returned 1 [0079.607] DeleteObject (ho=0x540409d6) returned 1 [0079.607] OffsetViewportOrgEx (in: hdc=0xd0109dc, x=0, y=0, lppt=0x2167ad0 | out: lppt=0x2167ad0) returned 1 [0079.607] GetROP2 (hdc=0xd0109dc) returned 13 [0079.608] GetBkMode (hdc=0xd0109dc) returned 2 [0079.608] SetBkMode (hdc=0xd0109dc, mode=1) returned 2 [0079.608] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x44300991 [0079.608] SelectObject (hdc=0xd0109dc, h=0x44300991) returned 0x1b00017 [0079.608] MoveToEx (in: hdc=0xd0109dc, x=25, y=0, lppt=0x2167b38 | out: lppt=0x2167b38) returned 1 [0079.608] LineTo (hdc=0xd0109dc, x=0, y=0) returned 1 [0079.608] SetBkMode (hdc=0xd0109dc, mode=2) returned 1 [0079.608] MoveToEx (in: hdc=0xd0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.608] GetROP2 (hdc=0xd0109dc) returned 13 [0079.608] GetBkMode (hdc=0xd0109dc) returned 2 [0079.609] SetBkMode (hdc=0xd0109dc, mode=1) returned 2 [0079.609] SelectObject (hdc=0xd0109dc, h=0x44300991) returned 0x44300991 [0079.609] MoveToEx (in: hdc=0xd0109dc, x=0, y=0, lppt=0x2167b50 | out: lppt=0x2167b50) returned 1 [0079.609] LineTo (hdc=0xd0109dc, x=0, y=22) returned 1 [0079.609] SetBkMode (hdc=0xd0109dc, mode=2) returned 1 [0079.609] MoveToEx (in: hdc=0xd0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.609] SelectObject (hdc=0xd0109dc, h=0x1b00017) returned 0x44300991 [0079.609] DeleteObject (ho=0x44300991) returned 1 [0079.609] GetROP2 (hdc=0xd0109dc) returned 13 [0079.609] GetBkMode (hdc=0xd0109dc) returned 2 [0079.609] SetBkMode (hdc=0xd0109dc, mode=1) returned 2 [0079.610] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x213009e0 [0079.610] SelectObject (hdc=0xd0109dc, h=0x213009e0) returned 0x1b00017 [0079.610] MoveToEx (in: hdc=0xd0109dc, x=0, y=22, lppt=0x2167bb8 | out: lppt=0x2167bb8) returned 1 [0079.610] LineTo (hdc=0xd0109dc, x=25, y=22) returned 1 [0079.610] SetBkMode (hdc=0xd0109dc, mode=2) returned 1 [0079.610] MoveToEx (in: hdc=0xd0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.610] GetROP2 (hdc=0xd0109dc) returned 13 [0079.610] GetBkMode (hdc=0xd0109dc) returned 2 [0079.610] SetBkMode (hdc=0xd0109dc, mode=1) returned 2 [0079.610] SelectObject (hdc=0xd0109dc, h=0x213009e0) returned 0x213009e0 [0079.610] MoveToEx (in: hdc=0xd0109dc, x=25, y=22, lppt=0x2167bd0 | out: lppt=0x2167bd0) returned 1 [0079.610] LineTo (hdc=0xd0109dc, x=25, y=-1) returned 1 [0079.611] SetBkMode (hdc=0xd0109dc, mode=2) returned 1 [0079.611] MoveToEx (in: hdc=0xd0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.611] SelectObject (hdc=0xd0109dc, h=0x1b00017) returned 0x213009e0 [0079.611] DeleteObject (ho=0x213009e0) returned 1 [0079.611] GetROP2 (hdc=0xd0109dc) returned 13 [0079.611] GetBkMode (hdc=0xd0109dc) returned 2 [0079.611] SetBkMode (hdc=0xd0109dc, mode=1) returned 2 [0079.611] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x45300991 [0079.611] SelectObject (hdc=0xd0109dc, h=0x45300991) returned 0x1b00017 [0079.611] MoveToEx (in: hdc=0xd0109dc, x=24, y=1, lppt=0x2167c38 | out: lppt=0x2167c38) returned 1 [0079.611] LineTo (hdc=0xd0109dc, x=1, y=1) returned 1 [0079.612] SetBkMode (hdc=0xd0109dc, mode=2) returned 1 [0079.612] MoveToEx (in: hdc=0xd0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.612] GetROP2 (hdc=0xd0109dc) returned 13 [0079.612] GetBkMode (hdc=0xd0109dc) returned 2 [0079.612] SetBkMode (hdc=0xd0109dc, mode=1) returned 2 [0079.612] SelectObject (hdc=0xd0109dc, h=0x45300991) returned 0x45300991 [0079.612] MoveToEx (in: hdc=0xd0109dc, x=1, y=1, lppt=0x2167c50 | out: lppt=0x2167c50) returned 1 [0079.612] LineTo (hdc=0xd0109dc, x=1, y=21) returned 1 [0079.612] SetBkMode (hdc=0xd0109dc, mode=2) returned 1 [0079.612] MoveToEx (in: hdc=0xd0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.612] SelectObject (hdc=0xd0109dc, h=0x1b00017) returned 0x45300991 [0079.612] DeleteObject (ho=0x45300991) returned 1 [0079.613] GetROP2 (hdc=0xd0109dc) returned 13 [0079.613] GetBkMode (hdc=0xd0109dc) returned 2 [0079.613] SetBkMode (hdc=0xd0109dc, mode=1) returned 2 [0079.613] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x223009e0 [0079.613] SelectObject (hdc=0xd0109dc, h=0x223009e0) returned 0x1b00017 [0079.613] MoveToEx (in: hdc=0xd0109dc, x=1, y=21, lppt=0x2167cb8 | out: lppt=0x2167cb8) returned 1 [0079.613] LineTo (hdc=0xd0109dc, x=24, y=21) returned 1 [0079.613] SetBkMode (hdc=0xd0109dc, mode=2) returned 1 [0079.613] MoveToEx (in: hdc=0xd0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.613] GetROP2 (hdc=0xd0109dc) returned 13 [0079.613] GetBkMode (hdc=0xd0109dc) returned 2 [0079.613] SetBkMode (hdc=0xd0109dc, mode=1) returned 2 [0079.613] SelectObject (hdc=0xd0109dc, h=0x223009e0) returned 0x223009e0 [0079.613] MoveToEx (in: hdc=0xd0109dc, x=24, y=21, lppt=0x2167cd0 | out: lppt=0x2167cd0) returned 1 [0079.613] LineTo (hdc=0xd0109dc, x=24, y=0) returned 1 [0079.613] SetBkMode (hdc=0xd0109dc, mode=2) returned 1 [0079.613] MoveToEx (in: hdc=0xd0109dc, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.613] SelectObject (hdc=0xd0109dc, h=0x1b00017) returned 0x223009e0 [0079.613] DeleteObject (ho=0x223009e0) returned 1 [0079.613] RestoreDC (hdc=0xd0109dc, nSavedDC=-1) returned 1 [0079.614] GdipReleaseDC (graphics=0x1be567f0, hdc=0xd0109dc) returned 0x0 [0079.614] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0079.614] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0xd0109dc, x1=0, y1=0, rop=0xcc0020) returned 1 [0079.614] GdipReleaseDC (graphics=0x1be567f0, hdc=0xd0109dc) returned 0x0 [0079.614] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0079.614] SelectObject (hdc=0xd0109dc, h=0x185000f) returned 0x2405099f [0079.614] DeleteDC (hdc=0xd0109dc) returned 1 [0079.614] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0079.615] EndPaint (hWnd=0x20384, lpPaint=0x14e548) returned 1 [0079.615] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.615] IsWindowUnicode (hWnd=0x50276) returned 1 [0079.615] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.615] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.615] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.615] BeginPaint (in: hWnd=0x50276, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0079.615] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0079.615] CreateCompatibleDC (hdc=0x220106d6) returned 0x5b01066f [0079.615] SelectObject (hdc=0x5b01066f, h=0x2405099f) returned 0x185000f [0079.616] GdipCreateFromHDC (hdc=0x5b01066f, graphics=0x14e528) returned 0x0 [0079.616] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0079.616] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0079.616] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0079.616] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.616] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0079.616] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486090 [0079.616] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486090) returned 0x0 [0079.616] LocalFree (hMem=0x1d486090) returned 0x0 [0079.616] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.616] GdipCreateRegion (region=0x14e550) returned 0x0 [0079.616] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.616] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0079.616] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0079.616] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd690dbd) returned 0x0 [0079.616] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.617] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0079.617] GetCurrentObject (hdc=0x5b01066f, type=0x1) returned 0x1b00017 [0079.617] GetCurrentObject (hdc=0x5b01066f, type=0x2) returned 0x1900010 [0079.617] GetCurrentObject (hdc=0x5b01066f, type=0x7) returned 0x2405099f [0079.617] GetCurrentObject (hdc=0x5b01066f, type=0x6) returned 0x18a0048 [0079.617] SaveDC (hdc=0x5b01066f) returned 1 [0079.617] GetNearestColor (hdc=0x5b01066f, color=0xf0f0f0) returned 0xf0f0f0 [0079.617] GetNearestColor (hdc=0x5b01066f, color=0xa0a0a0) returned 0xa0a0a0 [0079.617] GetNearestColor (hdc=0x5b01066f, color=0x696969) returned 0x696969 [0079.617] GetNearestColor (hdc=0x5b01066f, color=0xa0a0a0) returned 0xa0a0a0 [0079.617] GetNearestColor (hdc=0x5b01066f, color=0x0) returned 0x0 [0079.617] GetNearestColor (hdc=0x5b01066f, color=0xffffff) returned 0xffffff [0079.617] GetNearestColor (hdc=0x5b01066f, color=0xe5e5e5) returned 0xe5e5e5 [0079.617] GetNearestColor (hdc=0x5b01066f, color=0xd8d8d8) returned 0xd8d8d8 [0079.617] GetNearestColor (hdc=0x5b01066f, color=0x0) returned 0x0 [0079.617] RestoreDC (hdc=0x5b01066f, nSavedDC=-1) returned 1 [0079.618] GdipReleaseDC (graphics=0x1be567f0, hdc=0x5b01066f) returned 0x0 [0079.618] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x7f\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.618] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.618] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21685f0) returned 0x0 [0079.618] GdipSetStringFormatAlign (format=0x1be57a70, align=0x1) returned 0x0 [0079.618] GdipSetStringFormatLineAlign (format=0x1be57a70, align=0x1) returned 0x0 [0079.618] GdipSetStringFormatHotkeyPrefix (format=0x1be57a70, hotkeyPrefix=2) returned 0x0 [0079.618] GdipGetStringFormatFlags (format=0x1be57a70, flags=0x14e378) returned 0x0 [0079.618] GdipGetStringFormatTrimming (format=0x1be57a70, trimming=0x14e378) returned 0x0 [0079.618] GdipGetStringFormatHotkeyPrefix (format=0x1be57a70, hotkeyPrefix=0x14e378) returned 0x0 [0079.618] GdipGetFontSize (font=0x1be57a70, size=0x14e378) returned 0x0 [0079.618] GdipGetFontStyle (font=0x1be57a70, style=0x14e378) returned 0x0 [0079.619] GdipDeleteStringFormat (format=0x1be57a70) returned 0x0 [0079.619] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.619] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.619] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0079.619] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2168720) returned 0x0 [0079.619] GdipSetStringFormatFlags (format=0x1be57fb0, flags=0) returned 0x0 [0079.619] GdipSetStringFormatTrimming (format=0x1be57fb0, trimming=0x1) returned 0x0 [0079.619] GdipSetStringFormatHotkeyPrefix (format=0x1be57fb0, hotkeyPrefix=2) returned 0x0 [0079.619] GdipSetStringFormatAlign (format=0x1be57fb0, align=0x1) returned 0x0 [0079.619] GdipSetStringFormatLineAlign (format=0x1be57fb0, align=0x1) returned 0x0 [0079.619] GdipMeasureString (graphics=0x1be58070, string=";", length=1, font=0x1ad3edb0, layoutRect=0x14dfb8, stringFormat=0x1be57fb0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0079.620] GdipDeleteStringFormat (format=0x1be57fb0) returned 0x0 [0079.620] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0079.620] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.620] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.620] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.620] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0079.620] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.620] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0079.620] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.620] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0079.620] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486510 [0079.620] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486510) returned 0x0 [0079.621] LocalFree (hMem=0x1d486510) returned 0x0 [0079.621] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b50 [0079.621] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486b50) returned 0x0 [0079.621] LocalFree (hMem=0x1d486b50) returned 0x0 [0079.621] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.621] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0079.621] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0079.621] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0079.621] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.621] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0079.621] GetCurrentObject (hdc=0x5b01066f, type=0x1) returned 0x1b00017 [0079.621] GetCurrentObject (hdc=0x5b01066f, type=0x2) returned 0x1900010 [0079.621] GetCurrentObject (hdc=0x5b01066f, type=0x7) returned 0x2405099f [0079.621] GetCurrentObject (hdc=0x5b01066f, type=0x6) returned 0x18a0048 [0079.621] SaveDC (hdc=0x5b01066f) returned 1 [0079.621] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x550409d6 [0079.621] GetClipRgn (hdc=0x5b01066f, hrgn=0x550409d6) returned 0 [0079.621] SelectClipRgn (hdc=0x5b01066f, hrgn=0x670407ff) returned 2 [0079.621] DeleteObject (ho=0x550409d6) returned 1 [0079.621] DeleteObject (ho=0x670407ff) returned 1 [0079.621] OffsetViewportOrgEx (in: hdc=0x5b01066f, x=0, y=0, lppt=0x2168ae0 | out: lppt=0x2168ae0) returned 1 [0079.622] GetNearestColor (hdc=0x5b01066f, color=0xf0f0f0) returned 0xf0f0f0 [0079.622] CreateSolidBrush (color=0xf0f0f0) returned 0x521009b2 [0079.622] FillRect (hDC=0x5b01066f, lprc=0x14e1c8, hbr=0x521009b2) returned 1 [0079.622] DeleteObject (ho=0x521009b2) returned 1 [0079.622] RestoreDC (hdc=0x5b01066f, nSavedDC=-1) returned 1 [0079.622] GdipReleaseDC (graphics=0x1be567f0, hdc=0x5b01066f) returned 0x0 [0079.622] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0079.622] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.622] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2168be0) returned 0x0 [0079.622] GdipSetStringFormatAlign (format=0x1be57a00, align=0x1) returned 0x0 [0079.622] GdipSetStringFormatLineAlign (format=0x1be57a00, align=0x1) returned 0x0 [0079.622] GdipSetStringFormatHotkeyPrefix (format=0x1be57a00, hotkeyPrefix=2) returned 0x0 [0079.622] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0079.622] GdipDrawString (graphics=0x1be567f0, string=";", length=1, font=0x1ad3edb0, layoutRect=0x14e338, stringFormat=0x1be57a00, brush=0x1be515e0) returned 0x0 [0079.623] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0079.623] GdipDeleteStringFormat (format=0x1be57a00) returned 0x0 [0079.623] GetFocus () returned 0x103c8 [0079.623] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.623] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx}\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.623] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.623] GdipCreateRegion (region=0x14e030) returned 0x0 [0079.623] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.623] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0079.624] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.624] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0079.624] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d485f10 [0079.624] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d485f10) returned 0x0 [0079.624] LocalFree (hMem=0x1d485f10) returned 0x0 [0079.624] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4861d0 [0079.624] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4861d0) returned 0x0 [0079.624] LocalFree (hMem=0x1d4861d0) returned 0x0 [0079.624] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.624] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0079.624] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0079.624] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0079.624] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.624] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0079.624] GetCurrentObject (hdc=0x5b01066f, type=0x1) returned 0x1b00017 [0079.624] GetCurrentObject (hdc=0x5b01066f, type=0x2) returned 0x1900010 [0079.624] GetCurrentObject (hdc=0x5b01066f, type=0x7) returned 0x2405099f [0079.624] GetCurrentObject (hdc=0x5b01066f, type=0x6) returned 0x18a0048 [0079.624] SaveDC (hdc=0x5b01066f) returned 1 [0079.624] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x680407ff [0079.624] GetClipRgn (hdc=0x5b01066f, hrgn=0x680407ff) returned 0 [0079.625] SelectClipRgn (hdc=0x5b01066f, hrgn=0x560409d6) returned 2 [0079.625] DeleteObject (ho=0x680407ff) returned 1 [0079.625] DeleteObject (ho=0x560409d6) returned 1 [0079.625] OffsetViewportOrgEx (in: hdc=0x5b01066f, x=0, y=0, lppt=0x2168fc8 | out: lppt=0x2168fc8) returned 1 [0079.625] GetROP2 (hdc=0x5b01066f) returned 13 [0079.625] GetBkMode (hdc=0x5b01066f) returned 2 [0079.625] SetBkMode (hdc=0x5b01066f, mode=1) returned 2 [0079.625] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x1b3009db [0079.625] SelectObject (hdc=0x5b01066f, h=0x1b3009db) returned 0x1b00017 [0079.625] MoveToEx (in: hdc=0x5b01066f, x=25, y=0, lppt=0x2169030 | out: lppt=0x2169030) returned 1 [0079.625] LineTo (hdc=0x5b01066f, x=0, y=0) returned 1 [0079.625] SetBkMode (hdc=0x5b01066f, mode=2) returned 1 [0079.625] MoveToEx (in: hdc=0x5b01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.625] GetROP2 (hdc=0x5b01066f) returned 13 [0079.625] GetBkMode (hdc=0x5b01066f) returned 2 [0079.625] SetBkMode (hdc=0x5b01066f, mode=1) returned 2 [0079.625] SelectObject (hdc=0x5b01066f, h=0x1b3009db) returned 0x1b3009db [0079.625] MoveToEx (in: hdc=0x5b01066f, x=0, y=0, lppt=0x2169048 | out: lppt=0x2169048) returned 1 [0079.625] LineTo (hdc=0x5b01066f, x=0, y=22) returned 1 [0079.625] SetBkMode (hdc=0x5b01066f, mode=2) returned 1 [0079.625] MoveToEx (in: hdc=0x5b01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.625] SelectObject (hdc=0x5b01066f, h=0x1b00017) returned 0x1b3009db [0079.626] DeleteObject (ho=0x1b3009db) returned 1 [0079.626] GetROP2 (hdc=0x5b01066f) returned 13 [0079.626] GetBkMode (hdc=0x5b01066f) returned 2 [0079.626] SetBkMode (hdc=0x5b01066f, mode=1) returned 2 [0079.626] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x233009e0 [0079.626] SelectObject (hdc=0x5b01066f, h=0x233009e0) returned 0x1b00017 [0079.626] MoveToEx (in: hdc=0x5b01066f, x=0, y=22, lppt=0x21690b0 | out: lppt=0x21690b0) returned 1 [0079.626] LineTo (hdc=0x5b01066f, x=25, y=22) returned 1 [0079.626] SetBkMode (hdc=0x5b01066f, mode=2) returned 1 [0079.626] MoveToEx (in: hdc=0x5b01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.626] GetROP2 (hdc=0x5b01066f) returned 13 [0079.626] GetBkMode (hdc=0x5b01066f) returned 2 [0079.626] SetBkMode (hdc=0x5b01066f, mode=1) returned 2 [0079.626] SelectObject (hdc=0x5b01066f, h=0x233009e0) returned 0x233009e0 [0079.626] MoveToEx (in: hdc=0x5b01066f, x=25, y=22, lppt=0x21690c8 | out: lppt=0x21690c8) returned 1 [0079.626] LineTo (hdc=0x5b01066f, x=25, y=-1) returned 1 [0079.626] SetBkMode (hdc=0x5b01066f, mode=2) returned 1 [0079.626] MoveToEx (in: hdc=0x5b01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.626] SelectObject (hdc=0x5b01066f, h=0x1b00017) returned 0x233009e0 [0079.626] DeleteObject (ho=0x233009e0) returned 1 [0079.626] GetROP2 (hdc=0x5b01066f) returned 13 [0079.626] GetBkMode (hdc=0x5b01066f) returned 2 [0079.627] SetBkMode (hdc=0x5b01066f, mode=1) returned 2 [0079.627] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x1c3009db [0079.627] SelectObject (hdc=0x5b01066f, h=0x1c3009db) returned 0x1b00017 [0079.627] MoveToEx (in: hdc=0x5b01066f, x=24, y=1, lppt=0x2169130 | out: lppt=0x2169130) returned 1 [0079.627] LineTo (hdc=0x5b01066f, x=1, y=1) returned 1 [0079.627] SetBkMode (hdc=0x5b01066f, mode=2) returned 1 [0079.627] MoveToEx (in: hdc=0x5b01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.627] GetROP2 (hdc=0x5b01066f) returned 13 [0079.627] GetBkMode (hdc=0x5b01066f) returned 2 [0079.627] SetBkMode (hdc=0x5b01066f, mode=1) returned 2 [0079.627] SelectObject (hdc=0x5b01066f, h=0x1c3009db) returned 0x1c3009db [0079.627] MoveToEx (in: hdc=0x5b01066f, x=1, y=1, lppt=0x2169148 | out: lppt=0x2169148) returned 1 [0079.627] LineTo (hdc=0x5b01066f, x=1, y=21) returned 1 [0079.627] SetBkMode (hdc=0x5b01066f, mode=2) returned 1 [0079.627] MoveToEx (in: hdc=0x5b01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.627] SelectObject (hdc=0x5b01066f, h=0x1b00017) returned 0x1c3009db [0079.627] DeleteObject (ho=0x1c3009db) returned 1 [0079.627] GetROP2 (hdc=0x5b01066f) returned 13 [0079.627] GetBkMode (hdc=0x5b01066f) returned 2 [0079.627] SetBkMode (hdc=0x5b01066f, mode=1) returned 2 [0079.627] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x243009e0 [0079.627] SelectObject (hdc=0x5b01066f, h=0x243009e0) returned 0x1b00017 [0079.627] MoveToEx (in: hdc=0x5b01066f, x=1, y=21, lppt=0x21691b0 | out: lppt=0x21691b0) returned 1 [0079.628] LineTo (hdc=0x5b01066f, x=24, y=21) returned 1 [0079.628] SetBkMode (hdc=0x5b01066f, mode=2) returned 1 [0079.628] MoveToEx (in: hdc=0x5b01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.628] GetROP2 (hdc=0x5b01066f) returned 13 [0079.628] GetBkMode (hdc=0x5b01066f) returned 2 [0079.628] SetBkMode (hdc=0x5b01066f, mode=1) returned 2 [0079.628] SelectObject (hdc=0x5b01066f, h=0x243009e0) returned 0x243009e0 [0079.628] MoveToEx (in: hdc=0x5b01066f, x=24, y=21, lppt=0x21691c8 | out: lppt=0x21691c8) returned 1 [0079.628] LineTo (hdc=0x5b01066f, x=24, y=0) returned 1 [0079.628] SetBkMode (hdc=0x5b01066f, mode=2) returned 1 [0079.628] MoveToEx (in: hdc=0x5b01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.628] SelectObject (hdc=0x5b01066f, h=0x1b00017) returned 0x243009e0 [0079.628] DeleteObject (ho=0x243009e0) returned 1 [0079.628] RestoreDC (hdc=0x5b01066f, nSavedDC=-1) returned 1 [0079.628] GdipReleaseDC (graphics=0x1be567f0, hdc=0x5b01066f) returned 0x0 [0079.628] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0079.628] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x5b01066f, x1=0, y1=0, rop=0xcc0020) returned 1 [0079.628] GdipReleaseDC (graphics=0x1be567f0, hdc=0x5b01066f) returned 0x0 [0079.628] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0079.628] SelectObject (hdc=0x5b01066f, h=0x185000f) returned 0x2405099f [0079.629] DeleteDC (hdc=0x5b01066f) returned 1 [0079.629] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0079.629] EndPaint (hWnd=0x50276, lpPaint=0x14e548) returned 1 [0079.629] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.629] IsWindowUnicode (hWnd=0x103ae) returned 1 [0079.629] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.629] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.629] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.629] BeginPaint (in: hWnd=0x103ae, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0079.629] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0079.629] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x5d01066f [0079.629] SelectObject (hdc=0x5d01066f, h=0x2405099f) returned 0x185000f [0079.687] GdipCreateFromHDC (hdc=0x5d01066f, graphics=0x14e528) returned 0x0 [0079.687] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0079.687] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0079.687] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0079.687] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.688] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0079.688] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486190 [0079.688] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486190) returned 0x0 [0079.688] LocalFree (hMem=0x1d486190) returned 0x0 [0079.688] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.688] GdipCreateRegion (region=0x14e550) returned 0x0 [0079.688] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.688] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0079.688] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0079.688] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd660dbd) returned 0x0 [0079.688] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.688] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0079.688] GetCurrentObject (hdc=0x5d01066f, type=0x1) returned 0x1b00017 [0079.688] GetCurrentObject (hdc=0x5d01066f, type=0x2) returned 0x1900010 [0079.688] GetCurrentObject (hdc=0x5d01066f, type=0x7) returned 0x2405099f [0079.688] GetCurrentObject (hdc=0x5d01066f, type=0x6) returned 0x18a0048 [0079.688] SaveDC (hdc=0x5d01066f) returned 1 [0079.688] GetNearestColor (hdc=0x5d01066f, color=0xf0f0f0) returned 0xf0f0f0 [0079.688] GetNearestColor (hdc=0x5d01066f, color=0xa0a0a0) returned 0xa0a0a0 [0079.688] GetNearestColor (hdc=0x5d01066f, color=0x696969) returned 0x696969 [0079.689] GetNearestColor (hdc=0x5d01066f, color=0xa0a0a0) returned 0xa0a0a0 [0079.689] GetNearestColor (hdc=0x5d01066f, color=0x0) returned 0x0 [0079.689] GetNearestColor (hdc=0x5d01066f, color=0xffffff) returned 0xffffff [0079.689] GetNearestColor (hdc=0x5d01066f, color=0xe5e5e5) returned 0xe5e5e5 [0079.689] GetNearestColor (hdc=0x5d01066f, color=0xd8d8d8) returned 0xd8d8d8 [0079.689] GetNearestColor (hdc=0x5d01066f, color=0x0) returned 0x0 [0079.689] RestoreDC (hdc=0x5d01066f, nSavedDC=-1) returned 1 [0079.689] GdipReleaseDC (graphics=0x1be567f0, hdc=0x5d01066f) returned 0x0 [0079.689] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x94\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.689] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.689] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2169ae8) returned 0x0 [0079.689] GdipSetStringFormatAlign (format=0x1be57ed0, align=0x1) returned 0x0 [0079.690] GdipSetStringFormatLineAlign (format=0x1be57ed0, align=0x1) returned 0x0 [0079.690] GdipSetStringFormatHotkeyPrefix (format=0x1be57ed0, hotkeyPrefix=2) returned 0x0 [0079.690] GdipGetStringFormatFlags (format=0x1be57ed0, flags=0x14e378) returned 0x0 [0079.690] GdipGetStringFormatTrimming (format=0x1be57ed0, trimming=0x14e378) returned 0x0 [0079.690] GdipGetStringFormatHotkeyPrefix (format=0x1be57ed0, hotkeyPrefix=0x14e378) returned 0x0 [0079.690] GdipGetFontSize (font=0x1be57ed0, size=0x14e378) returned 0x0 [0079.690] GdipGetFontStyle (font=0x1be57ed0, style=0x14e378) returned 0x0 [0079.690] GdipDeleteStringFormat (format=0x1be57ed0) returned 0x0 [0079.690] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.690] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.690] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0079.690] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2169c18) returned 0x0 [0079.690] GdipSetStringFormatFlags (format=0x1be578b0, flags=0) returned 0x0 [0079.691] GdipSetStringFormatTrimming (format=0x1be578b0, trimming=0x1) returned 0x0 [0079.691] GdipSetStringFormatHotkeyPrefix (format=0x1be578b0, hotkeyPrefix=2) returned 0x0 [0079.691] GdipSetStringFormatAlign (format=0x1be578b0, align=0x1) returned 0x0 [0079.691] GdipSetStringFormatLineAlign (format=0x1be578b0, align=0x1) returned 0x0 [0079.691] GdipMeasureString (graphics=0x1be58070, string="-", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be578b0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0079.691] GdipDeleteStringFormat (format=0x1be578b0) returned 0x0 [0079.691] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0079.691] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.691] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.691] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0079.691] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.691] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0079.691] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.691] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0079.691] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486a90 [0079.692] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486a90) returned 0x0 [0079.692] LocalFree (hMem=0x1d486a90) returned 0x0 [0079.692] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0079.692] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486110) returned 0x0 [0079.692] LocalFree (hMem=0x1d486110) returned 0x0 [0079.692] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.692] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0079.692] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0079.692] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0079.692] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.692] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0079.692] GetCurrentObject (hdc=0x5d01066f, type=0x1) returned 0x1b00017 [0079.693] GetCurrentObject (hdc=0x5d01066f, type=0x2) returned 0x1900010 [0079.693] GetCurrentObject (hdc=0x5d01066f, type=0x7) returned 0x2405099f [0079.693] GetCurrentObject (hdc=0x5d01066f, type=0x6) returned 0x18a0048 [0079.693] SaveDC (hdc=0x5d01066f) returned 1 [0079.693] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x570409d6 [0079.693] GetClipRgn (hdc=0x5d01066f, hrgn=0x570409d6) returned 0 [0079.693] SelectClipRgn (hdc=0x5d01066f, hrgn=0x690407ff) returned 2 [0079.693] DeleteObject (ho=0x570409d6) returned 1 [0079.693] DeleteObject (ho=0x690407ff) returned 1 [0079.694] OffsetViewportOrgEx (in: hdc=0x5d01066f, x=0, y=0, lppt=0x2169fd8 | out: lppt=0x2169fd8) returned 1 [0079.694] GetNearestColor (hdc=0x5d01066f, color=0xf0f0f0) returned 0xf0f0f0 [0079.694] CreateSolidBrush (color=0xf0f0f0) returned 0x531009b2 [0079.694] FillRect (hDC=0x5d01066f, lprc=0x14e1c8, hbr=0x531009b2) returned 1 [0079.694] DeleteObject (ho=0x531009b2) returned 1 [0079.694] RestoreDC (hdc=0x5d01066f, nSavedDC=-1) returned 1 [0079.694] GdipReleaseDC (graphics=0x1be567f0, hdc=0x5d01066f) returned 0x0 [0079.694] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0079.694] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.694] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x216a0d8) returned 0x0 [0079.694] GdipSetStringFormatAlign (format=0x1be57d10, align=0x1) returned 0x0 [0079.694] GdipSetStringFormatLineAlign (format=0x1be57d10, align=0x1) returned 0x0 [0079.694] GdipSetStringFormatHotkeyPrefix (format=0x1be57d10, hotkeyPrefix=2) returned 0x0 [0079.695] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0079.695] GdipDrawString (graphics=0x1be567f0, string="-", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57d10, brush=0x1be515e0) returned 0x0 [0079.695] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0079.695] GdipDeleteStringFormat (format=0x1be57d10) returned 0x0 [0079.695] GetFocus () returned 0x103c8 [0079.695] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x92\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.695] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.695] GdipCreateRegion (region=0x14e030) returned 0x0 [0079.695] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.695] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0079.695] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.696] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0079.696] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b10 [0079.696] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486b10) returned 0x0 [0079.696] LocalFree (hMem=0x1d486b10) returned 0x0 [0079.696] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486dd0 [0079.696] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486dd0) returned 0x0 [0079.696] LocalFree (hMem=0x1d486dd0) returned 0x0 [0079.696] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.696] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0079.696] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0079.696] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0079.696] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.696] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0079.696] GetCurrentObject (hdc=0x5d01066f, type=0x1) returned 0x1b00017 [0079.696] GetCurrentObject (hdc=0x5d01066f, type=0x2) returned 0x1900010 [0079.696] GetCurrentObject (hdc=0x5d01066f, type=0x7) returned 0x2405099f [0079.696] GetCurrentObject (hdc=0x5d01066f, type=0x6) returned 0x18a0048 [0079.696] SaveDC (hdc=0x5d01066f) returned 1 [0079.696] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6a0407ff [0079.696] GetClipRgn (hdc=0x5d01066f, hrgn=0x6a0407ff) returned 0 [0079.697] SelectClipRgn (hdc=0x5d01066f, hrgn=0x580409d6) returned 2 [0079.697] DeleteObject (ho=0x6a0407ff) returned 1 [0079.697] DeleteObject (ho=0x580409d6) returned 1 [0079.697] OffsetViewportOrgEx (in: hdc=0x5d01066f, x=0, y=0, lppt=0x216a4c0 | out: lppt=0x216a4c0) returned 1 [0079.697] GetROP2 (hdc=0x5d01066f) returned 13 [0079.697] GetBkMode (hdc=0x5d01066f) returned 2 [0079.697] SetBkMode (hdc=0x5d01066f, mode=1) returned 2 [0079.697] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x48300991 [0079.697] SelectObject (hdc=0x5d01066f, h=0x48300991) returned 0x1b00017 [0079.697] MoveToEx (in: hdc=0x5d01066f, x=25, y=0, lppt=0x216a528 | out: lppt=0x216a528) returned 1 [0079.697] LineTo (hdc=0x5d01066f, x=0, y=0) returned 1 [0079.697] SetBkMode (hdc=0x5d01066f, mode=2) returned 1 [0079.697] MoveToEx (in: hdc=0x5d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.697] GetROP2 (hdc=0x5d01066f) returned 13 [0079.697] GetBkMode (hdc=0x5d01066f) returned 2 [0079.697] SetBkMode (hdc=0x5d01066f, mode=1) returned 2 [0079.697] SelectObject (hdc=0x5d01066f, h=0x48300991) returned 0x48300991 [0079.697] MoveToEx (in: hdc=0x5d01066f, x=0, y=0, lppt=0x216a540 | out: lppt=0x216a540) returned 1 [0079.697] LineTo (hdc=0x5d01066f, x=0, y=22) returned 1 [0079.697] SetBkMode (hdc=0x5d01066f, mode=2) returned 1 [0079.697] MoveToEx (in: hdc=0x5d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.697] SelectObject (hdc=0x5d01066f, h=0x1b00017) returned 0x48300991 [0079.698] DeleteObject (ho=0x48300991) returned 1 [0079.698] GetROP2 (hdc=0x5d01066f) returned 13 [0079.698] GetBkMode (hdc=0x5d01066f) returned 2 [0079.698] SetBkMode (hdc=0x5d01066f, mode=1) returned 2 [0079.698] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0xe3009e1 [0079.698] SelectObject (hdc=0x5d01066f, h=0xe3009e1) returned 0x1b00017 [0079.698] MoveToEx (in: hdc=0x5d01066f, x=0, y=22, lppt=0x216a5a8 | out: lppt=0x216a5a8) returned 1 [0079.698] LineTo (hdc=0x5d01066f, x=25, y=22) returned 1 [0079.698] SetBkMode (hdc=0x5d01066f, mode=2) returned 1 [0079.698] MoveToEx (in: hdc=0x5d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.698] GetROP2 (hdc=0x5d01066f) returned 13 [0079.698] GetBkMode (hdc=0x5d01066f) returned 2 [0079.698] SetBkMode (hdc=0x5d01066f, mode=1) returned 2 [0079.698] SelectObject (hdc=0x5d01066f, h=0xe3009e1) returned 0xe3009e1 [0079.698] MoveToEx (in: hdc=0x5d01066f, x=25, y=22, lppt=0x216a5c0 | out: lppt=0x216a5c0) returned 1 [0079.698] LineTo (hdc=0x5d01066f, x=25, y=-1) returned 1 [0079.698] SetBkMode (hdc=0x5d01066f, mode=2) returned 1 [0079.698] MoveToEx (in: hdc=0x5d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.698] SelectObject (hdc=0x5d01066f, h=0x1b00017) returned 0xe3009e1 [0079.698] DeleteObject (ho=0xe3009e1) returned 1 [0079.698] GetROP2 (hdc=0x5d01066f) returned 13 [0079.698] GetBkMode (hdc=0x5d01066f) returned 2 [0079.699] SetBkMode (hdc=0x5d01066f, mode=1) returned 2 [0079.699] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x49300991 [0079.699] SelectObject (hdc=0x5d01066f, h=0x49300991) returned 0x1b00017 [0079.699] MoveToEx (in: hdc=0x5d01066f, x=24, y=1, lppt=0x216a628 | out: lppt=0x216a628) returned 1 [0079.699] LineTo (hdc=0x5d01066f, x=1, y=1) returned 1 [0079.699] SetBkMode (hdc=0x5d01066f, mode=2) returned 1 [0079.699] MoveToEx (in: hdc=0x5d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.699] GetROP2 (hdc=0x5d01066f) returned 13 [0079.699] GetBkMode (hdc=0x5d01066f) returned 2 [0079.699] SetBkMode (hdc=0x5d01066f, mode=1) returned 2 [0079.699] SelectObject (hdc=0x5d01066f, h=0x49300991) returned 0x49300991 [0079.699] MoveToEx (in: hdc=0x5d01066f, x=1, y=1, lppt=0x216a640 | out: lppt=0x216a640) returned 1 [0079.699] LineTo (hdc=0x5d01066f, x=1, y=21) returned 1 [0079.699] SetBkMode (hdc=0x5d01066f, mode=2) returned 1 [0079.699] MoveToEx (in: hdc=0x5d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.699] SelectObject (hdc=0x5d01066f, h=0x1b00017) returned 0x49300991 [0079.699] DeleteObject (ho=0x49300991) returned 1 [0079.699] GetROP2 (hdc=0x5d01066f) returned 13 [0079.699] GetBkMode (hdc=0x5d01066f) returned 2 [0079.699] SetBkMode (hdc=0x5d01066f, mode=1) returned 2 [0079.699] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xf3009e1 [0079.699] SelectObject (hdc=0x5d01066f, h=0xf3009e1) returned 0x1b00017 [0079.700] MoveToEx (in: hdc=0x5d01066f, x=1, y=21, lppt=0x216a6a8 | out: lppt=0x216a6a8) returned 1 [0079.700] LineTo (hdc=0x5d01066f, x=24, y=21) returned 1 [0079.700] SetBkMode (hdc=0x5d01066f, mode=2) returned 1 [0079.700] MoveToEx (in: hdc=0x5d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.700] GetROP2 (hdc=0x5d01066f) returned 13 [0079.700] GetBkMode (hdc=0x5d01066f) returned 2 [0079.700] SetBkMode (hdc=0x5d01066f, mode=1) returned 2 [0079.700] SelectObject (hdc=0x5d01066f, h=0xf3009e1) returned 0xf3009e1 [0079.700] MoveToEx (in: hdc=0x5d01066f, x=24, y=21, lppt=0x216a6c0 | out: lppt=0x216a6c0) returned 1 [0079.700] LineTo (hdc=0x5d01066f, x=24, y=0) returned 1 [0079.700] SetBkMode (hdc=0x5d01066f, mode=2) returned 1 [0079.700] MoveToEx (in: hdc=0x5d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.700] SelectObject (hdc=0x5d01066f, h=0x1b00017) returned 0xf3009e1 [0079.700] DeleteObject (ho=0xf3009e1) returned 1 [0079.700] RestoreDC (hdc=0x5d01066f, nSavedDC=-1) returned 1 [0079.700] GdipReleaseDC (graphics=0x1be567f0, hdc=0x5d01066f) returned 0x0 [0079.700] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0079.700] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x5d01066f, x1=0, y1=0, rop=0xcc0020) returned 1 [0079.701] GdipReleaseDC (graphics=0x1be567f0, hdc=0x5d01066f) returned 0x0 [0079.701] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0079.701] SelectObject (hdc=0x5d01066f, h=0x185000f) returned 0x2405099f [0079.701] DeleteDC (hdc=0x5d01066f) returned 1 [0079.701] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0079.701] EndPaint (hWnd=0x103ae, lpPaint=0x14e548) returned 1 [0079.701] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.701] IsWindowUnicode (hWnd=0x103b0) returned 1 [0079.701] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.701] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.701] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.701] BeginPaint (in: hWnd=0x103b0, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0079.702] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0079.702] CreateCompatibleDC (hdc=0x220106d6) returned 0x2901065f [0079.702] SelectObject (hdc=0x2901065f, h=0x2405099f) returned 0x185000f [0079.702] GdipCreateFromHDC (hdc=0x2901065f, graphics=0x14e528) returned 0x0 [0079.702] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0079.702] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0079.702] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0079.702] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.702] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0079.702] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4863d0 [0079.702] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4863d0) returned 0x0 [0079.702] LocalFree (hMem=0x1d4863d0) returned 0x0 [0079.702] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.702] GdipCreateRegion (region=0x14e550) returned 0x0 [0079.702] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.702] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0079.702] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0079.702] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd630dbd) returned 0x0 [0079.702] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.703] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0079.703] GetCurrentObject (hdc=0x2901065f, type=0x1) returned 0x1b00017 [0079.703] GetCurrentObject (hdc=0x2901065f, type=0x2) returned 0x1900010 [0079.703] GetCurrentObject (hdc=0x2901065f, type=0x7) returned 0x2405099f [0079.703] GetCurrentObject (hdc=0x2901065f, type=0x6) returned 0x18a0048 [0079.703] SaveDC (hdc=0x2901065f) returned 1 [0079.703] GetNearestColor (hdc=0x2901065f, color=0xf0f0f0) returned 0xf0f0f0 [0079.703] GetNearestColor (hdc=0x2901065f, color=0xa0a0a0) returned 0xa0a0a0 [0079.703] GetNearestColor (hdc=0x2901065f, color=0x696969) returned 0x696969 [0079.703] GetNearestColor (hdc=0x2901065f, color=0xa0a0a0) returned 0xa0a0a0 [0079.703] GetNearestColor (hdc=0x2901065f, color=0x0) returned 0x0 [0079.703] GetNearestColor (hdc=0x2901065f, color=0xffffff) returned 0xffffff [0079.703] GetNearestColor (hdc=0x2901065f, color=0xe5e5e5) returned 0xe5e5e5 [0079.703] GetNearestColor (hdc=0x2901065f, color=0xd8d8d8) returned 0xd8d8d8 [0079.703] GetNearestColor (hdc=0x2901065f, color=0x0) returned 0x0 [0079.703] RestoreDC (hdc=0x2901065f, nSavedDC=-1) returned 1 [0079.703] GdipReleaseDC (graphics=0x1be567f0, hdc=0x2901065f) returned 0x0 [0079.704] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx©\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.704] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.704] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x216afe0) returned 0x0 [0079.704] GdipSetStringFormatAlign (format=0x1be57a70, align=0x1) returned 0x0 [0079.704] GdipSetStringFormatLineAlign (format=0x1be57a70, align=0x1) returned 0x0 [0079.704] GdipSetStringFormatHotkeyPrefix (format=0x1be57a70, hotkeyPrefix=2) returned 0x0 [0079.704] GdipGetStringFormatFlags (format=0x1be57a70, flags=0x14e378) returned 0x0 [0079.704] GdipGetStringFormatTrimming (format=0x1be57a70, trimming=0x14e378) returned 0x0 [0079.704] GdipGetStringFormatHotkeyPrefix (format=0x1be57a70, hotkeyPrefix=0x14e378) returned 0x0 [0079.704] GdipGetFontSize (font=0x1be57a70, size=0x14e378) returned 0x0 [0079.704] GdipGetFontStyle (font=0x1be57a70, style=0x14e378) returned 0x0 [0079.704] GdipDeleteStringFormat (format=0x1be57a70) returned 0x0 [0079.704] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.705] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.705] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.705] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0079.705] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x216b110) returned 0x0 [0079.705] GdipSetStringFormatFlags (format=0x1be57ca0, flags=0) returned 0x0 [0079.705] GdipSetStringFormatTrimming (format=0x1be57ca0, trimming=0x1) returned 0x0 [0079.705] GdipSetStringFormatHotkeyPrefix (format=0x1be57ca0, hotkeyPrefix=2) returned 0x0 [0079.705] GdipSetStringFormatAlign (format=0x1be57ca0, align=0x1) returned 0x0 [0079.705] GdipSetStringFormatLineAlign (format=0x1be57ca0, align=0x1) returned 0x0 [0079.705] GdipMeasureString (graphics=0x1be58070, string="8", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57ca0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0079.705] GdipDeleteStringFormat (format=0x1be57ca0) returned 0x0 [0079.705] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0079.705] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.706] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.706] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0079.706] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.706] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0079.706] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.706] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0079.706] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486a10 [0079.706] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486a10) returned 0x0 [0079.706] LocalFree (hMem=0x1d486a10) returned 0x0 [0079.706] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4867d0 [0079.706] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d4867d0) returned 0x0 [0079.706] LocalFree (hMem=0x1d4867d0) returned 0x0 [0079.706] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.706] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0079.706] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0079.706] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0079.706] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.706] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0079.706] GetCurrentObject (hdc=0x2901065f, type=0x1) returned 0x1b00017 [0079.707] GetCurrentObject (hdc=0x2901065f, type=0x2) returned 0x1900010 [0079.707] GetCurrentObject (hdc=0x2901065f, type=0x7) returned 0x2405099f [0079.707] GetCurrentObject (hdc=0x2901065f, type=0x6) returned 0x18a0048 [0079.707] SaveDC (hdc=0x2901065f) returned 1 [0079.707] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x590409d6 [0079.707] GetClipRgn (hdc=0x2901065f, hrgn=0x590409d6) returned 0 [0079.707] SelectClipRgn (hdc=0x2901065f, hrgn=0x6b0407ff) returned 2 [0079.707] DeleteObject (ho=0x590409d6) returned 1 [0079.707] DeleteObject (ho=0x6b0407ff) returned 1 [0079.707] OffsetViewportOrgEx (in: hdc=0x2901065f, x=0, y=0, lppt=0x216b4d0 | out: lppt=0x216b4d0) returned 1 [0079.707] GetNearestColor (hdc=0x2901065f, color=0xf0f0f0) returned 0xf0f0f0 [0079.722] CreateSolidBrush (color=0xf0f0f0) returned 0x541009b2 [0079.722] FillRect (hDC=0x2901065f, lprc=0x14e1c8, hbr=0x541009b2) returned 1 [0079.722] DeleteObject (ho=0x541009b2) returned 1 [0079.723] RestoreDC (hdc=0x2901065f, nSavedDC=-1) returned 1 [0079.723] GdipReleaseDC (graphics=0x1be567f0, hdc=0x2901065f) returned 0x0 [0079.723] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.723] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0079.723] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.725] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x216b5d0) returned 0x0 [0079.725] GdipSetStringFormatAlign (format=0x1be57920, align=0x1) returned 0x0 [0079.725] GdipSetStringFormatLineAlign (format=0x1be57920, align=0x1) returned 0x0 [0079.725] GdipSetStringFormatHotkeyPrefix (format=0x1be57920, hotkeyPrefix=2) returned 0x0 [0079.725] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0079.725] GdipDrawString (graphics=0x1be567f0, string="8", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57920, brush=0x1be515e0) returned 0x0 [0079.726] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0079.726] GdipDeleteStringFormat (format=0x1be57920) returned 0x0 [0079.726] GetFocus () returned 0x103c8 [0079.726] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx§\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.726] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.726] GdipCreateRegion (region=0x14e030) returned 0x0 [0079.726] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.726] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0079.726] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.726] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0079.726] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486a90 [0079.727] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486a90) returned 0x0 [0079.727] LocalFree (hMem=0x1d486a90) returned 0x0 [0079.727] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0079.727] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486110) returned 0x0 [0079.727] LocalFree (hMem=0x1d486110) returned 0x0 [0079.727] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.727] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0079.727] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0079.727] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0079.727] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.727] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0079.727] GetCurrentObject (hdc=0x2901065f, type=0x1) returned 0x1b00017 [0079.727] GetCurrentObject (hdc=0x2901065f, type=0x2) returned 0x1900010 [0079.727] GetCurrentObject (hdc=0x2901065f, type=0x7) returned 0x2405099f [0079.727] GetCurrentObject (hdc=0x2901065f, type=0x6) returned 0x18a0048 [0079.727] SaveDC (hdc=0x2901065f) returned 1 [0079.727] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6c0407ff [0079.727] GetClipRgn (hdc=0x2901065f, hrgn=0x6c0407ff) returned 0 [0079.727] SelectClipRgn (hdc=0x2901065f, hrgn=0x5a0409d6) returned 2 [0079.727] DeleteObject (ho=0x6c0407ff) returned 1 [0079.727] DeleteObject (ho=0x5a0409d6) returned 1 [0079.728] OffsetViewportOrgEx (in: hdc=0x2901065f, x=0, y=0, lppt=0x216b9b8 | out: lppt=0x216b9b8) returned 1 [0079.728] GetROP2 (hdc=0x2901065f) returned 13 [0079.728] GetBkMode (hdc=0x2901065f) returned 2 [0079.728] SetBkMode (hdc=0x2901065f, mode=1) returned 2 [0079.728] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x103009e1 [0079.728] SelectObject (hdc=0x2901065f, h=0x103009e1) returned 0x1b00017 [0079.728] MoveToEx (in: hdc=0x2901065f, x=25, y=0, lppt=0x216ba20 | out: lppt=0x216ba20) returned 1 [0079.728] LineTo (hdc=0x2901065f, x=0, y=0) returned 1 [0079.728] SetBkMode (hdc=0x2901065f, mode=2) returned 1 [0079.728] MoveToEx (in: hdc=0x2901065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.728] GetROP2 (hdc=0x2901065f) returned 13 [0079.728] GetBkMode (hdc=0x2901065f) returned 2 [0079.728] SetBkMode (hdc=0x2901065f, mode=1) returned 2 [0079.728] SelectObject (hdc=0x2901065f, h=0x103009e1) returned 0x103009e1 [0079.728] MoveToEx (in: hdc=0x2901065f, x=0, y=0, lppt=0x216ba38 | out: lppt=0x216ba38) returned 1 [0079.728] LineTo (hdc=0x2901065f, x=0, y=22) returned 1 [0079.728] SetBkMode (hdc=0x2901065f, mode=2) returned 1 [0079.728] MoveToEx (in: hdc=0x2901065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.728] SelectObject (hdc=0x2901065f, h=0x1b00017) returned 0x103009e1 [0079.728] DeleteObject (ho=0x103009e1) returned 1 [0079.728] GetROP2 (hdc=0x2901065f) returned 13 [0079.728] GetBkMode (hdc=0x2901065f) returned 2 [0079.729] SetBkMode (hdc=0x2901065f, mode=1) returned 2 [0079.729] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x4a300991 [0079.729] SelectObject (hdc=0x2901065f, h=0x4a300991) returned 0x1b00017 [0079.729] MoveToEx (in: hdc=0x2901065f, x=0, y=22, lppt=0x216baa0 | out: lppt=0x216baa0) returned 1 [0079.729] LineTo (hdc=0x2901065f, x=25, y=22) returned 1 [0079.729] SetBkMode (hdc=0x2901065f, mode=2) returned 1 [0079.729] MoveToEx (in: hdc=0x2901065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.729] GetROP2 (hdc=0x2901065f) returned 13 [0079.729] GetBkMode (hdc=0x2901065f) returned 2 [0079.729] SetBkMode (hdc=0x2901065f, mode=1) returned 2 [0079.729] SelectObject (hdc=0x2901065f, h=0x4a300991) returned 0x4a300991 [0079.729] MoveToEx (in: hdc=0x2901065f, x=25, y=22, lppt=0x216bab8 | out: lppt=0x216bab8) returned 1 [0079.729] LineTo (hdc=0x2901065f, x=25, y=-1) returned 1 [0079.729] SetBkMode (hdc=0x2901065f, mode=2) returned 1 [0079.729] MoveToEx (in: hdc=0x2901065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.729] SelectObject (hdc=0x2901065f, h=0x1b00017) returned 0x4a300991 [0079.729] DeleteObject (ho=0x4a300991) returned 1 [0079.729] GetROP2 (hdc=0x2901065f) returned 13 [0079.729] GetBkMode (hdc=0x2901065f) returned 2 [0079.729] SetBkMode (hdc=0x2901065f, mode=1) returned 2 [0079.729] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x113009e1 [0079.730] SelectObject (hdc=0x2901065f, h=0x113009e1) returned 0x1b00017 [0079.730] MoveToEx (in: hdc=0x2901065f, x=24, y=1, lppt=0x216bb20 | out: lppt=0x216bb20) returned 1 [0079.730] LineTo (hdc=0x2901065f, x=1, y=1) returned 1 [0079.730] SetBkMode (hdc=0x2901065f, mode=2) returned 1 [0079.730] MoveToEx (in: hdc=0x2901065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.730] GetROP2 (hdc=0x2901065f) returned 13 [0079.730] GetBkMode (hdc=0x2901065f) returned 2 [0079.730] SetBkMode (hdc=0x2901065f, mode=1) returned 2 [0079.730] SelectObject (hdc=0x2901065f, h=0x113009e1) returned 0x113009e1 [0079.730] MoveToEx (in: hdc=0x2901065f, x=1, y=1, lppt=0x216bb38 | out: lppt=0x216bb38) returned 1 [0079.730] LineTo (hdc=0x2901065f, x=1, y=21) returned 1 [0079.730] SetBkMode (hdc=0x2901065f, mode=2) returned 1 [0079.730] MoveToEx (in: hdc=0x2901065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.730] SelectObject (hdc=0x2901065f, h=0x1b00017) returned 0x113009e1 [0079.730] DeleteObject (ho=0x113009e1) returned 1 [0079.730] GetROP2 (hdc=0x2901065f) returned 13 [0079.730] GetBkMode (hdc=0x2901065f) returned 2 [0079.730] SetBkMode (hdc=0x2901065f, mode=1) returned 2 [0079.730] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x4b300991 [0079.731] SelectObject (hdc=0x2901065f, h=0x4b300991) returned 0x1b00017 [0079.731] MoveToEx (in: hdc=0x2901065f, x=1, y=21, lppt=0x216bba0 | out: lppt=0x216bba0) returned 1 [0079.731] LineTo (hdc=0x2901065f, x=24, y=21) returned 1 [0079.731] SetBkMode (hdc=0x2901065f, mode=2) returned 1 [0079.731] MoveToEx (in: hdc=0x2901065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.731] GetROP2 (hdc=0x2901065f) returned 13 [0079.731] GetBkMode (hdc=0x2901065f) returned 2 [0079.731] SetBkMode (hdc=0x2901065f, mode=1) returned 2 [0079.731] SelectObject (hdc=0x2901065f, h=0x4b300991) returned 0x4b300991 [0079.731] MoveToEx (in: hdc=0x2901065f, x=24, y=21, lppt=0x216bbb8 | out: lppt=0x216bbb8) returned 1 [0079.731] LineTo (hdc=0x2901065f, x=24, y=0) returned 1 [0079.731] SetBkMode (hdc=0x2901065f, mode=2) returned 1 [0079.731] MoveToEx (in: hdc=0x2901065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.731] SelectObject (hdc=0x2901065f, h=0x1b00017) returned 0x4b300991 [0079.731] DeleteObject (ho=0x4b300991) returned 1 [0079.731] RestoreDC (hdc=0x2901065f, nSavedDC=-1) returned 1 [0079.731] GdipReleaseDC (graphics=0x1be567f0, hdc=0x2901065f) returned 0x0 [0079.731] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0079.731] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x2901065f, x1=0, y1=0, rop=0xcc0020) returned 1 [0079.732] GdipReleaseDC (graphics=0x1be567f0, hdc=0x2901065f) returned 0x0 [0079.732] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0079.732] SelectObject (hdc=0x2901065f, h=0x185000f) returned 0x2405099f [0079.732] DeleteDC (hdc=0x2901065f) returned 1 [0079.732] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0079.732] EndPaint (hWnd=0x103b0, lpPaint=0x14e548) returned 1 [0079.732] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.732] IsWindowUnicode (hWnd=0x103b2) returned 1 [0079.732] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.732] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.732] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.732] BeginPaint (in: hWnd=0x103b2, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0079.732] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0079.732] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x470109e0 [0079.733] SelectObject (hdc=0x470109e0, h=0x2405099f) returned 0x185000f [0079.733] GdipCreateFromHDC (hdc=0x470109e0, graphics=0x14e528) returned 0x0 [0079.733] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0079.733] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0079.733] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0079.733] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.733] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0079.733] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486c50 [0079.733] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486c50) returned 0x0 [0079.733] LocalFree (hMem=0x1d486c50) returned 0x0 [0079.733] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.733] GdipCreateRegion (region=0x14e550) returned 0x0 [0079.733] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.733] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0079.733] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0079.733] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd600dbd) returned 0x0 [0079.733] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.733] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0079.733] GetCurrentObject (hdc=0x470109e0, type=0x1) returned 0x1b00017 [0079.734] GetCurrentObject (hdc=0x470109e0, type=0x2) returned 0x1900010 [0079.734] GetCurrentObject (hdc=0x470109e0, type=0x7) returned 0x2405099f [0079.734] GetCurrentObject (hdc=0x470109e0, type=0x6) returned 0x18a0048 [0079.734] SaveDC (hdc=0x470109e0) returned 1 [0079.734] GetNearestColor (hdc=0x470109e0, color=0xf0f0f0) returned 0xf0f0f0 [0079.734] GetNearestColor (hdc=0x470109e0, color=0xa0a0a0) returned 0xa0a0a0 [0079.734] GetNearestColor (hdc=0x470109e0, color=0x696969) returned 0x696969 [0079.734] GetNearestColor (hdc=0x470109e0, color=0xa0a0a0) returned 0xa0a0a0 [0079.734] GetNearestColor (hdc=0x470109e0, color=0x0) returned 0x0 [0079.734] GetNearestColor (hdc=0x470109e0, color=0xffffff) returned 0xffffff [0079.734] GetNearestColor (hdc=0x470109e0, color=0xe5e5e5) returned 0xe5e5e5 [0079.734] GetNearestColor (hdc=0x470109e0, color=0xd8d8d8) returned 0xd8d8d8 [0079.734] GetNearestColor (hdc=0x470109e0, color=0x0) returned 0x0 [0079.734] RestoreDC (hdc=0x470109e0, nSavedDC=-1) returned 1 [0079.735] GdipReleaseDC (graphics=0x1be567f0, hdc=0x470109e0) returned 0x0 [0079.735] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.735] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx¾\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.735] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.735] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x216c4d8) returned 0x0 [0079.735] GdipSetStringFormatAlign (format=0x1be57a00, align=0x1) returned 0x0 [0079.735] GdipSetStringFormatLineAlign (format=0x1be57a00, align=0x1) returned 0x0 [0079.735] GdipSetStringFormatHotkeyPrefix (format=0x1be57a00, hotkeyPrefix=2) returned 0x0 [0079.735] GdipGetStringFormatFlags (format=0x1be57a00, flags=0x14e378) returned 0x0 [0079.735] GdipGetStringFormatTrimming (format=0x1be57a00, trimming=0x14e378) returned 0x0 [0079.735] GdipGetStringFormatHotkeyPrefix (format=0x1be57a00, hotkeyPrefix=0x14e378) returned 0x0 [0079.735] GdipGetFontSize (font=0x1be57a00, size=0x14e378) returned 0x0 [0079.735] GdipGetFontStyle (font=0x1be57a00, style=0x14e378) returned 0x0 [0079.735] GdipDeleteStringFormat (format=0x1be57a00) returned 0x0 [0079.736] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.736] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.736] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.736] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0079.736] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x216c608) returned 0x0 [0079.736] GdipSetStringFormatFlags (format=0x1be578b0, flags=0) returned 0x0 [0079.736] GdipSetStringFormatTrimming (format=0x1be578b0, trimming=0x1) returned 0x0 [0079.736] GdipSetStringFormatHotkeyPrefix (format=0x1be578b0, hotkeyPrefix=2) returned 0x0 [0079.736] GdipSetStringFormatAlign (format=0x1be578b0, align=0x1) returned 0x0 [0079.736] GdipSetStringFormatLineAlign (format=0x1be578b0, align=0x1) returned 0x0 [0079.736] GdipMeasureString (graphics=0x1be58070, string="c", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be578b0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0079.736] GdipDeleteStringFormat (format=0x1be578b0) returned 0x0 [0079.736] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0079.737] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.737] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.737] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.737] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0079.737] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.737] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0079.737] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.737] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0079.737] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486510 [0079.737] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486510) returned 0x0 [0079.737] LocalFree (hMem=0x1d486510) returned 0x0 [0079.737] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0079.737] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486110) returned 0x0 [0079.737] LocalFree (hMem=0x1d486110) returned 0x0 [0079.737] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.737] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0079.737] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0079.737] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0079.737] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.738] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0079.738] GetCurrentObject (hdc=0x470109e0, type=0x1) returned 0x1b00017 [0079.738] GetCurrentObject (hdc=0x470109e0, type=0x2) returned 0x1900010 [0079.738] GetCurrentObject (hdc=0x470109e0, type=0x7) returned 0x2405099f [0079.738] GetCurrentObject (hdc=0x470109e0, type=0x6) returned 0x18a0048 [0079.738] SaveDC (hdc=0x470109e0) returned 1 [0079.738] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5b0409d6 [0079.738] GetClipRgn (hdc=0x470109e0, hrgn=0x5b0409d6) returned 0 [0079.738] SelectClipRgn (hdc=0x470109e0, hrgn=0x6d0407ff) returned 2 [0079.738] DeleteObject (ho=0x5b0409d6) returned 1 [0079.738] DeleteObject (ho=0x6d0407ff) returned 1 [0079.738] OffsetViewportOrgEx (in: hdc=0x470109e0, x=0, y=0, lppt=0x216c9c8 | out: lppt=0x216c9c8) returned 1 [0079.738] GetNearestColor (hdc=0x470109e0, color=0xf0f0f0) returned 0xf0f0f0 [0079.738] CreateSolidBrush (color=0xf0f0f0) returned 0x551009b2 [0079.738] FillRect (hDC=0x470109e0, lprc=0x14e1c8, hbr=0x551009b2) returned 1 [0079.738] DeleteObject (ho=0x551009b2) returned 1 [0079.738] RestoreDC (hdc=0x470109e0, nSavedDC=-1) returned 1 [0079.738] GdipReleaseDC (graphics=0x1be567f0, hdc=0x470109e0) returned 0x0 [0079.739] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.739] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0079.739] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.741] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x216cac8) returned 0x0 [0079.741] GdipSetStringFormatAlign (format=0x1be57990, align=0x1) returned 0x0 [0079.742] GdipSetStringFormatLineAlign (format=0x1be57990, align=0x1) returned 0x0 [0079.742] GdipSetStringFormatHotkeyPrefix (format=0x1be57990, hotkeyPrefix=2) returned 0x0 [0079.742] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0079.742] GdipDrawString (graphics=0x1be567f0, string="c", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57990, brush=0x1be515e0) returned 0x0 [0079.742] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0079.742] GdipDeleteStringFormat (format=0x1be57990) returned 0x0 [0079.742] GetFocus () returned 0x103c8 [0079.742] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx¼\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.742] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.742] GdipCreateRegion (region=0x14e030) returned 0x0 [0079.742] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.742] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0079.743] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.743] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0079.743] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4867d0 [0079.743] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d4867d0) returned 0x0 [0079.743] LocalFree (hMem=0x1d4867d0) returned 0x0 [0079.743] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486450 [0079.743] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486450) returned 0x0 [0079.743] LocalFree (hMem=0x1d486450) returned 0x0 [0079.743] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.743] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0079.743] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0079.743] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0079.743] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.743] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0079.743] GetCurrentObject (hdc=0x470109e0, type=0x1) returned 0x1b00017 [0079.743] GetCurrentObject (hdc=0x470109e0, type=0x2) returned 0x1900010 [0079.743] GetCurrentObject (hdc=0x470109e0, type=0x7) returned 0x2405099f [0079.743] GetCurrentObject (hdc=0x470109e0, type=0x6) returned 0x18a0048 [0079.743] SaveDC (hdc=0x470109e0) returned 1 [0079.743] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6e0407ff [0079.743] GetClipRgn (hdc=0x470109e0, hrgn=0x6e0407ff) returned 0 [0079.743] SelectClipRgn (hdc=0x470109e0, hrgn=0x5c0409d6) returned 2 [0079.744] DeleteObject (ho=0x6e0407ff) returned 1 [0079.744] DeleteObject (ho=0x5c0409d6) returned 1 [0079.744] OffsetViewportOrgEx (in: hdc=0x470109e0, x=0, y=0, lppt=0x216ceb0 | out: lppt=0x216ceb0) returned 1 [0079.744] GetROP2 (hdc=0x470109e0) returned 13 [0079.744] GetBkMode (hdc=0x470109e0) returned 2 [0079.744] SetBkMode (hdc=0x470109e0, mode=1) returned 2 [0079.744] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x4c300991 [0079.744] SelectObject (hdc=0x470109e0, h=0x4c300991) returned 0x1b00017 [0079.744] MoveToEx (in: hdc=0x470109e0, x=25, y=0, lppt=0x216cf18 | out: lppt=0x216cf18) returned 1 [0079.744] LineTo (hdc=0x470109e0, x=0, y=0) returned 1 [0079.744] SetBkMode (hdc=0x470109e0, mode=2) returned 1 [0079.744] MoveToEx (in: hdc=0x470109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.744] GetROP2 (hdc=0x470109e0) returned 13 [0079.744] GetBkMode (hdc=0x470109e0) returned 2 [0079.744] SetBkMode (hdc=0x470109e0, mode=1) returned 2 [0079.744] SelectObject (hdc=0x470109e0, h=0x4c300991) returned 0x4c300991 [0079.744] MoveToEx (in: hdc=0x470109e0, x=0, y=0, lppt=0x216cf30 | out: lppt=0x216cf30) returned 1 [0079.744] LineTo (hdc=0x470109e0, x=0, y=22) returned 1 [0079.744] SetBkMode (hdc=0x470109e0, mode=2) returned 1 [0079.744] MoveToEx (in: hdc=0x470109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.744] SelectObject (hdc=0x470109e0, h=0x1b00017) returned 0x4c300991 [0079.744] DeleteObject (ho=0x4c300991) returned 1 [0079.745] GetROP2 (hdc=0x470109e0) returned 13 [0079.745] GetBkMode (hdc=0x470109e0) returned 2 [0079.745] SetBkMode (hdc=0x470109e0, mode=1) returned 2 [0079.745] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x123009e1 [0079.745] SelectObject (hdc=0x470109e0, h=0x123009e1) returned 0x1b00017 [0079.745] MoveToEx (in: hdc=0x470109e0, x=0, y=22, lppt=0x216cf98 | out: lppt=0x216cf98) returned 1 [0079.745] LineTo (hdc=0x470109e0, x=25, y=22) returned 1 [0079.745] SetBkMode (hdc=0x470109e0, mode=2) returned 1 [0079.745] MoveToEx (in: hdc=0x470109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.745] GetROP2 (hdc=0x470109e0) returned 13 [0079.745] GetBkMode (hdc=0x470109e0) returned 2 [0079.745] SetBkMode (hdc=0x470109e0, mode=1) returned 2 [0079.745] SelectObject (hdc=0x470109e0, h=0x123009e1) returned 0x123009e1 [0079.745] MoveToEx (in: hdc=0x470109e0, x=25, y=22, lppt=0x216cfb0 | out: lppt=0x216cfb0) returned 1 [0079.745] LineTo (hdc=0x470109e0, x=25, y=-1) returned 1 [0079.745] SetBkMode (hdc=0x470109e0, mode=2) returned 1 [0079.745] MoveToEx (in: hdc=0x470109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.745] SelectObject (hdc=0x470109e0, h=0x1b00017) returned 0x123009e1 [0079.745] DeleteObject (ho=0x123009e1) returned 1 [0079.745] GetROP2 (hdc=0x470109e0) returned 13 [0079.745] GetBkMode (hdc=0x470109e0) returned 2 [0079.745] SetBkMode (hdc=0x470109e0, mode=1) returned 2 [0079.746] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x4d300991 [0079.746] SelectObject (hdc=0x470109e0, h=0x4d300991) returned 0x1b00017 [0079.746] MoveToEx (in: hdc=0x470109e0, x=24, y=1, lppt=0x216d018 | out: lppt=0x216d018) returned 1 [0079.746] LineTo (hdc=0x470109e0, x=1, y=1) returned 1 [0079.746] SetBkMode (hdc=0x470109e0, mode=2) returned 1 [0079.746] MoveToEx (in: hdc=0x470109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.746] GetROP2 (hdc=0x470109e0) returned 13 [0079.746] GetBkMode (hdc=0x470109e0) returned 2 [0079.746] SetBkMode (hdc=0x470109e0, mode=1) returned 2 [0079.746] SelectObject (hdc=0x470109e0, h=0x4d300991) returned 0x4d300991 [0079.746] MoveToEx (in: hdc=0x470109e0, x=1, y=1, lppt=0x216d030 | out: lppt=0x216d030) returned 1 [0079.746] LineTo (hdc=0x470109e0, x=1, y=21) returned 1 [0079.746] SetBkMode (hdc=0x470109e0, mode=2) returned 1 [0079.746] MoveToEx (in: hdc=0x470109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.746] SelectObject (hdc=0x470109e0, h=0x1b00017) returned 0x4d300991 [0079.746] DeleteObject (ho=0x4d300991) returned 1 [0079.746] GetROP2 (hdc=0x470109e0) returned 13 [0079.746] GetBkMode (hdc=0x470109e0) returned 2 [0079.746] SetBkMode (hdc=0x470109e0, mode=1) returned 2 [0079.746] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x133009e1 [0079.746] SelectObject (hdc=0x470109e0, h=0x133009e1) returned 0x1b00017 [0079.747] MoveToEx (in: hdc=0x470109e0, x=1, y=21, lppt=0x216d098 | out: lppt=0x216d098) returned 1 [0079.747] LineTo (hdc=0x470109e0, x=24, y=21) returned 1 [0079.747] SetBkMode (hdc=0x470109e0, mode=2) returned 1 [0079.747] MoveToEx (in: hdc=0x470109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.747] GetROP2 (hdc=0x470109e0) returned 13 [0079.747] GetBkMode (hdc=0x470109e0) returned 2 [0079.747] SetBkMode (hdc=0x470109e0, mode=1) returned 2 [0079.747] SelectObject (hdc=0x470109e0, h=0x133009e1) returned 0x133009e1 [0079.747] MoveToEx (in: hdc=0x470109e0, x=24, y=21, lppt=0x216d0b0 | out: lppt=0x216d0b0) returned 1 [0079.747] LineTo (hdc=0x470109e0, x=24, y=0) returned 1 [0079.747] SetBkMode (hdc=0x470109e0, mode=2) returned 1 [0079.747] MoveToEx (in: hdc=0x470109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.747] SelectObject (hdc=0x470109e0, h=0x1b00017) returned 0x133009e1 [0079.747] DeleteObject (ho=0x133009e1) returned 1 [0079.747] RestoreDC (hdc=0x470109e0, nSavedDC=-1) returned 1 [0079.747] GdipReleaseDC (graphics=0x1be567f0, hdc=0x470109e0) returned 0x0 [0079.747] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0079.747] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x470109e0, x1=0, y1=0, rop=0xcc0020) returned 1 [0079.747] GdipReleaseDC (graphics=0x1be567f0, hdc=0x470109e0) returned 0x0 [0079.748] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0079.748] SelectObject (hdc=0x470109e0, h=0x185000f) returned 0x2405099f [0079.748] DeleteDC (hdc=0x470109e0) returned 1 [0079.748] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0079.748] EndPaint (hWnd=0x103b2, lpPaint=0x14e548) returned 1 [0079.748] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.748] IsWindowUnicode (hWnd=0x103b4) returned 1 [0079.748] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.748] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.748] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.748] BeginPaint (in: hWnd=0x103b4, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0079.748] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0079.748] CreateCompatibleDC (hdc=0x220106d6) returned 0x6501066f [0079.748] SelectObject (hdc=0x6501066f, h=0x2405099f) returned 0x185000f [0079.748] GdipCreateFromHDC (hdc=0x6501066f, graphics=0x14e528) returned 0x0 [0079.749] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0079.749] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0079.749] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0079.749] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.749] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0079.749] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4868d0 [0079.749] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4868d0) returned 0x0 [0079.749] LocalFree (hMem=0x1d4868d0) returned 0x0 [0079.749] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.749] GdipCreateRegion (region=0x14e550) returned 0x0 [0079.749] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.749] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0079.749] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0079.749] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd5d0dbd) returned 0x0 [0079.749] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.749] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0079.749] GetCurrentObject (hdc=0x6501066f, type=0x1) returned 0x1b00017 [0079.749] GetCurrentObject (hdc=0x6501066f, type=0x2) returned 0x1900010 [0079.749] GetCurrentObject (hdc=0x6501066f, type=0x7) returned 0x2405099f [0079.749] GetCurrentObject (hdc=0x6501066f, type=0x6) returned 0x18a0048 [0079.750] SaveDC (hdc=0x6501066f) returned 1 [0079.750] GetNearestColor (hdc=0x6501066f, color=0xf0f0f0) returned 0xf0f0f0 [0079.750] GetNearestColor (hdc=0x6501066f, color=0xa0a0a0) returned 0xa0a0a0 [0079.750] GetNearestColor (hdc=0x6501066f, color=0x696969) returned 0x696969 [0079.750] GetNearestColor (hdc=0x6501066f, color=0xa0a0a0) returned 0xa0a0a0 [0079.750] GetNearestColor (hdc=0x6501066f, color=0x0) returned 0x0 [0079.750] GetNearestColor (hdc=0x6501066f, color=0xffffff) returned 0xffffff [0079.750] GetNearestColor (hdc=0x6501066f, color=0xe5e5e5) returned 0xe5e5e5 [0079.750] GetNearestColor (hdc=0x6501066f, color=0xd8d8d8) returned 0xd8d8d8 [0079.750] GetNearestColor (hdc=0x6501066f, color=0x0) returned 0x0 [0079.750] RestoreDC (hdc=0x6501066f, nSavedDC=-1) returned 1 [0079.750] GdipReleaseDC (graphics=0x1be567f0, hdc=0x6501066f) returned 0x0 [0079.750] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÓ\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.751] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.751] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x216d9d0) returned 0x0 [0079.751] GdipSetStringFormatAlign (format=0x1be57d80, align=0x1) returned 0x0 [0079.751] GdipSetStringFormatLineAlign (format=0x1be57d80, align=0x1) returned 0x0 [0079.751] GdipSetStringFormatHotkeyPrefix (format=0x1be57d80, hotkeyPrefix=2) returned 0x0 [0079.751] GdipGetStringFormatFlags (format=0x1be57d80, flags=0x14e378) returned 0x0 [0079.751] GdipGetStringFormatTrimming (format=0x1be57d80, trimming=0x14e378) returned 0x0 [0079.751] GdipGetStringFormatHotkeyPrefix (format=0x1be57d80, hotkeyPrefix=0x14e378) returned 0x0 [0079.751] GdipGetFontSize (font=0x1be57d80, size=0x14e378) returned 0x0 [0079.751] GdipGetFontStyle (font=0x1be57d80, style=0x14e378) returned 0x0 [0079.751] GdipDeleteStringFormat (format=0x1be57d80) returned 0x0 [0079.751] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.751] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.752] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0079.752] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x216db00) returned 0x0 [0079.752] GdipSetStringFormatFlags (format=0x1be57c30, flags=0) returned 0x0 [0079.752] GdipSetStringFormatTrimming (format=0x1be57c30, trimming=0x1) returned 0x0 [0079.752] GdipSetStringFormatHotkeyPrefix (format=0x1be57c30, hotkeyPrefix=2) returned 0x0 [0079.752] GdipSetStringFormatAlign (format=0x1be57c30, align=0x1) returned 0x0 [0079.752] GdipSetStringFormatLineAlign (format=0x1be57c30, align=0x1) returned 0x0 [0079.752] GdipMeasureString (graphics=0x1be58070, string="+", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57c30, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0079.752] GdipDeleteStringFormat (format=0x1be57c30) returned 0x0 [0079.752] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0079.752] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.752] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.752] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0079.753] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.753] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0079.753] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.753] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0079.753] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0079.753] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486110) returned 0x0 [0079.753] LocalFree (hMem=0x1d486110) returned 0x0 [0079.753] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486dd0 [0079.753] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486dd0) returned 0x0 [0079.753] LocalFree (hMem=0x1d486dd0) returned 0x0 [0079.753] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.753] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0079.753] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0079.753] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0079.753] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.753] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0079.753] GetCurrentObject (hdc=0x6501066f, type=0x1) returned 0x1b00017 [0079.753] GetCurrentObject (hdc=0x6501066f, type=0x2) returned 0x1900010 [0079.753] GetCurrentObject (hdc=0x6501066f, type=0x7) returned 0x2405099f [0079.753] GetCurrentObject (hdc=0x6501066f, type=0x6) returned 0x18a0048 [0079.753] SaveDC (hdc=0x6501066f) returned 1 [0079.753] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5d0409d6 [0079.754] GetClipRgn (hdc=0x6501066f, hrgn=0x5d0409d6) returned 0 [0079.754] SelectClipRgn (hdc=0x6501066f, hrgn=0x6f0407ff) returned 2 [0079.754] DeleteObject (ho=0x5d0409d6) returned 1 [0079.754] DeleteObject (ho=0x6f0407ff) returned 1 [0079.754] OffsetViewportOrgEx (in: hdc=0x6501066f, x=0, y=0, lppt=0x216dec0 | out: lppt=0x216dec0) returned 1 [0079.754] GetNearestColor (hdc=0x6501066f, color=0xf0f0f0) returned 0xf0f0f0 [0079.754] CreateSolidBrush (color=0xf0f0f0) returned 0x561009b2 [0079.754] FillRect (hDC=0x6501066f, lprc=0x14e1c8, hbr=0x561009b2) returned 1 [0079.754] DeleteObject (ho=0x561009b2) returned 1 [0079.754] RestoreDC (hdc=0x6501066f, nSavedDC=-1) returned 1 [0079.754] GdipReleaseDC (graphics=0x1be567f0, hdc=0x6501066f) returned 0x0 [0079.754] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.755] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0079.755] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.755] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x216dfc0) returned 0x0 [0079.755] GdipSetStringFormatAlign (format=0x1be57b50, align=0x1) returned 0x0 [0079.755] GdipSetStringFormatLineAlign (format=0x1be57b50, align=0x1) returned 0x0 [0079.755] GdipSetStringFormatHotkeyPrefix (format=0x1be57b50, hotkeyPrefix=2) returned 0x0 [0079.755] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0079.755] GdipDrawString (graphics=0x1be567f0, string="+", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57b50, brush=0x1be515e0) returned 0x0 [0079.756] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0079.756] GdipDeleteStringFormat (format=0x1be57b50) returned 0x0 [0079.756] GetFocus () returned 0x103c8 [0079.756] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÑ\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.756] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.756] GdipCreateRegion (region=0x14e030) returned 0x0 [0079.756] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.756] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0079.756] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.756] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0079.756] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486010 [0079.756] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486010) returned 0x0 [0079.756] LocalFree (hMem=0x1d486010) returned 0x0 [0079.756] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486510 [0079.756] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486510) returned 0x0 [0079.757] LocalFree (hMem=0x1d486510) returned 0x0 [0079.757] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.757] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0079.757] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0079.757] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0079.757] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.757] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0079.757] GetCurrentObject (hdc=0x6501066f, type=0x1) returned 0x1b00017 [0079.757] GetCurrentObject (hdc=0x6501066f, type=0x2) returned 0x1900010 [0079.757] GetCurrentObject (hdc=0x6501066f, type=0x7) returned 0x2405099f [0079.757] GetCurrentObject (hdc=0x6501066f, type=0x6) returned 0x18a0048 [0079.757] SaveDC (hdc=0x6501066f) returned 1 [0079.757] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x700407ff [0079.757] GetClipRgn (hdc=0x6501066f, hrgn=0x700407ff) returned 0 [0079.757] SelectClipRgn (hdc=0x6501066f, hrgn=0x5e0409d6) returned 2 [0079.757] DeleteObject (ho=0x700407ff) returned 1 [0079.757] DeleteObject (ho=0x5e0409d6) returned 1 [0079.757] OffsetViewportOrgEx (in: hdc=0x6501066f, x=0, y=0, lppt=0x216e3a8 | out: lppt=0x216e3a8) returned 1 [0079.757] GetROP2 (hdc=0x6501066f) returned 13 [0079.757] GetBkMode (hdc=0x6501066f) returned 2 [0079.757] SetBkMode (hdc=0x6501066f, mode=1) returned 2 [0079.758] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x143009e1 [0079.758] SelectObject (hdc=0x6501066f, h=0x143009e1) returned 0x1b00017 [0079.758] MoveToEx (in: hdc=0x6501066f, x=25, y=0, lppt=0x216e410 | out: lppt=0x216e410) returned 1 [0079.758] LineTo (hdc=0x6501066f, x=0, y=0) returned 1 [0079.758] SetBkMode (hdc=0x6501066f, mode=2) returned 1 [0079.758] MoveToEx (in: hdc=0x6501066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.758] GetROP2 (hdc=0x6501066f) returned 13 [0079.758] GetBkMode (hdc=0x6501066f) returned 2 [0079.758] SetBkMode (hdc=0x6501066f, mode=1) returned 2 [0079.758] SelectObject (hdc=0x6501066f, h=0x143009e1) returned 0x143009e1 [0079.758] MoveToEx (in: hdc=0x6501066f, x=0, y=0, lppt=0x216e428 | out: lppt=0x216e428) returned 1 [0079.758] LineTo (hdc=0x6501066f, x=0, y=22) returned 1 [0079.758] SetBkMode (hdc=0x6501066f, mode=2) returned 1 [0079.758] MoveToEx (in: hdc=0x6501066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.758] SelectObject (hdc=0x6501066f, h=0x1b00017) returned 0x143009e1 [0079.758] DeleteObject (ho=0x143009e1) returned 1 [0079.758] GetROP2 (hdc=0x6501066f) returned 13 [0079.758] GetBkMode (hdc=0x6501066f) returned 2 [0079.758] SetBkMode (hdc=0x6501066f, mode=1) returned 2 [0079.758] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x4e300991 [0079.758] SelectObject (hdc=0x6501066f, h=0x4e300991) returned 0x1b00017 [0079.758] MoveToEx (in: hdc=0x6501066f, x=0, y=22, lppt=0x216e490 | out: lppt=0x216e490) returned 1 [0079.758] LineTo (hdc=0x6501066f, x=25, y=22) returned 1 [0079.759] SetBkMode (hdc=0x6501066f, mode=2) returned 1 [0079.759] MoveToEx (in: hdc=0x6501066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.759] GetROP2 (hdc=0x6501066f) returned 13 [0079.759] GetBkMode (hdc=0x6501066f) returned 2 [0079.759] SetBkMode (hdc=0x6501066f, mode=1) returned 2 [0079.759] SelectObject (hdc=0x6501066f, h=0x4e300991) returned 0x4e300991 [0079.759] MoveToEx (in: hdc=0x6501066f, x=25, y=22, lppt=0x216e4a8 | out: lppt=0x216e4a8) returned 1 [0079.759] LineTo (hdc=0x6501066f, x=25, y=-1) returned 1 [0079.759] SetBkMode (hdc=0x6501066f, mode=2) returned 1 [0079.759] MoveToEx (in: hdc=0x6501066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.759] SelectObject (hdc=0x6501066f, h=0x1b00017) returned 0x4e300991 [0079.759] DeleteObject (ho=0x4e300991) returned 1 [0079.759] GetROP2 (hdc=0x6501066f) returned 13 [0079.759] GetBkMode (hdc=0x6501066f) returned 2 [0079.759] SetBkMode (hdc=0x6501066f, mode=1) returned 2 [0079.759] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x153009e1 [0079.759] SelectObject (hdc=0x6501066f, h=0x153009e1) returned 0x1b00017 [0079.759] MoveToEx (in: hdc=0x6501066f, x=24, y=1, lppt=0x216e510 | out: lppt=0x216e510) returned 1 [0079.759] LineTo (hdc=0x6501066f, x=1, y=1) returned 1 [0079.759] SetBkMode (hdc=0x6501066f, mode=2) returned 1 [0079.759] MoveToEx (in: hdc=0x6501066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.759] GetROP2 (hdc=0x6501066f) returned 13 [0079.759] GetBkMode (hdc=0x6501066f) returned 2 [0079.759] SetBkMode (hdc=0x6501066f, mode=1) returned 2 [0079.760] SelectObject (hdc=0x6501066f, h=0x153009e1) returned 0x153009e1 [0079.760] MoveToEx (in: hdc=0x6501066f, x=1, y=1, lppt=0x216e528 | out: lppt=0x216e528) returned 1 [0079.760] LineTo (hdc=0x6501066f, x=1, y=21) returned 1 [0079.760] SetBkMode (hdc=0x6501066f, mode=2) returned 1 [0079.760] MoveToEx (in: hdc=0x6501066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.760] SelectObject (hdc=0x6501066f, h=0x1b00017) returned 0x153009e1 [0079.760] DeleteObject (ho=0x153009e1) returned 1 [0079.760] GetROP2 (hdc=0x6501066f) returned 13 [0079.760] GetBkMode (hdc=0x6501066f) returned 2 [0079.760] SetBkMode (hdc=0x6501066f, mode=1) returned 2 [0079.760] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x4f300991 [0079.760] SelectObject (hdc=0x6501066f, h=0x4f300991) returned 0x1b00017 [0079.760] MoveToEx (in: hdc=0x6501066f, x=1, y=21, lppt=0x216e590 | out: lppt=0x216e590) returned 1 [0079.760] LineTo (hdc=0x6501066f, x=24, y=21) returned 1 [0079.760] SetBkMode (hdc=0x6501066f, mode=2) returned 1 [0079.760] MoveToEx (in: hdc=0x6501066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.760] GetROP2 (hdc=0x6501066f) returned 13 [0079.760] GetBkMode (hdc=0x6501066f) returned 2 [0079.760] SetBkMode (hdc=0x6501066f, mode=1) returned 2 [0079.760] SelectObject (hdc=0x6501066f, h=0x4f300991) returned 0x4f300991 [0079.760] MoveToEx (in: hdc=0x6501066f, x=24, y=21, lppt=0x216e5a8 | out: lppt=0x216e5a8) returned 1 [0079.760] LineTo (hdc=0x6501066f, x=24, y=0) returned 1 [0079.761] SetBkMode (hdc=0x6501066f, mode=2) returned 1 [0079.761] MoveToEx (in: hdc=0x6501066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.761] SelectObject (hdc=0x6501066f, h=0x1b00017) returned 0x4f300991 [0079.761] DeleteObject (ho=0x4f300991) returned 1 [0079.761] RestoreDC (hdc=0x6501066f, nSavedDC=-1) returned 1 [0079.761] GdipReleaseDC (graphics=0x1be567f0, hdc=0x6501066f) returned 0x0 [0079.761] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0079.761] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x6501066f, x1=0, y1=0, rop=0xcc0020) returned 1 [0079.761] GdipReleaseDC (graphics=0x1be567f0, hdc=0x6501066f) returned 0x0 [0079.761] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0079.761] SelectObject (hdc=0x6501066f, h=0x185000f) returned 0x2405099f [0079.761] DeleteDC (hdc=0x6501066f) returned 1 [0079.761] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0079.761] EndPaint (hWnd=0x103b4, lpPaint=0x14e548) returned 1 [0079.761] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.761] IsWindowUnicode (hWnd=0x103b6) returned 1 [0079.761] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.762] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.762] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.762] BeginPaint (in: hWnd=0x103b6, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0079.762] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0079.762] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x3101065f [0079.762] SelectObject (hdc=0x3101065f, h=0x2405099f) returned 0x185000f [0079.762] GdipCreateFromHDC (hdc=0x3101065f, graphics=0x14e528) returned 0x0 [0079.762] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0079.762] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0079.762] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0079.762] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.762] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0079.762] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486910 [0079.762] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486910) returned 0x0 [0079.762] LocalFree (hMem=0x1d486910) returned 0x0 [0079.762] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.762] GdipCreateRegion (region=0x14e550) returned 0x0 [0079.762] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.762] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0079.763] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0079.763] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd5a0dbd) returned 0x0 [0079.763] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.763] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0079.763] GetCurrentObject (hdc=0x3101065f, type=0x1) returned 0x1b00017 [0079.763] GetCurrentObject (hdc=0x3101065f, type=0x2) returned 0x1900010 [0079.763] GetCurrentObject (hdc=0x3101065f, type=0x7) returned 0x2405099f [0079.763] GetCurrentObject (hdc=0x3101065f, type=0x6) returned 0x18a0048 [0079.763] SaveDC (hdc=0x3101065f) returned 1 [0079.763] GetNearestColor (hdc=0x3101065f, color=0xf0f0f0) returned 0xf0f0f0 [0079.763] GetNearestColor (hdc=0x3101065f, color=0xa0a0a0) returned 0xa0a0a0 [0079.763] GetNearestColor (hdc=0x3101065f, color=0x696969) returned 0x696969 [0079.763] GetNearestColor (hdc=0x3101065f, color=0xa0a0a0) returned 0xa0a0a0 [0079.763] GetNearestColor (hdc=0x3101065f, color=0x0) returned 0x0 [0079.763] GetNearestColor (hdc=0x3101065f, color=0xffffff) returned 0xffffff [0079.763] GetNearestColor (hdc=0x3101065f, color=0xe5e5e5) returned 0xe5e5e5 [0079.763] GetNearestColor (hdc=0x3101065f, color=0xd8d8d8) returned 0xd8d8d8 [0079.763] GetNearestColor (hdc=0x3101065f, color=0x0) returned 0x0 [0079.763] RestoreDC (hdc=0x3101065f, nSavedDC=-1) returned 1 [0079.763] GdipReleaseDC (graphics=0x1be567f0, hdc=0x3101065f) returned 0x0 [0079.764] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.764] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExè\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.764] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.764] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x216eec8) returned 0x0 [0079.764] GdipSetStringFormatAlign (format=0x1be57ed0, align=0x1) returned 0x0 [0079.764] GdipSetStringFormatLineAlign (format=0x1be57ed0, align=0x1) returned 0x0 [0079.764] GdipSetStringFormatHotkeyPrefix (format=0x1be57ed0, hotkeyPrefix=2) returned 0x0 [0079.764] GdipGetStringFormatFlags (format=0x1be57ed0, flags=0x14e378) returned 0x0 [0079.764] GdipGetStringFormatTrimming (format=0x1be57ed0, trimming=0x14e378) returned 0x0 [0079.764] GdipGetStringFormatHotkeyPrefix (format=0x1be57ed0, hotkeyPrefix=0x14e378) returned 0x0 [0079.764] GdipGetFontSize (font=0x1be57ed0, size=0x14e378) returned 0x0 [0079.764] GdipGetFontStyle (font=0x1be57ed0, style=0x14e378) returned 0x0 [0079.764] GdipDeleteStringFormat (format=0x1be57ed0) returned 0x0 [0079.764] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.765] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.765] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.765] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0079.765] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x216eff8) returned 0x0 [0079.765] GdipSetStringFormatFlags (format=0x1be57d10, flags=0) returned 0x0 [0079.765] GdipSetStringFormatTrimming (format=0x1be57d10, trimming=0x1) returned 0x0 [0079.765] GdipSetStringFormatHotkeyPrefix (format=0x1be57d10, hotkeyPrefix=2) returned 0x0 [0079.765] GdipSetStringFormatAlign (format=0x1be57d10, align=0x1) returned 0x0 [0079.765] GdipSetStringFormatLineAlign (format=0x1be57d10, align=0x1) returned 0x0 [0079.765] GdipMeasureString (graphics=0x1be58070, string="7", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57d10, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0079.765] GdipDeleteStringFormat (format=0x1be57d10) returned 0x0 [0079.765] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0079.765] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.765] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.766] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.766] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0079.766] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.766] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0079.766] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.766] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0079.766] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486c90 [0079.766] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486c90) returned 0x0 [0079.766] LocalFree (hMem=0x1d486c90) returned 0x0 [0079.766] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486150 [0079.766] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486150) returned 0x0 [0079.766] LocalFree (hMem=0x1d486150) returned 0x0 [0079.766] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.766] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0079.766] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0079.766] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0079.766] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.766] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0079.766] GetCurrentObject (hdc=0x3101065f, type=0x1) returned 0x1b00017 [0079.766] GetCurrentObject (hdc=0x3101065f, type=0x2) returned 0x1900010 [0079.766] GetCurrentObject (hdc=0x3101065f, type=0x7) returned 0x2405099f [0079.767] GetCurrentObject (hdc=0x3101065f, type=0x6) returned 0x18a0048 [0079.767] SaveDC (hdc=0x3101065f) returned 1 [0079.767] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5f0409d6 [0079.767] GetClipRgn (hdc=0x3101065f, hrgn=0x5f0409d6) returned 0 [0079.767] SelectClipRgn (hdc=0x3101065f, hrgn=0x710407ff) returned 2 [0079.767] DeleteObject (ho=0x5f0409d6) returned 1 [0079.767] DeleteObject (ho=0x710407ff) returned 1 [0079.767] OffsetViewportOrgEx (in: hdc=0x3101065f, x=0, y=0, lppt=0x216f3b8 | out: lppt=0x216f3b8) returned 1 [0079.767] GetNearestColor (hdc=0x3101065f, color=0xf0f0f0) returned 0xf0f0f0 [0079.767] CreateSolidBrush (color=0xf0f0f0) returned 0x571009b2 [0079.767] FillRect (hDC=0x3101065f, lprc=0x14e1c8, hbr=0x571009b2) returned 1 [0079.767] DeleteObject (ho=0x571009b2) returned 1 [0079.767] RestoreDC (hdc=0x3101065f, nSavedDC=-1) returned 1 [0079.767] GdipReleaseDC (graphics=0x1be567f0, hdc=0x3101065f) returned 0x0 [0079.767] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.767] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0079.768] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.768] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x216f4b8) returned 0x0 [0079.768] GdipSetStringFormatAlign (format=0x1be57fb0, align=0x1) returned 0x0 [0079.768] GdipSetStringFormatLineAlign (format=0x1be57fb0, align=0x1) returned 0x0 [0079.768] GdipSetStringFormatHotkeyPrefix (format=0x1be57fb0, hotkeyPrefix=2) returned 0x0 [0079.768] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0079.768] GdipDrawString (graphics=0x1be567f0, string="7", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57fb0, brush=0x1be515e0) returned 0x0 [0079.768] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0079.768] GdipDeleteStringFormat (format=0x1be57fb0) returned 0x0 [0079.768] GetFocus () returned 0x103c8 [0079.768] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExå\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.768] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.768] GdipCreateRegion (region=0x14e030) returned 0x0 [0079.769] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.769] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0079.769] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.769] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0079.769] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d485f10 [0079.769] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d485f10) returned 0x0 [0079.769] LocalFree (hMem=0x1d485f10) returned 0x0 [0079.769] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486410 [0079.769] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486410) returned 0x0 [0079.769] LocalFree (hMem=0x1d486410) returned 0x0 [0079.769] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.769] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0079.769] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0079.769] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0079.769] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.769] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0079.769] GetCurrentObject (hdc=0x3101065f, type=0x1) returned 0x1b00017 [0079.769] GetCurrentObject (hdc=0x3101065f, type=0x2) returned 0x1900010 [0079.769] GetCurrentObject (hdc=0x3101065f, type=0x7) returned 0x2405099f [0079.769] GetCurrentObject (hdc=0x3101065f, type=0x6) returned 0x18a0048 [0079.769] SaveDC (hdc=0x3101065f) returned 1 [0079.770] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x720407ff [0079.770] GetClipRgn (hdc=0x3101065f, hrgn=0x720407ff) returned 0 [0079.770] SelectClipRgn (hdc=0x3101065f, hrgn=0x600409d6) returned 2 [0079.770] DeleteObject (ho=0x720407ff) returned 1 [0079.770] DeleteObject (ho=0x600409d6) returned 1 [0079.770] OffsetViewportOrgEx (in: hdc=0x3101065f, x=0, y=0, lppt=0x216f8a0 | out: lppt=0x216f8a0) returned 1 [0079.770] GetROP2 (hdc=0x3101065f) returned 13 [0079.770] GetBkMode (hdc=0x3101065f) returned 2 [0079.772] SetBkMode (hdc=0x3101065f, mode=1) returned 2 [0079.772] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x50300991 [0079.772] SelectObject (hdc=0x3101065f, h=0x50300991) returned 0x1b00017 [0079.772] MoveToEx (in: hdc=0x3101065f, x=25, y=0, lppt=0x216f908 | out: lppt=0x216f908) returned 1 [0079.772] LineTo (hdc=0x3101065f, x=0, y=0) returned 1 [0079.772] SetBkMode (hdc=0x3101065f, mode=2) returned 1 [0079.772] MoveToEx (in: hdc=0x3101065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.772] GetROP2 (hdc=0x3101065f) returned 13 [0079.773] GetBkMode (hdc=0x3101065f) returned 2 [0079.773] SetBkMode (hdc=0x3101065f, mode=1) returned 2 [0079.773] SelectObject (hdc=0x3101065f, h=0x50300991) returned 0x50300991 [0079.773] MoveToEx (in: hdc=0x3101065f, x=0, y=0, lppt=0x216f920 | out: lppt=0x216f920) returned 1 [0079.773] LineTo (hdc=0x3101065f, x=0, y=22) returned 1 [0079.773] SetBkMode (hdc=0x3101065f, mode=2) returned 1 [0079.773] MoveToEx (in: hdc=0x3101065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.773] SelectObject (hdc=0x3101065f, h=0x1b00017) returned 0x50300991 [0079.773] DeleteObject (ho=0x50300991) returned 1 [0079.773] GetROP2 (hdc=0x3101065f) returned 13 [0079.773] GetBkMode (hdc=0x3101065f) returned 2 [0079.773] SetBkMode (hdc=0x3101065f, mode=1) returned 2 [0079.773] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x163009e1 [0079.773] SelectObject (hdc=0x3101065f, h=0x163009e1) returned 0x1b00017 [0079.773] MoveToEx (in: hdc=0x3101065f, x=0, y=22, lppt=0x216f988 | out: lppt=0x216f988) returned 1 [0079.773] LineTo (hdc=0x3101065f, x=25, y=22) returned 1 [0079.773] SetBkMode (hdc=0x3101065f, mode=2) returned 1 [0079.773] MoveToEx (in: hdc=0x3101065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.773] GetROP2 (hdc=0x3101065f) returned 13 [0079.773] GetBkMode (hdc=0x3101065f) returned 2 [0079.773] SetBkMode (hdc=0x3101065f, mode=1) returned 2 [0079.774] SelectObject (hdc=0x3101065f, h=0x163009e1) returned 0x163009e1 [0079.774] MoveToEx (in: hdc=0x3101065f, x=25, y=22, lppt=0x216f9a0 | out: lppt=0x216f9a0) returned 1 [0079.774] LineTo (hdc=0x3101065f, x=25, y=-1) returned 1 [0079.774] SetBkMode (hdc=0x3101065f, mode=2) returned 1 [0079.774] MoveToEx (in: hdc=0x3101065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.774] SelectObject (hdc=0x3101065f, h=0x1b00017) returned 0x163009e1 [0079.774] DeleteObject (ho=0x163009e1) returned 1 [0079.774] GetROP2 (hdc=0x3101065f) returned 13 [0079.774] GetBkMode (hdc=0x3101065f) returned 2 [0079.774] SetBkMode (hdc=0x3101065f, mode=1) returned 2 [0079.774] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x51300991 [0079.774] SelectObject (hdc=0x3101065f, h=0x51300991) returned 0x1b00017 [0079.774] MoveToEx (in: hdc=0x3101065f, x=24, y=1, lppt=0x216fa08 | out: lppt=0x216fa08) returned 1 [0079.774] LineTo (hdc=0x3101065f, x=1, y=1) returned 1 [0079.774] SetBkMode (hdc=0x3101065f, mode=2) returned 1 [0079.774] MoveToEx (in: hdc=0x3101065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.774] GetROP2 (hdc=0x3101065f) returned 13 [0079.774] GetBkMode (hdc=0x3101065f) returned 2 [0079.774] SetBkMode (hdc=0x3101065f, mode=1) returned 2 [0079.774] SelectObject (hdc=0x3101065f, h=0x51300991) returned 0x51300991 [0079.774] MoveToEx (in: hdc=0x3101065f, x=1, y=1, lppt=0x216fa20 | out: lppt=0x216fa20) returned 1 [0079.774] LineTo (hdc=0x3101065f, x=1, y=21) returned 1 [0079.774] SetBkMode (hdc=0x3101065f, mode=2) returned 1 [0079.775] MoveToEx (in: hdc=0x3101065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.775] SelectObject (hdc=0x3101065f, h=0x1b00017) returned 0x51300991 [0079.775] DeleteObject (ho=0x51300991) returned 1 [0079.775] GetROP2 (hdc=0x3101065f) returned 13 [0079.775] GetBkMode (hdc=0x3101065f) returned 2 [0079.775] SetBkMode (hdc=0x3101065f, mode=1) returned 2 [0079.775] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x173009e1 [0079.775] SelectObject (hdc=0x3101065f, h=0x173009e1) returned 0x1b00017 [0079.775] MoveToEx (in: hdc=0x3101065f, x=1, y=21, lppt=0x216fa88 | out: lppt=0x216fa88) returned 1 [0079.775] LineTo (hdc=0x3101065f, x=24, y=21) returned 1 [0079.775] SetBkMode (hdc=0x3101065f, mode=2) returned 1 [0079.775] MoveToEx (in: hdc=0x3101065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.775] GetROP2 (hdc=0x3101065f) returned 13 [0079.775] GetBkMode (hdc=0x3101065f) returned 2 [0079.775] SetBkMode (hdc=0x3101065f, mode=1) returned 2 [0079.775] SelectObject (hdc=0x3101065f, h=0x173009e1) returned 0x173009e1 [0079.775] MoveToEx (in: hdc=0x3101065f, x=24, y=21, lppt=0x216faa0 | out: lppt=0x216faa0) returned 1 [0079.775] LineTo (hdc=0x3101065f, x=24, y=0) returned 1 [0079.775] SetBkMode (hdc=0x3101065f, mode=2) returned 1 [0079.775] MoveToEx (in: hdc=0x3101065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.775] SelectObject (hdc=0x3101065f, h=0x1b00017) returned 0x173009e1 [0079.775] DeleteObject (ho=0x173009e1) returned 1 [0079.776] RestoreDC (hdc=0x3101065f, nSavedDC=-1) returned 1 [0079.776] GdipReleaseDC (graphics=0x1be567f0, hdc=0x3101065f) returned 0x0 [0079.776] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0079.776] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x3101065f, x1=0, y1=0, rop=0xcc0020) returned 1 [0079.776] GdipReleaseDC (graphics=0x1be567f0, hdc=0x3101065f) returned 0x0 [0079.776] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0079.776] SelectObject (hdc=0x3101065f, h=0x185000f) returned 0x2405099f [0079.776] DeleteDC (hdc=0x3101065f) returned 1 [0079.776] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0079.776] EndPaint (hWnd=0x103b6, lpPaint=0x14e548) returned 1 [0079.776] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.776] IsWindowUnicode (hWnd=0x103b8) returned 1 [0079.776] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.776] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.776] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.777] BeginPaint (in: hWnd=0x103b8, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0079.777] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0079.777] CreateCompatibleDC (hdc=0x220106d6) returned 0x4f0109e0 [0079.777] SelectObject (hdc=0x4f0109e0, h=0x2405099f) returned 0x185000f [0079.777] GdipCreateFromHDC (hdc=0x4f0109e0, graphics=0x14e528) returned 0x0 [0079.777] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0079.777] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0079.777] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0079.777] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.777] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0079.777] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4862d0 [0079.777] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4862d0) returned 0x0 [0079.777] LocalFree (hMem=0x1d4862d0) returned 0x0 [0079.777] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.777] GdipCreateRegion (region=0x14e550) returned 0x0 [0079.777] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.777] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0079.777] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0079.778] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd570dbd) returned 0x0 [0079.778] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.778] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0079.778] GetCurrentObject (hdc=0x4f0109e0, type=0x1) returned 0x1b00017 [0079.778] GetCurrentObject (hdc=0x4f0109e0, type=0x2) returned 0x1900010 [0079.778] GetCurrentObject (hdc=0x4f0109e0, type=0x7) returned 0x2405099f [0079.778] GetCurrentObject (hdc=0x4f0109e0, type=0x6) returned 0x18a0048 [0079.778] SaveDC (hdc=0x4f0109e0) returned 1 [0079.778] GetNearestColor (hdc=0x4f0109e0, color=0xf0f0f0) returned 0xf0f0f0 [0079.778] GetNearestColor (hdc=0x4f0109e0, color=0xa0a0a0) returned 0xa0a0a0 [0079.778] GetNearestColor (hdc=0x4f0109e0, color=0x696969) returned 0x696969 [0079.778] GetNearestColor (hdc=0x4f0109e0, color=0xa0a0a0) returned 0xa0a0a0 [0079.778] GetNearestColor (hdc=0x4f0109e0, color=0x0) returned 0x0 [0079.778] GetNearestColor (hdc=0x4f0109e0, color=0xffffff) returned 0xffffff [0079.778] GetNearestColor (hdc=0x4f0109e0, color=0xe5e5e5) returned 0xe5e5e5 [0079.778] GetNearestColor (hdc=0x4f0109e0, color=0xd8d8d8) returned 0xd8d8d8 [0079.779] GetNearestColor (hdc=0x4f0109e0, color=0x0) returned 0x0 [0079.779] RestoreDC (hdc=0x4f0109e0, nSavedDC=-1) returned 1 [0079.779] GdipReleaseDC (graphics=0x1be567f0, hdc=0x4f0109e0) returned 0x0 [0079.779] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExý\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.779] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.779] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21703c0) returned 0x0 [0079.779] GdipSetStringFormatAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0079.779] GdipSetStringFormatLineAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0079.779] GdipSetStringFormatHotkeyPrefix (format=0x1be57ae0, hotkeyPrefix=2) returned 0x0 [0079.779] GdipGetStringFormatFlags (format=0x1be57ae0, flags=0x14e378) returned 0x0 [0079.779] GdipGetStringFormatTrimming (format=0x1be57ae0, trimming=0x14e378) returned 0x0 [0079.779] GdipGetStringFormatHotkeyPrefix (format=0x1be57ae0, hotkeyPrefix=0x14e378) returned 0x0 [0079.779] GdipGetFontSize (font=0x1be57ae0, size=0x14e378) returned 0x0 [0079.779] GdipGetFontStyle (font=0x1be57ae0, style=0x14e378) returned 0x0 [0079.779] GdipDeleteStringFormat (format=0x1be57ae0) returned 0x0 [0079.780] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.780] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.780] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.780] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0079.780] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21704f0) returned 0x0 [0079.780] GdipSetStringFormatFlags (format=0x1be57d10, flags=0) returned 0x0 [0079.780] GdipSetStringFormatTrimming (format=0x1be57d10, trimming=0x1) returned 0x0 [0079.780] GdipSetStringFormatHotkeyPrefix (format=0x1be57d10, hotkeyPrefix=2) returned 0x0 [0079.780] GdipSetStringFormatAlign (format=0x1be57d10, align=0x1) returned 0x0 [0079.780] GdipSetStringFormatLineAlign (format=0x1be57d10, align=0x1) returned 0x0 [0079.780] GdipMeasureString (graphics=0x1be58070, string="0", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57d10, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0079.780] GdipDeleteStringFormat (format=0x1be57d10) returned 0x0 [0079.780] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0079.781] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.781] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.781] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.781] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0079.781] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.781] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0079.781] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.781] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0079.781] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486650 [0079.781] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486650) returned 0x0 [0079.781] LocalFree (hMem=0x1d486650) returned 0x0 [0079.781] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486050 [0079.781] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486050) returned 0x0 [0079.781] LocalFree (hMem=0x1d486050) returned 0x0 [0079.781] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.781] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0079.781] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0079.782] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0079.782] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.782] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0079.782] GetCurrentObject (hdc=0x4f0109e0, type=0x1) returned 0x1b00017 [0079.782] GetCurrentObject (hdc=0x4f0109e0, type=0x2) returned 0x1900010 [0079.782] GetCurrentObject (hdc=0x4f0109e0, type=0x7) returned 0x2405099f [0079.782] GetCurrentObject (hdc=0x4f0109e0, type=0x6) returned 0x18a0048 [0079.782] SaveDC (hdc=0x4f0109e0) returned 1 [0079.782] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x610409d6 [0079.782] GetClipRgn (hdc=0x4f0109e0, hrgn=0x610409d6) returned 0 [0079.782] SelectClipRgn (hdc=0x4f0109e0, hrgn=0x730407ff) returned 2 [0079.782] DeleteObject (ho=0x610409d6) returned 1 [0079.782] DeleteObject (ho=0x730407ff) returned 1 [0079.782] OffsetViewportOrgEx (in: hdc=0x4f0109e0, x=0, y=0, lppt=0x21708b0 | out: lppt=0x21708b0) returned 1 [0079.782] GetNearestColor (hdc=0x4f0109e0, color=0xf0f0f0) returned 0xf0f0f0 [0079.782] CreateSolidBrush (color=0xf0f0f0) returned 0x581009b2 [0079.782] FillRect (hDC=0x4f0109e0, lprc=0x14e1c8, hbr=0x581009b2) returned 1 [0079.782] DeleteObject (ho=0x581009b2) returned 1 [0079.782] RestoreDC (hdc=0x4f0109e0, nSavedDC=-1) returned 1 [0079.782] GdipReleaseDC (graphics=0x1be567f0, hdc=0x4f0109e0) returned 0x0 [0079.783] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0079.783] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.783] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21709b0) returned 0x0 [0079.783] GdipSetStringFormatAlign (format=0x1be57a00, align=0x1) returned 0x0 [0079.783] GdipSetStringFormatLineAlign (format=0x1be57a00, align=0x1) returned 0x0 [0079.783] GdipSetStringFormatHotkeyPrefix (format=0x1be57a00, hotkeyPrefix=2) returned 0x0 [0079.783] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0079.783] GdipDrawString (graphics=0x1be567f0, string="0", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57a00, brush=0x1be515e0) returned 0x0 [0079.783] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0079.783] GdipDeleteStringFormat (format=0x1be57a00) returned 0x0 [0079.783] GetFocus () returned 0x103c8 [0079.784] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExú\x16\x02", lpUsedDefaultChar=0x0) returned 17 [0079.784] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.784] GdipCreateRegion (region=0x14e030) returned 0x0 [0079.784] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.784] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0079.784] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.784] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0079.784] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4861d0 [0079.784] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4861d0) returned 0x0 [0079.784] LocalFree (hMem=0x1d4861d0) returned 0x0 [0079.784] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486710 [0079.784] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486710) returned 0x0 [0079.784] LocalFree (hMem=0x1d486710) returned 0x0 [0079.784] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.784] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0079.784] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0079.784] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0079.784] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.785] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0079.785] GetCurrentObject (hdc=0x4f0109e0, type=0x1) returned 0x1b00017 [0079.785] GetCurrentObject (hdc=0x4f0109e0, type=0x2) returned 0x1900010 [0079.785] GetCurrentObject (hdc=0x4f0109e0, type=0x7) returned 0x2405099f [0079.785] GetCurrentObject (hdc=0x4f0109e0, type=0x6) returned 0x18a0048 [0079.785] SaveDC (hdc=0x4f0109e0) returned 1 [0079.785] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x740407ff [0079.785] GetClipRgn (hdc=0x4f0109e0, hrgn=0x740407ff) returned 0 [0079.785] SelectClipRgn (hdc=0x4f0109e0, hrgn=0x620409d6) returned 2 [0079.785] DeleteObject (ho=0x740407ff) returned 1 [0079.785] DeleteObject (ho=0x620409d6) returned 1 [0079.785] OffsetViewportOrgEx (in: hdc=0x4f0109e0, x=0, y=0, lppt=0x2170d98 | out: lppt=0x2170d98) returned 1 [0079.785] GetROP2 (hdc=0x4f0109e0) returned 13 [0079.785] GetBkMode (hdc=0x4f0109e0) returned 2 [0079.785] SetBkMode (hdc=0x4f0109e0, mode=1) returned 2 [0079.785] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x183009e1 [0079.785] SelectObject (hdc=0x4f0109e0, h=0x183009e1) returned 0x1b00017 [0079.785] MoveToEx (in: hdc=0x4f0109e0, x=25, y=0, lppt=0x2170e00 | out: lppt=0x2170e00) returned 1 [0079.785] LineTo (hdc=0x4f0109e0, x=0, y=0) returned 1 [0079.786] SetBkMode (hdc=0x4f0109e0, mode=2) returned 1 [0079.786] MoveToEx (in: hdc=0x4f0109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.786] GetROP2 (hdc=0x4f0109e0) returned 13 [0079.786] GetBkMode (hdc=0x4f0109e0) returned 2 [0079.786] SetBkMode (hdc=0x4f0109e0, mode=1) returned 2 [0079.786] SelectObject (hdc=0x4f0109e0, h=0x183009e1) returned 0x183009e1 [0079.786] MoveToEx (in: hdc=0x4f0109e0, x=0, y=0, lppt=0x2170e18 | out: lppt=0x2170e18) returned 1 [0079.786] LineTo (hdc=0x4f0109e0, x=0, y=22) returned 1 [0079.786] SetBkMode (hdc=0x4f0109e0, mode=2) returned 1 [0079.786] MoveToEx (in: hdc=0x4f0109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.786] SelectObject (hdc=0x4f0109e0, h=0x1b00017) returned 0x183009e1 [0079.786] DeleteObject (ho=0x183009e1) returned 1 [0079.786] GetROP2 (hdc=0x4f0109e0) returned 13 [0079.787] GetBkMode (hdc=0x4f0109e0) returned 2 [0079.787] SetBkMode (hdc=0x4f0109e0, mode=1) returned 2 [0079.787] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x52300991 [0079.787] SelectObject (hdc=0x4f0109e0, h=0x52300991) returned 0x1b00017 [0079.787] MoveToEx (in: hdc=0x4f0109e0, x=0, y=22, lppt=0x2170e80 | out: lppt=0x2170e80) returned 1 [0079.787] LineTo (hdc=0x4f0109e0, x=25, y=22) returned 1 [0079.787] SetBkMode (hdc=0x4f0109e0, mode=2) returned 1 [0079.787] MoveToEx (in: hdc=0x4f0109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.787] GetROP2 (hdc=0x4f0109e0) returned 13 [0079.787] GetBkMode (hdc=0x4f0109e0) returned 2 [0079.787] SetBkMode (hdc=0x4f0109e0, mode=1) returned 2 [0079.787] SelectObject (hdc=0x4f0109e0, h=0x52300991) returned 0x52300991 [0079.787] MoveToEx (in: hdc=0x4f0109e0, x=25, y=22, lppt=0x2170e98 | out: lppt=0x2170e98) returned 1 [0079.787] LineTo (hdc=0x4f0109e0, x=25, y=-1) returned 1 [0079.787] SetBkMode (hdc=0x4f0109e0, mode=2) returned 1 [0079.787] MoveToEx (in: hdc=0x4f0109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.787] SelectObject (hdc=0x4f0109e0, h=0x1b00017) returned 0x52300991 [0079.787] DeleteObject (ho=0x52300991) returned 1 [0079.787] GetROP2 (hdc=0x4f0109e0) returned 13 [0079.787] GetBkMode (hdc=0x4f0109e0) returned 2 [0079.787] SetBkMode (hdc=0x4f0109e0, mode=1) returned 2 [0079.787] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x193009e1 [0079.788] SelectObject (hdc=0x4f0109e0, h=0x193009e1) returned 0x1b00017 [0079.788] MoveToEx (in: hdc=0x4f0109e0, x=24, y=1, lppt=0x2170f00 | out: lppt=0x2170f00) returned 1 [0079.788] LineTo (hdc=0x4f0109e0, x=1, y=1) returned 1 [0079.788] SetBkMode (hdc=0x4f0109e0, mode=2) returned 1 [0079.788] MoveToEx (in: hdc=0x4f0109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.788] GetROP2 (hdc=0x4f0109e0) returned 13 [0079.788] GetBkMode (hdc=0x4f0109e0) returned 2 [0079.788] SetBkMode (hdc=0x4f0109e0, mode=1) returned 2 [0079.788] SelectObject (hdc=0x4f0109e0, h=0x193009e1) returned 0x193009e1 [0079.788] MoveToEx (in: hdc=0x4f0109e0, x=1, y=1, lppt=0x2170f18 | out: lppt=0x2170f18) returned 1 [0079.788] LineTo (hdc=0x4f0109e0, x=1, y=21) returned 1 [0079.788] SetBkMode (hdc=0x4f0109e0, mode=2) returned 1 [0079.788] MoveToEx (in: hdc=0x4f0109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.788] SelectObject (hdc=0x4f0109e0, h=0x1b00017) returned 0x193009e1 [0079.788] DeleteObject (ho=0x193009e1) returned 1 [0079.788] GetROP2 (hdc=0x4f0109e0) returned 13 [0079.788] GetBkMode (hdc=0x4f0109e0) returned 2 [0079.788] SetBkMode (hdc=0x4f0109e0, mode=1) returned 2 [0079.788] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x53300991 [0079.788] SelectObject (hdc=0x4f0109e0, h=0x53300991) returned 0x1b00017 [0079.788] MoveToEx (in: hdc=0x4f0109e0, x=1, y=21, lppt=0x2170f80 | out: lppt=0x2170f80) returned 1 [0079.788] LineTo (hdc=0x4f0109e0, x=24, y=21) returned 1 [0079.788] SetBkMode (hdc=0x4f0109e0, mode=2) returned 1 [0079.789] MoveToEx (in: hdc=0x4f0109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.789] GetROP2 (hdc=0x4f0109e0) returned 13 [0079.789] GetBkMode (hdc=0x4f0109e0) returned 2 [0079.789] SetBkMode (hdc=0x4f0109e0, mode=1) returned 2 [0079.789] SelectObject (hdc=0x4f0109e0, h=0x53300991) returned 0x53300991 [0079.789] MoveToEx (in: hdc=0x4f0109e0, x=24, y=21, lppt=0x2170f98 | out: lppt=0x2170f98) returned 1 [0079.789] LineTo (hdc=0x4f0109e0, x=24, y=0) returned 1 [0079.789] SetBkMode (hdc=0x4f0109e0, mode=2) returned 1 [0079.789] MoveToEx (in: hdc=0x4f0109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.789] SelectObject (hdc=0x4f0109e0, h=0x1b00017) returned 0x53300991 [0079.789] DeleteObject (ho=0x53300991) returned 1 [0079.789] RestoreDC (hdc=0x4f0109e0, nSavedDC=-1) returned 1 [0079.789] GdipReleaseDC (graphics=0x1be567f0, hdc=0x4f0109e0) returned 0x0 [0079.789] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0079.789] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x4f0109e0, x1=0, y1=0, rop=0xcc0020) returned 1 [0079.789] GdipReleaseDC (graphics=0x1be567f0, hdc=0x4f0109e0) returned 0x0 [0079.789] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0079.789] SelectObject (hdc=0x4f0109e0, h=0x185000f) returned 0x2405099f [0079.789] DeleteDC (hdc=0x4f0109e0) returned 1 [0079.789] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0079.790] EndPaint (hWnd=0x103b8, lpPaint=0x14e548) returned 1 [0079.790] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.790] IsWindowUnicode (hWnd=0x103ba) returned 1 [0079.790] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.790] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.790] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.790] BeginPaint (in: hWnd=0x103ba, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0079.790] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0079.790] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x6d01066f [0079.790] SelectObject (hdc=0x6d01066f, h=0x2405099f) returned 0x185000f [0079.790] GdipCreateFromHDC (hdc=0x6d01066f, graphics=0x14e528) returned 0x0 [0079.790] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0079.790] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0079.790] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0079.791] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.791] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0079.791] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486510 [0079.791] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486510) returned 0x0 [0079.791] LocalFree (hMem=0x1d486510) returned 0x0 [0079.791] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.791] GdipCreateRegion (region=0x14e550) returned 0x0 [0079.791] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.791] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0079.791] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0079.791] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd540dbd) returned 0x0 [0079.791] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.791] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0079.791] GetCurrentObject (hdc=0x6d01066f, type=0x1) returned 0x1b00017 [0079.791] GetCurrentObject (hdc=0x6d01066f, type=0x2) returned 0x1900010 [0079.791] GetCurrentObject (hdc=0x6d01066f, type=0x7) returned 0x2405099f [0079.791] GetCurrentObject (hdc=0x6d01066f, type=0x6) returned 0x18a0048 [0079.791] SaveDC (hdc=0x6d01066f) returned 1 [0079.791] GetNearestColor (hdc=0x6d01066f, color=0xf0f0f0) returned 0xf0f0f0 [0079.791] GetNearestColor (hdc=0x6d01066f, color=0xa0a0a0) returned 0xa0a0a0 [0079.791] GetNearestColor (hdc=0x6d01066f, color=0x696969) returned 0x696969 [0079.792] GetNearestColor (hdc=0x6d01066f, color=0xa0a0a0) returned 0xa0a0a0 [0079.792] GetNearestColor (hdc=0x6d01066f, color=0x0) returned 0x0 [0079.792] GetNearestColor (hdc=0x6d01066f, color=0xffffff) returned 0xffffff [0079.792] GetNearestColor (hdc=0x6d01066f, color=0xe5e5e5) returned 0xe5e5e5 [0079.792] GetNearestColor (hdc=0x6d01066f, color=0xd8d8d8) returned 0xd8d8d8 [0079.792] GetNearestColor (hdc=0x6d01066f, color=0x0) returned 0x0 [0079.792] RestoreDC (hdc=0x6d01066f, nSavedDC=-1) returned 1 [0079.792] GdipReleaseDC (graphics=0x1be567f0, hdc=0x6d01066f) returned 0x0 [0079.792] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.792] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x12\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0079.792] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.792] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21718b8) returned 0x0 [0079.792] GdipSetStringFormatAlign (format=0x1be57d80, align=0x1) returned 0x0 [0079.792] GdipSetStringFormatLineAlign (format=0x1be57d80, align=0x1) returned 0x0 [0079.793] GdipSetStringFormatHotkeyPrefix (format=0x1be57d80, hotkeyPrefix=2) returned 0x0 [0079.793] GdipGetStringFormatFlags (format=0x1be57d80, flags=0x14e378) returned 0x0 [0079.793] GdipGetStringFormatTrimming (format=0x1be57d80, trimming=0x14e378) returned 0x0 [0079.793] GdipGetStringFormatHotkeyPrefix (format=0x1be57d80, hotkeyPrefix=0x14e378) returned 0x0 [0079.793] GdipGetFontSize (font=0x1be57d80, size=0x14e378) returned 0x0 [0079.793] GdipGetFontStyle (font=0x1be57d80, style=0x14e378) returned 0x0 [0079.793] GdipDeleteStringFormat (format=0x1be57d80) returned 0x0 [0079.793] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.793] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.793] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0079.793] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21719e8) returned 0x0 [0079.793] GdipSetStringFormatFlags (format=0x1be57c30, flags=0) returned 0x0 [0079.793] GdipSetStringFormatTrimming (format=0x1be57c30, trimming=0x1) returned 0x0 [0079.794] GdipSetStringFormatHotkeyPrefix (format=0x1be57c30, hotkeyPrefix=2) returned 0x0 [0079.794] GdipSetStringFormatAlign (format=0x1be57c30, align=0x1) returned 0x0 [0079.794] GdipSetStringFormatLineAlign (format=0x1be57c30, align=0x1) returned 0x0 [0079.794] GdipMeasureString (graphics=0x1be58070, string="4", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57c30, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0079.794] GdipDeleteStringFormat (format=0x1be57c30) returned 0x0 [0079.794] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0079.794] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.794] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.794] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0079.794] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.794] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0079.794] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.794] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0079.794] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486a10 [0079.794] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486a10) returned 0x0 [0079.794] LocalFree (hMem=0x1d486a10) returned 0x0 [0079.794] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486810 [0079.794] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486810) returned 0x0 [0079.795] LocalFree (hMem=0x1d486810) returned 0x0 [0079.795] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.795] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0079.795] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0079.795] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0079.795] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.795] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0079.795] GetCurrentObject (hdc=0x6d01066f, type=0x1) returned 0x1b00017 [0079.795] GetCurrentObject (hdc=0x6d01066f, type=0x2) returned 0x1900010 [0079.795] GetCurrentObject (hdc=0x6d01066f, type=0x7) returned 0x2405099f [0079.795] GetCurrentObject (hdc=0x6d01066f, type=0x6) returned 0x18a0048 [0079.795] SaveDC (hdc=0x6d01066f) returned 1 [0079.795] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x630409d6 [0079.795] GetClipRgn (hdc=0x6d01066f, hrgn=0x630409d6) returned 0 [0079.795] SelectClipRgn (hdc=0x6d01066f, hrgn=0x750407ff) returned 2 [0079.795] DeleteObject (ho=0x630409d6) returned 1 [0079.795] DeleteObject (ho=0x750407ff) returned 1 [0079.795] OffsetViewportOrgEx (in: hdc=0x6d01066f, x=0, y=0, lppt=0x2171da8 | out: lppt=0x2171da8) returned 1 [0079.795] GetNearestColor (hdc=0x6d01066f, color=0xf0f0f0) returned 0xf0f0f0 [0079.795] CreateSolidBrush (color=0xf0f0f0) returned 0x591009b2 [0079.796] FillRect (hDC=0x6d01066f, lprc=0x14e1c8, hbr=0x591009b2) returned 1 [0079.796] DeleteObject (ho=0x591009b2) returned 1 [0079.796] RestoreDC (hdc=0x6d01066f, nSavedDC=-1) returned 1 [0079.796] GdipReleaseDC (graphics=0x1be567f0, hdc=0x6d01066f) returned 0x0 [0079.796] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0079.796] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.796] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2171ea8) returned 0x0 [0079.796] GdipSetStringFormatAlign (format=0x1be57ed0, align=0x1) returned 0x0 [0079.796] GdipSetStringFormatLineAlign (format=0x1be57ed0, align=0x1) returned 0x0 [0079.796] GdipSetStringFormatHotkeyPrefix (format=0x1be57ed0, hotkeyPrefix=2) returned 0x0 [0079.796] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0079.796] GdipDrawString (graphics=0x1be567f0, string="4", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57ed0, brush=0x1be515e0) returned 0x0 [0079.797] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0079.797] GdipDeleteStringFormat (format=0x1be57ed0) returned 0x0 [0079.797] GetFocus () returned 0x103c8 [0079.798] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x0f\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0079.798] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.798] GdipCreateRegion (region=0x14e030) returned 0x0 [0079.798] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.798] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0079.798] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.798] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0079.798] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486790 [0079.798] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486790) returned 0x0 [0079.798] LocalFree (hMem=0x1d486790) returned 0x0 [0079.798] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0079.798] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486110) returned 0x0 [0079.799] LocalFree (hMem=0x1d486110) returned 0x0 [0079.799] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.799] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0079.799] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0079.799] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0079.799] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.799] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0079.799] GetCurrentObject (hdc=0x6d01066f, type=0x1) returned 0x1b00017 [0079.799] GetCurrentObject (hdc=0x6d01066f, type=0x2) returned 0x1900010 [0079.799] GetCurrentObject (hdc=0x6d01066f, type=0x7) returned 0x2405099f [0079.799] GetCurrentObject (hdc=0x6d01066f, type=0x6) returned 0x18a0048 [0079.799] SaveDC (hdc=0x6d01066f) returned 1 [0079.799] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x760407ff [0079.800] GetClipRgn (hdc=0x6d01066f, hrgn=0x760407ff) returned 0 [0079.800] SelectClipRgn (hdc=0x6d01066f, hrgn=0x640409d6) returned 2 [0079.800] DeleteObject (ho=0x760407ff) returned 1 [0079.800] DeleteObject (ho=0x640409d6) returned 1 [0079.800] OffsetViewportOrgEx (in: hdc=0x6d01066f, x=0, y=0, lppt=0x2172290 | out: lppt=0x2172290) returned 1 [0079.800] GetROP2 (hdc=0x6d01066f) returned 13 [0079.800] GetBkMode (hdc=0x6d01066f) returned 2 [0079.800] SetBkMode (hdc=0x6d01066f, mode=1) returned 2 [0079.800] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x54300991 [0079.800] SelectObject (hdc=0x6d01066f, h=0x54300991) returned 0x1b00017 [0079.800] MoveToEx (in: hdc=0x6d01066f, x=25, y=0, lppt=0x21722f8 | out: lppt=0x21722f8) returned 1 [0079.800] LineTo (hdc=0x6d01066f, x=0, y=0) returned 1 [0079.800] SetBkMode (hdc=0x6d01066f, mode=2) returned 1 [0079.800] MoveToEx (in: hdc=0x6d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.800] GetROP2 (hdc=0x6d01066f) returned 13 [0079.800] GetBkMode (hdc=0x6d01066f) returned 2 [0079.800] SetBkMode (hdc=0x6d01066f, mode=1) returned 2 [0079.800] SelectObject (hdc=0x6d01066f, h=0x54300991) returned 0x54300991 [0079.800] MoveToEx (in: hdc=0x6d01066f, x=0, y=0, lppt=0x2172310 | out: lppt=0x2172310) returned 1 [0079.800] LineTo (hdc=0x6d01066f, x=0, y=22) returned 1 [0079.800] SetBkMode (hdc=0x6d01066f, mode=2) returned 1 [0079.800] MoveToEx (in: hdc=0x6d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.800] SelectObject (hdc=0x6d01066f, h=0x1b00017) returned 0x54300991 [0079.801] DeleteObject (ho=0x54300991) returned 1 [0079.801] GetROP2 (hdc=0x6d01066f) returned 13 [0079.801] GetBkMode (hdc=0x6d01066f) returned 2 [0079.801] SetBkMode (hdc=0x6d01066f, mode=1) returned 2 [0079.801] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x1a3009e1 [0079.801] SelectObject (hdc=0x6d01066f, h=0x1a3009e1) returned 0x1b00017 [0079.801] MoveToEx (in: hdc=0x6d01066f, x=0, y=22, lppt=0x2172378 | out: lppt=0x2172378) returned 1 [0079.801] LineTo (hdc=0x6d01066f, x=25, y=22) returned 1 [0079.801] SetBkMode (hdc=0x6d01066f, mode=2) returned 1 [0079.801] MoveToEx (in: hdc=0x6d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.801] GetROP2 (hdc=0x6d01066f) returned 13 [0079.801] GetBkMode (hdc=0x6d01066f) returned 2 [0079.801] SetBkMode (hdc=0x6d01066f, mode=1) returned 2 [0079.801] SelectObject (hdc=0x6d01066f, h=0x1a3009e1) returned 0x1a3009e1 [0079.803] MoveToEx (in: hdc=0x6d01066f, x=25, y=22, lppt=0x2172390 | out: lppt=0x2172390) returned 1 [0079.804] LineTo (hdc=0x6d01066f, x=25, y=-1) returned 1 [0079.804] SetBkMode (hdc=0x6d01066f, mode=2) returned 1 [0079.804] MoveToEx (in: hdc=0x6d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.804] SelectObject (hdc=0x6d01066f, h=0x1b00017) returned 0x1a3009e1 [0079.804] DeleteObject (ho=0x1a3009e1) returned 1 [0079.804] GetROP2 (hdc=0x6d01066f) returned 13 [0079.804] GetBkMode (hdc=0x6d01066f) returned 2 [0079.804] SetBkMode (hdc=0x6d01066f, mode=1) returned 2 [0079.804] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x55300991 [0079.804] SelectObject (hdc=0x6d01066f, h=0x55300991) returned 0x1b00017 [0079.804] MoveToEx (in: hdc=0x6d01066f, x=24, y=1, lppt=0x21723f8 | out: lppt=0x21723f8) returned 1 [0079.804] LineTo (hdc=0x6d01066f, x=1, y=1) returned 1 [0079.804] SetBkMode (hdc=0x6d01066f, mode=2) returned 1 [0079.804] MoveToEx (in: hdc=0x6d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.804] GetROP2 (hdc=0x6d01066f) returned 13 [0079.804] GetBkMode (hdc=0x6d01066f) returned 2 [0079.804] SetBkMode (hdc=0x6d01066f, mode=1) returned 2 [0079.804] SelectObject (hdc=0x6d01066f, h=0x55300991) returned 0x55300991 [0079.804] MoveToEx (in: hdc=0x6d01066f, x=1, y=1, lppt=0x2172410 | out: lppt=0x2172410) returned 1 [0079.804] LineTo (hdc=0x6d01066f, x=1, y=21) returned 1 [0079.804] SetBkMode (hdc=0x6d01066f, mode=2) returned 1 [0079.804] MoveToEx (in: hdc=0x6d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.804] SelectObject (hdc=0x6d01066f, h=0x1b00017) returned 0x55300991 [0079.804] DeleteObject (ho=0x55300991) returned 1 [0079.805] GetROP2 (hdc=0x6d01066f) returned 13 [0079.805] GetBkMode (hdc=0x6d01066f) returned 2 [0079.805] SetBkMode (hdc=0x6d01066f, mode=1) returned 2 [0079.805] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x1b3009e1 [0079.805] SelectObject (hdc=0x6d01066f, h=0x1b3009e1) returned 0x1b00017 [0079.805] MoveToEx (in: hdc=0x6d01066f, x=1, y=21, lppt=0x2172478 | out: lppt=0x2172478) returned 1 [0079.805] LineTo (hdc=0x6d01066f, x=24, y=21) returned 1 [0079.805] SetBkMode (hdc=0x6d01066f, mode=2) returned 1 [0079.805] MoveToEx (in: hdc=0x6d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.805] GetROP2 (hdc=0x6d01066f) returned 13 [0079.805] GetBkMode (hdc=0x6d01066f) returned 2 [0079.805] SetBkMode (hdc=0x6d01066f, mode=1) returned 2 [0079.805] SelectObject (hdc=0x6d01066f, h=0x1b3009e1) returned 0x1b3009e1 [0079.805] MoveToEx (in: hdc=0x6d01066f, x=24, y=21, lppt=0x2172490 | out: lppt=0x2172490) returned 1 [0079.805] LineTo (hdc=0x6d01066f, x=24, y=0) returned 1 [0079.805] SetBkMode (hdc=0x6d01066f, mode=2) returned 1 [0079.805] MoveToEx (in: hdc=0x6d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.805] SelectObject (hdc=0x6d01066f, h=0x1b00017) returned 0x1b3009e1 [0079.805] DeleteObject (ho=0x1b3009e1) returned 1 [0079.805] RestoreDC (hdc=0x6d01066f, nSavedDC=-1) returned 1 [0079.805] GdipReleaseDC (graphics=0x1be567f0, hdc=0x6d01066f) returned 0x0 [0079.806] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0079.806] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x6d01066f, x1=0, y1=0, rop=0xcc0020) returned 1 [0079.806] GdipReleaseDC (graphics=0x1be567f0, hdc=0x6d01066f) returned 0x0 [0079.806] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0079.806] SelectObject (hdc=0x6d01066f, h=0x185000f) returned 0x2405099f [0079.806] DeleteDC (hdc=0x6d01066f) returned 1 [0079.806] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0079.806] EndPaint (hWnd=0x103ba, lpPaint=0x14e548) returned 1 [0079.806] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.806] IsWindowUnicode (hWnd=0x103bc) returned 1 [0079.806] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.806] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.806] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.806] BeginPaint (in: hWnd=0x103bc, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0079.806] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0079.807] CreateCompatibleDC (hdc=0x220106d6) returned 0x3901065f [0079.807] SelectObject (hdc=0x3901065f, h=0x2405099f) returned 0x185000f [0079.807] GdipCreateFromHDC (hdc=0x3901065f, graphics=0x14e528) returned 0x0 [0079.807] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0079.807] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0079.807] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0079.807] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.807] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0079.807] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486e10 [0079.807] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486e10) returned 0x0 [0079.807] LocalFree (hMem=0x1d486e10) returned 0x0 [0079.807] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.807] GdipCreateRegion (region=0x14e550) returned 0x0 [0079.807] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.807] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0079.807] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0079.807] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd510dbd) returned 0x0 [0079.807] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.807] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0079.807] GetCurrentObject (hdc=0x3901065f, type=0x1) returned 0x1b00017 [0079.808] GetCurrentObject (hdc=0x3901065f, type=0x2) returned 0x1900010 [0079.808] GetCurrentObject (hdc=0x3901065f, type=0x7) returned 0x2405099f [0079.808] GetCurrentObject (hdc=0x3901065f, type=0x6) returned 0x18a0048 [0079.808] SaveDC (hdc=0x3901065f) returned 1 [0079.808] GetNearestColor (hdc=0x3901065f, color=0xf0f0f0) returned 0xf0f0f0 [0079.808] GetNearestColor (hdc=0x3901065f, color=0xa0a0a0) returned 0xa0a0a0 [0079.808] GetNearestColor (hdc=0x3901065f, color=0x696969) returned 0x696969 [0079.808] GetNearestColor (hdc=0x3901065f, color=0xa0a0a0) returned 0xa0a0a0 [0079.808] GetNearestColor (hdc=0x3901065f, color=0x0) returned 0x0 [0079.808] GetNearestColor (hdc=0x3901065f, color=0xffffff) returned 0xffffff [0079.808] GetNearestColor (hdc=0x3901065f, color=0xe5e5e5) returned 0xe5e5e5 [0079.808] GetNearestColor (hdc=0x3901065f, color=0xd8d8d8) returned 0xd8d8d8 [0079.808] GetNearestColor (hdc=0x3901065f, color=0x0) returned 0x0 [0079.808] RestoreDC (hdc=0x3901065f, nSavedDC=-1) returned 1 [0079.808] GdipReleaseDC (graphics=0x1be567f0, hdc=0x3901065f) returned 0x0 [0079.808] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx'\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0079.809] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.809] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2172db0) returned 0x0 [0079.809] GdipSetStringFormatAlign (format=0x1be578b0, align=0x1) returned 0x0 [0079.809] GdipSetStringFormatLineAlign (format=0x1be578b0, align=0x1) returned 0x0 [0079.809] GdipSetStringFormatHotkeyPrefix (format=0x1be578b0, hotkeyPrefix=2) returned 0x0 [0079.809] GdipGetStringFormatFlags (format=0x1be578b0, flags=0x14e378) returned 0x0 [0079.809] GdipGetStringFormatTrimming (format=0x1be578b0, trimming=0x14e378) returned 0x0 [0079.809] GdipGetStringFormatHotkeyPrefix (format=0x1be578b0, hotkeyPrefix=0x14e378) returned 0x0 [0079.809] GdipGetFontSize (font=0x1be578b0, size=0x14e378) returned 0x0 [0079.809] GdipGetFontStyle (font=0x1be578b0, style=0x14e378) returned 0x0 [0079.809] GdipDeleteStringFormat (format=0x1be578b0) returned 0x0 [0079.809] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.809] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.810] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.810] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0079.810] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2172ee0) returned 0x0 [0079.810] GdipSetStringFormatFlags (format=0x1be57d80, flags=0) returned 0x0 [0079.810] GdipSetStringFormatTrimming (format=0x1be57d80, trimming=0x1) returned 0x0 [0079.810] GdipSetStringFormatHotkeyPrefix (format=0x1be57d80, hotkeyPrefix=2) returned 0x0 [0079.810] GdipSetStringFormatAlign (format=0x1be57d80, align=0x1) returned 0x0 [0079.810] GdipSetStringFormatLineAlign (format=0x1be57d80, align=0x1) returned 0x0 [0079.810] GdipMeasureString (graphics=0x1be58070, string="6", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57d80, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0079.810] GdipDeleteStringFormat (format=0x1be57d80) returned 0x0 [0079.810] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0079.810] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.810] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.810] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.811] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0079.811] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.811] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0079.811] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.811] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0079.811] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4867d0 [0079.811] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d4867d0) returned 0x0 [0079.811] LocalFree (hMem=0x1d4867d0) returned 0x0 [0079.811] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486590 [0079.811] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486590) returned 0x0 [0079.811] LocalFree (hMem=0x1d486590) returned 0x0 [0079.811] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.811] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0079.811] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0079.811] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0079.811] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.811] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0079.811] GetCurrentObject (hdc=0x3901065f, type=0x1) returned 0x1b00017 [0079.811] GetCurrentObject (hdc=0x3901065f, type=0x2) returned 0x1900010 [0079.811] GetCurrentObject (hdc=0x3901065f, type=0x7) returned 0x2405099f [0079.811] GetCurrentObject (hdc=0x3901065f, type=0x6) returned 0x18a0048 [0079.811] SaveDC (hdc=0x3901065f) returned 1 [0079.812] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x650409d6 [0079.812] GetClipRgn (hdc=0x3901065f, hrgn=0x650409d6) returned 0 [0079.812] SelectClipRgn (hdc=0x3901065f, hrgn=0x770407ff) returned 2 [0079.812] DeleteObject (ho=0x650409d6) returned 1 [0079.812] DeleteObject (ho=0x770407ff) returned 1 [0079.812] OffsetViewportOrgEx (in: hdc=0x3901065f, x=0, y=0, lppt=0x21732a0 | out: lppt=0x21732a0) returned 1 [0079.812] GetNearestColor (hdc=0x3901065f, color=0xf0f0f0) returned 0xf0f0f0 [0079.812] CreateSolidBrush (color=0xf0f0f0) returned 0x5a1009b2 [0079.812] FillRect (hDC=0x3901065f, lprc=0x14e1c8, hbr=0x5a1009b2) returned 1 [0079.812] DeleteObject (ho=0x5a1009b2) returned 1 [0079.812] RestoreDC (hdc=0x3901065f, nSavedDC=-1) returned 1 [0079.812] GdipReleaseDC (graphics=0x1be567f0, hdc=0x3901065f) returned 0x0 [0079.812] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.812] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0079.812] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.812] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21733a0) returned 0x0 [0079.813] GdipSetStringFormatAlign (format=0x1be57e60, align=0x1) returned 0x0 [0079.813] GdipSetStringFormatLineAlign (format=0x1be57e60, align=0x1) returned 0x0 [0079.813] GdipSetStringFormatHotkeyPrefix (format=0x1be57e60, hotkeyPrefix=2) returned 0x0 [0079.813] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0079.813] GdipDrawString (graphics=0x1be567f0, string="6", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57e60, brush=0x1be515e0) returned 0x0 [0079.813] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0079.813] GdipDeleteStringFormat (format=0x1be57e60) returned 0x0 [0079.813] GetFocus () returned 0x103c8 [0079.813] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.813] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx$\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0079.813] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.813] GdipCreateRegion (region=0x14e030) returned 0x0 [0079.813] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.814] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0079.814] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.814] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0079.814] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b50 [0079.814] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486b50) returned 0x0 [0079.814] LocalFree (hMem=0x1d486b50) returned 0x0 [0079.814] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486e50 [0079.814] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486e50) returned 0x0 [0079.814] LocalFree (hMem=0x1d486e50) returned 0x0 [0079.814] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.814] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0079.814] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0079.814] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0079.814] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.814] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0079.814] GetCurrentObject (hdc=0x3901065f, type=0x1) returned 0x1b00017 [0079.814] GetCurrentObject (hdc=0x3901065f, type=0x2) returned 0x1900010 [0079.814] GetCurrentObject (hdc=0x3901065f, type=0x7) returned 0x2405099f [0079.814] GetCurrentObject (hdc=0x3901065f, type=0x6) returned 0x18a0048 [0079.814] SaveDC (hdc=0x3901065f) returned 1 [0079.814] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x780407ff [0079.814] GetClipRgn (hdc=0x3901065f, hrgn=0x780407ff) returned 0 [0079.815] SelectClipRgn (hdc=0x3901065f, hrgn=0x660409d6) returned 2 [0079.815] DeleteObject (ho=0x780407ff) returned 1 [0079.815] DeleteObject (ho=0x660409d6) returned 1 [0079.815] OffsetViewportOrgEx (in: hdc=0x3901065f, x=0, y=0, lppt=0x2173788 | out: lppt=0x2173788) returned 1 [0079.815] GetROP2 (hdc=0x3901065f) returned 13 [0079.815] GetBkMode (hdc=0x3901065f) returned 2 [0079.815] SetBkMode (hdc=0x3901065f, mode=1) returned 2 [0079.815] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x1c3009e1 [0079.815] SelectObject (hdc=0x3901065f, h=0x1c3009e1) returned 0x1b00017 [0079.815] MoveToEx (in: hdc=0x3901065f, x=25, y=0, lppt=0x21737f0 | out: lppt=0x21737f0) returned 1 [0079.815] LineTo (hdc=0x3901065f, x=0, y=0) returned 1 [0079.815] SetBkMode (hdc=0x3901065f, mode=2) returned 1 [0079.815] MoveToEx (in: hdc=0x3901065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.815] GetROP2 (hdc=0x3901065f) returned 13 [0079.815] GetBkMode (hdc=0x3901065f) returned 2 [0079.815] SetBkMode (hdc=0x3901065f, mode=1) returned 2 [0079.815] SelectObject (hdc=0x3901065f, h=0x1c3009e1) returned 0x1c3009e1 [0079.815] MoveToEx (in: hdc=0x3901065f, x=0, y=0, lppt=0x2173808 | out: lppt=0x2173808) returned 1 [0079.815] LineTo (hdc=0x3901065f, x=0, y=22) returned 1 [0079.815] SetBkMode (hdc=0x3901065f, mode=2) returned 1 [0079.815] MoveToEx (in: hdc=0x3901065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.815] SelectObject (hdc=0x3901065f, h=0x1b00017) returned 0x1c3009e1 [0079.815] DeleteObject (ho=0x1c3009e1) returned 1 [0079.816] GetROP2 (hdc=0x3901065f) returned 13 [0079.816] GetBkMode (hdc=0x3901065f) returned 2 [0079.816] SetBkMode (hdc=0x3901065f, mode=1) returned 2 [0079.816] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x56300991 [0079.816] SelectObject (hdc=0x3901065f, h=0x56300991) returned 0x1b00017 [0079.816] MoveToEx (in: hdc=0x3901065f, x=0, y=22, lppt=0x2173870 | out: lppt=0x2173870) returned 1 [0079.816] LineTo (hdc=0x3901065f, x=25, y=22) returned 1 [0079.816] SetBkMode (hdc=0x3901065f, mode=2) returned 1 [0079.816] MoveToEx (in: hdc=0x3901065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.816] GetROP2 (hdc=0x3901065f) returned 13 [0079.816] GetBkMode (hdc=0x3901065f) returned 2 [0079.816] SetBkMode (hdc=0x3901065f, mode=1) returned 2 [0079.816] SelectObject (hdc=0x3901065f, h=0x56300991) returned 0x56300991 [0079.816] MoveToEx (in: hdc=0x3901065f, x=25, y=22, lppt=0x2173888 | out: lppt=0x2173888) returned 1 [0079.816] LineTo (hdc=0x3901065f, x=25, y=-1) returned 1 [0079.816] SetBkMode (hdc=0x3901065f, mode=2) returned 1 [0079.816] MoveToEx (in: hdc=0x3901065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.816] SelectObject (hdc=0x3901065f, h=0x1b00017) returned 0x56300991 [0079.816] DeleteObject (ho=0x56300991) returned 1 [0079.816] GetROP2 (hdc=0x3901065f) returned 13 [0079.816] GetBkMode (hdc=0x3901065f) returned 2 [0079.816] SetBkMode (hdc=0x3901065f, mode=1) returned 2 [0079.817] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x1d3009e1 [0079.817] SelectObject (hdc=0x3901065f, h=0x1d3009e1) returned 0x1b00017 [0079.817] MoveToEx (in: hdc=0x3901065f, x=24, y=1, lppt=0x21738f0 | out: lppt=0x21738f0) returned 1 [0079.817] LineTo (hdc=0x3901065f, x=1, y=1) returned 1 [0079.817] SetBkMode (hdc=0x3901065f, mode=2) returned 1 [0079.910] MoveToEx (in: hdc=0x3901065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.910] GetROP2 (hdc=0x3901065f) returned 13 [0079.910] GetBkMode (hdc=0x3901065f) returned 2 [0079.911] SetBkMode (hdc=0x3901065f, mode=1) returned 2 [0079.911] SelectObject (hdc=0x3901065f, h=0x1d3009e1) returned 0x1d3009e1 [0079.911] MoveToEx (in: hdc=0x3901065f, x=1, y=1, lppt=0x2173908 | out: lppt=0x2173908) returned 1 [0079.911] LineTo (hdc=0x3901065f, x=1, y=21) returned 1 [0079.911] SetBkMode (hdc=0x3901065f, mode=2) returned 1 [0079.911] MoveToEx (in: hdc=0x3901065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.911] SelectObject (hdc=0x3901065f, h=0x1b00017) returned 0x1d3009e1 [0079.911] DeleteObject (ho=0x1d3009e1) returned 1 [0079.911] GetROP2 (hdc=0x3901065f) returned 13 [0079.911] GetBkMode (hdc=0x3901065f) returned 2 [0079.911] SetBkMode (hdc=0x3901065f, mode=1) returned 2 [0079.911] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x32300981 [0079.911] SelectObject (hdc=0x3901065f, h=0x32300981) returned 0x1b00017 [0079.911] MoveToEx (in: hdc=0x3901065f, x=1, y=21, lppt=0x2173970 | out: lppt=0x2173970) returned 1 [0079.912] LineTo (hdc=0x3901065f, x=24, y=21) returned 1 [0079.912] SetBkMode (hdc=0x3901065f, mode=2) returned 1 [0079.912] MoveToEx (in: hdc=0x3901065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.912] GetROP2 (hdc=0x3901065f) returned 13 [0079.912] GetBkMode (hdc=0x3901065f) returned 2 [0079.912] SetBkMode (hdc=0x3901065f, mode=1) returned 2 [0079.912] SelectObject (hdc=0x3901065f, h=0x32300981) returned 0x32300981 [0079.912] MoveToEx (in: hdc=0x3901065f, x=24, y=21, lppt=0x2173988 | out: lppt=0x2173988) returned 1 [0079.912] LineTo (hdc=0x3901065f, x=24, y=0) returned 1 [0079.912] SetBkMode (hdc=0x3901065f, mode=2) returned 1 [0079.912] MoveToEx (in: hdc=0x3901065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.912] SelectObject (hdc=0x3901065f, h=0x1b00017) returned 0x32300981 [0079.912] DeleteObject (ho=0x32300981) returned 1 [0079.912] RestoreDC (hdc=0x3901065f, nSavedDC=-1) returned 1 [0079.912] GdipReleaseDC (graphics=0x1be567f0, hdc=0x3901065f) returned 0x0 [0079.912] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0079.912] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x3901065f, x1=0, y1=0, rop=0xcc0020) returned 1 [0079.913] GdipReleaseDC (graphics=0x1be567f0, hdc=0x3901065f) returned 0x0 [0079.913] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0079.915] SelectObject (hdc=0x3901065f, h=0x185000f) returned 0x2405099f [0079.915] DeleteDC (hdc=0x3901065f) returned 1 [0079.915] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0079.915] EndPaint (hWnd=0x103bc, lpPaint=0x14e548) returned 1 [0079.915] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.915] IsWindowUnicode (hWnd=0x103be) returned 1 [0079.915] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.915] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.915] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.916] BeginPaint (in: hWnd=0x103be, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0079.916] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0079.916] CreateCompatibleDC (hdc=0x220106d6) returned 0x570109e0 [0079.916] SelectObject (hdc=0x570109e0, h=0x2405099f) returned 0x185000f [0079.916] GdipCreateFromHDC (hdc=0x570109e0, graphics=0x14e528) returned 0x0 [0079.916] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0079.916] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0079.917] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0079.917] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.917] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0079.921] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4862d0 [0079.921] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d4862d0) returned 0x0 [0079.921] LocalFree (hMem=0x1d4862d0) returned 0x0 [0079.921] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.921] GdipCreateRegion (region=0x14e550) returned 0x0 [0079.921] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.921] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0079.921] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0079.921] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd4e0dbd) returned 0x0 [0079.921] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.921] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0079.921] GetCurrentObject (hdc=0x570109e0, type=0x1) returned 0x1b00017 [0079.921] GetCurrentObject (hdc=0x570109e0, type=0x2) returned 0x1900010 [0079.921] GetCurrentObject (hdc=0x570109e0, type=0x7) returned 0x2405099f [0079.921] GetCurrentObject (hdc=0x570109e0, type=0x6) returned 0x18a0048 [0079.922] SaveDC (hdc=0x570109e0) returned 1 [0079.922] GetNearestColor (hdc=0x570109e0, color=0xf0f0f0) returned 0xf0f0f0 [0079.922] GetNearestColor (hdc=0x570109e0, color=0xa0a0a0) returned 0xa0a0a0 [0079.922] GetNearestColor (hdc=0x570109e0, color=0x696969) returned 0x696969 [0079.922] GetNearestColor (hdc=0x570109e0, color=0xa0a0a0) returned 0xa0a0a0 [0079.922] GetNearestColor (hdc=0x570109e0, color=0x0) returned 0x0 [0079.922] GetNearestColor (hdc=0x570109e0, color=0xffffff) returned 0xffffff [0079.922] GetNearestColor (hdc=0x570109e0, color=0xe5e5e5) returned 0xe5e5e5 [0079.922] GetNearestColor (hdc=0x570109e0, color=0xd8d8d8) returned 0xd8d8d8 [0079.922] GetNearestColor (hdc=0x570109e0, color=0x0) returned 0x0 [0079.922] RestoreDC (hdc=0x570109e0, nSavedDC=-1) returned 1 [0079.922] GdipReleaseDC (graphics=0x1be567f0, hdc=0x570109e0) returned 0x0 [0079.923] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.923] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx<\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0079.923] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.923] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21742a8) returned 0x0 [0079.923] GdipSetStringFormatAlign (format=0x1be57ca0, align=0x1) returned 0x0 [0079.923] GdipSetStringFormatLineAlign (format=0x1be57ca0, align=0x1) returned 0x0 [0079.923] GdipSetStringFormatHotkeyPrefix (format=0x1be57ca0, hotkeyPrefix=2) returned 0x0 [0079.924] GdipGetStringFormatFlags (format=0x1be57ca0, flags=0x14e378) returned 0x0 [0079.924] GdipGetStringFormatTrimming (format=0x1be57ca0, trimming=0x14e378) returned 0x0 [0079.924] GdipGetStringFormatHotkeyPrefix (format=0x1be57ca0, hotkeyPrefix=0x14e378) returned 0x0 [0079.924] GdipGetFontSize (font=0x1be57ca0, size=0x14e378) returned 0x0 [0079.924] GdipGetFontStyle (font=0x1be57ca0, style=0x14e378) returned 0x0 [0079.924] GdipDeleteStringFormat (format=0x1be57ca0) returned 0x0 [0079.924] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.925] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.926] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.926] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0079.926] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21743d8) returned 0x0 [0079.926] GdipSetStringFormatFlags (format=0x1be57f40, flags=0) returned 0x0 [0079.926] GdipSetStringFormatTrimming (format=0x1be57f40, trimming=0x1) returned 0x0 [0079.926] GdipSetStringFormatHotkeyPrefix (format=0x1be57f40, hotkeyPrefix=2) returned 0x0 [0079.926] GdipSetStringFormatAlign (format=0x1be57f40, align=0x1) returned 0x0 [0079.926] GdipSetStringFormatLineAlign (format=0x1be57f40, align=0x1) returned 0x0 [0079.926] GdipMeasureString (graphics=0x1be58070, string="9", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57f40, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0079.926] GdipDeleteStringFormat (format=0x1be57f40) returned 0x0 [0079.926] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0079.949] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.950] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.950] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0079.950] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.950] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0079.950] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.950] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0079.950] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486450 [0079.950] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486450) returned 0x0 [0079.950] LocalFree (hMem=0x1d486450) returned 0x0 [0079.950] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486bd0 [0079.950] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486bd0) returned 0x0 [0079.950] LocalFree (hMem=0x1d486bd0) returned 0x0 [0079.950] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.950] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0079.950] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0079.950] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0079.950] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.950] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0079.950] GetCurrentObject (hdc=0x570109e0, type=0x1) returned 0x1b00017 [0079.950] GetCurrentObject (hdc=0x570109e0, type=0x2) returned 0x1900010 [0079.950] GetCurrentObject (hdc=0x570109e0, type=0x7) returned 0x2405099f [0079.950] GetCurrentObject (hdc=0x570109e0, type=0x6) returned 0x18a0048 [0079.950] SaveDC (hdc=0x570109e0) returned 1 [0079.951] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x670409d6 [0079.951] GetClipRgn (hdc=0x570109e0, hrgn=0x670409d6) returned 0 [0079.951] SelectClipRgn (hdc=0x570109e0, hrgn=0x790407ff) returned 2 [0079.951] DeleteObject (ho=0x670409d6) returned 1 [0079.951] DeleteObject (ho=0x790407ff) returned 1 [0079.951] OffsetViewportOrgEx (in: hdc=0x570109e0, x=0, y=0, lppt=0x2174798 | out: lppt=0x2174798) returned 1 [0079.951] GetNearestColor (hdc=0x570109e0, color=0xf0f0f0) returned 0xf0f0f0 [0079.951] CreateSolidBrush (color=0xf0f0f0) returned 0x5b1009b2 [0079.951] FillRect (hDC=0x570109e0, lprc=0x14e1c8, hbr=0x5b1009b2) returned 1 [0079.951] DeleteObject (ho=0x5b1009b2) returned 1 [0079.951] RestoreDC (hdc=0x570109e0, nSavedDC=-1) returned 1 [0079.951] GdipReleaseDC (graphics=0x1be567f0, hdc=0x570109e0) returned 0x0 [0079.951] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0079.952] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.952] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2174898) returned 0x0 [0079.952] GdipSetStringFormatAlign (format=0x1be57990, align=0x1) returned 0x0 [0079.952] GdipSetStringFormatLineAlign (format=0x1be57990, align=0x1) returned 0x0 [0079.952] GdipSetStringFormatHotkeyPrefix (format=0x1be57990, hotkeyPrefix=2) returned 0x0 [0079.952] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0079.952] GdipDrawString (graphics=0x1be567f0, string="9", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57990, brush=0x1be515e0) returned 0x0 [0079.952] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0079.952] GdipDeleteStringFormat (format=0x1be57990) returned 0x0 [0079.952] GetFocus () returned 0x103c8 [0079.952] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx9\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0079.952] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.952] GdipCreateRegion (region=0x14e030) returned 0x0 [0079.953] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.953] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0079.953] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.953] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0079.953] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486150 [0079.953] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486150) returned 0x0 [0079.953] LocalFree (hMem=0x1d486150) returned 0x0 [0079.953] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486a90 [0079.953] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486a90) returned 0x0 [0079.953] LocalFree (hMem=0x1d486a90) returned 0x0 [0079.953] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.953] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0079.953] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0079.953] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0079.953] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.953] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0079.953] GetCurrentObject (hdc=0x570109e0, type=0x1) returned 0x1b00017 [0079.953] GetCurrentObject (hdc=0x570109e0, type=0x2) returned 0x1900010 [0079.953] GetCurrentObject (hdc=0x570109e0, type=0x7) returned 0x2405099f [0079.953] GetCurrentObject (hdc=0x570109e0, type=0x6) returned 0x18a0048 [0079.954] SaveDC (hdc=0x570109e0) returned 1 [0079.954] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7a0407ff [0079.954] GetClipRgn (hdc=0x570109e0, hrgn=0x7a0407ff) returned 0 [0079.954] SelectClipRgn (hdc=0x570109e0, hrgn=0x680409d6) returned 2 [0079.954] DeleteObject (ho=0x7a0407ff) returned 1 [0079.954] DeleteObject (ho=0x680409d6) returned 1 [0079.954] OffsetViewportOrgEx (in: hdc=0x570109e0, x=0, y=0, lppt=0x2174c80 | out: lppt=0x2174c80) returned 1 [0079.954] GetROP2 (hdc=0x570109e0) returned 13 [0079.954] GetBkMode (hdc=0x570109e0) returned 2 [0079.954] SetBkMode (hdc=0x570109e0, mode=1) returned 2 [0079.954] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x33300981 [0079.954] SelectObject (hdc=0x570109e0, h=0x33300981) returned 0x1b00017 [0079.954] MoveToEx (in: hdc=0x570109e0, x=25, y=0, lppt=0x2174ce8 | out: lppt=0x2174ce8) returned 1 [0079.954] LineTo (hdc=0x570109e0, x=0, y=0) returned 1 [0079.954] SetBkMode (hdc=0x570109e0, mode=2) returned 1 [0079.954] MoveToEx (in: hdc=0x570109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.954] GetROP2 (hdc=0x570109e0) returned 13 [0079.954] GetBkMode (hdc=0x570109e0) returned 2 [0079.954] SetBkMode (hdc=0x570109e0, mode=1) returned 2 [0079.954] SelectObject (hdc=0x570109e0, h=0x33300981) returned 0x33300981 [0079.954] MoveToEx (in: hdc=0x570109e0, x=0, y=0, lppt=0x2174d00 | out: lppt=0x2174d00) returned 1 [0079.955] LineTo (hdc=0x570109e0, x=0, y=22) returned 1 [0079.955] SetBkMode (hdc=0x570109e0, mode=2) returned 1 [0079.955] MoveToEx (in: hdc=0x570109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.955] SelectObject (hdc=0x570109e0, h=0x1b00017) returned 0x33300981 [0079.955] DeleteObject (ho=0x33300981) returned 1 [0079.955] GetROP2 (hdc=0x570109e0) returned 13 [0079.955] GetBkMode (hdc=0x570109e0) returned 2 [0079.955] SetBkMode (hdc=0x570109e0, mode=1) returned 2 [0079.955] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x1e3009e1 [0079.955] SelectObject (hdc=0x570109e0, h=0x1e3009e1) returned 0x1b00017 [0079.955] MoveToEx (in: hdc=0x570109e0, x=0, y=22, lppt=0x2174d68 | out: lppt=0x2174d68) returned 1 [0079.955] LineTo (hdc=0x570109e0, x=25, y=22) returned 1 [0079.955] SetBkMode (hdc=0x570109e0, mode=2) returned 1 [0079.955] MoveToEx (in: hdc=0x570109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.955] GetROP2 (hdc=0x570109e0) returned 13 [0079.955] GetBkMode (hdc=0x570109e0) returned 2 [0079.955] SetBkMode (hdc=0x570109e0, mode=1) returned 2 [0079.955] SelectObject (hdc=0x570109e0, h=0x1e3009e1) returned 0x1e3009e1 [0079.955] MoveToEx (in: hdc=0x570109e0, x=25, y=22, lppt=0x2174d80 | out: lppt=0x2174d80) returned 1 [0079.955] LineTo (hdc=0x570109e0, x=25, y=-1) returned 1 [0079.955] SetBkMode (hdc=0x570109e0, mode=2) returned 1 [0079.955] MoveToEx (in: hdc=0x570109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.955] SelectObject (hdc=0x570109e0, h=0x1b00017) returned 0x1e3009e1 [0079.956] DeleteObject (ho=0x1e3009e1) returned 1 [0079.956] GetROP2 (hdc=0x570109e0) returned 13 [0079.956] GetBkMode (hdc=0x570109e0) returned 2 [0079.956] SetBkMode (hdc=0x570109e0, mode=1) returned 2 [0079.956] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x34300981 [0079.956] SelectObject (hdc=0x570109e0, h=0x34300981) returned 0x1b00017 [0079.956] MoveToEx (in: hdc=0x570109e0, x=24, y=1, lppt=0x2174de8 | out: lppt=0x2174de8) returned 1 [0079.956] LineTo (hdc=0x570109e0, x=1, y=1) returned 1 [0079.956] SetBkMode (hdc=0x570109e0, mode=2) returned 1 [0079.956] MoveToEx (in: hdc=0x570109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.956] GetROP2 (hdc=0x570109e0) returned 13 [0079.956] GetBkMode (hdc=0x570109e0) returned 2 [0079.956] SetBkMode (hdc=0x570109e0, mode=1) returned 2 [0079.956] SelectObject (hdc=0x570109e0, h=0x34300981) returned 0x34300981 [0079.956] MoveToEx (in: hdc=0x570109e0, x=1, y=1, lppt=0x2174e00 | out: lppt=0x2174e00) returned 1 [0079.956] LineTo (hdc=0x570109e0, x=1, y=21) returned 1 [0079.956] SetBkMode (hdc=0x570109e0, mode=2) returned 1 [0079.956] MoveToEx (in: hdc=0x570109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.956] SelectObject (hdc=0x570109e0, h=0x1b00017) returned 0x34300981 [0079.956] DeleteObject (ho=0x34300981) returned 1 [0079.956] GetROP2 (hdc=0x570109e0) returned 13 [0079.956] GetBkMode (hdc=0x570109e0) returned 2 [0079.956] SetBkMode (hdc=0x570109e0, mode=1) returned 2 [0079.957] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x1f3009e1 [0079.957] SelectObject (hdc=0x570109e0, h=0x1f3009e1) returned 0x1b00017 [0079.957] MoveToEx (in: hdc=0x570109e0, x=1, y=21, lppt=0x2174e68 | out: lppt=0x2174e68) returned 1 [0079.957] LineTo (hdc=0x570109e0, x=24, y=21) returned 1 [0079.957] SetBkMode (hdc=0x570109e0, mode=2) returned 1 [0079.957] MoveToEx (in: hdc=0x570109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.957] GetROP2 (hdc=0x570109e0) returned 13 [0079.957] GetBkMode (hdc=0x570109e0) returned 2 [0079.957] SetBkMode (hdc=0x570109e0, mode=1) returned 2 [0079.957] SelectObject (hdc=0x570109e0, h=0x1f3009e1) returned 0x1f3009e1 [0079.957] MoveToEx (in: hdc=0x570109e0, x=24, y=21, lppt=0x2174e80 | out: lppt=0x2174e80) returned 1 [0079.957] LineTo (hdc=0x570109e0, x=24, y=0) returned 1 [0079.957] SetBkMode (hdc=0x570109e0, mode=2) returned 1 [0079.957] MoveToEx (in: hdc=0x570109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.957] SelectObject (hdc=0x570109e0, h=0x1b00017) returned 0x1f3009e1 [0079.957] DeleteObject (ho=0x1f3009e1) returned 1 [0079.957] RestoreDC (hdc=0x570109e0, nSavedDC=-1) returned 1 [0079.957] GdipReleaseDC (graphics=0x1be567f0, hdc=0x570109e0) returned 0x0 [0079.957] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0079.958] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x570109e0, x1=0, y1=0, rop=0xcc0020) returned 1 [0079.958] GdipReleaseDC (graphics=0x1be567f0, hdc=0x570109e0) returned 0x0 [0079.958] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0079.958] SelectObject (hdc=0x570109e0, h=0x185000f) returned 0x2405099f [0079.958] DeleteDC (hdc=0x570109e0) returned 1 [0079.958] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0079.959] EndPaint (hWnd=0x103be, lpPaint=0x14e548) returned 1 [0079.959] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.959] IsWindowUnicode (hWnd=0x103c0) returned 1 [0079.959] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.960] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.960] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.960] BeginPaint (in: hWnd=0x103c0, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0079.960] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0079.960] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x7501066f [0079.960] SelectObject (hdc=0x7501066f, h=0x2405099f) returned 0x185000f [0079.960] GdipCreateFromHDC (hdc=0x7501066f, graphics=0x14e528) returned 0x0 [0079.960] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0079.960] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0079.960] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0079.960] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.960] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0079.960] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0079.960] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486110) returned 0x0 [0079.960] LocalFree (hMem=0x1d486110) returned 0x0 [0079.960] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.960] GdipCreateRegion (region=0x14e550) returned 0x0 [0079.960] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.961] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0079.961] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0079.961] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd4b0dbd) returned 0x0 [0079.961] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.961] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0079.961] GetCurrentObject (hdc=0x7501066f, type=0x1) returned 0x1b00017 [0079.961] GetCurrentObject (hdc=0x7501066f, type=0x2) returned 0x1900010 [0079.961] GetCurrentObject (hdc=0x7501066f, type=0x7) returned 0x2405099f [0079.961] GetCurrentObject (hdc=0x7501066f, type=0x6) returned 0x18a0048 [0079.961] SaveDC (hdc=0x7501066f) returned 1 [0079.961] GetNearestColor (hdc=0x7501066f, color=0xf0f0f0) returned 0xf0f0f0 [0079.961] GetNearestColor (hdc=0x7501066f, color=0xa0a0a0) returned 0xa0a0a0 [0079.961] GetNearestColor (hdc=0x7501066f, color=0x696969) returned 0x696969 [0079.961] GetNearestColor (hdc=0x7501066f, color=0xa0a0a0) returned 0xa0a0a0 [0079.961] GetNearestColor (hdc=0x7501066f, color=0x0) returned 0x0 [0079.961] GetNearestColor (hdc=0x7501066f, color=0xffffff) returned 0xffffff [0079.961] GetNearestColor (hdc=0x7501066f, color=0xe5e5e5) returned 0xe5e5e5 [0079.961] GetNearestColor (hdc=0x7501066f, color=0xd8d8d8) returned 0xd8d8d8 [0079.961] GetNearestColor (hdc=0x7501066f, color=0x0) returned 0x0 [0079.962] RestoreDC (hdc=0x7501066f, nSavedDC=-1) returned 1 [0079.962] GdipReleaseDC (graphics=0x1be567f0, hdc=0x7501066f) returned 0x0 [0079.962] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExQ\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0079.962] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.962] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21757a0) returned 0x0 [0079.962] GdipSetStringFormatAlign (format=0x1be57d10, align=0x1) returned 0x0 [0079.962] GdipSetStringFormatLineAlign (format=0x1be57d10, align=0x1) returned 0x0 [0079.962] GdipSetStringFormatHotkeyPrefix (format=0x1be57d10, hotkeyPrefix=2) returned 0x0 [0079.962] GdipGetStringFormatFlags (format=0x1be57d10, flags=0x14e378) returned 0x0 [0079.962] GdipGetStringFormatTrimming (format=0x1be57d10, trimming=0x14e378) returned 0x0 [0079.962] GdipGetStringFormatHotkeyPrefix (format=0x1be57d10, hotkeyPrefix=0x14e378) returned 0x0 [0079.962] GdipGetFontSize (font=0x1be57d10, size=0x14e378) returned 0x0 [0079.962] GdipGetFontStyle (font=0x1be57d10, style=0x14e378) returned 0x0 [0079.962] GdipDeleteStringFormat (format=0x1be57d10) returned 0x0 [0079.963] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.963] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.963] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.963] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0079.963] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21758d0) returned 0x0 [0079.963] GdipSetStringFormatFlags (format=0x1be578b0, flags=0) returned 0x0 [0079.963] GdipSetStringFormatTrimming (format=0x1be578b0, trimming=0x1) returned 0x0 [0079.963] GdipSetStringFormatHotkeyPrefix (format=0x1be578b0, hotkeyPrefix=2) returned 0x0 [0079.963] GdipSetStringFormatAlign (format=0x1be578b0, align=0x1) returned 0x0 [0079.963] GdipSetStringFormatLineAlign (format=0x1be578b0, align=0x1) returned 0x0 [0079.963] GdipMeasureString (graphics=0x1be58070, string="3", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be578b0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0079.963] GdipDeleteStringFormat (format=0x1be578b0) returned 0x0 [0079.963] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0079.964] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.964] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.964] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0079.964] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.964] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0079.964] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.964] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0079.964] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486c10 [0079.964] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486c10) returned 0x0 [0079.964] LocalFree (hMem=0x1d486c10) returned 0x0 [0079.964] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486210 [0079.964] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486210) returned 0x0 [0079.964] LocalFree (hMem=0x1d486210) returned 0x0 [0079.964] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.964] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0079.964] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0079.964] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0079.965] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.965] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0079.965] GetCurrentObject (hdc=0x7501066f, type=0x1) returned 0x1b00017 [0079.965] GetCurrentObject (hdc=0x7501066f, type=0x2) returned 0x1900010 [0079.965] GetCurrentObject (hdc=0x7501066f, type=0x7) returned 0x2405099f [0079.965] GetCurrentObject (hdc=0x7501066f, type=0x6) returned 0x18a0048 [0079.965] SaveDC (hdc=0x7501066f) returned 1 [0079.965] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x690409d6 [0079.965] GetClipRgn (hdc=0x7501066f, hrgn=0x690409d6) returned 0 [0079.965] SelectClipRgn (hdc=0x7501066f, hrgn=0x7b0407ff) returned 2 [0079.965] DeleteObject (ho=0x690409d6) returned 1 [0079.965] DeleteObject (ho=0x7b0407ff) returned 1 [0079.965] OffsetViewportOrgEx (in: hdc=0x7501066f, x=0, y=0, lppt=0x2175c90 | out: lppt=0x2175c90) returned 1 [0079.965] GetNearestColor (hdc=0x7501066f, color=0xf0f0f0) returned 0xf0f0f0 [0079.965] CreateSolidBrush (color=0xf0f0f0) returned 0x5c1009b2 [0079.965] FillRect (hDC=0x7501066f, lprc=0x14e1c8, hbr=0x5c1009b2) returned 1 [0079.965] DeleteObject (ho=0x5c1009b2) returned 1 [0079.965] RestoreDC (hdc=0x7501066f, nSavedDC=-1) returned 1 [0079.965] GdipReleaseDC (graphics=0x1be567f0, hdc=0x7501066f) returned 0x0 [0079.966] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.966] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0079.966] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.966] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2175d90) returned 0x0 [0079.966] GdipSetStringFormatAlign (format=0x1be57bc0, align=0x1) returned 0x0 [0079.966] GdipSetStringFormatLineAlign (format=0x1be57bc0, align=0x1) returned 0x0 [0079.966] GdipSetStringFormatHotkeyPrefix (format=0x1be57bc0, hotkeyPrefix=2) returned 0x0 [0079.966] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0079.966] GdipDrawString (graphics=0x1be567f0, string="3", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57bc0, brush=0x1be515e0) returned 0x0 [0079.966] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0079.966] GdipDeleteStringFormat (format=0x1be57bc0) returned 0x0 [0079.966] GetFocus () returned 0x103c8 [0079.967] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.967] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExN\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0079.967] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.967] GdipCreateRegion (region=0x14e030) returned 0x0 [0079.967] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.967] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0079.967] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.967] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0079.967] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486a10 [0079.967] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486a10) returned 0x0 [0079.967] LocalFree (hMem=0x1d486a10) returned 0x0 [0079.967] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4867d0 [0079.967] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4867d0) returned 0x0 [0079.967] LocalFree (hMem=0x1d4867d0) returned 0x0 [0079.967] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.967] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0079.967] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0079.967] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0079.967] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.968] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0079.968] GetCurrentObject (hdc=0x7501066f, type=0x1) returned 0x1b00017 [0079.968] GetCurrentObject (hdc=0x7501066f, type=0x2) returned 0x1900010 [0079.968] GetCurrentObject (hdc=0x7501066f, type=0x7) returned 0x2405099f [0079.968] GetCurrentObject (hdc=0x7501066f, type=0x6) returned 0x18a0048 [0079.968] SaveDC (hdc=0x7501066f) returned 1 [0079.968] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7c0407ff [0079.968] GetClipRgn (hdc=0x7501066f, hrgn=0x7c0407ff) returned 0 [0079.968] SelectClipRgn (hdc=0x7501066f, hrgn=0x6a0409d6) returned 2 [0079.968] DeleteObject (ho=0x7c0407ff) returned 1 [0079.968] DeleteObject (ho=0x6a0409d6) returned 1 [0079.968] OffsetViewportOrgEx (in: hdc=0x7501066f, x=0, y=0, lppt=0x2176178 | out: lppt=0x2176178) returned 1 [0079.968] GetROP2 (hdc=0x7501066f) returned 13 [0079.968] GetBkMode (hdc=0x7501066f) returned 2 [0079.969] SetBkMode (hdc=0x7501066f, mode=1) returned 2 [0079.969] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x203009e1 [0079.969] SelectObject (hdc=0x7501066f, h=0x203009e1) returned 0x1b00017 [0079.969] MoveToEx (in: hdc=0x7501066f, x=25, y=0, lppt=0x21761e0 | out: lppt=0x21761e0) returned 1 [0079.969] LineTo (hdc=0x7501066f, x=0, y=0) returned 1 [0079.969] SetBkMode (hdc=0x7501066f, mode=2) returned 1 [0079.969] MoveToEx (in: hdc=0x7501066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.969] GetROP2 (hdc=0x7501066f) returned 13 [0079.969] GetBkMode (hdc=0x7501066f) returned 2 [0079.969] SetBkMode (hdc=0x7501066f, mode=1) returned 2 [0079.969] SelectObject (hdc=0x7501066f, h=0x203009e1) returned 0x203009e1 [0079.969] MoveToEx (in: hdc=0x7501066f, x=0, y=0, lppt=0x21761f8 | out: lppt=0x21761f8) returned 1 [0079.969] LineTo (hdc=0x7501066f, x=0, y=22) returned 1 [0079.969] SetBkMode (hdc=0x7501066f, mode=2) returned 1 [0079.969] MoveToEx (in: hdc=0x7501066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.969] SelectObject (hdc=0x7501066f, h=0x1b00017) returned 0x203009e1 [0079.969] DeleteObject (ho=0x203009e1) returned 1 [0079.969] GetROP2 (hdc=0x7501066f) returned 13 [0079.969] GetBkMode (hdc=0x7501066f) returned 2 [0079.969] SetBkMode (hdc=0x7501066f, mode=1) returned 2 [0079.969] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x35300981 [0079.969] SelectObject (hdc=0x7501066f, h=0x35300981) returned 0x1b00017 [0079.969] MoveToEx (in: hdc=0x7501066f, x=0, y=22, lppt=0x2176260 | out: lppt=0x2176260) returned 1 [0079.970] LineTo (hdc=0x7501066f, x=25, y=22) returned 1 [0079.970] SetBkMode (hdc=0x7501066f, mode=2) returned 1 [0079.970] MoveToEx (in: hdc=0x7501066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.970] GetROP2 (hdc=0x7501066f) returned 13 [0079.970] GetBkMode (hdc=0x7501066f) returned 2 [0079.970] SetBkMode (hdc=0x7501066f, mode=1) returned 2 [0079.970] SelectObject (hdc=0x7501066f, h=0x35300981) returned 0x35300981 [0079.970] MoveToEx (in: hdc=0x7501066f, x=25, y=22, lppt=0x2176278 | out: lppt=0x2176278) returned 1 [0079.970] LineTo (hdc=0x7501066f, x=25, y=-1) returned 1 [0079.970] SetBkMode (hdc=0x7501066f, mode=2) returned 1 [0079.970] MoveToEx (in: hdc=0x7501066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.970] SelectObject (hdc=0x7501066f, h=0x1b00017) returned 0x35300981 [0079.970] DeleteObject (ho=0x35300981) returned 1 [0079.970] GetROP2 (hdc=0x7501066f) returned 13 [0079.970] GetBkMode (hdc=0x7501066f) returned 2 [0079.970] SetBkMode (hdc=0x7501066f, mode=1) returned 2 [0079.970] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x213009e1 [0079.970] SelectObject (hdc=0x7501066f, h=0x213009e1) returned 0x1b00017 [0079.970] MoveToEx (in: hdc=0x7501066f, x=24, y=1, lppt=0x21762e0 | out: lppt=0x21762e0) returned 1 [0079.970] LineTo (hdc=0x7501066f, x=1, y=1) returned 1 [0079.970] SetBkMode (hdc=0x7501066f, mode=2) returned 1 [0079.970] MoveToEx (in: hdc=0x7501066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.971] GetROP2 (hdc=0x7501066f) returned 13 [0079.971] GetBkMode (hdc=0x7501066f) returned 2 [0079.971] SetBkMode (hdc=0x7501066f, mode=1) returned 2 [0079.971] SelectObject (hdc=0x7501066f, h=0x213009e1) returned 0x213009e1 [0079.971] MoveToEx (in: hdc=0x7501066f, x=1, y=1, lppt=0x21762f8 | out: lppt=0x21762f8) returned 1 [0079.971] LineTo (hdc=0x7501066f, x=1, y=21) returned 1 [0079.971] SetBkMode (hdc=0x7501066f, mode=2) returned 1 [0079.971] MoveToEx (in: hdc=0x7501066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.971] SelectObject (hdc=0x7501066f, h=0x1b00017) returned 0x213009e1 [0079.971] DeleteObject (ho=0x213009e1) returned 1 [0079.971] GetROP2 (hdc=0x7501066f) returned 13 [0079.971] GetBkMode (hdc=0x7501066f) returned 2 [0079.971] SetBkMode (hdc=0x7501066f, mode=1) returned 2 [0079.971] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x36300981 [0079.971] SelectObject (hdc=0x7501066f, h=0x36300981) returned 0x1b00017 [0079.971] MoveToEx (in: hdc=0x7501066f, x=1, y=21, lppt=0x2176360 | out: lppt=0x2176360) returned 1 [0079.971] LineTo (hdc=0x7501066f, x=24, y=21) returned 1 [0079.971] SetBkMode (hdc=0x7501066f, mode=2) returned 1 [0079.971] MoveToEx (in: hdc=0x7501066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.971] GetROP2 (hdc=0x7501066f) returned 13 [0079.971] GetBkMode (hdc=0x7501066f) returned 2 [0079.971] SetBkMode (hdc=0x7501066f, mode=1) returned 2 [0079.971] SelectObject (hdc=0x7501066f, h=0x36300981) returned 0x36300981 [0079.971] MoveToEx (in: hdc=0x7501066f, x=24, y=21, lppt=0x2176378 | out: lppt=0x2176378) returned 1 [0079.972] LineTo (hdc=0x7501066f, x=24, y=0) returned 1 [0079.972] SetBkMode (hdc=0x7501066f, mode=2) returned 1 [0079.972] MoveToEx (in: hdc=0x7501066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.972] SelectObject (hdc=0x7501066f, h=0x1b00017) returned 0x36300981 [0079.972] DeleteObject (ho=0x36300981) returned 1 [0079.972] RestoreDC (hdc=0x7501066f, nSavedDC=-1) returned 1 [0079.972] GdipReleaseDC (graphics=0x1be567f0, hdc=0x7501066f) returned 0x0 [0079.972] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0079.972] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x7501066f, x1=0, y1=0, rop=0xcc0020) returned 1 [0079.972] GdipReleaseDC (graphics=0x1be567f0, hdc=0x7501066f) returned 0x0 [0079.972] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0079.973] SelectObject (hdc=0x7501066f, h=0x185000f) returned 0x2405099f [0079.973] DeleteDC (hdc=0x7501066f) returned 1 [0079.973] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0079.973] EndPaint (hWnd=0x103c0, lpPaint=0x14e548) returned 1 [0079.973] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.974] IsWindowUnicode (hWnd=0x103c2) returned 1 [0079.974] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.974] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.974] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.974] BeginPaint (in: hWnd=0x103c2, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0079.974] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0079.974] CreateCompatibleDC (hdc=0x220106d6) returned 0x4101065f [0079.974] SelectObject (hdc=0x4101065f, h=0x2405099f) returned 0x185000f [0079.974] GdipCreateFromHDC (hdc=0x4101065f, graphics=0x14e528) returned 0x0 [0079.974] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0079.974] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0079.974] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0079.974] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.974] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0079.974] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486a90 [0079.974] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486a90) returned 0x0 [0079.974] LocalFree (hMem=0x1d486a90) returned 0x0 [0079.974] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.974] GdipCreateRegion (region=0x14e550) returned 0x0 [0079.975] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.975] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0079.975] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0079.975] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd480dbd) returned 0x0 [0079.975] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.975] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0079.975] GetCurrentObject (hdc=0x4101065f, type=0x1) returned 0x1b00017 [0079.975] GetCurrentObject (hdc=0x4101065f, type=0x2) returned 0x1900010 [0079.975] GetCurrentObject (hdc=0x4101065f, type=0x7) returned 0x2405099f [0079.975] GetCurrentObject (hdc=0x4101065f, type=0x6) returned 0x18a0048 [0079.975] SaveDC (hdc=0x4101065f) returned 1 [0079.975] GetNearestColor (hdc=0x4101065f, color=0xf0f0f0) returned 0xf0f0f0 [0079.975] GetNearestColor (hdc=0x4101065f, color=0xa0a0a0) returned 0xa0a0a0 [0079.975] GetNearestColor (hdc=0x4101065f, color=0x696969) returned 0x696969 [0079.975] GetNearestColor (hdc=0x4101065f, color=0xa0a0a0) returned 0xa0a0a0 [0079.975] GetNearestColor (hdc=0x4101065f, color=0x0) returned 0x0 [0079.975] GetNearestColor (hdc=0x4101065f, color=0xffffff) returned 0xffffff [0079.975] GetNearestColor (hdc=0x4101065f, color=0xe5e5e5) returned 0xe5e5e5 [0079.975] GetNearestColor (hdc=0x4101065f, color=0xd8d8d8) returned 0xd8d8d8 [0079.975] GetNearestColor (hdc=0x4101065f, color=0x0) returned 0x0 [0079.976] RestoreDC (hdc=0x4101065f, nSavedDC=-1) returned 1 [0079.976] GdipReleaseDC (graphics=0x1be567f0, hdc=0x4101065f) returned 0x0 [0079.976] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.976] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExf\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0079.976] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.976] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2176c98) returned 0x0 [0079.976] GdipSetStringFormatAlign (format=0x1be57e60, align=0x1) returned 0x0 [0079.976] GdipSetStringFormatLineAlign (format=0x1be57e60, align=0x1) returned 0x0 [0079.976] GdipSetStringFormatHotkeyPrefix (format=0x1be57e60, hotkeyPrefix=2) returned 0x0 [0079.976] GdipGetStringFormatFlags (format=0x1be57e60, flags=0x14e378) returned 0x0 [0079.976] GdipGetStringFormatTrimming (format=0x1be57e60, trimming=0x14e378) returned 0x0 [0079.976] GdipGetStringFormatHotkeyPrefix (format=0x1be57e60, hotkeyPrefix=0x14e378) returned 0x0 [0079.976] GdipGetFontSize (font=0x1be57e60, size=0x14e378) returned 0x0 [0079.976] GdipGetFontStyle (font=0x1be57e60, style=0x14e378) returned 0x0 [0079.976] GdipDeleteStringFormat (format=0x1be57e60) returned 0x0 [0079.977] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.977] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.977] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0079.977] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2176dc8) returned 0x0 [0079.977] GdipSetStringFormatFlags (format=0x1be57ae0, flags=0) returned 0x0 [0079.977] GdipSetStringFormatTrimming (format=0x1be57ae0, trimming=0x1) returned 0x0 [0079.977] GdipSetStringFormatHotkeyPrefix (format=0x1be57ae0, hotkeyPrefix=2) returned 0x0 [0079.977] GdipSetStringFormatAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0079.977] GdipSetStringFormatLineAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0079.977] GdipMeasureString (graphics=0x1be58070, string="5", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57ae0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0079.977] GdipDeleteStringFormat (format=0x1be57ae0) returned 0x0 [0079.977] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0079.978] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.978] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.978] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.978] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0079.978] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.978] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0079.978] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.978] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0079.978] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486bd0 [0079.978] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486bd0) returned 0x0 [0079.978] LocalFree (hMem=0x1d486bd0) returned 0x0 [0079.978] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486290 [0079.978] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486290) returned 0x0 [0079.978] LocalFree (hMem=0x1d486290) returned 0x0 [0079.978] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.978] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0079.978] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0079.978] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0079.979] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.979] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0079.979] GetCurrentObject (hdc=0x4101065f, type=0x1) returned 0x1b00017 [0079.979] GetCurrentObject (hdc=0x4101065f, type=0x2) returned 0x1900010 [0079.979] GetCurrentObject (hdc=0x4101065f, type=0x7) returned 0x2405099f [0079.979] GetCurrentObject (hdc=0x4101065f, type=0x6) returned 0x18a0048 [0079.979] SaveDC (hdc=0x4101065f) returned 1 [0079.979] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6b0409d6 [0079.979] GetClipRgn (hdc=0x4101065f, hrgn=0x6b0409d6) returned 0 [0079.979] SelectClipRgn (hdc=0x4101065f, hrgn=0x7d0407ff) returned 2 [0079.979] DeleteObject (ho=0x6b0409d6) returned 1 [0079.979] DeleteObject (ho=0x7d0407ff) returned 1 [0079.979] OffsetViewportOrgEx (in: hdc=0x4101065f, x=0, y=0, lppt=0x2177188 | out: lppt=0x2177188) returned 1 [0079.979] GetNearestColor (hdc=0x4101065f, color=0xf0f0f0) returned 0xf0f0f0 [0079.979] CreateSolidBrush (color=0xf0f0f0) returned 0x5d1009b2 [0079.979] FillRect (hDC=0x4101065f, lprc=0x14e1c8, hbr=0x5d1009b2) returned 1 [0079.979] DeleteObject (ho=0x5d1009b2) returned 1 [0079.979] RestoreDC (hdc=0x4101065f, nSavedDC=-1) returned 1 [0079.979] GdipReleaseDC (graphics=0x1be567f0, hdc=0x4101065f) returned 0x0 [0079.980] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0079.980] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.980] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2177288) returned 0x0 [0079.980] GdipSetStringFormatAlign (format=0x1be578b0, align=0x1) returned 0x0 [0079.980] GdipSetStringFormatLineAlign (format=0x1be578b0, align=0x1) returned 0x0 [0079.980] GdipSetStringFormatHotkeyPrefix (format=0x1be578b0, hotkeyPrefix=2) returned 0x0 [0079.980] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0079.980] GdipDrawString (graphics=0x1be567f0, string="5", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be578b0, brush=0x1be515e0) returned 0x0 [0079.980] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0079.980] GdipDeleteStringFormat (format=0x1be578b0) returned 0x0 [0079.980] GetFocus () returned 0x103c8 [0079.981] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExc\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0079.982] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.982] GdipCreateRegion (region=0x14e030) returned 0x0 [0079.982] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.982] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0079.982] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.982] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0079.982] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486510 [0079.982] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486510) returned 0x0 [0079.982] LocalFree (hMem=0x1d486510) returned 0x0 [0079.982] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0079.982] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486110) returned 0x0 [0079.982] LocalFree (hMem=0x1d486110) returned 0x0 [0079.982] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.982] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0079.982] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0079.982] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0079.982] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.982] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0079.982] GetCurrentObject (hdc=0x4101065f, type=0x1) returned 0x1b00017 [0079.982] GetCurrentObject (hdc=0x4101065f, type=0x2) returned 0x1900010 [0079.982] GetCurrentObject (hdc=0x4101065f, type=0x7) returned 0x2405099f [0079.982] GetCurrentObject (hdc=0x4101065f, type=0x6) returned 0x18a0048 [0079.983] SaveDC (hdc=0x4101065f) returned 1 [0079.983] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7e0407ff [0079.983] GetClipRgn (hdc=0x4101065f, hrgn=0x7e0407ff) returned 0 [0079.983] SelectClipRgn (hdc=0x4101065f, hrgn=0x6c0409d6) returned 2 [0079.983] DeleteObject (ho=0x7e0407ff) returned 1 [0079.983] DeleteObject (ho=0x6c0409d6) returned 1 [0079.983] OffsetViewportOrgEx (in: hdc=0x4101065f, x=0, y=0, lppt=0x2177670 | out: lppt=0x2177670) returned 1 [0079.983] GetROP2 (hdc=0x4101065f) returned 13 [0079.983] GetBkMode (hdc=0x4101065f) returned 2 [0079.983] SetBkMode (hdc=0x4101065f, mode=1) returned 2 [0079.983] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x37300981 [0079.983] SelectObject (hdc=0x4101065f, h=0x37300981) returned 0x1b00017 [0079.983] MoveToEx (in: hdc=0x4101065f, x=25, y=0, lppt=0x21776d8 | out: lppt=0x21776d8) returned 1 [0079.983] LineTo (hdc=0x4101065f, x=0, y=0) returned 1 [0079.983] SetBkMode (hdc=0x4101065f, mode=2) returned 1 [0079.983] MoveToEx (in: hdc=0x4101065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.983] GetROP2 (hdc=0x4101065f) returned 13 [0079.983] GetBkMode (hdc=0x4101065f) returned 2 [0079.983] SetBkMode (hdc=0x4101065f, mode=1) returned 2 [0079.983] SelectObject (hdc=0x4101065f, h=0x37300981) returned 0x37300981 [0079.984] MoveToEx (in: hdc=0x4101065f, x=0, y=0, lppt=0x21776f0 | out: lppt=0x21776f0) returned 1 [0079.984] LineTo (hdc=0x4101065f, x=0, y=22) returned 1 [0079.984] SetBkMode (hdc=0x4101065f, mode=2) returned 1 [0079.984] MoveToEx (in: hdc=0x4101065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.984] SelectObject (hdc=0x4101065f, h=0x1b00017) returned 0x37300981 [0079.984] DeleteObject (ho=0x37300981) returned 1 [0079.984] GetROP2 (hdc=0x4101065f) returned 13 [0079.984] GetBkMode (hdc=0x4101065f) returned 2 [0079.984] SetBkMode (hdc=0x4101065f, mode=1) returned 2 [0079.984] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x223009e1 [0079.984] SelectObject (hdc=0x4101065f, h=0x223009e1) returned 0x1b00017 [0079.984] MoveToEx (in: hdc=0x4101065f, x=0, y=22, lppt=0x2177758 | out: lppt=0x2177758) returned 1 [0079.984] LineTo (hdc=0x4101065f, x=25, y=22) returned 1 [0079.984] SetBkMode (hdc=0x4101065f, mode=2) returned 1 [0079.984] MoveToEx (in: hdc=0x4101065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.984] GetROP2 (hdc=0x4101065f) returned 13 [0079.984] GetBkMode (hdc=0x4101065f) returned 2 [0079.984] SetBkMode (hdc=0x4101065f, mode=1) returned 2 [0079.984] SelectObject (hdc=0x4101065f, h=0x223009e1) returned 0x223009e1 [0079.984] MoveToEx (in: hdc=0x4101065f, x=25, y=22, lppt=0x2177770 | out: lppt=0x2177770) returned 1 [0079.984] LineTo (hdc=0x4101065f, x=25, y=-1) returned 1 [0079.984] SetBkMode (hdc=0x4101065f, mode=2) returned 1 [0079.984] MoveToEx (in: hdc=0x4101065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.985] SelectObject (hdc=0x4101065f, h=0x1b00017) returned 0x223009e1 [0079.985] DeleteObject (ho=0x223009e1) returned 1 [0079.985] GetROP2 (hdc=0x4101065f) returned 13 [0079.985] GetBkMode (hdc=0x4101065f) returned 2 [0079.985] SetBkMode (hdc=0x4101065f, mode=1) returned 2 [0079.985] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x38300981 [0079.985] SelectObject (hdc=0x4101065f, h=0x38300981) returned 0x1b00017 [0079.985] MoveToEx (in: hdc=0x4101065f, x=24, y=1, lppt=0x21777d8 | out: lppt=0x21777d8) returned 1 [0079.985] LineTo (hdc=0x4101065f, x=1, y=1) returned 1 [0079.985] SetBkMode (hdc=0x4101065f, mode=2) returned 1 [0079.985] MoveToEx (in: hdc=0x4101065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.985] GetROP2 (hdc=0x4101065f) returned 13 [0079.985] GetBkMode (hdc=0x4101065f) returned 2 [0079.985] SetBkMode (hdc=0x4101065f, mode=1) returned 2 [0079.985] SelectObject (hdc=0x4101065f, h=0x38300981) returned 0x38300981 [0079.985] MoveToEx (in: hdc=0x4101065f, x=1, y=1, lppt=0x21777f0 | out: lppt=0x21777f0) returned 1 [0079.985] LineTo (hdc=0x4101065f, x=1, y=21) returned 1 [0079.985] SetBkMode (hdc=0x4101065f, mode=2) returned 1 [0079.985] MoveToEx (in: hdc=0x4101065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.985] SelectObject (hdc=0x4101065f, h=0x1b00017) returned 0x38300981 [0079.985] DeleteObject (ho=0x38300981) returned 1 [0079.985] GetROP2 (hdc=0x4101065f) returned 13 [0079.986] GetBkMode (hdc=0x4101065f) returned 2 [0079.986] SetBkMode (hdc=0x4101065f, mode=1) returned 2 [0079.986] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x233009e1 [0079.986] SelectObject (hdc=0x4101065f, h=0x233009e1) returned 0x1b00017 [0079.986] MoveToEx (in: hdc=0x4101065f, x=1, y=21, lppt=0x2177858 | out: lppt=0x2177858) returned 1 [0079.986] LineTo (hdc=0x4101065f, x=24, y=21) returned 1 [0079.986] SetBkMode (hdc=0x4101065f, mode=2) returned 1 [0079.986] MoveToEx (in: hdc=0x4101065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.986] GetROP2 (hdc=0x4101065f) returned 13 [0079.986] GetBkMode (hdc=0x4101065f) returned 2 [0079.986] SetBkMode (hdc=0x4101065f, mode=1) returned 2 [0079.986] SelectObject (hdc=0x4101065f, h=0x233009e1) returned 0x233009e1 [0079.986] MoveToEx (in: hdc=0x4101065f, x=24, y=21, lppt=0x2177870 | out: lppt=0x2177870) returned 1 [0079.986] LineTo (hdc=0x4101065f, x=24, y=0) returned 1 [0079.986] SetBkMode (hdc=0x4101065f, mode=2) returned 1 [0079.986] MoveToEx (in: hdc=0x4101065f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.986] SelectObject (hdc=0x4101065f, h=0x1b00017) returned 0x233009e1 [0079.986] DeleteObject (ho=0x233009e1) returned 1 [0079.986] RestoreDC (hdc=0x4101065f, nSavedDC=-1) returned 1 [0079.986] GdipReleaseDC (graphics=0x1be567f0, hdc=0x4101065f) returned 0x0 [0079.986] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0079.986] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x4101065f, x1=0, y1=0, rop=0xcc0020) returned 1 [0079.987] GdipReleaseDC (graphics=0x1be567f0, hdc=0x4101065f) returned 0x0 [0079.987] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0079.987] SelectObject (hdc=0x4101065f, h=0x185000f) returned 0x2405099f [0079.987] DeleteDC (hdc=0x4101065f) returned 1 [0079.987] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0079.987] EndPaint (hWnd=0x103c2, lpPaint=0x14e548) returned 1 [0079.987] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.987] IsWindowUnicode (hWnd=0x103c4) returned 1 [0079.987] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0079.987] TranslateMessage (lpMsg=0x14ef10) returned 0 [0079.987] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0079.987] BeginPaint (in: hWnd=0x103c4, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0079.987] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0079.987] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x5f0109e0 [0079.987] SelectObject (hdc=0x5f0109e0, h=0x2405099f) returned 0x185000f [0079.988] GdipCreateFromHDC (hdc=0x5f0109e0, graphics=0x14e528) returned 0x0 [0079.988] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0079.988] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0079.988] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0079.988] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.988] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0079.988] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486e50 [0079.988] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486e50) returned 0x0 [0079.988] LocalFree (hMem=0x1d486e50) returned 0x0 [0079.988] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.988] GdipCreateRegion (region=0x14e550) returned 0x0 [0079.988] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.988] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0079.988] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0079.988] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd450dbd) returned 0x0 [0079.988] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.988] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0079.988] GetCurrentObject (hdc=0x5f0109e0, type=0x1) returned 0x1b00017 [0079.988] GetCurrentObject (hdc=0x5f0109e0, type=0x2) returned 0x1900010 [0079.988] GetCurrentObject (hdc=0x5f0109e0, type=0x7) returned 0x2405099f [0079.989] GetCurrentObject (hdc=0x5f0109e0, type=0x6) returned 0x18a0048 [0079.989] SaveDC (hdc=0x5f0109e0) returned 1 [0079.989] GetNearestColor (hdc=0x5f0109e0, color=0xf0f0f0) returned 0xf0f0f0 [0079.992] GetNearestColor (hdc=0x5f0109e0, color=0xa0a0a0) returned 0xa0a0a0 [0079.992] GetNearestColor (hdc=0x5f0109e0, color=0x696969) returned 0x696969 [0079.992] GetNearestColor (hdc=0x5f0109e0, color=0xa0a0a0) returned 0xa0a0a0 [0079.992] GetNearestColor (hdc=0x5f0109e0, color=0x0) returned 0x0 [0079.992] GetNearestColor (hdc=0x5f0109e0, color=0xffffff) returned 0xffffff [0079.992] GetNearestColor (hdc=0x5f0109e0, color=0xe5e5e5) returned 0xe5e5e5 [0079.992] GetNearestColor (hdc=0x5f0109e0, color=0xd8d8d8) returned 0xd8d8d8 [0079.992] GetNearestColor (hdc=0x5f0109e0, color=0x0) returned 0x0 [0079.992] RestoreDC (hdc=0x5f0109e0, nSavedDC=-1) returned 1 [0079.992] GdipReleaseDC (graphics=0x1be567f0, hdc=0x5f0109e0) returned 0x0 [0079.992] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx{\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0079.993] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.993] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2178190) returned 0x0 [0079.993] GdipSetStringFormatAlign (format=0x1be57b50, align=0x1) returned 0x0 [0079.993] GdipSetStringFormatLineAlign (format=0x1be57b50, align=0x1) returned 0x0 [0079.993] GdipSetStringFormatHotkeyPrefix (format=0x1be57b50, hotkeyPrefix=2) returned 0x0 [0079.993] GdipGetStringFormatFlags (format=0x1be57b50, flags=0x14e378) returned 0x0 [0079.993] GdipGetStringFormatTrimming (format=0x1be57b50, trimming=0x14e378) returned 0x0 [0079.993] GdipGetStringFormatHotkeyPrefix (format=0x1be57b50, hotkeyPrefix=0x14e378) returned 0x0 [0079.993] GdipGetFontSize (font=0x1be57b50, size=0x14e378) returned 0x0 [0079.993] GdipGetFontStyle (font=0x1be57b50, style=0x14e378) returned 0x0 [0079.993] GdipDeleteStringFormat (format=0x1be57b50) returned 0x0 [0079.993] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.993] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.994] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0079.994] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21782c0) returned 0x0 [0079.994] GdipSetStringFormatFlags (format=0x1be578b0, flags=0) returned 0x0 [0079.994] GdipSetStringFormatTrimming (format=0x1be578b0, trimming=0x1) returned 0x0 [0079.994] GdipSetStringFormatHotkeyPrefix (format=0x1be578b0, hotkeyPrefix=2) returned 0x0 [0079.994] GdipSetStringFormatAlign (format=0x1be578b0, align=0x1) returned 0x0 [0079.994] GdipSetStringFormatLineAlign (format=0x1be578b0, align=0x1) returned 0x0 [0079.994] GdipMeasureString (graphics=0x1be58070, string="2", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be578b0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0079.994] GdipDeleteStringFormat (format=0x1be578b0) returned 0x0 [0079.994] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0079.994] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0079.994] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.995] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0079.995] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.995] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0079.995] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0079.995] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0079.995] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486790 [0079.995] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486790) returned 0x0 [0079.995] LocalFree (hMem=0x1d486790) returned 0x0 [0079.995] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486c10 [0079.995] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486c10) returned 0x0 [0079.995] LocalFree (hMem=0x1d486c10) returned 0x0 [0079.995] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0079.995] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0079.995] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0079.995] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0079.995] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.995] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0079.995] GetCurrentObject (hdc=0x5f0109e0, type=0x1) returned 0x1b00017 [0079.995] GetCurrentObject (hdc=0x5f0109e0, type=0x2) returned 0x1900010 [0079.995] GetCurrentObject (hdc=0x5f0109e0, type=0x7) returned 0x2405099f [0079.995] GetCurrentObject (hdc=0x5f0109e0, type=0x6) returned 0x18a0048 [0079.995] SaveDC (hdc=0x5f0109e0) returned 1 [0079.996] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6d0409d6 [0079.996] GetClipRgn (hdc=0x5f0109e0, hrgn=0x6d0409d6) returned 0 [0079.996] SelectClipRgn (hdc=0x5f0109e0, hrgn=0x7f0407ff) returned 2 [0079.996] DeleteObject (ho=0x6d0409d6) returned 1 [0079.996] DeleteObject (ho=0x7f0407ff) returned 1 [0079.996] OffsetViewportOrgEx (in: hdc=0x5f0109e0, x=0, y=0, lppt=0x2178680 | out: lppt=0x2178680) returned 1 [0079.996] GetNearestColor (hdc=0x5f0109e0, color=0xf0f0f0) returned 0xf0f0f0 [0079.996] CreateSolidBrush (color=0xf0f0f0) returned 0x5e1009b2 [0079.996] FillRect (hDC=0x5f0109e0, lprc=0x14e1c8, hbr=0x5e1009b2) returned 1 [0079.996] DeleteObject (ho=0x5e1009b2) returned 1 [0079.996] RestoreDC (hdc=0x5f0109e0, nSavedDC=-1) returned 1 [0079.996] GdipReleaseDC (graphics=0x1be567f0, hdc=0x5f0109e0) returned 0x0 [0079.996] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0079.997] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.997] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2178780) returned 0x0 [0079.997] GdipSetStringFormatAlign (format=0x1be57c30, align=0x1) returned 0x0 [0079.997] GdipSetStringFormatLineAlign (format=0x1be57c30, align=0x1) returned 0x0 [0079.997] GdipSetStringFormatHotkeyPrefix (format=0x1be57c30, hotkeyPrefix=2) returned 0x0 [0079.997] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0079.997] GdipDrawString (graphics=0x1be567f0, string="2", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57c30, brush=0x1be515e0) returned 0x0 [0079.997] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0079.997] GdipDeleteStringFormat (format=0x1be57c30) returned 0x0 [0079.997] GetFocus () returned 0x103c8 [0079.997] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0079.997] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExx\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0079.998] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0079.998] GdipCreateRegion (region=0x14e030) returned 0x0 [0079.998] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0079.998] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0079.998] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0079.998] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0079.998] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0079.998] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486110) returned 0x0 [0079.998] LocalFree (hMem=0x1d486110) returned 0x0 [0079.998] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486dd0 [0079.998] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486dd0) returned 0x0 [0079.998] LocalFree (hMem=0x1d486dd0) returned 0x0 [0079.998] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0079.998] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0079.998] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0079.998] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0079.998] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0079.998] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0079.998] GetCurrentObject (hdc=0x5f0109e0, type=0x1) returned 0x1b00017 [0079.998] GetCurrentObject (hdc=0x5f0109e0, type=0x2) returned 0x1900010 [0079.998] GetCurrentObject (hdc=0x5f0109e0, type=0x7) returned 0x2405099f [0079.998] GetCurrentObject (hdc=0x5f0109e0, type=0x6) returned 0x18a0048 [0079.999] SaveDC (hdc=0x5f0109e0) returned 1 [0079.999] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff800407ff [0079.999] GetClipRgn (hdc=0x5f0109e0, hrgn=0xffffffff800407ff) returned 0 [0079.999] SelectClipRgn (hdc=0x5f0109e0, hrgn=0x6e0409d6) returned 2 [0079.999] DeleteObject (ho=0xffffffff800407ff) returned 1 [0079.999] DeleteObject (ho=0x6e0409d6) returned 1 [0079.999] OffsetViewportOrgEx (in: hdc=0x5f0109e0, x=0, y=0, lppt=0x2178b68 | out: lppt=0x2178b68) returned 1 [0079.999] GetROP2 (hdc=0x5f0109e0) returned 13 [0079.999] GetBkMode (hdc=0x5f0109e0) returned 2 [0079.999] SetBkMode (hdc=0x5f0109e0, mode=1) returned 2 [0079.999] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x243009e1 [0079.999] SelectObject (hdc=0x5f0109e0, h=0x243009e1) returned 0x1b00017 [0079.999] MoveToEx (in: hdc=0x5f0109e0, x=25, y=0, lppt=0x2178bd0 | out: lppt=0x2178bd0) returned 1 [0079.999] LineTo (hdc=0x5f0109e0, x=0, y=0) returned 1 [0079.999] SetBkMode (hdc=0x5f0109e0, mode=2) returned 1 [0079.999] MoveToEx (in: hdc=0x5f0109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0079.999] GetROP2 (hdc=0x5f0109e0) returned 13 [0079.999] GetBkMode (hdc=0x5f0109e0) returned 2 [0079.999] SetBkMode (hdc=0x5f0109e0, mode=1) returned 2 [0079.999] SelectObject (hdc=0x5f0109e0, h=0x243009e1) returned 0x243009e1 [0079.999] MoveToEx (in: hdc=0x5f0109e0, x=0, y=0, lppt=0x2178be8 | out: lppt=0x2178be8) returned 1 [0080.000] LineTo (hdc=0x5f0109e0, x=0, y=22) returned 1 [0080.000] SetBkMode (hdc=0x5f0109e0, mode=2) returned 1 [0080.000] MoveToEx (in: hdc=0x5f0109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.000] SelectObject (hdc=0x5f0109e0, h=0x1b00017) returned 0x243009e1 [0080.000] DeleteObject (ho=0x243009e1) returned 1 [0080.000] GetROP2 (hdc=0x5f0109e0) returned 13 [0080.000] GetBkMode (hdc=0x5f0109e0) returned 2 [0080.000] SetBkMode (hdc=0x5f0109e0, mode=1) returned 2 [0080.000] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x39300981 [0080.000] SelectObject (hdc=0x5f0109e0, h=0x39300981) returned 0x1b00017 [0080.000] MoveToEx (in: hdc=0x5f0109e0, x=0, y=22, lppt=0x2178c50 | out: lppt=0x2178c50) returned 1 [0080.000] LineTo (hdc=0x5f0109e0, x=25, y=22) returned 1 [0080.000] SetBkMode (hdc=0x5f0109e0, mode=2) returned 1 [0080.000] MoveToEx (in: hdc=0x5f0109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.000] GetROP2 (hdc=0x5f0109e0) returned 13 [0080.000] GetBkMode (hdc=0x5f0109e0) returned 2 [0080.000] SetBkMode (hdc=0x5f0109e0, mode=1) returned 2 [0080.000] SelectObject (hdc=0x5f0109e0, h=0x39300981) returned 0x39300981 [0080.000] MoveToEx (in: hdc=0x5f0109e0, x=25, y=22, lppt=0x2178c68 | out: lppt=0x2178c68) returned 1 [0080.000] LineTo (hdc=0x5f0109e0, x=25, y=-1) returned 1 [0080.000] SetBkMode (hdc=0x5f0109e0, mode=2) returned 1 [0080.000] MoveToEx (in: hdc=0x5f0109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.001] SelectObject (hdc=0x5f0109e0, h=0x1b00017) returned 0x39300981 [0080.001] DeleteObject (ho=0x39300981) returned 1 [0080.001] GetROP2 (hdc=0x5f0109e0) returned 13 [0080.001] GetBkMode (hdc=0x5f0109e0) returned 2 [0080.001] SetBkMode (hdc=0x5f0109e0, mode=1) returned 2 [0080.001] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x253009e1 [0080.001] SelectObject (hdc=0x5f0109e0, h=0x253009e1) returned 0x1b00017 [0080.001] MoveToEx (in: hdc=0x5f0109e0, x=24, y=1, lppt=0x2178cd0 | out: lppt=0x2178cd0) returned 1 [0080.001] LineTo (hdc=0x5f0109e0, x=1, y=1) returned 1 [0080.001] SetBkMode (hdc=0x5f0109e0, mode=2) returned 1 [0080.001] MoveToEx (in: hdc=0x5f0109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.001] GetROP2 (hdc=0x5f0109e0) returned 13 [0080.001] GetBkMode (hdc=0x5f0109e0) returned 2 [0080.001] SetBkMode (hdc=0x5f0109e0, mode=1) returned 2 [0080.001] SelectObject (hdc=0x5f0109e0, h=0x253009e1) returned 0x253009e1 [0080.001] MoveToEx (in: hdc=0x5f0109e0, x=1, y=1, lppt=0x2178ce8 | out: lppt=0x2178ce8) returned 1 [0080.001] LineTo (hdc=0x5f0109e0, x=1, y=21) returned 1 [0080.001] SetBkMode (hdc=0x5f0109e0, mode=2) returned 1 [0080.001] MoveToEx (in: hdc=0x5f0109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.001] SelectObject (hdc=0x5f0109e0, h=0x1b00017) returned 0x253009e1 [0080.001] DeleteObject (ho=0x253009e1) returned 1 [0080.001] GetROP2 (hdc=0x5f0109e0) returned 13 [0080.002] GetBkMode (hdc=0x5f0109e0) returned 2 [0080.002] SetBkMode (hdc=0x5f0109e0, mode=1) returned 2 [0080.002] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x3a300981 [0080.002] SelectObject (hdc=0x5f0109e0, h=0x3a300981) returned 0x1b00017 [0080.002] MoveToEx (in: hdc=0x5f0109e0, x=1, y=21, lppt=0x2178d50 | out: lppt=0x2178d50) returned 1 [0080.002] LineTo (hdc=0x5f0109e0, x=24, y=21) returned 1 [0080.002] SetBkMode (hdc=0x5f0109e0, mode=2) returned 1 [0080.002] MoveToEx (in: hdc=0x5f0109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.002] GetROP2 (hdc=0x5f0109e0) returned 13 [0080.002] GetBkMode (hdc=0x5f0109e0) returned 2 [0080.002] SetBkMode (hdc=0x5f0109e0, mode=1) returned 2 [0080.002] SelectObject (hdc=0x5f0109e0, h=0x3a300981) returned 0x3a300981 [0080.002] MoveToEx (in: hdc=0x5f0109e0, x=24, y=21, lppt=0x2178d68 | out: lppt=0x2178d68) returned 1 [0080.002] LineTo (hdc=0x5f0109e0, x=24, y=0) returned 1 [0080.002] SetBkMode (hdc=0x5f0109e0, mode=2) returned 1 [0080.002] MoveToEx (in: hdc=0x5f0109e0, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.002] SelectObject (hdc=0x5f0109e0, h=0x1b00017) returned 0x3a300981 [0080.002] DeleteObject (ho=0x3a300981) returned 1 [0080.002] RestoreDC (hdc=0x5f0109e0, nSavedDC=-1) returned 1 [0080.002] GdipReleaseDC (graphics=0x1be567f0, hdc=0x5f0109e0) returned 0x0 [0080.002] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0080.002] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x5f0109e0, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.003] GdipReleaseDC (graphics=0x1be567f0, hdc=0x5f0109e0) returned 0x0 [0080.003] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0080.003] SelectObject (hdc=0x5f0109e0, h=0x185000f) returned 0x2405099f [0080.003] DeleteDC (hdc=0x5f0109e0) returned 1 [0080.003] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0080.003] EndPaint (hWnd=0x103c4, lpPaint=0x14e548) returned 1 [0080.003] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.003] IsWindowUnicode (hWnd=0x103c6) returned 1 [0080.003] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.003] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.003] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0080.003] BeginPaint (in: hWnd=0x103c6, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0080.003] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0080.003] CreateCompatibleDC (hdc=0x220106d6) returned 0x7d01066f [0080.004] SelectObject (hdc=0x7d01066f, h=0x2405099f) returned 0x185000f [0080.004] GdipCreateFromHDC (hdc=0x7d01066f, graphics=0x14e528) returned 0x0 [0080.004] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0080.004] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0080.004] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0080.004] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0080.004] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0080.004] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486190 [0080.004] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486190) returned 0x0 [0080.004] LocalFree (hMem=0x1d486190) returned 0x0 [0080.004] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0080.004] GdipCreateRegion (region=0x14e550) returned 0x0 [0080.004] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0080.004] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0080.004] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0080.005] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd420dbd) returned 0x0 [0080.005] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0080.005] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0080.005] GetCurrentObject (hdc=0x7d01066f, type=0x1) returned 0x1b00017 [0080.005] GetCurrentObject (hdc=0x7d01066f, type=0x2) returned 0x1900010 [0080.005] GetCurrentObject (hdc=0x7d01066f, type=0x7) returned 0x2405099f [0080.005] GetCurrentObject (hdc=0x7d01066f, type=0x6) returned 0x18a0048 [0080.005] SaveDC (hdc=0x7d01066f) returned 1 [0080.005] GetNearestColor (hdc=0x7d01066f, color=0xf0f0f0) returned 0xf0f0f0 [0080.005] GetNearestColor (hdc=0x7d01066f, color=0xa0a0a0) returned 0xa0a0a0 [0080.005] GetNearestColor (hdc=0x7d01066f, color=0x696969) returned 0x696969 [0080.005] GetNearestColor (hdc=0x7d01066f, color=0xa0a0a0) returned 0xa0a0a0 [0080.005] GetNearestColor (hdc=0x7d01066f, color=0x0) returned 0x0 [0080.005] GetNearestColor (hdc=0x7d01066f, color=0xffffff) returned 0xffffff [0080.005] GetNearestColor (hdc=0x7d01066f, color=0xe5e5e5) returned 0xe5e5e5 [0080.005] GetNearestColor (hdc=0x7d01066f, color=0xd8d8d8) returned 0xd8d8d8 [0080.005] GetNearestColor (hdc=0x7d01066f, color=0x0) returned 0x0 [0080.005] RestoreDC (hdc=0x7d01066f, nSavedDC=-1) returned 1 [0080.005] GdipReleaseDC (graphics=0x1be567f0, hdc=0x7d01066f) returned 0x0 [0080.006] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.006] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x90\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0080.006] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.006] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2179688) returned 0x0 [0080.006] GdipSetStringFormatAlign (format=0x1be57f40, align=0x1) returned 0x0 [0080.006] GdipSetStringFormatLineAlign (format=0x1be57f40, align=0x1) returned 0x0 [0080.006] GdipSetStringFormatHotkeyPrefix (format=0x1be57f40, hotkeyPrefix=2) returned 0x0 [0080.006] GdipGetStringFormatFlags (format=0x1be57f40, flags=0x14e378) returned 0x0 [0080.006] GdipGetStringFormatTrimming (format=0x1be57f40, trimming=0x14e378) returned 0x0 [0080.006] GdipGetStringFormatHotkeyPrefix (format=0x1be57f40, hotkeyPrefix=0x14e378) returned 0x0 [0080.006] GdipGetFontSize (font=0x1be57f40, size=0x14e378) returned 0x0 [0080.006] GdipGetFontStyle (font=0x1be57f40, style=0x14e378) returned 0x0 [0080.006] GdipDeleteStringFormat (format=0x1be57f40) returned 0x0 [0080.006] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.007] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.007] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.007] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0080.007] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21797b8) returned 0x0 [0080.007] GdipSetStringFormatFlags (format=0x1be57a00, flags=0) returned 0x0 [0080.007] GdipSetStringFormatTrimming (format=0x1be57a00, trimming=0x1) returned 0x0 [0080.007] GdipSetStringFormatHotkeyPrefix (format=0x1be57a00, hotkeyPrefix=2) returned 0x0 [0080.007] GdipSetStringFormatAlign (format=0x1be57a00, align=0x1) returned 0x0 [0080.007] GdipSetStringFormatLineAlign (format=0x1be57a00, align=0x1) returned 0x0 [0080.007] GdipMeasureString (graphics=0x1be58070, string="1", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57a00, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0080.007] GdipDeleteStringFormat (format=0x1be57a00) returned 0x0 [0080.007] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0080.007] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.008] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0080.008] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.008] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0080.008] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0080.008] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0080.008] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0080.008] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0080.008] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486a90 [0080.008] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486a90) returned 0x0 [0080.008] LocalFree (hMem=0x1d486a90) returned 0x0 [0080.008] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b50 [0080.008] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486b50) returned 0x0 [0080.008] LocalFree (hMem=0x1d486b50) returned 0x0 [0080.008] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0080.008] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0080.008] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0080.008] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0080.008] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0080.008] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0080.008] GetCurrentObject (hdc=0x7d01066f, type=0x1) returned 0x1b00017 [0080.009] GetCurrentObject (hdc=0x7d01066f, type=0x2) returned 0x1900010 [0080.009] GetCurrentObject (hdc=0x7d01066f, type=0x7) returned 0x2405099f [0080.009] GetCurrentObject (hdc=0x7d01066f, type=0x6) returned 0x18a0048 [0080.009] SaveDC (hdc=0x7d01066f) returned 1 [0080.009] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6f0409d6 [0080.009] GetClipRgn (hdc=0x7d01066f, hrgn=0x6f0409d6) returned 0 [0080.009] SelectClipRgn (hdc=0x7d01066f, hrgn=0xffffffff810407ff) returned 2 [0080.009] DeleteObject (ho=0x6f0409d6) returned 1 [0080.009] DeleteObject (ho=0xffffffff810407ff) returned 1 [0080.009] OffsetViewportOrgEx (in: hdc=0x7d01066f, x=0, y=0, lppt=0x2179b78 | out: lppt=0x2179b78) returned 1 [0080.009] GetNearestColor (hdc=0x7d01066f, color=0xf0f0f0) returned 0xf0f0f0 [0080.009] CreateSolidBrush (color=0xf0f0f0) returned 0x5f1009b2 [0080.009] FillRect (hDC=0x7d01066f, lprc=0x14e1c8, hbr=0x5f1009b2) returned 1 [0080.009] DeleteObject (ho=0x5f1009b2) returned 1 [0080.009] RestoreDC (hdc=0x7d01066f, nSavedDC=-1) returned 1 [0080.009] GdipReleaseDC (graphics=0x1be567f0, hdc=0x7d01066f) returned 0x0 [0080.009] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.010] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0080.010] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.010] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2179c78) returned 0x0 [0080.010] GdipSetStringFormatAlign (format=0x1be57ca0, align=0x1) returned 0x0 [0080.010] GdipSetStringFormatLineAlign (format=0x1be57ca0, align=0x1) returned 0x0 [0080.010] GdipSetStringFormatHotkeyPrefix (format=0x1be57ca0, hotkeyPrefix=2) returned 0x0 [0080.010] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0080.010] GdipDrawString (graphics=0x1be567f0, string="1", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57ca0, brush=0x1be515e0) returned 0x0 [0080.010] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0080.010] GdipDeleteStringFormat (format=0x1be57ca0) returned 0x0 [0080.010] GetFocus () returned 0x103c8 [0080.012] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0080.012] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x8d\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0080.012] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0080.012] GdipCreateRegion (region=0x14e030) returned 0x0 [0080.012] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0080.012] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0080.012] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0080.012] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0080.012] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486c90 [0080.012] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486c90) returned 0x0 [0080.012] LocalFree (hMem=0x1d486c90) returned 0x0 [0080.012] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486150 [0080.012] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486150) returned 0x0 [0080.013] LocalFree (hMem=0x1d486150) returned 0x0 [0080.013] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0080.013] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0080.013] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0080.013] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0080.013] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0080.013] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0080.013] GetCurrentObject (hdc=0x7d01066f, type=0x1) returned 0x1b00017 [0080.013] GetCurrentObject (hdc=0x7d01066f, type=0x2) returned 0x1900010 [0080.013] GetCurrentObject (hdc=0x7d01066f, type=0x7) returned 0x2405099f [0080.013] GetCurrentObject (hdc=0x7d01066f, type=0x6) returned 0x18a0048 [0080.013] SaveDC (hdc=0x7d01066f) returned 1 [0080.013] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff820407ff [0080.013] GetClipRgn (hdc=0x7d01066f, hrgn=0xffffffff820407ff) returned 0 [0080.013] SelectClipRgn (hdc=0x7d01066f, hrgn=0x700409d6) returned 2 [0080.013] DeleteObject (ho=0xffffffff820407ff) returned 1 [0080.014] DeleteObject (ho=0x700409d6) returned 1 [0080.014] OffsetViewportOrgEx (in: hdc=0x7d01066f, x=0, y=0, lppt=0x217a060 | out: lppt=0x217a060) returned 1 [0080.014] GetROP2 (hdc=0x7d01066f) returned 13 [0080.014] GetBkMode (hdc=0x7d01066f) returned 2 [0080.014] SetBkMode (hdc=0x7d01066f, mode=1) returned 2 [0080.014] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x3b300981 [0080.014] SelectObject (hdc=0x7d01066f, h=0x3b300981) returned 0x1b00017 [0080.014] MoveToEx (in: hdc=0x7d01066f, x=25, y=0, lppt=0x217a0c8 | out: lppt=0x217a0c8) returned 1 [0080.014] LineTo (hdc=0x7d01066f, x=0, y=0) returned 1 [0080.014] SetBkMode (hdc=0x7d01066f, mode=2) returned 1 [0080.014] MoveToEx (in: hdc=0x7d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.014] GetROP2 (hdc=0x7d01066f) returned 13 [0080.014] GetBkMode (hdc=0x7d01066f) returned 2 [0080.014] SetBkMode (hdc=0x7d01066f, mode=1) returned 2 [0080.014] SelectObject (hdc=0x7d01066f, h=0x3b300981) returned 0x3b300981 [0080.014] MoveToEx (in: hdc=0x7d01066f, x=0, y=0, lppt=0x217a0e0 | out: lppt=0x217a0e0) returned 1 [0080.014] LineTo (hdc=0x7d01066f, x=0, y=22) returned 1 [0080.014] SetBkMode (hdc=0x7d01066f, mode=2) returned 1 [0080.014] MoveToEx (in: hdc=0x7d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.014] SelectObject (hdc=0x7d01066f, h=0x1b00017) returned 0x3b300981 [0080.014] DeleteObject (ho=0x3b300981) returned 1 [0080.014] GetROP2 (hdc=0x7d01066f) returned 13 [0080.015] GetBkMode (hdc=0x7d01066f) returned 2 [0080.015] SetBkMode (hdc=0x7d01066f, mode=1) returned 2 [0080.015] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x263009e1 [0080.015] SelectObject (hdc=0x7d01066f, h=0x263009e1) returned 0x1b00017 [0080.015] MoveToEx (in: hdc=0x7d01066f, x=0, y=22, lppt=0x217a148 | out: lppt=0x217a148) returned 1 [0080.015] LineTo (hdc=0x7d01066f, x=25, y=22) returned 1 [0080.015] SetBkMode (hdc=0x7d01066f, mode=2) returned 1 [0080.015] MoveToEx (in: hdc=0x7d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.015] GetROP2 (hdc=0x7d01066f) returned 13 [0080.015] GetBkMode (hdc=0x7d01066f) returned 2 [0080.015] SetBkMode (hdc=0x7d01066f, mode=1) returned 2 [0080.015] SelectObject (hdc=0x7d01066f, h=0x263009e1) returned 0x263009e1 [0080.015] MoveToEx (in: hdc=0x7d01066f, x=25, y=22, lppt=0x217a160 | out: lppt=0x217a160) returned 1 [0080.015] LineTo (hdc=0x7d01066f, x=25, y=-1) returned 1 [0080.015] SetBkMode (hdc=0x7d01066f, mode=2) returned 1 [0080.015] MoveToEx (in: hdc=0x7d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.015] SelectObject (hdc=0x7d01066f, h=0x1b00017) returned 0x263009e1 [0080.015] DeleteObject (ho=0x263009e1) returned 1 [0080.015] GetROP2 (hdc=0x7d01066f) returned 13 [0080.015] GetBkMode (hdc=0x7d01066f) returned 2 [0080.015] SetBkMode (hdc=0x7d01066f, mode=1) returned 2 [0080.015] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x3c300981 [0080.015] SelectObject (hdc=0x7d01066f, h=0x3c300981) returned 0x1b00017 [0080.016] MoveToEx (in: hdc=0x7d01066f, x=24, y=1, lppt=0x217a1c8 | out: lppt=0x217a1c8) returned 1 [0080.016] LineTo (hdc=0x7d01066f, x=1, y=1) returned 1 [0080.016] SetBkMode (hdc=0x7d01066f, mode=2) returned 1 [0080.016] MoveToEx (in: hdc=0x7d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.016] GetROP2 (hdc=0x7d01066f) returned 13 [0080.016] GetBkMode (hdc=0x7d01066f) returned 2 [0080.016] SetBkMode (hdc=0x7d01066f, mode=1) returned 2 [0080.016] SelectObject (hdc=0x7d01066f, h=0x3c300981) returned 0x3c300981 [0080.016] MoveToEx (in: hdc=0x7d01066f, x=1, y=1, lppt=0x217a1e0 | out: lppt=0x217a1e0) returned 1 [0080.016] LineTo (hdc=0x7d01066f, x=1, y=21) returned 1 [0080.016] SetBkMode (hdc=0x7d01066f, mode=2) returned 1 [0080.016] MoveToEx (in: hdc=0x7d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.016] SelectObject (hdc=0x7d01066f, h=0x1b00017) returned 0x3c300981 [0080.016] DeleteObject (ho=0x3c300981) returned 1 [0080.016] GetROP2 (hdc=0x7d01066f) returned 13 [0080.016] GetBkMode (hdc=0x7d01066f) returned 2 [0080.016] SetBkMode (hdc=0x7d01066f, mode=1) returned 2 [0080.016] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x273009e1 [0080.016] SelectObject (hdc=0x7d01066f, h=0x273009e1) returned 0x1b00017 [0080.016] MoveToEx (in: hdc=0x7d01066f, x=1, y=21, lppt=0x217a248 | out: lppt=0x217a248) returned 1 [0080.016] LineTo (hdc=0x7d01066f, x=24, y=21) returned 1 [0080.016] SetBkMode (hdc=0x7d01066f, mode=2) returned 1 [0080.016] MoveToEx (in: hdc=0x7d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.016] GetROP2 (hdc=0x7d01066f) returned 13 [0080.017] GetBkMode (hdc=0x7d01066f) returned 2 [0080.017] SetBkMode (hdc=0x7d01066f, mode=1) returned 2 [0080.017] SelectObject (hdc=0x7d01066f, h=0x273009e1) returned 0x273009e1 [0080.017] MoveToEx (in: hdc=0x7d01066f, x=24, y=21, lppt=0x217a260 | out: lppt=0x217a260) returned 1 [0080.017] LineTo (hdc=0x7d01066f, x=24, y=0) returned 1 [0080.017] SetBkMode (hdc=0x7d01066f, mode=2) returned 1 [0080.017] MoveToEx (in: hdc=0x7d01066f, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0080.017] SelectObject (hdc=0x7d01066f, h=0x1b00017) returned 0x273009e1 [0080.017] DeleteObject (ho=0x273009e1) returned 1 [0080.017] RestoreDC (hdc=0x7d01066f, nSavedDC=-1) returned 1 [0080.017] GdipReleaseDC (graphics=0x1be567f0, hdc=0x7d01066f) returned 0x0 [0080.017] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0080.017] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x7d01066f, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.017] GdipReleaseDC (graphics=0x1be567f0, hdc=0x7d01066f) returned 0x0 [0080.017] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0080.017] SelectObject (hdc=0x7d01066f, h=0x185000f) returned 0x2405099f [0080.017] DeleteDC (hdc=0x7d01066f) returned 1 [0080.017] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0080.018] EndPaint (hWnd=0x103c6, lpPaint=0x14e548) returned 1 [0080.018] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.018] IsWindowUnicode (hWnd=0x103c8) returned 1 [0080.018] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.018] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.018] DispatchMessageW (lpMsg=0x14ef10) returned 0x1 [0080.018] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0080.018] SetTextColor (hdc=0x1b0107ae, color=0x0) returned 0x0 [0080.018] SetBkColor (hdc=0x1b0107ae, color=0xffffff) returned 0xffffff [0080.019] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.019] IsWindowUnicode (hWnd=0x103ca) returned 1 [0080.019] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.019] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.019] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0080.019] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0080.019] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0080.019] WaitMessage () returned 1 [0080.536] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.536] IsWindowUnicode (hWnd=0x103c8) returned 1 [0080.536] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0080.537] TranslateMessage (lpMsg=0x14ef10) returned 0 [0080.537] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0080.537] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0080.537] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0080.537] WaitMessage () returned 1 [0081.067] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0081.067] IsWindowUnicode (hWnd=0x103c8) returned 1 [0081.067] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0081.067] TranslateMessage (lpMsg=0x14ef10) returned 0 [0081.068] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0081.068] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0081.068] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0081.068] WaitMessage () returned 1 [0081.904] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0081.904] IsWindowUnicode (hWnd=0x103c8) returned 1 [0081.905] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0081.905] TranslateMessage (lpMsg=0x14ef10) returned 0 [0081.905] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0081.905] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0081.905] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0081.905] WaitMessage () returned 1 [0082.426] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0082.427] IsWindowUnicode (hWnd=0x103c8) returned 1 [0082.427] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0082.427] TranslateMessage (lpMsg=0x14ef10) returned 0 [0082.427] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0082.427] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0082.427] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0082.427] WaitMessage () returned 1 [0082.958] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0082.958] IsWindowUnicode (hWnd=0x103c8) returned 1 [0082.958] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0082.958] TranslateMessage (lpMsg=0x14ef10) returned 0 [0082.958] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0082.959] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0082.959] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0082.959] WaitMessage () returned 1 [0083.490] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0083.490] IsWindowUnicode (hWnd=0x103c8) returned 1 [0083.490] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0083.490] TranslateMessage (lpMsg=0x14ef10) returned 0 [0083.490] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0083.490] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0083.490] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0083.490] WaitMessage () returned 1 [0084.139] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.139] IsWindowUnicode (hWnd=0x103c8) returned 1 [0084.139] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.139] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.139] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.139] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0084.139] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0084.139] WaitMessage () returned 1 [0084.377] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.377] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0084.389] IsWindowUnicode (hWnd=0x103c8) returned 1 [0084.389] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.391] GetKeyState (nVirtKey=16) returned 0 [0084.391] GetKeyState (nVirtKey=17) returned 0 [0084.391] GetKeyState (nVirtKey=18) returned -127 [0084.391] SendMessageW (hWnd=0x103c8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0084.391] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0084.391] GetParent (hWnd=0x20372) returned 0x0 [0084.391] SendMessageW (hWnd=0x20372, Msg=0x127, wParam=0x20002, lParam=0x0) returned 0x0 [0084.391] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x127, wParam=0x20002, lParam=0x0) returned 0x0 [0084.392] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.392] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.394] GetStockObject (i=5) returned 0x1900015 [0084.394] GetStockObject (i=5) returned 0x1900015 [0084.395] GetDlgItem (hDlg=0x20372, nIDDlgItem=131724) returned 0x2028c [0084.456] SendMessageW (hWnd=0x2028c, Msg=0x202b, wParam=0x2028c, lParam=0x14d0f0) returned 0x0 [0084.456] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x202b, wParam=0x2028c, lParam=0x14d0f0) returned 0x0 [0084.457] RedrawWindow (hWnd=0x2028c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.457] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.464] GetStockObject (i=5) returned 0x1900015 [0084.464] GetStockObject (i=5) returned 0x1900015 [0084.464] GetDlgItem (hDlg=0x20372, nIDDlgItem=131726) returned 0x2028e [0084.464] SendMessageW (hWnd=0x2028e, Msg=0x202b, wParam=0x2028e, lParam=0x14d0f0) returned 0x0 [0084.464] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x202b, wParam=0x2028e, lParam=0x14d0f0) returned 0x0 [0084.465] RedrawWindow (hWnd=0x2028e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.465] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.465] GetStockObject (i=5) returned 0x1900015 [0084.465] GetStockObject (i=5) returned 0x1900015 [0084.465] GetDlgItem (hDlg=0x20372, nIDDlgItem=589880) returned 0x90038 [0084.465] SendMessageW (hWnd=0x90038, Msg=0x202b, wParam=0x90038, lParam=0x14d0f0) returned 0x0 [0084.465] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x202b, wParam=0x90038, lParam=0x14d0f0) returned 0x0 [0084.465] RedrawWindow (hWnd=0x90038, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.466] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.466] GetStockObject (i=5) returned 0x1900015 [0084.466] GetStockObject (i=5) returned 0x1900015 [0084.466] GetDlgItem (hDlg=0x20372, nIDDlgItem=131968) returned 0x20380 [0084.466] SendMessageW (hWnd=0x20380, Msg=0x202b, wParam=0x20380, lParam=0x14d0f0) returned 0x0 [0084.466] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x202b, wParam=0x20380, lParam=0x14d0f0) returned 0x0 [0084.466] RedrawWindow (hWnd=0x20380, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.467] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.467] GetStockObject (i=5) returned 0x1900015 [0084.467] GetStockObject (i=5) returned 0x1900015 [0084.467] GetDlgItem (hDlg=0x20372, nIDDlgItem=131972) returned 0x20384 [0084.467] SendMessageW (hWnd=0x20384, Msg=0x202b, wParam=0x20384, lParam=0x14d0f0) returned 0x0 [0084.467] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x202b, wParam=0x20384, lParam=0x14d0f0) returned 0x0 [0084.467] RedrawWindow (hWnd=0x20384, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.467] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.467] GetStockObject (i=5) returned 0x1900015 [0084.467] GetStockObject (i=5) returned 0x1900015 [0084.468] GetDlgItem (hDlg=0x20372, nIDDlgItem=328310) returned 0x50276 [0084.468] SendMessageW (hWnd=0x50276, Msg=0x202b, wParam=0x50276, lParam=0x14d0f0) returned 0x0 [0084.468] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x202b, wParam=0x50276, lParam=0x14d0f0) returned 0x0 [0084.468] RedrawWindow (hWnd=0x50276, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.468] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.468] GetStockObject (i=5) returned 0x1900015 [0084.468] GetStockObject (i=5) returned 0x1900015 [0084.468] GetDlgItem (hDlg=0x20372, nIDDlgItem=66478) returned 0x103ae [0084.468] SendMessageW (hWnd=0x103ae, Msg=0x202b, wParam=0x103ae, lParam=0x14d0f0) returned 0x0 [0084.468] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x202b, wParam=0x103ae, lParam=0x14d0f0) returned 0x0 [0084.468] RedrawWindow (hWnd=0x103ae, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.468] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.469] GetStockObject (i=5) returned 0x1900015 [0084.469] GetStockObject (i=5) returned 0x1900015 [0084.469] GetDlgItem (hDlg=0x20372, nIDDlgItem=66480) returned 0x103b0 [0084.469] SendMessageW (hWnd=0x103b0, Msg=0x202b, wParam=0x103b0, lParam=0x14d0f0) returned 0x0 [0084.469] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x202b, wParam=0x103b0, lParam=0x14d0f0) returned 0x0 [0084.469] RedrawWindow (hWnd=0x103b0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.469] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.469] GetStockObject (i=5) returned 0x1900015 [0084.469] GetStockObject (i=5) returned 0x1900015 [0084.469] GetDlgItem (hDlg=0x20372, nIDDlgItem=66482) returned 0x103b2 [0084.469] SendMessageW (hWnd=0x103b2, Msg=0x202b, wParam=0x103b2, lParam=0x14d0f0) returned 0x0 [0084.470] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x202b, wParam=0x103b2, lParam=0x14d0f0) returned 0x0 [0084.470] RedrawWindow (hWnd=0x103b2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.470] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.470] GetStockObject (i=5) returned 0x1900015 [0084.470] GetStockObject (i=5) returned 0x1900015 [0084.470] GetDlgItem (hDlg=0x20372, nIDDlgItem=66484) returned 0x103b4 [0084.470] SendMessageW (hWnd=0x103b4, Msg=0x202b, wParam=0x103b4, lParam=0x14d0f0) returned 0x0 [0084.470] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x202b, wParam=0x103b4, lParam=0x14d0f0) returned 0x0 [0084.470] RedrawWindow (hWnd=0x103b4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.470] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.471] GetStockObject (i=5) returned 0x1900015 [0084.471] GetStockObject (i=5) returned 0x1900015 [0084.471] GetDlgItem (hDlg=0x20372, nIDDlgItem=66486) returned 0x103b6 [0084.471] SendMessageW (hWnd=0x103b6, Msg=0x202b, wParam=0x103b6, lParam=0x14d0f0) returned 0x0 [0084.471] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x202b, wParam=0x103b6, lParam=0x14d0f0) returned 0x0 [0084.471] RedrawWindow (hWnd=0x103b6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.471] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.471] GetStockObject (i=5) returned 0x1900015 [0084.471] GetStockObject (i=5) returned 0x1900015 [0084.471] GetDlgItem (hDlg=0x20372, nIDDlgItem=66488) returned 0x103b8 [0084.471] SendMessageW (hWnd=0x103b8, Msg=0x202b, wParam=0x103b8, lParam=0x14d0f0) returned 0x0 [0084.471] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x202b, wParam=0x103b8, lParam=0x14d0f0) returned 0x0 [0084.472] RedrawWindow (hWnd=0x103b8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.472] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.472] GetStockObject (i=5) returned 0x1900015 [0084.472] GetStockObject (i=5) returned 0x1900015 [0084.472] GetDlgItem (hDlg=0x20372, nIDDlgItem=66490) returned 0x103ba [0084.472] SendMessageW (hWnd=0x103ba, Msg=0x202b, wParam=0x103ba, lParam=0x14d0f0) returned 0x0 [0084.472] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x202b, wParam=0x103ba, lParam=0x14d0f0) returned 0x0 [0084.472] RedrawWindow (hWnd=0x103ba, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.472] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.474] GetStockObject (i=5) returned 0x1900015 [0084.474] GetStockObject (i=5) returned 0x1900015 [0084.474] GetDlgItem (hDlg=0x20372, nIDDlgItem=66492) returned 0x103bc [0084.474] SendMessageW (hWnd=0x103bc, Msg=0x202b, wParam=0x103bc, lParam=0x14d0f0) returned 0x0 [0084.474] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x202b, wParam=0x103bc, lParam=0x14d0f0) returned 0x0 [0084.475] RedrawWindow (hWnd=0x103bc, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.475] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.475] GetStockObject (i=5) returned 0x1900015 [0084.475] GetStockObject (i=5) returned 0x1900015 [0084.475] GetDlgItem (hDlg=0x20372, nIDDlgItem=66494) returned 0x103be [0084.475] SendMessageW (hWnd=0x103be, Msg=0x202b, wParam=0x103be, lParam=0x14d0f0) returned 0x0 [0084.475] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x202b, wParam=0x103be, lParam=0x14d0f0) returned 0x0 [0084.475] RedrawWindow (hWnd=0x103be, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.475] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.475] GetStockObject (i=5) returned 0x1900015 [0084.476] GetStockObject (i=5) returned 0x1900015 [0084.476] GetDlgItem (hDlg=0x20372, nIDDlgItem=66496) returned 0x103c0 [0084.476] SendMessageW (hWnd=0x103c0, Msg=0x202b, wParam=0x103c0, lParam=0x14d0f0) returned 0x0 [0084.476] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x202b, wParam=0x103c0, lParam=0x14d0f0) returned 0x0 [0084.476] RedrawWindow (hWnd=0x103c0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.476] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.476] GetStockObject (i=5) returned 0x1900015 [0084.476] GetStockObject (i=5) returned 0x1900015 [0084.476] GetDlgItem (hDlg=0x20372, nIDDlgItem=66498) returned 0x103c2 [0084.476] SendMessageW (hWnd=0x103c2, Msg=0x202b, wParam=0x103c2, lParam=0x14d0f0) returned 0x0 [0084.476] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x202b, wParam=0x103c2, lParam=0x14d0f0) returned 0x0 [0084.476] RedrawWindow (hWnd=0x103c2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.476] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.477] GetStockObject (i=5) returned 0x1900015 [0084.477] GetStockObject (i=5) returned 0x1900015 [0084.477] GetDlgItem (hDlg=0x20372, nIDDlgItem=66500) returned 0x103c4 [0084.477] SendMessageW (hWnd=0x103c4, Msg=0x202b, wParam=0x103c4, lParam=0x14d0f0) returned 0x0 [0084.477] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x202b, wParam=0x103c4, lParam=0x14d0f0) returned 0x0 [0084.477] RedrawWindow (hWnd=0x103c4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.477] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.477] GetStockObject (i=5) returned 0x1900015 [0084.477] GetStockObject (i=5) returned 0x1900015 [0084.477] GetDlgItem (hDlg=0x20372, nIDDlgItem=66502) returned 0x103c6 [0084.478] SendMessageW (hWnd=0x103c6, Msg=0x202b, wParam=0x103c6, lParam=0x14d0f0) returned 0x0 [0084.478] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x202b, wParam=0x103c6, lParam=0x14d0f0) returned 0x0 [0084.478] RedrawWindow (hWnd=0x103c6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.478] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0084.478] RedrawWindow (hWnd=0x103c8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.478] RedrawWindow (hWnd=0x20372, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0084.478] GetKeyState (nVirtKey=16) returned 0 [0084.479] GetKeyState (nVirtKey=17) returned 0 [0084.479] GetKeyState (nVirtKey=18) returned -127 [0084.481] TranslateMessage (lpMsg=0x14ef10) returned 1 [0084.481] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.482] GetKeyState (nVirtKey=16) returned 0 [0084.482] GetKeyState (nVirtKey=17) returned 0 [0084.482] GetKeyState (nVirtKey=18) returned -127 [0084.482] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0084.482] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.482] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x46, wParam=0x0, lParam=0x14ed60) returned 0x0 [0084.491] GetWindowPlacement (in: hWnd=0x20372, lpwndpl=0x14e908 | out: lpwndpl=0x14e908) returned 1 [0084.491] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x47, wParam=0x0, lParam=0x14ed60) returned 0x0 [0084.491] GetClientRect (in: hWnd=0x20372, lpRect=0x14e7a0 | out: lpRect=0x14e7a0) returned 1 [0084.491] GetWindowRect (in: hWnd=0x20372, lpRect=0x14e7a0 | out: lpRect=0x14e7a0) returned 1 [0084.492] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0084.493] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0084.493] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0084.493] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x47, wParam=0x0, lParam=0x14ed60) returned 0x0 [0084.494] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0084.497] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0084.497] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0084.497] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0084.499] NtdllDefWindowProc_W (hWnd=0x30304, Msg=0x1c, wParam=0x0, lParam=0xd88) returned 0x0 [0084.499] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x1c, wParam=0x0, lParam=0xd88) returned 0x0 [0084.499] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x1c, wParam=0x0, lParam=0xd88) returned 0x0 [0084.499] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x1 [0084.499] SetTextColor (hdc=0xc0100ae, color=0x0) returned 0x0 [0084.499] SetBkColor (hdc=0xc0100ae, color=0xffffff) returned 0xffffff [0084.501] SendMessageW (hWnd=0x103c8, Msg=0x2111, wParam=0x20003c8, lParam=0x103c8) returned 0x0 [0084.501] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0084.502] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0084.502] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0084.502] IsWindowUnicode (hWnd=0x20372) returned 1 [0084.502] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.502] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.502] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.502] BeginPaint (in: hWnd=0x20372, lpPaint=0x14e618 | out: lpPaint=0x14e618) returned 0x220106d6 [0084.502] GetWindowPlacement (in: hWnd=0x20372, lpwndpl=0x14e108 | out: lpwndpl=0x14e108) returned 1 [0084.502] GetClientRect (in: hWnd=0x20372, lpRect=0x14e020 | out: lpRect=0x14e020) returned 1 [0084.503] GetWindowTextLengthW (hWnd=0x20372) returned 5 [0084.503] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0084.503] GetSystemMetrics (nIndex=42) returned 0 [0084.503] GetWindowTextW (in: hWnd=0x20372, lpString=0x14dd90, nMaxCount=6 | out: lpString="Form1") returned 5 [0084.503] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xd, wParam=0x6, lParam=0x14dd90) returned 0x5 [0084.503] GetClientRect (in: hWnd=0x20372, lpRect=0x14de08 | out: lpRect=0x14de08) returned 1 [0084.503] GetCurrentObject (hdc=0x220106d6, type=0x1) returned 0x1b00017 [0084.503] GetCurrentObject (hdc=0x220106d6, type=0x2) returned 0x1900010 [0084.503] GetCurrentObject (hdc=0x220106d6, type=0x7) returned 0x6b0509bc [0084.503] GetCurrentObject (hdc=0x220106d6, type=0x6) returned 0x18a0048 [0084.503] SaveDC (hdc=0x220106d6) returned 1 [0084.503] GetNearestColor (hdc=0x220106d6, color=0xf0f0f0) returned 0xf0f0f0 [0084.503] CreateSolidBrush (color=0xf0f0f0) returned 0x601009b2 [0084.503] FillRect (hDC=0x220106d6, lprc=0x14daf8, hbr=0x601009b2) returned 1 [0084.506] DeleteObject (ho=0x601009b2) returned 1 [0084.506] RestoreDC (hdc=0x220106d6, nSavedDC=-1) returned 1 [0084.506] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0084.506] GetWindowTextLengthW (hWnd=0x20372) returned 5 [0084.506] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0084.506] GetSystemMetrics (nIndex=42) returned 0 [0084.506] GetWindowTextW (in: hWnd=0x20372, lpString=0x14e4c0, nMaxCount=6 | out: lpString="Form1") returned 5 [0084.506] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0xd, wParam=0x6, lParam=0x14e4c0) returned 0x5 [0084.506] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0084.506] EndPaint (hWnd=0x20372, lpPaint=0x14e5b8) returned 1 [0084.506] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.507] IsWindowUnicode (hWnd=0x2028c) returned 1 [0084.507] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.507] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.507] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.507] BeginPaint (in: hWnd=0x2028c, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0084.507] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.507] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028c, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0084.507] GetStockObject (i=5) returned 0x1900015 [0084.507] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0084.507] CreateCompatibleDC (hdc=0x220106d6) returned 0x270109de [0084.508] SelectObject (hdc=0x270109de, h=0x2405099f) returned 0x185000f [0084.508] GdipCreateFromHDC (hdc=0x270109de, graphics=0x14e528) returned 0x0 [0084.508] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0084.508] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0084.508] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0084.508] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.508] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0084.508] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486dd0 [0084.508] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486dd0) returned 0x0 [0084.508] LocalFree (hMem=0x1d486dd0) returned 0x0 [0084.508] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.508] GdipCreateRegion (region=0x14e550) returned 0x0 [0084.508] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.508] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0084.508] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0084.509] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd3f0dbd) returned 0x0 [0084.509] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.509] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0084.509] GetCurrentObject (hdc=0x270109de, type=0x1) returned 0x1b00017 [0084.509] GetCurrentObject (hdc=0x270109de, type=0x2) returned 0x1900010 [0084.509] GetCurrentObject (hdc=0x270109de, type=0x7) returned 0x2405099f [0084.509] GetCurrentObject (hdc=0x270109de, type=0x6) returned 0x18a0048 [0084.509] SaveDC (hdc=0x270109de) returned 1 [0084.509] GetNearestColor (hdc=0x270109de, color=0xf0f0f0) returned 0xf0f0f0 [0084.509] GetNearestColor (hdc=0x270109de, color=0xa0a0a0) returned 0xa0a0a0 [0084.509] GetNearestColor (hdc=0x270109de, color=0x696969) returned 0x696969 [0084.509] GetNearestColor (hdc=0x270109de, color=0xa0a0a0) returned 0xa0a0a0 [0084.509] GetNearestColor (hdc=0x270109de, color=0x0) returned 0x0 [0084.509] GetNearestColor (hdc=0x270109de, color=0xffffff) returned 0xffffff [0084.509] GetNearestColor (hdc=0x270109de, color=0xe5e5e5) returned 0xe5e5e5 [0084.509] GetNearestColor (hdc=0x270109de, color=0xd8d8d8) returned 0xd8d8d8 [0084.509] GetNearestColor (hdc=0x270109de, color=0x0) returned 0x0 [0084.510] RestoreDC (hdc=0x270109de, nSavedDC=-1) returned 1 [0084.510] GdipReleaseDC (graphics=0x1be567f0, hdc=0x270109de) returned 0x0 [0084.510] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.510] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx²\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0084.510] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.510] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x217b908) returned 0x0 [0084.510] GdipSetStringFormatAlign (format=0x1be57920, align=0x1) returned 0x0 [0084.510] GdipSetStringFormatLineAlign (format=0x1be57920, align=0x1) returned 0x0 [0084.511] GdipSetStringFormatHotkeyPrefix (format=0x1be57920, hotkeyPrefix=1) returned 0x0 [0084.511] GdipGetStringFormatFlags (format=0x1be57920, flags=0x14e378) returned 0x0 [0084.511] GdipGetStringFormatTrimming (format=0x1be57920, trimming=0x14e378) returned 0x0 [0084.511] GdipGetStringFormatHotkeyPrefix (format=0x1be57920, hotkeyPrefix=0x14e378) returned 0x0 [0084.511] GdipGetFontSize (font=0x1be57920, size=0x14e378) returned 0x0 [0084.511] GdipGetFontStyle (font=0x1be57920, style=0x14e378) returned 0x0 [0084.511] GdipDeleteStringFormat (format=0x1be57920) returned 0x0 [0084.511] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.511] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.511] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.511] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0084.511] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x217ba38) returned 0x0 [0084.511] GdipSetStringFormatFlags (format=0x1be578b0, flags=0) returned 0x0 [0084.511] GdipSetStringFormatTrimming (format=0x1be578b0, trimming=0x1) returned 0x0 [0084.511] GdipSetStringFormatHotkeyPrefix (format=0x1be578b0, hotkeyPrefix=1) returned 0x0 [0084.512] GdipSetStringFormatAlign (format=0x1be578b0, align=0x1) returned 0x0 [0084.512] GdipSetStringFormatLineAlign (format=0x1be578b0, align=0x1) returned 0x0 [0084.512] GdipMeasureString (graphics=0x1be58070, string="*", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be578b0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0084.512] GdipDeleteStringFormat (format=0x1be578b0) returned 0x0 [0084.512] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0084.512] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.512] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.512] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.512] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0084.512] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.512] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0084.512] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.513] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0084.513] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486410 [0084.513] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486410) returned 0x0 [0084.513] LocalFree (hMem=0x1d486410) returned 0x0 [0084.513] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4862d0 [0084.513] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d4862d0) returned 0x0 [0084.513] LocalFree (hMem=0x1d4862d0) returned 0x0 [0084.513] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.513] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0084.513] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0084.513] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0084.513] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.513] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0084.513] GetCurrentObject (hdc=0x270109de, type=0x1) returned 0x1b00017 [0084.513] GetCurrentObject (hdc=0x270109de, type=0x2) returned 0x1900010 [0084.513] GetCurrentObject (hdc=0x270109de, type=0x7) returned 0x2405099f [0084.513] GetCurrentObject (hdc=0x270109de, type=0x6) returned 0x18a0048 [0084.513] SaveDC (hdc=0x270109de) returned 1 [0084.513] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x710409d6 [0084.513] GetClipRgn (hdc=0x270109de, hrgn=0x710409d6) returned 0 [0084.513] SelectClipRgn (hdc=0x270109de, hrgn=0xffffffff830407ff) returned 2 [0084.514] DeleteObject (ho=0x710409d6) returned 1 [0084.514] DeleteObject (ho=0xffffffff830407ff) returned 1 [0084.514] OffsetViewportOrgEx (in: hdc=0x270109de, x=0, y=0, lppt=0x217bdf8 | out: lppt=0x217bdf8) returned 1 [0084.514] GetNearestColor (hdc=0x270109de, color=0xf0f0f0) returned 0xf0f0f0 [0084.514] CreateSolidBrush (color=0xf0f0f0) returned 0x611009b2 [0084.514] FillRect (hDC=0x270109de, lprc=0x14e1c8, hbr=0x611009b2) returned 1 [0084.514] DeleteObject (ho=0x611009b2) returned 1 [0084.514] RestoreDC (hdc=0x270109de, nSavedDC=-1) returned 1 [0084.514] GdipReleaseDC (graphics=0x1be567f0, hdc=0x270109de) returned 0x0 [0084.514] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.514] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0084.514] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.514] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x217bef8) returned 0x0 [0084.514] GdipSetStringFormatAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0084.514] GdipSetStringFormatLineAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0084.514] GdipSetStringFormatHotkeyPrefix (format=0x1be57ae0, hotkeyPrefix=1) returned 0x0 [0084.515] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0084.515] GdipDrawString (graphics=0x1be567f0, string="*", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57ae0, brush=0x1be515e0) returned 0x0 [0084.515] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0084.515] GdipDeleteStringFormat (format=0x1be57ae0) returned 0x0 [0084.515] GetFocus () returned 0x0 [0084.515] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.516] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx°\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0084.516] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.516] GdipCreateRegion (region=0x14e030) returned 0x0 [0084.516] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.516] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0084.516] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.516] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0084.516] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0084.516] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486110) returned 0x0 [0084.516] LocalFree (hMem=0x1d486110) returned 0x0 [0084.516] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486910 [0084.516] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486910) returned 0x0 [0084.516] LocalFree (hMem=0x1d486910) returned 0x0 [0084.516] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.516] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0084.516] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0084.516] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0084.516] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.517] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0084.517] GetCurrentObject (hdc=0x270109de, type=0x1) returned 0x1b00017 [0084.517] GetCurrentObject (hdc=0x270109de, type=0x2) returned 0x1900010 [0084.517] GetCurrentObject (hdc=0x270109de, type=0x7) returned 0x2405099f [0084.517] GetCurrentObject (hdc=0x270109de, type=0x6) returned 0x18a0048 [0084.517] SaveDC (hdc=0x270109de) returned 1 [0084.517] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff840407ff [0084.517] GetClipRgn (hdc=0x270109de, hrgn=0xffffffff840407ff) returned 0 [0084.517] SelectClipRgn (hdc=0x270109de, hrgn=0x720409d6) returned 2 [0084.517] DeleteObject (ho=0xffffffff840407ff) returned 1 [0084.517] DeleteObject (ho=0x720409d6) returned 1 [0084.517] OffsetViewportOrgEx (in: hdc=0x270109de, x=0, y=0, lppt=0x217c2e0 | out: lppt=0x217c2e0) returned 1 [0084.517] GetROP2 (hdc=0x270109de) returned 13 [0084.517] GetBkMode (hdc=0x270109de) returned 2 [0084.517] SetBkMode (hdc=0x270109de, mode=1) returned 2 [0084.517] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x203009e8 [0084.517] SelectObject (hdc=0x270109de, h=0x203009e8) returned 0x1b00017 [0084.517] MoveToEx (in: hdc=0x270109de, x=25, y=0, lppt=0x217c348 | out: lppt=0x217c348) returned 1 [0084.517] LineTo (hdc=0x270109de, x=0, y=0) returned 1 [0084.518] SetBkMode (hdc=0x270109de, mode=2) returned 1 [0084.518] MoveToEx (in: hdc=0x270109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.518] GetROP2 (hdc=0x270109de) returned 13 [0084.518] GetBkMode (hdc=0x270109de) returned 2 [0084.518] SetBkMode (hdc=0x270109de, mode=1) returned 2 [0084.518] SelectObject (hdc=0x270109de, h=0x203009e8) returned 0x203009e8 [0084.518] MoveToEx (in: hdc=0x270109de, x=0, y=0, lppt=0x217c360 | out: lppt=0x217c360) returned 1 [0084.518] LineTo (hdc=0x270109de, x=0, y=22) returned 1 [0084.518] SetBkMode (hdc=0x270109de, mode=2) returned 1 [0084.518] MoveToEx (in: hdc=0x270109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.518] SelectObject (hdc=0x270109de, h=0x1b00017) returned 0x203009e8 [0084.518] DeleteObject (ho=0x203009e8) returned 1 [0084.518] GetROP2 (hdc=0x270109de) returned 13 [0084.518] GetBkMode (hdc=0x270109de) returned 2 [0084.518] SetBkMode (hdc=0x270109de, mode=1) returned 2 [0084.518] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x13009ea [0084.518] SelectObject (hdc=0x270109de, h=0x13009ea) returned 0x1b00017 [0084.518] MoveToEx (in: hdc=0x270109de, x=0, y=22, lppt=0x217c3c8 | out: lppt=0x217c3c8) returned 1 [0084.518] LineTo (hdc=0x270109de, x=25, y=22) returned 1 [0084.518] SetBkMode (hdc=0x270109de, mode=2) returned 1 [0084.519] MoveToEx (in: hdc=0x270109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.519] GetROP2 (hdc=0x270109de) returned 13 [0084.519] GetBkMode (hdc=0x270109de) returned 2 [0084.519] SetBkMode (hdc=0x270109de, mode=1) returned 2 [0084.519] SelectObject (hdc=0x270109de, h=0x13009ea) returned 0x13009ea [0084.519] MoveToEx (in: hdc=0x270109de, x=25, y=22, lppt=0x217c3e0 | out: lppt=0x217c3e0) returned 1 [0084.519] LineTo (hdc=0x270109de, x=25, y=-1) returned 1 [0084.519] SetBkMode (hdc=0x270109de, mode=2) returned 1 [0084.519] MoveToEx (in: hdc=0x270109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.519] SelectObject (hdc=0x270109de, h=0x1b00017) returned 0x13009ea [0084.519] DeleteObject (ho=0x13009ea) returned 1 [0084.519] GetROP2 (hdc=0x270109de) returned 13 [0084.519] GetBkMode (hdc=0x270109de) returned 2 [0084.519] SetBkMode (hdc=0x270109de, mode=1) returned 2 [0084.519] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x213009e8 [0084.519] SelectObject (hdc=0x270109de, h=0x213009e8) returned 0x1b00017 [0084.519] MoveToEx (in: hdc=0x270109de, x=24, y=1, lppt=0x217c448 | out: lppt=0x217c448) returned 1 [0084.519] LineTo (hdc=0x270109de, x=1, y=1) returned 1 [0084.519] SetBkMode (hdc=0x270109de, mode=2) returned 1 [0084.519] MoveToEx (in: hdc=0x270109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.519] GetROP2 (hdc=0x270109de) returned 13 [0084.519] GetBkMode (hdc=0x270109de) returned 2 [0084.520] SetBkMode (hdc=0x270109de, mode=1) returned 2 [0084.520] SelectObject (hdc=0x270109de, h=0x213009e8) returned 0x213009e8 [0084.520] MoveToEx (in: hdc=0x270109de, x=1, y=1, lppt=0x217c460 | out: lppt=0x217c460) returned 1 [0084.520] LineTo (hdc=0x270109de, x=1, y=21) returned 1 [0084.520] SetBkMode (hdc=0x270109de, mode=2) returned 1 [0084.520] MoveToEx (in: hdc=0x270109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.520] SelectObject (hdc=0x270109de, h=0x1b00017) returned 0x213009e8 [0084.520] DeleteObject (ho=0x213009e8) returned 1 [0084.556] GetROP2 (hdc=0x270109de) returned 13 [0084.556] GetBkMode (hdc=0x270109de) returned 2 [0084.556] SetBkMode (hdc=0x270109de, mode=1) returned 2 [0084.557] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x6b3009e5 [0084.557] SelectObject (hdc=0x270109de, h=0x6b3009e5) returned 0x1b00017 [0084.557] MoveToEx (in: hdc=0x270109de, x=1, y=21, lppt=0x217c4c8 | out: lppt=0x217c4c8) returned 1 [0084.557] LineTo (hdc=0x270109de, x=24, y=21) returned 1 [0084.557] SetBkMode (hdc=0x270109de, mode=2) returned 1 [0084.557] MoveToEx (in: hdc=0x270109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.557] GetROP2 (hdc=0x270109de) returned 13 [0084.557] GetBkMode (hdc=0x270109de) returned 2 [0084.557] SetBkMode (hdc=0x270109de, mode=1) returned 2 [0084.557] SelectObject (hdc=0x270109de, h=0x6b3009e5) returned 0x6b3009e5 [0084.557] MoveToEx (in: hdc=0x270109de, x=24, y=21, lppt=0x217c4e0 | out: lppt=0x217c4e0) returned 1 [0084.557] LineTo (hdc=0x270109de, x=24, y=0) returned 1 [0084.557] SetBkMode (hdc=0x270109de, mode=2) returned 1 [0084.557] MoveToEx (in: hdc=0x270109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.557] SelectObject (hdc=0x270109de, h=0x1b00017) returned 0x6b3009e5 [0084.557] DeleteObject (ho=0x6b3009e5) returned 1 [0084.557] RestoreDC (hdc=0x270109de, nSavedDC=-1) returned 1 [0084.557] GdipReleaseDC (graphics=0x1be567f0, hdc=0x270109de) returned 0x0 [0084.557] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0084.557] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x270109de, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.558] GdipReleaseDC (graphics=0x1be567f0, hdc=0x270109de) returned 0x0 [0084.558] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0084.559] SelectObject (hdc=0x270109de, h=0x185000f) returned 0x2405099f [0084.559] DeleteDC (hdc=0x270109de) returned 1 [0084.559] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0084.559] EndPaint (hWnd=0x2028c, lpPaint=0x14e548) returned 1 [0084.559] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.559] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x46, wParam=0x0, lParam=0x14ed60) returned 0x0 [0084.559] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x46, wParam=0x0, lParam=0x14ed60) returned 0x0 [0084.560] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.560] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x2028e, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0084.560] GetStockObject (i=5) returned 0x1900015 [0084.560] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.561] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x90038, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0084.561] GetStockObject (i=5) returned 0x1900015 [0084.561] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.561] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20380, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0084.561] GetStockObject (i=5) returned 0x1900015 [0084.561] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.561] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x20384, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0084.561] GetStockObject (i=5) returned 0x1900015 [0084.562] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.562] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x50276, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0084.562] GetStockObject (i=5) returned 0x1900015 [0084.562] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.562] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ae, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0084.562] GetStockObject (i=5) returned 0x1900015 [0084.562] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.562] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b0, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0084.562] GetStockObject (i=5) returned 0x1900015 [0084.563] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.563] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b2, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0084.563] GetStockObject (i=5) returned 0x1900015 [0084.563] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.563] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b4, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0084.563] GetStockObject (i=5) returned 0x1900015 [0084.563] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.563] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b6, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0084.563] GetStockObject (i=5) returned 0x1900015 [0084.564] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.564] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103b8, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0084.564] GetStockObject (i=5) returned 0x1900015 [0084.564] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.564] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103ba, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0084.564] GetStockObject (i=5) returned 0x1900015 [0084.564] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.564] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103bc, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0084.565] GetStockObject (i=5) returned 0x1900015 [0084.565] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.567] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103be, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0084.567] GetStockObject (i=5) returned 0x1900015 [0084.567] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.567] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c0, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0084.567] GetStockObject (i=5) returned 0x1900015 [0084.567] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.568] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c2, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0084.568] GetStockObject (i=5) returned 0x1900015 [0084.568] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.568] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c4, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0084.568] GetStockObject (i=5) returned 0x1900015 [0084.568] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.568] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4aa0, hWnd=0x103c6, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0084.568] GetStockObject (i=5) returned 0x1900015 [0084.569] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.569] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0084.569] SetTextColor (hdc=0xc0100ae, color=0x0) returned 0x0 [0084.569] SetBkColor (hdc=0xc0100ae, color=0xffffff) returned 0xffffff [0084.569] GetWindowPlacement (in: hWnd=0x20372, lpwndpl=0x14e908 | out: lpwndpl=0x14e908) returned 1 [0084.569] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x47, wParam=0x0, lParam=0x14ed60) returned 0x0 [0084.569] GetClientRect (in: hWnd=0x20372, lpRect=0x14e7a0 | out: lpRect=0x14e7a0) returned 1 [0084.569] GetWindowRect (in: hWnd=0x20372, lpRect=0x14e7a0 | out: lpRect=0x14e7a0) returned 1 [0084.570] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0084.570] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0084.570] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0084.571] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x47, wParam=0x0, lParam=0x14ed60) returned 0x0 [0084.571] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x1c, wParam=0x1, lParam=0xd88) returned 0x0 [0084.571] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x1c, wParam=0x1, lParam=0xd88) returned 0x0 [0084.571] NtdllDefWindowProc_W (hWnd=0x30304, Msg=0x1c, wParam=0x1, lParam=0xd88) returned 0x0 [0084.571] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0084.573] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0084.573] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0084.573] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0084.574] GetFocus () returned 0x0 [0084.574] SetFocus (hWnd=0x103c8) returned 0x0 [0084.575] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0084.575] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0084.575] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0084.576] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0084.576] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x1 [0084.576] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0084.576] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0 [0084.576] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0084.577] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0 [0084.577] SetTextColor (hdc=0xc0100ae, color=0x0) returned 0x0 [0084.577] SetBkColor (hdc=0xc0100ae, color=0xffffff) returned 0xffffff [0084.577] SendMessageW (hWnd=0x103c8, Msg=0x2111, wParam=0x10003c8, lParam=0x103c8) returned 0x0 [0084.578] IsWindowUnicode (hWnd=0x2028e) returned 1 [0084.578] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.578] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.578] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.578] BeginPaint (in: hWnd=0x2028e, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0084.578] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0084.578] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x320109de [0084.578] SelectObject (hdc=0x320109de, h=0x2405099f) returned 0x185000f [0084.578] GdipCreateFromHDC (hdc=0x320109de, graphics=0x14e528) returned 0x0 [0084.578] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0084.578] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=58, height=23, combineMode=0x0) returned 0x0 [0084.578] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0084.578] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.578] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0084.578] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486510 [0084.579] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486510) returned 0x0 [0084.579] LocalFree (hMem=0x1d486510) returned 0x0 [0084.579] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.579] GdipCreateRegion (region=0x14e550) returned 0x0 [0084.579] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.579] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0084.579] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0084.579] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd3c0dbd) returned 0x0 [0084.579] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.579] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0084.579] GetCurrentObject (hdc=0x320109de, type=0x1) returned 0x1b00017 [0084.579] GetCurrentObject (hdc=0x320109de, type=0x2) returned 0x1900010 [0084.579] GetCurrentObject (hdc=0x320109de, type=0x7) returned 0x2405099f [0084.579] GetCurrentObject (hdc=0x320109de, type=0x6) returned 0x18a0048 [0084.579] SaveDC (hdc=0x320109de) returned 1 [0084.579] GetNearestColor (hdc=0x320109de, color=0xf0f0f0) returned 0xf0f0f0 [0084.579] GetNearestColor (hdc=0x320109de, color=0xa0a0a0) returned 0xa0a0a0 [0084.579] GetNearestColor (hdc=0x320109de, color=0x696969) returned 0x696969 [0084.579] GetNearestColor (hdc=0x320109de, color=0xa0a0a0) returned 0xa0a0a0 [0084.579] GetNearestColor (hdc=0x320109de, color=0x0) returned 0x0 [0084.579] GetNearestColor (hdc=0x320109de, color=0xffffff) returned 0xffffff [0084.580] GetNearestColor (hdc=0x320109de, color=0xe5e5e5) returned 0xe5e5e5 [0084.580] GetNearestColor (hdc=0x320109de, color=0xd8d8d8) returned 0xd8d8d8 [0084.580] GetNearestColor (hdc=0x320109de, color=0x0) returned 0x0 [0084.580] RestoreDC (hdc=0x320109de, nSavedDC=-1) returned 1 [0084.580] GdipReleaseDC (graphics=0x1be567f0, hdc=0x320109de) returned 0x0 [0084.580] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÈ\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0084.580] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.580] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x217ce60) returned 0x0 [0084.580] GdipSetStringFormatAlign (format=0x1be57d80, align=0x1) returned 0x0 [0084.580] GdipSetStringFormatLineAlign (format=0x1be57d80, align=0x1) returned 0x0 [0084.580] GdipSetStringFormatHotkeyPrefix (format=0x1be57d80, hotkeyPrefix=1) returned 0x0 [0084.580] GdipGetStringFormatFlags (format=0x1be57d80, flags=0x14e378) returned 0x0 [0084.580] GdipGetStringFormatTrimming (format=0x1be57d80, trimming=0x14e378) returned 0x0 [0084.581] GdipGetStringFormatHotkeyPrefix (format=0x1be57d80, hotkeyPrefix=0x14e378) returned 0x0 [0084.581] GdipGetFontSize (font=0x1be57d80, size=0x14e378) returned 0x0 [0084.581] GdipGetFontStyle (font=0x1be57d80, style=0x14e378) returned 0x0 [0084.581] GdipDeleteStringFormat (format=0x1be57d80) returned 0x0 [0084.581] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.581] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.581] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.581] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0084.581] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x217cf90) returned 0x0 [0084.581] GdipSetStringFormatFlags (format=0x1be57c30, flags=0) returned 0x0 [0084.581] GdipSetStringFormatTrimming (format=0x1be57c30, trimming=0x1) returned 0x0 [0084.581] GdipSetStringFormatHotkeyPrefix (format=0x1be57c30, hotkeyPrefix=1) returned 0x0 [0084.581] GdipSetStringFormatAlign (format=0x1be57c30, align=0x1) returned 0x0 [0084.581] GdipSetStringFormatLineAlign (format=0x1be57c30, align=0x1) returned 0x0 [0084.582] GdipMeasureString (graphics=0x1be58070, string="=", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57c30, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0084.582] GdipDeleteStringFormat (format=0x1be57c30) returned 0x0 [0084.582] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0084.582] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.582] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.582] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.582] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0084.582] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.582] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0084.582] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.582] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0084.582] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486a10 [0084.582] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486a10) returned 0x0 [0084.582] LocalFree (hMem=0x1d486a10) returned 0x0 [0084.582] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486810 [0084.582] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486810) returned 0x0 [0084.582] LocalFree (hMem=0x1d486810) returned 0x0 [0084.582] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.583] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0084.583] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0084.583] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0084.583] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.583] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0084.583] GetCurrentObject (hdc=0x320109de, type=0x1) returned 0x1b00017 [0084.583] GetCurrentObject (hdc=0x320109de, type=0x2) returned 0x1900010 [0084.583] GetCurrentObject (hdc=0x320109de, type=0x7) returned 0x2405099f [0084.586] GetCurrentObject (hdc=0x320109de, type=0x6) returned 0x18a0048 [0084.586] SaveDC (hdc=0x320109de) returned 1 [0084.586] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x730409d6 [0084.586] GetClipRgn (hdc=0x320109de, hrgn=0x730409d6) returned 0 [0084.587] SelectClipRgn (hdc=0x320109de, hrgn=0xffffffff850407ff) returned 2 [0084.587] DeleteObject (ho=0x730409d6) returned 1 [0084.587] DeleteObject (ho=0xffffffff850407ff) returned 1 [0084.587] OffsetViewportOrgEx (in: hdc=0x320109de, x=0, y=0, lppt=0x217d350 | out: lppt=0x217d350) returned 1 [0084.587] GetNearestColor (hdc=0x320109de, color=0xf0f0f0) returned 0xf0f0f0 [0084.587] CreateSolidBrush (color=0xf0f0f0) returned 0x621009b2 [0084.587] FillRect (hDC=0x320109de, lprc=0x14e1c8, hbr=0x621009b2) returned 1 [0084.587] DeleteObject (ho=0x621009b2) returned 1 [0084.587] RestoreDC (hdc=0x320109de, nSavedDC=-1) returned 1 [0084.587] GdipReleaseDC (graphics=0x1be567f0, hdc=0x320109de) returned 0x0 [0084.587] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0084.587] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.587] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x217d450) returned 0x0 [0084.588] GdipSetStringFormatAlign (format=0x1be57ed0, align=0x1) returned 0x0 [0084.588] GdipSetStringFormatLineAlign (format=0x1be57ed0, align=0x1) returned 0x0 [0084.588] GdipSetStringFormatHotkeyPrefix (format=0x1be57ed0, hotkeyPrefix=1) returned 0x0 [0084.588] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0084.588] GdipDrawString (graphics=0x1be567f0, string="=", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57ed0, brush=0x1be515e0) returned 0x0 [0084.588] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0084.588] GdipDeleteStringFormat (format=0x1be57ed0) returned 0x0 [0084.588] GetFocus () returned 0x103c8 [0084.588] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.588] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÅ\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0084.588] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.588] GdipCreateRegion (region=0x14e030) returned 0x0 [0084.588] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.589] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0084.589] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.589] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0084.589] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486790 [0084.589] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486790) returned 0x0 [0084.589] LocalFree (hMem=0x1d486790) returned 0x0 [0084.589] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0084.589] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486110) returned 0x0 [0084.589] LocalFree (hMem=0x1d486110) returned 0x0 [0084.589] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.589] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0084.589] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0084.589] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0084.589] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.589] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0084.589] GetCurrentObject (hdc=0x320109de, type=0x1) returned 0x1b00017 [0084.589] GetCurrentObject (hdc=0x320109de, type=0x2) returned 0x1900010 [0084.589] GetCurrentObject (hdc=0x320109de, type=0x7) returned 0x2405099f [0084.589] GetCurrentObject (hdc=0x320109de, type=0x6) returned 0x18a0048 [0084.589] SaveDC (hdc=0x320109de) returned 1 [0084.589] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff860407ff [0084.590] GetClipRgn (hdc=0x320109de, hrgn=0xffffffff860407ff) returned 0 [0084.590] SelectClipRgn (hdc=0x320109de, hrgn=0x740409d6) returned 2 [0084.590] DeleteObject (ho=0xffffffff860407ff) returned 1 [0084.590] DeleteObject (ho=0x740409d6) returned 1 [0084.590] OffsetViewportOrgEx (in: hdc=0x320109de, x=0, y=0, lppt=0x217d838 | out: lppt=0x217d838) returned 1 [0084.590] GetROP2 (hdc=0x320109de) returned 13 [0084.590] GetBkMode (hdc=0x320109de) returned 2 [0084.590] SetBkMode (hdc=0x320109de, mode=1) returned 2 [0084.590] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x6c3009e5 [0084.590] SelectObject (hdc=0x320109de, h=0x6c3009e5) returned 0x1b00017 [0084.590] MoveToEx (in: hdc=0x320109de, x=57, y=0, lppt=0x217d8a0 | out: lppt=0x217d8a0) returned 1 [0084.590] LineTo (hdc=0x320109de, x=0, y=0) returned 1 [0084.590] SetBkMode (hdc=0x320109de, mode=2) returned 1 [0084.590] MoveToEx (in: hdc=0x320109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.590] GetROP2 (hdc=0x320109de) returned 13 [0084.590] GetBkMode (hdc=0x320109de) returned 2 [0084.590] SetBkMode (hdc=0x320109de, mode=1) returned 2 [0084.590] SelectObject (hdc=0x320109de, h=0x6c3009e5) returned 0x6c3009e5 [0084.590] MoveToEx (in: hdc=0x320109de, x=0, y=0, lppt=0x217d8b8 | out: lppt=0x217d8b8) returned 1 [0084.590] LineTo (hdc=0x320109de, x=0, y=22) returned 1 [0084.590] SetBkMode (hdc=0x320109de, mode=2) returned 1 [0084.591] MoveToEx (in: hdc=0x320109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.591] SelectObject (hdc=0x320109de, h=0x1b00017) returned 0x6c3009e5 [0084.591] DeleteObject (ho=0x6c3009e5) returned 1 [0084.591] GetROP2 (hdc=0x320109de) returned 13 [0084.591] GetBkMode (hdc=0x320109de) returned 2 [0084.591] SetBkMode (hdc=0x320109de, mode=1) returned 2 [0084.591] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x223009e8 [0084.591] SelectObject (hdc=0x320109de, h=0x223009e8) returned 0x1b00017 [0084.591] MoveToEx (in: hdc=0x320109de, x=0, y=22, lppt=0x217d920 | out: lppt=0x217d920) returned 1 [0084.591] LineTo (hdc=0x320109de, x=57, y=22) returned 1 [0084.591] SetBkMode (hdc=0x320109de, mode=2) returned 1 [0084.591] MoveToEx (in: hdc=0x320109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.591] GetROP2 (hdc=0x320109de) returned 13 [0084.591] GetBkMode (hdc=0x320109de) returned 2 [0084.591] SetBkMode (hdc=0x320109de, mode=1) returned 2 [0084.591] SelectObject (hdc=0x320109de, h=0x223009e8) returned 0x223009e8 [0084.591] MoveToEx (in: hdc=0x320109de, x=57, y=22, lppt=0x217d938 | out: lppt=0x217d938) returned 1 [0084.591] LineTo (hdc=0x320109de, x=57, y=-1) returned 1 [0084.591] SetBkMode (hdc=0x320109de, mode=2) returned 1 [0084.591] MoveToEx (in: hdc=0x320109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.591] SelectObject (hdc=0x320109de, h=0x1b00017) returned 0x223009e8 [0084.591] DeleteObject (ho=0x223009e8) returned 1 [0084.592] GetROP2 (hdc=0x320109de) returned 13 [0084.592] GetBkMode (hdc=0x320109de) returned 2 [0084.592] SetBkMode (hdc=0x320109de, mode=1) returned 2 [0084.592] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x6d3009e5 [0084.592] SelectObject (hdc=0x320109de, h=0x6d3009e5) returned 0x1b00017 [0084.592] MoveToEx (in: hdc=0x320109de, x=56, y=1, lppt=0x217d9a0 | out: lppt=0x217d9a0) returned 1 [0084.592] LineTo (hdc=0x320109de, x=1, y=1) returned 1 [0084.592] SetBkMode (hdc=0x320109de, mode=2) returned 1 [0084.592] MoveToEx (in: hdc=0x320109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.592] GetROP2 (hdc=0x320109de) returned 13 [0084.592] GetBkMode (hdc=0x320109de) returned 2 [0084.592] SetBkMode (hdc=0x320109de, mode=1) returned 2 [0084.592] SelectObject (hdc=0x320109de, h=0x6d3009e5) returned 0x6d3009e5 [0084.592] MoveToEx (in: hdc=0x320109de, x=1, y=1, lppt=0x217d9b8 | out: lppt=0x217d9b8) returned 1 [0084.592] LineTo (hdc=0x320109de, x=1, y=21) returned 1 [0084.592] SetBkMode (hdc=0x320109de, mode=2) returned 1 [0084.592] MoveToEx (in: hdc=0x320109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.592] SelectObject (hdc=0x320109de, h=0x1b00017) returned 0x6d3009e5 [0084.592] DeleteObject (ho=0x6d3009e5) returned 1 [0084.592] GetROP2 (hdc=0x320109de) returned 13 [0084.592] GetBkMode (hdc=0x320109de) returned 2 [0084.593] SetBkMode (hdc=0x320109de, mode=1) returned 2 [0084.593] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x233009e8 [0084.593] SelectObject (hdc=0x320109de, h=0x233009e8) returned 0x1b00017 [0084.593] MoveToEx (in: hdc=0x320109de, x=1, y=21, lppt=0x217da20 | out: lppt=0x217da20) returned 1 [0084.593] LineTo (hdc=0x320109de, x=56, y=21) returned 1 [0084.593] SetBkMode (hdc=0x320109de, mode=2) returned 1 [0084.593] MoveToEx (in: hdc=0x320109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.593] GetROP2 (hdc=0x320109de) returned 13 [0084.593] GetBkMode (hdc=0x320109de) returned 2 [0084.593] SetBkMode (hdc=0x320109de, mode=1) returned 2 [0084.593] SelectObject (hdc=0x320109de, h=0x233009e8) returned 0x233009e8 [0084.593] MoveToEx (in: hdc=0x320109de, x=56, y=21, lppt=0x217da38 | out: lppt=0x217da38) returned 1 [0084.593] LineTo (hdc=0x320109de, x=56, y=0) returned 1 [0084.593] SetBkMode (hdc=0x320109de, mode=2) returned 1 [0084.593] MoveToEx (in: hdc=0x320109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.593] SelectObject (hdc=0x320109de, h=0x1b00017) returned 0x233009e8 [0084.593] DeleteObject (ho=0x233009e8) returned 1 [0084.593] RestoreDC (hdc=0x320109de, nSavedDC=-1) returned 1 [0084.593] GdipReleaseDC (graphics=0x1be567f0, hdc=0x320109de) returned 0x0 [0084.593] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0084.593] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=58, cy=23, hdcSrc=0x320109de, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.594] GdipReleaseDC (graphics=0x1be567f0, hdc=0x320109de) returned 0x0 [0084.594] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0084.594] SelectObject (hdc=0x320109de, h=0x185000f) returned 0x2405099f [0084.594] DeleteDC (hdc=0x320109de) returned 1 [0084.594] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0084.594] EndPaint (hWnd=0x2028e, lpPaint=0x14e548) returned 1 [0084.594] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.594] IsWindowUnicode (hWnd=0x90038) returned 1 [0084.594] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.594] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.594] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.595] BeginPaint (in: hWnd=0x90038, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0084.595] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0084.595] CreateCompatibleDC (hdc=0xc0100ae) returned 0xffffffff9e01098e [0084.595] SelectObject (hdc=0xffffffff9e01098e, h=0x2405099f) returned 0x185000f [0084.595] GdipCreateFromHDC (hdc=0xffffffff9e01098e, graphics=0x14e528) returned 0x0 [0084.595] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0084.595] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=58, height=23, combineMode=0x0) returned 0x0 [0084.595] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0084.595] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.595] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0084.595] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486e10 [0084.595] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486e10) returned 0x0 [0084.595] LocalFree (hMem=0x1d486e10) returned 0x0 [0084.595] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.595] GdipCreateRegion (region=0x14e550) returned 0x0 [0084.595] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.595] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0084.595] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0084.596] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd390dbd) returned 0x0 [0084.596] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.596] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0084.596] GetCurrentObject (hdc=0xffffffff9e01098e, type=0x1) returned 0x1b00017 [0084.596] GetCurrentObject (hdc=0xffffffff9e01098e, type=0x2) returned 0x1900010 [0084.596] GetCurrentObject (hdc=0xffffffff9e01098e, type=0x7) returned 0x2405099f [0084.596] GetCurrentObject (hdc=0xffffffff9e01098e, type=0x6) returned 0x18a0048 [0084.596] SaveDC (hdc=0xffffffff9e01098e) returned 1 [0084.596] GetNearestColor (hdc=0xffffffff9e01098e, color=0xf0f0f0) returned 0xf0f0f0 [0084.596] GetNearestColor (hdc=0xffffffff9e01098e, color=0xa0a0a0) returned 0xa0a0a0 [0084.596] GetNearestColor (hdc=0xffffffff9e01098e, color=0x696969) returned 0x696969 [0084.596] GetNearestColor (hdc=0xffffffff9e01098e, color=0xa0a0a0) returned 0xa0a0a0 [0084.596] GetNearestColor (hdc=0xffffffff9e01098e, color=0x0) returned 0x0 [0084.596] GetNearestColor (hdc=0xffffffff9e01098e, color=0xffffff) returned 0xffffff [0084.596] GetNearestColor (hdc=0xffffffff9e01098e, color=0xe5e5e5) returned 0xe5e5e5 [0084.596] GetNearestColor (hdc=0xffffffff9e01098e, color=0xd8d8d8) returned 0xd8d8d8 [0084.597] GetNearestColor (hdc=0xffffffff9e01098e, color=0x0) returned 0x0 [0084.597] RestoreDC (hdc=0xffffffff9e01098e, nSavedDC=-1) returned 1 [0084.597] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff9e01098e) returned 0x0 [0084.597] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.597] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÝ\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0084.597] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.597] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x217e358) returned 0x0 [0084.597] GdipSetStringFormatAlign (format=0x1be578b0, align=0x1) returned 0x0 [0084.597] GdipSetStringFormatLineAlign (format=0x1be578b0, align=0x1) returned 0x0 [0084.597] GdipSetStringFormatHotkeyPrefix (format=0x1be578b0, hotkeyPrefix=1) returned 0x0 [0084.597] GdipGetStringFormatFlags (format=0x1be578b0, flags=0x14e378) returned 0x0 [0084.597] GdipGetStringFormatTrimming (format=0x1be578b0, trimming=0x14e378) returned 0x0 [0084.597] GdipGetStringFormatHotkeyPrefix (format=0x1be578b0, hotkeyPrefix=0x14e378) returned 0x0 [0084.597] GdipGetFontSize (font=0x1be578b0, size=0x14e378) returned 0x0 [0084.597] GdipGetFontStyle (font=0x1be578b0, style=0x14e378) returned 0x0 [0084.598] GdipDeleteStringFormat (format=0x1be578b0) returned 0x0 [0084.598] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.598] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.598] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.598] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0084.598] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x217e488) returned 0x0 [0084.598] GdipSetStringFormatFlags (format=0x1be57d80, flags=0) returned 0x0 [0084.598] GdipSetStringFormatTrimming (format=0x1be57d80, trimming=0x1) returned 0x0 [0084.598] GdipSetStringFormatHotkeyPrefix (format=0x1be57d80, hotkeyPrefix=1) returned 0x0 [0084.598] GdipSetStringFormatAlign (format=0x1be57d80, align=0x1) returned 0x0 [0084.598] GdipSetStringFormatLineAlign (format=0x1be57d80, align=0x1) returned 0x0 [0084.598] GdipMeasureString (graphics=0x1be58070, string="log", length=3, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57d80, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0084.598] GdipDeleteStringFormat (format=0x1be57d80) returned 0x0 [0084.599] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0084.599] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.599] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.599] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.599] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0084.599] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.599] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0084.599] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.599] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0084.599] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4867d0 [0084.599] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d4867d0) returned 0x0 [0084.599] LocalFree (hMem=0x1d4867d0) returned 0x0 [0084.599] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486590 [0084.599] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486590) returned 0x0 [0084.599] LocalFree (hMem=0x1d486590) returned 0x0 [0084.599] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.599] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0084.600] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0084.600] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0084.600] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.600] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0084.600] GetCurrentObject (hdc=0xffffffff9e01098e, type=0x1) returned 0x1b00017 [0084.600] GetCurrentObject (hdc=0xffffffff9e01098e, type=0x2) returned 0x1900010 [0084.600] GetCurrentObject (hdc=0xffffffff9e01098e, type=0x7) returned 0x2405099f [0084.600] GetCurrentObject (hdc=0xffffffff9e01098e, type=0x6) returned 0x18a0048 [0084.600] SaveDC (hdc=0xffffffff9e01098e) returned 1 [0084.600] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x750409d6 [0084.600] GetClipRgn (hdc=0xffffffff9e01098e, hrgn=0x750409d6) returned 0 [0084.600] SelectClipRgn (hdc=0xffffffff9e01098e, hrgn=0xffffffff870407ff) returned 2 [0084.600] DeleteObject (ho=0x750409d6) returned 1 [0084.600] DeleteObject (ho=0xffffffff870407ff) returned 1 [0084.600] OffsetViewportOrgEx (in: hdc=0xffffffff9e01098e, x=0, y=0, lppt=0x217e848 | out: lppt=0x217e848) returned 1 [0084.600] GetNearestColor (hdc=0xffffffff9e01098e, color=0xf0f0f0) returned 0xf0f0f0 [0084.600] CreateSolidBrush (color=0xf0f0f0) returned 0x631009b2 [0084.607] FillRect (hDC=0xffffffff9e01098e, lprc=0x14e1c8, hbr=0x631009b2) returned 1 [0084.607] DeleteObject (ho=0x631009b2) returned 1 [0084.607] RestoreDC (hdc=0xffffffff9e01098e, nSavedDC=-1) returned 1 [0084.607] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff9e01098e) returned 0x0 [0084.607] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.608] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0084.608] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.608] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x217e948) returned 0x0 [0084.608] GdipSetStringFormatAlign (format=0x1be57e60, align=0x1) returned 0x0 [0084.608] GdipSetStringFormatLineAlign (format=0x1be57e60, align=0x1) returned 0x0 [0084.608] GdipSetStringFormatHotkeyPrefix (format=0x1be57e60, hotkeyPrefix=1) returned 0x0 [0084.608] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0084.608] GdipDrawString (graphics=0x1be567f0, string="log", length=3, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57e60, brush=0x1be515e0) returned 0x0 [0084.608] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0084.608] GdipDeleteStringFormat (format=0x1be57e60) returned 0x0 [0084.608] GetFocus () returned 0x103c8 [0084.609] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.609] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÚ\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0084.609] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.609] GdipCreateRegion (region=0x14e030) returned 0x0 [0084.609] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.609] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0084.609] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.609] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0084.609] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4868d0 [0084.609] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4868d0) returned 0x0 [0084.609] LocalFree (hMem=0x1d4868d0) returned 0x0 [0084.609] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4861d0 [0084.609] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4861d0) returned 0x0 [0084.609] LocalFree (hMem=0x1d4861d0) returned 0x0 [0084.609] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.609] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0084.609] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0084.609] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0084.610] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.610] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0084.610] GetCurrentObject (hdc=0xffffffff9e01098e, type=0x1) returned 0x1b00017 [0084.610] GetCurrentObject (hdc=0xffffffff9e01098e, type=0x2) returned 0x1900010 [0084.610] GetCurrentObject (hdc=0xffffffff9e01098e, type=0x7) returned 0x2405099f [0084.610] GetCurrentObject (hdc=0xffffffff9e01098e, type=0x6) returned 0x18a0048 [0084.610] SaveDC (hdc=0xffffffff9e01098e) returned 1 [0084.610] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff880407ff [0084.610] GetClipRgn (hdc=0xffffffff9e01098e, hrgn=0xffffffff880407ff) returned 0 [0084.610] SelectClipRgn (hdc=0xffffffff9e01098e, hrgn=0x760409d6) returned 2 [0084.610] DeleteObject (ho=0xffffffff880407ff) returned 1 [0084.610] DeleteObject (ho=0x760409d6) returned 1 [0084.610] OffsetViewportOrgEx (in: hdc=0xffffffff9e01098e, x=0, y=0, lppt=0x217ed30 | out: lppt=0x217ed30) returned 1 [0084.610] GetROP2 (hdc=0xffffffff9e01098e) returned 13 [0084.610] GetBkMode (hdc=0xffffffff9e01098e) returned 2 [0084.610] SetBkMode (hdc=0xffffffff9e01098e, mode=1) returned 2 [0084.610] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x243009e8 [0084.610] SelectObject (hdc=0xffffffff9e01098e, h=0x243009e8) returned 0x1b00017 [0084.610] MoveToEx (in: hdc=0xffffffff9e01098e, x=57, y=0, lppt=0x217ed98 | out: lppt=0x217ed98) returned 1 [0084.611] LineTo (hdc=0xffffffff9e01098e, x=0, y=0) returned 1 [0084.611] SetBkMode (hdc=0xffffffff9e01098e, mode=2) returned 1 [0084.611] MoveToEx (in: hdc=0xffffffff9e01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.611] GetROP2 (hdc=0xffffffff9e01098e) returned 13 [0084.611] GetBkMode (hdc=0xffffffff9e01098e) returned 2 [0084.611] SetBkMode (hdc=0xffffffff9e01098e, mode=1) returned 2 [0084.611] SelectObject (hdc=0xffffffff9e01098e, h=0x243009e8) returned 0x243009e8 [0084.611] MoveToEx (in: hdc=0xffffffff9e01098e, x=0, y=0, lppt=0x217edb0 | out: lppt=0x217edb0) returned 1 [0084.611] LineTo (hdc=0xffffffff9e01098e, x=0, y=22) returned 1 [0084.611] SetBkMode (hdc=0xffffffff9e01098e, mode=2) returned 1 [0084.611] MoveToEx (in: hdc=0xffffffff9e01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.611] SelectObject (hdc=0xffffffff9e01098e, h=0x1b00017) returned 0x243009e8 [0084.611] DeleteObject (ho=0x243009e8) returned 1 [0084.611] GetROP2 (hdc=0xffffffff9e01098e) returned 13 [0084.611] GetBkMode (hdc=0xffffffff9e01098e) returned 2 [0084.611] SetBkMode (hdc=0xffffffff9e01098e, mode=1) returned 2 [0084.611] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x6e3009e5 [0084.611] SelectObject (hdc=0xffffffff9e01098e, h=0x6e3009e5) returned 0x1b00017 [0084.611] MoveToEx (in: hdc=0xffffffff9e01098e, x=0, y=22, lppt=0x217ee18 | out: lppt=0x217ee18) returned 1 [0084.611] LineTo (hdc=0xffffffff9e01098e, x=57, y=22) returned 1 [0084.611] SetBkMode (hdc=0xffffffff9e01098e, mode=2) returned 1 [0084.611] MoveToEx (in: hdc=0xffffffff9e01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.612] GetROP2 (hdc=0xffffffff9e01098e) returned 13 [0084.612] GetBkMode (hdc=0xffffffff9e01098e) returned 2 [0084.612] SetBkMode (hdc=0xffffffff9e01098e, mode=1) returned 2 [0084.612] SelectObject (hdc=0xffffffff9e01098e, h=0x6e3009e5) returned 0x6e3009e5 [0084.612] MoveToEx (in: hdc=0xffffffff9e01098e, x=57, y=22, lppt=0x217ee30 | out: lppt=0x217ee30) returned 1 [0084.612] LineTo (hdc=0xffffffff9e01098e, x=57, y=-1) returned 1 [0084.612] SetBkMode (hdc=0xffffffff9e01098e, mode=2) returned 1 [0084.612] MoveToEx (in: hdc=0xffffffff9e01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.612] SelectObject (hdc=0xffffffff9e01098e, h=0x1b00017) returned 0x6e3009e5 [0084.612] DeleteObject (ho=0x6e3009e5) returned 1 [0084.612] GetROP2 (hdc=0xffffffff9e01098e) returned 13 [0084.612] GetBkMode (hdc=0xffffffff9e01098e) returned 2 [0084.612] SetBkMode (hdc=0xffffffff9e01098e, mode=1) returned 2 [0084.612] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x253009e8 [0084.612] SelectObject (hdc=0xffffffff9e01098e, h=0x253009e8) returned 0x1b00017 [0084.612] MoveToEx (in: hdc=0xffffffff9e01098e, x=56, y=1, lppt=0x217ee98 | out: lppt=0x217ee98) returned 1 [0084.612] LineTo (hdc=0xffffffff9e01098e, x=1, y=1) returned 1 [0084.612] SetBkMode (hdc=0xffffffff9e01098e, mode=2) returned 1 [0084.612] MoveToEx (in: hdc=0xffffffff9e01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.612] GetROP2 (hdc=0xffffffff9e01098e) returned 13 [0084.612] GetBkMode (hdc=0xffffffff9e01098e) returned 2 [0084.612] SetBkMode (hdc=0xffffffff9e01098e, mode=1) returned 2 [0084.613] SelectObject (hdc=0xffffffff9e01098e, h=0x253009e8) returned 0x253009e8 [0084.613] MoveToEx (in: hdc=0xffffffff9e01098e, x=1, y=1, lppt=0x217eeb0 | out: lppt=0x217eeb0) returned 1 [0084.613] LineTo (hdc=0xffffffff9e01098e, x=1, y=21) returned 1 [0084.613] SetBkMode (hdc=0xffffffff9e01098e, mode=2) returned 1 [0084.613] MoveToEx (in: hdc=0xffffffff9e01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.613] SelectObject (hdc=0xffffffff9e01098e, h=0x1b00017) returned 0x253009e8 [0084.613] DeleteObject (ho=0x253009e8) returned 1 [0084.613] GetROP2 (hdc=0xffffffff9e01098e) returned 13 [0084.613] GetBkMode (hdc=0xffffffff9e01098e) returned 2 [0084.613] SetBkMode (hdc=0xffffffff9e01098e, mode=1) returned 2 [0084.613] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x6f3009e5 [0084.613] SelectObject (hdc=0xffffffff9e01098e, h=0x6f3009e5) returned 0x1b00017 [0084.613] MoveToEx (in: hdc=0xffffffff9e01098e, x=1, y=21, lppt=0x217ef18 | out: lppt=0x217ef18) returned 1 [0084.613] LineTo (hdc=0xffffffff9e01098e, x=56, y=21) returned 1 [0084.613] SetBkMode (hdc=0xffffffff9e01098e, mode=2) returned 1 [0084.613] MoveToEx (in: hdc=0xffffffff9e01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.613] GetROP2 (hdc=0xffffffff9e01098e) returned 13 [0084.613] GetBkMode (hdc=0xffffffff9e01098e) returned 2 [0084.613] SetBkMode (hdc=0xffffffff9e01098e, mode=1) returned 2 [0084.613] SelectObject (hdc=0xffffffff9e01098e, h=0x6f3009e5) returned 0x6f3009e5 [0084.613] MoveToEx (in: hdc=0xffffffff9e01098e, x=56, y=21, lppt=0x217ef30 | out: lppt=0x217ef30) returned 1 [0084.613] LineTo (hdc=0xffffffff9e01098e, x=56, y=0) returned 1 [0084.614] SetBkMode (hdc=0xffffffff9e01098e, mode=2) returned 1 [0084.614] MoveToEx (in: hdc=0xffffffff9e01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.614] SelectObject (hdc=0xffffffff9e01098e, h=0x1b00017) returned 0x6f3009e5 [0084.614] DeleteObject (ho=0x6f3009e5) returned 1 [0084.614] RestoreDC (hdc=0xffffffff9e01098e, nSavedDC=-1) returned 1 [0084.614] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff9e01098e) returned 0x0 [0084.614] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0084.614] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=58, cy=23, hdcSrc=0xffffffff9e01098e, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.615] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff9e01098e) returned 0x0 [0084.615] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0084.615] SelectObject (hdc=0xffffffff9e01098e, h=0x185000f) returned 0x2405099f [0084.615] DeleteDC (hdc=0xffffffff9e01098e) returned 1 [0084.615] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0084.615] EndPaint (hWnd=0x90038, lpPaint=0x14e548) returned 1 [0084.615] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.615] IsWindowUnicode (hWnd=0x20380) returned 1 [0084.615] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.615] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.615] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.615] BeginPaint (in: hWnd=0x20380, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0084.615] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0084.615] CreateCompatibleDC (hdc=0x220106d6) returned 0x520109e9 [0084.616] SelectObject (hdc=0x520109e9, h=0x2405099f) returned 0x185000f [0084.616] GdipCreateFromHDC (hdc=0x520109e9, graphics=0x14e528) returned 0x0 [0084.616] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0084.616] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=32, height=23, combineMode=0x0) returned 0x0 [0084.616] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0084.616] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.616] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0084.616] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4869d0 [0084.616] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d4869d0) returned 0x0 [0084.616] LocalFree (hMem=0x1d4869d0) returned 0x0 [0084.616] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.616] GdipCreateRegion (region=0x14e550) returned 0x0 [0084.616] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.616] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0084.616] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0084.616] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd360dbd) returned 0x0 [0084.616] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.616] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0084.616] GetCurrentObject (hdc=0x520109e9, type=0x1) returned 0x1b00017 [0084.617] GetCurrentObject (hdc=0x520109e9, type=0x2) returned 0x1900010 [0084.617] GetCurrentObject (hdc=0x520109e9, type=0x7) returned 0x2405099f [0084.617] GetCurrentObject (hdc=0x520109e9, type=0x6) returned 0x18a0048 [0084.617] SaveDC (hdc=0x520109e9) returned 1 [0084.617] GetNearestColor (hdc=0x520109e9, color=0xf0f0f0) returned 0xf0f0f0 [0084.617] GetNearestColor (hdc=0x520109e9, color=0xa0a0a0) returned 0xa0a0a0 [0084.617] GetNearestColor (hdc=0x520109e9, color=0x696969) returned 0x696969 [0084.617] GetNearestColor (hdc=0x520109e9, color=0xa0a0a0) returned 0xa0a0a0 [0084.617] GetNearestColor (hdc=0x520109e9, color=0x0) returned 0x0 [0084.617] GetNearestColor (hdc=0x520109e9, color=0xffffff) returned 0xffffff [0084.617] GetNearestColor (hdc=0x520109e9, color=0xe5e5e5) returned 0xe5e5e5 [0084.617] GetNearestColor (hdc=0x520109e9, color=0xd8d8d8) returned 0xd8d8d8 [0084.617] GetNearestColor (hdc=0x520109e9, color=0x0) returned 0x0 [0084.617] RestoreDC (hdc=0x520109e9, nSavedDC=-1) returned 1 [0084.617] GdipReleaseDC (graphics=0x1be567f0, hdc=0x520109e9) returned 0x0 [0084.618] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExò\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0084.618] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.618] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x217f850) returned 0x0 [0084.618] GdipSetStringFormatAlign (format=0x1be57bc0, align=0x1) returned 0x0 [0084.618] GdipSetStringFormatLineAlign (format=0x1be57bc0, align=0x1) returned 0x0 [0084.618] GdipSetStringFormatHotkeyPrefix (format=0x1be57bc0, hotkeyPrefix=1) returned 0x0 [0084.618] GdipGetStringFormatFlags (format=0x1be57bc0, flags=0x14e378) returned 0x0 [0084.618] GdipGetStringFormatTrimming (format=0x1be57bc0, trimming=0x14e378) returned 0x0 [0084.618] GdipGetStringFormatHotkeyPrefix (format=0x1be57bc0, hotkeyPrefix=0x14e378) returned 0x0 [0084.618] GdipGetFontSize (font=0x1be57bc0, size=0x14e378) returned 0x0 [0084.618] GdipGetFontStyle (font=0x1be57bc0, style=0x14e378) returned 0x0 [0084.618] GdipDeleteStringFormat (format=0x1be57bc0) returned 0x0 [0084.618] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.618] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.619] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.619] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0084.619] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x217f980) returned 0x0 [0084.619] GdipSetStringFormatFlags (format=0x1be57d10, flags=0) returned 0x0 [0084.619] GdipSetStringFormatTrimming (format=0x1be57d10, trimming=0x1) returned 0x0 [0084.619] GdipSetStringFormatHotkeyPrefix (format=0x1be57d10, hotkeyPrefix=1) returned 0x0 [0084.619] GdipSetStringFormatAlign (format=0x1be57d10, align=0x1) returned 0x0 [0084.619] GdipSetStringFormatLineAlign (format=0x1be57d10, align=0x1) returned 0x0 [0084.619] GdipMeasureString (graphics=0x1be58070, string="e^", length=2, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57d10, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0084.619] GdipDeleteStringFormat (format=0x1be57d10) returned 0x0 [0084.619] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0084.619] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.619] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.619] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.619] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0084.620] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.620] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0084.620] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.620] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0084.620] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d485f10 [0084.620] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d485f10) returned 0x0 [0084.620] LocalFree (hMem=0x1d485f10) returned 0x0 [0084.620] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4861d0 [0084.620] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4861d0) returned 0x0 [0084.620] LocalFree (hMem=0x1d4861d0) returned 0x0 [0084.620] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.620] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0084.620] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0084.620] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0084.620] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.620] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0084.620] GetCurrentObject (hdc=0x520109e9, type=0x1) returned 0x1b00017 [0084.620] GetCurrentObject (hdc=0x520109e9, type=0x2) returned 0x1900010 [0084.620] GetCurrentObject (hdc=0x520109e9, type=0x7) returned 0x2405099f [0084.620] GetCurrentObject (hdc=0x520109e9, type=0x6) returned 0x18a0048 [0084.620] SaveDC (hdc=0x520109e9) returned 1 [0084.621] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x770409d6 [0084.621] GetClipRgn (hdc=0x520109e9, hrgn=0x770409d6) returned 0 [0084.621] SelectClipRgn (hdc=0x520109e9, hrgn=0xffffffff890407ff) returned 2 [0084.621] DeleteObject (ho=0x770409d6) returned 1 [0084.621] DeleteObject (ho=0xffffffff890407ff) returned 1 [0084.621] OffsetViewportOrgEx (in: hdc=0x520109e9, x=0, y=0, lppt=0x217fd40 | out: lppt=0x217fd40) returned 1 [0084.621] GetNearestColor (hdc=0x520109e9, color=0xf0f0f0) returned 0xf0f0f0 [0084.621] CreateSolidBrush (color=0xf0f0f0) returned 0x641009b2 [0084.621] FillRect (hDC=0x520109e9, lprc=0x14e1c8, hbr=0x641009b2) returned 1 [0084.621] DeleteObject (ho=0x641009b2) returned 1 [0084.621] RestoreDC (hdc=0x520109e9, nSavedDC=-1) returned 1 [0084.621] GdipReleaseDC (graphics=0x1be567f0, hdc=0x520109e9) returned 0x0 [0084.621] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0084.622] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.622] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x217fe40) returned 0x0 [0084.622] GdipSetStringFormatAlign (format=0x1be57c30, align=0x1) returned 0x0 [0084.622] GdipSetStringFormatLineAlign (format=0x1be57c30, align=0x1) returned 0x0 [0084.622] GdipSetStringFormatHotkeyPrefix (format=0x1be57c30, hotkeyPrefix=1) returned 0x0 [0084.622] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0084.622] GdipDrawString (graphics=0x1be567f0, string="e^", length=2, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57c30, brush=0x1be515e0) returned 0x0 [0084.622] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0084.622] GdipDeleteStringFormat (format=0x1be57c30) returned 0x0 [0084.622] GetFocus () returned 0x103c8 [0084.622] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.622] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExï\x17\x02", lpUsedDefaultChar=0x0) returned 17 [0084.622] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.622] GdipCreateRegion (region=0x14e030) returned 0x0 [0084.623] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.623] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0084.623] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.623] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0084.623] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0084.623] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486110) returned 0x0 [0084.623] LocalFree (hMem=0x1d486110) returned 0x0 [0084.623] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d485f10 [0084.623] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d485f10) returned 0x0 [0084.623] LocalFree (hMem=0x1d485f10) returned 0x0 [0084.623] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.623] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0084.623] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0084.623] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0084.623] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.623] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0084.623] GetCurrentObject (hdc=0x520109e9, type=0x1) returned 0x1b00017 [0084.623] GetCurrentObject (hdc=0x520109e9, type=0x2) returned 0x1900010 [0084.623] GetCurrentObject (hdc=0x520109e9, type=0x7) returned 0x2405099f [0084.623] GetCurrentObject (hdc=0x520109e9, type=0x6) returned 0x18a0048 [0084.624] SaveDC (hdc=0x520109e9) returned 1 [0084.624] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8a0407ff [0084.624] GetClipRgn (hdc=0x520109e9, hrgn=0xffffffff8a0407ff) returned 0 [0084.624] SelectClipRgn (hdc=0x520109e9, hrgn=0x780409d6) returned 2 [0084.624] DeleteObject (ho=0xffffffff8a0407ff) returned 1 [0084.624] DeleteObject (ho=0x780409d6) returned 1 [0084.624] OffsetViewportOrgEx (in: hdc=0x520109e9, x=0, y=0, lppt=0x2180228 | out: lppt=0x2180228) returned 1 [0084.624] GetROP2 (hdc=0x520109e9) returned 13 [0084.624] GetBkMode (hdc=0x520109e9) returned 2 [0084.624] SetBkMode (hdc=0x520109e9, mode=1) returned 2 [0084.624] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x703009e5 [0084.624] SelectObject (hdc=0x520109e9, h=0x703009e5) returned 0x1b00017 [0084.624] MoveToEx (in: hdc=0x520109e9, x=32, y=0, lppt=0x2180290 | out: lppt=0x2180290) returned 1 [0084.624] LineTo (hdc=0x520109e9, x=0, y=0) returned 1 [0084.624] SetBkMode (hdc=0x520109e9, mode=2) returned 1 [0084.624] MoveToEx (in: hdc=0x520109e9, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.624] GetROP2 (hdc=0x520109e9) returned 13 [0084.624] GetBkMode (hdc=0x520109e9) returned 2 [0084.624] SetBkMode (hdc=0x520109e9, mode=1) returned 2 [0084.624] SelectObject (hdc=0x520109e9, h=0x703009e5) returned 0x703009e5 [0084.624] MoveToEx (in: hdc=0x520109e9, x=0, y=0, lppt=0x21802a8 | out: lppt=0x21802a8) returned 1 [0084.624] LineTo (hdc=0x520109e9, x=0, y=22) returned 1 [0084.624] SetBkMode (hdc=0x520109e9, mode=2) returned 1 [0084.625] MoveToEx (in: hdc=0x520109e9, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.625] SelectObject (hdc=0x520109e9, h=0x1b00017) returned 0x703009e5 [0084.625] DeleteObject (ho=0x703009e5) returned 1 [0084.625] GetROP2 (hdc=0x520109e9) returned 13 [0084.625] GetBkMode (hdc=0x520109e9) returned 2 [0084.625] SetBkMode (hdc=0x520109e9, mode=1) returned 2 [0084.625] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x263009e8 [0084.625] SelectObject (hdc=0x520109e9, h=0x263009e8) returned 0x1b00017 [0084.625] MoveToEx (in: hdc=0x520109e9, x=0, y=22, lppt=0x2180310 | out: lppt=0x2180310) returned 1 [0084.625] LineTo (hdc=0x520109e9, x=32, y=22) returned 1 [0084.625] SetBkMode (hdc=0x520109e9, mode=2) returned 1 [0084.625] MoveToEx (in: hdc=0x520109e9, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.625] GetROP2 (hdc=0x520109e9) returned 13 [0084.625] GetBkMode (hdc=0x520109e9) returned 2 [0084.625] SetBkMode (hdc=0x520109e9, mode=1) returned 2 [0084.625] SelectObject (hdc=0x520109e9, h=0x263009e8) returned 0x263009e8 [0084.625] MoveToEx (in: hdc=0x520109e9, x=32, y=22, lppt=0x2180328 | out: lppt=0x2180328) returned 1 [0084.625] LineTo (hdc=0x520109e9, x=32, y=-1) returned 1 [0084.625] SetBkMode (hdc=0x520109e9, mode=2) returned 1 [0084.625] MoveToEx (in: hdc=0x520109e9, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.625] SelectObject (hdc=0x520109e9, h=0x1b00017) returned 0x263009e8 [0084.625] DeleteObject (ho=0x263009e8) returned 1 [0084.626] GetROP2 (hdc=0x520109e9) returned 13 [0084.626] GetBkMode (hdc=0x520109e9) returned 2 [0084.626] SetBkMode (hdc=0x520109e9, mode=1) returned 2 [0084.626] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x713009e5 [0084.626] SelectObject (hdc=0x520109e9, h=0x713009e5) returned 0x1b00017 [0084.626] MoveToEx (in: hdc=0x520109e9, x=31, y=1, lppt=0x2180390 | out: lppt=0x2180390) returned 1 [0084.626] LineTo (hdc=0x520109e9, x=1, y=1) returned 1 [0084.626] SetBkMode (hdc=0x520109e9, mode=2) returned 1 [0084.626] MoveToEx (in: hdc=0x520109e9, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.626] GetROP2 (hdc=0x520109e9) returned 13 [0084.626] GetBkMode (hdc=0x520109e9) returned 2 [0084.626] SetBkMode (hdc=0x520109e9, mode=1) returned 2 [0084.626] SelectObject (hdc=0x520109e9, h=0x713009e5) returned 0x713009e5 [0084.626] MoveToEx (in: hdc=0x520109e9, x=1, y=1, lppt=0x21803a8 | out: lppt=0x21803a8) returned 1 [0084.626] LineTo (hdc=0x520109e9, x=1, y=21) returned 1 [0084.626] SetBkMode (hdc=0x520109e9, mode=2) returned 1 [0084.626] MoveToEx (in: hdc=0x520109e9, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.626] SelectObject (hdc=0x520109e9, h=0x1b00017) returned 0x713009e5 [0084.626] DeleteObject (ho=0x713009e5) returned 1 [0084.626] GetROP2 (hdc=0x520109e9) returned 13 [0084.626] GetBkMode (hdc=0x520109e9) returned 2 [0084.626] SetBkMode (hdc=0x520109e9, mode=1) returned 2 [0084.627] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x273009e8 [0084.627] SelectObject (hdc=0x520109e9, h=0x273009e8) returned 0x1b00017 [0084.627] MoveToEx (in: hdc=0x520109e9, x=1, y=21, lppt=0x2180410 | out: lppt=0x2180410) returned 1 [0084.627] LineTo (hdc=0x520109e9, x=31, y=21) returned 1 [0084.627] SetBkMode (hdc=0x520109e9, mode=2) returned 1 [0084.627] MoveToEx (in: hdc=0x520109e9, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.627] GetROP2 (hdc=0x520109e9) returned 13 [0084.627] GetBkMode (hdc=0x520109e9) returned 2 [0084.627] SetBkMode (hdc=0x520109e9, mode=1) returned 2 [0084.627] SelectObject (hdc=0x520109e9, h=0x273009e8) returned 0x273009e8 [0084.627] MoveToEx (in: hdc=0x520109e9, x=31, y=21, lppt=0x2180428 | out: lppt=0x2180428) returned 1 [0084.627] LineTo (hdc=0x520109e9, x=31, y=0) returned 1 [0084.627] SetBkMode (hdc=0x520109e9, mode=2) returned 1 [0084.627] MoveToEx (in: hdc=0x520109e9, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.627] SelectObject (hdc=0x520109e9, h=0x1b00017) returned 0x273009e8 [0084.627] DeleteObject (ho=0x273009e8) returned 1 [0084.627] RestoreDC (hdc=0x520109e9, nSavedDC=-1) returned 1 [0084.627] GdipReleaseDC (graphics=0x1be567f0, hdc=0x520109e9) returned 0x0 [0084.627] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0084.627] BitBlt (hdc=0x220106d6, x=0, y=0, cx=33, cy=23, hdcSrc=0x520109e9, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.627] GdipReleaseDC (graphics=0x1be567f0, hdc=0x520109e9) returned 0x0 [0084.627] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0084.628] SelectObject (hdc=0x520109e9, h=0x185000f) returned 0x2405099f [0084.628] DeleteDC (hdc=0x520109e9) returned 1 [0084.628] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0084.628] EndPaint (hWnd=0x20380, lpPaint=0x14e548) returned 1 [0084.628] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.628] IsWindowUnicode (hWnd=0x20384) returned 1 [0084.628] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.628] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.628] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.628] BeginPaint (in: hWnd=0x20384, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0084.628] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0084.628] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x3a0109de [0084.628] SelectObject (hdc=0x3a0109de, h=0x2405099f) returned 0x185000f [0084.628] GdipCreateFromHDC (hdc=0x3a0109de, graphics=0x14e528) returned 0x0 [0084.628] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0084.629] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0084.629] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0084.629] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.629] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0084.629] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486010 [0084.629] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486010) returned 0x0 [0084.629] LocalFree (hMem=0x1d486010) returned 0x0 [0084.629] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.629] GdipCreateRegion (region=0x14e550) returned 0x0 [0084.629] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.629] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0084.629] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0084.629] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd330dbd) returned 0x0 [0084.629] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.629] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0084.629] GetCurrentObject (hdc=0x3a0109de, type=0x1) returned 0x1b00017 [0084.629] GetCurrentObject (hdc=0x3a0109de, type=0x2) returned 0x1900010 [0084.629] GetCurrentObject (hdc=0x3a0109de, type=0x7) returned 0x2405099f [0084.631] GetCurrentObject (hdc=0x3a0109de, type=0x6) returned 0x18a0048 [0084.631] SaveDC (hdc=0x3a0109de) returned 1 [0084.631] GetNearestColor (hdc=0x3a0109de, color=0xf0f0f0) returned 0xf0f0f0 [0084.631] GetNearestColor (hdc=0x3a0109de, color=0xa0a0a0) returned 0xa0a0a0 [0084.631] GetNearestColor (hdc=0x3a0109de, color=0x696969) returned 0x696969 [0084.631] GetNearestColor (hdc=0x3a0109de, color=0xa0a0a0) returned 0xa0a0a0 [0084.631] GetNearestColor (hdc=0x3a0109de, color=0x0) returned 0x0 [0084.631] GetNearestColor (hdc=0x3a0109de, color=0xffffff) returned 0xffffff [0084.631] GetNearestColor (hdc=0x3a0109de, color=0xe5e5e5) returned 0xe5e5e5 [0084.632] GetNearestColor (hdc=0x3a0109de, color=0xd8d8d8) returned 0xd8d8d8 [0084.632] GetNearestColor (hdc=0x3a0109de, color=0x0) returned 0x0 [0084.632] RestoreDC (hdc=0x3a0109de, nSavedDC=-1) returned 1 [0084.632] GdipReleaseDC (graphics=0x1be567f0, hdc=0x3a0109de) returned 0x0 [0084.632] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x07\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.632] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.632] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2180d48) returned 0x0 [0084.632] GdipSetStringFormatAlign (format=0x1be57a70, align=0x1) returned 0x0 [0084.632] GdipSetStringFormatLineAlign (format=0x1be57a70, align=0x1) returned 0x0 [0084.632] GdipSetStringFormatHotkeyPrefix (format=0x1be57a70, hotkeyPrefix=1) returned 0x0 [0084.632] GdipGetStringFormatFlags (format=0x1be57a70, flags=0x14e378) returned 0x0 [0084.632] GdipGetStringFormatTrimming (format=0x1be57a70, trimming=0x14e378) returned 0x0 [0084.632] GdipGetStringFormatHotkeyPrefix (format=0x1be57a70, hotkeyPrefix=0x14e378) returned 0x0 [0084.632] GdipGetFontSize (font=0x1be57a70, size=0x14e378) returned 0x0 [0084.632] GdipGetFontStyle (font=0x1be57a70, style=0x14e378) returned 0x0 [0084.632] GdipDeleteStringFormat (format=0x1be57a70) returned 0x0 [0084.633] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.633] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.633] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0084.633] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2180e78) returned 0x0 [0084.633] GdipSetStringFormatFlags (format=0x1be57fb0, flags=0) returned 0x0 [0084.633] GdipSetStringFormatTrimming (format=0x1be57fb0, trimming=0x1) returned 0x0 [0084.633] GdipSetStringFormatHotkeyPrefix (format=0x1be57fb0, hotkeyPrefix=1) returned 0x0 [0084.633] GdipSetStringFormatAlign (format=0x1be57fb0, align=0x1) returned 0x0 [0084.633] GdipSetStringFormatLineAlign (format=0x1be57fb0, align=0x1) returned 0x0 [0084.633] GdipMeasureString (graphics=0x1be58070, string="/", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57fb0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0084.633] GdipDeleteStringFormat (format=0x1be57fb0) returned 0x0 [0084.633] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0084.634] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.634] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.634] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0084.634] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.634] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0084.634] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.634] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0084.634] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b10 [0084.634] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486b10) returned 0x0 [0084.634] LocalFree (hMem=0x1d486b10) returned 0x0 [0084.634] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486e10 [0084.634] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486e10) returned 0x0 [0084.634] LocalFree (hMem=0x1d486e10) returned 0x0 [0084.634] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.634] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0084.634] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0084.634] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0084.634] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.635] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0084.635] GetCurrentObject (hdc=0x3a0109de, type=0x1) returned 0x1b00017 [0084.635] GetCurrentObject (hdc=0x3a0109de, type=0x2) returned 0x1900010 [0084.635] GetCurrentObject (hdc=0x3a0109de, type=0x7) returned 0x2405099f [0084.635] GetCurrentObject (hdc=0x3a0109de, type=0x6) returned 0x18a0048 [0084.635] SaveDC (hdc=0x3a0109de) returned 1 [0084.635] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x790409d6 [0084.635] GetClipRgn (hdc=0x3a0109de, hrgn=0x790409d6) returned 0 [0084.635] SelectClipRgn (hdc=0x3a0109de, hrgn=0xffffffff8b0407ff) returned 2 [0084.635] DeleteObject (ho=0x790409d6) returned 1 [0084.635] DeleteObject (ho=0xffffffff8b0407ff) returned 1 [0084.635] OffsetViewportOrgEx (in: hdc=0x3a0109de, x=0, y=0, lppt=0x2181238 | out: lppt=0x2181238) returned 1 [0084.635] GetNearestColor (hdc=0x3a0109de, color=0xf0f0f0) returned 0xf0f0f0 [0084.635] CreateSolidBrush (color=0xf0f0f0) returned 0x651009b2 [0084.635] FillRect (hDC=0x3a0109de, lprc=0x14e1c8, hbr=0x651009b2) returned 1 [0084.635] DeleteObject (ho=0x651009b2) returned 1 [0084.635] RestoreDC (hdc=0x3a0109de, nSavedDC=-1) returned 1 [0084.635] GdipReleaseDC (graphics=0x1be567f0, hdc=0x3a0109de) returned 0x0 [0084.636] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0084.636] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.636] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2181338) returned 0x0 [0084.636] GdipSetStringFormatAlign (format=0x1be57b50, align=0x1) returned 0x0 [0084.636] GdipSetStringFormatLineAlign (format=0x1be57b50, align=0x1) returned 0x0 [0084.636] GdipSetStringFormatHotkeyPrefix (format=0x1be57b50, hotkeyPrefix=1) returned 0x0 [0084.636] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0084.636] GdipDrawString (graphics=0x1be567f0, string="/", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57b50, brush=0x1be515e0) returned 0x0 [0084.636] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0084.636] GdipDeleteStringFormat (format=0x1be57b50) returned 0x0 [0084.636] GetFocus () returned 0x103c8 [0084.637] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x04\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.637] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.637] GdipCreateRegion (region=0x14e030) returned 0x0 [0084.637] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.637] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0084.637] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.637] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0084.637] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486a90 [0084.637] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486a90) returned 0x0 [0084.637] LocalFree (hMem=0x1d486a90) returned 0x0 [0084.637] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486750 [0084.637] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486750) returned 0x0 [0084.637] LocalFree (hMem=0x1d486750) returned 0x0 [0084.637] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.637] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0084.637] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0084.638] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0084.638] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.638] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0084.638] GetCurrentObject (hdc=0x3a0109de, type=0x1) returned 0x1b00017 [0084.638] GetCurrentObject (hdc=0x3a0109de, type=0x2) returned 0x1900010 [0084.638] GetCurrentObject (hdc=0x3a0109de, type=0x7) returned 0x2405099f [0084.638] GetCurrentObject (hdc=0x3a0109de, type=0x6) returned 0x18a0048 [0084.638] SaveDC (hdc=0x3a0109de) returned 1 [0084.638] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8c0407ff [0084.638] GetClipRgn (hdc=0x3a0109de, hrgn=0xffffffff8c0407ff) returned 0 [0084.638] SelectClipRgn (hdc=0x3a0109de, hrgn=0x7a0409d6) returned 2 [0084.638] DeleteObject (ho=0xffffffff8c0407ff) returned 1 [0084.638] DeleteObject (ho=0x7a0409d6) returned 1 [0084.638] OffsetViewportOrgEx (in: hdc=0x3a0109de, x=0, y=0, lppt=0x2181720 | out: lppt=0x2181720) returned 1 [0084.638] GetROP2 (hdc=0x3a0109de) returned 13 [0084.638] GetBkMode (hdc=0x3a0109de) returned 2 [0084.638] SetBkMode (hdc=0x3a0109de, mode=1) returned 2 [0084.638] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x283009e8 [0084.638] SelectObject (hdc=0x3a0109de, h=0x283009e8) returned 0x1b00017 [0084.638] MoveToEx (in: hdc=0x3a0109de, x=25, y=0, lppt=0x2181788 | out: lppt=0x2181788) returned 1 [0084.638] LineTo (hdc=0x3a0109de, x=0, y=0) returned 1 [0084.639] SetBkMode (hdc=0x3a0109de, mode=2) returned 1 [0084.639] MoveToEx (in: hdc=0x3a0109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.639] GetROP2 (hdc=0x3a0109de) returned 13 [0084.639] GetBkMode (hdc=0x3a0109de) returned 2 [0084.639] SetBkMode (hdc=0x3a0109de, mode=1) returned 2 [0084.639] SelectObject (hdc=0x3a0109de, h=0x283009e8) returned 0x283009e8 [0084.639] MoveToEx (in: hdc=0x3a0109de, x=0, y=0, lppt=0x21817a0 | out: lppt=0x21817a0) returned 1 [0084.639] LineTo (hdc=0x3a0109de, x=0, y=22) returned 1 [0084.639] SetBkMode (hdc=0x3a0109de, mode=2) returned 1 [0084.639] MoveToEx (in: hdc=0x3a0109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.639] SelectObject (hdc=0x3a0109de, h=0x1b00017) returned 0x283009e8 [0084.639] DeleteObject (ho=0x283009e8) returned 1 [0084.639] GetROP2 (hdc=0x3a0109de) returned 13 [0084.639] GetBkMode (hdc=0x3a0109de) returned 2 [0084.639] SetBkMode (hdc=0x3a0109de, mode=1) returned 2 [0084.639] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x723009e5 [0084.639] SelectObject (hdc=0x3a0109de, h=0x723009e5) returned 0x1b00017 [0084.639] MoveToEx (in: hdc=0x3a0109de, x=0, y=22, lppt=0x2181808 | out: lppt=0x2181808) returned 1 [0084.639] LineTo (hdc=0x3a0109de, x=25, y=22) returned 1 [0084.639] SetBkMode (hdc=0x3a0109de, mode=2) returned 1 [0084.639] MoveToEx (in: hdc=0x3a0109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.639] GetROP2 (hdc=0x3a0109de) returned 13 [0084.640] GetBkMode (hdc=0x3a0109de) returned 2 [0084.640] SetBkMode (hdc=0x3a0109de, mode=1) returned 2 [0084.640] SelectObject (hdc=0x3a0109de, h=0x723009e5) returned 0x723009e5 [0084.640] MoveToEx (in: hdc=0x3a0109de, x=25, y=22, lppt=0x2181820 | out: lppt=0x2181820) returned 1 [0084.640] LineTo (hdc=0x3a0109de, x=25, y=-1) returned 1 [0084.640] SetBkMode (hdc=0x3a0109de, mode=2) returned 1 [0084.640] MoveToEx (in: hdc=0x3a0109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.640] SelectObject (hdc=0x3a0109de, h=0x1b00017) returned 0x723009e5 [0084.640] DeleteObject (ho=0x723009e5) returned 1 [0084.640] GetROP2 (hdc=0x3a0109de) returned 13 [0084.640] GetBkMode (hdc=0x3a0109de) returned 2 [0084.640] SetBkMode (hdc=0x3a0109de, mode=1) returned 2 [0084.640] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x293009e8 [0084.640] SelectObject (hdc=0x3a0109de, h=0x293009e8) returned 0x1b00017 [0084.640] MoveToEx (in: hdc=0x3a0109de, x=24, y=1, lppt=0x2181888 | out: lppt=0x2181888) returned 1 [0084.640] LineTo (hdc=0x3a0109de, x=1, y=1) returned 1 [0084.640] SetBkMode (hdc=0x3a0109de, mode=2) returned 1 [0084.640] MoveToEx (in: hdc=0x3a0109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.640] GetROP2 (hdc=0x3a0109de) returned 13 [0084.640] GetBkMode (hdc=0x3a0109de) returned 2 [0084.640] SetBkMode (hdc=0x3a0109de, mode=1) returned 2 [0084.640] SelectObject (hdc=0x3a0109de, h=0x293009e8) returned 0x293009e8 [0084.641] MoveToEx (in: hdc=0x3a0109de, x=1, y=1, lppt=0x21818a0 | out: lppt=0x21818a0) returned 1 [0084.641] LineTo (hdc=0x3a0109de, x=1, y=21) returned 1 [0084.641] SetBkMode (hdc=0x3a0109de, mode=2) returned 1 [0084.641] MoveToEx (in: hdc=0x3a0109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.641] SelectObject (hdc=0x3a0109de, h=0x1b00017) returned 0x293009e8 [0084.641] DeleteObject (ho=0x293009e8) returned 1 [0084.641] GetROP2 (hdc=0x3a0109de) returned 13 [0084.641] GetBkMode (hdc=0x3a0109de) returned 2 [0084.641] SetBkMode (hdc=0x3a0109de, mode=1) returned 2 [0084.641] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x733009e5 [0084.641] SelectObject (hdc=0x3a0109de, h=0x733009e5) returned 0x1b00017 [0084.641] MoveToEx (in: hdc=0x3a0109de, x=1, y=21, lppt=0x2181908 | out: lppt=0x2181908) returned 1 [0084.641] LineTo (hdc=0x3a0109de, x=24, y=21) returned 1 [0084.641] SetBkMode (hdc=0x3a0109de, mode=2) returned 1 [0084.641] MoveToEx (in: hdc=0x3a0109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.641] GetROP2 (hdc=0x3a0109de) returned 13 [0084.641] GetBkMode (hdc=0x3a0109de) returned 2 [0084.641] SetBkMode (hdc=0x3a0109de, mode=1) returned 2 [0084.641] SelectObject (hdc=0x3a0109de, h=0x733009e5) returned 0x733009e5 [0084.641] MoveToEx (in: hdc=0x3a0109de, x=24, y=21, lppt=0x2181920 | out: lppt=0x2181920) returned 1 [0084.641] LineTo (hdc=0x3a0109de, x=24, y=0) returned 1 [0084.641] SetBkMode (hdc=0x3a0109de, mode=2) returned 1 [0084.642] MoveToEx (in: hdc=0x3a0109de, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.642] SelectObject (hdc=0x3a0109de, h=0x1b00017) returned 0x733009e5 [0084.642] DeleteObject (ho=0x733009e5) returned 1 [0084.642] RestoreDC (hdc=0x3a0109de, nSavedDC=-1) returned 1 [0084.642] GdipReleaseDC (graphics=0x1be567f0, hdc=0x3a0109de) returned 0x0 [0084.642] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0084.642] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x3a0109de, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.642] GdipReleaseDC (graphics=0x1be567f0, hdc=0x3a0109de) returned 0x0 [0084.642] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0084.642] SelectObject (hdc=0x3a0109de, h=0x185000f) returned 0x2405099f [0084.642] DeleteDC (hdc=0x3a0109de) returned 1 [0084.642] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0084.642] EndPaint (hWnd=0x20384, lpPaint=0x14e548) returned 1 [0084.642] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.642] IsWindowUnicode (hWnd=0x50276) returned 1 [0084.642] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.642] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.642] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.643] BeginPaint (in: hWnd=0x50276, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0084.643] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0084.643] CreateCompatibleDC (hdc=0xc0100ae) returned 0xffffffffa701098e [0084.643] SelectObject (hdc=0xffffffffa701098e, h=0x2405099f) returned 0x185000f [0084.643] GdipCreateFromHDC (hdc=0xffffffffa701098e, graphics=0x14e528) returned 0x0 [0084.643] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0084.643] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0084.643] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0084.643] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.643] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0084.643] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d485f10 [0084.643] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d485f10) returned 0x0 [0084.643] LocalFree (hMem=0x1d485f10) returned 0x0 [0084.643] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.643] GdipCreateRegion (region=0x14e550) returned 0x0 [0084.643] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.643] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0084.643] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0084.643] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd300dbd) returned 0x0 [0084.644] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.644] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0084.644] GetCurrentObject (hdc=0xffffffffa701098e, type=0x1) returned 0x1b00017 [0084.644] GetCurrentObject (hdc=0xffffffffa701098e, type=0x2) returned 0x1900010 [0084.644] GetCurrentObject (hdc=0xffffffffa701098e, type=0x7) returned 0x2405099f [0084.644] GetCurrentObject (hdc=0xffffffffa701098e, type=0x6) returned 0x18a0048 [0084.644] SaveDC (hdc=0xffffffffa701098e) returned 1 [0084.644] GetNearestColor (hdc=0xffffffffa701098e, color=0xf0f0f0) returned 0xf0f0f0 [0084.644] GetNearestColor (hdc=0xffffffffa701098e, color=0xa0a0a0) returned 0xa0a0a0 [0084.644] GetNearestColor (hdc=0xffffffffa701098e, color=0x696969) returned 0x696969 [0084.644] GetNearestColor (hdc=0xffffffffa701098e, color=0xa0a0a0) returned 0xa0a0a0 [0084.644] GetNearestColor (hdc=0xffffffffa701098e, color=0x0) returned 0x0 [0084.645] GetNearestColor (hdc=0xffffffffa701098e, color=0xffffff) returned 0xffffff [0084.645] GetNearestColor (hdc=0xffffffffa701098e, color=0xe5e5e5) returned 0xe5e5e5 [0084.645] GetNearestColor (hdc=0xffffffffa701098e, color=0xd8d8d8) returned 0xd8d8d8 [0084.645] GetNearestColor (hdc=0xffffffffa701098e, color=0x0) returned 0x0 [0084.645] RestoreDC (hdc=0xffffffffa701098e, nSavedDC=-1) returned 1 [0084.645] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffa701098e) returned 0x0 [0084.694] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.694] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x1c\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.694] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.694] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2182240) returned 0x0 [0084.694] GdipSetStringFormatAlign (format=0x1be57e60, align=0x1) returned 0x0 [0084.694] GdipSetStringFormatLineAlign (format=0x1be57e60, align=0x1) returned 0x0 [0084.694] GdipSetStringFormatHotkeyPrefix (format=0x1be57e60, hotkeyPrefix=1) returned 0x0 [0084.694] GdipGetStringFormatFlags (format=0x1be57e60, flags=0x14e378) returned 0x0 [0084.694] GdipGetStringFormatTrimming (format=0x1be57e60, trimming=0x14e378) returned 0x0 [0084.694] GdipGetStringFormatHotkeyPrefix (format=0x1be57e60, hotkeyPrefix=0x14e378) returned 0x0 [0084.694] GdipGetFontSize (font=0x1be57e60, size=0x14e378) returned 0x0 [0084.694] GdipGetFontStyle (font=0x1be57e60, style=0x14e378) returned 0x0 [0084.694] GdipDeleteStringFormat (format=0x1be57e60) returned 0x0 [0084.695] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.695] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.695] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0084.695] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2182370) returned 0x0 [0084.695] GdipSetStringFormatFlags (format=0x1be57df0, flags=0) returned 0x0 [0084.695] GdipSetStringFormatTrimming (format=0x1be57df0, trimming=0x1) returned 0x0 [0084.695] GdipSetStringFormatHotkeyPrefix (format=0x1be57df0, hotkeyPrefix=1) returned 0x0 [0084.695] GdipSetStringFormatAlign (format=0x1be57df0, align=0x1) returned 0x0 [0084.695] GdipSetStringFormatLineAlign (format=0x1be57df0, align=0x1) returned 0x0 [0084.695] GdipMeasureString (graphics=0x1be58070, string=";", length=1, font=0x1ad3edb0, layoutRect=0x14dfb8, stringFormat=0x1be57df0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0084.695] GdipDeleteStringFormat (format=0x1be57df0) returned 0x0 [0084.695] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0084.696] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.696] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.696] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0084.696] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.696] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0084.696] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.696] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0084.696] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0084.696] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486110) returned 0x0 [0084.696] LocalFree (hMem=0x1d486110) returned 0x0 [0084.696] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486c50 [0084.696] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486c50) returned 0x0 [0084.696] LocalFree (hMem=0x1d486c50) returned 0x0 [0084.696] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.696] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0084.696] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0084.696] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0084.696] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.697] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0084.697] GetCurrentObject (hdc=0xffffffffa701098e, type=0x1) returned 0x1b00017 [0084.697] GetCurrentObject (hdc=0xffffffffa701098e, type=0x2) returned 0x1900010 [0084.697] GetCurrentObject (hdc=0xffffffffa701098e, type=0x7) returned 0x2405099f [0084.697] GetCurrentObject (hdc=0xffffffffa701098e, type=0x6) returned 0x18a0048 [0084.697] SaveDC (hdc=0xffffffffa701098e) returned 1 [0084.697] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7b0409d6 [0084.697] GetClipRgn (hdc=0xffffffffa701098e, hrgn=0x7b0409d6) returned 0 [0084.697] SelectClipRgn (hdc=0xffffffffa701098e, hrgn=0xffffffff8d0407ff) returned 2 [0084.697] DeleteObject (ho=0x7b0409d6) returned 1 [0084.697] DeleteObject (ho=0xffffffff8d0407ff) returned 1 [0084.697] OffsetViewportOrgEx (in: hdc=0xffffffffa701098e, x=0, y=0, lppt=0x2182730 | out: lppt=0x2182730) returned 1 [0084.697] GetNearestColor (hdc=0xffffffffa701098e, color=0xf0f0f0) returned 0xf0f0f0 [0084.697] CreateSolidBrush (color=0xf0f0f0) returned 0x661009b2 [0084.697] FillRect (hDC=0xffffffffa701098e, lprc=0x14e1c8, hbr=0x661009b2) returned 1 [0084.697] DeleteObject (ho=0x661009b2) returned 1 [0084.697] RestoreDC (hdc=0xffffffffa701098e, nSavedDC=-1) returned 1 [0084.697] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffa701098e) returned 0x0 [0084.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0084.698] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.698] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2182830) returned 0x0 [0084.698] GdipSetStringFormatAlign (format=0x1be57a00, align=0x1) returned 0x0 [0084.698] GdipSetStringFormatLineAlign (format=0x1be57a00, align=0x1) returned 0x0 [0084.698] GdipSetStringFormatHotkeyPrefix (format=0x1be57a00, hotkeyPrefix=1) returned 0x0 [0084.698] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0084.698] GdipDrawString (graphics=0x1be567f0, string=";", length=1, font=0x1ad3edb0, layoutRect=0x14e338, stringFormat=0x1be57a00, brush=0x1be515e0) returned 0x0 [0084.698] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0084.698] GdipDeleteStringFormat (format=0x1be57a00) returned 0x0 [0084.698] GetFocus () returned 0x103c8 [0084.702] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x19\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.702] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.702] GdipCreateRegion (region=0x14e030) returned 0x0 [0084.702] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.702] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0084.702] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.702] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0084.702] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0084.702] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486110) returned 0x0 [0084.702] LocalFree (hMem=0x1d486110) returned 0x0 [0084.703] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486490 [0084.703] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486490) returned 0x0 [0084.703] LocalFree (hMem=0x1d486490) returned 0x0 [0084.703] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.703] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0084.703] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0084.703] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0084.703] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.703] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0084.703] GetCurrentObject (hdc=0xffffffffa701098e, type=0x1) returned 0x1b00017 [0084.703] GetCurrentObject (hdc=0xffffffffa701098e, type=0x2) returned 0x1900010 [0084.703] GetCurrentObject (hdc=0xffffffffa701098e, type=0x7) returned 0x2405099f [0084.703] GetCurrentObject (hdc=0xffffffffa701098e, type=0x6) returned 0x18a0048 [0084.703] SaveDC (hdc=0xffffffffa701098e) returned 1 [0084.703] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8e0407ff [0084.703] GetClipRgn (hdc=0xffffffffa701098e, hrgn=0xffffffff8e0407ff) returned 0 [0084.703] SelectClipRgn (hdc=0xffffffffa701098e, hrgn=0x7c0409d6) returned 2 [0084.703] DeleteObject (ho=0xffffffff8e0407ff) returned 1 [0084.703] DeleteObject (ho=0x7c0409d6) returned 1 [0084.703] OffsetViewportOrgEx (in: hdc=0xffffffffa701098e, x=0, y=0, lppt=0x2182c18 | out: lppt=0x2182c18) returned 1 [0084.703] GetROP2 (hdc=0xffffffffa701098e) returned 13 [0084.704] GetBkMode (hdc=0xffffffffa701098e) returned 2 [0084.704] SetBkMode (hdc=0xffffffffa701098e, mode=1) returned 2 [0084.704] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x583009e9 [0084.704] SelectObject (hdc=0xffffffffa701098e, h=0x583009e9) returned 0x1b00017 [0084.704] MoveToEx (in: hdc=0xffffffffa701098e, x=25, y=0, lppt=0x2182c80 | out: lppt=0x2182c80) returned 1 [0084.704] LineTo (hdc=0xffffffffa701098e, x=0, y=0) returned 1 [0084.704] SetBkMode (hdc=0xffffffffa701098e, mode=2) returned 1 [0084.704] MoveToEx (in: hdc=0xffffffffa701098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.704] GetROP2 (hdc=0xffffffffa701098e) returned 13 [0084.704] GetBkMode (hdc=0xffffffffa701098e) returned 2 [0084.704] SetBkMode (hdc=0xffffffffa701098e, mode=1) returned 2 [0084.704] SelectObject (hdc=0xffffffffa701098e, h=0x583009e9) returned 0x583009e9 [0084.704] MoveToEx (in: hdc=0xffffffffa701098e, x=0, y=0, lppt=0x2182c98 | out: lppt=0x2182c98) returned 1 [0084.704] LineTo (hdc=0xffffffffa701098e, x=0, y=22) returned 1 [0084.704] SetBkMode (hdc=0xffffffffa701098e, mode=2) returned 1 [0084.704] MoveToEx (in: hdc=0xffffffffa701098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.704] SelectObject (hdc=0xffffffffa701098e, h=0x1b00017) returned 0x583009e9 [0084.704] DeleteObject (ho=0x583009e9) returned 1 [0084.704] GetROP2 (hdc=0xffffffffa701098e) returned 13 [0084.704] GetBkMode (hdc=0xffffffffa701098e) returned 2 [0084.704] SetBkMode (hdc=0xffffffffa701098e, mode=1) returned 2 [0084.704] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x743009e5 [0084.705] SelectObject (hdc=0xffffffffa701098e, h=0x743009e5) returned 0x1b00017 [0084.705] MoveToEx (in: hdc=0xffffffffa701098e, x=0, y=22, lppt=0x2182d00 | out: lppt=0x2182d00) returned 1 [0084.705] LineTo (hdc=0xffffffffa701098e, x=25, y=22) returned 1 [0084.705] SetBkMode (hdc=0xffffffffa701098e, mode=2) returned 1 [0084.705] MoveToEx (in: hdc=0xffffffffa701098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.705] GetROP2 (hdc=0xffffffffa701098e) returned 13 [0084.705] GetBkMode (hdc=0xffffffffa701098e) returned 2 [0084.705] SetBkMode (hdc=0xffffffffa701098e, mode=1) returned 2 [0084.705] SelectObject (hdc=0xffffffffa701098e, h=0x743009e5) returned 0x743009e5 [0084.705] MoveToEx (in: hdc=0xffffffffa701098e, x=25, y=22, lppt=0x2182d18 | out: lppt=0x2182d18) returned 1 [0084.705] LineTo (hdc=0xffffffffa701098e, x=25, y=-1) returned 1 [0084.705] SetBkMode (hdc=0xffffffffa701098e, mode=2) returned 1 [0084.705] MoveToEx (in: hdc=0xffffffffa701098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.705] SelectObject (hdc=0xffffffffa701098e, h=0x1b00017) returned 0x743009e5 [0084.705] DeleteObject (ho=0x743009e5) returned 1 [0084.705] GetROP2 (hdc=0xffffffffa701098e) returned 13 [0084.705] GetBkMode (hdc=0xffffffffa701098e) returned 2 [0084.705] SetBkMode (hdc=0xffffffffa701098e, mode=1) returned 2 [0084.705] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x593009e9 [0084.705] SelectObject (hdc=0xffffffffa701098e, h=0x593009e9) returned 0x1b00017 [0084.705] MoveToEx (in: hdc=0xffffffffa701098e, x=24, y=1, lppt=0x2182d80 | out: lppt=0x2182d80) returned 1 [0084.705] LineTo (hdc=0xffffffffa701098e, x=1, y=1) returned 1 [0084.706] SetBkMode (hdc=0xffffffffa701098e, mode=2) returned 1 [0084.706] MoveToEx (in: hdc=0xffffffffa701098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.706] GetROP2 (hdc=0xffffffffa701098e) returned 13 [0084.706] GetBkMode (hdc=0xffffffffa701098e) returned 2 [0084.706] SetBkMode (hdc=0xffffffffa701098e, mode=1) returned 2 [0084.706] SelectObject (hdc=0xffffffffa701098e, h=0x593009e9) returned 0x593009e9 [0084.706] MoveToEx (in: hdc=0xffffffffa701098e, x=1, y=1, lppt=0x2182d98 | out: lppt=0x2182d98) returned 1 [0084.706] LineTo (hdc=0xffffffffa701098e, x=1, y=21) returned 1 [0084.706] SetBkMode (hdc=0xffffffffa701098e, mode=2) returned 1 [0084.706] MoveToEx (in: hdc=0xffffffffa701098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.706] SelectObject (hdc=0xffffffffa701098e, h=0x1b00017) returned 0x593009e9 [0084.706] DeleteObject (ho=0x593009e9) returned 1 [0084.706] GetROP2 (hdc=0xffffffffa701098e) returned 13 [0084.706] GetBkMode (hdc=0xffffffffa701098e) returned 2 [0084.706] SetBkMode (hdc=0xffffffffa701098e, mode=1) returned 2 [0084.706] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x753009e5 [0084.706] SelectObject (hdc=0xffffffffa701098e, h=0x753009e5) returned 0x1b00017 [0084.706] MoveToEx (in: hdc=0xffffffffa701098e, x=1, y=21, lppt=0x2182e00 | out: lppt=0x2182e00) returned 1 [0084.706] LineTo (hdc=0xffffffffa701098e, x=24, y=21) returned 1 [0084.706] SetBkMode (hdc=0xffffffffa701098e, mode=2) returned 1 [0084.707] MoveToEx (in: hdc=0xffffffffa701098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.707] GetROP2 (hdc=0xffffffffa701098e) returned 13 [0084.707] GetBkMode (hdc=0xffffffffa701098e) returned 2 [0084.707] SetBkMode (hdc=0xffffffffa701098e, mode=1) returned 2 [0084.707] SelectObject (hdc=0xffffffffa701098e, h=0x753009e5) returned 0x753009e5 [0084.707] MoveToEx (in: hdc=0xffffffffa701098e, x=24, y=21, lppt=0x2182e18 | out: lppt=0x2182e18) returned 1 [0084.707] LineTo (hdc=0xffffffffa701098e, x=24, y=0) returned 1 [0084.707] SetBkMode (hdc=0xffffffffa701098e, mode=2) returned 1 [0084.707] MoveToEx (in: hdc=0xffffffffa701098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.707] SelectObject (hdc=0xffffffffa701098e, h=0x1b00017) returned 0x753009e5 [0084.707] DeleteObject (ho=0x753009e5) returned 1 [0084.707] RestoreDC (hdc=0xffffffffa701098e, nSavedDC=-1) returned 1 [0084.707] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffa701098e) returned 0x0 [0084.707] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0084.707] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0xffffffffa701098e, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.707] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffa701098e) returned 0x0 [0084.707] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0084.708] SelectObject (hdc=0xffffffffa701098e, h=0x185000f) returned 0x2405099f [0084.708] DeleteDC (hdc=0xffffffffa701098e) returned 1 [0084.708] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0084.708] EndPaint (hWnd=0x50276, lpPaint=0x14e548) returned 1 [0084.708] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.708] IsWindowUnicode (hWnd=0x103ae) returned 1 [0084.708] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.708] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.708] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.708] BeginPaint (in: hWnd=0x103ae, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0084.708] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0084.709] CreateCompatibleDC (hdc=0x220106d6) returned 0xffffffffa901098e [0084.709] SelectObject (hdc=0xffffffffa901098e, h=0x2405099f) returned 0x185000f [0084.709] GdipCreateFromHDC (hdc=0xffffffffa901098e, graphics=0x14e528) returned 0x0 [0084.709] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0084.709] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0084.709] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0084.709] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.709] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0084.709] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486390 [0084.709] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486390) returned 0x0 [0084.709] LocalFree (hMem=0x1d486390) returned 0x0 [0084.709] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.709] GdipCreateRegion (region=0x14e550) returned 0x0 [0084.709] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.709] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0084.709] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0084.709] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd2d0dbd) returned 0x0 [0084.709] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.709] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0084.710] GetCurrentObject (hdc=0xffffffffa901098e, type=0x1) returned 0x1b00017 [0084.710] GetCurrentObject (hdc=0xffffffffa901098e, type=0x2) returned 0x1900010 [0084.710] GetCurrentObject (hdc=0xffffffffa901098e, type=0x7) returned 0x2405099f [0084.710] GetCurrentObject (hdc=0xffffffffa901098e, type=0x6) returned 0x18a0048 [0084.710] SaveDC (hdc=0xffffffffa901098e) returned 1 [0084.710] GetNearestColor (hdc=0xffffffffa901098e, color=0xf0f0f0) returned 0xf0f0f0 [0084.710] GetNearestColor (hdc=0xffffffffa901098e, color=0xa0a0a0) returned 0xa0a0a0 [0084.710] GetNearestColor (hdc=0xffffffffa901098e, color=0x696969) returned 0x696969 [0084.710] GetNearestColor (hdc=0xffffffffa901098e, color=0xa0a0a0) returned 0xa0a0a0 [0084.710] GetNearestColor (hdc=0xffffffffa901098e, color=0x0) returned 0x0 [0084.710] GetNearestColor (hdc=0xffffffffa901098e, color=0xffffff) returned 0xffffff [0084.710] GetNearestColor (hdc=0xffffffffa901098e, color=0xe5e5e5) returned 0xe5e5e5 [0084.710] GetNearestColor (hdc=0xffffffffa901098e, color=0xd8d8d8) returned 0xd8d8d8 [0084.710] GetNearestColor (hdc=0xffffffffa901098e, color=0x0) returned 0x0 [0084.710] RestoreDC (hdc=0xffffffffa901098e, nSavedDC=-1) returned 1 [0084.710] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffa901098e) returned 0x0 [0084.711] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx1\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.711] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.711] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2183738) returned 0x0 [0084.711] GdipSetStringFormatAlign (format=0x1be57f40, align=0x1) returned 0x0 [0084.711] GdipSetStringFormatLineAlign (format=0x1be57f40, align=0x1) returned 0x0 [0084.711] GdipSetStringFormatHotkeyPrefix (format=0x1be57f40, hotkeyPrefix=1) returned 0x0 [0084.711] GdipGetStringFormatFlags (format=0x1be57f40, flags=0x14e378) returned 0x0 [0084.711] GdipGetStringFormatTrimming (format=0x1be57f40, trimming=0x14e378) returned 0x0 [0084.711] GdipGetStringFormatHotkeyPrefix (format=0x1be57f40, hotkeyPrefix=0x14e378) returned 0x0 [0084.711] GdipGetFontSize (font=0x1be57f40, size=0x14e378) returned 0x0 [0084.711] GdipGetFontStyle (font=0x1be57f40, style=0x14e378) returned 0x0 [0084.711] GdipDeleteStringFormat (format=0x1be57f40) returned 0x0 [0084.711] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.712] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.712] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0084.712] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2183868) returned 0x0 [0084.712] GdipSetStringFormatFlags (format=0x1be57ed0, flags=0) returned 0x0 [0084.712] GdipSetStringFormatTrimming (format=0x1be57ed0, trimming=0x1) returned 0x0 [0084.712] GdipSetStringFormatHotkeyPrefix (format=0x1be57ed0, hotkeyPrefix=1) returned 0x0 [0084.712] GdipSetStringFormatAlign (format=0x1be57ed0, align=0x1) returned 0x0 [0084.712] GdipSetStringFormatLineAlign (format=0x1be57ed0, align=0x1) returned 0x0 [0084.712] GdipMeasureString (graphics=0x1be58070, string="-", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57ed0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0084.712] GdipDeleteStringFormat (format=0x1be57ed0) returned 0x0 [0084.712] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0084.712] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.712] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.713] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.713] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0084.713] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.713] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0084.713] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.713] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0084.713] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486690 [0084.713] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486690) returned 0x0 [0084.713] LocalFree (hMem=0x1d486690) returned 0x0 [0084.713] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486710 [0084.713] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486710) returned 0x0 [0084.713] LocalFree (hMem=0x1d486710) returned 0x0 [0084.713] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.713] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0084.713] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0084.713] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0084.713] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.713] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0084.713] GetCurrentObject (hdc=0xffffffffa901098e, type=0x1) returned 0x1b00017 [0084.713] GetCurrentObject (hdc=0xffffffffa901098e, type=0x2) returned 0x1900010 [0084.713] GetCurrentObject (hdc=0xffffffffa901098e, type=0x7) returned 0x2405099f [0084.713] GetCurrentObject (hdc=0xffffffffa901098e, type=0x6) returned 0x18a0048 [0084.714] SaveDC (hdc=0xffffffffa901098e) returned 1 [0084.714] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7d0409d6 [0084.714] GetClipRgn (hdc=0xffffffffa901098e, hrgn=0x7d0409d6) returned 0 [0084.714] SelectClipRgn (hdc=0xffffffffa901098e, hrgn=0xffffffff8f0407ff) returned 2 [0084.714] DeleteObject (ho=0x7d0409d6) returned 1 [0084.714] DeleteObject (ho=0xffffffff8f0407ff) returned 1 [0084.714] OffsetViewportOrgEx (in: hdc=0xffffffffa901098e, x=0, y=0, lppt=0x2183c28 | out: lppt=0x2183c28) returned 1 [0084.714] GetNearestColor (hdc=0xffffffffa901098e, color=0xf0f0f0) returned 0xf0f0f0 [0084.714] CreateSolidBrush (color=0xf0f0f0) returned 0x671009b2 [0084.714] FillRect (hDC=0xffffffffa901098e, lprc=0x14e1c8, hbr=0x671009b2) returned 1 [0084.714] DeleteObject (ho=0x671009b2) returned 1 [0084.714] RestoreDC (hdc=0xffffffffa901098e, nSavedDC=-1) returned 1 [0084.714] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffa901098e) returned 0x0 [0084.714] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0084.715] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.715] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2183d28) returned 0x0 [0084.715] GdipSetStringFormatAlign (format=0x1be57a00, align=0x1) returned 0x0 [0084.715] GdipSetStringFormatLineAlign (format=0x1be57a00, align=0x1) returned 0x0 [0084.715] GdipSetStringFormatHotkeyPrefix (format=0x1be57a00, hotkeyPrefix=1) returned 0x0 [0084.715] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0084.715] GdipDrawString (graphics=0x1be567f0, string="-", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57a00, brush=0x1be515e0) returned 0x0 [0084.715] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0084.715] GdipDeleteStringFormat (format=0x1be57a00) returned 0x0 [0084.715] GetFocus () returned 0x103c8 [0084.715] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx.\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.715] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.715] GdipCreateRegion (region=0x14e030) returned 0x0 [0084.716] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.716] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0084.716] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.716] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0084.716] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486c10 [0084.716] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486c10) returned 0x0 [0084.716] LocalFree (hMem=0x1d486c10) returned 0x0 [0084.716] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486490 [0084.716] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486490) returned 0x0 [0084.716] LocalFree (hMem=0x1d486490) returned 0x0 [0084.716] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.716] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0084.716] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0084.716] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0084.716] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.716] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0084.716] GetCurrentObject (hdc=0xffffffffa901098e, type=0x1) returned 0x1b00017 [0084.716] GetCurrentObject (hdc=0xffffffffa901098e, type=0x2) returned 0x1900010 [0084.716] GetCurrentObject (hdc=0xffffffffa901098e, type=0x7) returned 0x2405099f [0084.716] GetCurrentObject (hdc=0xffffffffa901098e, type=0x6) returned 0x18a0048 [0084.717] SaveDC (hdc=0xffffffffa901098e) returned 1 [0084.717] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff900407ff [0084.717] GetClipRgn (hdc=0xffffffffa901098e, hrgn=0xffffffff900407ff) returned 0 [0084.717] SelectClipRgn (hdc=0xffffffffa901098e, hrgn=0x7e0409d6) returned 2 [0084.717] DeleteObject (ho=0xffffffff900407ff) returned 1 [0084.717] DeleteObject (ho=0x7e0409d6) returned 1 [0084.717] OffsetViewportOrgEx (in: hdc=0xffffffffa901098e, x=0, y=0, lppt=0x2184110 | out: lppt=0x2184110) returned 1 [0084.717] GetROP2 (hdc=0xffffffffa901098e) returned 13 [0084.717] GetBkMode (hdc=0xffffffffa901098e) returned 2 [0084.717] SetBkMode (hdc=0xffffffffa901098e, mode=1) returned 2 [0084.717] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x5a3009e9 [0084.717] SelectObject (hdc=0xffffffffa901098e, h=0x5a3009e9) returned 0x1b00017 [0084.717] MoveToEx (in: hdc=0xffffffffa901098e, x=25, y=0, lppt=0x2184178 | out: lppt=0x2184178) returned 1 [0084.717] LineTo (hdc=0xffffffffa901098e, x=0, y=0) returned 1 [0084.717] SetBkMode (hdc=0xffffffffa901098e, mode=2) returned 1 [0084.717] MoveToEx (in: hdc=0xffffffffa901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.717] GetROP2 (hdc=0xffffffffa901098e) returned 13 [0084.717] GetBkMode (hdc=0xffffffffa901098e) returned 2 [0084.718] SetBkMode (hdc=0xffffffffa901098e, mode=1) returned 2 [0084.718] SelectObject (hdc=0xffffffffa901098e, h=0x5a3009e9) returned 0x5a3009e9 [0084.718] MoveToEx (in: hdc=0xffffffffa901098e, x=0, y=0, lppt=0x2184190 | out: lppt=0x2184190) returned 1 [0084.718] LineTo (hdc=0xffffffffa901098e, x=0, y=22) returned 1 [0084.718] SetBkMode (hdc=0xffffffffa901098e, mode=2) returned 1 [0084.718] MoveToEx (in: hdc=0xffffffffa901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.718] SelectObject (hdc=0xffffffffa901098e, h=0x1b00017) returned 0x5a3009e9 [0084.718] DeleteObject (ho=0x5a3009e9) returned 1 [0084.718] GetROP2 (hdc=0xffffffffa901098e) returned 13 [0084.718] GetBkMode (hdc=0xffffffffa901098e) returned 2 [0084.718] SetBkMode (hdc=0xffffffffa901098e, mode=1) returned 2 [0084.718] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x2a3009e8 [0084.718] SelectObject (hdc=0xffffffffa901098e, h=0x2a3009e8) returned 0x1b00017 [0084.718] MoveToEx (in: hdc=0xffffffffa901098e, x=0, y=22, lppt=0x21841f8 | out: lppt=0x21841f8) returned 1 [0084.718] LineTo (hdc=0xffffffffa901098e, x=25, y=22) returned 1 [0084.718] SetBkMode (hdc=0xffffffffa901098e, mode=2) returned 1 [0084.718] MoveToEx (in: hdc=0xffffffffa901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.718] GetROP2 (hdc=0xffffffffa901098e) returned 13 [0084.718] GetBkMode (hdc=0xffffffffa901098e) returned 2 [0084.718] SetBkMode (hdc=0xffffffffa901098e, mode=1) returned 2 [0084.718] SelectObject (hdc=0xffffffffa901098e, h=0x2a3009e8) returned 0x2a3009e8 [0084.718] MoveToEx (in: hdc=0xffffffffa901098e, x=25, y=22, lppt=0x2184210 | out: lppt=0x2184210) returned 1 [0084.719] LineTo (hdc=0xffffffffa901098e, x=25, y=-1) returned 1 [0084.719] SetBkMode (hdc=0xffffffffa901098e, mode=2) returned 1 [0084.719] MoveToEx (in: hdc=0xffffffffa901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.719] SelectObject (hdc=0xffffffffa901098e, h=0x1b00017) returned 0x2a3009e8 [0084.719] DeleteObject (ho=0x2a3009e8) returned 1 [0084.719] GetROP2 (hdc=0xffffffffa901098e) returned 13 [0084.719] GetBkMode (hdc=0xffffffffa901098e) returned 2 [0084.719] SetBkMode (hdc=0xffffffffa901098e, mode=1) returned 2 [0084.719] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x5b3009e9 [0084.719] SelectObject (hdc=0xffffffffa901098e, h=0x5b3009e9) returned 0x1b00017 [0084.719] MoveToEx (in: hdc=0xffffffffa901098e, x=24, y=1, lppt=0x2184278 | out: lppt=0x2184278) returned 1 [0084.719] LineTo (hdc=0xffffffffa901098e, x=1, y=1) returned 1 [0084.719] SetBkMode (hdc=0xffffffffa901098e, mode=2) returned 1 [0084.719] MoveToEx (in: hdc=0xffffffffa901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.719] GetROP2 (hdc=0xffffffffa901098e) returned 13 [0084.719] GetBkMode (hdc=0xffffffffa901098e) returned 2 [0084.719] SetBkMode (hdc=0xffffffffa901098e, mode=1) returned 2 [0084.719] SelectObject (hdc=0xffffffffa901098e, h=0x5b3009e9) returned 0x5b3009e9 [0084.719] MoveToEx (in: hdc=0xffffffffa901098e, x=1, y=1, lppt=0x2184290 | out: lppt=0x2184290) returned 1 [0084.719] LineTo (hdc=0xffffffffa901098e, x=1, y=21) returned 1 [0084.719] SetBkMode (hdc=0xffffffffa901098e, mode=2) returned 1 [0084.719] MoveToEx (in: hdc=0xffffffffa901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.719] SelectObject (hdc=0xffffffffa901098e, h=0x1b00017) returned 0x5b3009e9 [0084.720] DeleteObject (ho=0x5b3009e9) returned 1 [0084.720] GetROP2 (hdc=0xffffffffa901098e) returned 13 [0084.720] GetBkMode (hdc=0xffffffffa901098e) returned 2 [0084.720] SetBkMode (hdc=0xffffffffa901098e, mode=1) returned 2 [0084.720] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x2b3009e8 [0084.720] SelectObject (hdc=0xffffffffa901098e, h=0x2b3009e8) returned 0x1b00017 [0084.720] MoveToEx (in: hdc=0xffffffffa901098e, x=1, y=21, lppt=0x21842f8 | out: lppt=0x21842f8) returned 1 [0084.720] LineTo (hdc=0xffffffffa901098e, x=24, y=21) returned 1 [0084.720] SetBkMode (hdc=0xffffffffa901098e, mode=2) returned 1 [0084.720] MoveToEx (in: hdc=0xffffffffa901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.720] GetROP2 (hdc=0xffffffffa901098e) returned 13 [0084.720] GetBkMode (hdc=0xffffffffa901098e) returned 2 [0084.720] SetBkMode (hdc=0xffffffffa901098e, mode=1) returned 2 [0084.720] SelectObject (hdc=0xffffffffa901098e, h=0x2b3009e8) returned 0x2b3009e8 [0084.720] MoveToEx (in: hdc=0xffffffffa901098e, x=24, y=21, lppt=0x2184310 | out: lppt=0x2184310) returned 1 [0084.720] LineTo (hdc=0xffffffffa901098e, x=24, y=0) returned 1 [0084.720] SetBkMode (hdc=0xffffffffa901098e, mode=2) returned 1 [0084.720] MoveToEx (in: hdc=0xffffffffa901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.720] SelectObject (hdc=0xffffffffa901098e, h=0x1b00017) returned 0x2b3009e8 [0084.720] DeleteObject (ho=0x2b3009e8) returned 1 [0084.720] RestoreDC (hdc=0xffffffffa901098e, nSavedDC=-1) returned 1 [0084.720] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffa901098e) returned 0x0 [0084.721] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0084.721] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0xffffffffa901098e, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.721] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffa901098e) returned 0x0 [0084.721] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0084.721] SelectObject (hdc=0xffffffffa901098e, h=0x185000f) returned 0x2405099f [0084.721] DeleteDC (hdc=0xffffffffa901098e) returned 1 [0084.721] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0084.721] EndPaint (hWnd=0x103ae, lpPaint=0x14e548) returned 1 [0084.721] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.721] IsWindowUnicode (hWnd=0x103b0) returned 1 [0084.721] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.721] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.721] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.721] BeginPaint (in: hWnd=0x103b0, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0084.722] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0084.722] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x780109e5 [0084.722] SelectObject (hdc=0x780109e5, h=0x2405099f) returned 0x185000f [0084.722] GdipCreateFromHDC (hdc=0x780109e5, graphics=0x14e528) returned 0x0 [0084.722] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0084.722] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0084.722] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0084.722] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.722] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0084.722] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486e10 [0084.722] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486e10) returned 0x0 [0084.722] LocalFree (hMem=0x1d486e10) returned 0x0 [0084.722] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.722] GdipCreateRegion (region=0x14e550) returned 0x0 [0084.722] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.722] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0084.722] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0084.722] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd2a0dbd) returned 0x0 [0084.722] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.723] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0084.723] GetCurrentObject (hdc=0x780109e5, type=0x1) returned 0x1b00017 [0084.723] GetCurrentObject (hdc=0x780109e5, type=0x2) returned 0x1900010 [0084.723] GetCurrentObject (hdc=0x780109e5, type=0x7) returned 0x2405099f [0084.723] GetCurrentObject (hdc=0x780109e5, type=0x6) returned 0x18a0048 [0084.723] SaveDC (hdc=0x780109e5) returned 1 [0084.723] GetNearestColor (hdc=0x780109e5, color=0xf0f0f0) returned 0xf0f0f0 [0084.723] GetNearestColor (hdc=0x780109e5, color=0xa0a0a0) returned 0xa0a0a0 [0084.723] GetNearestColor (hdc=0x780109e5, color=0x696969) returned 0x696969 [0084.723] GetNearestColor (hdc=0x780109e5, color=0xa0a0a0) returned 0xa0a0a0 [0084.755] GetNearestColor (hdc=0x780109e5, color=0x0) returned 0x0 [0084.755] GetNearestColor (hdc=0x780109e5, color=0xffffff) returned 0xffffff [0084.755] GetNearestColor (hdc=0x780109e5, color=0xe5e5e5) returned 0xe5e5e5 [0084.755] GetNearestColor (hdc=0x780109e5, color=0xd8d8d8) returned 0xd8d8d8 [0084.755] GetNearestColor (hdc=0x780109e5, color=0x0) returned 0x0 [0084.755] RestoreDC (hdc=0x780109e5, nSavedDC=-1) returned 1 [0084.755] GdipReleaseDC (graphics=0x1be567f0, hdc=0x780109e5) returned 0x0 [0084.756] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExF\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.756] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.756] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2184c30) returned 0x0 [0084.756] GdipSetStringFormatAlign (format=0x1be57a00, align=0x1) returned 0x0 [0084.756] GdipSetStringFormatLineAlign (format=0x1be57a00, align=0x1) returned 0x0 [0084.756] GdipSetStringFormatHotkeyPrefix (format=0x1be57a00, hotkeyPrefix=1) returned 0x0 [0084.756] GdipGetStringFormatFlags (format=0x1be57a00, flags=0x14e378) returned 0x0 [0084.756] GdipGetStringFormatTrimming (format=0x1be57a00, trimming=0x14e378) returned 0x0 [0084.756] GdipGetStringFormatHotkeyPrefix (format=0x1be57a00, hotkeyPrefix=0x14e378) returned 0x0 [0084.756] GdipGetFontSize (font=0x1be57a00, size=0x14e378) returned 0x0 [0084.756] GdipGetFontStyle (font=0x1be57a00, style=0x14e378) returned 0x0 [0084.756] GdipDeleteStringFormat (format=0x1be57a00) returned 0x0 [0084.757] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.757] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.757] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.757] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0084.757] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2184d60) returned 0x0 [0084.757] GdipSetStringFormatFlags (format=0x1be57df0, flags=0) returned 0x0 [0084.757] GdipSetStringFormatTrimming (format=0x1be57df0, trimming=0x1) returned 0x0 [0084.757] GdipSetStringFormatHotkeyPrefix (format=0x1be57df0, hotkeyPrefix=1) returned 0x0 [0084.757] GdipSetStringFormatAlign (format=0x1be57df0, align=0x1) returned 0x0 [0084.757] GdipSetStringFormatLineAlign (format=0x1be57df0, align=0x1) returned 0x0 [0084.757] GdipMeasureString (graphics=0x1be58070, string="8", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57df0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0084.757] GdipDeleteStringFormat (format=0x1be57df0) returned 0x0 [0084.757] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0084.758] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.758] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.758] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.758] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0084.758] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.758] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0084.758] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.758] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0084.758] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486910 [0084.758] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486910) returned 0x0 [0084.758] LocalFree (hMem=0x1d486910) returned 0x0 [0084.758] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486790 [0084.758] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486790) returned 0x0 [0084.758] LocalFree (hMem=0x1d486790) returned 0x0 [0084.758] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.758] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0084.758] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0084.758] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0084.758] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.759] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0084.759] GetCurrentObject (hdc=0x780109e5, type=0x1) returned 0x1b00017 [0084.759] GetCurrentObject (hdc=0x780109e5, type=0x2) returned 0x1900010 [0084.759] GetCurrentObject (hdc=0x780109e5, type=0x7) returned 0x2405099f [0084.759] GetCurrentObject (hdc=0x780109e5, type=0x6) returned 0x18a0048 [0084.759] SaveDC (hdc=0x780109e5) returned 1 [0084.759] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7f0409d6 [0084.759] GetClipRgn (hdc=0x780109e5, hrgn=0x7f0409d6) returned 0 [0084.759] SelectClipRgn (hdc=0x780109e5, hrgn=0xffffffff910407ff) returned 2 [0084.759] DeleteObject (ho=0x7f0409d6) returned 1 [0084.759] DeleteObject (ho=0xffffffff910407ff) returned 1 [0084.759] OffsetViewportOrgEx (in: hdc=0x780109e5, x=0, y=0, lppt=0x2185120 | out: lppt=0x2185120) returned 1 [0084.759] GetNearestColor (hdc=0x780109e5, color=0xf0f0f0) returned 0xf0f0f0 [0084.759] CreateSolidBrush (color=0xf0f0f0) returned 0x681009b2 [0084.759] FillRect (hDC=0x780109e5, lprc=0x14e1c8, hbr=0x681009b2) returned 1 [0084.759] DeleteObject (ho=0x681009b2) returned 1 [0084.759] RestoreDC (hdc=0x780109e5, nSavedDC=-1) returned 1 [0084.759] GdipReleaseDC (graphics=0x1be567f0, hdc=0x780109e5) returned 0x0 [0084.760] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.760] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0084.760] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.760] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2185220) returned 0x0 [0084.760] GdipSetStringFormatAlign (format=0x1be57b50, align=0x1) returned 0x0 [0084.760] GdipSetStringFormatLineAlign (format=0x1be57b50, align=0x1) returned 0x0 [0084.760] GdipSetStringFormatHotkeyPrefix (format=0x1be57b50, hotkeyPrefix=1) returned 0x0 [0084.760] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0084.760] GdipDrawString (graphics=0x1be567f0, string="8", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57b50, brush=0x1be515e0) returned 0x0 [0084.760] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0084.760] GdipDeleteStringFormat (format=0x1be57b50) returned 0x0 [0084.760] GetFocus () returned 0x103c8 [0084.760] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.761] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExC\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.761] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.761] GdipCreateRegion (region=0x14e030) returned 0x0 [0084.761] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.761] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0084.761] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.761] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0084.761] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b50 [0084.761] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486b50) returned 0x0 [0084.761] LocalFree (hMem=0x1d486b50) returned 0x0 [0084.761] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486e10 [0084.761] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486e10) returned 0x0 [0084.761] LocalFree (hMem=0x1d486e10) returned 0x0 [0084.761] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.761] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0084.761] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0084.761] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0084.761] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.761] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0084.761] GetCurrentObject (hdc=0x780109e5, type=0x1) returned 0x1b00017 [0084.762] GetCurrentObject (hdc=0x780109e5, type=0x2) returned 0x1900010 [0084.762] GetCurrentObject (hdc=0x780109e5, type=0x7) returned 0x2405099f [0084.762] GetCurrentObject (hdc=0x780109e5, type=0x6) returned 0x18a0048 [0084.762] SaveDC (hdc=0x780109e5) returned 1 [0084.762] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff920407ff [0084.762] GetClipRgn (hdc=0x780109e5, hrgn=0xffffffff920407ff) returned 0 [0084.762] SelectClipRgn (hdc=0x780109e5, hrgn=0xffffffff800409d6) returned 2 [0084.762] DeleteObject (ho=0xffffffff920407ff) returned 1 [0084.762] DeleteObject (ho=0xffffffff800409d6) returned 1 [0084.762] OffsetViewportOrgEx (in: hdc=0x780109e5, x=0, y=0, lppt=0x2185608 | out: lppt=0x2185608) returned 1 [0084.762] GetROP2 (hdc=0x780109e5) returned 13 [0084.762] GetBkMode (hdc=0x780109e5) returned 2 [0084.762] SetBkMode (hdc=0x780109e5, mode=1) returned 2 [0084.762] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x463009de [0084.762] SelectObject (hdc=0x780109e5, h=0x463009de) returned 0x1b00017 [0084.762] MoveToEx (in: hdc=0x780109e5, x=25, y=0, lppt=0x2185670 | out: lppt=0x2185670) returned 1 [0084.762] LineTo (hdc=0x780109e5, x=0, y=0) returned 1 [0084.762] SetBkMode (hdc=0x780109e5, mode=2) returned 1 [0084.763] MoveToEx (in: hdc=0x780109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.763] GetROP2 (hdc=0x780109e5) returned 13 [0084.763] GetBkMode (hdc=0x780109e5) returned 2 [0084.763] SetBkMode (hdc=0x780109e5, mode=1) returned 2 [0084.763] SelectObject (hdc=0x780109e5, h=0x463009de) returned 0x463009de [0084.763] MoveToEx (in: hdc=0x780109e5, x=0, y=0, lppt=0x2185688 | out: lppt=0x2185688) returned 1 [0084.763] LineTo (hdc=0x780109e5, x=0, y=22) returned 1 [0084.763] SetBkMode (hdc=0x780109e5, mode=2) returned 1 [0084.763] MoveToEx (in: hdc=0x780109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.763] SelectObject (hdc=0x780109e5, h=0x1b00017) returned 0x463009de [0084.763] DeleteObject (ho=0x463009de) returned 1 [0084.763] GetROP2 (hdc=0x780109e5) returned 13 [0084.763] GetBkMode (hdc=0x780109e5) returned 2 [0084.763] SetBkMode (hdc=0x780109e5, mode=1) returned 2 [0084.763] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x5c3009e9 [0084.763] SelectObject (hdc=0x780109e5, h=0x5c3009e9) returned 0x1b00017 [0084.763] MoveToEx (in: hdc=0x780109e5, x=0, y=22, lppt=0x21856f0 | out: lppt=0x21856f0) returned 1 [0084.763] LineTo (hdc=0x780109e5, x=25, y=22) returned 1 [0084.763] SetBkMode (hdc=0x780109e5, mode=2) returned 1 [0084.763] MoveToEx (in: hdc=0x780109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.763] GetROP2 (hdc=0x780109e5) returned 13 [0084.764] GetBkMode (hdc=0x780109e5) returned 2 [0084.764] SetBkMode (hdc=0x780109e5, mode=1) returned 2 [0084.764] SelectObject (hdc=0x780109e5, h=0x5c3009e9) returned 0x5c3009e9 [0084.764] MoveToEx (in: hdc=0x780109e5, x=25, y=22, lppt=0x2185708 | out: lppt=0x2185708) returned 1 [0084.764] LineTo (hdc=0x780109e5, x=25, y=-1) returned 1 [0084.764] SetBkMode (hdc=0x780109e5, mode=2) returned 1 [0084.764] MoveToEx (in: hdc=0x780109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.764] SelectObject (hdc=0x780109e5, h=0x1b00017) returned 0x5c3009e9 [0084.764] DeleteObject (ho=0x5c3009e9) returned 1 [0084.764] GetROP2 (hdc=0x780109e5) returned 13 [0084.764] GetBkMode (hdc=0x780109e5) returned 2 [0084.764] SetBkMode (hdc=0x780109e5, mode=1) returned 2 [0084.764] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x473009de [0084.764] SelectObject (hdc=0x780109e5, h=0x473009de) returned 0x1b00017 [0084.764] MoveToEx (in: hdc=0x780109e5, x=24, y=1, lppt=0x2185770 | out: lppt=0x2185770) returned 1 [0084.764] LineTo (hdc=0x780109e5, x=1, y=1) returned 1 [0084.764] SetBkMode (hdc=0x780109e5, mode=2) returned 1 [0084.764] MoveToEx (in: hdc=0x780109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.764] GetROP2 (hdc=0x780109e5) returned 13 [0084.764] GetBkMode (hdc=0x780109e5) returned 2 [0084.764] SetBkMode (hdc=0x780109e5, mode=1) returned 2 [0084.764] SelectObject (hdc=0x780109e5, h=0x473009de) returned 0x473009de [0084.764] MoveToEx (in: hdc=0x780109e5, x=1, y=1, lppt=0x2185788 | out: lppt=0x2185788) returned 1 [0084.765] LineTo (hdc=0x780109e5, x=1, y=21) returned 1 [0084.765] SetBkMode (hdc=0x780109e5, mode=2) returned 1 [0084.765] MoveToEx (in: hdc=0x780109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.765] SelectObject (hdc=0x780109e5, h=0x1b00017) returned 0x473009de [0084.765] DeleteObject (ho=0x473009de) returned 1 [0084.765] GetROP2 (hdc=0x780109e5) returned 13 [0084.765] GetBkMode (hdc=0x780109e5) returned 2 [0084.765] SetBkMode (hdc=0x780109e5, mode=1) returned 2 [0084.765] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x5d3009e9 [0084.765] SelectObject (hdc=0x780109e5, h=0x5d3009e9) returned 0x1b00017 [0084.765] MoveToEx (in: hdc=0x780109e5, x=1, y=21, lppt=0x21857f0 | out: lppt=0x21857f0) returned 1 [0084.765] LineTo (hdc=0x780109e5, x=24, y=21) returned 1 [0084.765] SetBkMode (hdc=0x780109e5, mode=2) returned 1 [0084.765] MoveToEx (in: hdc=0x780109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.765] GetROP2 (hdc=0x780109e5) returned 13 [0084.765] GetBkMode (hdc=0x780109e5) returned 2 [0084.765] SetBkMode (hdc=0x780109e5, mode=1) returned 2 [0084.765] SelectObject (hdc=0x780109e5, h=0x5d3009e9) returned 0x5d3009e9 [0084.765] MoveToEx (in: hdc=0x780109e5, x=24, y=21, lppt=0x2185808 | out: lppt=0x2185808) returned 1 [0084.765] LineTo (hdc=0x780109e5, x=24, y=0) returned 1 [0084.765] SetBkMode (hdc=0x780109e5, mode=2) returned 1 [0084.765] MoveToEx (in: hdc=0x780109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.765] SelectObject (hdc=0x780109e5, h=0x1b00017) returned 0x5d3009e9 [0084.766] DeleteObject (ho=0x5d3009e9) returned 1 [0084.766] RestoreDC (hdc=0x780109e5, nSavedDC=-1) returned 1 [0084.766] GdipReleaseDC (graphics=0x1be567f0, hdc=0x780109e5) returned 0x0 [0084.766] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0084.766] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0x780109e5, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.766] GdipReleaseDC (graphics=0x1be567f0, hdc=0x780109e5) returned 0x0 [0084.766] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0084.766] SelectObject (hdc=0x780109e5, h=0x185000f) returned 0x2405099f [0084.766] DeleteDC (hdc=0x780109e5) returned 1 [0084.766] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0084.766] EndPaint (hWnd=0x103b0, lpPaint=0x14e548) returned 1 [0084.766] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.766] IsWindowUnicode (hWnd=0x103b2) returned 1 [0084.766] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.766] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.766] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.767] BeginPaint (in: hWnd=0x103b2, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0084.767] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0084.767] CreateCompatibleDC (hdc=0x220106d6) returned 0x300109e8 [0084.767] SelectObject (hdc=0x300109e8, h=0x2405099f) returned 0x185000f [0084.767] GdipCreateFromHDC (hdc=0x300109e8, graphics=0x14e528) returned 0x0 [0084.767] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0084.767] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0084.767] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0084.767] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.767] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0084.767] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486150 [0084.767] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486150) returned 0x0 [0084.767] LocalFree (hMem=0x1d486150) returned 0x0 [0084.767] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.767] GdipCreateRegion (region=0x14e550) returned 0x0 [0084.767] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.767] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0084.767] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0084.768] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd270dbd) returned 0x0 [0084.768] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.768] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0084.768] GetCurrentObject (hdc=0x300109e8, type=0x1) returned 0x1b00017 [0084.768] GetCurrentObject (hdc=0x300109e8, type=0x2) returned 0x1900010 [0084.768] GetCurrentObject (hdc=0x300109e8, type=0x7) returned 0x2405099f [0084.768] GetCurrentObject (hdc=0x300109e8, type=0x6) returned 0x18a0048 [0084.768] SaveDC (hdc=0x300109e8) returned 1 [0084.768] GetNearestColor (hdc=0x300109e8, color=0xf0f0f0) returned 0xf0f0f0 [0084.768] GetNearestColor (hdc=0x300109e8, color=0xa0a0a0) returned 0xa0a0a0 [0084.768] GetNearestColor (hdc=0x300109e8, color=0x696969) returned 0x696969 [0084.768] GetNearestColor (hdc=0x300109e8, color=0xa0a0a0) returned 0xa0a0a0 [0084.768] GetNearestColor (hdc=0x300109e8, color=0x0) returned 0x0 [0084.768] GetNearestColor (hdc=0x300109e8, color=0xffffff) returned 0xffffff [0084.768] GetNearestColor (hdc=0x300109e8, color=0xe5e5e5) returned 0xe5e5e5 [0084.768] GetNearestColor (hdc=0x300109e8, color=0xd8d8d8) returned 0xd8d8d8 [0084.768] GetNearestColor (hdc=0x300109e8, color=0x0) returned 0x0 [0084.769] RestoreDC (hdc=0x300109e8, nSavedDC=-1) returned 1 [0084.769] GdipReleaseDC (graphics=0x1be567f0, hdc=0x300109e8) returned 0x0 [0084.769] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.769] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx[\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.769] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.769] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2186128) returned 0x0 [0084.769] GdipSetStringFormatAlign (format=0x1be57920, align=0x1) returned 0x0 [0084.769] GdipSetStringFormatLineAlign (format=0x1be57920, align=0x1) returned 0x0 [0084.769] GdipSetStringFormatHotkeyPrefix (format=0x1be57920, hotkeyPrefix=1) returned 0x0 [0084.769] GdipGetStringFormatFlags (format=0x1be57920, flags=0x14e378) returned 0x0 [0084.769] GdipGetStringFormatTrimming (format=0x1be57920, trimming=0x14e378) returned 0x0 [0084.769] GdipGetStringFormatHotkeyPrefix (format=0x1be57920, hotkeyPrefix=0x14e378) returned 0x0 [0084.769] GdipGetFontSize (font=0x1be57920, size=0x14e378) returned 0x0 [0084.769] GdipGetFontStyle (font=0x1be57920, style=0x14e378) returned 0x0 [0084.769] GdipDeleteStringFormat (format=0x1be57920) returned 0x0 [0084.770] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.770] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.770] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0084.770] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2186258) returned 0x0 [0084.770] GdipSetStringFormatFlags (format=0x1be57ae0, flags=0) returned 0x0 [0084.770] GdipSetStringFormatTrimming (format=0x1be57ae0, trimming=0x1) returned 0x0 [0084.770] GdipSetStringFormatHotkeyPrefix (format=0x1be57ae0, hotkeyPrefix=1) returned 0x0 [0084.770] GdipSetStringFormatAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0084.770] GdipSetStringFormatLineAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0084.770] GdipMeasureString (graphics=0x1be58070, string="c", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57ae0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0084.771] GdipDeleteStringFormat (format=0x1be57ae0) returned 0x0 [0084.771] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0084.771] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.771] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.771] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0084.771] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.771] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0084.771] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.771] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0084.771] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4862d0 [0084.771] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d4862d0) returned 0x0 [0084.771] LocalFree (hMem=0x1d4862d0) returned 0x0 [0084.771] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486310 [0084.771] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486310) returned 0x0 [0084.771] LocalFree (hMem=0x1d486310) returned 0x0 [0084.771] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.771] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0084.771] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0084.772] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0084.772] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.772] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0084.772] GetCurrentObject (hdc=0x300109e8, type=0x1) returned 0x1b00017 [0084.772] GetCurrentObject (hdc=0x300109e8, type=0x2) returned 0x1900010 [0084.772] GetCurrentObject (hdc=0x300109e8, type=0x7) returned 0x2405099f [0084.772] GetCurrentObject (hdc=0x300109e8, type=0x6) returned 0x18a0048 [0084.772] SaveDC (hdc=0x300109e8) returned 1 [0084.772] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff810409d6 [0084.772] GetClipRgn (hdc=0x300109e8, hrgn=0xffffffff810409d6) returned 0 [0084.772] SelectClipRgn (hdc=0x300109e8, hrgn=0xffffffff930407ff) returned 2 [0084.772] DeleteObject (ho=0xffffffff810409d6) returned 1 [0084.772] DeleteObject (ho=0xffffffff930407ff) returned 1 [0084.772] OffsetViewportOrgEx (in: hdc=0x300109e8, x=0, y=0, lppt=0x2186618 | out: lppt=0x2186618) returned 1 [0084.772] GetNearestColor (hdc=0x300109e8, color=0xf0f0f0) returned 0xf0f0f0 [0084.772] CreateSolidBrush (color=0xf0f0f0) returned 0x691009b2 [0084.772] FillRect (hDC=0x300109e8, lprc=0x14e1c8, hbr=0x691009b2) returned 1 [0084.772] DeleteObject (ho=0x691009b2) returned 1 [0084.772] RestoreDC (hdc=0x300109e8, nSavedDC=-1) returned 1 [0084.772] GdipReleaseDC (graphics=0x1be567f0, hdc=0x300109e8) returned 0x0 [0084.773] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.773] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0084.773] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.773] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2186718) returned 0x0 [0084.773] GdipSetStringFormatAlign (format=0x1be57990, align=0x1) returned 0x0 [0084.773] GdipSetStringFormatLineAlign (format=0x1be57990, align=0x1) returned 0x0 [0084.773] GdipSetStringFormatHotkeyPrefix (format=0x1be57990, hotkeyPrefix=1) returned 0x0 [0084.773] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0084.773] GdipDrawString (graphics=0x1be567f0, string="c", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57990, brush=0x1be515e0) returned 0x0 [0084.773] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0084.773] GdipDeleteStringFormat (format=0x1be57990) returned 0x0 [0084.773] GetFocus () returned 0x103c8 [0084.774] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.774] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExX\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.774] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.774] GdipCreateRegion (region=0x14e030) returned 0x0 [0084.774] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.774] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0084.774] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.774] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0084.774] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486910 [0084.774] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486910) returned 0x0 [0084.774] LocalFree (hMem=0x1d486910) returned 0x0 [0084.774] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4861d0 [0084.774] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4861d0) returned 0x0 [0084.774] LocalFree (hMem=0x1d4861d0) returned 0x0 [0084.774] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.774] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0084.774] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0084.774] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0084.774] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.775] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0084.775] GetCurrentObject (hdc=0x300109e8, type=0x1) returned 0x1b00017 [0084.775] GetCurrentObject (hdc=0x300109e8, type=0x2) returned 0x1900010 [0084.775] GetCurrentObject (hdc=0x300109e8, type=0x7) returned 0x2405099f [0084.775] GetCurrentObject (hdc=0x300109e8, type=0x6) returned 0x18a0048 [0084.775] SaveDC (hdc=0x300109e8) returned 1 [0084.775] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff940407ff [0084.775] GetClipRgn (hdc=0x300109e8, hrgn=0xffffffff940407ff) returned 0 [0084.775] SelectClipRgn (hdc=0x300109e8, hrgn=0xffffffff820409d6) returned 2 [0084.775] DeleteObject (ho=0xffffffff940407ff) returned 1 [0084.775] DeleteObject (ho=0xffffffff820409d6) returned 1 [0084.775] OffsetViewportOrgEx (in: hdc=0x300109e8, x=0, y=0, lppt=0x2186b00 | out: lppt=0x2186b00) returned 1 [0084.775] GetROP2 (hdc=0x300109e8) returned 13 [0084.775] GetBkMode (hdc=0x300109e8) returned 2 [0084.775] SetBkMode (hdc=0x300109e8, mode=1) returned 2 [0084.775] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x5e3009e9 [0084.775] SelectObject (hdc=0x300109e8, h=0x5e3009e9) returned 0x1b00017 [0084.775] MoveToEx (in: hdc=0x300109e8, x=25, y=0, lppt=0x2186b68 | out: lppt=0x2186b68) returned 1 [0084.775] LineTo (hdc=0x300109e8, x=0, y=0) returned 1 [0084.775] SetBkMode (hdc=0x300109e8, mode=2) returned 1 [0084.775] MoveToEx (in: hdc=0x300109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.776] GetROP2 (hdc=0x300109e8) returned 13 [0084.776] GetBkMode (hdc=0x300109e8) returned 2 [0084.776] SetBkMode (hdc=0x300109e8, mode=1) returned 2 [0084.776] SelectObject (hdc=0x300109e8, h=0x5e3009e9) returned 0x5e3009e9 [0084.776] MoveToEx (in: hdc=0x300109e8, x=0, y=0, lppt=0x2186b80 | out: lppt=0x2186b80) returned 1 [0084.776] LineTo (hdc=0x300109e8, x=0, y=22) returned 1 [0084.776] SetBkMode (hdc=0x300109e8, mode=2) returned 1 [0084.776] MoveToEx (in: hdc=0x300109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.776] SelectObject (hdc=0x300109e8, h=0x1b00017) returned 0x5e3009e9 [0084.776] DeleteObject (ho=0x5e3009e9) returned 1 [0084.776] GetROP2 (hdc=0x300109e8) returned 13 [0084.776] GetBkMode (hdc=0x300109e8) returned 2 [0084.776] SetBkMode (hdc=0x300109e8, mode=1) returned 2 [0084.776] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x483009de [0084.776] SelectObject (hdc=0x300109e8, h=0x483009de) returned 0x1b00017 [0084.776] MoveToEx (in: hdc=0x300109e8, x=0, y=22, lppt=0x2186be8 | out: lppt=0x2186be8) returned 1 [0084.776] LineTo (hdc=0x300109e8, x=25, y=22) returned 1 [0084.776] SetBkMode (hdc=0x300109e8, mode=2) returned 1 [0084.776] MoveToEx (in: hdc=0x300109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.776] GetROP2 (hdc=0x300109e8) returned 13 [0084.776] GetBkMode (hdc=0x300109e8) returned 2 [0084.776] SetBkMode (hdc=0x300109e8, mode=1) returned 2 [0084.776] SelectObject (hdc=0x300109e8, h=0x483009de) returned 0x483009de [0084.776] MoveToEx (in: hdc=0x300109e8, x=25, y=22, lppt=0x2186c00 | out: lppt=0x2186c00) returned 1 [0084.777] LineTo (hdc=0x300109e8, x=25, y=-1) returned 1 [0084.777] SetBkMode (hdc=0x300109e8, mode=2) returned 1 [0084.777] MoveToEx (in: hdc=0x300109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.777] SelectObject (hdc=0x300109e8, h=0x1b00017) returned 0x483009de [0084.777] DeleteObject (ho=0x483009de) returned 1 [0084.777] GetROP2 (hdc=0x300109e8) returned 13 [0084.777] GetBkMode (hdc=0x300109e8) returned 2 [0084.777] SetBkMode (hdc=0x300109e8, mode=1) returned 2 [0084.777] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x5f3009e9 [0084.777] SelectObject (hdc=0x300109e8, h=0x5f3009e9) returned 0x1b00017 [0084.777] MoveToEx (in: hdc=0x300109e8, x=24, y=1, lppt=0x2186c68 | out: lppt=0x2186c68) returned 1 [0084.777] LineTo (hdc=0x300109e8, x=1, y=1) returned 1 [0084.777] SetBkMode (hdc=0x300109e8, mode=2) returned 1 [0084.777] MoveToEx (in: hdc=0x300109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.777] GetROP2 (hdc=0x300109e8) returned 13 [0084.777] GetBkMode (hdc=0x300109e8) returned 2 [0084.777] SetBkMode (hdc=0x300109e8, mode=1) returned 2 [0084.777] SelectObject (hdc=0x300109e8, h=0x5f3009e9) returned 0x5f3009e9 [0084.777] MoveToEx (in: hdc=0x300109e8, x=1, y=1, lppt=0x2186c80 | out: lppt=0x2186c80) returned 1 [0084.777] LineTo (hdc=0x300109e8, x=1, y=21) returned 1 [0084.777] SetBkMode (hdc=0x300109e8, mode=2) returned 1 [0084.778] MoveToEx (in: hdc=0x300109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.778] SelectObject (hdc=0x300109e8, h=0x1b00017) returned 0x5f3009e9 [0084.778] DeleteObject (ho=0x5f3009e9) returned 1 [0084.778] GetROP2 (hdc=0x300109e8) returned 13 [0084.778] GetBkMode (hdc=0x300109e8) returned 2 [0084.778] SetBkMode (hdc=0x300109e8, mode=1) returned 2 [0084.778] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x493009de [0084.778] SelectObject (hdc=0x300109e8, h=0x493009de) returned 0x1b00017 [0084.778] MoveToEx (in: hdc=0x300109e8, x=1, y=21, lppt=0x2186ce8 | out: lppt=0x2186ce8) returned 1 [0084.778] LineTo (hdc=0x300109e8, x=24, y=21) returned 1 [0084.778] SetBkMode (hdc=0x300109e8, mode=2) returned 1 [0084.778] MoveToEx (in: hdc=0x300109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.778] GetROP2 (hdc=0x300109e8) returned 13 [0084.778] GetBkMode (hdc=0x300109e8) returned 2 [0084.778] SetBkMode (hdc=0x300109e8, mode=1) returned 2 [0084.778] SelectObject (hdc=0x300109e8, h=0x493009de) returned 0x493009de [0084.778] MoveToEx (in: hdc=0x300109e8, x=24, y=21, lppt=0x2186d00 | out: lppt=0x2186d00) returned 1 [0084.778] LineTo (hdc=0x300109e8, x=24, y=0) returned 1 [0084.778] SetBkMode (hdc=0x300109e8, mode=2) returned 1 [0084.778] MoveToEx (in: hdc=0x300109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.778] SelectObject (hdc=0x300109e8, h=0x1b00017) returned 0x493009de [0084.779] DeleteObject (ho=0x493009de) returned 1 [0084.779] RestoreDC (hdc=0x300109e8, nSavedDC=-1) returned 1 [0084.779] GdipReleaseDC (graphics=0x1be567f0, hdc=0x300109e8) returned 0x0 [0084.779] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0084.779] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x300109e8, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.779] GdipReleaseDC (graphics=0x1be567f0, hdc=0x300109e8) returned 0x0 [0084.779] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0084.779] SelectObject (hdc=0x300109e8, h=0x185000f) returned 0x2405099f [0084.779] DeleteDC (hdc=0x300109e8) returned 1 [0084.779] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0084.779] EndPaint (hWnd=0x103b2, lpPaint=0x14e548) returned 1 [0084.779] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.779] IsWindowUnicode (hWnd=0x103b4) returned 1 [0084.779] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.779] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.779] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.780] BeginPaint (in: hWnd=0x103b4, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0084.780] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0084.780] CreateCompatibleDC (hdc=0x1b0107ae) returned 0xffffffffb101098e [0084.780] SelectObject (hdc=0xffffffffb101098e, h=0x2405099f) returned 0x185000f [0084.780] GdipCreateFromHDC (hdc=0xffffffffb101098e, graphics=0x14e528) returned 0x0 [0084.780] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0084.780] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0084.780] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0084.780] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.780] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0084.780] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4862d0 [0084.780] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d4862d0) returned 0x0 [0084.780] LocalFree (hMem=0x1d4862d0) returned 0x0 [0084.780] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.780] GdipCreateRegion (region=0x14e550) returned 0x0 [0084.780] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.780] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0084.780] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0084.781] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd240dbd) returned 0x0 [0084.781] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.781] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0084.781] GetCurrentObject (hdc=0xffffffffb101098e, type=0x1) returned 0x1b00017 [0084.781] GetCurrentObject (hdc=0xffffffffb101098e, type=0x2) returned 0x1900010 [0084.781] GetCurrentObject (hdc=0xffffffffb101098e, type=0x7) returned 0x2405099f [0084.781] GetCurrentObject (hdc=0xffffffffb101098e, type=0x6) returned 0x18a0048 [0084.781] SaveDC (hdc=0xffffffffb101098e) returned 1 [0084.781] GetNearestColor (hdc=0xffffffffb101098e, color=0xf0f0f0) returned 0xf0f0f0 [0084.781] GetNearestColor (hdc=0xffffffffb101098e, color=0xa0a0a0) returned 0xa0a0a0 [0084.781] GetNearestColor (hdc=0xffffffffb101098e, color=0x696969) returned 0x696969 [0084.781] GetNearestColor (hdc=0xffffffffb101098e, color=0xa0a0a0) returned 0xa0a0a0 [0084.781] GetNearestColor (hdc=0xffffffffb101098e, color=0x0) returned 0x0 [0084.781] GetNearestColor (hdc=0xffffffffb101098e, color=0xffffff) returned 0xffffff [0084.781] GetNearestColor (hdc=0xffffffffb101098e, color=0xe5e5e5) returned 0xe5e5e5 [0084.781] GetNearestColor (hdc=0xffffffffb101098e, color=0xd8d8d8) returned 0xd8d8d8 [0084.781] GetNearestColor (hdc=0xffffffffb101098e, color=0x0) returned 0x0 [0084.781] RestoreDC (hdc=0xffffffffb101098e, nSavedDC=-1) returned 1 [0084.782] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffb101098e) returned 0x0 [0084.782] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.782] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExp\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.782] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.782] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2187620) returned 0x0 [0084.782] GdipSetStringFormatAlign (format=0x1be57e60, align=0x1) returned 0x0 [0084.782] GdipSetStringFormatLineAlign (format=0x1be57e60, align=0x1) returned 0x0 [0084.782] GdipSetStringFormatHotkeyPrefix (format=0x1be57e60, hotkeyPrefix=1) returned 0x0 [0084.782] GdipGetStringFormatFlags (format=0x1be57e60, flags=0x14e378) returned 0x0 [0084.782] GdipGetStringFormatTrimming (format=0x1be57e60, trimming=0x14e378) returned 0x0 [0084.782] GdipGetStringFormatHotkeyPrefix (format=0x1be57e60, hotkeyPrefix=0x14e378) returned 0x0 [0084.782] GdipGetFontSize (font=0x1be57e60, size=0x14e378) returned 0x0 [0084.782] GdipGetFontStyle (font=0x1be57e60, style=0x14e378) returned 0x0 [0084.782] GdipDeleteStringFormat (format=0x1be57e60) returned 0x0 [0084.783] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.783] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.783] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0084.783] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2187750) returned 0x0 [0084.783] GdipSetStringFormatFlags (format=0x1be57920, flags=0) returned 0x0 [0084.783] GdipSetStringFormatTrimming (format=0x1be57920, trimming=0x1) returned 0x0 [0084.783] GdipSetStringFormatHotkeyPrefix (format=0x1be57920, hotkeyPrefix=1) returned 0x0 [0084.783] GdipSetStringFormatAlign (format=0x1be57920, align=0x1) returned 0x0 [0084.783] GdipSetStringFormatLineAlign (format=0x1be57920, align=0x1) returned 0x0 [0084.783] GdipMeasureString (graphics=0x1be58070, string="+", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57920, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0084.783] GdipDeleteStringFormat (format=0x1be57920) returned 0x0 [0084.783] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0084.784] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.784] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.784] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.784] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0084.784] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.784] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0084.784] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.784] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0084.784] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486510 [0084.784] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486510) returned 0x0 [0084.784] LocalFree (hMem=0x1d486510) returned 0x0 [0084.784] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486bd0 [0084.784] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486bd0) returned 0x0 [0084.784] LocalFree (hMem=0x1d486bd0) returned 0x0 [0084.784] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.784] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0084.784] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0084.785] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0084.785] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.785] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0084.785] GetCurrentObject (hdc=0xffffffffb101098e, type=0x1) returned 0x1b00017 [0084.785] GetCurrentObject (hdc=0xffffffffb101098e, type=0x2) returned 0x1900010 [0084.785] GetCurrentObject (hdc=0xffffffffb101098e, type=0x7) returned 0x2405099f [0084.785] GetCurrentObject (hdc=0xffffffffb101098e, type=0x6) returned 0x18a0048 [0084.785] SaveDC (hdc=0xffffffffb101098e) returned 1 [0084.785] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff830409d6 [0084.785] GetClipRgn (hdc=0xffffffffb101098e, hrgn=0xffffffff830409d6) returned 0 [0084.785] SelectClipRgn (hdc=0xffffffffb101098e, hrgn=0xffffffff950407ff) returned 2 [0084.785] DeleteObject (ho=0xffffffff830409d6) returned 1 [0084.785] DeleteObject (ho=0xffffffff950407ff) returned 1 [0084.785] OffsetViewportOrgEx (in: hdc=0xffffffffb101098e, x=0, y=0, lppt=0x2187b10 | out: lppt=0x2187b10) returned 1 [0084.785] GetNearestColor (hdc=0xffffffffb101098e, color=0xf0f0f0) returned 0xf0f0f0 [0084.785] CreateSolidBrush (color=0xf0f0f0) returned 0x6a1009b2 [0084.785] FillRect (hDC=0xffffffffb101098e, lprc=0x14e1c8, hbr=0x6a1009b2) returned 1 [0084.785] DeleteObject (ho=0x6a1009b2) returned 1 [0084.788] RestoreDC (hdc=0xffffffffb101098e, nSavedDC=-1) returned 1 [0084.788] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffb101098e) returned 0x0 [0084.788] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.788] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0084.789] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.789] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2187c10) returned 0x0 [0084.789] GdipSetStringFormatAlign (format=0x1be57e60, align=0x1) returned 0x0 [0084.789] GdipSetStringFormatLineAlign (format=0x1be57e60, align=0x1) returned 0x0 [0084.789] GdipSetStringFormatHotkeyPrefix (format=0x1be57e60, hotkeyPrefix=1) returned 0x0 [0084.789] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0084.789] GdipDrawString (graphics=0x1be567f0, string="+", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57e60, brush=0x1be515e0) returned 0x0 [0084.789] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0084.789] GdipDeleteStringFormat (format=0x1be57e60) returned 0x0 [0084.789] GetFocus () returned 0x103c8 [0084.789] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.789] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExm\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.789] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.790] GdipCreateRegion (region=0x14e030) returned 0x0 [0084.790] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.790] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0084.790] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.790] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0084.790] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486a90 [0084.790] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486a90) returned 0x0 [0084.790] LocalFree (hMem=0x1d486a90) returned 0x0 [0084.790] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486c10 [0084.790] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486c10) returned 0x0 [0084.790] LocalFree (hMem=0x1d486c10) returned 0x0 [0084.790] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.790] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0084.790] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0084.790] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0084.790] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.790] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0084.790] GetCurrentObject (hdc=0xffffffffb101098e, type=0x1) returned 0x1b00017 [0084.790] GetCurrentObject (hdc=0xffffffffb101098e, type=0x2) returned 0x1900010 [0084.790] GetCurrentObject (hdc=0xffffffffb101098e, type=0x7) returned 0x2405099f [0084.790] GetCurrentObject (hdc=0xffffffffb101098e, type=0x6) returned 0x18a0048 [0084.790] SaveDC (hdc=0xffffffffb101098e) returned 1 [0084.791] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff960407ff [0084.791] GetClipRgn (hdc=0xffffffffb101098e, hrgn=0xffffffff960407ff) returned 0 [0084.791] SelectClipRgn (hdc=0xffffffffb101098e, hrgn=0xffffffff840409d6) returned 2 [0084.791] DeleteObject (ho=0xffffffff960407ff) returned 1 [0084.791] DeleteObject (ho=0xffffffff840409d6) returned 1 [0084.791] OffsetViewportOrgEx (in: hdc=0xffffffffb101098e, x=0, y=0, lppt=0x2187ff8 | out: lppt=0x2187ff8) returned 1 [0084.791] GetROP2 (hdc=0xffffffffb101098e) returned 13 [0084.791] GetBkMode (hdc=0xffffffffb101098e) returned 2 [0084.791] SetBkMode (hdc=0xffffffffb101098e, mode=1) returned 2 [0084.791] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x4a3009de [0084.791] SelectObject (hdc=0xffffffffb101098e, h=0x4a3009de) returned 0x1b00017 [0084.791] MoveToEx (in: hdc=0xffffffffb101098e, x=25, y=0, lppt=0x2188060 | out: lppt=0x2188060) returned 1 [0084.791] LineTo (hdc=0xffffffffb101098e, x=0, y=0) returned 1 [0084.791] SetBkMode (hdc=0xffffffffb101098e, mode=2) returned 1 [0084.791] MoveToEx (in: hdc=0xffffffffb101098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.791] GetROP2 (hdc=0xffffffffb101098e) returned 13 [0084.791] GetBkMode (hdc=0xffffffffb101098e) returned 2 [0084.791] SetBkMode (hdc=0xffffffffb101098e, mode=1) returned 2 [0084.791] SelectObject (hdc=0xffffffffb101098e, h=0x4a3009de) returned 0x4a3009de [0084.791] MoveToEx (in: hdc=0xffffffffb101098e, x=0, y=0, lppt=0x2188078 | out: lppt=0x2188078) returned 1 [0084.792] LineTo (hdc=0xffffffffb101098e, x=0, y=22) returned 1 [0084.792] SetBkMode (hdc=0xffffffffb101098e, mode=2) returned 1 [0084.792] MoveToEx (in: hdc=0xffffffffb101098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.792] SelectObject (hdc=0xffffffffb101098e, h=0x1b00017) returned 0x4a3009de [0084.792] DeleteObject (ho=0x4a3009de) returned 1 [0084.792] GetROP2 (hdc=0xffffffffb101098e) returned 13 [0084.792] GetBkMode (hdc=0xffffffffb101098e) returned 2 [0084.792] SetBkMode (hdc=0xffffffffb101098e, mode=1) returned 2 [0084.792] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x603009e9 [0084.792] SelectObject (hdc=0xffffffffb101098e, h=0x603009e9) returned 0x1b00017 [0084.792] MoveToEx (in: hdc=0xffffffffb101098e, x=0, y=22, lppt=0x21880e0 | out: lppt=0x21880e0) returned 1 [0084.792] LineTo (hdc=0xffffffffb101098e, x=25, y=22) returned 1 [0084.792] SetBkMode (hdc=0xffffffffb101098e, mode=2) returned 1 [0084.792] MoveToEx (in: hdc=0xffffffffb101098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.792] GetROP2 (hdc=0xffffffffb101098e) returned 13 [0084.792] GetBkMode (hdc=0xffffffffb101098e) returned 2 [0084.792] SetBkMode (hdc=0xffffffffb101098e, mode=1) returned 2 [0084.792] SelectObject (hdc=0xffffffffb101098e, h=0x603009e9) returned 0x603009e9 [0084.792] MoveToEx (in: hdc=0xffffffffb101098e, x=25, y=22, lppt=0x21880f8 | out: lppt=0x21880f8) returned 1 [0084.792] LineTo (hdc=0xffffffffb101098e, x=25, y=-1) returned 1 [0084.792] SetBkMode (hdc=0xffffffffb101098e, mode=2) returned 1 [0084.792] MoveToEx (in: hdc=0xffffffffb101098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.792] SelectObject (hdc=0xffffffffb101098e, h=0x1b00017) returned 0x603009e9 [0084.793] DeleteObject (ho=0x603009e9) returned 1 [0084.793] GetROP2 (hdc=0xffffffffb101098e) returned 13 [0084.793] GetBkMode (hdc=0xffffffffb101098e) returned 2 [0084.793] SetBkMode (hdc=0xffffffffb101098e, mode=1) returned 2 [0084.793] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x4b3009de [0084.793] SelectObject (hdc=0xffffffffb101098e, h=0x4b3009de) returned 0x1b00017 [0084.793] MoveToEx (in: hdc=0xffffffffb101098e, x=24, y=1, lppt=0x2188160 | out: lppt=0x2188160) returned 1 [0084.793] LineTo (hdc=0xffffffffb101098e, x=1, y=1) returned 1 [0084.793] SetBkMode (hdc=0xffffffffb101098e, mode=2) returned 1 [0084.793] MoveToEx (in: hdc=0xffffffffb101098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.793] GetROP2 (hdc=0xffffffffb101098e) returned 13 [0084.793] GetBkMode (hdc=0xffffffffb101098e) returned 2 [0084.793] SetBkMode (hdc=0xffffffffb101098e, mode=1) returned 2 [0084.793] SelectObject (hdc=0xffffffffb101098e, h=0x4b3009de) returned 0x4b3009de [0084.793] MoveToEx (in: hdc=0xffffffffb101098e, x=1, y=1, lppt=0x2188178 | out: lppt=0x2188178) returned 1 [0084.793] LineTo (hdc=0xffffffffb101098e, x=1, y=21) returned 1 [0084.793] SetBkMode (hdc=0xffffffffb101098e, mode=2) returned 1 [0084.793] MoveToEx (in: hdc=0xffffffffb101098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.793] SelectObject (hdc=0xffffffffb101098e, h=0x1b00017) returned 0x4b3009de [0084.793] DeleteObject (ho=0x4b3009de) returned 1 [0084.793] GetROP2 (hdc=0xffffffffb101098e) returned 13 [0084.794] GetBkMode (hdc=0xffffffffb101098e) returned 2 [0084.794] SetBkMode (hdc=0xffffffffb101098e, mode=1) returned 2 [0084.794] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x613009e9 [0084.794] SelectObject (hdc=0xffffffffb101098e, h=0x613009e9) returned 0x1b00017 [0084.794] MoveToEx (in: hdc=0xffffffffb101098e, x=1, y=21, lppt=0x21881e0 | out: lppt=0x21881e0) returned 1 [0084.794] LineTo (hdc=0xffffffffb101098e, x=24, y=21) returned 1 [0084.794] SetBkMode (hdc=0xffffffffb101098e, mode=2) returned 1 [0084.794] MoveToEx (in: hdc=0xffffffffb101098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.794] GetROP2 (hdc=0xffffffffb101098e) returned 13 [0084.794] GetBkMode (hdc=0xffffffffb101098e) returned 2 [0084.794] SetBkMode (hdc=0xffffffffb101098e, mode=1) returned 2 [0084.794] SelectObject (hdc=0xffffffffb101098e, h=0x613009e9) returned 0x613009e9 [0084.794] MoveToEx (in: hdc=0xffffffffb101098e, x=24, y=21, lppt=0x21881f8 | out: lppt=0x21881f8) returned 1 [0084.794] LineTo (hdc=0xffffffffb101098e, x=24, y=0) returned 1 [0084.794] SetBkMode (hdc=0xffffffffb101098e, mode=2) returned 1 [0084.794] MoveToEx (in: hdc=0xffffffffb101098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.794] SelectObject (hdc=0xffffffffb101098e, h=0x1b00017) returned 0x613009e9 [0084.794] DeleteObject (ho=0x613009e9) returned 1 [0084.794] RestoreDC (hdc=0xffffffffb101098e, nSavedDC=-1) returned 1 [0084.794] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffb101098e) returned 0x0 [0084.794] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0084.794] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0xffffffffb101098e, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.795] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffb101098e) returned 0x0 [0084.795] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0084.795] SelectObject (hdc=0xffffffffb101098e, h=0x185000f) returned 0x2405099f [0084.795] DeleteDC (hdc=0xffffffffb101098e) returned 1 [0084.795] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0084.795] EndPaint (hWnd=0x103b4, lpPaint=0x14e548) returned 1 [0084.795] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.795] IsWindowUnicode (hWnd=0x103b6) returned 1 [0084.795] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.795] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.795] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.795] BeginPaint (in: hWnd=0x103b6, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0084.795] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0084.795] CreateCompatibleDC (hdc=0xc0100ae) returned 0xffffffff800109e5 [0084.795] SelectObject (hdc=0xffffffff800109e5, h=0x2405099f) returned 0x185000f [0084.796] GdipCreateFromHDC (hdc=0xffffffff800109e5, graphics=0x14e528) returned 0x0 [0084.796] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0084.796] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0084.796] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0084.796] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.796] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0084.796] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486490 [0084.796] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486490) returned 0x0 [0084.796] LocalFree (hMem=0x1d486490) returned 0x0 [0084.796] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.796] GdipCreateRegion (region=0x14e550) returned 0x0 [0084.796] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.796] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0084.796] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0084.796] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd210dbd) returned 0x0 [0084.796] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.796] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0084.796] GetCurrentObject (hdc=0xffffffff800109e5, type=0x1) returned 0x1b00017 [0084.796] GetCurrentObject (hdc=0xffffffff800109e5, type=0x2) returned 0x1900010 [0084.796] GetCurrentObject (hdc=0xffffffff800109e5, type=0x7) returned 0x2405099f [0084.796] GetCurrentObject (hdc=0xffffffff800109e5, type=0x6) returned 0x18a0048 [0084.797] SaveDC (hdc=0xffffffff800109e5) returned 1 [0084.797] GetNearestColor (hdc=0xffffffff800109e5, color=0xf0f0f0) returned 0xf0f0f0 [0084.797] GetNearestColor (hdc=0xffffffff800109e5, color=0xa0a0a0) returned 0xa0a0a0 [0084.797] GetNearestColor (hdc=0xffffffff800109e5, color=0x696969) returned 0x696969 [0084.797] GetNearestColor (hdc=0xffffffff800109e5, color=0xa0a0a0) returned 0xa0a0a0 [0084.797] GetNearestColor (hdc=0xffffffff800109e5, color=0x0) returned 0x0 [0084.797] GetNearestColor (hdc=0xffffffff800109e5, color=0xffffff) returned 0xffffff [0084.797] GetNearestColor (hdc=0xffffffff800109e5, color=0xe5e5e5) returned 0xe5e5e5 [0084.797] GetNearestColor (hdc=0xffffffff800109e5, color=0xd8d8d8) returned 0xd8d8d8 [0084.797] GetNearestColor (hdc=0xffffffff800109e5, color=0x0) returned 0x0 [0084.797] RestoreDC (hdc=0xffffffff800109e5, nSavedDC=-1) returned 1 [0084.797] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff800109e5) returned 0x0 [0084.797] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.797] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x84\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.798] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.798] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2188b18) returned 0x0 [0084.798] GdipSetStringFormatAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0084.798] GdipSetStringFormatLineAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0084.798] GdipSetStringFormatHotkeyPrefix (format=0x1be57ae0, hotkeyPrefix=1) returned 0x0 [0084.798] GdipGetStringFormatFlags (format=0x1be57ae0, flags=0x14e378) returned 0x0 [0084.798] GdipGetStringFormatTrimming (format=0x1be57ae0, trimming=0x14e378) returned 0x0 [0084.798] GdipGetStringFormatHotkeyPrefix (format=0x1be57ae0, hotkeyPrefix=0x14e378) returned 0x0 [0084.798] GdipGetFontSize (font=0x1be57ae0, size=0x14e378) returned 0x0 [0084.798] GdipGetFontStyle (font=0x1be57ae0, style=0x14e378) returned 0x0 [0084.798] GdipDeleteStringFormat (format=0x1be57ae0) returned 0x0 [0084.798] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.798] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.798] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.798] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0084.799] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2188c48) returned 0x0 [0084.799] GdipSetStringFormatFlags (format=0x1be57920, flags=0) returned 0x0 [0084.799] GdipSetStringFormatTrimming (format=0x1be57920, trimming=0x1) returned 0x0 [0084.799] GdipSetStringFormatHotkeyPrefix (format=0x1be57920, hotkeyPrefix=1) returned 0x0 [0084.799] GdipSetStringFormatAlign (format=0x1be57920, align=0x1) returned 0x0 [0084.799] GdipSetStringFormatLineAlign (format=0x1be57920, align=0x1) returned 0x0 [0084.799] GdipMeasureString (graphics=0x1be58070, string="7", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57920, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0084.799] GdipDeleteStringFormat (format=0x1be57920) returned 0x0 [0084.799] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0084.799] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.799] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.799] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.799] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0084.799] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.800] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0084.800] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.800] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0084.800] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486e10 [0084.800] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486e10) returned 0x0 [0084.800] LocalFree (hMem=0x1d486e10) returned 0x0 [0084.800] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486cd0 [0084.800] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486cd0) returned 0x0 [0084.800] LocalFree (hMem=0x1d486cd0) returned 0x0 [0084.800] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.800] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0084.800] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0084.800] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0084.800] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.800] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0084.800] GetCurrentObject (hdc=0xffffffff800109e5, type=0x1) returned 0x1b00017 [0084.800] GetCurrentObject (hdc=0xffffffff800109e5, type=0x2) returned 0x1900010 [0084.800] GetCurrentObject (hdc=0xffffffff800109e5, type=0x7) returned 0x2405099f [0084.800] GetCurrentObject (hdc=0xffffffff800109e5, type=0x6) returned 0x18a0048 [0084.800] SaveDC (hdc=0xffffffff800109e5) returned 1 [0084.800] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff850409d6 [0084.800] GetClipRgn (hdc=0xffffffff800109e5, hrgn=0xffffffff850409d6) returned 0 [0084.801] SelectClipRgn (hdc=0xffffffff800109e5, hrgn=0xffffffff970407ff) returned 2 [0084.801] DeleteObject (ho=0xffffffff850409d6) returned 1 [0084.801] DeleteObject (ho=0xffffffff970407ff) returned 1 [0084.801] OffsetViewportOrgEx (in: hdc=0xffffffff800109e5, x=0, y=0, lppt=0x2189008 | out: lppt=0x2189008) returned 1 [0084.801] GetNearestColor (hdc=0xffffffff800109e5, color=0xf0f0f0) returned 0xf0f0f0 [0084.801] CreateSolidBrush (color=0xf0f0f0) returned 0x6b1009b2 [0084.801] FillRect (hDC=0xffffffff800109e5, lprc=0x14e1c8, hbr=0x6b1009b2) returned 1 [0084.801] DeleteObject (ho=0x6b1009b2) returned 1 [0084.801] RestoreDC (hdc=0xffffffff800109e5, nSavedDC=-1) returned 1 [0084.801] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff800109e5) returned 0x0 [0084.801] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0084.807] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.807] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2189108) returned 0x0 [0084.807] GdipSetStringFormatAlign (format=0x1be57c30, align=0x1) returned 0x0 [0084.807] GdipSetStringFormatLineAlign (format=0x1be57c30, align=0x1) returned 0x0 [0084.807] GdipSetStringFormatHotkeyPrefix (format=0x1be57c30, hotkeyPrefix=1) returned 0x0 [0084.807] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0084.807] GdipDrawString (graphics=0x1be567f0, string="7", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57c30, brush=0x1be515e0) returned 0x0 [0084.807] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0084.807] GdipDeleteStringFormat (format=0x1be57c30) returned 0x0 [0084.807] GetFocus () returned 0x103c8 [0084.807] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.807] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x82\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.808] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.808] GdipCreateRegion (region=0x14e030) returned 0x0 [0084.808] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.808] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0084.808] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.808] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0084.808] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486390 [0084.808] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486390) returned 0x0 [0084.808] LocalFree (hMem=0x1d486390) returned 0x0 [0084.808] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b50 [0084.808] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486b50) returned 0x0 [0084.808] LocalFree (hMem=0x1d486b50) returned 0x0 [0084.808] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.808] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0084.808] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0084.808] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0084.808] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.808] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0084.808] GetCurrentObject (hdc=0xffffffff800109e5, type=0x1) returned 0x1b00017 [0084.808] GetCurrentObject (hdc=0xffffffff800109e5, type=0x2) returned 0x1900010 [0084.809] GetCurrentObject (hdc=0xffffffff800109e5, type=0x7) returned 0x2405099f [0084.809] GetCurrentObject (hdc=0xffffffff800109e5, type=0x6) returned 0x18a0048 [0084.809] SaveDC (hdc=0xffffffff800109e5) returned 1 [0084.809] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff980407ff [0084.809] GetClipRgn (hdc=0xffffffff800109e5, hrgn=0xffffffff980407ff) returned 0 [0084.809] SelectClipRgn (hdc=0xffffffff800109e5, hrgn=0xffffffff860409d6) returned 2 [0084.809] DeleteObject (ho=0xffffffff980407ff) returned 1 [0084.809] DeleteObject (ho=0xffffffff860409d6) returned 1 [0084.809] OffsetViewportOrgEx (in: hdc=0xffffffff800109e5, x=0, y=0, lppt=0x21894f0 | out: lppt=0x21894f0) returned 1 [0084.809] GetROP2 (hdc=0xffffffff800109e5) returned 13 [0084.809] GetBkMode (hdc=0xffffffff800109e5) returned 2 [0084.809] SetBkMode (hdc=0xffffffff800109e5, mode=1) returned 2 [0084.809] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x623009e9 [0084.809] SelectObject (hdc=0xffffffff800109e5, h=0x623009e9) returned 0x1b00017 [0084.809] MoveToEx (in: hdc=0xffffffff800109e5, x=25, y=0, lppt=0x2189558 | out: lppt=0x2189558) returned 1 [0084.809] LineTo (hdc=0xffffffff800109e5, x=0, y=0) returned 1 [0084.809] SetBkMode (hdc=0xffffffff800109e5, mode=2) returned 1 [0084.809] MoveToEx (in: hdc=0xffffffff800109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.809] GetROP2 (hdc=0xffffffff800109e5) returned 13 [0084.809] GetBkMode (hdc=0xffffffff800109e5) returned 2 [0084.809] SetBkMode (hdc=0xffffffff800109e5, mode=1) returned 2 [0084.810] SelectObject (hdc=0xffffffff800109e5, h=0x623009e9) returned 0x623009e9 [0084.810] MoveToEx (in: hdc=0xffffffff800109e5, x=0, y=0, lppt=0x2189570 | out: lppt=0x2189570) returned 1 [0084.810] LineTo (hdc=0xffffffff800109e5, x=0, y=22) returned 1 [0084.810] SetBkMode (hdc=0xffffffff800109e5, mode=2) returned 1 [0084.810] MoveToEx (in: hdc=0xffffffff800109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.810] SelectObject (hdc=0xffffffff800109e5, h=0x1b00017) returned 0x623009e9 [0084.810] DeleteObject (ho=0x623009e9) returned 1 [0084.810] GetROP2 (hdc=0xffffffff800109e5) returned 13 [0084.810] GetBkMode (hdc=0xffffffff800109e5) returned 2 [0084.810] SetBkMode (hdc=0xffffffff800109e5, mode=1) returned 2 [0084.810] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x4c3009de [0084.810] SelectObject (hdc=0xffffffff800109e5, h=0x4c3009de) returned 0x1b00017 [0084.810] MoveToEx (in: hdc=0xffffffff800109e5, x=0, y=22, lppt=0x21895d8 | out: lppt=0x21895d8) returned 1 [0084.810] LineTo (hdc=0xffffffff800109e5, x=25, y=22) returned 1 [0084.810] SetBkMode (hdc=0xffffffff800109e5, mode=2) returned 1 [0084.810] MoveToEx (in: hdc=0xffffffff800109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.810] GetROP2 (hdc=0xffffffff800109e5) returned 13 [0084.810] GetBkMode (hdc=0xffffffff800109e5) returned 2 [0084.810] SetBkMode (hdc=0xffffffff800109e5, mode=1) returned 2 [0084.810] SelectObject (hdc=0xffffffff800109e5, h=0x4c3009de) returned 0x4c3009de [0084.810] MoveToEx (in: hdc=0xffffffff800109e5, x=25, y=22, lppt=0x21895f0 | out: lppt=0x21895f0) returned 1 [0084.810] LineTo (hdc=0xffffffff800109e5, x=25, y=-1) returned 1 [0084.811] SetBkMode (hdc=0xffffffff800109e5, mode=2) returned 1 [0084.811] MoveToEx (in: hdc=0xffffffff800109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.811] SelectObject (hdc=0xffffffff800109e5, h=0x1b00017) returned 0x4c3009de [0084.811] DeleteObject (ho=0x4c3009de) returned 1 [0084.811] GetROP2 (hdc=0xffffffff800109e5) returned 13 [0084.811] GetBkMode (hdc=0xffffffff800109e5) returned 2 [0084.811] SetBkMode (hdc=0xffffffff800109e5, mode=1) returned 2 [0084.811] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x633009e9 [0084.811] SelectObject (hdc=0xffffffff800109e5, h=0x633009e9) returned 0x1b00017 [0084.811] MoveToEx (in: hdc=0xffffffff800109e5, x=24, y=1, lppt=0x2189658 | out: lppt=0x2189658) returned 1 [0084.811] LineTo (hdc=0xffffffff800109e5, x=1, y=1) returned 1 [0084.811] SetBkMode (hdc=0xffffffff800109e5, mode=2) returned 1 [0084.811] MoveToEx (in: hdc=0xffffffff800109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.811] GetROP2 (hdc=0xffffffff800109e5) returned 13 [0084.811] GetBkMode (hdc=0xffffffff800109e5) returned 2 [0084.811] SetBkMode (hdc=0xffffffff800109e5, mode=1) returned 2 [0084.811] SelectObject (hdc=0xffffffff800109e5, h=0x633009e9) returned 0x633009e9 [0084.811] MoveToEx (in: hdc=0xffffffff800109e5, x=1, y=1, lppt=0x2189670 | out: lppt=0x2189670) returned 1 [0084.811] LineTo (hdc=0xffffffff800109e5, x=1, y=21) returned 1 [0084.811] SetBkMode (hdc=0xffffffff800109e5, mode=2) returned 1 [0084.811] MoveToEx (in: hdc=0xffffffff800109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.811] SelectObject (hdc=0xffffffff800109e5, h=0x1b00017) returned 0x633009e9 [0084.811] DeleteObject (ho=0x633009e9) returned 1 [0084.812] GetROP2 (hdc=0xffffffff800109e5) returned 13 [0084.812] GetBkMode (hdc=0xffffffff800109e5) returned 2 [0084.812] SetBkMode (hdc=0xffffffff800109e5, mode=1) returned 2 [0084.812] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x4d3009de [0084.812] SelectObject (hdc=0xffffffff800109e5, h=0x4d3009de) returned 0x1b00017 [0084.812] MoveToEx (in: hdc=0xffffffff800109e5, x=1, y=21, lppt=0x21896d8 | out: lppt=0x21896d8) returned 1 [0084.812] LineTo (hdc=0xffffffff800109e5, x=24, y=21) returned 1 [0084.812] SetBkMode (hdc=0xffffffff800109e5, mode=2) returned 1 [0084.812] MoveToEx (in: hdc=0xffffffff800109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.812] GetROP2 (hdc=0xffffffff800109e5) returned 13 [0084.812] GetBkMode (hdc=0xffffffff800109e5) returned 2 [0084.812] SetBkMode (hdc=0xffffffff800109e5, mode=1) returned 2 [0084.812] SelectObject (hdc=0xffffffff800109e5, h=0x4d3009de) returned 0x4d3009de [0084.812] MoveToEx (in: hdc=0xffffffff800109e5, x=24, y=21, lppt=0x21896f0 | out: lppt=0x21896f0) returned 1 [0084.812] LineTo (hdc=0xffffffff800109e5, x=24, y=0) returned 1 [0084.812] SetBkMode (hdc=0xffffffff800109e5, mode=2) returned 1 [0084.812] MoveToEx (in: hdc=0xffffffff800109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.812] SelectObject (hdc=0xffffffff800109e5, h=0x1b00017) returned 0x4d3009de [0084.812] DeleteObject (ho=0x4d3009de) returned 1 [0084.812] RestoreDC (hdc=0xffffffff800109e5, nSavedDC=-1) returned 1 [0084.812] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff800109e5) returned 0x0 [0084.813] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0084.813] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0xffffffff800109e5, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.813] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff800109e5) returned 0x0 [0084.813] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0084.813] SelectObject (hdc=0xffffffff800109e5, h=0x185000f) returned 0x2405099f [0084.813] DeleteDC (hdc=0xffffffff800109e5) returned 1 [0084.813] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0084.813] EndPaint (hWnd=0x103b6, lpPaint=0x14e548) returned 1 [0084.813] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.813] IsWindowUnicode (hWnd=0x103b8) returned 1 [0084.813] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.813] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.813] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.813] BeginPaint (in: hWnd=0x103b8, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0084.814] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0084.814] CreateCompatibleDC (hdc=0x220106d6) returned 0x380109e8 [0084.814] SelectObject (hdc=0x380109e8, h=0x2405099f) returned 0x185000f [0084.814] GdipCreateFromHDC (hdc=0x380109e8, graphics=0x14e528) returned 0x0 [0084.814] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0084.814] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0084.814] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0084.814] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.814] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0084.814] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486310 [0084.814] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486310) returned 0x0 [0084.814] LocalFree (hMem=0x1d486310) returned 0x0 [0084.814] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.814] GdipCreateRegion (region=0x14e550) returned 0x0 [0084.814] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.814] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0084.814] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0084.814] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd1e0dbd) returned 0x0 [0084.814] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.815] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0084.815] GetCurrentObject (hdc=0x380109e8, type=0x1) returned 0x1b00017 [0084.815] GetCurrentObject (hdc=0x380109e8, type=0x2) returned 0x1900010 [0084.815] GetCurrentObject (hdc=0x380109e8, type=0x7) returned 0x2405099f [0084.815] GetCurrentObject (hdc=0x380109e8, type=0x6) returned 0x18a0048 [0084.815] SaveDC (hdc=0x380109e8) returned 1 [0084.815] GetNearestColor (hdc=0x380109e8, color=0xf0f0f0) returned 0xf0f0f0 [0084.815] GetNearestColor (hdc=0x380109e8, color=0xa0a0a0) returned 0xa0a0a0 [0084.815] GetNearestColor (hdc=0x380109e8, color=0x696969) returned 0x696969 [0084.815] GetNearestColor (hdc=0x380109e8, color=0xa0a0a0) returned 0xa0a0a0 [0084.815] GetNearestColor (hdc=0x380109e8, color=0x0) returned 0x0 [0084.815] GetNearestColor (hdc=0x380109e8, color=0xffffff) returned 0xffffff [0084.815] GetNearestColor (hdc=0x380109e8, color=0xe5e5e5) returned 0xe5e5e5 [0084.815] GetNearestColor (hdc=0x380109e8, color=0xd8d8d8) returned 0xd8d8d8 [0084.815] GetNearestColor (hdc=0x380109e8, color=0x0) returned 0x0 [0084.815] RestoreDC (hdc=0x380109e8, nSavedDC=-1) returned 1 [0084.815] GdipReleaseDC (graphics=0x1be567f0, hdc=0x380109e8) returned 0x0 [0084.816] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x99\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.816] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.816] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x218a010) returned 0x0 [0084.816] GdipSetStringFormatAlign (format=0x1be57fb0, align=0x1) returned 0x0 [0084.816] GdipSetStringFormatLineAlign (format=0x1be57fb0, align=0x1) returned 0x0 [0084.816] GdipSetStringFormatHotkeyPrefix (format=0x1be57fb0, hotkeyPrefix=1) returned 0x0 [0084.816] GdipGetStringFormatFlags (format=0x1be57fb0, flags=0x14e378) returned 0x0 [0084.816] GdipGetStringFormatTrimming (format=0x1be57fb0, trimming=0x14e378) returned 0x0 [0084.816] GdipGetStringFormatHotkeyPrefix (format=0x1be57fb0, hotkeyPrefix=0x14e378) returned 0x0 [0084.816] GdipGetFontSize (font=0x1be57fb0, size=0x14e378) returned 0x0 [0084.816] GdipGetFontStyle (font=0x1be57fb0, style=0x14e378) returned 0x0 [0084.816] GdipDeleteStringFormat (format=0x1be57fb0) returned 0x0 [0084.817] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.817] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.817] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.819] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0084.819] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x218a140) returned 0x0 [0084.819] GdipSetStringFormatFlags (format=0x1be57920, flags=0) returned 0x0 [0084.819] GdipSetStringFormatTrimming (format=0x1be57920, trimming=0x1) returned 0x0 [0084.819] GdipSetStringFormatHotkeyPrefix (format=0x1be57920, hotkeyPrefix=1) returned 0x0 [0084.819] GdipSetStringFormatAlign (format=0x1be57920, align=0x1) returned 0x0 [0084.819] GdipSetStringFormatLineAlign (format=0x1be57920, align=0x1) returned 0x0 [0084.819] GdipMeasureString (graphics=0x1be58070, string="0", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57920, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0084.819] GdipDeleteStringFormat (format=0x1be57920) returned 0x0 [0084.819] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0084.819] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.819] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.820] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.820] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0084.820] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.820] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0084.820] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.820] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0084.820] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4862d0 [0084.820] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4862d0) returned 0x0 [0084.820] LocalFree (hMem=0x1d4862d0) returned 0x0 [0084.820] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4868d0 [0084.820] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4868d0) returned 0x0 [0084.820] LocalFree (hMem=0x1d4868d0) returned 0x0 [0084.820] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.820] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0084.820] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0084.820] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0084.820] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.820] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0084.820] GetCurrentObject (hdc=0x380109e8, type=0x1) returned 0x1b00017 [0084.820] GetCurrentObject (hdc=0x380109e8, type=0x2) returned 0x1900010 [0084.820] GetCurrentObject (hdc=0x380109e8, type=0x7) returned 0x2405099f [0084.820] GetCurrentObject (hdc=0x380109e8, type=0x6) returned 0x18a0048 [0084.821] SaveDC (hdc=0x380109e8) returned 1 [0084.821] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff870409d6 [0084.821] GetClipRgn (hdc=0x380109e8, hrgn=0xffffffff870409d6) returned 0 [0084.821] SelectClipRgn (hdc=0x380109e8, hrgn=0xffffffff990407ff) returned 2 [0084.821] DeleteObject (ho=0xffffffff870409d6) returned 1 [0084.821] DeleteObject (ho=0xffffffff990407ff) returned 1 [0084.821] OffsetViewportOrgEx (in: hdc=0x380109e8, x=0, y=0, lppt=0x218a500 | out: lppt=0x218a500) returned 1 [0084.821] GetNearestColor (hdc=0x380109e8, color=0xf0f0f0) returned 0xf0f0f0 [0084.821] CreateSolidBrush (color=0xf0f0f0) returned 0x6c1009b2 [0084.821] FillRect (hDC=0x380109e8, lprc=0x14e1c8, hbr=0x6c1009b2) returned 1 [0084.821] DeleteObject (ho=0x6c1009b2) returned 1 [0084.821] RestoreDC (hdc=0x380109e8, nSavedDC=-1) returned 1 [0084.821] GdipReleaseDC (graphics=0x1be567f0, hdc=0x380109e8) returned 0x0 [0084.821] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.821] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0084.822] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.822] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x218a600) returned 0x0 [0084.822] GdipSetStringFormatAlign (format=0x1be57ca0, align=0x1) returned 0x0 [0084.822] GdipSetStringFormatLineAlign (format=0x1be57ca0, align=0x1) returned 0x0 [0084.822] GdipSetStringFormatHotkeyPrefix (format=0x1be57ca0, hotkeyPrefix=1) returned 0x0 [0084.822] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0084.822] GdipDrawString (graphics=0x1be567f0, string="0", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57ca0, brush=0x1be515e0) returned 0x0 [0084.822] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0084.822] GdipDeleteStringFormat (format=0x1be57ca0) returned 0x0 [0084.822] GetFocus () returned 0x103c8 [0084.822] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.822] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x97\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.823] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.823] GdipCreateRegion (region=0x14e030) returned 0x0 [0084.823] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.823] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0084.823] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.823] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0084.823] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4861d0 [0084.823] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d4861d0) returned 0x0 [0084.823] LocalFree (hMem=0x1d4861d0) returned 0x0 [0084.823] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486190 [0084.823] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486190) returned 0x0 [0084.823] LocalFree (hMem=0x1d486190) returned 0x0 [0084.823] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.823] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0084.823] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0084.823] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0084.823] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.823] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0084.823] GetCurrentObject (hdc=0x380109e8, type=0x1) returned 0x1b00017 [0084.823] GetCurrentObject (hdc=0x380109e8, type=0x2) returned 0x1900010 [0084.824] GetCurrentObject (hdc=0x380109e8, type=0x7) returned 0x2405099f [0084.824] GetCurrentObject (hdc=0x380109e8, type=0x6) returned 0x18a0048 [0084.824] SaveDC (hdc=0x380109e8) returned 1 [0084.824] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9a0407ff [0084.824] GetClipRgn (hdc=0x380109e8, hrgn=0xffffffff9a0407ff) returned 0 [0084.824] SelectClipRgn (hdc=0x380109e8, hrgn=0xffffffff880409d6) returned 2 [0084.824] DeleteObject (ho=0xffffffff9a0407ff) returned 1 [0084.824] DeleteObject (ho=0xffffffff880409d6) returned 1 [0084.824] OffsetViewportOrgEx (in: hdc=0x380109e8, x=0, y=0, lppt=0x218a9e8 | out: lppt=0x218a9e8) returned 1 [0084.824] GetROP2 (hdc=0x380109e8) returned 13 [0084.824] GetBkMode (hdc=0x380109e8) returned 2 [0084.824] SetBkMode (hdc=0x380109e8, mode=1) returned 2 [0084.824] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x4e3009de [0084.824] SelectObject (hdc=0x380109e8, h=0x4e3009de) returned 0x1b00017 [0084.824] MoveToEx (in: hdc=0x380109e8, x=25, y=0, lppt=0x218aa50 | out: lppt=0x218aa50) returned 1 [0084.824] LineTo (hdc=0x380109e8, x=0, y=0) returned 1 [0084.824] SetBkMode (hdc=0x380109e8, mode=2) returned 1 [0084.824] MoveToEx (in: hdc=0x380109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.824] GetROP2 (hdc=0x380109e8) returned 13 [0084.824] GetBkMode (hdc=0x380109e8) returned 2 [0084.825] SetBkMode (hdc=0x380109e8, mode=1) returned 2 [0084.825] SelectObject (hdc=0x380109e8, h=0x4e3009de) returned 0x4e3009de [0084.825] MoveToEx (in: hdc=0x380109e8, x=0, y=0, lppt=0x218aa68 | out: lppt=0x218aa68) returned 1 [0084.825] LineTo (hdc=0x380109e8, x=0, y=22) returned 1 [0084.825] SetBkMode (hdc=0x380109e8, mode=2) returned 1 [0084.825] MoveToEx (in: hdc=0x380109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.825] SelectObject (hdc=0x380109e8, h=0x1b00017) returned 0x4e3009de [0084.825] DeleteObject (ho=0x4e3009de) returned 1 [0084.825] GetROP2 (hdc=0x380109e8) returned 13 [0084.825] GetBkMode (hdc=0x380109e8) returned 2 [0084.825] SetBkMode (hdc=0x380109e8, mode=1) returned 2 [0084.825] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x643009e9 [0084.825] SelectObject (hdc=0x380109e8, h=0x643009e9) returned 0x1b00017 [0084.825] MoveToEx (in: hdc=0x380109e8, x=0, y=22, lppt=0x218aad0 | out: lppt=0x218aad0) returned 1 [0084.825] LineTo (hdc=0x380109e8, x=25, y=22) returned 1 [0084.825] SetBkMode (hdc=0x380109e8, mode=2) returned 1 [0084.825] MoveToEx (in: hdc=0x380109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.825] GetROP2 (hdc=0x380109e8) returned 13 [0084.825] GetBkMode (hdc=0x380109e8) returned 2 [0084.825] SetBkMode (hdc=0x380109e8, mode=1) returned 2 [0084.825] SelectObject (hdc=0x380109e8, h=0x643009e9) returned 0x643009e9 [0084.825] MoveToEx (in: hdc=0x380109e8, x=25, y=22, lppt=0x218aae8 | out: lppt=0x218aae8) returned 1 [0084.826] LineTo (hdc=0x380109e8, x=25, y=-1) returned 1 [0084.826] SetBkMode (hdc=0x380109e8, mode=2) returned 1 [0084.826] MoveToEx (in: hdc=0x380109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.826] SelectObject (hdc=0x380109e8, h=0x1b00017) returned 0x643009e9 [0084.826] DeleteObject (ho=0x643009e9) returned 1 [0084.826] GetROP2 (hdc=0x380109e8) returned 13 [0084.826] GetBkMode (hdc=0x380109e8) returned 2 [0084.826] SetBkMode (hdc=0x380109e8, mode=1) returned 2 [0084.826] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x4f3009de [0084.826] SelectObject (hdc=0x380109e8, h=0x4f3009de) returned 0x1b00017 [0084.826] MoveToEx (in: hdc=0x380109e8, x=24, y=1, lppt=0x218ab50 | out: lppt=0x218ab50) returned 1 [0084.826] LineTo (hdc=0x380109e8, x=1, y=1) returned 1 [0084.826] SetBkMode (hdc=0x380109e8, mode=2) returned 1 [0084.826] MoveToEx (in: hdc=0x380109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.826] GetROP2 (hdc=0x380109e8) returned 13 [0084.826] GetBkMode (hdc=0x380109e8) returned 2 [0084.826] SetBkMode (hdc=0x380109e8, mode=1) returned 2 [0084.826] SelectObject (hdc=0x380109e8, h=0x4f3009de) returned 0x4f3009de [0084.826] MoveToEx (in: hdc=0x380109e8, x=1, y=1, lppt=0x218ab68 | out: lppt=0x218ab68) returned 1 [0084.826] LineTo (hdc=0x380109e8, x=1, y=21) returned 1 [0084.826] SetBkMode (hdc=0x380109e8, mode=2) returned 1 [0084.826] MoveToEx (in: hdc=0x380109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.827] SelectObject (hdc=0x380109e8, h=0x1b00017) returned 0x4f3009de [0084.827] DeleteObject (ho=0x4f3009de) returned 1 [0084.827] GetROP2 (hdc=0x380109e8) returned 13 [0084.827] GetBkMode (hdc=0x380109e8) returned 2 [0084.827] SetBkMode (hdc=0x380109e8, mode=1) returned 2 [0084.827] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x653009e9 [0084.827] SelectObject (hdc=0x380109e8, h=0x653009e9) returned 0x1b00017 [0084.827] MoveToEx (in: hdc=0x380109e8, x=1, y=21, lppt=0x218abd0 | out: lppt=0x218abd0) returned 1 [0084.827] LineTo (hdc=0x380109e8, x=24, y=21) returned 1 [0084.827] SetBkMode (hdc=0x380109e8, mode=2) returned 1 [0084.827] MoveToEx (in: hdc=0x380109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.827] GetROP2 (hdc=0x380109e8) returned 13 [0084.827] GetBkMode (hdc=0x380109e8) returned 2 [0084.827] SetBkMode (hdc=0x380109e8, mode=1) returned 2 [0084.827] SelectObject (hdc=0x380109e8, h=0x653009e9) returned 0x653009e9 [0084.827] MoveToEx (in: hdc=0x380109e8, x=24, y=21, lppt=0x218abe8 | out: lppt=0x218abe8) returned 1 [0084.827] LineTo (hdc=0x380109e8, x=24, y=0) returned 1 [0084.827] SetBkMode (hdc=0x380109e8, mode=2) returned 1 [0084.827] MoveToEx (in: hdc=0x380109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.827] SelectObject (hdc=0x380109e8, h=0x1b00017) returned 0x653009e9 [0084.827] DeleteObject (ho=0x653009e9) returned 1 [0084.827] RestoreDC (hdc=0x380109e8, nSavedDC=-1) returned 1 [0084.828] GdipReleaseDC (graphics=0x1be567f0, hdc=0x380109e8) returned 0x0 [0084.828] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0084.828] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x380109e8, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.828] GdipReleaseDC (graphics=0x1be567f0, hdc=0x380109e8) returned 0x0 [0084.828] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0084.828] SelectObject (hdc=0x380109e8, h=0x185000f) returned 0x2405099f [0084.828] DeleteDC (hdc=0x380109e8) returned 1 [0084.828] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0084.828] EndPaint (hWnd=0x103b8, lpPaint=0x14e548) returned 1 [0084.828] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.828] IsWindowUnicode (hWnd=0x103ba) returned 1 [0084.828] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.828] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.828] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.828] BeginPaint (in: hWnd=0x103ba, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0084.829] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0084.829] CreateCompatibleDC (hdc=0x1b0107ae) returned 0xffffffffb901098e [0084.829] SelectObject (hdc=0xffffffffb901098e, h=0x2405099f) returned 0x185000f [0084.829] GdipCreateFromHDC (hdc=0xffffffffb901098e, graphics=0x14e528) returned 0x0 [0084.829] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0084.829] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0084.829] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0084.829] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.829] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0084.829] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4864d0 [0084.829] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4864d0) returned 0x0 [0084.829] LocalFree (hMem=0x1d4864d0) returned 0x0 [0084.829] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.829] GdipCreateRegion (region=0x14e550) returned 0x0 [0084.829] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.829] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0084.829] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0084.829] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd1b0dbd) returned 0x0 [0084.830] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.830] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0084.830] GetCurrentObject (hdc=0xffffffffb901098e, type=0x1) returned 0x1b00017 [0084.830] GetCurrentObject (hdc=0xffffffffb901098e, type=0x2) returned 0x1900010 [0084.830] GetCurrentObject (hdc=0xffffffffb901098e, type=0x7) returned 0x2405099f [0084.830] GetCurrentObject (hdc=0xffffffffb901098e, type=0x6) returned 0x18a0048 [0084.830] SaveDC (hdc=0xffffffffb901098e) returned 1 [0084.830] GetNearestColor (hdc=0xffffffffb901098e, color=0xf0f0f0) returned 0xf0f0f0 [0084.830] GetNearestColor (hdc=0xffffffffb901098e, color=0xa0a0a0) returned 0xa0a0a0 [0084.830] GetNearestColor (hdc=0xffffffffb901098e, color=0x696969) returned 0x696969 [0084.830] GetNearestColor (hdc=0xffffffffb901098e, color=0xa0a0a0) returned 0xa0a0a0 [0084.830] GetNearestColor (hdc=0xffffffffb901098e, color=0x0) returned 0x0 [0084.830] GetNearestColor (hdc=0xffffffffb901098e, color=0xffffff) returned 0xffffff [0084.830] GetNearestColor (hdc=0xffffffffb901098e, color=0xe5e5e5) returned 0xe5e5e5 [0084.830] GetNearestColor (hdc=0xffffffffb901098e, color=0xd8d8d8) returned 0xd8d8d8 [0084.830] GetNearestColor (hdc=0xffffffffb901098e, color=0x0) returned 0x0 [0084.830] RestoreDC (hdc=0xffffffffb901098e, nSavedDC=-1) returned 1 [0084.831] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffb901098e) returned 0x0 [0084.831] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.831] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx®\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.831] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.831] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x218b508) returned 0x0 [0084.831] GdipSetStringFormatAlign (format=0x1be57df0, align=0x1) returned 0x0 [0084.831] GdipSetStringFormatLineAlign (format=0x1be57df0, align=0x1) returned 0x0 [0084.831] GdipSetStringFormatHotkeyPrefix (format=0x1be57df0, hotkeyPrefix=1) returned 0x0 [0084.831] GdipGetStringFormatFlags (format=0x1be57df0, flags=0x14e378) returned 0x0 [0084.831] GdipGetStringFormatTrimming (format=0x1be57df0, trimming=0x14e378) returned 0x0 [0084.831] GdipGetStringFormatHotkeyPrefix (format=0x1be57df0, hotkeyPrefix=0x14e378) returned 0x0 [0084.831] GdipGetFontSize (font=0x1be57df0, size=0x14e378) returned 0x0 [0084.831] GdipGetFontStyle (font=0x1be57df0, style=0x14e378) returned 0x0 [0084.831] GdipDeleteStringFormat (format=0x1be57df0) returned 0x0 [0084.832] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.832] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.832] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.832] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0084.832] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x218b638) returned 0x0 [0084.832] GdipSetStringFormatFlags (format=0x1be57920, flags=0) returned 0x0 [0084.832] GdipSetStringFormatTrimming (format=0x1be57920, trimming=0x1) returned 0x0 [0084.832] GdipSetStringFormatHotkeyPrefix (format=0x1be57920, hotkeyPrefix=1) returned 0x0 [0084.832] GdipSetStringFormatAlign (format=0x1be57920, align=0x1) returned 0x0 [0084.832] GdipSetStringFormatLineAlign (format=0x1be57920, align=0x1) returned 0x0 [0084.832] GdipMeasureString (graphics=0x1be58070, string="4", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57920, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0084.832] GdipDeleteStringFormat (format=0x1be57920) returned 0x0 [0084.832] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0084.833] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.833] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.833] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0084.833] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.833] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0084.833] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.833] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0084.833] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0084.833] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486110) returned 0x0 [0084.833] LocalFree (hMem=0x1d486110) returned 0x0 [0084.833] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d485f10 [0084.833] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d485f10) returned 0x0 [0084.833] LocalFree (hMem=0x1d485f10) returned 0x0 [0084.833] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.833] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0084.833] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0084.834] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0084.834] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.834] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0084.834] GetCurrentObject (hdc=0xffffffffb901098e, type=0x1) returned 0x1b00017 [0084.834] GetCurrentObject (hdc=0xffffffffb901098e, type=0x2) returned 0x1900010 [0084.834] GetCurrentObject (hdc=0xffffffffb901098e, type=0x7) returned 0x2405099f [0084.834] GetCurrentObject (hdc=0xffffffffb901098e, type=0x6) returned 0x18a0048 [0084.834] SaveDC (hdc=0xffffffffb901098e) returned 1 [0084.836] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff890409d6 [0084.836] GetClipRgn (hdc=0xffffffffb901098e, hrgn=0xffffffff890409d6) returned 0 [0084.836] SelectClipRgn (hdc=0xffffffffb901098e, hrgn=0xffffffff9b0407ff) returned 2 [0084.836] DeleteObject (ho=0xffffffff890409d6) returned 1 [0084.836] DeleteObject (ho=0xffffffff9b0407ff) returned 1 [0084.836] OffsetViewportOrgEx (in: hdc=0xffffffffb901098e, x=0, y=0, lppt=0x218b9f8 | out: lppt=0x218b9f8) returned 1 [0084.836] GetNearestColor (hdc=0xffffffffb901098e, color=0xf0f0f0) returned 0xf0f0f0 [0084.836] CreateSolidBrush (color=0xf0f0f0) returned 0x6d1009b2 [0084.836] FillRect (hDC=0xffffffffb901098e, lprc=0x14e1c8, hbr=0x6d1009b2) returned 1 [0084.836] DeleteObject (ho=0x6d1009b2) returned 1 [0084.836] RestoreDC (hdc=0xffffffffb901098e, nSavedDC=-1) returned 1 [0084.836] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffb901098e) returned 0x0 [0084.836] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0084.836] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.837] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x218baf8) returned 0x0 [0084.837] GdipSetStringFormatAlign (format=0x1be57d10, align=0x1) returned 0x0 [0084.837] GdipSetStringFormatLineAlign (format=0x1be57d10, align=0x1) returned 0x0 [0084.837] GdipSetStringFormatHotkeyPrefix (format=0x1be57d10, hotkeyPrefix=1) returned 0x0 [0084.837] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0084.837] GdipDrawString (graphics=0x1be567f0, string="4", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57d10, brush=0x1be515e0) returned 0x0 [0084.837] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0084.837] GdipDeleteStringFormat (format=0x1be57d10) returned 0x0 [0084.837] GetFocus () returned 0x103c8 [0084.837] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.837] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx¬\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.838] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.838] GdipCreateRegion (region=0x14e030) returned 0x0 [0084.838] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.838] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0084.838] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.838] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0084.838] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4863d0 [0084.838] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4863d0) returned 0x0 [0084.838] LocalFree (hMem=0x1d4863d0) returned 0x0 [0084.838] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486610 [0084.838] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486610) returned 0x0 [0084.838] LocalFree (hMem=0x1d486610) returned 0x0 [0084.838] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.838] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0084.838] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0084.838] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0084.838] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.838] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0084.838] GetCurrentObject (hdc=0xffffffffb901098e, type=0x1) returned 0x1b00017 [0084.838] GetCurrentObject (hdc=0xffffffffb901098e, type=0x2) returned 0x1900010 [0084.838] GetCurrentObject (hdc=0xffffffffb901098e, type=0x7) returned 0x2405099f [0084.839] GetCurrentObject (hdc=0xffffffffb901098e, type=0x6) returned 0x18a0048 [0084.839] SaveDC (hdc=0xffffffffb901098e) returned 1 [0084.839] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9c0407ff [0084.839] GetClipRgn (hdc=0xffffffffb901098e, hrgn=0xffffffff9c0407ff) returned 0 [0084.839] SelectClipRgn (hdc=0xffffffffb901098e, hrgn=0xffffffff8a0409d6) returned 2 [0084.839] DeleteObject (ho=0xffffffff9c0407ff) returned 1 [0084.839] DeleteObject (ho=0xffffffff8a0409d6) returned 1 [0084.839] OffsetViewportOrgEx (in: hdc=0xffffffffb901098e, x=0, y=0, lppt=0x218bee0 | out: lppt=0x218bee0) returned 1 [0084.839] GetROP2 (hdc=0xffffffffb901098e) returned 13 [0084.839] GetBkMode (hdc=0xffffffffb901098e) returned 2 [0084.839] SetBkMode (hdc=0xffffffffb901098e, mode=1) returned 2 [0084.839] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x663009e9 [0084.839] SelectObject (hdc=0xffffffffb901098e, h=0x663009e9) returned 0x1b00017 [0084.839] MoveToEx (in: hdc=0xffffffffb901098e, x=25, y=0, lppt=0x218bf48 | out: lppt=0x218bf48) returned 1 [0084.839] LineTo (hdc=0xffffffffb901098e, x=0, y=0) returned 1 [0084.839] SetBkMode (hdc=0xffffffffb901098e, mode=2) returned 1 [0084.839] MoveToEx (in: hdc=0xffffffffb901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.839] GetROP2 (hdc=0xffffffffb901098e) returned 13 [0084.839] GetBkMode (hdc=0xffffffffb901098e) returned 2 [0084.839] SetBkMode (hdc=0xffffffffb901098e, mode=1) returned 2 [0084.840] SelectObject (hdc=0xffffffffb901098e, h=0x663009e9) returned 0x663009e9 [0084.840] MoveToEx (in: hdc=0xffffffffb901098e, x=0, y=0, lppt=0x218bf60 | out: lppt=0x218bf60) returned 1 [0084.840] LineTo (hdc=0xffffffffb901098e, x=0, y=22) returned 1 [0084.840] SetBkMode (hdc=0xffffffffb901098e, mode=2) returned 1 [0084.840] MoveToEx (in: hdc=0xffffffffb901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.840] SelectObject (hdc=0xffffffffb901098e, h=0x1b00017) returned 0x663009e9 [0084.840] DeleteObject (ho=0x663009e9) returned 1 [0084.840] GetROP2 (hdc=0xffffffffb901098e) returned 13 [0084.840] GetBkMode (hdc=0xffffffffb901098e) returned 2 [0084.840] SetBkMode (hdc=0xffffffffb901098e, mode=1) returned 2 [0084.840] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x503009de [0084.840] SelectObject (hdc=0xffffffffb901098e, h=0x503009de) returned 0x1b00017 [0084.840] MoveToEx (in: hdc=0xffffffffb901098e, x=0, y=22, lppt=0x218bfc8 | out: lppt=0x218bfc8) returned 1 [0084.840] LineTo (hdc=0xffffffffb901098e, x=25, y=22) returned 1 [0084.840] SetBkMode (hdc=0xffffffffb901098e, mode=2) returned 1 [0084.840] MoveToEx (in: hdc=0xffffffffb901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.840] GetROP2 (hdc=0xffffffffb901098e) returned 13 [0084.840] GetBkMode (hdc=0xffffffffb901098e) returned 2 [0084.840] SetBkMode (hdc=0xffffffffb901098e, mode=1) returned 2 [0084.841] SelectObject (hdc=0xffffffffb901098e, h=0x503009de) returned 0x503009de [0084.841] MoveToEx (in: hdc=0xffffffffb901098e, x=25, y=22, lppt=0x218bfe0 | out: lppt=0x218bfe0) returned 1 [0084.841] LineTo (hdc=0xffffffffb901098e, x=25, y=-1) returned 1 [0084.841] SetBkMode (hdc=0xffffffffb901098e, mode=2) returned 1 [0084.841] MoveToEx (in: hdc=0xffffffffb901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.841] SelectObject (hdc=0xffffffffb901098e, h=0x1b00017) returned 0x503009de [0084.841] DeleteObject (ho=0x503009de) returned 1 [0084.841] GetROP2 (hdc=0xffffffffb901098e) returned 13 [0084.841] GetBkMode (hdc=0xffffffffb901098e) returned 2 [0084.841] SetBkMode (hdc=0xffffffffb901098e, mode=1) returned 2 [0084.841] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x673009e9 [0084.841] SelectObject (hdc=0xffffffffb901098e, h=0x673009e9) returned 0x1b00017 [0084.841] MoveToEx (in: hdc=0xffffffffb901098e, x=24, y=1, lppt=0x218c048 | out: lppt=0x218c048) returned 1 [0084.841] LineTo (hdc=0xffffffffb901098e, x=1, y=1) returned 1 [0084.841] SetBkMode (hdc=0xffffffffb901098e, mode=2) returned 1 [0084.841] MoveToEx (in: hdc=0xffffffffb901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.841] GetROP2 (hdc=0xffffffffb901098e) returned 13 [0084.841] GetBkMode (hdc=0xffffffffb901098e) returned 2 [0084.841] SetBkMode (hdc=0xffffffffb901098e, mode=1) returned 2 [0084.841] SelectObject (hdc=0xffffffffb901098e, h=0x673009e9) returned 0x673009e9 [0084.841] MoveToEx (in: hdc=0xffffffffb901098e, x=1, y=1, lppt=0x218c060 | out: lppt=0x218c060) returned 1 [0084.842] LineTo (hdc=0xffffffffb901098e, x=1, y=21) returned 1 [0084.842] SetBkMode (hdc=0xffffffffb901098e, mode=2) returned 1 [0084.842] MoveToEx (in: hdc=0xffffffffb901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.842] SelectObject (hdc=0xffffffffb901098e, h=0x1b00017) returned 0x673009e9 [0084.842] DeleteObject (ho=0x673009e9) returned 1 [0084.842] GetROP2 (hdc=0xffffffffb901098e) returned 13 [0084.842] GetBkMode (hdc=0xffffffffb901098e) returned 2 [0084.842] SetBkMode (hdc=0xffffffffb901098e, mode=1) returned 2 [0084.842] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x513009de [0084.842] SelectObject (hdc=0xffffffffb901098e, h=0x513009de) returned 0x1b00017 [0084.842] MoveToEx (in: hdc=0xffffffffb901098e, x=1, y=21, lppt=0x218c0c8 | out: lppt=0x218c0c8) returned 1 [0084.842] LineTo (hdc=0xffffffffb901098e, x=24, y=21) returned 1 [0084.842] SetBkMode (hdc=0xffffffffb901098e, mode=2) returned 1 [0084.842] MoveToEx (in: hdc=0xffffffffb901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.842] GetROP2 (hdc=0xffffffffb901098e) returned 13 [0084.842] GetBkMode (hdc=0xffffffffb901098e) returned 2 [0084.842] SetBkMode (hdc=0xffffffffb901098e, mode=1) returned 2 [0084.842] SelectObject (hdc=0xffffffffb901098e, h=0x513009de) returned 0x513009de [0084.842] MoveToEx (in: hdc=0xffffffffb901098e, x=24, y=21, lppt=0x218c0e0 | out: lppt=0x218c0e0) returned 1 [0084.842] LineTo (hdc=0xffffffffb901098e, x=24, y=0) returned 1 [0084.842] SetBkMode (hdc=0xffffffffb901098e, mode=2) returned 1 [0084.843] MoveToEx (in: hdc=0xffffffffb901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.843] SelectObject (hdc=0xffffffffb901098e, h=0x1b00017) returned 0x513009de [0084.843] DeleteObject (ho=0x513009de) returned 1 [0084.843] RestoreDC (hdc=0xffffffffb901098e, nSavedDC=-1) returned 1 [0084.843] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffb901098e) returned 0x0 [0084.843] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0084.843] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0xffffffffb901098e, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.843] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffb901098e) returned 0x0 [0084.843] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0084.843] SelectObject (hdc=0xffffffffb901098e, h=0x185000f) returned 0x2405099f [0084.843] DeleteDC (hdc=0xffffffffb901098e) returned 1 [0084.843] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0084.843] EndPaint (hWnd=0x103ba, lpPaint=0x14e548) returned 1 [0084.843] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.843] IsWindowUnicode (hWnd=0x103bc) returned 1 [0084.843] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.844] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.844] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.844] BeginPaint (in: hWnd=0x103bc, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0084.844] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0084.844] CreateCompatibleDC (hdc=0xc0100ae) returned 0xffffffff880109e5 [0084.844] SelectObject (hdc=0xffffffff880109e5, h=0x2405099f) returned 0x185000f [0084.844] GdipCreateFromHDC (hdc=0xffffffff880109e5, graphics=0x14e528) returned 0x0 [0084.844] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0084.844] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0084.844] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0084.844] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.844] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0084.844] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486810 [0084.844] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486810) returned 0x0 [0084.844] LocalFree (hMem=0x1d486810) returned 0x0 [0084.844] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.844] GdipCreateRegion (region=0x14e550) returned 0x0 [0084.845] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.845] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0084.845] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0084.845] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd180dbd) returned 0x0 [0084.845] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.845] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0084.845] GetCurrentObject (hdc=0xffffffff880109e5, type=0x1) returned 0x1b00017 [0084.845] GetCurrentObject (hdc=0xffffffff880109e5, type=0x2) returned 0x1900010 [0084.845] GetCurrentObject (hdc=0xffffffff880109e5, type=0x7) returned 0x2405099f [0084.845] GetCurrentObject (hdc=0xffffffff880109e5, type=0x6) returned 0x18a0048 [0084.845] SaveDC (hdc=0xffffffff880109e5) returned 1 [0084.845] GetNearestColor (hdc=0xffffffff880109e5, color=0xf0f0f0) returned 0xf0f0f0 [0084.845] GetNearestColor (hdc=0xffffffff880109e5, color=0xa0a0a0) returned 0xa0a0a0 [0084.845] GetNearestColor (hdc=0xffffffff880109e5, color=0x696969) returned 0x696969 [0084.845] GetNearestColor (hdc=0xffffffff880109e5, color=0xa0a0a0) returned 0xa0a0a0 [0084.845] GetNearestColor (hdc=0xffffffff880109e5, color=0x0) returned 0x0 [0084.845] GetNearestColor (hdc=0xffffffff880109e5, color=0xffffff) returned 0xffffff [0084.845] GetNearestColor (hdc=0xffffffff880109e5, color=0xe5e5e5) returned 0xe5e5e5 [0084.846] GetNearestColor (hdc=0xffffffff880109e5, color=0xd8d8d8) returned 0xd8d8d8 [0084.846] GetNearestColor (hdc=0xffffffff880109e5, color=0x0) returned 0x0 [0084.846] RestoreDC (hdc=0xffffffff880109e5, nSavedDC=-1) returned 1 [0084.846] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff880109e5) returned 0x0 [0084.846] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÃ\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.846] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.846] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x218ca00) returned 0x0 [0084.846] GdipSetStringFormatAlign (format=0x1be57fb0, align=0x1) returned 0x0 [0084.846] GdipSetStringFormatLineAlign (format=0x1be57fb0, align=0x1) returned 0x0 [0084.846] GdipSetStringFormatHotkeyPrefix (format=0x1be57fb0, hotkeyPrefix=1) returned 0x0 [0084.846] GdipGetStringFormatFlags (format=0x1be57fb0, flags=0x14e378) returned 0x0 [0084.846] GdipGetStringFormatTrimming (format=0x1be57fb0, trimming=0x14e378) returned 0x0 [0084.846] GdipGetStringFormatHotkeyPrefix (format=0x1be57fb0, hotkeyPrefix=0x14e378) returned 0x0 [0084.846] GdipGetFontSize (font=0x1be57fb0, size=0x14e378) returned 0x0 [0084.847] GdipGetFontStyle (font=0x1be57fb0, style=0x14e378) returned 0x0 [0084.847] GdipDeleteStringFormat (format=0x1be57fb0) returned 0x0 [0084.847] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.847] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.847] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0084.847] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x218cb30) returned 0x0 [0084.847] GdipSetStringFormatFlags (format=0x1be57ca0, flags=0) returned 0x0 [0084.847] GdipSetStringFormatTrimming (format=0x1be57ca0, trimming=0x1) returned 0x0 [0084.847] GdipSetStringFormatHotkeyPrefix (format=0x1be57ca0, hotkeyPrefix=1) returned 0x0 [0084.847] GdipSetStringFormatAlign (format=0x1be57ca0, align=0x1) returned 0x0 [0084.847] GdipSetStringFormatLineAlign (format=0x1be57ca0, align=0x1) returned 0x0 [0084.847] GdipMeasureString (graphics=0x1be58070, string="6", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57ca0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0084.848] GdipDeleteStringFormat (format=0x1be57ca0) returned 0x0 [0084.848] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0084.848] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.848] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.848] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0084.848] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.848] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0084.848] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.848] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0084.849] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486a90 [0084.849] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486a90) returned 0x0 [0084.849] LocalFree (hMem=0x1d486a90) returned 0x0 [0084.849] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486750 [0084.849] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486750) returned 0x0 [0084.849] LocalFree (hMem=0x1d486750) returned 0x0 [0084.849] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.849] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0084.849] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0084.849] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0084.849] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.849] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0084.849] GetCurrentObject (hdc=0xffffffff880109e5, type=0x1) returned 0x1b00017 [0084.849] GetCurrentObject (hdc=0xffffffff880109e5, type=0x2) returned 0x1900010 [0084.849] GetCurrentObject (hdc=0xffffffff880109e5, type=0x7) returned 0x2405099f [0084.849] GetCurrentObject (hdc=0xffffffff880109e5, type=0x6) returned 0x18a0048 [0084.849] SaveDC (hdc=0xffffffff880109e5) returned 1 [0084.849] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8b0409d6 [0084.849] GetClipRgn (hdc=0xffffffff880109e5, hrgn=0xffffffff8b0409d6) returned 0 [0084.849] SelectClipRgn (hdc=0xffffffff880109e5, hrgn=0xffffffff9d0407ff) returned 2 [0084.850] DeleteObject (ho=0xffffffff8b0409d6) returned 1 [0084.850] DeleteObject (ho=0xffffffff9d0407ff) returned 1 [0084.850] OffsetViewportOrgEx (in: hdc=0xffffffff880109e5, x=0, y=0, lppt=0x218cef0 | out: lppt=0x218cef0) returned 1 [0084.850] GetNearestColor (hdc=0xffffffff880109e5, color=0xf0f0f0) returned 0xf0f0f0 [0084.850] CreateSolidBrush (color=0xf0f0f0) returned 0x6e1009b2 [0084.850] FillRect (hDC=0xffffffff880109e5, lprc=0x14e1c8, hbr=0x6e1009b2) returned 1 [0084.850] DeleteObject (ho=0x6e1009b2) returned 1 [0084.850] RestoreDC (hdc=0xffffffff880109e5, nSavedDC=-1) returned 1 [0084.850] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff880109e5) returned 0x0 [0084.850] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0084.850] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.850] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x218cff0) returned 0x0 [0084.850] GdipSetStringFormatAlign (format=0x1be57f40, align=0x1) returned 0x0 [0084.851] GdipSetStringFormatLineAlign (format=0x1be57f40, align=0x1) returned 0x0 [0084.851] GdipSetStringFormatHotkeyPrefix (format=0x1be57f40, hotkeyPrefix=1) returned 0x0 [0084.851] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0084.851] GdipDrawString (graphics=0x1be567f0, string="6", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57f40, brush=0x1be515e0) returned 0x0 [0084.851] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0084.851] GdipDeleteStringFormat (format=0x1be57f40) returned 0x0 [0084.851] GetFocus () returned 0x103c8 [0084.851] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÁ\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.851] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.851] GdipCreateRegion (region=0x14e030) returned 0x0 [0084.851] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.851] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0084.852] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.852] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0084.852] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486c50 [0084.852] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486c50) returned 0x0 [0084.852] LocalFree (hMem=0x1d486c50) returned 0x0 [0084.852] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d485f50 [0084.852] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d485f50) returned 0x0 [0084.852] LocalFree (hMem=0x1d485f50) returned 0x0 [0084.852] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.852] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0084.852] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0084.852] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0084.852] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.852] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0084.852] GetCurrentObject (hdc=0xffffffff880109e5, type=0x1) returned 0x1b00017 [0084.852] GetCurrentObject (hdc=0xffffffff880109e5, type=0x2) returned 0x1900010 [0084.852] GetCurrentObject (hdc=0xffffffff880109e5, type=0x7) returned 0x2405099f [0084.852] GetCurrentObject (hdc=0xffffffff880109e5, type=0x6) returned 0x18a0048 [0084.852] SaveDC (hdc=0xffffffff880109e5) returned 1 [0084.852] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9e0407ff [0084.852] GetClipRgn (hdc=0xffffffff880109e5, hrgn=0xffffffff9e0407ff) returned 0 [0084.853] SelectClipRgn (hdc=0xffffffff880109e5, hrgn=0xffffffff8c0409d6) returned 2 [0084.853] DeleteObject (ho=0xffffffff9e0407ff) returned 1 [0084.853] DeleteObject (ho=0xffffffff8c0409d6) returned 1 [0084.853] OffsetViewportOrgEx (in: hdc=0xffffffff880109e5, x=0, y=0, lppt=0x218d3d8 | out: lppt=0x218d3d8) returned 1 [0084.853] GetROP2 (hdc=0xffffffff880109e5) returned 13 [0084.853] GetBkMode (hdc=0xffffffff880109e5) returned 2 [0084.853] SetBkMode (hdc=0xffffffff880109e5, mode=1) returned 2 [0084.853] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x523009de [0084.853] SelectObject (hdc=0xffffffff880109e5, h=0x523009de) returned 0x1b00017 [0084.853] MoveToEx (in: hdc=0xffffffff880109e5, x=25, y=0, lppt=0x218d440 | out: lppt=0x218d440) returned 1 [0084.853] LineTo (hdc=0xffffffff880109e5, x=0, y=0) returned 1 [0084.853] SetBkMode (hdc=0xffffffff880109e5, mode=2) returned 1 [0084.853] MoveToEx (in: hdc=0xffffffff880109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.853] GetROP2 (hdc=0xffffffff880109e5) returned 13 [0084.853] GetBkMode (hdc=0xffffffff880109e5) returned 2 [0084.853] SetBkMode (hdc=0xffffffff880109e5, mode=1) returned 2 [0084.853] SelectObject (hdc=0xffffffff880109e5, h=0x523009de) returned 0x523009de [0084.853] MoveToEx (in: hdc=0xffffffff880109e5, x=0, y=0, lppt=0x218d458 | out: lppt=0x218d458) returned 1 [0084.853] LineTo (hdc=0xffffffff880109e5, x=0, y=22) returned 1 [0084.853] SetBkMode (hdc=0xffffffff880109e5, mode=2) returned 1 [0084.853] MoveToEx (in: hdc=0xffffffff880109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.854] SelectObject (hdc=0xffffffff880109e5, h=0x1b00017) returned 0x523009de [0084.854] DeleteObject (ho=0x523009de) returned 1 [0084.854] GetROP2 (hdc=0xffffffff880109e5) returned 13 [0084.854] GetBkMode (hdc=0xffffffff880109e5) returned 2 [0084.854] SetBkMode (hdc=0xffffffff880109e5, mode=1) returned 2 [0084.854] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x683009e9 [0084.854] SelectObject (hdc=0xffffffff880109e5, h=0x683009e9) returned 0x1b00017 [0084.854] MoveToEx (in: hdc=0xffffffff880109e5, x=0, y=22, lppt=0x218d4c0 | out: lppt=0x218d4c0) returned 1 [0084.854] LineTo (hdc=0xffffffff880109e5, x=25, y=22) returned 1 [0084.854] SetBkMode (hdc=0xffffffff880109e5, mode=2) returned 1 [0084.854] MoveToEx (in: hdc=0xffffffff880109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.854] GetROP2 (hdc=0xffffffff880109e5) returned 13 [0084.854] GetBkMode (hdc=0xffffffff880109e5) returned 2 [0084.854] SetBkMode (hdc=0xffffffff880109e5, mode=1) returned 2 [0084.854] SelectObject (hdc=0xffffffff880109e5, h=0x683009e9) returned 0x683009e9 [0084.854] MoveToEx (in: hdc=0xffffffff880109e5, x=25, y=22, lppt=0x218d4d8 | out: lppt=0x218d4d8) returned 1 [0084.854] LineTo (hdc=0xffffffff880109e5, x=25, y=-1) returned 1 [0084.854] SetBkMode (hdc=0xffffffff880109e5, mode=2) returned 1 [0084.854] MoveToEx (in: hdc=0xffffffff880109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.854] SelectObject (hdc=0xffffffff880109e5, h=0x1b00017) returned 0x683009e9 [0084.854] DeleteObject (ho=0x683009e9) returned 1 [0084.855] GetROP2 (hdc=0xffffffff880109e5) returned 13 [0084.855] GetBkMode (hdc=0xffffffff880109e5) returned 2 [0084.855] SetBkMode (hdc=0xffffffff880109e5, mode=1) returned 2 [0084.855] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x533009de [0084.855] SelectObject (hdc=0xffffffff880109e5, h=0x533009de) returned 0x1b00017 [0084.855] MoveToEx (in: hdc=0xffffffff880109e5, x=24, y=1, lppt=0x218d540 | out: lppt=0x218d540) returned 1 [0084.855] LineTo (hdc=0xffffffff880109e5, x=1, y=1) returned 1 [0084.855] SetBkMode (hdc=0xffffffff880109e5, mode=2) returned 1 [0084.855] MoveToEx (in: hdc=0xffffffff880109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.855] GetROP2 (hdc=0xffffffff880109e5) returned 13 [0084.855] GetBkMode (hdc=0xffffffff880109e5) returned 2 [0084.855] SetBkMode (hdc=0xffffffff880109e5, mode=1) returned 2 [0084.855] SelectObject (hdc=0xffffffff880109e5, h=0x533009de) returned 0x533009de [0084.855] MoveToEx (in: hdc=0xffffffff880109e5, x=1, y=1, lppt=0x218d558 | out: lppt=0x218d558) returned 1 [0084.855] LineTo (hdc=0xffffffff880109e5, x=1, y=21) returned 1 [0084.855] SetBkMode (hdc=0xffffffff880109e5, mode=2) returned 1 [0084.855] MoveToEx (in: hdc=0xffffffff880109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.855] SelectObject (hdc=0xffffffff880109e5, h=0x1b00017) returned 0x533009de [0084.855] DeleteObject (ho=0x533009de) returned 1 [0084.855] GetROP2 (hdc=0xffffffff880109e5) returned 13 [0084.855] GetBkMode (hdc=0xffffffff880109e5) returned 2 [0084.855] SetBkMode (hdc=0xffffffff880109e5, mode=1) returned 2 [0084.855] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x693009e9 [0084.856] SelectObject (hdc=0xffffffff880109e5, h=0x693009e9) returned 0x1b00017 [0084.856] MoveToEx (in: hdc=0xffffffff880109e5, x=1, y=21, lppt=0x218d5c0 | out: lppt=0x218d5c0) returned 1 [0084.856] LineTo (hdc=0xffffffff880109e5, x=24, y=21) returned 1 [0084.856] SetBkMode (hdc=0xffffffff880109e5, mode=2) returned 1 [0084.856] MoveToEx (in: hdc=0xffffffff880109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.856] GetROP2 (hdc=0xffffffff880109e5) returned 13 [0084.856] GetBkMode (hdc=0xffffffff880109e5) returned 2 [0084.856] SetBkMode (hdc=0xffffffff880109e5, mode=1) returned 2 [0084.856] SelectObject (hdc=0xffffffff880109e5, h=0x693009e9) returned 0x693009e9 [0084.856] MoveToEx (in: hdc=0xffffffff880109e5, x=24, y=21, lppt=0x218d5d8 | out: lppt=0x218d5d8) returned 1 [0084.856] LineTo (hdc=0xffffffff880109e5, x=24, y=0) returned 1 [0084.856] SetBkMode (hdc=0xffffffff880109e5, mode=2) returned 1 [0084.856] MoveToEx (in: hdc=0xffffffff880109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.856] SelectObject (hdc=0xffffffff880109e5, h=0x1b00017) returned 0x693009e9 [0084.856] DeleteObject (ho=0x693009e9) returned 1 [0084.856] RestoreDC (hdc=0xffffffff880109e5, nSavedDC=-1) returned 1 [0084.856] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff880109e5) returned 0x0 [0084.856] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0084.856] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0xffffffff880109e5, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.856] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff880109e5) returned 0x0 [0084.857] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0084.857] SelectObject (hdc=0xffffffff880109e5, h=0x185000f) returned 0x2405099f [0084.857] DeleteDC (hdc=0xffffffff880109e5) returned 1 [0084.857] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0084.857] EndPaint (hWnd=0x103bc, lpPaint=0x14e548) returned 1 [0084.857] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.857] IsWindowUnicode (hWnd=0x103be) returned 1 [0084.857] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.857] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.857] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.857] BeginPaint (in: hWnd=0x103be, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0084.857] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0084.857] CreateCompatibleDC (hdc=0x220106d6) returned 0x400109e8 [0084.857] SelectObject (hdc=0x400109e8, h=0x2405099f) returned 0x185000f [0084.858] GdipCreateFromHDC (hdc=0x400109e8, graphics=0x14e528) returned 0x0 [0084.858] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0084.858] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0084.858] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0084.858] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.858] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0084.858] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d485fd0 [0084.858] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d485fd0) returned 0x0 [0084.858] LocalFree (hMem=0x1d485fd0) returned 0x0 [0084.858] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.858] GdipCreateRegion (region=0x14e550) returned 0x0 [0084.858] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.858] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0084.858] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0084.858] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd150dbd) returned 0x0 [0084.858] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.858] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0084.858] GetCurrentObject (hdc=0x400109e8, type=0x1) returned 0x1b00017 [0084.858] GetCurrentObject (hdc=0x400109e8, type=0x2) returned 0x1900010 [0084.858] GetCurrentObject (hdc=0x400109e8, type=0x7) returned 0x2405099f [0084.859] GetCurrentObject (hdc=0x400109e8, type=0x6) returned 0x18a0048 [0084.859] SaveDC (hdc=0x400109e8) returned 1 [0084.859] GetNearestColor (hdc=0x400109e8, color=0xf0f0f0) returned 0xf0f0f0 [0084.859] GetNearestColor (hdc=0x400109e8, color=0xa0a0a0) returned 0xa0a0a0 [0084.859] GetNearestColor (hdc=0x400109e8, color=0x696969) returned 0x696969 [0084.859] GetNearestColor (hdc=0x400109e8, color=0xa0a0a0) returned 0xa0a0a0 [0084.859] GetNearestColor (hdc=0x400109e8, color=0x0) returned 0x0 [0084.859] GetNearestColor (hdc=0x400109e8, color=0xffffff) returned 0xffffff [0084.859] GetNearestColor (hdc=0x400109e8, color=0xe5e5e5) returned 0xe5e5e5 [0084.859] GetNearestColor (hdc=0x400109e8, color=0xd8d8d8) returned 0xd8d8d8 [0084.859] GetNearestColor (hdc=0x400109e8, color=0x0) returned 0x0 [0084.859] RestoreDC (hdc=0x400109e8, nSavedDC=-1) returned 1 [0084.859] GdipReleaseDC (graphics=0x1be567f0, hdc=0x400109e8) returned 0x0 [0084.860] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExØ\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.860] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.860] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x218def8) returned 0x0 [0084.860] GdipSetStringFormatAlign (format=0x1be57d10, align=0x1) returned 0x0 [0084.860] GdipSetStringFormatLineAlign (format=0x1be57d10, align=0x1) returned 0x0 [0084.860] GdipSetStringFormatHotkeyPrefix (format=0x1be57d10, hotkeyPrefix=1) returned 0x0 [0084.860] GdipGetStringFormatFlags (format=0x1be57d10, flags=0x14e378) returned 0x0 [0084.860] GdipGetStringFormatTrimming (format=0x1be57d10, trimming=0x14e378) returned 0x0 [0084.860] GdipGetStringFormatHotkeyPrefix (format=0x1be57d10, hotkeyPrefix=0x14e378) returned 0x0 [0084.860] GdipGetFontSize (font=0x1be57d10, size=0x14e378) returned 0x0 [0084.860] GdipGetFontStyle (font=0x1be57d10, style=0x14e378) returned 0x0 [0084.860] GdipDeleteStringFormat (format=0x1be57d10) returned 0x0 [0084.860] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.861] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.861] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0084.861] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x218e028) returned 0x0 [0084.861] GdipSetStringFormatFlags (format=0x1be57fb0, flags=0) returned 0x0 [0084.861] GdipSetStringFormatTrimming (format=0x1be57fb0, trimming=0x1) returned 0x0 [0084.861] GdipSetStringFormatHotkeyPrefix (format=0x1be57fb0, hotkeyPrefix=1) returned 0x0 [0084.861] GdipSetStringFormatAlign (format=0x1be57fb0, align=0x1) returned 0x0 [0084.861] GdipSetStringFormatLineAlign (format=0x1be57fb0, align=0x1) returned 0x0 [0084.861] GdipMeasureString (graphics=0x1be58070, string="9", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57fb0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0084.861] GdipDeleteStringFormat (format=0x1be57fb0) returned 0x0 [0084.861] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0084.862] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.862] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.862] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0084.862] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.862] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0084.862] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.862] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0084.862] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486e50 [0084.862] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486e50) returned 0x0 [0084.862] LocalFree (hMem=0x1d486e50) returned 0x0 [0084.862] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486e10 [0084.862] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486e10) returned 0x0 [0084.862] LocalFree (hMem=0x1d486e10) returned 0x0 [0084.862] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.862] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0084.862] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0084.863] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0084.863] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.863] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0084.863] GetCurrentObject (hdc=0x400109e8, type=0x1) returned 0x1b00017 [0084.863] GetCurrentObject (hdc=0x400109e8, type=0x2) returned 0x1900010 [0084.863] GetCurrentObject (hdc=0x400109e8, type=0x7) returned 0x2405099f [0084.863] GetCurrentObject (hdc=0x400109e8, type=0x6) returned 0x18a0048 [0084.863] SaveDC (hdc=0x400109e8) returned 1 [0084.863] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8d0409d6 [0084.863] GetClipRgn (hdc=0x400109e8, hrgn=0xffffffff8d0409d6) returned 0 [0084.863] SelectClipRgn (hdc=0x400109e8, hrgn=0xffffffff9f0407ff) returned 2 [0084.863] DeleteObject (ho=0xffffffff8d0409d6) returned 1 [0084.863] DeleteObject (ho=0xffffffff9f0407ff) returned 1 [0084.863] OffsetViewportOrgEx (in: hdc=0x400109e8, x=0, y=0, lppt=0x218e3e8 | out: lppt=0x218e3e8) returned 1 [0084.863] GetNearestColor (hdc=0x400109e8, color=0xf0f0f0) returned 0xf0f0f0 [0084.863] CreateSolidBrush (color=0xf0f0f0) returned 0x6f1009b2 [0084.863] FillRect (hDC=0x400109e8, lprc=0x14e1c8, hbr=0x6f1009b2) returned 1 [0084.863] DeleteObject (ho=0x6f1009b2) returned 1 [0084.863] RestoreDC (hdc=0x400109e8, nSavedDC=-1) returned 1 [0084.863] GdipReleaseDC (graphics=0x1be567f0, hdc=0x400109e8) returned 0x0 [0084.864] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.896] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0084.896] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.896] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x218e4e8) returned 0x0 [0084.896] GdipSetStringFormatAlign (format=0x1be57a70, align=0x1) returned 0x0 [0084.896] GdipSetStringFormatLineAlign (format=0x1be57a70, align=0x1) returned 0x0 [0084.896] GdipSetStringFormatHotkeyPrefix (format=0x1be57a70, hotkeyPrefix=1) returned 0x0 [0084.896] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0084.896] GdipDrawString (graphics=0x1be567f0, string="9", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57a70, brush=0x1be515e0) returned 0x0 [0084.897] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0084.897] GdipDeleteStringFormat (format=0x1be57a70) returned 0x0 [0084.897] GetFocus () returned 0x103c8 [0084.897] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÖ\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.897] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.897] GdipCreateRegion (region=0x14e030) returned 0x0 [0084.897] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.897] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0084.897] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.897] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0084.898] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4868d0 [0084.898] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4868d0) returned 0x0 [0084.898] LocalFree (hMem=0x1d4868d0) returned 0x0 [0084.898] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486690 [0084.898] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486690) returned 0x0 [0084.898] LocalFree (hMem=0x1d486690) returned 0x0 [0084.898] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.898] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0084.898] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0084.898] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0084.898] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.898] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0084.898] GetCurrentObject (hdc=0x400109e8, type=0x1) returned 0x1b00017 [0084.898] GetCurrentObject (hdc=0x400109e8, type=0x2) returned 0x1900010 [0084.898] GetCurrentObject (hdc=0x400109e8, type=0x7) returned 0x2405099f [0084.898] GetCurrentObject (hdc=0x400109e8, type=0x6) returned 0x18a0048 [0084.898] SaveDC (hdc=0x400109e8) returned 1 [0084.898] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa00407ff [0084.898] GetClipRgn (hdc=0x400109e8, hrgn=0xffffffffa00407ff) returned 0 [0084.898] SelectClipRgn (hdc=0x400109e8, hrgn=0xffffffff8e0409d6) returned 2 [0084.899] DeleteObject (ho=0xffffffffa00407ff) returned 1 [0084.899] DeleteObject (ho=0xffffffff8e0409d6) returned 1 [0084.899] OffsetViewportOrgEx (in: hdc=0x400109e8, x=0, y=0, lppt=0x218e8d0 | out: lppt=0x218e8d0) returned 1 [0084.899] GetROP2 (hdc=0x400109e8) returned 13 [0084.899] GetBkMode (hdc=0x400109e8) returned 2 [0084.899] SetBkMode (hdc=0x400109e8, mode=1) returned 2 [0084.899] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x6a3009e9 [0084.899] SelectObject (hdc=0x400109e8, h=0x6a3009e9) returned 0x1b00017 [0084.899] MoveToEx (in: hdc=0x400109e8, x=25, y=0, lppt=0x218e938 | out: lppt=0x218e938) returned 1 [0084.899] LineTo (hdc=0x400109e8, x=0, y=0) returned 1 [0084.899] SetBkMode (hdc=0x400109e8, mode=2) returned 1 [0084.899] MoveToEx (in: hdc=0x400109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.899] GetROP2 (hdc=0x400109e8) returned 13 [0084.899] GetBkMode (hdc=0x400109e8) returned 2 [0084.899] SetBkMode (hdc=0x400109e8, mode=1) returned 2 [0084.899] SelectObject (hdc=0x400109e8, h=0x6a3009e9) returned 0x6a3009e9 [0084.899] MoveToEx (in: hdc=0x400109e8, x=0, y=0, lppt=0x218e950 | out: lppt=0x218e950) returned 1 [0084.899] LineTo (hdc=0x400109e8, x=0, y=22) returned 1 [0084.899] SetBkMode (hdc=0x400109e8, mode=2) returned 1 [0084.899] MoveToEx (in: hdc=0x400109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.899] SelectObject (hdc=0x400109e8, h=0x1b00017) returned 0x6a3009e9 [0084.900] DeleteObject (ho=0x6a3009e9) returned 1 [0084.900] GetROP2 (hdc=0x400109e8) returned 13 [0084.900] GetBkMode (hdc=0x400109e8) returned 2 [0084.900] SetBkMode (hdc=0x400109e8, mode=1) returned 2 [0084.900] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x543009de [0084.900] SelectObject (hdc=0x400109e8, h=0x543009de) returned 0x1b00017 [0084.900] MoveToEx (in: hdc=0x400109e8, x=0, y=22, lppt=0x218e9b8 | out: lppt=0x218e9b8) returned 1 [0084.900] LineTo (hdc=0x400109e8, x=25, y=22) returned 1 [0084.900] SetBkMode (hdc=0x400109e8, mode=2) returned 1 [0084.900] MoveToEx (in: hdc=0x400109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.900] GetROP2 (hdc=0x400109e8) returned 13 [0084.900] GetBkMode (hdc=0x400109e8) returned 2 [0084.900] SetBkMode (hdc=0x400109e8, mode=1) returned 2 [0084.900] SelectObject (hdc=0x400109e8, h=0x543009de) returned 0x543009de [0084.900] MoveToEx (in: hdc=0x400109e8, x=25, y=22, lppt=0x218e9d0 | out: lppt=0x218e9d0) returned 1 [0084.900] LineTo (hdc=0x400109e8, x=25, y=-1) returned 1 [0084.900] SetBkMode (hdc=0x400109e8, mode=2) returned 1 [0084.900] MoveToEx (in: hdc=0x400109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.900] SelectObject (hdc=0x400109e8, h=0x1b00017) returned 0x543009de [0084.900] DeleteObject (ho=0x543009de) returned 1 [0084.900] GetROP2 (hdc=0x400109e8) returned 13 [0084.901] GetBkMode (hdc=0x400109e8) returned 2 [0084.901] SetBkMode (hdc=0x400109e8, mode=1) returned 2 [0084.901] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x6b3009e9 [0084.901] SelectObject (hdc=0x400109e8, h=0x6b3009e9) returned 0x1b00017 [0084.901] MoveToEx (in: hdc=0x400109e8, x=24, y=1, lppt=0x218ea38 | out: lppt=0x218ea38) returned 1 [0084.901] LineTo (hdc=0x400109e8, x=1, y=1) returned 1 [0084.901] SetBkMode (hdc=0x400109e8, mode=2) returned 1 [0084.901] MoveToEx (in: hdc=0x400109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.901] GetROP2 (hdc=0x400109e8) returned 13 [0084.901] GetBkMode (hdc=0x400109e8) returned 2 [0084.901] SetBkMode (hdc=0x400109e8, mode=1) returned 2 [0084.901] SelectObject (hdc=0x400109e8, h=0x6b3009e9) returned 0x6b3009e9 [0084.901] MoveToEx (in: hdc=0x400109e8, x=1, y=1, lppt=0x218ea50 | out: lppt=0x218ea50) returned 1 [0084.901] LineTo (hdc=0x400109e8, x=1, y=21) returned 1 [0084.901] SetBkMode (hdc=0x400109e8, mode=2) returned 1 [0084.901] MoveToEx (in: hdc=0x400109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.901] SelectObject (hdc=0x400109e8, h=0x1b00017) returned 0x6b3009e9 [0084.901] DeleteObject (ho=0x6b3009e9) returned 1 [0084.901] GetROP2 (hdc=0x400109e8) returned 13 [0084.901] GetBkMode (hdc=0x400109e8) returned 2 [0084.901] SetBkMode (hdc=0x400109e8, mode=1) returned 2 [0084.902] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x553009de [0084.902] SelectObject (hdc=0x400109e8, h=0x553009de) returned 0x1b00017 [0084.902] MoveToEx (in: hdc=0x400109e8, x=1, y=21, lppt=0x218eab8 | out: lppt=0x218eab8) returned 1 [0084.902] LineTo (hdc=0x400109e8, x=24, y=21) returned 1 [0084.902] SetBkMode (hdc=0x400109e8, mode=2) returned 1 [0084.902] MoveToEx (in: hdc=0x400109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.902] GetROP2 (hdc=0x400109e8) returned 13 [0084.902] GetBkMode (hdc=0x400109e8) returned 2 [0084.902] SetBkMode (hdc=0x400109e8, mode=1) returned 2 [0084.902] SelectObject (hdc=0x400109e8, h=0x553009de) returned 0x553009de [0084.902] MoveToEx (in: hdc=0x400109e8, x=24, y=21, lppt=0x218ead0 | out: lppt=0x218ead0) returned 1 [0084.902] LineTo (hdc=0x400109e8, x=24, y=0) returned 1 [0084.902] SetBkMode (hdc=0x400109e8, mode=2) returned 1 [0084.902] MoveToEx (in: hdc=0x400109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.902] SelectObject (hdc=0x400109e8, h=0x1b00017) returned 0x553009de [0084.902] DeleteObject (ho=0x553009de) returned 1 [0084.902] RestoreDC (hdc=0x400109e8, nSavedDC=-1) returned 1 [0084.902] GdipReleaseDC (graphics=0x1be567f0, hdc=0x400109e8) returned 0x0 [0084.902] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0084.902] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x400109e8, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.903] GdipReleaseDC (graphics=0x1be567f0, hdc=0x400109e8) returned 0x0 [0084.903] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0084.903] SelectObject (hdc=0x400109e8, h=0x185000f) returned 0x2405099f [0084.903] DeleteDC (hdc=0x400109e8) returned 1 [0084.903] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0084.903] EndPaint (hWnd=0x103be, lpPaint=0x14e548) returned 1 [0084.903] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.903] IsWindowUnicode (hWnd=0x103c0) returned 1 [0084.903] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.903] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.903] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.903] BeginPaint (in: hWnd=0x103c0, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0084.903] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0084.903] CreateCompatibleDC (hdc=0x1b0107ae) returned 0xffffffffc101098e [0084.903] SelectObject (hdc=0xffffffffc101098e, h=0x2405099f) returned 0x185000f [0084.904] GdipCreateFromHDC (hdc=0xffffffffc101098e, graphics=0x14e528) returned 0x0 [0084.904] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0084.904] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0084.904] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0084.904] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.904] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0084.904] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486710 [0084.904] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486710) returned 0x0 [0084.904] LocalFree (hMem=0x1d486710) returned 0x0 [0084.904] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.904] GdipCreateRegion (region=0x14e550) returned 0x0 [0084.904] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.904] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0084.904] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0084.904] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd120dbd) returned 0x0 [0084.904] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.904] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0084.904] GetCurrentObject (hdc=0xffffffffc101098e, type=0x1) returned 0x1b00017 [0084.904] GetCurrentObject (hdc=0xffffffffc101098e, type=0x2) returned 0x1900010 [0084.904] GetCurrentObject (hdc=0xffffffffc101098e, type=0x7) returned 0x2405099f [0084.905] GetCurrentObject (hdc=0xffffffffc101098e, type=0x6) returned 0x18a0048 [0084.905] SaveDC (hdc=0xffffffffc101098e) returned 1 [0084.905] GetNearestColor (hdc=0xffffffffc101098e, color=0xf0f0f0) returned 0xf0f0f0 [0084.905] GetNearestColor (hdc=0xffffffffc101098e, color=0xa0a0a0) returned 0xa0a0a0 [0084.905] GetNearestColor (hdc=0xffffffffc101098e, color=0x696969) returned 0x696969 [0084.905] GetNearestColor (hdc=0xffffffffc101098e, color=0xa0a0a0) returned 0xa0a0a0 [0084.905] GetNearestColor (hdc=0xffffffffc101098e, color=0x0) returned 0x0 [0084.905] GetNearestColor (hdc=0xffffffffc101098e, color=0xffffff) returned 0xffffff [0084.905] GetNearestColor (hdc=0xffffffffc101098e, color=0xe5e5e5) returned 0xe5e5e5 [0084.905] GetNearestColor (hdc=0xffffffffc101098e, color=0xd8d8d8) returned 0xd8d8d8 [0084.905] GetNearestColor (hdc=0xffffffffc101098e, color=0x0) returned 0x0 [0084.905] RestoreDC (hdc=0xffffffffc101098e, nSavedDC=-1) returned 1 [0084.905] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffc101098e) returned 0x0 [0084.905] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExí\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.906] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.906] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x218f3f0) returned 0x0 [0084.906] GdipSetStringFormatAlign (format=0x1be57a00, align=0x1) returned 0x0 [0084.906] GdipSetStringFormatLineAlign (format=0x1be57a00, align=0x1) returned 0x0 [0084.906] GdipSetStringFormatHotkeyPrefix (format=0x1be57a00, hotkeyPrefix=1) returned 0x0 [0084.906] GdipGetStringFormatFlags (format=0x1be57a00, flags=0x14e378) returned 0x0 [0084.906] GdipGetStringFormatTrimming (format=0x1be57a00, trimming=0x14e378) returned 0x0 [0084.906] GdipGetStringFormatHotkeyPrefix (format=0x1be57a00, hotkeyPrefix=0x14e378) returned 0x0 [0084.906] GdipGetFontSize (font=0x1be57a00, size=0x14e378) returned 0x0 [0084.906] GdipGetFontStyle (font=0x1be57a00, style=0x14e378) returned 0x0 [0084.906] GdipDeleteStringFormat (format=0x1be57a00) returned 0x0 [0084.906] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.906] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.907] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0084.907] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x218f520) returned 0x0 [0084.907] GdipSetStringFormatFlags (format=0x1be57d80, flags=0) returned 0x0 [0084.907] GdipSetStringFormatTrimming (format=0x1be57d80, trimming=0x1) returned 0x0 [0084.907] GdipSetStringFormatHotkeyPrefix (format=0x1be57d80, hotkeyPrefix=1) returned 0x0 [0084.907] GdipSetStringFormatAlign (format=0x1be57d80, align=0x1) returned 0x0 [0084.907] GdipSetStringFormatLineAlign (format=0x1be57d80, align=0x1) returned 0x0 [0084.907] GdipMeasureString (graphics=0x1be58070, string="3", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57d80, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0084.907] GdipDeleteStringFormat (format=0x1be57d80) returned 0x0 [0084.907] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0084.907] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.907] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.907] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0084.907] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.908] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0084.908] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.908] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0084.908] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486190 [0084.908] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486190) returned 0x0 [0084.908] LocalFree (hMem=0x1d486190) returned 0x0 [0084.908] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486690 [0084.908] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486690) returned 0x0 [0084.908] LocalFree (hMem=0x1d486690) returned 0x0 [0084.908] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.908] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0084.908] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0084.908] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0084.908] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.908] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0084.908] GetCurrentObject (hdc=0xffffffffc101098e, type=0x1) returned 0x1b00017 [0084.908] GetCurrentObject (hdc=0xffffffffc101098e, type=0x2) returned 0x1900010 [0084.908] GetCurrentObject (hdc=0xffffffffc101098e, type=0x7) returned 0x2405099f [0084.908] GetCurrentObject (hdc=0xffffffffc101098e, type=0x6) returned 0x18a0048 [0084.908] SaveDC (hdc=0xffffffffc101098e) returned 1 [0084.908] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8f0409d6 [0084.908] GetClipRgn (hdc=0xffffffffc101098e, hrgn=0xffffffff8f0409d6) returned 0 [0084.909] SelectClipRgn (hdc=0xffffffffc101098e, hrgn=0xffffffffa10407ff) returned 2 [0084.909] DeleteObject (ho=0xffffffff8f0409d6) returned 1 [0084.909] DeleteObject (ho=0xffffffffa10407ff) returned 1 [0084.909] OffsetViewportOrgEx (in: hdc=0xffffffffc101098e, x=0, y=0, lppt=0x218f8e0 | out: lppt=0x218f8e0) returned 1 [0084.909] GetNearestColor (hdc=0xffffffffc101098e, color=0xf0f0f0) returned 0xf0f0f0 [0084.909] CreateSolidBrush (color=0xf0f0f0) returned 0x701009b2 [0084.909] FillRect (hDC=0xffffffffc101098e, lprc=0x14e1c8, hbr=0x701009b2) returned 1 [0084.909] DeleteObject (ho=0x701009b2) returned 1 [0084.909] RestoreDC (hdc=0xffffffffc101098e, nSavedDC=-1) returned 1 [0084.909] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffc101098e) returned 0x0 [0084.909] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0084.909] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.910] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x218f9e0) returned 0x0 [0084.910] GdipSetStringFormatAlign (format=0x1be57e60, align=0x1) returned 0x0 [0084.910] GdipSetStringFormatLineAlign (format=0x1be57e60, align=0x1) returned 0x0 [0084.910] GdipSetStringFormatHotkeyPrefix (format=0x1be57e60, hotkeyPrefix=1) returned 0x0 [0084.910] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0084.910] GdipDrawString (graphics=0x1be567f0, string="3", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57e60, brush=0x1be515e0) returned 0x0 [0084.910] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0084.910] GdipDeleteStringFormat (format=0x1be57e60) returned 0x0 [0084.910] GetFocus () returned 0x103c8 [0084.910] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExë\x18\x02", lpUsedDefaultChar=0x0) returned 17 [0084.910] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.910] GdipCreateRegion (region=0x14e030) returned 0x0 [0084.911] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.911] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0084.911] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.911] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0084.911] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486910 [0084.911] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486910) returned 0x0 [0084.911] LocalFree (hMem=0x1d486910) returned 0x0 [0084.911] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486790 [0084.911] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486790) returned 0x0 [0084.911] LocalFree (hMem=0x1d486790) returned 0x0 [0084.911] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.911] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0084.911] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0084.911] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0084.911] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.912] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0084.912] GetCurrentObject (hdc=0xffffffffc101098e, type=0x1) returned 0x1b00017 [0084.912] GetCurrentObject (hdc=0xffffffffc101098e, type=0x2) returned 0x1900010 [0084.912] GetCurrentObject (hdc=0xffffffffc101098e, type=0x7) returned 0x2405099f [0084.912] GetCurrentObject (hdc=0xffffffffc101098e, type=0x6) returned 0x18a0048 [0084.912] SaveDC (hdc=0xffffffffc101098e) returned 1 [0084.912] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa20407ff [0084.912] GetClipRgn (hdc=0xffffffffc101098e, hrgn=0xffffffffa20407ff) returned 0 [0084.912] SelectClipRgn (hdc=0xffffffffc101098e, hrgn=0xffffffff900409d6) returned 2 [0084.912] DeleteObject (ho=0xffffffffa20407ff) returned 1 [0084.912] DeleteObject (ho=0xffffffff900409d6) returned 1 [0084.912] OffsetViewportOrgEx (in: hdc=0xffffffffc101098e, x=0, y=0, lppt=0x218fdc8 | out: lppt=0x218fdc8) returned 1 [0084.912] GetROP2 (hdc=0xffffffffc101098e) returned 13 [0084.912] GetBkMode (hdc=0xffffffffc101098e) returned 2 [0084.912] SetBkMode (hdc=0xffffffffc101098e, mode=1) returned 2 [0084.912] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x563009de [0084.912] SelectObject (hdc=0xffffffffc101098e, h=0x563009de) returned 0x1b00017 [0084.912] MoveToEx (in: hdc=0xffffffffc101098e, x=25, y=0, lppt=0x218fe30 | out: lppt=0x218fe30) returned 1 [0084.912] LineTo (hdc=0xffffffffc101098e, x=0, y=0) returned 1 [0084.912] SetBkMode (hdc=0xffffffffc101098e, mode=2) returned 1 [0084.913] MoveToEx (in: hdc=0xffffffffc101098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.913] GetROP2 (hdc=0xffffffffc101098e) returned 13 [0084.913] GetBkMode (hdc=0xffffffffc101098e) returned 2 [0084.913] SetBkMode (hdc=0xffffffffc101098e, mode=1) returned 2 [0084.913] SelectObject (hdc=0xffffffffc101098e, h=0x563009de) returned 0x563009de [0084.913] MoveToEx (in: hdc=0xffffffffc101098e, x=0, y=0, lppt=0x218fe48 | out: lppt=0x218fe48) returned 1 [0084.913] LineTo (hdc=0xffffffffc101098e, x=0, y=22) returned 1 [0084.913] SetBkMode (hdc=0xffffffffc101098e, mode=2) returned 1 [0084.913] MoveToEx (in: hdc=0xffffffffc101098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.913] SelectObject (hdc=0xffffffffc101098e, h=0x1b00017) returned 0x563009de [0084.913] DeleteObject (ho=0x563009de) returned 1 [0084.913] GetROP2 (hdc=0xffffffffc101098e) returned 13 [0084.913] GetBkMode (hdc=0xffffffffc101098e) returned 2 [0084.913] SetBkMode (hdc=0xffffffffc101098e, mode=1) returned 2 [0084.913] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x6c3009e9 [0084.913] SelectObject (hdc=0xffffffffc101098e, h=0x6c3009e9) returned 0x1b00017 [0084.913] MoveToEx (in: hdc=0xffffffffc101098e, x=0, y=22, lppt=0x218feb0 | out: lppt=0x218feb0) returned 1 [0084.913] LineTo (hdc=0xffffffffc101098e, x=25, y=22) returned 1 [0084.913] SetBkMode (hdc=0xffffffffc101098e, mode=2) returned 1 [0084.913] MoveToEx (in: hdc=0xffffffffc101098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.913] GetROP2 (hdc=0xffffffffc101098e) returned 13 [0084.914] GetBkMode (hdc=0xffffffffc101098e) returned 2 [0084.914] SetBkMode (hdc=0xffffffffc101098e, mode=1) returned 2 [0084.914] SelectObject (hdc=0xffffffffc101098e, h=0x6c3009e9) returned 0x6c3009e9 [0084.914] MoveToEx (in: hdc=0xffffffffc101098e, x=25, y=22, lppt=0x218fec8 | out: lppt=0x218fec8) returned 1 [0084.914] LineTo (hdc=0xffffffffc101098e, x=25, y=-1) returned 1 [0084.914] SetBkMode (hdc=0xffffffffc101098e, mode=2) returned 1 [0084.914] MoveToEx (in: hdc=0xffffffffc101098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.914] SelectObject (hdc=0xffffffffc101098e, h=0x1b00017) returned 0x6c3009e9 [0084.914] DeleteObject (ho=0x6c3009e9) returned 1 [0084.914] GetROP2 (hdc=0xffffffffc101098e) returned 13 [0084.914] GetBkMode (hdc=0xffffffffc101098e) returned 2 [0084.914] SetBkMode (hdc=0xffffffffc101098e, mode=1) returned 2 [0084.914] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x573009de [0084.914] SelectObject (hdc=0xffffffffc101098e, h=0x573009de) returned 0x1b00017 [0084.914] MoveToEx (in: hdc=0xffffffffc101098e, x=24, y=1, lppt=0x218ff30 | out: lppt=0x218ff30) returned 1 [0084.914] LineTo (hdc=0xffffffffc101098e, x=1, y=1) returned 1 [0084.914] SetBkMode (hdc=0xffffffffc101098e, mode=2) returned 1 [0084.914] MoveToEx (in: hdc=0xffffffffc101098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.914] GetROP2 (hdc=0xffffffffc101098e) returned 13 [0084.914] GetBkMode (hdc=0xffffffffc101098e) returned 2 [0084.915] SetBkMode (hdc=0xffffffffc101098e, mode=1) returned 2 [0084.915] SelectObject (hdc=0xffffffffc101098e, h=0x573009de) returned 0x573009de [0084.915] MoveToEx (in: hdc=0xffffffffc101098e, x=1, y=1, lppt=0x218ff48 | out: lppt=0x218ff48) returned 1 [0084.915] LineTo (hdc=0xffffffffc101098e, x=1, y=21) returned 1 [0084.915] SetBkMode (hdc=0xffffffffc101098e, mode=2) returned 1 [0084.915] MoveToEx (in: hdc=0xffffffffc101098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.915] SelectObject (hdc=0xffffffffc101098e, h=0x1b00017) returned 0x573009de [0084.915] DeleteObject (ho=0x573009de) returned 1 [0084.915] GetROP2 (hdc=0xffffffffc101098e) returned 13 [0084.915] GetBkMode (hdc=0xffffffffc101098e) returned 2 [0084.915] SetBkMode (hdc=0xffffffffc101098e, mode=1) returned 2 [0084.915] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x6d3009e9 [0084.915] SelectObject (hdc=0xffffffffc101098e, h=0x6d3009e9) returned 0x1b00017 [0084.915] MoveToEx (in: hdc=0xffffffffc101098e, x=1, y=21, lppt=0x218ffb0 | out: lppt=0x218ffb0) returned 1 [0084.915] LineTo (hdc=0xffffffffc101098e, x=24, y=21) returned 1 [0084.915] SetBkMode (hdc=0xffffffffc101098e, mode=2) returned 1 [0084.915] MoveToEx (in: hdc=0xffffffffc101098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.915] GetROP2 (hdc=0xffffffffc101098e) returned 13 [0084.915] GetBkMode (hdc=0xffffffffc101098e) returned 2 [0084.915] SetBkMode (hdc=0xffffffffc101098e, mode=1) returned 2 [0084.915] SelectObject (hdc=0xffffffffc101098e, h=0x6d3009e9) returned 0x6d3009e9 [0084.916] MoveToEx (in: hdc=0xffffffffc101098e, x=24, y=21, lppt=0x218ffc8 | out: lppt=0x218ffc8) returned 1 [0084.916] LineTo (hdc=0xffffffffc101098e, x=24, y=0) returned 1 [0084.916] SetBkMode (hdc=0xffffffffc101098e, mode=2) returned 1 [0084.916] MoveToEx (in: hdc=0xffffffffc101098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.916] SelectObject (hdc=0xffffffffc101098e, h=0x1b00017) returned 0x6d3009e9 [0084.916] DeleteObject (ho=0x6d3009e9) returned 1 [0084.916] RestoreDC (hdc=0xffffffffc101098e, nSavedDC=-1) returned 1 [0084.916] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffc101098e) returned 0x0 [0084.916] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0084.916] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0xffffffffc101098e, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.916] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffc101098e) returned 0x0 [0084.916] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0084.916] SelectObject (hdc=0xffffffffc101098e, h=0x185000f) returned 0x2405099f [0084.916] DeleteDC (hdc=0xffffffffc101098e) returned 1 [0084.916] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0084.916] EndPaint (hWnd=0x103c0, lpPaint=0x14e548) returned 1 [0084.917] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.917] IsWindowUnicode (hWnd=0x103c2) returned 1 [0084.917] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.917] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.917] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.917] BeginPaint (in: hWnd=0x103c2, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xc0100ae [0084.917] SelectPalette (hdc=0xc0100ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0084.917] CreateCompatibleDC (hdc=0xc0100ae) returned 0xffffffff900109e5 [0084.917] SelectObject (hdc=0xffffffff900109e5, h=0x2405099f) returned 0x185000f [0084.917] GdipCreateFromHDC (hdc=0xffffffff900109e5, graphics=0x14e528) returned 0x0 [0084.917] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0084.917] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0084.917] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0084.917] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.918] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0084.918] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486bd0 [0084.918] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486bd0) returned 0x0 [0084.918] LocalFree (hMem=0x1d486bd0) returned 0x0 [0084.918] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.918] GdipCreateRegion (region=0x14e550) returned 0x0 [0084.918] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.918] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0084.918] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0084.918] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd0f0dbd) returned 0x0 [0084.918] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.918] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0084.918] GetCurrentObject (hdc=0xffffffff900109e5, type=0x1) returned 0x1b00017 [0084.918] GetCurrentObject (hdc=0xffffffff900109e5, type=0x2) returned 0x1900010 [0084.918] GetCurrentObject (hdc=0xffffffff900109e5, type=0x7) returned 0x2405099f [0084.918] GetCurrentObject (hdc=0xffffffff900109e5, type=0x6) returned 0x18a0048 [0084.918] SaveDC (hdc=0xffffffff900109e5) returned 1 [0084.918] GetNearestColor (hdc=0xffffffff900109e5, color=0xf0f0f0) returned 0xf0f0f0 [0084.918] GetNearestColor (hdc=0xffffffff900109e5, color=0xa0a0a0) returned 0xa0a0a0 [0084.918] GetNearestColor (hdc=0xffffffff900109e5, color=0x696969) returned 0x696969 [0084.918] GetNearestColor (hdc=0xffffffff900109e5, color=0xa0a0a0) returned 0xa0a0a0 [0084.919] GetNearestColor (hdc=0xffffffff900109e5, color=0x0) returned 0x0 [0084.919] GetNearestColor (hdc=0xffffffff900109e5, color=0xffffff) returned 0xffffff [0084.919] GetNearestColor (hdc=0xffffffff900109e5, color=0xe5e5e5) returned 0xe5e5e5 [0084.919] GetNearestColor (hdc=0xffffffff900109e5, color=0xd8d8d8) returned 0xd8d8d8 [0084.919] GetNearestColor (hdc=0xffffffff900109e5, color=0x0) returned 0x0 [0084.919] RestoreDC (hdc=0xffffffff900109e5, nSavedDC=-1) returned 1 [0084.919] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff900109e5) returned 0x0 [0084.919] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x02\x19\x02", lpUsedDefaultChar=0x0) returned 17 [0084.919] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.919] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21908e8) returned 0x0 [0084.919] GdipSetStringFormatAlign (format=0x1be578b0, align=0x1) returned 0x0 [0084.919] GdipSetStringFormatLineAlign (format=0x1be578b0, align=0x1) returned 0x0 [0084.919] GdipSetStringFormatHotkeyPrefix (format=0x1be578b0, hotkeyPrefix=1) returned 0x0 [0084.920] GdipGetStringFormatFlags (format=0x1be578b0, flags=0x14e378) returned 0x0 [0084.920] GdipGetStringFormatTrimming (format=0x1be578b0, trimming=0x14e378) returned 0x0 [0084.920] GdipGetStringFormatHotkeyPrefix (format=0x1be578b0, hotkeyPrefix=0x14e378) returned 0x0 [0084.920] GdipGetFontSize (font=0x1be578b0, size=0x14e378) returned 0x0 [0084.920] GdipGetFontStyle (font=0x1be578b0, style=0x14e378) returned 0x0 [0084.920] GdipDeleteStringFormat (format=0x1be578b0) returned 0x0 [0084.920] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.920] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.920] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0084.920] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2190a18) returned 0x0 [0084.920] GdipSetStringFormatFlags (format=0x1be57a70, flags=0) returned 0x0 [0084.920] GdipSetStringFormatTrimming (format=0x1be57a70, trimming=0x1) returned 0x0 [0084.920] GdipSetStringFormatHotkeyPrefix (format=0x1be57a70, hotkeyPrefix=1) returned 0x0 [0084.921] GdipSetStringFormatAlign (format=0x1be57a70, align=0x1) returned 0x0 [0084.921] GdipSetStringFormatLineAlign (format=0x1be57a70, align=0x1) returned 0x0 [0084.921] GdipMeasureString (graphics=0x1be58070, string="5", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57a70, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0084.921] GdipDeleteStringFormat (format=0x1be57a70) returned 0x0 [0084.921] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0084.921] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.921] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.921] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0084.921] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.921] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0084.921] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.921] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0084.921] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d485f10 [0084.921] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d485f10) returned 0x0 [0084.921] LocalFree (hMem=0x1d485f10) returned 0x0 [0084.922] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486a90 [0084.922] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486a90) returned 0x0 [0084.922] LocalFree (hMem=0x1d486a90) returned 0x0 [0084.922] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.922] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0084.922] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0084.922] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0084.922] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.922] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0084.922] GetCurrentObject (hdc=0xffffffff900109e5, type=0x1) returned 0x1b00017 [0084.922] GetCurrentObject (hdc=0xffffffff900109e5, type=0x2) returned 0x1900010 [0084.922] GetCurrentObject (hdc=0xffffffff900109e5, type=0x7) returned 0x2405099f [0084.922] GetCurrentObject (hdc=0xffffffff900109e5, type=0x6) returned 0x18a0048 [0084.922] SaveDC (hdc=0xffffffff900109e5) returned 1 [0084.922] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff910409d6 [0084.922] GetClipRgn (hdc=0xffffffff900109e5, hrgn=0xffffffff910409d6) returned 0 [0084.922] SelectClipRgn (hdc=0xffffffff900109e5, hrgn=0xffffffffa30407ff) returned 2 [0084.922] DeleteObject (ho=0xffffffff910409d6) returned 1 [0084.922] DeleteObject (ho=0xffffffffa30407ff) returned 1 [0084.922] OffsetViewportOrgEx (in: hdc=0xffffffff900109e5, x=0, y=0, lppt=0x2190dd8 | out: lppt=0x2190dd8) returned 1 [0084.923] GetNearestColor (hdc=0xffffffff900109e5, color=0xf0f0f0) returned 0xf0f0f0 [0084.923] CreateSolidBrush (color=0xf0f0f0) returned 0x711009b2 [0084.923] FillRect (hDC=0xffffffff900109e5, lprc=0x14e1c8, hbr=0x711009b2) returned 1 [0084.923] DeleteObject (ho=0x711009b2) returned 1 [0084.923] RestoreDC (hdc=0xffffffff900109e5, nSavedDC=-1) returned 1 [0084.923] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff900109e5) returned 0x0 [0084.923] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.923] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0084.923] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.923] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2190ed8) returned 0x0 [0084.923] GdipSetStringFormatAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0084.923] GdipSetStringFormatLineAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0084.923] GdipSetStringFormatHotkeyPrefix (format=0x1be57ae0, hotkeyPrefix=1) returned 0x0 [0084.923] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0084.923] GdipDrawString (graphics=0x1be567f0, string="5", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57ae0, brush=0x1be515e0) returned 0x0 [0084.924] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0084.924] GdipDeleteStringFormat (format=0x1be57ae0) returned 0x0 [0084.924] GetFocus () returned 0x103c8 [0084.924] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.924] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.924] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.924] GdipCreateRegion (region=0x14e030) returned 0x0 [0084.924] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.924] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0084.925] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.925] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0084.925] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d4862d0 [0084.925] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d4862d0) returned 0x0 [0084.925] LocalFree (hMem=0x1d4862d0) returned 0x0 [0084.925] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486310 [0084.925] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486310) returned 0x0 [0084.925] LocalFree (hMem=0x1d486310) returned 0x0 [0084.925] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.925] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0084.925] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0084.925] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0084.925] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.925] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0084.925] GetCurrentObject (hdc=0xffffffff900109e5, type=0x1) returned 0x1b00017 [0084.925] GetCurrentObject (hdc=0xffffffff900109e5, type=0x2) returned 0x1900010 [0084.925] GetCurrentObject (hdc=0xffffffff900109e5, type=0x7) returned 0x2405099f [0084.925] GetCurrentObject (hdc=0xffffffff900109e5, type=0x6) returned 0x18a0048 [0084.925] SaveDC (hdc=0xffffffff900109e5) returned 1 [0084.925] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa40407ff [0084.926] GetClipRgn (hdc=0xffffffff900109e5, hrgn=0xffffffffa40407ff) returned 0 [0084.926] SelectClipRgn (hdc=0xffffffff900109e5, hrgn=0xffffffff920409d6) returned 2 [0084.926] DeleteObject (ho=0xffffffffa40407ff) returned 1 [0084.926] DeleteObject (ho=0xffffffff920409d6) returned 1 [0084.926] OffsetViewportOrgEx (in: hdc=0xffffffff900109e5, x=0, y=0, lppt=0x21912c0 | out: lppt=0x21912c0) returned 1 [0084.926] GetROP2 (hdc=0xffffffff900109e5) returned 13 [0084.926] GetBkMode (hdc=0xffffffff900109e5) returned 2 [0084.926] SetBkMode (hdc=0xffffffff900109e5, mode=1) returned 2 [0084.926] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x6e3009e9 [0084.926] SelectObject (hdc=0xffffffff900109e5, h=0x6e3009e9) returned 0x1b00017 [0084.926] MoveToEx (in: hdc=0xffffffff900109e5, x=25, y=0, lppt=0x2191328 | out: lppt=0x2191328) returned 1 [0084.926] LineTo (hdc=0xffffffff900109e5, x=0, y=0) returned 1 [0084.926] SetBkMode (hdc=0xffffffff900109e5, mode=2) returned 1 [0084.928] MoveToEx (in: hdc=0xffffffff900109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.928] GetROP2 (hdc=0xffffffff900109e5) returned 13 [0084.928] GetBkMode (hdc=0xffffffff900109e5) returned 2 [0084.928] SetBkMode (hdc=0xffffffff900109e5, mode=1) returned 2 [0084.928] SelectObject (hdc=0xffffffff900109e5, h=0x6e3009e9) returned 0x6e3009e9 [0084.928] MoveToEx (in: hdc=0xffffffff900109e5, x=0, y=0, lppt=0x2191340 | out: lppt=0x2191340) returned 1 [0084.928] LineTo (hdc=0xffffffff900109e5, x=0, y=22) returned 1 [0084.928] SetBkMode (hdc=0xffffffff900109e5, mode=2) returned 1 [0084.928] MoveToEx (in: hdc=0xffffffff900109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.928] SelectObject (hdc=0xffffffff900109e5, h=0x1b00017) returned 0x6e3009e9 [0084.928] DeleteObject (ho=0x6e3009e9) returned 1 [0084.928] GetROP2 (hdc=0xffffffff900109e5) returned 13 [0084.928] GetBkMode (hdc=0xffffffff900109e5) returned 2 [0084.928] SetBkMode (hdc=0xffffffff900109e5, mode=1) returned 2 [0084.928] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x583009de [0084.928] SelectObject (hdc=0xffffffff900109e5, h=0x583009de) returned 0x1b00017 [0084.929] MoveToEx (in: hdc=0xffffffff900109e5, x=0, y=22, lppt=0x21913a8 | out: lppt=0x21913a8) returned 1 [0084.929] LineTo (hdc=0xffffffff900109e5, x=25, y=22) returned 1 [0084.929] SetBkMode (hdc=0xffffffff900109e5, mode=2) returned 1 [0084.929] MoveToEx (in: hdc=0xffffffff900109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.929] GetROP2 (hdc=0xffffffff900109e5) returned 13 [0084.929] GetBkMode (hdc=0xffffffff900109e5) returned 2 [0084.929] SetBkMode (hdc=0xffffffff900109e5, mode=1) returned 2 [0084.929] SelectObject (hdc=0xffffffff900109e5, h=0x583009de) returned 0x583009de [0084.929] MoveToEx (in: hdc=0xffffffff900109e5, x=25, y=22, lppt=0x21913c0 | out: lppt=0x21913c0) returned 1 [0084.929] LineTo (hdc=0xffffffff900109e5, x=25, y=-1) returned 1 [0084.929] SetBkMode (hdc=0xffffffff900109e5, mode=2) returned 1 [0084.929] MoveToEx (in: hdc=0xffffffff900109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.929] SelectObject (hdc=0xffffffff900109e5, h=0x1b00017) returned 0x583009de [0084.929] DeleteObject (ho=0x583009de) returned 1 [0084.929] GetROP2 (hdc=0xffffffff900109e5) returned 13 [0084.929] GetBkMode (hdc=0xffffffff900109e5) returned 2 [0084.929] SetBkMode (hdc=0xffffffff900109e5, mode=1) returned 2 [0084.929] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x6f3009e9 [0084.929] SelectObject (hdc=0xffffffff900109e5, h=0x6f3009e9) returned 0x1b00017 [0084.929] MoveToEx (in: hdc=0xffffffff900109e5, x=24, y=1, lppt=0x2191428 | out: lppt=0x2191428) returned 1 [0084.930] LineTo (hdc=0xffffffff900109e5, x=1, y=1) returned 1 [0084.930] SetBkMode (hdc=0xffffffff900109e5, mode=2) returned 1 [0084.930] MoveToEx (in: hdc=0xffffffff900109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.930] GetROP2 (hdc=0xffffffff900109e5) returned 13 [0084.930] GetBkMode (hdc=0xffffffff900109e5) returned 2 [0084.930] SetBkMode (hdc=0xffffffff900109e5, mode=1) returned 2 [0084.930] SelectObject (hdc=0xffffffff900109e5, h=0x6f3009e9) returned 0x6f3009e9 [0084.930] MoveToEx (in: hdc=0xffffffff900109e5, x=1, y=1, lppt=0x2191440 | out: lppt=0x2191440) returned 1 [0084.930] LineTo (hdc=0xffffffff900109e5, x=1, y=21) returned 1 [0084.930] SetBkMode (hdc=0xffffffff900109e5, mode=2) returned 1 [0084.930] MoveToEx (in: hdc=0xffffffff900109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.930] SelectObject (hdc=0xffffffff900109e5, h=0x1b00017) returned 0x6f3009e9 [0084.930] DeleteObject (ho=0x6f3009e9) returned 1 [0084.930] GetROP2 (hdc=0xffffffff900109e5) returned 13 [0084.930] GetBkMode (hdc=0xffffffff900109e5) returned 2 [0084.930] SetBkMode (hdc=0xffffffff900109e5, mode=1) returned 2 [0084.930] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x593009de [0084.930] SelectObject (hdc=0xffffffff900109e5, h=0x593009de) returned 0x1b00017 [0084.930] MoveToEx (in: hdc=0xffffffff900109e5, x=1, y=21, lppt=0x21914a8 | out: lppt=0x21914a8) returned 1 [0084.930] LineTo (hdc=0xffffffff900109e5, x=24, y=21) returned 1 [0084.930] SetBkMode (hdc=0xffffffff900109e5, mode=2) returned 1 [0084.931] MoveToEx (in: hdc=0xffffffff900109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.931] GetROP2 (hdc=0xffffffff900109e5) returned 13 [0084.931] GetBkMode (hdc=0xffffffff900109e5) returned 2 [0084.931] SetBkMode (hdc=0xffffffff900109e5, mode=1) returned 2 [0084.931] SelectObject (hdc=0xffffffff900109e5, h=0x593009de) returned 0x593009de [0084.931] MoveToEx (in: hdc=0xffffffff900109e5, x=24, y=21, lppt=0x21914c0 | out: lppt=0x21914c0) returned 1 [0084.931] LineTo (hdc=0xffffffff900109e5, x=24, y=0) returned 1 [0084.931] SetBkMode (hdc=0xffffffff900109e5, mode=2) returned 1 [0084.931] MoveToEx (in: hdc=0xffffffff900109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.931] SelectObject (hdc=0xffffffff900109e5, h=0x1b00017) returned 0x593009de [0084.931] DeleteObject (ho=0x593009de) returned 1 [0084.931] RestoreDC (hdc=0xffffffff900109e5, nSavedDC=-1) returned 1 [0084.931] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff900109e5) returned 0x0 [0084.931] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0084.931] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=26, cy=23, hdcSrc=0xffffffff900109e5, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.931] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffff900109e5) returned 0x0 [0084.931] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0084.931] SelectObject (hdc=0xffffffff900109e5, h=0x185000f) returned 0x2405099f [0084.931] DeleteDC (hdc=0xffffffff900109e5) returned 1 [0084.932] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0084.932] EndPaint (hWnd=0x103c2, lpPaint=0x14e548) returned 1 [0084.932] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.932] IsWindowUnicode (hWnd=0x103c4) returned 1 [0084.932] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.932] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.932] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.932] BeginPaint (in: hWnd=0x103c4, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x220106d6 [0084.932] SelectPalette (hdc=0x220106d6, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0084.932] CreateCompatibleDC (hdc=0x220106d6) returned 0x480109e8 [0084.932] SelectObject (hdc=0x480109e8, h=0x2405099f) returned 0x185000f [0084.932] GdipCreateFromHDC (hdc=0x480109e8, graphics=0x14e528) returned 0x0 [0084.932] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0084.932] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0084.932] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0084.932] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.933] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e5b8) returned 0x0 [0084.933] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486850 [0084.933] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486850) returned 0x0 [0084.933] LocalFree (hMem=0x1d486850) returned 0x0 [0084.933] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.933] GdipCreateRegion (region=0x14e550) returned 0x0 [0084.933] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.933] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0084.933] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0084.933] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd0c0dbd) returned 0x0 [0084.933] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.933] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0084.933] GetCurrentObject (hdc=0x480109e8, type=0x1) returned 0x1b00017 [0084.933] GetCurrentObject (hdc=0x480109e8, type=0x2) returned 0x1900010 [0084.933] GetCurrentObject (hdc=0x480109e8, type=0x7) returned 0x2405099f [0084.933] GetCurrentObject (hdc=0x480109e8, type=0x6) returned 0x18a0048 [0084.933] SaveDC (hdc=0x480109e8) returned 1 [0084.933] GetNearestColor (hdc=0x480109e8, color=0xf0f0f0) returned 0xf0f0f0 [0084.933] GetNearestColor (hdc=0x480109e8, color=0xa0a0a0) returned 0xa0a0a0 [0084.933] GetNearestColor (hdc=0x480109e8, color=0x696969) returned 0x696969 [0084.934] GetNearestColor (hdc=0x480109e8, color=0xa0a0a0) returned 0xa0a0a0 [0084.934] GetNearestColor (hdc=0x480109e8, color=0x0) returned 0x0 [0084.934] GetNearestColor (hdc=0x480109e8, color=0xffffff) returned 0xffffff [0084.934] GetNearestColor (hdc=0x480109e8, color=0xe5e5e5) returned 0xe5e5e5 [0084.934] GetNearestColor (hdc=0x480109e8, color=0xd8d8d8) returned 0xd8d8d8 [0084.934] GetNearestColor (hdc=0x480109e8, color=0x0) returned 0x0 [0084.934] RestoreDC (hdc=0x480109e8, nSavedDC=-1) returned 1 [0084.934] GdipReleaseDC (graphics=0x1be567f0, hdc=0x480109e8) returned 0x0 [0084.934] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.934] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x17\x19\x02", lpUsedDefaultChar=0x0) returned 17 [0084.934] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.934] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2191de0) returned 0x0 [0084.934] GdipSetStringFormatAlign (format=0x1be57fb0, align=0x1) returned 0x0 [0084.935] GdipSetStringFormatLineAlign (format=0x1be57fb0, align=0x1) returned 0x0 [0084.935] GdipSetStringFormatHotkeyPrefix (format=0x1be57fb0, hotkeyPrefix=1) returned 0x0 [0084.935] GdipGetStringFormatFlags (format=0x1be57fb0, flags=0x14e378) returned 0x0 [0084.935] GdipGetStringFormatTrimming (format=0x1be57fb0, trimming=0x14e378) returned 0x0 [0084.935] GdipGetStringFormatHotkeyPrefix (format=0x1be57fb0, hotkeyPrefix=0x14e378) returned 0x0 [0084.935] GdipGetFontSize (font=0x1be57fb0, size=0x14e378) returned 0x0 [0084.935] GdipGetFontStyle (font=0x1be57fb0, style=0x14e378) returned 0x0 [0084.935] GdipDeleteStringFormat (format=0x1be57fb0) returned 0x0 [0084.935] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.935] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.935] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.935] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0084.936] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2191f10) returned 0x0 [0084.936] GdipSetStringFormatFlags (format=0x1be57a70, flags=0) returned 0x0 [0084.936] GdipSetStringFormatTrimming (format=0x1be57a70, trimming=0x1) returned 0x0 [0084.936] GdipSetStringFormatHotkeyPrefix (format=0x1be57a70, hotkeyPrefix=1) returned 0x0 [0084.936] GdipSetStringFormatAlign (format=0x1be57a70, align=0x1) returned 0x0 [0084.936] GdipSetStringFormatLineAlign (format=0x1be57a70, align=0x1) returned 0x0 [0084.936] GdipMeasureString (graphics=0x1be58070, string="2", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57a70, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0084.936] GdipDeleteStringFormat (format=0x1be57a70) returned 0x0 [0084.936] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0084.936] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.936] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.936] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.936] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0084.936] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.936] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0084.936] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.936] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e128) returned 0x0 [0084.937] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486990 [0084.937] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486990) returned 0x0 [0084.937] LocalFree (hMem=0x1d486990) returned 0x0 [0084.937] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486110 [0084.937] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486110) returned 0x0 [0084.937] LocalFree (hMem=0x1d486110) returned 0x0 [0084.937] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.937] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0084.937] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0084.937] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0084.937] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.938] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0084.938] GetCurrentObject (hdc=0x480109e8, type=0x1) returned 0x1b00017 [0084.938] GetCurrentObject (hdc=0x480109e8, type=0x2) returned 0x1900010 [0084.938] GetCurrentObject (hdc=0x480109e8, type=0x7) returned 0x2405099f [0084.938] GetCurrentObject (hdc=0x480109e8, type=0x6) returned 0x18a0048 [0084.938] SaveDC (hdc=0x480109e8) returned 1 [0084.938] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff930409d6 [0084.938] GetClipRgn (hdc=0x480109e8, hrgn=0xffffffff930409d6) returned 0 [0084.938] SelectClipRgn (hdc=0x480109e8, hrgn=0xffffffffa50407ff) returned 2 [0084.938] DeleteObject (ho=0xffffffff930409d6) returned 1 [0084.938] DeleteObject (ho=0xffffffffa50407ff) returned 1 [0084.938] OffsetViewportOrgEx (in: hdc=0x480109e8, x=0, y=0, lppt=0x21922d0 | out: lppt=0x21922d0) returned 1 [0084.938] GetNearestColor (hdc=0x480109e8, color=0xf0f0f0) returned 0xf0f0f0 [0084.938] CreateSolidBrush (color=0xf0f0f0) returned 0x721009b2 [0084.938] FillRect (hDC=0x480109e8, lprc=0x14e1c8, hbr=0x721009b2) returned 1 [0084.938] DeleteObject (ho=0x721009b2) returned 1 [0084.938] RestoreDC (hdc=0x480109e8, nSavedDC=-1) returned 1 [0084.938] GdipReleaseDC (graphics=0x1be567f0, hdc=0x480109e8) returned 0x0 [0084.939] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0084.939] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.939] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21923d0) returned 0x0 [0084.939] GdipSetStringFormatAlign (format=0x1be57990, align=0x1) returned 0x0 [0084.939] GdipSetStringFormatLineAlign (format=0x1be57990, align=0x1) returned 0x0 [0084.939] GdipSetStringFormatHotkeyPrefix (format=0x1be57990, hotkeyPrefix=1) returned 0x0 [0084.939] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0084.939] GdipDrawString (graphics=0x1be567f0, string="2", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57990, brush=0x1be515e0) returned 0x0 [0084.939] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0084.939] GdipDeleteStringFormat (format=0x1be57990) returned 0x0 [0084.939] GetFocus () returned 0x103c8 [0084.940] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x15\x19\x02", lpUsedDefaultChar=0x0) returned 17 [0084.940] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.940] GdipCreateRegion (region=0x14e030) returned 0x0 [0084.940] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.940] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0084.940] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.940] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e098) returned 0x0 [0084.940] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486510 [0084.940] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486510) returned 0x0 [0084.940] LocalFree (hMem=0x1d486510) returned 0x0 [0084.940] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486bd0 [0084.940] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486bd0) returned 0x0 [0084.940] LocalFree (hMem=0x1d486bd0) returned 0x0 [0084.940] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.940] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0084.941] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0084.941] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0084.941] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.941] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0084.941] GetCurrentObject (hdc=0x480109e8, type=0x1) returned 0x1b00017 [0084.941] GetCurrentObject (hdc=0x480109e8, type=0x2) returned 0x1900010 [0084.941] GetCurrentObject (hdc=0x480109e8, type=0x7) returned 0x2405099f [0084.941] GetCurrentObject (hdc=0x480109e8, type=0x6) returned 0x18a0048 [0084.941] SaveDC (hdc=0x480109e8) returned 1 [0084.941] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa60407ff [0084.941] GetClipRgn (hdc=0x480109e8, hrgn=0xffffffffa60407ff) returned 0 [0084.941] SelectClipRgn (hdc=0x480109e8, hrgn=0xffffffff940409d6) returned 2 [0084.941] DeleteObject (ho=0xffffffffa60407ff) returned 1 [0084.941] DeleteObject (ho=0xffffffff940409d6) returned 1 [0084.941] OffsetViewportOrgEx (in: hdc=0x480109e8, x=0, y=0, lppt=0x21927b8 | out: lppt=0x21927b8) returned 1 [0084.941] GetROP2 (hdc=0x480109e8) returned 13 [0084.941] GetBkMode (hdc=0x480109e8) returned 2 [0084.941] SetBkMode (hdc=0x480109e8, mode=1) returned 2 [0084.941] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x5a3009de [0084.942] SelectObject (hdc=0x480109e8, h=0x5a3009de) returned 0x1b00017 [0084.942] MoveToEx (in: hdc=0x480109e8, x=25, y=0, lppt=0x2192820 | out: lppt=0x2192820) returned 1 [0084.942] LineTo (hdc=0x480109e8, x=0, y=0) returned 1 [0084.942] SetBkMode (hdc=0x480109e8, mode=2) returned 1 [0084.942] MoveToEx (in: hdc=0x480109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.942] GetROP2 (hdc=0x480109e8) returned 13 [0084.942] GetBkMode (hdc=0x480109e8) returned 2 [0084.942] SetBkMode (hdc=0x480109e8, mode=1) returned 2 [0084.942] SelectObject (hdc=0x480109e8, h=0x5a3009de) returned 0x5a3009de [0084.942] MoveToEx (in: hdc=0x480109e8, x=0, y=0, lppt=0x2192838 | out: lppt=0x2192838) returned 1 [0084.942] LineTo (hdc=0x480109e8, x=0, y=22) returned 1 [0084.942] SetBkMode (hdc=0x480109e8, mode=2) returned 1 [0084.942] MoveToEx (in: hdc=0x480109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.942] SelectObject (hdc=0x480109e8, h=0x1b00017) returned 0x5a3009de [0084.943] DeleteObject (ho=0x5a3009de) returned 1 [0084.943] GetROP2 (hdc=0x480109e8) returned 13 [0084.943] GetBkMode (hdc=0x480109e8) returned 2 [0084.943] SetBkMode (hdc=0x480109e8, mode=1) returned 2 [0084.943] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x703009e9 [0084.943] SelectObject (hdc=0x480109e8, h=0x703009e9) returned 0x1b00017 [0084.943] MoveToEx (in: hdc=0x480109e8, x=0, y=22, lppt=0x21928a0 | out: lppt=0x21928a0) returned 1 [0084.943] LineTo (hdc=0x480109e8, x=25, y=22) returned 1 [0084.943] SetBkMode (hdc=0x480109e8, mode=2) returned 1 [0084.943] MoveToEx (in: hdc=0x480109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.943] GetROP2 (hdc=0x480109e8) returned 13 [0084.943] GetBkMode (hdc=0x480109e8) returned 2 [0084.943] SetBkMode (hdc=0x480109e8, mode=1) returned 2 [0084.943] SelectObject (hdc=0x480109e8, h=0x703009e9) returned 0x703009e9 [0084.943] MoveToEx (in: hdc=0x480109e8, x=25, y=22, lppt=0x21928b8 | out: lppt=0x21928b8) returned 1 [0084.943] LineTo (hdc=0x480109e8, x=25, y=-1) returned 1 [0084.943] SetBkMode (hdc=0x480109e8, mode=2) returned 1 [0084.943] MoveToEx (in: hdc=0x480109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.943] SelectObject (hdc=0x480109e8, h=0x1b00017) returned 0x703009e9 [0084.943] DeleteObject (ho=0x703009e9) returned 1 [0084.943] GetROP2 (hdc=0x480109e8) returned 13 [0084.943] GetBkMode (hdc=0x480109e8) returned 2 [0084.944] SetBkMode (hdc=0x480109e8, mode=1) returned 2 [0084.944] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x5b3009de [0084.944] SelectObject (hdc=0x480109e8, h=0x5b3009de) returned 0x1b00017 [0084.944] MoveToEx (in: hdc=0x480109e8, x=24, y=1, lppt=0x2192920 | out: lppt=0x2192920) returned 1 [0084.944] LineTo (hdc=0x480109e8, x=1, y=1) returned 1 [0084.944] SetBkMode (hdc=0x480109e8, mode=2) returned 1 [0084.944] MoveToEx (in: hdc=0x480109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.944] GetROP2 (hdc=0x480109e8) returned 13 [0084.944] GetBkMode (hdc=0x480109e8) returned 2 [0084.944] SetBkMode (hdc=0x480109e8, mode=1) returned 2 [0084.944] SelectObject (hdc=0x480109e8, h=0x5b3009de) returned 0x5b3009de [0084.944] MoveToEx (in: hdc=0x480109e8, x=1, y=1, lppt=0x2192938 | out: lppt=0x2192938) returned 1 [0084.944] LineTo (hdc=0x480109e8, x=1, y=21) returned 1 [0084.944] SetBkMode (hdc=0x480109e8, mode=2) returned 1 [0084.944] MoveToEx (in: hdc=0x480109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.944] SelectObject (hdc=0x480109e8, h=0x1b00017) returned 0x5b3009de [0084.944] DeleteObject (ho=0x5b3009de) returned 1 [0084.944] GetROP2 (hdc=0x480109e8) returned 13 [0084.944] GetBkMode (hdc=0x480109e8) returned 2 [0084.944] SetBkMode (hdc=0x480109e8, mode=1) returned 2 [0084.944] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x713009e9 [0084.945] SelectObject (hdc=0x480109e8, h=0x713009e9) returned 0x1b00017 [0084.945] MoveToEx (in: hdc=0x480109e8, x=1, y=21, lppt=0x21929a0 | out: lppt=0x21929a0) returned 1 [0084.945] LineTo (hdc=0x480109e8, x=24, y=21) returned 1 [0084.945] SetBkMode (hdc=0x480109e8, mode=2) returned 1 [0084.945] MoveToEx (in: hdc=0x480109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.945] GetROP2 (hdc=0x480109e8) returned 13 [0084.945] GetBkMode (hdc=0x480109e8) returned 2 [0084.945] SetBkMode (hdc=0x480109e8, mode=1) returned 2 [0084.945] SelectObject (hdc=0x480109e8, h=0x713009e9) returned 0x713009e9 [0084.945] MoveToEx (in: hdc=0x480109e8, x=24, y=21, lppt=0x21929b8 | out: lppt=0x21929b8) returned 1 [0084.945] LineTo (hdc=0x480109e8, x=24, y=0) returned 1 [0084.945] SetBkMode (hdc=0x480109e8, mode=2) returned 1 [0084.945] MoveToEx (in: hdc=0x480109e8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.945] SelectObject (hdc=0x480109e8, h=0x1b00017) returned 0x713009e9 [0084.945] DeleteObject (ho=0x713009e9) returned 1 [0084.945] RestoreDC (hdc=0x480109e8, nSavedDC=-1) returned 1 [0084.945] GdipReleaseDC (graphics=0x1be567f0, hdc=0x480109e8) returned 0x0 [0084.945] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0084.945] BitBlt (hdc=0x220106d6, x=0, y=0, cx=26, cy=23, hdcSrc=0x480109e8, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.945] GdipReleaseDC (graphics=0x1be567f0, hdc=0x480109e8) returned 0x0 [0084.946] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0084.946] SelectObject (hdc=0x480109e8, h=0x185000f) returned 0x2405099f [0084.946] DeleteDC (hdc=0x480109e8) returned 1 [0084.946] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0084.946] EndPaint (hWnd=0x103c4, lpPaint=0x14e548) returned 1 [0084.946] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.946] IsWindowUnicode (hWnd=0x103c6) returned 1 [0084.946] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.946] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.946] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.946] BeginPaint (in: hWnd=0x103c6, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0x1b0107ae [0084.946] SelectPalette (hdc=0x1b0107ae, hPal=0xffffffffcf0808c4, bForceBkgd=1) returned 0x188000b [0084.946] CreateCompatibleDC (hdc=0x1b0107ae) returned 0xffffffffc901098e [0084.946] SelectObject (hdc=0xffffffffc901098e, h=0x2405099f) returned 0x185000f [0084.946] GdipCreateFromHDC (hdc=0xffffffffc901098e, graphics=0x14e528) returned 0x0 [0084.947] GdipTranslateWorldTransform (graphics=0x1be567f0, dx=0x7ffcf3e0e692, dy=0xd1369ce48183, order=0x0) returned 0x0 [0084.947] GdipSetClipRectI (graphics=0x1be567f0, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0084.947] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0084.947] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.947] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e5b8) returned 0x0 [0084.947] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b90 [0084.947] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486b90) returned 0x0 [0084.947] LocalFree (hMem=0x1d486b90) returned 0x0 [0084.947] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.947] GdipCreateRegion (region=0x14e550) returned 0x0 [0084.947] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.947] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e5b0) returned 0x0 [0084.947] GdipSaveGraphics (graphics=0x1be567f0, state=0x14e650) returned 0x0 [0084.947] GdipRestoreGraphics (graphics=0x1be567f0, state=0xfffffffffd090dbd) returned 0x0 [0084.947] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.947] GdipGetDC (graphics=0x1be567f0, hdc=0x14e2c8) returned 0x0 [0084.947] GetCurrentObject (hdc=0xffffffffc901098e, type=0x1) returned 0x1b00017 [0084.947] GetCurrentObject (hdc=0xffffffffc901098e, type=0x2) returned 0x1900010 [0084.947] GetCurrentObject (hdc=0xffffffffc901098e, type=0x7) returned 0x2405099f [0084.947] GetCurrentObject (hdc=0xffffffffc901098e, type=0x6) returned 0x18a0048 [0084.947] SaveDC (hdc=0xffffffffc901098e) returned 1 [0084.948] GetNearestColor (hdc=0xffffffffc901098e, color=0xf0f0f0) returned 0xf0f0f0 [0084.948] GetNearestColor (hdc=0xffffffffc901098e, color=0xa0a0a0) returned 0xa0a0a0 [0084.948] GetNearestColor (hdc=0xffffffffc901098e, color=0x696969) returned 0x696969 [0084.948] GetNearestColor (hdc=0xffffffffc901098e, color=0xa0a0a0) returned 0xa0a0a0 [0084.948] GetNearestColor (hdc=0xffffffffc901098e, color=0x0) returned 0x0 [0084.948] GetNearestColor (hdc=0xffffffffc901098e, color=0xffffff) returned 0xffffff [0084.948] GetNearestColor (hdc=0xffffffffc901098e, color=0xe5e5e5) returned 0xe5e5e5 [0084.948] GetNearestColor (hdc=0xffffffffc901098e, color=0xd8d8d8) returned 0xd8d8d8 [0084.948] GetNearestColor (hdc=0xffffffffc901098e, color=0x0) returned 0x0 [0084.948] RestoreDC (hdc=0xffffffffc901098e, nSavedDC=-1) returned 1 [0084.948] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffc901098e) returned 0x0 [0084.948] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx,\x19\x02", lpUsedDefaultChar=0x0) returned 17 [0084.949] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.949] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21932d8) returned 0x0 [0084.949] GdipSetStringFormatAlign (format=0x1be57d80, align=0x1) returned 0x0 [0084.949] GdipSetStringFormatLineAlign (format=0x1be57d80, align=0x1) returned 0x0 [0084.949] GdipSetStringFormatHotkeyPrefix (format=0x1be57d80, hotkeyPrefix=1) returned 0x0 [0084.949] GdipGetStringFormatFlags (format=0x1be57d80, flags=0x14e378) returned 0x0 [0084.949] GdipGetStringFormatTrimming (format=0x1be57d80, trimming=0x14e378) returned 0x0 [0084.949] GdipGetStringFormatHotkeyPrefix (format=0x1be57d80, hotkeyPrefix=0x14e378) returned 0x0 [0084.949] GdipGetFontSize (font=0x1be57d80, size=0x14e378) returned 0x0 [0084.949] GdipGetFontStyle (font=0x1be57d80, style=0x14e378) returned 0x0 [0084.949] GdipDeleteStringFormat (format=0x1be57d80) returned 0x0 [0084.949] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.949] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.949] GdipCreateFromHDC (hdc=0x3b01099b, graphics=0x14dfe8) returned 0x0 [0084.950] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2193408) returned 0x0 [0084.950] GdipSetStringFormatFlags (format=0x1be57ae0, flags=0) returned 0x0 [0084.950] GdipSetStringFormatTrimming (format=0x1be57ae0, trimming=0x1) returned 0x0 [0084.950] GdipSetStringFormatHotkeyPrefix (format=0x1be57ae0, hotkeyPrefix=1) returned 0x0 [0084.950] GdipSetStringFormatAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0084.950] GdipSetStringFormatLineAlign (format=0x1be57ae0, align=0x1) returned 0x0 [0084.950] GdipMeasureString (graphics=0x1be58070, string="1", length=1, font=0x1ad3ed70, layoutRect=0x14dfb8, stringFormat=0x1be57ae0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0084.950] GdipDeleteStringFormat (format=0x1be57ae0) returned 0x0 [0084.950] GdipDeleteGraphics (graphics=0x1be58070) returned 0x0 [0084.950] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0084.951] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.951] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0084.951] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.951] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0084.951] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56ec0) returned 0x0 [0084.951] GdipIsMatrixIdentity (matrix=0x1be56ec0, result=0x14e128) returned 0x0 [0084.951] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486b90 [0084.951] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486b90) returned 0x0 [0084.951] LocalFree (hMem=0x1d486b90) returned 0x0 [0084.951] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486e10 [0084.951] GdipGetMatrixElements (matrix=0x1be56ec0, matrixOut=0x1d486e10) returned 0x0 [0084.951] LocalFree (hMem=0x1d486e10) returned 0x0 [0084.951] GdipDeleteMatrix (matrix=0x1be56ec0) returned 0x0 [0084.951] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e190) returned 0x0 [0084.951] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e150) returned 0x0 [0084.951] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e150) returned 0x0 [0084.951] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.951] GdipGetDC (graphics=0x1be567f0, hdc=0x14e198) returned 0x0 [0084.951] GetCurrentObject (hdc=0xffffffffc901098e, type=0x1) returned 0x1b00017 [0084.951] GetCurrentObject (hdc=0xffffffffc901098e, type=0x2) returned 0x1900010 [0084.951] GetCurrentObject (hdc=0xffffffffc901098e, type=0x7) returned 0x2405099f [0084.951] GetCurrentObject (hdc=0xffffffffc901098e, type=0x6) returned 0x18a0048 [0084.952] SaveDC (hdc=0xffffffffc901098e) returned 1 [0084.952] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff950409d6 [0084.952] GetClipRgn (hdc=0xffffffffc901098e, hrgn=0xffffffff950409d6) returned 0 [0084.952] SelectClipRgn (hdc=0xffffffffc901098e, hrgn=0xffffffffa70407ff) returned 2 [0084.952] DeleteObject (ho=0xffffffff950409d6) returned 1 [0084.952] DeleteObject (ho=0xffffffffa70407ff) returned 1 [0084.952] OffsetViewportOrgEx (in: hdc=0xffffffffc901098e, x=0, y=0, lppt=0x21937c8 | out: lppt=0x21937c8) returned 1 [0084.952] GetNearestColor (hdc=0xffffffffc901098e, color=0xf0f0f0) returned 0xf0f0f0 [0084.952] CreateSolidBrush (color=0xf0f0f0) returned 0x731009b2 [0084.952] FillRect (hDC=0xffffffffc901098e, lprc=0x14e1c8, hbr=0x731009b2) returned 1 [0084.952] DeleteObject (ho=0x731009b2) returned 1 [0084.952] RestoreDC (hdc=0xffffffffc901098e, nSavedDC=-1) returned 1 [0084.952] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffc901098e) returned 0x0 [0084.952] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x11\x02", lpUsedDefaultChar=0x0) returned 17 [0084.953] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.953] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21938c8) returned 0x0 [0084.953] GdipSetStringFormatAlign (format=0x1be57ca0, align=0x1) returned 0x0 [0084.953] GdipSetStringFormatLineAlign (format=0x1be57ca0, align=0x1) returned 0x0 [0084.953] GdipSetStringFormatHotkeyPrefix (format=0x1be57ca0, hotkeyPrefix=1) returned 0x0 [0084.953] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0084.953] GdipDrawString (graphics=0x1be567f0, string="1", length=1, font=0x1ad3ed70, layoutRect=0x14e338, stringFormat=0x1be57ca0, brush=0x1be515e0) returned 0x0 [0084.953] GdipDeleteBrush (brush=0x1be515e0) returned 0x0 [0084.953] GdipDeleteStringFormat (format=0x1be57ca0) returned 0x0 [0084.953] GetFocus () returned 0x103c8 [0084.957] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffcf40a0000 [0084.957] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx*\x19\x02", lpUsedDefaultChar=0x0) returned 17 [0084.957] GetProcAddress (hModule=0x7ffcf40a0000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.957] GdipCreateRegion (region=0x14e030) returned 0x0 [0084.957] GdipGetClip (graphics=0x1be567f0, region=0x1be515e0) returned 0x0 [0084.957] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0084.957] GdipGetWorldTransform (graphics=0x1be567f0, matrix=0x1be56e80) returned 0x0 [0084.957] GdipIsMatrixIdentity (matrix=0x1be56e80, result=0x14e098) returned 0x0 [0084.957] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486e10 [0084.957] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486e10) returned 0x0 [0084.957] LocalFree (hMem=0x1d486e10) returned 0x0 [0084.959] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d486cd0 [0084.959] GdipGetMatrixElements (matrix=0x1be56e80, matrixOut=0x1d486cd0) returned 0x0 [0084.959] LocalFree (hMem=0x1d486cd0) returned 0x0 [0084.959] GdipDeleteMatrix (matrix=0x1be56e80) returned 0x0 [0084.959] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e100) returned 0x0 [0084.959] GdipIsInfiniteRegion (region=0x1be515e0, graphics=0x1be567f0, result=0x14e0c0) returned 0x0 [0084.959] GdipGetRegionHRgn (region=0x1be515e0, graphics=0x1be567f0, hRgn=0x14e0c0) returned 0x0 [0084.959] GdipDeleteRegion (region=0x1be515e0) returned 0x0 [0084.959] GdipGetDC (graphics=0x1be567f0, hdc=0x14e108) returned 0x0 [0084.959] GetCurrentObject (hdc=0xffffffffc901098e, type=0x1) returned 0x1b00017 [0084.959] GetCurrentObject (hdc=0xffffffffc901098e, type=0x2) returned 0x1900010 [0084.959] GetCurrentObject (hdc=0xffffffffc901098e, type=0x7) returned 0x2405099f [0084.960] GetCurrentObject (hdc=0xffffffffc901098e, type=0x6) returned 0x18a0048 [0084.960] SaveDC (hdc=0xffffffffc901098e) returned 1 [0084.960] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa80407ff [0084.960] GetClipRgn (hdc=0xffffffffc901098e, hrgn=0xffffffffa80407ff) returned 0 [0084.960] SelectClipRgn (hdc=0xffffffffc901098e, hrgn=0xffffffff960409d6) returned 2 [0084.960] DeleteObject (ho=0xffffffffa80407ff) returned 1 [0084.960] DeleteObject (ho=0xffffffff960409d6) returned 1 [0084.960] OffsetViewportOrgEx (in: hdc=0xffffffffc901098e, x=0, y=0, lppt=0x2193cb0 | out: lppt=0x2193cb0) returned 1 [0084.960] GetROP2 (hdc=0xffffffffc901098e) returned 13 [0084.960] GetBkMode (hdc=0xffffffffc901098e) returned 2 [0084.960] SetBkMode (hdc=0xffffffffc901098e, mode=1) returned 2 [0084.960] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x723009e9 [0084.960] SelectObject (hdc=0xffffffffc901098e, h=0x723009e9) returned 0x1b00017 [0084.960] MoveToEx (in: hdc=0xffffffffc901098e, x=25, y=0, lppt=0x2193d18 | out: lppt=0x2193d18) returned 1 [0084.960] LineTo (hdc=0xffffffffc901098e, x=0, y=0) returned 1 [0084.960] SetBkMode (hdc=0xffffffffc901098e, mode=2) returned 1 [0084.960] MoveToEx (in: hdc=0xffffffffc901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.960] GetROP2 (hdc=0xffffffffc901098e) returned 13 [0084.960] GetBkMode (hdc=0xffffffffc901098e) returned 2 [0084.961] SetBkMode (hdc=0xffffffffc901098e, mode=1) returned 2 [0084.961] SelectObject (hdc=0xffffffffc901098e, h=0x723009e9) returned 0x723009e9 [0084.961] MoveToEx (in: hdc=0xffffffffc901098e, x=0, y=0, lppt=0x2193d30 | out: lppt=0x2193d30) returned 1 [0084.961] LineTo (hdc=0xffffffffc901098e, x=0, y=22) returned 1 [0084.961] SetBkMode (hdc=0xffffffffc901098e, mode=2) returned 1 [0084.961] MoveToEx (in: hdc=0xffffffffc901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.961] SelectObject (hdc=0xffffffffc901098e, h=0x1b00017) returned 0x723009e9 [0084.961] DeleteObject (ho=0x723009e9) returned 1 [0084.961] GetROP2 (hdc=0xffffffffc901098e) returned 13 [0084.961] GetBkMode (hdc=0xffffffffc901098e) returned 2 [0084.961] SetBkMode (hdc=0xffffffffc901098e, mode=1) returned 2 [0084.961] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x5c3009de [0084.961] SelectObject (hdc=0xffffffffc901098e, h=0x5c3009de) returned 0x1b00017 [0084.961] MoveToEx (in: hdc=0xffffffffc901098e, x=0, y=22, lppt=0x2193d98 | out: lppt=0x2193d98) returned 1 [0084.961] LineTo (hdc=0xffffffffc901098e, x=25, y=22) returned 1 [0084.961] SetBkMode (hdc=0xffffffffc901098e, mode=2) returned 1 [0084.961] MoveToEx (in: hdc=0xffffffffc901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.961] GetROP2 (hdc=0xffffffffc901098e) returned 13 [0084.961] GetBkMode (hdc=0xffffffffc901098e) returned 2 [0084.961] SetBkMode (hdc=0xffffffffc901098e, mode=1) returned 2 [0084.961] SelectObject (hdc=0xffffffffc901098e, h=0x5c3009de) returned 0x5c3009de [0084.962] MoveToEx (in: hdc=0xffffffffc901098e, x=25, y=22, lppt=0x2193db0 | out: lppt=0x2193db0) returned 1 [0084.962] LineTo (hdc=0xffffffffc901098e, x=25, y=-1) returned 1 [0084.962] SetBkMode (hdc=0xffffffffc901098e, mode=2) returned 1 [0084.962] MoveToEx (in: hdc=0xffffffffc901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.962] SelectObject (hdc=0xffffffffc901098e, h=0x1b00017) returned 0x5c3009de [0084.962] DeleteObject (ho=0x5c3009de) returned 1 [0084.962] GetROP2 (hdc=0xffffffffc901098e) returned 13 [0084.962] GetBkMode (hdc=0xffffffffc901098e) returned 2 [0084.962] SetBkMode (hdc=0xffffffffc901098e, mode=1) returned 2 [0084.962] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x733009e9 [0084.962] SelectObject (hdc=0xffffffffc901098e, h=0x733009e9) returned 0x1b00017 [0084.962] MoveToEx (in: hdc=0xffffffffc901098e, x=24, y=1, lppt=0x2193e18 | out: lppt=0x2193e18) returned 1 [0084.962] LineTo (hdc=0xffffffffc901098e, x=1, y=1) returned 1 [0084.962] SetBkMode (hdc=0xffffffffc901098e, mode=2) returned 1 [0084.962] MoveToEx (in: hdc=0xffffffffc901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.962] GetROP2 (hdc=0xffffffffc901098e) returned 13 [0084.962] GetBkMode (hdc=0xffffffffc901098e) returned 2 [0084.962] SetBkMode (hdc=0xffffffffc901098e, mode=1) returned 2 [0084.962] SelectObject (hdc=0xffffffffc901098e, h=0x733009e9) returned 0x733009e9 [0084.962] MoveToEx (in: hdc=0xffffffffc901098e, x=1, y=1, lppt=0x2193e30 | out: lppt=0x2193e30) returned 1 [0084.962] LineTo (hdc=0xffffffffc901098e, x=1, y=21) returned 1 [0084.963] SetBkMode (hdc=0xffffffffc901098e, mode=2) returned 1 [0084.963] MoveToEx (in: hdc=0xffffffffc901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.963] SelectObject (hdc=0xffffffffc901098e, h=0x1b00017) returned 0x733009e9 [0084.963] DeleteObject (ho=0x733009e9) returned 1 [0084.963] GetROP2 (hdc=0xffffffffc901098e) returned 13 [0084.963] GetBkMode (hdc=0xffffffffc901098e) returned 2 [0084.963] SetBkMode (hdc=0xffffffffc901098e, mode=1) returned 2 [0084.963] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x5d3009de [0084.963] SelectObject (hdc=0xffffffffc901098e, h=0x5d3009de) returned 0x1b00017 [0084.963] MoveToEx (in: hdc=0xffffffffc901098e, x=1, y=21, lppt=0x2193e98 | out: lppt=0x2193e98) returned 1 [0084.963] LineTo (hdc=0xffffffffc901098e, x=24, y=21) returned 1 [0084.963] SetBkMode (hdc=0xffffffffc901098e, mode=2) returned 1 [0084.963] MoveToEx (in: hdc=0xffffffffc901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.963] GetROP2 (hdc=0xffffffffc901098e) returned 13 [0084.963] GetBkMode (hdc=0xffffffffc901098e) returned 2 [0084.963] SetBkMode (hdc=0xffffffffc901098e, mode=1) returned 2 [0084.963] SelectObject (hdc=0xffffffffc901098e, h=0x5d3009de) returned 0x5d3009de [0084.963] MoveToEx (in: hdc=0xffffffffc901098e, x=24, y=21, lppt=0x2193eb0 | out: lppt=0x2193eb0) returned 1 [0084.963] LineTo (hdc=0xffffffffc901098e, x=24, y=0) returned 1 [0084.963] SetBkMode (hdc=0xffffffffc901098e, mode=2) returned 1 [0084.963] MoveToEx (in: hdc=0xffffffffc901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.964] SelectObject (hdc=0xffffffffc901098e, h=0x1b00017) returned 0x5d3009de [0084.964] DeleteObject (ho=0x5d3009de) returned 1 [0084.964] RestoreDC (hdc=0xffffffffc901098e, nSavedDC=-1) returned 1 [0084.964] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffc901098e) returned 0x0 [0084.964] GdipGetDC (graphics=0x1be567f0, hdc=0x14e568) returned 0x0 [0084.964] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=26, cy=23, hdcSrc=0xffffffffc901098e, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.964] GdipReleaseDC (graphics=0x1be567f0, hdc=0xffffffffc901098e) returned 0x0 [0084.964] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffcf0808c4 [0084.964] SelectObject (hdc=0xffffffffc901098e, h=0x185000f) returned 0x2405099f [0084.964] DeleteDC (hdc=0xffffffffc901098e) returned 1 [0084.964] GdipDeleteGraphics (graphics=0x1be567f0) returned 0x0 [0084.964] EndPaint (hWnd=0x103c6, lpPaint=0x14e548) returned 1 [0084.964] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.964] IsWindowUnicode (hWnd=0x103c8) returned 1 [0084.964] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.965] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.965] DispatchMessageW (lpMsg=0x14ef10) returned 0x1 [0084.965] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0084.965] SetTextColor (hdc=0xc0100ae, color=0x0) returned 0x0 [0084.965] SetBkColor (hdc=0xc0100ae, color=0xffffff) returned 0xffffff [0084.965] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.965] IsWindowUnicode (hWnd=0x103ca) returned 1 [0084.965] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0084.966] TranslateMessage (lpMsg=0x14ef10) returned 0 [0084.966] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0084.966] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0084.966] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0084.966] WaitMessage () returned 1 [0085.000] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0085.000] IsWindowUnicode (hWnd=0x103c8) returned 1 [0085.000] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0085.000] GetKeyState (nVirtKey=16) returned 0 [0085.000] GetKeyState (nVirtKey=17) returned 0 [0085.000] GetKeyState (nVirtKey=18) returned -128 [0085.000] SendMessageW (hWnd=0x103c8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0085.000] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0085.000] GetKeyState (nVirtKey=16) returned 0 [0085.000] GetKeyState (nVirtKey=17) returned 0 [0085.000] GetKeyState (nVirtKey=18) returned -128 [0085.001] TranslateMessage (lpMsg=0x14ef10) returned 1 [0085.001] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0085.001] GetKeyState (nVirtKey=16) returned 0 [0085.001] GetKeyState (nVirtKey=17) returned 0 [0085.001] GetKeyState (nVirtKey=18) returned -128 [0085.001] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0085.001] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0085.002] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0085.002] WaitMessage () returned 1 [0085.011] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0085.011] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0085.022] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0085.022] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x46, wParam=0x0, lParam=0x14ed60) returned 0x0 [0085.023] GetWindowPlacement (in: hWnd=0x20372, lpwndpl=0x14e908 | out: lpwndpl=0x14e908) returned 1 [0085.023] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x47, wParam=0x0, lParam=0x14ed60) returned 0x0 [0085.023] GetClientRect (in: hWnd=0x20372, lpRect=0x14e7a0 | out: lpRect=0x14e7a0) returned 1 [0085.023] GetWindowRect (in: hWnd=0x20372, lpRect=0x14e7a0 | out: lpRect=0x14e7a0) returned 1 [0085.024] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0085.024] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0085.024] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0085.025] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x47, wParam=0x0, lParam=0x14ed60) returned 0x0 [0085.025] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0085.027] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0085.027] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0085.027] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0085.028] NtdllDefWindowProc_W (hWnd=0x30304, Msg=0x1c, wParam=0x0, lParam=0x1090) returned 0x0 [0085.028] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20372, Msg=0x1c, wParam=0x0, lParam=0x1090) returned 0x0 [0085.028] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4a40, hWnd=0x20374, Msg=0x1c, wParam=0x0, lParam=0x1090) returned 0x0 [0085.029] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x1 [0085.029] SetTextColor (hdc=0xc0100ae, color=0x0) returned 0x0 [0085.029] SetBkColor (hdc=0xc0100ae, color=0xffffff) returned 0xffffff [0085.029] SendMessageW (hWnd=0x103c8, Msg=0x2111, wParam=0x20003c8, lParam=0x103c8) returned 0x0 [0085.030] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0085.031] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0085.031] CallWindowProcW (lpPrevWndFunc=0x7ffd0d9f4b20, hWnd=0x103c8, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0085.032] WaitMessage () returned 1 [0085.333] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0085.333] IsWindowUnicode (hWnd=0x103ca) returned 1 [0085.333] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0085.333] TranslateMessage (lpMsg=0x14ef10) returned 0 [0085.333] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0085.333] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0085.333] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0085.333] WaitMessage () Thread: id = 15 os_tid = 0xe18 Thread: id = 16 os_tid = 0xe14 Thread: id = 17 os_tid = 0xd90 [0061.148] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0061.148] RoInitialize () returned 0x1 [0061.148] RoUninitialize () returned 0x0 Thread: id = 25 os_tid = 0xd24 Thread: id = 26 os_tid = 0xc9c [0072.111] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0072.111] RoInitialize () returned 0x1 [0072.111] RoUninitialize () returned 0x0 [0073.763] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x51c00, lpName=0x0) returned 0x31c [0073.763] memcpy (in: _Dst=0x1ab20000, _Src=0x12187560, _Size=0x51c00 | out: _Dst=0x1ab20000) returned 0x1ab20000 [0073.870] GetEnvironmentVariableW (in: lpName="Temp", lpBuffer=0x1d77f1a0, nSize=0x80 | out: lpBuffer="") returned 0x24 [0073.876] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x1d77ed70, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0073.877] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\wwst.exe", nBufferLength=0x105, lpBuffer=0x1d77ed90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\wwst.exe", lpFilePart=0x0) returned 0x31 [0073.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1d77f270) returned 1 [0073.878] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\wwst.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\wwst.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0073.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1d77b5b0) returned 1 [0074.003] CoUninitialize () Thread: id = 27 os_tid = 0xc94 Thread: id = 28 os_tid = 0xc90 Thread: id = 29 os_tid = 0xc8c Process: id = "3" image_name = "wwst.exe" filename = "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\wwst.exe" page_root = "0x567ca000" os_pid = "0xdb0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13c4" cmd_line = "\"C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\wwst.exe\" " cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f213" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 649 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 650 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 651 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 652 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 653 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 654 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 655 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 656 start_va = 0x1c0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 657 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 658 start_va = 0x400000 end_va = 0x431fff monitored = 1 entry_point = 0x42d1be region_type = mapped_file name = "wwst.exe" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\wwst.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\wwst.exe") Region: id = 659 start_va = 0x77760000 end_va = 0x778dafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 660 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 661 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 662 start_va = 0x7fff0000 end_va = 0x7ffd0d94ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 663 start_va = 0x7ffd0d950000 end_va = 0x7ffd0db10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 664 start_va = 0x7ffd0db11000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffd0db11000" filename = "" Region: id = 725 start_va = 0x440000 end_va = 0x4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 726 start_va = 0x700a0000 end_va = 0x700effff monitored = 0 entry_point = 0x700b8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 727 start_va = 0x70020000 end_va = 0x70099fff monitored = 0 entry_point = 0x70033290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 745 start_va = 0x77340000 end_va = 0x7741ffff monitored = 0 entry_point = 0x77353980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 748 start_va = 0x700f0000 end_va = 0x700f7fff monitored = 0 entry_point = 0x700f17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 749 start_va = 0x4b0000 end_va = 0x76ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004b0000" filename = "" Region: id = 750 start_va = 0x6fd00000 end_va = 0x6fd58fff monitored = 1 entry_point = 0x6fd10780 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll") Region: id = 751 start_va = 0x77340000 end_va = 0x7741ffff monitored = 0 entry_point = 0x77353980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 765 start_va = 0x75580000 end_va = 0x756fdfff monitored = 0 entry_point = 0x75631b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 766 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 767 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 768 start_va = 0x4b0000 end_va = 0x56dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 769 start_va = 0x570000 end_va = 0x60ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 770 start_va = 0x670000 end_va = 0x76ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 771 start_va = 0x743e0000 end_va = 0x74471fff monitored = 0 entry_point = 0x74420380 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 783 start_va = 0x7fb00000 end_va = 0x7fea0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 784 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 785 start_va = 0x77420000 end_va = 0x7749afff monitored = 0 entry_point = 0x7743e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 794 start_va = 0x753c0000 end_va = 0x7547dfff monitored = 0 entry_point = 0x753f5630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 795 start_va = 0x440000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 796 start_va = 0x4a0000 end_va = 0x4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004a0000" filename = "" Region: id = 797 start_va = 0x770000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 798 start_va = 0x776b0000 end_va = 0x776f3fff monitored = 0 entry_point = 0x776c9d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 799 start_va = 0x74e90000 end_va = 0x74f3cfff monitored = 0 entry_point = 0x74ea4f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 800 start_va = 0x74490000 end_va = 0x744adfff monitored = 0 entry_point = 0x7449b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 801 start_va = 0x74480000 end_va = 0x74489fff monitored = 0 entry_point = 0x74482a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 802 start_va = 0x772c0000 end_va = 0x77317fff monitored = 0 entry_point = 0x773025c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 803 start_va = 0x870000 end_va = 0x9affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 813 start_va = 0x6fc80000 end_va = 0x6fcfcfff monitored = 1 entry_point = 0x6fc90db0 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll") Region: id = 815 start_va = 0x74df0000 end_va = 0x74e34fff monitored = 0 entry_point = 0x74e0de90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 819 start_va = 0x75700000 end_va = 0x758bcfff monitored = 0 entry_point = 0x757e2a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 820 start_va = 0x75210000 end_va = 0x7535efff monitored = 0 entry_point = 0x752c6820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 823 start_va = 0x74f40000 end_va = 0x75086fff monitored = 0 entry_point = 0x74f51cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 824 start_va = 0x1d0000 end_va = 0x1f9fff monitored = 0 entry_point = 0x1d5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 825 start_va = 0x9b0000 end_va = 0xb37fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009b0000" filename = "" Region: id = 826 start_va = 0x76df0000 end_va = 0x76e1afff monitored = 0 entry_point = 0x76df5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 832 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 833 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 834 start_va = 0xb40000 end_va = 0xcc0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b40000" filename = "" Region: id = 835 start_va = 0xcd0000 end_va = 0x20cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cd0000" filename = "" Region: id = 836 start_va = 0x570000 end_va = 0x59bfff monitored = 1 entry_point = 0x59d1be region_type = mapped_file name = "wwst.exe" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\wwst.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\wwst.exe") Region: id = 837 start_va = 0x600000 end_va = 0x60ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 838 start_va = 0x77320000 end_va = 0x7732bfff monitored = 0 entry_point = 0x77323930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 847 start_va = 0x6fc70000 end_va = 0x6fc77fff monitored = 0 entry_point = 0x6fc717b0 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 850 start_va = 0x20d0000 end_va = 0x27b0fff monitored = 1 entry_point = 0x20fcd70 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 854 start_va = 0x6f580000 end_va = 0x6fc60fff monitored = 1 entry_point = 0x6f5acd70 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 855 start_va = 0x6f480000 end_va = 0x6f574fff monitored = 0 entry_point = 0x6f4d4160 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\SysWOW64\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\syswow64\\msvcr120_clr0400.dll") Region: id = 857 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 858 start_va = 0x1f0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 860 start_va = 0x480000 end_va = 0x48ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 861 start_va = 0x490000 end_va = 0x49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000490000" filename = "" Region: id = 863 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 867 start_va = 0x580000 end_va = 0x58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 868 start_va = 0x590000 end_va = 0x59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 869 start_va = 0x5a0000 end_va = 0x5a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 870 start_va = 0x5b0000 end_va = 0x5b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 871 start_va = 0x870000 end_va = 0x97ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 872 start_va = 0x9a0000 end_va = 0x9affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009a0000" filename = "" Region: id = 873 start_va = 0x870000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 874 start_va = 0x970000 end_va = 0x97ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000970000" filename = "" Region: id = 875 start_va = 0x5c0000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 876 start_va = 0x20d0000 end_va = 0x21cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020d0000" filename = "" Region: id = 877 start_va = 0x610000 end_va = 0x61ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 878 start_va = 0x21d0000 end_va = 0x41cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021d0000" filename = "" Region: id = 879 start_va = 0x41d0000 end_va = 0x426ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000041d0000" filename = "" Region: id = 880 start_va = 0x610000 end_va = 0x64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 881 start_va = 0x4270000 end_va = 0x436ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004270000" filename = "" Region: id = 907 start_va = 0x4370000 end_va = 0x46a6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 914 start_va = 0x6e1c0000 end_va = 0x6f471fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\7582400666d289c016013ad0f6e0e3e6\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\7582400666d289c016013ad0f6e0e3e6\\mscorlib.ni.dll") Region: id = 916 start_va = 0x74720000 end_va = 0x7480afff monitored = 0 entry_point = 0x7475d650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 922 start_va = 0x46b0000 end_va = 0x4740fff monitored = 0 entry_point = 0x46e8cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 923 start_va = 0x650000 end_va = 0x65ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000650000" filename = "" Region: id = 936 start_va = 0x660000 end_va = 0x66ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000660000" filename = "" Region: id = 939 start_va = 0x6e140000 end_va = 0x6e1bffff monitored = 1 entry_point = 0x6e141180 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll") Region: id = 940 start_va = 0x774a0000 end_va = 0x77531fff monitored = 0 entry_point = 0x774d8cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 941 start_va = 0x870000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 942 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 1061 start_va = 0x6d770000 end_va = 0x6e13bfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\1be7a15b1f33bf22e4f53aaf45518c77\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\1be7a15b1f33bf22e4f53aaf45518c77\\system.ni.dll") Region: id = 1064 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 1082 start_va = 0x6ceb0000 end_va = 0x6d5d0fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\eb4cca4f06a15158c3f7e2c56516729b\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\eb4cca4f06a15158c3f7e2c56516729b\\system.core.ni.dll") Region: id = 1087 start_va = 0x6c140000 end_va = 0x6c230fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.configuration.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Configuration\\fe4b221b4109f0c78f57a792500699b5\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.configuration\\fe4b221b4109f0c78f57a792500699b5\\system.configuration.ni.dll") Region: id = 1110 start_va = 0x6ba20000 end_va = 0x6c13dfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.xml.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xml\\4fbda26d781323081b45526da6e87b35\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.xml\\4fbda26d781323081b45526da6e87b35\\system.xml.ni.dll") Region: id = 1125 start_va = 0x46b0000 end_va = 0x487ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000046b0000" filename = "" Region: id = 1129 start_va = 0x74810000 end_va = 0x74815fff monitored = 0 entry_point = 0x74811460 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 1302 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 1319 start_va = 0x71790000 end_va = 0x717a2fff monitored = 0 entry_point = 0x71799950 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 1320 start_va = 0x707c0000 end_va = 0x707eefff monitored = 0 entry_point = 0x707d95e0 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1321 start_va = 0x71ad0000 end_va = 0x71aeafff monitored = 0 entry_point = 0x71ad9050 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 1379 start_va = 0x880000 end_va = 0x88ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 1393 start_va = 0x75090000 end_va = 0x75207fff monitored = 0 entry_point = 0x750e8a90 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 1398 start_va = 0x76d60000 end_va = 0x76d6dfff monitored = 0 entry_point = 0x76d65410 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 1400 start_va = 0x880000 end_va = 0x889fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "crypt32.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\crypt32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\crypt32.dll.mui") Region: id = 1401 start_va = 0x75530000 end_va = 0x7553efff monitored = 0 entry_point = 0x75532e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 1403 start_va = 0x75960000 end_va = 0x76d5efff monitored = 0 entry_point = 0x75b1b990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 1404 start_va = 0x75540000 end_va = 0x75576fff monitored = 0 entry_point = 0x75543b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 1405 start_va = 0x74820000 end_va = 0x74d18fff monitored = 0 entry_point = 0x74a27610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 1406 start_va = 0x77230000 end_va = 0x772bcfff monitored = 0 entry_point = 0x77279b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 1407 start_va = 0x74e40000 end_va = 0x74e83fff monitored = 0 entry_point = 0x74e47410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 1408 start_va = 0x890000 end_va = 0x890fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000890000" filename = "" Region: id = 1409 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 1410 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 1411 start_va = 0x8b0000 end_va = 0x8b0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 1412 start_va = 0x8b0000 end_va = 0x8b8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Region: id = 1413 start_va = 0x8b0000 end_va = 0x8b0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 1414 start_va = 0x8b0000 end_va = 0x8b8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Region: id = 1415 start_va = 0x8b0000 end_va = 0x8b0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 1416 start_va = 0x8b0000 end_va = 0x8b8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Region: id = 1418 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 1419 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 1420 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1421 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 1422 start_va = 0x8f0000 end_va = 0x8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008f0000" filename = "" Region: id = 1423 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 1424 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1425 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1426 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 1427 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 1430 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 1431 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1433 start_va = 0x6b380000 end_va = 0x6b49cfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Management\\98d3949f9ba1a384939805aa5e47e933\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.management\\98d3949f9ba1a384939805aa5e47e933\\system.management.ni.dll") Region: id = 1435 start_va = 0x8f0000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008f0000" filename = "" Region: id = 1436 start_va = 0x930000 end_va = 0x96ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1437 start_va = 0x46b0000 end_va = 0x47affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000046b0000" filename = "" Region: id = 1438 start_va = 0x47b0000 end_va = 0x47effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047b0000" filename = "" Region: id = 1439 start_va = 0x4870000 end_va = 0x487ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004870000" filename = "" Region: id = 1440 start_va = 0x4880000 end_va = 0x497ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004880000" filename = "" Region: id = 1441 start_va = 0x4980000 end_va = 0x4a7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004980000" filename = "" Region: id = 1442 start_va = 0x6b370000 end_va = 0x6b37afff monitored = 1 entry_point = 0x6b3741f0 region_type = mapped_file name = "wminet_utils.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\WMINet_Utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\wminet_utils.dll") Region: id = 1443 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1444 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1445 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1446 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1447 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1448 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1449 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1450 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1451 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1452 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1453 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1454 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1455 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1456 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1457 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1458 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1459 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1460 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1461 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1462 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1463 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1464 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1465 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1466 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1467 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1468 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1469 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1470 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1471 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1472 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1473 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 1474 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1475 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 1476 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1477 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1478 start_va = 0x8c0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 1479 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 1480 start_va = 0x7fe60000 end_va = 0x7feaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fe60000" filename = "" Region: id = 1481 start_va = 0x7fe50000 end_va = 0x7fe5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fe50000" filename = "" Region: id = 1483 start_va = 0x8c0000 end_va = 0x8c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008c0000" filename = "" Region: id = 1484 start_va = 0x75480000 end_va = 0x75503fff monitored = 0 entry_point = 0x754a6220 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 1485 start_va = 0x8d0000 end_va = 0x8d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008d0000" filename = "" Region: id = 1486 start_va = 0x6b350000 end_va = 0x6b36bfff monitored = 0 entry_point = 0x6b35aa90 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\SysWOW64\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wmiutils.dll") Region: id = 1487 start_va = 0x6b2e0000 end_va = 0x6b346fff monitored = 0 entry_point = 0x6b2fb610 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\SysWOW64\\wbemcomn.dll" (normalized: "c:\\windows\\syswow64\\wbemcomn.dll") Region: id = 1488 start_va = 0x75360000 end_va = 0x753befff monitored = 0 entry_point = 0x75364af0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 1489 start_va = 0x6b2d0000 end_va = 0x6b2dcfff monitored = 0 entry_point = 0x6b2d3520 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\SysWOW64\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemprox.dll") Region: id = 1832 start_va = 0x6b2b0000 end_va = 0x6b2c0fff monitored = 0 entry_point = 0x6b2b8fa0 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\SysWOW64\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemsvc.dll") Region: id = 1833 start_va = 0x6b1f0000 end_va = 0x6b2aefff monitored = 0 entry_point = 0x6b221e80 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\SysWOW64\\wbem\\fastprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\fastprox.dll") Region: id = 2557 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 2559 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 2560 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 2561 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 2562 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 2570 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 2571 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 2572 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 2573 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 2574 start_va = 0x8a0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 2575 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 2576 start_va = 0x47f0000 end_va = 0x482ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047f0000" filename = "" Region: id = 2577 start_va = 0x4a80000 end_va = 0x4b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a80000" filename = "" Region: id = 2578 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 2579 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 2580 start_va = 0x4830000 end_va = 0x486ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004830000" filename = "" Region: id = 2581 start_va = 0x4b80000 end_va = 0x4c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b80000" filename = "" Region: id = 2582 start_va = 0x990000 end_va = 0x99ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000990000" filename = "" Region: id = 2583 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 2584 start_va = 0x4c80000 end_va = 0x4cbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004c80000" filename = "" Region: id = 2585 start_va = 0x4cc0000 end_va = 0x4dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004cc0000" filename = "" Region: id = 2586 start_va = 0x6b570000 end_va = 0x6b597fff monitored = 0 entry_point = 0x6b577820 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 2587 start_va = 0x6b4f0000 end_va = 0x6b560fff monitored = 0 entry_point = 0x6b5469e0 region_type = mapped_file name = "efswrt.dll" filename = "\\Windows\\SysWOW64\\efswrt.dll" (normalized: "c:\\windows\\syswow64\\efswrt.dll") Region: id = 2588 start_va = 0x70170000 end_va = 0x70237fff monitored = 0 entry_point = 0x701dae90 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\SysWOW64\\WinTypes.dll" (normalized: "c:\\windows\\syswow64\\wintypes.dll") Region: id = 2589 start_va = 0x8b0000 end_va = 0x8b3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 2590 start_va = 0x6b4a0000 end_va = 0x6b4e8fff monitored = 0 entry_point = 0x6b4a6450 region_type = mapped_file name = "edputil.dll" filename = "\\Windows\\SysWOW64\\edputil.dll" (normalized: "c:\\windows\\syswow64\\edputil.dll") Region: id = 2591 start_va = 0x4dc0000 end_va = 0x4dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004dc0000" filename = "" Region: id = 2592 start_va = 0x4e00000 end_va = 0x4efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004e00000" filename = "" Region: id = 2593 start_va = 0x47f0000 end_va = 0x482ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047f0000" filename = "" Region: id = 2594 start_va = 0x4a80000 end_va = 0x4b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a80000" filename = "" Region: id = 2595 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 2596 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 2597 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 2598 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 2599 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 2600 start_va = 0x4a80000 end_va = 0x4b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a80000" filename = "" Region: id = 2601 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 2602 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 2603 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 2604 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 2605 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 2606 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 2607 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 2608 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 2609 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Thread: id = 14 os_tid = 0xd94 [0065.135] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0065.151] RoInitialize () returned 0x1 [0065.152] RoUninitialize () returned 0x0 [0069.674] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x19ee40, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0069.675] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\wwst.exe.config", nBufferLength=0x105, lpBuffer=0x19ee54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\wwst.exe.config", lpFilePart=0x0) returned 0x38 [0069.788] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x19dd70 | out: phkResult=0x19dd70*=0x0) returned 0x2 [0070.719] GetCurrentProcess () returned 0xffffffff [0070.719] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19f1b4 | out: TokenHandle=0x19f1b4*=0x268) returned 1 [0070.723] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x19ec4c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0070.730] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x19f1ac | out: lpFileInformation=0x19f1ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0070.732] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x19ec18, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0070.733] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x19f1b4 | out: lpFileInformation=0x19f1b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0070.734] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x19ebb4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0070.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f0ec) returned 1 [0070.735] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x26c [0070.736] GetFileType (hFile=0x26c) returned 0x1 [0070.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f0e8) returned 1 [0070.736] GetFileType (hFile=0x26c) returned 0x1 [0070.794] GetFileSize (in: hFile=0x26c, lpFileSizeHigh=0x19f1a8 | out: lpFileSizeHigh=0x19f1a8*=0x0) returned 0x8c8f [0070.795] ReadFile (in: hFile=0x26c, lpBuffer=0x21d8850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f164, lpOverlapped=0x0 | out: lpBuffer=0x21d8850*, lpNumberOfBytesRead=0x19f164*=0x1000, lpOverlapped=0x0) returned 1 [0070.890] ReadFile (in: hFile=0x26c, lpBuffer=0x21d8850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19f014, lpOverlapped=0x0 | out: lpBuffer=0x21d8850*, lpNumberOfBytesRead=0x19f014*=0x1000, lpOverlapped=0x0) returned 1 [0070.891] ReadFile (in: hFile=0x26c, lpBuffer=0x21d8850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19eec8, lpOverlapped=0x0 | out: lpBuffer=0x21d8850*, lpNumberOfBytesRead=0x19eec8*=0x1000, lpOverlapped=0x0) returned 1 [0070.892] ReadFile (in: hFile=0x26c, lpBuffer=0x21d8850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19eec8, lpOverlapped=0x0 | out: lpBuffer=0x21d8850*, lpNumberOfBytesRead=0x19eec8*=0x1000, lpOverlapped=0x0) returned 1 [0070.892] ReadFile (in: hFile=0x26c, lpBuffer=0x21d8850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19eec8, lpOverlapped=0x0 | out: lpBuffer=0x21d8850*, lpNumberOfBytesRead=0x19eec8*=0x1000, lpOverlapped=0x0) returned 1 [0070.892] ReadFile (in: hFile=0x26c, lpBuffer=0x21d8850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19ee00, lpOverlapped=0x0 | out: lpBuffer=0x21d8850*, lpNumberOfBytesRead=0x19ee00*=0x1000, lpOverlapped=0x0) returned 1 [0070.897] ReadFile (in: hFile=0x26c, lpBuffer=0x21d8850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19ef80, lpOverlapped=0x0 | out: lpBuffer=0x21d8850*, lpNumberOfBytesRead=0x19ef80*=0x1000, lpOverlapped=0x0) returned 1 [0070.899] ReadFile (in: hFile=0x26c, lpBuffer=0x21d8850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19ee90, lpOverlapped=0x0 | out: lpBuffer=0x21d8850*, lpNumberOfBytesRead=0x19ee90*=0x1000, lpOverlapped=0x0) returned 1 [0070.899] ReadFile (in: hFile=0x26c, lpBuffer=0x21d8850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19ee90, lpOverlapped=0x0 | out: lpBuffer=0x21d8850*, lpNumberOfBytesRead=0x19ee90*=0xc8f, lpOverlapped=0x0) returned 1 [0070.899] ReadFile (in: hFile=0x26c, lpBuffer=0x21d8850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19ef50, lpOverlapped=0x0 | out: lpBuffer=0x21d8850*, lpNumberOfBytesRead=0x19ef50*=0x0, lpOverlapped=0x0) returned 1 [0070.899] CloseHandle (hObject=0x26c) returned 1 [0070.900] GetCurrentProcess () returned 0xffffffff [0070.900] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19f2f8 | out: TokenHandle=0x19f2f8*=0x26c) returned 1 [0070.901] GetCurrentProcess () returned 0xffffffff [0070.901] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19f2f8 | out: TokenHandle=0x19f2f8*=0x270) returned 1 [0070.901] GetCurrentProcess () returned 0xffffffff [0070.901] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19f1b4 | out: TokenHandle=0x19f1b4*=0x274) returned 1 [0070.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\wwst.exe.config" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\wwst.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x19f1ac | out: lpFileInformation=0x19f1ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0070.902] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\wwst.exe.config", nBufferLength=0x105, lpBuffer=0x19ec18, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\wwst.exe.config", lpFilePart=0x0) returned 0x38 [0070.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\wwst.exe.config" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\wwst.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x19f1b4 | out: lpFileInformation=0x19f1b4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0070.902] GetCurrentProcess () returned 0xffffffff [0070.902] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19f2f8 | out: TokenHandle=0x19f2f8*=0x278) returned 1 [0070.903] GetCurrentProcess () returned 0xffffffff [0070.903] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19f2f8 | out: TokenHandle=0x19f2f8*=0x27c) returned 1 [0070.950] GetCurrentProcess () returned 0xffffffff [0070.950] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19f158 | out: TokenHandle=0x19f158*=0x280) returned 1 [0070.996] GetCurrentProcess () returned 0xffffffff [0070.996] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19f168 | out: TokenHandle=0x19f168*=0x284) returned 1 [0071.020] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x288 [0071.020] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x28c [0071.117] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e5ec | out: phkResult=0x19e5ec*=0x290) returned 0x0 [0071.117] RegQueryValueExW (in: hKey=0x290, lpValueName="InstallationType", lpReserved=0x0, lpType=0x19e60c, lpData=0x0, lpcbData=0x19e608*=0x0 | out: lpType=0x19e60c*=0x1, lpData=0x0, lpcbData=0x19e608*=0xe) returned 0x0 [0071.118] RegQueryValueExW (in: hKey=0x290, lpValueName="InstallationType", lpReserved=0x0, lpType=0x19e60c, lpData=0x21f4324, lpcbData=0x19e608*=0xe | out: lpType=0x19e60c*=0x1, lpData="Client", lpcbData=0x19e608*=0xe) returned 0x0 [0071.118] RegCloseKey (hKey=0x290) returned 0x0 [0071.240] GetCurrentProcess () returned 0xffffffff [0071.240] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e28c | out: TokenHandle=0x19e28c*=0x290) returned 1 [0071.336] GetCurrentProcess () returned 0xffffffff [0071.336] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e29c | out: TokenHandle=0x19e29c*=0x294) returned 1 [0071.359] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f3d0 | out: phkResult=0x19f3d0*=0x298) returned 0x0 [0071.359] RegQueryValueExW (in: hKey=0x298, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0x19f3ec, lpData=0x0, lpcbData=0x19f3e8*=0x0 | out: lpType=0x19f3ec*=0x4, lpData=0x0, lpcbData=0x19f3e8*=0x4) returned 0x0 [0071.360] RegQueryValueExW (in: hKey=0x298, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0x19f3ec, lpData=0x19f3d8, lpcbData=0x19f3e8*=0x4 | out: lpType=0x19f3ec*=0x4, lpData=0x19f3d8*=0x1, lpcbData=0x19f3e8*=0x4) returned 0x0 [0071.360] RegQueryValueExW (in: hKey=0x298, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0x19f424, lpData=0x0, lpcbData=0x19f420*=0x0 | out: lpType=0x19f424*=0x4, lpData=0x0, lpcbData=0x19f420*=0x4) returned 0x0 [0071.362] RegCloseKey (hKey=0x298) returned 0x0 [0071.370] GetCurrentProcessId () returned 0xdb0 [0071.459] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x19ec6c | out: lpLuid=0x19ec6c*(LowPart=0x14, HighPart=0)) returned 1 [0071.461] GetCurrentProcess () returned 0xffffffff [0071.461] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19ec68 | out: TokenHandle=0x19ec68*=0x2a0) returned 1 [0071.461] AdjustTokenPrivileges (in: TokenHandle=0x2a0, DisableAllPrivileges=0, NewState=0x21f9198*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0071.463] CloseHandle (hObject=0x2a0) returned 1 [0071.466] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xdb0) returned 0x2a0 [0071.479] EnumProcessModules (in: hProcess=0x2a0, lphModule=0x21f91dc, cb=0x100, lpcbNeeded=0x19f3d8 | out: lphModule=0x21f91dc, lpcbNeeded=0x19f3d8) returned 1 [0071.480] GetModuleInformation (in: hProcess=0x2a0, hModule=0x400000, lpmodinfo=0x21f931c, cb=0xc | out: lpmodinfo=0x21f931c*(lpBaseOfDll=0x400000, SizeOfImage=0x32000, EntryPoint=0x0)) returned 1 [0071.481] CoTaskMemAlloc (cb=0x804) returned 0x6d7c88 [0071.481] GetModuleBaseNameW (in: hProcess=0x2a0, hModule=0x400000, lpBaseName=0x6d7c88, nSize=0x800 | out: lpBaseName="wwst.exe") returned 0x8 [0071.482] CoTaskMemFree (pv=0x6d7c88) [0071.482] CoTaskMemAlloc (cb=0x804) returned 0x6d7c88 [0071.482] GetModuleFileNameExW (in: hProcess=0x2a0, hModule=0x400000, lpFilename=0x6d7c88, nSize=0x800 | out: lpFilename="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\wwst.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\wwst.exe")) returned 0x2d [0071.483] CoTaskMemFree (pv=0x6d7c88) [0071.484] CloseHandle (hObject=0x2a0) returned 1 [0071.485] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x19eecc, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0071.485] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\wwst.exe", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\wwst.exe", lpFilePart=0x0) returned 0x31 [0071.485] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319\\System.Net.ServicePointManager.SecurityProtocol", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f3d0 | out: phkResult=0x19f3d0*=0x0) returned 0x2 [0071.600] EtwEventRegister (in: ProviderId=0x21fd6f4, EnableCallback=0x48705fe, CallbackContext=0x0, RegHandle=0x21fd6d0 | out: RegHandle=0x21fd6d0) returned 0x0 [0071.603] EtwEventSetInformation (RegHandle=0x68d300, InformationClass=0x24, EventInformation=0x2, InformationLength=0x21fd684) returned 0x0 [0071.624] GetCurrentProcessId () returned 0xdb0 [0071.624] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xdb0) returned 0x2a4 [0071.624] EnumProcessModules (in: hProcess=0x2a4, lphModule=0x21ff0d8, cb=0x100, lpcbNeeded=0x19f3e0 | out: lphModule=0x21ff0d8, lpcbNeeded=0x19f3e0) returned 1 [0071.625] GetModuleInformation (in: hProcess=0x2a4, hModule=0x400000, lpmodinfo=0x21ff218, cb=0xc | out: lpmodinfo=0x21ff218*(lpBaseOfDll=0x400000, SizeOfImage=0x32000, EntryPoint=0x0)) returned 1 [0071.625] CoTaskMemAlloc (cb=0x804) returned 0x6d7c88 [0071.625] GetModuleBaseNameW (in: hProcess=0x2a4, hModule=0x400000, lpBaseName=0x6d7c88, nSize=0x800 | out: lpBaseName="wwst.exe") returned 0x8 [0071.625] CoTaskMemFree (pv=0x6d7c88) [0071.625] CoTaskMemAlloc (cb=0x804) returned 0x6d7c88 [0071.625] GetModuleFileNameExW (in: hProcess=0x2a4, hModule=0x400000, lpFilename=0x6d7c88, nSize=0x800 | out: lpFilename="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\wwst.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\wwst.exe")) returned 0x2d [0071.625] CoTaskMemFree (pv=0x6d7c88) [0071.625] CloseHandle (hObject=0x2a4) returned 1 [0071.625] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x19eed4, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0071.626] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\wwst.exe", nBufferLength=0x105, lpBuffer=0x19eee8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\wwst.exe", lpFilePart=0x0) returned 0x31 [0071.626] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319\\System.Net.ServicePointManager.SchSendAuxRecord", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f3d8 | out: phkResult=0x19f3d8*=0x0) returned 0x2 [0071.626] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f3d8 | out: phkResult=0x19f3d8*=0x2a4) returned 0x0 [0071.626] RegQueryValueExW (in: hKey=0x2a4, lpValueName="SchSendAuxRecord", lpReserved=0x0, lpType=0x19f3f4, lpData=0x0, lpcbData=0x19f3f0*=0x0 | out: lpType=0x19f3f4*=0x0, lpData=0x0, lpcbData=0x19f3f0*=0x0) returned 0x2 [0071.626] RegCloseKey (hKey=0x2a4) returned 0x0 [0081.054] CryptAcquireContextW (in: phProv=0x19f3f8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x19f3f8*=0x6caf68) returned 1 [0081.077] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x1 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 1 [0081.077] CoTaskMemAlloc (cb=0x20) returned 0x6d6d58 [0081.077] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x6d6d58, pdwDataLen=0x19f3bc, dwFlags=0x1 | out: pbData=0x6d6d58, pdwDataLen=0x19f3bc) returned 1 [0081.078] CoTaskMemFree (pv=0x6d6d58) [0081.078] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 1 [0081.078] CoTaskMemAlloc (cb=0x20) returned 0x6d6e20 [0081.078] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x6d6e20, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x6d6e20, pdwDataLen=0x19f3bc) returned 1 [0081.078] CoTaskMemFree (pv=0x6d6e20) [0081.078] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 1 [0081.078] CoTaskMemAlloc (cb=0x20) returned 0x6d6d58 [0081.078] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x6d6d58, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x6d6d58, pdwDataLen=0x19f3bc) returned 1 [0081.078] CoTaskMemFree (pv=0x6d6d58) [0081.078] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 1 [0081.078] CoTaskMemAlloc (cb=0x20) returned 0x6d6e70 [0081.078] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x6d6e70, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x6d6e70, pdwDataLen=0x19f3bc) returned 1 [0081.078] CoTaskMemFree (pv=0x6d6e70) [0081.078] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 1 [0081.078] CoTaskMemAlloc (cb=0x20) returned 0x6d6f38 [0081.078] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x6d6f38, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x6d6f38, pdwDataLen=0x19f3bc) returned 1 [0081.078] CoTaskMemFree (pv=0x6d6f38) [0081.078] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 1 [0081.078] CoTaskMemAlloc (cb=0x20) returned 0x6d6d58 [0081.078] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x6d6d58, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x6d6d58, pdwDataLen=0x19f3bc) returned 1 [0081.078] CoTaskMemFree (pv=0x6d6d58) [0081.079] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 1 [0081.079] CoTaskMemAlloc (cb=0x20) returned 0x6d6fd8 [0081.079] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x6d6fd8, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x6d6fd8, pdwDataLen=0x19f3bc) returned 1 [0081.079] CoTaskMemFree (pv=0x6d6fd8) [0081.079] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 1 [0081.079] CoTaskMemAlloc (cb=0x20) returned 0x6d7050 [0081.079] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x6d7050, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x6d7050, pdwDataLen=0x19f3bc) returned 1 [0081.079] CoTaskMemFree (pv=0x6d7050) [0081.079] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 1 [0081.079] CoTaskMemAlloc (cb=0x20) returned 0x6d6ec0 [0081.079] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x6d6ec0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x6d6ec0, pdwDataLen=0x19f3bc) returned 1 [0081.079] CoTaskMemFree (pv=0x6d6ec0) [0081.079] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 1 [0081.079] CoTaskMemAlloc (cb=0x20) returned 0x6d6df8 [0081.079] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x6d6df8, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x6d6df8, pdwDataLen=0x19f3bc) returned 1 [0081.079] CoTaskMemFree (pv=0x6d6df8) [0081.079] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 1 [0081.079] CoTaskMemAlloc (cb=0x20) returned 0x6d6d58 [0081.079] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x6d6d58, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x6d6d58, pdwDataLen=0x19f3bc) returned 1 [0081.079] CoTaskMemFree (pv=0x6d6d58) [0081.079] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 1 [0081.079] CoTaskMemAlloc (cb=0x20) returned 0x6d6d58 [0081.079] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x6d6d58, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x6d6d58, pdwDataLen=0x19f3bc) returned 1 [0081.079] CoTaskMemFree (pv=0x6d6d58) [0081.079] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 1 [0081.080] CoTaskMemAlloc (cb=0x20) returned 0x6d6d08 [0081.080] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x6d6d08, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x6d6d08, pdwDataLen=0x19f3bc) returned 1 [0081.080] CoTaskMemFree (pv=0x6d6d08) [0081.080] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 1 [0081.080] CoTaskMemAlloc (cb=0x20) returned 0x6d6f60 [0081.080] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x6d6f60, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x6d6f60, pdwDataLen=0x19f3bc) returned 1 [0081.080] CoTaskMemFree (pv=0x6d6f60) [0081.080] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 1 [0081.080] CoTaskMemAlloc (cb=0x20) returned 0x6d6d58 [0081.080] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x6d6d58, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x6d6d58, pdwDataLen=0x19f3bc) returned 1 [0081.080] CoTaskMemFree (pv=0x6d6d58) [0081.080] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 1 [0081.080] CoTaskMemAlloc (cb=0x20) returned 0x6d6df8 [0081.080] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x6d6df8, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x6d6df8, pdwDataLen=0x19f3bc) returned 1 [0081.080] CoTaskMemFree (pv=0x6d6df8) [0081.080] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 1 [0081.080] CoTaskMemAlloc (cb=0x20) returned 0x6d6da8 [0081.080] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x6d6da8, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x6d6da8, pdwDataLen=0x19f3bc) returned 1 [0081.080] CoTaskMemFree (pv=0x6d6da8) [0081.080] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 1 [0081.080] CoTaskMemAlloc (cb=0x20) returned 0x6d7050 [0081.080] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x6d7050, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x6d7050, pdwDataLen=0x19f3bc) returned 1 [0081.080] CoTaskMemFree (pv=0x6d7050) [0081.080] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 1 [0081.081] CoTaskMemAlloc (cb=0x20) returned 0x6d6f10 [0081.081] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x6d6f10, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x6d6f10, pdwDataLen=0x19f3bc) returned 1 [0081.081] CoTaskMemFree (pv=0x6d6f10) [0081.081] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 1 [0081.081] CoTaskMemAlloc (cb=0x20) returned 0x6d7028 [0081.081] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x6d7028, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x6d7028, pdwDataLen=0x19f3bc) returned 1 [0081.081] CoTaskMemFree (pv=0x6d7028) [0081.081] CryptGetProvParam (in: hProv=0x6caf68, dwParam=0x1, pbData=0x0, pdwDataLen=0x19f3bc, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x19f3bc) returned 0 [0081.912] CryptImportKey (in: hProv=0x6caf68, pbData=0x227fe0c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x19f3c8 | out: phKey=0x19f3c8*=0x6c9ac8) returned 1 [0081.913] CryptContextAddRef (hProv=0x6caf68, pdwReserved=0x0, dwFlags=0x0) returned 1 [0081.979] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x19f3e8 | out: pfEnabled=0x19f3e8) returned 0x0 [0081.984] CryptContextAddRef (hProv=0x6caf68, pdwReserved=0x0, dwFlags=0x0) returned 1 [0081.984] CryptDuplicateKey (in: hKey=0x6c9ac8, pdwReserved=0x0, dwFlags=0x0, phKey=0x19f3b8 | out: phKey=0x19f3b8*=0x6c9bc8) returned 1 [0081.984] CryptContextAddRef (hProv=0x6caf68, pdwReserved=0x0, dwFlags=0x0) returned 1 [0081.985] CryptSetKeyParam (hKey=0x6c9bc8, dwParam=0x4, pbData=0x22807f0*=0x1, dwFlags=0x0) returned 1 [0081.985] CryptSetKeyParam (hKey=0x6c9bc8, dwParam=0x1, pbData=0x22807bc, dwFlags=0x0) returned 1 [0081.986] CryptDecrypt (in: hKey=0x6c9bc8, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x22808f4, pdwDataLen=0x19f3c8 | out: pbData=0x22808f4, pdwDataLen=0x19f3c8) returned 1 [0082.058] CryptDecrypt (in: hKey=0x6c9bc8, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2280964, pdwDataLen=0x19f3f8 | out: pbData=0x2280964, pdwDataLen=0x19f3f8) returned 1 [0082.070] CryptDecrypt (in: hKey=0x6c9bc8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2280a5c, pdwDataLen=0x19f3f8 | out: pbData=0x2280a5c, pdwDataLen=0x19f3f8) returned 0 [0082.071] CryptDestroyKey (hKey=0x6c9ac8) returned 1 [0082.071] CryptReleaseContext (hProv=0x6caf68, dwFlags=0x0) returned 1 [0082.071] CryptReleaseContext (hProv=0x6caf68, dwFlags=0x0) returned 1 [0082.071] CryptAcquireContextW (in: phProv=0x19f3f8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x19f3f8*=0x6cb7e8) returned 1 [0082.072] CryptImportKey (in: hProv=0x6cb7e8, pbData=0x228131c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x19f3c8 | out: phKey=0x19f3c8*=0x6c9ac8) returned 1 [0082.072] CryptContextAddRef (hProv=0x6cb7e8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.072] CryptContextAddRef (hProv=0x6cb7e8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.072] CryptDuplicateKey (in: hKey=0x6c9ac8, pdwReserved=0x0, dwFlags=0x0, phKey=0x19f3b8 | out: phKey=0x19f3b8*=0x6c9c88) returned 1 [0082.072] CryptContextAddRef (hProv=0x6cb7e8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.072] CryptSetKeyParam (hKey=0x6c9c88, dwParam=0x4, pbData=0x2281a74*=0x1, dwFlags=0x0) returned 1 [0082.072] CryptSetKeyParam (hKey=0x6c9c88, dwParam=0x1, pbData=0x2281a40, dwFlags=0x0) returned 1 [0082.073] CryptDecrypt (in: hKey=0x6c9c88, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2281b54, pdwDataLen=0x19f3f8 | out: pbData=0x2281b54, pdwDataLen=0x19f3f8) returned 1 [0082.073] CryptDecrypt (in: hKey=0x6c9c88, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2281b88, pdwDataLen=0x19f3f8 | out: pbData=0x2281b88, pdwDataLen=0x19f3f8) returned 0 [0082.073] CryptDestroyKey (hKey=0x6c9ac8) returned 1 [0082.073] CryptReleaseContext (hProv=0x6cb7e8, dwFlags=0x0) returned 1 [0082.073] CryptReleaseContext (hProv=0x6cb7e8, dwFlags=0x0) returned 1 [0082.073] CryptAcquireContextW (in: phProv=0x19f3f8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x19f3f8*=0x6cacc0) returned 1 [0082.074] CryptImportKey (in: hProv=0x6cacc0, pbData=0x2281cec*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x19f3c8 | out: phKey=0x19f3c8*=0x6c95c8) returned 1 [0082.074] CryptContextAddRef (hProv=0x6cacc0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.074] CryptContextAddRef (hProv=0x6cacc0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.074] CryptDuplicateKey (in: hKey=0x6c95c8, pdwReserved=0x0, dwFlags=0x0, phKey=0x19f3b8 | out: phKey=0x19f3b8*=0x6c9ac8) returned 1 [0082.074] CryptContextAddRef (hProv=0x6cacc0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.074] CryptSetKeyParam (hKey=0x6c9ac8, dwParam=0x4, pbData=0x2282444*=0x1, dwFlags=0x0) returned 1 [0082.074] CryptSetKeyParam (hKey=0x6c9ac8, dwParam=0x1, pbData=0x2282410, dwFlags=0x0) returned 1 [0082.074] CryptDecrypt (in: hKey=0x6c9ac8, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2282524, pdwDataLen=0x19f3f8 | out: pbData=0x2282524, pdwDataLen=0x19f3f8) returned 1 [0082.074] CryptDecrypt (in: hKey=0x6c9ac8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x228255c, pdwDataLen=0x19f3f8 | out: pbData=0x228255c, pdwDataLen=0x19f3f8) returned 0 [0082.074] CryptDestroyKey (hKey=0x6c95c8) returned 1 [0082.074] CryptReleaseContext (hProv=0x6cacc0, dwFlags=0x0) returned 1 [0082.074] CryptReleaseContext (hProv=0x6cacc0, dwFlags=0x0) returned 1 [0082.075] CryptAcquireContextW (in: phProv=0x19f3f8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x19f3f8*=0x6cac38) returned 1 [0082.075] CryptImportKey (in: hProv=0x6cac38, pbData=0x22826d0*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x19f3c8 | out: phKey=0x19f3c8*=0x6c95c8) returned 1 [0082.075] CryptContextAddRef (hProv=0x6cac38, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.075] CryptContextAddRef (hProv=0x6cac38, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.075] CryptDuplicateKey (in: hKey=0x6c95c8, pdwReserved=0x0, dwFlags=0x0, phKey=0x19f3b8 | out: phKey=0x19f3b8*=0x6c9648) returned 1 [0082.075] CryptContextAddRef (hProv=0x6cac38, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.076] CryptSetKeyParam (hKey=0x6c9648, dwParam=0x4, pbData=0x2282e28*=0x1, dwFlags=0x0) returned 1 [0082.076] CryptSetKeyParam (hKey=0x6c9648, dwParam=0x1, pbData=0x2282df4, dwFlags=0x0) returned 1 [0082.076] CryptDecrypt (in: hKey=0x6c9648, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2282f08, pdwDataLen=0x19f3f8 | out: pbData=0x2282f08, pdwDataLen=0x19f3f8) returned 1 [0082.076] CryptDecrypt (in: hKey=0x6c9648, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2282f3c, pdwDataLen=0x19f3f8 | out: pbData=0x2282f3c, pdwDataLen=0x19f3f8) returned 0 [0082.076] CryptDestroyKey (hKey=0x6c95c8) returned 1 [0082.076] CryptReleaseContext (hProv=0x6cac38, dwFlags=0x0) returned 1 [0082.076] CryptReleaseContext (hProv=0x6cac38, dwFlags=0x0) returned 1 [0082.076] CryptAcquireContextW (in: phProv=0x19f3f8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x19f3f8*=0x6cb188) returned 1 [0082.076] CryptImportKey (in: hProv=0x6cb188, pbData=0x22830a0*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x19f3c8 | out: phKey=0x19f3c8*=0x6c95c8) returned 1 [0082.077] CryptContextAddRef (hProv=0x6cb188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.077] CryptContextAddRef (hProv=0x6cb188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.077] CryptDuplicateKey (in: hKey=0x6c95c8, pdwReserved=0x0, dwFlags=0x0, phKey=0x19f3b8 | out: phKey=0x19f3b8*=0x6c9708) returned 1 [0082.077] CryptContextAddRef (hProv=0x6cb188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.077] CryptSetKeyParam (hKey=0x6c9708, dwParam=0x4, pbData=0x22837f8*=0x1, dwFlags=0x0) returned 1 [0082.077] CryptSetKeyParam (hKey=0x6c9708, dwParam=0x1, pbData=0x22837c4, dwFlags=0x0) returned 1 [0082.077] CryptDecrypt (in: hKey=0x6c9708, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x22838d8, pdwDataLen=0x19f3f8 | out: pbData=0x22838d8, pdwDataLen=0x19f3f8) returned 1 [0082.077] CryptDecrypt (in: hKey=0x6c9708, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2283900, pdwDataLen=0x19f3f8 | out: pbData=0x2283900, pdwDataLen=0x19f3f8) returned 0 [0082.077] CryptDestroyKey (hKey=0x6c95c8) returned 1 [0082.077] CryptReleaseContext (hProv=0x6cb188, dwFlags=0x0) returned 1 [0082.077] CryptReleaseContext (hProv=0x6cb188, dwFlags=0x0) returned 1 [0082.077] CryptAcquireContextW (in: phProv=0x19f3f8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x19f3f8*=0x6cb870) returned 1 [0082.078] CryptImportKey (in: hProv=0x6cb870, pbData=0x2283a38*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x19f3c8 | out: phKey=0x19f3c8*=0x6c95c8) returned 1 [0082.078] CryptContextAddRef (hProv=0x6cb870, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.078] CryptContextAddRef (hProv=0x6cb870, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.078] CryptDuplicateKey (in: hKey=0x6c95c8, pdwReserved=0x0, dwFlags=0x0, phKey=0x19f3b8 | out: phKey=0x19f3b8*=0x6c9748) returned 1 [0082.079] CryptContextAddRef (hProv=0x6cb870, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.079] CryptSetKeyParam (hKey=0x6c9748, dwParam=0x4, pbData=0x2284190*=0x1, dwFlags=0x0) returned 1 [0082.079] CryptSetKeyParam (hKey=0x6c9748, dwParam=0x1, pbData=0x228415c, dwFlags=0x0) returned 1 [0082.079] CryptDecrypt (in: hKey=0x6c9748, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2284270, pdwDataLen=0x19f3f8 | out: pbData=0x2284270, pdwDataLen=0x19f3f8) returned 1 [0082.079] CryptDecrypt (in: hKey=0x6c9748, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x22842a0, pdwDataLen=0x19f3f8 | out: pbData=0x22842a0, pdwDataLen=0x19f3f8) returned 0 [0082.079] CryptDestroyKey (hKey=0x6c95c8) returned 1 [0082.079] CryptReleaseContext (hProv=0x6cb870, dwFlags=0x0) returned 1 [0082.079] CryptReleaseContext (hProv=0x6cb870, dwFlags=0x0) returned 1 [0082.079] CryptAcquireContextW (in: phProv=0x19f3f8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x19f3f8*=0x6cb3a8) returned 1 [0082.079] CryptImportKey (in: hProv=0x6cb3a8, pbData=0x2284408*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x19f3c8 | out: phKey=0x19f3c8*=0x6c95c8) returned 1 [0082.080] CryptContextAddRef (hProv=0x6cb3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.080] CryptContextAddRef (hProv=0x6cb3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.080] CryptDuplicateKey (in: hKey=0x6c95c8, pdwReserved=0x0, dwFlags=0x0, phKey=0x19f3b8 | out: phKey=0x19f3b8*=0x6ca088) returned 1 [0082.080] CryptContextAddRef (hProv=0x6cb3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.080] CryptSetKeyParam (hKey=0x6ca088, dwParam=0x4, pbData=0x2284b70*=0x1, dwFlags=0x0) returned 1 [0082.080] CryptSetKeyParam (hKey=0x6ca088, dwParam=0x1, pbData=0x2284b3c, dwFlags=0x0) returned 1 [0082.080] CryptDecrypt (in: hKey=0x6ca088, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2284c54, pdwDataLen=0x19f3c8 | out: pbData=0x2284c54, pdwDataLen=0x19f3c8) returned 1 [0082.080] CryptDecrypt (in: hKey=0x6ca088, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2284c9c, pdwDataLen=0x19f3f8 | out: pbData=0x2284c9c, pdwDataLen=0x19f3f8) returned 1 [0082.080] CryptDecrypt (in: hKey=0x6ca088, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2284cc8, pdwDataLen=0x19f3f8 | out: pbData=0x2284cc8, pdwDataLen=0x19f3f8) returned 0 [0082.080] CryptDestroyKey (hKey=0x6c95c8) returned 1 [0082.080] CryptReleaseContext (hProv=0x6cb3a8, dwFlags=0x0) returned 1 [0082.080] CryptReleaseContext (hProv=0x6cb3a8, dwFlags=0x0) returned 1 [0082.080] CryptAcquireContextW (in: phProv=0x19f3f8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x19f3f8*=0x6cadd0) returned 1 [0082.081] CryptImportKey (in: hProv=0x6cadd0, pbData=0x2284e4c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x19f3c8 | out: phKey=0x19f3c8*=0x6c95c8) returned 1 [0082.081] CryptContextAddRef (hProv=0x6cadd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.081] CryptContextAddRef (hProv=0x6cadd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.081] CryptDuplicateKey (in: hKey=0x6c95c8, pdwReserved=0x0, dwFlags=0x0, phKey=0x19f3b8 | out: phKey=0x19f3b8*=0x6ca1c8) returned 1 [0082.081] CryptContextAddRef (hProv=0x6cadd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.081] CryptSetKeyParam (hKey=0x6ca1c8, dwParam=0x4, pbData=0x22855a4*=0x1, dwFlags=0x0) returned 1 [0082.081] CryptSetKeyParam (hKey=0x6ca1c8, dwParam=0x1, pbData=0x2285570, dwFlags=0x0) returned 1 [0082.082] CryptDecrypt (in: hKey=0x6ca1c8, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2285684, pdwDataLen=0x19f3f8 | out: pbData=0x2285684, pdwDataLen=0x19f3f8) returned 1 [0082.082] CryptDecrypt (in: hKey=0x6ca1c8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x22856b0, pdwDataLen=0x19f3f8 | out: pbData=0x22856b0, pdwDataLen=0x19f3f8) returned 0 [0082.082] CryptDestroyKey (hKey=0x6c95c8) returned 1 [0082.082] CryptReleaseContext (hProv=0x6cadd0, dwFlags=0x0) returned 1 [0082.082] CryptReleaseContext (hProv=0x6cadd0, dwFlags=0x0) returned 1 [0082.082] CryptAcquireContextW (in: phProv=0x19f3f8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x19f3f8*=0x6cb650) returned 1 [0082.083] CryptImportKey (in: hProv=0x6cb650, pbData=0x2285804*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x19f3c8 | out: phKey=0x19f3c8*=0x6c95c8) returned 1 [0082.083] CryptContextAddRef (hProv=0x6cb650, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.083] CryptContextAddRef (hProv=0x6cb650, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.083] CryptDuplicateKey (in: hKey=0x6c95c8, pdwReserved=0x0, dwFlags=0x0, phKey=0x19f3b8 | out: phKey=0x19f3b8*=0x6ca448) returned 1 [0082.083] CryptContextAddRef (hProv=0x6cb650, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.083] CryptSetKeyParam (hKey=0x6ca448, dwParam=0x4, pbData=0x2285f5c*=0x1, dwFlags=0x0) returned 1 [0082.083] CryptSetKeyParam (hKey=0x6ca448, dwParam=0x1, pbData=0x2285f28, dwFlags=0x0) returned 1 [0082.083] CryptDecrypt (in: hKey=0x6ca448, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x228603c, pdwDataLen=0x19f3f8 | out: pbData=0x228603c, pdwDataLen=0x19f3f8) returned 1 [0082.083] CryptDecrypt (in: hKey=0x6ca448, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x228606c, pdwDataLen=0x19f3f8 | out: pbData=0x228606c, pdwDataLen=0x19f3f8) returned 0 [0082.084] CryptDestroyKey (hKey=0x6c95c8) returned 1 [0082.084] CryptReleaseContext (hProv=0x6cb650, dwFlags=0x0) returned 1 [0082.084] CryptReleaseContext (hProv=0x6cb650, dwFlags=0x0) returned 1 [0082.084] CryptAcquireContextW (in: phProv=0x19f3f8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x19f3f8*=0x6cb540) returned 1 [0082.084] CryptImportKey (in: hProv=0x6cb540, pbData=0x22861c4*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x19f3c8 | out: phKey=0x19f3c8*=0x6c95c8) returned 1 [0082.084] CryptContextAddRef (hProv=0x6cb540, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.084] CryptContextAddRef (hProv=0x6cb540, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.085] CryptDuplicateKey (in: hKey=0x6c95c8, pdwReserved=0x0, dwFlags=0x0, phKey=0x19f3b8 | out: phKey=0x19f3b8*=0x6c9f88) returned 1 [0082.085] CryptContextAddRef (hProv=0x6cb540, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.085] CryptSetKeyParam (hKey=0x6c9f88, dwParam=0x4, pbData=0x228691c*=0x1, dwFlags=0x0) returned 1 [0082.085] CryptSetKeyParam (hKey=0x6c9f88, dwParam=0x1, pbData=0x22868e8, dwFlags=0x0) returned 1 [0082.085] CryptDecrypt (in: hKey=0x6c9f88, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x22869fc, pdwDataLen=0x19f3f8 | out: pbData=0x22869fc, pdwDataLen=0x19f3f8) returned 1 [0082.085] CryptDecrypt (in: hKey=0x6c9f88, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2286a2c, pdwDataLen=0x19f3f8 | out: pbData=0x2286a2c, pdwDataLen=0x19f3f8) returned 0 [0082.085] CryptDestroyKey (hKey=0x6c95c8) returned 1 [0082.085] CryptReleaseContext (hProv=0x6cb540, dwFlags=0x0) returned 1 [0082.085] CryptReleaseContext (hProv=0x6cb540, dwFlags=0x0) returned 1 [0082.085] CryptAcquireContextW (in: phProv=0x19f3f8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x19f3f8*=0x6caff0) returned 1 [0082.086] CryptImportKey (in: hProv=0x6caff0, pbData=0x2286b84*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x19f3c8 | out: phKey=0x19f3c8*=0x6c95c8) returned 1 [0082.086] CryptContextAddRef (hProv=0x6caff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.086] CryptContextAddRef (hProv=0x6caff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.086] CryptDuplicateKey (in: hKey=0x6c95c8, pdwReserved=0x0, dwFlags=0x0, phKey=0x19f3b8 | out: phKey=0x19f3b8*=0x6ca2c8) returned 1 [0082.086] CryptContextAddRef (hProv=0x6caff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.086] CryptSetKeyParam (hKey=0x6ca2c8, dwParam=0x4, pbData=0x22872dc*=0x1, dwFlags=0x0) returned 1 [0082.086] CryptSetKeyParam (hKey=0x6ca2c8, dwParam=0x1, pbData=0x22872a8, dwFlags=0x0) returned 1 [0082.086] CryptDecrypt (in: hKey=0x6ca2c8, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x22873bc, pdwDataLen=0x19f3f8 | out: pbData=0x22873bc, pdwDataLen=0x19f3f8) returned 1 [0082.086] CryptDecrypt (in: hKey=0x6ca2c8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x22873ec, pdwDataLen=0x19f3f8 | out: pbData=0x22873ec, pdwDataLen=0x19f3f8) returned 0 [0082.086] CryptDestroyKey (hKey=0x6c95c8) returned 1 [0082.086] CryptReleaseContext (hProv=0x6caff0, dwFlags=0x0) returned 1 [0082.086] CryptReleaseContext (hProv=0x6caff0, dwFlags=0x0) returned 1 [0082.096] GetUserNameW (in: lpBuffer=0x19f20c, pcbBuffer=0x19f484 | out: lpBuffer="RDhJ0CNFevzX", pcbBuffer=0x19f484) returned 1 [0082.216] GetComputerNameW (in: lpBuffer=0x19f20c, nSize=0x19f484 | out: lpBuffer="XC64ZB", nSize=0x19f484) returned 1 [0082.217] CoTaskMemAlloc (cb=0x20c) returned 0x6dd810 [0082.217] GetSystemDirectoryW (in: lpBuffer=0x6dd810, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0082.217] CoTaskMemFree (pv=0x6dd810) [0082.219] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x19eea4, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0082.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f440) returned 1 [0082.219] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x19f46c, lpTotalNumberOfBytes=0x19f464, lpTotalNumberOfFreeBytes=0x19f45c | out: lpFreeBytesAvailableToCaller=0x19f46c, lpTotalNumberOfBytes=0x19f464, lpTotalNumberOfFreeBytes=0x19f45c) returned 1 [0082.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f43c) returned 1 [0082.243] CryptAcquireContextW (in: phProv=0x19f3f8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x19f3f8*=0x6cb298) returned 1 [0082.244] CryptImportKey (in: hProv=0x6cb298, pbData=0x2288f48*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x19f3c8 | out: phKey=0x19f3c8*=0x6ca148) returned 1 [0082.244] CryptContextAddRef (hProv=0x6cb298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.244] CryptContextAddRef (hProv=0x6cb298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.244] CryptDuplicateKey (in: hKey=0x6ca148, pdwReserved=0x0, dwFlags=0x0, phKey=0x19f3b8 | out: phKey=0x19f3b8*=0x6c9f48) returned 1 [0082.244] CryptContextAddRef (hProv=0x6cb298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.244] CryptSetKeyParam (hKey=0x6c9f48, dwParam=0x4, pbData=0x2289c00*=0x1, dwFlags=0x0) returned 1 [0082.244] CryptSetKeyParam (hKey=0x6c9f48, dwParam=0x1, pbData=0x2289bcc, dwFlags=0x0) returned 1 [0082.245] CryptDecrypt (in: hKey=0x6c9f48, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x228a204, pdwDataLen=0x19f3c8 | out: pbData=0x228a204, pdwDataLen=0x19f3c8) returned 1 [0082.245] CryptDecrypt (in: hKey=0x6c9f48, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x228a4dc, pdwDataLen=0x19f3f8 | out: pbData=0x228a4dc, pdwDataLen=0x19f3f8) returned 1 [0082.245] CryptDecrypt (in: hKey=0x6c9f48, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x228a510, pdwDataLen=0x19f3f8 | out: pbData=0x228a510, pdwDataLen=0x19f3f8) returned 0 [0082.245] CryptDestroyKey (hKey=0x6ca148) returned 1 [0082.245] CryptReleaseContext (hProv=0x6cb298, dwFlags=0x0) returned 1 [0082.245] CryptReleaseContext (hProv=0x6cb298, dwFlags=0x0) returned 1 [0082.245] CryptAcquireContextW (in: phProv=0x19f3f8, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x19f3f8*=0x6cb430) returned 1 [0082.245] CryptImportKey (in: hProv=0x6cb430, pbData=0x228b56c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x19f3c8 | out: phKey=0x19f3c8*=0x6ca288) returned 1 [0082.245] CryptContextAddRef (hProv=0x6cb430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.246] CryptContextAddRef (hProv=0x6cb430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.246] CryptDuplicateKey (in: hKey=0x6ca288, pdwReserved=0x0, dwFlags=0x0, phKey=0x19f3b8 | out: phKey=0x19f3b8*=0x6ca008) returned 1 [0082.246] CryptContextAddRef (hProv=0x6cb430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0082.246] CryptSetKeyParam (hKey=0x6ca008, dwParam=0x4, pbData=0x228ca24*=0x1, dwFlags=0x0) returned 1 [0082.246] CryptSetKeyParam (hKey=0x6ca008, dwParam=0x1, pbData=0x228c9f0, dwFlags=0x0) returned 1 [0082.247] CryptDecrypt (in: hKey=0x6ca008, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x228d828, pdwDataLen=0x19f3c8 | out: pbData=0x228d828, pdwDataLen=0x19f3c8) returned 1 [0082.247] CryptDecrypt (in: hKey=0x6ca008, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x228df00, pdwDataLen=0x19f3f8 | out: pbData=0x228df00, pdwDataLen=0x19f3f8) returned 1 [0082.247] CryptDecrypt (in: hKey=0x6ca008, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x228df2c, pdwDataLen=0x19f3f8 | out: pbData=0x228df2c, pdwDataLen=0x19f3f8) returned 0 [0082.247] CryptDestroyKey (hKey=0x6ca288) returned 1 [0082.247] CryptReleaseContext (hProv=0x6cb430, dwFlags=0x0) returned 1 [0082.247] CryptReleaseContext (hProv=0x6cb430, dwFlags=0x0) returned 1 [0082.345] CertDuplicateCertificateContext (pCertContext=0x6ccd00) returned 0x6ccd00 [0082.367] LocalAlloc (uFlags=0x0, uBytes=0x2a) returned 0x6d5b80 [0082.431] CryptFindOIDInfo (dwKeyType=0x2, pvKey=0x6d5b80, dwGroupId=0x3) returned 0x0 [0082.450] LocalFree (hMem=0x6d5b80) returned 0x0 [0082.450] LocalAlloc (uFlags=0x0, uBytes=0x2a) returned 0x71f4e8 [0082.450] CryptFindOIDInfo (dwKeyType=0x2, pvKey=0x71f4e8, dwGroupId=0x0) returned 0x0 [0082.459] LocalFree (hMem=0x71f4e8) returned 0x0 [0082.461] LocalAlloc (uFlags=0x0, uBytes=0x15) returned 0x71ab40 [0082.461] CryptFindOIDInfo (dwKeyType=0x1, pvKey=0x71ab40, dwGroupId=0x0) returned 0x7509d6c0 [0082.465] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x13, pbEncoded=0x2290170, cbEncoded=0x20e, dwFlags=0x0, pvStructInfo=0x0, pcbStructInfo=0x19f434 | out: pvStructInfo=0x0, pcbStructInfo=0x19f434) returned 1 [0082.465] LocalAlloc (uFlags=0x0, uBytes=0x214) returned 0x71b1f8 [0082.465] CryptDecodeObject (in: dwCertEncodingType=0x10001, lpszStructType=0x13, pbEncoded=0x2290170, cbEncoded=0x20e, dwFlags=0x0, pvStructInfo=0x71b1f8, pcbStructInfo=0x19f434 | out: pvStructInfo=0x71b1f8, pcbStructInfo=0x19f434) returned 1 [0082.465] LocalFree (hMem=0x71b1f8) returned 0x0 [0082.541] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x19eda4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0082.542] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x19ee08, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0082.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2b0) returned 1 [0082.542] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x19f32c | out: lpFileInformation=0x19f32c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0082.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2ac) returned 1 [0082.747] CoTaskMemAlloc (cb=0x2e) returned 0x7279c0 [0082.752] CryptFindOIDInfo (dwKeyType=0x2, pvKey=0x7279c0, dwGroupId=0x1) returned 0x0 [0082.752] CryptFindOIDInfo (dwKeyType=0x2, pvKey=0x7279c0, dwGroupId=0x0) returned 0x0 [0082.752] CoTaskMemFree (pv=0x7279c0) [0082.774] GetUserNameW (in: lpBuffer=0x19c334, pcbBuffer=0x19c5ac | out: lpBuffer="RDhJ0CNFevzX", pcbBuffer=0x19c5ac) returned 1 [0082.774] GetComputerNameW (in: lpBuffer=0x19c334, nSize=0x19c5ac | out: lpBuffer="XC64ZB", nSize=0x19c5ac) returned 1 [0082.776] GetTimeZoneInformation (in: lpTimeZoneInformation=0x19c3b0 | out: lpTimeZoneInformation=0x19c3b0) returned 0x1 [0082.777] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x19c20c | out: pTimeZoneInformation=0x19c20c) returned 0x1 [0082.778] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x19c2f0 | out: phkResult=0x19c2f0*=0x318) returned 0x0 [0082.779] RegQueryValueExW (in: hKey=0x318, lpValueName="TZI", lpReserved=0x0, lpType=0x19c30c, lpData=0x0, lpcbData=0x19c308*=0x0 | out: lpType=0x19c30c*=0x3, lpData=0x0, lpcbData=0x19c308*=0x2c) returned 0x0 [0082.779] RegQueryValueExW (in: hKey=0x318, lpValueName="TZI", lpReserved=0x0, lpType=0x19c30c, lpData=0x22b1ed0, lpcbData=0x19c308*=0x2c | out: lpType=0x19c30c*=0x3, lpData=0x22b1ed0*, lpcbData=0x19c308*=0x2c) returned 0x0 [0082.779] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x19c144 | out: phkResult=0x19c144*=0x0) returned 0x2 [0082.779] RegQueryValueExW (in: hKey=0x318, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x19c2e4, lpData=0x0, lpcbData=0x19c2e0*=0x0 | out: lpType=0x19c2e4*=0x1, lpData=0x0, lpcbData=0x19c2e0*=0x20) returned 0x0 [0082.779] RegQueryValueExW (in: hKey=0x318, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x19c2e4, lpData=0x22b22f4, lpcbData=0x19c2e0*=0x20 | out: lpType=0x19c2e4*=0x1, lpData="@tzres.dll,-320", lpcbData=0x19c2e0*=0x20) returned 0x0 [0082.779] RegQueryValueExW (in: hKey=0x318, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x19c2e4, lpData=0x0, lpcbData=0x19c2e0*=0x0 | out: lpType=0x19c2e4*=0x1, lpData=0x0, lpcbData=0x19c2e0*=0x20) returned 0x0 [0082.780] RegQueryValueExW (in: hKey=0x318, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x19c2e4, lpData=0x22b234c, lpcbData=0x19c2e0*=0x20 | out: lpType=0x19c2e4*=0x1, lpData="@tzres.dll,-322", lpcbData=0x19c2e0*=0x20) returned 0x0 [0082.780] RegQueryValueExW (in: hKey=0x318, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x19c2e4, lpData=0x0, lpcbData=0x19c2e0*=0x0 | out: lpType=0x19c2e4*=0x1, lpData=0x0, lpcbData=0x19c2e0*=0x20) returned 0x0 [0082.780] RegQueryValueExW (in: hKey=0x318, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x19c2e4, lpData=0x22b23a4, lpcbData=0x19c2e0*=0x20 | out: lpType=0x19c2e4*=0x1, lpData="@tzres.dll,-321", lpcbData=0x19c2e0*=0x20) returned 0x0 [0082.785] CoTaskMemAlloc (cb=0x20c) returned 0x719128 [0082.785] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x719128 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0082.808] CoTaskMemFree (pv=0x719128) [0082.808] CoTaskMemAlloc (cb=0x20c) returned 0x719128 [0082.808] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19c300, pwszFileMUIPath=0x719128, pcchFileMUIPath=0x19c304, pululEnumerator=0x19c2f8 | out: pwszLanguage=0x0, pcchLanguage=0x19c300, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19c304, pululEnumerator=0x19c2f8) returned 1 [0082.826] CoTaskMemFree (pv=0x0) [0082.826] CoTaskMemFree (pv=0x719128) [0082.827] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x8b0001 [0082.837] CoTaskMemAlloc (cb=0x3ec) returned 0x728268 [0082.837] LoadStringW (in: hInstance=0x8b0001, uID=0x140, lpBuffer=0x728268, cchBufferMax=500 | out: lpBuffer="(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna") returned 0x3c [0082.838] CoTaskMemFree (pv=0x728268) [0082.838] FreeLibrary (hLibModule=0x8b0001) returned 1 [0082.838] CoTaskMemAlloc (cb=0x20c) returned 0x719128 [0082.839] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x719128 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0082.839] CoTaskMemFree (pv=0x719128) [0082.839] CoTaskMemAlloc (cb=0x20c) returned 0x719128 [0082.839] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19c300, pwszFileMUIPath=0x719128, pcchFileMUIPath=0x19c304, pululEnumerator=0x19c2f8 | out: pwszLanguage=0x0, pcchLanguage=0x19c300, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19c304, pululEnumerator=0x19c2f8) returned 1 [0082.840] CoTaskMemFree (pv=0x0) [0082.840] CoTaskMemFree (pv=0x719128) [0082.840] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x8b0001 [0082.841] CoTaskMemAlloc (cb=0x3ec) returned 0x728268 [0082.841] LoadStringW (in: hInstance=0x8b0001, uID=0x142, lpBuffer=0x728268, cchBufferMax=500 | out: lpBuffer="W. Europe Standard Time") returned 0x17 [0082.841] CoTaskMemFree (pv=0x728268) [0082.841] FreeLibrary (hLibModule=0x8b0001) returned 1 [0082.842] CoTaskMemAlloc (cb=0x20c) returned 0x719128 [0082.842] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x719128 | out: pszPath="C:\\Windows\\system32") returned 0x0 [0082.842] CoTaskMemFree (pv=0x719128) [0082.842] CoTaskMemAlloc (cb=0x20c) returned 0x719128 [0082.842] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\Windows\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19c300, pwszFileMUIPath=0x719128, pcchFileMUIPath=0x19c304, pululEnumerator=0x19c2f8 | out: pwszLanguage=0x0, pcchLanguage=0x19c300, pwszFileMUIPath="C:\\Windows\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19c304, pululEnumerator=0x19c2f8) returned 1 [0082.844] CoTaskMemFree (pv=0x0) [0082.844] CoTaskMemFree (pv=0x719128) [0082.844] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x8b0001 [0082.845] CoTaskMemAlloc (cb=0x3ec) returned 0x728268 [0082.845] LoadStringW (in: hInstance=0x8b0001, uID=0x141, lpBuffer=0x728268, cchBufferMax=500 | out: lpBuffer="W. Europe Daylight Time") returned 0x17 [0082.845] CoTaskMemFree (pv=0x728268) [0082.845] FreeLibrary (hLibModule=0x8b0001) returned 1 [0082.846] RegCloseKey (hKey=0x318) returned 0x0 [0083.256] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x318 [0083.262] CoGetObjectContext (in: riid=0x22b8fd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19aba4 | out: ppv=0x19aba4*=0x6bb23c) returned 0x0 [0083.349] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x199de8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0083.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll", cchWideChar=63, lpMultiByteStr=0x19a330, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll", lpUsedDefaultChar=0x0) returned 63 [0083.351] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll") returned 0x6b370000 [0083.368] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ResetSecurity", cchWideChar=13, lpMultiByteStr=0x19a364, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ResetSecurity DkÁ\x12®²(úXo,¦\x19", lpUsedDefaultChar=0x0) returned 13 [0083.368] GetProcAddress (hModule=0x6b370000, lpProcName="ResetSecurity") returned 0x6b372cc0 [0083.379] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetSecurity", cchWideChar=11, lpMultiByteStr=0x19a364, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SetSecurity", lpUsedDefaultChar=0x0) returned 11 [0083.379] GetProcAddress (hModule=0x6b370000, lpProcName="SetSecurity") returned 0x6b372d10 [0083.389] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServices", cchWideChar=18, lpMultiByteStr=0x19a360, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicesDkÁ\x12®²(úXo,¦\x19", lpUsedDefaultChar=0x0) returned 18 [0083.389] GetProcAddress (hModule=0x6b370000, lpProcName="BlessIWbemServices") returned 0x6b372090 [0083.425] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServicesObject", cchWideChar=24, lpMultiByteStr=0x19a358, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicesObject´ DkÁ\x12®²(úXo,¦\x19", lpUsedDefaultChar=0x0) returned 24 [0083.425] GetProcAddress (hModule=0x6b370000, lpProcName="BlessIWbemServicesObject") returned 0x6b3720f0 [0083.434] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyHandle", cchWideChar=17, lpMultiByteStr=0x19a360, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyHandle DkÁ\x12®²(úXo,¦\x19", lpUsedDefaultChar=0x0) returned 17 [0083.434] GetProcAddress (hModule=0x6b370000, lpProcName="GetPropertyHandle") returned 0x6b3727a0 [0083.439] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WritePropertyValue", cchWideChar=18, lpMultiByteStr=0x19a360, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WritePropertyValueDkÁ\x12®²(úXo,¦\x19", lpUsedDefaultChar=0x0) returned 18 [0083.439] GetProcAddress (hModule=0x6b370000, lpProcName="WritePropertyValue") returned 0x6b372e50 [0083.444] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x19a36c, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone DkÁ\x12®²(úXo,¦\x19", lpUsedDefaultChar=0x0) returned 5 [0083.444] GetProcAddress (hModule=0x6b370000, lpProcName="Clone") returned 0x6b372150 [0083.449] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VerifyClientKey", cchWideChar=15, lpMultiByteStr=0x19a360, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VerifyClientKey", lpUsedDefaultChar=0x0) returned 15 [0083.449] GetProcAddress (hModule=0x6b370000, lpProcName="VerifyClientKey") returned 0x6b372e00 [0083.452] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetQualifierSet", cchWideChar=15, lpMultiByteStr=0x19a360, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetQualifierSet", lpUsedDefaultChar=0x0) returned 15 [0083.452] GetProcAddress (hModule=0x6b370000, lpProcName="GetQualifierSet") returned 0x6b372860 [0083.453] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Get", cchWideChar=3, lpMultiByteStr=0x19a36c, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Get", lpUsedDefaultChar=0x0) returned 3 [0083.453] GetProcAddress (hModule=0x6b370000, lpProcName="Get") returned 0x6b372630 [0083.476] GetProcAddress (hModule=0x6b370000, lpProcName="Put") returned 0x6b372970 [0083.479] GetProcAddress (hModule=0x6b370000, lpProcName="Delete") returned 0x6b372410 [0083.482] GetProcAddress (hModule=0x6b370000, lpProcName="GetNames") returned 0x6b372740 [0083.491] GetProcAddress (hModule=0x6b370000, lpProcName="BeginEnumeration") returned 0x6b372050 [0083.494] GetProcAddress (hModule=0x6b370000, lpProcName="Next") returned 0x6b372910 [0083.497] GetProcAddress (hModule=0x6b370000, lpProcName="EndEnumeration") returned 0x6b3724d0 [0083.499] GetProcAddress (hModule=0x6b370000, lpProcName="GetPropertyQualifierSet") returned 0x6b372830 [0083.500] GetProcAddress (hModule=0x6b370000, lpProcName="Clone") returned 0x6b372150 [0083.501] GetProcAddress (hModule=0x6b370000, lpProcName="GetObjectText") returned 0x6b372770 [0083.502] GetProcAddress (hModule=0x6b370000, lpProcName="SpawnDerivedClass") returned 0x6b372d60 [0083.504] GetProcAddress (hModule=0x6b370000, lpProcName="SpawnInstance") returned 0x6b372d90 [0083.504] GetProcAddress (hModule=0x6b370000, lpProcName="CompareTo") returned 0x6b372200 [0083.506] GetProcAddress (hModule=0x6b370000, lpProcName="GetPropertyOrigin") returned 0x6b372800 [0083.509] GetProcAddress (hModule=0x6b370000, lpProcName="InheritsFrom") returned 0x6b372880 [0083.509] GetProcAddress (hModule=0x6b370000, lpProcName="GetMethod") returned 0x6b3726b0 [0083.511] GetProcAddress (hModule=0x6b370000, lpProcName="PutMethod") returned 0x6b372ae0 [0083.512] GetProcAddress (hModule=0x6b370000, lpProcName="DeleteMethod") returned 0x6b372430 [0083.513] GetProcAddress (hModule=0x6b370000, lpProcName="BeginMethodEnumeration") returned 0x6b372070 [0083.513] GetProcAddress (hModule=0x6b370000, lpProcName="NextMethod") returned 0x6b372940 [0083.515] GetProcAddress (hModule=0x6b370000, lpProcName="EndMethodEnumeration") returned 0x6b3724f0 [0083.515] GetProcAddress (hModule=0x6b370000, lpProcName="GetMethodQualifierSet") returned 0x6b372710 [0083.515] GetProcAddress (hModule=0x6b370000, lpProcName="GetMethodOrigin") returned 0x6b3726e0 [0083.515] GetProcAddress (hModule=0x6b370000, lpProcName="QualifierSet_Get") returned 0x6b372b70 [0083.517] GetProcAddress (hModule=0x6b370000, lpProcName="QualifierSet_Put") returned 0x6b372c00 [0083.519] GetProcAddress (hModule=0x6b370000, lpProcName="QualifierSet_Delete") returned 0x6b372b30 [0083.519] GetProcAddress (hModule=0x6b370000, lpProcName="QualifierSet_GetNames") returned 0x6b372ba0 [0083.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_BeginEnumeration", cchWideChar=29, lpMultiByteStr=0x19a354, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_BeginEnumeration DkÁ\x12®²(úXo,¦\x19", lpUsedDefaultChar=0x0) returned 29 [0083.541] GetProcAddress (hModule=0x6b370000, lpProcName="QualifierSet_BeginEnumeration") returned 0x6b372b10 [0083.541] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Next", cchWideChar=17, lpMultiByteStr=0x19a360, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Next DkÁ\x12®²(úXo,¦\x19", lpUsedDefaultChar=0x0) returned 17 [0083.541] GetProcAddress (hModule=0x6b370000, lpProcName="QualifierSet_Next") returned 0x6b372bd0 [0083.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_EndEnumeration", cchWideChar=27, lpMultiByteStr=0x19a354, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_EndEnumeration", lpUsedDefaultChar=0x0) returned 27 [0083.543] GetProcAddress (hModule=0x6b370000, lpProcName="QualifierSet_EndEnumeration") returned 0x6b372b50 [0083.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetCurrentApartmentType", cchWideChar=23, lpMultiByteStr=0x19a358, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetCurrentApartmentType", lpUsedDefaultChar=0x0) returned 23 [0083.543] GetProcAddress (hModule=0x6b370000, lpProcName="GetCurrentApartmentType") returned 0x6b372860 [0083.545] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetDemultiplexedStub", cchWideChar=20, lpMultiByteStr=0x19a35c, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetDemultiplexedStub´ DkÁ\x12®²(úXo,¦\x19", lpUsedDefaultChar=0x0) returned 20 [0083.545] GetProcAddress (hModule=0x6b370000, lpProcName="GetDemultiplexedStub") returned 0x6b372660 [0083.548] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateInstanceEnumWmi", cchWideChar=21, lpMultiByteStr=0x19a35c, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateInstanceEnumWmi DkÁ\x12®²(úXo,¦\x19", lpUsedDefaultChar=0x0) returned 21 [0083.548] GetProcAddress (hModule=0x6b370000, lpProcName="CreateInstanceEnumWmi") returned 0x6b372380 [0083.554] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateClassEnumWmi", cchWideChar=18, lpMultiByteStr=0x19a360, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateClassEnumWmiDkÁ\x12®²(úXo,¦\x19", lpUsedDefaultChar=0x0) returned 18 [0083.554] GetProcAddress (hModule=0x6b370000, lpProcName="CreateClassEnumWmi") returned 0x6b3722f0 [0083.554] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecQueryWmi", cchWideChar=12, lpMultiByteStr=0x19a364, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecQueryWmi´ DkÁ\x12®²(úXo,¦\x19", lpUsedDefaultChar=0x0) returned 12 [0083.554] GetProcAddress (hModule=0x6b370000, lpProcName="ExecQueryWmi") returned 0x6b3725a0 [0083.558] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecNotificationQueryWmi", cchWideChar=24, lpMultiByteStr=0x19a358, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecNotificationQueryWmi´ DkÁ\x12®²(úXo,¦\x19", lpUsedDefaultChar=0x0) returned 24 [0083.558] GetProcAddress (hModule=0x6b370000, lpProcName="ExecNotificationQueryWmi") returned 0x6b372510 [0083.558] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutInstanceWmi", cchWideChar=14, lpMultiByteStr=0x19a364, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutInstanceWmiDkÁ\x12®²(úXo,¦\x19", lpUsedDefaultChar=0x0) returned 14 [0083.558] GetProcAddress (hModule=0x6b370000, lpProcName="PutInstanceWmi") returned 0x6b372a40 [0083.560] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutClassWmi", cchWideChar=11, lpMultiByteStr=0x19a364, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutClassWmi", lpUsedDefaultChar=0x0) returned 11 [0083.561] GetProcAddress (hModule=0x6b370000, lpProcName="PutClassWmi") returned 0x6b3729a0 [0083.561] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CloneEnumWbemClassObject", cchWideChar=24, lpMultiByteStr=0x19a358, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CloneEnumWbemClassObject´ DkÁ\x12®²(úXo,¦\x19", lpUsedDefaultChar=0x0) returned 24 [0083.561] GetProcAddress (hModule=0x6b370000, lpProcName="CloneEnumWbemClassObject") returned 0x6b372170 [0083.564] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConnectServerWmi", cchWideChar=16, lpMultiByteStr=0x19a360, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ConnectServerWmi´ DkÁ\x12®²(úXo,¦\x19", lpUsedDefaultChar=0x0) returned 16 [0083.564] GetProcAddress (hModule=0x6b370000, lpProcName="ConnectServerWmi") returned 0x6b372230 [0083.571] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6bb23c, pAptType=0x19ab9c | out: pAptType=0x19ab9c*=1) returned 0x0 [0083.571] IUnknown:QueryInterface (in: This=0x6bb23c, riid=0x22b8fc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19aba0 | out: ppvObject=0x19aba0*=0x0) returned 0x80004002 [0083.571] IUnknown:Release (This=0x6bb23c) returned 0x0 [0083.608] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x19a7fc | out: lpiid=0x19a7fc) returned 0x0 [0083.611] CoGetClassObject (in: rclsid=0x729d7c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f704d80*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19a508 | out: ppv=0x19a508*=0x72c9b0) returned 0x0 [0083.693] WbemDefPath:IUnknown:QueryInterface (in: This=0x72c9b0, riid=0x6f6e79fc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19a724 | out: ppvObject=0x19a724*=0x0) returned 0x80004002 [0083.693] WbemDefPath:IClassFactory:CreateInstance (in: This=0x72c9b0, pUnkOuter=0x0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a730 | out: ppvObject=0x19a730*=0x7291e0) returned 0x0 [0083.694] WbemDefPath:IUnknown:Release (This=0x72c9b0) returned 0x0 [0083.694] WbemDefPath:IUnknown:QueryInterface (in: This=0x7291e0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a354 | out: ppvObject=0x19a354*=0x7291e0) returned 0x0 [0083.695] WbemDefPath:IUnknown:QueryInterface (in: This=0x7291e0, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19a310 | out: ppvObject=0x19a310*=0x0) returned 0x80004002 [0083.695] WbemDefPath:IUnknown:QueryInterface (in: This=0x7291e0, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x199f04 | out: ppvObject=0x199f04*=0x0) returned 0x80004002 [0083.695] WbemDefPath:IUnknown:AddRef (This=0x7291e0) returned 0x3 [0083.695] WbemDefPath:IUnknown:QueryInterface (in: This=0x7291e0, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x199c64 | out: ppvObject=0x199c64*=0x0) returned 0x80004002 [0083.695] WbemDefPath:IUnknown:QueryInterface (in: This=0x7291e0, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x199c14 | out: ppvObject=0x199c14*=0x0) returned 0x80004002 [0083.695] WbemDefPath:IUnknown:QueryInterface (in: This=0x7291e0, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x199c20 | out: ppvObject=0x199c20*=0x7367a0) returned 0x0 [0083.695] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7367a0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x199c28 | out: pCid=0x199c28*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0083.695] WbemDefPath:IUnknown:Release (This=0x7367a0) returned 0x3 [0083.695] CoGetContextToken (in: pToken=0x199c80 | out: pToken=0x199c80) returned 0x0 [0083.696] CoGetContextToken (in: pToken=0x19a088 | out: pToken=0x19a088) returned 0x0 [0083.696] WbemDefPath:IUnknown:QueryInterface (in: This=0x7291e0, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a114 | out: ppvObject=0x19a114*=0x0) returned 0x80004002 [0083.696] WbemDefPath:IUnknown:Release (This=0x7291e0) returned 0x2 [0083.696] WbemDefPath:IUnknown:Release (This=0x7291e0) returned 0x1 [0083.696] CoGetContextToken (in: pToken=0x19aa20 | out: pToken=0x19aa20) returned 0x0 [0083.696] CoGetContextToken (in: pToken=0x19a980 | out: pToken=0x19a980) returned 0x0 [0083.696] WbemDefPath:IUnknown:QueryInterface (in: This=0x7291e0, riid=0x19aa50*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19aa4c | out: ppvObject=0x19aa4c*=0x7291e0) returned 0x0 [0083.696] WbemDefPath:IUnknown:AddRef (This=0x7291e0) returned 0x3 [0083.696] WbemDefPath:IUnknown:Release (This=0x7291e0) returned 0x2 [0083.698] WbemDefPath:IWbemPath:SetText (This=0x7291e0, uMode=0x4, pszPath="root\\CIMV2") returned 0x0 [0083.698] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7291e0, puCount=0x19abcc | out: puCount=0x19abcc*=0x2) returned 0x0 [0083.698] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=4, puBuffLength=0x19abc8*=0x0, pszText=0x0 | out: puBuffLength=0x19abc8*=0xf, pszText=0x0) returned 0x0 [0083.699] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=4, puBuffLength=0x19abc8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19abc8*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0083.699] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7291e0, puCount=0x19abb8 | out: puCount=0x19abb8*=0x2) returned 0x0 [0083.699] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=4, puBuffLength=0x19abb4*=0x0, pszText=0x0 | out: puBuffLength=0x19abb4*=0xf, pszText=0x0) returned 0x0 [0083.699] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=4, puBuffLength=0x19abb4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19abb4*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0083.703] CoGetObjectContext (in: riid=0x22b8fd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ab48 | out: ppv=0x19ab48*=0x6bb23c) returned 0x0 [0083.703] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6bb23c, pAptType=0x19ab40 | out: pAptType=0x19ab40*=1) returned 0x0 [0083.703] IUnknown:QueryInterface (in: This=0x6bb23c, riid=0x22b8fc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19ab44 | out: ppvObject=0x19ab44*=0x0) returned 0x80004002 [0083.703] IUnknown:Release (This=0x6bb23c) returned 0x0 [0083.703] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x19aa4c | out: lpiid=0x19aa4c) returned 0x0 [0083.703] CoGetClassObject (in: rclsid=0x729b0c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f704d80*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19a758 | out: ppv=0x19a758*=0x736740) returned 0x0 [0083.713] WbemLocator:IUnknown:QueryInterface (in: This=0x736740, riid=0x6f6e79fc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19a974 | out: ppvObject=0x19a974*=0x0) returned 0x80004002 [0083.713] WbemLocator:IClassFactory:CreateInstance (in: This=0x736740, pUnkOuter=0x0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a980 | out: ppvObject=0x19a980*=0x72c8e0) returned 0x0 [0083.714] WbemLocator:IUnknown:Release (This=0x736740) returned 0x0 [0083.714] WbemLocator:IUnknown:QueryInterface (in: This=0x72c8e0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a5a4 | out: ppvObject=0x19a5a4*=0x72c8e0) returned 0x0 [0083.714] WbemLocator:IUnknown:QueryInterface (in: This=0x72c8e0, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19a560 | out: ppvObject=0x19a560*=0x0) returned 0x80004002 [0083.714] WbemLocator:IUnknown:QueryInterface (in: This=0x72c8e0, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19a154 | out: ppvObject=0x19a154*=0x0) returned 0x80004002 [0083.714] WbemLocator:IUnknown:AddRef (This=0x72c8e0) returned 0x3 [0083.714] WbemLocator:IUnknown:QueryInterface (in: This=0x72c8e0, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x199eb4 | out: ppvObject=0x199eb4*=0x0) returned 0x80004002 [0083.714] WbemLocator:IUnknown:QueryInterface (in: This=0x72c8e0, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x199e64 | out: ppvObject=0x199e64*=0x0) returned 0x80004002 [0083.714] WbemLocator:IUnknown:QueryInterface (in: This=0x72c8e0, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x199e70 | out: ppvObject=0x199e70*=0x0) returned 0x80004002 [0083.714] CoGetContextToken (in: pToken=0x199ed0 | out: pToken=0x199ed0) returned 0x0 [0083.715] CoGetObjectContext (in: riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x736744 | out: ppv=0x736744*=0x6bb230) returned 0x0 [0083.715] CoGetContextToken (in: pToken=0x19a2d8 | out: pToken=0x19a2d8) returned 0x0 [0083.715] WbemLocator:IUnknown:QueryInterface (in: This=0x72c8e0, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a364 | out: ppvObject=0x19a364*=0x0) returned 0x80004002 [0083.715] WbemLocator:IUnknown:Release (This=0x72c8e0) returned 0x2 [0083.715] WbemLocator:IUnknown:Release (This=0x72c8e0) returned 0x1 [0083.715] CoGetContextToken (in: pToken=0x19a960 | out: pToken=0x19a960) returned 0x0 [0083.715] CoGetContextToken (in: pToken=0x19a8c0 | out: pToken=0x19a8c0) returned 0x0 [0083.715] WbemLocator:IUnknown:QueryInterface (in: This=0x72c8e0, riid=0x19a990*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19a98c | out: ppvObject=0x19a98c*=0x72c8e0) returned 0x0 [0083.715] WbemLocator:IUnknown:AddRef (This=0x72c8e0) returned 0x3 [0083.715] WbemLocator:IUnknown:Release (This=0x72c8e0) returned 0x2 [0083.717] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7291e0, puCount=0x19ab24 | out: puCount=0x19ab24*=0x2) returned 0x0 [0083.717] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=8, puBuffLength=0x19ab20*=0x0, pszText=0x0 | out: puBuffLength=0x19ab20*=0xf, pszText=0x0) returned 0x0 [0083.717] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=8, puBuffLength=0x19ab20*=0xf, pszText="00000000000000" | out: puBuffLength=0x19ab20*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0083.717] CoCreateInstance (in: rclsid=0x6b3713b4*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6b371414*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19a9fc | out: ppv=0x19a9fc*=0x72c980) returned 0x0 [0083.717] WbemLocator:IWbemLocator:ConnectServer (in: This=0x72c980, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19aa90 | out: ppNamespace=0x19aa90*=0x6cd7b0) returned 0x0 [0084.311] WbemLocator:IUnknown:QueryInterface (in: This=0x6cd7b0, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a924 | out: ppvObject=0x19a924*=0x72aec4) returned 0x0 [0084.311] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x72aec4, pProxy=0x6cd7b0, pAuthnSvc=0x19a974, pAuthzSvc=0x19a970, pServerPrincName=0x19a968, pAuthnLevel=0x19a96c, pImpLevel=0x19a95c, pAuthInfo=0x19a960, pCapabilites=0x19a964 | out: pAuthnSvc=0x19a974*=0xa, pAuthzSvc=0x19a970*=0x0, pServerPrincName=0x19a968, pAuthnLevel=0x19a96c*=0x6, pImpLevel=0x19a95c*=0x2, pAuthInfo=0x19a960, pCapabilites=0x19a964*=0x1) returned 0x0 [0084.311] WbemLocator:IUnknown:Release (This=0x72aec4) returned 0x1 [0084.311] WbemLocator:IUnknown:QueryInterface (in: This=0x6cd7b0, riid=0x6b371224*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a918 | out: ppvObject=0x19a918*=0x72aee8) returned 0x0 [0084.311] WbemLocator:IUnknown:QueryInterface (in: This=0x6cd7b0, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a904 | out: ppvObject=0x19a904*=0x72aec4) returned 0x0 [0084.311] WbemLocator:IClientSecurity:SetBlanket (This=0x72aec4, pProxy=0x6cd7b0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0084.312] WbemLocator:IUnknown:Release (This=0x72aec4) returned 0x2 [0084.312] WbemLocator:IUnknown:Release (This=0x72aee8) returned 0x1 [0084.312] CoTaskMemFree (pv=0x740390) [0084.312] WbemLocator:IUnknown:Release (This=0x72c980) returned 0x0 [0084.312] WbemLocator:IUnknown:QueryInterface (in: This=0x6cd7b0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a514 | out: ppvObject=0x19a514*=0x72aee8) returned 0x0 [0084.312] WbemLocator:IUnknown:QueryInterface (in: This=0x72aee8, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19a4d0 | out: ppvObject=0x19a4d0*=0x0) returned 0x80004002 [0084.312] WbemLocator:IUnknown:QueryInterface (in: This=0x72aee8, riid=0x6f729bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19a2ec | out: ppvObject=0x19a2ec*=0x0) returned 0x80004002 [0084.312] WbemLocator:IUnknown:QueryInterface (in: This=0x6cd7b0, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19a0c4 | out: ppvObject=0x19a0c4*=0x0) returned 0x80004002 [0084.313] WbemLocator:IUnknown:AddRef (This=0x72aee8) returned 0x3 [0084.313] WbemLocator:IUnknown:QueryInterface (in: This=0x72aee8, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x199e24 | out: ppvObject=0x199e24*=0x0) returned 0x80004002 [0084.313] WbemLocator:IUnknown:QueryInterface (in: This=0x72aee8, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x199dd4 | out: ppvObject=0x199dd4*=0x0) returned 0x80004002 [0084.313] WbemLocator:IUnknown:QueryInterface (in: This=0x72aee8, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x199de0 | out: ppvObject=0x199de0*=0x72ae44) returned 0x0 [0084.313] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x72ae44, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x199de8 | out: pCid=0x199de8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0084.313] WbemLocator:IUnknown:Release (This=0x72ae44) returned 0x3 [0084.313] CoGetContextToken (in: pToken=0x199e40 | out: pToken=0x199e40) returned 0x0 [0084.313] CoGetContextToken (in: pToken=0x19a248 | out: pToken=0x19a248) returned 0x0 [0084.313] WbemLocator:IUnknown:QueryInterface (in: This=0x72aee8, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a2d4 | out: ppvObject=0x19a2d4*=0x72aecc) returned 0x0 [0084.313] WbemLocator:IRpcOptions:Query (in: This=0x72aecc, pPrx=0x72aee8, dwProperty=2, pdwValue=0x19a2e0 | out: pdwValue=0x19a2e0) returned 0x80004002 [0084.313] WbemLocator:IUnknown:Release (This=0x72aecc) returned 0x3 [0084.313] WbemLocator:IUnknown:Release (This=0x72aee8) returned 0x2 [0084.313] CoGetContextToken (in: pToken=0x19a828 | out: pToken=0x19a828) returned 0x0 [0084.314] CoGetContextToken (in: pToken=0x19a788 | out: pToken=0x19a788) returned 0x0 [0084.314] WbemLocator:IUnknown:QueryInterface (in: This=0x72aee8, riid=0x19a858*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19a854 | out: ppvObject=0x19a854*=0x6cd7b0) returned 0x0 [0084.314] WbemLocator:IUnknown:AddRef (This=0x6cd7b0) returned 0x4 [0084.314] WbemLocator:IUnknown:Release (This=0x6cd7b0) returned 0x3 [0084.314] WbemLocator:IUnknown:Release (This=0x6cd7b0) returned 0x2 [0084.336] SysStringLen (param_1=0x0) returned 0x0 [0084.337] CoGetContextToken (in: pToken=0x19a828 | out: pToken=0x19a828) returned 0x0 [0084.337] WbemLocator:IUnknown:AddRef (This=0x72aee8) returned 0x3 [0084.337] WbemLocator:IUnknown:QueryInterface (in: This=0x72aee8, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a6bc | out: ppvObject=0x19a6bc*=0x72aee8) returned 0x0 [0084.337] WbemLocator:IUnknown:Release (This=0x72aee8) returned 0x3 [0084.337] WbemLocator:IUnknown:Release (This=0x72aee8) returned 0x2 [0084.337] CoGetContextToken (in: pToken=0x19a920 | out: pToken=0x19a920) returned 0x0 [0084.337] WbemLocator:IUnknown:AddRef (This=0x6cd7b0) returned 0x3 [0084.337] IWbemServices:ExecQuery (in: This=0x6cd7b0, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_Processor", lFlags=16, pCtx=0x0, ppEnum=0x19ab30 | out: ppEnum=0x19ab30*=0x6db7d8) returned 0x0 [0084.343] IUnknown:QueryInterface (in: This=0x6db7d8, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a98c | out: ppvObject=0x19a98c*=0x6db7dc) returned 0x0 [0084.343] IClientSecurity:QueryBlanket (in: This=0x6db7dc, pProxy=0x6db7d8, pAuthnSvc=0x19a9dc, pAuthzSvc=0x19a9d8, pServerPrincName=0x19a9d0, pAuthnLevel=0x19a9d4, pImpLevel=0x19a9c4, pAuthInfo=0x19a9c8, pCapabilites=0x19a9cc | out: pAuthnSvc=0x19a9dc*=0xa, pAuthzSvc=0x19a9d8*=0x0, pServerPrincName=0x19a9d0, pAuthnLevel=0x19a9d4*=0x6, pImpLevel=0x19a9c4*=0x2, pAuthInfo=0x19a9c8, pCapabilites=0x19a9cc*=0x1) returned 0x0 [0084.343] IUnknown:Release (This=0x6db7dc) returned 0x1 [0084.343] IUnknown:QueryInterface (in: This=0x6db7d8, riid=0x6b371224*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a980 | out: ppvObject=0x19a980*=0x72a4e8) returned 0x0 [0084.343] IUnknown:QueryInterface (in: This=0x6db7d8, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a96c | out: ppvObject=0x19a96c*=0x6db7dc) returned 0x0 [0084.343] IClientSecurity:SetBlanket (This=0x6db7dc, pProxy=0x6db7d8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0084.347] IUnknown:Release (This=0x6db7dc) returned 0x2 [0084.347] WbemLocator:IUnknown:Release (This=0x72a4e8) returned 0x1 [0084.347] CoTaskMemFree (pv=0x7402d0) [0084.347] IUnknown:QueryInterface (in: This=0x6db7d8, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a578 | out: ppvObject=0x19a578*=0x72a4e8) returned 0x0 [0084.347] WbemLocator:IUnknown:QueryInterface (in: This=0x72a4e8, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19a534 | out: ppvObject=0x19a534*=0x0) returned 0x80004002 [0084.347] WbemLocator:IUnknown:QueryInterface (in: This=0x72a4e8, riid=0x6f729bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19a354 | out: ppvObject=0x19a354*=0x0) returned 0x80004002 [0084.348] IUnknown:QueryInterface (in: This=0x6db7d8, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19a12c | out: ppvObject=0x19a12c*=0x0) returned 0x80004002 [0084.348] WbemLocator:IUnknown:AddRef (This=0x72a4e8) returned 0x3 [0084.348] WbemLocator:IUnknown:QueryInterface (in: This=0x72a4e8, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x199e8c | out: ppvObject=0x199e8c*=0x0) returned 0x80004002 [0084.729] WbemLocator:IUnknown:QueryInterface (in: This=0x72a4e8, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x199e3c | out: ppvObject=0x199e3c*=0x0) returned 0x80004002 [0084.729] WbemLocator:IUnknown:QueryInterface (in: This=0x72a4e8, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x199e48 | out: ppvObject=0x199e48*=0x72a444) returned 0x0 [0084.729] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x72a444, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x199e50 | out: pCid=0x199e50*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0084.729] WbemLocator:IUnknown:Release (This=0x72a444) returned 0x3 [0084.729] CoGetContextToken (in: pToken=0x199ea8 | out: pToken=0x199ea8) returned 0x0 [0084.729] CoGetContextToken (in: pToken=0x19a2b0 | out: pToken=0x19a2b0) returned 0x0 [0084.729] WbemLocator:IUnknown:QueryInterface (in: This=0x72a4e8, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a33c | out: ppvObject=0x19a33c*=0x72a4cc) returned 0x0 [0084.729] WbemLocator:IRpcOptions:Query (in: This=0x72a4cc, pPrx=0x72a4e8, dwProperty=2, pdwValue=0x19a348 | out: pdwValue=0x19a348) returned 0x80004002 [0084.730] WbemLocator:IUnknown:Release (This=0x72a4cc) returned 0x3 [0084.730] WbemLocator:IUnknown:Release (This=0x72a4e8) returned 0x2 [0084.730] CoGetContextToken (in: pToken=0x19a888 | out: pToken=0x19a888) returned 0x0 [0084.730] CoGetContextToken (in: pToken=0x19a7e8 | out: pToken=0x19a7e8) returned 0x0 [0084.730] WbemLocator:IUnknown:QueryInterface (in: This=0x72a4e8, riid=0x19a8b8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19a8b4 | out: ppvObject=0x19a8b4*=0x6db7d8) returned 0x0 [0084.730] IUnknown:AddRef (This=0x6db7d8) returned 0x4 [0084.730] IUnknown:Release (This=0x6db7d8) returned 0x3 [0084.730] IUnknown:Release (This=0x6db7d8) returned 0x2 [0084.730] WbemLocator:IUnknown:Release (This=0x6cd7b0) returned 0x2 [0084.730] SysStringLen (param_1=0x0) returned 0x0 [0084.730] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7291e0, puCount=0x19ab7c | out: puCount=0x19ab7c*=0x2) returned 0x0 [0084.730] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=4, puBuffLength=0x19ab78*=0x0, pszText=0x0 | out: puBuffLength=0x19ab78*=0xf, pszText=0x0) returned 0x0 [0084.730] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=4, puBuffLength=0x19ab78*=0xf, pszText="00000000000000" | out: puBuffLength=0x19ab78*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0084.730] CoGetContextToken (in: pToken=0x19a9c8 | out: pToken=0x19a9c8) returned 0x0 [0084.730] IUnknown:AddRef (This=0x6db7d8) returned 0x3 [0084.730] IEnumWbemClassObject:Clone (in: This=0x6db7d8, ppEnum=0x19ab88 | out: ppEnum=0x19ab88*=0x6dbc88) returned 0x0 [0084.875] IUnknown:QueryInterface (in: This=0x6dbc88, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19aa44 | out: ppvObject=0x19aa44*=0x6dbc8c) returned 0x0 [0084.875] IClientSecurity:QueryBlanket (in: This=0x6dbc8c, pProxy=0x6dbc88, pAuthnSvc=0x19aa94, pAuthzSvc=0x19aa90, pServerPrincName=0x19aa88, pAuthnLevel=0x19aa8c, pImpLevel=0x19aa7c, pAuthInfo=0x19aa80, pCapabilites=0x19aa84 | out: pAuthnSvc=0x19aa94*=0xa, pAuthzSvc=0x19aa90*=0x0, pServerPrincName=0x19aa88, pAuthnLevel=0x19aa8c*=0x6, pImpLevel=0x19aa7c*=0x2, pAuthInfo=0x19aa80, pCapabilites=0x19aa84*=0x1) returned 0x0 [0084.875] IUnknown:Release (This=0x6dbc8c) returned 0x1 [0084.875] IUnknown:QueryInterface (in: This=0x6dbc88, riid=0x6b371224*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19aa38 | out: ppvObject=0x19aa38*=0x72a9e8) returned 0x0 [0084.875] IUnknown:QueryInterface (in: This=0x6dbc88, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19aa24 | out: ppvObject=0x19aa24*=0x6dbc8c) returned 0x0 [0084.875] IClientSecurity:SetBlanket (This=0x6dbc8c, pProxy=0x6dbc88, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0084.877] IUnknown:Release (This=0x6dbc8c) returned 0x2 [0084.877] WbemLocator:IUnknown:Release (This=0x72a9e8) returned 0x1 [0084.877] CoTaskMemFree (pv=0x740150) [0084.878] IUnknown:QueryInterface (in: This=0x6dbc88, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a620 | out: ppvObject=0x19a620*=0x72a9e8) returned 0x0 [0084.878] WbemLocator:IUnknown:QueryInterface (in: This=0x72a9e8, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19a5dc | out: ppvObject=0x19a5dc*=0x0) returned 0x80004002 [0084.878] WbemLocator:IUnknown:QueryInterface (in: This=0x72a9e8, riid=0x6f729bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19a3fc | out: ppvObject=0x19a3fc*=0x0) returned 0x80004002 [0084.881] IUnknown:QueryInterface (in: This=0x6dbc88, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19a1d4 | out: ppvObject=0x19a1d4*=0x0) returned 0x80004002 [0084.882] WbemLocator:IUnknown:AddRef (This=0x72a9e8) returned 0x3 [0084.882] WbemLocator:IUnknown:QueryInterface (in: This=0x72a9e8, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x199f34 | out: ppvObject=0x199f34*=0x0) returned 0x80004002 [0084.882] WbemLocator:IUnknown:QueryInterface (in: This=0x72a9e8, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x199ee4 | out: ppvObject=0x199ee4*=0x0) returned 0x80004002 [0084.882] WbemLocator:IUnknown:QueryInterface (in: This=0x72a9e8, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x199ef0 | out: ppvObject=0x199ef0*=0x72a944) returned 0x0 [0084.882] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x72a944, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x199ef8 | out: pCid=0x199ef8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0084.883] WbemLocator:IUnknown:Release (This=0x72a944) returned 0x3 [0084.883] CoGetContextToken (in: pToken=0x199f50 | out: pToken=0x199f50) returned 0x0 [0084.883] CoGetContextToken (in: pToken=0x19a358 | out: pToken=0x19a358) returned 0x0 [0084.883] WbemLocator:IUnknown:QueryInterface (in: This=0x72a9e8, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a3e4 | out: ppvObject=0x19a3e4*=0x72a9cc) returned 0x0 [0084.883] WbemLocator:IRpcOptions:Query (in: This=0x72a9cc, pPrx=0x72a9e8, dwProperty=2, pdwValue=0x19a3f0 | out: pdwValue=0x19a3f0) returned 0x80004002 [0084.883] WbemLocator:IUnknown:Release (This=0x72a9cc) returned 0x3 [0084.883] WbemLocator:IUnknown:Release (This=0x72a9e8) returned 0x2 [0084.883] CoGetContextToken (in: pToken=0x19a930 | out: pToken=0x19a930) returned 0x0 [0084.883] CoGetContextToken (in: pToken=0x19a890 | out: pToken=0x19a890) returned 0x0 [0084.883] WbemLocator:IUnknown:QueryInterface (in: This=0x72a9e8, riid=0x19a960*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19a95c | out: ppvObject=0x19a95c*=0x6dbc88) returned 0x0 [0084.883] IUnknown:AddRef (This=0x6dbc88) returned 0x4 [0084.883] IUnknown:Release (This=0x6dbc88) returned 0x3 [0084.883] IUnknown:Release (This=0x6dbc88) returned 0x2 [0084.883] IUnknown:Release (This=0x6db7d8) returned 0x2 [0084.883] SysStringLen (param_1=0x0) returned 0x0 [0084.884] IEnumWbemClassObject:Reset (This=0x6dbc88) returned 0x0 [0085.094] CoTaskMemAlloc (cb=0x4) returned 0x72c960 [0085.094] IEnumWbemClassObject:Next (in: This=0x6dbc88, lTimeout=-1, uCount=0x1, apObjects=0x72c960, puReturned=0x22bca24 | out: apObjects=0x72c960*=0x746fd8, puReturned=0x22bca24*=0x1) returned 0x0 [0088.683] IUnknown:QueryInterface (in: This=0x746fd8, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a1e0 | out: ppvObject=0x19a1e0*=0x746fd8) returned 0x0 [0088.683] IUnknown:QueryInterface (in: This=0x746fd8, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19a19c | out: ppvObject=0x19a19c*=0x0) returned 0x80004002 [0088.683] IUnknown:QueryInterface (in: This=0x746fd8, riid=0x6f729bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x199fbc | out: ppvObject=0x199fbc*=0x0) returned 0x80004002 [0088.683] IUnknown:QueryInterface (in: This=0x746fd8, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x199d94 | out: ppvObject=0x199d94*=0x0) returned 0x80004002 [0088.683] IUnknown:AddRef (This=0x746fd8) returned 0x3 [0088.683] IUnknown:QueryInterface (in: This=0x746fd8, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x199af4 | out: ppvObject=0x199af4*=0x0) returned 0x80004002 [0088.683] IUnknown:QueryInterface (in: This=0x746fd8, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x199aa4 | out: ppvObject=0x199aa4*=0x0) returned 0x80004002 [0088.683] IUnknown:QueryInterface (in: This=0x746fd8, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x199ab0 | out: ppvObject=0x199ab0*=0x746fdc) returned 0x0 [0088.684] IMarshal:GetUnmarshalClass (in: This=0x746fdc, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x199ab8 | out: pCid=0x199ab8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0088.684] IUnknown:Release (This=0x746fdc) returned 0x3 [0088.684] CoGetContextToken (in: pToken=0x199b10 | out: pToken=0x199b10) returned 0x0 [0088.684] CoGetContextToken (in: pToken=0x199f18 | out: pToken=0x199f18) returned 0x0 [0088.684] IUnknown:QueryInterface (in: This=0x746fd8, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x199fa4 | out: ppvObject=0x199fa4*=0x0) returned 0x80004002 [0088.684] IUnknown:Release (This=0x746fd8) returned 0x2 [0088.684] CoGetContextToken (in: pToken=0x19a4f0 | out: pToken=0x19a4f0) returned 0x0 [0088.684] CoGetContextToken (in: pToken=0x19a450 | out: pToken=0x19a450) returned 0x0 [0088.684] IUnknown:QueryInterface (in: This=0x746fd8, riid=0x19a520*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19a51c | out: ppvObject=0x19a51c*=0x746fd8) returned 0x0 [0088.684] IUnknown:AddRef (This=0x746fd8) returned 0x4 [0088.684] IUnknown:Release (This=0x746fd8) returned 0x3 [0088.684] IUnknown:Release (This=0x746fd8) returned 0x2 [0088.685] CoTaskMemFree (pv=0x72c960) [0088.685] CoGetContextToken (in: pToken=0x19a868 | out: pToken=0x19a868) returned 0x0 [0088.685] IUnknown:AddRef (This=0x746fd8) returned 0x3 [0088.686] IWbemClassObject:Get (in: This=0x746fd8, wszName="__GENUS", lFlags=0, pVal=0x19ab78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19abf8*=0, plFlavor=0x19abf4*=0 | out: pVal=0x19ab78*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19abf8*=3, plFlavor=0x19abf4*=64) returned 0x0 [0088.688] IWbemClassObject:Get (in: This=0x746fd8, wszName="__PATH", lFlags=0, pVal=0x19ab5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19abe0*=0, plFlavor=0x19abdc*=0 | out: pVal=0x19ab5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"", varVal2=0x0), pType=0x19abe0*=8, plFlavor=0x19abdc*=64) returned 0x0 [0088.689] SysStringByteLen (bstr="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66 [0088.689] SysStringByteLen (bstr="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66 [0088.690] CoGetObjectContext (in: riid=0x22b8fd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ab88 | out: ppv=0x19ab88*=0x6bb23c) returned 0x0 [0088.690] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6bb23c, pAptType=0x19ab80 | out: pAptType=0x19ab80*=1) returned 0x0 [0088.690] IUnknown:QueryInterface (in: This=0x6bb23c, riid=0x22b8fc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19ab84 | out: ppvObject=0x19ab84*=0x0) returned 0x80004002 [0088.690] IUnknown:Release (This=0x6bb23c) returned 0x1 [0088.691] CoGetClassObject (in: rclsid=0x729d7c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f704d80*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19a4f0 | out: ppv=0x19a4f0*=0x72c910) returned 0x0 [0088.691] WbemDefPath:IUnknown:QueryInterface (in: This=0x72c910, riid=0x6f6e79fc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19a70c | out: ppvObject=0x19a70c*=0x0) returned 0x80004002 [0088.691] WbemDefPath:IClassFactory:CreateInstance (in: This=0x72c910, pUnkOuter=0x0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a718 | out: ppvObject=0x19a718*=0x73acf8) returned 0x0 [0088.691] WbemDefPath:IUnknown:Release (This=0x72c910) returned 0x0 [0088.691] WbemDefPath:IUnknown:QueryInterface (in: This=0x73acf8, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a33c | out: ppvObject=0x19a33c*=0x73acf8) returned 0x0 [0088.691] WbemDefPath:IUnknown:QueryInterface (in: This=0x73acf8, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19a2f8 | out: ppvObject=0x19a2f8*=0x0) returned 0x80004002 [0088.691] WbemDefPath:IUnknown:QueryInterface (in: This=0x73acf8, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x199eec | out: ppvObject=0x199eec*=0x0) returned 0x80004002 [0088.691] WbemDefPath:IUnknown:AddRef (This=0x73acf8) returned 0x3 [0088.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x73acf8, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x199c4c | out: ppvObject=0x199c4c*=0x0) returned 0x80004002 [0088.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x73acf8, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x199bfc | out: ppvObject=0x199bfc*=0x0) returned 0x80004002 [0088.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x73acf8, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x199c08 | out: ppvObject=0x199c08*=0x736c08) returned 0x0 [0088.692] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x736c08, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x199c10 | out: pCid=0x199c10*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0088.692] WbemDefPath:IUnknown:Release (This=0x736c08) returned 0x3 [0088.692] CoGetContextToken (in: pToken=0x199c68 | out: pToken=0x199c68) returned 0x0 [0088.692] CoGetContextToken (in: pToken=0x19a070 | out: pToken=0x19a070) returned 0x0 [0088.692] WbemDefPath:IUnknown:QueryInterface (in: This=0x73acf8, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a0fc | out: ppvObject=0x19a0fc*=0x0) returned 0x80004002 [0088.692] WbemDefPath:IUnknown:Release (This=0x73acf8) returned 0x2 [0088.692] WbemDefPath:IUnknown:Release (This=0x73acf8) returned 0x1 [0088.692] CoGetContextToken (in: pToken=0x19aa00 | out: pToken=0x19aa00) returned 0x0 [0088.693] CoGetContextToken (in: pToken=0x19a960 | out: pToken=0x19a960) returned 0x0 [0088.693] WbemDefPath:IUnknown:QueryInterface (in: This=0x73acf8, riid=0x19aa30*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19aa2c | out: ppvObject=0x19aa2c*=0x73acf8) returned 0x0 [0088.693] WbemDefPath:IUnknown:AddRef (This=0x73acf8) returned 0x3 [0088.693] WbemDefPath:IUnknown:Release (This=0x73acf8) returned 0x2 [0088.693] WbemDefPath:IWbemPath:SetText (This=0x73acf8, uMode=0x4, pszPath="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x0 [0088.693] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7291e0, puCount=0x19abb4 | out: puCount=0x19abb4*=0x2) returned 0x0 [0088.693] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=4, puBuffLength=0x19abb0*=0x0, pszText=0x0 | out: puBuffLength=0x19abb0*=0xf, pszText=0x0) returned 0x0 [0088.693] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=4, puBuffLength=0x19abb0*=0xf, pszText="00000000000000" | out: puBuffLength=0x19abb0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0088.693] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7291e0, puCount=0x19ab80 | out: puCount=0x19ab80*=0x2) returned 0x0 [0088.693] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=4, puBuffLength=0x19ab7c*=0x0, pszText=0x0 | out: puBuffLength=0x19ab7c*=0xf, pszText=0x0) returned 0x0 [0088.693] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=4, puBuffLength=0x19ab7c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19ab7c*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0088.693] IWbemClassObject:Get (in: This=0x746fd8, wszName="Name", lFlags=0, pVal=0x19ab7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x22bd2c4*=0, plFlavor=0x22bd2c8*=0 | out: pVal=0x19ab7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x22bd2c4*=8, plFlavor=0x22bd2c8*=0) returned 0x0 [0088.694] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0088.694] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0088.694] IWbemClassObject:Get (in: This=0x746fd8, wszName="Name", lFlags=0, pVal=0x19ab84*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x22bd2c4*=8, plFlavor=0x22bd2c8*=0 | out: pVal=0x19ab84*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x22bd2c4*=8, plFlavor=0x22bd2c8*=0) returned 0x0 [0088.694] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0088.694] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0088.696] CoGetContextToken (in: pToken=0x19aaa8 | out: pToken=0x19aaa8) returned 0x0 [0088.696] WbemLocator:IUnknown:Release (This=0x72a9e8) returned 0x1 [0088.696] IUnknown:Release (This=0x6dbc88) returned 0x0 [0088.705] CoGetObjectContext (in: riid=0x22b8fd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19aba4 | out: ppv=0x19aba4*=0x6bb23c) returned 0x0 [0088.705] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6bb23c, pAptType=0x19ab9c | out: pAptType=0x19ab9c*=1) returned 0x0 [0088.705] IUnknown:QueryInterface (in: This=0x6bb23c, riid=0x22b8fc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19aba0 | out: ppvObject=0x19aba0*=0x0) returned 0x80004002 [0088.705] IUnknown:Release (This=0x6bb23c) returned 0x1 [0088.705] CoGetClassObject (in: rclsid=0x729d7c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f704d80*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19a508 | out: ppv=0x19a508*=0x72c9e0) returned 0x0 [0088.706] WbemDefPath:IUnknown:QueryInterface (in: This=0x72c9e0, riid=0x6f6e79fc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19a724 | out: ppvObject=0x19a724*=0x0) returned 0x80004002 [0088.706] WbemDefPath:IClassFactory:CreateInstance (in: This=0x72c9e0, pUnkOuter=0x0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a730 | out: ppvObject=0x19a730*=0x6d9490) returned 0x0 [0088.706] WbemDefPath:IUnknown:Release (This=0x72c9e0) returned 0x0 [0088.706] WbemDefPath:IUnknown:QueryInterface (in: This=0x6d9490, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a354 | out: ppvObject=0x19a354*=0x6d9490) returned 0x0 [0088.706] WbemDefPath:IUnknown:QueryInterface (in: This=0x6d9490, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19a310 | out: ppvObject=0x19a310*=0x0) returned 0x80004002 [0088.706] WbemDefPath:IUnknown:QueryInterface (in: This=0x6d9490, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x199f04 | out: ppvObject=0x199f04*=0x0) returned 0x80004002 [0088.706] WbemDefPath:IUnknown:AddRef (This=0x6d9490) returned 0x3 [0088.706] WbemDefPath:IUnknown:QueryInterface (in: This=0x6d9490, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x199c64 | out: ppvObject=0x199c64*=0x0) returned 0x80004002 [0088.706] WbemDefPath:IUnknown:QueryInterface (in: This=0x6d9490, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x199c14 | out: ppvObject=0x199c14*=0x0) returned 0x80004002 [0088.706] WbemDefPath:IUnknown:QueryInterface (in: This=0x6d9490, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x199c20 | out: ppvObject=0x199c20*=0x736ae8) returned 0x0 [0088.706] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x736ae8, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x199c28 | out: pCid=0x199c28*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0088.706] WbemDefPath:IUnknown:Release (This=0x736ae8) returned 0x3 [0088.706] CoGetContextToken (in: pToken=0x199c80 | out: pToken=0x199c80) returned 0x0 [0088.706] CoGetContextToken (in: pToken=0x19a088 | out: pToken=0x19a088) returned 0x0 [0088.706] WbemDefPath:IUnknown:QueryInterface (in: This=0x6d9490, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a114 | out: ppvObject=0x19a114*=0x0) returned 0x80004002 [0088.706] WbemDefPath:IUnknown:Release (This=0x6d9490) returned 0x2 [0088.706] WbemDefPath:IUnknown:Release (This=0x6d9490) returned 0x1 [0088.706] CoGetContextToken (in: pToken=0x19aa20 | out: pToken=0x19aa20) returned 0x0 [0088.706] CoGetContextToken (in: pToken=0x19a980 | out: pToken=0x19a980) returned 0x0 [0088.706] WbemDefPath:IUnknown:QueryInterface (in: This=0x6d9490, riid=0x19aa50*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19aa4c | out: ppvObject=0x19aa4c*=0x6d9490) returned 0x0 [0088.707] WbemDefPath:IUnknown:AddRef (This=0x6d9490) returned 0x3 [0088.707] WbemDefPath:IUnknown:Release (This=0x6d9490) returned 0x2 [0088.707] WbemDefPath:IWbemPath:SetText (This=0x6d9490, uMode=0x4, pszPath="root\\CIMV2") returned 0x0 [0088.707] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6d9490, puCount=0x19abcc | out: puCount=0x19abcc*=0x2) returned 0x0 [0088.707] WbemDefPath:IWbemPath:GetText (in: This=0x6d9490, lFlags=4, puBuffLength=0x19abc8*=0x0, pszText=0x0 | out: puBuffLength=0x19abc8*=0xf, pszText=0x0) returned 0x0 [0088.707] WbemDefPath:IWbemPath:GetText (in: This=0x6d9490, lFlags=4, puBuffLength=0x19abc8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19abc8*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0088.707] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6d9490, puCount=0x19abb8 | out: puCount=0x19abb8*=0x2) returned 0x0 [0088.707] WbemDefPath:IWbemPath:GetText (in: This=0x6d9490, lFlags=4, puBuffLength=0x19abb4*=0x0, pszText=0x0 | out: puBuffLength=0x19abb4*=0xf, pszText=0x0) returned 0x0 [0088.707] WbemDefPath:IWbemPath:GetText (in: This=0x6d9490, lFlags=4, puBuffLength=0x19abb4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19abb4*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0088.707] CoGetObjectContext (in: riid=0x22b8fd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ab48 | out: ppv=0x19ab48*=0x6bb23c) returned 0x0 [0088.707] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6bb23c, pAptType=0x19ab40 | out: pAptType=0x19ab40*=1) returned 0x0 [0088.707] IUnknown:QueryInterface (in: This=0x6bb23c, riid=0x22b8fc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19ab44 | out: ppvObject=0x19ab44*=0x0) returned 0x80004002 [0088.707] IUnknown:Release (This=0x6bb23c) returned 0x1 [0088.707] CoGetClassObject (in: rclsid=0x729b0c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f704d80*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19a758 | out: ppv=0x19a758*=0x736e60) returned 0x0 [0088.708] WbemLocator:IUnknown:QueryInterface (in: This=0x736e60, riid=0x6f6e79fc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19a974 | out: ppvObject=0x19a974*=0x0) returned 0x80004002 [0088.708] WbemLocator:IClassFactory:CreateInstance (in: This=0x736e60, pUnkOuter=0x0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a980 | out: ppvObject=0x19a980*=0x72c980) returned 0x0 [0088.708] WbemLocator:IUnknown:Release (This=0x736e60) returned 0x0 [0088.708] WbemLocator:IUnknown:QueryInterface (in: This=0x72c980, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a5a4 | out: ppvObject=0x19a5a4*=0x72c980) returned 0x0 [0088.708] WbemLocator:IUnknown:QueryInterface (in: This=0x72c980, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19a560 | out: ppvObject=0x19a560*=0x0) returned 0x80004002 [0088.708] WbemLocator:IUnknown:QueryInterface (in: This=0x72c980, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19a154 | out: ppvObject=0x19a154*=0x0) returned 0x80004002 [0088.708] WbemLocator:IUnknown:AddRef (This=0x72c980) returned 0x3 [0088.708] WbemLocator:IUnknown:QueryInterface (in: This=0x72c980, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x199eb4 | out: ppvObject=0x199eb4*=0x0) returned 0x80004002 [0088.708] WbemLocator:IUnknown:QueryInterface (in: This=0x72c980, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x199e64 | out: ppvObject=0x199e64*=0x0) returned 0x80004002 [0088.708] WbemLocator:IUnknown:QueryInterface (in: This=0x72c980, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x199e70 | out: ppvObject=0x199e70*=0x0) returned 0x80004002 [0088.708] CoGetContextToken (in: pToken=0x199ed0 | out: pToken=0x199ed0) returned 0x0 [0088.708] CoGetContextToken (in: pToken=0x19a2d8 | out: pToken=0x19a2d8) returned 0x0 [0088.708] WbemLocator:IUnknown:QueryInterface (in: This=0x72c980, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a364 | out: ppvObject=0x19a364*=0x0) returned 0x80004002 [0088.708] WbemLocator:IUnknown:Release (This=0x72c980) returned 0x2 [0088.708] WbemLocator:IUnknown:Release (This=0x72c980) returned 0x1 [0088.708] CoGetContextToken (in: pToken=0x19a960 | out: pToken=0x19a960) returned 0x0 [0088.708] CoGetContextToken (in: pToken=0x19a8c0 | out: pToken=0x19a8c0) returned 0x0 [0088.708] WbemLocator:IUnknown:QueryInterface (in: This=0x72c980, riid=0x19a990*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19a98c | out: ppvObject=0x19a98c*=0x72c980) returned 0x0 [0088.709] WbemLocator:IUnknown:AddRef (This=0x72c980) returned 0x3 [0088.709] WbemLocator:IUnknown:Release (This=0x72c980) returned 0x2 [0088.709] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6d9490, puCount=0x19ab24 | out: puCount=0x19ab24*=0x2) returned 0x0 [0088.709] WbemDefPath:IWbemPath:GetText (in: This=0x6d9490, lFlags=8, puBuffLength=0x19ab20*=0x0, pszText=0x0 | out: puBuffLength=0x19ab20*=0xf, pszText=0x0) returned 0x0 [0088.709] WbemDefPath:IWbemPath:GetText (in: This=0x6d9490, lFlags=8, puBuffLength=0x19ab20*=0xf, pszText="00000000000000" | out: puBuffLength=0x19ab20*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0088.709] CoCreateInstance (in: rclsid=0x6b3713b4*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6b371414*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19a9fc | out: ppv=0x19a9fc*=0x72c9b0) returned 0x0 [0088.709] WbemLocator:IWbemLocator:ConnectServer (in: This=0x72c9b0, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19aa90 | out: ppNamespace=0x19aa90*=0x6af520) returned 0x0 [0088.728] WbemLocator:IUnknown:QueryInterface (in: This=0x6af520, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a924 | out: ppvObject=0x19a924*=0x72b4c4) returned 0x0 [0088.728] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x72b4c4, pProxy=0x6af520, pAuthnSvc=0x19a974, pAuthzSvc=0x19a970, pServerPrincName=0x19a968, pAuthnLevel=0x19a96c, pImpLevel=0x19a95c, pAuthInfo=0x19a960, pCapabilites=0x19a964 | out: pAuthnSvc=0x19a974*=0xa, pAuthzSvc=0x19a970*=0x0, pServerPrincName=0x19a968, pAuthnLevel=0x19a96c*=0x6, pImpLevel=0x19a95c*=0x2, pAuthInfo=0x19a960, pCapabilites=0x19a964*=0x1) returned 0x0 [0088.728] WbemLocator:IUnknown:Release (This=0x72b4c4) returned 0x1 [0088.728] WbemLocator:IUnknown:QueryInterface (in: This=0x6af520, riid=0x6b371224*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a918 | out: ppvObject=0x19a918*=0x72b4e8) returned 0x0 [0088.728] WbemLocator:IUnknown:QueryInterface (in: This=0x6af520, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a904 | out: ppvObject=0x19a904*=0x72b4c4) returned 0x0 [0088.728] WbemLocator:IClientSecurity:SetBlanket (This=0x72b4c4, pProxy=0x6af520, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0088.728] WbemLocator:IUnknown:Release (This=0x72b4c4) returned 0x2 [0088.728] WbemLocator:IUnknown:Release (This=0x72b4e8) returned 0x1 [0088.728] CoTaskMemFree (pv=0x73fe50) [0088.728] WbemLocator:IUnknown:Release (This=0x72c9b0) returned 0x0 [0088.728] WbemLocator:IUnknown:QueryInterface (in: This=0x6af520, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a514 | out: ppvObject=0x19a514*=0x72b4e8) returned 0x0 [0088.728] WbemLocator:IUnknown:QueryInterface (in: This=0x72b4e8, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19a4d0 | out: ppvObject=0x19a4d0*=0x0) returned 0x80004002 [0088.729] WbemLocator:IUnknown:QueryInterface (in: This=0x72b4e8, riid=0x6f729bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19a2ec | out: ppvObject=0x19a2ec*=0x0) returned 0x80004002 [0088.729] WbemLocator:IUnknown:QueryInterface (in: This=0x6af520, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19a0c4 | out: ppvObject=0x19a0c4*=0x0) returned 0x80004002 [0088.730] WbemLocator:IUnknown:AddRef (This=0x72b4e8) returned 0x3 [0088.730] WbemLocator:IUnknown:QueryInterface (in: This=0x72b4e8, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x199e24 | out: ppvObject=0x199e24*=0x0) returned 0x80004002 [0088.730] WbemLocator:IUnknown:QueryInterface (in: This=0x72b4e8, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x199dd4 | out: ppvObject=0x199dd4*=0x0) returned 0x80004002 [0088.730] WbemLocator:IUnknown:QueryInterface (in: This=0x72b4e8, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x199de0 | out: ppvObject=0x199de0*=0x72b444) returned 0x0 [0088.730] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x72b444, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x199de8 | out: pCid=0x199de8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0088.730] WbemLocator:IUnknown:Release (This=0x72b444) returned 0x3 [0088.730] CoGetContextToken (in: pToken=0x199e40 | out: pToken=0x199e40) returned 0x0 [0088.730] CoGetContextToken (in: pToken=0x19a248 | out: pToken=0x19a248) returned 0x0 [0088.730] WbemLocator:IUnknown:QueryInterface (in: This=0x72b4e8, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a2d4 | out: ppvObject=0x19a2d4*=0x72b4cc) returned 0x0 [0088.730] WbemLocator:IRpcOptions:Query (in: This=0x72b4cc, pPrx=0x72b4e8, dwProperty=2, pdwValue=0x19a2e0 | out: pdwValue=0x19a2e0) returned 0x80004002 [0088.730] WbemLocator:IUnknown:Release (This=0x72b4cc) returned 0x3 [0088.730] WbemLocator:IUnknown:Release (This=0x72b4e8) returned 0x2 [0088.730] CoGetContextToken (in: pToken=0x19a828 | out: pToken=0x19a828) returned 0x0 [0088.730] CoGetContextToken (in: pToken=0x19a788 | out: pToken=0x19a788) returned 0x0 [0088.730] WbemLocator:IUnknown:QueryInterface (in: This=0x72b4e8, riid=0x19a858*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19a854 | out: ppvObject=0x19a854*=0x6af520) returned 0x0 [0088.730] WbemLocator:IUnknown:AddRef (This=0x6af520) returned 0x4 [0088.730] WbemLocator:IUnknown:Release (This=0x6af520) returned 0x3 [0088.730] WbemLocator:IUnknown:Release (This=0x6af520) returned 0x2 [0088.730] SysStringLen (param_1=0x0) returned 0x0 [0088.730] CoGetContextToken (in: pToken=0x19a828 | out: pToken=0x19a828) returned 0x0 [0088.730] WbemLocator:IUnknown:AddRef (This=0x72b4e8) returned 0x3 [0088.730] WbemLocator:IUnknown:QueryInterface (in: This=0x72b4e8, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a6bc | out: ppvObject=0x19a6bc*=0x72b4e8) returned 0x0 [0088.730] WbemLocator:IUnknown:Release (This=0x72b4e8) returned 0x3 [0088.730] WbemLocator:IUnknown:Release (This=0x72b4e8) returned 0x2 [0088.731] CoGetContextToken (in: pToken=0x19a918 | out: pToken=0x19a918) returned 0x0 [0088.731] WbemLocator:IUnknown:AddRef (This=0x6af520) returned 0x3 [0088.731] IWbemServices:ExecQuery (in: This=0x6af520, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_VideoController", lFlags=16, pCtx=0x0, ppEnum=0x19ab30 | out: ppEnum=0x19ab30*=0x6dbe18) returned 0x0 [0088.781] IUnknown:QueryInterface (in: This=0x6dbe18, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a980 | out: ppvObject=0x19a980*=0x6dbe1c) returned 0x0 [0088.781] IClientSecurity:QueryBlanket (in: This=0x6dbe1c, pProxy=0x6dbe18, pAuthnSvc=0x19a9d0, pAuthzSvc=0x19a9cc, pServerPrincName=0x19a9c4, pAuthnLevel=0x19a9c8, pImpLevel=0x19a9b8, pAuthInfo=0x19a9bc, pCapabilites=0x19a9c0 | out: pAuthnSvc=0x19a9d0*=0xa, pAuthzSvc=0x19a9cc*=0x0, pServerPrincName=0x19a9c4, pAuthnLevel=0x19a9c8*=0x6, pImpLevel=0x19a9b8*=0x2, pAuthInfo=0x19a9bc, pCapabilites=0x19a9c0*=0x1) returned 0x0 [0088.781] IUnknown:Release (This=0x6dbe1c) returned 0x1 [0088.781] IUnknown:QueryInterface (in: This=0x6dbe18, riid=0x6b371224*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a974 | out: ppvObject=0x19a974*=0x72c0e8) returned 0x0 [0088.781] IUnknown:QueryInterface (in: This=0x6dbe18, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a960 | out: ppvObject=0x19a960*=0x6dbe1c) returned 0x0 [0088.781] IClientSecurity:SetBlanket (This=0x6dbe1c, pProxy=0x6dbe18, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0088.792] IUnknown:Release (This=0x6dbe1c) returned 0x2 [0088.792] WbemLocator:IUnknown:Release (This=0x72c0e8) returned 0x1 [0088.792] CoTaskMemFree (pv=0x740420) [0088.792] IUnknown:QueryInterface (in: This=0x6dbe18, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a56c | out: ppvObject=0x19a56c*=0x72c0e8) returned 0x0 [0088.792] WbemLocator:IUnknown:QueryInterface (in: This=0x72c0e8, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19a528 | out: ppvObject=0x19a528*=0x0) returned 0x80004002 [0088.793] WbemLocator:IUnknown:QueryInterface (in: This=0x72c0e8, riid=0x6f729bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19a344 | out: ppvObject=0x19a344*=0x0) returned 0x80004002 [0088.793] IUnknown:QueryInterface (in: This=0x6dbe18, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19a11c | out: ppvObject=0x19a11c*=0x0) returned 0x80004002 [0088.793] WbemLocator:IUnknown:AddRef (This=0x72c0e8) returned 0x3 [0088.793] WbemLocator:IUnknown:QueryInterface (in: This=0x72c0e8, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x199e7c | out: ppvObject=0x199e7c*=0x0) returned 0x80004002 [0088.793] WbemLocator:IUnknown:QueryInterface (in: This=0x72c0e8, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x199e2c | out: ppvObject=0x199e2c*=0x0) returned 0x80004002 [0088.793] WbemLocator:IUnknown:QueryInterface (in: This=0x72c0e8, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x199e38 | out: ppvObject=0x199e38*=0x72c044) returned 0x0 [0088.794] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x72c044, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x199e40 | out: pCid=0x199e40*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0088.794] WbemLocator:IUnknown:Release (This=0x72c044) returned 0x3 [0088.794] CoGetContextToken (in: pToken=0x199e98 | out: pToken=0x199e98) returned 0x0 [0088.794] CoGetContextToken (in: pToken=0x19a2a0 | out: pToken=0x19a2a0) returned 0x0 [0088.794] WbemLocator:IUnknown:QueryInterface (in: This=0x72c0e8, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a32c | out: ppvObject=0x19a32c*=0x72c0cc) returned 0x0 [0088.794] WbemLocator:IRpcOptions:Query (in: This=0x72c0cc, pPrx=0x72c0e8, dwProperty=2, pdwValue=0x19a338 | out: pdwValue=0x19a338) returned 0x80004002 [0088.794] WbemLocator:IUnknown:Release (This=0x72c0cc) returned 0x3 [0088.794] WbemLocator:IUnknown:Release (This=0x72c0e8) returned 0x2 [0088.794] CoGetContextToken (in: pToken=0x19a880 | out: pToken=0x19a880) returned 0x0 [0088.794] CoGetContextToken (in: pToken=0x19a7e0 | out: pToken=0x19a7e0) returned 0x0 [0088.794] WbemLocator:IUnknown:QueryInterface (in: This=0x72c0e8, riid=0x19a8b0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19a8ac | out: ppvObject=0x19a8ac*=0x6dbe18) returned 0x0 [0088.794] IUnknown:AddRef (This=0x6dbe18) returned 0x4 [0088.794] IUnknown:Release (This=0x6dbe18) returned 0x3 [0088.794] IUnknown:Release (This=0x6dbe18) returned 0x2 [0088.794] WbemLocator:IUnknown:Release (This=0x6af520) returned 0x2 [0088.794] SysStringLen (param_1=0x0) returned 0x0 [0088.794] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6d9490, puCount=0x19ab7c | out: puCount=0x19ab7c*=0x2) returned 0x0 [0088.794] WbemDefPath:IWbemPath:GetText (in: This=0x6d9490, lFlags=4, puBuffLength=0x19ab78*=0x0, pszText=0x0 | out: puBuffLength=0x19ab78*=0xf, pszText=0x0) returned 0x0 [0088.794] WbemDefPath:IWbemPath:GetText (in: This=0x6d9490, lFlags=4, puBuffLength=0x19ab78*=0xf, pszText="00000000000000" | out: puBuffLength=0x19ab78*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0088.794] CoGetContextToken (in: pToken=0x19a9c8 | out: pToken=0x19a9c8) returned 0x0 [0088.794] IUnknown:AddRef (This=0x6dbe18) returned 0x3 [0088.794] IEnumWbemClassObject:Clone (in: This=0x6dbe18, ppEnum=0x19ab88 | out: ppEnum=0x19ab88*=0x6db968) returned 0x0 [0088.795] IUnknown:QueryInterface (in: This=0x6db968, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19aa44 | out: ppvObject=0x19aa44*=0x6db96c) returned 0x0 [0088.795] IClientSecurity:QueryBlanket (in: This=0x6db96c, pProxy=0x6db968, pAuthnSvc=0x19aa94, pAuthzSvc=0x19aa90, pServerPrincName=0x19aa88, pAuthnLevel=0x19aa8c, pImpLevel=0x19aa7c, pAuthInfo=0x19aa80, pCapabilites=0x19aa84 | out: pAuthnSvc=0x19aa94*=0xa, pAuthzSvc=0x19aa90*=0x0, pServerPrincName=0x19aa88, pAuthnLevel=0x19aa8c*=0x6, pImpLevel=0x19aa7c*=0x2, pAuthInfo=0x19aa80, pCapabilites=0x19aa84*=0x1) returned 0x0 [0088.795] IUnknown:Release (This=0x6db96c) returned 0x1 [0088.795] IUnknown:QueryInterface (in: This=0x6db968, riid=0x6b371224*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19aa38 | out: ppvObject=0x19aa38*=0x72bde8) returned 0x0 [0088.795] IUnknown:QueryInterface (in: This=0x6db968, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19aa24 | out: ppvObject=0x19aa24*=0x6db96c) returned 0x0 [0088.795] IClientSecurity:SetBlanket (This=0x6db96c, pProxy=0x6db968, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0088.796] IUnknown:Release (This=0x6db96c) returned 0x2 [0088.796] WbemLocator:IUnknown:Release (This=0x72bde8) returned 0x1 [0088.797] CoTaskMemFree (pv=0x740180) [0088.797] IUnknown:QueryInterface (in: This=0x6db968, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a620 | out: ppvObject=0x19a620*=0x72bde8) returned 0x0 [0088.797] WbemLocator:IUnknown:QueryInterface (in: This=0x72bde8, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19a5dc | out: ppvObject=0x19a5dc*=0x0) returned 0x80004002 [0088.797] WbemLocator:IUnknown:QueryInterface (in: This=0x72bde8, riid=0x6f729bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19a3fc | out: ppvObject=0x19a3fc*=0x0) returned 0x80004002 [0088.797] IUnknown:QueryInterface (in: This=0x6db968, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19a1d4 | out: ppvObject=0x19a1d4*=0x0) returned 0x80004002 [0088.798] WbemLocator:IUnknown:AddRef (This=0x72bde8) returned 0x3 [0088.798] WbemLocator:IUnknown:QueryInterface (in: This=0x72bde8, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x199f34 | out: ppvObject=0x199f34*=0x0) returned 0x80004002 [0088.798] WbemLocator:IUnknown:QueryInterface (in: This=0x72bde8, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x199ee4 | out: ppvObject=0x199ee4*=0x0) returned 0x80004002 [0088.798] WbemLocator:IUnknown:QueryInterface (in: This=0x72bde8, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x199ef0 | out: ppvObject=0x199ef0*=0x72bd44) returned 0x0 [0088.798] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x72bd44, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x199ef8 | out: pCid=0x199ef8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0088.798] WbemLocator:IUnknown:Release (This=0x72bd44) returned 0x3 [0088.798] CoGetContextToken (in: pToken=0x199f50 | out: pToken=0x199f50) returned 0x0 [0088.798] CoGetContextToken (in: pToken=0x19a358 | out: pToken=0x19a358) returned 0x0 [0088.798] WbemLocator:IUnknown:QueryInterface (in: This=0x72bde8, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a3e4 | out: ppvObject=0x19a3e4*=0x72bdcc) returned 0x0 [0088.798] WbemLocator:IRpcOptions:Query (in: This=0x72bdcc, pPrx=0x72bde8, dwProperty=2, pdwValue=0x19a3f0 | out: pdwValue=0x19a3f0) returned 0x80004002 [0088.798] WbemLocator:IUnknown:Release (This=0x72bdcc) returned 0x3 [0088.798] WbemLocator:IUnknown:Release (This=0x72bde8) returned 0x2 [0088.798] CoGetContextToken (in: pToken=0x19a930 | out: pToken=0x19a930) returned 0x0 [0088.798] CoGetContextToken (in: pToken=0x19a890 | out: pToken=0x19a890) returned 0x0 [0088.798] WbemLocator:IUnknown:QueryInterface (in: This=0x72bde8, riid=0x19a960*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19a95c | out: ppvObject=0x19a95c*=0x6db968) returned 0x0 [0088.798] IUnknown:AddRef (This=0x6db968) returned 0x4 [0088.798] IUnknown:Release (This=0x6db968) returned 0x3 [0088.798] IUnknown:Release (This=0x6db968) returned 0x2 [0088.798] IUnknown:Release (This=0x6dbe18) returned 0x2 [0088.798] SysStringLen (param_1=0x0) returned 0x0 [0088.799] IEnumWbemClassObject:Reset (This=0x6db968) returned 0x0 [0088.802] CoTaskMemAlloc (cb=0x4) returned 0x72ca00 [0088.802] IEnumWbemClassObject:Next (in: This=0x6db968, lTimeout=-1, uCount=0x1, apObjects=0x72ca00, puReturned=0x22be2f0 | out: apObjects=0x72ca00*=0x74c6d0, puReturned=0x22be2f0*=0x1) returned 0x0 [0088.807] IUnknown:QueryInterface (in: This=0x74c6d0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a1e0 | out: ppvObject=0x19a1e0*=0x74c6d0) returned 0x0 [0088.807] IUnknown:QueryInterface (in: This=0x74c6d0, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19a19c | out: ppvObject=0x19a19c*=0x0) returned 0x80004002 [0088.807] IUnknown:QueryInterface (in: This=0x74c6d0, riid=0x6f729bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x199fbc | out: ppvObject=0x199fbc*=0x0) returned 0x80004002 [0088.807] IUnknown:QueryInterface (in: This=0x74c6d0, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x199d94 | out: ppvObject=0x199d94*=0x0) returned 0x80004002 [0088.807] IUnknown:AddRef (This=0x74c6d0) returned 0x3 [0088.807] IUnknown:QueryInterface (in: This=0x74c6d0, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x199af4 | out: ppvObject=0x199af4*=0x0) returned 0x80004002 [0088.807] IUnknown:QueryInterface (in: This=0x74c6d0, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x199aa4 | out: ppvObject=0x199aa4*=0x0) returned 0x80004002 [0088.807] IUnknown:QueryInterface (in: This=0x74c6d0, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x199ab0 | out: ppvObject=0x199ab0*=0x74c6d4) returned 0x0 [0088.807] IMarshal:GetUnmarshalClass (in: This=0x74c6d4, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x199ab8 | out: pCid=0x199ab8*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0088.807] IUnknown:Release (This=0x74c6d4) returned 0x3 [0088.807] CoGetContextToken (in: pToken=0x199b10 | out: pToken=0x199b10) returned 0x0 [0088.807] CoGetContextToken (in: pToken=0x199f18 | out: pToken=0x199f18) returned 0x0 [0088.807] IUnknown:QueryInterface (in: This=0x74c6d0, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x199fa4 | out: ppvObject=0x199fa4*=0x0) returned 0x80004002 [0088.807] IUnknown:Release (This=0x74c6d0) returned 0x2 [0088.807] CoGetContextToken (in: pToken=0x19a4f0 | out: pToken=0x19a4f0) returned 0x0 [0088.807] CoGetContextToken (in: pToken=0x19a450 | out: pToken=0x19a450) returned 0x0 [0088.807] IUnknown:QueryInterface (in: This=0x74c6d0, riid=0x19a520*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19a51c | out: ppvObject=0x19a51c*=0x74c6d0) returned 0x0 [0088.807] IUnknown:AddRef (This=0x74c6d0) returned 0x4 [0088.807] IUnknown:Release (This=0x74c6d0) returned 0x3 [0088.807] IUnknown:Release (This=0x74c6d0) returned 0x2 [0088.807] CoTaskMemFree (pv=0x72ca00) [0088.807] CoGetContextToken (in: pToken=0x19a868 | out: pToken=0x19a868) returned 0x0 [0088.807] IUnknown:AddRef (This=0x74c6d0) returned 0x3 [0088.808] IWbemClassObject:Get (in: This=0x74c6d0, wszName="__GENUS", lFlags=0, pVal=0x19ab78*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19abf8*=0, plFlavor=0x19abf4*=0 | out: pVal=0x19ab78*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19abf8*=3, plFlavor=0x19abf4*=64) returned 0x0 [0088.808] IWbemClassObject:Get (in: This=0x74c6d0, wszName="__PATH", lFlags=0, pVal=0x19ab5c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19abe0*=0, plFlavor=0x19abdc*=0 | out: pVal=0x19ab5c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"", varVal2=0x0), pType=0x19abe0*=8, plFlavor=0x19abdc*=64) returned 0x0 [0088.808] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a [0088.808] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a [0088.808] CoGetObjectContext (in: riid=0x22b8fd8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ab88 | out: ppv=0x19ab88*=0x6bb23c) returned 0x0 [0088.808] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6bb23c, pAptType=0x19ab80 | out: pAptType=0x19ab80*=1) returned 0x0 [0088.808] IUnknown:QueryInterface (in: This=0x6bb23c, riid=0x22b8fc0*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19ab84 | out: ppvObject=0x19ab84*=0x0) returned 0x80004002 [0088.808] IUnknown:Release (This=0x6bb23c) returned 0x1 [0088.808] CoGetClassObject (in: rclsid=0x729d7c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f704d80*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19a4f0 | out: ppv=0x19a4f0*=0x72ca00) returned 0x0 [0088.809] WbemDefPath:IUnknown:QueryInterface (in: This=0x72ca00, riid=0x6f6e79fc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19a70c | out: ppvObject=0x19a70c*=0x0) returned 0x80004002 [0088.809] WbemDefPath:IClassFactory:CreateInstance (in: This=0x72ca00, pUnkOuter=0x0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a718 | out: ppvObject=0x19a718*=0x7499e8) returned 0x0 [0088.809] WbemDefPath:IUnknown:Release (This=0x72ca00) returned 0x0 [0088.809] WbemDefPath:IUnknown:QueryInterface (in: This=0x7499e8, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a33c | out: ppvObject=0x19a33c*=0x7499e8) returned 0x0 [0088.809] WbemDefPath:IUnknown:QueryInterface (in: This=0x7499e8, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19a2f8 | out: ppvObject=0x19a2f8*=0x0) returned 0x80004002 [0088.809] WbemDefPath:IUnknown:QueryInterface (in: This=0x7499e8, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x199eec | out: ppvObject=0x199eec*=0x0) returned 0x80004002 [0088.809] WbemDefPath:IUnknown:AddRef (This=0x7499e8) returned 0x3 [0088.809] WbemDefPath:IUnknown:QueryInterface (in: This=0x7499e8, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x199c4c | out: ppvObject=0x199c4c*=0x0) returned 0x80004002 [0088.809] WbemDefPath:IUnknown:QueryInterface (in: This=0x7499e8, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x199bfc | out: ppvObject=0x199bfc*=0x0) returned 0x80004002 [0088.809] WbemDefPath:IUnknown:QueryInterface (in: This=0x7499e8, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x199c08 | out: ppvObject=0x199c08*=0x744188) returned 0x0 [0088.809] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x744188, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x199c10 | out: pCid=0x199c10*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0088.809] WbemDefPath:IUnknown:Release (This=0x744188) returned 0x3 [0088.809] CoGetContextToken (in: pToken=0x199c68 | out: pToken=0x199c68) returned 0x0 [0088.809] CoGetContextToken (in: pToken=0x19a070 | out: pToken=0x19a070) returned 0x0 [0088.809] WbemDefPath:IUnknown:QueryInterface (in: This=0x7499e8, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19a0fc | out: ppvObject=0x19a0fc*=0x0) returned 0x80004002 [0088.809] WbemDefPath:IUnknown:Release (This=0x7499e8) returned 0x2 [0088.809] WbemDefPath:IUnknown:Release (This=0x7499e8) returned 0x1 [0088.809] CoGetContextToken (in: pToken=0x19aa00 | out: pToken=0x19aa00) returned 0x0 [0088.810] CoGetContextToken (in: pToken=0x19a960 | out: pToken=0x19a960) returned 0x0 [0088.810] WbemDefPath:IUnknown:QueryInterface (in: This=0x7499e8, riid=0x19aa30*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19aa2c | out: ppvObject=0x19aa2c*=0x7499e8) returned 0x0 [0088.810] WbemDefPath:IUnknown:AddRef (This=0x7499e8) returned 0x3 [0088.810] WbemDefPath:IUnknown:Release (This=0x7499e8) returned 0x2 [0088.810] WbemDefPath:IWbemPath:SetText (This=0x7499e8, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x0 [0088.810] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6d9490, puCount=0x19abb4 | out: puCount=0x19abb4*=0x2) returned 0x0 [0088.810] WbemDefPath:IWbemPath:GetText (in: This=0x6d9490, lFlags=4, puBuffLength=0x19abb0*=0x0, pszText=0x0 | out: puBuffLength=0x19abb0*=0xf, pszText=0x0) returned 0x0 [0088.810] WbemDefPath:IWbemPath:GetText (in: This=0x6d9490, lFlags=4, puBuffLength=0x19abb0*=0xf, pszText="00000000000000" | out: puBuffLength=0x19abb0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0088.810] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x6d9490, puCount=0x19ab80 | out: puCount=0x19ab80*=0x2) returned 0x0 [0088.810] WbemDefPath:IWbemPath:GetText (in: This=0x6d9490, lFlags=4, puBuffLength=0x19ab7c*=0x0, pszText=0x0 | out: puBuffLength=0x19ab7c*=0xf, pszText=0x0) returned 0x0 [0088.810] WbemDefPath:IWbemPath:GetText (in: This=0x6d9490, lFlags=4, puBuffLength=0x19ab7c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19ab7c*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0088.810] IWbemClassObject:Get (in: This=0x74c6d0, wszName="Name", lFlags=0, pVal=0x19ab7c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x22beb20*=0, plFlavor=0x22beb24*=0 | out: pVal=0x19ab7c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) HD Graphics 610", varVal2=0x0), pType=0x22beb20*=8, plFlavor=0x22beb24*=0) returned 0x0 [0088.810] SysStringByteLen (bstr="Intel(R) HD Graphics 610") returned 0x30 [0088.810] SysStringByteLen (bstr="Intel(R) HD Graphics 610") returned 0x30 [0088.810] IWbemClassObject:Get (in: This=0x74c6d0, wszName="Name", lFlags=0, pVal=0x19ab84*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x22beb20*=8, plFlavor=0x22beb24*=0 | out: pVal=0x19ab84*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) HD Graphics 610", varVal2=0x0), pType=0x22beb20*=8, plFlavor=0x22beb24*=0) returned 0x0 [0088.810] SysStringByteLen (bstr="Intel(R) HD Graphics 610") returned 0x30 [0088.810] SysStringByteLen (bstr="Intel(R) HD Graphics 610") returned 0x30 [0088.810] CoGetContextToken (in: pToken=0x19aaa8 | out: pToken=0x19aaa8) returned 0x0 [0088.810] WbemLocator:IUnknown:Release (This=0x72bde8) returned 0x1 [0088.810] IUnknown:Release (This=0x6db968) returned 0x0 [0089.923] CoTaskMemAlloc (cb=0x20c) returned 0x6dda78 [0089.923] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6dda78 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0 [0089.923] CoTaskMemFree (pv=0x6dda78) [0089.923] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19be34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25 [0089.923] CoTaskMemAlloc (cb=0x20c) returned 0x6dda78 [0089.923] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6dda78 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local") returned 0x0 [0089.924] CoTaskMemFree (pv=0x6dda78) [0089.924] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x19be34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23 [0089.927] CoGetObjectContext (in: riid=0x21f60a4*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19dc4c | out: ppv=0x19dc4c*=0x6bb23c) returned 0x0 [0089.927] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6bb23c, pAptType=0x19dc44 | out: pAptType=0x19dc44*=1) returned 0x0 [0089.927] IUnknown:QueryInterface (in: This=0x6bb23c, riid=0x21f608c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19dc48 | out: ppvObject=0x19dc48*=0x0) returned 0x80004002 [0089.927] IUnknown:Release (This=0x6bb23c) returned 0x0 [0089.928] CoGetClassObject (in: rclsid=0x729d7c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f704d80*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19d5b0 | out: ppv=0x19d5b0*=0x74d950) returned 0x0 [0089.928] WbemDefPath:IUnknown:QueryInterface (in: This=0x74d950, riid=0x6f6e79fc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d7cc | out: ppvObject=0x19d7cc*=0x0) returned 0x80004002 [0089.928] WbemDefPath:IClassFactory:CreateInstance (in: This=0x74d950, pUnkOuter=0x0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d7d8 | out: ppvObject=0x19d7d8*=0x7291e0) returned 0x0 [0089.928] WbemDefPath:IUnknown:Release (This=0x74d950) returned 0x0 [0089.929] WbemDefPath:IUnknown:QueryInterface (in: This=0x7291e0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d3fc | out: ppvObject=0x19d3fc*=0x7291e0) returned 0x0 [0089.929] WbemDefPath:IUnknown:QueryInterface (in: This=0x7291e0, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d3b8 | out: ppvObject=0x19d3b8*=0x0) returned 0x80004002 [0089.929] WbemDefPath:IUnknown:QueryInterface (in: This=0x7291e0, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19cfac | out: ppvObject=0x19cfac*=0x0) returned 0x80004002 [0089.929] WbemDefPath:IUnknown:AddRef (This=0x7291e0) returned 0x3 [0089.929] WbemDefPath:IUnknown:QueryInterface (in: This=0x7291e0, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cd0c | out: ppvObject=0x19cd0c*=0x0) returned 0x80004002 [0089.929] WbemDefPath:IUnknown:QueryInterface (in: This=0x7291e0, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19ccbc | out: ppvObject=0x19ccbc*=0x0) returned 0x80004002 [0089.929] WbemDefPath:IUnknown:QueryInterface (in: This=0x7291e0, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ccc8 | out: ppvObject=0x19ccc8*=0x744230) returned 0x0 [0089.929] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x744230, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19ccd0 | out: pCid=0x19ccd0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0089.929] WbemDefPath:IUnknown:Release (This=0x744230) returned 0x3 [0089.929] CoGetContextToken (in: pToken=0x19cd28 | out: pToken=0x19cd28) returned 0x0 [0089.929] CoGetContextToken (in: pToken=0x19d130 | out: pToken=0x19d130) returned 0x0 [0089.929] WbemDefPath:IUnknown:QueryInterface (in: This=0x7291e0, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d1bc | out: ppvObject=0x19d1bc*=0x0) returned 0x80004002 [0089.929] WbemDefPath:IUnknown:Release (This=0x7291e0) returned 0x2 [0089.929] WbemDefPath:IUnknown:Release (This=0x7291e0) returned 0x1 [0089.929] CoGetContextToken (in: pToken=0x19dac8 | out: pToken=0x19dac8) returned 0x0 [0089.929] CoGetContextToken (in: pToken=0x19da28 | out: pToken=0x19da28) returned 0x0 [0089.929] WbemDefPath:IUnknown:QueryInterface (in: This=0x7291e0, riid=0x19daf8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19daf4 | out: ppvObject=0x19daf4*=0x7291e0) returned 0x0 [0089.929] WbemDefPath:IUnknown:AddRef (This=0x7291e0) returned 0x3 [0089.929] WbemDefPath:IUnknown:Release (This=0x7291e0) returned 0x2 [0089.929] WbemDefPath:IWbemPath:SetText (This=0x7291e0, uMode=0x4, pszPath="root\\CIMV2") returned 0x0 [0089.929] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7291e0, puCount=0x19dc74 | out: puCount=0x19dc74*=0x2) returned 0x0 [0089.929] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=4, puBuffLength=0x19dc70*=0x0, pszText=0x0 | out: puBuffLength=0x19dc70*=0xf, pszText=0x0) returned 0x0 [0089.930] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=4, puBuffLength=0x19dc70*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc70*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0089.930] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7291e0, puCount=0x19dc60 | out: puCount=0x19dc60*=0x2) returned 0x0 [0089.930] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=4, puBuffLength=0x19dc5c*=0x0, pszText=0x0 | out: puBuffLength=0x19dc5c*=0xf, pszText=0x0) returned 0x0 [0089.930] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=4, puBuffLength=0x19dc5c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc5c*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0089.930] CoGetObjectContext (in: riid=0x21f60a4*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19dbf0 | out: ppv=0x19dbf0*=0x6bb23c) returned 0x0 [0089.930] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6bb23c, pAptType=0x19dbe8 | out: pAptType=0x19dbe8*=1) returned 0x0 [0089.930] IUnknown:QueryInterface (in: This=0x6bb23c, riid=0x21f608c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19dbec | out: ppvObject=0x19dbec*=0x0) returned 0x80004002 [0089.930] IUnknown:Release (This=0x6bb23c) returned 0x0 [0089.930] CoGetClassObject (in: rclsid=0x729b0c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f704d80*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19d800 | out: ppv=0x19d800*=0x7441b8) returned 0x0 [0089.930] WbemLocator:IUnknown:QueryInterface (in: This=0x7441b8, riid=0x6f6e79fc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19da1c | out: ppvObject=0x19da1c*=0x0) returned 0x80004002 [0089.930] WbemLocator:IClassFactory:CreateInstance (in: This=0x7441b8, pUnkOuter=0x0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19da28 | out: ppvObject=0x19da28*=0x74d8c0) returned 0x0 [0089.930] WbemLocator:IUnknown:Release (This=0x7441b8) returned 0x0 [0089.930] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8c0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d64c | out: ppvObject=0x19d64c*=0x74d8c0) returned 0x0 [0089.931] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8c0, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d608 | out: ppvObject=0x19d608*=0x0) returned 0x80004002 [0089.931] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8c0, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19d1fc | out: ppvObject=0x19d1fc*=0x0) returned 0x80004002 [0089.931] WbemLocator:IUnknown:AddRef (This=0x74d8c0) returned 0x3 [0089.931] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8c0, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cf5c | out: ppvObject=0x19cf5c*=0x0) returned 0x80004002 [0089.931] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8c0, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cf0c | out: ppvObject=0x19cf0c*=0x0) returned 0x80004002 [0089.931] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8c0, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cf18 | out: ppvObject=0x19cf18*=0x0) returned 0x80004002 [0089.931] CoGetContextToken (in: pToken=0x19cf78 | out: pToken=0x19cf78) returned 0x0 [0089.931] CoGetObjectContext (in: riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x7440b4 | out: ppv=0x7440b4*=0x6bb230) returned 0x0 [0089.931] CoGetContextToken (in: pToken=0x19d380 | out: pToken=0x19d380) returned 0x0 [0089.931] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8c0, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d40c | out: ppvObject=0x19d40c*=0x0) returned 0x80004002 [0089.931] WbemLocator:IUnknown:Release (This=0x74d8c0) returned 0x2 [0089.931] WbemLocator:IUnknown:Release (This=0x74d8c0) returned 0x1 [0089.931] CoGetContextToken (in: pToken=0x19da08 | out: pToken=0x19da08) returned 0x0 [0089.931] CoGetContextToken (in: pToken=0x19d968 | out: pToken=0x19d968) returned 0x0 [0089.931] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8c0, riid=0x19da38*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19da34 | out: ppvObject=0x19da34*=0x74d8c0) returned 0x0 [0089.931] WbemLocator:IUnknown:AddRef (This=0x74d8c0) returned 0x3 [0089.931] WbemLocator:IUnknown:Release (This=0x74d8c0) returned 0x2 [0089.931] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7291e0, puCount=0x19dbcc | out: puCount=0x19dbcc*=0x2) returned 0x0 [0089.931] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=8, puBuffLength=0x19dbc8*=0x0, pszText=0x0 | out: puBuffLength=0x19dbc8*=0xf, pszText=0x0) returned 0x0 [0089.931] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=8, puBuffLength=0x19dbc8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dbc8*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0089.931] CoCreateInstance (in: rclsid=0x6b3713b4*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6b371414*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19daa4 | out: ppv=0x19daa4*=0x74d970) returned 0x0 [0089.931] WbemLocator:IWbemLocator:ConnectServer (in: This=0x74d970, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19db38 | out: ppNamespace=0x19db38*=0x6cce50) returned 0x0 [0089.949] WbemLocator:IUnknown:QueryInterface (in: This=0x6cce50, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d9cc | out: ppvObject=0x19d9cc*=0x72c0c4) returned 0x0 [0089.949] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x72c0c4, pProxy=0x6cce50, pAuthnSvc=0x19da1c, pAuthzSvc=0x19da18, pServerPrincName=0x19da10, pAuthnLevel=0x19da14, pImpLevel=0x19da04, pAuthInfo=0x19da08, pCapabilites=0x19da0c | out: pAuthnSvc=0x19da1c*=0xa, pAuthzSvc=0x19da18*=0x0, pServerPrincName=0x19da10, pAuthnLevel=0x19da14*=0x6, pImpLevel=0x19da04*=0x2, pAuthInfo=0x19da08, pCapabilites=0x19da0c*=0x1) returned 0x0 [0089.949] WbemLocator:IUnknown:Release (This=0x72c0c4) returned 0x1 [0089.949] WbemLocator:IUnknown:QueryInterface (in: This=0x6cce50, riid=0x6b371224*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d9c0 | out: ppvObject=0x19d9c0*=0x72c0e8) returned 0x0 [0089.950] WbemLocator:IUnknown:QueryInterface (in: This=0x6cce50, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d9ac | out: ppvObject=0x19d9ac*=0x72c0c4) returned 0x0 [0089.950] WbemLocator:IClientSecurity:SetBlanket (This=0x72c0c4, pProxy=0x6cce50, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0089.950] WbemLocator:IUnknown:Release (This=0x72c0c4) returned 0x2 [0089.950] WbemLocator:IUnknown:Release (This=0x72c0e8) returned 0x1 [0089.950] CoTaskMemFree (pv=0x740330) [0089.950] WbemLocator:IUnknown:Release (This=0x74d970) returned 0x0 [0089.950] WbemLocator:IUnknown:QueryInterface (in: This=0x6cce50, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d5bc | out: ppvObject=0x19d5bc*=0x72c0e8) returned 0x0 [0089.950] WbemLocator:IUnknown:QueryInterface (in: This=0x72c0e8, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d578 | out: ppvObject=0x19d578*=0x0) returned 0x80004002 [0089.950] WbemLocator:IUnknown:QueryInterface (in: This=0x72c0e8, riid=0x6f729bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d394 | out: ppvObject=0x19d394*=0x0) returned 0x80004002 [0089.951] WbemLocator:IUnknown:QueryInterface (in: This=0x6cce50, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19d16c | out: ppvObject=0x19d16c*=0x0) returned 0x80004002 [0089.951] WbemLocator:IUnknown:AddRef (This=0x72c0e8) returned 0x3 [0089.951] WbemLocator:IUnknown:QueryInterface (in: This=0x72c0e8, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cecc | out: ppvObject=0x19cecc*=0x0) returned 0x80004002 [0089.951] WbemLocator:IUnknown:QueryInterface (in: This=0x72c0e8, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19ce7c | out: ppvObject=0x19ce7c*=0x0) returned 0x80004002 [0089.951] WbemLocator:IUnknown:QueryInterface (in: This=0x72c0e8, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ce88 | out: ppvObject=0x19ce88*=0x72c044) returned 0x0 [0089.951] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x72c044, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19ce90 | out: pCid=0x19ce90*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0089.951] WbemLocator:IUnknown:Release (This=0x72c044) returned 0x3 [0089.951] CoGetContextToken (in: pToken=0x19cee8 | out: pToken=0x19cee8) returned 0x0 [0089.951] CoGetContextToken (in: pToken=0x19d2f0 | out: pToken=0x19d2f0) returned 0x0 [0089.951] WbemLocator:IUnknown:QueryInterface (in: This=0x72c0e8, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d37c | out: ppvObject=0x19d37c*=0x72c0cc) returned 0x0 [0089.951] WbemLocator:IRpcOptions:Query (in: This=0x72c0cc, pPrx=0x72c0e8, dwProperty=2, pdwValue=0x19d388 | out: pdwValue=0x19d388) returned 0x80004002 [0089.951] WbemLocator:IUnknown:Release (This=0x72c0cc) returned 0x3 [0089.952] WbemLocator:IUnknown:Release (This=0x72c0e8) returned 0x2 [0089.952] CoGetContextToken (in: pToken=0x19d8d0 | out: pToken=0x19d8d0) returned 0x0 [0089.952] CoGetContextToken (in: pToken=0x19d830 | out: pToken=0x19d830) returned 0x0 [0089.952] WbemLocator:IUnknown:QueryInterface (in: This=0x72c0e8, riid=0x19d900*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19d8fc | out: ppvObject=0x19d8fc*=0x6cce50) returned 0x0 [0089.952] WbemLocator:IUnknown:AddRef (This=0x6cce50) returned 0x4 [0089.952] WbemLocator:IUnknown:Release (This=0x6cce50) returned 0x3 [0089.952] WbemLocator:IUnknown:Release (This=0x6cce50) returned 0x2 [0089.952] SysStringLen (param_1=0x0) returned 0x0 [0089.952] CoGetContextToken (in: pToken=0x19d8d0 | out: pToken=0x19d8d0) returned 0x0 [0089.952] WbemLocator:IUnknown:AddRef (This=0x72c0e8) returned 0x3 [0089.952] WbemLocator:IUnknown:QueryInterface (in: This=0x72c0e8, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d764 | out: ppvObject=0x19d764*=0x72c0e8) returned 0x0 [0089.952] WbemLocator:IUnknown:Release (This=0x72c0e8) returned 0x3 [0089.952] WbemLocator:IUnknown:Release (This=0x72c0e8) returned 0x2 [0089.952] CoGetContextToken (in: pToken=0x19d9c8 | out: pToken=0x19d9c8) returned 0x0 [0089.952] WbemLocator:IUnknown:AddRef (This=0x6cce50) returned 0x3 [0089.952] IWbemServices:ExecQuery (in: This=0x6cce50, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_Processor", lFlags=16, pCtx=0x0, ppEnum=0x19dbd8 | out: ppEnum=0x19dbd8*=0x6db968) returned 0x0 [0090.002] IUnknown:QueryInterface (in: This=0x6db968, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19da34 | out: ppvObject=0x19da34*=0x6db96c) returned 0x0 [0090.002] IClientSecurity:QueryBlanket (in: This=0x6db96c, pProxy=0x6db968, pAuthnSvc=0x19da84, pAuthzSvc=0x19da80, pServerPrincName=0x19da78, pAuthnLevel=0x19da7c, pImpLevel=0x19da6c, pAuthInfo=0x19da70, pCapabilites=0x19da74 | out: pAuthnSvc=0x19da84*=0xa, pAuthzSvc=0x19da80*=0x0, pServerPrincName=0x19da78, pAuthnLevel=0x19da7c*=0x6, pImpLevel=0x19da6c*=0x2, pAuthInfo=0x19da70, pCapabilites=0x19da74*=0x1) returned 0x0 [0090.002] IUnknown:Release (This=0x6db96c) returned 0x1 [0090.002] IUnknown:QueryInterface (in: This=0x6db968, riid=0x6b371224*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19da28 | out: ppvObject=0x19da28*=0x72b3e8) returned 0x0 [0090.002] IUnknown:QueryInterface (in: This=0x6db968, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19da14 | out: ppvObject=0x19da14*=0x6db96c) returned 0x0 [0090.002] IClientSecurity:SetBlanket (This=0x6db96c, pProxy=0x6db968, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0090.003] IUnknown:Release (This=0x6db96c) returned 0x2 [0090.003] WbemLocator:IUnknown:Release (This=0x72b3e8) returned 0x1 [0090.003] CoTaskMemFree (pv=0x740240) [0090.004] IUnknown:QueryInterface (in: This=0x6db968, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d620 | out: ppvObject=0x19d620*=0x72b3e8) returned 0x0 [0090.004] WbemLocator:IUnknown:QueryInterface (in: This=0x72b3e8, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d5dc | out: ppvObject=0x19d5dc*=0x0) returned 0x80004002 [0090.004] WbemLocator:IUnknown:QueryInterface (in: This=0x72b3e8, riid=0x6f729bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d3fc | out: ppvObject=0x19d3fc*=0x0) returned 0x80004002 [0090.005] IUnknown:QueryInterface (in: This=0x6db968, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19d1d4 | out: ppvObject=0x19d1d4*=0x0) returned 0x80004002 [0090.005] WbemLocator:IUnknown:AddRef (This=0x72b3e8) returned 0x3 [0090.005] WbemLocator:IUnknown:QueryInterface (in: This=0x72b3e8, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cf34 | out: ppvObject=0x19cf34*=0x0) returned 0x80004002 [0090.005] WbemLocator:IUnknown:QueryInterface (in: This=0x72b3e8, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cee4 | out: ppvObject=0x19cee4*=0x0) returned 0x80004002 [0090.005] WbemLocator:IUnknown:QueryInterface (in: This=0x72b3e8, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cef0 | out: ppvObject=0x19cef0*=0x72b344) returned 0x0 [0090.005] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x72b344, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19cef8 | out: pCid=0x19cef8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0090.005] WbemLocator:IUnknown:Release (This=0x72b344) returned 0x3 [0090.005] CoGetContextToken (in: pToken=0x19cf50 | out: pToken=0x19cf50) returned 0x0 [0090.006] CoGetContextToken (in: pToken=0x19d358 | out: pToken=0x19d358) returned 0x0 [0090.006] WbemLocator:IUnknown:QueryInterface (in: This=0x72b3e8, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d3e4 | out: ppvObject=0x19d3e4*=0x72b3cc) returned 0x0 [0090.006] WbemLocator:IRpcOptions:Query (in: This=0x72b3cc, pPrx=0x72b3e8, dwProperty=2, pdwValue=0x19d3f0 | out: pdwValue=0x19d3f0) returned 0x80004002 [0090.006] WbemLocator:IUnknown:Release (This=0x72b3cc) returned 0x3 [0090.006] WbemLocator:IUnknown:Release (This=0x72b3e8) returned 0x2 [0090.006] CoGetContextToken (in: pToken=0x19d930 | out: pToken=0x19d930) returned 0x0 [0090.006] CoGetContextToken (in: pToken=0x19d890 | out: pToken=0x19d890) returned 0x0 [0090.006] WbemLocator:IUnknown:QueryInterface (in: This=0x72b3e8, riid=0x19d960*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19d95c | out: ppvObject=0x19d95c*=0x6db968) returned 0x0 [0090.006] IUnknown:AddRef (This=0x6db968) returned 0x4 [0090.006] IUnknown:Release (This=0x6db968) returned 0x3 [0090.006] IUnknown:Release (This=0x6db968) returned 0x2 [0090.006] WbemLocator:IUnknown:Release (This=0x6cce50) returned 0x2 [0090.006] SysStringLen (param_1=0x0) returned 0x0 [0090.006] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7291e0, puCount=0x19dc24 | out: puCount=0x19dc24*=0x2) returned 0x0 [0090.006] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=4, puBuffLength=0x19dc20*=0x0, pszText=0x0 | out: puBuffLength=0x19dc20*=0xf, pszText=0x0) returned 0x0 [0090.006] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=4, puBuffLength=0x19dc20*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc20*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0090.007] CoGetContextToken (in: pToken=0x19da70 | out: pToken=0x19da70) returned 0x0 [0090.007] IUnknown:AddRef (This=0x6db968) returned 0x3 [0090.007] IEnumWbemClassObject:Clone (in: This=0x6db968, ppEnum=0x19dc30 | out: ppEnum=0x19dc30*=0x6db648) returned 0x0 [0090.007] IUnknown:QueryInterface (in: This=0x6db648, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19daec | out: ppvObject=0x19daec*=0x6db64c) returned 0x0 [0090.008] IClientSecurity:QueryBlanket (in: This=0x6db64c, pProxy=0x6db648, pAuthnSvc=0x19db3c, pAuthzSvc=0x19db38, pServerPrincName=0x19db30, pAuthnLevel=0x19db34, pImpLevel=0x19db24, pAuthInfo=0x19db28, pCapabilites=0x19db2c | out: pAuthnSvc=0x19db3c*=0xa, pAuthzSvc=0x19db38*=0x0, pServerPrincName=0x19db30, pAuthnLevel=0x19db34*=0x6, pImpLevel=0x19db24*=0x2, pAuthInfo=0x19db28, pCapabilites=0x19db2c*=0x1) returned 0x0 [0090.008] IUnknown:Release (This=0x6db64c) returned 0x1 [0090.008] IUnknown:QueryInterface (in: This=0x6db648, riid=0x6b371224*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dae0 | out: ppvObject=0x19dae0*=0x72b8e8) returned 0x0 [0090.008] IUnknown:QueryInterface (in: This=0x6db648, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dacc | out: ppvObject=0x19dacc*=0x6db64c) returned 0x0 [0090.008] IClientSecurity:SetBlanket (This=0x6db64c, pProxy=0x6db648, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0090.009] IUnknown:Release (This=0x6db64c) returned 0x2 [0090.009] WbemLocator:IUnknown:Release (This=0x72b8e8) returned 0x1 [0090.009] CoTaskMemFree (pv=0x740120) [0090.009] IUnknown:QueryInterface (in: This=0x6db648, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d6c8 | out: ppvObject=0x19d6c8*=0x72b8e8) returned 0x0 [0090.009] WbemLocator:IUnknown:QueryInterface (in: This=0x72b8e8, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d684 | out: ppvObject=0x19d684*=0x0) returned 0x80004002 [0090.010] WbemLocator:IUnknown:QueryInterface (in: This=0x72b8e8, riid=0x6f729bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d4a4 | out: ppvObject=0x19d4a4*=0x0) returned 0x80004002 [0090.010] IUnknown:QueryInterface (in: This=0x6db648, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19d27c | out: ppvObject=0x19d27c*=0x0) returned 0x80004002 [0090.010] WbemLocator:IUnknown:AddRef (This=0x72b8e8) returned 0x3 [0090.010] WbemLocator:IUnknown:QueryInterface (in: This=0x72b8e8, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cfdc | out: ppvObject=0x19cfdc*=0x0) returned 0x80004002 [0090.010] WbemLocator:IUnknown:QueryInterface (in: This=0x72b8e8, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cf8c | out: ppvObject=0x19cf8c*=0x0) returned 0x80004002 [0090.010] WbemLocator:IUnknown:QueryInterface (in: This=0x72b8e8, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cf98 | out: ppvObject=0x19cf98*=0x72b844) returned 0x0 [0090.010] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x72b844, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19cfa0 | out: pCid=0x19cfa0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0090.011] WbemLocator:IUnknown:Release (This=0x72b844) returned 0x3 [0090.011] CoGetContextToken (in: pToken=0x19cff8 | out: pToken=0x19cff8) returned 0x0 [0090.011] CoGetContextToken (in: pToken=0x19d400 | out: pToken=0x19d400) returned 0x0 [0090.011] WbemLocator:IUnknown:QueryInterface (in: This=0x72b8e8, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d48c | out: ppvObject=0x19d48c*=0x72b8cc) returned 0x0 [0090.011] WbemLocator:IRpcOptions:Query (in: This=0x72b8cc, pPrx=0x72b8e8, dwProperty=2, pdwValue=0x19d498 | out: pdwValue=0x19d498) returned 0x80004002 [0090.011] WbemLocator:IUnknown:Release (This=0x72b8cc) returned 0x3 [0090.011] WbemLocator:IUnknown:Release (This=0x72b8e8) returned 0x2 [0090.011] CoGetContextToken (in: pToken=0x19d9d8 | out: pToken=0x19d9d8) returned 0x0 [0090.011] CoGetContextToken (in: pToken=0x19d938 | out: pToken=0x19d938) returned 0x0 [0090.011] WbemLocator:IUnknown:QueryInterface (in: This=0x72b8e8, riid=0x19da08*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19da04 | out: ppvObject=0x19da04*=0x6db648) returned 0x0 [0090.011] IUnknown:AddRef (This=0x6db648) returned 0x4 [0090.011] IUnknown:Release (This=0x6db648) returned 0x3 [0090.011] IUnknown:Release (This=0x6db648) returned 0x2 [0090.011] IUnknown:Release (This=0x6db968) returned 0x2 [0090.011] SysStringLen (param_1=0x0) returned 0x0 [0090.011] IEnumWbemClassObject:Reset (This=0x6db648) returned 0x0 [0090.038] CoTaskMemAlloc (cb=0x4) returned 0x74d9a0 [0090.038] IEnumWbemClassObject:Next (in: This=0x6db648, lTimeout=-1, uCount=0x1, apObjects=0x74d9a0, puReturned=0x225fee8 | out: apObjects=0x74d9a0*=0x73aba8, puReturned=0x225fee8*=0x1) returned 0x0 [0091.171] IUnknown:QueryInterface (in: This=0x73aba8, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d288 | out: ppvObject=0x19d288*=0x73aba8) returned 0x0 [0091.171] IUnknown:QueryInterface (in: This=0x73aba8, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d244 | out: ppvObject=0x19d244*=0x0) returned 0x80004002 [0091.171] IUnknown:QueryInterface (in: This=0x73aba8, riid=0x6f729bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d064 | out: ppvObject=0x19d064*=0x0) returned 0x80004002 [0091.171] IUnknown:QueryInterface (in: This=0x73aba8, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19ce3c | out: ppvObject=0x19ce3c*=0x0) returned 0x80004002 [0091.171] IUnknown:AddRef (This=0x73aba8) returned 0x3 [0091.171] IUnknown:QueryInterface (in: This=0x73aba8, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cb9c | out: ppvObject=0x19cb9c*=0x0) returned 0x80004002 [0091.171] IUnknown:QueryInterface (in: This=0x73aba8, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cb4c | out: ppvObject=0x19cb4c*=0x0) returned 0x80004002 [0091.171] IUnknown:QueryInterface (in: This=0x73aba8, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cb58 | out: ppvObject=0x19cb58*=0x73abac) returned 0x0 [0091.171] IMarshal:GetUnmarshalClass (in: This=0x73abac, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19cb60 | out: pCid=0x19cb60*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0091.171] IUnknown:Release (This=0x73abac) returned 0x3 [0091.171] CoGetContextToken (in: pToken=0x19cbb8 | out: pToken=0x19cbb8) returned 0x0 [0091.171] CoGetContextToken (in: pToken=0x19cfc0 | out: pToken=0x19cfc0) returned 0x0 [0091.171] IUnknown:QueryInterface (in: This=0x73aba8, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d04c | out: ppvObject=0x19d04c*=0x0) returned 0x80004002 [0091.171] IUnknown:Release (This=0x73aba8) returned 0x2 [0091.171] CoGetContextToken (in: pToken=0x19d598 | out: pToken=0x19d598) returned 0x0 [0091.171] CoGetContextToken (in: pToken=0x19d4f8 | out: pToken=0x19d4f8) returned 0x0 [0091.171] IUnknown:QueryInterface (in: This=0x73aba8, riid=0x19d5c8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19d5c4 | out: ppvObject=0x19d5c4*=0x73aba8) returned 0x0 [0091.171] IUnknown:AddRef (This=0x73aba8) returned 0x4 [0091.171] IUnknown:Release (This=0x73aba8) returned 0x3 [0091.171] IUnknown:Release (This=0x73aba8) returned 0x2 [0091.171] CoTaskMemFree (pv=0x74d9a0) [0091.171] CoGetContextToken (in: pToken=0x19d910 | out: pToken=0x19d910) returned 0x0 [0091.172] IUnknown:AddRef (This=0x73aba8) returned 0x3 [0091.172] IWbemClassObject:Get (in: This=0x73aba8, wszName="__GENUS", lFlags=0, pVal=0x19dc20*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19dca0*=0, plFlavor=0x19dc9c*=0 | out: pVal=0x19dc20*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19dca0*=3, plFlavor=0x19dc9c*=64) returned 0x0 [0091.172] IWbemClassObject:Get (in: This=0x73aba8, wszName="__PATH", lFlags=0, pVal=0x19dc04*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19dc88*=0, plFlavor=0x19dc84*=0 | out: pVal=0x19dc04*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"", varVal2=0x0), pType=0x19dc88*=8, plFlavor=0x19dc84*=64) returned 0x0 [0091.172] SysStringByteLen (bstr="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66 [0091.172] SysStringByteLen (bstr="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66 [0091.172] CoGetObjectContext (in: riid=0x21f60a4*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19dc30 | out: ppv=0x19dc30*=0x6bb23c) returned 0x0 [0091.172] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6bb23c, pAptType=0x19dc28 | out: pAptType=0x19dc28*=1) returned 0x0 [0091.172] IUnknown:QueryInterface (in: This=0x6bb23c, riid=0x21f608c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19dc2c | out: ppvObject=0x19dc2c*=0x0) returned 0x80004002 [0091.172] IUnknown:Release (This=0x6bb23c) returned 0x1 [0091.173] CoGetClassObject (in: rclsid=0x729d7c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f704d80*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19d598 | out: ppv=0x19d598*=0x74da80) returned 0x0 [0091.173] WbemDefPath:IUnknown:QueryInterface (in: This=0x74da80, riid=0x6f6e79fc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d7b4 | out: ppvObject=0x19d7b4*=0x0) returned 0x80004002 [0091.173] WbemDefPath:IClassFactory:CreateInstance (in: This=0x74da80, pUnkOuter=0x0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d7c0 | out: ppvObject=0x19d7c0*=0x742b80) returned 0x0 [0091.173] WbemDefPath:IUnknown:Release (This=0x74da80) returned 0x0 [0091.173] WbemDefPath:IUnknown:QueryInterface (in: This=0x742b80, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d3e4 | out: ppvObject=0x19d3e4*=0x742b80) returned 0x0 [0091.173] WbemDefPath:IUnknown:QueryInterface (in: This=0x742b80, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d3a0 | out: ppvObject=0x19d3a0*=0x0) returned 0x80004002 [0091.173] WbemDefPath:IUnknown:QueryInterface (in: This=0x742b80, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19cf94 | out: ppvObject=0x19cf94*=0x0) returned 0x80004002 [0091.173] WbemDefPath:IUnknown:AddRef (This=0x742b80) returned 0x3 [0091.173] WbemDefPath:IUnknown:QueryInterface (in: This=0x742b80, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19ccf4 | out: ppvObject=0x19ccf4*=0x0) returned 0x80004002 [0091.173] WbemDefPath:IUnknown:QueryInterface (in: This=0x742b80, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cca4 | out: ppvObject=0x19cca4*=0x0) returned 0x80004002 [0091.173] WbemDefPath:IUnknown:QueryInterface (in: This=0x742b80, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ccb0 | out: ppvObject=0x19ccb0*=0x744080) returned 0x0 [0091.174] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x744080, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19ccb8 | out: pCid=0x19ccb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0091.174] WbemDefPath:IUnknown:Release (This=0x744080) returned 0x3 [0091.174] CoGetContextToken (in: pToken=0x19cd10 | out: pToken=0x19cd10) returned 0x0 [0091.174] CoGetContextToken (in: pToken=0x19d118 | out: pToken=0x19d118) returned 0x0 [0091.174] WbemDefPath:IUnknown:QueryInterface (in: This=0x742b80, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d1a4 | out: ppvObject=0x19d1a4*=0x0) returned 0x80004002 [0091.174] WbemDefPath:IUnknown:Release (This=0x742b80) returned 0x2 [0091.174] WbemDefPath:IUnknown:Release (This=0x742b80) returned 0x1 [0091.174] CoGetContextToken (in: pToken=0x19daa8 | out: pToken=0x19daa8) returned 0x0 [0091.174] CoGetContextToken (in: pToken=0x19da08 | out: pToken=0x19da08) returned 0x0 [0091.174] WbemDefPath:IUnknown:QueryInterface (in: This=0x742b80, riid=0x19dad8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19dad4 | out: ppvObject=0x19dad4*=0x742b80) returned 0x0 [0091.174] WbemDefPath:IUnknown:AddRef (This=0x742b80) returned 0x3 [0091.174] WbemDefPath:IUnknown:Release (This=0x742b80) returned 0x2 [0091.174] WbemDefPath:IWbemPath:SetText (This=0x742b80, uMode=0x4, pszPath="\\\\XC64ZB\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x0 [0091.174] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7291e0, puCount=0x19dc5c | out: puCount=0x19dc5c*=0x2) returned 0x0 [0091.174] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=4, puBuffLength=0x19dc58*=0x0, pszText=0x0 | out: puBuffLength=0x19dc58*=0xf, pszText=0x0) returned 0x0 [0091.174] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=4, puBuffLength=0x19dc58*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc58*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0091.174] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7291e0, puCount=0x19dc28 | out: puCount=0x19dc28*=0x2) returned 0x0 [0091.174] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=4, puBuffLength=0x19dc24*=0x0, pszText=0x0 | out: puBuffLength=0x19dc24*=0xf, pszText=0x0) returned 0x0 [0091.174] WbemDefPath:IWbemPath:GetText (in: This=0x7291e0, lFlags=4, puBuffLength=0x19dc24*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc24*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0091.174] IWbemClassObject:Get (in: This=0x73aba8, wszName="Name", lFlags=0, pVal=0x19dc24*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x22606f4*=0, plFlavor=0x22606f8*=0 | out: pVal=0x19dc24*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x22606f4*=8, plFlavor=0x22606f8*=0) returned 0x0 [0091.174] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0091.174] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0091.174] IWbemClassObject:Get (in: This=0x73aba8, wszName="Name", lFlags=0, pVal=0x19dc2c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x22606f4*=8, plFlavor=0x22606f8*=0 | out: pVal=0x19dc2c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x22606f4*=8, plFlavor=0x22606f8*=0) returned 0x0 [0091.175] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0091.175] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0091.175] CoGetContextToken (in: pToken=0x19db50 | out: pToken=0x19db50) returned 0x0 [0091.175] WbemLocator:IUnknown:Release (This=0x72b8e8) returned 0x1 [0091.175] IUnknown:Release (This=0x6db648) returned 0x0 [0091.179] CoGetObjectContext (in: riid=0x21f60a4*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19dc4c | out: ppv=0x19dc4c*=0x6bb23c) returned 0x0 [0091.179] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6bb23c, pAptType=0x19dc44 | out: pAptType=0x19dc44*=1) returned 0x0 [0091.179] IUnknown:QueryInterface (in: This=0x6bb23c, riid=0x21f608c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19dc48 | out: ppvObject=0x19dc48*=0x0) returned 0x80004002 [0091.179] IUnknown:Release (This=0x6bb23c) returned 0x1 [0091.179] CoGetClassObject (in: rclsid=0x729d7c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f704d80*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19d5b0 | out: ppv=0x19d5b0*=0x74d900) returned 0x0 [0091.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x74d900, riid=0x6f6e79fc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d7cc | out: ppvObject=0x19d7cc*=0x0) returned 0x80004002 [0091.180] WbemDefPath:IClassFactory:CreateInstance (in: This=0x74d900, pUnkOuter=0x0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d7d8 | out: ppvObject=0x19d7d8*=0x742c60) returned 0x0 [0091.180] WbemDefPath:IUnknown:Release (This=0x74d900) returned 0x0 [0091.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x742c60, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d3fc | out: ppvObject=0x19d3fc*=0x742c60) returned 0x0 [0091.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x742c60, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d3b8 | out: ppvObject=0x19d3b8*=0x0) returned 0x80004002 [0091.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x742c60, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19cfac | out: ppvObject=0x19cfac*=0x0) returned 0x80004002 [0091.180] WbemDefPath:IUnknown:AddRef (This=0x742c60) returned 0x3 [0091.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x742c60, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cd0c | out: ppvObject=0x19cd0c*=0x0) returned 0x80004002 [0091.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x742c60, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19ccbc | out: ppvObject=0x19ccbc*=0x0) returned 0x80004002 [0091.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x742c60, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ccc8 | out: ppvObject=0x19ccc8*=0x7440f8) returned 0x0 [0091.180] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x7440f8, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19ccd0 | out: pCid=0x19ccd0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0091.180] WbemDefPath:IUnknown:Release (This=0x7440f8) returned 0x3 [0091.180] CoGetContextToken (in: pToken=0x19cd28 | out: pToken=0x19cd28) returned 0x0 [0091.180] CoGetContextToken (in: pToken=0x19d130 | out: pToken=0x19d130) returned 0x0 [0091.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x742c60, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d1bc | out: ppvObject=0x19d1bc*=0x0) returned 0x80004002 [0091.180] WbemDefPath:IUnknown:Release (This=0x742c60) returned 0x2 [0091.180] WbemDefPath:IUnknown:Release (This=0x742c60) returned 0x1 [0091.180] CoGetContextToken (in: pToken=0x19dac8 | out: pToken=0x19dac8) returned 0x0 [0091.180] CoGetContextToken (in: pToken=0x19da28 | out: pToken=0x19da28) returned 0x0 [0091.180] WbemDefPath:IUnknown:QueryInterface (in: This=0x742c60, riid=0x19daf8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19daf4 | out: ppvObject=0x19daf4*=0x742c60) returned 0x0 [0091.181] WbemDefPath:IUnknown:AddRef (This=0x742c60) returned 0x3 [0091.181] WbemDefPath:IUnknown:Release (This=0x742c60) returned 0x2 [0091.181] WbemDefPath:IWbemPath:SetText (This=0x742c60, uMode=0x4, pszPath="root\\CIMV2") returned 0x0 [0091.181] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x742c60, puCount=0x19dc74 | out: puCount=0x19dc74*=0x2) returned 0x0 [0091.181] WbemDefPath:IWbemPath:GetText (in: This=0x742c60, lFlags=4, puBuffLength=0x19dc70*=0x0, pszText=0x0 | out: puBuffLength=0x19dc70*=0xf, pszText=0x0) returned 0x0 [0091.181] WbemDefPath:IWbemPath:GetText (in: This=0x742c60, lFlags=4, puBuffLength=0x19dc70*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc70*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0091.181] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x742c60, puCount=0x19dc60 | out: puCount=0x19dc60*=0x2) returned 0x0 [0091.181] WbemDefPath:IWbemPath:GetText (in: This=0x742c60, lFlags=4, puBuffLength=0x19dc5c*=0x0, pszText=0x0 | out: puBuffLength=0x19dc5c*=0xf, pszText=0x0) returned 0x0 [0091.181] WbemDefPath:IWbemPath:GetText (in: This=0x742c60, lFlags=4, puBuffLength=0x19dc5c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc5c*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0091.181] CoGetObjectContext (in: riid=0x21f60a4*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19dbf0 | out: ppv=0x19dbf0*=0x6bb23c) returned 0x0 [0091.181] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6bb23c, pAptType=0x19dbe8 | out: pAptType=0x19dbe8*=1) returned 0x0 [0091.181] IUnknown:QueryInterface (in: This=0x6bb23c, riid=0x21f608c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19dbec | out: ppvObject=0x19dbec*=0x0) returned 0x80004002 [0091.181] IUnknown:Release (This=0x6bb23c) returned 0x1 [0091.181] CoGetClassObject (in: rclsid=0x729b0c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f704d80*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19d800 | out: ppv=0x19d800*=0x7443c8) returned 0x0 [0091.181] WbemLocator:IUnknown:QueryInterface (in: This=0x7443c8, riid=0x6f6e79fc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19da1c | out: ppvObject=0x19da1c*=0x0) returned 0x80004002 [0091.181] WbemLocator:IClassFactory:CreateInstance (in: This=0x7443c8, pUnkOuter=0x0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19da28 | out: ppvObject=0x19da28*=0x74d8d0) returned 0x0 [0091.182] WbemLocator:IUnknown:Release (This=0x7443c8) returned 0x0 [0091.182] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8d0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d64c | out: ppvObject=0x19d64c*=0x74d8d0) returned 0x0 [0091.182] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8d0, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d608 | out: ppvObject=0x19d608*=0x0) returned 0x80004002 [0091.182] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8d0, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19d1fc | out: ppvObject=0x19d1fc*=0x0) returned 0x80004002 [0091.182] WbemLocator:IUnknown:AddRef (This=0x74d8d0) returned 0x3 [0091.182] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8d0, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cf5c | out: ppvObject=0x19cf5c*=0x0) returned 0x80004002 [0091.182] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8d0, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cf0c | out: ppvObject=0x19cf0c*=0x0) returned 0x80004002 [0091.182] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8d0, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cf18 | out: ppvObject=0x19cf18*=0x0) returned 0x80004002 [0091.182] CoGetContextToken (in: pToken=0x19cf78 | out: pToken=0x19cf78) returned 0x0 [0091.182] CoGetContextToken (in: pToken=0x19d380 | out: pToken=0x19d380) returned 0x0 [0091.182] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8d0, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d40c | out: ppvObject=0x19d40c*=0x0) returned 0x80004002 [0091.182] WbemLocator:IUnknown:Release (This=0x74d8d0) returned 0x2 [0091.182] WbemLocator:IUnknown:Release (This=0x74d8d0) returned 0x1 [0091.182] CoGetContextToken (in: pToken=0x19da08 | out: pToken=0x19da08) returned 0x0 [0091.182] CoGetContextToken (in: pToken=0x19d968 | out: pToken=0x19d968) returned 0x0 [0091.182] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8d0, riid=0x19da38*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19da34 | out: ppvObject=0x19da34*=0x74d8d0) returned 0x0 [0091.182] WbemLocator:IUnknown:AddRef (This=0x74d8d0) returned 0x3 [0091.182] WbemLocator:IUnknown:Release (This=0x74d8d0) returned 0x2 [0091.182] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x742c60, puCount=0x19dbcc | out: puCount=0x19dbcc*=0x2) returned 0x0 [0091.182] WbemDefPath:IWbemPath:GetText (in: This=0x742c60, lFlags=8, puBuffLength=0x19dbc8*=0x0, pszText=0x0 | out: puBuffLength=0x19dbc8*=0xf, pszText=0x0) returned 0x0 [0091.182] WbemDefPath:IWbemPath:GetText (in: This=0x742c60, lFlags=8, puBuffLength=0x19dbc8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dbc8*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0091.182] CoCreateInstance (in: rclsid=0x6b3713b4*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6b371414*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19daa4 | out: ppv=0x19daa4*=0x74da80) returned 0x0 [0091.182] WbemLocator:IWbemLocator:ConnectServer (in: This=0x74da80, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19db38 | out: ppNamespace=0x19db38*=0x6cdb20) returned 0x0 [0091.199] WbemLocator:IUnknown:QueryInterface (in: This=0x6cdb20, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d9cc | out: ppvObject=0x19d9cc*=0x72a9c4) returned 0x0 [0091.199] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x72a9c4, pProxy=0x6cdb20, pAuthnSvc=0x19da1c, pAuthzSvc=0x19da18, pServerPrincName=0x19da10, pAuthnLevel=0x19da14, pImpLevel=0x19da04, pAuthInfo=0x19da08, pCapabilites=0x19da0c | out: pAuthnSvc=0x19da1c*=0xa, pAuthzSvc=0x19da18*=0x0, pServerPrincName=0x19da10, pAuthnLevel=0x19da14*=0x6, pImpLevel=0x19da04*=0x2, pAuthInfo=0x19da08, pCapabilites=0x19da0c*=0x1) returned 0x0 [0091.199] WbemLocator:IUnknown:Release (This=0x72a9c4) returned 0x1 [0091.199] WbemLocator:IUnknown:QueryInterface (in: This=0x6cdb20, riid=0x6b371224*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d9c0 | out: ppvObject=0x19d9c0*=0x72a9e8) returned 0x0 [0091.199] WbemLocator:IUnknown:QueryInterface (in: This=0x6cdb20, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d9ac | out: ppvObject=0x19d9ac*=0x72a9c4) returned 0x0 [0091.199] WbemLocator:IClientSecurity:SetBlanket (This=0x72a9c4, pProxy=0x6cdb20, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0091.199] WbemLocator:IUnknown:Release (This=0x72a9c4) returned 0x2 [0091.199] WbemLocator:IUnknown:Release (This=0x72a9e8) returned 0x1 [0091.199] CoTaskMemFree (pv=0x73ff10) [0091.200] WbemLocator:IUnknown:Release (This=0x74da80) returned 0x0 [0091.200] WbemLocator:IUnknown:QueryInterface (in: This=0x6cdb20, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d5bc | out: ppvObject=0x19d5bc*=0x72a9e8) returned 0x0 [0091.200] WbemLocator:IUnknown:QueryInterface (in: This=0x72a9e8, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d578 | out: ppvObject=0x19d578*=0x0) returned 0x80004002 [0091.200] WbemLocator:IUnknown:QueryInterface (in: This=0x72a9e8, riid=0x6f729bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d394 | out: ppvObject=0x19d394*=0x0) returned 0x80004002 [0091.200] WbemLocator:IUnknown:QueryInterface (in: This=0x6cdb20, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19d16c | out: ppvObject=0x19d16c*=0x0) returned 0x80004002 [0091.201] WbemLocator:IUnknown:AddRef (This=0x72a9e8) returned 0x3 [0091.201] WbemLocator:IUnknown:QueryInterface (in: This=0x72a9e8, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cecc | out: ppvObject=0x19cecc*=0x0) returned 0x80004002 [0091.201] WbemLocator:IUnknown:QueryInterface (in: This=0x72a9e8, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19ce7c | out: ppvObject=0x19ce7c*=0x0) returned 0x80004002 [0091.201] WbemLocator:IUnknown:QueryInterface (in: This=0x72a9e8, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ce88 | out: ppvObject=0x19ce88*=0x72a944) returned 0x0 [0091.201] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x72a944, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19ce90 | out: pCid=0x19ce90*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0091.201] WbemLocator:IUnknown:Release (This=0x72a944) returned 0x3 [0091.201] CoGetContextToken (in: pToken=0x19cee8 | out: pToken=0x19cee8) returned 0x0 [0091.201] CoGetContextToken (in: pToken=0x19d2f0 | out: pToken=0x19d2f0) returned 0x0 [0091.201] WbemLocator:IUnknown:QueryInterface (in: This=0x72a9e8, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d37c | out: ppvObject=0x19d37c*=0x72a9cc) returned 0x0 [0091.201] WbemLocator:IRpcOptions:Query (in: This=0x72a9cc, pPrx=0x72a9e8, dwProperty=2, pdwValue=0x19d388 | out: pdwValue=0x19d388) returned 0x80004002 [0091.201] WbemLocator:IUnknown:Release (This=0x72a9cc) returned 0x3 [0091.201] WbemLocator:IUnknown:Release (This=0x72a9e8) returned 0x2 [0091.201] CoGetContextToken (in: pToken=0x19d8d0 | out: pToken=0x19d8d0) returned 0x0 [0091.201] CoGetContextToken (in: pToken=0x19d830 | out: pToken=0x19d830) returned 0x0 [0091.201] WbemLocator:IUnknown:QueryInterface (in: This=0x72a9e8, riid=0x19d900*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19d8fc | out: ppvObject=0x19d8fc*=0x6cdb20) returned 0x0 [0091.201] WbemLocator:IUnknown:AddRef (This=0x6cdb20) returned 0x4 [0091.201] WbemLocator:IUnknown:Release (This=0x6cdb20) returned 0x3 [0091.201] WbemLocator:IUnknown:Release (This=0x6cdb20) returned 0x2 [0091.201] SysStringLen (param_1=0x0) returned 0x0 [0091.202] CoGetContextToken (in: pToken=0x19d8d0 | out: pToken=0x19d8d0) returned 0x0 [0091.202] WbemLocator:IUnknown:AddRef (This=0x72a9e8) returned 0x3 [0091.202] WbemLocator:IUnknown:QueryInterface (in: This=0x72a9e8, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d764 | out: ppvObject=0x19d764*=0x72a9e8) returned 0x0 [0091.202] WbemLocator:IUnknown:Release (This=0x72a9e8) returned 0x3 [0091.202] WbemLocator:IUnknown:Release (This=0x72a9e8) returned 0x2 [0091.202] CoGetContextToken (in: pToken=0x19d9c0 | out: pToken=0x19d9c0) returned 0x0 [0091.202] WbemLocator:IUnknown:AddRef (This=0x6cdb20) returned 0x3 [0091.202] IWbemServices:ExecQuery (in: This=0x6cdb20, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_VideoController", lFlags=16, pCtx=0x0, ppEnum=0x19dbd8 | out: ppEnum=0x19dbd8*=0x6db0d0) returned 0x0 [0091.247] IUnknown:QueryInterface (in: This=0x6db0d0, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19da28 | out: ppvObject=0x19da28*=0x6db0d4) returned 0x0 [0091.247] IClientSecurity:QueryBlanket (in: This=0x6db0d4, pProxy=0x6db0d0, pAuthnSvc=0x19da78, pAuthzSvc=0x19da74, pServerPrincName=0x19da6c, pAuthnLevel=0x19da70, pImpLevel=0x19da60, pAuthInfo=0x19da64, pCapabilites=0x19da68 | out: pAuthnSvc=0x19da78*=0xa, pAuthzSvc=0x19da74*=0x0, pServerPrincName=0x19da6c, pAuthnLevel=0x19da70*=0x6, pImpLevel=0x19da60*=0x2, pAuthInfo=0x19da64, pCapabilites=0x19da68*=0x1) returned 0x0 [0091.247] IUnknown:Release (This=0x6db0d4) returned 0x1 [0091.247] IUnknown:QueryInterface (in: This=0x6db0d0, riid=0x6b371224*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19da1c | out: ppvObject=0x19da1c*=0x72b4e8) returned 0x0 [0091.247] IUnknown:QueryInterface (in: This=0x6db0d0, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19da08 | out: ppvObject=0x19da08*=0x6db0d4) returned 0x0 [0091.247] IClientSecurity:SetBlanket (This=0x6db0d4, pProxy=0x6db0d0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0091.257] IUnknown:Release (This=0x6db0d4) returned 0x2 [0091.257] WbemLocator:IUnknown:Release (This=0x72b4e8) returned 0x1 [0091.257] CoTaskMemFree (pv=0x740240) [0091.257] IUnknown:QueryInterface (in: This=0x6db0d0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d614 | out: ppvObject=0x19d614*=0x72b4e8) returned 0x0 [0091.257] WbemLocator:IUnknown:QueryInterface (in: This=0x72b4e8, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d5d0 | out: ppvObject=0x19d5d0*=0x0) returned 0x80004002 [0091.258] WbemLocator:IUnknown:QueryInterface (in: This=0x72b4e8, riid=0x6f729bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d3ec | out: ppvObject=0x19d3ec*=0x0) returned 0x80004002 [0091.258] IUnknown:QueryInterface (in: This=0x6db0d0, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19d1c4 | out: ppvObject=0x19d1c4*=0x0) returned 0x80004002 [0091.258] WbemLocator:IUnknown:AddRef (This=0x72b4e8) returned 0x3 [0091.258] WbemLocator:IUnknown:QueryInterface (in: This=0x72b4e8, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cf24 | out: ppvObject=0x19cf24*=0x0) returned 0x80004002 [0091.258] WbemLocator:IUnknown:QueryInterface (in: This=0x72b4e8, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19ced4 | out: ppvObject=0x19ced4*=0x0) returned 0x80004002 [0091.258] WbemLocator:IUnknown:QueryInterface (in: This=0x72b4e8, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cee0 | out: ppvObject=0x19cee0*=0x72b444) returned 0x0 [0091.258] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x72b444, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19cee8 | out: pCid=0x19cee8*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0091.259] WbemLocator:IUnknown:Release (This=0x72b444) returned 0x3 [0091.259] CoGetContextToken (in: pToken=0x19cf40 | out: pToken=0x19cf40) returned 0x0 [0091.259] CoGetContextToken (in: pToken=0x19d348 | out: pToken=0x19d348) returned 0x0 [0091.259] WbemLocator:IUnknown:QueryInterface (in: This=0x72b4e8, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d3d4 | out: ppvObject=0x19d3d4*=0x72b4cc) returned 0x0 [0091.259] WbemLocator:IRpcOptions:Query (in: This=0x72b4cc, pPrx=0x72b4e8, dwProperty=2, pdwValue=0x19d3e0 | out: pdwValue=0x19d3e0) returned 0x80004002 [0091.259] WbemLocator:IUnknown:Release (This=0x72b4cc) returned 0x3 [0091.259] WbemLocator:IUnknown:Release (This=0x72b4e8) returned 0x2 [0091.259] CoGetContextToken (in: pToken=0x19d928 | out: pToken=0x19d928) returned 0x0 [0091.259] CoGetContextToken (in: pToken=0x19d888 | out: pToken=0x19d888) returned 0x0 [0091.259] WbemLocator:IUnknown:QueryInterface (in: This=0x72b4e8, riid=0x19d958*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19d954 | out: ppvObject=0x19d954*=0x6db0d0) returned 0x0 [0091.259] IUnknown:AddRef (This=0x6db0d0) returned 0x4 [0091.259] IUnknown:Release (This=0x6db0d0) returned 0x3 [0091.259] IUnknown:Release (This=0x6db0d0) returned 0x2 [0091.259] WbemLocator:IUnknown:Release (This=0x6cdb20) returned 0x2 [0091.259] SysStringLen (param_1=0x0) returned 0x0 [0091.259] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x742c60, puCount=0x19dc24 | out: puCount=0x19dc24*=0x2) returned 0x0 [0091.259] WbemDefPath:IWbemPath:GetText (in: This=0x742c60, lFlags=4, puBuffLength=0x19dc20*=0x0, pszText=0x0 | out: puBuffLength=0x19dc20*=0xf, pszText=0x0) returned 0x0 [0091.259] WbemDefPath:IWbemPath:GetText (in: This=0x742c60, lFlags=4, puBuffLength=0x19dc20*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc20*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0091.259] CoGetContextToken (in: pToken=0x19da70 | out: pToken=0x19da70) returned 0x0 [0091.259] IUnknown:AddRef (This=0x6db0d0) returned 0x3 [0091.259] IEnumWbemClassObject:Clone (in: This=0x6db0d0, ppEnum=0x19dc30 | out: ppEnum=0x19dc30*=0x6db710) returned 0x0 [0091.260] IUnknown:QueryInterface (in: This=0x6db710, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19daec | out: ppvObject=0x19daec*=0x6db714) returned 0x0 [0091.260] IClientSecurity:QueryBlanket (in: This=0x6db714, pProxy=0x6db710, pAuthnSvc=0x19db3c, pAuthzSvc=0x19db38, pServerPrincName=0x19db30, pAuthnLevel=0x19db34, pImpLevel=0x19db24, pAuthInfo=0x19db28, pCapabilites=0x19db2c | out: pAuthnSvc=0x19db3c*=0xa, pAuthzSvc=0x19db38*=0x0, pServerPrincName=0x19db30, pAuthnLevel=0x19db34*=0x6, pImpLevel=0x19db24*=0x2, pAuthInfo=0x19db28, pCapabilites=0x19db2c*=0x1) returned 0x0 [0091.260] IUnknown:Release (This=0x6db714) returned 0x1 [0091.260] IUnknown:QueryInterface (in: This=0x6db710, riid=0x6b371224*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dae0 | out: ppvObject=0x19dae0*=0x72a4e8) returned 0x0 [0091.260] IUnknown:QueryInterface (in: This=0x6db710, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dacc | out: ppvObject=0x19dacc*=0x6db714) returned 0x0 [0091.260] IClientSecurity:SetBlanket (This=0x6db714, pProxy=0x6db710, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0091.262] IUnknown:Release (This=0x6db714) returned 0x2 [0091.262] WbemLocator:IUnknown:Release (This=0x72a4e8) returned 0x1 [0091.262] CoTaskMemFree (pv=0x740060) [0091.262] IUnknown:QueryInterface (in: This=0x6db710, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d6c8 | out: ppvObject=0x19d6c8*=0x72a4e8) returned 0x0 [0091.262] WbemLocator:IUnknown:QueryInterface (in: This=0x72a4e8, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d684 | out: ppvObject=0x19d684*=0x0) returned 0x80004002 [0091.262] WbemLocator:IUnknown:QueryInterface (in: This=0x72a4e8, riid=0x6f729bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d4a4 | out: ppvObject=0x19d4a4*=0x0) returned 0x80004002 [0091.262] IUnknown:QueryInterface (in: This=0x6db710, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19d27c | out: ppvObject=0x19d27c*=0x0) returned 0x80004002 [0091.263] WbemLocator:IUnknown:AddRef (This=0x72a4e8) returned 0x3 [0091.263] WbemLocator:IUnknown:QueryInterface (in: This=0x72a4e8, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cfdc | out: ppvObject=0x19cfdc*=0x0) returned 0x80004002 [0091.263] WbemLocator:IUnknown:QueryInterface (in: This=0x72a4e8, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cf8c | out: ppvObject=0x19cf8c*=0x0) returned 0x80004002 [0091.263] WbemLocator:IUnknown:QueryInterface (in: This=0x72a4e8, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cf98 | out: ppvObject=0x19cf98*=0x72a444) returned 0x0 [0091.263] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x72a444, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19cfa0 | out: pCid=0x19cfa0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0091.263] WbemLocator:IUnknown:Release (This=0x72a444) returned 0x3 [0091.263] CoGetContextToken (in: pToken=0x19cff8 | out: pToken=0x19cff8) returned 0x0 [0091.263] CoGetContextToken (in: pToken=0x19d400 | out: pToken=0x19d400) returned 0x0 [0091.263] WbemLocator:IUnknown:QueryInterface (in: This=0x72a4e8, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d48c | out: ppvObject=0x19d48c*=0x72a4cc) returned 0x0 [0091.263] WbemLocator:IRpcOptions:Query (in: This=0x72a4cc, pPrx=0x72a4e8, dwProperty=2, pdwValue=0x19d498 | out: pdwValue=0x19d498) returned 0x80004002 [0091.263] WbemLocator:IUnknown:Release (This=0x72a4cc) returned 0x3 [0091.263] WbemLocator:IUnknown:Release (This=0x72a4e8) returned 0x2 [0091.263] CoGetContextToken (in: pToken=0x19d9d8 | out: pToken=0x19d9d8) returned 0x0 [0091.263] CoGetContextToken (in: pToken=0x19d938 | out: pToken=0x19d938) returned 0x0 [0091.263] WbemLocator:IUnknown:QueryInterface (in: This=0x72a4e8, riid=0x19da08*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19da04 | out: ppvObject=0x19da04*=0x6db710) returned 0x0 [0091.263] IUnknown:AddRef (This=0x6db710) returned 0x4 [0091.263] IUnknown:Release (This=0x6db710) returned 0x3 [0091.263] IUnknown:Release (This=0x6db710) returned 0x2 [0091.263] IUnknown:Release (This=0x6db0d0) returned 0x2 [0091.264] SysStringLen (param_1=0x0) returned 0x0 [0091.264] IEnumWbemClassObject:Reset (This=0x6db710) returned 0x0 [0091.264] CoTaskMemAlloc (cb=0x4) returned 0x74d9a0 [0091.264] IEnumWbemClassObject:Next (in: This=0x6db710, lTimeout=-1, uCount=0x1, apObjects=0x74d9a0, puReturned=0x22616cc | out: apObjects=0x74d9a0*=0x718480, puReturned=0x22616cc*=0x1) returned 0x0 [0091.268] IUnknown:QueryInterface (in: This=0x718480, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d288 | out: ppvObject=0x19d288*=0x718480) returned 0x0 [0091.268] IUnknown:QueryInterface (in: This=0x718480, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d244 | out: ppvObject=0x19d244*=0x0) returned 0x80004002 [0091.268] IUnknown:QueryInterface (in: This=0x718480, riid=0x6f729bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d064 | out: ppvObject=0x19d064*=0x0) returned 0x80004002 [0091.268] IUnknown:QueryInterface (in: This=0x718480, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19ce3c | out: ppvObject=0x19ce3c*=0x0) returned 0x80004002 [0091.268] IUnknown:AddRef (This=0x718480) returned 0x3 [0091.268] IUnknown:QueryInterface (in: This=0x718480, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19cb9c | out: ppvObject=0x19cb9c*=0x0) returned 0x80004002 [0091.268] IUnknown:QueryInterface (in: This=0x718480, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cb4c | out: ppvObject=0x19cb4c*=0x0) returned 0x80004002 [0091.268] IUnknown:QueryInterface (in: This=0x718480, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19cb58 | out: ppvObject=0x19cb58*=0x718484) returned 0x0 [0091.268] IMarshal:GetUnmarshalClass (in: This=0x718484, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19cb60 | out: pCid=0x19cb60*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0091.268] IUnknown:Release (This=0x718484) returned 0x3 [0091.269] CoGetContextToken (in: pToken=0x19cbb8 | out: pToken=0x19cbb8) returned 0x0 [0091.269] CoGetContextToken (in: pToken=0x19cfc0 | out: pToken=0x19cfc0) returned 0x0 [0091.269] IUnknown:QueryInterface (in: This=0x718480, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d04c | out: ppvObject=0x19d04c*=0x0) returned 0x80004002 [0091.269] IUnknown:Release (This=0x718480) returned 0x2 [0091.269] CoGetContextToken (in: pToken=0x19d598 | out: pToken=0x19d598) returned 0x0 [0091.269] CoGetContextToken (in: pToken=0x19d4f8 | out: pToken=0x19d4f8) returned 0x0 [0091.269] IUnknown:QueryInterface (in: This=0x718480, riid=0x19d5c8*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19d5c4 | out: ppvObject=0x19d5c4*=0x718480) returned 0x0 [0091.269] IUnknown:AddRef (This=0x718480) returned 0x4 [0091.269] IUnknown:Release (This=0x718480) returned 0x3 [0091.269] IUnknown:Release (This=0x718480) returned 0x2 [0091.269] CoTaskMemFree (pv=0x74d9a0) [0091.269] CoGetContextToken (in: pToken=0x19d910 | out: pToken=0x19d910) returned 0x0 [0091.269] IUnknown:AddRef (This=0x718480) returned 0x3 [0091.269] IWbemClassObject:Get (in: This=0x718480, wszName="__GENUS", lFlags=0, pVal=0x19dc20*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19dca0*=0, plFlavor=0x19dc9c*=0 | out: pVal=0x19dc20*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x19dca0*=3, plFlavor=0x19dc9c*=64) returned 0x0 [0091.269] IWbemClassObject:Get (in: This=0x718480, wszName="__PATH", lFlags=0, pVal=0x19dc04*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x19dc88*=0, plFlavor=0x19dc84*=0 | out: pVal=0x19dc04*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"", varVal2=0x0), pType=0x19dc88*=8, plFlavor=0x19dc84*=64) returned 0x0 [0091.269] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a [0091.269] SysStringByteLen (bstr="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a [0091.269] CoGetObjectContext (in: riid=0x21f60a4*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19dc30 | out: ppv=0x19dc30*=0x6bb23c) returned 0x0 [0091.269] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6bb23c, pAptType=0x19dc28 | out: pAptType=0x19dc28*=1) returned 0x0 [0091.269] IUnknown:QueryInterface (in: This=0x6bb23c, riid=0x21f608c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19dc2c | out: ppvObject=0x19dc2c*=0x0) returned 0x80004002 [0091.269] IUnknown:Release (This=0x6bb23c) returned 0x1 [0091.270] CoGetClassObject (in: rclsid=0x729d7c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f704d80*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19d598 | out: ppv=0x19d598*=0x74d9a0) returned 0x0 [0091.270] WbemDefPath:IUnknown:QueryInterface (in: This=0x74d9a0, riid=0x6f6e79fc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19d7b4 | out: ppvObject=0x19d7b4*=0x0) returned 0x80004002 [0091.270] WbemDefPath:IClassFactory:CreateInstance (in: This=0x74d9a0, pUnkOuter=0x0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d7c0 | out: ppvObject=0x19d7c0*=0x746978) returned 0x0 [0091.270] WbemDefPath:IUnknown:Release (This=0x74d9a0) returned 0x0 [0091.270] WbemDefPath:IUnknown:QueryInterface (in: This=0x746978, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d3e4 | out: ppvObject=0x19d3e4*=0x746978) returned 0x0 [0091.270] WbemDefPath:IUnknown:QueryInterface (in: This=0x746978, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19d3a0 | out: ppvObject=0x19d3a0*=0x0) returned 0x80004002 [0091.270] WbemDefPath:IUnknown:QueryInterface (in: This=0x746978, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19cf94 | out: ppvObject=0x19cf94*=0x0) returned 0x80004002 [0091.271] WbemDefPath:IUnknown:AddRef (This=0x746978) returned 0x3 [0091.271] WbemDefPath:IUnknown:QueryInterface (in: This=0x746978, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19ccf4 | out: ppvObject=0x19ccf4*=0x0) returned 0x80004002 [0091.271] WbemDefPath:IUnknown:QueryInterface (in: This=0x746978, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19cca4 | out: ppvObject=0x19cca4*=0x0) returned 0x80004002 [0091.271] WbemDefPath:IUnknown:QueryInterface (in: This=0x746978, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ccb0 | out: ppvObject=0x19ccb0*=0x743d80) returned 0x0 [0091.271] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x743d80, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19ccb8 | out: pCid=0x19ccb8*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0091.271] WbemDefPath:IUnknown:Release (This=0x743d80) returned 0x3 [0091.271] CoGetContextToken (in: pToken=0x19cd10 | out: pToken=0x19cd10) returned 0x0 [0091.271] CoGetContextToken (in: pToken=0x19d118 | out: pToken=0x19d118) returned 0x0 [0091.271] WbemDefPath:IUnknown:QueryInterface (in: This=0x746978, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19d1a4 | out: ppvObject=0x19d1a4*=0x0) returned 0x80004002 [0091.271] WbemDefPath:IUnknown:Release (This=0x746978) returned 0x2 [0091.271] WbemDefPath:IUnknown:Release (This=0x746978) returned 0x1 [0091.271] CoGetContextToken (in: pToken=0x19daa8 | out: pToken=0x19daa8) returned 0x0 [0091.271] CoGetContextToken (in: pToken=0x19da08 | out: pToken=0x19da08) returned 0x0 [0091.271] WbemDefPath:IUnknown:QueryInterface (in: This=0x746978, riid=0x19dad8*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19dad4 | out: ppvObject=0x19dad4*=0x746978) returned 0x0 [0091.271] WbemDefPath:IUnknown:AddRef (This=0x746978) returned 0x3 [0091.271] WbemDefPath:IUnknown:Release (This=0x746978) returned 0x2 [0091.271] WbemDefPath:IWbemPath:SetText (This=0x746978, uMode=0x4, pszPath="\\\\XC64ZB\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x0 [0091.271] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x742c60, puCount=0x19dc5c | out: puCount=0x19dc5c*=0x2) returned 0x0 [0091.271] WbemDefPath:IWbemPath:GetText (in: This=0x742c60, lFlags=4, puBuffLength=0x19dc58*=0x0, pszText=0x0 | out: puBuffLength=0x19dc58*=0xf, pszText=0x0) returned 0x0 [0091.271] WbemDefPath:IWbemPath:GetText (in: This=0x742c60, lFlags=4, puBuffLength=0x19dc58*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc58*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0091.271] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x742c60, puCount=0x19dc28 | out: puCount=0x19dc28*=0x2) returned 0x0 [0091.271] WbemDefPath:IWbemPath:GetText (in: This=0x742c60, lFlags=4, puBuffLength=0x19dc24*=0x0, pszText=0x0 | out: puBuffLength=0x19dc24*=0xf, pszText=0x0) returned 0x0 [0091.271] WbemDefPath:IWbemPath:GetText (in: This=0x742c60, lFlags=4, puBuffLength=0x19dc24*=0xf, pszText="00000000000000" | out: puBuffLength=0x19dc24*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0091.272] IWbemClassObject:Get (in: This=0x718480, wszName="Name", lFlags=0, pVal=0x19dc24*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2261efc*=0, plFlavor=0x2261f00*=0 | out: pVal=0x19dc24*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) HD Graphics 610", varVal2=0x0), pType=0x2261efc*=8, plFlavor=0x2261f00*=0) returned 0x0 [0091.272] SysStringByteLen (bstr="Intel(R) HD Graphics 610") returned 0x30 [0091.272] SysStringByteLen (bstr="Intel(R) HD Graphics 610") returned 0x30 [0091.272] IWbemClassObject:Get (in: This=0x718480, wszName="Name", lFlags=0, pVal=0x19dc2c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2261efc*=8, plFlavor=0x2261f00*=0 | out: pVal=0x19dc2c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) HD Graphics 610", varVal2=0x0), pType=0x2261efc*=8, plFlavor=0x2261f00*=0) returned 0x0 [0091.272] SysStringByteLen (bstr="Intel(R) HD Graphics 610") returned 0x30 [0091.272] SysStringByteLen (bstr="Intel(R) HD Graphics 610") returned 0x30 [0091.272] CoGetContextToken (in: pToken=0x19db50 | out: pToken=0x19db50) returned 0x0 [0091.272] WbemLocator:IUnknown:Release (This=0x72a4e8) returned 0x1 [0091.272] IUnknown:Release (This=0x6db710) returned 0x0 [0091.275] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596", nBufferLength=0x105, lpBuffer=0x19d7b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596", lpFilePart=0x0) returned 0x44 [0091.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dc5c) returned 1 [0091.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596"), fInfoLevelId=0x0, lpFileInformation=0x19dcd8 | out: lpFileInformation=0x19dcd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dc58) returned 1 [0091.275] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596", nBufferLength=0x105, lpBuffer=0x19d7bc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596", lpFilePart=0x0) returned 0x44 [0091.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dbec) returned 1 [0091.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596"), fInfoLevelId=0x0, lpFileInformation=0x19dc68 | out: lpFileInformation=0x19dc68*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dbe8) returned 1 [0091.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dbec) returned 1 [0091.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596"), fInfoLevelId=0x0, lpFileInformation=0x19dc68 | out: lpFileInformation=0x19dc68*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dbe8) returned 1 [0091.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dbec) returned 1 [0091.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x19dc68 | out: lpFileInformation=0x19dc68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x50b344cd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x50b344cd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0091.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dbe8) returned 1 [0091.277] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596"), lpSecurityAttributes=0x0) returned 1 [0091.288] CoTaskMemAlloc (cb=0x20c) returned 0x6dda78 [0091.288] SHGetFolderPathW (in: hwnd=0x0, csidl=7, hToken=0x0, dwFlags=0x0, pszPath=0x6dda78 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x0 [0091.290] CoTaskMemFree (pv=0x6dda78) [0091.290] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x19bf98, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x53 [0091.290] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x19bfa0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0091.290] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\wwst.exe", nBufferLength=0x105, lpBuffer=0x19bfb4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\wwst.exe", lpFilePart=0x0) returned 0x31 [0091.294] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596", nBufferLength=0x105, lpBuffer=0x19d7ac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596", lpFilePart=0x0) returned 0x44 [0091.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dc94) returned 1 [0091.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596"), fInfoLevelId=0x0, lpFileInformation=0x226334c | out: lpFileInformation=0x226334c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcab43cf, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbcab43cf, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbcab43cf, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dc90) returned 1 [0091.297] SetFileAttributesW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596", dwFileAttributes=0x12) returned 1 [0091.303] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0091.304] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US", nBufferLength=0x105, lpBuffer=0x19ef44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US", lpFilePart=0x0) returned 0x5e [0091.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3e8) returned 1 [0091.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us"), fInfoLevelId=0x0, lpFileInformation=0x19f464 | out: lpFileInformation=0x19f464*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3e4) returned 1 [0091.305] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US", nBufferLength=0x105, lpBuffer=0x19ef48, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US", lpFilePart=0x0) returned 0x5e [0091.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f378) returned 1 [0091.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us"), fInfoLevelId=0x0, lpFileInformation=0x19f3f4 | out: lpFileInformation=0x19f3f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f374) returned 1 [0091.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f378) returned 1 [0091.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us"), fInfoLevelId=0x0, lpFileInformation=0x19f3f4 | out: lpFileInformation=0x19f3f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f374) returned 1 [0091.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f378) returned 1 [0091.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596"), fInfoLevelId=0x0, lpFileInformation=0x19f3f4 | out: lpFileInformation=0x19f3f4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xbcab43cf, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbcab43cf, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbcab43cf, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f374) returned 1 [0091.305] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us"), lpSecurityAttributes=0x0) returned 1 [0091.357] CoTaskMemAlloc (cb=0x20c) returned 0x6dda78 [0091.357] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x6dda78 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\Desktop") returned 0x0 [0091.358] CoTaskMemFree (pv=0x6dda78) [0091.358] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x19d6d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d [0091.358] CoTaskMemAlloc (cb=0x20c) returned 0x6dda78 [0091.358] SHGetFolderPathW (in: hwnd=0x0, csidl=39, hToken=0x0, dwFlags=0x0, pszPath=0x6dda78 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\Pictures") returned 0x0 [0091.358] CoTaskMemFree (pv=0x6dda78) [0091.358] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures", nBufferLength=0x105, lpBuffer=0x19d6d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures", lpFilePart=0x0) returned 0x1e [0091.359] CoTaskMemAlloc (cb=0x20c) returned 0x6dda78 [0091.359] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x6dda78 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\Documents") returned 0x0 [0091.359] CoTaskMemFree (pv=0x6dda78) [0091.359] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19d6d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f [0091.359] CoTaskMemAlloc (cb=0x20c) returned 0x6dda78 [0091.359] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6dda78 | out: pszPath="C:\\Users\\RDhJ0CNFevzX") returned 0x0 [0091.359] CoTaskMemFree (pv=0x6dda78) [0091.359] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX", nBufferLength=0x105, lpBuffer=0x19d6d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX", lpFilePart=0x0) returned 0x15 [0091.360] CoTaskMemAlloc (cb=0x20c) returned 0x6dda78 [0091.360] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6dda78 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0 [0091.360] CoTaskMemFree (pv=0x6dda78) [0091.360] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19d6d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25 [0091.360] CoTaskMemAlloc (cb=0x20c) returned 0x6dda78 [0091.360] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6dda78 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0 [0091.360] CoTaskMemFree (pv=0x6dda78) [0091.360] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19d6d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25 [0091.471] GetLogicalDrives () returned 0x4 [0091.471] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x19ee08, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0091.471] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0091.471] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber", nBufferLength=0x105, lpBuffer=0x19ee98, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber", lpFilePart=0x0) returned 0x66 [0091.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f33c) returned 1 [0091.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber"), fInfoLevelId=0x0, lpFileInformation=0x19f3b8 | out: lpFileInformation=0x19f3b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f338) returned 1 [0091.471] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber", nBufferLength=0x105, lpBuffer=0x19ee9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber", lpFilePart=0x0) returned 0x66 [0091.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2cc) returned 1 [0091.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber"), fInfoLevelId=0x0, lpFileInformation=0x19f348 | out: lpFileInformation=0x19f348*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2c8) returned 1 [0091.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2cc) returned 1 [0091.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber"), fInfoLevelId=0x0, lpFileInformation=0x19f348 | out: lpFileInformation=0x19f348*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2c8) returned 1 [0091.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2cc) returned 1 [0091.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us"), fInfoLevelId=0x0, lpFileInformation=0x19f348 | out: lpFileInformation=0x19f348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcb008e2, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbcb008e2, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbcb008e2, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2c8) returned 1 [0091.472] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber"), lpSecurityAttributes=0x0) returned 1 [0091.931] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Browsers", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Browsers", lpFilePart=0x0) returned 0x67 [0091.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Browsers" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\browsers"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.932] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Browsers", nBufferLength=0x105, lpBuffer=0x19eee4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Browsers", lpFilePart=0x0) returned 0x67 [0091.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f314) returned 1 [0091.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Browsers" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\browsers"), fInfoLevelId=0x0, lpFileInformation=0x19f390 | out: lpFileInformation=0x19f390*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0091.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f314) returned 1 [0091.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Browsers" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\browsers"), fInfoLevelId=0x0, lpFileInformation=0x19f390 | out: lpFileInformation=0x19f390*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0091.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f314) returned 1 [0091.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us"), fInfoLevelId=0x0, lpFileInformation=0x19f390 | out: lpFileInformation=0x19f390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcb008e2, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbcc7df3c, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbcc7df3c, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0091.946] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Browsers" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\browsers"), lpSecurityAttributes=0x0) returned 1 [0091.947] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data\\", lpFilePart=0x0) returned 0x37 [0091.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromium\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\chromium\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.947] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data\\", lpFilePart=0x0) returned 0x3c [0091.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google\\Chrome\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\google\\chrome\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.947] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data\\", lpFilePart=0x0) returned 0x41 [0091.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Google(x86)\\Chrome\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\google(x86)\\chrome\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.947] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\", lpFilePart=0x0) returned 0x35 [0091.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Opera Software\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\opera software"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.948] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\", lpFilePart=0x0) returned 0x45 [0091.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MapleStudio\\ChromePlus\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\maplestudio\\chromeplus\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.948] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data\\", lpFilePart=0x0) returned 0x36 [0091.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Iridium\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\iridium\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.948] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data\\", lpFilePart=0x0) returned 0x3a [0091.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\7Star\\7Star\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\7star\\7star\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.948] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data\\", lpFilePart=0x0) returned 0x3a [0091.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CentBrowser\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\centbrowser\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.948] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data\\", lpFilePart=0x0) returned 0x35 [0091.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chedot\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\chedot\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.949] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data\\", lpFilePart=0x0) returned 0x36 [0091.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Vivaldi\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\vivaldi\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.949] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data\\", lpFilePart=0x0) returned 0x35 [0091.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Kometa\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\kometa\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.949] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data\\", lpFilePart=0x0) returned 0x3f [0091.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Elements Browser\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\elements browser\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.949] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data", lpFilePart=0x0) returned 0x42 [0091.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Epic Privacy Browser\\User Data" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\epic privacy browser\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.950] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data\\", lpFilePart=0x0) returned 0x3d [0091.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\uCozMedia\\Uran\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\ucozmedia\\uran\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.950] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer\\", lpFilePart=0x0) returned 0x58 [0091.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Fenrir Inc\\Sleipnir5\\setting\\modules\\ChromiumViewer\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\fenrir inc\\sleipnir5\\setting\\modules\\chromiumviewer"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.950] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data\\", lpFilePart=0x0) returned 0x43 [0091.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CatalinaGroup\\Citrio\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\catalinagroup\\citrio\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.950] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data\\", lpFilePart=0x0) returned 0x3c [0091.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coowon\\Coowon\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\coowon\\coowon\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.951] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data\\", lpFilePart=0x0) returned 0x35 [0091.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\liebao\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\liebao\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.951] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data\\", lpFilePart=0x0) returned 0x37 [0091.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\QIP Surf\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\qip surf\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.951] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data\\", lpFilePart=0x0) returned 0x36 [0091.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Orbitum\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\orbitum\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.951] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data\\", lpFilePart=0x0) returned 0x3c [0091.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\Dragon\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comodo\\dragon\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.952] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data\\", lpFilePart=0x0) returned 0x39 [0091.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Amigo\\User\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\amigo\\user\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.952] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data\\", lpFilePart=0x0) returned 0x34 [0091.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Torch\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\torch\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.952] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\", lpFilePart=0x0) returned 0x43 [0091.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Yandex\\YandexBrowser\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\yandex\\yandexbrowser\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.952] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data\\", lpFilePart=0x0) returned 0x35 [0091.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comodo\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comodo\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.953] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data\\", lpFilePart=0x0) returned 0x41 [0091.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\360Browser\\Browser\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\360browser\\browser\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.953] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data\\", lpFilePart=0x0) returned 0x37 [0091.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Maxthon3\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\maxthon3\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.953] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data\\", lpFilePart=0x0) returned 0x36 [0091.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\K-Melon\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\k-melon\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.953] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data\\", lpFilePart=0x0) returned 0x3e [0091.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Sputnik\\Sputnik\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\sputnik\\sputnik\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.954] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data\\", lpFilePart=0x0) returned 0x37 [0091.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Nichrome\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\nichrome\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.954] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data\\", lpFilePart=0x0) returned 0x3d [0091.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\CocCoc\\Browser\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\coccoc\\browser\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.955] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data\\", lpFilePart=0x0) returned 0x33 [0091.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Uran\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\uran\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.955] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data\\", lpFilePart=0x0) returned 0x37 [0091.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Chromodo\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\chromodo\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.955] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data\\", lpFilePart=0x0) returned 0x3b [0091.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Mail.Ru\\Atom\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\mail.ru\\atom\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.955] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data\\", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data\\", lpFilePart=0x0) returned 0x4a [0091.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0091.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\BraveSoftware\\Brave-Browser\\User Data\\" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\bravesoftware\\brave-browser\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0091.970] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data", nBufferLength=0x105, lpBuffer=0x19eef4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data", lpFilePart=0x0) returned 0x3c [0091.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f398) returned 1 [0091.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Edge\\User Data" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\edge\\user data"), fInfoLevelId=0x0, lpFileInformation=0x19f414 | out: lpFileInformation=0x19f414*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f394) returned 1 [0091.981] GetFullPathNameW (in: lpFileName="\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x19eee8, lpFilePart=0x0 | out: lpBuffer="C:\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x12 [0091.982] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x19eee4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x3e [0091.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f388) returned 1 [0091.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\mozilla\\firefox\\profiles"), fInfoLevelId=0x0, lpFileInformation=0x19f404 | out: lpFileInformation=0x19f404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f384) returned 1 [0091.982] GetFullPathNameW (in: lpFileName="\\Waterfox", nBufferLength=0x105, lpBuffer=0x19eee8, lpFilePart=0x0 | out: lpBuffer="C:\\Waterfox", lpFilePart=0x0) returned 0xb [0091.982] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Waterfox\\Profiles", nBufferLength=0x105, lpBuffer=0x19eee4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Waterfox\\Profiles", lpFilePart=0x0) returned 0x37 [0091.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f388) returned 1 [0091.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Waterfox\\Profiles" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\waterfox\\profiles"), fInfoLevelId=0x0, lpFileInformation=0x19f404 | out: lpFileInformation=0x19f404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f384) returned 1 [0091.983] GetFullPathNameW (in: lpFileName="\\K-Meleon", nBufferLength=0x105, lpBuffer=0x19eee8, lpFilePart=0x0 | out: lpBuffer="C:\\K-Meleon", lpFilePart=0x0) returned 0xb [0091.983] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\K-Meleon\\Profiles", nBufferLength=0x105, lpBuffer=0x19eee4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\K-Meleon\\Profiles", lpFilePart=0x0) returned 0x37 [0091.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f388) returned 1 [0091.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\K-Meleon\\Profiles" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\k-meleon\\profiles"), fInfoLevelId=0x0, lpFileInformation=0x19f404 | out: lpFileInformation=0x19f404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f384) returned 1 [0091.986] GetFullPathNameW (in: lpFileName="\\Thunderbird", nBufferLength=0x105, lpBuffer=0x19eee8, lpFilePart=0x0 | out: lpBuffer="C:\\Thunderbird", lpFilePart=0x0) returned 0xe [0091.986] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Thunderbird\\Profiles", nBufferLength=0x105, lpBuffer=0x19eee4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Thunderbird\\Profiles", lpFilePart=0x0) returned 0x3a [0091.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f388) returned 1 [0091.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Thunderbird\\Profiles" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\thunderbird\\profiles"), fInfoLevelId=0x0, lpFileInformation=0x19f404 | out: lpFileInformation=0x19f404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f384) returned 1 [0091.986] GetFullPathNameW (in: lpFileName="\\Comodo\\IceDragon", nBufferLength=0x105, lpBuffer=0x19eee8, lpFilePart=0x0 | out: lpBuffer="C:\\Comodo\\IceDragon", lpFilePart=0x0) returned 0x13 [0091.986] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Comodo\\IceDragon\\Profiles", nBufferLength=0x105, lpBuffer=0x19eee4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Comodo\\IceDragon\\Profiles", lpFilePart=0x0) returned 0x3f [0091.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f388) returned 1 [0091.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Comodo\\IceDragon\\Profiles" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\comodo\\icedragon\\profiles"), fInfoLevelId=0x0, lpFileInformation=0x19f404 | out: lpFileInformation=0x19f404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f384) returned 1 [0091.986] GetFullPathNameW (in: lpFileName="\\8pecxstudios\\Cyberfox", nBufferLength=0x105, lpBuffer=0x19eee8, lpFilePart=0x0 | out: lpBuffer="C:\\8pecxstudios\\Cyberfox", lpFilePart=0x0) returned 0x18 [0091.986] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\8pecxstudios\\Cyberfox\\Profiles", nBufferLength=0x105, lpBuffer=0x19eee4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\8pecxstudios\\Cyberfox\\Profiles", lpFilePart=0x0) returned 0x44 [0091.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f388) returned 1 [0091.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\8pecxstudios\\Cyberfox\\Profiles" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\8pecxstudios\\cyberfox\\profiles"), fInfoLevelId=0x0, lpFileInformation=0x19f404 | out: lpFileInformation=0x19f404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f384) returned 1 [0091.986] GetFullPathNameW (in: lpFileName="\\NETGATE Technologies\\BlackHaw", nBufferLength=0x105, lpBuffer=0x19eee8, lpFilePart=0x0 | out: lpBuffer="C:\\NETGATE Technologies\\BlackHaw", lpFilePart=0x0) returned 0x20 [0091.987] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\NETGATE Technologies\\BlackHaw\\Profiles", nBufferLength=0x105, lpBuffer=0x19eee4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\NETGATE Technologies\\BlackHaw\\Profiles", lpFilePart=0x0) returned 0x4c [0091.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f388) returned 1 [0091.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\NETGATE Technologies\\BlackHaw\\Profiles" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\netgate technologies\\blackhaw\\profiles"), fInfoLevelId=0x0, lpFileInformation=0x19f404 | out: lpFileInformation=0x19f404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f384) returned 1 [0091.987] GetFullPathNameW (in: lpFileName="\\Moonchild Productions\\Pale Moon", nBufferLength=0x105, lpBuffer=0x19eee8, lpFilePart=0x0 | out: lpBuffer="C:\\Moonchild Productions\\Pale Moon", lpFilePart=0x0) returned 0x22 [0091.987] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Moonchild Productions\\Pale Moon\\Profiles", nBufferLength=0x105, lpBuffer=0x19eee4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Moonchild Productions\\Pale Moon\\Profiles", lpFilePart=0x0) returned 0x4e [0091.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f388) returned 1 [0091.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Moonchild Productions\\Pale Moon\\Profiles" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\moonchild productions\\pale moon\\profiles"), fInfoLevelId=0x0, lpFileInformation=0x19f404 | out: lpFileInformation=0x19f404*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f384) returned 1 [0092.035] CoTaskMemAlloc (cb=0x20c) returned 0x6dd560 [0092.035] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x6dd560 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0092.035] CoTaskMemFree (pv=0x6dd560) [0092.035] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x19eee0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0092.035] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x19eef4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29 [0092.035] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x19eee4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x43 [0092.035] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x43 [0092.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0092.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord\\Local Storage\\leveldb" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\discord\\local storage\\leveldb"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0092.036] CoTaskMemAlloc (cb=0x20c) returned 0x6dd560 [0092.037] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x6dd560 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0092.037] CoTaskMemFree (pv=0x6dd560) [0092.037] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x19eee0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0092.037] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x19eef4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29 [0092.037] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord PTB\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x19eee4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord PTB\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x47 [0092.038] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord PTB\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord PTB\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x47 [0092.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0092.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord PTB\\Local Storage\\leveldb" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\discord ptb\\local storage\\leveldb"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0092.038] CoTaskMemAlloc (cb=0x20c) returned 0x6dd560 [0092.038] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x6dd560 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0092.038] CoTaskMemFree (pv=0x6dd560) [0092.038] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x19eee0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0092.038] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x19eef4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29 [0092.038] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord Canary\\leveldb", nBufferLength=0x105, lpBuffer=0x19eee4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord Canary\\leveldb", lpFilePart=0x0) returned 0x3c [0092.038] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord Canary\\leveldb", nBufferLength=0x105, lpBuffer=0x19eee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord Canary\\leveldb", lpFilePart=0x0) returned 0x3c [0092.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f384) returned 1 [0092.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord Canary\\leveldb" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\discord canary\\leveldb"), fInfoLevelId=0x0, lpFileInformation=0x19f400 | out: lpFileInformation=0x19f400*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f380) returned 1 [0092.048] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x19eec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x43 [0092.049] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x19eec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x43 [0092.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f364) returned 1 [0092.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord\\Local Storage\\leveldb" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\discord\\local storage\\leveldb"), fInfoLevelId=0x0, lpFileInformation=0x19f3e0 | out: lpFileInformation=0x19f3e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f360) returned 1 [0092.049] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord PTB\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x19eec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord PTB\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x47 [0092.049] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord PTB\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x19eec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord PTB\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x47 [0092.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f364) returned 1 [0092.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord PTB\\Local Storage\\leveldb" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\discord ptb\\local storage\\leveldb"), fInfoLevelId=0x0, lpFileInformation=0x19f3e0 | out: lpFileInformation=0x19f3e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f360) returned 1 [0092.049] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord Canary\\leveldb", nBufferLength=0x105, lpBuffer=0x19eec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord Canary\\leveldb", lpFilePart=0x0) returned 0x3c [0092.049] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord Canary\\leveldb", nBufferLength=0x105, lpBuffer=0x19eec0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord Canary\\leveldb", lpFilePart=0x0) returned 0x3c [0092.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f364) returned 1 [0092.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Discord Canary\\leveldb" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\discord canary\\leveldb"), fInfoLevelId=0x0, lpFileInformation=0x19f3e0 | out: lpFileInformation=0x19f3e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f360) returned 1 [0092.071] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\.purple\\accounts.xml", nBufferLength=0x105, lpBuffer=0x19eef4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\.purple\\accounts.xml", lpFilePart=0x0) returned 0x3a [0092.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f39c) returned 1 [0092.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\.purple\\accounts.xml" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\.purple\\accounts.xml"), fInfoLevelId=0x0, lpFileInformation=0x19f418 | out: lpFileInformation=0x19f418*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f398) returned 1 [0092.078] CoTaskMemAlloc (cb=0x20c) returned 0x6dd560 [0092.078] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6dd560 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0 [0092.078] CoTaskMemFree (pv=0x6dd560) [0092.078] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19ee4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25 [0092.091] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x31d98f0, Length=0x20000, ResultLength=0x19f3dc | out: SystemInformation=0x31d98f0, ResultLength=0x19f3dc*=0x16430) returned 0x0 [0092.105] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata", nBufferLength=0x105, lpBuffer=0x19eee8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata", lpFilePart=0x0) returned 0x3c [0092.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f38c) returned 1 [0092.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Telegram Desktop\\tdata" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\telegram desktop\\tdata"), fInfoLevelId=0x0, lpFileInformation=0x19f408 | out: lpFileInformation=0x19f408*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f388) returned 1 [0092.158] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f3e8 | out: phkResult=0x19f3e8*=0x0) returned 0x2 [0092.163] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Ubisoft Game Launcher", nBufferLength=0x105, lpBuffer=0x19ef08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Ubisoft Game Launcher", lpFilePart=0x0) returned 0x39 [0092.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3ac) returned 1 [0092.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Ubisoft Game Launcher" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\ubisoft game launcher"), fInfoLevelId=0x0, lpFileInformation=0x19f428 | out: lpFileInformation=0x19f428*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3a8) returned 1 [0092.166] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\.minecraft", nBufferLength=0x105, lpBuffer=0x19ef00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\.minecraft", lpFilePart=0x0) returned 0x30 [0092.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3a4) returned 1 [0092.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\.minecraft" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\.minecraft"), fInfoLevelId=0x0, lpFileInformation=0x19f420 | out: lpFileInformation=0x19f420*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3a0) returned 1 [0092.203] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Wallets", nBufferLength=0x105, lpBuffer=0x19eedc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Wallets", lpFilePart=0x0) returned 0x66 [0092.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f30c) returned 1 [0092.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Wallets" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\wallets"), fInfoLevelId=0x0, lpFileInformation=0x19f388 | out: lpFileInformation=0x19f388*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f308) returned 1 [0092.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f30c) returned 1 [0092.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Wallets" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\wallets"), fInfoLevelId=0x0, lpFileInformation=0x19f388 | out: lpFileInformation=0x19f388*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f308) returned 1 [0092.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f30c) returned 1 [0092.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us"), fInfoLevelId=0x0, lpFileInformation=0x19f388 | out: lpFileInformation=0x19f388*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcb008e2, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbd11c7dc, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbd11c7dc, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f308) returned 1 [0092.203] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Wallets" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\wallets"), lpSecurityAttributes=0x0) returned 1 [0092.205] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Zcash", nBufferLength=0x105, lpBuffer=0x19eec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Zcash", lpFilePart=0x0) returned 0x2b [0092.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f368) returned 1 [0092.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Zcash" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\zcash"), fInfoLevelId=0x0, lpFileInformation=0x19f3e4 | out: lpFileInformation=0x19f3e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f364) returned 1 [0092.205] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Armory", nBufferLength=0x105, lpBuffer=0x19eec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Armory", lpFilePart=0x0) returned 0x2c [0092.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f368) returned 1 [0092.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Armory" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\armory"), fInfoLevelId=0x0, lpFileInformation=0x19f3e4 | out: lpFileInformation=0x19f3e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f364) returned 1 [0092.205] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bytecoin", nBufferLength=0x105, lpBuffer=0x19eec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bytecoin", lpFilePart=0x0) returned 0x2e [0092.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f368) returned 1 [0092.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bytecoin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\bytecoin"), fInfoLevelId=0x0, lpFileInformation=0x19f3e4 | out: lpFileInformation=0x19f3e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f364) returned 1 [0092.205] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\com.liberty.jaxx\\IndexedDB\\file__0.indexeddb.leveldb", nBufferLength=0x105, lpBuffer=0x19eec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\com.liberty.jaxx\\IndexedDB\\file__0.indexeddb.leveldb", lpFilePart=0x0) returned 0x5a [0092.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f368) returned 1 [0092.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\com.liberty.jaxx\\IndexedDB\\file__0.indexeddb.leveldb" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\com.liberty.jaxx\\indexeddb\\file__0.indexeddb.leveldb"), fInfoLevelId=0x0, lpFileInformation=0x19f3e4 | out: lpFileInformation=0x19f3e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f364) returned 1 [0092.206] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\exodus.wallet", nBufferLength=0x105, lpBuffer=0x19eec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\exodus.wallet", lpFilePart=0x0) returned 0x3a [0092.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f368) returned 1 [0092.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Exodus\\exodus.wallet" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\exodus\\exodus.wallet"), fInfoLevelId=0x0, lpFileInformation=0x19f3e4 | out: lpFileInformation=0x19f3e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f364) returned 1 [0092.206] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Ethereum\\keystore", nBufferLength=0x105, lpBuffer=0x19eec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Ethereum\\keystore", lpFilePart=0x0) returned 0x37 [0092.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f368) returned 1 [0092.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Ethereum\\keystore" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\ethereum\\keystore"), fInfoLevelId=0x0, lpFileInformation=0x19f3e4 | out: lpFileInformation=0x19f3e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f364) returned 1 [0092.206] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Electrum\\wallets", nBufferLength=0x105, lpBuffer=0x19eec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Electrum\\wallets", lpFilePart=0x0) returned 0x36 [0092.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f368) returned 1 [0092.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Electrum\\wallets" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\electrum\\wallets"), fInfoLevelId=0x0, lpFileInformation=0x19f3e4 | out: lpFileInformation=0x19f3e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f364) returned 1 [0092.206] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\atomic\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x19eec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\atomic\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x42 [0092.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f368) returned 1 [0092.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\atomic\\Local Storage\\leveldb" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\atomic\\local storage\\leveldb"), fInfoLevelId=0x0, lpFileInformation=0x19f3e4 | out: lpFileInformation=0x19f3e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f364) returned 1 [0092.206] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Guarda\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x19eec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Guarda\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x42 [0092.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f368) returned 1 [0092.207] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Guarda\\Local Storage\\leveldb" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\guarda\\local storage\\leveldb"), fInfoLevelId=0x0, lpFileInformation=0x19f3e4 | out: lpFileInformation=0x19f3e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f364) returned 1 [0092.207] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coinomi\\Coinomi\\wallets", nBufferLength=0x105, lpBuffer=0x19eec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coinomi\\Coinomi\\wallets", lpFilePart=0x0) returned 0x3b [0092.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f368) returned 1 [0092.207] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Coinomi\\Coinomi\\wallets" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\coinomi\\coinomi\\wallets"), fInfoLevelId=0x0, lpFileInformation=0x19f3e4 | out: lpFileInformation=0x19f3e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f364) returned 1 [0092.209] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f3c4 | out: phkResult=0x19f3c4*=0x488) returned 0x0 [0092.209] RegOpenKeyExW (in: hKey=0x488, lpSubKey="Litecoin", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f3c4 | out: phkResult=0x19f3c4*=0x0) returned 0x2 [0092.211] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f3c4 | out: phkResult=0x19f3c4*=0x48c) returned 0x0 [0092.211] RegOpenKeyExW (in: hKey=0x48c, lpSubKey="Dash", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f3c4 | out: phkResult=0x19f3c4*=0x0) returned 0x2 [0092.212] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f3c4 | out: phkResult=0x19f3c4*=0x490) returned 0x0 [0092.212] RegOpenKeyExW (in: hKey=0x490, lpSubKey="Bitcoin", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f3c4 | out: phkResult=0x19f3c4*=0x0) returned 0x2 [0092.215] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Wallets", nBufferLength=0x105, lpBuffer=0x19eec4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Wallets", lpFilePart=0x0) returned 0x66 [0092.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3a4) returned 1 [0092.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Wallets" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\wallets"), fInfoLevelId=0x0, lpFileInformation=0x22d73ec | out: lpFileInformation=0x22d73ec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd37edae, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbd37edae, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbd37edae, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3a0) returned 1 [0092.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3d4) returned 1 [0092.215] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Wallets", nBufferLength=0x105, lpBuffer=0x19ee94, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Wallets", lpFilePart=0x0) returned 0x66 [0092.215] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Wallets\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\wallets\\*"), lpFindFileData=0x19f0fc | out: lpFindFileData=0x19f0fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd37edae, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbd37edae, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbd37edae, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9788 [0092.216] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f108 | out: lpFindFileData=0x19f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd37edae, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbd37edae, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbd37edae, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.216] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f108 | out: lpFindFileData=0x19f108*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd37edae, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbd37edae, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbd37edae, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.216] FindClose (in: hFindFile=0x6c9788 | out: hFindFile=0x6c9788) returned 1 [0092.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f390) returned 1 [0092.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f39c) returned 1 [0092.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f378) returned 1 [0092.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Wallets" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\wallets"), fInfoLevelId=0x0, lpFileInformation=0x19f3f4 | out: lpFileInformation=0x19f3f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd37edae, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbd37edae, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbd37edae, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f374) returned 1 [0092.217] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Wallets\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\wallets\\*"), lpFindFileData=0x19f0d0 | out: lpFindFileData=0x19f0d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd37edae, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbd37edae, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbd37edae, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9c48 [0092.217] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0e4 | out: lpFindFileData=0x19f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd37edae, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbd37edae, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbd37edae, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.217] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0e4 | out: lpFindFileData=0x19f0e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd37edae, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbd37edae, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbd37edae, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.217] FindClose (in: hFindFile=0x6c9c48 | out: hFindFile=0x6c9c48) returned 1 [0092.218] RemoveDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Wallets" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\wallets")) returned 1 [0092.262] CoTaskMemAlloc (cb=0x20c) returned 0x6dd560 [0092.262] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6dd560 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0 [0092.262] CoTaskMemFree (pv=0x6dd560) [0092.262] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19ee40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25 [0092.262] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\FileZilla\\recentservers.xml", nBufferLength=0x105, lpBuffer=0x19eee8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\FileZilla\\recentservers.xml", lpFilePart=0x0) returned 0x41 [0092.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f390) returned 1 [0092.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\FileZilla\\recentservers.xml" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\filezilla\\recentservers.xml"), fInfoLevelId=0x0, lpFileInformation=0x19f40c | out: lpFileInformation=0x19f40c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f38c) returned 1 [0092.263] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\FileZilla\\sitemanager.xml", nBufferLength=0x105, lpBuffer=0x19eee8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\FileZilla\\sitemanager.xml", lpFilePart=0x0) returned 0x3f [0092.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f390) returned 1 [0092.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\FileZilla\\sitemanager.xml" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\filezilla\\sitemanager.xml"), fInfoLevelId=0x0, lpFileInformation=0x19f40c | out: lpFileInformation=0x19f40c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f38c) returned 1 [0092.285] CoTaskMemAlloc (cb=0x20c) returned 0x6dd560 [0092.288] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x6dd560 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local") returned 0x0 [0092.288] CoTaskMemFree (pv=0x6dd560) [0092.288] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x19ee58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23 [0092.288] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ProtonVPN", nBufferLength=0x105, lpBuffer=0x19eee8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ProtonVPN", lpFilePart=0x0) returned 0x2d [0092.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f38c) returned 1 [0092.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ProtonVPN" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\protonvpn"), fInfoLevelId=0x0, lpFileInformation=0x19f408 | out: lpFileInformation=0x19f408*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f388) returned 1 [0092.291] CoTaskMemAlloc (cb=0x20c) returned 0x6dd560 [0092.291] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6dd560 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x0 [0092.291] CoTaskMemFree (pv=0x6dd560) [0092.291] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x19ee60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming", lpFilePart=0x0) returned 0x25 [0092.291] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\OpenVPN Connect\\profiles", nBufferLength=0x105, lpBuffer=0x19eef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\OpenVPN Connect\\profiles", lpFilePart=0x0) returned 0x3e [0092.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f394) returned 1 [0092.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\OpenVPN Connect\\profiles" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\openvpn connect\\profiles"), fInfoLevelId=0x0, lpFileInformation=0x19f410 | out: lpFileInformation=0x19f410*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f390) returned 1 [0092.297] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NordVPN", nBufferLength=0x105, lpBuffer=0x19eed4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NordVPN", lpFilePart=0x0) returned 0x2b [0092.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f3b4) returned 1 [0092.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\NordVPN" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\nordvpn"), fInfoLevelId=0x0, lpFileInformation=0x22da28c | out: lpFileInformation=0x22da28c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f3b0) returned 1 [0092.298] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Directories", nBufferLength=0x105, lpBuffer=0x19ef24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Directories", lpFilePart=0x0) returned 0x6a [0092.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Directories" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\directories"), fInfoLevelId=0x0, lpFileInformation=0x19f3d0 | out: lpFileInformation=0x19f3d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f350) returned 1 [0092.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Directories" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\directories"), fInfoLevelId=0x0, lpFileInformation=0x19f3d0 | out: lpFileInformation=0x19f3d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f350) returned 1 [0092.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us"), fInfoLevelId=0x0, lpFileInformation=0x19f3d0 | out: lpFileInformation=0x19f3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcb008e2, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbd3a52db, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbd3a52db, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f350) returned 1 [0092.298] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Directories" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\directories"), lpSecurityAttributes=0x0) returned 1 [0092.304] CoTaskMemAlloc (cb=0x20c) returned 0x6dd560 [0092.304] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x6dd560 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\Desktop") returned 0x0 [0092.304] CoTaskMemFree (pv=0x6dd560) [0092.304] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x19d6c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d [0092.304] CoTaskMemAlloc (cb=0x20c) returned 0x6dd560 [0092.304] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x6dd560 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\Documents") returned 0x0 [0092.305] CoTaskMemFree (pv=0x6dd560) [0092.305] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19d6c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f [0092.305] CoTaskMemAlloc (cb=0x20c) returned 0x6dd560 [0092.305] SHGetFolderPathW (in: hwnd=0x0, csidl=39, hToken=0x0, dwFlags=0x0, pszPath=0x6dd560 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\Pictures") returned 0x0 [0092.305] CoTaskMemFree (pv=0x6dd560) [0092.305] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures", nBufferLength=0x105, lpBuffer=0x19d6c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures", lpFilePart=0x0) returned 0x1e [0092.305] CoTaskMemAlloc (cb=0x20c) returned 0x6dd560 [0092.305] SHGetFolderPathW (in: hwnd=0x0, csidl=14, hToken=0x0, dwFlags=0x0, pszPath=0x6dd560 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\Videos") returned 0x0 [0092.306] CoTaskMemFree (pv=0x6dd560) [0092.306] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos", nBufferLength=0x105, lpBuffer=0x19d6c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Videos", lpFilePart=0x0) returned 0x1c [0092.306] CoTaskMemAlloc (cb=0x20c) returned 0x6dd560 [0092.306] SHGetFolderPathW (in: hwnd=0x0, csidl=7, hToken=0x0, dwFlags=0x0, pszPath=0x6dd560 | out: pszPath="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x0 [0092.306] CoTaskMemFree (pv=0x6dd560) [0092.306] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0x19d6c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x53 [0092.306] CoTaskMemAlloc (cb=0x20c) returned 0x6dd560 [0092.306] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6dd560 | out: pszPath="C:\\Users\\RDhJ0CNFevzX") returned 0x0 [0092.306] CoTaskMemFree (pv=0x6dd560) [0092.306] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX", nBufferLength=0x105, lpBuffer=0x19d6c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX", lpFilePart=0x0) returned 0x15 [0092.306] CoTaskMemAlloc (cb=0x20c) returned 0x6dd560 [0092.306] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x6dd560, nSize=0x104 | out: lpBuffer="") returned 0x15 [0092.306] CoTaskMemFree (pv=0x6dd560) [0092.306] CoTaskMemAlloc (cb=0x20c) returned 0x6dd560 [0092.306] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x6dd560, nSize=0x104 | out: lpBuffer="") returned 0x15 [0092.307] CoTaskMemFree (pv=0x6dd560) [0092.307] CoTaskMemAlloc (cb=0x20c) returned 0x6dd560 [0092.307] GetEnvironmentVariableW (in: lpName="TEMP", lpBuffer=0x6dd560, nSize=0x104 | out: lpBuffer="") returned 0x24 [0092.307] CoTaskMemFree (pv=0x6dd560) [0092.324] GetLogicalDrives () returned 0x4 [0092.324] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x19ee38, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0092.324] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0092.341] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x19ee84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d [0092.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f328) returned 1 [0092.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x19f3a4 | out: lpFileInformation=0x19f3a4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9b1bad97, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x9b1bad97, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0092.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f324) returned 1 [0092.341] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x19ee88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d [0092.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f398) returned 1 [0092.356] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x19ee58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d [0092.356] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\*"), lpFindFileData=0x19f0c0 | out: lpFindFileData=0x19f0c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9b1bad97, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x9b1bad97, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9c48 [0092.356] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9b1bad97, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x9b1bad97, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.357] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ed649e0, ftCreationTime.dwHighDateTime=0x1d8ba82, ftLastAccessTime.dwLowDateTime=0xdde77d40, ftLastAccessTime.dwHighDateTime=0x1d8bc54, ftLastWriteTime.dwLowDateTime=0xdde77d40, ftLastWriteTime.dwHighDateTime=0x1d8bc54, nFileSizeHigh=0x0, nFileSizeLow=0x1009f, dwReserved0=0x0, dwReserved1=0x0, cFileName="-6j3wVd6H.wav", cAlternateFileName="-6J3WV~1.WAV")) returned 1 [0092.357] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0fb6300, ftCreationTime.dwHighDateTime=0x1d8b7b8, ftLastAccessTime.dwLowDateTime=0xaa1357d0, ftLastAccessTime.dwHighDateTime=0x1d8b7ce, ftLastWriteTime.dwLowDateTime=0xaa1357d0, ftLastWriteTime.dwHighDateTime=0x1d8b7ce, nFileSizeHigh=0x0, nFileSizeLow=0x3401, dwReserved0=0x0, dwReserved1=0x0, cFileName="2yaTsjufwmYx.bmp", cAlternateFileName="2YATSJ~1.BMP")) returned 1 [0092.357] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8179fc40, ftCreationTime.dwHighDateTime=0x1d8b81c, ftLastAccessTime.dwLowDateTime=0x1c74a8d0, ftLastAccessTime.dwHighDateTime=0x1d8ba7f, ftLastWriteTime.dwLowDateTime=0x1c74a8d0, ftLastWriteTime.dwHighDateTime=0x1d8ba7f, nFileSizeHigh=0x0, nFileSizeLow=0x1104b, dwReserved0=0x0, dwReserved1=0x0, cFileName="5nZcfaMBhgu2LD.flv", cAlternateFileName="5NZCFA~1.FLV")) returned 1 [0092.357] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83291b80, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0x83291b80, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x1e69c300, ftLastWriteTime.dwHighDateTime=0x1d92b86, nFileSizeHigh=0x0, nFileSizeLow=0x53e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe", cAlternateFileName="82ACC1~1.EXE")) returned 1 [0092.357] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9468f3b0, ftCreationTime.dwHighDateTime=0x1d8b8e4, ftLastAccessTime.dwLowDateTime=0x16c9c580, ftLastAccessTime.dwHighDateTime=0x1d8b9b9, ftLastWriteTime.dwLowDateTime=0x16c9c580, ftLastWriteTime.dwHighDateTime=0x1d8b9b9, nFileSizeHigh=0x0, nFileSizeLow=0x17e1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Bco.avi", cAlternateFileName="")) returned 1 [0092.357] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda8992f0, ftCreationTime.dwHighDateTime=0x1d8b777, ftLastAccessTime.dwLowDateTime=0xe32b5830, ftLastAccessTime.dwHighDateTime=0x1d8bd58, ftLastWriteTime.dwLowDateTime=0xe32b5830, ftLastWriteTime.dwHighDateTime=0x1d8bd58, nFileSizeHigh=0x0, nFileSizeLow=0xaa7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="9tqipBAM.m4a", cAlternateFileName="")) returned 1 [0092.358] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcac9fcd0, ftCreationTime.dwHighDateTime=0x1d8b5db, ftLastAccessTime.dwLowDateTime=0xaaa97110, ftLastAccessTime.dwHighDateTime=0x1d8bdd3, ftLastWriteTime.dwLowDateTime=0xaaa97110, ftLastWriteTime.dwHighDateTime=0x1d8bdd3, nFileSizeHigh=0x0, nFileSizeLow=0x18f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chh7tG4ZOOPfle3.png", cAlternateFileName="CHH7TG~1.PNG")) returned 1 [0092.358] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e0dddf0, ftCreationTime.dwHighDateTime=0x1d8bd4d, ftLastAccessTime.dwLowDateTime=0x113a3390, ftLastAccessTime.dwHighDateTime=0x1d8c060, ftLastWriteTime.dwLowDateTime=0x113a3390, ftLastWriteTime.dwHighDateTime=0x1d8c060, nFileSizeHigh=0x0, nFileSizeLow=0x310c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cib-t5wDlO7eTKCnU2.swf", cAlternateFileName="CIB-T5~1.SWF")) returned 1 [0092.358] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24ff58a0, ftCreationTime.dwHighDateTime=0x1d8bbf7, ftLastAccessTime.dwLowDateTime=0xaea43270, ftLastAccessTime.dwHighDateTime=0x1d8c051, ftLastWriteTime.dwLowDateTime=0xaea43270, ftLastWriteTime.dwHighDateTime=0x1d8c051, nFileSizeHigh=0x0, nFileSizeLow=0x65b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CpGUjN4mN5ak.wav", cAlternateFileName="CPGUJN~1.WAV")) returned 1 [0092.358] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.358] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93b0cf40, ftCreationTime.dwHighDateTime=0x1d8b88c, ftLastAccessTime.dwLowDateTime=0xc913fdc0, ftLastAccessTime.dwHighDateTime=0x1d8ba20, ftLastWriteTime.dwLowDateTime=0xc913fdc0, ftLastWriteTime.dwHighDateTime=0x1d8ba20, nFileSizeHigh=0x0, nFileSizeLow=0x14a4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="eUlg.ods", cAlternateFileName="")) returned 1 [0092.358] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6110a880, ftCreationTime.dwHighDateTime=0x1d8bb02, ftLastAccessTime.dwLowDateTime=0xbebbc8c0, ftLastAccessTime.dwHighDateTime=0x1d8c0de, ftLastWriteTime.dwLowDateTime=0xbebbc8c0, ftLastWriteTime.dwHighDateTime=0x1d8c0de, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="FYJ1.pptx", cAlternateFileName="FYJ1~1.PPT")) returned 1 [0092.358] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52e375c0, ftCreationTime.dwHighDateTime=0x1d8c107, ftLastAccessTime.dwLowDateTime=0x53360b20, ftLastAccessTime.dwHighDateTime=0x1d8c11e, ftLastWriteTime.dwLowDateTime=0x53360b20, ftLastWriteTime.dwHighDateTime=0x1d8c11e, nFileSizeHigh=0x0, nFileSizeLow=0x849e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HJDXtUSQzN.odp", cAlternateFileName="HJDXTU~1.ODP")) returned 1 [0092.359] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmKLkObpH51ed_", cAlternateFileName="HMKLKO~1")) returned 1 [0092.359] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95d451f0, ftCreationTime.dwHighDateTime=0x1d8bcb2, ftLastAccessTime.dwLowDateTime=0x3e5310e0, ftLastAccessTime.dwHighDateTime=0x1d8bdae, ftLastWriteTime.dwLowDateTime=0x3e5310e0, ftLastWriteTime.dwHighDateTime=0x1d8bdae, nFileSizeHigh=0x0, nFileSizeLow=0x13469, dwReserved0=0x0, dwReserved1=0x0, cFileName="iLq3zNHP1Bvq2jgkzC.swf", cAlternateFileName="ILQ3ZN~1.SWF")) returned 1 [0092.359] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7197bc0, ftCreationTime.dwHighDateTime=0x1d8b7ad, ftLastAccessTime.dwLowDateTime=0xcea29ec0, ftLastAccessTime.dwHighDateTime=0x1d8ba9f, ftLastWriteTime.dwLowDateTime=0xcea29ec0, ftLastWriteTime.dwHighDateTime=0x1d8ba9f, nFileSizeHigh=0x0, nFileSizeLow=0x29eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="irK2.png", cAlternateFileName="")) returned 1 [0092.359] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe882b260, ftCreationTime.dwHighDateTime=0x1d8b93e, ftLastAccessTime.dwLowDateTime=0x55ed7ad0, ftLastAccessTime.dwHighDateTime=0x1d8ba4b, ftLastWriteTime.dwLowDateTime=0x55ed7ad0, ftLastWriteTime.dwHighDateTime=0x1d8ba4b, nFileSizeHigh=0x0, nFileSizeLow=0x53c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="knJlrMn.jpg", cAlternateFileName="")) returned 1 [0092.360] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406f8380, ftCreationTime.dwHighDateTime=0x1d8b5f3, ftLastAccessTime.dwLowDateTime=0x36788730, ftLastAccessTime.dwHighDateTime=0x1d8bb86, ftLastWriteTime.dwLowDateTime=0x36788730, ftLastWriteTime.dwHighDateTime=0x1d8bb86, nFileSizeHigh=0x0, nFileSizeLow=0x4cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="L18V.ods", cAlternateFileName="")) returned 1 [0092.360] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e94e0, ftCreationTime.dwHighDateTime=0x1d8b31e, ftLastAccessTime.dwLowDateTime=0xf98eff50, ftLastAccessTime.dwHighDateTime=0x1d8bf65, ftLastWriteTime.dwLowDateTime=0xf98eff50, ftLastWriteTime.dwHighDateTime=0x1d8bf65, nFileSizeHigh=0x0, nFileSizeLow=0xde75, dwReserved0=0x0, dwReserved1=0x0, cFileName="mGLbr8EHVJwWvBHC.mp3", cAlternateFileName="MGLBR8~1.MP3")) returned 1 [0092.360] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2085c7f0, ftCreationTime.dwHighDateTime=0x1d8b6d4, ftLastAccessTime.dwLowDateTime=0xc9273680, ftLastAccessTime.dwHighDateTime=0x1d8bbb3, ftLastWriteTime.dwLowDateTime=0xc9273680, ftLastWriteTime.dwHighDateTime=0x1d8bbb3, nFileSizeHigh=0x0, nFileSizeLow=0xa6b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MgsHDnP3Ixv1ZL.mp3", cAlternateFileName="MGSHDN~1.MP3")) returned 1 [0092.360] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1622410, ftCreationTime.dwHighDateTime=0x1d8b29b, ftLastAccessTime.dwLowDateTime=0x203e2830, ftLastAccessTime.dwHighDateTime=0x1d8ba64, ftLastWriteTime.dwLowDateTime=0x203e2830, ftLastWriteTime.dwHighDateTime=0x1d8ba64, nFileSizeHigh=0x0, nFileSizeLow=0x17703, dwReserved0=0x0, dwReserved1=0x0, cFileName="nsIVnWY.png", cAlternateFileName="")) returned 1 [0092.360] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6bbbb10, ftCreationTime.dwHighDateTime=0x1d8b776, ftLastAccessTime.dwLowDateTime=0x9d1ca770, ftLastAccessTime.dwHighDateTime=0x1d8b92c, ftLastWriteTime.dwLowDateTime=0x9d1ca770, ftLastWriteTime.dwHighDateTime=0x1d8b92c, nFileSizeHigh=0x0, nFileSizeLow=0xb566, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmYoSoLSWK_urmMNr1Bb.flv", cAlternateFileName="SMYOSO~1.FLV")) returned 1 [0092.360] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37934860, ftCreationTime.dwHighDateTime=0x1d8b1f6, ftLastAccessTime.dwLowDateTime=0x1b53c930, ftLastAccessTime.dwHighDateTime=0x1d8b742, ftLastWriteTime.dwLowDateTime=0x1b53c930, ftLastWriteTime.dwHighDateTime=0x1d8b742, nFileSizeHigh=0x0, nFileSizeLow=0x11ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="tftcjhfP.m4a", cAlternateFileName="")) returned 1 [0092.360] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb43f9c60, ftCreationTime.dwHighDateTime=0x1d8b3e5, ftLastAccessTime.dwLowDateTime=0x166bae30, ftLastAccessTime.dwHighDateTime=0x1d8baf1, ftLastWriteTime.dwLowDateTime=0x166bae30, ftLastWriteTime.dwHighDateTime=0x1d8baf1, nFileSizeHigh=0x0, nFileSizeLow=0x177ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="TPZCYP.wav", cAlternateFileName="")) returned 1 [0092.361] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cb842b0, ftCreationTime.dwHighDateTime=0x1d8bdf4, ftLastAccessTime.dwLowDateTime=0xce3e2fd0, ftLastAccessTime.dwHighDateTime=0x1d8bffe, ftLastWriteTime.dwLowDateTime=0xce3e2fd0, ftLastWriteTime.dwHighDateTime=0x1d8bffe, nFileSizeHigh=0x0, nFileSizeLow=0x24e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uz lX.flv", cAlternateFileName="UZLX~1.FLV")) returned 1 [0092.361] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a7a9470, ftCreationTime.dwHighDateTime=0x1d8c09c, ftLastAccessTime.dwLowDateTime=0x6725f750, ftLastAccessTime.dwHighDateTime=0x1d8c0b3, ftLastWriteTime.dwLowDateTime=0x6725f750, ftLastWriteTime.dwHighDateTime=0x1d8c0b3, nFileSizeHigh=0x0, nFileSizeLow=0x47f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ve Adh4F7cSMF.swf", cAlternateFileName="VEADH4~1.SWF")) returned 1 [0092.361] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x982c8420, ftCreationTime.dwHighDateTime=0x1d8c123, ftLastAccessTime.dwLowDateTime=0xb3f47f60, ftLastAccessTime.dwHighDateTime=0x1d8c127, ftLastWriteTime.dwLowDateTime=0xb3f47f60, ftLastWriteTime.dwHighDateTime=0x1d8c127, nFileSizeHigh=0x0, nFileSizeLow=0x53df, dwReserved0=0x0, dwReserved1=0x0, cFileName="vHaRBzu.bmp", cAlternateFileName="")) returned 1 [0092.361] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb438f9e0, ftCreationTime.dwHighDateTime=0x1d8b26a, ftLastAccessTime.dwLowDateTime=0xe816cce0, ftLastAccessTime.dwHighDateTime=0x1d8b37a, ftLastWriteTime.dwLowDateTime=0xe816cce0, ftLastWriteTime.dwHighDateTime=0x1d8b37a, nFileSizeHigh=0x0, nFileSizeLow=0x15c1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="vPTw68y.flv", cAlternateFileName="")) returned 1 [0092.361] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20202850, ftCreationTime.dwHighDateTime=0x1d8b6d4, ftLastAccessTime.dwLowDateTime=0x9edd100, ftLastAccessTime.dwHighDateTime=0x1d8c065, ftLastWriteTime.dwLowDateTime=0x9edd100, ftLastWriteTime.dwHighDateTime=0x1d8c065, nFileSizeHigh=0x0, nFileSizeLow=0x17dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbS7-JwT.flv", cAlternateFileName="")) returned 1 [0092.361] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20202850, ftCreationTime.dwHighDateTime=0x1d8b6d4, ftLastAccessTime.dwLowDateTime=0x9edd100, ftLastAccessTime.dwHighDateTime=0x1d8c065, ftLastWriteTime.dwLowDateTime=0x9edd100, ftLastWriteTime.dwHighDateTime=0x1d8c065, nFileSizeHigh=0x0, nFileSizeLow=0x17dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbS7-JwT.flv", cAlternateFileName="")) returned 0 [0092.362] FindClose (in: hFindFile=0x6c9c48 | out: hFindFile=0x6c9c48) returned 1 [0092.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f354) returned 1 [0092.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f360) returned 1 [0092.362] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_", nBufferLength=0x105, lpBuffer=0x19ee40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_", lpFilePart=0x0) returned 0x2c [0092.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2e4) returned 1 [0092.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_"), fInfoLevelId=0x0, lpFileInformation=0x19f360 | out: lpFileInformation=0x19f360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0092.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2e0) returned 1 [0092.362] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_", nBufferLength=0x105, lpBuffer=0x19ee44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_", lpFilePart=0x0) returned 0x2c [0092.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.362] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_", nBufferLength=0x105, lpBuffer=0x19ee14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_", lpFilePart=0x0) returned 0x2c [0092.362] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\*"), lpFindFileData=0x19f07c | out: lpFindFileData=0x19f07c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c96c8 [0092.363] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.363] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf15daed0, ftCreationTime.dwHighDateTime=0x1d8b876, ftLastAccessTime.dwLowDateTime=0x4e1ae0a0, ftLastAccessTime.dwHighDateTime=0x1d8bed7, ftLastWriteTime.dwLowDateTime=0x4e1ae0a0, ftLastWriteTime.dwHighDateTime=0x1d8bed7, nFileSizeHigh=0x0, nFileSizeLow=0xbd08, dwReserved0=0x0, dwReserved1=0x0, cFileName="4JORAA_2dvLjbNy7.mp3", cAlternateFileName="4JORAA~1.MP3")) returned 1 [0092.363] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x861947c0, ftCreationTime.dwHighDateTime=0x1d8bd1b, ftLastAccessTime.dwLowDateTime=0xeb856a0, ftLastAccessTime.dwHighDateTime=0x1d8bd1e, ftLastWriteTime.dwLowDateTime=0xeb856a0, ftLastWriteTime.dwHighDateTime=0x1d8bd1e, nFileSizeHigh=0x0, nFileSizeLow=0x173a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ek6U.wav", cAlternateFileName="")) returned 1 [0092.363] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe60e750, ftCreationTime.dwHighDateTime=0x1d8b163, ftLastAccessTime.dwLowDateTime=0x8ace7090, ftLastAccessTime.dwHighDateTime=0x1d8bf7a, ftLastWriteTime.dwLowDateTime=0x8ace7090, ftLastWriteTime.dwHighDateTime=0x1d8bf7a, nFileSizeHigh=0x0, nFileSizeLow=0x64f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gvQ3Hjy8U2-C2P1Q.gif", cAlternateFileName="GVQ3HJ~1.GIF")) returned 1 [0092.363] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LJIKB", cAlternateFileName="")) returned 1 [0092.363] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf842c10, ftCreationTime.dwHighDateTime=0x1d8c095, ftLastAccessTime.dwLowDateTime=0xf91ebb60, ftLastAccessTime.dwHighDateTime=0x1d8c0a4, ftLastWriteTime.dwLowDateTime=0xf91ebb60, ftLastWriteTime.dwHighDateTime=0x1d8c0a4, nFileSizeHigh=0x0, nFileSizeLow=0x596c, dwReserved0=0x0, dwReserved1=0x0, cFileName="o5MUa-6.wav", cAlternateFileName="")) returned 1 [0092.363] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8877cb70, ftCreationTime.dwHighDateTime=0x1d8b2fa, ftLastAccessTime.dwLowDateTime=0xe2c31410, ftLastAccessTime.dwHighDateTime=0x1d8b703, ftLastWriteTime.dwLowDateTime=0xe2c31410, ftLastWriteTime.dwHighDateTime=0x1d8b703, nFileSizeHigh=0x0, nFileSizeLow=0x12e5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Od i5WMI4-V8Moa.ots", cAlternateFileName="ODI5WM~1.OTS")) returned 1 [0092.382] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f826dc0, ftCreationTime.dwHighDateTime=0x1d8b935, ftLastAccessTime.dwLowDateTime=0xcc8e6400, ftLastAccessTime.dwHighDateTime=0x1d8beed, ftLastWriteTime.dwLowDateTime=0xcc8e6400, ftLastWriteTime.dwHighDateTime=0x1d8beed, nFileSizeHigh=0x0, nFileSizeLow=0x725a, dwReserved0=0x0, dwReserved1=0x0, cFileName="_QGFEo2A2-pto23JslcT.png", cAlternateFileName="_QGFEO~1.PNG")) returned 1 [0092.383] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f826dc0, ftCreationTime.dwHighDateTime=0x1d8b935, ftLastAccessTime.dwLowDateTime=0xcc8e6400, ftLastAccessTime.dwHighDateTime=0x1d8beed, ftLastWriteTime.dwLowDateTime=0xcc8e6400, ftLastWriteTime.dwHighDateTime=0x1d8beed, nFileSizeHigh=0x0, nFileSizeLow=0x725a, dwReserved0=0x0, dwReserved1=0x0, cFileName="_QGFEo2A2-pto23JslcT.png", cAlternateFileName="_QGFEO~1.PNG")) returned 0 [0092.383] FindClose (in: hFindFile=0x6c96c8 | out: hFindFile=0x6c96c8) returned 1 [0092.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.383] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB", nBufferLength=0x105, lpBuffer=0x19edfc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB", lpFilePart=0x0) returned 0x32 [0092.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2a0) returned 1 [0092.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb"), fInfoLevelId=0x0, lpFileInformation=0x19f31c | out: lpFileInformation=0x19f31c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0092.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f29c) returned 1 [0092.383] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB", nBufferLength=0x105, lpBuffer=0x19ee00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB", lpFilePart=0x0) returned 0x32 [0092.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f310) returned 1 [0092.383] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB", nBufferLength=0x105, lpBuffer=0x19edd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB", lpFilePart=0x0) returned 0x32 [0092.383] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\*"), lpFindFileData=0x19f038 | out: lpFindFileData=0x19f038*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9c48 [0092.384] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.384] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7baf7c20, ftCreationTime.dwHighDateTime=0x1d8bafd, ftLastAccessTime.dwLowDateTime=0x405496f0, ftLastAccessTime.dwHighDateTime=0x1d8bb21, ftLastWriteTime.dwLowDateTime=0x405496f0, ftLastWriteTime.dwHighDateTime=0x1d8bb21, nFileSizeHigh=0x0, nFileSizeLow=0x1378e, dwReserved0=0x0, dwReserved1=0x0, cFileName="484IJyBLXQXJI6z5aVY.png", cAlternateFileName="484IJY~1.PNG")) returned 1 [0092.384] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401b8f60, ftCreationTime.dwHighDateTime=0x1d8b0ca, ftLastAccessTime.dwLowDateTime=0x1b0b3330, ftLastAccessTime.dwHighDateTime=0x1d8bc3f, ftLastWriteTime.dwLowDateTime=0x1b0b3330, ftLastWriteTime.dwHighDateTime=0x1d8bc3f, nFileSizeHigh=0x0, nFileSizeLow=0x1479a, dwReserved0=0x0, dwReserved1=0x0, cFileName="9muSQLT.avi", cAlternateFileName="")) returned 1 [0092.384] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90828520, ftCreationTime.dwHighDateTime=0x1d8be9f, ftLastAccessTime.dwLowDateTime=0xa73ac3d0, ftLastAccessTime.dwHighDateTime=0x1d8c0cb, ftLastWriteTime.dwLowDateTime=0xa73ac3d0, ftLastWriteTime.dwHighDateTime=0x1d8c0cb, nFileSizeHigh=0x0, nFileSizeLow=0x13dd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar1mtEjehL5qHu.wav", cAlternateFileName="AR1MTE~1.WAV")) returned 1 [0092.384] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a2cc1f0, ftCreationTime.dwHighDateTime=0x1d8b754, ftLastAccessTime.dwLowDateTime=0xde186450, ftLastAccessTime.dwHighDateTime=0x1d8babf, ftLastWriteTime.dwLowDateTime=0xde186450, ftLastWriteTime.dwHighDateTime=0x1d8babf, nFileSizeHigh=0x0, nFileSizeLow=0xd832, dwReserved0=0x0, dwReserved1=0x0, cFileName="gKOrHpH8a3UQ.flv", cAlternateFileName="GKORHP~1.FLV")) returned 1 [0092.385] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9141f280, ftCreationTime.dwHighDateTime=0x1d8b3f4, ftLastAccessTime.dwLowDateTime=0xf7257800, ftLastAccessTime.dwHighDateTime=0x1d8b562, ftLastWriteTime.dwLowDateTime=0xf7257800, ftLastWriteTime.dwHighDateTime=0x1d8b562, nFileSizeHigh=0x0, nFileSizeLow=0xc673, dwReserved0=0x0, dwReserved1=0x0, cFileName="N3sG1qBeI3bDTH.avi", cAlternateFileName="N3SG1Q~1.AVI")) returned 1 [0092.385] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdd04cc0, ftCreationTime.dwHighDateTime=0x1d8be93, ftLastAccessTime.dwLowDateTime=0xbce6da20, ftLastAccessTime.dwHighDateTime=0x1d8c0bc, ftLastWriteTime.dwLowDateTime=0xbce6da20, ftLastWriteTime.dwHighDateTime=0x1d8c0bc, nFileSizeHigh=0x0, nFileSizeLow=0x149c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="P3g7Dv.m4a", cAlternateFileName="")) returned 1 [0092.385] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7bdf1d0, ftCreationTime.dwHighDateTime=0x1d8b788, ftLastAccessTime.dwLowDateTime=0x14b20280, ftLastAccessTime.dwHighDateTime=0x1d8b98c, ftLastWriteTime.dwLowDateTime=0x14b20280, ftLastWriteTime.dwHighDateTime=0x1d8b98c, nFileSizeHigh=0x0, nFileSizeLow=0x86bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="T BZFFxaGrVGg4fy9.swf", cAlternateFileName="TBZFFX~1.SWF")) returned 1 [0092.385] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1aeed0, ftCreationTime.dwHighDateTime=0x1d8b622, ftLastAccessTime.dwLowDateTime=0xb144fd0, ftLastAccessTime.dwHighDateTime=0x1d8b937, ftLastWriteTime.dwLowDateTime=0xb144fd0, ftLastWriteTime.dwHighDateTime=0x1d8b937, nFileSizeHigh=0x0, nFileSizeLow=0x16a8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="UfpnW-.mp3", cAlternateFileName="")) returned 1 [0092.385] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c018d60, ftCreationTime.dwHighDateTime=0x1d8b17f, ftLastAccessTime.dwLowDateTime=0x23689000, ftLastAccessTime.dwHighDateTime=0x1d8b478, ftLastWriteTime.dwLowDateTime=0x23689000, ftLastWriteTime.dwHighDateTime=0x1d8b478, nFileSizeHigh=0x0, nFileSizeLow=0xf80e, dwReserved0=0x0, dwReserved1=0x0, cFileName="z- ZK.avi", cAlternateFileName="Z-ZK~1.AVI")) returned 1 [0092.385] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c018d60, ftCreationTime.dwHighDateTime=0x1d8b17f, ftLastAccessTime.dwLowDateTime=0x23689000, ftLastAccessTime.dwHighDateTime=0x1d8b478, ftLastWriteTime.dwLowDateTime=0x23689000, ftLastWriteTime.dwHighDateTime=0x1d8b478, nFileSizeHigh=0x0, nFileSizeLow=0xf80e, dwReserved0=0x0, dwReserved1=0x0, cFileName="z- ZK.avi", cAlternateFileName="Z-ZK~1.AVI")) returned 0 [0092.386] FindClose (in: hFindFile=0x6c9c48 | out: hFindFile=0x6c9c48) returned 1 [0092.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2cc) returned 1 [0092.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2d8) returned 1 [0092.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f310) returned 1 [0092.386] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB", nBufferLength=0x105, lpBuffer=0x19edd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB", lpFilePart=0x0) returned 0x32 [0092.386] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\*"), lpFindFileData=0x19f038 | out: lpFindFileData=0x19f038*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9c48 [0092.387] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.387] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7baf7c20, ftCreationTime.dwHighDateTime=0x1d8bafd, ftLastAccessTime.dwLowDateTime=0x405496f0, ftLastAccessTime.dwHighDateTime=0x1d8bb21, ftLastWriteTime.dwLowDateTime=0x405496f0, ftLastWriteTime.dwHighDateTime=0x1d8bb21, nFileSizeHigh=0x0, nFileSizeLow=0x1378e, dwReserved0=0x0, dwReserved1=0x0, cFileName="484IJyBLXQXJI6z5aVY.png", cAlternateFileName="484IJY~1.PNG")) returned 1 [0092.388] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401b8f60, ftCreationTime.dwHighDateTime=0x1d8b0ca, ftLastAccessTime.dwLowDateTime=0x1b0b3330, ftLastAccessTime.dwHighDateTime=0x1d8bc3f, ftLastWriteTime.dwLowDateTime=0x1b0b3330, ftLastWriteTime.dwHighDateTime=0x1d8bc3f, nFileSizeHigh=0x0, nFileSizeLow=0x1479a, dwReserved0=0x0, dwReserved1=0x0, cFileName="9muSQLT.avi", cAlternateFileName="")) returned 1 [0092.388] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90828520, ftCreationTime.dwHighDateTime=0x1d8be9f, ftLastAccessTime.dwLowDateTime=0xa73ac3d0, ftLastAccessTime.dwHighDateTime=0x1d8c0cb, ftLastWriteTime.dwLowDateTime=0xa73ac3d0, ftLastWriteTime.dwHighDateTime=0x1d8c0cb, nFileSizeHigh=0x0, nFileSizeLow=0x13dd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar1mtEjehL5qHu.wav", cAlternateFileName="AR1MTE~1.WAV")) returned 1 [0092.388] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a2cc1f0, ftCreationTime.dwHighDateTime=0x1d8b754, ftLastAccessTime.dwLowDateTime=0xde186450, ftLastAccessTime.dwHighDateTime=0x1d8babf, ftLastWriteTime.dwLowDateTime=0xde186450, ftLastWriteTime.dwHighDateTime=0x1d8babf, nFileSizeHigh=0x0, nFileSizeLow=0xd832, dwReserved0=0x0, dwReserved1=0x0, cFileName="gKOrHpH8a3UQ.flv", cAlternateFileName="GKORHP~1.FLV")) returned 1 [0092.388] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9141f280, ftCreationTime.dwHighDateTime=0x1d8b3f4, ftLastAccessTime.dwLowDateTime=0xf7257800, ftLastAccessTime.dwHighDateTime=0x1d8b562, ftLastWriteTime.dwLowDateTime=0xf7257800, ftLastWriteTime.dwHighDateTime=0x1d8b562, nFileSizeHigh=0x0, nFileSizeLow=0xc673, dwReserved0=0x0, dwReserved1=0x0, cFileName="N3sG1qBeI3bDTH.avi", cAlternateFileName="N3SG1Q~1.AVI")) returned 1 [0092.388] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdd04cc0, ftCreationTime.dwHighDateTime=0x1d8be93, ftLastAccessTime.dwLowDateTime=0xbce6da20, ftLastAccessTime.dwHighDateTime=0x1d8c0bc, ftLastWriteTime.dwLowDateTime=0xbce6da20, ftLastWriteTime.dwHighDateTime=0x1d8c0bc, nFileSizeHigh=0x0, nFileSizeLow=0x149c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="P3g7Dv.m4a", cAlternateFileName="")) returned 1 [0092.388] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7bdf1d0, ftCreationTime.dwHighDateTime=0x1d8b788, ftLastAccessTime.dwLowDateTime=0x14b20280, ftLastAccessTime.dwHighDateTime=0x1d8b98c, ftLastWriteTime.dwLowDateTime=0x14b20280, ftLastWriteTime.dwHighDateTime=0x1d8b98c, nFileSizeHigh=0x0, nFileSizeLow=0x86bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="T BZFFxaGrVGg4fy9.swf", cAlternateFileName="TBZFFX~1.SWF")) returned 1 [0092.388] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1aeed0, ftCreationTime.dwHighDateTime=0x1d8b622, ftLastAccessTime.dwLowDateTime=0xb144fd0, ftLastAccessTime.dwHighDateTime=0x1d8b937, ftLastWriteTime.dwLowDateTime=0xb144fd0, ftLastWriteTime.dwHighDateTime=0x1d8b937, nFileSizeHigh=0x0, nFileSizeLow=0x16a8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="UfpnW-.mp3", cAlternateFileName="")) returned 1 [0092.388] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c018d60, ftCreationTime.dwHighDateTime=0x1d8b17f, ftLastAccessTime.dwLowDateTime=0x23689000, ftLastAccessTime.dwHighDateTime=0x1d8b478, ftLastWriteTime.dwLowDateTime=0x23689000, ftLastWriteTime.dwHighDateTime=0x1d8b478, nFileSizeHigh=0x0, nFileSizeLow=0xf80e, dwReserved0=0x0, dwReserved1=0x0, cFileName="z- ZK.avi", cAlternateFileName="Z-ZK~1.AVI")) returned 1 [0092.389] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f044 | out: lpFindFileData=0x19f044*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.389] FindClose (in: hFindFile=0x6c9c48 | out: hFindFile=0x6c9c48) returned 1 [0092.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2cc) returned 1 [0092.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2d8) returned 1 [0092.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.389] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_", nBufferLength=0x105, lpBuffer=0x19ee14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_", lpFilePart=0x0) returned 0x2c [0092.389] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\*"), lpFindFileData=0x19f07c | out: lpFindFileData=0x19f07c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9788 [0092.389] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.390] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf15daed0, ftCreationTime.dwHighDateTime=0x1d8b876, ftLastAccessTime.dwLowDateTime=0x4e1ae0a0, ftLastAccessTime.dwHighDateTime=0x1d8bed7, ftLastWriteTime.dwLowDateTime=0x4e1ae0a0, ftLastWriteTime.dwHighDateTime=0x1d8bed7, nFileSizeHigh=0x0, nFileSizeLow=0xbd08, dwReserved0=0x0, dwReserved1=0x0, cFileName="4JORAA_2dvLjbNy7.mp3", cAlternateFileName="4JORAA~1.MP3")) returned 1 [0092.390] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x861947c0, ftCreationTime.dwHighDateTime=0x1d8bd1b, ftLastAccessTime.dwLowDateTime=0xeb856a0, ftLastAccessTime.dwHighDateTime=0x1d8bd1e, ftLastWriteTime.dwLowDateTime=0xeb856a0, ftLastWriteTime.dwHighDateTime=0x1d8bd1e, nFileSizeHigh=0x0, nFileSizeLow=0x173a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ek6U.wav", cAlternateFileName="")) returned 1 [0092.390] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe60e750, ftCreationTime.dwHighDateTime=0x1d8b163, ftLastAccessTime.dwLowDateTime=0x8ace7090, ftLastAccessTime.dwHighDateTime=0x1d8bf7a, ftLastWriteTime.dwLowDateTime=0x8ace7090, ftLastWriteTime.dwHighDateTime=0x1d8bf7a, nFileSizeHigh=0x0, nFileSizeLow=0x64f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gvQ3Hjy8U2-C2P1Q.gif", cAlternateFileName="GVQ3HJ~1.GIF")) returned 1 [0092.390] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LJIKB", cAlternateFileName="")) returned 1 [0092.390] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf842c10, ftCreationTime.dwHighDateTime=0x1d8c095, ftLastAccessTime.dwLowDateTime=0xf91ebb60, ftLastAccessTime.dwHighDateTime=0x1d8c0a4, ftLastWriteTime.dwLowDateTime=0xf91ebb60, ftLastWriteTime.dwHighDateTime=0x1d8c0a4, nFileSizeHigh=0x0, nFileSizeLow=0x596c, dwReserved0=0x0, dwReserved1=0x0, cFileName="o5MUa-6.wav", cAlternateFileName="")) returned 1 [0092.390] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8877cb70, ftCreationTime.dwHighDateTime=0x1d8b2fa, ftLastAccessTime.dwLowDateTime=0xe2c31410, ftLastAccessTime.dwHighDateTime=0x1d8b703, ftLastWriteTime.dwLowDateTime=0xe2c31410, ftLastWriteTime.dwHighDateTime=0x1d8b703, nFileSizeHigh=0x0, nFileSizeLow=0x12e5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Od i5WMI4-V8Moa.ots", cAlternateFileName="ODI5WM~1.OTS")) returned 1 [0092.390] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f826dc0, ftCreationTime.dwHighDateTime=0x1d8b935, ftLastAccessTime.dwLowDateTime=0xcc8e6400, ftLastAccessTime.dwHighDateTime=0x1d8beed, ftLastWriteTime.dwLowDateTime=0xcc8e6400, ftLastWriteTime.dwHighDateTime=0x1d8beed, nFileSizeHigh=0x0, nFileSizeLow=0x725a, dwReserved0=0x0, dwReserved1=0x0, cFileName="_QGFEo2A2-pto23JslcT.png", cAlternateFileName="_QGFEO~1.PNG")) returned 1 [0092.391] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.391] FindClose (in: hFindFile=0x6c9788 | out: hFindFile=0x6c9788) returned 1 [0092.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f398) returned 1 [0092.391] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x19ee58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d [0092.391] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\*"), lpFindFileData=0x19f0c0 | out: lpFindFileData=0x19f0c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9b1bad97, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x9b1bad97, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c96c8 [0092.391] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9b1bad97, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x9b1bad97, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.391] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ed649e0, ftCreationTime.dwHighDateTime=0x1d8ba82, ftLastAccessTime.dwLowDateTime=0xdde77d40, ftLastAccessTime.dwHighDateTime=0x1d8bc54, ftLastWriteTime.dwLowDateTime=0xdde77d40, ftLastWriteTime.dwHighDateTime=0x1d8bc54, nFileSizeHigh=0x0, nFileSizeLow=0x1009f, dwReserved0=0x0, dwReserved1=0x0, cFileName="-6j3wVd6H.wav", cAlternateFileName="-6J3WV~1.WAV")) returned 1 [0092.392] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0fb6300, ftCreationTime.dwHighDateTime=0x1d8b7b8, ftLastAccessTime.dwLowDateTime=0xaa1357d0, ftLastAccessTime.dwHighDateTime=0x1d8b7ce, ftLastWriteTime.dwLowDateTime=0xaa1357d0, ftLastWriteTime.dwHighDateTime=0x1d8b7ce, nFileSizeHigh=0x0, nFileSizeLow=0x3401, dwReserved0=0x0, dwReserved1=0x0, cFileName="2yaTsjufwmYx.bmp", cAlternateFileName="2YATSJ~1.BMP")) returned 1 [0092.392] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8179fc40, ftCreationTime.dwHighDateTime=0x1d8b81c, ftLastAccessTime.dwLowDateTime=0x1c74a8d0, ftLastAccessTime.dwHighDateTime=0x1d8ba7f, ftLastWriteTime.dwLowDateTime=0x1c74a8d0, ftLastWriteTime.dwHighDateTime=0x1d8ba7f, nFileSizeHigh=0x0, nFileSizeLow=0x1104b, dwReserved0=0x0, dwReserved1=0x0, cFileName="5nZcfaMBhgu2LD.flv", cAlternateFileName="5NZCFA~1.FLV")) returned 1 [0092.392] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83291b80, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0x83291b80, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x1e69c300, ftLastWriteTime.dwHighDateTime=0x1d92b86, nFileSizeHigh=0x0, nFileSizeLow=0x53e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe", cAlternateFileName="82ACC1~1.EXE")) returned 1 [0092.392] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9468f3b0, ftCreationTime.dwHighDateTime=0x1d8b8e4, ftLastAccessTime.dwLowDateTime=0x16c9c580, ftLastAccessTime.dwHighDateTime=0x1d8b9b9, ftLastWriteTime.dwLowDateTime=0x16c9c580, ftLastWriteTime.dwHighDateTime=0x1d8b9b9, nFileSizeHigh=0x0, nFileSizeLow=0x17e1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Bco.avi", cAlternateFileName="")) returned 1 [0092.392] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda8992f0, ftCreationTime.dwHighDateTime=0x1d8b777, ftLastAccessTime.dwLowDateTime=0xe32b5830, ftLastAccessTime.dwHighDateTime=0x1d8bd58, ftLastWriteTime.dwLowDateTime=0xe32b5830, ftLastWriteTime.dwHighDateTime=0x1d8bd58, nFileSizeHigh=0x0, nFileSizeLow=0xaa7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="9tqipBAM.m4a", cAlternateFileName="")) returned 1 [0092.392] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcac9fcd0, ftCreationTime.dwHighDateTime=0x1d8b5db, ftLastAccessTime.dwLowDateTime=0xaaa97110, ftLastAccessTime.dwHighDateTime=0x1d8bdd3, ftLastWriteTime.dwLowDateTime=0xaaa97110, ftLastWriteTime.dwHighDateTime=0x1d8bdd3, nFileSizeHigh=0x0, nFileSizeLow=0x18f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chh7tG4ZOOPfle3.png", cAlternateFileName="CHH7TG~1.PNG")) returned 1 [0092.392] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e0dddf0, ftCreationTime.dwHighDateTime=0x1d8bd4d, ftLastAccessTime.dwLowDateTime=0x113a3390, ftLastAccessTime.dwHighDateTime=0x1d8c060, ftLastWriteTime.dwLowDateTime=0x113a3390, ftLastWriteTime.dwHighDateTime=0x1d8c060, nFileSizeHigh=0x0, nFileSizeLow=0x310c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cib-t5wDlO7eTKCnU2.swf", cAlternateFileName="CIB-T5~1.SWF")) returned 1 [0092.393] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24ff58a0, ftCreationTime.dwHighDateTime=0x1d8bbf7, ftLastAccessTime.dwLowDateTime=0xaea43270, ftLastAccessTime.dwHighDateTime=0x1d8c051, ftLastWriteTime.dwLowDateTime=0xaea43270, ftLastWriteTime.dwHighDateTime=0x1d8c051, nFileSizeHigh=0x0, nFileSizeLow=0x65b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CpGUjN4mN5ak.wav", cAlternateFileName="CPGUJN~1.WAV")) returned 1 [0092.393] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.393] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93b0cf40, ftCreationTime.dwHighDateTime=0x1d8b88c, ftLastAccessTime.dwLowDateTime=0xc913fdc0, ftLastAccessTime.dwHighDateTime=0x1d8ba20, ftLastWriteTime.dwLowDateTime=0xc913fdc0, ftLastWriteTime.dwHighDateTime=0x1d8ba20, nFileSizeHigh=0x0, nFileSizeLow=0x14a4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="eUlg.ods", cAlternateFileName="")) returned 1 [0092.393] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6110a880, ftCreationTime.dwHighDateTime=0x1d8bb02, ftLastAccessTime.dwLowDateTime=0xbebbc8c0, ftLastAccessTime.dwHighDateTime=0x1d8c0de, ftLastWriteTime.dwLowDateTime=0xbebbc8c0, ftLastWriteTime.dwHighDateTime=0x1d8c0de, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="FYJ1.pptx", cAlternateFileName="FYJ1~1.PPT")) returned 1 [0092.393] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52e375c0, ftCreationTime.dwHighDateTime=0x1d8c107, ftLastAccessTime.dwLowDateTime=0x53360b20, ftLastAccessTime.dwHighDateTime=0x1d8c11e, ftLastWriteTime.dwLowDateTime=0x53360b20, ftLastWriteTime.dwHighDateTime=0x1d8c11e, nFileSizeHigh=0x0, nFileSizeLow=0x849e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HJDXtUSQzN.odp", cAlternateFileName="HJDXTU~1.ODP")) returned 1 [0092.393] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmKLkObpH51ed_", cAlternateFileName="HMKLKO~1")) returned 1 [0092.393] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95d451f0, ftCreationTime.dwHighDateTime=0x1d8bcb2, ftLastAccessTime.dwLowDateTime=0x3e5310e0, ftLastAccessTime.dwHighDateTime=0x1d8bdae, ftLastWriteTime.dwLowDateTime=0x3e5310e0, ftLastWriteTime.dwHighDateTime=0x1d8bdae, nFileSizeHigh=0x0, nFileSizeLow=0x13469, dwReserved0=0x0, dwReserved1=0x0, cFileName="iLq3zNHP1Bvq2jgkzC.swf", cAlternateFileName="ILQ3ZN~1.SWF")) returned 1 [0092.393] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7197bc0, ftCreationTime.dwHighDateTime=0x1d8b7ad, ftLastAccessTime.dwLowDateTime=0xcea29ec0, ftLastAccessTime.dwHighDateTime=0x1d8ba9f, ftLastWriteTime.dwLowDateTime=0xcea29ec0, ftLastWriteTime.dwHighDateTime=0x1d8ba9f, nFileSizeHigh=0x0, nFileSizeLow=0x29eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="irK2.png", cAlternateFileName="")) returned 1 [0092.394] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe882b260, ftCreationTime.dwHighDateTime=0x1d8b93e, ftLastAccessTime.dwLowDateTime=0x55ed7ad0, ftLastAccessTime.dwHighDateTime=0x1d8ba4b, ftLastWriteTime.dwLowDateTime=0x55ed7ad0, ftLastWriteTime.dwHighDateTime=0x1d8ba4b, nFileSizeHigh=0x0, nFileSizeLow=0x53c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="knJlrMn.jpg", cAlternateFileName="")) returned 1 [0092.394] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406f8380, ftCreationTime.dwHighDateTime=0x1d8b5f3, ftLastAccessTime.dwLowDateTime=0x36788730, ftLastAccessTime.dwHighDateTime=0x1d8bb86, ftLastWriteTime.dwLowDateTime=0x36788730, ftLastWriteTime.dwHighDateTime=0x1d8bb86, nFileSizeHigh=0x0, nFileSizeLow=0x4cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="L18V.ods", cAlternateFileName="")) returned 1 [0092.394] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e94e0, ftCreationTime.dwHighDateTime=0x1d8b31e, ftLastAccessTime.dwLowDateTime=0xf98eff50, ftLastAccessTime.dwHighDateTime=0x1d8bf65, ftLastWriteTime.dwLowDateTime=0xf98eff50, ftLastWriteTime.dwHighDateTime=0x1d8bf65, nFileSizeHigh=0x0, nFileSizeLow=0xde75, dwReserved0=0x0, dwReserved1=0x0, cFileName="mGLbr8EHVJwWvBHC.mp3", cAlternateFileName="MGLBR8~1.MP3")) returned 1 [0092.394] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2085c7f0, ftCreationTime.dwHighDateTime=0x1d8b6d4, ftLastAccessTime.dwLowDateTime=0xc9273680, ftLastAccessTime.dwHighDateTime=0x1d8bbb3, ftLastWriteTime.dwLowDateTime=0xc9273680, ftLastWriteTime.dwHighDateTime=0x1d8bbb3, nFileSizeHigh=0x0, nFileSizeLow=0xa6b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MgsHDnP3Ixv1ZL.mp3", cAlternateFileName="MGSHDN~1.MP3")) returned 1 [0092.394] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1622410, ftCreationTime.dwHighDateTime=0x1d8b29b, ftLastAccessTime.dwLowDateTime=0x203e2830, ftLastAccessTime.dwHighDateTime=0x1d8ba64, ftLastWriteTime.dwLowDateTime=0x203e2830, ftLastWriteTime.dwHighDateTime=0x1d8ba64, nFileSizeHigh=0x0, nFileSizeLow=0x17703, dwReserved0=0x0, dwReserved1=0x0, cFileName="nsIVnWY.png", cAlternateFileName="")) returned 1 [0092.394] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6bbbb10, ftCreationTime.dwHighDateTime=0x1d8b776, ftLastAccessTime.dwLowDateTime=0x9d1ca770, ftLastAccessTime.dwHighDateTime=0x1d8b92c, ftLastWriteTime.dwLowDateTime=0x9d1ca770, ftLastWriteTime.dwHighDateTime=0x1d8b92c, nFileSizeHigh=0x0, nFileSizeLow=0xb566, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmYoSoLSWK_urmMNr1Bb.flv", cAlternateFileName="SMYOSO~1.FLV")) returned 1 [0092.394] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37934860, ftCreationTime.dwHighDateTime=0x1d8b1f6, ftLastAccessTime.dwLowDateTime=0x1b53c930, ftLastAccessTime.dwHighDateTime=0x1d8b742, ftLastWriteTime.dwLowDateTime=0x1b53c930, ftLastWriteTime.dwHighDateTime=0x1d8b742, nFileSizeHigh=0x0, nFileSizeLow=0x11ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="tftcjhfP.m4a", cAlternateFileName="")) returned 1 [0092.395] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb43f9c60, ftCreationTime.dwHighDateTime=0x1d8b3e5, ftLastAccessTime.dwLowDateTime=0x166bae30, ftLastAccessTime.dwHighDateTime=0x1d8baf1, ftLastWriteTime.dwLowDateTime=0x166bae30, ftLastWriteTime.dwHighDateTime=0x1d8baf1, nFileSizeHigh=0x0, nFileSizeLow=0x177ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="TPZCYP.wav", cAlternateFileName="")) returned 1 [0092.395] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cb842b0, ftCreationTime.dwHighDateTime=0x1d8bdf4, ftLastAccessTime.dwLowDateTime=0xce3e2fd0, ftLastAccessTime.dwHighDateTime=0x1d8bffe, ftLastWriteTime.dwLowDateTime=0xce3e2fd0, ftLastWriteTime.dwHighDateTime=0x1d8bffe, nFileSizeHigh=0x0, nFileSizeLow=0x24e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uz lX.flv", cAlternateFileName="UZLX~1.FLV")) returned 1 [0092.395] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a7a9470, ftCreationTime.dwHighDateTime=0x1d8c09c, ftLastAccessTime.dwLowDateTime=0x6725f750, ftLastAccessTime.dwHighDateTime=0x1d8c0b3, ftLastWriteTime.dwLowDateTime=0x6725f750, ftLastWriteTime.dwHighDateTime=0x1d8c0b3, nFileSizeHigh=0x0, nFileSizeLow=0x47f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ve Adh4F7cSMF.swf", cAlternateFileName="VEADH4~1.SWF")) returned 1 [0092.398] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x982c8420, ftCreationTime.dwHighDateTime=0x1d8c123, ftLastAccessTime.dwLowDateTime=0xb3f47f60, ftLastAccessTime.dwHighDateTime=0x1d8c127, ftLastWriteTime.dwLowDateTime=0xb3f47f60, ftLastWriteTime.dwHighDateTime=0x1d8c127, nFileSizeHigh=0x0, nFileSizeLow=0x53df, dwReserved0=0x0, dwReserved1=0x0, cFileName="vHaRBzu.bmp", cAlternateFileName="")) returned 1 [0092.398] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb438f9e0, ftCreationTime.dwHighDateTime=0x1d8b26a, ftLastAccessTime.dwLowDateTime=0xe816cce0, ftLastAccessTime.dwHighDateTime=0x1d8b37a, ftLastWriteTime.dwLowDateTime=0xe816cce0, ftLastWriteTime.dwHighDateTime=0x1d8b37a, nFileSizeHigh=0x0, nFileSizeLow=0x15c1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="vPTw68y.flv", cAlternateFileName="")) returned 1 [0092.398] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20202850, ftCreationTime.dwHighDateTime=0x1d8b6d4, ftLastAccessTime.dwLowDateTime=0x9edd100, ftLastAccessTime.dwHighDateTime=0x1d8c065, ftLastWriteTime.dwLowDateTime=0x9edd100, ftLastWriteTime.dwHighDateTime=0x1d8c065, nFileSizeHigh=0x0, nFileSizeLow=0x17dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbS7-JwT.flv", cAlternateFileName="")) returned 1 [0092.398] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.398] FindClose (in: hFindFile=0x6c96c8 | out: hFindFile=0x6c96c8) returned 1 [0092.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f354) returned 1 [0092.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f360) returned 1 [0092.402] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x19eebc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d [0092.402] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Directories\\Desktop.txt", nBufferLength=0x105, lpBuffer=0x19ed7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Directories\\Desktop.txt", lpFilePart=0x0) returned 0x76 [0092.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2b4) returned 1 [0092.402] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Directories\\Desktop.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\directories\\desktop.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4a0 [0092.402] GetFileType (hFile=0x4a0) returned 0x1 [0092.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2b0) returned 1 [0092.402] GetFileType (hFile=0x4a0) returned 0x1 [0092.403] WriteFile (in: hFile=0x4a0, lpBuffer=0x22ee5a0*, nNumberOfBytesToWrite=0x363, lpNumberOfBytesWritten=0x19f340, lpOverlapped=0x0 | out: lpBuffer=0x22ee5a0*, lpNumberOfBytesWritten=0x19f340*=0x363, lpOverlapped=0x0) returned 1 [0092.404] CloseHandle (hObject=0x4a0) returned 1 [0092.405] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19ee84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f [0092.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f328) returned 1 [0092.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents" (normalized: "c:\\users\\rdhj0cnfevzx\\documents"), fInfoLevelId=0x0, lpFileInformation=0x19f3a4 | out: lpFileInformation=0x19f3a4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6bcd843c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6bcd843c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0092.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f324) returned 1 [0092.405] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19ee88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f [0092.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f398) returned 1 [0092.406] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19ee58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f [0092.406] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\*"), lpFindFileData=0x19f0c0 | out: lpFindFileData=0x19f0c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6bcd843c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6bcd843c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9c48 [0092.406] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6bcd843c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6bcd843c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.406] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8b72010, ftCreationTime.dwHighDateTime=0x1d85a67, ftLastAccessTime.dwLowDateTime=0xc647e150, ftLastAccessTime.dwHighDateTime=0x1d88b00, ftLastWriteTime.dwLowDateTime=0xc647e150, ftLastWriteTime.dwHighDateTime=0x1d88b00, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="-Eqxdl6Kkdh1bOaf.pptx", cAlternateFileName="-EQXDL~1.PPT")) returned 1 [0092.406] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x353f5760, ftCreationTime.dwHighDateTime=0x1d8b706, ftLastAccessTime.dwLowDateTime=0xd2af1040, ftLastAccessTime.dwHighDateTime=0x1d8bc55, ftLastWriteTime.dwLowDateTime=0xd2af1040, ftLastWriteTime.dwHighDateTime=0x1d8bc55, nFileSizeHigh=0x0, nFileSizeLow=0x14ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="1Z5Kv7GS76lwA.pps", cAlternateFileName="1Z5KV7~1.PPS")) returned 1 [0092.406] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ce2b4d0, ftCreationTime.dwHighDateTime=0x1d8b71a, ftLastAccessTime.dwLowDateTime=0xbaac5aa0, ftLastAccessTime.dwHighDateTime=0x1d8c094, ftLastWriteTime.dwLowDateTime=0xbaac5aa0, ftLastWriteTime.dwHighDateTime=0x1d8c094, nFileSizeHigh=0x0, nFileSizeLow=0xf74b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3DSBsa_0s.ods", cAlternateFileName="3DSBSA~1.ODS")) returned 1 [0092.407] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e2d3c80, ftCreationTime.dwHighDateTime=0x1d8bc53, ftLastAccessTime.dwLowDateTime=0xc7a13a50, ftLastAccessTime.dwHighDateTime=0x1d8c0b7, ftLastWriteTime.dwLowDateTime=0xc7a13a50, ftLastWriteTime.dwHighDateTime=0x1d8c0b7, nFileSizeHigh=0x0, nFileSizeLow=0xce57, dwReserved0=0x0, dwReserved1=0x0, cFileName="3oOk7eq0Br.docx", cAlternateFileName="3OOK7E~1.DOC")) returned 1 [0092.407] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf9eaa0, ftCreationTime.dwHighDateTime=0x1d8c0af, ftLastAccessTime.dwLowDateTime=0x586d40f0, ftLastAccessTime.dwHighDateTime=0x1d8c127, ftLastWriteTime.dwLowDateTime=0x586d40f0, ftLastWriteTime.dwHighDateTime=0x1d8c127, nFileSizeHigh=0x0, nFileSizeLow=0x5b7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="4HGl-VGgKrOM2.pdf", cAlternateFileName="4HGL-V~1.PDF")) returned 1 [0092.407] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6e796b0, ftCreationTime.dwHighDateTime=0x1d8ba68, ftLastAccessTime.dwLowDateTime=0x6c472770, ftLastAccessTime.dwHighDateTime=0x1d8bd77, ftLastWriteTime.dwLowDateTime=0x6c472770, ftLastWriteTime.dwHighDateTime=0x1d8bd77, nFileSizeHigh=0x0, nFileSizeLow=0x16f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="4_F6bcRTeu1.pptx", cAlternateFileName="4_F6BC~1.PPT")) returned 1 [0092.407] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd175ca0, ftCreationTime.dwHighDateTime=0x1d8be49, ftLastAccessTime.dwLowDateTime=0x53c2e6d0, ftLastAccessTime.dwHighDateTime=0x1d8be76, ftLastWriteTime.dwLowDateTime=0x53c2e6d0, ftLastWriteTime.dwHighDateTime=0x1d8be76, nFileSizeHigh=0x0, nFileSizeLow=0x17380, dwReserved0=0x0, dwReserved1=0x0, cFileName="5b6aLak.odp", cAlternateFileName="")) returned 1 [0092.407] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cd30f50, ftCreationTime.dwHighDateTime=0x1d8bff2, ftLastAccessTime.dwLowDateTime=0x10680680, ftLastAccessTime.dwHighDateTime=0x1d8c110, ftLastWriteTime.dwLowDateTime=0x10680680, ftLastWriteTime.dwHighDateTime=0x1d8c110, nFileSizeHigh=0x0, nFileSizeLow=0x15d9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9hWT7Qmr0PrXZJ XbtE.pptx", cAlternateFileName="9HWT7Q~1.PPT")) returned 1 [0092.407] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43649a85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43649a85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4372e947, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.408] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0d9d810, ftCreationTime.dwHighDateTime=0x1d835ba, ftLastAccessTime.dwLowDateTime=0x9a8fe850, ftLastAccessTime.dwHighDateTime=0x1d867ba, ftLastWriteTime.dwLowDateTime=0x9a8fe850, ftLastWriteTime.dwHighDateTime=0x1d867ba, nFileSizeHigh=0x0, nFileSizeLow=0x1889b, dwReserved0=0x0, dwReserved1=0x0, cFileName="E45Yv1XvuulS8zUq.xlsx", cAlternateFileName="E45YV1~1.XLS")) returned 1 [0092.408] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31f478c0, ftCreationTime.dwHighDateTime=0x1d8b18d, ftLastAccessTime.dwLowDateTime=0x32e2a240, ftLastAccessTime.dwHighDateTime=0x1d8b50f, ftLastWriteTime.dwLowDateTime=0x32e2a240, ftLastWriteTime.dwHighDateTime=0x1d8b50f, nFileSizeHigh=0x0, nFileSizeLow=0x102ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="e71u.ots", cAlternateFileName="")) returned 1 [0092.408] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ed64c0, ftCreationTime.dwHighDateTime=0x1d8ae87, ftLastAccessTime.dwLowDateTime=0x2801bd40, ftLastAccessTime.dwHighDateTime=0x1d8b422, ftLastWriteTime.dwLowDateTime=0x2801bd40, ftLastWriteTime.dwHighDateTime=0x1d8b422, nFileSizeHigh=0x0, nFileSizeLow=0xe134, dwReserved0=0x0, dwReserved1=0x0, cFileName="eJH4f.xlsx", cAlternateFileName="EJH4F~1.XLS")) returned 1 [0092.408] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dbc440, ftCreationTime.dwHighDateTime=0x1d8b653, ftLastAccessTime.dwLowDateTime=0x9aeadce0, ftLastAccessTime.dwHighDateTime=0x1d8b938, ftLastWriteTime.dwLowDateTime=0x9aeadce0, ftLastWriteTime.dwHighDateTime=0x1d8b938, nFileSizeHigh=0x0, nFileSizeLow=0x14c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ev9sDmBTxbKhXxI.odt", cAlternateFileName="EV9SDM~1.ODT")) returned 1 [0092.408] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb978a30, ftCreationTime.dwHighDateTime=0x1d8b5ad, ftLastAccessTime.dwLowDateTime=0x27a6eed0, ftLastAccessTime.dwHighDateTime=0x1d8b75e, ftLastWriteTime.dwLowDateTime=0x27a6eed0, ftLastWriteTime.dwHighDateTime=0x1d8b75e, nFileSizeHigh=0x0, nFileSizeLow=0x16b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fShM8Wh__KF.docx", cAlternateFileName="FSHM8W~1.DOC")) returned 1 [0092.408] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b2300c0, ftCreationTime.dwHighDateTime=0x1d8b58a, ftLastAccessTime.dwLowDateTime=0x2cbcf370, ftLastAccessTime.dwHighDateTime=0x1d8bd7a, ftLastWriteTime.dwLowDateTime=0x2cbcf370, ftLastWriteTime.dwHighDateTime=0x1d8bd7a, nFileSizeHigh=0x0, nFileSizeLow=0xf700, dwReserved0=0x0, dwReserved1=0x0, cFileName="gL-dJ 92wqVX.doc", cAlternateFileName="GL-DJ9~1.DOC")) returned 1 [0092.409] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f2bf40, ftCreationTime.dwHighDateTime=0x1d8b2b7, ftLastAccessTime.dwLowDateTime=0xdb84d650, ftLastAccessTime.dwHighDateTime=0x1d8bc6e, ftLastWriteTime.dwLowDateTime=0xdb84d650, ftLastWriteTime.dwHighDateTime=0x1d8bc6e, nFileSizeHigh=0x0, nFileSizeLow=0x10557, dwReserved0=0x0, dwReserved1=0x0, cFileName="J27 Bdkxk-BB.odt", cAlternateFileName="J27BDK~1.ODT")) returned 1 [0092.409] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fc87880, ftCreationTime.dwHighDateTime=0x1d8bd48, ftLastAccessTime.dwLowDateTime=0x2df80ef0, ftLastAccessTime.dwHighDateTime=0x1d8bf50, ftLastWriteTime.dwLowDateTime=0x2df80ef0, ftLastWriteTime.dwHighDateTime=0x1d8bf50, nFileSizeHigh=0x0, nFileSizeLow=0xec27, dwReserved0=0x0, dwReserved1=0x0, cFileName="JbsnSQgtqNF4.xls", cAlternateFileName="JBSNSQ~1.XLS")) returned 1 [0092.409] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda657a80, ftCreationTime.dwHighDateTime=0x1d8a10d, ftLastAccessTime.dwLowDateTime=0xe31766e0, ftLastAccessTime.dwHighDateTime=0x1d8a381, ftLastWriteTime.dwLowDateTime=0xe31766e0, ftLastWriteTime.dwHighDateTime=0x1d8a381, nFileSizeHigh=0x0, nFileSizeLow=0x9da7, dwReserved0=0x0, dwReserved1=0x0, cFileName="jxmdpfmkp6YGZgXo.docx", cAlternateFileName="JXMDPF~1.DOC")) returned 1 [0092.409] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad655e70, ftCreationTime.dwHighDateTime=0x1d8b7cd, ftLastAccessTime.dwLowDateTime=0x441d94c0, ftLastAccessTime.dwHighDateTime=0x1d8c022, ftLastWriteTime.dwLowDateTime=0x441d94c0, ftLastWriteTime.dwHighDateTime=0x1d8c022, nFileSizeHigh=0x0, nFileSizeLow=0x163cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="kuGxj9cn5.ots", cAlternateFileName="KUGXJ9~1.OTS")) returned 1 [0092.409] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda31e5e0, ftCreationTime.dwHighDateTime=0x1d84a72, ftLastAccessTime.dwLowDateTime=0xe77acf00, ftLastAccessTime.dwHighDateTime=0x1d88a7d, ftLastWriteTime.dwLowDateTime=0xe77acf00, ftLastWriteTime.dwHighDateTime=0x1d88a7d, nFileSizeHigh=0x0, nFileSizeLow=0xebe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="l0Ly1dOzG9b.pptx", cAlternateFileName="L0LY1D~1.PPT")) returned 1 [0092.409] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1698ecb0, ftCreationTime.dwHighDateTime=0x1d8845f, ftLastAccessTime.dwLowDateTime=0x7de8f220, ftLastAccessTime.dwHighDateTime=0x1d88abd, ftLastWriteTime.dwLowDateTime=0x7de8f220, ftLastWriteTime.dwHighDateTime=0x1d88abd, nFileSizeHigh=0x0, nFileSizeLow=0x18442, dwReserved0=0x0, dwReserved1=0x0, cFileName="LlNux.docx", cAlternateFileName="LLNUX~1.DOC")) returned 1 [0092.410] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc6be40, ftCreationTime.dwHighDateTime=0x1d83898, ftLastAccessTime.dwLowDateTime=0xb9014e10, ftLastAccessTime.dwHighDateTime=0x1d87998, ftLastWriteTime.dwLowDateTime=0xb9014e10, ftLastWriteTime.dwHighDateTime=0x1d87998, nFileSizeHigh=0x0, nFileSizeLow=0x46b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="M3k6HPkCjln.docx", cAlternateFileName="M3K6HP~1.DOC")) returned 1 [0092.410] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0092.410] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0092.410] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0092.410] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0092.410] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d246f60, ftCreationTime.dwHighDateTime=0x1d8b733, ftLastAccessTime.dwLowDateTime=0x2856b530, ftLastAccessTime.dwHighDateTime=0x1d8ba2f, ftLastWriteTime.dwLowDateTime=0x2856b530, ftLastWriteTime.dwHighDateTime=0x1d8ba2f, nFileSizeHigh=0x0, nFileSizeLow=0x129e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ptxpBGQ.pdf", cAlternateFileName="")) returned 1 [0092.410] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24a71420, ftCreationTime.dwHighDateTime=0x1d88b9f, ftLastAccessTime.dwLowDateTime=0xd2984010, ftLastAccessTime.dwHighDateTime=0x1d8a821, ftLastWriteTime.dwLowDateTime=0xd2984010, ftLastWriteTime.dwHighDateTime=0x1d8a821, nFileSizeHigh=0x0, nFileSizeLow=0x184cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="R10S_E409.xlsx", cAlternateFileName="R10S_E~1.XLS")) returned 1 [0092.412] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d57e650, ftCreationTime.dwHighDateTime=0x1d8b5f8, ftLastAccessTime.dwLowDateTime=0x41a82910, ftLastAccessTime.dwHighDateTime=0x1d8be8f, ftLastWriteTime.dwLowDateTime=0x41a82910, ftLastWriteTime.dwHighDateTime=0x1d8be8f, nFileSizeHigh=0x0, nFileSizeLow=0x16910, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rdm FvCqzjr4BKW8.ppt", cAlternateFileName="RDMFVC~1.PPT")) returned 1 [0092.412] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe13fb850, ftCreationTime.dwHighDateTime=0x1d8c0db, ftLastAccessTime.dwLowDateTime=0x5ee50380, ftLastAccessTime.dwHighDateTime=0x1d8c124, ftLastWriteTime.dwLowDateTime=0x5ee50380, ftLastWriteTime.dwHighDateTime=0x1d8c124, nFileSizeHigh=0x0, nFileSizeLow=0x507e, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-C55.odt", cAlternateFileName="")) returned 1 [0092.413] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d79c60, ftCreationTime.dwHighDateTime=0x1d88b85, ftLastAccessTime.dwLowDateTime=0x63093ea0, ftLastAccessTime.dwHighDateTime=0x1d8baca, ftLastWriteTime.dwLowDateTime=0x63093ea0, ftLastWriteTime.dwHighDateTime=0x1d8baca, nFileSizeHigh=0x0, nFileSizeLow=0x127e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sAi7.pptx", cAlternateFileName="SAI7~1.PPT")) returned 1 [0092.413] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b929440, ftCreationTime.dwHighDateTime=0x1d8ba0b, ftLastAccessTime.dwLowDateTime=0x66b69e00, ftLastAccessTime.dwHighDateTime=0x1d8bc71, ftLastWriteTime.dwLowDateTime=0x66b69e00, ftLastWriteTime.dwHighDateTime=0x1d8bc71, nFileSizeHigh=0x0, nFileSizeLow=0x5936, dwReserved0=0x0, dwReserved1=0x0, cFileName="SnWjYP8 jUC.ppt", cAlternateFileName="SNWJYP~1.PPT")) returned 1 [0092.413] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed8a4eb0, ftCreationTime.dwHighDateTime=0x1d8aa8b, ftLastAccessTime.dwLowDateTime=0x78385190, ftLastAccessTime.dwHighDateTime=0x1d8b62d, ftLastWriteTime.dwLowDateTime=0x78385190, ftLastWriteTime.dwHighDateTime=0x1d8b62d, nFileSizeHigh=0x0, nFileSizeLow=0x1608f, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2kWqhx.xlsx", cAlternateFileName="T2KWQH~1.XLS")) returned 1 [0092.413] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tH7ZiLMX-lNDz2T4flA", cAlternateFileName="TH7ZIL~1")) returned 1 [0092.413] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9f325e0, ftCreationTime.dwHighDateTime=0x1d8b4e5, ftLastAccessTime.dwLowDateTime=0x96ff5090, ftLastAccessTime.dwHighDateTime=0x1d8be77, ftLastWriteTime.dwLowDateTime=0x96ff5090, ftLastWriteTime.dwHighDateTime=0x1d8be77, nFileSizeHigh=0x0, nFileSizeLow=0x6c8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UxxM9vzrN1plGVva5.ods", cAlternateFileName="UXXM9V~1.ODS")) returned 1 [0092.413] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1257dc0, ftCreationTime.dwHighDateTime=0x1d8aadb, ftLastAccessTime.dwLowDateTime=0xcad8c0e0, ftLastAccessTime.dwHighDateTime=0x1d8b3cd, ftLastWriteTime.dwLowDateTime=0xcad8c0e0, ftLastWriteTime.dwHighDateTime=0x1d8b3cd, nFileSizeHigh=0x0, nFileSizeLow=0xab54, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSFebGAZfWCvODJJqF.xlsx", cAlternateFileName="VSFEBG~1.XLS")) returned 1 [0092.414] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3cc2a0, ftCreationTime.dwHighDateTime=0x1d8ad0a, ftLastAccessTime.dwLowDateTime=0x75320560, ftLastAccessTime.dwHighDateTime=0x1d8b7ac, ftLastWriteTime.dwLowDateTime=0x75320560, ftLastWriteTime.dwHighDateTime=0x1d8b7ac, nFileSizeHigh=0x0, nFileSizeLow=0x16729, dwReserved0=0x0, dwReserved1=0x0, cFileName="X2bCTFNs35VghcjI.docx", cAlternateFileName="X2BCTF~1.DOC")) returned 1 [0092.414] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x327a6aa0, ftCreationTime.dwHighDateTime=0x1d8af69, ftLastAccessTime.dwLowDateTime=0x47383be0, ftLastAccessTime.dwHighDateTime=0x1d8b656, ftLastWriteTime.dwLowDateTime=0x47383be0, ftLastWriteTime.dwHighDateTime=0x1d8b656, nFileSizeHigh=0x0, nFileSizeLow=0xd19b, dwReserved0=0x0, dwReserved1=0x0, cFileName="xYJkClxxh YE11VkYAFc.pptx", cAlternateFileName="XYJKCL~1.PPT")) returned 1 [0092.414] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf401740, ftCreationTime.dwHighDateTime=0x1d8b8cb, ftLastAccessTime.dwLowDateTime=0x3379b560, ftLastAccessTime.dwHighDateTime=0x1d8be13, ftLastWriteTime.dwLowDateTime=0x3379b560, ftLastWriteTime.dwHighDateTime=0x1d8be13, nFileSizeHigh=0x0, nFileSizeLow=0x2f15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z4hDmRU.rtf", cAlternateFileName="")) returned 1 [0092.414] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc18b1d10, ftCreationTime.dwHighDateTime=0x1d86794, ftLastAccessTime.dwLowDateTime=0xeabdc170, ftLastAccessTime.dwHighDateTime=0x1d86a72, ftLastWriteTime.dwLowDateTime=0xeabdc170, ftLastWriteTime.dwHighDateTime=0x1d86a72, nFileSizeHigh=0x0, nFileSizeLow=0x12f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="zuwnbRBCFb l.docx", cAlternateFileName="ZUWNBR~1.DOC")) returned 1 [0092.414] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709ad260, ftCreationTime.dwHighDateTime=0x1d8b79e, ftLastAccessTime.dwLowDateTime=0x4d1307d0, ftLastAccessTime.dwHighDateTime=0x1d8be7a, ftLastWriteTime.dwLowDateTime=0x4d1307d0, ftLastWriteTime.dwHighDateTime=0x1d8be7a, nFileSizeHigh=0x0, nFileSizeLow=0x98fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="_-zO_pPR6V-z.csv", cAlternateFileName="_-ZO_P~1.CSV")) returned 1 [0092.414] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6e5150, ftCreationTime.dwHighDateTime=0x1d8bd40, ftLastAccessTime.dwLowDateTime=0x2e00a1c0, ftLastAccessTime.dwHighDateTime=0x1d8bda0, ftLastWriteTime.dwLowDateTime=0x2e00a1c0, ftLastWriteTime.dwHighDateTime=0x1d8bda0, nFileSizeHigh=0x0, nFileSizeLow=0x2ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_nGPp71.ots", cAlternateFileName="")) returned 1 [0092.414] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6e5150, ftCreationTime.dwHighDateTime=0x1d8bd40, ftLastAccessTime.dwLowDateTime=0x2e00a1c0, ftLastAccessTime.dwHighDateTime=0x1d8bda0, ftLastWriteTime.dwLowDateTime=0x2e00a1c0, ftLastWriteTime.dwHighDateTime=0x1d8bda0, nFileSizeHigh=0x0, nFileSizeLow=0x2ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_nGPp71.ots", cAlternateFileName="")) returned 0 [0092.415] FindClose (in: hFindFile=0x6c9c48 | out: hFindFile=0x6c9c48) returned 1 [0092.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f354) returned 1 [0092.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f360) returned 1 [0092.415] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x19ee40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music", lpFilePart=0x0) returned 0x28 [0092.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2e4) returned 1 [0092.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my music"), fInfoLevelId=0x0, lpFileInformation=0x19f360 | out: lpFileInformation=0x19f360*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2e0) returned 1 [0092.415] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x19ee44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music", lpFilePart=0x0) returned 0x28 [0092.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.415] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x19ee14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music", lpFilePart=0x0) returned 0x28 [0092.415] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my music\\*"), lpFindFileData=0x19f07c | out: lpFindFileData=0x19f07c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0092.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f318) returned 1 [0092.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.417] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x19ee14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music", lpFilePart=0x0) returned 0x28 [0092.417] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my music\\*"), lpFindFileData=0x19f07c | out: lpFindFileData=0x19f07c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0092.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f318) returned 1 [0092.419] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x19ee40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2b [0092.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2e4) returned 1 [0092.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x19f360 | out: lpFileInformation=0x19f360*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2e0) returned 1 [0092.419] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x19ee44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2b [0092.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.419] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x19ee14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2b [0092.419] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my pictures\\*"), lpFindFileData=0x19f07c | out: lpFindFileData=0x19f07c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0092.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f318) returned 1 [0092.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.421] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x19ee14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2b [0092.421] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my pictures\\*"), lpFindFileData=0x19f07c | out: lpFindFileData=0x19f07c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0092.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f318) returned 1 [0092.422] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x19ee40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos", lpFilePart=0x0) returned 0x29 [0092.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2e4) returned 1 [0092.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my videos"), fInfoLevelId=0x0, lpFileInformation=0x19f360 | out: lpFileInformation=0x19f360*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2e0) returned 1 [0092.422] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x19ee44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos", lpFilePart=0x0) returned 0x29 [0092.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.422] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x19ee14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos", lpFilePart=0x0) returned 0x29 [0092.423] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my videos\\*"), lpFindFileData=0x19f07c | out: lpFindFileData=0x19f07c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0092.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f318) returned 1 [0092.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.424] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x19ee14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos", lpFilePart=0x0) returned 0x29 [0092.424] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my videos\\*"), lpFindFileData=0x19f07c | out: lpFindFileData=0x19f07c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0092.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f318) returned 1 [0092.426] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x19ee40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2d [0092.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2e4) returned 1 [0092.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x19f360 | out: lpFileInformation=0x19f360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x886727b4, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2e0) returned 1 [0092.426] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x19ee44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2d [0092.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.426] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x19ee14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2d [0092.426] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\*"), lpFindFileData=0x19f07c | out: lpFindFileData=0x19f07c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9c48 [0092.427] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.427] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6397affd, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6397affd, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8866b39a, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="achoo@gdllo.de.pst", cAlternateFileName="ACHOO@~1.PST")) returned 1 [0092.427] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6397affd, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6397affd, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8866b39a, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="achoo@gdllo.de.pst", cAlternateFileName="ACHOO@~1.PST")) returned 0 [0092.427] FindClose (in: hFindFile=0x6c9c48 | out: hFindFile=0x6c9c48) returned 1 [0092.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.427] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x19ee14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2d [0092.427] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\*"), lpFindFileData=0x19f07c | out: lpFindFileData=0x19f07c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9c48 [0092.427] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.428] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6397affd, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6397affd, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8866b39a, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="achoo@gdllo.de.pst", cAlternateFileName="ACHOO@~1.PST")) returned 1 [0092.428] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.428] FindClose (in: hFindFile=0x6c9c48 | out: hFindFile=0x6c9c48) returned 1 [0092.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.428] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", nBufferLength=0x105, lpBuffer=0x19ee40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", lpFilePart=0x0) returned 0x33 [0092.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2e4) returned 1 [0092.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla"), fInfoLevelId=0x0, lpFileInformation=0x19f360 | out: lpFileInformation=0x19f360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0092.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2e0) returned 1 [0092.428] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", nBufferLength=0x105, lpBuffer=0x19ee44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", lpFilePart=0x0) returned 0x33 [0092.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.428] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", nBufferLength=0x105, lpBuffer=0x19ee14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", lpFilePart=0x0) returned 0x33 [0092.428] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\*"), lpFindFileData=0x19f07c | out: lpFindFileData=0x19f07c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9c48 [0092.429] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.429] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1589c160, ftCreationTime.dwHighDateTime=0x1d8bd5c, ftLastAccessTime.dwLowDateTime=0x45393cc0, ftLastAccessTime.dwHighDateTime=0x1d8bd97, ftLastWriteTime.dwLowDateTime=0x45393cc0, ftLastWriteTime.dwHighDateTime=0x1d8bd97, nFileSizeHigh=0x0, nFileSizeLow=0xc9dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="2hsIAD1BQHc7jnWpNx.pdf", cAlternateFileName="2HSIAD~1.PDF")) returned 1 [0092.429] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e2c1470, ftCreationTime.dwHighDateTime=0x1d8b891, ftLastAccessTime.dwLowDateTime=0x8ef4f010, ftLastAccessTime.dwHighDateTime=0x1d8c03b, ftLastWriteTime.dwLowDateTime=0x8ef4f010, ftLastWriteTime.dwHighDateTime=0x1d8c03b, nFileSizeHigh=0x0, nFileSizeLow=0xab9, dwReserved0=0x0, dwReserved1=0x0, cFileName="5-DZJSZ32WSdJ.xls", cAlternateFileName="5-DZJS~1.XLS")) returned 1 [0092.429] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bee7c0, ftCreationTime.dwHighDateTime=0x1d8b889, ftLastAccessTime.dwLowDateTime=0xce3f6db0, ftLastAccessTime.dwHighDateTime=0x1d8c011, ftLastWriteTime.dwLowDateTime=0xce3f6db0, ftLastWriteTime.dwHighDateTime=0x1d8c011, nFileSizeHigh=0x0, nFileSizeLow=0x10253, dwReserved0=0x0, dwReserved1=0x0, cFileName="a-A-qFq AF.csv", cAlternateFileName="A-A-QF~1.CSV")) returned 1 [0092.429] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d48b0, ftCreationTime.dwHighDateTime=0x1d8ba38, ftLastAccessTime.dwLowDateTime=0xaf1b71d0, ftLastAccessTime.dwHighDateTime=0x1d8bb0d, ftLastWriteTime.dwLowDateTime=0xaf1b71d0, ftLastWriteTime.dwHighDateTime=0x1d8bb0d, nFileSizeHigh=0x0, nFileSizeLow=0x1553c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bf2mHVDW3clH.ppt", cAlternateFileName="BF2MHV~1.PPT")) returned 1 [0092.429] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x814fee60, ftCreationTime.dwHighDateTime=0x1d8bf14, ftLastAccessTime.dwLowDateTime=0xabb8e610, ftLastAccessTime.dwHighDateTime=0x1d8c014, ftLastWriteTime.dwLowDateTime=0xabb8e610, ftLastWriteTime.dwHighDateTime=0x1d8c014, nFileSizeHigh=0x0, nFileSizeLow=0xc6eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3Fj0r8hONU.ppt", cAlternateFileName="C3FJ0R~1.PPT")) returned 1 [0092.429] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17178ef0, ftCreationTime.dwHighDateTime=0x1d8b0c7, ftLastAccessTime.dwLowDateTime=0xa82734f0, ftLastAccessTime.dwHighDateTime=0x1d8bc10, ftLastWriteTime.dwLowDateTime=0xa82734f0, ftLastWriteTime.dwHighDateTime=0x1d8bc10, nFileSizeHigh=0x0, nFileSizeLow=0x7692, dwReserved0=0x0, dwReserved1=0x0, cFileName="C8L6OgRoJd6.rtf", cAlternateFileName="C8L6OG~1.RTF")) returned 1 [0092.429] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca47540, ftCreationTime.dwHighDateTime=0x1d8b690, ftLastAccessTime.dwLowDateTime=0x5f1ffb50, ftLastAccessTime.dwHighDateTime=0x1d8bf50, ftLastWriteTime.dwLowDateTime=0x5f1ffb50, ftLastWriteTime.dwHighDateTime=0x1d8bf50, nFileSizeHigh=0x0, nFileSizeLow=0x168b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CfeUIGTcVlbmZqCLP.csv", cAlternateFileName="CFEUIG~1.CSV")) returned 1 [0092.429] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3daa70, ftCreationTime.dwHighDateTime=0x1d8bc44, ftLastAccessTime.dwLowDateTime=0x682cc6c0, ftLastAccessTime.dwHighDateTime=0x1d8bd83, ftLastWriteTime.dwLowDateTime=0x682cc6c0, ftLastWriteTime.dwHighDateTime=0x1d8bd83, nFileSizeHigh=0x0, nFileSizeLow=0x15d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fvw20_rgJzZv8FGp.xls", cAlternateFileName="FVW20_~1.XLS")) returned 1 [0092.429] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21ba9fd0, ftCreationTime.dwHighDateTime=0x1d8b231, ftLastAccessTime.dwLowDateTime=0x809f2bc0, ftLastAccessTime.dwHighDateTime=0x1d8bdf2, ftLastWriteTime.dwLowDateTime=0x809f2bc0, ftLastWriteTime.dwHighDateTime=0x1d8bdf2, nFileSizeHigh=0x0, nFileSizeLow=0x2846, dwReserved0=0x0, dwReserved1=0x0, cFileName="mWQOQh4ldF5U-0k.pps", cAlternateFileName="MWQOQH~1.PPS")) returned 1 [0092.429] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1838b0c0, ftCreationTime.dwHighDateTime=0x1d8bff9, ftLastAccessTime.dwLowDateTime=0x82b5eab0, ftLastAccessTime.dwHighDateTime=0x1d8c04b, ftLastWriteTime.dwLowDateTime=0x82b5eab0, ftLastWriteTime.dwHighDateTime=0x1d8c04b, nFileSizeHigh=0x0, nFileSizeLow=0x1631d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q4ZKn3tp.xls", cAlternateFileName="")) returned 1 [0092.429] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a94d90, ftCreationTime.dwHighDateTime=0x1d8be15, ftLastAccessTime.dwLowDateTime=0x540da90, ftLastAccessTime.dwHighDateTime=0x1d8be7f, ftLastWriteTime.dwLowDateTime=0x540da90, ftLastWriteTime.dwHighDateTime=0x1d8be7f, nFileSizeHigh=0x0, nFileSizeLow=0x5c75, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECojIt nyClc3HiT.doc", cAlternateFileName="RECOJI~1.DOC")) returned 1 [0092.429] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a92b070, ftCreationTime.dwHighDateTime=0x1d8bcca, ftLastAccessTime.dwLowDateTime=0xe7eab850, ftLastAccessTime.dwHighDateTime=0x1d8be45, ftLastWriteTime.dwLowDateTime=0xe7eab850, ftLastWriteTime.dwHighDateTime=0x1d8be45, nFileSizeHigh=0x0, nFileSizeLow=0x13934, dwReserved0=0x0, dwReserved1=0x0, cFileName="T90UZdn2P1f7n3-fQaKi.ods", cAlternateFileName="T90UZD~1.ODS")) returned 1 [0092.429] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da37310, ftCreationTime.dwHighDateTime=0x1d8b1f3, ftLastAccessTime.dwLowDateTime=0x76cd84d0, ftLastAccessTime.dwHighDateTime=0x1d8b239, ftLastWriteTime.dwLowDateTime=0x76cd84d0, ftLastWriteTime.dwHighDateTime=0x1d8b239, nFileSizeHigh=0x0, nFileSizeLow=0xe412, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbduRUTXa.docx", cAlternateFileName="TBDURU~1.DOC")) returned 1 [0092.429] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa94eb7c0, ftCreationTime.dwHighDateTime=0x1d8bacd, ftLastAccessTime.dwLowDateTime=0x946a1970, ftLastAccessTime.dwHighDateTime=0x1d8c069, ftLastWriteTime.dwLowDateTime=0x946a1970, ftLastWriteTime.dwHighDateTime=0x1d8c069, nFileSizeHigh=0x0, nFileSizeLow=0x181c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="UvFd-0OcgfkrbGVtLF6.xlsx", cAlternateFileName="UVFD-0~1.XLS")) returned 1 [0092.429] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359e9570, ftCreationTime.dwHighDateTime=0x1d8bd48, ftLastAccessTime.dwLowDateTime=0xefc320f0, ftLastAccessTime.dwHighDateTime=0x1d8bdc1, ftLastWriteTime.dwLowDateTime=0xefc320f0, ftLastWriteTime.dwHighDateTime=0x1d8bdc1, nFileSizeHigh=0x0, nFileSizeLow=0x9f30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VcH8lOCD8NPvxN-LPks.rtf", cAlternateFileName="VCH8LO~1.RTF")) returned 1 [0092.429] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cde8e0, ftCreationTime.dwHighDateTime=0x1d8bea9, ftLastAccessTime.dwLowDateTime=0xc0d6ff10, ftLastAccessTime.dwHighDateTime=0x1d8c0c7, ftLastWriteTime.dwLowDateTime=0xc0d6ff10, ftLastWriteTime.dwHighDateTime=0x1d8c0c7, nFileSizeHigh=0x0, nFileSizeLow=0xefe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vKgNAjCUO5.pps", cAlternateFileName="VKGNAJ~1.PPS")) returned 1 [0092.430] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc975760, ftCreationTime.dwHighDateTime=0x1d8b790, ftLastAccessTime.dwLowDateTime=0xd37a5a10, ftLastAccessTime.dwHighDateTime=0x1d8b9e5, ftLastWriteTime.dwLowDateTime=0xd37a5a10, ftLastWriteTime.dwHighDateTime=0x1d8b9e5, nFileSizeHigh=0x0, nFileSizeLow=0xf3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wJEu5X2748bM.xlsx", cAlternateFileName="WJEU5X~1.XLS")) returned 1 [0092.430] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f0e030, ftCreationTime.dwHighDateTime=0x1d8bfc4, ftLastAccessTime.dwLowDateTime=0xcba47010, ftLastAccessTime.dwHighDateTime=0x1d8c0d8, ftLastWriteTime.dwLowDateTime=0xcba47010, ftLastWriteTime.dwHighDateTime=0x1d8c0d8, nFileSizeHigh=0x0, nFileSizeLow=0x829f, dwReserved0=0x0, dwReserved1=0x0, cFileName="xb_Tn6.docx", cAlternateFileName="XB_TN6~1.DOC")) returned 1 [0092.430] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f0e030, ftCreationTime.dwHighDateTime=0x1d8bfc4, ftLastAccessTime.dwLowDateTime=0xcba47010, ftLastAccessTime.dwHighDateTime=0x1d8c0d8, ftLastWriteTime.dwLowDateTime=0xcba47010, ftLastWriteTime.dwHighDateTime=0x1d8c0d8, nFileSizeHigh=0x0, nFileSizeLow=0x829f, dwReserved0=0x0, dwReserved1=0x0, cFileName="xb_Tn6.docx", cAlternateFileName="XB_TN6~1.DOC")) returned 0 [0092.430] FindClose (in: hFindFile=0x6c9c48 | out: hFindFile=0x6c9c48) returned 1 [0092.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.430] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", nBufferLength=0x105, lpBuffer=0x19ee14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", lpFilePart=0x0) returned 0x33 [0092.430] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\*"), lpFindFileData=0x19f07c | out: lpFindFileData=0x19f07c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9c48 [0092.430] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.430] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1589c160, ftCreationTime.dwHighDateTime=0x1d8bd5c, ftLastAccessTime.dwLowDateTime=0x45393cc0, ftLastAccessTime.dwHighDateTime=0x1d8bd97, ftLastWriteTime.dwLowDateTime=0x45393cc0, ftLastWriteTime.dwHighDateTime=0x1d8bd97, nFileSizeHigh=0x0, nFileSizeLow=0xc9dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="2hsIAD1BQHc7jnWpNx.pdf", cAlternateFileName="2HSIAD~1.PDF")) returned 1 [0092.430] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e2c1470, ftCreationTime.dwHighDateTime=0x1d8b891, ftLastAccessTime.dwLowDateTime=0x8ef4f010, ftLastAccessTime.dwHighDateTime=0x1d8c03b, ftLastWriteTime.dwLowDateTime=0x8ef4f010, ftLastWriteTime.dwHighDateTime=0x1d8c03b, nFileSizeHigh=0x0, nFileSizeLow=0xab9, dwReserved0=0x0, dwReserved1=0x0, cFileName="5-DZJSZ32WSdJ.xls", cAlternateFileName="5-DZJS~1.XLS")) returned 1 [0092.430] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bee7c0, ftCreationTime.dwHighDateTime=0x1d8b889, ftLastAccessTime.dwLowDateTime=0xce3f6db0, ftLastAccessTime.dwHighDateTime=0x1d8c011, ftLastWriteTime.dwLowDateTime=0xce3f6db0, ftLastWriteTime.dwHighDateTime=0x1d8c011, nFileSizeHigh=0x0, nFileSizeLow=0x10253, dwReserved0=0x0, dwReserved1=0x0, cFileName="a-A-qFq AF.csv", cAlternateFileName="A-A-QF~1.CSV")) returned 1 [0092.430] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d48b0, ftCreationTime.dwHighDateTime=0x1d8ba38, ftLastAccessTime.dwLowDateTime=0xaf1b71d0, ftLastAccessTime.dwHighDateTime=0x1d8bb0d, ftLastWriteTime.dwLowDateTime=0xaf1b71d0, ftLastWriteTime.dwHighDateTime=0x1d8bb0d, nFileSizeHigh=0x0, nFileSizeLow=0x1553c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bf2mHVDW3clH.ppt", cAlternateFileName="BF2MHV~1.PPT")) returned 1 [0092.430] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x814fee60, ftCreationTime.dwHighDateTime=0x1d8bf14, ftLastAccessTime.dwLowDateTime=0xabb8e610, ftLastAccessTime.dwHighDateTime=0x1d8c014, ftLastWriteTime.dwLowDateTime=0xabb8e610, ftLastWriteTime.dwHighDateTime=0x1d8c014, nFileSizeHigh=0x0, nFileSizeLow=0xc6eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3Fj0r8hONU.ppt", cAlternateFileName="C3FJ0R~1.PPT")) returned 1 [0092.431] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17178ef0, ftCreationTime.dwHighDateTime=0x1d8b0c7, ftLastAccessTime.dwLowDateTime=0xa82734f0, ftLastAccessTime.dwHighDateTime=0x1d8bc10, ftLastWriteTime.dwLowDateTime=0xa82734f0, ftLastWriteTime.dwHighDateTime=0x1d8bc10, nFileSizeHigh=0x0, nFileSizeLow=0x7692, dwReserved0=0x0, dwReserved1=0x0, cFileName="C8L6OgRoJd6.rtf", cAlternateFileName="C8L6OG~1.RTF")) returned 1 [0092.431] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca47540, ftCreationTime.dwHighDateTime=0x1d8b690, ftLastAccessTime.dwLowDateTime=0x5f1ffb50, ftLastAccessTime.dwHighDateTime=0x1d8bf50, ftLastWriteTime.dwLowDateTime=0x5f1ffb50, ftLastWriteTime.dwHighDateTime=0x1d8bf50, nFileSizeHigh=0x0, nFileSizeLow=0x168b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CfeUIGTcVlbmZqCLP.csv", cAlternateFileName="CFEUIG~1.CSV")) returned 1 [0092.431] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3daa70, ftCreationTime.dwHighDateTime=0x1d8bc44, ftLastAccessTime.dwLowDateTime=0x682cc6c0, ftLastAccessTime.dwHighDateTime=0x1d8bd83, ftLastWriteTime.dwLowDateTime=0x682cc6c0, ftLastWriteTime.dwHighDateTime=0x1d8bd83, nFileSizeHigh=0x0, nFileSizeLow=0x15d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fvw20_rgJzZv8FGp.xls", cAlternateFileName="FVW20_~1.XLS")) returned 1 [0092.431] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21ba9fd0, ftCreationTime.dwHighDateTime=0x1d8b231, ftLastAccessTime.dwLowDateTime=0x809f2bc0, ftLastAccessTime.dwHighDateTime=0x1d8bdf2, ftLastWriteTime.dwLowDateTime=0x809f2bc0, ftLastWriteTime.dwHighDateTime=0x1d8bdf2, nFileSizeHigh=0x0, nFileSizeLow=0x2846, dwReserved0=0x0, dwReserved1=0x0, cFileName="mWQOQh4ldF5U-0k.pps", cAlternateFileName="MWQOQH~1.PPS")) returned 1 [0092.431] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1838b0c0, ftCreationTime.dwHighDateTime=0x1d8bff9, ftLastAccessTime.dwLowDateTime=0x82b5eab0, ftLastAccessTime.dwHighDateTime=0x1d8c04b, ftLastWriteTime.dwLowDateTime=0x82b5eab0, ftLastWriteTime.dwHighDateTime=0x1d8c04b, nFileSizeHigh=0x0, nFileSizeLow=0x1631d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q4ZKn3tp.xls", cAlternateFileName="")) returned 1 [0092.431] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a94d90, ftCreationTime.dwHighDateTime=0x1d8be15, ftLastAccessTime.dwLowDateTime=0x540da90, ftLastAccessTime.dwHighDateTime=0x1d8be7f, ftLastWriteTime.dwLowDateTime=0x540da90, ftLastWriteTime.dwHighDateTime=0x1d8be7f, nFileSizeHigh=0x0, nFileSizeLow=0x5c75, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECojIt nyClc3HiT.doc", cAlternateFileName="RECOJI~1.DOC")) returned 1 [0092.431] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a92b070, ftCreationTime.dwHighDateTime=0x1d8bcca, ftLastAccessTime.dwLowDateTime=0xe7eab850, ftLastAccessTime.dwHighDateTime=0x1d8be45, ftLastWriteTime.dwLowDateTime=0xe7eab850, ftLastWriteTime.dwHighDateTime=0x1d8be45, nFileSizeHigh=0x0, nFileSizeLow=0x13934, dwReserved0=0x0, dwReserved1=0x0, cFileName="T90UZdn2P1f7n3-fQaKi.ods", cAlternateFileName="T90UZD~1.ODS")) returned 1 [0092.431] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da37310, ftCreationTime.dwHighDateTime=0x1d8b1f3, ftLastAccessTime.dwLowDateTime=0x76cd84d0, ftLastAccessTime.dwHighDateTime=0x1d8b239, ftLastWriteTime.dwLowDateTime=0x76cd84d0, ftLastWriteTime.dwHighDateTime=0x1d8b239, nFileSizeHigh=0x0, nFileSizeLow=0xe412, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbduRUTXa.docx", cAlternateFileName="TBDURU~1.DOC")) returned 1 [0092.431] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa94eb7c0, ftCreationTime.dwHighDateTime=0x1d8bacd, ftLastAccessTime.dwLowDateTime=0x946a1970, ftLastAccessTime.dwHighDateTime=0x1d8c069, ftLastWriteTime.dwLowDateTime=0x946a1970, ftLastWriteTime.dwHighDateTime=0x1d8c069, nFileSizeHigh=0x0, nFileSizeLow=0x181c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="UvFd-0OcgfkrbGVtLF6.xlsx", cAlternateFileName="UVFD-0~1.XLS")) returned 1 [0092.431] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359e9570, ftCreationTime.dwHighDateTime=0x1d8bd48, ftLastAccessTime.dwLowDateTime=0xefc320f0, ftLastAccessTime.dwHighDateTime=0x1d8bdc1, ftLastWriteTime.dwLowDateTime=0xefc320f0, ftLastWriteTime.dwHighDateTime=0x1d8bdc1, nFileSizeHigh=0x0, nFileSizeLow=0x9f30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VcH8lOCD8NPvxN-LPks.rtf", cAlternateFileName="VCH8LO~1.RTF")) returned 1 [0092.431] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cde8e0, ftCreationTime.dwHighDateTime=0x1d8bea9, ftLastAccessTime.dwLowDateTime=0xc0d6ff10, ftLastAccessTime.dwHighDateTime=0x1d8c0c7, ftLastWriteTime.dwLowDateTime=0xc0d6ff10, ftLastWriteTime.dwHighDateTime=0x1d8c0c7, nFileSizeHigh=0x0, nFileSizeLow=0xefe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vKgNAjCUO5.pps", cAlternateFileName="VKGNAJ~1.PPS")) returned 1 [0092.431] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc975760, ftCreationTime.dwHighDateTime=0x1d8b790, ftLastAccessTime.dwLowDateTime=0xd37a5a10, ftLastAccessTime.dwHighDateTime=0x1d8b9e5, ftLastWriteTime.dwLowDateTime=0xd37a5a10, ftLastWriteTime.dwHighDateTime=0x1d8b9e5, nFileSizeHigh=0x0, nFileSizeLow=0xf3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wJEu5X2748bM.xlsx", cAlternateFileName="WJEU5X~1.XLS")) returned 1 [0092.431] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f0e030, ftCreationTime.dwHighDateTime=0x1d8bfc4, ftLastAccessTime.dwLowDateTime=0xcba47010, ftLastAccessTime.dwHighDateTime=0x1d8c0d8, ftLastWriteTime.dwLowDateTime=0xcba47010, ftLastWriteTime.dwHighDateTime=0x1d8c0d8, nFileSizeHigh=0x0, nFileSizeLow=0x829f, dwReserved0=0x0, dwReserved1=0x0, cFileName="xb_Tn6.docx", cAlternateFileName="XB_TN6~1.DOC")) returned 1 [0092.431] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x19f088 | out: lpFindFileData=0x19f088*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.431] FindClose (in: hFindFile=0x6c9c48 | out: hFindFile=0x6c9c48) returned 1 [0092.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f398) returned 1 [0092.432] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19ee58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f [0092.432] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\*"), lpFindFileData=0x19f0c0 | out: lpFindFileData=0x19f0c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6bcd843c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6bcd843c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9788 [0092.432] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6bcd843c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6bcd843c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.432] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8b72010, ftCreationTime.dwHighDateTime=0x1d85a67, ftLastAccessTime.dwLowDateTime=0xc647e150, ftLastAccessTime.dwHighDateTime=0x1d88b00, ftLastWriteTime.dwLowDateTime=0xc647e150, ftLastWriteTime.dwHighDateTime=0x1d88b00, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="-Eqxdl6Kkdh1bOaf.pptx", cAlternateFileName="-EQXDL~1.PPT")) returned 1 [0092.432] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x353f5760, ftCreationTime.dwHighDateTime=0x1d8b706, ftLastAccessTime.dwLowDateTime=0xd2af1040, ftLastAccessTime.dwHighDateTime=0x1d8bc55, ftLastWriteTime.dwLowDateTime=0xd2af1040, ftLastWriteTime.dwHighDateTime=0x1d8bc55, nFileSizeHigh=0x0, nFileSizeLow=0x14ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="1Z5Kv7GS76lwA.pps", cAlternateFileName="1Z5KV7~1.PPS")) returned 1 [0092.432] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ce2b4d0, ftCreationTime.dwHighDateTime=0x1d8b71a, ftLastAccessTime.dwLowDateTime=0xbaac5aa0, ftLastAccessTime.dwHighDateTime=0x1d8c094, ftLastWriteTime.dwLowDateTime=0xbaac5aa0, ftLastWriteTime.dwHighDateTime=0x1d8c094, nFileSizeHigh=0x0, nFileSizeLow=0xf74b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3DSBsa_0s.ods", cAlternateFileName="3DSBSA~1.ODS")) returned 1 [0092.432] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e2d3c80, ftCreationTime.dwHighDateTime=0x1d8bc53, ftLastAccessTime.dwLowDateTime=0xc7a13a50, ftLastAccessTime.dwHighDateTime=0x1d8c0b7, ftLastWriteTime.dwLowDateTime=0xc7a13a50, ftLastWriteTime.dwHighDateTime=0x1d8c0b7, nFileSizeHigh=0x0, nFileSizeLow=0xce57, dwReserved0=0x0, dwReserved1=0x0, cFileName="3oOk7eq0Br.docx", cAlternateFileName="3OOK7E~1.DOC")) returned 1 [0092.432] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf9eaa0, ftCreationTime.dwHighDateTime=0x1d8c0af, ftLastAccessTime.dwLowDateTime=0x586d40f0, ftLastAccessTime.dwHighDateTime=0x1d8c127, ftLastWriteTime.dwLowDateTime=0x586d40f0, ftLastWriteTime.dwHighDateTime=0x1d8c127, nFileSizeHigh=0x0, nFileSizeLow=0x5b7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="4HGl-VGgKrOM2.pdf", cAlternateFileName="4HGL-V~1.PDF")) returned 1 [0092.432] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6e796b0, ftCreationTime.dwHighDateTime=0x1d8ba68, ftLastAccessTime.dwLowDateTime=0x6c472770, ftLastAccessTime.dwHighDateTime=0x1d8bd77, ftLastWriteTime.dwLowDateTime=0x6c472770, ftLastWriteTime.dwHighDateTime=0x1d8bd77, nFileSizeHigh=0x0, nFileSizeLow=0x16f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="4_F6bcRTeu1.pptx", cAlternateFileName="4_F6BC~1.PPT")) returned 1 [0092.432] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd175ca0, ftCreationTime.dwHighDateTime=0x1d8be49, ftLastAccessTime.dwLowDateTime=0x53c2e6d0, ftLastAccessTime.dwHighDateTime=0x1d8be76, ftLastWriteTime.dwLowDateTime=0x53c2e6d0, ftLastWriteTime.dwHighDateTime=0x1d8be76, nFileSizeHigh=0x0, nFileSizeLow=0x17380, dwReserved0=0x0, dwReserved1=0x0, cFileName="5b6aLak.odp", cAlternateFileName="")) returned 1 [0092.432] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cd30f50, ftCreationTime.dwHighDateTime=0x1d8bff2, ftLastAccessTime.dwLowDateTime=0x10680680, ftLastAccessTime.dwHighDateTime=0x1d8c110, ftLastWriteTime.dwLowDateTime=0x10680680, ftLastWriteTime.dwHighDateTime=0x1d8c110, nFileSizeHigh=0x0, nFileSizeLow=0x15d9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9hWT7Qmr0PrXZJ XbtE.pptx", cAlternateFileName="9HWT7Q~1.PPT")) returned 1 [0092.432] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43649a85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43649a85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4372e947, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.432] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0d9d810, ftCreationTime.dwHighDateTime=0x1d835ba, ftLastAccessTime.dwLowDateTime=0x9a8fe850, ftLastAccessTime.dwHighDateTime=0x1d867ba, ftLastWriteTime.dwLowDateTime=0x9a8fe850, ftLastWriteTime.dwHighDateTime=0x1d867ba, nFileSizeHigh=0x0, nFileSizeLow=0x1889b, dwReserved0=0x0, dwReserved1=0x0, cFileName="E45Yv1XvuulS8zUq.xlsx", cAlternateFileName="E45YV1~1.XLS")) returned 1 [0092.432] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31f478c0, ftCreationTime.dwHighDateTime=0x1d8b18d, ftLastAccessTime.dwLowDateTime=0x32e2a240, ftLastAccessTime.dwHighDateTime=0x1d8b50f, ftLastWriteTime.dwLowDateTime=0x32e2a240, ftLastWriteTime.dwHighDateTime=0x1d8b50f, nFileSizeHigh=0x0, nFileSizeLow=0x102ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="e71u.ots", cAlternateFileName="")) returned 1 [0092.432] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ed64c0, ftCreationTime.dwHighDateTime=0x1d8ae87, ftLastAccessTime.dwLowDateTime=0x2801bd40, ftLastAccessTime.dwHighDateTime=0x1d8b422, ftLastWriteTime.dwLowDateTime=0x2801bd40, ftLastWriteTime.dwHighDateTime=0x1d8b422, nFileSizeHigh=0x0, nFileSizeLow=0xe134, dwReserved0=0x0, dwReserved1=0x0, cFileName="eJH4f.xlsx", cAlternateFileName="EJH4F~1.XLS")) returned 1 [0092.433] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dbc440, ftCreationTime.dwHighDateTime=0x1d8b653, ftLastAccessTime.dwLowDateTime=0x9aeadce0, ftLastAccessTime.dwHighDateTime=0x1d8b938, ftLastWriteTime.dwLowDateTime=0x9aeadce0, ftLastWriteTime.dwHighDateTime=0x1d8b938, nFileSizeHigh=0x0, nFileSizeLow=0x14c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ev9sDmBTxbKhXxI.odt", cAlternateFileName="EV9SDM~1.ODT")) returned 1 [0092.433] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb978a30, ftCreationTime.dwHighDateTime=0x1d8b5ad, ftLastAccessTime.dwLowDateTime=0x27a6eed0, ftLastAccessTime.dwHighDateTime=0x1d8b75e, ftLastWriteTime.dwLowDateTime=0x27a6eed0, ftLastWriteTime.dwHighDateTime=0x1d8b75e, nFileSizeHigh=0x0, nFileSizeLow=0x16b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fShM8Wh__KF.docx", cAlternateFileName="FSHM8W~1.DOC")) returned 1 [0092.433] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b2300c0, ftCreationTime.dwHighDateTime=0x1d8b58a, ftLastAccessTime.dwLowDateTime=0x2cbcf370, ftLastAccessTime.dwHighDateTime=0x1d8bd7a, ftLastWriteTime.dwLowDateTime=0x2cbcf370, ftLastWriteTime.dwHighDateTime=0x1d8bd7a, nFileSizeHigh=0x0, nFileSizeLow=0xf700, dwReserved0=0x0, dwReserved1=0x0, cFileName="gL-dJ 92wqVX.doc", cAlternateFileName="GL-DJ9~1.DOC")) returned 1 [0092.433] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f2bf40, ftCreationTime.dwHighDateTime=0x1d8b2b7, ftLastAccessTime.dwLowDateTime=0xdb84d650, ftLastAccessTime.dwHighDateTime=0x1d8bc6e, ftLastWriteTime.dwLowDateTime=0xdb84d650, ftLastWriteTime.dwHighDateTime=0x1d8bc6e, nFileSizeHigh=0x0, nFileSizeLow=0x10557, dwReserved0=0x0, dwReserved1=0x0, cFileName="J27 Bdkxk-BB.odt", cAlternateFileName="J27BDK~1.ODT")) returned 1 [0092.433] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fc87880, ftCreationTime.dwHighDateTime=0x1d8bd48, ftLastAccessTime.dwLowDateTime=0x2df80ef0, ftLastAccessTime.dwHighDateTime=0x1d8bf50, ftLastWriteTime.dwLowDateTime=0x2df80ef0, ftLastWriteTime.dwHighDateTime=0x1d8bf50, nFileSizeHigh=0x0, nFileSizeLow=0xec27, dwReserved0=0x0, dwReserved1=0x0, cFileName="JbsnSQgtqNF4.xls", cAlternateFileName="JBSNSQ~1.XLS")) returned 1 [0092.433] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda657a80, ftCreationTime.dwHighDateTime=0x1d8a10d, ftLastAccessTime.dwLowDateTime=0xe31766e0, ftLastAccessTime.dwHighDateTime=0x1d8a381, ftLastWriteTime.dwLowDateTime=0xe31766e0, ftLastWriteTime.dwHighDateTime=0x1d8a381, nFileSizeHigh=0x0, nFileSizeLow=0x9da7, dwReserved0=0x0, dwReserved1=0x0, cFileName="jxmdpfmkp6YGZgXo.docx", cAlternateFileName="JXMDPF~1.DOC")) returned 1 [0092.433] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad655e70, ftCreationTime.dwHighDateTime=0x1d8b7cd, ftLastAccessTime.dwLowDateTime=0x441d94c0, ftLastAccessTime.dwHighDateTime=0x1d8c022, ftLastWriteTime.dwLowDateTime=0x441d94c0, ftLastWriteTime.dwHighDateTime=0x1d8c022, nFileSizeHigh=0x0, nFileSizeLow=0x163cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="kuGxj9cn5.ots", cAlternateFileName="KUGXJ9~1.OTS")) returned 1 [0092.433] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda31e5e0, ftCreationTime.dwHighDateTime=0x1d84a72, ftLastAccessTime.dwLowDateTime=0xe77acf00, ftLastAccessTime.dwHighDateTime=0x1d88a7d, ftLastWriteTime.dwLowDateTime=0xe77acf00, ftLastWriteTime.dwHighDateTime=0x1d88a7d, nFileSizeHigh=0x0, nFileSizeLow=0xebe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="l0Ly1dOzG9b.pptx", cAlternateFileName="L0LY1D~1.PPT")) returned 1 [0092.433] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1698ecb0, ftCreationTime.dwHighDateTime=0x1d8845f, ftLastAccessTime.dwLowDateTime=0x7de8f220, ftLastAccessTime.dwHighDateTime=0x1d88abd, ftLastWriteTime.dwLowDateTime=0x7de8f220, ftLastWriteTime.dwHighDateTime=0x1d88abd, nFileSizeHigh=0x0, nFileSizeLow=0x18442, dwReserved0=0x0, dwReserved1=0x0, cFileName="LlNux.docx", cAlternateFileName="LLNUX~1.DOC")) returned 1 [0092.433] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc6be40, ftCreationTime.dwHighDateTime=0x1d83898, ftLastAccessTime.dwLowDateTime=0xb9014e10, ftLastAccessTime.dwHighDateTime=0x1d87998, ftLastWriteTime.dwLowDateTime=0xb9014e10, ftLastWriteTime.dwHighDateTime=0x1d87998, nFileSizeHigh=0x0, nFileSizeLow=0x46b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="M3k6HPkCjln.docx", cAlternateFileName="M3K6HP~1.DOC")) returned 1 [0092.433] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0092.433] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0092.433] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0092.433] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0092.433] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d246f60, ftCreationTime.dwHighDateTime=0x1d8b733, ftLastAccessTime.dwLowDateTime=0x2856b530, ftLastAccessTime.dwHighDateTime=0x1d8ba2f, ftLastWriteTime.dwLowDateTime=0x2856b530, ftLastWriteTime.dwHighDateTime=0x1d8ba2f, nFileSizeHigh=0x0, nFileSizeLow=0x129e2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ptxpBGQ.pdf", cAlternateFileName="")) returned 1 [0092.433] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24a71420, ftCreationTime.dwHighDateTime=0x1d88b9f, ftLastAccessTime.dwLowDateTime=0xd2984010, ftLastAccessTime.dwHighDateTime=0x1d8a821, ftLastWriteTime.dwLowDateTime=0xd2984010, ftLastWriteTime.dwHighDateTime=0x1d8a821, nFileSizeHigh=0x0, nFileSizeLow=0x184cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="R10S_E409.xlsx", cAlternateFileName="R10S_E~1.XLS")) returned 1 [0092.433] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d57e650, ftCreationTime.dwHighDateTime=0x1d8b5f8, ftLastAccessTime.dwLowDateTime=0x41a82910, ftLastAccessTime.dwHighDateTime=0x1d8be8f, ftLastWriteTime.dwLowDateTime=0x41a82910, ftLastWriteTime.dwHighDateTime=0x1d8be8f, nFileSizeHigh=0x0, nFileSizeLow=0x16910, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rdm FvCqzjr4BKW8.ppt", cAlternateFileName="RDMFVC~1.PPT")) returned 1 [0092.433] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe13fb850, ftCreationTime.dwHighDateTime=0x1d8c0db, ftLastAccessTime.dwLowDateTime=0x5ee50380, ftLastAccessTime.dwHighDateTime=0x1d8c124, ftLastWriteTime.dwLowDateTime=0x5ee50380, ftLastWriteTime.dwHighDateTime=0x1d8c124, nFileSizeHigh=0x0, nFileSizeLow=0x507e, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-C55.odt", cAlternateFileName="")) returned 1 [0092.433] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d79c60, ftCreationTime.dwHighDateTime=0x1d88b85, ftLastAccessTime.dwLowDateTime=0x63093ea0, ftLastAccessTime.dwHighDateTime=0x1d8baca, ftLastWriteTime.dwLowDateTime=0x63093ea0, ftLastWriteTime.dwHighDateTime=0x1d8baca, nFileSizeHigh=0x0, nFileSizeLow=0x127e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sAi7.pptx", cAlternateFileName="SAI7~1.PPT")) returned 1 [0092.434] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b929440, ftCreationTime.dwHighDateTime=0x1d8ba0b, ftLastAccessTime.dwLowDateTime=0x66b69e00, ftLastAccessTime.dwHighDateTime=0x1d8bc71, ftLastWriteTime.dwLowDateTime=0x66b69e00, ftLastWriteTime.dwHighDateTime=0x1d8bc71, nFileSizeHigh=0x0, nFileSizeLow=0x5936, dwReserved0=0x0, dwReserved1=0x0, cFileName="SnWjYP8 jUC.ppt", cAlternateFileName="SNWJYP~1.PPT")) returned 1 [0092.434] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed8a4eb0, ftCreationTime.dwHighDateTime=0x1d8aa8b, ftLastAccessTime.dwLowDateTime=0x78385190, ftLastAccessTime.dwHighDateTime=0x1d8b62d, ftLastWriteTime.dwLowDateTime=0x78385190, ftLastWriteTime.dwHighDateTime=0x1d8b62d, nFileSizeHigh=0x0, nFileSizeLow=0x1608f, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2kWqhx.xlsx", cAlternateFileName="T2KWQH~1.XLS")) returned 1 [0092.434] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tH7ZiLMX-lNDz2T4flA", cAlternateFileName="TH7ZIL~1")) returned 1 [0092.434] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9f325e0, ftCreationTime.dwHighDateTime=0x1d8b4e5, ftLastAccessTime.dwLowDateTime=0x96ff5090, ftLastAccessTime.dwHighDateTime=0x1d8be77, ftLastWriteTime.dwLowDateTime=0x96ff5090, ftLastWriteTime.dwHighDateTime=0x1d8be77, nFileSizeHigh=0x0, nFileSizeLow=0x6c8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UxxM9vzrN1plGVva5.ods", cAlternateFileName="UXXM9V~1.ODS")) returned 1 [0092.434] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1257dc0, ftCreationTime.dwHighDateTime=0x1d8aadb, ftLastAccessTime.dwLowDateTime=0xcad8c0e0, ftLastAccessTime.dwHighDateTime=0x1d8b3cd, ftLastWriteTime.dwLowDateTime=0xcad8c0e0, ftLastWriteTime.dwHighDateTime=0x1d8b3cd, nFileSizeHigh=0x0, nFileSizeLow=0xab54, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSFebGAZfWCvODJJqF.xlsx", cAlternateFileName="VSFEBG~1.XLS")) returned 1 [0092.434] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3cc2a0, ftCreationTime.dwHighDateTime=0x1d8ad0a, ftLastAccessTime.dwLowDateTime=0x75320560, ftLastAccessTime.dwHighDateTime=0x1d8b7ac, ftLastWriteTime.dwLowDateTime=0x75320560, ftLastWriteTime.dwHighDateTime=0x1d8b7ac, nFileSizeHigh=0x0, nFileSizeLow=0x16729, dwReserved0=0x0, dwReserved1=0x0, cFileName="X2bCTFNs35VghcjI.docx", cAlternateFileName="X2BCTF~1.DOC")) returned 1 [0092.434] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x327a6aa0, ftCreationTime.dwHighDateTime=0x1d8af69, ftLastAccessTime.dwLowDateTime=0x47383be0, ftLastAccessTime.dwHighDateTime=0x1d8b656, ftLastWriteTime.dwLowDateTime=0x47383be0, ftLastWriteTime.dwHighDateTime=0x1d8b656, nFileSizeHigh=0x0, nFileSizeLow=0xd19b, dwReserved0=0x0, dwReserved1=0x0, cFileName="xYJkClxxh YE11VkYAFc.pptx", cAlternateFileName="XYJKCL~1.PPT")) returned 1 [0092.434] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf401740, ftCreationTime.dwHighDateTime=0x1d8b8cb, ftLastAccessTime.dwLowDateTime=0x3379b560, ftLastAccessTime.dwHighDateTime=0x1d8be13, ftLastWriteTime.dwLowDateTime=0x3379b560, ftLastWriteTime.dwHighDateTime=0x1d8be13, nFileSizeHigh=0x0, nFileSizeLow=0x2f15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z4hDmRU.rtf", cAlternateFileName="")) returned 1 [0092.434] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc18b1d10, ftCreationTime.dwHighDateTime=0x1d86794, ftLastAccessTime.dwLowDateTime=0xeabdc170, ftLastAccessTime.dwHighDateTime=0x1d86a72, ftLastWriteTime.dwLowDateTime=0xeabdc170, ftLastWriteTime.dwHighDateTime=0x1d86a72, nFileSizeHigh=0x0, nFileSizeLow=0x12f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="zuwnbRBCFb l.docx", cAlternateFileName="ZUWNBR~1.DOC")) returned 1 [0092.434] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709ad260, ftCreationTime.dwHighDateTime=0x1d8b79e, ftLastAccessTime.dwLowDateTime=0x4d1307d0, ftLastAccessTime.dwHighDateTime=0x1d8be7a, ftLastWriteTime.dwLowDateTime=0x4d1307d0, ftLastWriteTime.dwHighDateTime=0x1d8be7a, nFileSizeHigh=0x0, nFileSizeLow=0x98fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="_-zO_pPR6V-z.csv", cAlternateFileName="_-ZO_P~1.CSV")) returned 1 [0092.434] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6e5150, ftCreationTime.dwHighDateTime=0x1d8bd40, ftLastAccessTime.dwLowDateTime=0x2e00a1c0, ftLastAccessTime.dwHighDateTime=0x1d8bda0, ftLastWriteTime.dwLowDateTime=0x2e00a1c0, ftLastWriteTime.dwHighDateTime=0x1d8bda0, nFileSizeHigh=0x0, nFileSizeLow=0x2ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_nGPp71.ots", cAlternateFileName="")) returned 1 [0092.434] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.434] FindClose (in: hFindFile=0x6c9788 | out: hFindFile=0x6c9788) returned 1 [0092.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f354) returned 1 [0092.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f360) returned 1 [0092.434] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x19eebc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f [0092.434] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Directories\\Documents.txt", nBufferLength=0x105, lpBuffer=0x19ed7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Directories\\Documents.txt", lpFilePart=0x0) returned 0x78 [0092.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2b4) returned 1 [0092.435] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Directories\\Documents.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\directories\\documents.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4a0 [0092.435] GetFileType (hFile=0x4a0) returned 0x1 [0092.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2b0) returned 1 [0092.435] GetFileType (hFile=0x4a0) returned 0x1 [0092.435] WriteFile (in: hFile=0x4a0, lpBuffer=0x2308158*, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x19f340, lpOverlapped=0x0 | out: lpBuffer=0x2308158*, lpNumberOfBytesWritten=0x19f340*=0x4aa, lpOverlapped=0x0) returned 1 [0092.436] CloseHandle (hObject=0x4a0) returned 1 [0092.438] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures", nBufferLength=0x105, lpBuffer=0x19ee84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures", lpFilePart=0x0) returned 0x1e [0092.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f328) returned 1 [0092.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x19f3a4 | out: lpFileInformation=0x19f3a4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6ba29884, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6ba29884, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0092.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f324) returned 1 [0092.438] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures", nBufferLength=0x105, lpBuffer=0x19ee88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures", lpFilePart=0x0) returned 0x1e [0092.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f398) returned 1 [0092.438] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures", nBufferLength=0x105, lpBuffer=0x19ee58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures", lpFilePart=0x0) returned 0x1e [0092.438] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\*"), lpFindFileData=0x19f0c0 | out: lpFindFileData=0x19f0c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6ba29884, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6ba29884, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c95c8 [0092.438] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6ba29884, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6ba29884, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.438] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x662d9cc0, ftCreationTime.dwHighDateTime=0x1d8c033, ftLastAccessTime.dwLowDateTime=0xd09d2660, ftLastAccessTime.dwHighDateTime=0x1d8c11a, ftLastWriteTime.dwLowDateTime=0xd09d2660, ftLastWriteTime.dwHighDateTime=0x1d8c11a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1mei", cAlternateFileName="")) returned 1 [0092.438] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf353dd0, ftCreationTime.dwHighDateTime=0x1d8b8f7, ftLastAccessTime.dwLowDateTime=0x59a54c0, ftLastAccessTime.dwHighDateTime=0x1d8b967, ftLastWriteTime.dwLowDateTime=0x59a54c0, ftLastWriteTime.dwHighDateTime=0x1d8b967, nFileSizeHigh=0x0, nFileSizeLow=0xdc68, dwReserved0=0x0, dwReserved1=0x0, cFileName="aPNSxelItB.gif", cAlternateFileName="APNSXE~1.GIF")) returned 1 [0092.438] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2444a3c0, ftCreationTime.dwHighDateTime=0x1d8b3aa, ftLastAccessTime.dwLowDateTime=0x6cbaf9f0, ftLastAccessTime.dwHighDateTime=0x1d8b7bb, ftLastWriteTime.dwLowDateTime=0x6cbaf9f0, ftLastWriteTime.dwHighDateTime=0x1d8b7bb, nFileSizeHigh=0x0, nFileSizeLow=0x16b25, dwReserved0=0x0, dwReserved1=0x0, cFileName="cTbWykOdR3AhecdSHES.gif", cAlternateFileName="CTBWYK~1.GIF")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917c2d40, ftCreationTime.dwHighDateTime=0x1d8bfe5, ftLastAccessTime.dwLowDateTime=0xd86c8fe0, ftLastAccessTime.dwHighDateTime=0x1d8c0fa, ftLastWriteTime.dwLowDateTime=0xd86c8fe0, ftLastWriteTime.dwHighDateTime=0x1d8c0fa, nFileSizeHigh=0x0, nFileSizeLow=0x1320, dwReserved0=0x0, dwReserved1=0x0, cFileName="EZSCq5D5osPMTO5bb2Q.jpg", cAlternateFileName="EZSCQ5~1.JPG")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15983430, ftCreationTime.dwHighDateTime=0x1d8b5a4, ftLastAccessTime.dwLowDateTime=0xb5f43e10, ftLastAccessTime.dwHighDateTime=0x1d8b973, ftLastWriteTime.dwLowDateTime=0xb5f43e10, ftLastWriteTime.dwHighDateTime=0x1d8b973, nFileSizeHigh=0x0, nFileSizeLow=0x5f7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HGl8z.bmp", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa331e940, ftCreationTime.dwHighDateTime=0x1d8bcfb, ftLastAccessTime.dwLowDateTime=0x70756b0, ftLastAccessTime.dwHighDateTime=0x1d8c014, ftLastWriteTime.dwLowDateTime=0x70756b0, ftLastWriteTime.dwHighDateTime=0x1d8c014, nFileSizeHigh=0x0, nFileSizeLow=0x69c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inm2.bmp", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x197bb470, ftCreationTime.dwHighDateTime=0x1d8bb8d, ftLastAccessTime.dwLowDateTime=0x734154c0, ftLastAccessTime.dwHighDateTime=0x1d8bc95, ftLastWriteTime.dwLowDateTime=0x734154c0, ftLastWriteTime.dwHighDateTime=0x1d8bc95, nFileSizeHigh=0x0, nFileSizeLow=0x16171, dwReserved0=0x0, dwReserved1=0x0, cFileName="IWQ3hkvN.jpg", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff331830, ftCreationTime.dwHighDateTime=0x1d8b0fe, ftLastAccessTime.dwLowDateTime=0x43fc1770, ftLastAccessTime.dwHighDateTime=0x1d8b779, ftLastWriteTime.dwLowDateTime=0x43fc1770, ftLastWriteTime.dwHighDateTime=0x1d8b779, nFileSizeHigh=0x0, nFileSizeLow=0xe454, dwReserved0=0x0, dwReserved1=0x0, cFileName="muKJoXXN3D4JrJW.png", cAlternateFileName="MUKJOX~1.PNG")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd940a00, ftCreationTime.dwHighDateTime=0x1d8b5e7, ftLastAccessTime.dwLowDateTime=0xfa124ca0, ftLastAccessTime.dwHighDateTime=0x1d8ba21, ftLastWriteTime.dwLowDateTime=0xfa124ca0, ftLastWriteTime.dwHighDateTime=0x1d8ba21, nFileSizeHigh=0x0, nFileSizeLow=0x755f, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrRl4u.png", cAlternateFileName="")) returned 1 [0092.439] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x19f0cc | out: lpFindFileData=0x19f0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadf35750, ftCreationTime.dwHighDateTime=0x1d8ba22, ftLastAccessTime.dwLowDateTime=0xa650c0b0, ftLastAccessTime.dwHighDateTime=0x1d8c0c5, ftLastWriteTime.dwLowDateTime=0xa650c0b0, ftLastWriteTime.dwHighDateTime=0x1d8c0c5, nFileSizeHigh=0x0, nFileSizeLow=0x852b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUjKUzlujX4_kF3gUFgs.bmp", cAlternateFileName="RUJKUZ~1.BMP")) returned 1 [0092.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f354) returned 1 [0092.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f360) returned 1 [0092.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2e4) returned 1 [0092.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2e0) returned 1 [0092.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2e4) returned 1 [0092.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2e0) returned 1 [0092.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2e4) returned 1 [0092.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2e0) returned 1 [0092.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f398) returned 1 [0092.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f354) returned 1 [0092.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f360) returned 1 [0092.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2b4) returned 1 [0092.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2b0) returned 1 [0092.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f328) returned 1 [0092.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f324) returned 1 [0092.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f398) returned 1 [0092.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f354) returned 1 [0092.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f360) returned 1 [0092.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2e4) returned 1 [0092.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2e0) returned 1 [0092.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2e4) returned 1 [0092.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2e0) returned 1 [0092.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2a0) returned 1 [0092.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f29c) returned 1 [0092.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f310) returned 1 [0092.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2cc) returned 1 [0092.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2d8) returned 1 [0092.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f310) returned 1 [0092.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2cc) returned 1 [0092.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2d8) returned 1 [0092.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f398) returned 1 [0092.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f354) returned 1 [0092.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f360) returned 1 [0092.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2b4) returned 1 [0092.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2b0) returned 1 [0092.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f328) returned 1 [0092.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f324) returned 1 [0092.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f398) returned 1 [0092.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f354) returned 1 [0092.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f360) returned 1 [0092.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f398) returned 1 [0092.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f354) returned 1 [0092.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f360) returned 1 [0092.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2b4) returned 1 [0092.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2b0) returned 1 [0092.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f328) returned 1 [0092.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f324) returned 1 [0092.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f398) returned 1 [0092.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f354) returned 1 [0092.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f360) returned 1 [0092.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f398) returned 1 [0092.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f354) returned 1 [0092.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f360) returned 1 [0092.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2b4) returned 1 [0092.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2b0) returned 1 [0092.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f328) returned 1 [0092.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f324) returned 1 [0092.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f328) returned 1 [0092.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f324) returned 1 [0092.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f398) returned 1 [0092.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f354) returned 1 [0092.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f360) returned 1 [0092.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f398) returned 1 [0092.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f354) returned 1 [0092.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f360) returned 1 [0092.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2b4) returned 1 [0092.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2b0) returned 1 [0092.468] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x19ee70, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0092.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f328) returned 1 [0092.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f324) returned 1 [0092.469] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x19ee74, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0092.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f398) returned 1 [0092.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f354) returned 1 [0092.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f360) returned 1 [0092.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2e4) returned 1 [0092.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2e0) returned 1 [0092.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2a0) returned 1 [0092.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f29c) returned 1 [0092.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f310) returned 1 [0092.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2cc) returned 1 [0092.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2d8) returned 1 [0092.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f310) returned 1 [0092.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2cc) returned 1 [0092.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2d8) returned 1 [0092.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2e4) returned 1 [0092.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2e0) returned 1 [0092.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2e4) returned 1 [0092.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2e0) returned 1 [0092.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2e4) returned 1 [0092.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2e0) returned 1 [0092.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f310) returned 1 [0092.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f31c) returned 1 [0092.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f398) returned 1 [0092.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f354) returned 1 [0092.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f360) returned 1 [0092.474] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x19eea8, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0092.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2b4) returned 1 [0092.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2b0) returned 1 [0092.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f350) returned 1 [0092.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f350) returned 1 [0092.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f354) returned 1 [0092.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f350) returned 1 [0092.485] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x31d98f0, Length=0x20000, ResultLength=0x19f418 | out: SystemInformation=0x31d98f0, ResultLength=0x19f418*=0x16430) returned 0x0 [0092.503] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3d8) returned 0x4a0 [0092.504] EnumProcessModules (in: hProcess=0x4a0, lphModule=0x2377274, cb=0x100, lpcbNeeded=0x19f3c4 | out: lphModule=0x2377274, lpcbNeeded=0x19f3c4) returned 1 [0092.508] GetModuleInformation (in: hProcess=0x4a0, hModule=0x230000, lpmodinfo=0x23773b4, cb=0xc | out: lpmodinfo=0x23773b4*(lpBaseOfDll=0x230000, SizeOfImage=0x17000, EntryPoint=0x2314a1)) returned 1 [0092.508] CoTaskMemAlloc (cb=0x804) returned 0x74a9f0 [0092.508] GetModuleBaseNameW (in: hProcess=0x4a0, hModule=0x230000, lpBaseName=0x74a9f0, nSize=0x800 | out: lpBaseName="year-culture-then.exe") returned 0x15 [0092.509] CoTaskMemFree (pv=0x74a9f0) [0092.509] CoTaskMemAlloc (cb=0x804) returned 0x74a9f0 [0092.509] GetModuleFileNameExW (in: hProcess=0x4a0, hModule=0x230000, lpFilename=0x74a9f0, nSize=0x800 | out: lpFilename="C:\\Program Files\\Windows Portable Devices\\year-culture-then.exe" (normalized: "c:\\program files\\windows portable devices\\year-culture-then.exe")) returned 0x3f [0092.509] CoTaskMemFree (pv=0x74a9f0) [0092.509] CloseHandle (hObject=0x4a0) returned 1 [0092.512] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\System\\Process.txt", nBufferLength=0x105, lpBuffer=0x19eda4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\System\\Process.txt", lpFilePart=0x0) returned 0x71 [0092.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2dc) returned 1 [0092.512] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\System\\Process.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\system\\process.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4a0 [0092.512] GetFileType (hFile=0x4a0) returned 0x1 [0092.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2d8) returned 1 [0092.512] GetFileType (hFile=0x4a0) returned 0x1 [0092.512] SetFilePointer (in: hFile=0x4a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x19f2b0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x19f2b0*=0) returned 0x0 [0092.513] WriteFile (in: hFile=0x4a0, lpBuffer=0x237ac40*, nNumberOfBytesToWrite=0x69, lpNumberOfBytesWritten=0x19f378, lpOverlapped=0x0 | out: lpBuffer=0x237ac40*, lpNumberOfBytesWritten=0x19f378*=0x69, lpOverlapped=0x0) returned 1 [0092.514] CloseHandle (hObject=0x4a0) returned 1 [0092.515] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe98) returned 0x4a0 [0092.515] EnumProcessModules (in: hProcess=0x4a0, lphModule=0x237bd90, cb=0x100, lpcbNeeded=0x19f3c4 | out: lphModule=0x237bd90, lpcbNeeded=0x19f3c4) returned 1 [0092.517] GetModuleInformation (in: hProcess=0x4a0, hModule=0xf90000, lpmodinfo=0x237bed0, cb=0xc | out: lpmodinfo=0x237bed0*(lpBaseOfDll=0xf90000, SizeOfImage=0x17000, EntryPoint=0xf914a1)) returned 1 [0092.517] CoTaskMemAlloc (cb=0x804) returned 0x74a9f0 [0092.517] GetModuleBaseNameW (in: hProcess=0x4a0, hModule=0xf90000, lpBaseName=0x74a9f0, nSize=0x800 | out: lpBaseName="aldelo.exe") returned 0xa [0092.517] CoTaskMemFree (pv=0x74a9f0) [0092.517] CoTaskMemAlloc (cb=0x804) returned 0x74a9f0 [0092.518] GetModuleFileNameExW (in: hProcess=0x4a0, hModule=0xf90000, lpFilename=0x74a9f0, nSize=0x800 | out: lpFilename="C:\\Program Files (x86)\\Windows Defender\\aldelo.exe" (normalized: "c:\\program files (x86)\\windows defender\\aldelo.exe")) returned 0x32 [0092.518] CoTaskMemFree (pv=0x74a9f0) [0092.518] CloseHandle (hObject=0x4a0) returned 1 [0092.518] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\System\\Process.txt", nBufferLength=0x105, lpBuffer=0x19eda4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\System\\Process.txt", lpFilePart=0x0) returned 0x71 [0092.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19f2dc) returned 1 [0092.518] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\System\\Process.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\system\\process.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x4a0 [0092.518] GetFileType (hFile=0x4a0) returned 0x1 [0092.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19f2d8) returned 1 [0092.518] GetFileType (hFile=0x4a0) returned 0x1 [0092.518] SetFilePointer (in: hFile=0x4a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x19f2b0*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x19f2b0*=0) returned 0x69 [0092.519] WriteFile (in: hFile=0x4a0, lpBuffer=0x237f704*, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0x19f378, lpOverlapped=0x0 | out: lpBuffer=0x237f704*, lpNumberOfBytesWritten=0x19f378*=0x52, lpOverlapped=0x0) returned 1 [0092.519] CloseHandle (hObject=0x4a0) returned 1 [0092.520] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x620) returned 0x4a0 [0092.520] EnumProcessModules (in: hProcess=0x4a0, lphModule=0x2380854, cb=0x100, lpcbNeeded=0x19f3c4 | out: lphModule=0x2380854, lpcbNeeded=0x19f3c4) returned 0 [0092.520] GetCurrentProcessId () returned 0xdb0 [0092.520] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xdb0) returned 0x494 [0092.525] IsWow64Process (in: hProcess=0x494, Wow64Process=0x19f33c | out: Wow64Process=0x19f33c*=1) returned 1 [0092.525] IsWow64Process (in: hProcess=0x4a0, Wow64Process=0x19f33c | out: Wow64Process=0x19f33c*=0) returned 1 [0092.542] CloseHandle (hObject=0x494) returned 1 [0092.542] CloseHandle (hObject=0x4a0) returned 1 [0092.542] CoGetObjectContext (in: riid=0x21f60a4*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ebd0 | out: ppv=0x19ebd0*=0x6bb23c) returned 0x0 [0092.542] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6bb23c, pAptType=0x19ebc8 | out: pAptType=0x19ebc8*=1) returned 0x0 [0092.542] IUnknown:QueryInterface (in: This=0x6bb23c, riid=0x21f608c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19ebcc | out: ppvObject=0x19ebcc*=0x0) returned 0x80004002 [0092.543] IUnknown:Release (This=0x6bb23c) returned 0x1 [0092.544] CoGetClassObject (in: rclsid=0x729d7c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f704d80*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19e538 | out: ppv=0x19e538*=0x74d8f0) returned 0x0 [0092.544] WbemDefPath:IUnknown:QueryInterface (in: This=0x74d8f0, riid=0x6f6e79fc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e754 | out: ppvObject=0x19e754*=0x0) returned 0x80004002 [0092.544] WbemDefPath:IClassFactory:CreateInstance (in: This=0x74d8f0, pUnkOuter=0x0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e760 | out: ppvObject=0x19e760*=0x746b38) returned 0x0 [0092.544] WbemDefPath:IUnknown:Release (This=0x74d8f0) returned 0x0 [0092.544] WbemDefPath:IUnknown:QueryInterface (in: This=0x746b38, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e384 | out: ppvObject=0x19e384*=0x746b38) returned 0x0 [0092.545] WbemDefPath:IUnknown:QueryInterface (in: This=0x746b38, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e340 | out: ppvObject=0x19e340*=0x0) returned 0x80004002 [0092.545] WbemDefPath:IUnknown:QueryInterface (in: This=0x746b38, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19df34 | out: ppvObject=0x19df34*=0x0) returned 0x80004002 [0092.545] WbemDefPath:IUnknown:AddRef (This=0x746b38) returned 0x3 [0092.545] WbemDefPath:IUnknown:QueryInterface (in: This=0x746b38, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19dc94 | out: ppvObject=0x19dc94*=0x0) returned 0x80004002 [0092.545] WbemDefPath:IUnknown:QueryInterface (in: This=0x746b38, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19dc44 | out: ppvObject=0x19dc44*=0x0) returned 0x80004002 [0092.545] WbemDefPath:IUnknown:QueryInterface (in: This=0x746b38, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dc50 | out: ppvObject=0x19dc50*=0x736cf8) returned 0x0 [0092.545] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x736cf8, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19dc58 | out: pCid=0x19dc58*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0092.545] WbemDefPath:IUnknown:Release (This=0x736cf8) returned 0x3 [0092.545] CoGetContextToken (in: pToken=0x19dcb0 | out: pToken=0x19dcb0) returned 0x0 [0092.545] CoGetContextToken (in: pToken=0x19e0b8 | out: pToken=0x19e0b8) returned 0x0 [0092.545] WbemDefPath:IUnknown:QueryInterface (in: This=0x746b38, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e144 | out: ppvObject=0x19e144*=0x0) returned 0x80004002 [0092.545] WbemDefPath:IUnknown:Release (This=0x746b38) returned 0x2 [0092.545] WbemDefPath:IUnknown:Release (This=0x746b38) returned 0x1 [0092.545] CoGetContextToken (in: pToken=0x19ea48 | out: pToken=0x19ea48) returned 0x0 [0092.545] CoGetContextToken (in: pToken=0x19e9a8 | out: pToken=0x19e9a8) returned 0x0 [0092.545] WbemDefPath:IUnknown:QueryInterface (in: This=0x746b38, riid=0x19ea78*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x19ea74 | out: ppvObject=0x19ea74*=0x746b38) returned 0x0 [0092.545] WbemDefPath:IUnknown:AddRef (This=0x746b38) returned 0x3 [0092.545] WbemDefPath:IUnknown:Release (This=0x746b38) returned 0x2 [0092.545] WbemDefPath:IWbemPath:SetText (This=0x746b38, uMode=0x4, pszPath="//./root/cimv2") returned 0x0 [0092.546] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x746b38, puCount=0x19f2fc | out: puCount=0x19f2fc*=0x2) returned 0x0 [0092.546] WbemDefPath:IWbemPath:GetText (in: This=0x746b38, lFlags=4, puBuffLength=0x19f2f8*=0x0, pszText=0x0 | out: puBuffLength=0x19f2f8*=0xf, pszText=0x0) returned 0x0 [0092.546] WbemDefPath:IWbemPath:GetText (in: This=0x746b38, lFlags=4, puBuffLength=0x19f2f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0092.546] CoGetObjectContext (in: riid=0x21f60a4*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19f284 | out: ppv=0x19f284*=0x6bb23c) returned 0x0 [0092.546] IComThreadingInfo:GetCurrentApartmentType (in: This=0x6bb23c, pAptType=0x19f27c | out: pAptType=0x19f27c*=1) returned 0x0 [0092.546] IUnknown:QueryInterface (in: This=0x6bb23c, riid=0x21f608c*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x19f280 | out: ppvObject=0x19f280*=0x0) returned 0x80004002 [0092.546] IUnknown:Release (This=0x6bb23c) returned 0x1 [0092.546] CoGetClassObject (in: rclsid=0x729b0c*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x6f704d80*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ee90 | out: ppv=0x19ee90*=0x736db8) returned 0x0 [0092.546] WbemLocator:IUnknown:QueryInterface (in: This=0x736db8, riid=0x6f6e79fc*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19f0ac | out: ppvObject=0x19f0ac*=0x0) returned 0x80004002 [0092.547] WbemLocator:IClassFactory:CreateInstance (in: This=0x736db8, pUnkOuter=0x0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f0b8 | out: ppvObject=0x19f0b8*=0x74d8f0) returned 0x0 [0092.547] WbemLocator:IUnknown:Release (This=0x736db8) returned 0x0 [0092.547] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8f0, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ecdc | out: ppvObject=0x19ecdc*=0x74d8f0) returned 0x0 [0092.547] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8f0, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec98 | out: ppvObject=0x19ec98*=0x0) returned 0x80004002 [0092.547] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8f0, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e88c | out: ppvObject=0x19e88c*=0x0) returned 0x80004002 [0092.547] WbemLocator:IUnknown:AddRef (This=0x74d8f0) returned 0x3 [0092.547] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8f0, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e5ec | out: ppvObject=0x19e5ec*=0x0) returned 0x80004002 [0092.547] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8f0, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e59c | out: ppvObject=0x19e59c*=0x0) returned 0x80004002 [0092.547] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8f0, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e5a8 | out: ppvObject=0x19e5a8*=0x0) returned 0x80004002 [0092.547] CoGetContextToken (in: pToken=0x19e608 | out: pToken=0x19e608) returned 0x0 [0092.547] CoGetContextToken (in: pToken=0x19ea10 | out: pToken=0x19ea10) returned 0x0 [0092.547] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8f0, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea9c | out: ppvObject=0x19ea9c*=0x0) returned 0x80004002 [0092.547] WbemLocator:IUnknown:Release (This=0x74d8f0) returned 0x2 [0092.547] WbemLocator:IUnknown:Release (This=0x74d8f0) returned 0x1 [0092.547] CoGetContextToken (in: pToken=0x19f098 | out: pToken=0x19f098) returned 0x0 [0092.547] CoGetContextToken (in: pToken=0x19eff8 | out: pToken=0x19eff8) returned 0x0 [0092.547] WbemLocator:IUnknown:QueryInterface (in: This=0x74d8f0, riid=0x19f0c8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x19f0c4 | out: ppvObject=0x19f0c4*=0x74d8f0) returned 0x0 [0092.547] WbemLocator:IUnknown:AddRef (This=0x74d8f0) returned 0x3 [0092.547] WbemLocator:IUnknown:Release (This=0x74d8f0) returned 0x2 [0092.547] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x746b38, puCount=0x19f260 | out: puCount=0x19f260*=0x2) returned 0x0 [0092.547] WbemDefPath:IWbemPath:GetText (in: This=0x746b38, lFlags=8, puBuffLength=0x19f25c*=0x0, pszText=0x0 | out: puBuffLength=0x19f25c*=0xf, pszText=0x0) returned 0x0 [0092.547] WbemDefPath:IWbemPath:GetText (in: This=0x746b38, lFlags=8, puBuffLength=0x19f25c*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f25c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0092.547] CoCreateInstance (in: rclsid=0x6b3713b4*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6b371414*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x19f138 | out: ppv=0x19f138*=0x74d9a0) returned 0x0 [0092.548] WbemLocator:IWbemLocator:ConnectServer (in: This=0x74d9a0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x19f1cc | out: ppNamespace=0x19f1cc*=0x6af160) returned 0x0 [0092.564] WbemLocator:IUnknown:QueryInterface (in: This=0x6af160, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f060 | out: ppvObject=0x19f060*=0x72afc4) returned 0x0 [0092.564] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x72afc4, pProxy=0x6af160, pAuthnSvc=0x19f0b0, pAuthzSvc=0x19f0ac, pServerPrincName=0x19f0a4, pAuthnLevel=0x19f0a8, pImpLevel=0x19f098, pAuthInfo=0x19f09c, pCapabilites=0x19f0a0 | out: pAuthnSvc=0x19f0b0*=0xa, pAuthzSvc=0x19f0ac*=0x0, pServerPrincName=0x19f0a4, pAuthnLevel=0x19f0a8*=0x6, pImpLevel=0x19f098*=0x2, pAuthInfo=0x19f09c, pCapabilites=0x19f0a0*=0x1) returned 0x0 [0092.564] WbemLocator:IUnknown:Release (This=0x72afc4) returned 0x1 [0092.564] WbemLocator:IUnknown:QueryInterface (in: This=0x6af160, riid=0x6b371224*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f054 | out: ppvObject=0x19f054*=0x72afe8) returned 0x0 [0092.564] WbemLocator:IUnknown:QueryInterface (in: This=0x6af160, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f040 | out: ppvObject=0x19f040*=0x72afc4) returned 0x0 [0092.564] WbemLocator:IClientSecurity:SetBlanket (This=0x72afc4, pProxy=0x6af160, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0092.564] WbemLocator:IUnknown:Release (This=0x72afc4) returned 0x2 [0092.564] WbemLocator:IUnknown:Release (This=0x72afe8) returned 0x1 [0092.564] CoTaskMemFree (pv=0x73ffd0) [0092.564] WbemLocator:IUnknown:Release (This=0x74d9a0) returned 0x0 [0092.564] WbemLocator:IUnknown:QueryInterface (in: This=0x6af160, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec50 | out: ppvObject=0x19ec50*=0x72afe8) returned 0x0 [0092.564] WbemLocator:IUnknown:QueryInterface (in: This=0x72afe8, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec0c | out: ppvObject=0x19ec0c*=0x0) returned 0x80004002 [0092.565] WbemLocator:IUnknown:QueryInterface (in: This=0x72afe8, riid=0x6f729bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea2c | out: ppvObject=0x19ea2c*=0x0) returned 0x80004002 [0092.565] WbemLocator:IUnknown:QueryInterface (in: This=0x6af160, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e804 | out: ppvObject=0x19e804*=0x0) returned 0x80004002 [0092.565] WbemLocator:IUnknown:AddRef (This=0x72afe8) returned 0x3 [0092.566] WbemLocator:IUnknown:QueryInterface (in: This=0x72afe8, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e564 | out: ppvObject=0x19e564*=0x0) returned 0x80004002 [0092.566] WbemLocator:IUnknown:QueryInterface (in: This=0x72afe8, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e514 | out: ppvObject=0x19e514*=0x0) returned 0x80004002 [0092.566] WbemLocator:IUnknown:QueryInterface (in: This=0x72afe8, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e520 | out: ppvObject=0x19e520*=0x72af44) returned 0x0 [0092.566] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x72af44, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e528 | out: pCid=0x19e528*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0092.566] WbemLocator:IUnknown:Release (This=0x72af44) returned 0x3 [0092.566] CoGetContextToken (in: pToken=0x19e580 | out: pToken=0x19e580) returned 0x0 [0092.566] CoGetContextToken (in: pToken=0x19e988 | out: pToken=0x19e988) returned 0x0 [0092.566] WbemLocator:IUnknown:QueryInterface (in: This=0x72afe8, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea14 | out: ppvObject=0x19ea14*=0x72afcc) returned 0x0 [0092.566] WbemLocator:IRpcOptions:Query (in: This=0x72afcc, pPrx=0x72afe8, dwProperty=2, pdwValue=0x19ea20 | out: pdwValue=0x19ea20) returned 0x80004002 [0092.566] WbemLocator:IUnknown:Release (This=0x72afcc) returned 0x3 [0092.566] WbemLocator:IUnknown:Release (This=0x72afe8) returned 0x2 [0092.566] CoGetContextToken (in: pToken=0x19ef60 | out: pToken=0x19ef60) returned 0x0 [0092.566] CoGetContextToken (in: pToken=0x19eec0 | out: pToken=0x19eec0) returned 0x0 [0092.566] WbemLocator:IUnknown:QueryInterface (in: This=0x72afe8, riid=0x19ef90*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x19ef8c | out: ppvObject=0x19ef8c*=0x6af160) returned 0x0 [0092.566] WbemLocator:IUnknown:AddRef (This=0x6af160) returned 0x4 [0092.566] WbemLocator:IUnknown:Release (This=0x6af160) returned 0x3 [0092.566] WbemLocator:IUnknown:Release (This=0x6af160) returned 0x2 [0092.566] SysStringLen (param_1=0x0) returned 0x0 [0092.566] CoGetContextToken (in: pToken=0x19ef68 | out: pToken=0x19ef68) returned 0x0 [0092.566] WbemLocator:IUnknown:AddRef (This=0x72afe8) returned 0x3 [0092.566] WbemLocator:IUnknown:QueryInterface (in: This=0x72afe8, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19edfc | out: ppvObject=0x19edfc*=0x72afe8) returned 0x0 [0092.566] WbemLocator:IUnknown:Release (This=0x72afe8) returned 0x3 [0092.566] WbemLocator:IUnknown:Release (This=0x72afe8) returned 0x2 [0092.566] CoGetContextToken (in: pToken=0x19f030 | out: pToken=0x19f030) returned 0x0 [0092.567] WbemLocator:IUnknown:AddRef (This=0x6af160) returned 0x3 [0092.567] IWbemServices:ExecQuery (in: This=0x6af160, strQueryLanguage="WQL", strQuery="SELECT ExecutablePath, ProcessID FROM Win32_Process", lFlags=16, pCtx=0x0, ppEnum=0x19f26c | out: ppEnum=0x19f26c*=0x6dba30) returned 0x0 [0092.623] IUnknown:QueryInterface (in: This=0x6dba30, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f09c | out: ppvObject=0x19f09c*=0x6dba34) returned 0x0 [0092.623] IClientSecurity:QueryBlanket (in: This=0x6dba34, pProxy=0x6dba30, pAuthnSvc=0x19f0ec, pAuthzSvc=0x19f0e8, pServerPrincName=0x19f0e0, pAuthnLevel=0x19f0e4, pImpLevel=0x19f0d4, pAuthInfo=0x19f0d8, pCapabilites=0x19f0dc | out: pAuthnSvc=0x19f0ec*=0xa, pAuthzSvc=0x19f0e8*=0x0, pServerPrincName=0x19f0e0, pAuthnLevel=0x19f0e4*=0x6, pImpLevel=0x19f0d4*=0x2, pAuthInfo=0x19f0d8, pCapabilites=0x19f0dc*=0x1) returned 0x0 [0092.623] IUnknown:Release (This=0x6dba34) returned 0x1 [0092.623] IUnknown:QueryInterface (in: This=0x6dba30, riid=0x6b371224*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f090 | out: ppvObject=0x19f090*=0x72b0e8) returned 0x0 [0092.623] IUnknown:QueryInterface (in: This=0x6dba30, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f07c | out: ppvObject=0x19f07c*=0x6dba34) returned 0x0 [0092.623] IClientSecurity:SetBlanket (This=0x6dba34, pProxy=0x6dba30, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0092.625] IUnknown:Release (This=0x6dba34) returned 0x2 [0092.625] WbemLocator:IUnknown:Release (This=0x72b0e8) returned 0x1 [0092.625] CoTaskMemFree (pv=0x740300) [0092.625] IUnknown:QueryInterface (in: This=0x6dba30, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ec88 | out: ppvObject=0x19ec88*=0x72b0e8) returned 0x0 [0092.625] WbemLocator:IUnknown:QueryInterface (in: This=0x72b0e8, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ec44 | out: ppvObject=0x19ec44*=0x0) returned 0x80004002 [0092.625] WbemLocator:IUnknown:QueryInterface (in: This=0x72b0e8, riid=0x6f729bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea64 | out: ppvObject=0x19ea64*=0x0) returned 0x80004002 [0092.626] IUnknown:QueryInterface (in: This=0x6dba30, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e83c | out: ppvObject=0x19e83c*=0x0) returned 0x80004002 [0092.626] WbemLocator:IUnknown:AddRef (This=0x72b0e8) returned 0x3 [0092.626] WbemLocator:IUnknown:QueryInterface (in: This=0x72b0e8, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e59c | out: ppvObject=0x19e59c*=0x0) returned 0x80004002 [0092.626] WbemLocator:IUnknown:QueryInterface (in: This=0x72b0e8, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e54c | out: ppvObject=0x19e54c*=0x0) returned 0x80004002 [0092.626] WbemLocator:IUnknown:QueryInterface (in: This=0x72b0e8, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e558 | out: ppvObject=0x19e558*=0x72b044) returned 0x0 [0092.626] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x72b044, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e560 | out: pCid=0x19e560*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0092.626] WbemLocator:IUnknown:Release (This=0x72b044) returned 0x3 [0092.626] CoGetContextToken (in: pToken=0x19e5b8 | out: pToken=0x19e5b8) returned 0x0 [0092.626] CoGetContextToken (in: pToken=0x19e9c0 | out: pToken=0x19e9c0) returned 0x0 [0092.626] WbemLocator:IUnknown:QueryInterface (in: This=0x72b0e8, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ea4c | out: ppvObject=0x19ea4c*=0x72b0cc) returned 0x0 [0092.626] WbemLocator:IRpcOptions:Query (in: This=0x72b0cc, pPrx=0x72b0e8, dwProperty=2, pdwValue=0x19ea58 | out: pdwValue=0x19ea58) returned 0x80004002 [0092.626] WbemLocator:IUnknown:Release (This=0x72b0cc) returned 0x3 [0092.626] WbemLocator:IUnknown:Release (This=0x72b0e8) returned 0x2 [0092.626] CoGetContextToken (in: pToken=0x19ef98 | out: pToken=0x19ef98) returned 0x0 [0092.626] CoGetContextToken (in: pToken=0x19eef8 | out: pToken=0x19eef8) returned 0x0 [0092.627] WbemLocator:IUnknown:QueryInterface (in: This=0x72b0e8, riid=0x19efc8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19efc4 | out: ppvObject=0x19efc4*=0x6dba30) returned 0x0 [0092.627] IUnknown:AddRef (This=0x6dba30) returned 0x4 [0092.627] IUnknown:Release (This=0x6dba30) returned 0x3 [0092.627] IUnknown:Release (This=0x6dba30) returned 0x2 [0092.627] WbemLocator:IUnknown:Release (This=0x6af160) returned 0x2 [0092.627] SysStringLen (param_1=0x0) returned 0x0 [0092.627] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x746b38, puCount=0x19f2b8 | out: puCount=0x19f2b8*=0x2) returned 0x0 [0092.627] WbemDefPath:IWbemPath:GetText (in: This=0x746b38, lFlags=4, puBuffLength=0x19f2b4*=0x0, pszText=0x0 | out: puBuffLength=0x19f2b4*=0xf, pszText=0x0) returned 0x0 [0092.627] WbemDefPath:IWbemPath:GetText (in: This=0x746b38, lFlags=4, puBuffLength=0x19f2b4*=0xf, pszText="00000000000000" | out: puBuffLength=0x19f2b4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0092.627] CoGetContextToken (in: pToken=0x19f108 | out: pToken=0x19f108) returned 0x0 [0092.627] IUnknown:AddRef (This=0x6dba30) returned 0x3 [0092.627] IEnumWbemClassObject:Clone (in: This=0x6dba30, ppEnum=0x19f2c4 | out: ppEnum=0x19f2c4*=0x6db198) returned 0x0 [0092.628] IUnknown:QueryInterface (in: This=0x6db198, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f180 | out: ppvObject=0x19f180*=0x6db19c) returned 0x0 [0092.628] IClientSecurity:QueryBlanket (in: This=0x6db19c, pProxy=0x6db198, pAuthnSvc=0x19f1d0, pAuthzSvc=0x19f1cc, pServerPrincName=0x19f1c4, pAuthnLevel=0x19f1c8, pImpLevel=0x19f1b8, pAuthInfo=0x19f1bc, pCapabilites=0x19f1c0 | out: pAuthnSvc=0x19f1d0*=0xa, pAuthzSvc=0x19f1cc*=0x0, pServerPrincName=0x19f1c4, pAuthnLevel=0x19f1c8*=0x6, pImpLevel=0x19f1b8*=0x2, pAuthInfo=0x19f1bc, pCapabilites=0x19f1c0*=0x1) returned 0x0 [0092.628] IUnknown:Release (This=0x6db19c) returned 0x1 [0092.628] IUnknown:QueryInterface (in: This=0x6db198, riid=0x6b371224*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f174 | out: ppvObject=0x19f174*=0x72b5e8) returned 0x0 [0092.628] IUnknown:QueryInterface (in: This=0x6db198, riid=0x6b371234*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19f160 | out: ppvObject=0x19f160*=0x6db19c) returned 0x0 [0092.628] IClientSecurity:SetBlanket (This=0x6db19c, pProxy=0x6db198, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0092.629] IUnknown:Release (This=0x6db19c) returned 0x2 [0092.629] WbemLocator:IUnknown:Release (This=0x72b5e8) returned 0x1 [0092.629] CoTaskMemFree (pv=0x740240) [0092.629] IUnknown:QueryInterface (in: This=0x6db198, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed5c | out: ppvObject=0x19ed5c*=0x72b5e8) returned 0x0 [0092.629] WbemLocator:IUnknown:QueryInterface (in: This=0x72b5e8, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19ed18 | out: ppvObject=0x19ed18*=0x0) returned 0x80004002 [0092.630] WbemLocator:IUnknown:QueryInterface (in: This=0x72b5e8, riid=0x6f729bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eb34 | out: ppvObject=0x19eb34*=0x0) returned 0x80004002 [0092.630] IUnknown:QueryInterface (in: This=0x6db198, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e90c | out: ppvObject=0x19e90c*=0x0) returned 0x80004002 [0092.630] WbemLocator:IUnknown:AddRef (This=0x72b5e8) returned 0x3 [0092.630] WbemLocator:IUnknown:QueryInterface (in: This=0x72b5e8, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e66c | out: ppvObject=0x19e66c*=0x0) returned 0x80004002 [0092.630] WbemLocator:IUnknown:QueryInterface (in: This=0x72b5e8, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19e61c | out: ppvObject=0x19e61c*=0x0) returned 0x80004002 [0092.631] WbemLocator:IUnknown:QueryInterface (in: This=0x72b5e8, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e628 | out: ppvObject=0x19e628*=0x72b544) returned 0x0 [0092.631] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x72b544, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x19e630 | out: pCid=0x19e630*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0092.631] WbemLocator:IUnknown:Release (This=0x72b544) returned 0x3 [0092.631] CoGetContextToken (in: pToken=0x19e688 | out: pToken=0x19e688) returned 0x0 [0092.631] CoGetContextToken (in: pToken=0x19ea90 | out: pToken=0x19ea90) returned 0x0 [0092.631] WbemLocator:IUnknown:QueryInterface (in: This=0x72b5e8, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eb1c | out: ppvObject=0x19eb1c*=0x72b5cc) returned 0x0 [0092.631] WbemLocator:IRpcOptions:Query (in: This=0x72b5cc, pPrx=0x72b5e8, dwProperty=2, pdwValue=0x19eb28 | out: pdwValue=0x19eb28) returned 0x80004002 [0092.631] WbemLocator:IUnknown:Release (This=0x72b5cc) returned 0x3 [0092.631] WbemLocator:IUnknown:Release (This=0x72b5e8) returned 0x2 [0092.631] CoGetContextToken (in: pToken=0x19f070 | out: pToken=0x19f070) returned 0x0 [0092.631] CoGetContextToken (in: pToken=0x19efd0 | out: pToken=0x19efd0) returned 0x0 [0092.631] WbemLocator:IUnknown:QueryInterface (in: This=0x72b5e8, riid=0x19f0a0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x19f09c | out: ppvObject=0x19f09c*=0x6db198) returned 0x0 [0092.631] IUnknown:AddRef (This=0x6db198) returned 0x4 [0092.631] IUnknown:Release (This=0x6db198) returned 0x3 [0092.631] IUnknown:Release (This=0x6db198) returned 0x2 [0092.631] IUnknown:Release (This=0x6dba30) returned 0x2 [0092.631] SysStringLen (param_1=0x0) returned 0x0 [0092.631] IEnumWbemClassObject:Reset (This=0x6db198) returned 0x0 [0092.655] CoTaskMemAlloc (cb=0x4) returned 0x74dab0 [0092.655] IEnumWbemClassObject:Next (This=0x6db198, lTimeout=-1, uCount=0x1, apObjects=0x74dab0, puReturned=0x2382c80) Thread: id = 20 os_tid = 0xe68 Thread: id = 21 os_tid = 0xd58 Thread: id = 22 os_tid = 0xe54 [0065.153] CoGetContextToken (in: pToken=0x436fc74 | out: pToken=0x436fc74) returned 0x0 [0065.153] CObjectContext::QueryInterface () returned 0x0 [0065.153] CObjectContext::GetCurrentThreadType () returned 0x0 [0065.154] Release () returned 0x0 [0065.154] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0065.154] RoInitialize () returned 0x1 [0065.154] RoUninitialize () returned 0x0 [0075.673] CloseHandle (hObject=0x278) returned 1 [0075.673] CloseHandle (hObject=0x294) returned 1 [0075.673] CloseHandle (hObject=0x274) returned 1 [0075.673] CloseHandle (hObject=0x284) returned 1 [0075.673] CloseHandle (hObject=0x270) returned 1 [0075.674] CloseHandle (hObject=0x26c) returned 1 [0075.674] CloseHandle (hObject=0x280) returned 1 [0075.674] CloseHandle (hObject=0x290) returned 1 [0075.674] CloseHandle (hObject=0x27c) returned 1 [0075.674] CloseHandle (hObject=0x268) returned 1 [0089.069] CoGetContextToken (in: pToken=0x436fc60 | out: pToken=0x436fc60) returned 0x0 [0089.069] CoGetContextToken (in: pToken=0x436fbe0 | out: pToken=0x436fbe0) returned 0x0 [0089.069] WbemLocator:IUnknown:Release (This=0x72c8e0) returned 0x1 [0089.069] WbemLocator:IUnknown:Release (This=0x72c8e0) returned 0x0 [0089.069] CoGetContextToken (in: pToken=0x436fbe0 | out: pToken=0x436fbe0) returned 0x0 [0089.069] IUnknown:Release (This=0x746fd8) returned 0x2 [0089.069] IUnknown:Release (This=0x746fd8) returned 0x1 [0089.069] CoGetContextToken (in: pToken=0x436fbe0 | out: pToken=0x436fbe0) returned 0x0 [0089.069] WbemLocator:IUnknown:Release (This=0x72c980) returned 0x1 [0089.069] WbemLocator:IUnknown:Release (This=0x72c980) returned 0x0 [0089.069] CoGetContextToken (in: pToken=0x436fbe0 | out: pToken=0x436fbe0) returned 0x0 [0089.069] IUnknown:Release (This=0x74c6d0) returned 0x2 [0089.069] IUnknown:Release (This=0x74c6d0) returned 0x1 [0089.070] CoGetContextToken (in: pToken=0x436faa8 | out: pToken=0x436faa8) returned 0x0 [0089.070] WbemLocator:IUnknown:Release (This=0x72a4e8) returned 0x1 [0089.070] IUnknown:Release (This=0x6db7d8) returned 0x0 [0089.072] CoGetContextToken (in: pToken=0x436faa8 | out: pToken=0x436faa8) returned 0x0 [0089.072] WbemLocator:IUnknown:Release (This=0x72c0e8) returned 0x1 [0089.072] IUnknown:Release (This=0x6dbe18) returned 0x0 [0089.073] IUnknown:Release (This=0x746fd8) returned 0x0 [0089.073] IUnknown:Release (This=0x74c6d0) returned 0x0 [0089.073] CryptDestroyKey (hKey=0x6ca448) returned 1 [0089.073] CryptReleaseContext (hProv=0x6cb650, dwFlags=0x0) returned 1 [0089.073] CryptReleaseContext (hProv=0x6cb650, dwFlags=0x0) returned 1 [0089.073] CryptDestroyKey (hKey=0x6ca1c8) returned 1 [0089.073] CryptReleaseContext (hProv=0x6cadd0, dwFlags=0x0) returned 1 [0089.073] CryptReleaseContext (hProv=0x6cadd0, dwFlags=0x0) returned 1 [0089.074] CryptDestroyKey (hKey=0x6ca088) returned 1 [0089.074] CryptReleaseContext (hProv=0x6cb3a8, dwFlags=0x0) returned 1 [0089.074] CryptReleaseContext (hProv=0x6cb3a8, dwFlags=0x0) returned 1 [0089.074] CryptDestroyKey (hKey=0x6ca008) returned 1 [0089.074] CryptReleaseContext (hProv=0x6cb430, dwFlags=0x0) returned 1 [0089.074] CryptReleaseContext (hProv=0x6cb430, dwFlags=0x0) returned 1 [0089.074] CryptDestroyKey (hKey=0x6c9748) returned 1 [0089.074] CryptReleaseContext (hProv=0x6cb870, dwFlags=0x0) returned 1 [0089.074] CryptReleaseContext (hProv=0x6cb870, dwFlags=0x0) returned 1 [0089.074] CryptDestroyKey (hKey=0x6c9708) returned 1 [0089.074] CryptReleaseContext (hProv=0x6cb188, dwFlags=0x0) returned 1 [0089.074] CryptReleaseContext (hProv=0x6cb188, dwFlags=0x0) returned 1 [0089.075] CryptDestroyKey (hKey=0x6c9f48) returned 1 [0089.075] CryptReleaseContext (hProv=0x6cb298, dwFlags=0x0) returned 1 [0089.075] CryptReleaseContext (hProv=0x6cb298, dwFlags=0x0) returned 1 [0089.075] CryptDestroyKey (hKey=0x6c9648) returned 1 [0089.075] CryptReleaseContext (hProv=0x6cac38, dwFlags=0x0) returned 1 [0089.075] CryptReleaseContext (hProv=0x6cac38, dwFlags=0x0) returned 1 [0089.075] CryptDestroyKey (hKey=0x6c9ac8) returned 1 [0089.075] CryptReleaseContext (hProv=0x6cacc0, dwFlags=0x0) returned 1 [0089.075] CryptReleaseContext (hProv=0x6cacc0, dwFlags=0x0) returned 1 [0089.075] CryptDestroyKey (hKey=0x6c9c88) returned 1 [0089.075] CryptReleaseContext (hProv=0x6cb7e8, dwFlags=0x0) returned 1 [0089.075] CryptReleaseContext (hProv=0x6cb7e8, dwFlags=0x0) returned 1 [0089.076] CryptDestroyKey (hKey=0x6ca2c8) returned 1 [0089.076] CryptReleaseContext (hProv=0x6caff0, dwFlags=0x0) returned 1 [0089.076] CryptReleaseContext (hProv=0x6caff0, dwFlags=0x0) returned 1 [0089.076] CryptDestroyKey (hKey=0x6c9bc8) returned 1 [0089.076] CryptReleaseContext (hProv=0x6caf68, dwFlags=0x0) returned 1 [0089.076] CryptReleaseContext (hProv=0x6caf68, dwFlags=0x0) returned 1 [0089.076] CryptDestroyKey (hKey=0x6c9f88) returned 1 [0089.076] CryptReleaseContext (hProv=0x6cb540, dwFlags=0x0) returned 1 [0089.076] CryptReleaseContext (hProv=0x6cb540, dwFlags=0x0) returned 1 [0089.076] LocalFree (hMem=0x71ab40) returned 0x0 [0089.304] CoGetContextToken (in: pToken=0x436fc60 | out: pToken=0x436fc60) returned 0x0 [0089.304] CoGetContextToken (in: pToken=0x436fbe0 | out: pToken=0x436fbe0) returned 0x0 [0089.304] WbemDefPath:IUnknown:Release (This=0x7291e0) returned 0x1 [0089.304] WbemDefPath:IUnknown:Release (This=0x7291e0) returned 0x0 [0089.304] CoGetContextToken (in: pToken=0x436fbe0 | out: pToken=0x436fbe0) returned 0x0 [0089.304] WbemDefPath:IUnknown:Release (This=0x73acf8) returned 0x1 [0089.304] WbemDefPath:IUnknown:Release (This=0x73acf8) returned 0x0 [0089.304] CoGetContextToken (in: pToken=0x436fbe0 | out: pToken=0x436fbe0) returned 0x0 [0089.304] WbemDefPath:IUnknown:Release (This=0x6d9490) returned 0x1 [0089.304] WbemDefPath:IUnknown:Release (This=0x6d9490) returned 0x0 [0089.304] CoGetContextToken (in: pToken=0x436fbe0 | out: pToken=0x436fbe0) returned 0x0 [0089.304] WbemDefPath:IUnknown:Release (This=0x7499e8) returned 0x1 [0089.304] WbemDefPath:IUnknown:Release (This=0x7499e8) returned 0x0 [0089.304] CoGetContextToken (in: pToken=0x436fc60 | out: pToken=0x436fc60) returned 0x0 [0089.304] CoGetContextToken (in: pToken=0x436fbe0 | out: pToken=0x436fbe0) returned 0x0 [0089.304] WbemLocator:IUnknown:Release (This=0x72aee8) returned 0x1 [0089.304] WbemLocator:IUnknown:Release (This=0x6cd7b0) returned 0x0 [0089.305] CoGetContextToken (in: pToken=0x436fbe0 | out: pToken=0x436fbe0) returned 0x0 [0089.305] WbemLocator:IUnknown:Release (This=0x72b4e8) returned 0x1 [0089.305] WbemLocator:IUnknown:Release (This=0x6af520) returned 0x0 [0089.305] IUnknown:Release (This=0x6bb230) returned 0x0 Thread: id = 34 os_tid = 0xdd8 Thread: id = 35 os_tid = 0x10c0 Thread: id = 36 os_tid = 0x10cc Thread: id = 137 os_tid = 0x5f8 [0091.478] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0091.478] RoInitialize () returned 0x1 [0091.478] RoUninitialize () returned 0x0 [0091.487] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x4b7f404, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d [0091.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8a8) returned 1 [0091.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x4b7f924 | out: lpFileInformation=0x4b7f924*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9b1bad97, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x9b1bad97, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0091.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8a4) returned 1 [0091.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f928) returned 1 [0091.489] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d [0091.490] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\*"), lpFindFileData=0x4b7f650 | out: lpFindFileData=0x4b7f650*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9b1bad97, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x9b1bad97, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9c48 [0091.491] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9b1bad97, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x9b1bad97, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.491] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ed649e0, ftCreationTime.dwHighDateTime=0x1d8ba82, ftLastAccessTime.dwLowDateTime=0xdde77d40, ftLastAccessTime.dwHighDateTime=0x1d8bc54, ftLastWriteTime.dwLowDateTime=0xdde77d40, ftLastWriteTime.dwHighDateTime=0x1d8bc54, nFileSizeHigh=0x0, nFileSizeLow=0x1009f, dwReserved0=0x0, dwReserved1=0x0, cFileName="-6j3wVd6H.wav", cAlternateFileName="-6J3WV~1.WAV")) returned 1 [0091.491] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0fb6300, ftCreationTime.dwHighDateTime=0x1d8b7b8, ftLastAccessTime.dwLowDateTime=0xaa1357d0, ftLastAccessTime.dwHighDateTime=0x1d8b7ce, ftLastWriteTime.dwLowDateTime=0xaa1357d0, ftLastWriteTime.dwHighDateTime=0x1d8b7ce, nFileSizeHigh=0x0, nFileSizeLow=0x3401, dwReserved0=0x0, dwReserved1=0x0, cFileName="2yaTsjufwmYx.bmp", cAlternateFileName="2YATSJ~1.BMP")) returned 1 [0091.491] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8179fc40, ftCreationTime.dwHighDateTime=0x1d8b81c, ftLastAccessTime.dwLowDateTime=0x1c74a8d0, ftLastAccessTime.dwHighDateTime=0x1d8ba7f, ftLastWriteTime.dwLowDateTime=0x1c74a8d0, ftLastWriteTime.dwHighDateTime=0x1d8ba7f, nFileSizeHigh=0x0, nFileSizeLow=0x1104b, dwReserved0=0x0, dwReserved1=0x0, cFileName="5nZcfaMBhgu2LD.flv", cAlternateFileName="5NZCFA~1.FLV")) returned 1 [0091.491] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83291b80, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0x83291b80, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x1e69c300, ftLastWriteTime.dwHighDateTime=0x1d92b86, nFileSizeHigh=0x0, nFileSizeLow=0x53e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe", cAlternateFileName="82ACC1~1.EXE")) returned 1 [0091.492] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9468f3b0, ftCreationTime.dwHighDateTime=0x1d8b8e4, ftLastAccessTime.dwLowDateTime=0x16c9c580, ftLastAccessTime.dwHighDateTime=0x1d8b9b9, ftLastWriteTime.dwLowDateTime=0x16c9c580, ftLastWriteTime.dwHighDateTime=0x1d8b9b9, nFileSizeHigh=0x0, nFileSizeLow=0x17e1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Bco.avi", cAlternateFileName="")) returned 1 [0091.492] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda8992f0, ftCreationTime.dwHighDateTime=0x1d8b777, ftLastAccessTime.dwLowDateTime=0xe32b5830, ftLastAccessTime.dwHighDateTime=0x1d8bd58, ftLastWriteTime.dwLowDateTime=0xe32b5830, ftLastWriteTime.dwHighDateTime=0x1d8bd58, nFileSizeHigh=0x0, nFileSizeLow=0xaa7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="9tqipBAM.m4a", cAlternateFileName="")) returned 1 [0091.492] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcac9fcd0, ftCreationTime.dwHighDateTime=0x1d8b5db, ftLastAccessTime.dwLowDateTime=0xaaa97110, ftLastAccessTime.dwHighDateTime=0x1d8bdd3, ftLastWriteTime.dwLowDateTime=0xaaa97110, ftLastWriteTime.dwHighDateTime=0x1d8bdd3, nFileSizeHigh=0x0, nFileSizeLow=0x18f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chh7tG4ZOOPfle3.png", cAlternateFileName="CHH7TG~1.PNG")) returned 1 [0091.492] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e0dddf0, ftCreationTime.dwHighDateTime=0x1d8bd4d, ftLastAccessTime.dwLowDateTime=0x113a3390, ftLastAccessTime.dwHighDateTime=0x1d8c060, ftLastWriteTime.dwLowDateTime=0x113a3390, ftLastWriteTime.dwHighDateTime=0x1d8c060, nFileSizeHigh=0x0, nFileSizeLow=0x310c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cib-t5wDlO7eTKCnU2.swf", cAlternateFileName="CIB-T5~1.SWF")) returned 1 [0091.492] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24ff58a0, ftCreationTime.dwHighDateTime=0x1d8bbf7, ftLastAccessTime.dwLowDateTime=0xaea43270, ftLastAccessTime.dwHighDateTime=0x1d8c051, ftLastWriteTime.dwLowDateTime=0xaea43270, ftLastWriteTime.dwHighDateTime=0x1d8c051, nFileSizeHigh=0x0, nFileSizeLow=0x65b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CpGUjN4mN5ak.wav", cAlternateFileName="CPGUJN~1.WAV")) returned 1 [0091.492] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.493] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93b0cf40, ftCreationTime.dwHighDateTime=0x1d8b88c, ftLastAccessTime.dwLowDateTime=0xc913fdc0, ftLastAccessTime.dwHighDateTime=0x1d8ba20, ftLastWriteTime.dwLowDateTime=0xc913fdc0, ftLastWriteTime.dwHighDateTime=0x1d8ba20, nFileSizeHigh=0x0, nFileSizeLow=0x14a4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="eUlg.ods", cAlternateFileName="")) returned 1 [0091.493] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6110a880, ftCreationTime.dwHighDateTime=0x1d8bb02, ftLastAccessTime.dwLowDateTime=0xbebbc8c0, ftLastAccessTime.dwHighDateTime=0x1d8c0de, ftLastWriteTime.dwLowDateTime=0xbebbc8c0, ftLastWriteTime.dwHighDateTime=0x1d8c0de, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="FYJ1.pptx", cAlternateFileName="FYJ1~1.PPT")) returned 1 [0091.493] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52e375c0, ftCreationTime.dwHighDateTime=0x1d8c107, ftLastAccessTime.dwLowDateTime=0x53360b20, ftLastAccessTime.dwHighDateTime=0x1d8c11e, ftLastWriteTime.dwLowDateTime=0x53360b20, ftLastWriteTime.dwHighDateTime=0x1d8c11e, nFileSizeHigh=0x0, nFileSizeLow=0x849e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HJDXtUSQzN.odp", cAlternateFileName="HJDXTU~1.ODP")) returned 1 [0091.493] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmKLkObpH51ed_", cAlternateFileName="HMKLKO~1")) returned 1 [0091.493] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95d451f0, ftCreationTime.dwHighDateTime=0x1d8bcb2, ftLastAccessTime.dwLowDateTime=0x3e5310e0, ftLastAccessTime.dwHighDateTime=0x1d8bdae, ftLastWriteTime.dwLowDateTime=0x3e5310e0, ftLastWriteTime.dwHighDateTime=0x1d8bdae, nFileSizeHigh=0x0, nFileSizeLow=0x13469, dwReserved0=0x0, dwReserved1=0x0, cFileName="iLq3zNHP1Bvq2jgkzC.swf", cAlternateFileName="ILQ3ZN~1.SWF")) returned 1 [0091.494] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7197bc0, ftCreationTime.dwHighDateTime=0x1d8b7ad, ftLastAccessTime.dwLowDateTime=0xcea29ec0, ftLastAccessTime.dwHighDateTime=0x1d8ba9f, ftLastWriteTime.dwLowDateTime=0xcea29ec0, ftLastWriteTime.dwHighDateTime=0x1d8ba9f, nFileSizeHigh=0x0, nFileSizeLow=0x29eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="irK2.png", cAlternateFileName="")) returned 1 [0091.494] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe882b260, ftCreationTime.dwHighDateTime=0x1d8b93e, ftLastAccessTime.dwLowDateTime=0x55ed7ad0, ftLastAccessTime.dwHighDateTime=0x1d8ba4b, ftLastWriteTime.dwLowDateTime=0x55ed7ad0, ftLastWriteTime.dwHighDateTime=0x1d8ba4b, nFileSizeHigh=0x0, nFileSizeLow=0x53c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="knJlrMn.jpg", cAlternateFileName="")) returned 1 [0091.494] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406f8380, ftCreationTime.dwHighDateTime=0x1d8b5f3, ftLastAccessTime.dwLowDateTime=0x36788730, ftLastAccessTime.dwHighDateTime=0x1d8bb86, ftLastWriteTime.dwLowDateTime=0x36788730, ftLastWriteTime.dwHighDateTime=0x1d8bb86, nFileSizeHigh=0x0, nFileSizeLow=0x4cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="L18V.ods", cAlternateFileName="")) returned 1 [0091.494] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e94e0, ftCreationTime.dwHighDateTime=0x1d8b31e, ftLastAccessTime.dwLowDateTime=0xf98eff50, ftLastAccessTime.dwHighDateTime=0x1d8bf65, ftLastWriteTime.dwLowDateTime=0xf98eff50, ftLastWriteTime.dwHighDateTime=0x1d8bf65, nFileSizeHigh=0x0, nFileSizeLow=0xde75, dwReserved0=0x0, dwReserved1=0x0, cFileName="mGLbr8EHVJwWvBHC.mp3", cAlternateFileName="MGLBR8~1.MP3")) returned 1 [0091.494] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2085c7f0, ftCreationTime.dwHighDateTime=0x1d8b6d4, ftLastAccessTime.dwLowDateTime=0xc9273680, ftLastAccessTime.dwHighDateTime=0x1d8bbb3, ftLastWriteTime.dwLowDateTime=0xc9273680, ftLastWriteTime.dwHighDateTime=0x1d8bbb3, nFileSizeHigh=0x0, nFileSizeLow=0xa6b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MgsHDnP3Ixv1ZL.mp3", cAlternateFileName="MGSHDN~1.MP3")) returned 1 [0091.494] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1622410, ftCreationTime.dwHighDateTime=0x1d8b29b, ftLastAccessTime.dwLowDateTime=0x203e2830, ftLastAccessTime.dwHighDateTime=0x1d8ba64, ftLastWriteTime.dwLowDateTime=0x203e2830, ftLastWriteTime.dwHighDateTime=0x1d8ba64, nFileSizeHigh=0x0, nFileSizeLow=0x17703, dwReserved0=0x0, dwReserved1=0x0, cFileName="nsIVnWY.png", cAlternateFileName="")) returned 1 [0091.494] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6bbbb10, ftCreationTime.dwHighDateTime=0x1d8b776, ftLastAccessTime.dwLowDateTime=0x9d1ca770, ftLastAccessTime.dwHighDateTime=0x1d8b92c, ftLastWriteTime.dwLowDateTime=0x9d1ca770, ftLastWriteTime.dwHighDateTime=0x1d8b92c, nFileSizeHigh=0x0, nFileSizeLow=0xb566, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmYoSoLSWK_urmMNr1Bb.flv", cAlternateFileName="SMYOSO~1.FLV")) returned 1 [0091.495] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37934860, ftCreationTime.dwHighDateTime=0x1d8b1f6, ftLastAccessTime.dwLowDateTime=0x1b53c930, ftLastAccessTime.dwHighDateTime=0x1d8b742, ftLastWriteTime.dwLowDateTime=0x1b53c930, ftLastWriteTime.dwHighDateTime=0x1d8b742, nFileSizeHigh=0x0, nFileSizeLow=0x11ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="tftcjhfP.m4a", cAlternateFileName="")) returned 1 [0091.495] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb43f9c60, ftCreationTime.dwHighDateTime=0x1d8b3e5, ftLastAccessTime.dwLowDateTime=0x166bae30, ftLastAccessTime.dwHighDateTime=0x1d8baf1, ftLastWriteTime.dwLowDateTime=0x166bae30, ftLastWriteTime.dwHighDateTime=0x1d8baf1, nFileSizeHigh=0x0, nFileSizeLow=0x177ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="TPZCYP.wav", cAlternateFileName="")) returned 1 [0091.495] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cb842b0, ftCreationTime.dwHighDateTime=0x1d8bdf4, ftLastAccessTime.dwLowDateTime=0xce3e2fd0, ftLastAccessTime.dwHighDateTime=0x1d8bffe, ftLastWriteTime.dwLowDateTime=0xce3e2fd0, ftLastWriteTime.dwHighDateTime=0x1d8bffe, nFileSizeHigh=0x0, nFileSizeLow=0x24e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uz lX.flv", cAlternateFileName="UZLX~1.FLV")) returned 1 [0091.495] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a7a9470, ftCreationTime.dwHighDateTime=0x1d8c09c, ftLastAccessTime.dwLowDateTime=0x6725f750, ftLastAccessTime.dwHighDateTime=0x1d8c0b3, ftLastWriteTime.dwLowDateTime=0x6725f750, ftLastWriteTime.dwHighDateTime=0x1d8c0b3, nFileSizeHigh=0x0, nFileSizeLow=0x47f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ve Adh4F7cSMF.swf", cAlternateFileName="VEADH4~1.SWF")) returned 1 [0091.495] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x982c8420, ftCreationTime.dwHighDateTime=0x1d8c123, ftLastAccessTime.dwLowDateTime=0xb3f47f60, ftLastAccessTime.dwHighDateTime=0x1d8c127, ftLastWriteTime.dwLowDateTime=0xb3f47f60, ftLastWriteTime.dwHighDateTime=0x1d8c127, nFileSizeHigh=0x0, nFileSizeLow=0x53df, dwReserved0=0x0, dwReserved1=0x0, cFileName="vHaRBzu.bmp", cAlternateFileName="")) returned 1 [0091.495] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb438f9e0, ftCreationTime.dwHighDateTime=0x1d8b26a, ftLastAccessTime.dwLowDateTime=0xe816cce0, ftLastAccessTime.dwHighDateTime=0x1d8b37a, ftLastWriteTime.dwLowDateTime=0xe816cce0, ftLastWriteTime.dwHighDateTime=0x1d8b37a, nFileSizeHigh=0x0, nFileSizeLow=0x15c1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="vPTw68y.flv", cAlternateFileName="")) returned 1 [0091.496] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20202850, ftCreationTime.dwHighDateTime=0x1d8b6d4, ftLastAccessTime.dwLowDateTime=0x9edd100, ftLastAccessTime.dwHighDateTime=0x1d8c065, ftLastWriteTime.dwLowDateTime=0x9edd100, ftLastWriteTime.dwHighDateTime=0x1d8c065, nFileSizeHigh=0x0, nFileSizeLow=0x17dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbS7-JwT.flv", cAlternateFileName="")) returned 1 [0091.496] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20202850, ftCreationTime.dwHighDateTime=0x1d8b6d4, ftLastAccessTime.dwLowDateTime=0x9edd100, ftLastAccessTime.dwHighDateTime=0x1d8c065, ftLastWriteTime.dwLowDateTime=0x9edd100, ftLastWriteTime.dwHighDateTime=0x1d8c065, nFileSizeHigh=0x0, nFileSizeLow=0x17dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbS7-JwT.flv", cAlternateFileName="")) returned 0 [0091.496] FindClose (in: hFindFile=0x6c9c48 | out: hFindFile=0x6c9c48) returned 1 [0091.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8e4) returned 1 [0091.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8f0) returned 1 [0091.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f928) returned 1 [0091.496] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d [0091.496] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\*"), lpFindFileData=0x4b7f650 | out: lpFindFileData=0x4b7f650*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9b1bad97, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x9b1bad97, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9c48 [0091.496] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9b1bad97, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x9b1bad97, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.497] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ed649e0, ftCreationTime.dwHighDateTime=0x1d8ba82, ftLastAccessTime.dwLowDateTime=0xdde77d40, ftLastAccessTime.dwHighDateTime=0x1d8bc54, ftLastWriteTime.dwLowDateTime=0xdde77d40, ftLastWriteTime.dwHighDateTime=0x1d8bc54, nFileSizeHigh=0x0, nFileSizeLow=0x1009f, dwReserved0=0x0, dwReserved1=0x0, cFileName="-6j3wVd6H.wav", cAlternateFileName="-6J3WV~1.WAV")) returned 1 [0091.497] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0fb6300, ftCreationTime.dwHighDateTime=0x1d8b7b8, ftLastAccessTime.dwLowDateTime=0xaa1357d0, ftLastAccessTime.dwHighDateTime=0x1d8b7ce, ftLastWriteTime.dwLowDateTime=0xaa1357d0, ftLastWriteTime.dwHighDateTime=0x1d8b7ce, nFileSizeHigh=0x0, nFileSizeLow=0x3401, dwReserved0=0x0, dwReserved1=0x0, cFileName="2yaTsjufwmYx.bmp", cAlternateFileName="2YATSJ~1.BMP")) returned 1 [0091.497] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8179fc40, ftCreationTime.dwHighDateTime=0x1d8b81c, ftLastAccessTime.dwLowDateTime=0x1c74a8d0, ftLastAccessTime.dwHighDateTime=0x1d8ba7f, ftLastWriteTime.dwLowDateTime=0x1c74a8d0, ftLastWriteTime.dwHighDateTime=0x1d8ba7f, nFileSizeHigh=0x0, nFileSizeLow=0x1104b, dwReserved0=0x0, dwReserved1=0x0, cFileName="5nZcfaMBhgu2LD.flv", cAlternateFileName="5NZCFA~1.FLV")) returned 1 [0091.497] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83291b80, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0x83291b80, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x1e69c300, ftLastWriteTime.dwHighDateTime=0x1d92b86, nFileSizeHigh=0x0, nFileSizeLow=0x53e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe", cAlternateFileName="82ACC1~1.EXE")) returned 1 [0091.497] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9468f3b0, ftCreationTime.dwHighDateTime=0x1d8b8e4, ftLastAccessTime.dwLowDateTime=0x16c9c580, ftLastAccessTime.dwHighDateTime=0x1d8b9b9, ftLastWriteTime.dwLowDateTime=0x16c9c580, ftLastWriteTime.dwHighDateTime=0x1d8b9b9, nFileSizeHigh=0x0, nFileSizeLow=0x17e1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Bco.avi", cAlternateFileName="")) returned 1 [0091.497] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda8992f0, ftCreationTime.dwHighDateTime=0x1d8b777, ftLastAccessTime.dwLowDateTime=0xe32b5830, ftLastAccessTime.dwHighDateTime=0x1d8bd58, ftLastWriteTime.dwLowDateTime=0xe32b5830, ftLastWriteTime.dwHighDateTime=0x1d8bd58, nFileSizeHigh=0x0, nFileSizeLow=0xaa7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="9tqipBAM.m4a", cAlternateFileName="")) returned 1 [0091.497] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcac9fcd0, ftCreationTime.dwHighDateTime=0x1d8b5db, ftLastAccessTime.dwLowDateTime=0xaaa97110, ftLastAccessTime.dwHighDateTime=0x1d8bdd3, ftLastWriteTime.dwLowDateTime=0xaaa97110, ftLastWriteTime.dwHighDateTime=0x1d8bdd3, nFileSizeHigh=0x0, nFileSizeLow=0x18f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chh7tG4ZOOPfle3.png", cAlternateFileName="CHH7TG~1.PNG")) returned 1 [0091.498] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e0dddf0, ftCreationTime.dwHighDateTime=0x1d8bd4d, ftLastAccessTime.dwLowDateTime=0x113a3390, ftLastAccessTime.dwHighDateTime=0x1d8c060, ftLastWriteTime.dwLowDateTime=0x113a3390, ftLastWriteTime.dwHighDateTime=0x1d8c060, nFileSizeHigh=0x0, nFileSizeLow=0x310c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cib-t5wDlO7eTKCnU2.swf", cAlternateFileName="CIB-T5~1.SWF")) returned 1 [0091.498] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24ff58a0, ftCreationTime.dwHighDateTime=0x1d8bbf7, ftLastAccessTime.dwLowDateTime=0xaea43270, ftLastAccessTime.dwHighDateTime=0x1d8c051, ftLastWriteTime.dwLowDateTime=0xaea43270, ftLastWriteTime.dwHighDateTime=0x1d8c051, nFileSizeHigh=0x0, nFileSizeLow=0x65b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CpGUjN4mN5ak.wav", cAlternateFileName="CPGUJN~1.WAV")) returned 1 [0091.498] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.498] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93b0cf40, ftCreationTime.dwHighDateTime=0x1d8b88c, ftLastAccessTime.dwLowDateTime=0xc913fdc0, ftLastAccessTime.dwHighDateTime=0x1d8ba20, ftLastWriteTime.dwLowDateTime=0xc913fdc0, ftLastWriteTime.dwHighDateTime=0x1d8ba20, nFileSizeHigh=0x0, nFileSizeLow=0x14a4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="eUlg.ods", cAlternateFileName="")) returned 1 [0091.498] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6110a880, ftCreationTime.dwHighDateTime=0x1d8bb02, ftLastAccessTime.dwLowDateTime=0xbebbc8c0, ftLastAccessTime.dwHighDateTime=0x1d8c0de, ftLastWriteTime.dwLowDateTime=0xbebbc8c0, ftLastWriteTime.dwHighDateTime=0x1d8c0de, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="FYJ1.pptx", cAlternateFileName="FYJ1~1.PPT")) returned 1 [0091.498] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52e375c0, ftCreationTime.dwHighDateTime=0x1d8c107, ftLastAccessTime.dwLowDateTime=0x53360b20, ftLastAccessTime.dwHighDateTime=0x1d8c11e, ftLastWriteTime.dwLowDateTime=0x53360b20, ftLastWriteTime.dwHighDateTime=0x1d8c11e, nFileSizeHigh=0x0, nFileSizeLow=0x849e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HJDXtUSQzN.odp", cAlternateFileName="HJDXTU~1.ODP")) returned 1 [0091.498] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmKLkObpH51ed_", cAlternateFileName="HMKLKO~1")) returned 1 [0091.499] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95d451f0, ftCreationTime.dwHighDateTime=0x1d8bcb2, ftLastAccessTime.dwLowDateTime=0x3e5310e0, ftLastAccessTime.dwHighDateTime=0x1d8bdae, ftLastWriteTime.dwLowDateTime=0x3e5310e0, ftLastWriteTime.dwHighDateTime=0x1d8bdae, nFileSizeHigh=0x0, nFileSizeLow=0x13469, dwReserved0=0x0, dwReserved1=0x0, cFileName="iLq3zNHP1Bvq2jgkzC.swf", cAlternateFileName="ILQ3ZN~1.SWF")) returned 1 [0091.499] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7197bc0, ftCreationTime.dwHighDateTime=0x1d8b7ad, ftLastAccessTime.dwLowDateTime=0xcea29ec0, ftLastAccessTime.dwHighDateTime=0x1d8ba9f, ftLastWriteTime.dwLowDateTime=0xcea29ec0, ftLastWriteTime.dwHighDateTime=0x1d8ba9f, nFileSizeHigh=0x0, nFileSizeLow=0x29eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="irK2.png", cAlternateFileName="")) returned 1 [0091.499] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe882b260, ftCreationTime.dwHighDateTime=0x1d8b93e, ftLastAccessTime.dwLowDateTime=0x55ed7ad0, ftLastAccessTime.dwHighDateTime=0x1d8ba4b, ftLastWriteTime.dwLowDateTime=0x55ed7ad0, ftLastWriteTime.dwHighDateTime=0x1d8ba4b, nFileSizeHigh=0x0, nFileSizeLow=0x53c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="knJlrMn.jpg", cAlternateFileName="")) returned 1 [0091.499] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406f8380, ftCreationTime.dwHighDateTime=0x1d8b5f3, ftLastAccessTime.dwLowDateTime=0x36788730, ftLastAccessTime.dwHighDateTime=0x1d8bb86, ftLastWriteTime.dwLowDateTime=0x36788730, ftLastWriteTime.dwHighDateTime=0x1d8bb86, nFileSizeHigh=0x0, nFileSizeLow=0x4cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="L18V.ods", cAlternateFileName="")) returned 1 [0091.499] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e94e0, ftCreationTime.dwHighDateTime=0x1d8b31e, ftLastAccessTime.dwLowDateTime=0xf98eff50, ftLastAccessTime.dwHighDateTime=0x1d8bf65, ftLastWriteTime.dwLowDateTime=0xf98eff50, ftLastWriteTime.dwHighDateTime=0x1d8bf65, nFileSizeHigh=0x0, nFileSizeLow=0xde75, dwReserved0=0x0, dwReserved1=0x0, cFileName="mGLbr8EHVJwWvBHC.mp3", cAlternateFileName="MGLBR8~1.MP3")) returned 1 [0091.499] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2085c7f0, ftCreationTime.dwHighDateTime=0x1d8b6d4, ftLastAccessTime.dwLowDateTime=0xc9273680, ftLastAccessTime.dwHighDateTime=0x1d8bbb3, ftLastWriteTime.dwLowDateTime=0xc9273680, ftLastWriteTime.dwHighDateTime=0x1d8bbb3, nFileSizeHigh=0x0, nFileSizeLow=0xa6b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MgsHDnP3Ixv1ZL.mp3", cAlternateFileName="MGSHDN~1.MP3")) returned 1 [0091.499] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1622410, ftCreationTime.dwHighDateTime=0x1d8b29b, ftLastAccessTime.dwLowDateTime=0x203e2830, ftLastAccessTime.dwHighDateTime=0x1d8ba64, ftLastWriteTime.dwLowDateTime=0x203e2830, ftLastWriteTime.dwHighDateTime=0x1d8ba64, nFileSizeHigh=0x0, nFileSizeLow=0x17703, dwReserved0=0x0, dwReserved1=0x0, cFileName="nsIVnWY.png", cAlternateFileName="")) returned 1 [0091.500] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6bbbb10, ftCreationTime.dwHighDateTime=0x1d8b776, ftLastAccessTime.dwLowDateTime=0x9d1ca770, ftLastAccessTime.dwHighDateTime=0x1d8b92c, ftLastWriteTime.dwLowDateTime=0x9d1ca770, ftLastWriteTime.dwHighDateTime=0x1d8b92c, nFileSizeHigh=0x0, nFileSizeLow=0xb566, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmYoSoLSWK_urmMNr1Bb.flv", cAlternateFileName="SMYOSO~1.FLV")) returned 1 [0091.500] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37934860, ftCreationTime.dwHighDateTime=0x1d8b1f6, ftLastAccessTime.dwLowDateTime=0x1b53c930, ftLastAccessTime.dwHighDateTime=0x1d8b742, ftLastWriteTime.dwLowDateTime=0x1b53c930, ftLastWriteTime.dwHighDateTime=0x1d8b742, nFileSizeHigh=0x0, nFileSizeLow=0x11ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="tftcjhfP.m4a", cAlternateFileName="")) returned 1 [0091.500] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb43f9c60, ftCreationTime.dwHighDateTime=0x1d8b3e5, ftLastAccessTime.dwLowDateTime=0x166bae30, ftLastAccessTime.dwHighDateTime=0x1d8baf1, ftLastWriteTime.dwLowDateTime=0x166bae30, ftLastWriteTime.dwHighDateTime=0x1d8baf1, nFileSizeHigh=0x0, nFileSizeLow=0x177ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="TPZCYP.wav", cAlternateFileName="")) returned 1 [0091.500] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cb842b0, ftCreationTime.dwHighDateTime=0x1d8bdf4, ftLastAccessTime.dwLowDateTime=0xce3e2fd0, ftLastAccessTime.dwHighDateTime=0x1d8bffe, ftLastWriteTime.dwLowDateTime=0xce3e2fd0, ftLastWriteTime.dwHighDateTime=0x1d8bffe, nFileSizeHigh=0x0, nFileSizeLow=0x24e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uz lX.flv", cAlternateFileName="UZLX~1.FLV")) returned 1 [0091.500] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a7a9470, ftCreationTime.dwHighDateTime=0x1d8c09c, ftLastAccessTime.dwLowDateTime=0x6725f750, ftLastAccessTime.dwHighDateTime=0x1d8c0b3, ftLastWriteTime.dwLowDateTime=0x6725f750, ftLastWriteTime.dwHighDateTime=0x1d8c0b3, nFileSizeHigh=0x0, nFileSizeLow=0x47f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ve Adh4F7cSMF.swf", cAlternateFileName="VEADH4~1.SWF")) returned 1 [0091.500] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x982c8420, ftCreationTime.dwHighDateTime=0x1d8c123, ftLastAccessTime.dwLowDateTime=0xb3f47f60, ftLastAccessTime.dwHighDateTime=0x1d8c127, ftLastWriteTime.dwLowDateTime=0xb3f47f60, ftLastWriteTime.dwHighDateTime=0x1d8c127, nFileSizeHigh=0x0, nFileSizeLow=0x53df, dwReserved0=0x0, dwReserved1=0x0, cFileName="vHaRBzu.bmp", cAlternateFileName="")) returned 1 [0091.500] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb438f9e0, ftCreationTime.dwHighDateTime=0x1d8b26a, ftLastAccessTime.dwLowDateTime=0xe816cce0, ftLastAccessTime.dwHighDateTime=0x1d8b37a, ftLastWriteTime.dwLowDateTime=0xe816cce0, ftLastWriteTime.dwHighDateTime=0x1d8b37a, nFileSizeHigh=0x0, nFileSizeLow=0x15c1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="vPTw68y.flv", cAlternateFileName="")) returned 1 [0091.500] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20202850, ftCreationTime.dwHighDateTime=0x1d8b6d4, ftLastAccessTime.dwLowDateTime=0x9edd100, ftLastAccessTime.dwHighDateTime=0x1d8c065, ftLastWriteTime.dwLowDateTime=0x9edd100, ftLastWriteTime.dwHighDateTime=0x1d8c065, nFileSizeHigh=0x0, nFileSizeLow=0x17dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbS7-JwT.flv", cAlternateFileName="")) returned 1 [0091.501] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4b7f65c | out: lpFindFileData=0x4b7f65c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.501] FindClose (in: hFindFile=0x6c9c48 | out: hFindFile=0x6c9c48) returned 1 [0091.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8e4) returned 1 [0091.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8f0) returned 1 [0091.604] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-6j3wVd6H.wav", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-6j3wVd6H.wav", lpFilePart=0x0) returned 0x2b [0091.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-6j3wVd6H.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-6j3wvd6h.wav"), fInfoLevelId=0x0, lpFileInformation=0x226dd44 | out: lpFileInformation=0x226dd44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ed649e0, ftCreationTime.dwHighDateTime=0x1d8ba82, ftLastAccessTime.dwLowDateTime=0xdde77d40, ftLastAccessTime.dwHighDateTime=0x1d8bc54, ftLastWriteTime.dwLowDateTime=0xdde77d40, ftLastWriteTime.dwHighDateTime=0x1d8bc54, nFileSizeHigh=0x0, nFileSizeLow=0x1009f)) returned 1 [0091.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.604] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\2yaTsjufwmYx.bmp", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\2yaTsjufwmYx.bmp", lpFilePart=0x0) returned 0x2e [0091.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\2yaTsjufwmYx.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\2yatsjufwmyx.bmp"), fInfoLevelId=0x0, lpFileInformation=0x226de14 | out: lpFileInformation=0x226de14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0fb6300, ftCreationTime.dwHighDateTime=0x1d8b7b8, ftLastAccessTime.dwLowDateTime=0xaa1357d0, ftLastAccessTime.dwHighDateTime=0x1d8b7ce, ftLastWriteTime.dwLowDateTime=0xaa1357d0, ftLastWriteTime.dwHighDateTime=0x1d8b7ce, nFileSizeHigh=0x0, nFileSizeLow=0x3401)) returned 1 [0091.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.605] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\5nZcfaMBhgu2LD.flv", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\5nZcfaMBhgu2LD.flv", lpFilePart=0x0) returned 0x30 [0091.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\5nZcfaMBhgu2LD.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\5nzcfambhgu2ld.flv"), fInfoLevelId=0x0, lpFileInformation=0x226def4 | out: lpFileInformation=0x226def4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8179fc40, ftCreationTime.dwHighDateTime=0x1d8b81c, ftLastAccessTime.dwLowDateTime=0x1c74a8d0, ftLastAccessTime.dwHighDateTime=0x1d8ba7f, ftLastWriteTime.dwLowDateTime=0x1c74a8d0, ftLastWriteTime.dwHighDateTime=0x1d8ba7f, nFileSizeHigh=0x0, nFileSizeLow=0x1104b)) returned 1 [0091.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.605] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe", lpFilePart=0x0) returned 0x62 [0091.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe"), fInfoLevelId=0x0, lpFileInformation=0x226dfdc | out: lpFileInformation=0x226dfdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83291b80, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0x83291b80, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x1e69c300, ftLastWriteTime.dwHighDateTime=0x1d92b86, nFileSizeHigh=0x0, nFileSizeLow=0x53e00)) returned 1 [0091.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.606] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9Bco.avi", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9Bco.avi", lpFilePart=0x0) returned 0x26 [0091.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9Bco.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\9bco.avi"), fInfoLevelId=0x0, lpFileInformation=0x226e18c | out: lpFileInformation=0x226e18c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9468f3b0, ftCreationTime.dwHighDateTime=0x1d8b8e4, ftLastAccessTime.dwLowDateTime=0x16c9c580, ftLastAccessTime.dwHighDateTime=0x1d8b9b9, ftLastWriteTime.dwLowDateTime=0x16c9c580, ftLastWriteTime.dwHighDateTime=0x1d8b9b9, nFileSizeHigh=0x0, nFileSizeLow=0x17e1a)) returned 1 [0091.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.606] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9tqipBAM.m4a", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9tqipBAM.m4a", lpFilePart=0x0) returned 0x2a [0091.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9tqipBAM.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\9tqipbam.m4a"), fInfoLevelId=0x0, lpFileInformation=0x226e24c | out: lpFileInformation=0x226e24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda8992f0, ftCreationTime.dwHighDateTime=0x1d8b777, ftLastAccessTime.dwLowDateTime=0xe32b5830, ftLastAccessTime.dwHighDateTime=0x1d8bd58, ftLastWriteTime.dwLowDateTime=0xe32b5830, ftLastWriteTime.dwHighDateTime=0x1d8bd58, nFileSizeHigh=0x0, nFileSizeLow=0xaa7d)) returned 1 [0091.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.606] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\chh7tG4ZOOPfle3.png", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\chh7tG4ZOOPfle3.png", lpFilePart=0x0) returned 0x31 [0091.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\chh7tG4ZOOPfle3.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\chh7tg4zoopfle3.png"), fInfoLevelId=0x0, lpFileInformation=0x226e31c | out: lpFileInformation=0x226e31c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcac9fcd0, ftCreationTime.dwHighDateTime=0x1d8b5db, ftLastAccessTime.dwLowDateTime=0xaaa97110, ftLastAccessTime.dwHighDateTime=0x1d8bdd3, ftLastWriteTime.dwLowDateTime=0xaaa97110, ftLastWriteTime.dwHighDateTime=0x1d8bdd3, nFileSizeHigh=0x0, nFileSizeLow=0x18f7f)) returned 1 [0091.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.607] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cib-t5wDlO7eTKCnU2.swf", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cib-t5wDlO7eTKCnU2.swf", lpFilePart=0x0) returned 0x34 [0091.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cib-t5wDlO7eTKCnU2.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cib-t5wdlo7etkcnu2.swf"), fInfoLevelId=0x0, lpFileInformation=0x226e404 | out: lpFileInformation=0x226e404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e0dddf0, ftCreationTime.dwHighDateTime=0x1d8bd4d, ftLastAccessTime.dwLowDateTime=0x113a3390, ftLastAccessTime.dwHighDateTime=0x1d8c060, ftLastWriteTime.dwLowDateTime=0x113a3390, ftLastWriteTime.dwHighDateTime=0x1d8c060, nFileSizeHigh=0x0, nFileSizeLow=0x310c)) returned 1 [0091.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.607] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\CpGUjN4mN5ak.wav", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\CpGUjN4mN5ak.wav", lpFilePart=0x0) returned 0x2e [0091.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\CpGUjN4mN5ak.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cpgujn4mn5ak.wav"), fInfoLevelId=0x0, lpFileInformation=0x226e4fc | out: lpFileInformation=0x226e4fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24ff58a0, ftCreationTime.dwHighDateTime=0x1d8bbf7, ftLastAccessTime.dwLowDateTime=0xaea43270, ftLastAccessTime.dwHighDateTime=0x1d8c051, ftLastWriteTime.dwLowDateTime=0xaea43270, ftLastWriteTime.dwHighDateTime=0x1d8c051, nFileSizeHigh=0x0, nFileSizeLow=0x65b8)) returned 1 [0091.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.608] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0091.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x226e5dc | out: lpFileInformation=0x226e5dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0091.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.658] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x4b7f3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x89 [0091.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f888) returned 1 [0091.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x4b7f904 | out: lpFileInformation=0x4b7f904*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f884) returned 1 [0091.658] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x89 [0091.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f818) returned 1 [0091.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x4b7f894 | out: lpFileInformation=0x4b7f894*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f814) returned 1 [0091.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f818) returned 1 [0091.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x4b7f894 | out: lpFileInformation=0x4b7f894*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f814) returned 1 [0091.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f818) returned 1 [0091.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx"), fInfoLevelId=0x0, lpFileInformation=0x4b7f894 | out: lpFileInformation=0x4b7f894*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f814) returned 1 [0091.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f818) returned 1 [0091.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users"), fInfoLevelId=0x0, lpFileInformation=0x4b7f894 | out: lpFileInformation=0x4b7f894*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f814) returned 1 [0091.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f818) returned 1 [0091.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c"), fInfoLevelId=0x0, lpFileInformation=0x4b7f894 | out: lpFileInformation=0x4b7f894*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f814) returned 1 [0091.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f818) returned 1 [0091.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber"), fInfoLevelId=0x0, lpFileInformation=0x4b7f894 | out: lpFileInformation=0x4b7f894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcc7df3c, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbcc7df3c, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbcc7df3c, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f814) returned 1 [0091.659] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c"), lpSecurityAttributes=0x0) returned 1 [0091.660] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users"), lpSecurityAttributes=0x0) returned 1 [0091.660] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx"), lpSecurityAttributes=0x0) returned 1 [0091.660] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\desktop"), lpSecurityAttributes=0x0) returned 1 [0091.662] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4b7f3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0091.662] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4b7f3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x95 [0091.662] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\desktop\\desktop.ini"), bFailIfExists=0) returned 1 [0091.752] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\eUlg.ods", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\eUlg.ods", lpFilePart=0x0) returned 0x26 [0091.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\eUlg.ods" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\eulg.ods"), fInfoLevelId=0x0, lpFileInformation=0x228700c | out: lpFileInformation=0x228700c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93b0cf40, ftCreationTime.dwHighDateTime=0x1d8b88c, ftLastAccessTime.dwLowDateTime=0xc913fdc0, ftLastAccessTime.dwHighDateTime=0x1d8ba20, ftLastWriteTime.dwLowDateTime=0xc913fdc0, ftLastWriteTime.dwHighDateTime=0x1d8ba20, nFileSizeHigh=0x0, nFileSizeLow=0x14a4a)) returned 1 [0091.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.752] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\FYJ1.pptx", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\FYJ1.pptx", lpFilePart=0x0) returned 0x27 [0091.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\FYJ1.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fyj1.pptx"), fInfoLevelId=0x0, lpFileInformation=0x22870cc | out: lpFileInformation=0x22870cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6110a880, ftCreationTime.dwHighDateTime=0x1d8bb02, ftLastAccessTime.dwLowDateTime=0xbebbc8c0, ftLastAccessTime.dwHighDateTime=0x1d8c0de, ftLastWriteTime.dwLowDateTime=0xbebbc8c0, ftLastWriteTime.dwHighDateTime=0x1d8c0de, nFileSizeHigh=0x0, nFileSizeLow=0x6292)) returned 1 [0091.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.752] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\HJDXtUSQzN.odp", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\HJDXtUSQzN.odp", lpFilePart=0x0) returned 0x2c [0091.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\HJDXtUSQzN.odp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hjdxtusqzn.odp"), fInfoLevelId=0x0, lpFileInformation=0x228718c | out: lpFileInformation=0x228718c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52e375c0, ftCreationTime.dwHighDateTime=0x1d8c107, ftLastAccessTime.dwLowDateTime=0x53360b20, ftLastAccessTime.dwHighDateTime=0x1d8c11e, ftLastWriteTime.dwLowDateTime=0x53360b20, ftLastWriteTime.dwHighDateTime=0x1d8c11e, nFileSizeHigh=0x0, nFileSizeLow=0x849e)) returned 1 [0091.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.753] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\iLq3zNHP1Bvq2jgkzC.swf", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\iLq3zNHP1Bvq2jgkzC.swf", lpFilePart=0x0) returned 0x34 [0091.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\iLq3zNHP1Bvq2jgkzC.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ilq3znhp1bvq2jgkzc.swf"), fInfoLevelId=0x0, lpFileInformation=0x2287264 | out: lpFileInformation=0x2287264*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95d451f0, ftCreationTime.dwHighDateTime=0x1d8bcb2, ftLastAccessTime.dwLowDateTime=0x3e5310e0, ftLastAccessTime.dwHighDateTime=0x1d8bdae, ftLastWriteTime.dwLowDateTime=0x3e5310e0, ftLastWriteTime.dwHighDateTime=0x1d8bdae, nFileSizeHigh=0x0, nFileSizeLow=0x13469)) returned 1 [0091.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.753] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\irK2.png", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\irK2.png", lpFilePart=0x0) returned 0x26 [0091.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\irK2.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\irk2.png"), fInfoLevelId=0x0, lpFileInformation=0x228735c | out: lpFileInformation=0x228735c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7197bc0, ftCreationTime.dwHighDateTime=0x1d8b7ad, ftLastAccessTime.dwLowDateTime=0xcea29ec0, ftLastAccessTime.dwHighDateTime=0x1d8ba9f, ftLastWriteTime.dwLowDateTime=0xcea29ec0, ftLastWriteTime.dwHighDateTime=0x1d8ba9f, nFileSizeHigh=0x0, nFileSizeLow=0x29eb)) returned 1 [0091.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.753] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\knJlrMn.jpg", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\knJlrMn.jpg", lpFilePart=0x0) returned 0x29 [0091.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\knJlrMn.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\knjlrmn.jpg"), fInfoLevelId=0x0, lpFileInformation=0x228741c | out: lpFileInformation=0x228741c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe882b260, ftCreationTime.dwHighDateTime=0x1d8b93e, ftLastAccessTime.dwLowDateTime=0x55ed7ad0, ftLastAccessTime.dwHighDateTime=0x1d8ba4b, ftLastWriteTime.dwLowDateTime=0x55ed7ad0, ftLastWriteTime.dwHighDateTime=0x1d8ba4b, nFileSizeHigh=0x0, nFileSizeLow=0x53c3)) returned 1 [0091.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.753] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\L18V.ods", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\L18V.ods", lpFilePart=0x0) returned 0x26 [0091.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\L18V.ods" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\l18v.ods"), fInfoLevelId=0x0, lpFileInformation=0x22874e4 | out: lpFileInformation=0x22874e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406f8380, ftCreationTime.dwHighDateTime=0x1d8b5f3, ftLastAccessTime.dwLowDateTime=0x36788730, ftLastAccessTime.dwHighDateTime=0x1d8bb86, ftLastWriteTime.dwLowDateTime=0x36788730, ftLastWriteTime.dwHighDateTime=0x1d8bb86, nFileSizeHigh=0x0, nFileSizeLow=0x4cd)) returned 1 [0091.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.754] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\mGLbr8EHVJwWvBHC.mp3", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\mGLbr8EHVJwWvBHC.mp3", lpFilePart=0x0) returned 0x32 [0091.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\mGLbr8EHVJwWvBHC.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\mglbr8ehvjwwvbhc.mp3"), fInfoLevelId=0x0, lpFileInformation=0x22875e4 | out: lpFileInformation=0x22875e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e94e0, ftCreationTime.dwHighDateTime=0x1d8b31e, ftLastAccessTime.dwLowDateTime=0xf98eff50, ftLastAccessTime.dwHighDateTime=0x1d8bf65, ftLastWriteTime.dwLowDateTime=0xf98eff50, ftLastWriteTime.dwHighDateTime=0x1d8bf65, nFileSizeHigh=0x0, nFileSizeLow=0xde75)) returned 1 [0091.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.754] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\MgsHDnP3Ixv1ZL.mp3", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\MgsHDnP3Ixv1ZL.mp3", lpFilePart=0x0) returned 0x30 [0091.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\MgsHDnP3Ixv1ZL.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\mgshdnp3ixv1zl.mp3"), fInfoLevelId=0x0, lpFileInformation=0x22876d4 | out: lpFileInformation=0x22876d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2085c7f0, ftCreationTime.dwHighDateTime=0x1d8b6d4, ftLastAccessTime.dwLowDateTime=0xc9273680, ftLastAccessTime.dwHighDateTime=0x1d8bbb3, ftLastWriteTime.dwLowDateTime=0xc9273680, ftLastWriteTime.dwHighDateTime=0x1d8bbb3, nFileSizeHigh=0x0, nFileSizeLow=0xa6b3)) returned 1 [0091.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.754] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\nsIVnWY.png", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\nsIVnWY.png", lpFilePart=0x0) returned 0x29 [0091.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\nsIVnWY.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\nsivnwy.png"), fInfoLevelId=0x0, lpFileInformation=0x22877bc | out: lpFileInformation=0x22877bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1622410, ftCreationTime.dwHighDateTime=0x1d8b29b, ftLastAccessTime.dwLowDateTime=0x203e2830, ftLastAccessTime.dwHighDateTime=0x1d8ba64, ftLastWriteTime.dwLowDateTime=0x203e2830, ftLastWriteTime.dwHighDateTime=0x1d8ba64, nFileSizeHigh=0x0, nFileSizeLow=0x17703)) returned 1 [0091.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.754] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\SmYoSoLSWK_urmMNr1Bb.flv", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\SmYoSoLSWK_urmMNr1Bb.flv", lpFilePart=0x0) returned 0x36 [0091.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\SmYoSoLSWK_urmMNr1Bb.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\smyosolswk_urmmnr1bb.flv"), fInfoLevelId=0x0, lpFileInformation=0x2287884 | out: lpFileInformation=0x2287884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6bbbb10, ftCreationTime.dwHighDateTime=0x1d8b776, ftLastAccessTime.dwLowDateTime=0x9d1ca770, ftLastAccessTime.dwHighDateTime=0x1d8b92c, ftLastWriteTime.dwLowDateTime=0x9d1ca770, ftLastWriteTime.dwHighDateTime=0x1d8b92c, nFileSizeHigh=0x0, nFileSizeLow=0xb566)) returned 1 [0091.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.755] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\tftcjhfP.m4a", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\tftcjhfP.m4a", lpFilePart=0x0) returned 0x2a [0091.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\tftcjhfP.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\tftcjhfp.m4a"), fInfoLevelId=0x0, lpFileInformation=0x2287984 | out: lpFileInformation=0x2287984*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37934860, ftCreationTime.dwHighDateTime=0x1d8b1f6, ftLastAccessTime.dwLowDateTime=0x1b53c930, ftLastAccessTime.dwHighDateTime=0x1d8b742, ftLastWriteTime.dwLowDateTime=0x1b53c930, ftLastWriteTime.dwHighDateTime=0x1d8b742, nFileSizeHigh=0x0, nFileSizeLow=0x11ce8)) returned 1 [0091.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.755] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\TPZCYP.wav", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\TPZCYP.wav", lpFilePart=0x0) returned 0x28 [0091.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\TPZCYP.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\tpzcyp.wav"), fInfoLevelId=0x0, lpFileInformation=0x2287a54 | out: lpFileInformation=0x2287a54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb43f9c60, ftCreationTime.dwHighDateTime=0x1d8b3e5, ftLastAccessTime.dwLowDateTime=0x166bae30, ftLastAccessTime.dwHighDateTime=0x1d8baf1, ftLastWriteTime.dwLowDateTime=0x166bae30, ftLastWriteTime.dwHighDateTime=0x1d8baf1, nFileSizeHigh=0x0, nFileSizeLow=0x177ee)) returned 1 [0091.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.755] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Uz lX.flv", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Uz lX.flv", lpFilePart=0x0) returned 0x27 [0091.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Uz lX.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\uz lx.flv"), fInfoLevelId=0x0, lpFileInformation=0x2287b1c | out: lpFileInformation=0x2287b1c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cb842b0, ftCreationTime.dwHighDateTime=0x1d8bdf4, ftLastAccessTime.dwLowDateTime=0xce3e2fd0, ftLastAccessTime.dwHighDateTime=0x1d8bffe, ftLastWriteTime.dwLowDateTime=0xce3e2fd0, ftLastWriteTime.dwHighDateTime=0x1d8bffe, nFileSizeHigh=0x0, nFileSizeLow=0x24e6)) returned 1 [0091.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.755] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Ve Adh4F7cSMF.swf", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Ve Adh4F7cSMF.swf", lpFilePart=0x0) returned 0x2f [0091.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Ve Adh4F7cSMF.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ve adh4f7csmf.swf"), fInfoLevelId=0x0, lpFileInformation=0x2287bdc | out: lpFileInformation=0x2287bdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a7a9470, ftCreationTime.dwHighDateTime=0x1d8c09c, ftLastAccessTime.dwLowDateTime=0x6725f750, ftLastAccessTime.dwHighDateTime=0x1d8c0b3, ftLastWriteTime.dwLowDateTime=0x6725f750, ftLastWriteTime.dwHighDateTime=0x1d8c0b3, nFileSizeHigh=0x0, nFileSizeLow=0x47f0)) returned 1 [0091.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.755] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\vHaRBzu.bmp", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\vHaRBzu.bmp", lpFilePart=0x0) returned 0x29 [0091.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\vHaRBzu.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\vharbzu.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2287cbc | out: lpFileInformation=0x2287cbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x982c8420, ftCreationTime.dwHighDateTime=0x1d8c123, ftLastAccessTime.dwLowDateTime=0xb3f47f60, ftLastAccessTime.dwHighDateTime=0x1d8c127, ftLastWriteTime.dwLowDateTime=0xb3f47f60, ftLastWriteTime.dwHighDateTime=0x1d8c127, nFileSizeHigh=0x0, nFileSizeLow=0x53df)) returned 1 [0091.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.756] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\vPTw68y.flv", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\vPTw68y.flv", lpFilePart=0x0) returned 0x29 [0091.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\vPTw68y.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\vptw68y.flv"), fInfoLevelId=0x0, lpFileInformation=0x2287d84 | out: lpFileInformation=0x2287d84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb438f9e0, ftCreationTime.dwHighDateTime=0x1d8b26a, ftLastAccessTime.dwLowDateTime=0xe816cce0, ftLastAccessTime.dwHighDateTime=0x1d8b37a, ftLastWriteTime.dwLowDateTime=0xe816cce0, ftLastWriteTime.dwHighDateTime=0x1d8b37a, nFileSizeHigh=0x0, nFileSizeLow=0x15c1b)) returned 1 [0091.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.756] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\YbS7-JwT.flv", nBufferLength=0x105, lpBuffer=0x4b7f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\YbS7-JwT.flv", lpFilePart=0x0) returned 0x2a [0091.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8dc) returned 1 [0091.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\YbS7-JwT.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ybs7-jwt.flv"), fInfoLevelId=0x0, lpFileInformation=0x2287e4c | out: lpFileInformation=0x2287e4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20202850, ftCreationTime.dwHighDateTime=0x1d8b6d4, ftLastAccessTime.dwLowDateTime=0x9edd100, ftLastAccessTime.dwHighDateTime=0x1d8c065, ftLastWriteTime.dwLowDateTime=0x9edd100, ftLastWriteTime.dwHighDateTime=0x1d8c065, nFileSizeHigh=0x0, nFileSizeLow=0x17dfe)) returned 1 [0091.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8d8) returned 1 [0091.756] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_", nBufferLength=0x105, lpBuffer=0x4b7f3d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_", lpFilePart=0x0) returned 0x2c [0091.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f878) returned 1 [0091.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_"), fInfoLevelId=0x0, lpFileInformation=0x4b7f8f4 | out: lpFileInformation=0x4b7f8f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0091.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f874) returned 1 [0091.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8f8) returned 1 [0091.757] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_", nBufferLength=0x105, lpBuffer=0x4b7f3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_", lpFilePart=0x0) returned 0x2c [0091.757] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\*"), lpFindFileData=0x4b7f620 | out: lpFindFileData=0x4b7f620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c95c8 [0091.757] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f62c | out: lpFindFileData=0x4b7f62c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.757] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f62c | out: lpFindFileData=0x4b7f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf15daed0, ftCreationTime.dwHighDateTime=0x1d8b876, ftLastAccessTime.dwLowDateTime=0x4e1ae0a0, ftLastAccessTime.dwHighDateTime=0x1d8bed7, ftLastWriteTime.dwLowDateTime=0x4e1ae0a0, ftLastWriteTime.dwHighDateTime=0x1d8bed7, nFileSizeHigh=0x0, nFileSizeLow=0xbd08, dwReserved0=0x0, dwReserved1=0x0, cFileName="4JORAA_2dvLjbNy7.mp3", cAlternateFileName="4JORAA~1.MP3")) returned 1 [0091.757] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f62c | out: lpFindFileData=0x4b7f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x861947c0, ftCreationTime.dwHighDateTime=0x1d8bd1b, ftLastAccessTime.dwLowDateTime=0xeb856a0, ftLastAccessTime.dwHighDateTime=0x1d8bd1e, ftLastWriteTime.dwLowDateTime=0xeb856a0, ftLastWriteTime.dwHighDateTime=0x1d8bd1e, nFileSizeHigh=0x0, nFileSizeLow=0x173a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ek6U.wav", cAlternateFileName="")) returned 1 [0091.758] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f62c | out: lpFindFileData=0x4b7f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe60e750, ftCreationTime.dwHighDateTime=0x1d8b163, ftLastAccessTime.dwLowDateTime=0x8ace7090, ftLastAccessTime.dwHighDateTime=0x1d8bf7a, ftLastWriteTime.dwLowDateTime=0x8ace7090, ftLastWriteTime.dwHighDateTime=0x1d8bf7a, nFileSizeHigh=0x0, nFileSizeLow=0x64f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gvQ3Hjy8U2-C2P1Q.gif", cAlternateFileName="GVQ3HJ~1.GIF")) returned 1 [0091.758] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f62c | out: lpFindFileData=0x4b7f62c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LJIKB", cAlternateFileName="")) returned 1 [0091.758] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f62c | out: lpFindFileData=0x4b7f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf842c10, ftCreationTime.dwHighDateTime=0x1d8c095, ftLastAccessTime.dwLowDateTime=0xf91ebb60, ftLastAccessTime.dwHighDateTime=0x1d8c0a4, ftLastWriteTime.dwLowDateTime=0xf91ebb60, ftLastWriteTime.dwHighDateTime=0x1d8c0a4, nFileSizeHigh=0x0, nFileSizeLow=0x596c, dwReserved0=0x0, dwReserved1=0x0, cFileName="o5MUa-6.wav", cAlternateFileName="")) returned 1 [0091.758] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f62c | out: lpFindFileData=0x4b7f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8877cb70, ftCreationTime.dwHighDateTime=0x1d8b2fa, ftLastAccessTime.dwLowDateTime=0xe2c31410, ftLastAccessTime.dwHighDateTime=0x1d8b703, ftLastWriteTime.dwLowDateTime=0xe2c31410, ftLastWriteTime.dwHighDateTime=0x1d8b703, nFileSizeHigh=0x0, nFileSizeLow=0x12e5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Od i5WMI4-V8Moa.ots", cAlternateFileName="ODI5WM~1.OTS")) returned 1 [0091.758] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f62c | out: lpFindFileData=0x4b7f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f826dc0, ftCreationTime.dwHighDateTime=0x1d8b935, ftLastAccessTime.dwLowDateTime=0xcc8e6400, ftLastAccessTime.dwHighDateTime=0x1d8beed, ftLastWriteTime.dwLowDateTime=0xcc8e6400, ftLastWriteTime.dwHighDateTime=0x1d8beed, nFileSizeHigh=0x0, nFileSizeLow=0x725a, dwReserved0=0x0, dwReserved1=0x0, cFileName="_QGFEo2A2-pto23JslcT.png", cAlternateFileName="_QGFEO~1.PNG")) returned 1 [0091.758] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f62c | out: lpFindFileData=0x4b7f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f826dc0, ftCreationTime.dwHighDateTime=0x1d8b935, ftLastAccessTime.dwLowDateTime=0xcc8e6400, ftLastAccessTime.dwHighDateTime=0x1d8beed, ftLastWriteTime.dwLowDateTime=0xcc8e6400, ftLastWriteTime.dwHighDateTime=0x1d8beed, nFileSizeHigh=0x0, nFileSizeLow=0x725a, dwReserved0=0x0, dwReserved1=0x0, cFileName="_QGFEo2A2-pto23JslcT.png", cAlternateFileName="_QGFEO~1.PNG")) returned 0 [0091.758] FindClose (in: hFindFile=0x6c95c8 | out: hFindFile=0x6c95c8) returned 1 [0091.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8b4) returned 1 [0091.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8c0) returned 1 [0091.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8f8) returned 1 [0091.759] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_", nBufferLength=0x105, lpBuffer=0x4b7f3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_", lpFilePart=0x0) returned 0x2c [0091.759] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\*"), lpFindFileData=0x4b7f620 | out: lpFindFileData=0x4b7f620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c95c8 [0091.759] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f62c | out: lpFindFileData=0x4b7f62c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.759] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f62c | out: lpFindFileData=0x4b7f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf15daed0, ftCreationTime.dwHighDateTime=0x1d8b876, ftLastAccessTime.dwLowDateTime=0x4e1ae0a0, ftLastAccessTime.dwHighDateTime=0x1d8bed7, ftLastWriteTime.dwLowDateTime=0x4e1ae0a0, ftLastWriteTime.dwHighDateTime=0x1d8bed7, nFileSizeHigh=0x0, nFileSizeLow=0xbd08, dwReserved0=0x0, dwReserved1=0x0, cFileName="4JORAA_2dvLjbNy7.mp3", cAlternateFileName="4JORAA~1.MP3")) returned 1 [0091.759] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f62c | out: lpFindFileData=0x4b7f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x861947c0, ftCreationTime.dwHighDateTime=0x1d8bd1b, ftLastAccessTime.dwLowDateTime=0xeb856a0, ftLastAccessTime.dwHighDateTime=0x1d8bd1e, ftLastWriteTime.dwLowDateTime=0xeb856a0, ftLastWriteTime.dwHighDateTime=0x1d8bd1e, nFileSizeHigh=0x0, nFileSizeLow=0x173a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ek6U.wav", cAlternateFileName="")) returned 1 [0091.759] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f62c | out: lpFindFileData=0x4b7f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe60e750, ftCreationTime.dwHighDateTime=0x1d8b163, ftLastAccessTime.dwLowDateTime=0x8ace7090, ftLastAccessTime.dwHighDateTime=0x1d8bf7a, ftLastWriteTime.dwLowDateTime=0x8ace7090, ftLastWriteTime.dwHighDateTime=0x1d8bf7a, nFileSizeHigh=0x0, nFileSizeLow=0x64f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gvQ3Hjy8U2-C2P1Q.gif", cAlternateFileName="GVQ3HJ~1.GIF")) returned 1 [0091.760] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f62c | out: lpFindFileData=0x4b7f62c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LJIKB", cAlternateFileName="")) returned 1 [0091.760] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f62c | out: lpFindFileData=0x4b7f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf842c10, ftCreationTime.dwHighDateTime=0x1d8c095, ftLastAccessTime.dwLowDateTime=0xf91ebb60, ftLastAccessTime.dwHighDateTime=0x1d8c0a4, ftLastWriteTime.dwLowDateTime=0xf91ebb60, ftLastWriteTime.dwHighDateTime=0x1d8c0a4, nFileSizeHigh=0x0, nFileSizeLow=0x596c, dwReserved0=0x0, dwReserved1=0x0, cFileName="o5MUa-6.wav", cAlternateFileName="")) returned 1 [0091.760] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f62c | out: lpFindFileData=0x4b7f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8877cb70, ftCreationTime.dwHighDateTime=0x1d8b2fa, ftLastAccessTime.dwLowDateTime=0xe2c31410, ftLastAccessTime.dwHighDateTime=0x1d8b703, ftLastWriteTime.dwLowDateTime=0xe2c31410, ftLastWriteTime.dwHighDateTime=0x1d8b703, nFileSizeHigh=0x0, nFileSizeLow=0x12e5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Od i5WMI4-V8Moa.ots", cAlternateFileName="ODI5WM~1.OTS")) returned 1 [0091.760] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f62c | out: lpFindFileData=0x4b7f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f826dc0, ftCreationTime.dwHighDateTime=0x1d8b935, ftLastAccessTime.dwLowDateTime=0xcc8e6400, ftLastAccessTime.dwHighDateTime=0x1d8beed, ftLastWriteTime.dwLowDateTime=0xcc8e6400, ftLastWriteTime.dwHighDateTime=0x1d8beed, nFileSizeHigh=0x0, nFileSizeLow=0x725a, dwReserved0=0x0, dwReserved1=0x0, cFileName="_QGFEo2A2-pto23JslcT.png", cAlternateFileName="_QGFEO~1.PNG")) returned 1 [0091.760] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f62c | out: lpFindFileData=0x4b7f62c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.760] FindClose (in: hFindFile=0x6c95c8 | out: hFindFile=0x6c95c8) returned 1 [0091.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8b4) returned 1 [0091.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8c0) returned 1 [0091.760] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\4JORAA_2dvLjbNy7.mp3", nBufferLength=0x105, lpBuffer=0x4b7f3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\4JORAA_2dvLjbNy7.mp3", lpFilePart=0x0) returned 0x41 [0091.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8ac) returned 1 [0091.760] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\4JORAA_2dvLjbNy7.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\4joraa_2dvljbny7.mp3"), fInfoLevelId=0x0, lpFileInformation=0x228a2ac | out: lpFileInformation=0x228a2ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf15daed0, ftCreationTime.dwHighDateTime=0x1d8b876, ftLastAccessTime.dwLowDateTime=0x4e1ae0a0, ftLastAccessTime.dwHighDateTime=0x1d8bed7, ftLastWriteTime.dwLowDateTime=0x4e1ae0a0, ftLastWriteTime.dwHighDateTime=0x1d8bed7, nFileSizeHigh=0x0, nFileSizeLow=0xbd08)) returned 1 [0091.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8a8) returned 1 [0091.761] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\Ek6U.wav", nBufferLength=0x105, lpBuffer=0x4b7f3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\Ek6U.wav", lpFilePart=0x0) returned 0x35 [0091.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8ac) returned 1 [0091.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\Ek6U.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ek6u.wav"), fInfoLevelId=0x0, lpFileInformation=0x228a3b8 | out: lpFileInformation=0x228a3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x861947c0, ftCreationTime.dwHighDateTime=0x1d8bd1b, ftLastAccessTime.dwLowDateTime=0xeb856a0, ftLastAccessTime.dwHighDateTime=0x1d8bd1e, ftLastWriteTime.dwLowDateTime=0xeb856a0, ftLastWriteTime.dwHighDateTime=0x1d8bd1e, nFileSizeHigh=0x0, nFileSizeLow=0x173a9)) returned 1 [0091.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8a8) returned 1 [0091.761] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\gvQ3Hjy8U2-C2P1Q.gif", nBufferLength=0x105, lpBuffer=0x4b7f3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\gvQ3Hjy8U2-C2P1Q.gif", lpFilePart=0x0) returned 0x41 [0091.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8ac) returned 1 [0091.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\gvQ3Hjy8U2-C2P1Q.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\gvq3hjy8u2-c2p1q.gif"), fInfoLevelId=0x0, lpFileInformation=0x228a494 | out: lpFileInformation=0x228a494*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe60e750, ftCreationTime.dwHighDateTime=0x1d8b163, ftLastAccessTime.dwLowDateTime=0x8ace7090, ftLastAccessTime.dwHighDateTime=0x1d8bf7a, ftLastWriteTime.dwLowDateTime=0x8ace7090, ftLastWriteTime.dwHighDateTime=0x1d8bf7a, nFileSizeHigh=0x0, nFileSizeLow=0x64f1)) returned 1 [0091.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8a8) returned 1 [0091.761] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\o5MUa-6.wav", nBufferLength=0x105, lpBuffer=0x4b7f3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\o5MUa-6.wav", lpFilePart=0x0) returned 0x38 [0091.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8ac) returned 1 [0091.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\o5MUa-6.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\o5mua-6.wav"), fInfoLevelId=0x0, lpFileInformation=0x228a5a0 | out: lpFileInformation=0x228a5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf842c10, ftCreationTime.dwHighDateTime=0x1d8c095, ftLastAccessTime.dwLowDateTime=0xf91ebb60, ftLastAccessTime.dwHighDateTime=0x1d8c0a4, ftLastWriteTime.dwLowDateTime=0xf91ebb60, ftLastWriteTime.dwHighDateTime=0x1d8c0a4, nFileSizeHigh=0x0, nFileSizeLow=0x596c)) returned 1 [0091.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8a8) returned 1 [0091.761] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\Od i5WMI4-V8Moa.ots", nBufferLength=0x105, lpBuffer=0x4b7f3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\Od i5WMI4-V8Moa.ots", lpFilePart=0x0) returned 0x40 [0091.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8ac) returned 1 [0091.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\Od i5WMI4-V8Moa.ots" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\od i5wmi4-v8moa.ots"), fInfoLevelId=0x0, lpFileInformation=0x228a688 | out: lpFileInformation=0x228a688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8877cb70, ftCreationTime.dwHighDateTime=0x1d8b2fa, ftLastAccessTime.dwLowDateTime=0xe2c31410, ftLastAccessTime.dwHighDateTime=0x1d8b703, ftLastWriteTime.dwLowDateTime=0xe2c31410, ftLastWriteTime.dwHighDateTime=0x1d8b703, nFileSizeHigh=0x0, nFileSizeLow=0x12e5a)) returned 1 [0091.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8a8) returned 1 [0091.762] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\_QGFEo2A2-pto23JslcT.png", nBufferLength=0x105, lpBuffer=0x4b7f3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\_QGFEo2A2-pto23JslcT.png", lpFilePart=0x0) returned 0x45 [0091.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8ac) returned 1 [0091.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\_QGFEo2A2-pto23JslcT.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\_qgfeo2a2-pto23jslct.png"), fInfoLevelId=0x0, lpFileInformation=0x228a790 | out: lpFileInformation=0x228a790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f826dc0, ftCreationTime.dwHighDateTime=0x1d8b935, ftLastAccessTime.dwLowDateTime=0xcc8e6400, ftLastAccessTime.dwHighDateTime=0x1d8beed, ftLastWriteTime.dwLowDateTime=0xcc8e6400, ftLastWriteTime.dwHighDateTime=0x1d8beed, nFileSizeHigh=0x0, nFileSizeLow=0x725a)) returned 1 [0091.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f8a8) returned 1 [0091.762] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB", nBufferLength=0x105, lpBuffer=0x4b7f3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB", lpFilePart=0x0) returned 0x32 [0091.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f848) returned 1 [0091.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb"), fInfoLevelId=0x0, lpFileInformation=0x4b7f8c4 | out: lpFileInformation=0x4b7f8c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0091.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f844) returned 1 [0091.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8c8) returned 1 [0091.762] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB", nBufferLength=0x105, lpBuffer=0x4b7f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB", lpFilePart=0x0) returned 0x32 [0091.762] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\*"), lpFindFileData=0x4b7f5f0 | out: lpFindFileData=0x4b7f5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c95c8 [0091.762] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.763] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7baf7c20, ftCreationTime.dwHighDateTime=0x1d8bafd, ftLastAccessTime.dwLowDateTime=0x405496f0, ftLastAccessTime.dwHighDateTime=0x1d8bb21, ftLastWriteTime.dwLowDateTime=0x405496f0, ftLastWriteTime.dwHighDateTime=0x1d8bb21, nFileSizeHigh=0x0, nFileSizeLow=0x1378e, dwReserved0=0x0, dwReserved1=0x0, cFileName="484IJyBLXQXJI6z5aVY.png", cAlternateFileName="484IJY~1.PNG")) returned 1 [0091.763] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401b8f60, ftCreationTime.dwHighDateTime=0x1d8b0ca, ftLastAccessTime.dwLowDateTime=0x1b0b3330, ftLastAccessTime.dwHighDateTime=0x1d8bc3f, ftLastWriteTime.dwLowDateTime=0x1b0b3330, ftLastWriteTime.dwHighDateTime=0x1d8bc3f, nFileSizeHigh=0x0, nFileSizeLow=0x1479a, dwReserved0=0x0, dwReserved1=0x0, cFileName="9muSQLT.avi", cAlternateFileName="")) returned 1 [0091.763] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90828520, ftCreationTime.dwHighDateTime=0x1d8be9f, ftLastAccessTime.dwLowDateTime=0xa73ac3d0, ftLastAccessTime.dwHighDateTime=0x1d8c0cb, ftLastWriteTime.dwLowDateTime=0xa73ac3d0, ftLastWriteTime.dwHighDateTime=0x1d8c0cb, nFileSizeHigh=0x0, nFileSizeLow=0x13dd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar1mtEjehL5qHu.wav", cAlternateFileName="AR1MTE~1.WAV")) returned 1 [0091.763] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a2cc1f0, ftCreationTime.dwHighDateTime=0x1d8b754, ftLastAccessTime.dwLowDateTime=0xde186450, ftLastAccessTime.dwHighDateTime=0x1d8babf, ftLastWriteTime.dwLowDateTime=0xde186450, ftLastWriteTime.dwHighDateTime=0x1d8babf, nFileSizeHigh=0x0, nFileSizeLow=0xd832, dwReserved0=0x0, dwReserved1=0x0, cFileName="gKOrHpH8a3UQ.flv", cAlternateFileName="GKORHP~1.FLV")) returned 1 [0091.763] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9141f280, ftCreationTime.dwHighDateTime=0x1d8b3f4, ftLastAccessTime.dwLowDateTime=0xf7257800, ftLastAccessTime.dwHighDateTime=0x1d8b562, ftLastWriteTime.dwLowDateTime=0xf7257800, ftLastWriteTime.dwHighDateTime=0x1d8b562, nFileSizeHigh=0x0, nFileSizeLow=0xc673, dwReserved0=0x0, dwReserved1=0x0, cFileName="N3sG1qBeI3bDTH.avi", cAlternateFileName="N3SG1Q~1.AVI")) returned 1 [0091.763] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdd04cc0, ftCreationTime.dwHighDateTime=0x1d8be93, ftLastAccessTime.dwLowDateTime=0xbce6da20, ftLastAccessTime.dwHighDateTime=0x1d8c0bc, ftLastWriteTime.dwLowDateTime=0xbce6da20, ftLastWriteTime.dwHighDateTime=0x1d8c0bc, nFileSizeHigh=0x0, nFileSizeLow=0x149c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="P3g7Dv.m4a", cAlternateFileName="")) returned 1 [0091.764] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7bdf1d0, ftCreationTime.dwHighDateTime=0x1d8b788, ftLastAccessTime.dwLowDateTime=0x14b20280, ftLastAccessTime.dwHighDateTime=0x1d8b98c, ftLastWriteTime.dwLowDateTime=0x14b20280, ftLastWriteTime.dwHighDateTime=0x1d8b98c, nFileSizeHigh=0x0, nFileSizeLow=0x86bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="T BZFFxaGrVGg4fy9.swf", cAlternateFileName="TBZFFX~1.SWF")) returned 1 [0091.764] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1aeed0, ftCreationTime.dwHighDateTime=0x1d8b622, ftLastAccessTime.dwLowDateTime=0xb144fd0, ftLastAccessTime.dwHighDateTime=0x1d8b937, ftLastWriteTime.dwLowDateTime=0xb144fd0, ftLastWriteTime.dwHighDateTime=0x1d8b937, nFileSizeHigh=0x0, nFileSizeLow=0x16a8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="UfpnW-.mp3", cAlternateFileName="")) returned 1 [0091.764] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c018d60, ftCreationTime.dwHighDateTime=0x1d8b17f, ftLastAccessTime.dwLowDateTime=0x23689000, ftLastAccessTime.dwHighDateTime=0x1d8b478, ftLastWriteTime.dwLowDateTime=0x23689000, ftLastWriteTime.dwHighDateTime=0x1d8b478, nFileSizeHigh=0x0, nFileSizeLow=0xf80e, dwReserved0=0x0, dwReserved1=0x0, cFileName="z- ZK.avi", cAlternateFileName="Z-ZK~1.AVI")) returned 1 [0091.764] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c018d60, ftCreationTime.dwHighDateTime=0x1d8b17f, ftLastAccessTime.dwLowDateTime=0x23689000, ftLastAccessTime.dwHighDateTime=0x1d8b478, ftLastWriteTime.dwLowDateTime=0x23689000, ftLastWriteTime.dwHighDateTime=0x1d8b478, nFileSizeHigh=0x0, nFileSizeLow=0xf80e, dwReserved0=0x0, dwReserved1=0x0, cFileName="z- ZK.avi", cAlternateFileName="Z-ZK~1.AVI")) returned 0 [0091.764] FindClose (in: hFindFile=0x6c95c8 | out: hFindFile=0x6c95c8) returned 1 [0091.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f884) returned 1 [0091.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f890) returned 1 [0091.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f8c8) returned 1 [0091.764] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB", nBufferLength=0x105, lpBuffer=0x4b7f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB", lpFilePart=0x0) returned 0x32 [0091.764] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\*"), lpFindFileData=0x4b7f5f0 | out: lpFindFileData=0x4b7f5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c95c8 [0091.765] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.765] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7baf7c20, ftCreationTime.dwHighDateTime=0x1d8bafd, ftLastAccessTime.dwLowDateTime=0x405496f0, ftLastAccessTime.dwHighDateTime=0x1d8bb21, ftLastWriteTime.dwLowDateTime=0x405496f0, ftLastWriteTime.dwHighDateTime=0x1d8bb21, nFileSizeHigh=0x0, nFileSizeLow=0x1378e, dwReserved0=0x0, dwReserved1=0x0, cFileName="484IJyBLXQXJI6z5aVY.png", cAlternateFileName="484IJY~1.PNG")) returned 1 [0091.765] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401b8f60, ftCreationTime.dwHighDateTime=0x1d8b0ca, ftLastAccessTime.dwLowDateTime=0x1b0b3330, ftLastAccessTime.dwHighDateTime=0x1d8bc3f, ftLastWriteTime.dwLowDateTime=0x1b0b3330, ftLastWriteTime.dwHighDateTime=0x1d8bc3f, nFileSizeHigh=0x0, nFileSizeLow=0x1479a, dwReserved0=0x0, dwReserved1=0x0, cFileName="9muSQLT.avi", cAlternateFileName="")) returned 1 [0091.765] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90828520, ftCreationTime.dwHighDateTime=0x1d8be9f, ftLastAccessTime.dwLowDateTime=0xa73ac3d0, ftLastAccessTime.dwHighDateTime=0x1d8c0cb, ftLastWriteTime.dwLowDateTime=0xa73ac3d0, ftLastWriteTime.dwHighDateTime=0x1d8c0cb, nFileSizeHigh=0x0, nFileSizeLow=0x13dd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar1mtEjehL5qHu.wav", cAlternateFileName="AR1MTE~1.WAV")) returned 1 [0091.765] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a2cc1f0, ftCreationTime.dwHighDateTime=0x1d8b754, ftLastAccessTime.dwLowDateTime=0xde186450, ftLastAccessTime.dwHighDateTime=0x1d8babf, ftLastWriteTime.dwLowDateTime=0xde186450, ftLastWriteTime.dwHighDateTime=0x1d8babf, nFileSizeHigh=0x0, nFileSizeLow=0xd832, dwReserved0=0x0, dwReserved1=0x0, cFileName="gKOrHpH8a3UQ.flv", cAlternateFileName="GKORHP~1.FLV")) returned 1 [0091.765] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9141f280, ftCreationTime.dwHighDateTime=0x1d8b3f4, ftLastAccessTime.dwLowDateTime=0xf7257800, ftLastAccessTime.dwHighDateTime=0x1d8b562, ftLastWriteTime.dwLowDateTime=0xf7257800, ftLastWriteTime.dwHighDateTime=0x1d8b562, nFileSizeHigh=0x0, nFileSizeLow=0xc673, dwReserved0=0x0, dwReserved1=0x0, cFileName="N3sG1qBeI3bDTH.avi", cAlternateFileName="N3SG1Q~1.AVI")) returned 1 [0091.766] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdd04cc0, ftCreationTime.dwHighDateTime=0x1d8be93, ftLastAccessTime.dwLowDateTime=0xbce6da20, ftLastAccessTime.dwHighDateTime=0x1d8c0bc, ftLastWriteTime.dwLowDateTime=0xbce6da20, ftLastWriteTime.dwHighDateTime=0x1d8c0bc, nFileSizeHigh=0x0, nFileSizeLow=0x149c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="P3g7Dv.m4a", cAlternateFileName="")) returned 1 [0091.766] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7bdf1d0, ftCreationTime.dwHighDateTime=0x1d8b788, ftLastAccessTime.dwLowDateTime=0x14b20280, ftLastAccessTime.dwHighDateTime=0x1d8b98c, ftLastWriteTime.dwLowDateTime=0x14b20280, ftLastWriteTime.dwHighDateTime=0x1d8b98c, nFileSizeHigh=0x0, nFileSizeLow=0x86bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="T BZFFxaGrVGg4fy9.swf", cAlternateFileName="TBZFFX~1.SWF")) returned 1 [0091.766] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1aeed0, ftCreationTime.dwHighDateTime=0x1d8b622, ftLastAccessTime.dwLowDateTime=0xb144fd0, ftLastAccessTime.dwHighDateTime=0x1d8b937, ftLastWriteTime.dwLowDateTime=0xb144fd0, ftLastWriteTime.dwHighDateTime=0x1d8b937, nFileSizeHigh=0x0, nFileSizeLow=0x16a8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="UfpnW-.mp3", cAlternateFileName="")) returned 1 [0091.766] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c018d60, ftCreationTime.dwHighDateTime=0x1d8b17f, ftLastAccessTime.dwLowDateTime=0x23689000, ftLastAccessTime.dwHighDateTime=0x1d8b478, ftLastWriteTime.dwLowDateTime=0x23689000, ftLastWriteTime.dwHighDateTime=0x1d8b478, nFileSizeHigh=0x0, nFileSizeLow=0xf80e, dwReserved0=0x0, dwReserved1=0x0, cFileName="z- ZK.avi", cAlternateFileName="Z-ZK~1.AVI")) returned 1 [0091.766] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4b7f5fc | out: lpFindFileData=0x4b7f5fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.766] FindClose (in: hFindFile=0x6c95c8 | out: hFindFile=0x6c95c8) returned 1 [0091.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f884) returned 1 [0091.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f890) returned 1 [0091.766] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\484IJyBLXQXJI6z5aVY.png", nBufferLength=0x105, lpBuffer=0x4b7f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\484IJyBLXQXJI6z5aVY.png", lpFilePart=0x0) returned 0x4a [0091.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f87c) returned 1 [0091.766] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\484IJyBLXQXJI6z5aVY.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\484ijyblxqxji6z5avy.png"), fInfoLevelId=0x0, lpFileInformation=0x228d560 | out: lpFileInformation=0x228d560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7baf7c20, ftCreationTime.dwHighDateTime=0x1d8bafd, ftLastAccessTime.dwLowDateTime=0x405496f0, ftLastAccessTime.dwHighDateTime=0x1d8bb21, ftLastWriteTime.dwLowDateTime=0x405496f0, ftLastWriteTime.dwHighDateTime=0x1d8bb21, nFileSizeHigh=0x0, nFileSizeLow=0x1378e)) returned 1 [0091.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f878) returned 1 [0091.767] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\9muSQLT.avi", nBufferLength=0x105, lpBuffer=0x4b7f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\9muSQLT.avi", lpFilePart=0x0) returned 0x3e [0091.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f87c) returned 1 [0091.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\9muSQLT.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\9musqlt.avi"), fInfoLevelId=0x0, lpFileInformation=0x228d684 | out: lpFileInformation=0x228d684*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401b8f60, ftCreationTime.dwHighDateTime=0x1d8b0ca, ftLastAccessTime.dwLowDateTime=0x1b0b3330, ftLastAccessTime.dwHighDateTime=0x1d8bc3f, ftLastWriteTime.dwLowDateTime=0x1b0b3330, ftLastWriteTime.dwHighDateTime=0x1d8bc3f, nFileSizeHigh=0x0, nFileSizeLow=0x1479a)) returned 1 [0091.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f878) returned 1 [0091.767] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\ar1mtEjehL5qHu.wav", nBufferLength=0x105, lpBuffer=0x4b7f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\ar1mtEjehL5qHu.wav", lpFilePart=0x0) returned 0x45 [0091.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f87c) returned 1 [0091.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\ar1mtEjehL5qHu.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\ar1mtejehl5qhu.wav"), fInfoLevelId=0x0, lpFileInformation=0x228d778 | out: lpFileInformation=0x228d778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90828520, ftCreationTime.dwHighDateTime=0x1d8be9f, ftLastAccessTime.dwLowDateTime=0xa73ac3d0, ftLastAccessTime.dwHighDateTime=0x1d8c0cb, ftLastWriteTime.dwLowDateTime=0xa73ac3d0, ftLastWriteTime.dwHighDateTime=0x1d8c0cb, nFileSizeHigh=0x0, nFileSizeLow=0x13dd5)) returned 1 [0091.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f878) returned 1 [0091.767] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\gKOrHpH8a3UQ.flv", nBufferLength=0x105, lpBuffer=0x4b7f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\gKOrHpH8a3UQ.flv", lpFilePart=0x0) returned 0x43 [0091.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f87c) returned 1 [0091.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\gKOrHpH8a3UQ.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\gkorhph8a3uq.flv"), fInfoLevelId=0x0, lpFileInformation=0x228d888 | out: lpFileInformation=0x228d888*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a2cc1f0, ftCreationTime.dwHighDateTime=0x1d8b754, ftLastAccessTime.dwLowDateTime=0xde186450, ftLastAccessTime.dwHighDateTime=0x1d8babf, ftLastWriteTime.dwLowDateTime=0xde186450, ftLastWriteTime.dwHighDateTime=0x1d8babf, nFileSizeHigh=0x0, nFileSizeLow=0xd832)) returned 1 [0091.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f878) returned 1 [0091.767] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\N3sG1qBeI3bDTH.avi", nBufferLength=0x105, lpBuffer=0x4b7f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\N3sG1qBeI3bDTH.avi", lpFilePart=0x0) returned 0x45 [0091.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f87c) returned 1 [0091.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\N3sG1qBeI3bDTH.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\n3sg1qbei3bdth.avi"), fInfoLevelId=0x0, lpFileInformation=0x228d990 | out: lpFileInformation=0x228d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9141f280, ftCreationTime.dwHighDateTime=0x1d8b3f4, ftLastAccessTime.dwLowDateTime=0xf7257800, ftLastAccessTime.dwHighDateTime=0x1d8b562, ftLastWriteTime.dwLowDateTime=0xf7257800, ftLastWriteTime.dwHighDateTime=0x1d8b562, nFileSizeHigh=0x0, nFileSizeLow=0xc673)) returned 1 [0091.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f878) returned 1 [0091.768] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\P3g7Dv.m4a", nBufferLength=0x105, lpBuffer=0x4b7f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\P3g7Dv.m4a", lpFilePart=0x0) returned 0x3d [0091.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f87c) returned 1 [0091.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\P3g7Dv.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\p3g7dv.m4a"), fInfoLevelId=0x0, lpFileInformation=0x228daa0 | out: lpFileInformation=0x228daa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdd04cc0, ftCreationTime.dwHighDateTime=0x1d8be93, ftLastAccessTime.dwLowDateTime=0xbce6da20, ftLastAccessTime.dwHighDateTime=0x1d8c0bc, ftLastWriteTime.dwLowDateTime=0xbce6da20, ftLastWriteTime.dwHighDateTime=0x1d8c0bc, nFileSizeHigh=0x0, nFileSizeLow=0x149c2)) returned 1 [0091.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f878) returned 1 [0091.768] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\T BZFFxaGrVGg4fy9.swf", nBufferLength=0x105, lpBuffer=0x4b7f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\T BZFFxaGrVGg4fy9.swf", lpFilePart=0x0) returned 0x48 [0091.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f87c) returned 1 [0091.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\T BZFFxaGrVGg4fy9.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\t bzffxagrvgg4fy9.swf"), fInfoLevelId=0x0, lpFileInformation=0x228db90 | out: lpFileInformation=0x228db90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7bdf1d0, ftCreationTime.dwHighDateTime=0x1d8b788, ftLastAccessTime.dwLowDateTime=0x14b20280, ftLastAccessTime.dwHighDateTime=0x1d8b98c, ftLastWriteTime.dwLowDateTime=0x14b20280, ftLastWriteTime.dwHighDateTime=0x1d8b98c, nFileSizeHigh=0x0, nFileSizeLow=0x86bd)) returned 1 [0091.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f878) returned 1 [0091.768] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\UfpnW-.mp3", nBufferLength=0x105, lpBuffer=0x4b7f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\UfpnW-.mp3", lpFilePart=0x0) returned 0x3d [0091.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f87c) returned 1 [0091.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\UfpnW-.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\ufpnw-.mp3"), fInfoLevelId=0x0, lpFileInformation=0x228dcac | out: lpFileInformation=0x228dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1aeed0, ftCreationTime.dwHighDateTime=0x1d8b622, ftLastAccessTime.dwLowDateTime=0xb144fd0, ftLastAccessTime.dwHighDateTime=0x1d8b937, ftLastWriteTime.dwLowDateTime=0xb144fd0, ftLastWriteTime.dwHighDateTime=0x1d8b937, nFileSizeHigh=0x0, nFileSizeLow=0x16a8f)) returned 1 [0091.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f878) returned 1 [0091.768] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\z- ZK.avi", nBufferLength=0x105, lpBuffer=0x4b7f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\z- ZK.avi", lpFilePart=0x0) returned 0x3c [0091.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f87c) returned 1 [0091.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\z- ZK.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\z- zk.avi"), fInfoLevelId=0x0, lpFileInformation=0x228dd9c | out: lpFileInformation=0x228dd9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c018d60, ftCreationTime.dwHighDateTime=0x1d8b17f, ftLastAccessTime.dwLowDateTime=0x23689000, ftLastAccessTime.dwHighDateTime=0x1d8b478, ftLastWriteTime.dwLowDateTime=0x23689000, ftLastWriteTime.dwHighDateTime=0x1d8b478, nFileSizeHigh=0x0, nFileSizeLow=0xf80e)) returned 1 [0091.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f878) returned 1 [0091.769] CoUninitialize () Thread: id = 138 os_tid = 0xbf4 [0091.612] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0091.612] RoInitialize () returned 0x1 [0091.612] RoUninitialize () returned 0x0 [0091.612] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures", nBufferLength=0x105, lpBuffer=0x4c7f384, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures", lpFilePart=0x0) returned 0x1e [0091.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f828) returned 1 [0091.612] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c7f8a4 | out: lpFileInformation=0x4c7f8a4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6ba29884, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6ba29884, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0091.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f824) returned 1 [0091.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f8a8) returned 1 [0091.613] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures", nBufferLength=0x105, lpBuffer=0x4c7f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures", lpFilePart=0x0) returned 0x1e [0091.613] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\*"), lpFindFileData=0x4c7f5d0 | out: lpFindFileData=0x4c7f5d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6ba29884, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6ba29884, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9c48 [0091.613] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6ba29884, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6ba29884, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.613] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x662d9cc0, ftCreationTime.dwHighDateTime=0x1d8c033, ftLastAccessTime.dwLowDateTime=0xd09d2660, ftLastAccessTime.dwHighDateTime=0x1d8c11a, ftLastWriteTime.dwLowDateTime=0xd09d2660, ftLastWriteTime.dwHighDateTime=0x1d8c11a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1mei", cAlternateFileName="")) returned 1 [0091.613] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf353dd0, ftCreationTime.dwHighDateTime=0x1d8b8f7, ftLastAccessTime.dwLowDateTime=0x59a54c0, ftLastAccessTime.dwHighDateTime=0x1d8b967, ftLastWriteTime.dwLowDateTime=0x59a54c0, ftLastWriteTime.dwHighDateTime=0x1d8b967, nFileSizeHigh=0x0, nFileSizeLow=0xdc68, dwReserved0=0x0, dwReserved1=0x0, cFileName="aPNSxelItB.gif", cAlternateFileName="APNSXE~1.GIF")) returned 1 [0091.614] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0091.614] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2444a3c0, ftCreationTime.dwHighDateTime=0x1d8b3aa, ftLastAccessTime.dwLowDateTime=0x6cbaf9f0, ftLastAccessTime.dwHighDateTime=0x1d8b7bb, ftLastWriteTime.dwLowDateTime=0x6cbaf9f0, ftLastWriteTime.dwHighDateTime=0x1d8b7bb, nFileSizeHigh=0x0, nFileSizeLow=0x16b25, dwReserved0=0x0, dwReserved1=0x0, cFileName="cTbWykOdR3AhecdSHES.gif", cAlternateFileName="CTBWYK~1.GIF")) returned 1 [0091.614] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.615] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917c2d40, ftCreationTime.dwHighDateTime=0x1d8bfe5, ftLastAccessTime.dwLowDateTime=0xd86c8fe0, ftLastAccessTime.dwHighDateTime=0x1d8c0fa, ftLastWriteTime.dwLowDateTime=0xd86c8fe0, ftLastWriteTime.dwHighDateTime=0x1d8c0fa, nFileSizeHigh=0x0, nFileSizeLow=0x1320, dwReserved0=0x0, dwReserved1=0x0, cFileName="EZSCq5D5osPMTO5bb2Q.jpg", cAlternateFileName="EZSCQ5~1.JPG")) returned 1 [0091.615] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15983430, ftCreationTime.dwHighDateTime=0x1d8b5a4, ftLastAccessTime.dwLowDateTime=0xb5f43e10, ftLastAccessTime.dwHighDateTime=0x1d8b973, ftLastWriteTime.dwLowDateTime=0xb5f43e10, ftLastWriteTime.dwHighDateTime=0x1d8b973, nFileSizeHigh=0x0, nFileSizeLow=0x5f7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HGl8z.bmp", cAlternateFileName="")) returned 1 [0091.615] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa331e940, ftCreationTime.dwHighDateTime=0x1d8bcfb, ftLastAccessTime.dwLowDateTime=0x70756b0, ftLastAccessTime.dwHighDateTime=0x1d8c014, ftLastWriteTime.dwLowDateTime=0x70756b0, ftLastWriteTime.dwHighDateTime=0x1d8c014, nFileSizeHigh=0x0, nFileSizeLow=0x69c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inm2.bmp", cAlternateFileName="")) returned 1 [0091.615] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x197bb470, ftCreationTime.dwHighDateTime=0x1d8bb8d, ftLastAccessTime.dwLowDateTime=0x734154c0, ftLastAccessTime.dwHighDateTime=0x1d8bc95, ftLastWriteTime.dwLowDateTime=0x734154c0, ftLastWriteTime.dwHighDateTime=0x1d8bc95, nFileSizeHigh=0x0, nFileSizeLow=0x16171, dwReserved0=0x0, dwReserved1=0x0, cFileName="IWQ3hkvN.jpg", cAlternateFileName="")) returned 1 [0091.615] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff331830, ftCreationTime.dwHighDateTime=0x1d8b0fe, ftLastAccessTime.dwLowDateTime=0x43fc1770, ftLastAccessTime.dwHighDateTime=0x1d8b779, ftLastWriteTime.dwLowDateTime=0x43fc1770, ftLastWriteTime.dwHighDateTime=0x1d8b779, nFileSizeHigh=0x0, nFileSizeLow=0xe454, dwReserved0=0x0, dwReserved1=0x0, cFileName="muKJoXXN3D4JrJW.png", cAlternateFileName="MUKJOX~1.PNG")) returned 1 [0091.615] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd940a00, ftCreationTime.dwHighDateTime=0x1d8b5e7, ftLastAccessTime.dwLowDateTime=0xfa124ca0, ftLastAccessTime.dwHighDateTime=0x1d8ba21, ftLastWriteTime.dwLowDateTime=0xfa124ca0, ftLastWriteTime.dwHighDateTime=0x1d8ba21, nFileSizeHigh=0x0, nFileSizeLow=0x755f, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrRl4u.png", cAlternateFileName="")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadf35750, ftCreationTime.dwHighDateTime=0x1d8ba22, ftLastAccessTime.dwLowDateTime=0xa650c0b0, ftLastAccessTime.dwHighDateTime=0x1d8c0c5, ftLastWriteTime.dwLowDateTime=0xa650c0b0, ftLastWriteTime.dwHighDateTime=0x1d8c0c5, nFileSizeHigh=0x0, nFileSizeLow=0x852b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUjKUzlujX4_kF3gUFgs.bmp", cAlternateFileName="RUJKUZ~1.BMP")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0091.616] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.616] FindClose (in: hFindFile=0x6c9c48 | out: hFindFile=0x6c9c48) returned 1 [0091.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f864) returned 1 [0091.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f870) returned 1 [0091.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f8a8) returned 1 [0091.616] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures", nBufferLength=0x105, lpBuffer=0x4c7f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures", lpFilePart=0x0) returned 0x1e [0091.616] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\*"), lpFindFileData=0x4c7f5d0 | out: lpFindFileData=0x4c7f5d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6ba29884, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6ba29884, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9c48 [0091.616] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6ba29884, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6ba29884, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.617] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x662d9cc0, ftCreationTime.dwHighDateTime=0x1d8c033, ftLastAccessTime.dwLowDateTime=0xd09d2660, ftLastAccessTime.dwHighDateTime=0x1d8c11a, ftLastWriteTime.dwLowDateTime=0xd09d2660, ftLastWriteTime.dwHighDateTime=0x1d8c11a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1mei", cAlternateFileName="")) returned 1 [0091.617] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf353dd0, ftCreationTime.dwHighDateTime=0x1d8b8f7, ftLastAccessTime.dwLowDateTime=0x59a54c0, ftLastAccessTime.dwHighDateTime=0x1d8b967, ftLastWriteTime.dwLowDateTime=0x59a54c0, ftLastWriteTime.dwHighDateTime=0x1d8b967, nFileSizeHigh=0x0, nFileSizeLow=0xdc68, dwReserved0=0x0, dwReserved1=0x0, cFileName="aPNSxelItB.gif", cAlternateFileName="APNSXE~1.GIF")) returned 1 [0091.617] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0091.617] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2444a3c0, ftCreationTime.dwHighDateTime=0x1d8b3aa, ftLastAccessTime.dwLowDateTime=0x6cbaf9f0, ftLastAccessTime.dwHighDateTime=0x1d8b7bb, ftLastWriteTime.dwLowDateTime=0x6cbaf9f0, ftLastWriteTime.dwHighDateTime=0x1d8b7bb, nFileSizeHigh=0x0, nFileSizeLow=0x16b25, dwReserved0=0x0, dwReserved1=0x0, cFileName="cTbWykOdR3AhecdSHES.gif", cAlternateFileName="CTBWYK~1.GIF")) returned 1 [0091.617] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.617] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917c2d40, ftCreationTime.dwHighDateTime=0x1d8bfe5, ftLastAccessTime.dwLowDateTime=0xd86c8fe0, ftLastAccessTime.dwHighDateTime=0x1d8c0fa, ftLastWriteTime.dwLowDateTime=0xd86c8fe0, ftLastWriteTime.dwHighDateTime=0x1d8c0fa, nFileSizeHigh=0x0, nFileSizeLow=0x1320, dwReserved0=0x0, dwReserved1=0x0, cFileName="EZSCq5D5osPMTO5bb2Q.jpg", cAlternateFileName="EZSCQ5~1.JPG")) returned 1 [0091.618] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15983430, ftCreationTime.dwHighDateTime=0x1d8b5a4, ftLastAccessTime.dwLowDateTime=0xb5f43e10, ftLastAccessTime.dwHighDateTime=0x1d8b973, ftLastWriteTime.dwLowDateTime=0xb5f43e10, ftLastWriteTime.dwHighDateTime=0x1d8b973, nFileSizeHigh=0x0, nFileSizeLow=0x5f7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HGl8z.bmp", cAlternateFileName="")) returned 1 [0091.618] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa331e940, ftCreationTime.dwHighDateTime=0x1d8bcfb, ftLastAccessTime.dwLowDateTime=0x70756b0, ftLastAccessTime.dwHighDateTime=0x1d8c014, ftLastWriteTime.dwLowDateTime=0x70756b0, ftLastWriteTime.dwHighDateTime=0x1d8c014, nFileSizeHigh=0x0, nFileSizeLow=0x69c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inm2.bmp", cAlternateFileName="")) returned 1 [0091.618] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x197bb470, ftCreationTime.dwHighDateTime=0x1d8bb8d, ftLastAccessTime.dwLowDateTime=0x734154c0, ftLastAccessTime.dwHighDateTime=0x1d8bc95, ftLastWriteTime.dwLowDateTime=0x734154c0, ftLastWriteTime.dwHighDateTime=0x1d8bc95, nFileSizeHigh=0x0, nFileSizeLow=0x16171, dwReserved0=0x0, dwReserved1=0x0, cFileName="IWQ3hkvN.jpg", cAlternateFileName="")) returned 1 [0091.618] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff331830, ftCreationTime.dwHighDateTime=0x1d8b0fe, ftLastAccessTime.dwLowDateTime=0x43fc1770, ftLastAccessTime.dwHighDateTime=0x1d8b779, ftLastWriteTime.dwLowDateTime=0x43fc1770, ftLastWriteTime.dwHighDateTime=0x1d8b779, nFileSizeHigh=0x0, nFileSizeLow=0xe454, dwReserved0=0x0, dwReserved1=0x0, cFileName="muKJoXXN3D4JrJW.png", cAlternateFileName="MUKJOX~1.PNG")) returned 1 [0091.618] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd940a00, ftCreationTime.dwHighDateTime=0x1d8b5e7, ftLastAccessTime.dwLowDateTime=0xfa124ca0, ftLastAccessTime.dwHighDateTime=0x1d8ba21, ftLastWriteTime.dwLowDateTime=0xfa124ca0, ftLastWriteTime.dwHighDateTime=0x1d8ba21, nFileSizeHigh=0x0, nFileSizeLow=0x755f, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrRl4u.png", cAlternateFileName="")) returned 1 [0091.618] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadf35750, ftCreationTime.dwHighDateTime=0x1d8ba22, ftLastAccessTime.dwLowDateTime=0xa650c0b0, ftLastAccessTime.dwHighDateTime=0x1d8c0c5, ftLastWriteTime.dwLowDateTime=0xa650c0b0, ftLastWriteTime.dwHighDateTime=0x1d8c0c5, nFileSizeHigh=0x0, nFileSizeLow=0x852b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUjKUzlujX4_kF3gUFgs.bmp", cAlternateFileName="RUJKUZ~1.BMP")) returned 1 [0091.618] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0091.618] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5dc | out: lpFindFileData=0x4c7f5dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 0 [0091.619] FindClose (in: hFindFile=0x6c9c48 | out: hFindFile=0x6c9c48) returned 1 [0091.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f864) returned 1 [0091.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f870) returned 1 [0091.619] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\aPNSxelItB.gif", nBufferLength=0x105, lpBuffer=0x4c7f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\aPNSxelItB.gif", lpFilePart=0x0) returned 0x2d [0091.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f85c) returned 1 [0091.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\aPNSxelItB.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\apnsxelitb.gif"), fInfoLevelId=0x0, lpFileInformation=0x227137c | out: lpFileInformation=0x227137c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf353dd0, ftCreationTime.dwHighDateTime=0x1d8b8f7, ftLastAccessTime.dwLowDateTime=0x59a54c0, ftLastAccessTime.dwHighDateTime=0x1d8b967, ftLastWriteTime.dwLowDateTime=0x59a54c0, ftLastWriteTime.dwHighDateTime=0x1d8b967, nFileSizeHigh=0x0, nFileSizeLow=0xdc68)) returned 1 [0091.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f858) returned 1 [0091.619] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\cTbWykOdR3AhecdSHES.gif", nBufferLength=0x105, lpBuffer=0x4c7f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\cTbWykOdR3AhecdSHES.gif", lpFilePart=0x0) returned 0x36 [0091.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f85c) returned 1 [0091.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\cTbWykOdR3AhecdSHES.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\ctbwykodr3ahecdshes.gif"), fInfoLevelId=0x0, lpFileInformation=0x2271454 | out: lpFileInformation=0x2271454*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2444a3c0, ftCreationTime.dwHighDateTime=0x1d8b3aa, ftLastAccessTime.dwLowDateTime=0x6cbaf9f0, ftLastAccessTime.dwHighDateTime=0x1d8b7bb, ftLastWriteTime.dwLowDateTime=0x6cbaf9f0, ftLastWriteTime.dwHighDateTime=0x1d8b7bb, nFileSizeHigh=0x0, nFileSizeLow=0x16b25)) returned 1 [0091.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f858) returned 1 [0091.619] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4c7f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x2a [0091.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f85c) returned 1 [0091.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2271550 | out: lpFileInformation=0x2271550*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0091.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f858) returned 1 [0091.711] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures", nBufferLength=0x105, lpBuffer=0x4c7f364, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures", lpFilePart=0x0) returned 0x8a [0091.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f808) returned 1 [0091.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c7f884 | out: lpFileInformation=0x4c7f884*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f804) returned 1 [0091.711] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures", nBufferLength=0x105, lpBuffer=0x4c7f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures", lpFilePart=0x0) returned 0x8a [0091.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f798) returned 1 [0091.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c7f814 | out: lpFileInformation=0x4c7f814*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f794) returned 1 [0091.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f798) returned 1 [0091.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c7f814 | out: lpFileInformation=0x4c7f814*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f794) returned 1 [0091.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f798) returned 1 [0091.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx"), fInfoLevelId=0x0, lpFileInformation=0x4c7f814 | out: lpFileInformation=0x4c7f814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce47b8d, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbce94014, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbce94014, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f794) returned 1 [0091.712] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures"), lpSecurityAttributes=0x0) returned 1 [0091.712] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4c7f334, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x2a [0091.712] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4c7f334, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x96 [0091.712] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\desktop.ini"), bFailIfExists=0) returned 1 [0091.716] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\EZSCq5D5osPMTO5bb2Q.jpg", nBufferLength=0x105, lpBuffer=0x4c7f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\EZSCq5D5osPMTO5bb2Q.jpg", lpFilePart=0x0) returned 0x36 [0091.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f85c) returned 1 [0091.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\EZSCq5D5osPMTO5bb2Q.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\ezscq5d5ospmto5bb2q.jpg"), fInfoLevelId=0x0, lpFileInformation=0x227dc38 | out: lpFileInformation=0x227dc38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917c2d40, ftCreationTime.dwHighDateTime=0x1d8bfe5, ftLastAccessTime.dwLowDateTime=0xd86c8fe0, ftLastAccessTime.dwHighDateTime=0x1d8c0fa, ftLastWriteTime.dwLowDateTime=0xd86c8fe0, ftLastWriteTime.dwHighDateTime=0x1d8c0fa, nFileSizeHigh=0x0, nFileSizeLow=0x1320)) returned 1 [0091.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f858) returned 1 [0091.717] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures", nBufferLength=0x105, lpBuffer=0x4c7f364, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures", lpFilePart=0x0) returned 0x8a [0091.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f808) returned 1 [0091.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c7f884 | out: lpFileInformation=0x4c7f884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcee05ee, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbcee05ee, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbcee05ee, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f804) returned 1 [0091.717] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\EZSCq5D5osPMTO5bb2Q.jpg", nBufferLength=0x105, lpBuffer=0x4c7f334, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\EZSCq5D5osPMTO5bb2Q.jpg", lpFilePart=0x0) returned 0x36 [0091.717] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\EZSCq5D5osPMTO5bb2Q.jpg", nBufferLength=0x105, lpBuffer=0x4c7f334, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\EZSCq5D5osPMTO5bb2Q.jpg", lpFilePart=0x0) returned 0xa2 [0091.717] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\EZSCq5D5osPMTO5bb2Q.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\ezscq5d5ospmto5bb2q.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\EZSCq5D5osPMTO5bb2Q.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\ezscq5d5ospmto5bb2q.jpg"), bFailIfExists=0) returned 1 [0091.721] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\HGl8z.bmp", nBufferLength=0x105, lpBuffer=0x4c7f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\HGl8z.bmp", lpFilePart=0x0) returned 0x28 [0091.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f85c) returned 1 [0091.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\HGl8z.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\hgl8z.bmp"), fInfoLevelId=0x0, lpFileInformation=0x227e6f8 | out: lpFileInformation=0x227e6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15983430, ftCreationTime.dwHighDateTime=0x1d8b5a4, ftLastAccessTime.dwLowDateTime=0xb5f43e10, ftLastAccessTime.dwHighDateTime=0x1d8b973, ftLastWriteTime.dwLowDateTime=0xb5f43e10, ftLastWriteTime.dwHighDateTime=0x1d8b973, nFileSizeHigh=0x0, nFileSizeLow=0x5f7c)) returned 1 [0091.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f858) returned 1 [0091.721] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Inm2.bmp", nBufferLength=0x105, lpBuffer=0x4c7f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Inm2.bmp", lpFilePart=0x0) returned 0x27 [0091.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f85c) returned 1 [0091.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Inm2.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\inm2.bmp"), fInfoLevelId=0x0, lpFileInformation=0x227e7bc | out: lpFileInformation=0x227e7bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa331e940, ftCreationTime.dwHighDateTime=0x1d8bcfb, ftLastAccessTime.dwLowDateTime=0x70756b0, ftLastAccessTime.dwHighDateTime=0x1d8c014, ftLastWriteTime.dwLowDateTime=0x70756b0, ftLastWriteTime.dwHighDateTime=0x1d8c014, nFileSizeHigh=0x0, nFileSizeLow=0x69c7)) returned 1 [0091.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f858) returned 1 [0091.721] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\IWQ3hkvN.jpg", nBufferLength=0x105, lpBuffer=0x4c7f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\IWQ3hkvN.jpg", lpFilePart=0x0) returned 0x2b [0091.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f85c) returned 1 [0091.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\IWQ3hkvN.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\iwq3hkvn.jpg"), fInfoLevelId=0x0, lpFileInformation=0x227e87c | out: lpFileInformation=0x227e87c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x197bb470, ftCreationTime.dwHighDateTime=0x1d8bb8d, ftLastAccessTime.dwLowDateTime=0x734154c0, ftLastAccessTime.dwHighDateTime=0x1d8bc95, ftLastWriteTime.dwLowDateTime=0x734154c0, ftLastWriteTime.dwHighDateTime=0x1d8bc95, nFileSizeHigh=0x0, nFileSizeLow=0x16171)) returned 1 [0091.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f858) returned 1 [0091.721] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\muKJoXXN3D4JrJW.png", nBufferLength=0x105, lpBuffer=0x4c7f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\muKJoXXN3D4JrJW.png", lpFilePart=0x0) returned 0x32 [0091.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f85c) returned 1 [0091.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\muKJoXXN3D4JrJW.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\mukjoxxn3d4jrjw.png"), fInfoLevelId=0x0, lpFileInformation=0x227e94c | out: lpFileInformation=0x227e94c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff331830, ftCreationTime.dwHighDateTime=0x1d8b0fe, ftLastAccessTime.dwLowDateTime=0x43fc1770, ftLastAccessTime.dwHighDateTime=0x1d8b779, ftLastWriteTime.dwLowDateTime=0x43fc1770, ftLastWriteTime.dwHighDateTime=0x1d8b779, nFileSizeHigh=0x0, nFileSizeLow=0xe454)) returned 1 [0091.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f858) returned 1 [0091.722] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\OrRl4u.png", nBufferLength=0x105, lpBuffer=0x4c7f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\OrRl4u.png", lpFilePart=0x0) returned 0x29 [0091.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f85c) returned 1 [0091.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\OrRl4u.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\orrl4u.png"), fInfoLevelId=0x0, lpFileInformation=0x227ea38 | out: lpFileInformation=0x227ea38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd940a00, ftCreationTime.dwHighDateTime=0x1d8b5e7, ftLastAccessTime.dwLowDateTime=0xfa124ca0, ftLastAccessTime.dwHighDateTime=0x1d8ba21, ftLastWriteTime.dwLowDateTime=0xfa124ca0, ftLastWriteTime.dwHighDateTime=0x1d8ba21, nFileSizeHigh=0x0, nFileSizeLow=0x755f)) returned 1 [0091.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f858) returned 1 [0091.722] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\RUjKUzlujX4_kF3gUFgs.bmp", nBufferLength=0x105, lpBuffer=0x4c7f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\RUjKUzlujX4_kF3gUFgs.bmp", lpFilePart=0x0) returned 0x37 [0091.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f85c) returned 1 [0091.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\RUjKUzlujX4_kF3gUFgs.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\rujkuzlujx4_kf3gufgs.bmp"), fInfoLevelId=0x0, lpFileInformation=0x227eb00 | out: lpFileInformation=0x227eb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadf35750, ftCreationTime.dwHighDateTime=0x1d8ba22, ftLastAccessTime.dwLowDateTime=0xa650c0b0, ftLastAccessTime.dwHighDateTime=0x1d8c0c5, ftLastWriteTime.dwLowDateTime=0xa650c0b0, ftLastWriteTime.dwHighDateTime=0x1d8c0c5, nFileSizeHigh=0x0, nFileSizeLow=0x852b)) returned 1 [0091.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f858) returned 1 [0091.722] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei", nBufferLength=0x105, lpBuffer=0x4c7f354, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei", lpFilePart=0x0) returned 0x23 [0091.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f7f8) returned 1 [0091.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei"), fInfoLevelId=0x0, lpFileInformation=0x4c7f874 | out: lpFileInformation=0x4c7f874*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x662d9cc0, ftCreationTime.dwHighDateTime=0x1d8c033, ftLastAccessTime.dwLowDateTime=0xd09d2660, ftLastAccessTime.dwHighDateTime=0x1d8c11a, ftLastWriteTime.dwLowDateTime=0xd09d2660, ftLastWriteTime.dwHighDateTime=0x1d8c11a, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0091.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f7f4) returned 1 [0091.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f878) returned 1 [0091.722] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei", lpFilePart=0x0) returned 0x23 [0091.722] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\*"), lpFindFileData=0x4c7f5a0 | out: lpFindFileData=0x4c7f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x662d9cc0, ftCreationTime.dwHighDateTime=0x1d8c033, ftLastAccessTime.dwLowDateTime=0xd09d2660, ftLastAccessTime.dwHighDateTime=0x1d8c11a, ftLastWriteTime.dwLowDateTime=0xd09d2660, ftLastWriteTime.dwHighDateTime=0x1d8c11a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9c48 [0091.723] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x662d9cc0, ftCreationTime.dwHighDateTime=0x1d8c033, ftLastAccessTime.dwLowDateTime=0xd09d2660, ftLastAccessTime.dwHighDateTime=0x1d8c11a, ftLastWriteTime.dwLowDateTime=0xd09d2660, ftLastWriteTime.dwHighDateTime=0x1d8c11a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.724] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90967630, ftCreationTime.dwHighDateTime=0x1d8c0ab, ftLastAccessTime.dwLowDateTime=0x3bc955b0, ftLastAccessTime.dwHighDateTime=0x1d8c104, ftLastWriteTime.dwLowDateTime=0x3bc955b0, ftLastWriteTime.dwHighDateTime=0x1d8c104, nFileSizeHigh=0x0, nFileSizeLow=0x766f, dwReserved0=0x0, dwReserved1=0x0, cFileName="3tWvyF0j4.jpg", cAlternateFileName="3TWVYF~1.JPG")) returned 1 [0091.725] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13649070, ftCreationTime.dwHighDateTime=0x1d8b174, ftLastAccessTime.dwLowDateTime=0xe73d0380, ftLastAccessTime.dwHighDateTime=0x1d8b63f, ftLastWriteTime.dwLowDateTime=0xe73d0380, ftLastWriteTime.dwHighDateTime=0x1d8b63f, nFileSizeHigh=0x0, nFileSizeLow=0xb0b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="4eKVeroY.bmp", cAlternateFileName="")) returned 1 [0091.725] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57ea80d0, ftCreationTime.dwHighDateTime=0x1d8b92e, ftLastAccessTime.dwLowDateTime=0xa5653d90, ftLastAccessTime.dwHighDateTime=0x1d8c028, ftLastWriteTime.dwLowDateTime=0xa5653d90, ftLastWriteTime.dwHighDateTime=0x1d8c028, nFileSizeHigh=0x0, nFileSizeLow=0x16dfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="6dSosDOFHq.png", cAlternateFileName="6DSOSD~1.PNG")) returned 1 [0091.725] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1be9dfd0, ftCreationTime.dwHighDateTime=0x1d8b17d, ftLastAccessTime.dwLowDateTime=0xa1e46a50, ftLastAccessTime.dwHighDateTime=0x1d8bdae, ftLastWriteTime.dwLowDateTime=0xa1e46a50, ftLastWriteTime.dwHighDateTime=0x1d8bdae, nFileSizeHigh=0x0, nFileSizeLow=0x8aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6YkDrl09Fp0nvbn-Fs.bmp", cAlternateFileName="6YKDRL~1.BMP")) returned 1 [0091.725] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc094bc00, ftCreationTime.dwHighDateTime=0x1d8b6ad, ftLastAccessTime.dwLowDateTime=0x5b0a4e10, ftLastAccessTime.dwHighDateTime=0x1d8be76, ftLastWriteTime.dwLowDateTime=0x5b0a4e10, ftLastWriteTime.dwHighDateTime=0x1d8be76, nFileSizeHigh=0x0, nFileSizeLow=0x15f44, dwReserved0=0x0, dwReserved1=0x0, cFileName="7o0XQx_-MIRfC.jpg", cAlternateFileName="7O0XQX~1.JPG")) returned 1 [0091.725] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51a9bc90, ftCreationTime.dwHighDateTime=0x1d8b5eb, ftLastAccessTime.dwLowDateTime=0x83b619d0, ftLastAccessTime.dwHighDateTime=0x1d8be20, ftLastWriteTime.dwLowDateTime=0x83b619d0, ftLastWriteTime.dwHighDateTime=0x1d8be20, nFileSizeHigh=0x0, nFileSizeLow=0x524f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BKYh0FG7N.jpg", cAlternateFileName="BKYH0F~1.JPG")) returned 1 [0091.726] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41512650, ftCreationTime.dwHighDateTime=0x1d8b445, ftLastAccessTime.dwLowDateTime=0xe43735e0, ftLastAccessTime.dwHighDateTime=0x1d8b7a5, ftLastWriteTime.dwLowDateTime=0xe43735e0, ftLastWriteTime.dwHighDateTime=0x1d8b7a5, nFileSizeHigh=0x0, nFileSizeLow=0x368b, dwReserved0=0x0, dwReserved1=0x0, cFileName="buHBhNHnFz1XPN7.jpg", cAlternateFileName="BUHBHN~1.JPG")) returned 1 [0091.726] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7e87ab0, ftCreationTime.dwHighDateTime=0x1d8ba14, ftLastAccessTime.dwLowDateTime=0x2a589400, ftLastAccessTime.dwHighDateTime=0x1d8bbc1, ftLastWriteTime.dwLowDateTime=0x2a589400, ftLastWriteTime.dwHighDateTime=0x1d8bbc1, nFileSizeHigh=0x0, nFileSizeLow=0x931d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HBmc40YnA_vky3ILcu.bmp", cAlternateFileName="HBMC40~1.BMP")) returned 1 [0091.726] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d03420, ftCreationTime.dwHighDateTime=0x1d8b7d0, ftLastAccessTime.dwLowDateTime=0xf7cc8040, ftLastAccessTime.dwHighDateTime=0x1d8baae, ftLastWriteTime.dwLowDateTime=0xf7cc8040, ftLastWriteTime.dwHighDateTime=0x1d8baae, nFileSizeHigh=0x0, nFileSizeLow=0x6db4, dwReserved0=0x0, dwReserved1=0x0, cFileName="I2thuECLh.png", cAlternateFileName="I2THUE~1.PNG")) returned 1 [0091.726] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dc11ef0, ftCreationTime.dwHighDateTime=0x1d8bf12, ftLastAccessTime.dwLowDateTime=0xe7ef540, ftLastAccessTime.dwHighDateTime=0x1d8c08e, ftLastWriteTime.dwLowDateTime=0xe7ef540, ftLastWriteTime.dwHighDateTime=0x1d8c08e, nFileSizeHigh=0x0, nFileSizeLow=0x18710, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0as7WdPy93bp1Jh.jpg", cAlternateFileName="J0AS7W~1.JPG")) returned 1 [0091.726] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53292900, ftCreationTime.dwHighDateTime=0x1d8b68d, ftLastAccessTime.dwLowDateTime=0x5c253b0, ftLastAccessTime.dwHighDateTime=0x1d8b9aa, ftLastWriteTime.dwLowDateTime=0x5c253b0, ftLastWriteTime.dwHighDateTime=0x1d8b9aa, nFileSizeHigh=0x0, nFileSizeLow=0xc8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="jQK_7Zv0rUc8oVDV2l t.jpg", cAlternateFileName="JQK_7Z~1.JPG")) returned 1 [0091.726] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x880cc950, ftCreationTime.dwHighDateTime=0x1d8bc29, ftLastAccessTime.dwLowDateTime=0xa64fdb0, ftLastAccessTime.dwHighDateTime=0x1d8bd00, ftLastWriteTime.dwLowDateTime=0xa64fdb0, ftLastWriteTime.dwHighDateTime=0x1d8bd00, nFileSizeHigh=0x0, nFileSizeLow=0x18abe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jsxb5Tvw6jzAap.jpg", cAlternateFileName="JSXB5T~1.JPG")) returned 1 [0091.727] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0404140, ftCreationTime.dwHighDateTime=0x1d8b7e9, ftLastAccessTime.dwLowDateTime=0x9042ced0, ftLastAccessTime.dwHighDateTime=0x1d8bb43, ftLastWriteTime.dwLowDateTime=0x9042ced0, ftLastWriteTime.dwHighDateTime=0x1d8bb43, nFileSizeHigh=0x0, nFileSizeLow=0xe5c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="kuXF7kwD n.bmp", cAlternateFileName="KUXF7K~1.BMP")) returned 1 [0091.727] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4271bc20, ftCreationTime.dwHighDateTime=0x1d8b864, ftLastAccessTime.dwLowDateTime=0xfdeb430, ftLastAccessTime.dwHighDateTime=0x1d8bcdc, ftLastWriteTime.dwLowDateTime=0xfdeb430, ftLastWriteTime.dwHighDateTime=0x1d8bcdc, nFileSizeHigh=0x0, nFileSizeLow=0x1738c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTR3n.gif", cAlternateFileName="")) returned 1 [0091.727] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f61c950, ftCreationTime.dwHighDateTime=0x1d8c0b6, ftLastAccessTime.dwLowDateTime=0x2c382cd0, ftLastAccessTime.dwHighDateTime=0x1d8c0cc, ftLastWriteTime.dwLowDateTime=0x2c382cd0, ftLastWriteTime.dwHighDateTime=0x1d8c0cc, nFileSizeHigh=0x0, nFileSizeLow=0xf7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="owKcDK.bmp", cAlternateFileName="")) returned 1 [0091.727] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3555000, ftCreationTime.dwHighDateTime=0x1d8b557, ftLastAccessTime.dwLowDateTime=0xd6e23970, ftLastAccessTime.dwHighDateTime=0x1d8c0c5, ftLastWriteTime.dwLowDateTime=0xd6e23970, ftLastWriteTime.dwHighDateTime=0x1d8c0c5, nFileSizeHigh=0x0, nFileSizeLow=0x5560, dwReserved0=0x0, dwReserved1=0x0, cFileName="qF_jebnY.jpg", cAlternateFileName="")) returned 1 [0091.727] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38218db0, ftCreationTime.dwHighDateTime=0x1d8b56f, ftLastAccessTime.dwLowDateTime=0xc85d70, ftLastAccessTime.dwHighDateTime=0x1d8b7be, ftLastWriteTime.dwLowDateTime=0xc85d70, ftLastWriteTime.dwHighDateTime=0x1d8b7be, nFileSizeHigh=0x0, nFileSizeLow=0x69a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QQt-qO4Ia1.gif", cAlternateFileName="QQT-QO~1.GIF")) returned 1 [0091.727] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe25c700, ftCreationTime.dwHighDateTime=0x1d8b93a, ftLastAccessTime.dwLowDateTime=0x72bd6590, ftLastAccessTime.dwHighDateTime=0x1d8bb12, ftLastWriteTime.dwLowDateTime=0x72bd6590, ftLastWriteTime.dwHighDateTime=0x1d8bb12, nFileSizeHigh=0x0, nFileSizeLow=0x2481, dwReserved0=0x0, dwReserved1=0x0, cFileName="s9uDyr.bmp", cAlternateFileName="")) returned 1 [0091.728] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd36dec70, ftCreationTime.dwHighDateTime=0x1d8b54f, ftLastAccessTime.dwLowDateTime=0x374e1370, ftLastAccessTime.dwHighDateTime=0x1d8b5a3, ftLastWriteTime.dwLowDateTime=0x374e1370, ftLastWriteTime.dwHighDateTime=0x1d8b5a3, nFileSizeHigh=0x0, nFileSizeLow=0x1593f, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIDn.gif", cAlternateFileName="")) returned 1 [0091.728] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd88c0d80, ftCreationTime.dwHighDateTime=0x1d8b9a1, ftLastAccessTime.dwLowDateTime=0x816305f0, ftLastAccessTime.dwHighDateTime=0x1d8bf7c, ftLastWriteTime.dwLowDateTime=0x816305f0, ftLastWriteTime.dwHighDateTime=0x1d8bf7c, nFileSizeHigh=0x0, nFileSizeLow=0x152bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="u6LqnbvtT.jpg", cAlternateFileName="U6LQNB~1.JPG")) returned 1 [0091.728] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb234e4c0, ftCreationTime.dwHighDateTime=0x1d8c0c9, ftLastAccessTime.dwLowDateTime=0x39de88c0, ftLastAccessTime.dwHighDateTime=0x1d8c11c, ftLastWriteTime.dwLowDateTime=0x39de88c0, ftLastWriteTime.dwHighDateTime=0x1d8c11c, nFileSizeHigh=0x0, nFileSizeLow=0x13c3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WakBFAv-9jmgDCRsKlr-.gif", cAlternateFileName="WAKBFA~1.GIF")) returned 1 [0091.728] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc70ca9a0, ftCreationTime.dwHighDateTime=0x1d8bb60, ftLastAccessTime.dwLowDateTime=0x6017c110, ftLastAccessTime.dwHighDateTime=0x1d8bf09, ftLastWriteTime.dwLowDateTime=0x6017c110, ftLastWriteTime.dwHighDateTime=0x1d8bf09, nFileSizeHigh=0x0, nFileSizeLow=0x146e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xd90MTkOJWIttsyWn3Cu.gif", cAlternateFileName="XD90MT~1.GIF")) returned 1 [0091.728] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b60cb0, ftCreationTime.dwHighDateTime=0x1d8beb3, ftLastAccessTime.dwLowDateTime=0x324cdcd0, ftLastAccessTime.dwHighDateTime=0x1d8bed1, ftLastWriteTime.dwLowDateTime=0x324cdcd0, ftLastWriteTime.dwHighDateTime=0x1d8bed1, nFileSizeHigh=0x0, nFileSizeLow=0x15c23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y_E0_CTCisi.gif", cAlternateFileName="Y_E0_C~1.GIF")) returned 1 [0091.728] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b60cb0, ftCreationTime.dwHighDateTime=0x1d8beb3, ftLastAccessTime.dwLowDateTime=0x324cdcd0, ftLastAccessTime.dwHighDateTime=0x1d8bed1, ftLastWriteTime.dwLowDateTime=0x324cdcd0, ftLastWriteTime.dwHighDateTime=0x1d8bed1, nFileSizeHigh=0x0, nFileSizeLow=0x15c23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y_E0_CTCisi.gif", cAlternateFileName="Y_E0_C~1.GIF")) returned 0 [0091.729] FindClose (in: hFindFile=0x6c9c48 | out: hFindFile=0x6c9c48) returned 1 [0091.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f834) returned 1 [0091.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f840) returned 1 [0091.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f878) returned 1 [0091.729] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei", lpFilePart=0x0) returned 0x23 [0091.729] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\*"), lpFindFileData=0x4c7f5a0 | out: lpFindFileData=0x4c7f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x662d9cc0, ftCreationTime.dwHighDateTime=0x1d8c033, ftLastAccessTime.dwLowDateTime=0xd09d2660, ftLastAccessTime.dwHighDateTime=0x1d8c11a, ftLastWriteTime.dwLowDateTime=0xd09d2660, ftLastWriteTime.dwHighDateTime=0x1d8c11a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9c48 [0091.729] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x662d9cc0, ftCreationTime.dwHighDateTime=0x1d8c033, ftLastAccessTime.dwLowDateTime=0xd09d2660, ftLastAccessTime.dwHighDateTime=0x1d8c11a, ftLastWriteTime.dwLowDateTime=0xd09d2660, ftLastWriteTime.dwHighDateTime=0x1d8c11a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.729] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90967630, ftCreationTime.dwHighDateTime=0x1d8c0ab, ftLastAccessTime.dwLowDateTime=0x3bc955b0, ftLastAccessTime.dwHighDateTime=0x1d8c104, ftLastWriteTime.dwLowDateTime=0x3bc955b0, ftLastWriteTime.dwHighDateTime=0x1d8c104, nFileSizeHigh=0x0, nFileSizeLow=0x766f, dwReserved0=0x0, dwReserved1=0x0, cFileName="3tWvyF0j4.jpg", cAlternateFileName="3TWVYF~1.JPG")) returned 1 [0091.729] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13649070, ftCreationTime.dwHighDateTime=0x1d8b174, ftLastAccessTime.dwLowDateTime=0xe73d0380, ftLastAccessTime.dwHighDateTime=0x1d8b63f, ftLastWriteTime.dwLowDateTime=0xe73d0380, ftLastWriteTime.dwHighDateTime=0x1d8b63f, nFileSizeHigh=0x0, nFileSizeLow=0xb0b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="4eKVeroY.bmp", cAlternateFileName="")) returned 1 [0091.730] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57ea80d0, ftCreationTime.dwHighDateTime=0x1d8b92e, ftLastAccessTime.dwLowDateTime=0xa5653d90, ftLastAccessTime.dwHighDateTime=0x1d8c028, ftLastWriteTime.dwLowDateTime=0xa5653d90, ftLastWriteTime.dwHighDateTime=0x1d8c028, nFileSizeHigh=0x0, nFileSizeLow=0x16dfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="6dSosDOFHq.png", cAlternateFileName="6DSOSD~1.PNG")) returned 1 [0091.730] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1be9dfd0, ftCreationTime.dwHighDateTime=0x1d8b17d, ftLastAccessTime.dwLowDateTime=0xa1e46a50, ftLastAccessTime.dwHighDateTime=0x1d8bdae, ftLastWriteTime.dwLowDateTime=0xa1e46a50, ftLastWriteTime.dwHighDateTime=0x1d8bdae, nFileSizeHigh=0x0, nFileSizeLow=0x8aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6YkDrl09Fp0nvbn-Fs.bmp", cAlternateFileName="6YKDRL~1.BMP")) returned 1 [0091.730] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc094bc00, ftCreationTime.dwHighDateTime=0x1d8b6ad, ftLastAccessTime.dwLowDateTime=0x5b0a4e10, ftLastAccessTime.dwHighDateTime=0x1d8be76, ftLastWriteTime.dwLowDateTime=0x5b0a4e10, ftLastWriteTime.dwHighDateTime=0x1d8be76, nFileSizeHigh=0x0, nFileSizeLow=0x15f44, dwReserved0=0x0, dwReserved1=0x0, cFileName="7o0XQx_-MIRfC.jpg", cAlternateFileName="7O0XQX~1.JPG")) returned 1 [0091.730] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51a9bc90, ftCreationTime.dwHighDateTime=0x1d8b5eb, ftLastAccessTime.dwLowDateTime=0x83b619d0, ftLastAccessTime.dwHighDateTime=0x1d8be20, ftLastWriteTime.dwLowDateTime=0x83b619d0, ftLastWriteTime.dwHighDateTime=0x1d8be20, nFileSizeHigh=0x0, nFileSizeLow=0x524f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BKYh0FG7N.jpg", cAlternateFileName="BKYH0F~1.JPG")) returned 1 [0091.730] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41512650, ftCreationTime.dwHighDateTime=0x1d8b445, ftLastAccessTime.dwLowDateTime=0xe43735e0, ftLastAccessTime.dwHighDateTime=0x1d8b7a5, ftLastWriteTime.dwLowDateTime=0xe43735e0, ftLastWriteTime.dwHighDateTime=0x1d8b7a5, nFileSizeHigh=0x0, nFileSizeLow=0x368b, dwReserved0=0x0, dwReserved1=0x0, cFileName="buHBhNHnFz1XPN7.jpg", cAlternateFileName="BUHBHN~1.JPG")) returned 1 [0091.730] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7e87ab0, ftCreationTime.dwHighDateTime=0x1d8ba14, ftLastAccessTime.dwLowDateTime=0x2a589400, ftLastAccessTime.dwHighDateTime=0x1d8bbc1, ftLastWriteTime.dwLowDateTime=0x2a589400, ftLastWriteTime.dwHighDateTime=0x1d8bbc1, nFileSizeHigh=0x0, nFileSizeLow=0x931d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HBmc40YnA_vky3ILcu.bmp", cAlternateFileName="HBMC40~1.BMP")) returned 1 [0091.730] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d03420, ftCreationTime.dwHighDateTime=0x1d8b7d0, ftLastAccessTime.dwLowDateTime=0xf7cc8040, ftLastAccessTime.dwHighDateTime=0x1d8baae, ftLastWriteTime.dwLowDateTime=0xf7cc8040, ftLastWriteTime.dwHighDateTime=0x1d8baae, nFileSizeHigh=0x0, nFileSizeLow=0x6db4, dwReserved0=0x0, dwReserved1=0x0, cFileName="I2thuECLh.png", cAlternateFileName="I2THUE~1.PNG")) returned 1 [0091.731] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dc11ef0, ftCreationTime.dwHighDateTime=0x1d8bf12, ftLastAccessTime.dwLowDateTime=0xe7ef540, ftLastAccessTime.dwHighDateTime=0x1d8c08e, ftLastWriteTime.dwLowDateTime=0xe7ef540, ftLastWriteTime.dwHighDateTime=0x1d8c08e, nFileSizeHigh=0x0, nFileSizeLow=0x18710, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0as7WdPy93bp1Jh.jpg", cAlternateFileName="J0AS7W~1.JPG")) returned 1 [0091.731] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53292900, ftCreationTime.dwHighDateTime=0x1d8b68d, ftLastAccessTime.dwLowDateTime=0x5c253b0, ftLastAccessTime.dwHighDateTime=0x1d8b9aa, ftLastWriteTime.dwLowDateTime=0x5c253b0, ftLastWriteTime.dwHighDateTime=0x1d8b9aa, nFileSizeHigh=0x0, nFileSizeLow=0xc8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="jQK_7Zv0rUc8oVDV2l t.jpg", cAlternateFileName="JQK_7Z~1.JPG")) returned 1 [0091.731] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x880cc950, ftCreationTime.dwHighDateTime=0x1d8bc29, ftLastAccessTime.dwLowDateTime=0xa64fdb0, ftLastAccessTime.dwHighDateTime=0x1d8bd00, ftLastWriteTime.dwLowDateTime=0xa64fdb0, ftLastWriteTime.dwHighDateTime=0x1d8bd00, nFileSizeHigh=0x0, nFileSizeLow=0x18abe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jsxb5Tvw6jzAap.jpg", cAlternateFileName="JSXB5T~1.JPG")) returned 1 [0091.731] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0404140, ftCreationTime.dwHighDateTime=0x1d8b7e9, ftLastAccessTime.dwLowDateTime=0x9042ced0, ftLastAccessTime.dwHighDateTime=0x1d8bb43, ftLastWriteTime.dwLowDateTime=0x9042ced0, ftLastWriteTime.dwHighDateTime=0x1d8bb43, nFileSizeHigh=0x0, nFileSizeLow=0xe5c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="kuXF7kwD n.bmp", cAlternateFileName="KUXF7K~1.BMP")) returned 1 [0091.731] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4271bc20, ftCreationTime.dwHighDateTime=0x1d8b864, ftLastAccessTime.dwLowDateTime=0xfdeb430, ftLastAccessTime.dwHighDateTime=0x1d8bcdc, ftLastWriteTime.dwLowDateTime=0xfdeb430, ftLastWriteTime.dwHighDateTime=0x1d8bcdc, nFileSizeHigh=0x0, nFileSizeLow=0x1738c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTR3n.gif", cAlternateFileName="")) returned 1 [0091.731] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f61c950, ftCreationTime.dwHighDateTime=0x1d8c0b6, ftLastAccessTime.dwLowDateTime=0x2c382cd0, ftLastAccessTime.dwHighDateTime=0x1d8c0cc, ftLastWriteTime.dwLowDateTime=0x2c382cd0, ftLastWriteTime.dwHighDateTime=0x1d8c0cc, nFileSizeHigh=0x0, nFileSizeLow=0xf7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="owKcDK.bmp", cAlternateFileName="")) returned 1 [0091.731] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3555000, ftCreationTime.dwHighDateTime=0x1d8b557, ftLastAccessTime.dwLowDateTime=0xd6e23970, ftLastAccessTime.dwHighDateTime=0x1d8c0c5, ftLastWriteTime.dwLowDateTime=0xd6e23970, ftLastWriteTime.dwHighDateTime=0x1d8c0c5, nFileSizeHigh=0x0, nFileSizeLow=0x5560, dwReserved0=0x0, dwReserved1=0x0, cFileName="qF_jebnY.jpg", cAlternateFileName="")) returned 1 [0091.731] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38218db0, ftCreationTime.dwHighDateTime=0x1d8b56f, ftLastAccessTime.dwLowDateTime=0xc85d70, ftLastAccessTime.dwHighDateTime=0x1d8b7be, ftLastWriteTime.dwLowDateTime=0xc85d70, ftLastWriteTime.dwHighDateTime=0x1d8b7be, nFileSizeHigh=0x0, nFileSizeLow=0x69a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QQt-qO4Ia1.gif", cAlternateFileName="QQT-QO~1.GIF")) returned 1 [0091.732] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe25c700, ftCreationTime.dwHighDateTime=0x1d8b93a, ftLastAccessTime.dwLowDateTime=0x72bd6590, ftLastAccessTime.dwHighDateTime=0x1d8bb12, ftLastWriteTime.dwLowDateTime=0x72bd6590, ftLastWriteTime.dwHighDateTime=0x1d8bb12, nFileSizeHigh=0x0, nFileSizeLow=0x2481, dwReserved0=0x0, dwReserved1=0x0, cFileName="s9uDyr.bmp", cAlternateFileName="")) returned 1 [0091.732] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd36dec70, ftCreationTime.dwHighDateTime=0x1d8b54f, ftLastAccessTime.dwLowDateTime=0x374e1370, ftLastAccessTime.dwHighDateTime=0x1d8b5a3, ftLastWriteTime.dwLowDateTime=0x374e1370, ftLastWriteTime.dwHighDateTime=0x1d8b5a3, nFileSizeHigh=0x0, nFileSizeLow=0x1593f, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIDn.gif", cAlternateFileName="")) returned 1 [0091.732] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd88c0d80, ftCreationTime.dwHighDateTime=0x1d8b9a1, ftLastAccessTime.dwLowDateTime=0x816305f0, ftLastAccessTime.dwHighDateTime=0x1d8bf7c, ftLastWriteTime.dwLowDateTime=0x816305f0, ftLastWriteTime.dwHighDateTime=0x1d8bf7c, nFileSizeHigh=0x0, nFileSizeLow=0x152bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="u6LqnbvtT.jpg", cAlternateFileName="U6LQNB~1.JPG")) returned 1 [0091.732] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb234e4c0, ftCreationTime.dwHighDateTime=0x1d8c0c9, ftLastAccessTime.dwLowDateTime=0x39de88c0, ftLastAccessTime.dwHighDateTime=0x1d8c11c, ftLastWriteTime.dwLowDateTime=0x39de88c0, ftLastWriteTime.dwHighDateTime=0x1d8c11c, nFileSizeHigh=0x0, nFileSizeLow=0x13c3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WakBFAv-9jmgDCRsKlr-.gif", cAlternateFileName="WAKBFA~1.GIF")) returned 1 [0091.732] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc70ca9a0, ftCreationTime.dwHighDateTime=0x1d8bb60, ftLastAccessTime.dwLowDateTime=0x6017c110, ftLastAccessTime.dwHighDateTime=0x1d8bf09, ftLastWriteTime.dwLowDateTime=0x6017c110, ftLastWriteTime.dwHighDateTime=0x1d8bf09, nFileSizeHigh=0x0, nFileSizeLow=0x146e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xd90MTkOJWIttsyWn3Cu.gif", cAlternateFileName="XD90MT~1.GIF")) returned 1 [0091.732] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b60cb0, ftCreationTime.dwHighDateTime=0x1d8beb3, ftLastAccessTime.dwLowDateTime=0x324cdcd0, ftLastAccessTime.dwHighDateTime=0x1d8bed1, ftLastWriteTime.dwLowDateTime=0x324cdcd0, ftLastWriteTime.dwHighDateTime=0x1d8bed1, nFileSizeHigh=0x0, nFileSizeLow=0x15c23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y_E0_CTCisi.gif", cAlternateFileName="Y_E0_C~1.GIF")) returned 1 [0091.732] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.733] FindClose (in: hFindFile=0x6c9c48 | out: hFindFile=0x6c9c48) returned 1 [0091.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f834) returned 1 [0091.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f840) returned 1 [0091.733] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\3tWvyF0j4.jpg", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\3tWvyF0j4.jpg", lpFilePart=0x0) returned 0x31 [0091.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\3tWvyF0j4.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\3twvyf0j4.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2283aa8 | out: lpFileInformation=0x2283aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90967630, ftCreationTime.dwHighDateTime=0x1d8c0ab, ftLastAccessTime.dwLowDateTime=0x3bc955b0, ftLastAccessTime.dwHighDateTime=0x1d8c104, ftLastWriteTime.dwLowDateTime=0x3bc955b0, ftLastWriteTime.dwHighDateTime=0x1d8c104, nFileSizeHigh=0x0, nFileSizeLow=0x766f)) returned 1 [0091.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.733] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\4eKVeroY.bmp", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\4eKVeroY.bmp", lpFilePart=0x0) returned 0x30 [0091.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\4eKVeroY.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\4ekveroy.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2283b84 | out: lpFileInformation=0x2283b84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13649070, ftCreationTime.dwHighDateTime=0x1d8b174, ftLastAccessTime.dwLowDateTime=0xe73d0380, ftLastAccessTime.dwHighDateTime=0x1d8b63f, ftLastWriteTime.dwLowDateTime=0xe73d0380, ftLastWriteTime.dwHighDateTime=0x1d8b63f, nFileSizeHigh=0x0, nFileSizeLow=0xb0b3)) returned 1 [0091.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.733] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\6dSosDOFHq.png", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\6dSosDOFHq.png", lpFilePart=0x0) returned 0x32 [0091.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\6dSosDOFHq.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\6dsosdofhq.png"), fInfoLevelId=0x0, lpFileInformation=0x2283c60 | out: lpFileInformation=0x2283c60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57ea80d0, ftCreationTime.dwHighDateTime=0x1d8b92e, ftLastAccessTime.dwLowDateTime=0xa5653d90, ftLastAccessTime.dwHighDateTime=0x1d8c028, ftLastWriteTime.dwLowDateTime=0xa5653d90, ftLastWriteTime.dwHighDateTime=0x1d8c028, nFileSizeHigh=0x0, nFileSizeLow=0x16dfc)) returned 1 [0091.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.733] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\6YkDrl09Fp0nvbn-Fs.bmp", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\6YkDrl09Fp0nvbn-Fs.bmp", lpFilePart=0x0) returned 0x3a [0091.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\6YkDrl09Fp0nvbn-Fs.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\6ykdrl09fp0nvbn-fs.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2283d44 | out: lpFileInformation=0x2283d44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1be9dfd0, ftCreationTime.dwHighDateTime=0x1d8b17d, ftLastAccessTime.dwLowDateTime=0xa1e46a50, ftLastAccessTime.dwHighDateTime=0x1d8bdae, ftLastWriteTime.dwLowDateTime=0xa1e46a50, ftLastWriteTime.dwHighDateTime=0x1d8bdae, nFileSizeHigh=0x0, nFileSizeLow=0x8aa0)) returned 1 [0091.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.734] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\7o0XQx_-MIRfC.jpg", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\7o0XQx_-MIRfC.jpg", lpFilePart=0x0) returned 0x35 [0091.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\7o0XQx_-MIRfC.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\7o0xqx_-mirfc.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2283e48 | out: lpFileInformation=0x2283e48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc094bc00, ftCreationTime.dwHighDateTime=0x1d8b6ad, ftLastAccessTime.dwLowDateTime=0x5b0a4e10, ftLastAccessTime.dwHighDateTime=0x1d8be76, ftLastWriteTime.dwLowDateTime=0x5b0a4e10, ftLastWriteTime.dwHighDateTime=0x1d8be76, nFileSizeHigh=0x0, nFileSizeLow=0x15f44)) returned 1 [0091.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.734] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\BKYh0FG7N.jpg", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\BKYh0FG7N.jpg", lpFilePart=0x0) returned 0x31 [0091.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\BKYh0FG7N.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\bkyh0fg7n.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2283f34 | out: lpFileInformation=0x2283f34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51a9bc90, ftCreationTime.dwHighDateTime=0x1d8b5eb, ftLastAccessTime.dwLowDateTime=0x83b619d0, ftLastAccessTime.dwHighDateTime=0x1d8be20, ftLastWriteTime.dwLowDateTime=0x83b619d0, ftLastWriteTime.dwHighDateTime=0x1d8be20, nFileSizeHigh=0x0, nFileSizeLow=0x524f)) returned 1 [0091.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.734] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\buHBhNHnFz1XPN7.jpg", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\buHBhNHnFz1XPN7.jpg", lpFilePart=0x0) returned 0x37 [0091.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\buHBhNHnFz1XPN7.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\buhbhnhnfz1xpn7.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2284010 | out: lpFileInformation=0x2284010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41512650, ftCreationTime.dwHighDateTime=0x1d8b445, ftLastAccessTime.dwLowDateTime=0xe43735e0, ftLastAccessTime.dwHighDateTime=0x1d8b7a5, ftLastWriteTime.dwLowDateTime=0xe43735e0, ftLastWriteTime.dwHighDateTime=0x1d8b7a5, nFileSizeHigh=0x0, nFileSizeLow=0x368b)) returned 1 [0091.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.734] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\HBmc40YnA_vky3ILcu.bmp", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\HBmc40YnA_vky3ILcu.bmp", lpFilePart=0x0) returned 0x3a [0091.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\HBmc40YnA_vky3ILcu.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\hbmc40yna_vky3ilcu.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2284104 | out: lpFileInformation=0x2284104*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7e87ab0, ftCreationTime.dwHighDateTime=0x1d8ba14, ftLastAccessTime.dwLowDateTime=0x2a589400, ftLastAccessTime.dwHighDateTime=0x1d8bbc1, ftLastWriteTime.dwLowDateTime=0x2a589400, ftLastWriteTime.dwHighDateTime=0x1d8bbc1, nFileSizeHigh=0x0, nFileSizeLow=0x931d)) returned 1 [0091.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.735] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\I2thuECLh.png", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\I2thuECLh.png", lpFilePart=0x0) returned 0x31 [0091.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\I2thuECLh.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\i2thueclh.png"), fInfoLevelId=0x0, lpFileInformation=0x2284208 | out: lpFileInformation=0x2284208*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d03420, ftCreationTime.dwHighDateTime=0x1d8b7d0, ftLastAccessTime.dwLowDateTime=0xf7cc8040, ftLastAccessTime.dwHighDateTime=0x1d8baae, ftLastWriteTime.dwLowDateTime=0xf7cc8040, ftLastWriteTime.dwHighDateTime=0x1d8baae, nFileSizeHigh=0x0, nFileSizeLow=0x6db4)) returned 1 [0091.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.735] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\J0as7WdPy93bp1Jh.jpg", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\J0as7WdPy93bp1Jh.jpg", lpFilePart=0x0) returned 0x38 [0091.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\J0as7WdPy93bp1Jh.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\j0as7wdpy93bp1jh.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22842e4 | out: lpFileInformation=0x22842e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dc11ef0, ftCreationTime.dwHighDateTime=0x1d8bf12, ftLastAccessTime.dwLowDateTime=0xe7ef540, ftLastAccessTime.dwHighDateTime=0x1d8c08e, ftLastWriteTime.dwLowDateTime=0xe7ef540, ftLastWriteTime.dwHighDateTime=0x1d8c08e, nFileSizeHigh=0x0, nFileSizeLow=0x18710)) returned 1 [0091.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.735] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\jQK_7Zv0rUc8oVDV2l t.jpg", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\jQK_7Zv0rUc8oVDV2l t.jpg", lpFilePart=0x0) returned 0x3c [0091.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\jQK_7Zv0rUc8oVDV2l t.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\jqk_7zv0ruc8ovdv2l t.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22843e0 | out: lpFileInformation=0x22843e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53292900, ftCreationTime.dwHighDateTime=0x1d8b68d, ftLastAccessTime.dwLowDateTime=0x5c253b0, ftLastAccessTime.dwHighDateTime=0x1d8b9aa, ftLastWriteTime.dwLowDateTime=0x5c253b0, ftLastWriteTime.dwHighDateTime=0x1d8b9aa, nFileSizeHigh=0x0, nFileSizeLow=0xc8db)) returned 1 [0091.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.735] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\Jsxb5Tvw6jzAap.jpg", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\Jsxb5Tvw6jzAap.jpg", lpFilePart=0x0) returned 0x36 [0091.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\Jsxb5Tvw6jzAap.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\jsxb5tvw6jzaap.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22844ec | out: lpFileInformation=0x22844ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x880cc950, ftCreationTime.dwHighDateTime=0x1d8bc29, ftLastAccessTime.dwLowDateTime=0xa64fdb0, ftLastAccessTime.dwHighDateTime=0x1d8bd00, ftLastWriteTime.dwLowDateTime=0xa64fdb0, ftLastWriteTime.dwHighDateTime=0x1d8bd00, nFileSizeHigh=0x0, nFileSizeLow=0x18abe)) returned 1 [0091.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.736] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\kuXF7kwD n.bmp", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\kuXF7kwD n.bmp", lpFilePart=0x0) returned 0x32 [0091.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\kuXF7kwD n.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\kuxf7kwd n.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22845e0 | out: lpFileInformation=0x22845e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0404140, ftCreationTime.dwHighDateTime=0x1d8b7e9, ftLastAccessTime.dwLowDateTime=0x9042ced0, ftLastAccessTime.dwHighDateTime=0x1d8bb43, ftLastWriteTime.dwLowDateTime=0x9042ced0, ftLastWriteTime.dwHighDateTime=0x1d8bb43, nFileSizeHigh=0x0, nFileSizeLow=0xe5c7)) returned 1 [0091.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.736] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\LTR3n.gif", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\LTR3n.gif", lpFilePart=0x0) returned 0x2d [0091.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\LTR3n.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\ltr3n.gif"), fInfoLevelId=0x0, lpFileInformation=0x22846c4 | out: lpFileInformation=0x22846c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4271bc20, ftCreationTime.dwHighDateTime=0x1d8b864, ftLastAccessTime.dwLowDateTime=0xfdeb430, ftLastAccessTime.dwHighDateTime=0x1d8bcdc, ftLastWriteTime.dwLowDateTime=0xfdeb430, ftLastWriteTime.dwHighDateTime=0x1d8bcdc, nFileSizeHigh=0x0, nFileSizeLow=0x1738c)) returned 1 [0091.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.736] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\owKcDK.bmp", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\owKcDK.bmp", lpFilePart=0x0) returned 0x2e [0091.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\owKcDK.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\owkcdk.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2284790 | out: lpFileInformation=0x2284790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f61c950, ftCreationTime.dwHighDateTime=0x1d8c0b6, ftLastAccessTime.dwLowDateTime=0x2c382cd0, ftLastAccessTime.dwHighDateTime=0x1d8c0cc, ftLastWriteTime.dwLowDateTime=0x2c382cd0, ftLastWriteTime.dwHighDateTime=0x1d8c0cc, nFileSizeHigh=0x0, nFileSizeLow=0xf7e4)) returned 1 [0091.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.736] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\qF_jebnY.jpg", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\qF_jebnY.jpg", lpFilePart=0x0) returned 0x30 [0091.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\qF_jebnY.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\qf_jebny.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2284864 | out: lpFileInformation=0x2284864*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3555000, ftCreationTime.dwHighDateTime=0x1d8b557, ftLastAccessTime.dwLowDateTime=0xd6e23970, ftLastAccessTime.dwHighDateTime=0x1d8c0c5, ftLastWriteTime.dwLowDateTime=0xd6e23970, ftLastWriteTime.dwHighDateTime=0x1d8c0c5, nFileSizeHigh=0x0, nFileSizeLow=0x5560)) returned 1 [0091.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.736] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\QQt-qO4Ia1.gif", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\QQt-qO4Ia1.gif", lpFilePart=0x0) returned 0x32 [0091.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\QQt-qO4Ia1.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\qqt-qo4ia1.gif"), fInfoLevelId=0x0, lpFileInformation=0x2284940 | out: lpFileInformation=0x2284940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38218db0, ftCreationTime.dwHighDateTime=0x1d8b56f, ftLastAccessTime.dwLowDateTime=0xc85d70, ftLastAccessTime.dwHighDateTime=0x1d8b7be, ftLastWriteTime.dwLowDateTime=0xc85d70, ftLastWriteTime.dwHighDateTime=0x1d8b7be, nFileSizeHigh=0x0, nFileSizeLow=0x69a0)) returned 1 [0091.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.737] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\s9uDyr.bmp", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\s9uDyr.bmp", lpFilePart=0x0) returned 0x2e [0091.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\s9uDyr.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\s9udyr.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2284a24 | out: lpFileInformation=0x2284a24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe25c700, ftCreationTime.dwHighDateTime=0x1d8b93a, ftLastAccessTime.dwLowDateTime=0x72bd6590, ftLastAccessTime.dwHighDateTime=0x1d8bb12, ftLastWriteTime.dwLowDateTime=0x72bd6590, ftLastWriteTime.dwHighDateTime=0x1d8bb12, nFileSizeHigh=0x0, nFileSizeLow=0x2481)) returned 1 [0091.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.737] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\TIDn.gif", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\TIDn.gif", lpFilePart=0x0) returned 0x2c [0091.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\TIDn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\tidn.gif"), fInfoLevelId=0x0, lpFileInformation=0x2284af8 | out: lpFileInformation=0x2284af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd36dec70, ftCreationTime.dwHighDateTime=0x1d8b54f, ftLastAccessTime.dwLowDateTime=0x374e1370, ftLastAccessTime.dwHighDateTime=0x1d8b5a3, ftLastWriteTime.dwLowDateTime=0x374e1370, ftLastWriteTime.dwHighDateTime=0x1d8b5a3, nFileSizeHigh=0x0, nFileSizeLow=0x1593f)) returned 1 [0091.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.737] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\u6LqnbvtT.jpg", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\u6LqnbvtT.jpg", lpFilePart=0x0) returned 0x31 [0091.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\u6LqnbvtT.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\u6lqnbvtt.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2284bc4 | out: lpFileInformation=0x2284bc4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd88c0d80, ftCreationTime.dwHighDateTime=0x1d8b9a1, ftLastAccessTime.dwLowDateTime=0x816305f0, ftLastAccessTime.dwHighDateTime=0x1d8bf7c, ftLastWriteTime.dwLowDateTime=0x816305f0, ftLastWriteTime.dwHighDateTime=0x1d8bf7c, nFileSizeHigh=0x0, nFileSizeLow=0x152bb)) returned 1 [0091.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.737] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\WakBFAv-9jmgDCRsKlr-.gif", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\WakBFAv-9jmgDCRsKlr-.gif", lpFilePart=0x0) returned 0x3c [0091.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\WakBFAv-9jmgDCRsKlr-.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\wakbfav-9jmgdcrsklr-.gif"), fInfoLevelId=0x0, lpFileInformation=0x2284ca0 | out: lpFileInformation=0x2284ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb234e4c0, ftCreationTime.dwHighDateTime=0x1d8c0c9, ftLastAccessTime.dwLowDateTime=0x39de88c0, ftLastAccessTime.dwHighDateTime=0x1d8c11c, ftLastWriteTime.dwLowDateTime=0x39de88c0, ftLastWriteTime.dwHighDateTime=0x1d8c11c, nFileSizeHigh=0x0, nFileSizeLow=0x13c3c)) returned 1 [0091.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.738] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\Xd90MTkOJWIttsyWn3Cu.gif", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\Xd90MTkOJWIttsyWn3Cu.gif", lpFilePart=0x0) returned 0x3c [0091.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\Xd90MTkOJWIttsyWn3Cu.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\xd90mtkojwittsywn3cu.gif"), fInfoLevelId=0x0, lpFileInformation=0x2284dac | out: lpFileInformation=0x2284dac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc70ca9a0, ftCreationTime.dwHighDateTime=0x1d8bb60, ftLastAccessTime.dwLowDateTime=0x6017c110, ftLastAccessTime.dwHighDateTime=0x1d8bf09, ftLastWriteTime.dwLowDateTime=0x6017c110, ftLastWriteTime.dwHighDateTime=0x1d8bf09, nFileSizeHigh=0x0, nFileSizeLow=0x146e6)) returned 1 [0091.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.738] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\Y_E0_CTCisi.gif", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\Y_E0_CTCisi.gif", lpFilePart=0x0) returned 0x33 [0091.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\Y_E0_CTCisi.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\y_e0_ctcisi.gif"), fInfoLevelId=0x0, lpFileInformation=0x2284eb8 | out: lpFileInformation=0x2284eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b60cb0, ftCreationTime.dwHighDateTime=0x1d8beb3, ftLastAccessTime.dwLowDateTime=0x324cdcd0, ftLastAccessTime.dwHighDateTime=0x1d8bed1, ftLastWriteTime.dwLowDateTime=0x324cdcd0, ftLastWriteTime.dwHighDateTime=0x1d8bed1, nFileSizeHigh=0x0, nFileSizeLow=0x15c23)) returned 1 [0091.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.738] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x4c7f354, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x2a [0091.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f7f8) returned 1 [0091.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll"), fInfoLevelId=0x0, lpFileInformation=0x4c7f874 | out: lpFileInformation=0x4c7f874*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f7f4) returned 1 [0091.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f878) returned 1 [0091.739] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x2a [0091.739] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\*"), lpFindFileData=0x4c7f5a0 | out: lpFindFileData=0x4c7f5a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c95c8 [0091.742] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.742] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b10dbc5, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.742] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b10dbc5, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0091.742] FindClose (in: hFindFile=0x6c95c8 | out: hFindFile=0x6c95c8) returned 1 [0091.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f834) returned 1 [0091.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f840) returned 1 [0091.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f878) returned 1 [0091.743] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x2a [0091.743] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\*"), lpFindFileData=0x4c7f5a0 | out: lpFindFileData=0x4c7f5a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9c48 [0091.743] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.743] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b10dbc5, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.743] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.743] FindClose (in: hFindFile=0x6c9c48 | out: hFindFile=0x6c9c48) returned 1 [0091.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f834) returned 1 [0091.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f840) returned 1 [0091.744] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini", lpFilePart=0x0) returned 0x36 [0091.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2285f78 | out: lpFileInformation=0x2285f78*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b10dbc5, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1 [0091.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.744] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x4c7f334, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x96 [0091.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f7d8) returned 1 [0091.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\camera roll"), fInfoLevelId=0x0, lpFileInformation=0x4c7f854 | out: lpFileInformation=0x4c7f854*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f7d4) returned 1 [0091.744] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x96 [0091.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f768) returned 1 [0091.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\camera roll"), fInfoLevelId=0x0, lpFileInformation=0x4c7f7e4 | out: lpFileInformation=0x4c7f7e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f764) returned 1 [0091.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f768) returned 1 [0091.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\camera roll"), fInfoLevelId=0x0, lpFileInformation=0x4c7f7e4 | out: lpFileInformation=0x4c7f7e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f764) returned 1 [0091.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f768) returned 1 [0091.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c7f7e4 | out: lpFileInformation=0x4c7f7e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcee05ee, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbcee05ee, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbcee05ee, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f764) returned 1 [0091.745] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\camera roll"), lpSecurityAttributes=0x0) returned 1 [0091.745] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4c7f304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini", lpFilePart=0x0) returned 0x36 [0091.745] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4c7f304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini", lpFilePart=0x0) returned 0xa2 [0091.745] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\camera roll\\desktop.ini"), bFailIfExists=0) returned 1 [0091.835] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x4c7f354, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x2d [0091.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f7f8) returned 1 [0091.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c7f874 | out: lpFileInformation=0x4c7f874*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f7f4) returned 1 [0091.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f878) returned 1 [0091.835] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x2d [0091.835] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\*"), lpFindFileData=0x4c7f5a0 | out: lpFindFileData=0x4c7f5a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9c48 [0091.835] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.836] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.836] FindNextFileW (in: hFindFile=0x6c9c48, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0091.836] FindClose (in: hFindFile=0x6c9c48 | out: hFindFile=0x6c9c48) returned 1 [0091.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f834) returned 1 [0091.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f840) returned 1 [0091.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f878) returned 1 [0091.836] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x2d [0091.836] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\*"), lpFindFileData=0x4c7f5a0 | out: lpFindFileData=0x4c7f5a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9788 [0091.836] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.837] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.837] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x4c7f5ac | out: lpFindFileData=0x4c7f5ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.837] FindClose (in: hFindFile=0x6c9788 | out: hFindFile=0x6c9788) returned 1 [0091.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f834) returned 1 [0091.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f840) returned 1 [0091.837] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini", lpFilePart=0x0) returned 0x39 [0091.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f82c) returned 1 [0091.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x229a870 | out: lpFileInformation=0x229a870*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1 [0091.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f828) returned 1 [0091.837] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x4c7f334, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x99 [0091.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f7d8) returned 1 [0091.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\saved pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c7f854 | out: lpFileInformation=0x4c7f854*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f7d4) returned 1 [0091.838] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x4c7f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x99 [0091.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f768) returned 1 [0091.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\saved pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c7f7e4 | out: lpFileInformation=0x4c7f7e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f764) returned 1 [0091.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f768) returned 1 [0091.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\saved pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c7f7e4 | out: lpFileInformation=0x4c7f7e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f764) returned 1 [0091.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c7f768) returned 1 [0091.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c7f7e4 | out: lpFileInformation=0x4c7f7e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcee05ee, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbcf2e24b, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbcf2e24b, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c7f764) returned 1 [0091.838] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\saved pictures"), lpSecurityAttributes=0x0) returned 1 [0091.840] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4c7f304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini", lpFilePart=0x0) returned 0x39 [0091.840] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4c7f304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini", lpFilePart=0x0) returned 0xa5 [0091.840] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\desktop.ini"), bFailIfExists=0) returned 1 [0091.844] CoUninitialize () Thread: id = 139 os_tid = 0xe94 [0091.664] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0091.665] RoInitialize () returned 0x1 [0091.665] RoUninitialize () returned 0x0 [0091.665] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x4dbf304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f [0091.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7a8) returned 1 [0091.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents" (normalized: "c:\\users\\rdhj0cnfevzx\\documents"), fInfoLevelId=0x0, lpFileInformation=0x4dbf824 | out: lpFileInformation=0x4dbf824*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6bcd843c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6bcd843c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0091.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7a4) returned 1 [0091.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf828) returned 1 [0091.665] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f [0091.665] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\*"), lpFindFileData=0x4dbf550 | out: lpFindFileData=0x4dbf550*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6bcd843c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6bcd843c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9708 [0091.666] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6bcd843c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6bcd843c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.666] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8b72010, ftCreationTime.dwHighDateTime=0x1d85a67, ftLastAccessTime.dwLowDateTime=0xc647e150, ftLastAccessTime.dwHighDateTime=0x1d88b00, ftLastWriteTime.dwLowDateTime=0xc647e150, ftLastWriteTime.dwHighDateTime=0x1d88b00, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="-Eqxdl6Kkdh1bOaf.pptx", cAlternateFileName="-EQXDL~1.PPT")) returned 1 [0091.666] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x353f5760, ftCreationTime.dwHighDateTime=0x1d8b706, ftLastAccessTime.dwLowDateTime=0xd2af1040, ftLastAccessTime.dwHighDateTime=0x1d8bc55, ftLastWriteTime.dwLowDateTime=0xd2af1040, ftLastWriteTime.dwHighDateTime=0x1d8bc55, nFileSizeHigh=0x0, nFileSizeLow=0x14ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="1Z5Kv7GS76lwA.pps", cAlternateFileName="1Z5KV7~1.PPS")) returned 1 [0091.666] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ce2b4d0, ftCreationTime.dwHighDateTime=0x1d8b71a, ftLastAccessTime.dwLowDateTime=0xbaac5aa0, ftLastAccessTime.dwHighDateTime=0x1d8c094, ftLastWriteTime.dwLowDateTime=0xbaac5aa0, ftLastWriteTime.dwHighDateTime=0x1d8c094, nFileSizeHigh=0x0, nFileSizeLow=0xf74b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3DSBsa_0s.ods", cAlternateFileName="3DSBSA~1.ODS")) returned 1 [0091.666] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e2d3c80, ftCreationTime.dwHighDateTime=0x1d8bc53, ftLastAccessTime.dwLowDateTime=0xc7a13a50, ftLastAccessTime.dwHighDateTime=0x1d8c0b7, ftLastWriteTime.dwLowDateTime=0xc7a13a50, ftLastWriteTime.dwHighDateTime=0x1d8c0b7, nFileSizeHigh=0x0, nFileSizeLow=0xce57, dwReserved0=0x0, dwReserved1=0x0, cFileName="3oOk7eq0Br.docx", cAlternateFileName="3OOK7E~1.DOC")) returned 1 [0091.666] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf9eaa0, ftCreationTime.dwHighDateTime=0x1d8c0af, ftLastAccessTime.dwLowDateTime=0x586d40f0, ftLastAccessTime.dwHighDateTime=0x1d8c127, ftLastWriteTime.dwLowDateTime=0x586d40f0, ftLastWriteTime.dwHighDateTime=0x1d8c127, nFileSizeHigh=0x0, nFileSizeLow=0x5b7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="4HGl-VGgKrOM2.pdf", cAlternateFileName="4HGL-V~1.PDF")) returned 1 [0091.667] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6e796b0, ftCreationTime.dwHighDateTime=0x1d8ba68, ftLastAccessTime.dwLowDateTime=0x6c472770, ftLastAccessTime.dwHighDateTime=0x1d8bd77, ftLastWriteTime.dwLowDateTime=0x6c472770, ftLastWriteTime.dwHighDateTime=0x1d8bd77, nFileSizeHigh=0x0, nFileSizeLow=0x16f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="4_F6bcRTeu1.pptx", cAlternateFileName="4_F6BC~1.PPT")) returned 1 [0091.667] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd175ca0, ftCreationTime.dwHighDateTime=0x1d8be49, ftLastAccessTime.dwLowDateTime=0x53c2e6d0, ftLastAccessTime.dwHighDateTime=0x1d8be76, ftLastWriteTime.dwLowDateTime=0x53c2e6d0, ftLastWriteTime.dwHighDateTime=0x1d8be76, nFileSizeHigh=0x0, nFileSizeLow=0x17380, dwReserved0=0x0, dwReserved1=0x0, cFileName="5b6aLak.odp", cAlternateFileName="")) returned 1 [0091.667] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cd30f50, ftCreationTime.dwHighDateTime=0x1d8bff2, ftLastAccessTime.dwLowDateTime=0x10680680, ftLastAccessTime.dwHighDateTime=0x1d8c110, ftLastWriteTime.dwLowDateTime=0x10680680, ftLastWriteTime.dwHighDateTime=0x1d8c110, nFileSizeHigh=0x0, nFileSizeLow=0x15d9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9hWT7Qmr0PrXZJ XbtE.pptx", cAlternateFileName="9HWT7Q~1.PPT")) returned 1 [0091.667] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43649a85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43649a85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4372e947, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.667] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0d9d810, ftCreationTime.dwHighDateTime=0x1d835ba, ftLastAccessTime.dwLowDateTime=0x9a8fe850, ftLastAccessTime.dwHighDateTime=0x1d867ba, ftLastWriteTime.dwLowDateTime=0x9a8fe850, ftLastWriteTime.dwHighDateTime=0x1d867ba, nFileSizeHigh=0x0, nFileSizeLow=0x1889b, dwReserved0=0x0, dwReserved1=0x0, cFileName="E45Yv1XvuulS8zUq.xlsx", cAlternateFileName="E45YV1~1.XLS")) returned 1 [0091.667] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31f478c0, ftCreationTime.dwHighDateTime=0x1d8b18d, ftLastAccessTime.dwLowDateTime=0x32e2a240, ftLastAccessTime.dwHighDateTime=0x1d8b50f, ftLastWriteTime.dwLowDateTime=0x32e2a240, ftLastWriteTime.dwHighDateTime=0x1d8b50f, nFileSizeHigh=0x0, nFileSizeLow=0x102ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="e71u.ots", cAlternateFileName="")) returned 1 [0091.668] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ed64c0, ftCreationTime.dwHighDateTime=0x1d8ae87, ftLastAccessTime.dwLowDateTime=0x2801bd40, ftLastAccessTime.dwHighDateTime=0x1d8b422, ftLastWriteTime.dwLowDateTime=0x2801bd40, ftLastWriteTime.dwHighDateTime=0x1d8b422, nFileSizeHigh=0x0, nFileSizeLow=0xe134, dwReserved0=0x0, dwReserved1=0x0, cFileName="eJH4f.xlsx", cAlternateFileName="EJH4F~1.XLS")) returned 1 [0091.668] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dbc440, ftCreationTime.dwHighDateTime=0x1d8b653, ftLastAccessTime.dwLowDateTime=0x9aeadce0, ftLastAccessTime.dwHighDateTime=0x1d8b938, ftLastWriteTime.dwLowDateTime=0x9aeadce0, ftLastWriteTime.dwHighDateTime=0x1d8b938, nFileSizeHigh=0x0, nFileSizeLow=0x14c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ev9sDmBTxbKhXxI.odt", cAlternateFileName="EV9SDM~1.ODT")) returned 1 [0091.668] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb978a30, ftCreationTime.dwHighDateTime=0x1d8b5ad, ftLastAccessTime.dwLowDateTime=0x27a6eed0, ftLastAccessTime.dwHighDateTime=0x1d8b75e, ftLastWriteTime.dwLowDateTime=0x27a6eed0, ftLastWriteTime.dwHighDateTime=0x1d8b75e, nFileSizeHigh=0x0, nFileSizeLow=0x16b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fShM8Wh__KF.docx", cAlternateFileName="FSHM8W~1.DOC")) returned 1 [0091.668] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b2300c0, ftCreationTime.dwHighDateTime=0x1d8b58a, ftLastAccessTime.dwLowDateTime=0x2cbcf370, ftLastAccessTime.dwHighDateTime=0x1d8bd7a, ftLastWriteTime.dwLowDateTime=0x2cbcf370, ftLastWriteTime.dwHighDateTime=0x1d8bd7a, nFileSizeHigh=0x0, nFileSizeLow=0xf700, dwReserved0=0x0, dwReserved1=0x0, cFileName="gL-dJ 92wqVX.doc", cAlternateFileName="GL-DJ9~1.DOC")) returned 1 [0091.668] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f2bf40, ftCreationTime.dwHighDateTime=0x1d8b2b7, ftLastAccessTime.dwLowDateTime=0xdb84d650, ftLastAccessTime.dwHighDateTime=0x1d8bc6e, ftLastWriteTime.dwLowDateTime=0xdb84d650, ftLastWriteTime.dwHighDateTime=0x1d8bc6e, nFileSizeHigh=0x0, nFileSizeLow=0x10557, dwReserved0=0x0, dwReserved1=0x0, cFileName="J27 Bdkxk-BB.odt", cAlternateFileName="J27BDK~1.ODT")) returned 1 [0091.668] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fc87880, ftCreationTime.dwHighDateTime=0x1d8bd48, ftLastAccessTime.dwLowDateTime=0x2df80ef0, ftLastAccessTime.dwHighDateTime=0x1d8bf50, ftLastWriteTime.dwLowDateTime=0x2df80ef0, ftLastWriteTime.dwHighDateTime=0x1d8bf50, nFileSizeHigh=0x0, nFileSizeLow=0xec27, dwReserved0=0x0, dwReserved1=0x0, cFileName="JbsnSQgtqNF4.xls", cAlternateFileName="JBSNSQ~1.XLS")) returned 1 [0091.669] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda657a80, ftCreationTime.dwHighDateTime=0x1d8a10d, ftLastAccessTime.dwLowDateTime=0xe31766e0, ftLastAccessTime.dwHighDateTime=0x1d8a381, ftLastWriteTime.dwLowDateTime=0xe31766e0, ftLastWriteTime.dwHighDateTime=0x1d8a381, nFileSizeHigh=0x0, nFileSizeLow=0x9da7, dwReserved0=0x0, dwReserved1=0x0, cFileName="jxmdpfmkp6YGZgXo.docx", cAlternateFileName="JXMDPF~1.DOC")) returned 1 [0091.669] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad655e70, ftCreationTime.dwHighDateTime=0x1d8b7cd, ftLastAccessTime.dwLowDateTime=0x441d94c0, ftLastAccessTime.dwHighDateTime=0x1d8c022, ftLastWriteTime.dwLowDateTime=0x441d94c0, ftLastWriteTime.dwHighDateTime=0x1d8c022, nFileSizeHigh=0x0, nFileSizeLow=0x163cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="kuGxj9cn5.ots", cAlternateFileName="KUGXJ9~1.OTS")) returned 1 [0091.669] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda31e5e0, ftCreationTime.dwHighDateTime=0x1d84a72, ftLastAccessTime.dwLowDateTime=0xe77acf00, ftLastAccessTime.dwHighDateTime=0x1d88a7d, ftLastWriteTime.dwLowDateTime=0xe77acf00, ftLastWriteTime.dwHighDateTime=0x1d88a7d, nFileSizeHigh=0x0, nFileSizeLow=0xebe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="l0Ly1dOzG9b.pptx", cAlternateFileName="L0LY1D~1.PPT")) returned 1 [0091.669] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1698ecb0, ftCreationTime.dwHighDateTime=0x1d8845f, ftLastAccessTime.dwLowDateTime=0x7de8f220, ftLastAccessTime.dwHighDateTime=0x1d88abd, ftLastWriteTime.dwLowDateTime=0x7de8f220, ftLastWriteTime.dwHighDateTime=0x1d88abd, nFileSizeHigh=0x0, nFileSizeLow=0x18442, dwReserved0=0x0, dwReserved1=0x0, cFileName="LlNux.docx", cAlternateFileName="LLNUX~1.DOC")) returned 1 [0091.669] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc6be40, ftCreationTime.dwHighDateTime=0x1d83898, ftLastAccessTime.dwLowDateTime=0xb9014e10, ftLastAccessTime.dwHighDateTime=0x1d87998, ftLastWriteTime.dwLowDateTime=0xb9014e10, ftLastWriteTime.dwHighDateTime=0x1d87998, nFileSizeHigh=0x0, nFileSizeLow=0x46b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="M3k6HPkCjln.docx", cAlternateFileName="M3K6HP~1.DOC")) returned 1 [0091.669] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0091.670] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0091.670] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0091.670] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x839084fb, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0091.670] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d246f60, ftCreationTime.dwHighDateTime=0x1d8b733, ftLastAccessTime.dwLowDateTime=0x2856b530, ftLastAccessTime.dwHighDateTime=0x1d8ba2f, ftLastWriteTime.dwLowDateTime=0x2856b530, ftLastWriteTime.dwHighDateTime=0x1d8ba2f, nFileSizeHigh=0x0, nFileSizeLow=0x129e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ptxpBGQ.pdf", cAlternateFileName="")) returned 1 [0091.670] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24a71420, ftCreationTime.dwHighDateTime=0x1d88b9f, ftLastAccessTime.dwLowDateTime=0xd2984010, ftLastAccessTime.dwHighDateTime=0x1d8a821, ftLastWriteTime.dwLowDateTime=0xd2984010, ftLastWriteTime.dwHighDateTime=0x1d8a821, nFileSizeHigh=0x0, nFileSizeLow=0x184cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="R10S_E409.xlsx", cAlternateFileName="R10S_E~1.XLS")) returned 1 [0091.670] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d57e650, ftCreationTime.dwHighDateTime=0x1d8b5f8, ftLastAccessTime.dwLowDateTime=0x41a82910, ftLastAccessTime.dwHighDateTime=0x1d8be8f, ftLastWriteTime.dwLowDateTime=0x41a82910, ftLastWriteTime.dwHighDateTime=0x1d8be8f, nFileSizeHigh=0x0, nFileSizeLow=0x16910, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rdm FvCqzjr4BKW8.ppt", cAlternateFileName="RDMFVC~1.PPT")) returned 1 [0091.671] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe13fb850, ftCreationTime.dwHighDateTime=0x1d8c0db, ftLastAccessTime.dwLowDateTime=0x5ee50380, ftLastAccessTime.dwHighDateTime=0x1d8c124, ftLastWriteTime.dwLowDateTime=0x5ee50380, ftLastWriteTime.dwHighDateTime=0x1d8c124, nFileSizeHigh=0x0, nFileSizeLow=0x507e, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-C55.odt", cAlternateFileName="")) returned 1 [0091.671] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d79c60, ftCreationTime.dwHighDateTime=0x1d88b85, ftLastAccessTime.dwLowDateTime=0x63093ea0, ftLastAccessTime.dwHighDateTime=0x1d8baca, ftLastWriteTime.dwLowDateTime=0x63093ea0, ftLastWriteTime.dwHighDateTime=0x1d8baca, nFileSizeHigh=0x0, nFileSizeLow=0x127e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sAi7.pptx", cAlternateFileName="SAI7~1.PPT")) returned 1 [0091.671] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b929440, ftCreationTime.dwHighDateTime=0x1d8ba0b, ftLastAccessTime.dwLowDateTime=0x66b69e00, ftLastAccessTime.dwHighDateTime=0x1d8bc71, ftLastWriteTime.dwLowDateTime=0x66b69e00, ftLastWriteTime.dwHighDateTime=0x1d8bc71, nFileSizeHigh=0x0, nFileSizeLow=0x5936, dwReserved0=0x0, dwReserved1=0x0, cFileName="SnWjYP8 jUC.ppt", cAlternateFileName="SNWJYP~1.PPT")) returned 1 [0091.671] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed8a4eb0, ftCreationTime.dwHighDateTime=0x1d8aa8b, ftLastAccessTime.dwLowDateTime=0x78385190, ftLastAccessTime.dwHighDateTime=0x1d8b62d, ftLastWriteTime.dwLowDateTime=0x78385190, ftLastWriteTime.dwHighDateTime=0x1d8b62d, nFileSizeHigh=0x0, nFileSizeLow=0x1608f, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2kWqhx.xlsx", cAlternateFileName="T2KWQH~1.XLS")) returned 1 [0091.671] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tH7ZiLMX-lNDz2T4flA", cAlternateFileName="TH7ZIL~1")) returned 1 [0091.671] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9f325e0, ftCreationTime.dwHighDateTime=0x1d8b4e5, ftLastAccessTime.dwLowDateTime=0x96ff5090, ftLastAccessTime.dwHighDateTime=0x1d8be77, ftLastWriteTime.dwLowDateTime=0x96ff5090, ftLastWriteTime.dwHighDateTime=0x1d8be77, nFileSizeHigh=0x0, nFileSizeLow=0x6c8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UxxM9vzrN1plGVva5.ods", cAlternateFileName="UXXM9V~1.ODS")) returned 1 [0091.672] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1257dc0, ftCreationTime.dwHighDateTime=0x1d8aadb, ftLastAccessTime.dwLowDateTime=0xcad8c0e0, ftLastAccessTime.dwHighDateTime=0x1d8b3cd, ftLastWriteTime.dwLowDateTime=0xcad8c0e0, ftLastWriteTime.dwHighDateTime=0x1d8b3cd, nFileSizeHigh=0x0, nFileSizeLow=0xab54, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSFebGAZfWCvODJJqF.xlsx", cAlternateFileName="VSFEBG~1.XLS")) returned 1 [0091.672] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3cc2a0, ftCreationTime.dwHighDateTime=0x1d8ad0a, ftLastAccessTime.dwLowDateTime=0x75320560, ftLastAccessTime.dwHighDateTime=0x1d8b7ac, ftLastWriteTime.dwLowDateTime=0x75320560, ftLastWriteTime.dwHighDateTime=0x1d8b7ac, nFileSizeHigh=0x0, nFileSizeLow=0x16729, dwReserved0=0x0, dwReserved1=0x0, cFileName="X2bCTFNs35VghcjI.docx", cAlternateFileName="X2BCTF~1.DOC")) returned 1 [0091.672] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x327a6aa0, ftCreationTime.dwHighDateTime=0x1d8af69, ftLastAccessTime.dwLowDateTime=0x47383be0, ftLastAccessTime.dwHighDateTime=0x1d8b656, ftLastWriteTime.dwLowDateTime=0x47383be0, ftLastWriteTime.dwHighDateTime=0x1d8b656, nFileSizeHigh=0x0, nFileSizeLow=0xd19b, dwReserved0=0x0, dwReserved1=0x0, cFileName="xYJkClxxh YE11VkYAFc.pptx", cAlternateFileName="XYJKCL~1.PPT")) returned 1 [0091.672] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf401740, ftCreationTime.dwHighDateTime=0x1d8b8cb, ftLastAccessTime.dwLowDateTime=0x3379b560, ftLastAccessTime.dwHighDateTime=0x1d8be13, ftLastWriteTime.dwLowDateTime=0x3379b560, ftLastWriteTime.dwHighDateTime=0x1d8be13, nFileSizeHigh=0x0, nFileSizeLow=0x2f15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z4hDmRU.rtf", cAlternateFileName="")) returned 1 [0091.672] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc18b1d10, ftCreationTime.dwHighDateTime=0x1d86794, ftLastAccessTime.dwLowDateTime=0xeabdc170, ftLastAccessTime.dwHighDateTime=0x1d86a72, ftLastWriteTime.dwLowDateTime=0xeabdc170, ftLastWriteTime.dwHighDateTime=0x1d86a72, nFileSizeHigh=0x0, nFileSizeLow=0x12f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="zuwnbRBCFb l.docx", cAlternateFileName="ZUWNBR~1.DOC")) returned 1 [0091.672] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709ad260, ftCreationTime.dwHighDateTime=0x1d8b79e, ftLastAccessTime.dwLowDateTime=0x4d1307d0, ftLastAccessTime.dwHighDateTime=0x1d8be7a, ftLastWriteTime.dwLowDateTime=0x4d1307d0, ftLastWriteTime.dwHighDateTime=0x1d8be7a, nFileSizeHigh=0x0, nFileSizeLow=0x98fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="_-zO_pPR6V-z.csv", cAlternateFileName="_-ZO_P~1.CSV")) returned 1 [0091.673] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6e5150, ftCreationTime.dwHighDateTime=0x1d8bd40, ftLastAccessTime.dwLowDateTime=0x2e00a1c0, ftLastAccessTime.dwHighDateTime=0x1d8bda0, ftLastWriteTime.dwLowDateTime=0x2e00a1c0, ftLastWriteTime.dwHighDateTime=0x1d8bda0, nFileSizeHigh=0x0, nFileSizeLow=0x2ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_nGPp71.ots", cAlternateFileName="")) returned 1 [0091.673] FindNextFileW (in: hFindFile=0x6c9708, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6e5150, ftCreationTime.dwHighDateTime=0x1d8bd40, ftLastAccessTime.dwLowDateTime=0x2e00a1c0, ftLastAccessTime.dwHighDateTime=0x1d8bda0, ftLastWriteTime.dwLowDateTime=0x2e00a1c0, ftLastWriteTime.dwHighDateTime=0x1d8bda0, nFileSizeHigh=0x0, nFileSizeLow=0x2ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_nGPp71.ots", cAlternateFileName="")) returned 0 [0091.673] FindClose (in: hFindFile=0x6c9708 | out: hFindFile=0x6c9708) returned 1 [0091.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7e4) returned 1 [0091.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7f0) returned 1 [0091.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf828) returned 1 [0091.673] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f [0091.673] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\*"), lpFindFileData=0x4dbf550 | out: lpFindFileData=0x4dbf550*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6bcd843c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6bcd843c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c95c8 [0091.673] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6bcd843c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6bcd843c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.674] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8b72010, ftCreationTime.dwHighDateTime=0x1d85a67, ftLastAccessTime.dwLowDateTime=0xc647e150, ftLastAccessTime.dwHighDateTime=0x1d88b00, ftLastWriteTime.dwLowDateTime=0xc647e150, ftLastWriteTime.dwHighDateTime=0x1d88b00, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="-Eqxdl6Kkdh1bOaf.pptx", cAlternateFileName="-EQXDL~1.PPT")) returned 1 [0091.674] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x353f5760, ftCreationTime.dwHighDateTime=0x1d8b706, ftLastAccessTime.dwLowDateTime=0xd2af1040, ftLastAccessTime.dwHighDateTime=0x1d8bc55, ftLastWriteTime.dwLowDateTime=0xd2af1040, ftLastWriteTime.dwHighDateTime=0x1d8bc55, nFileSizeHigh=0x0, nFileSizeLow=0x14ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="1Z5Kv7GS76lwA.pps", cAlternateFileName="1Z5KV7~1.PPS")) returned 1 [0091.674] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ce2b4d0, ftCreationTime.dwHighDateTime=0x1d8b71a, ftLastAccessTime.dwLowDateTime=0xbaac5aa0, ftLastAccessTime.dwHighDateTime=0x1d8c094, ftLastWriteTime.dwLowDateTime=0xbaac5aa0, ftLastWriteTime.dwHighDateTime=0x1d8c094, nFileSizeHigh=0x0, nFileSizeLow=0xf74b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3DSBsa_0s.ods", cAlternateFileName="3DSBSA~1.ODS")) returned 1 [0091.674] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e2d3c80, ftCreationTime.dwHighDateTime=0x1d8bc53, ftLastAccessTime.dwLowDateTime=0xc7a13a50, ftLastAccessTime.dwHighDateTime=0x1d8c0b7, ftLastWriteTime.dwLowDateTime=0xc7a13a50, ftLastWriteTime.dwHighDateTime=0x1d8c0b7, nFileSizeHigh=0x0, nFileSizeLow=0xce57, dwReserved0=0x0, dwReserved1=0x0, cFileName="3oOk7eq0Br.docx", cAlternateFileName="3OOK7E~1.DOC")) returned 1 [0091.674] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf9eaa0, ftCreationTime.dwHighDateTime=0x1d8c0af, ftLastAccessTime.dwLowDateTime=0x586d40f0, ftLastAccessTime.dwHighDateTime=0x1d8c127, ftLastWriteTime.dwLowDateTime=0x586d40f0, ftLastWriteTime.dwHighDateTime=0x1d8c127, nFileSizeHigh=0x0, nFileSizeLow=0x5b7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="4HGl-VGgKrOM2.pdf", cAlternateFileName="4HGL-V~1.PDF")) returned 1 [0091.674] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6e796b0, ftCreationTime.dwHighDateTime=0x1d8ba68, ftLastAccessTime.dwLowDateTime=0x6c472770, ftLastAccessTime.dwHighDateTime=0x1d8bd77, ftLastWriteTime.dwLowDateTime=0x6c472770, ftLastWriteTime.dwHighDateTime=0x1d8bd77, nFileSizeHigh=0x0, nFileSizeLow=0x16f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="4_F6bcRTeu1.pptx", cAlternateFileName="4_F6BC~1.PPT")) returned 1 [0091.674] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd175ca0, ftCreationTime.dwHighDateTime=0x1d8be49, ftLastAccessTime.dwLowDateTime=0x53c2e6d0, ftLastAccessTime.dwHighDateTime=0x1d8be76, ftLastWriteTime.dwLowDateTime=0x53c2e6d0, ftLastWriteTime.dwHighDateTime=0x1d8be76, nFileSizeHigh=0x0, nFileSizeLow=0x17380, dwReserved0=0x0, dwReserved1=0x0, cFileName="5b6aLak.odp", cAlternateFileName="")) returned 1 [0091.675] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cd30f50, ftCreationTime.dwHighDateTime=0x1d8bff2, ftLastAccessTime.dwLowDateTime=0x10680680, ftLastAccessTime.dwHighDateTime=0x1d8c110, ftLastWriteTime.dwLowDateTime=0x10680680, ftLastWriteTime.dwHighDateTime=0x1d8c110, nFileSizeHigh=0x0, nFileSizeLow=0x15d9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9hWT7Qmr0PrXZJ XbtE.pptx", cAlternateFileName="9HWT7Q~1.PPT")) returned 1 [0091.675] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43649a85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43649a85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4372e947, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.675] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0d9d810, ftCreationTime.dwHighDateTime=0x1d835ba, ftLastAccessTime.dwLowDateTime=0x9a8fe850, ftLastAccessTime.dwHighDateTime=0x1d867ba, ftLastWriteTime.dwLowDateTime=0x9a8fe850, ftLastWriteTime.dwHighDateTime=0x1d867ba, nFileSizeHigh=0x0, nFileSizeLow=0x1889b, dwReserved0=0x0, dwReserved1=0x0, cFileName="E45Yv1XvuulS8zUq.xlsx", cAlternateFileName="E45YV1~1.XLS")) returned 1 [0091.675] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31f478c0, ftCreationTime.dwHighDateTime=0x1d8b18d, ftLastAccessTime.dwLowDateTime=0x32e2a240, ftLastAccessTime.dwHighDateTime=0x1d8b50f, ftLastWriteTime.dwLowDateTime=0x32e2a240, ftLastWriteTime.dwHighDateTime=0x1d8b50f, nFileSizeHigh=0x0, nFileSizeLow=0x102ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="e71u.ots", cAlternateFileName="")) returned 1 [0091.675] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ed64c0, ftCreationTime.dwHighDateTime=0x1d8ae87, ftLastAccessTime.dwLowDateTime=0x2801bd40, ftLastAccessTime.dwHighDateTime=0x1d8b422, ftLastWriteTime.dwLowDateTime=0x2801bd40, ftLastWriteTime.dwHighDateTime=0x1d8b422, nFileSizeHigh=0x0, nFileSizeLow=0xe134, dwReserved0=0x0, dwReserved1=0x0, cFileName="eJH4f.xlsx", cAlternateFileName="EJH4F~1.XLS")) returned 1 [0091.675] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dbc440, ftCreationTime.dwHighDateTime=0x1d8b653, ftLastAccessTime.dwLowDateTime=0x9aeadce0, ftLastAccessTime.dwHighDateTime=0x1d8b938, ftLastWriteTime.dwLowDateTime=0x9aeadce0, ftLastWriteTime.dwHighDateTime=0x1d8b938, nFileSizeHigh=0x0, nFileSizeLow=0x14c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ev9sDmBTxbKhXxI.odt", cAlternateFileName="EV9SDM~1.ODT")) returned 1 [0091.675] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb978a30, ftCreationTime.dwHighDateTime=0x1d8b5ad, ftLastAccessTime.dwLowDateTime=0x27a6eed0, ftLastAccessTime.dwHighDateTime=0x1d8b75e, ftLastWriteTime.dwLowDateTime=0x27a6eed0, ftLastWriteTime.dwHighDateTime=0x1d8b75e, nFileSizeHigh=0x0, nFileSizeLow=0x16b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fShM8Wh__KF.docx", cAlternateFileName="FSHM8W~1.DOC")) returned 1 [0091.675] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b2300c0, ftCreationTime.dwHighDateTime=0x1d8b58a, ftLastAccessTime.dwLowDateTime=0x2cbcf370, ftLastAccessTime.dwHighDateTime=0x1d8bd7a, ftLastWriteTime.dwLowDateTime=0x2cbcf370, ftLastWriteTime.dwHighDateTime=0x1d8bd7a, nFileSizeHigh=0x0, nFileSizeLow=0xf700, dwReserved0=0x0, dwReserved1=0x0, cFileName="gL-dJ 92wqVX.doc", cAlternateFileName="GL-DJ9~1.DOC")) returned 1 [0091.676] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f2bf40, ftCreationTime.dwHighDateTime=0x1d8b2b7, ftLastAccessTime.dwLowDateTime=0xdb84d650, ftLastAccessTime.dwHighDateTime=0x1d8bc6e, ftLastWriteTime.dwLowDateTime=0xdb84d650, ftLastWriteTime.dwHighDateTime=0x1d8bc6e, nFileSizeHigh=0x0, nFileSizeLow=0x10557, dwReserved0=0x0, dwReserved1=0x0, cFileName="J27 Bdkxk-BB.odt", cAlternateFileName="J27BDK~1.ODT")) returned 1 [0091.676] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fc87880, ftCreationTime.dwHighDateTime=0x1d8bd48, ftLastAccessTime.dwLowDateTime=0x2df80ef0, ftLastAccessTime.dwHighDateTime=0x1d8bf50, ftLastWriteTime.dwLowDateTime=0x2df80ef0, ftLastWriteTime.dwHighDateTime=0x1d8bf50, nFileSizeHigh=0x0, nFileSizeLow=0xec27, dwReserved0=0x0, dwReserved1=0x0, cFileName="JbsnSQgtqNF4.xls", cAlternateFileName="JBSNSQ~1.XLS")) returned 1 [0091.676] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda657a80, ftCreationTime.dwHighDateTime=0x1d8a10d, ftLastAccessTime.dwLowDateTime=0xe31766e0, ftLastAccessTime.dwHighDateTime=0x1d8a381, ftLastWriteTime.dwLowDateTime=0xe31766e0, ftLastWriteTime.dwHighDateTime=0x1d8a381, nFileSizeHigh=0x0, nFileSizeLow=0x9da7, dwReserved0=0x0, dwReserved1=0x0, cFileName="jxmdpfmkp6YGZgXo.docx", cAlternateFileName="JXMDPF~1.DOC")) returned 1 [0091.676] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad655e70, ftCreationTime.dwHighDateTime=0x1d8b7cd, ftLastAccessTime.dwLowDateTime=0x441d94c0, ftLastAccessTime.dwHighDateTime=0x1d8c022, ftLastWriteTime.dwLowDateTime=0x441d94c0, ftLastWriteTime.dwHighDateTime=0x1d8c022, nFileSizeHigh=0x0, nFileSizeLow=0x163cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="kuGxj9cn5.ots", cAlternateFileName="KUGXJ9~1.OTS")) returned 1 [0091.676] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda31e5e0, ftCreationTime.dwHighDateTime=0x1d84a72, ftLastAccessTime.dwLowDateTime=0xe77acf00, ftLastAccessTime.dwHighDateTime=0x1d88a7d, ftLastWriteTime.dwLowDateTime=0xe77acf00, ftLastWriteTime.dwHighDateTime=0x1d88a7d, nFileSizeHigh=0x0, nFileSizeLow=0xebe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="l0Ly1dOzG9b.pptx", cAlternateFileName="L0LY1D~1.PPT")) returned 1 [0091.677] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1698ecb0, ftCreationTime.dwHighDateTime=0x1d8845f, ftLastAccessTime.dwLowDateTime=0x7de8f220, ftLastAccessTime.dwHighDateTime=0x1d88abd, ftLastWriteTime.dwLowDateTime=0x7de8f220, ftLastWriteTime.dwHighDateTime=0x1d88abd, nFileSizeHigh=0x0, nFileSizeLow=0x18442, dwReserved0=0x0, dwReserved1=0x0, cFileName="LlNux.docx", cAlternateFileName="LLNUX~1.DOC")) returned 1 [0091.677] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc6be40, ftCreationTime.dwHighDateTime=0x1d83898, ftLastAccessTime.dwLowDateTime=0xb9014e10, ftLastAccessTime.dwHighDateTime=0x1d87998, ftLastWriteTime.dwLowDateTime=0xb9014e10, ftLastWriteTime.dwHighDateTime=0x1d87998, nFileSizeHigh=0x0, nFileSizeLow=0x46b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="M3k6HPkCjln.docx", cAlternateFileName="M3K6HP~1.DOC")) returned 1 [0091.677] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0091.677] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0091.677] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0091.678] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x839084fb, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0091.678] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d246f60, ftCreationTime.dwHighDateTime=0x1d8b733, ftLastAccessTime.dwLowDateTime=0x2856b530, ftLastAccessTime.dwHighDateTime=0x1d8ba2f, ftLastWriteTime.dwLowDateTime=0x2856b530, ftLastWriteTime.dwHighDateTime=0x1d8ba2f, nFileSizeHigh=0x0, nFileSizeLow=0x129e2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ptxpBGQ.pdf", cAlternateFileName="")) returned 1 [0091.678] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24a71420, ftCreationTime.dwHighDateTime=0x1d88b9f, ftLastAccessTime.dwLowDateTime=0xd2984010, ftLastAccessTime.dwHighDateTime=0x1d8a821, ftLastWriteTime.dwLowDateTime=0xd2984010, ftLastWriteTime.dwHighDateTime=0x1d8a821, nFileSizeHigh=0x0, nFileSizeLow=0x184cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="R10S_E409.xlsx", cAlternateFileName="R10S_E~1.XLS")) returned 1 [0091.678] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d57e650, ftCreationTime.dwHighDateTime=0x1d8b5f8, ftLastAccessTime.dwLowDateTime=0x41a82910, ftLastAccessTime.dwHighDateTime=0x1d8be8f, ftLastWriteTime.dwLowDateTime=0x41a82910, ftLastWriteTime.dwHighDateTime=0x1d8be8f, nFileSizeHigh=0x0, nFileSizeLow=0x16910, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rdm FvCqzjr4BKW8.ppt", cAlternateFileName="RDMFVC~1.PPT")) returned 1 [0091.678] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe13fb850, ftCreationTime.dwHighDateTime=0x1d8c0db, ftLastAccessTime.dwLowDateTime=0x5ee50380, ftLastAccessTime.dwHighDateTime=0x1d8c124, ftLastWriteTime.dwLowDateTime=0x5ee50380, ftLastWriteTime.dwHighDateTime=0x1d8c124, nFileSizeHigh=0x0, nFileSizeLow=0x507e, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-C55.odt", cAlternateFileName="")) returned 1 [0091.678] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d79c60, ftCreationTime.dwHighDateTime=0x1d88b85, ftLastAccessTime.dwLowDateTime=0x63093ea0, ftLastAccessTime.dwHighDateTime=0x1d8baca, ftLastWriteTime.dwLowDateTime=0x63093ea0, ftLastWriteTime.dwHighDateTime=0x1d8baca, nFileSizeHigh=0x0, nFileSizeLow=0x127e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sAi7.pptx", cAlternateFileName="SAI7~1.PPT")) returned 1 [0091.678] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b929440, ftCreationTime.dwHighDateTime=0x1d8ba0b, ftLastAccessTime.dwLowDateTime=0x66b69e00, ftLastAccessTime.dwHighDateTime=0x1d8bc71, ftLastWriteTime.dwLowDateTime=0x66b69e00, ftLastWriteTime.dwHighDateTime=0x1d8bc71, nFileSizeHigh=0x0, nFileSizeLow=0x5936, dwReserved0=0x0, dwReserved1=0x0, cFileName="SnWjYP8 jUC.ppt", cAlternateFileName="SNWJYP~1.PPT")) returned 1 [0091.679] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed8a4eb0, ftCreationTime.dwHighDateTime=0x1d8aa8b, ftLastAccessTime.dwLowDateTime=0x78385190, ftLastAccessTime.dwHighDateTime=0x1d8b62d, ftLastWriteTime.dwLowDateTime=0x78385190, ftLastWriteTime.dwHighDateTime=0x1d8b62d, nFileSizeHigh=0x0, nFileSizeLow=0x1608f, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2kWqhx.xlsx", cAlternateFileName="T2KWQH~1.XLS")) returned 1 [0091.679] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tH7ZiLMX-lNDz2T4flA", cAlternateFileName="TH7ZIL~1")) returned 1 [0091.679] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9f325e0, ftCreationTime.dwHighDateTime=0x1d8b4e5, ftLastAccessTime.dwLowDateTime=0x96ff5090, ftLastAccessTime.dwHighDateTime=0x1d8be77, ftLastWriteTime.dwLowDateTime=0x96ff5090, ftLastWriteTime.dwHighDateTime=0x1d8be77, nFileSizeHigh=0x0, nFileSizeLow=0x6c8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UxxM9vzrN1plGVva5.ods", cAlternateFileName="UXXM9V~1.ODS")) returned 1 [0091.679] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1257dc0, ftCreationTime.dwHighDateTime=0x1d8aadb, ftLastAccessTime.dwLowDateTime=0xcad8c0e0, ftLastAccessTime.dwHighDateTime=0x1d8b3cd, ftLastWriteTime.dwLowDateTime=0xcad8c0e0, ftLastWriteTime.dwHighDateTime=0x1d8b3cd, nFileSizeHigh=0x0, nFileSizeLow=0xab54, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSFebGAZfWCvODJJqF.xlsx", cAlternateFileName="VSFEBG~1.XLS")) returned 1 [0091.679] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3cc2a0, ftCreationTime.dwHighDateTime=0x1d8ad0a, ftLastAccessTime.dwLowDateTime=0x75320560, ftLastAccessTime.dwHighDateTime=0x1d8b7ac, ftLastWriteTime.dwLowDateTime=0x75320560, ftLastWriteTime.dwHighDateTime=0x1d8b7ac, nFileSizeHigh=0x0, nFileSizeLow=0x16729, dwReserved0=0x0, dwReserved1=0x0, cFileName="X2bCTFNs35VghcjI.docx", cAlternateFileName="X2BCTF~1.DOC")) returned 1 [0091.679] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x327a6aa0, ftCreationTime.dwHighDateTime=0x1d8af69, ftLastAccessTime.dwLowDateTime=0x47383be0, ftLastAccessTime.dwHighDateTime=0x1d8b656, ftLastWriteTime.dwLowDateTime=0x47383be0, ftLastWriteTime.dwHighDateTime=0x1d8b656, nFileSizeHigh=0x0, nFileSizeLow=0xd19b, dwReserved0=0x0, dwReserved1=0x0, cFileName="xYJkClxxh YE11VkYAFc.pptx", cAlternateFileName="XYJKCL~1.PPT")) returned 1 [0091.679] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf401740, ftCreationTime.dwHighDateTime=0x1d8b8cb, ftLastAccessTime.dwLowDateTime=0x3379b560, ftLastAccessTime.dwHighDateTime=0x1d8be13, ftLastWriteTime.dwLowDateTime=0x3379b560, ftLastWriteTime.dwHighDateTime=0x1d8be13, nFileSizeHigh=0x0, nFileSizeLow=0x2f15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z4hDmRU.rtf", cAlternateFileName="")) returned 1 [0091.680] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc18b1d10, ftCreationTime.dwHighDateTime=0x1d86794, ftLastAccessTime.dwLowDateTime=0xeabdc170, ftLastAccessTime.dwHighDateTime=0x1d86a72, ftLastWriteTime.dwLowDateTime=0xeabdc170, ftLastWriteTime.dwHighDateTime=0x1d86a72, nFileSizeHigh=0x0, nFileSizeLow=0x12f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="zuwnbRBCFb l.docx", cAlternateFileName="ZUWNBR~1.DOC")) returned 1 [0091.680] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709ad260, ftCreationTime.dwHighDateTime=0x1d8b79e, ftLastAccessTime.dwLowDateTime=0x4d1307d0, ftLastAccessTime.dwHighDateTime=0x1d8be7a, ftLastWriteTime.dwLowDateTime=0x4d1307d0, ftLastWriteTime.dwHighDateTime=0x1d8be7a, nFileSizeHigh=0x0, nFileSizeLow=0x98fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="_-zO_pPR6V-z.csv", cAlternateFileName="_-ZO_P~1.CSV")) returned 1 [0091.680] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6e5150, ftCreationTime.dwHighDateTime=0x1d8bd40, ftLastAccessTime.dwLowDateTime=0x2e00a1c0, ftLastAccessTime.dwHighDateTime=0x1d8bda0, ftLastWriteTime.dwLowDateTime=0x2e00a1c0, ftLastWriteTime.dwHighDateTime=0x1d8bda0, nFileSizeHigh=0x0, nFileSizeLow=0x2ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_nGPp71.ots", cAlternateFileName="")) returned 1 [0091.680] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf55c | out: lpFindFileData=0x4dbf55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.680] FindClose (in: hFindFile=0x6c95c8 | out: hFindFile=0x6c95c8) returned 1 [0091.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7e4) returned 1 [0091.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7f0) returned 1 [0091.680] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\-Eqxdl6Kkdh1bOaf.pptx", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\-Eqxdl6Kkdh1bOaf.pptx", lpFilePart=0x0) returned 0x35 [0091.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\-Eqxdl6Kkdh1bOaf.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\-eqxdl6kkdh1boaf.pptx"), fInfoLevelId=0x0, lpFileInformation=0x227a674 | out: lpFileInformation=0x227a674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8b72010, ftCreationTime.dwHighDateTime=0x1d85a67, ftLastAccessTime.dwLowDateTime=0xc647e150, ftLastAccessTime.dwHighDateTime=0x1d88b00, ftLastWriteTime.dwLowDateTime=0xc647e150, ftLastWriteTime.dwHighDateTime=0x1d88b00, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3)) returned 1 [0091.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.681] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\1Z5Kv7GS76lwA.pps", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\1Z5Kv7GS76lwA.pps", lpFilePart=0x0) returned 0x31 [0091.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\1Z5Kv7GS76lwA.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\1z5kv7gs76lwa.pps"), fInfoLevelId=0x0, lpFileInformation=0x227a768 | out: lpFileInformation=0x227a768*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x353f5760, ftCreationTime.dwHighDateTime=0x1d8b706, ftLastAccessTime.dwLowDateTime=0xd2af1040, ftLastAccessTime.dwHighDateTime=0x1d8bc55, ftLastWriteTime.dwLowDateTime=0xd2af1040, ftLastWriteTime.dwHighDateTime=0x1d8bc55, nFileSizeHigh=0x0, nFileSizeLow=0x14ce8)) returned 1 [0091.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.681] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\3DSBsa_0s.ods", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\3DSBsa_0s.ods", lpFilePart=0x0) returned 0x2d [0091.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\3DSBsa_0s.ods" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\3dsbsa_0s.ods"), fInfoLevelId=0x0, lpFileInformation=0x227a84c | out: lpFileInformation=0x227a84c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ce2b4d0, ftCreationTime.dwHighDateTime=0x1d8b71a, ftLastAccessTime.dwLowDateTime=0xbaac5aa0, ftLastAccessTime.dwHighDateTime=0x1d8c094, ftLastWriteTime.dwLowDateTime=0xbaac5aa0, ftLastWriteTime.dwHighDateTime=0x1d8c094, nFileSizeHigh=0x0, nFileSizeLow=0xf74b)) returned 1 [0091.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.681] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\3oOk7eq0Br.docx", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\3oOk7eq0Br.docx", lpFilePart=0x0) returned 0x2f [0091.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\3oOk7eq0Br.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\3ook7eq0br.docx"), fInfoLevelId=0x0, lpFileInformation=0x227a920 | out: lpFileInformation=0x227a920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e2d3c80, ftCreationTime.dwHighDateTime=0x1d8bc53, ftLastAccessTime.dwLowDateTime=0xc7a13a50, ftLastAccessTime.dwHighDateTime=0x1d8c0b7, ftLastWriteTime.dwLowDateTime=0xc7a13a50, ftLastWriteTime.dwHighDateTime=0x1d8c0b7, nFileSizeHigh=0x0, nFileSizeLow=0xce57)) returned 1 [0091.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.681] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\4HGl-VGgKrOM2.pdf", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\4HGl-VGgKrOM2.pdf", lpFilePart=0x0) returned 0x31 [0091.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\4HGl-VGgKrOM2.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\4hgl-vggkrom2.pdf"), fInfoLevelId=0x0, lpFileInformation=0x227a9fc | out: lpFileInformation=0x227a9fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf9eaa0, ftCreationTime.dwHighDateTime=0x1d8c0af, ftLastAccessTime.dwLowDateTime=0x586d40f0, ftLastAccessTime.dwHighDateTime=0x1d8c127, ftLastWriteTime.dwLowDateTime=0x586d40f0, ftLastWriteTime.dwHighDateTime=0x1d8c127, nFileSizeHigh=0x0, nFileSizeLow=0x5b7c)) returned 1 [0091.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.682] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\4_F6bcRTeu1.pptx", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\4_F6bcRTeu1.pptx", lpFilePart=0x0) returned 0x30 [0091.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\4_F6bcRTeu1.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\4_f6bcrteu1.pptx"), fInfoLevelId=0x0, lpFileInformation=0x227aae0 | out: lpFileInformation=0x227aae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6e796b0, ftCreationTime.dwHighDateTime=0x1d8ba68, ftLastAccessTime.dwLowDateTime=0x6c472770, ftLastAccessTime.dwHighDateTime=0x1d8bd77, ftLastWriteTime.dwLowDateTime=0x6c472770, ftLastWriteTime.dwHighDateTime=0x1d8bd77, nFileSizeHigh=0x0, nFileSizeLow=0x16f18)) returned 1 [0091.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.682] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\5b6aLak.odp", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\5b6aLak.odp", lpFilePart=0x0) returned 0x2b [0091.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\5b6aLak.odp" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\5b6alak.odp"), fInfoLevelId=0x0, lpFileInformation=0x227abc4 | out: lpFileInformation=0x227abc4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd175ca0, ftCreationTime.dwHighDateTime=0x1d8be49, ftLastAccessTime.dwLowDateTime=0x53c2e6d0, ftLastAccessTime.dwHighDateTime=0x1d8be76, ftLastWriteTime.dwLowDateTime=0x53c2e6d0, ftLastWriteTime.dwHighDateTime=0x1d8be76, nFileSizeHigh=0x0, nFileSizeLow=0x17380)) returned 1 [0091.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.682] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\9hWT7Qmr0PrXZJ XbtE.pptx", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\9hWT7Qmr0PrXZJ XbtE.pptx", lpFilePart=0x0) returned 0x38 [0091.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\9hWT7Qmr0PrXZJ XbtE.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\9hwt7qmr0prxzj xbte.pptx"), fInfoLevelId=0x0, lpFileInformation=0x227ac90 | out: lpFileInformation=0x227ac90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cd30f50, ftCreationTime.dwHighDateTime=0x1d8bff2, ftLastAccessTime.dwLowDateTime=0x10680680, ftLastAccessTime.dwHighDateTime=0x1d8c110, ftLastWriteTime.dwLowDateTime=0x10680680, ftLastWriteTime.dwHighDateTime=0x1d8c110, nFileSizeHigh=0x0, nFileSizeLow=0x15d9c)) returned 1 [0091.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.682] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2b [0091.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x227ad94 | out: lpFileInformation=0x227ad94*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43649a85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43649a85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4372e947, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0091.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.683] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x4dbf2e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x8b [0091.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf788) returned 1 [0091.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents"), fInfoLevelId=0x0, lpFileInformation=0x4dbf804 | out: lpFileInformation=0x4dbf804*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf784) returned 1 [0091.683] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x8b [0091.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf718) returned 1 [0091.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents"), fInfoLevelId=0x0, lpFileInformation=0x4dbf794 | out: lpFileInformation=0x4dbf794*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf714) returned 1 [0091.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf718) returned 1 [0091.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents"), fInfoLevelId=0x0, lpFileInformation=0x4dbf794 | out: lpFileInformation=0x4dbf794*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf714) returned 1 [0091.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf718) returned 1 [0091.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx"), fInfoLevelId=0x0, lpFileInformation=0x4dbf794 | out: lpFileInformation=0x4dbf794*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce47b8d, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbce47b8d, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbce47b8d, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf714) returned 1 [0091.683] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents"), lpSecurityAttributes=0x0) returned 1 [0091.684] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4dbf2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2b [0091.684] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4dbf2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x97 [0091.684] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents\\desktop.ini"), bFailIfExists=0) returned 1 [0091.703] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\E45Yv1XvuulS8zUq.xlsx", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\E45Yv1XvuulS8zUq.xlsx", lpFilePart=0x0) returned 0x35 [0091.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\E45Yv1XvuulS8zUq.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\e45yv1xvuuls8zuq.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x227bcac | out: lpFileInformation=0x227bcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0d9d810, ftCreationTime.dwHighDateTime=0x1d835ba, ftLastAccessTime.dwLowDateTime=0x9a8fe850, ftLastAccessTime.dwHighDateTime=0x1d867ba, ftLastWriteTime.dwLowDateTime=0x9a8fe850, ftLastWriteTime.dwHighDateTime=0x1d867ba, nFileSizeHigh=0x0, nFileSizeLow=0x1889b)) returned 1 [0091.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.703] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\e71u.ots", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\e71u.ots", lpFilePart=0x0) returned 0x28 [0091.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\e71u.ots" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\e71u.ots"), fInfoLevelId=0x0, lpFileInformation=0x227bda0 | out: lpFileInformation=0x227bda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31f478c0, ftCreationTime.dwHighDateTime=0x1d8b18d, ftLastAccessTime.dwLowDateTime=0x32e2a240, ftLastAccessTime.dwHighDateTime=0x1d8b50f, ftLastWriteTime.dwLowDateTime=0x32e2a240, ftLastWriteTime.dwHighDateTime=0x1d8b50f, nFileSizeHigh=0x0, nFileSizeLow=0x102ec)) returned 1 [0091.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.703] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\eJH4f.xlsx", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\eJH4f.xlsx", lpFilePart=0x0) returned 0x2a [0091.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\eJH4f.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ejh4f.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x227be64 | out: lpFileInformation=0x227be64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ed64c0, ftCreationTime.dwHighDateTime=0x1d8ae87, ftLastAccessTime.dwLowDateTime=0x2801bd40, ftLastAccessTime.dwHighDateTime=0x1d8b422, ftLastWriteTime.dwLowDateTime=0x2801bd40, ftLastWriteTime.dwHighDateTime=0x1d8b422, nFileSizeHigh=0x0, nFileSizeLow=0xe134)) returned 1 [0091.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.703] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\ev9sDmBTxbKhXxI.odt", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\ev9sDmBTxbKhXxI.odt", lpFilePart=0x0) returned 0x33 [0091.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\ev9sDmBTxbKhXxI.odt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ev9sdmbtxbkhxxi.odt"), fInfoLevelId=0x0, lpFileInformation=0x227bf30 | out: lpFileInformation=0x227bf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dbc440, ftCreationTime.dwHighDateTime=0x1d8b653, ftLastAccessTime.dwLowDateTime=0x9aeadce0, ftLastAccessTime.dwHighDateTime=0x1d8b938, ftLastWriteTime.dwLowDateTime=0x9aeadce0, ftLastWriteTime.dwHighDateTime=0x1d8b938, nFileSizeHigh=0x0, nFileSizeLow=0x14c68)) returned 1 [0091.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.704] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\fShM8Wh__KF.docx", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\fShM8Wh__KF.docx", lpFilePart=0x0) returned 0x30 [0091.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\fShM8Wh__KF.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\fshm8wh__kf.docx"), fInfoLevelId=0x0, lpFileInformation=0x227c01c | out: lpFileInformation=0x227c01c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb978a30, ftCreationTime.dwHighDateTime=0x1d8b5ad, ftLastAccessTime.dwLowDateTime=0x27a6eed0, ftLastAccessTime.dwHighDateTime=0x1d8b75e, ftLastWriteTime.dwLowDateTime=0x27a6eed0, ftLastWriteTime.dwHighDateTime=0x1d8b75e, nFileSizeHigh=0x0, nFileSizeLow=0x16b8)) returned 1 [0091.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.704] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\gL-dJ 92wqVX.doc", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\gL-dJ 92wqVX.doc", lpFilePart=0x0) returned 0x30 [0091.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\gL-dJ 92wqVX.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\gl-dj 92wqvx.doc"), fInfoLevelId=0x0, lpFileInformation=0x227c100 | out: lpFileInformation=0x227c100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b2300c0, ftCreationTime.dwHighDateTime=0x1d8b58a, ftLastAccessTime.dwLowDateTime=0x2cbcf370, ftLastAccessTime.dwHighDateTime=0x1d8bd7a, ftLastWriteTime.dwLowDateTime=0x2cbcf370, ftLastWriteTime.dwHighDateTime=0x1d8bd7a, nFileSizeHigh=0x0, nFileSizeLow=0xf700)) returned 1 [0091.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.704] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\J27 Bdkxk-BB.odt", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\J27 Bdkxk-BB.odt", lpFilePart=0x0) returned 0x30 [0091.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\J27 Bdkxk-BB.odt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\j27 bdkxk-bb.odt"), fInfoLevelId=0x0, lpFileInformation=0x227c1e4 | out: lpFileInformation=0x227c1e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f2bf40, ftCreationTime.dwHighDateTime=0x1d8b2b7, ftLastAccessTime.dwLowDateTime=0xdb84d650, ftLastAccessTime.dwHighDateTime=0x1d8bc6e, ftLastWriteTime.dwLowDateTime=0xdb84d650, ftLastWriteTime.dwHighDateTime=0x1d8bc6e, nFileSizeHigh=0x0, nFileSizeLow=0x10557)) returned 1 [0091.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.704] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\JbsnSQgtqNF4.xls", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\JbsnSQgtqNF4.xls", lpFilePart=0x0) returned 0x30 [0091.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\JbsnSQgtqNF4.xls" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\jbsnsqgtqnf4.xls"), fInfoLevelId=0x0, lpFileInformation=0x227c2c8 | out: lpFileInformation=0x227c2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fc87880, ftCreationTime.dwHighDateTime=0x1d8bd48, ftLastAccessTime.dwLowDateTime=0x2df80ef0, ftLastAccessTime.dwHighDateTime=0x1d8bf50, ftLastWriteTime.dwLowDateTime=0x2df80ef0, ftLastWriteTime.dwHighDateTime=0x1d8bf50, nFileSizeHigh=0x0, nFileSizeLow=0xec27)) returned 1 [0091.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.705] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\jxmdpfmkp6YGZgXo.docx", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\jxmdpfmkp6YGZgXo.docx", lpFilePart=0x0) returned 0x35 [0091.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\jxmdpfmkp6YGZgXo.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\jxmdpfmkp6ygzgxo.docx"), fInfoLevelId=0x0, lpFileInformation=0x227c3ac | out: lpFileInformation=0x227c3ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda657a80, ftCreationTime.dwHighDateTime=0x1d8a10d, ftLastAccessTime.dwLowDateTime=0xe31766e0, ftLastAccessTime.dwHighDateTime=0x1d8a381, ftLastWriteTime.dwLowDateTime=0xe31766e0, ftLastWriteTime.dwHighDateTime=0x1d8a381, nFileSizeHigh=0x0, nFileSizeLow=0x9da7)) returned 1 [0091.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.705] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\kuGxj9cn5.ots", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\kuGxj9cn5.ots", lpFilePart=0x0) returned 0x2d [0091.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\kuGxj9cn5.ots" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\kugxj9cn5.ots"), fInfoLevelId=0x0, lpFileInformation=0x227c4a0 | out: lpFileInformation=0x227c4a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad655e70, ftCreationTime.dwHighDateTime=0x1d8b7cd, ftLastAccessTime.dwLowDateTime=0x441d94c0, ftLastAccessTime.dwHighDateTime=0x1d8c022, ftLastWriteTime.dwLowDateTime=0x441d94c0, ftLastWriteTime.dwHighDateTime=0x1d8c022, nFileSizeHigh=0x0, nFileSizeLow=0x163cc)) returned 1 [0091.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.705] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\l0Ly1dOzG9b.pptx", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\l0Ly1dOzG9b.pptx", lpFilePart=0x0) returned 0x30 [0091.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\l0Ly1dOzG9b.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\l0ly1dozg9b.pptx"), fInfoLevelId=0x0, lpFileInformation=0x227c574 | out: lpFileInformation=0x227c574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda31e5e0, ftCreationTime.dwHighDateTime=0x1d84a72, ftLastAccessTime.dwLowDateTime=0xe77acf00, ftLastAccessTime.dwHighDateTime=0x1d88a7d, ftLastWriteTime.dwLowDateTime=0xe77acf00, ftLastWriteTime.dwHighDateTime=0x1d88a7d, nFileSizeHigh=0x0, nFileSizeLow=0xebe1)) returned 1 [0091.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.705] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\LlNux.docx", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\LlNux.docx", lpFilePart=0x0) returned 0x2a [0091.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\LlNux.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\llnux.docx"), fInfoLevelId=0x0, lpFileInformation=0x227c658 | out: lpFileInformation=0x227c658*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1698ecb0, ftCreationTime.dwHighDateTime=0x1d8845f, ftLastAccessTime.dwLowDateTime=0x7de8f220, ftLastAccessTime.dwHighDateTime=0x1d88abd, ftLastWriteTime.dwLowDateTime=0x7de8f220, ftLastWriteTime.dwHighDateTime=0x1d88abd, nFileSizeHigh=0x0, nFileSizeLow=0x18442)) returned 1 [0091.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.705] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\M3k6HPkCjln.docx", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\M3k6HPkCjln.docx", lpFilePart=0x0) returned 0x30 [0091.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\M3k6HPkCjln.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\m3k6hpkcjln.docx"), fInfoLevelId=0x0, lpFileInformation=0x227c724 | out: lpFileInformation=0x227c724*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc6be40, ftCreationTime.dwHighDateTime=0x1d83898, ftLastAccessTime.dwLowDateTime=0xb9014e10, ftLastAccessTime.dwHighDateTime=0x1d87998, ftLastWriteTime.dwLowDateTime=0xb9014e10, ftLastWriteTime.dwHighDateTime=0x1d87998, nFileSizeHigh=0x0, nFileSizeLow=0x46b4)) returned 1 [0091.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.706] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\ptxpBGQ.pdf", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\ptxpBGQ.pdf", lpFilePart=0x0) returned 0x2b [0091.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\ptxpBGQ.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ptxpbgq.pdf"), fInfoLevelId=0x0, lpFileInformation=0x227c808 | out: lpFileInformation=0x227c808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d246f60, ftCreationTime.dwHighDateTime=0x1d8b733, ftLastAccessTime.dwLowDateTime=0x2856b530, ftLastAccessTime.dwHighDateTime=0x1d8ba2f, ftLastWriteTime.dwLowDateTime=0x2856b530, ftLastWriteTime.dwHighDateTime=0x1d8ba2f, nFileSizeHigh=0x0, nFileSizeLow=0x129e2)) returned 1 [0091.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.706] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\R10S_E409.xlsx", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\R10S_E409.xlsx", lpFilePart=0x0) returned 0x2e [0091.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\R10S_E409.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\r10s_e409.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x227c8d4 | out: lpFileInformation=0x227c8d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24a71420, ftCreationTime.dwHighDateTime=0x1d88b9f, ftLastAccessTime.dwLowDateTime=0xd2984010, ftLastAccessTime.dwHighDateTime=0x1d8a821, ftLastWriteTime.dwLowDateTime=0xd2984010, ftLastWriteTime.dwHighDateTime=0x1d8a821, nFileSizeHigh=0x0, nFileSizeLow=0x184cd)) returned 1 [0091.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.706] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Rdm FvCqzjr4BKW8.ppt", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Rdm FvCqzjr4BKW8.ppt", lpFilePart=0x0) returned 0x34 [0091.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Rdm FvCqzjr4BKW8.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\rdm fvcqzjr4bkw8.ppt"), fInfoLevelId=0x0, lpFileInformation=0x227c9b0 | out: lpFileInformation=0x227c9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d57e650, ftCreationTime.dwHighDateTime=0x1d8b5f8, ftLastAccessTime.dwLowDateTime=0x41a82910, ftLastAccessTime.dwHighDateTime=0x1d8be8f, ftLastWriteTime.dwLowDateTime=0x41a82910, ftLastWriteTime.dwHighDateTime=0x1d8be8f, nFileSizeHigh=0x0, nFileSizeLow=0x16910)) returned 1 [0091.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.706] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\S-C55.odt", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\S-C55.odt", lpFilePart=0x0) returned 0x29 [0091.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.707] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\S-C55.odt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\s-c55.odt"), fInfoLevelId=0x0, lpFileInformation=0x227caa4 | out: lpFileInformation=0x227caa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe13fb850, ftCreationTime.dwHighDateTime=0x1d8c0db, ftLastAccessTime.dwLowDateTime=0x5ee50380, ftLastAccessTime.dwHighDateTime=0x1d8c124, ftLastWriteTime.dwLowDateTime=0x5ee50380, ftLastWriteTime.dwHighDateTime=0x1d8c124, nFileSizeHigh=0x0, nFileSizeLow=0x507e)) returned 1 [0091.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.707] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\sAi7.pptx", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\sAi7.pptx", lpFilePart=0x0) returned 0x29 [0091.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.707] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\sAi7.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\sai7.pptx"), fInfoLevelId=0x0, lpFileInformation=0x227cb68 | out: lpFileInformation=0x227cb68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d79c60, ftCreationTime.dwHighDateTime=0x1d88b85, ftLastAccessTime.dwLowDateTime=0x63093ea0, ftLastAccessTime.dwHighDateTime=0x1d8baca, ftLastWriteTime.dwLowDateTime=0x63093ea0, ftLastWriteTime.dwHighDateTime=0x1d8baca, nFileSizeHigh=0x0, nFileSizeLow=0x127e8)) returned 1 [0091.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.707] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\SnWjYP8 jUC.ppt", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\SnWjYP8 jUC.ppt", lpFilePart=0x0) returned 0x2f [0091.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.707] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\SnWjYP8 jUC.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\snwjyp8 juc.ppt"), fInfoLevelId=0x0, lpFileInformation=0x227cc2c | out: lpFileInformation=0x227cc2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b929440, ftCreationTime.dwHighDateTime=0x1d8ba0b, ftLastAccessTime.dwLowDateTime=0x66b69e00, ftLastAccessTime.dwHighDateTime=0x1d8bc71, ftLastWriteTime.dwLowDateTime=0x66b69e00, ftLastWriteTime.dwHighDateTime=0x1d8bc71, nFileSizeHigh=0x0, nFileSizeLow=0x5936)) returned 1 [0091.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.707] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\t2kWqhx.xlsx", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\t2kWqhx.xlsx", lpFilePart=0x0) returned 0x2c [0091.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.707] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\t2kWqhx.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\t2kwqhx.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x227cd08 | out: lpFileInformation=0x227cd08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed8a4eb0, ftCreationTime.dwHighDateTime=0x1d8aa8b, ftLastAccessTime.dwLowDateTime=0x78385190, ftLastAccessTime.dwHighDateTime=0x1d8b62d, ftLastWriteTime.dwLowDateTime=0x78385190, ftLastWriteTime.dwHighDateTime=0x1d8b62d, nFileSizeHigh=0x0, nFileSizeLow=0x1608f)) returned 1 [0091.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.777] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\UxxM9vzrN1plGVva5.ods", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\UxxM9vzrN1plGVva5.ods", lpFilePart=0x0) returned 0x35 [0091.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\UxxM9vzrN1plGVva5.ods" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\uxxm9vzrn1plgvva5.ods"), fInfoLevelId=0x0, lpFileInformation=0x228defc | out: lpFileInformation=0x228defc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9f325e0, ftCreationTime.dwHighDateTime=0x1d8b4e5, ftLastAccessTime.dwLowDateTime=0x96ff5090, ftLastAccessTime.dwHighDateTime=0x1d8be77, ftLastWriteTime.dwLowDateTime=0x96ff5090, ftLastWriteTime.dwHighDateTime=0x1d8be77, nFileSizeHigh=0x0, nFileSizeLow=0x6c8e)) returned 1 [0091.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.778] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\VSFebGAZfWCvODJJqF.xlsx", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\VSFebGAZfWCvODJJqF.xlsx", lpFilePart=0x0) returned 0x37 [0091.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\VSFebGAZfWCvODJJqF.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\vsfebgazfwcvodjjqf.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x228dff0 | out: lpFileInformation=0x228dff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1257dc0, ftCreationTime.dwHighDateTime=0x1d8aadb, ftLastAccessTime.dwLowDateTime=0xcad8c0e0, ftLastAccessTime.dwHighDateTime=0x1d8b3cd, ftLastWriteTime.dwLowDateTime=0xcad8c0e0, ftLastWriteTime.dwHighDateTime=0x1d8b3cd, nFileSizeHigh=0x0, nFileSizeLow=0xab54)) returned 1 [0091.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.778] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\X2bCTFNs35VghcjI.docx", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\X2bCTFNs35VghcjI.docx", lpFilePart=0x0) returned 0x35 [0091.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\X2bCTFNs35VghcjI.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\x2bctfns35vghcji.docx"), fInfoLevelId=0x0, lpFileInformation=0x228e0ec | out: lpFileInformation=0x228e0ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3cc2a0, ftCreationTime.dwHighDateTime=0x1d8ad0a, ftLastAccessTime.dwLowDateTime=0x75320560, ftLastAccessTime.dwHighDateTime=0x1d8b7ac, ftLastWriteTime.dwLowDateTime=0x75320560, ftLastWriteTime.dwHighDateTime=0x1d8b7ac, nFileSizeHigh=0x0, nFileSizeLow=0x16729)) returned 1 [0091.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.778] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\xYJkClxxh YE11VkYAFc.pptx", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\xYJkClxxh YE11VkYAFc.pptx", lpFilePart=0x0) returned 0x39 [0091.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\xYJkClxxh YE11VkYAFc.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xyjkclxxh ye11vkyafc.pptx"), fInfoLevelId=0x0, lpFileInformation=0x228e1e0 | out: lpFileInformation=0x228e1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x327a6aa0, ftCreationTime.dwHighDateTime=0x1d8af69, ftLastAccessTime.dwLowDateTime=0x47383be0, ftLastAccessTime.dwHighDateTime=0x1d8b656, ftLastWriteTime.dwLowDateTime=0x47383be0, ftLastWriteTime.dwHighDateTime=0x1d8b656, nFileSizeHigh=0x0, nFileSizeLow=0xd19b)) returned 1 [0091.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.778] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Z4hDmRU.rtf", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Z4hDmRU.rtf", lpFilePart=0x0) returned 0x2b [0091.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Z4hDmRU.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\z4hdmru.rtf"), fInfoLevelId=0x0, lpFileInformation=0x228e2e4 | out: lpFileInformation=0x228e2e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf401740, ftCreationTime.dwHighDateTime=0x1d8b8cb, ftLastAccessTime.dwLowDateTime=0x3379b560, ftLastAccessTime.dwHighDateTime=0x1d8be13, ftLastWriteTime.dwLowDateTime=0x3379b560, ftLastWriteTime.dwHighDateTime=0x1d8be13, nFileSizeHigh=0x0, nFileSizeLow=0x2f15)) returned 1 [0091.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.779] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\zuwnbRBCFb l.docx", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\zuwnbRBCFb l.docx", lpFilePart=0x0) returned 0x31 [0091.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\zuwnbRBCFb l.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\zuwnbrbcfb l.docx"), fInfoLevelId=0x0, lpFileInformation=0x228e3b0 | out: lpFileInformation=0x228e3b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc18b1d10, ftCreationTime.dwHighDateTime=0x1d86794, ftLastAccessTime.dwLowDateTime=0xeabdc170, ftLastAccessTime.dwHighDateTime=0x1d86a72, ftLastWriteTime.dwLowDateTime=0xeabdc170, ftLastWriteTime.dwHighDateTime=0x1d86a72, nFileSizeHigh=0x0, nFileSizeLow=0x12f2)) returned 1 [0091.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.779] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x4dbf2e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x8b [0091.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf788) returned 1 [0091.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents"), fInfoLevelId=0x0, lpFileInformation=0x4dbf804 | out: lpFileInformation=0x4dbf804*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce94014, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbce94014, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbce94014, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf784) returned 1 [0091.779] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\zuwnbRBCFb l.docx", nBufferLength=0x105, lpBuffer=0x4dbf2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\zuwnbRBCFb l.docx", lpFilePart=0x0) returned 0x31 [0091.779] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\zuwnbRBCFb l.docx", nBufferLength=0x105, lpBuffer=0x4dbf2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\zuwnbRBCFb l.docx", lpFilePart=0x0) returned 0x9d [0091.779] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\zuwnbRBCFb l.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\zuwnbrbcfb l.docx"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\zuwnbRBCFb l.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents\\zuwnbrbcfb l.docx"), bFailIfExists=0) returned 1 [0091.783] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_-zO_pPR6V-z.csv", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\_-zO_pPR6V-z.csv", lpFilePart=0x0) returned 0x30 [0091.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_-zO_pPR6V-z.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_-zo_ppr6v-z.csv"), fInfoLevelId=0x0, lpFileInformation=0x228ee10 | out: lpFileInformation=0x228ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709ad260, ftCreationTime.dwHighDateTime=0x1d8b79e, ftLastAccessTime.dwLowDateTime=0x4d1307d0, ftLastAccessTime.dwHighDateTime=0x1d8be7a, ftLastWriteTime.dwLowDateTime=0x4d1307d0, ftLastWriteTime.dwHighDateTime=0x1d8be7a, nFileSizeHigh=0x0, nFileSizeLow=0x98fb)) returned 1 [0091.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.783] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_nGPp71.ots", nBufferLength=0x105, lpBuffer=0x4dbf2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\_nGPp71.ots", lpFilePart=0x0) returned 0x2b [0091.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7dc) returned 1 [0091.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_nGPp71.ots" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_ngpp71.ots"), fInfoLevelId=0x0, lpFileInformation=0x228eef4 | out: lpFileInformation=0x228eef4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6e5150, ftCreationTime.dwHighDateTime=0x1d8bd40, ftLastAccessTime.dwLowDateTime=0x2e00a1c0, ftLastAccessTime.dwHighDateTime=0x1d8bda0, ftLastWriteTime.dwLowDateTime=0x2e00a1c0, ftLastWriteTime.dwHighDateTime=0x1d8bda0, nFileSizeHigh=0x0, nFileSizeLow=0x2ae0)) returned 1 [0091.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7d8) returned 1 [0091.783] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x4dbf2d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music", lpFilePart=0x0) returned 0x28 [0091.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf778) returned 1 [0091.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my music"), fInfoLevelId=0x0, lpFileInformation=0x4dbf7f4 | out: lpFileInformation=0x4dbf7f4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf774) returned 1 [0091.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7f8) returned 1 [0091.783] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music", lpFilePart=0x0) returned 0x28 [0091.783] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my music\\*"), lpFindFileData=0x4dbf520 | out: lpFindFileData=0x4dbf520*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0091.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7bc) returned 1 [0091.795] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x4dbf2d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2b [0091.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf778) returned 1 [0091.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x4dbf7f4 | out: lpFileInformation=0x4dbf7f4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf774) returned 1 [0091.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7f8) returned 1 [0091.796] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2b [0091.796] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my pictures\\*"), lpFindFileData=0x4dbf520 | out: lpFindFileData=0x4dbf520*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0091.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7bc) returned 1 [0091.797] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x4dbf2d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos", lpFilePart=0x0) returned 0x29 [0091.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf778) returned 1 [0091.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my videos"), fInfoLevelId=0x0, lpFileInformation=0x4dbf7f4 | out: lpFileInformation=0x4dbf7f4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf774) returned 1 [0091.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7f8) returned 1 [0091.798] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos", lpFilePart=0x0) returned 0x29 [0091.798] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my videos\\*"), lpFindFileData=0x4dbf520 | out: lpFindFileData=0x4dbf520*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0091.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7bc) returned 1 [0091.799] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x4dbf2d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2d [0091.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf778) returned 1 [0091.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x4dbf7f4 | out: lpFileInformation=0x4dbf7f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x886727b4, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf774) returned 1 [0091.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7f8) returned 1 [0091.803] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2d [0091.803] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\*"), lpFindFileData=0x4dbf520 | out: lpFindFileData=0x4dbf520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c95c8 [0091.804] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.804] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6397affd, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6397affd, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8866b39a, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="achoo@gdllo.de.pst", cAlternateFileName="ACHOO@~1.PST")) returned 1 [0091.804] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6397affd, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6397affd, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8866b39a, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="achoo@gdllo.de.pst", cAlternateFileName="ACHOO@~1.PST")) returned 0 [0091.804] FindClose (in: hFindFile=0x6c95c8 | out: hFindFile=0x6c95c8) returned 1 [0091.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7b4) returned 1 [0091.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7c0) returned 1 [0091.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7f8) returned 1 [0091.804] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2d [0091.804] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\*"), lpFindFileData=0x4dbf520 | out: lpFindFileData=0x4dbf520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c95c8 [0091.805] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.805] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6397affd, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6397affd, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8866b39a, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="achoo@gdllo.de.pst", cAlternateFileName="ACHOO@~1.PST")) returned 1 [0091.805] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.805] FindClose (in: hFindFile=0x6c95c8 | out: hFindFile=0x6c95c8) returned 1 [0091.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7b4) returned 1 [0091.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7c0) returned 1 [0091.805] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\achoo@gdllo.de.pst", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\achoo@gdllo.de.pst", lpFilePart=0x0) returned 0x40 [0091.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7ac) returned 1 [0091.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\achoo@gdllo.de.pst" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\achoo@gdllo.de.pst"), fInfoLevelId=0x0, lpFileInformation=0x2291c10 | out: lpFileInformation=0x2291c10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6397affd, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6397affd, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8866b39a, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x42400)) returned 1 [0091.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7a8) returned 1 [0091.805] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", nBufferLength=0x105, lpBuffer=0x4dbf2d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", lpFilePart=0x0) returned 0x33 [0091.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf778) returned 1 [0091.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla"), fInfoLevelId=0x0, lpFileInformation=0x4dbf7f4 | out: lpFileInformation=0x4dbf7f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0091.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf774) returned 1 [0091.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7f8) returned 1 [0091.806] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", lpFilePart=0x0) returned 0x33 [0091.806] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\*"), lpFindFileData=0x4dbf520 | out: lpFindFileData=0x4dbf520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c95c8 [0091.806] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.806] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1589c160, ftCreationTime.dwHighDateTime=0x1d8bd5c, ftLastAccessTime.dwLowDateTime=0x45393cc0, ftLastAccessTime.dwHighDateTime=0x1d8bd97, ftLastWriteTime.dwLowDateTime=0x45393cc0, ftLastWriteTime.dwHighDateTime=0x1d8bd97, nFileSizeHigh=0x0, nFileSizeLow=0xc9dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="2hsIAD1BQHc7jnWpNx.pdf", cAlternateFileName="2HSIAD~1.PDF")) returned 1 [0091.806] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e2c1470, ftCreationTime.dwHighDateTime=0x1d8b891, ftLastAccessTime.dwLowDateTime=0x8ef4f010, ftLastAccessTime.dwHighDateTime=0x1d8c03b, ftLastWriteTime.dwLowDateTime=0x8ef4f010, ftLastWriteTime.dwHighDateTime=0x1d8c03b, nFileSizeHigh=0x0, nFileSizeLow=0xab9, dwReserved0=0x0, dwReserved1=0x0, cFileName="5-DZJSZ32WSdJ.xls", cAlternateFileName="5-DZJS~1.XLS")) returned 1 [0091.807] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bee7c0, ftCreationTime.dwHighDateTime=0x1d8b889, ftLastAccessTime.dwLowDateTime=0xce3f6db0, ftLastAccessTime.dwHighDateTime=0x1d8c011, ftLastWriteTime.dwLowDateTime=0xce3f6db0, ftLastWriteTime.dwHighDateTime=0x1d8c011, nFileSizeHigh=0x0, nFileSizeLow=0x10253, dwReserved0=0x0, dwReserved1=0x0, cFileName="a-A-qFq AF.csv", cAlternateFileName="A-A-QF~1.CSV")) returned 1 [0091.807] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d48b0, ftCreationTime.dwHighDateTime=0x1d8ba38, ftLastAccessTime.dwLowDateTime=0xaf1b71d0, ftLastAccessTime.dwHighDateTime=0x1d8bb0d, ftLastWriteTime.dwLowDateTime=0xaf1b71d0, ftLastWriteTime.dwHighDateTime=0x1d8bb0d, nFileSizeHigh=0x0, nFileSizeLow=0x1553c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bf2mHVDW3clH.ppt", cAlternateFileName="BF2MHV~1.PPT")) returned 1 [0091.807] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x814fee60, ftCreationTime.dwHighDateTime=0x1d8bf14, ftLastAccessTime.dwLowDateTime=0xabb8e610, ftLastAccessTime.dwHighDateTime=0x1d8c014, ftLastWriteTime.dwLowDateTime=0xabb8e610, ftLastWriteTime.dwHighDateTime=0x1d8c014, nFileSizeHigh=0x0, nFileSizeLow=0xc6eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3Fj0r8hONU.ppt", cAlternateFileName="C3FJ0R~1.PPT")) returned 1 [0091.807] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17178ef0, ftCreationTime.dwHighDateTime=0x1d8b0c7, ftLastAccessTime.dwLowDateTime=0xa82734f0, ftLastAccessTime.dwHighDateTime=0x1d8bc10, ftLastWriteTime.dwLowDateTime=0xa82734f0, ftLastWriteTime.dwHighDateTime=0x1d8bc10, nFileSizeHigh=0x0, nFileSizeLow=0x7692, dwReserved0=0x0, dwReserved1=0x0, cFileName="C8L6OgRoJd6.rtf", cAlternateFileName="C8L6OG~1.RTF")) returned 1 [0091.807] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca47540, ftCreationTime.dwHighDateTime=0x1d8b690, ftLastAccessTime.dwLowDateTime=0x5f1ffb50, ftLastAccessTime.dwHighDateTime=0x1d8bf50, ftLastWriteTime.dwLowDateTime=0x5f1ffb50, ftLastWriteTime.dwHighDateTime=0x1d8bf50, nFileSizeHigh=0x0, nFileSizeLow=0x168b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CfeUIGTcVlbmZqCLP.csv", cAlternateFileName="CFEUIG~1.CSV")) returned 1 [0091.807] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3daa70, ftCreationTime.dwHighDateTime=0x1d8bc44, ftLastAccessTime.dwLowDateTime=0x682cc6c0, ftLastAccessTime.dwHighDateTime=0x1d8bd83, ftLastWriteTime.dwLowDateTime=0x682cc6c0, ftLastWriteTime.dwHighDateTime=0x1d8bd83, nFileSizeHigh=0x0, nFileSizeLow=0x15d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fvw20_rgJzZv8FGp.xls", cAlternateFileName="FVW20_~1.XLS")) returned 1 [0091.808] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21ba9fd0, ftCreationTime.dwHighDateTime=0x1d8b231, ftLastAccessTime.dwLowDateTime=0x809f2bc0, ftLastAccessTime.dwHighDateTime=0x1d8bdf2, ftLastWriteTime.dwLowDateTime=0x809f2bc0, ftLastWriteTime.dwHighDateTime=0x1d8bdf2, nFileSizeHigh=0x0, nFileSizeLow=0x2846, dwReserved0=0x0, dwReserved1=0x0, cFileName="mWQOQh4ldF5U-0k.pps", cAlternateFileName="MWQOQH~1.PPS")) returned 1 [0091.808] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1838b0c0, ftCreationTime.dwHighDateTime=0x1d8bff9, ftLastAccessTime.dwLowDateTime=0x82b5eab0, ftLastAccessTime.dwHighDateTime=0x1d8c04b, ftLastWriteTime.dwLowDateTime=0x82b5eab0, ftLastWriteTime.dwHighDateTime=0x1d8c04b, nFileSizeHigh=0x0, nFileSizeLow=0x1631d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q4ZKn3tp.xls", cAlternateFileName="")) returned 1 [0091.808] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a94d90, ftCreationTime.dwHighDateTime=0x1d8be15, ftLastAccessTime.dwLowDateTime=0x540da90, ftLastAccessTime.dwHighDateTime=0x1d8be7f, ftLastWriteTime.dwLowDateTime=0x540da90, ftLastWriteTime.dwHighDateTime=0x1d8be7f, nFileSizeHigh=0x0, nFileSizeLow=0x5c75, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECojIt nyClc3HiT.doc", cAlternateFileName="RECOJI~1.DOC")) returned 1 [0091.808] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a92b070, ftCreationTime.dwHighDateTime=0x1d8bcca, ftLastAccessTime.dwLowDateTime=0xe7eab850, ftLastAccessTime.dwHighDateTime=0x1d8be45, ftLastWriteTime.dwLowDateTime=0xe7eab850, ftLastWriteTime.dwHighDateTime=0x1d8be45, nFileSizeHigh=0x0, nFileSizeLow=0x13934, dwReserved0=0x0, dwReserved1=0x0, cFileName="T90UZdn2P1f7n3-fQaKi.ods", cAlternateFileName="T90UZD~1.ODS")) returned 1 [0091.808] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da37310, ftCreationTime.dwHighDateTime=0x1d8b1f3, ftLastAccessTime.dwLowDateTime=0x76cd84d0, ftLastAccessTime.dwHighDateTime=0x1d8b239, ftLastWriteTime.dwLowDateTime=0x76cd84d0, ftLastWriteTime.dwHighDateTime=0x1d8b239, nFileSizeHigh=0x0, nFileSizeLow=0xe412, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbduRUTXa.docx", cAlternateFileName="TBDURU~1.DOC")) returned 1 [0091.809] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa94eb7c0, ftCreationTime.dwHighDateTime=0x1d8bacd, ftLastAccessTime.dwLowDateTime=0x946a1970, ftLastAccessTime.dwHighDateTime=0x1d8c069, ftLastWriteTime.dwLowDateTime=0x946a1970, ftLastWriteTime.dwHighDateTime=0x1d8c069, nFileSizeHigh=0x0, nFileSizeLow=0x181c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="UvFd-0OcgfkrbGVtLF6.xlsx", cAlternateFileName="UVFD-0~1.XLS")) returned 1 [0091.809] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359e9570, ftCreationTime.dwHighDateTime=0x1d8bd48, ftLastAccessTime.dwLowDateTime=0xefc320f0, ftLastAccessTime.dwHighDateTime=0x1d8bdc1, ftLastWriteTime.dwLowDateTime=0xefc320f0, ftLastWriteTime.dwHighDateTime=0x1d8bdc1, nFileSizeHigh=0x0, nFileSizeLow=0x9f30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VcH8lOCD8NPvxN-LPks.rtf", cAlternateFileName="VCH8LO~1.RTF")) returned 1 [0091.809] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cde8e0, ftCreationTime.dwHighDateTime=0x1d8bea9, ftLastAccessTime.dwLowDateTime=0xc0d6ff10, ftLastAccessTime.dwHighDateTime=0x1d8c0c7, ftLastWriteTime.dwLowDateTime=0xc0d6ff10, ftLastWriteTime.dwHighDateTime=0x1d8c0c7, nFileSizeHigh=0x0, nFileSizeLow=0xefe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vKgNAjCUO5.pps", cAlternateFileName="VKGNAJ~1.PPS")) returned 1 [0091.809] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc975760, ftCreationTime.dwHighDateTime=0x1d8b790, ftLastAccessTime.dwLowDateTime=0xd37a5a10, ftLastAccessTime.dwHighDateTime=0x1d8b9e5, ftLastWriteTime.dwLowDateTime=0xd37a5a10, ftLastWriteTime.dwHighDateTime=0x1d8b9e5, nFileSizeHigh=0x0, nFileSizeLow=0xf3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wJEu5X2748bM.xlsx", cAlternateFileName="WJEU5X~1.XLS")) returned 1 [0091.809] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f0e030, ftCreationTime.dwHighDateTime=0x1d8bfc4, ftLastAccessTime.dwLowDateTime=0xcba47010, ftLastAccessTime.dwHighDateTime=0x1d8c0d8, ftLastWriteTime.dwLowDateTime=0xcba47010, ftLastWriteTime.dwHighDateTime=0x1d8c0d8, nFileSizeHigh=0x0, nFileSizeLow=0x829f, dwReserved0=0x0, dwReserved1=0x0, cFileName="xb_Tn6.docx", cAlternateFileName="XB_TN6~1.DOC")) returned 1 [0091.809] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f0e030, ftCreationTime.dwHighDateTime=0x1d8bfc4, ftLastAccessTime.dwLowDateTime=0xcba47010, ftLastAccessTime.dwHighDateTime=0x1d8c0d8, ftLastWriteTime.dwLowDateTime=0xcba47010, ftLastWriteTime.dwHighDateTime=0x1d8c0d8, nFileSizeHigh=0x0, nFileSizeLow=0x829f, dwReserved0=0x0, dwReserved1=0x0, cFileName="xb_Tn6.docx", cAlternateFileName="XB_TN6~1.DOC")) returned 0 [0091.810] FindClose (in: hFindFile=0x6c95c8 | out: hFindFile=0x6c95c8) returned 1 [0091.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7b4) returned 1 [0091.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7c0) returned 1 [0091.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7f8) returned 1 [0091.810] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", lpFilePart=0x0) returned 0x33 [0091.810] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\*"), lpFindFileData=0x4dbf520 | out: lpFindFileData=0x4dbf520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c96c8 [0091.810] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.810] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1589c160, ftCreationTime.dwHighDateTime=0x1d8bd5c, ftLastAccessTime.dwLowDateTime=0x45393cc0, ftLastAccessTime.dwHighDateTime=0x1d8bd97, ftLastWriteTime.dwLowDateTime=0x45393cc0, ftLastWriteTime.dwHighDateTime=0x1d8bd97, nFileSizeHigh=0x0, nFileSizeLow=0xc9dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="2hsIAD1BQHc7jnWpNx.pdf", cAlternateFileName="2HSIAD~1.PDF")) returned 1 [0091.810] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e2c1470, ftCreationTime.dwHighDateTime=0x1d8b891, ftLastAccessTime.dwLowDateTime=0x8ef4f010, ftLastAccessTime.dwHighDateTime=0x1d8c03b, ftLastWriteTime.dwLowDateTime=0x8ef4f010, ftLastWriteTime.dwHighDateTime=0x1d8c03b, nFileSizeHigh=0x0, nFileSizeLow=0xab9, dwReserved0=0x0, dwReserved1=0x0, cFileName="5-DZJSZ32WSdJ.xls", cAlternateFileName="5-DZJS~1.XLS")) returned 1 [0091.810] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bee7c0, ftCreationTime.dwHighDateTime=0x1d8b889, ftLastAccessTime.dwLowDateTime=0xce3f6db0, ftLastAccessTime.dwHighDateTime=0x1d8c011, ftLastWriteTime.dwLowDateTime=0xce3f6db0, ftLastWriteTime.dwHighDateTime=0x1d8c011, nFileSizeHigh=0x0, nFileSizeLow=0x10253, dwReserved0=0x0, dwReserved1=0x0, cFileName="a-A-qFq AF.csv", cAlternateFileName="A-A-QF~1.CSV")) returned 1 [0091.811] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d48b0, ftCreationTime.dwHighDateTime=0x1d8ba38, ftLastAccessTime.dwLowDateTime=0xaf1b71d0, ftLastAccessTime.dwHighDateTime=0x1d8bb0d, ftLastWriteTime.dwLowDateTime=0xaf1b71d0, ftLastWriteTime.dwHighDateTime=0x1d8bb0d, nFileSizeHigh=0x0, nFileSizeLow=0x1553c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bf2mHVDW3clH.ppt", cAlternateFileName="BF2MHV~1.PPT")) returned 1 [0091.811] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x814fee60, ftCreationTime.dwHighDateTime=0x1d8bf14, ftLastAccessTime.dwLowDateTime=0xabb8e610, ftLastAccessTime.dwHighDateTime=0x1d8c014, ftLastWriteTime.dwLowDateTime=0xabb8e610, ftLastWriteTime.dwHighDateTime=0x1d8c014, nFileSizeHigh=0x0, nFileSizeLow=0xc6eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3Fj0r8hONU.ppt", cAlternateFileName="C3FJ0R~1.PPT")) returned 1 [0091.811] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17178ef0, ftCreationTime.dwHighDateTime=0x1d8b0c7, ftLastAccessTime.dwLowDateTime=0xa82734f0, ftLastAccessTime.dwHighDateTime=0x1d8bc10, ftLastWriteTime.dwLowDateTime=0xa82734f0, ftLastWriteTime.dwHighDateTime=0x1d8bc10, nFileSizeHigh=0x0, nFileSizeLow=0x7692, dwReserved0=0x0, dwReserved1=0x0, cFileName="C8L6OgRoJd6.rtf", cAlternateFileName="C8L6OG~1.RTF")) returned 1 [0091.811] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca47540, ftCreationTime.dwHighDateTime=0x1d8b690, ftLastAccessTime.dwLowDateTime=0x5f1ffb50, ftLastAccessTime.dwHighDateTime=0x1d8bf50, ftLastWriteTime.dwLowDateTime=0x5f1ffb50, ftLastWriteTime.dwHighDateTime=0x1d8bf50, nFileSizeHigh=0x0, nFileSizeLow=0x168b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CfeUIGTcVlbmZqCLP.csv", cAlternateFileName="CFEUIG~1.CSV")) returned 1 [0091.811] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3daa70, ftCreationTime.dwHighDateTime=0x1d8bc44, ftLastAccessTime.dwLowDateTime=0x682cc6c0, ftLastAccessTime.dwHighDateTime=0x1d8bd83, ftLastWriteTime.dwLowDateTime=0x682cc6c0, ftLastWriteTime.dwHighDateTime=0x1d8bd83, nFileSizeHigh=0x0, nFileSizeLow=0x15d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fvw20_rgJzZv8FGp.xls", cAlternateFileName="FVW20_~1.XLS")) returned 1 [0091.811] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21ba9fd0, ftCreationTime.dwHighDateTime=0x1d8b231, ftLastAccessTime.dwLowDateTime=0x809f2bc0, ftLastAccessTime.dwHighDateTime=0x1d8bdf2, ftLastWriteTime.dwLowDateTime=0x809f2bc0, ftLastWriteTime.dwHighDateTime=0x1d8bdf2, nFileSizeHigh=0x0, nFileSizeLow=0x2846, dwReserved0=0x0, dwReserved1=0x0, cFileName="mWQOQh4ldF5U-0k.pps", cAlternateFileName="MWQOQH~1.PPS")) returned 1 [0091.811] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1838b0c0, ftCreationTime.dwHighDateTime=0x1d8bff9, ftLastAccessTime.dwLowDateTime=0x82b5eab0, ftLastAccessTime.dwHighDateTime=0x1d8c04b, ftLastWriteTime.dwLowDateTime=0x82b5eab0, ftLastWriteTime.dwHighDateTime=0x1d8c04b, nFileSizeHigh=0x0, nFileSizeLow=0x1631d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q4ZKn3tp.xls", cAlternateFileName="")) returned 1 [0091.812] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a94d90, ftCreationTime.dwHighDateTime=0x1d8be15, ftLastAccessTime.dwLowDateTime=0x540da90, ftLastAccessTime.dwHighDateTime=0x1d8be7f, ftLastWriteTime.dwLowDateTime=0x540da90, ftLastWriteTime.dwHighDateTime=0x1d8be7f, nFileSizeHigh=0x0, nFileSizeLow=0x5c75, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECojIt nyClc3HiT.doc", cAlternateFileName="RECOJI~1.DOC")) returned 1 [0091.812] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a92b070, ftCreationTime.dwHighDateTime=0x1d8bcca, ftLastAccessTime.dwLowDateTime=0xe7eab850, ftLastAccessTime.dwHighDateTime=0x1d8be45, ftLastWriteTime.dwLowDateTime=0xe7eab850, ftLastWriteTime.dwHighDateTime=0x1d8be45, nFileSizeHigh=0x0, nFileSizeLow=0x13934, dwReserved0=0x0, dwReserved1=0x0, cFileName="T90UZdn2P1f7n3-fQaKi.ods", cAlternateFileName="T90UZD~1.ODS")) returned 1 [0091.812] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da37310, ftCreationTime.dwHighDateTime=0x1d8b1f3, ftLastAccessTime.dwLowDateTime=0x76cd84d0, ftLastAccessTime.dwHighDateTime=0x1d8b239, ftLastWriteTime.dwLowDateTime=0x76cd84d0, ftLastWriteTime.dwHighDateTime=0x1d8b239, nFileSizeHigh=0x0, nFileSizeLow=0xe412, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbduRUTXa.docx", cAlternateFileName="TBDURU~1.DOC")) returned 1 [0091.812] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa94eb7c0, ftCreationTime.dwHighDateTime=0x1d8bacd, ftLastAccessTime.dwLowDateTime=0x946a1970, ftLastAccessTime.dwHighDateTime=0x1d8c069, ftLastWriteTime.dwLowDateTime=0x946a1970, ftLastWriteTime.dwHighDateTime=0x1d8c069, nFileSizeHigh=0x0, nFileSizeLow=0x181c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="UvFd-0OcgfkrbGVtLF6.xlsx", cAlternateFileName="UVFD-0~1.XLS")) returned 1 [0091.812] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359e9570, ftCreationTime.dwHighDateTime=0x1d8bd48, ftLastAccessTime.dwLowDateTime=0xefc320f0, ftLastAccessTime.dwHighDateTime=0x1d8bdc1, ftLastWriteTime.dwLowDateTime=0xefc320f0, ftLastWriteTime.dwHighDateTime=0x1d8bdc1, nFileSizeHigh=0x0, nFileSizeLow=0x9f30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VcH8lOCD8NPvxN-LPks.rtf", cAlternateFileName="VCH8LO~1.RTF")) returned 1 [0091.812] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cde8e0, ftCreationTime.dwHighDateTime=0x1d8bea9, ftLastAccessTime.dwLowDateTime=0xc0d6ff10, ftLastAccessTime.dwHighDateTime=0x1d8c0c7, ftLastWriteTime.dwLowDateTime=0xc0d6ff10, ftLastWriteTime.dwHighDateTime=0x1d8c0c7, nFileSizeHigh=0x0, nFileSizeLow=0xefe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vKgNAjCUO5.pps", cAlternateFileName="VKGNAJ~1.PPS")) returned 1 [0091.812] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc975760, ftCreationTime.dwHighDateTime=0x1d8b790, ftLastAccessTime.dwLowDateTime=0xd37a5a10, ftLastAccessTime.dwHighDateTime=0x1d8b9e5, ftLastWriteTime.dwLowDateTime=0xd37a5a10, ftLastWriteTime.dwHighDateTime=0x1d8b9e5, nFileSizeHigh=0x0, nFileSizeLow=0xf3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wJEu5X2748bM.xlsx", cAlternateFileName="WJEU5X~1.XLS")) returned 1 [0091.812] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f0e030, ftCreationTime.dwHighDateTime=0x1d8bfc4, ftLastAccessTime.dwLowDateTime=0xcba47010, ftLastAccessTime.dwHighDateTime=0x1d8c0d8, ftLastWriteTime.dwLowDateTime=0xcba47010, ftLastWriteTime.dwHighDateTime=0x1d8c0d8, nFileSizeHigh=0x0, nFileSizeLow=0x829f, dwReserved0=0x0, dwReserved1=0x0, cFileName="xb_Tn6.docx", cAlternateFileName="XB_TN6~1.DOC")) returned 1 [0091.813] FindNextFileW (in: hFindFile=0x6c96c8, lpFindFileData=0x4dbf52c | out: lpFindFileData=0x4dbf52c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.813] FindClose (in: hFindFile=0x6c96c8 | out: hFindFile=0x6c96c8) returned 1 [0091.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7b4) returned 1 [0091.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7c0) returned 1 [0091.813] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\2hsIAD1BQHc7jnWpNx.pdf", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\2hsIAD1BQHc7jnWpNx.pdf", lpFilePart=0x0) returned 0x4a [0091.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7ac) returned 1 [0091.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\2hsIAD1BQHc7jnWpNx.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\2hsiad1bqhc7jnwpnx.pdf"), fInfoLevelId=0x0, lpFileInformation=0x2296c38 | out: lpFileInformation=0x2296c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1589c160, ftCreationTime.dwHighDateTime=0x1d8bd5c, ftLastAccessTime.dwLowDateTime=0x45393cc0, ftLastAccessTime.dwHighDateTime=0x1d8bd97, ftLastWriteTime.dwLowDateTime=0x45393cc0, ftLastWriteTime.dwHighDateTime=0x1d8bd97, nFileSizeHigh=0x0, nFileSizeLow=0xc9dd)) returned 1 [0091.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7a8) returned 1 [0091.813] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\5-DZJSZ32WSdJ.xls", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\5-DZJSZ32WSdJ.xls", lpFilePart=0x0) returned 0x45 [0091.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7ac) returned 1 [0091.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\5-DZJSZ32WSdJ.xls" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\5-dzjsz32wsdj.xls"), fInfoLevelId=0x0, lpFileInformation=0x2296d5c | out: lpFileInformation=0x2296d5c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e2c1470, ftCreationTime.dwHighDateTime=0x1d8b891, ftLastAccessTime.dwLowDateTime=0x8ef4f010, ftLastAccessTime.dwHighDateTime=0x1d8c03b, ftLastWriteTime.dwLowDateTime=0x8ef4f010, ftLastWriteTime.dwHighDateTime=0x1d8c03b, nFileSizeHigh=0x0, nFileSizeLow=0xab9)) returned 1 [0091.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7a8) returned 1 [0091.814] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", nBufferLength=0x105, lpBuffer=0x4dbf2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", lpFilePart=0x0) returned 0x9f [0091.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf758) returned 1 [0091.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla"), fInfoLevelId=0x0, lpFileInformation=0x4dbf7d4 | out: lpFileInformation=0x4dbf7d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf754) returned 1 [0091.814] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", lpFilePart=0x0) returned 0x9f [0091.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf6e8) returned 1 [0091.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla"), fInfoLevelId=0x0, lpFileInformation=0x4dbf764 | out: lpFileInformation=0x4dbf764*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf6e4) returned 1 [0091.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf6e8) returned 1 [0091.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla"), fInfoLevelId=0x0, lpFileInformation=0x4dbf764 | out: lpFileInformation=0x4dbf764*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf6e4) returned 1 [0091.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf6e8) returned 1 [0091.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents"), fInfoLevelId=0x0, lpFileInformation=0x4dbf764 | out: lpFileInformation=0x4dbf764*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce94014, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbcf78f09, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbcf78f09, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf6e4) returned 1 [0091.814] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla"), lpSecurityAttributes=0x0) returned 1 [0091.815] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\5-DZJSZ32WSdJ.xls", nBufferLength=0x105, lpBuffer=0x4dbf284, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\5-DZJSZ32WSdJ.xls", lpFilePart=0x0) returned 0x45 [0091.815] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\5-DZJSZ32WSdJ.xls", nBufferLength=0x105, lpBuffer=0x4dbf284, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\5-DZJSZ32WSdJ.xls", lpFilePart=0x0) returned 0xb1 [0091.815] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\5-DZJSZ32WSdJ.xls" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\5-dzjsz32wsdj.xls"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\5-DZJSZ32WSdJ.xls" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\5-dzjsz32wsdj.xls"), bFailIfExists=0) returned 1 [0091.851] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\a-A-qFq AF.csv", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\a-A-qFq AF.csv", lpFilePart=0x0) returned 0x42 [0091.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7ac) returned 1 [0091.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\a-A-qFq AF.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\a-a-qfq af.csv"), fInfoLevelId=0x0, lpFileInformation=0x229b9c0 | out: lpFileInformation=0x229b9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bee7c0, ftCreationTime.dwHighDateTime=0x1d8b889, ftLastAccessTime.dwLowDateTime=0xce3f6db0, ftLastAccessTime.dwHighDateTime=0x1d8c011, ftLastWriteTime.dwLowDateTime=0xce3f6db0, ftLastWriteTime.dwHighDateTime=0x1d8c011, nFileSizeHigh=0x0, nFileSizeLow=0x10253)) returned 1 [0091.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7a8) returned 1 [0091.852] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\Bf2mHVDW3clH.ppt", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\Bf2mHVDW3clH.ppt", lpFilePart=0x0) returned 0x44 [0091.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7ac) returned 1 [0091.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\Bf2mHVDW3clH.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\bf2mhvdw3clh.ppt"), fInfoLevelId=0x0, lpFileInformation=0x229bac4 | out: lpFileInformation=0x229bac4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d48b0, ftCreationTime.dwHighDateTime=0x1d8ba38, ftLastAccessTime.dwLowDateTime=0xaf1b71d0, ftLastAccessTime.dwHighDateTime=0x1d8bb0d, ftLastWriteTime.dwLowDateTime=0xaf1b71d0, ftLastWriteTime.dwHighDateTime=0x1d8bb0d, nFileSizeHigh=0x0, nFileSizeLow=0x1553c)) returned 1 [0091.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7a8) returned 1 [0091.852] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\C3Fj0r8hONU.ppt", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\C3Fj0r8hONU.ppt", lpFilePart=0x0) returned 0x43 [0091.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7ac) returned 1 [0091.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\C3Fj0r8hONU.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\c3fj0r8honu.ppt"), fInfoLevelId=0x0, lpFileInformation=0x229bbd0 | out: lpFileInformation=0x229bbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x814fee60, ftCreationTime.dwHighDateTime=0x1d8bf14, ftLastAccessTime.dwLowDateTime=0xabb8e610, ftLastAccessTime.dwHighDateTime=0x1d8c014, ftLastWriteTime.dwLowDateTime=0xabb8e610, ftLastWriteTime.dwHighDateTime=0x1d8c014, nFileSizeHigh=0x0, nFileSizeLow=0xc6eb)) returned 1 [0091.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7a8) returned 1 [0091.852] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\C8L6OgRoJd6.rtf", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\C8L6OgRoJd6.rtf", lpFilePart=0x0) returned 0x43 [0091.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7ac) returned 1 [0091.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\C8L6OgRoJd6.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\c8l6ogrojd6.rtf"), fInfoLevelId=0x0, lpFileInformation=0x229bcd4 | out: lpFileInformation=0x229bcd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17178ef0, ftCreationTime.dwHighDateTime=0x1d8b0c7, ftLastAccessTime.dwLowDateTime=0xa82734f0, ftLastAccessTime.dwHighDateTime=0x1d8bc10, ftLastWriteTime.dwLowDateTime=0xa82734f0, ftLastWriteTime.dwHighDateTime=0x1d8bc10, nFileSizeHigh=0x0, nFileSizeLow=0x7692)) returned 1 [0091.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7a8) returned 1 [0091.852] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\CfeUIGTcVlbmZqCLP.csv", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\CfeUIGTcVlbmZqCLP.csv", lpFilePart=0x0) returned 0x49 [0091.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7ac) returned 1 [0091.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\CfeUIGTcVlbmZqCLP.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\cfeuigtcvlbmzqclp.csv"), fInfoLevelId=0x0, lpFileInformation=0x229bdd8 | out: lpFileInformation=0x229bdd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca47540, ftCreationTime.dwHighDateTime=0x1d8b690, ftLastAccessTime.dwLowDateTime=0x5f1ffb50, ftLastAccessTime.dwHighDateTime=0x1d8bf50, ftLastWriteTime.dwLowDateTime=0x5f1ffb50, ftLastWriteTime.dwHighDateTime=0x1d8bf50, nFileSizeHigh=0x0, nFileSizeLow=0x168b7)) returned 1 [0091.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7a8) returned 1 [0091.852] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\fvw20_rgJzZv8FGp.xls", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\fvw20_rgJzZv8FGp.xls", lpFilePart=0x0) returned 0x48 [0091.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7ac) returned 1 [0091.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\fvw20_rgJzZv8FGp.xls" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\fvw20_rgjzzv8fgp.xls"), fInfoLevelId=0x0, lpFileInformation=0x229bef4 | out: lpFileInformation=0x229bef4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3daa70, ftCreationTime.dwHighDateTime=0x1d8bc44, ftLastAccessTime.dwLowDateTime=0x682cc6c0, ftLastAccessTime.dwHighDateTime=0x1d8bd83, ftLastWriteTime.dwLowDateTime=0x682cc6c0, ftLastWriteTime.dwHighDateTime=0x1d8bd83, nFileSizeHigh=0x0, nFileSizeLow=0x15d0)) returned 1 [0091.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7a8) returned 1 [0091.853] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\mWQOQh4ldF5U-0k.pps", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\mWQOQh4ldF5U-0k.pps", lpFilePart=0x0) returned 0x47 [0091.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7ac) returned 1 [0091.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\mWQOQh4ldF5U-0k.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\mwqoqh4ldf5u-0k.pps"), fInfoLevelId=0x0, lpFileInformation=0x229c010 | out: lpFileInformation=0x229c010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21ba9fd0, ftCreationTime.dwHighDateTime=0x1d8b231, ftLastAccessTime.dwLowDateTime=0x809f2bc0, ftLastAccessTime.dwHighDateTime=0x1d8bdf2, ftLastWriteTime.dwLowDateTime=0x809f2bc0, ftLastWriteTime.dwHighDateTime=0x1d8bdf2, nFileSizeHigh=0x0, nFileSizeLow=0x2846)) returned 1 [0091.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7a8) returned 1 [0091.853] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\Q4ZKn3tp.xls", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\Q4ZKn3tp.xls", lpFilePart=0x0) returned 0x40 [0091.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7ac) returned 1 [0091.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\Q4ZKn3tp.xls" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\q4zkn3tp.xls"), fInfoLevelId=0x0, lpFileInformation=0x229c124 | out: lpFileInformation=0x229c124*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1838b0c0, ftCreationTime.dwHighDateTime=0x1d8bff9, ftLastAccessTime.dwLowDateTime=0x82b5eab0, ftLastAccessTime.dwHighDateTime=0x1d8c04b, ftLastWriteTime.dwLowDateTime=0x82b5eab0, ftLastWriteTime.dwHighDateTime=0x1d8c04b, nFileSizeHigh=0x0, nFileSizeLow=0x1631d)) returned 1 [0091.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7a8) returned 1 [0091.853] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\RECojIt nyClc3HiT.doc", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\RECojIt nyClc3HiT.doc", lpFilePart=0x0) returned 0x49 [0091.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7ac) returned 1 [0091.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\RECojIt nyClc3HiT.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\recojit nyclc3hit.doc"), fInfoLevelId=0x0, lpFileInformation=0x229c220 | out: lpFileInformation=0x229c220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a94d90, ftCreationTime.dwHighDateTime=0x1d8be15, ftLastAccessTime.dwLowDateTime=0x540da90, ftLastAccessTime.dwHighDateTime=0x1d8be7f, ftLastWriteTime.dwLowDateTime=0x540da90, ftLastWriteTime.dwHighDateTime=0x1d8be7f, nFileSizeHigh=0x0, nFileSizeLow=0x5c75)) returned 1 [0091.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7a8) returned 1 [0091.853] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\T90UZdn2P1f7n3-fQaKi.ods", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\T90UZdn2P1f7n3-fQaKi.ods", lpFilePart=0x0) returned 0x4c [0091.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7ac) returned 1 [0091.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\T90UZdn2P1f7n3-fQaKi.ods" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\t90uzdn2p1f7n3-fqaki.ods"), fInfoLevelId=0x0, lpFileInformation=0x229c33c | out: lpFileInformation=0x229c33c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a92b070, ftCreationTime.dwHighDateTime=0x1d8bcca, ftLastAccessTime.dwLowDateTime=0xe7eab850, ftLastAccessTime.dwHighDateTime=0x1d8be45, ftLastWriteTime.dwLowDateTime=0xe7eab850, ftLastWriteTime.dwHighDateTime=0x1d8be45, nFileSizeHigh=0x0, nFileSizeLow=0x13934)) returned 1 [0091.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7a8) returned 1 [0091.854] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\TbduRUTXa.docx", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\TbduRUTXa.docx", lpFilePart=0x0) returned 0x42 [0091.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7ac) returned 1 [0091.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\TbduRUTXa.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\tbdurutxa.docx"), fInfoLevelId=0x0, lpFileInformation=0x229c468 | out: lpFileInformation=0x229c468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da37310, ftCreationTime.dwHighDateTime=0x1d8b1f3, ftLastAccessTime.dwLowDateTime=0x76cd84d0, ftLastAccessTime.dwHighDateTime=0x1d8b239, ftLastWriteTime.dwLowDateTime=0x76cd84d0, ftLastWriteTime.dwHighDateTime=0x1d8b239, nFileSizeHigh=0x0, nFileSizeLow=0xe412)) returned 1 [0091.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7a8) returned 1 [0091.854] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\UvFd-0OcgfkrbGVtLF6.xlsx", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\UvFd-0OcgfkrbGVtLF6.xlsx", lpFilePart=0x0) returned 0x4c [0091.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7ac) returned 1 [0091.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\UvFd-0OcgfkrbGVtLF6.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\uvfd-0ocgfkrbgvtlf6.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x229c56c | out: lpFileInformation=0x229c56c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa94eb7c0, ftCreationTime.dwHighDateTime=0x1d8bacd, ftLastAccessTime.dwLowDateTime=0x946a1970, ftLastAccessTime.dwHighDateTime=0x1d8c069, ftLastWriteTime.dwLowDateTime=0x946a1970, ftLastWriteTime.dwHighDateTime=0x1d8c069, nFileSizeHigh=0x0, nFileSizeLow=0x181c7)) returned 1 [0091.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7a8) returned 1 [0091.854] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\VcH8lOCD8NPvxN-LPks.rtf", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\VcH8lOCD8NPvxN-LPks.rtf", lpFilePart=0x0) returned 0x4b [0091.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7ac) returned 1 [0091.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\VcH8lOCD8NPvxN-LPks.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\vch8locd8npvxn-lpks.rtf"), fInfoLevelId=0x0, lpFileInformation=0x229c698 | out: lpFileInformation=0x229c698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359e9570, ftCreationTime.dwHighDateTime=0x1d8bd48, ftLastAccessTime.dwLowDateTime=0xefc320f0, ftLastAccessTime.dwHighDateTime=0x1d8bdc1, ftLastWriteTime.dwLowDateTime=0xefc320f0, ftLastWriteTime.dwHighDateTime=0x1d8bdc1, nFileSizeHigh=0x0, nFileSizeLow=0x9f30)) returned 1 [0091.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7a8) returned 1 [0091.854] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\vKgNAjCUO5.pps", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\vKgNAjCUO5.pps", lpFilePart=0x0) returned 0x42 [0091.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7ac) returned 1 [0091.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\vKgNAjCUO5.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\vkgnajcuo5.pps"), fInfoLevelId=0x0, lpFileInformation=0x229c7bc | out: lpFileInformation=0x229c7bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cde8e0, ftCreationTime.dwHighDateTime=0x1d8bea9, ftLastAccessTime.dwLowDateTime=0xc0d6ff10, ftLastAccessTime.dwHighDateTime=0x1d8c0c7, ftLastWriteTime.dwLowDateTime=0xc0d6ff10, ftLastWriteTime.dwHighDateTime=0x1d8c0c7, nFileSizeHigh=0x0, nFileSizeLow=0xefe8)) returned 1 [0091.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7a8) returned 1 [0091.855] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\wJEu5X2748bM.xlsx", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\wJEu5X2748bM.xlsx", lpFilePart=0x0) returned 0x45 [0091.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7ac) returned 1 [0091.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\wJEu5X2748bM.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\wjeu5x2748bm.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x229c8c0 | out: lpFileInformation=0x229c8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc975760, ftCreationTime.dwHighDateTime=0x1d8b790, ftLastAccessTime.dwLowDateTime=0xd37a5a10, ftLastAccessTime.dwHighDateTime=0x1d8b9e5, ftLastWriteTime.dwLowDateTime=0xd37a5a10, ftLastWriteTime.dwHighDateTime=0x1d8b9e5, nFileSizeHigh=0x0, nFileSizeLow=0xf3a3)) returned 1 [0091.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7a8) returned 1 [0091.855] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\xb_Tn6.docx", nBufferLength=0x105, lpBuffer=0x4dbf2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\xb_Tn6.docx", lpFilePart=0x0) returned 0x3f [0091.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4dbf7ac) returned 1 [0091.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\xb_Tn6.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\xb_tn6.docx"), fInfoLevelId=0x0, lpFileInformation=0x229c9cc | out: lpFileInformation=0x229c9cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f0e030, ftCreationTime.dwHighDateTime=0x1d8bfc4, ftLastAccessTime.dwLowDateTime=0xcba47010, ftLastAccessTime.dwHighDateTime=0x1d8c0d8, ftLastWriteTime.dwLowDateTime=0xcba47010, ftLastWriteTime.dwHighDateTime=0x1d8c0d8, nFileSizeHigh=0x0, nFileSizeLow=0x829f)) returned 1 [0091.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4dbf7a8) returned 1 [0091.856] CoUninitialize () Thread: id = 140 os_tid = 0xe90 [0091.789] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0091.789] RoInitialize () returned 0x1 [0091.789] RoUninitialize () returned 0x0 [0091.791] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads", nBufferLength=0x105, lpBuffer=0x4eff284, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Downloads", lpFilePart=0x0) returned 0x1f [0091.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4eff728) returned 1 [0091.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x4eff7a4 | out: lpFileInformation=0x4eff7a4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4eff724) returned 1 [0091.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4eff7a8) returned 1 [0091.792] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads", nBufferLength=0x105, lpBuffer=0x4eff268, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Downloads", lpFilePart=0x0) returned 0x1f [0091.792] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\*"), lpFindFileData=0x4eff4d0 | out: lpFindFileData=0x4eff4d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c9788 [0091.818] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x4eff4dc | out: lpFindFileData=0x4eff4dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.818] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x4eff4dc | out: lpFindFileData=0x4eff4dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.818] FindNextFileW (in: hFindFile=0x6c9788, lpFindFileData=0x4eff4dc | out: lpFindFileData=0x4eff4dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0091.819] FindClose (in: hFindFile=0x6c9788 | out: hFindFile=0x6c9788) returned 1 [0091.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4eff764) returned 1 [0091.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4eff770) returned 1 [0091.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4eff7a8) returned 1 [0091.819] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads", nBufferLength=0x105, lpBuffer=0x4eff268, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Downloads", lpFilePart=0x0) returned 0x1f [0091.819] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\*"), lpFindFileData=0x4eff4d0 | out: lpFindFileData=0x4eff4d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x6c95c8 [0091.819] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4eff4dc | out: lpFindFileData=0x4eff4dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.819] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4eff4dc | out: lpFindFileData=0x4eff4dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.819] FindNextFileW (in: hFindFile=0x6c95c8, lpFindFileData=0x4eff4dc | out: lpFindFileData=0x4eff4dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.820] FindClose (in: hFindFile=0x6c95c8 | out: hFindFile=0x6c95c8) returned 1 [0091.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4eff764) returned 1 [0091.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4eff770) returned 1 [0091.820] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4eff268, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini", lpFilePart=0x0) returned 0x2b [0091.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4eff75c) returned 1 [0091.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2298868 | out: lpFileInformation=0x2298868*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0091.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4eff758) returned 1 [0091.820] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads", nBufferLength=0x105, lpBuffer=0x4eff264, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads", lpFilePart=0x0) returned 0x8b [0091.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4eff708) returned 1 [0091.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x4eff784 | out: lpFileInformation=0x4eff784*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4eff704) returned 1 [0091.820] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads", nBufferLength=0x105, lpBuffer=0x4eff268, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads", lpFilePart=0x0) returned 0x8b [0091.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4eff698) returned 1 [0091.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x4eff714 | out: lpFileInformation=0x4eff714*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4eff694) returned 1 [0091.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4eff698) returned 1 [0091.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x4eff714 | out: lpFileInformation=0x4eff714*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4eff694) returned 1 [0091.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4eff698) returned 1 [0091.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx"), fInfoLevelId=0x0, lpFileInformation=0x4eff714 | out: lpFileInformation=0x4eff714*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce47b8d, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xbcee05ee, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xbcee05ee, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4eff694) returned 1 [0091.821] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\downloads"), lpSecurityAttributes=0x0) returned 1 [0091.823] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4eff234, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini", lpFilePart=0x0) returned 0x2b [0091.823] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4eff234, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini", lpFilePart=0x0) returned 0x97 [0091.823] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\77d6f3ea3b56fc0f6b6f10284ad90596\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\77d6f3ea3b56fc0f6b6f10284ad90596\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\downloads\\desktop.ini"), bFailIfExists=0) returned 1 [0091.827] CoUninitialize () Thread: id = 141 os_tid = 0xe00 [0091.859] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0091.859] RoInitialize () returned 0x1 [0091.859] RoUninitialize () returned 0x0 [0091.859] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\DropBox", nBufferLength=0x105, lpBuffer=0x4b7f204, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\DropBox", lpFilePart=0x0) returned 0x2d [0091.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f6a8) returned 1 [0091.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\DropBox" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\dropbox"), fInfoLevelId=0x0, lpFileInformation=0x4b7f724 | out: lpFileInformation=0x4b7f724*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f6a4) returned 1 [0091.860] CoUninitialize () Thread: id = 142 os_tid = 0xe88 [0091.865] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0091.866] RoInitialize () returned 0x1 [0091.866] RoUninitialize () returned 0x0 [0091.866] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\OneDrive", nBufferLength=0x105, lpBuffer=0x4b7f184, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\OneDrive", lpFilePart=0x0) returned 0x2e [0091.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b7f628) returned 1 [0091.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\OneDrive" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\onedrive"), fInfoLevelId=0x0, lpFileInformation=0x4b7f6a4 | out: lpFileInformation=0x4b7f6a4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b7f624) returned 1 [0091.866] CoUninitialize () Process: id = "4" image_name = "runit.exe" filename = "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\runit.exe" page_root = "0x565ba000" os_pid = "0xd8c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x13c4" cmd_line = "\"C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe\" " cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f213" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 729 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 730 start_va = 0x30000 end_va = 0x59fff monitored = 1 entry_point = 0x5522e region_type = mapped_file name = "runit.exe" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\runit.exe") Region: id = 731 start_va = 0x60000 end_va = 0x61fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 732 start_va = 0x70000 end_va = 0x84fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 733 start_va = 0x90000 end_va = 0xcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 734 start_va = 0xd0000 end_va = 0x1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 735 start_va = 0x1d0000 end_va = 0x1d3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 736 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 737 start_va = 0x1f0000 end_va = 0x1f1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 738 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 739 start_va = 0x77760000 end_va = 0x778dafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 740 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 741 start_va = 0xfffb0000 end_va = 0xfffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000fffb0000" filename = "" Region: id = 742 start_va = 0xfffe0000 end_va = 0x7ffd0d94ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000fffe0000" filename = "" Region: id = 743 start_va = 0x7ffd0d950000 end_va = 0x7ffd0db10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 744 start_va = 0x7ffd0db11000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffd0db11000" filename = "" Region: id = 752 start_va = 0x400000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 753 start_va = 0x700a0000 end_va = 0x700effff monitored = 0 entry_point = 0x700b8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 754 start_va = 0x70020000 end_va = 0x70099fff monitored = 0 entry_point = 0x70033290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 755 start_va = 0x77340000 end_va = 0x7741ffff monitored = 0 entry_point = 0x77353980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 756 start_va = 0x700f0000 end_va = 0x700f7fff monitored = 0 entry_point = 0x700f17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 757 start_va = 0x540000 end_va = 0x6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000540000" filename = "" Region: id = 758 start_va = 0x6fd00000 end_va = 0x6fd58fff monitored = 1 entry_point = 0x6fd10780 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll") Region: id = 759 start_va = 0x77340000 end_va = 0x7741ffff monitored = 0 entry_point = 0x77353980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 760 start_va = 0x75580000 end_va = 0x756fdfff monitored = 0 entry_point = 0x75631b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 772 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 773 start_va = 0xffeb0000 end_va = 0xfffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000ffeb0000" filename = "" Region: id = 774 start_va = 0x400000 end_va = 0x4bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 775 start_va = 0x530000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 776 start_va = 0x700000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000700000" filename = "" Region: id = 777 start_va = 0x7fff0000 end_va = 0x7fffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 778 start_va = 0x80000000 end_va = 0x8000ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000080000000" filename = "" Region: id = 779 start_va = 0x743e0000 end_va = 0x74471fff monitored = 0 entry_point = 0x74420380 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 780 start_va = 0xffb00000 end_va = 0xffea0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 786 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 787 start_va = 0x77420000 end_va = 0x7749afff monitored = 0 entry_point = 0x7743e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 788 start_va = 0x753c0000 end_va = 0x7547dfff monitored = 0 entry_point = 0x753f5630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 789 start_va = 0x4c0000 end_va = 0x4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 790 start_va = 0x700000 end_va = 0x7fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000700000" filename = "" Region: id = 791 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 792 start_va = 0x776b0000 end_va = 0x776f3fff monitored = 0 entry_point = 0x776c9d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 793 start_va = 0x74e90000 end_va = 0x74f3cfff monitored = 0 entry_point = 0x74ea4f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 804 start_va = 0x74490000 end_va = 0x744adfff monitored = 0 entry_point = 0x7449b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 805 start_va = 0x74480000 end_va = 0x74489fff monitored = 0 entry_point = 0x74482a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 806 start_va = 0x772c0000 end_va = 0x77317fff monitored = 0 entry_point = 0x773025c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 807 start_va = 0x860000 end_va = 0x94ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 812 start_va = 0x6fc80000 end_va = 0x6fcfcfff monitored = 1 entry_point = 0x6fc90db0 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll") Region: id = 816 start_va = 0x74df0000 end_va = 0x74e34fff monitored = 0 entry_point = 0x74e0de90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 817 start_va = 0x75700000 end_va = 0x758bcfff monitored = 0 entry_point = 0x757e2a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 821 start_va = 0x75210000 end_va = 0x7535efff monitored = 0 entry_point = 0x752c6820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 822 start_va = 0x74f40000 end_va = 0x75086fff monitored = 0 entry_point = 0x74f51cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 829 start_va = 0x500000 end_va = 0x529fff monitored = 0 entry_point = 0x505680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 830 start_va = 0x950000 end_va = 0xad7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000950000" filename = "" Region: id = 831 start_va = 0x76df0000 end_va = 0x76e1afff monitored = 0 entry_point = 0x76df5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 839 start_va = 0x60000 end_va = 0x60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 840 start_va = 0x500000 end_va = 0x500fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 841 start_va = 0xae0000 end_va = 0xc60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ae0000" filename = "" Region: id = 842 start_va = 0xc70000 end_va = 0x206ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c70000" filename = "" Region: id = 843 start_va = 0x540000 end_va = 0x563fff monitored = 1 entry_point = 0x56522e region_type = mapped_file name = "runit.exe" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\runit.exe") Region: id = 844 start_va = 0x600000 end_va = 0x6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 845 start_va = 0x77320000 end_va = 0x7732bfff monitored = 0 entry_point = 0x77323930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 846 start_va = 0x6fc70000 end_va = 0x6fc77fff monitored = 0 entry_point = 0x6fc717b0 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 852 start_va = 0x6f580000 end_va = 0x6fc60fff monitored = 1 entry_point = 0x6f5acd70 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 853 start_va = 0x6f480000 end_va = 0x6f574fff monitored = 0 entry_point = 0x6f4d4160 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\SysWOW64\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\syswow64\\msvcr120_clr0400.dll") Region: id = 883 start_va = 0x510000 end_va = 0x510fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000510000" filename = "" Region: id = 884 start_va = 0x520000 end_va = 0x52ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000520000" filename = "" Region: id = 885 start_va = 0x540000 end_va = 0x54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000540000" filename = "" Region: id = 886 start_va = 0x550000 end_va = 0x55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 887 start_va = 0x560000 end_va = 0x56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 888 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 889 start_va = 0x580000 end_va = 0x58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 890 start_va = 0x590000 end_va = 0x590fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 891 start_va = 0x5a0000 end_va = 0x5a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 892 start_va = 0x2070000 end_va = 0x220ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 893 start_va = 0x2070000 end_va = 0x21effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 894 start_va = 0x2200000 end_va = 0x220ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002200000" filename = "" Region: id = 895 start_va = 0x5b0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 896 start_va = 0x2070000 end_va = 0x216ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 897 start_va = 0x21e0000 end_va = 0x21effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021e0000" filename = "" Region: id = 899 start_va = 0x5f0000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 900 start_va = 0x2210000 end_va = 0x420ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002210000" filename = "" Region: id = 901 start_va = 0x860000 end_va = 0x8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 902 start_va = 0x940000 end_va = 0x94ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000940000" filename = "" Region: id = 903 start_va = 0x800000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000800000" filename = "" Region: id = 904 start_va = 0x4210000 end_va = 0x430ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004210000" filename = "" Region: id = 906 start_va = 0x4310000 end_va = 0x4646fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 913 start_va = 0x6e1c0000 end_va = 0x6f471fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\7582400666d289c016013ad0f6e0e3e6\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\7582400666d289c016013ad0f6e0e3e6\\mscorlib.ni.dll") Region: id = 920 start_va = 0x74720000 end_va = 0x7480afff monitored = 0 entry_point = 0x7475d650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 921 start_va = 0x4650000 end_va = 0x46e0fff monitored = 0 entry_point = 0x4688cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 933 start_va = 0x73240000 end_va = 0x732b4fff monitored = 0 entry_point = 0x73279a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 934 start_va = 0x4650000 end_va = 0x470ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004650000" filename = "" Region: id = 943 start_va = 0x5f0000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 944 start_va = 0x840000 end_va = 0x84ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 945 start_va = 0x6e140000 end_va = 0x6e1bffff monitored = 1 entry_point = 0x6e141180 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll") Region: id = 946 start_va = 0x774a0000 end_va = 0x77531fff monitored = 0 entry_point = 0x774d8cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 947 start_va = 0x900000 end_va = 0x90ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000900000" filename = "" Region: id = 964 start_va = 0x910000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 965 start_va = 0x920000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 966 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 967 start_va = 0x2170000 end_va = 0x217ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002170000" filename = "" Region: id = 968 start_va = 0x2180000 end_va = 0x218ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002180000" filename = "" Region: id = 969 start_va = 0x2190000 end_va = 0x219ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002190000" filename = "" Region: id = 970 start_va = 0x21a0000 end_va = 0x21affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021a0000" filename = "" Region: id = 981 start_va = 0x910000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 982 start_va = 0x920000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 983 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1043 start_va = 0x6d770000 end_va = 0x6e13bfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\1be7a15b1f33bf22e4f53aaf45518c77\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\1be7a15b1f33bf22e4f53aaf45518c77\\system.ni.dll") Region: id = 1062 start_va = 0x6d5e0000 end_va = 0x6d76efff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\1d52bd4ac5e0a6422058a5d62c9f6d9d\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\1d52bd4ac5e0a6422058a5d62c9f6d9d\\system.drawing.ni.dll") Region: id = 1086 start_va = 0x6c240000 end_va = 0x6cea6fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\fb06ad4bc55b9c3ca68a3f9259d826cd\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\fb06ad4bc55b9c3ca68a3f9259d826cd\\system.windows.forms.ni.dll") Region: id = 1093 start_va = 0x4710000 end_va = 0x485ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004710000" filename = "" Region: id = 1094 start_va = 0x910000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 1095 start_va = 0x920000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 1096 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1100 start_va = 0x910000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 1101 start_va = 0x920000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 1102 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1105 start_va = 0x910000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 1106 start_va = 0x920000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 1107 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1111 start_va = 0x910000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 1112 start_va = 0x920000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 1113 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1115 start_va = 0x5e430000 end_va = 0x5e4cbfff monitored = 1 entry_point = 0x5e4be9a6 region_type = mapped_file name = "microsoft.visualbasic.dll" filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualbasic\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\microsoft.visualbasic.dll") Region: id = 1116 start_va = 0x4650000 end_va = 0x46ebfff monitored = 1 entry_point = 0x46de9a6 region_type = mapped_file name = "microsoft.visualbasic.dll" filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualbasic\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\microsoft.visualbasic.dll") Region: id = 1117 start_va = 0x4700000 end_va = 0x470ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004700000" filename = "" Region: id = 1119 start_va = 0x910000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 1120 start_va = 0x920000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 1121 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1122 start_va = 0x910000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 1123 start_va = 0x920000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 1124 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1126 start_va = 0x910000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 1127 start_va = 0x920000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 1128 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1130 start_va = 0x910000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 1131 start_va = 0x920000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 1132 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1133 start_va = 0x910000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 1134 start_va = 0x920000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 1135 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1143 start_va = 0x910000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 1144 start_va = 0x920000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 1145 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1162 start_va = 0x910000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 1163 start_va = 0x920000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 1164 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1185 start_va = 0x910000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 1186 start_va = 0x920000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 1187 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1198 start_va = 0x910000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 1211 start_va = 0x920000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 1212 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1213 start_va = 0x2170000 end_va = 0x217ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002170000" filename = "" Region: id = 1251 start_va = 0x920000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 1253 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1254 start_va = 0x2170000 end_va = 0x217ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002170000" filename = "" Region: id = 1259 start_va = 0x2180000 end_va = 0x218ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002180000" filename = "" Region: id = 1269 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1270 start_va = 0x2170000 end_va = 0x217ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002170000" filename = "" Region: id = 1271 start_va = 0x2180000 end_va = 0x218ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002180000" filename = "" Region: id = 1272 start_va = 0x2190000 end_va = 0x219ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002190000" filename = "" Region: id = 1281 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1282 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1284 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1285 start_va = 0x2170000 end_va = 0x217ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002170000" filename = "" Region: id = 1286 start_va = 0x2180000 end_va = 0x218ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002180000" filename = "" Region: id = 1287 start_va = 0xffe60000 end_va = 0xffeaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000ffe60000" filename = "" Region: id = 1288 start_va = 0xffe50000 end_va = 0xffe5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000ffe50000" filename = "" Region: id = 1289 start_va = 0x4710000 end_va = 0x479efff monitored = 0 entry_point = 0x471dd60 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_811bc0006c44242b\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_811bc0006c44242b\\comctl32.dll") Region: id = 1290 start_va = 0x4850000 end_va = 0x485ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004850000" filename = "" Region: id = 1294 start_va = 0x6b980000 end_va = 0x6ba11fff monitored = 0 entry_point = 0x6b98dd60 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_811bc0006c44242b\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_811bc0006c44242b\\comctl32.dll") Region: id = 1295 start_va = 0x4860000 end_va = 0x4a0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004860000" filename = "" Region: id = 1296 start_va = 0x2170000 end_va = 0x2170fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002170000" filename = "" Region: id = 1297 start_va = 0x4710000 end_va = 0x47cbfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004710000" filename = "" Region: id = 1298 start_va = 0x2170000 end_va = 0x2173fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002170000" filename = "" Region: id = 1299 start_va = 0x2180000 end_va = 0x2183fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002180000" filename = "" Region: id = 1301 start_va = 0x73220000 end_va = 0x7323cfff monitored = 0 entry_point = 0x73223b10 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 1303 start_va = 0x21a0000 end_va = 0x21affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021a0000" filename = "" Region: id = 1304 start_va = 0x21b0000 end_va = 0x21bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021b0000" filename = "" Region: id = 1305 start_va = 0x21c0000 end_va = 0x21cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021c0000" filename = "" Region: id = 1306 start_va = 0x21d0000 end_va = 0x21dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021d0000" filename = "" Region: id = 1307 start_va = 0x21f0000 end_va = 0x21fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021f0000" filename = "" Region: id = 1308 start_va = 0x46f0000 end_va = 0x46fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000046f0000" filename = "" Region: id = 1309 start_va = 0x47d0000 end_va = 0x47dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047d0000" filename = "" Region: id = 1310 start_va = 0x47e0000 end_va = 0x47effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047e0000" filename = "" Region: id = 1311 start_va = 0x47f0000 end_va = 0x47fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047f0000" filename = "" Region: id = 1312 start_va = 0x4800000 end_va = 0x480ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004800000" filename = "" Region: id = 1313 start_va = 0x4810000 end_va = 0x481ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004810000" filename = "" Region: id = 1314 start_va = 0x4820000 end_va = 0x482ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004820000" filename = "" Region: id = 1315 start_va = 0x4830000 end_va = 0x483ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004830000" filename = "" Region: id = 1316 start_va = 0x4840000 end_va = 0x484ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004840000" filename = "" Region: id = 1317 start_va = 0x4860000 end_va = 0x486ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004860000" filename = "" Region: id = 1318 start_va = 0x4a00000 end_va = 0x4a0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a00000" filename = "" Region: id = 1322 start_va = 0x4870000 end_va = 0x487ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004870000" filename = "" Region: id = 1323 start_va = 0x4880000 end_va = 0x488ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004880000" filename = "" Region: id = 1324 start_va = 0x4890000 end_va = 0x489ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004890000" filename = "" Region: id = 1325 start_va = 0x48a0000 end_va = 0x48affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000048a0000" filename = "" Region: id = 1328 start_va = 0x6ceb0000 end_va = 0x6d5d0fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\eb4cca4f06a15158c3f7e2c56516729b\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\eb4cca4f06a15158c3f7e2c56516729b\\system.core.ni.dll") Region: id = 1329 start_va = 0x6c140000 end_va = 0x6c230fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.configuration.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Configuration\\fe4b221b4109f0c78f57a792500699b5\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.configuration\\fe4b221b4109f0c78f57a792500699b5\\system.configuration.ni.dll") Region: id = 1332 start_va = 0x6ba20000 end_va = 0x6c13dfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.xml.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xml\\4fbda26d781323081b45526da6e87b35\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.xml\\4fbda26d781323081b45526da6e87b35\\system.xml.ni.dll") Region: id = 1335 start_va = 0x77540000 end_va = 0x7765efff monitored = 0 entry_point = 0x77585980 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1336 start_va = 0x6b810000 end_va = 0x6b97afff monitored = 0 entry_point = 0x6b87e360 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\gdiplus.dll") Region: id = 1337 start_va = 0x4a10000 end_va = 0x4beffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a10000" filename = "" Region: id = 1338 start_va = 0x21a0000 end_va = 0x21dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021a0000" filename = "" Region: id = 1339 start_va = 0x4860000 end_va = 0x495ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004860000" filename = "" Region: id = 1340 start_va = 0x71100000 end_va = 0x712f0fff monitored = 0 entry_point = 0x711e3cd0 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\SysWOW64\\DWrite.dll" (normalized: "c:\\windows\\syswow64\\dwrite.dll") Region: id = 1341 start_va = 0x47d0000 end_va = 0x4818fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-system.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-System.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-system.dat") Region: id = 1342 start_va = 0x21f0000 end_va = 0x21f3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021f0000" filename = "" Region: id = 1343 start_va = 0x4bf0000 end_va = 0x5beffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-fontface.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-FontFace.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-fontface.dat") Region: id = 1344 start_va = 0x46f0000 end_va = 0x46f3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000046f0000" filename = "" Region: id = 1345 start_va = 0x4a10000 end_va = 0x4b0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a10000" filename = "" Region: id = 1346 start_va = 0x4be0000 end_va = 0x4beffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004be0000" filename = "" Region: id = 1347 start_va = 0x5bf0000 end_va = 0x5ceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005bf0000" filename = "" Region: id = 1349 start_va = 0x5cf0000 end_va = 0x61e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005cf0000" filename = "" Region: id = 1350 start_va = 0x6b780000 end_va = 0x6b800fff monitored = 0 entry_point = 0x6b786310 region_type = mapped_file name = "riched20.dll" filename = "\\Windows\\SysWOW64\\riched20.dll" (normalized: "c:\\windows\\syswow64\\riched20.dll") Region: id = 1351 start_va = 0x6b760000 end_va = 0x6b775fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1352 start_va = 0x6b720000 end_va = 0x6b750fff monitored = 0 entry_point = 0x6b7322d0 region_type = mapped_file name = "msls31.dll" filename = "\\Windows\\SysWOW64\\msls31.dll" (normalized: "c:\\windows\\syswow64\\msls31.dll") Region: id = 1353 start_va = 0x4820000 end_va = 0x4824fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll" filename = "\\Windows\\SysWOW64\\winnlsres.dll" (normalized: "c:\\windows\\syswow64\\winnlsres.dll") Region: id = 1354 start_va = 0x4830000 end_va = 0x483ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\winnlsres.dll.mui") Region: id = 1355 start_va = 0x5cf0000 end_va = 0x61e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005cf0000" filename = "" Region: id = 1356 start_va = 0x61f0000 end_va = 0x722ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 1357 start_va = 0x4840000 end_va = 0x4840fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004840000" filename = "" Region: id = 1358 start_va = 0x4960000 end_va = 0x496ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004960000" filename = "" Region: id = 1359 start_va = 0x6b5a0000 end_va = 0x6b712fff monitored = 0 entry_point = 0x6b64d220 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\SysWOW64\\WindowsCodecs.dll" (normalized: "c:\\windows\\syswow64\\windowscodecs.dll") Region: id = 1360 start_va = 0x4970000 end_va = 0x49e9fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004970000" filename = "" Region: id = 1361 start_va = 0x49f0000 end_va = 0x49f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000049f0000" filename = "" Region: id = 1362 start_va = 0x77230000 end_va = 0x772bcfff monitored = 0 entry_point = 0x77279b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 1363 start_va = 0x4b10000 end_va = 0x4b10fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004b10000" filename = "" Region: id = 1364 start_va = 0x4b20000 end_va = 0x4b24fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\user32.dll.mui") Region: id = 1367 start_va = 0x7230000 end_va = 0x7330fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007230000" filename = "" Region: id = 1368 start_va = 0x4b30000 end_va = 0x4b6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b30000" filename = "" Region: id = 1369 start_va = 0x4b70000 end_va = 0x4baffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b70000" filename = "" Region: id = 1370 start_va = 0x4bb0000 end_va = 0x4bb0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004bb0000" filename = "" Region: id = 1371 start_va = 0x7230000 end_va = 0x732ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007230000" filename = "" Region: id = 1372 start_va = 0x7330000 end_va = 0x742ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007330000" filename = "" Region: id = 1373 start_va = 0x7430000 end_va = 0x746ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007430000" filename = "" Region: id = 1374 start_va = 0x7470000 end_va = 0x756ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007470000" filename = "" Region: id = 1375 start_va = 0x75480000 end_va = 0x75503fff monitored = 0 entry_point = 0x754a6220 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 1376 start_va = 0x4bc0000 end_va = 0x4bc0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004bc0000" filename = "" Region: id = 1377 start_va = 0x70f70000 end_va = 0x70fb0fff monitored = 0 entry_point = 0x70f77fe0 region_type = mapped_file name = "dataexchange.dll" filename = "\\Windows\\SysWOW64\\DataExchange.dll" (normalized: "c:\\windows\\syswow64\\dataexchange.dll") Region: id = 1378 start_va = 0x70d50000 end_va = 0x70f69fff monitored = 0 entry_point = 0x70de5550 region_type = mapped_file name = "d3d11.dll" filename = "\\Windows\\SysWOW64\\d3d11.dll" (normalized: "c:\\windows\\syswow64\\d3d11.dll") Region: id = 1380 start_va = 0x70ca0000 end_va = 0x70d46fff monitored = 0 entry_point = 0x70cd6240 region_type = mapped_file name = "dcomp.dll" filename = "\\Windows\\SysWOW64\\dcomp.dll" (normalized: "c:\\windows\\syswow64\\dcomp.dll") Region: id = 1381 start_va = 0x71070000 end_va = 0x710f2fff monitored = 0 entry_point = 0x710937c0 region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\SysWOW64\\dxgi.dll" (normalized: "c:\\windows\\syswow64\\dxgi.dll") Region: id = 1382 start_va = 0x70bd0000 end_va = 0x70c9cfff monitored = 0 entry_point = 0x70c229c0 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\SysWOW64\\twinapi.appcore.dll" (normalized: "c:\\windows\\syswow64\\twinapi.appcore.dll") Region: id = 1383 start_va = 0x71ad0000 end_va = 0x71aeafff monitored = 0 entry_point = 0x71ad9050 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 1384 start_va = 0x7570000 end_va = 0x75effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007570000" filename = "" Region: id = 1385 start_va = 0x4bd0000 end_va = 0x4bdffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004bd0000" filename = "" Region: id = 1386 start_va = 0x4bd0000 end_va = 0x4bdffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004bd0000" filename = "" Region: id = 1387 start_va = 0x75960000 end_va = 0x76d5efff monitored = 0 entry_point = 0x75b1b990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 1388 start_va = 0x75540000 end_va = 0x75576fff monitored = 0 entry_point = 0x75543b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 1389 start_va = 0x74820000 end_va = 0x74d18fff monitored = 0 entry_point = 0x74a27610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 1390 start_va = 0x74e40000 end_va = 0x74e83fff monitored = 0 entry_point = 0x74e47410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 1391 start_va = 0x75530000 end_va = 0x7553efff monitored = 0 entry_point = 0x75532e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 1392 start_va = 0x4bd0000 end_va = 0x4bd3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004bd0000" filename = "" Region: id = 1394 start_va = 0x75f0000 end_va = 0x75fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000075f0000" filename = "" Region: id = 1395 start_va = 0x6b570000 end_va = 0x6b597fff monitored = 0 entry_point = 0x6b577820 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 1396 start_va = 0x6b4f0000 end_va = 0x6b560fff monitored = 0 entry_point = 0x6b5469e0 region_type = mapped_file name = "efswrt.dll" filename = "\\Windows\\SysWOW64\\efswrt.dll" (normalized: "c:\\windows\\syswow64\\efswrt.dll") Region: id = 1397 start_va = 0x70170000 end_va = 0x70237fff monitored = 0 entry_point = 0x701dae90 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\SysWOW64\\WinTypes.dll" (normalized: "c:\\windows\\syswow64\\wintypes.dll") Region: id = 1399 start_va = 0x6b4a0000 end_va = 0x6b4e8fff monitored = 0 entry_point = 0x6b4a6450 region_type = mapped_file name = "edputil.dll" filename = "\\Windows\\SysWOW64\\edputil.dll" (normalized: "c:\\windows\\syswow64\\edputil.dll") Region: id = 1402 start_va = 0x75f0000 end_va = 0x75f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000075f0000" filename = "" Region: id = 1417 start_va = 0x4970000 end_va = 0x4971fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004970000" filename = "" Region: id = 1428 start_va = 0x75f0000 end_va = 0x76acfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 1429 start_va = 0x76b0000 end_va = 0x7eaffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-s-1-5-21-1560258661-3990802383-1811730007-1000.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-S-1-5-21-1560258661-3990802383-1811730007-1000.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-s-1-5-21-1560258661-3990802383-1811730007-1000.dat") Region: id = 1432 start_va = 0x7eb0000 end_va = 0x82affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007eb0000" filename = "" Region: id = 1434 start_va = 0x82b0000 end_va = 0x8329fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000082b0000" filename = "" Region: id = 1482 start_va = 0x4970000 end_va = 0x4974fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004970000" filename = "" Region: id = 1834 start_va = 0x4970000 end_va = 0x497bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004970000" filename = "" Region: id = 1835 start_va = 0x4980000 end_va = 0x4980fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004980000" filename = "" Region: id = 1836 start_va = 0x4990000 end_va = 0x4990fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004990000" filename = "" Region: id = 1838 start_va = 0x4980000 end_va = 0x498ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004980000" filename = "" Region: id = 1839 start_va = 0x4980000 end_va = 0x498ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004980000" filename = "" Region: id = 1840 start_va = 0x4980000 end_va = 0x498ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004980000" filename = "" Region: id = 1841 start_va = 0x4980000 end_va = 0x498ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004980000" filename = "" Region: id = 1842 start_va = 0x4980000 end_va = 0x498ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004980000" filename = "" Region: id = 1843 start_va = 0x4980000 end_va = 0x498ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004980000" filename = "" Region: id = 1844 start_va = 0x4980000 end_va = 0x498ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004980000" filename = "" Thread: id = 18 os_tid = 0xd88 [0065.119] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0065.405] RoInitialize () returned 0x1 [0065.406] RoUninitialize () returned 0x0 [0074.470] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc210 [0074.470] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc20f [0074.487] GetSystemMetrics (nIndex=75) returned 1 [0074.498] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0074.720] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x6b980000 [0074.757] AdjustWindowRectEx (in: lpRect=0x1cf064, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x1cf064) returned 1 [0074.758] GetCurrentProcess () returned 0xffffffff [0074.758] GetCurrentThread () returned 0xfffffffe [0074.758] GetCurrentProcess () returned 0xffffffff [0074.759] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x1cef7c, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x1cef7c*=0x284) returned 1 [0074.761] GetCurrentThreadId () returned 0xd88 [0074.766] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0074.768] GetModuleHandleW (lpModuleName="user32.dll") returned 0x74f40000 [0074.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0x1ceda0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcWDl\x12zAß(úXo\\ò\x1c", lpUsedDefaultChar=0x0) returned 14 [0074.768] GetProcAddress (hModule=0x74f40000, lpProcName="DefWindowProcW") returned 0x744107e0 [0074.769] GetStockObject (i=5) returned 0x1900015 [0074.823] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0074.825] CoTaskMemAlloc (cb=0x5c) returned 0x672db8 [0074.825] RegisterClassW (lpWndClass=0x1ced90) returned 0xc216 [0074.826] CoTaskMemFree (pv=0x672db8) [0074.826] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0074.827] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.1ca0192_r10_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x103cc [0074.827] SetWindowLongW (hWnd=0x103cc, nIndex=-4, dwNewLong=1950418912) returned 75826918 [0074.829] GetWindowLongW (hWnd=0x103cc, nIndex=-4) returned 1950418912 [0074.835] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ce5f4 | out: phkResult=0x1ce5f4*=0x288) returned 0x0 [0074.836] RegQueryValueExW (in: hKey=0x288, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x1ce614, lpData=0x0, lpcbData=0x1ce610*=0x0 | out: lpType=0x1ce614*=0x0, lpData=0x0, lpcbData=0x1ce610*=0x0) returned 0x2 [0074.836] RegQueryValueExW (in: hKey=0x288, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x1ce614, lpData=0x0, lpcbData=0x1ce610*=0x0 | out: lpType=0x1ce614*=0x0, lpData=0x0, lpcbData=0x1ce610*=0x0) returned 0x2 [0074.836] RegCloseKey (hKey=0x288) returned 0x0 [0074.838] SetWindowLongW (hWnd=0x103cc, nIndex=-4, dwNewLong=75826958) returned 1950418912 [0074.839] GetWindowLongW (hWnd=0x103cc, nIndex=-4) returned 75826958 [0074.839] GetWindowLongW (hWnd=0x103cc, nIndex=-16) returned 113311744 [0074.840] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc20b [0074.840] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x103cc, Msg=0x24, wParam=0x0, lParam=0x1ce90c) returned 0x0 [0074.840] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc20c [0074.840] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x103cc, Msg=0x81, wParam=0x0, lParam=0x1ce900) returned 0x1 [0074.841] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x103cc, Msg=0x83, wParam=0x0, lParam=0x1ce8ec) returned 0x0 [0074.850] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x103cc, Msg=0x1, wParam=0x0, lParam=0x1ce900) returned 0x0 [0074.851] GetClientRect (in: hWnd=0x103cc, lpRect=0x1ce62c | out: lpRect=0x1ce62c) returned 1 [0074.851] GetWindowRect (in: hWnd=0x103cc, lpRect=0x1ce62c | out: lpRect=0x1ce62c) returned 1 [0074.852] GetParent (hWnd=0x103cc) returned 0x0 [0075.152] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0075.152] AdjustWindowRectEx (in: lpRect=0x1cea80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea80) returned 1 [0075.162] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0075.162] AdjustWindowRectEx (in: lpRect=0x1cea80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea80) returned 1 [0075.163] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0075.163] AdjustWindowRectEx (in: lpRect=0x1cea80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea80) returned 1 [0075.165] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0075.165] AdjustWindowRectEx (in: lpRect=0x1cea80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea80) returned 1 [0075.170] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0075.170] AdjustWindowRectEx (in: lpRect=0x1cea80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea80) returned 1 [0075.177] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0075.177] AdjustWindowRectEx (in: lpRect=0x1cea80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea80) returned 1 [0075.179] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0075.179] AdjustWindowRectEx (in: lpRect=0x1cea80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea80) returned 1 [0075.181] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0075.181] AdjustWindowRectEx (in: lpRect=0x1cea80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea80) returned 1 [0075.182] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0075.182] AdjustWindowRectEx (in: lpRect=0x1cea80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea80) returned 1 [0075.185] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0075.185] AdjustWindowRectEx (in: lpRect=0x1cea80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea80) returned 1 [0075.275] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0075.275] AdjustWindowRectEx (in: lpRect=0x1cea50, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea50) returned 1 [0075.554] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe.config", nBufferLength=0x105, lpBuffer=0x1ce404, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe.config", lpFilePart=0x0) returned 0x39 [0075.555] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x1cd320 | out: phkResult=0x1cd320*=0x0) returned 0x2 [0075.722] GetCurrentProcess () returned 0xffffffff [0075.722] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ce764 | out: TokenHandle=0x1ce764*=0x298) returned 1 [0075.726] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x1ce1fc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0075.728] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1ce75c | out: lpFileInformation=0x1ce75c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0075.729] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1ce1c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0075.730] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1ce764 | out: lpFileInformation=0x1ce764*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0075.730] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1ce164, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0075.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce69c) returned 1 [0075.732] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x29c [0075.732] GetFileType (hFile=0x29c) returned 0x1 [0075.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce698) returned 1 [0075.732] GetFileType (hFile=0x29c) returned 0x1 [0075.835] GetFileSize (in: hFile=0x29c, lpFileSizeHigh=0x1ce758 | out: lpFileSizeHigh=0x1ce758*=0x0) returned 0x8c8f [0075.836] ReadFile (in: hFile=0x29c, lpBuffer=0x2298de4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ce714, lpOverlapped=0x0 | out: lpBuffer=0x2298de4*, lpNumberOfBytesRead=0x1ce714*=0x1000, lpOverlapped=0x0) returned 1 [0075.848] ReadFile (in: hFile=0x29c, lpBuffer=0x2298de4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ce5c4, lpOverlapped=0x0 | out: lpBuffer=0x2298de4*, lpNumberOfBytesRead=0x1ce5c4*=0x1000, lpOverlapped=0x0) returned 1 [0075.849] ReadFile (in: hFile=0x29c, lpBuffer=0x2298de4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ce478, lpOverlapped=0x0 | out: lpBuffer=0x2298de4*, lpNumberOfBytesRead=0x1ce478*=0x1000, lpOverlapped=0x0) returned 1 [0075.850] ReadFile (in: hFile=0x29c, lpBuffer=0x2298de4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ce478, lpOverlapped=0x0 | out: lpBuffer=0x2298de4*, lpNumberOfBytesRead=0x1ce478*=0x1000, lpOverlapped=0x0) returned 1 [0075.850] ReadFile (in: hFile=0x29c, lpBuffer=0x2298de4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ce478, lpOverlapped=0x0 | out: lpBuffer=0x2298de4*, lpNumberOfBytesRead=0x1ce478*=0x1000, lpOverlapped=0x0) returned 1 [0075.851] ReadFile (in: hFile=0x29c, lpBuffer=0x2298de4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ce3b0, lpOverlapped=0x0 | out: lpBuffer=0x2298de4*, lpNumberOfBytesRead=0x1ce3b0*=0x1000, lpOverlapped=0x0) returned 1 [0075.853] ReadFile (in: hFile=0x29c, lpBuffer=0x2298de4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ce530, lpOverlapped=0x0 | out: lpBuffer=0x2298de4*, lpNumberOfBytesRead=0x1ce530*=0x1000, lpOverlapped=0x0) returned 1 [0075.854] ReadFile (in: hFile=0x29c, lpBuffer=0x2298de4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ce440, lpOverlapped=0x0 | out: lpBuffer=0x2298de4*, lpNumberOfBytesRead=0x1ce440*=0x1000, lpOverlapped=0x0) returned 1 [0075.854] ReadFile (in: hFile=0x29c, lpBuffer=0x2298de4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ce440, lpOverlapped=0x0 | out: lpBuffer=0x2298de4*, lpNumberOfBytesRead=0x1ce440*=0xc8f, lpOverlapped=0x0) returned 1 [0075.854] ReadFile (in: hFile=0x29c, lpBuffer=0x2298de4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ce500, lpOverlapped=0x0 | out: lpBuffer=0x2298de4*, lpNumberOfBytesRead=0x1ce500*=0x0, lpOverlapped=0x0) returned 1 [0075.854] CloseHandle (hObject=0x29c) returned 1 [0075.855] GetCurrentProcess () returned 0xffffffff [0075.855] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ce8a8 | out: TokenHandle=0x1ce8a8*=0x29c) returned 1 [0075.855] GetCurrentProcess () returned 0xffffffff [0075.855] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ce8a8 | out: TokenHandle=0x1ce8a8*=0x2a0) returned 1 [0075.856] GetCurrentProcess () returned 0xffffffff [0075.856] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ce764 | out: TokenHandle=0x1ce764*=0x2a4) returned 1 [0075.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe.config" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\runit.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1ce75c | out: lpFileInformation=0x1ce75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0075.856] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe.config", nBufferLength=0x105, lpBuffer=0x1ce1c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe.config", lpFilePart=0x0) returned 0x39 [0075.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe.config" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\runit.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x1ce764 | out: lpFileInformation=0x1ce764*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0075.857] GetCurrentProcess () returned 0xffffffff [0075.857] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ce8a8 | out: TokenHandle=0x1ce8a8*=0x2a8) returned 1 [0075.857] GetCurrentProcess () returned 0xffffffff [0075.857] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ce8a8 | out: TokenHandle=0x1ce8a8*=0x2ac) returned 1 [0075.867] GetCurrentProcess () returned 0xffffffff [0075.867] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ce708 | out: TokenHandle=0x1ce708*=0x2b0) returned 1 [0075.871] GetCurrentProcess () returned 0xffffffff [0075.871] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x1ce718 | out: TokenHandle=0x1ce718*=0x2b4) returned 1 [0076.027] GetProcessWindowStation () returned 0xf0 [0076.028] GetUserObjectInformationA (in: hObj=0xf0, nIndex=1, pvInfo=0x22b2364, nLength=0xc, lpnLengthNeeded=0x1ce314 | out: pvInfo=0x22b2364, lpnLengthNeeded=0x1ce314) returned 1 [0076.030] SetConsoleCtrlHandler (HandlerRoutine=0x4850736, Add=1) returned 1 [0076.031] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0076.031] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0076.032] GetClassInfoW (in: hInstance=0x30000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.1ca0192.0", lpWndClass=0x22b23c8 | out: lpWndClass=0x22b23c8) returned 0 [0076.034] CoTaskMemAlloc (cb=0x58) returned 0x6552b8 [0076.034] RegisterClassW (lpWndClass=0x1ce264) returned 0xc211 [0076.034] CoTaskMemFree (pv=0x6552b8) [0076.035] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.1ca0192.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.1ca0192.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x60272 [0076.053] NtdllDefWindowProc_W (hWnd=0x60272, Msg=0x81, wParam=0x0, lParam=0x1cdda0) returned 0x1 [0076.058] NtdllDefWindowProc_W (hWnd=0x60272, Msg=0x83, wParam=0x0, lParam=0x1cdd8c) returned 0x0 [0076.059] NtdllDefWindowProc_W (hWnd=0x60272, Msg=0x1, wParam=0x0, lParam=0x1cdda0) returned 0x0 [0076.059] NtdllDefWindowProc_W (hWnd=0x60272, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0076.059] NtdllDefWindowProc_W (hWnd=0x60272, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0076.070] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0076.070] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ce7ec, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ò\x1c", lpUsedDefaultChar=0x0) returned 17 [0076.070] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.080] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f4, pvParam=0x1ce284, fWinIni=0x0 | out: pvParam=0x1ce284) returned 1 [0076.085] GetDC (hWnd=0x0) returned 0x220106d6 [0076.101] GdiplusStartup (in: token=0x5679f0, input=0x1cd980, output=0x1cd9d0 | out: token=0x5679f0, output=0x1cd9d0) returned 0x0 [0076.105] CoTaskMemAlloc (cb=0x5c) returned 0x672ef0 [0076.218] GdipCreateFontFromLogfontW (hdc=0x220106d6, logfont=0x672ef0, font=0x1ce48c) returned 0x0 [0076.448] CoTaskMemFree (pv=0x672ef0) [0076.449] CoTaskMemAlloc (cb=0x5c) returned 0x672db8 [0076.449] CoTaskMemFree (pv=0x672db8) [0076.449] CoTaskMemAlloc (cb=0x5c) returned 0x672ef0 [0076.450] CoTaskMemFree (pv=0x672ef0) [0076.450] GdipGetFontUnit (font=0x4be1f08, unit=0x1ce458) returned 0x0 [0076.450] GdipGetFontSize (font=0x4be1f08, size=0x1ce45c) returned 0x0 [0076.450] GdipGetFontStyle (font=0x4be1f08, style=0x1ce454) returned 0x0 [0076.450] GdipGetFamily (font=0x4be1f08, family=0x1ce450) returned 0x0 [0076.451] GdipGetFontSize (font=0x4be1f08, size=0x22b3834) returned 0x0 [0076.451] ReleaseDC (hWnd=0x0, hDC=0x220106d6) returned 1 [0076.451] GetDC (hWnd=0x0) returned 0x220106d6 [0076.451] GdipCreateFromHDC (hdc=0x220106d6, graphics=0x1ce46c) returned 0x0 [0076.565] GdipGetDpiY (graphics=0x5bfa9c8, dpi=0x22b393c) returned 0x0 [0076.565] GdipGetFontHeight (font=0x4be1f08, graphics=0x5bfa9c8, height=0x1ce464) returned 0x0 [0076.565] GdipGetEmHeight (family=0x5bf6490, style=0, EmHeight=0x1ce46c) returned 0x0 [0076.566] GdipGetLineSpacing (family=0x5bf6490, style=0, LineSpacing=0x1ce46c) returned 0x0 [0076.566] GdipDeleteGraphics (graphics=0x5bfa9c8) returned 0x0 [0076.572] ReleaseDC (hWnd=0x0, hDC=0x220106d6) returned 1 [0076.573] GdipCreateFont (fontFamily=0x5bf6490, emSize=0x41100000, style=0, unit=0x3, font=0x22b38fc) returned 0x0 [0076.573] GdipGetFontSize (font=0x4be0568, size=0x22b3900) returned 0x0 [0076.575] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x1ce548, fWinIni=0x0 | out: pvParam=0x1ce548) returned 1 [0076.576] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0076.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ce3c8, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ò\x1c", lpUsedDefaultChar=0x0) returned 17 [0076.576] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.578] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0076.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ce5bc, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ò\x1c", lpUsedDefaultChar=0x0) returned 17 [0076.578] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0076.611] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0076.611] AdjustWindowRectEx (in: lpRect=0x1cea80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea80) returned 1 [0076.614] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0076.696] AdjustWindowRectEx (in: lpRect=0x1cea80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea80) returned 1 [0076.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0076.699] AdjustWindowRectEx (in: lpRect=0x1cea80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea80) returned 1 [0076.702] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0076.702] AdjustWindowRectEx (in: lpRect=0x1cea80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea80) returned 1 [0076.706] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0076.706] AdjustWindowRectEx (in: lpRect=0x1cea80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea80) returned 1 [0076.709] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0076.709] AdjustWindowRectEx (in: lpRect=0x1cea80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea80) returned 1 [0076.711] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0076.712] AdjustWindowRectEx (in: lpRect=0x1cea80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea80) returned 1 [0076.717] LoadLibraryW (lpLibFileName="RichEd20.DLL") returned 0x6b780000 [0076.854] CoTaskMemAlloc (cb=0x20c) returned 0x691d40 [0076.854] GetModuleFileNameW (in: hModule=0x6b780000, lpFilename=0x691d40, nSize=0x104 | out: lpFilename="C:\\Windows\\SYSTEM32\\RichEd20.DLL" (normalized: "c:\\windows\\syswow64\\riched20.dll")) returned 0x20 [0076.855] CoTaskMemFree (pv=0x691d40) [0076.855] GetFullPathNameW (in: lpFileName="C:\\Windows\\SYSTEM32\\RichEd20.DLL", nBufferLength=0x105, lpBuffer=0x1ce3cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SYSTEM32\\RichEd20.DLL", lpFilePart=0x0) returned 0x20 [0076.856] GetFullPathNameW (in: lpFileName="C:\\Windows\\SYSTEM32\\RichEd20.DLL", nBufferLength=0x105, lpBuffer=0x1ce3f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SYSTEM32\\RichEd20.DLL", lpFilePart=0x0) returned 0x20 [0076.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ce8a0) returned 1 [0076.856] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SYSTEM32\\RichEd20.DLL" (normalized: "c:\\windows\\syswow64\\riched20.dll"), fInfoLevelId=0x0, lpFileInformation=0x1ce91c | out: lpFileInformation=0x1ce91c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33301b8d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x33301b8d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x33301b8d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7dc00)) returned 1 [0076.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ce89c) returned 1 [0076.857] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\SYSTEM32\\RichEd20.DLL", lpdwHandle=0x1ce990 | out: lpdwHandle=0x1ce990) returned 0x72c [0076.858] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\SYSTEM32\\RichEd20.DLL", dwHandle=0x0, dwLen=0x72c, lpData=0x22b5ab8 | out: lpData=0x22b5ab8) returned 1 [0076.858] VerQueryValueW (in: pBlock=0x22b5ab8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1ce964, puLen=0x1ce960 | out: lplpBuffer=0x1ce964*=0x22b5e48, puLen=0x1ce960) returned 1 [0076.860] VerQueryValueW (in: pBlock=0x22b5ab8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x1ce8e4, puLen=0x1ce8e0 | out: lplpBuffer=0x1ce8e4*=0x22b5bb4, puLen=0x1ce8e0) returned 1 [0076.860] VerQueryValueW (in: pBlock=0x22b5ab8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x1ce8e4, puLen=0x1ce8e0 | out: lplpBuffer=0x1ce8e4*=0x22b5c08, puLen=0x1ce8e0) returned 1 [0076.860] VerQueryValueW (in: pBlock=0x22b5ab8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x1ce8e4, puLen=0x1ce8e0 | out: lplpBuffer=0x1ce8e4*=0x22b5c64, puLen=0x1ce8e0) returned 1 [0076.860] VerQueryValueW (in: pBlock=0x22b5ab8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x1ce8e4, puLen=0x1ce8e0 | out: lplpBuffer=0x1ce8e4*=0x22b5ca0, puLen=0x1ce8e0) returned 1 [0076.860] VerQueryValueW (in: pBlock=0x22b5ab8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x1ce8e4, puLen=0x1ce8e0 | out: lplpBuffer=0x1ce8e4*=0x22b5cd8, puLen=0x1ce8e0) returned 1 [0076.860] VerQueryValueW (in: pBlock=0x22b5ab8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x1ce8e4, puLen=0x1ce8e0 | out: lplpBuffer=0x1ce8e4*=0x22b5d50, puLen=0x1ce8e0) returned 1 [0076.860] VerQueryValueW (in: pBlock=0x22b5ab8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x1ce8e4, puLen=0x1ce8e0 | out: lplpBuffer=0x1ce8e4*=0x22b5d8c, puLen=0x1ce8e0) returned 1 [0076.860] VerQueryValueW (in: pBlock=0x22b5ab8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x1ce8e4, puLen=0x1ce8e0 | out: lplpBuffer=0x1ce8e4*=0x22b5e00, puLen=0x1ce8e0) returned 1 [0076.860] VerQueryValueW (in: pBlock=0x22b5ab8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x1ce8e4, puLen=0x1ce8e0 | out: lplpBuffer=0x1ce8e4*=0x22b5b68, puLen=0x1ce8e0) returned 1 [0076.860] VerQueryValueW (in: pBlock=0x22b5ab8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x1ce8e4, puLen=0x1ce8e0 | out: lplpBuffer=0x1ce8e4*=0x0, puLen=0x1ce8e0) returned 0 [0076.860] VerQueryValueW (in: pBlock=0x22b5ab8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x1ce8e4, puLen=0x1ce8e0 | out: lplpBuffer=0x1ce8e4*=0x0, puLen=0x1ce8e0) returned 0 [0076.860] VerQueryValueW (in: pBlock=0x22b5ab8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x1ce8e4, puLen=0x1ce8e0 | out: lplpBuffer=0x1ce8e4*=0x0, puLen=0x1ce8e0) returned 0 [0076.860] VerQueryValueW (in: pBlock=0x22b5ab8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x1ce8d8, puLen=0x1ce8d4 | out: lplpBuffer=0x1ce8d8*=0x22b5e48, puLen=0x1ce8d4) returned 1 [0076.861] VerLanguageNameW (in: wLang=0x0, szLang=0x1ce668, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0076.934] VerQueryValueW (in: pBlock=0x22b5ab8, lpSubBlock="\\", lplpBuffer=0x1ce8e8, puLen=0x1ce8e4 | out: lplpBuffer=0x1ce8e8*=0x22b5ae0, puLen=0x1ce8e4) returned 1 [0076.937] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0076.937] AdjustWindowRectEx (in: lpRect=0x1cea78, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x1cea78) returned 1 [0076.939] GetSystemDefaultLCID () returned 0x409 [0076.939] GetStockObject (i=17) returned 0x10a0047 [0076.939] GetObjectW (in: h=0x10a0047, c=92, pv=0x1ce89c | out: pv=0x1ce89c) returned 92 [0076.939] GetDC (hWnd=0x0) returned 0x1b0107ae [0076.943] CoTaskMemAlloc (cb=0x5c) returned 0x672c80 [0076.943] GdipCreateFontFromLogfontW (hdc=0x1b0107ae, logfont=0x672c80, font=0x1ce964) returned 0x0 [0076.947] CoTaskMemFree (pv=0x672c80) [0076.947] CoTaskMemAlloc (cb=0x5c) returned 0x672c80 [0076.947] CoTaskMemFree (pv=0x672c80) [0076.947] CoTaskMemAlloc (cb=0x5c) returned 0x672a78 [0076.948] CoTaskMemFree (pv=0x672a78) [0076.948] GdipGetFontUnit (font=0x4beef60, unit=0x1ce930) returned 0x0 [0076.948] GdipGetFontSize (font=0x4beef60, size=0x1ce934) returned 0x0 [0076.948] GdipGetFontStyle (font=0x4beef60, style=0x1ce92c) returned 0x0 [0076.948] GdipGetFamily (font=0x4beef60, family=0x1ce928) returned 0x0 [0076.948] GdipGetFontSize (font=0x4beef60, size=0x22b7390) returned 0x0 [0076.948] ReleaseDC (hWnd=0x0, hDC=0x1b0107ae) returned 1 [0076.948] GetDC (hWnd=0x0) returned 0x1b0107ae [0076.948] GdipCreateFromHDC (hdc=0x1b0107ae, graphics=0x1ce94c) returned 0x0 [0076.949] GdipGetDpiY (graphics=0x5bff610, dpi=0x22b7498) returned 0x0 [0076.949] GdipGetFontHeight (font=0x4beef60, graphics=0x5bff610, height=0x1ce944) returned 0x0 [0076.949] GdipGetEmHeight (family=0x5bf5a08, style=0, EmHeight=0x1ce94c) returned 0x0 [0076.949] GdipGetLineSpacing (family=0x5bf5a08, style=0, LineSpacing=0x1ce94c) returned 0x0 [0076.949] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0076.949] ReleaseDC (hWnd=0x0, hDC=0x1b0107ae) returned 1 [0076.949] GdipCreateFont (fontFamily=0x5bf5a08, emSize=0x41040000, style=0, unit=0x3, font=0x22b7458) returned 0x0 [0076.949] GdipGetFontSize (font=0x5bfab90, size=0x22b745c) returned 0x0 [0076.949] GdipDeleteFont (font=0x4beef60) returned 0x0 [0076.949] GetDC (hWnd=0x0) returned 0x1b0107ae [0076.949] GdipCreateFromHDC (hdc=0x1b0107ae, graphics=0x1ce9b8) returned 0x0 [0076.950] GdipGetFontHeight (font=0x5bfab90, graphics=0x5bff610, height=0x1ce9b0) returned 0x0 [0076.950] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0076.950] ReleaseDC (hWnd=0x0, hDC=0x1b0107ae) returned 1 [0076.951] GetSystemMetrics (nIndex=5) returned 1 [0076.951] GetSystemMetrics (nIndex=6) returned 1 [0076.965] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0076.965] AdjustWindowRectEx (in: lpRect=0x1cea80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea80) returned 1 [0076.971] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0076.971] AdjustWindowRectEx (in: lpRect=0x1cea80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea80) returned 1 [0077.033] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.033] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.034] GetSysColor (nIndex=10) returned 0xb4b4b4 [0077.034] GetSysColor (nIndex=2) returned 0xd1b499 [0077.034] GetSysColor (nIndex=9) returned 0x0 [0077.034] GetSysColor (nIndex=12) returned 0xababab [0077.034] GetSysColor (nIndex=15) returned 0xf0f0f0 [0077.034] GetSysColor (nIndex=20) returned 0xffffff [0077.034] GetSysColor (nIndex=16) returned 0xa0a0a0 [0077.034] GetSysColor (nIndex=15) returned 0xf0f0f0 [0077.034] GetSysColor (nIndex=16) returned 0xa0a0a0 [0077.034] GetSysColor (nIndex=21) returned 0x696969 [0077.034] GetSysColor (nIndex=22) returned 0xe3e3e3 [0077.034] GetSysColor (nIndex=20) returned 0xffffff [0077.035] GetSysColor (nIndex=18) returned 0x0 [0077.035] GetSysColor (nIndex=1) returned 0x0 [0077.035] GetSysColor (nIndex=27) returned 0xead1b9 [0077.035] GetSysColor (nIndex=28) returned 0xf2e4d7 [0077.035] GetSysColor (nIndex=17) returned 0x6d6d6d [0077.035] GetSysColor (nIndex=13) returned 0xff9933 [0077.035] GetSysColor (nIndex=14) returned 0xffffff [0077.035] GetSysColor (nIndex=26) returned 0xcc6600 [0077.035] GetSysColor (nIndex=11) returned 0xfcf7f4 [0077.035] GetSysColor (nIndex=3) returned 0xdbcdbf [0077.035] GetSysColor (nIndex=19) returned 0x0 [0077.035] GetSysColor (nIndex=24) returned 0xe1ffff [0077.035] GetSysColor (nIndex=23) returned 0x0 [0077.035] GetSysColor (nIndex=4) returned 0xf0f0f0 [0077.035] GetSysColor (nIndex=30) returned 0xf0f0f0 [0077.035] GetSysColor (nIndex=29) returned 0xff9933 [0077.035] GetSysColor (nIndex=7) returned 0x0 [0077.035] GetSysColor (nIndex=0) returned 0xc8c8c8 [0077.035] GetSysColor (nIndex=5) returned 0xffffff [0077.035] GetSysColor (nIndex=6) returned 0x646464 [0077.035] GetSysColor (nIndex=8) returned 0x0 [0077.038] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.038] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.046] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.046] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.046] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.046] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.047] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.047] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.047] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.047] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.049] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.049] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.049] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.049] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.050] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.050] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.050] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.050] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.054] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.054] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.054] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.054] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.055] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.055] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.055] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.055] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.057] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.057] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.057] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.057] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.058] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.058] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.058] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.058] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.060] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.060] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.060] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.060] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.060] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.060] AdjustWindowRectEx (in: lpRect=0x1ce9bc, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1ce9bc) returned 1 [0077.180] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.181] SystemParametersInfoW (in: uiAction=0x1024, uiParam=0x0, pvParam=0x1ce950, fWinIni=0x0 | out: pvParam=0x1ce950) returned 1 [0077.181] AdjustWindowRectEx (in: lpRect=0x1cea04, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1cea04) returned 1 [0077.181] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ce944, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ò\x1c", lpUsedDefaultChar=0x0) returned 17 [0077.182] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0077.184] SystemParametersInfoW (in: uiAction=0x6a, uiParam=0x0, pvParam=0x1ce30c, fWinIni=0x0 | out: pvParam=0x1ce30c) returned 1 [0077.188] GdipGetFamilyName (in: family=0x5bf6490, name=0x1ce67c, language=0x409 | out: name="Segoe UI") returned 0x0 [0077.189] CreateCompatibleDC (hdc=0x0) returned 0x62010987 [0077.189] GetCurrentObject (hdc=0x62010987, type=0x1) returned 0x1b00017 [0077.189] GetCurrentObject (hdc=0x62010987, type=0x2) returned 0x1900010 [0077.190] GetCurrentObject (hdc=0x62010987, type=0x7) returned 0x185000f [0077.190] GetCurrentObject (hdc=0x62010987, type=0x6) returned 0x18a0048 [0077.190] SaveDC (hdc=0x62010987) returned 1 [0077.190] GetDeviceCaps (hdc=0x62010987, index=90) returned 96 [0077.191] CoTaskMemAlloc (cb=0x5c) returned 0x672c80 [0077.191] CreateFontIndirectW (lplf=0x672c80) returned 0x880a09ce [0077.191] CoTaskMemFree (pv=0x672c80) [0077.191] GetObjectW (in: h=0x880a09ce, c=92, pv=0x1ce640 | out: pv=0x1ce640) returned 92 [0077.192] GetCurrentObject (hdc=0x62010987, type=0x6) returned 0x18a0048 [0077.192] GetObjectW (in: h=0x18a0048, c=92, pv=0x1ce588 | out: pv=0x1ce588) returned 92 [0077.193] SelectObject (hdc=0x62010987, h=0x880a09ce) returned 0x18a0048 [0077.193] GetMapMode (hdc=0x62010987) returned 1 [0077.193] GetTextMetricsW (in: hdc=0x62010987, lptm=0x1ce650 | out: lptm=0x1ce650) returned 1 [0077.194] DrawTextExW (in: hdc=0x62010987, lpchText="\x09", cchText=1, lprc=0x1ce75c, format=0x400, lpdtp=0x22b8e28 | out: lpchText="\x09", lprc=0x1ce75c) returned 15 [0077.336] GetSystemMetrics (nIndex=80) returned 1 [0077.337] MonitorFromRect (lprc=0x1ce6bc, dwFlags=0x2) returned 0x10001 [0077.337] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ce5ac | out: lpmi=0x1ce5ac) returned 1 [0077.391] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xc0109ac [0077.391] GetDeviceCaps (hdc=0xc0109ac, index=12) returned 32 [0077.391] GetDeviceCaps (hdc=0xc0109ac, index=14) returned 1 [0077.392] DeleteDC (hdc=0xc0109ac) returned 1 [0077.392] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ce5f0 | out: lpmi=0x1ce5f0) returned 1 [0077.392] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.393] AdjustWindowRectEx (in: lpRect=0x1ce694, dwStyle=0x82000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1ce694) returned 1 [0077.393] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.393] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ce374, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ò\x1c", lpUsedDefaultChar=0x0) returned 17 [0077.393] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0077.394] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.395] AdjustWindowRectEx (in: lpRect=0x1ce8b8, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce8b8) returned 1 [0077.395] GetDoubleClickTime () returned 0x1f4 [0077.436] GdipCreateBitmapFromStream (stream=0x4960030, bitmap=0x1ce8bc) returned 0x0 [0077.523] GdipImageForceValidation (image=0x5bff610) returned 0x0 [0077.527] GdipGetImageRawFormat (image=0x5bff610, format=0x1ce830*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0077.529] GdipGetImageRawFormat (image=0x5bff610, format=0x1ce7e8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0077.529] GdipGetImageWidth (image=0x5bff610, width=0x1ce7e8) returned 0x0 [0077.529] GdipGetImageHeight (image=0x5bff610, height=0x1ce7e8) returned 0x0 [0077.530] GdipCreateBitmapFromScan0 (width=9, height=5, stride=0, format=0x26200a, scan0=0x0, bitmap=0x1ce7ec) returned 0x0 [0077.530] GdipGetImagePixelFormat (image=0x5c00120, format=0x1ce7e8) returned 0x0 [0077.530] GdipGetImageGraphicsContext (image=0x5c00120, graphics=0x1ce7f4) returned 0x0 [0077.530] GdipGraphicsClear (graphics=0x5c006e0, color=0xffffff) returned 0x0 [0077.533] GdipCreateImageAttributes (imageattr=0x1ce7f8) returned 0x0 [0077.533] GdipSetImageAttributesColorKeys (imageattr=0x5bfb1f8, type=0x0, enableFlag=1, colorLow=0xffffffff, colorHigh=0xffffffff) returned 0x0 [0077.533] GdipDrawImageRectRectI (graphics=0x5c006e0, image=0x5bff610, dstx=0, dsty=0, dstwidth=9, dstheight=5, srcx=0, srcy=0, srcwidth=9, srcheight=5, srcUnit=0x2, imageAttributes=0x5bfb1f8, callback=0x0, callbackData=0x0) returned 0x0 [0077.554] GdipDisposeImageAttributes (imageattr=0x5bfb1f8) returned 0x0 [0077.554] GdipDeleteGraphics (graphics=0x5c006e0) returned 0x0 [0077.554] GdipDisposeImage (image=0x5bff610) returned 0x0 [0077.554] GetCurrentThreadId () returned 0xd88 [0077.554] GetCurrentThreadId () returned 0xd88 [0077.571] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.571] AdjustWindowRectEx (in: lpRect=0x1ce8b8, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce8b8) returned 1 [0077.572] GdipCreateBitmapFromStream (stream=0x4960010, bitmap=0x1ce8bc) returned 0x0 [0077.573] GdipImageForceValidation (image=0x5bff610) returned 0x0 [0077.573] GdipGetImageRawFormat (image=0x5bff610, format=0x1ce830*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0077.573] GdipGetImageRawFormat (image=0x5bff610, format=0x1ce7e8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0077.573] GdipGetImageWidth (image=0x5bff610, width=0x1ce7e8) returned 0x0 [0077.573] GdipGetImageHeight (image=0x5bff610, height=0x1ce7e8) returned 0x0 [0077.574] GdipCreateBitmapFromScan0 (width=9, height=5, stride=0, format=0x26200a, scan0=0x0, bitmap=0x1ce7ec) returned 0x0 [0077.574] GdipGetImagePixelFormat (image=0x5c00670, format=0x1ce7e8) returned 0x0 [0077.574] GdipGetImageGraphicsContext (image=0x5c00670, graphics=0x1ce7f4) returned 0x0 [0077.574] GdipGraphicsClear (graphics=0x5c00dc0, color=0xffffff) returned 0x0 [0077.574] GdipCreateImageAttributes (imageattr=0x1ce7f8) returned 0x0 [0077.574] GdipSetImageAttributesColorKeys (imageattr=0x5bfb1f8, type=0x0, enableFlag=1, colorLow=0xffffffff, colorHigh=0xffffffff) returned 0x0 [0077.574] GdipDrawImageRectRectI (graphics=0x5c00dc0, image=0x5bff610, dstx=0, dsty=0, dstwidth=9, dstheight=5, srcx=0, srcy=0, srcwidth=9, srcheight=5, srcUnit=0x2, imageAttributes=0x5bfb1f8, callback=0x0, callbackData=0x0) returned 0x0 [0077.574] GdipDisposeImageAttributes (imageattr=0x5bfb1f8) returned 0x0 [0077.574] GdipDeleteGraphics (graphics=0x5c00dc0) returned 0x0 [0077.574] GdipDisposeImage (image=0x5bff610) returned 0x0 [0077.574] GetCurrentThreadId () returned 0xd88 [0077.574] GetCurrentThreadId () returned 0xd88 [0077.580] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ce7a0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ò\x1c", lpUsedDefaultChar=0x0) returned 17 [0077.580] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0077.600] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.601] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ce318, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ò\x1c", lpUsedDefaultChar=0x0) returned 17 [0077.601] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0077.601] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.601] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ce7a0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ò\x1c", lpUsedDefaultChar=0x0) returned 17 [0077.601] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0077.601] DrawTextExW (in: hdc=0x62010987, lpchText="E&xit", cchText=5, lprc=0x1ce774, format=0x400, lpdtp=0x22bbebc | out: lpchText="E&xit", lprc=0x1ce774) returned 15 [0077.603] MonitorFromRect (lprc=0x1ce908, dwFlags=0x2) returned 0x10001 [0077.603] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ce7f8 | out: lpmi=0x1ce7f8) returned 1 [0077.603] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xd0109ac [0077.603] GetDeviceCaps (hdc=0xd0109ac, index=12) returned 32 [0077.603] GetDeviceCaps (hdc=0xd0109ac, index=14) returned 1 [0077.603] DeleteDC (hdc=0xd0109ac) returned 1 [0077.603] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ce83c | out: lpmi=0x1ce83c) returned 1 [0077.604] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.604] AdjustWindowRectEx (in: lpRect=0x1ce8e0, dwStyle=0x82000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1ce8e0) returned 1 [0077.604] DrawTextExW (in: hdc=0x62010987, lpchText="E&xit", cchText=5, lprc=0x1ce358, format=0x100405, lpdtp=0x22bc30c | out: lpchText="E&xit", lprc=0x1ce358) returned 15 [0077.604] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.604] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ce3a4, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ò\x1c", lpUsedDefaultChar=0x0) returned 17 [0077.604] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0077.608] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.608] AdjustWindowRectEx (in: lpRect=0x1cea04, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1cea04) returned 1 [0077.608] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.608] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ce944, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ò\x1c", lpUsedDefaultChar=0x0) returned 17 [0077.609] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0077.611] DrawTextExW (in: hdc=0x62010987, lpchText="\x09", cchText=1, lprc=0x1ce75c, format=0x400, lpdtp=0x22bca54 | out: lpchText="\x09", lprc=0x1ce75c) returned 15 [0077.611] MonitorFromRect (lprc=0x1ce6bc, dwFlags=0x2) returned 0x10001 [0077.611] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ce5ac | out: lpmi=0x1ce5ac) returned 1 [0077.611] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x100109ac [0077.612] GetDeviceCaps (hdc=0x100109ac, index=12) returned 32 [0077.612] GetDeviceCaps (hdc=0x100109ac, index=14) returned 1 [0077.612] DeleteDC (hdc=0x100109ac) returned 1 [0077.612] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ce5f0 | out: lpmi=0x1ce5f0) returned 1 [0077.612] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.612] AdjustWindowRectEx (in: lpRect=0x1ce694, dwStyle=0x82000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1ce694) returned 1 [0077.612] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.612] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ce374, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ò\x1c", lpUsedDefaultChar=0x0) returned 17 [0077.612] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0077.613] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.613] AdjustWindowRectEx (in: lpRect=0x1ce8b8, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce8b8) returned 1 [0077.613] GetCurrentThreadId () returned 0xd88 [0077.613] GetCurrentThreadId () returned 0xd88 [0077.613] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.613] AdjustWindowRectEx (in: lpRect=0x1ce8b8, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce8b8) returned 1 [0077.613] GetCurrentThreadId () returned 0xd88 [0077.613] GetCurrentThreadId () returned 0xd88 [0077.613] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.613] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ce7a0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ò\x1c", lpUsedDefaultChar=0x0) returned 17 [0077.614] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0077.614] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.614] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ce318, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ò\x1c", lpUsedDefaultChar=0x0) returned 17 [0077.614] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0077.614] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.615] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ce7a0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ò\x1c", lpUsedDefaultChar=0x0) returned 17 [0077.615] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0077.615] DrawTextExW (in: hdc=0x62010987, lpchText="&About...", cchText=9, lprc=0x1ce774, format=0x400, lpdtp=0x22be9dc | out: lpchText="&About...", lprc=0x1ce774) returned 15 [0077.615] MonitorFromRect (lprc=0x1ce908, dwFlags=0x2) returned 0x10001 [0077.615] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ce7f8 | out: lpmi=0x1ce7f8) returned 1 [0077.615] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x110109ac [0077.615] GetDeviceCaps (hdc=0x110109ac, index=12) returned 32 [0077.615] GetDeviceCaps (hdc=0x110109ac, index=14) returned 1 [0077.615] DeleteDC (hdc=0x110109ac) returned 1 [0077.615] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1ce83c | out: lpmi=0x1ce83c) returned 1 [0077.616] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.616] AdjustWindowRectEx (in: lpRect=0x1ce8e0, dwStyle=0x82000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1ce8e0) returned 1 [0077.616] DrawTextExW (in: hdc=0x62010987, lpchText="&About...", cchText=9, lprc=0x1ce358, format=0x100405, lpdtp=0x22bee2c | out: lpchText="&About...", lprc=0x1ce358) returned 15 [0077.616] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ce3a4, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ò\x1c", lpUsedDefaultChar=0x0) returned 17 [0077.616] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0077.619] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.619] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.619] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.619] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.621] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.621] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.621] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.621] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.624] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.624] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.624] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.624] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.626] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.626] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.626] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.626] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.628] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.628] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.628] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.628] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.630] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.630] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.630] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.630] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.632] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.632] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.632] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.632] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.685] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x1cea48) returned 0x0 [0077.686] GdipCreateFont (fontFamily=0x5bf5a08, emSize=0x41c00000, style=0, unit=0x3, font=0x22bf120) returned 0x0 [0077.686] GdipGetFontSize (font=0x4beef60, size=0x22bf124) returned 0x0 [0077.690] GetDC (hWnd=0x0) returned 0x1b0107ae [0077.690] GdipCreateFromHDC (hdc=0x1b0107ae, graphics=0x1ce9f0) returned 0x0 [0077.690] GdipGetFontHeight (font=0x4beef60, graphics=0x5bff610, height=0x1ce9e8) returned 0x0 [0077.690] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0077.690] ReleaseDC (hWnd=0x0, hDC=0x1b0107ae) returned 1 [0077.692] GetDC (hWnd=0x0) returned 0x1b0107ae [0077.692] GdipCreateFromHDC (hdc=0x1b0107ae, graphics=0x1ce980) returned 0x0 [0077.692] GdipGetFontHeight (font=0x4beef60, graphics=0x5bff610, height=0x1ce978) returned 0x0 [0077.692] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0077.692] ReleaseDC (hWnd=0x0, hDC=0x1b0107ae) returned 1 [0077.692] GetSystemMetrics (nIndex=5) returned 1 [0077.692] GetSystemMetrics (nIndex=6) returned 1 [0077.693] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.693] AdjustWindowRectEx (in: lpRect=0x1ce9e0, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x1ce9e0) returned 1 [0077.695] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.695] AdjustWindowRectEx (in: lpRect=0x1ce9e0, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x1ce9e0) returned 1 [0077.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.698] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.698] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.699] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.700] AdjustWindowRectEx (in: lpRect=0x1cea0c, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1cea0c) returned 1 [0077.702] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.702] AdjustWindowRectEx (in: lpRect=0x1cea40, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1cea40) returned 1 [0077.702] GetSystemMetrics (nIndex=59) returned 1456 [0077.702] GetSystemMetrics (nIndex=60) returned 916 [0077.702] GetSystemMetrics (nIndex=34) returned 136 [0077.702] GetSystemMetrics (nIndex=35) returned 39 [0077.702] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.702] AdjustWindowRectEx (in: lpRect=0x1ce940, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x1ce940) returned 1 [0077.705] GetCurrentThreadId () returned 0xd88 [0077.705] GetCurrentThreadId () returned 0xd88 [0077.705] GetCurrentThreadId () returned 0xd88 [0077.705] GetCurrentThreadId () returned 0xd88 [0077.705] GetCurrentThreadId () returned 0xd88 [0077.705] GetCurrentThreadId () returned 0xd88 [0077.721] CreateCompatibleDC (hdc=0x0) returned 0x120109ac [0077.722] GetDC (hWnd=0x0) returned 0x1b0107ae [0077.722] GdipCreateFromHDC (hdc=0x1b0107ae, graphics=0x1ce894) returned 0x0 [0077.722] CoTaskMemAlloc (cb=0x5c) returned 0x6728d8 [0077.722] GdipGetLogFontW (font=0x5bfab90, graphics=0x5bff610, logfontW=0x6728d8) returned 0x0 [0077.729] CoTaskMemFree (pv=0x6728d8) [0077.729] CoTaskMemAlloc (cb=0x5c) returned 0x6729a8 [0077.729] CoTaskMemFree (pv=0x6729a8) [0077.729] CoTaskMemAlloc (cb=0x5c) returned 0x6728d8 [0077.729] CoTaskMemFree (pv=0x6728d8) [0077.729] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0077.730] ReleaseDC (hWnd=0x0, hDC=0x1b0107ae) returned 1 [0077.732] CoTaskMemAlloc (cb=0x5c) returned 0x672ce8 [0077.732] CreateFontIndirectW (lplf=0x672ce8) returned 0x1e0a09a2 [0077.732] CoTaskMemFree (pv=0x672ce8) [0077.732] SelectObject (hdc=0x120109ac, h=0x1e0a09a2) returned 0x18a0048 [0077.732] GetTextMetricsW (in: hdc=0x120109ac, lptm=0x1ce9a0 | out: lptm=0x1ce9a0) returned 1 [0077.732] GetTextExtentPoint32W (in: hdc=0x120109ac, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x22bffa0 | out: psizl=0x22bffa0) returned 1 [0077.733] SelectObject (hdc=0x120109ac, h=0x18a0048) returned 0x1e0a09a2 [0077.733] DeleteDC (hdc=0x120109ac) returned 1 [0077.733] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.733] AdjustWindowRectEx (in: lpRect=0x1ce980, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1ce980) returned 1 [0077.773] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.773] AdjustWindowRectEx (in: lpRect=0x1ce7e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x1ce7e4) returned 1 [0077.777] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.778] AdjustWindowRectEx (in: lpRect=0x1ce6f8, dwStyle=0x2cc0000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x1ce6f8) returned 1 [0077.778] AdjustWindowRectEx (in: lpRect=0x1ce918, dwStyle=0x2cc0000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x1ce918) returned 1 [0077.778] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.778] AdjustWindowRectEx (in: lpRect=0x1ce670, dwStyle=0x2cc0000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x1ce670) returned 1 [0077.778] AdjustWindowRectEx (in: lpRect=0x1ce750, dwStyle=0x2cc0000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x1ce750) returned 1 [0077.778] GetSystemMetrics (nIndex=34) returned 136 [0077.778] GetSystemMetrics (nIndex=35) returned 39 [0077.778] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.778] AdjustWindowRectEx (in: lpRect=0x1ce910, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce910) returned 1 [0077.778] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.778] AdjustWindowRectEx (in: lpRect=0x1ce774, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce774) returned 1 [0077.779] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.779] AdjustWindowRectEx (in: lpRect=0x1ce910, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce910) returned 1 [0077.779] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.779] AdjustWindowRectEx (in: lpRect=0x1ce774, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce774) returned 1 [0077.779] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.779] AdjustWindowRectEx (in: lpRect=0x1ce910, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x1ce910) returned 1 [0077.779] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.779] AdjustWindowRectEx (in: lpRect=0x1ce774, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x1ce774) returned 1 [0077.779] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.780] AdjustWindowRectEx (in: lpRect=0x1ce910, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce910) returned 1 [0077.780] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.780] AdjustWindowRectEx (in: lpRect=0x1ce774, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce774) returned 1 [0077.780] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.780] AdjustWindowRectEx (in: lpRect=0x1ce910, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce910) returned 1 [0077.780] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.780] AdjustWindowRectEx (in: lpRect=0x1ce774, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce774) returned 1 [0077.780] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.780] AdjustWindowRectEx (in: lpRect=0x1ce910, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce910) returned 1 [0077.781] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.781] AdjustWindowRectEx (in: lpRect=0x1ce774, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce774) returned 1 [0077.781] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.781] AdjustWindowRectEx (in: lpRect=0x1ce910, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce910) returned 1 [0077.781] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.781] AdjustWindowRectEx (in: lpRect=0x1ce774, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce774) returned 1 [0077.781] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.781] AdjustWindowRectEx (in: lpRect=0x1ce910, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce910) returned 1 [0077.781] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.781] AdjustWindowRectEx (in: lpRect=0x1ce774, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce774) returned 1 [0077.782] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.782] AdjustWindowRectEx (in: lpRect=0x1ce910, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce910) returned 1 [0077.782] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.782] AdjustWindowRectEx (in: lpRect=0x1ce774, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce774) returned 1 [0077.782] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.782] AdjustWindowRectEx (in: lpRect=0x1ce910, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce910) returned 1 [0077.782] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.782] AdjustWindowRectEx (in: lpRect=0x1ce774, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce774) returned 1 [0077.782] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.782] AdjustWindowRectEx (in: lpRect=0x1ce910, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce910) returned 1 [0077.783] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.783] AdjustWindowRectEx (in: lpRect=0x1ce774, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce774) returned 1 [0077.783] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.783] AdjustWindowRectEx (in: lpRect=0x1ce910, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce910) returned 1 [0077.783] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.783] AdjustWindowRectEx (in: lpRect=0x1ce774, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce774) returned 1 [0077.783] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.783] AdjustWindowRectEx (in: lpRect=0x1ce910, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce910) returned 1 [0077.783] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.784] AdjustWindowRectEx (in: lpRect=0x1ce774, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce774) returned 1 [0077.784] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.784] AdjustWindowRectEx (in: lpRect=0x1ce910, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce910) returned 1 [0077.784] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.784] AdjustWindowRectEx (in: lpRect=0x1ce774, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce774) returned 1 [0077.784] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.784] AdjustWindowRectEx (in: lpRect=0x1ce910, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce910) returned 1 [0077.784] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.784] AdjustWindowRectEx (in: lpRect=0x1ce774, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce774) returned 1 [0077.785] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.785] AdjustWindowRectEx (in: lpRect=0x1ce910, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce910) returned 1 [0077.785] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.785] AdjustWindowRectEx (in: lpRect=0x1ce774, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce774) returned 1 [0077.785] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.785] AdjustWindowRectEx (in: lpRect=0x1ce910, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce910) returned 1 [0077.785] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.785] AdjustWindowRectEx (in: lpRect=0x1ce774, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce774) returned 1 [0077.785] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.785] AdjustWindowRectEx (in: lpRect=0x1ce910, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce910) returned 1 [0077.786] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.787] AdjustWindowRectEx (in: lpRect=0x1ce774, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce774) returned 1 [0077.787] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.787] AdjustWindowRectEx (in: lpRect=0x1ce910, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce910) returned 1 [0077.787] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.788] AdjustWindowRectEx (in: lpRect=0x1ce774, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce774) returned 1 [0077.788] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.788] AdjustWindowRectEx (in: lpRect=0x1ce910, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce910) returned 1 [0077.788] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.788] AdjustWindowRectEx (in: lpRect=0x1ce774, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x1ce774) returned 1 [0077.793] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0077.793] AdjustWindowRectEx (in: lpRect=0x1cf20c, dwStyle=0x2cc0000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x1cf20c) returned 1 [0077.793] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0077.793] CreateWindowExW (dwExStyle=0x90001, lpClassName="WindowsForms10.Window.8.app.0.1ca0192_r10_ad1", lpWindowName=0x0, dwStyle=0x2cc0000, X=-2147483648, Y=-2147483648, nWidth=303, nHeight=410, hWndParent=0x0, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x40358 [0077.794] SetWindowLongW (hWnd=0x40358, nIndex=-4, dwNewLong=1950418912) returned 75826918 [0077.794] GetWindowLongW (hWnd=0x40358, nIndex=-4) returned 1950418912 [0077.794] SetWindowLongW (hWnd=0x40358, nIndex=-4, dwNewLong=75828190) returned 1950418912 [0077.794] GetWindowLongW (hWnd=0x40358, nIndex=-4) returned 75828190 [0077.794] GetWindowLongW (hWnd=0x40358, nIndex=-16) returned 114032640 [0077.795] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x81, wParam=0x0, lParam=0x1cecc8) returned 0x1 [0077.795] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x83, wParam=0x0, lParam=0x1cecb4) returned 0x0 [0077.800] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x1, wParam=0x0, lParam=0x1cecc8) returned 0x0 [0077.800] GetClientRect (in: hWnd=0x40358, lpRect=0x1ce9c4 | out: lpRect=0x1ce9c4) returned 1 [0077.800] GetWindowRect (in: hWnd=0x40358, lpRect=0x1ce9c4 | out: lpRect=0x1ce9c4) returned 1 [0078.035] SetLayeredWindowAttributes (hwnd=0x40358, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0078.042] GetStartupInfoW (in: lpStartupInfo=0x22c11a8 | out: lpStartupInfo=0x22c11a8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0078.043] GetParent (hWnd=0x40358) returned 0x0 [0078.043] GetStockObject (i=5) returned 0x1900015 [0078.043] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0078.043] CoTaskMemAlloc (cb=0x5c) returned 0x672ce8 [0078.043] RegisterClassW (lpWndClass=0x1cf184) returned 0xc219 [0078.044] CoTaskMemFree (pv=0x672ce8) [0078.044] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0078.044] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.1ca0192_r10_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x8001e [0078.044] SetWindowLongW (hWnd=0x8001e, nIndex=-4, dwNewLong=1950418912) returned 75828230 [0078.044] GetWindowLongW (hWnd=0x8001e, nIndex=-4) returned 1950418912 [0078.044] SetWindowLongW (hWnd=0x8001e, nIndex=-4, dwNewLong=75828270) returned 1950418912 [0078.045] GetWindowLongW (hWnd=0x8001e, nIndex=-4) returned 75828270 [0078.045] GetWindowLongW (hWnd=0x8001e, nIndex=-16) returned 79691776 [0078.045] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x8001e, Msg=0x24, wParam=0x0, lParam=0x1cecfc) returned 0x0 [0078.046] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x8001e, Msg=0x81, wParam=0x0, lParam=0x1cecf0) returned 0x1 [0078.046] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x8001e, Msg=0x83, wParam=0x0, lParam=0x1cecdc) returned 0x0 [0078.049] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x8001e, Msg=0x1, wParam=0x0, lParam=0x1cecf0) returned 0x0 [0078.050] SetWindowLongW (hWnd=0x40358, nIndex=-8, dwNewLong=524318) returned 0 [0078.051] SendMessageW (hWnd=0x40358, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0078.051] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0078.051] SendMessageW (hWnd=0x40358, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0078.051] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0078.983] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0078.983] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0078.984] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0078.985] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xd, wParam=0x104, lParam=0x47062a0) returned 0x0 [0079.006] GetSystemMenu (hWnd=0x40358, bRevert=0) returned 0x602bd [0080.152] GetWindowPlacement (in: hWnd=0x40358, lpwndpl=0x1cf2b8 | out: lpwndpl=0x1cf2b8) returned 1 [0080.152] EnableMenuItem (hMenu=0x602bd, uIDEnableItem=0xf020, uEnable=0x1) returned 0 [0080.152] EnableMenuItem (hMenu=0x602bd, uIDEnableItem=0xf030, uEnable=0x1) returned 0 [0080.152] EnableMenuItem (hMenu=0x602bd, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0080.152] EnableMenuItem (hMenu=0x602bd, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0080.152] EnableMenuItem (hMenu=0x602bd, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0080.152] GetClientRect (in: hWnd=0x40358, lpRect=0x1cf2fc | out: lpRect=0x1cf2fc) returned 1 [0080.152] GetClientRect (in: hWnd=0x40358, lpRect=0x1cf25c | out: lpRect=0x1cf25c) returned 1 [0080.152] GetWindowRect (in: hWnd=0x40358, lpRect=0x1cf25c | out: lpRect=0x1cf25c) returned 1 [0080.152] SetWindowLongW (hWnd=0x40358, nIndex=-8, dwNewLong=524318) returned 524318 [0080.157] GetSystemMetrics (nIndex=11) returned 32 [0080.157] GetSystemMetrics (nIndex=12) returned 32 [0080.157] GetDC (hWnd=0x0) returned 0x1b0107ae [0080.157] GetDeviceCaps (hdc=0x1b0107ae, index=12) returned 32 [0080.157] GetDeviceCaps (hdc=0x1b0107ae, index=14) returned 1 [0080.157] ReleaseDC (hWnd=0x0, hDC=0x1b0107ae) returned 1 [0080.158] CreateIconFromResourceEx (presbits=0x22c3e84, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x1202a9 [0080.160] SendMessageW (hWnd=0x8001e, Msg=0x80, wParam=0x1, lParam=0x1202a9) returned 0x0 [0080.161] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x8001e, Msg=0x80, wParam=0x1, lParam=0x1202a9) returned 0x0 [0080.162] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0080.163] GetWindowLongW (hWnd=0x40358, nIndex=-16) returned 114032640 [0080.163] GetWindowTextLengthW (hWnd=0x40358) returned 0 [0080.163] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0080.163] GetSystemMetrics (nIndex=42) returned 0 [0080.163] GetWindowTextW (in: hWnd=0x40358, lpString=0x1cf208, nMaxCount=1 | out: lpString="") returned 0 [0080.163] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xd, wParam=0x1, lParam=0x1cf208) returned 0x0 [0080.164] GetWindowTextLengthW (hWnd=0x40358) returned 0 [0080.164] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0080.164] GetSystemMetrics (nIndex=42) returned 0 [0080.164] GetWindowTextW (in: hWnd=0x40358, lpString=0x1cf208, nMaxCount=1 | out: lpString="") returned 0 [0080.164] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xd, wParam=0x1, lParam=0x1cf208) returned 0x0 [0080.164] GetWindowLongW (hWnd=0x40358, nIndex=-16) returned 114032640 [0080.164] GetWindowLongW (hWnd=0x40358, nIndex=-20) returned 590081 [0080.164] SetWindowLongW (hWnd=0x40358, nIndex=-16, dwNewLong=46923776) returned 114032640 [0080.164] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7c, wParam=0xfffffff0, lParam=0x1cf254) returned 0x0 [0080.164] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7d, wParam=0xfffffff0, lParam=0x1cf254) returned 0x0 [0080.165] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0080.165] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0080.165] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0080.166] SetWindowLongW (hWnd=0x40358, nIndex=-20, dwNewLong=589825) returned 590081 [0080.166] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7c, wParam=0xffffffec, lParam=0x1cf254) returned 0x0 [0080.166] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7d, wParam=0xffffffec, lParam=0x1cf254) returned 0x0 [0080.167] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0080.167] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0080.167] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0080.167] SetWindowPos (hWnd=0x40358, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0080.167] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x46, wParam=0x0, lParam=0x1cf274) returned 0x0 [0080.168] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x83, wParam=0x1, lParam=0x1cf24c) returned 0x0 [0080.172] GetWindowPlacement (in: hWnd=0x40358, lpwndpl=0x1cefe4 | out: lpwndpl=0x1cefe4) returned 1 [0080.172] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x47, wParam=0x0, lParam=0x1cf274) returned 0x0 [0080.172] GetClientRect (in: hWnd=0x40358, lpRect=0x1cef94 | out: lpRect=0x1cef94) returned 1 [0080.172] GetWindowRect (in: hWnd=0x40358, lpRect=0x1cef94 | out: lpRect=0x1cef94) returned 1 [0080.173] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0080.173] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0080.173] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0080.174] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x83, wParam=0x1, lParam=0x1cedc4) returned 0x0 [0080.178] RedrawWindow (hWnd=0x40358, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0080.178] GetSystemMenu (hWnd=0x40358, bRevert=0) returned 0x602bd [0080.178] GetWindowPlacement (in: hWnd=0x40358, lpwndpl=0x1cf2a8 | out: lpwndpl=0x1cf2a8) returned 1 [0080.178] EnableMenuItem (hMenu=0x602bd, uIDEnableItem=0xf020, uEnable=0x1) returned 1 [0080.178] EnableMenuItem (hMenu=0x602bd, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0080.178] EnableMenuItem (hMenu=0x602bd, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0080.178] EnableMenuItem (hMenu=0x602bd, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0080.178] EnableMenuItem (hMenu=0x602bd, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0080.178] ShowWindow (hWnd=0x40358, nCmdShow=5) returned 0 [0080.178] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0080.178] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0080.179] GetClassInfoW (in: hInstance=0x0, lpClassName="BUTTON", lpWndClass=0x22c5098 | out: lpWndClass=0x22c5098) returned 1 [0080.179] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0080.180] CoTaskMemAlloc (cb=0x58) returned 0x6555b8 [0080.180] RegisterClassW (lpWndClass=0x1cedec) returned 0xc21a [0080.181] CoTaskMemFree (pv=0x6555b8) [0080.181] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0080.182] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r10_ad1", lpWindowName="←", dwStyle=0x5601000b, X=41, Y=108, nWidth=46, nHeight=42, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x203d6 [0080.182] SetWindowLongW (hWnd=0x203d6, nIndex=-4, dwNewLong=2004791104) returned 75828310 [0080.182] GetWindowLongW (hWnd=0x203d6, nIndex=-4) returned 2004791104 [0080.182] SetWindowLongW (hWnd=0x203d6, nIndex=-4, dwNewLong=75828350) returned 2004791104 [0080.182] GetWindowLongW (hWnd=0x203d6, nIndex=-4) returned 75828350 [0080.182] GetWindowLongW (hWnd=0x203d6, nIndex=-16) returned 1174470667 [0080.182] GetWindowLongW (hWnd=0x203d6, nIndex=-12) returned 0 [0080.182] SetWindowLongW (hWnd=0x203d6, nIndex=-12, dwNewLong=132054) returned 0 [0080.183] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d6, Msg=0x81, wParam=0x0, lParam=0x1ce958) returned 0x1 [0080.183] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d6, Msg=0x83, wParam=0x0, lParam=0x1ce944) returned 0x0 [0080.183] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d6, Msg=0x1, wParam=0x0, lParam=0x1ce958) returned 0x0 [0080.184] GetWindow (hWnd=0x203d6, uCmd=0x3) returned 0x0 [0080.184] GetClientRect (in: hWnd=0x203d6, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0080.184] GetWindowRect (in: hWnd=0x203d6, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0080.184] GetParent (hWnd=0x203d6) returned 0x40358 [0080.184] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce63c, cPoints=0x2 | out: lpPoints=0x1ce63c) returned -7077974 [0080.184] SetWindowTextW (hWnd=0x203d6, lpString="←") returned 1 [0080.184] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d6, Msg=0xc, wParam=0x0, lParam=0x22939e8) returned 0x1 [0080.185] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d6, Msg=0x5, wParam=0x0, lParam=0x2a002e) returned 0x0 [0080.185] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d6, Msg=0x3, wParam=0x0, lParam=0x6c0029) returned 0x0 [0080.185] GetClientRect (in: hWnd=0x203d6, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0080.185] GetWindowRect (in: hWnd=0x203d6, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0080.185] GetParent (hWnd=0x203d6) returned 0x40358 [0080.185] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce694, cPoints=0x2 | out: lpPoints=0x1ce694) returned -7077974 [0080.186] SendMessageW (hWnd=0x203d6, Msg=0x2210, wParam=0x3d60001, lParam=0x203d6) returned 0x0 [0080.186] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d6, Msg=0x2210, wParam=0x3d60001, lParam=0x203d6) returned 0x0 [0080.186] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0080.186] GetParent (hWnd=0x203d6) returned 0x40358 [0080.186] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0080.186] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0080.186] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r10_ad1", lpWindowName="CE", dwStyle=0x5601000b, X=93, Y=108, nWidth=46, nHeight=42, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x203f8 [0080.187] SetWindowLongW (hWnd=0x203f8, nIndex=-4, dwNewLong=2004791104) returned 75828310 [0080.187] GetWindowLongW (hWnd=0x203f8, nIndex=-4) returned 2004791104 [0080.187] SetWindowLongW (hWnd=0x203f8, nIndex=-4, dwNewLong=75828390) returned 2004791104 [0080.187] GetWindowLongW (hWnd=0x203f8, nIndex=-4) returned 75828390 [0080.187] GetWindowLongW (hWnd=0x203f8, nIndex=-16) returned 1174470667 [0080.187] GetWindowLongW (hWnd=0x203f8, nIndex=-12) returned 0 [0080.187] SetWindowLongW (hWnd=0x203f8, nIndex=-12, dwNewLong=132088) returned 0 [0080.187] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f8, Msg=0x81, wParam=0x0, lParam=0x1ce958) returned 0x1 [0080.188] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f8, Msg=0x83, wParam=0x0, lParam=0x1ce944) returned 0x0 [0080.188] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f8, Msg=0x1, wParam=0x0, lParam=0x1ce958) returned 0x0 [0080.188] GetWindow (hWnd=0x203f8, uCmd=0x3) returned 0x203d6 [0080.188] GetClientRect (in: hWnd=0x203f8, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0080.188] GetWindowRect (in: hWnd=0x203f8, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0080.188] GetParent (hWnd=0x203f8) returned 0x40358 [0080.188] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce63c, cPoints=0x2 | out: lpPoints=0x1ce63c) returned -7077974 [0080.188] SetWindowTextW (hWnd=0x203f8, lpString="CE") returned 1 [0080.188] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f8, Msg=0xc, wParam=0x0, lParam=0x2293bc0) returned 0x1 [0080.189] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f8, Msg=0x5, wParam=0x0, lParam=0x2a002e) returned 0x0 [0080.189] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f8, Msg=0x3, wParam=0x0, lParam=0x6c005d) returned 0x0 [0080.189] GetClientRect (in: hWnd=0x203f8, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0080.189] GetWindowRect (in: hWnd=0x203f8, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0080.189] GetParent (hWnd=0x203f8) returned 0x40358 [0080.189] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce694, cPoints=0x2 | out: lpPoints=0x1ce694) returned -7077974 [0080.189] SendMessageW (hWnd=0x203f8, Msg=0x2210, wParam=0x3f80001, lParam=0x203f8) returned 0x0 [0080.189] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f8, Msg=0x2210, wParam=0x3f80001, lParam=0x203f8) returned 0x0 [0080.189] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0080.189] GetParent (hWnd=0x203f8) returned 0x40358 [0080.189] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0080.190] GetClassInfoW (in: hInstance=0x0, lpClassName="RichEdit20W", lpWndClass=0x22c5450 | out: lpWndClass=0x22c5450) returned 1 [0080.190] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0080.190] CoTaskMemAlloc (cb=0x62) returned 0x656198 [0080.190] RegisterClassW (lpWndClass=0x1cedc8) returned 0xc21b [0080.190] CoTaskMemFree (pv=0x656198) [0080.190] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0080.190] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.RichEdit20W.app.0.1ca0192_r10_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=41, Y=41, nWidth=202, nHeight=54, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x203f6 [0080.191] SetWindowLongW (hWnd=0x203f6, nIndex=-4, dwNewLong=1803191264) returned 75828430 [0080.191] GetWindowLongW (hWnd=0x203f6, nIndex=-4) returned 1803191264 [0080.191] SetWindowLongW (hWnd=0x203f6, nIndex=-4, dwNewLong=75828470) returned 1803191264 [0080.191] GetWindowLongW (hWnd=0x203f6, nIndex=-4) returned 75828470 [0080.191] GetWindowLongW (hWnd=0x203f6, nIndex=-16) returned 1174470848 [0080.191] GetWindowLongW (hWnd=0x203f6, nIndex=-12) returned 0 [0080.191] SetWindowLongW (hWnd=0x203f6, nIndex=-12, dwNewLong=132086) returned 0 [0080.191] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x81, wParam=0x0, lParam=0x1ce938) returned 0x1 [0080.196] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x7c, wParam=0xffffffec, lParam=0x1cd20c) returned 0x0 [0080.197] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x7d, wParam=0xffffffec, lParam=0x1cd20c) returned 0x0 [0080.325] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x83, wParam=0x0, lParam=0x1ce924) returned 0x0 [0080.327] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x1, wParam=0x0, lParam=0x1ce938) returned 0x0 [0080.329] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x7c, wParam=0xfffffff0, lParam=0x1cdb64) returned 0x0 [0080.329] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x7d, wParam=0xfffffff0, lParam=0x1cdb64) returned 0x1 [0081.062] GetWindow (hWnd=0x203f6, uCmd=0x3) returned 0x203f8 [0081.062] GetClientRect (in: hWnd=0x203f6, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0081.062] GetWindowRect (in: hWnd=0x203f6, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0081.062] GetParent (hWnd=0x203f6) returned 0x40358 [0081.062] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce63c, cPoints=0x2 | out: lpPoints=0x1ce63c) returned -7077974 [0081.063] SendMessageW (hWnd=0x203f6, Msg=0x435, wParam=0x0, lParam=0xa) returned 0x0 [0081.063] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x435, wParam=0x0, lParam=0xa) returned 0x0 [0081.063] SendMessageW (hWnd=0x203f6, Msg=0x445, wParam=0x0, lParam=0x4bf000f) returned 0x0 [0081.063] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x445, wParam=0x0, lParam=0x4bf000f) returned 0x0 [0081.063] SendMessageW (hWnd=0x203f6, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0081.063] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0081.063] SendMessageW (hWnd=0x203f6, Msg=0x44d, wParam=0x4, lParam=0x1) returned 0xc1 [0081.063] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x44d, wParam=0x4, lParam=0x1) returned 0xc1 [0081.064] SendMessageW (hWnd=0x203f6, Msg=0x443, wParam=0x0, lParam=0xffffff) returned 0xffffff [0081.064] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x443, wParam=0x0, lParam=0xffffff) returned 0xffffff [0081.064] SendMessageW (hWnd=0x203f6, Msg=0x43a, wParam=0x0, lParam=0x1ce514) returned 0xf800003f [0081.064] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x43a, wParam=0x0, lParam=0x1ce514) returned 0xf800003f [0081.065] GetDC (hWnd=0x0) returned 0x220106d6 [0081.065] GdipCreateFromHDC (hdc=0x220106d6, graphics=0x1ce49c) returned 0x0 [0081.065] CoTaskMemAlloc (cb=0x5c) returned 0x672870 [0081.065] GdipGetLogFontW (font=0x4beef60, graphics=0x5bff610, logfontW=0x672870) returned 0x0 [0081.066] CoTaskMemFree (pv=0x672870) [0081.066] CoTaskMemAlloc (cb=0x5c) returned 0x672870 [0081.066] CoTaskMemFree (pv=0x672870) [0081.066] CoTaskMemAlloc (cb=0x5c) returned 0x672db8 [0081.066] CoTaskMemFree (pv=0x672db8) [0081.066] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0081.066] ReleaseDC (hWnd=0x0, hDC=0x220106d6) returned 1 [0081.066] CoTaskMemAlloc (cb=0x5c) returned 0x672db8 [0081.066] CreateFontIndirectW (lplf=0x672db8) returned 0x780a09dc [0081.066] CoTaskMemFree (pv=0x672db8) [0081.066] SendMessageW (hWnd=0x203f6, Msg=0x30, wParam=0x780a09dc, lParam=0x0) returned 0x1 [0081.066] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x30, wParam=0x780a09dc, lParam=0x0) returned 0x1 [0081.070] SendMessageW (hWnd=0x203f6, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0081.070] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0081.071] SendMessageW (hWnd=0x203f6, Msg=0x43a, wParam=0x0, lParam=0x1ce1bc) returned 0xf800003f [0081.071] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x43a, wParam=0x0, lParam=0x1ce1bc) returned 0xf800003f [0081.071] SendMessageW (hWnd=0x203f6, Msg=0x435, wParam=0x0, lParam=0xa) returned 0x0 [0081.071] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x435, wParam=0x0, lParam=0xa) returned 0x0 [0081.137] SendMessageW (hWnd=0x203f6, Msg=0x446, wParam=0x0, lParam=0x496fff0) returned 0x1 [0081.137] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x446, wParam=0x0, lParam=0x496fff0) returned 0x1 [0082.109] DragAcceptFiles (hWnd=0x203f6, fAccept=0) [0082.110] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x7c, wParam=0xffffffec, lParam=0x1ce4f4) returned 0x0 [0082.110] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x7d, wParam=0xffffffec, lParam=0x1ce4f4) returned 0x1 [0082.110] SendMessageW (hWnd=0x203f6, Msg=0xc, wParam=0x0, lParam=0x2211230) returned 0x1 [0082.110] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0xc, wParam=0x0, lParam=0x2211230) returned 0x1 [0082.111] SendMessageW (hWnd=0x203f6, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0082.111] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0082.111] SendMessageW (hWnd=0x203f6, Msg=0x479, wParam=0x0, lParam=0x0) returned 0x82 [0082.111] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x479, wParam=0x0, lParam=0x0) returned 0x82 [0082.111] SendMessageW (hWnd=0x203f6, Msg=0xcd, wParam=0x0, lParam=0x0) returned 0x0 [0082.111] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0xcd, wParam=0x0, lParam=0x0) returned 0x0 [0082.111] SendMessageW (hWnd=0x203f6, Msg=0x4e1, wParam=0x0, lParam=0x0) returned 0x1 [0082.111] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x4e1, wParam=0x0, lParam=0x0) returned 0x1 [0082.112] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x5, wParam=0x0, lParam=0x3200c6) returned 0x0 [0082.112] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x3, wParam=0x0, lParam=0x2b002b) returned 0x0 [0082.112] GetClientRect (in: hWnd=0x203f6, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.112] GetWindowRect (in: hWnd=0x203f6, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.112] GetParent (hWnd=0x203f6) returned 0x40358 [0082.112] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce694, cPoints=0x2 | out: lpPoints=0x1ce694) returned -7077974 [0082.112] SendMessageW (hWnd=0x203f6, Msg=0x2210, wParam=0x3f60001, lParam=0x203f6) returned 0x0 [0082.112] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x2210, wParam=0x3f60001, lParam=0x203f6) returned 0x0 [0082.112] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0082.113] GetParent (hWnd=0x203f6) returned 0x40358 [0082.113] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.113] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0082.113] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r10_ad1", lpWindowName="+", dwStyle=0x5601000b, X=197, Y=108, nWidth=46, nHeight=42, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x203f2 [0082.114] SetWindowLongW (hWnd=0x203f2, nIndex=-4, dwNewLong=2004791104) returned 75828310 [0082.114] GetWindowLongW (hWnd=0x203f2, nIndex=-4) returned 2004791104 [0082.114] SetWindowLongW (hWnd=0x203f2, nIndex=-4, dwNewLong=75829590) returned 2004791104 [0082.115] GetWindowLongW (hWnd=0x203f2, nIndex=-4) returned 75829590 [0082.115] GetWindowLongW (hWnd=0x203f2, nIndex=-16) returned 1174470667 [0082.115] GetWindowLongW (hWnd=0x203f2, nIndex=-12) returned 0 [0082.115] SetWindowLongW (hWnd=0x203f2, nIndex=-12, dwNewLong=132082) returned 0 [0082.115] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f2, Msg=0x81, wParam=0x0, lParam=0x1ce958) returned 0x1 [0082.115] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f2, Msg=0x83, wParam=0x0, lParam=0x1ce944) returned 0x0 [0082.115] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f2, Msg=0x1, wParam=0x0, lParam=0x1ce958) returned 0x0 [0082.115] GetWindow (hWnd=0x203f2, uCmd=0x3) returned 0x203f6 [0082.115] GetClientRect (in: hWnd=0x203f2, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.115] GetWindowRect (in: hWnd=0x203f2, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.115] GetParent (hWnd=0x203f2) returned 0x40358 [0082.116] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce63c, cPoints=0x2 | out: lpPoints=0x1ce63c) returned -7077974 [0082.116] SetWindowTextW (hWnd=0x203f2, lpString="+") returned 1 [0082.116] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f2, Msg=0xc, wParam=0x0, lParam=0x2293ae0) returned 0x1 [0082.116] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f2, Msg=0x5, wParam=0x0, lParam=0x2a002e) returned 0x0 [0082.116] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f2, Msg=0x3, wParam=0x0, lParam=0x6c00c5) returned 0x0 [0082.116] GetClientRect (in: hWnd=0x203f2, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.116] GetWindowRect (in: hWnd=0x203f2, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.116] GetParent (hWnd=0x203f2) returned 0x40358 [0082.116] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce694, cPoints=0x2 | out: lpPoints=0x1ce694) returned -7077974 [0082.116] SendMessageW (hWnd=0x203f2, Msg=0x2210, wParam=0x3f20001, lParam=0x203f2) returned 0x0 [0082.116] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f2, Msg=0x2210, wParam=0x3f20001, lParam=0x203f2) returned 0x0 [0082.117] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0082.117] GetParent (hWnd=0x203f2) returned 0x40358 [0082.117] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.117] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0082.117] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r10_ad1", lpWindowName="-", dwStyle=0x5601000b, X=197, Y=156, nWidth=46, nHeight=42, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x203f0 [0082.118] SetWindowLongW (hWnd=0x203f0, nIndex=-4, dwNewLong=2004791104) returned 75828310 [0082.118] GetWindowLongW (hWnd=0x203f0, nIndex=-4) returned 2004791104 [0082.118] SetWindowLongW (hWnd=0x203f0, nIndex=-4, dwNewLong=75829630) returned 2004791104 [0082.118] GetWindowLongW (hWnd=0x203f0, nIndex=-4) returned 75829630 [0082.118] GetWindowLongW (hWnd=0x203f0, nIndex=-16) returned 1174470667 [0082.118] GetWindowLongW (hWnd=0x203f0, nIndex=-12) returned 0 [0082.118] SetWindowLongW (hWnd=0x203f0, nIndex=-12, dwNewLong=132080) returned 0 [0082.118] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f0, Msg=0x81, wParam=0x0, lParam=0x1ce958) returned 0x1 [0082.119] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f0, Msg=0x83, wParam=0x0, lParam=0x1ce944) returned 0x0 [0082.120] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f0, Msg=0x1, wParam=0x0, lParam=0x1ce958) returned 0x0 [0082.120] GetWindow (hWnd=0x203f0, uCmd=0x3) returned 0x203f2 [0082.120] GetClientRect (in: hWnd=0x203f0, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.120] GetWindowRect (in: hWnd=0x203f0, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.120] GetParent (hWnd=0x203f0) returned 0x40358 [0082.120] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce63c, cPoints=0x2 | out: lpPoints=0x1ce63c) returned -7077974 [0082.120] SetWindowTextW (hWnd=0x203f0, lpString="-") returned 1 [0082.120] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f0, Msg=0xc, wParam=0x0, lParam=0x2293dcc) returned 0x1 [0082.120] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f0, Msg=0x5, wParam=0x0, lParam=0x2a002e) returned 0x0 [0082.120] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f0, Msg=0x3, wParam=0x0, lParam=0x9c00c5) returned 0x0 [0082.120] GetClientRect (in: hWnd=0x203f0, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.120] GetWindowRect (in: hWnd=0x203f0, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.121] GetParent (hWnd=0x203f0) returned 0x40358 [0082.121] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce694, cPoints=0x2 | out: lpPoints=0x1ce694) returned -7077974 [0082.122] SendMessageW (hWnd=0x203f0, Msg=0x2210, wParam=0x3f00001, lParam=0x203f0) returned 0x0 [0082.122] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f0, Msg=0x2210, wParam=0x3f00001, lParam=0x203f0) returned 0x0 [0082.122] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0082.123] GetParent (hWnd=0x203f0) returned 0x40358 [0082.123] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.123] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0082.123] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r10_ad1", lpWindowName="x", dwStyle=0x5601000b, X=197, Y=204, nWidth=46, nHeight=42, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x203ee [0082.123] SetWindowLongW (hWnd=0x203ee, nIndex=-4, dwNewLong=2004791104) returned 75828310 [0082.123] GetWindowLongW (hWnd=0x203ee, nIndex=-4) returned 2004791104 [0082.124] SetWindowLongW (hWnd=0x203ee, nIndex=-4, dwNewLong=75829670) returned 2004791104 [0082.124] GetWindowLongW (hWnd=0x203ee, nIndex=-4) returned 75829670 [0082.124] GetWindowLongW (hWnd=0x203ee, nIndex=-16) returned 1174470667 [0082.124] GetWindowLongW (hWnd=0x203ee, nIndex=-12) returned 0 [0082.124] SetWindowLongW (hWnd=0x203ee, nIndex=-12, dwNewLong=132078) returned 0 [0082.124] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ee, Msg=0x81, wParam=0x0, lParam=0x1ce958) returned 0x1 [0082.124] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ee, Msg=0x83, wParam=0x0, lParam=0x1ce944) returned 0x0 [0082.125] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ee, Msg=0x1, wParam=0x0, lParam=0x1ce958) returned 0x0 [0082.125] GetWindow (hWnd=0x203ee, uCmd=0x3) returned 0x203f0 [0082.125] GetClientRect (in: hWnd=0x203ee, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.125] GetWindowRect (in: hWnd=0x203ee, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.125] GetParent (hWnd=0x203ee) returned 0x40358 [0082.125] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce63c, cPoints=0x2 | out: lpPoints=0x1ce63c) returned -7077974 [0082.125] SetWindowTextW (hWnd=0x203ee, lpString="x") returned 1 [0082.125] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ee, Msg=0xc, wParam=0x0, lParam=0x2293e44) returned 0x1 [0082.125] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ee, Msg=0x5, wParam=0x0, lParam=0x2a002e) returned 0x0 [0082.125] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ee, Msg=0x3, wParam=0x0, lParam=0xcc00c5) returned 0x0 [0082.126] GetClientRect (in: hWnd=0x203ee, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.126] GetWindowRect (in: hWnd=0x203ee, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.126] GetParent (hWnd=0x203ee) returned 0x40358 [0082.126] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce694, cPoints=0x2 | out: lpPoints=0x1ce694) returned -7077974 [0082.126] SendMessageW (hWnd=0x203ee, Msg=0x2210, wParam=0x3ee0001, lParam=0x203ee) returned 0x0 [0082.126] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ee, Msg=0x2210, wParam=0x3ee0001, lParam=0x203ee) returned 0x0 [0082.126] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ee, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0082.126] GetParent (hWnd=0x203ee) returned 0x40358 [0082.126] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.126] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0082.127] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r10_ad1", lpWindowName="/", dwStyle=0x5601000b, X=197, Y=252, nWidth=46, nHeight=42, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x203ec [0082.127] SetWindowLongW (hWnd=0x203ec, nIndex=-4, dwNewLong=2004791104) returned 75828310 [0082.127] GetWindowLongW (hWnd=0x203ec, nIndex=-4) returned 2004791104 [0082.127] SetWindowLongW (hWnd=0x203ec, nIndex=-4, dwNewLong=75829710) returned 2004791104 [0082.127] GetWindowLongW (hWnd=0x203ec, nIndex=-4) returned 75829710 [0082.127] GetWindowLongW (hWnd=0x203ec, nIndex=-16) returned 1174470667 [0082.127] GetWindowLongW (hWnd=0x203ec, nIndex=-12) returned 0 [0082.127] SetWindowLongW (hWnd=0x203ec, nIndex=-12, dwNewLong=132076) returned 0 [0082.127] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ec, Msg=0x81, wParam=0x0, lParam=0x1ce958) returned 0x1 [0082.128] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ec, Msg=0x83, wParam=0x0, lParam=0x1ce944) returned 0x0 [0082.128] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ec, Msg=0x1, wParam=0x0, lParam=0x1ce958) returned 0x0 [0082.128] GetWindow (hWnd=0x203ec, uCmd=0x3) returned 0x203ee [0082.128] GetClientRect (in: hWnd=0x203ec, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.128] GetWindowRect (in: hWnd=0x203ec, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.128] GetParent (hWnd=0x203ec) returned 0x40358 [0082.128] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce63c, cPoints=0x2 | out: lpPoints=0x1ce63c) returned -7077974 [0082.128] SetWindowTextW (hWnd=0x203ec, lpString="/") returned 1 [0082.128] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ec, Msg=0xc, wParam=0x0, lParam=0x2293ddc) returned 0x1 [0082.129] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ec, Msg=0x5, wParam=0x0, lParam=0x2a002e) returned 0x0 [0082.129] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ec, Msg=0x3, wParam=0x0, lParam=0xfc00c5) returned 0x0 [0082.129] GetClientRect (in: hWnd=0x203ec, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.129] GetWindowRect (in: hWnd=0x203ec, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.129] GetParent (hWnd=0x203ec) returned 0x40358 [0082.129] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce694, cPoints=0x2 | out: lpPoints=0x1ce694) returned -7077974 [0082.129] SendMessageW (hWnd=0x203ec, Msg=0x2210, wParam=0x3ec0001, lParam=0x203ec) returned 0x0 [0082.129] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ec, Msg=0x2210, wParam=0x3ec0001, lParam=0x203ec) returned 0x0 [0082.129] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ec, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0082.130] GetParent (hWnd=0x203ec) returned 0x40358 [0082.130] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.130] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0082.130] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r10_ad1", lpWindowName="=", dwStyle=0x5601000b, X=197, Y=300, nWidth=46, nHeight=42, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x203ea [0082.130] SetWindowLongW (hWnd=0x203ea, nIndex=-4, dwNewLong=2004791104) returned 75828310 [0082.130] GetWindowLongW (hWnd=0x203ea, nIndex=-4) returned 2004791104 [0082.132] SetWindowLongW (hWnd=0x203ea, nIndex=-4, dwNewLong=75826358) returned 2004791104 [0082.132] GetWindowLongW (hWnd=0x203ea, nIndex=-4) returned 75826358 [0082.132] GetWindowLongW (hWnd=0x203ea, nIndex=-16) returned 1174470667 [0082.132] GetWindowLongW (hWnd=0x203ea, nIndex=-12) returned 0 [0082.132] SetWindowLongW (hWnd=0x203ea, nIndex=-12, dwNewLong=132074) returned 0 [0082.132] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ea, Msg=0x81, wParam=0x0, lParam=0x1ce958) returned 0x1 [0082.133] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ea, Msg=0x83, wParam=0x0, lParam=0x1ce944) returned 0x0 [0082.133] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ea, Msg=0x1, wParam=0x0, lParam=0x1ce958) returned 0x0 [0082.133] GetWindow (hWnd=0x203ea, uCmd=0x3) returned 0x203ec [0082.133] GetClientRect (in: hWnd=0x203ea, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.133] GetWindowRect (in: hWnd=0x203ea, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.133] GetParent (hWnd=0x203ea) returned 0x40358 [0082.133] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce63c, cPoints=0x2 | out: lpPoints=0x1ce63c) returned -7077974 [0082.133] SetWindowTextW (hWnd=0x203ea, lpString="=") returned 1 [0082.133] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ea, Msg=0xc, wParam=0x0, lParam=0x2293e08) returned 0x1 [0082.133] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ea, Msg=0x5, wParam=0x0, lParam=0x2a002e) returned 0x0 [0082.134] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ea, Msg=0x3, wParam=0x0, lParam=0x12c00c5) returned 0x0 [0082.134] GetClientRect (in: hWnd=0x203ea, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.134] GetWindowRect (in: hWnd=0x203ea, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.134] GetParent (hWnd=0x203ea) returned 0x40358 [0082.134] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce694, cPoints=0x2 | out: lpPoints=0x1ce694) returned -7077974 [0082.134] SendMessageW (hWnd=0x203ea, Msg=0x2210, wParam=0x3ea0001, lParam=0x203ea) returned 0x0 [0082.134] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ea, Msg=0x2210, wParam=0x3ea0001, lParam=0x203ea) returned 0x0 [0082.134] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0082.134] GetParent (hWnd=0x203ea) returned 0x40358 [0082.134] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.135] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0082.135] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r10_ad1", lpWindowName="C", dwStyle=0x5601000b, X=145, Y=108, nWidth=46, nHeight=42, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x203e6 [0082.135] SetWindowLongW (hWnd=0x203e6, nIndex=-4, dwNewLong=2004791104) returned 75828310 [0082.135] GetWindowLongW (hWnd=0x203e6, nIndex=-4) returned 2004791104 [0082.135] SetWindowLongW (hWnd=0x203e6, nIndex=-4, dwNewLong=75842630) returned 2004791104 [0082.135] GetWindowLongW (hWnd=0x203e6, nIndex=-4) returned 75842630 [0082.135] GetWindowLongW (hWnd=0x203e6, nIndex=-16) returned 1174470667 [0082.135] GetWindowLongW (hWnd=0x203e6, nIndex=-12) returned 0 [0082.135] SetWindowLongW (hWnd=0x203e6, nIndex=-12, dwNewLong=132070) returned 0 [0082.135] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e6, Msg=0x81, wParam=0x0, lParam=0x1ce958) returned 0x1 [0082.136] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e6, Msg=0x83, wParam=0x0, lParam=0x1ce944) returned 0x0 [0082.136] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e6, Msg=0x1, wParam=0x0, lParam=0x1ce958) returned 0x0 [0082.136] GetWindow (hWnd=0x203e6, uCmd=0x3) returned 0x203ea [0082.136] GetClientRect (in: hWnd=0x203e6, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.136] GetWindowRect (in: hWnd=0x203e6, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.136] GetParent (hWnd=0x203e6) returned 0x40358 [0082.136] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce63c, cPoints=0x2 | out: lpPoints=0x1ce63c) returned -7077974 [0082.136] SetWindowTextW (hWnd=0x203e6, lpString="C") returned 1 [0082.136] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e6, Msg=0xc, wParam=0x0, lParam=0x2293e34) returned 0x1 [0082.137] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e6, Msg=0x5, wParam=0x0, lParam=0x2a002e) returned 0x0 [0082.138] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e6, Msg=0x3, wParam=0x0, lParam=0x6c0091) returned 0x0 [0082.138] GetClientRect (in: hWnd=0x203e6, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.138] GetWindowRect (in: hWnd=0x203e6, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.138] GetParent (hWnd=0x203e6) returned 0x40358 [0082.138] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce694, cPoints=0x2 | out: lpPoints=0x1ce694) returned -7077974 [0082.138] SendMessageW (hWnd=0x203e6, Msg=0x2210, wParam=0x3e60001, lParam=0x203e6) returned 0x0 [0082.138] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e6, Msg=0x2210, wParam=0x3e60001, lParam=0x203e6) returned 0x0 [0082.138] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0082.138] GetParent (hWnd=0x203e6) returned 0x40358 [0082.138] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.139] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0082.139] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r10_ad1", lpWindowName=".", dwStyle=0x5601000b, X=145, Y=300, nWidth=46, nHeight=42, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x203e8 [0082.139] SetWindowLongW (hWnd=0x203e8, nIndex=-4, dwNewLong=2004791104) returned 75828310 [0082.139] GetWindowLongW (hWnd=0x203e8, nIndex=-4) returned 2004791104 [0082.139] SetWindowLongW (hWnd=0x203e8, nIndex=-4, dwNewLong=75842110) returned 2004791104 [0082.139] GetWindowLongW (hWnd=0x203e8, nIndex=-4) returned 75842110 [0082.139] GetWindowLongW (hWnd=0x203e8, nIndex=-16) returned 1174470667 [0082.139] GetWindowLongW (hWnd=0x203e8, nIndex=-12) returned 0 [0082.139] SetWindowLongW (hWnd=0x203e8, nIndex=-12, dwNewLong=132072) returned 0 [0082.140] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e8, Msg=0x81, wParam=0x0, lParam=0x1ce958) returned 0x1 [0082.140] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e8, Msg=0x83, wParam=0x0, lParam=0x1ce944) returned 0x0 [0082.140] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e8, Msg=0x1, wParam=0x0, lParam=0x1ce958) returned 0x0 [0082.140] GetWindow (hWnd=0x203e8, uCmd=0x3) returned 0x203e6 [0082.140] GetClientRect (in: hWnd=0x203e8, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.140] GetWindowRect (in: hWnd=0x203e8, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.140] GetParent (hWnd=0x203e8) returned 0x40358 [0082.140] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce63c, cPoints=0x2 | out: lpPoints=0x1ce63c) returned -7077974 [0082.140] SetWindowTextW (hWnd=0x203e8, lpString=".") returned 1 [0082.140] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e8, Msg=0xc, wParam=0x0, lParam=0x2293b90) returned 0x1 [0082.141] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e8, Msg=0x5, wParam=0x0, lParam=0x2a002e) returned 0x0 [0082.141] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e8, Msg=0x3, wParam=0x0, lParam=0x12c0091) returned 0x0 [0082.141] GetClientRect (in: hWnd=0x203e8, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.141] GetWindowRect (in: hWnd=0x203e8, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.141] GetParent (hWnd=0x203e8) returned 0x40358 [0082.141] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce694, cPoints=0x2 | out: lpPoints=0x1ce694) returned -7077974 [0082.141] SendMessageW (hWnd=0x203e8, Msg=0x2210, wParam=0x3e80001, lParam=0x203e8) returned 0x0 [0082.141] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e8, Msg=0x2210, wParam=0x3e80001, lParam=0x203e8) returned 0x0 [0082.141] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0082.142] GetParent (hWnd=0x203e8) returned 0x40358 [0082.142] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.142] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0082.142] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r10_ad1", lpWindowName="0", dwStyle=0x5601000b, X=41, Y=300, nWidth=98, nHeight=42, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x203e4 [0082.143] SetWindowLongW (hWnd=0x203e4, nIndex=-4, dwNewLong=2004791104) returned 75828310 [0082.143] GetWindowLongW (hWnd=0x203e4, nIndex=-4) returned 2004791104 [0082.143] SetWindowLongW (hWnd=0x203e4, nIndex=-4, dwNewLong=75842710) returned 2004791104 [0082.143] GetWindowLongW (hWnd=0x203e4, nIndex=-4) returned 75842710 [0082.143] GetWindowLongW (hWnd=0x203e4, nIndex=-16) returned 1174470667 [0082.143] GetWindowLongW (hWnd=0x203e4, nIndex=-12) returned 0 [0082.143] SetWindowLongW (hWnd=0x203e4, nIndex=-12, dwNewLong=132068) returned 0 [0082.143] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e4, Msg=0x81, wParam=0x0, lParam=0x1ce958) returned 0x1 [0082.144] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e4, Msg=0x83, wParam=0x0, lParam=0x1ce944) returned 0x0 [0082.144] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e4, Msg=0x1, wParam=0x0, lParam=0x1ce958) returned 0x0 [0082.144] GetWindow (hWnd=0x203e4, uCmd=0x3) returned 0x203e8 [0082.144] GetClientRect (in: hWnd=0x203e4, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.144] GetWindowRect (in: hWnd=0x203e4, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.144] GetParent (hWnd=0x203e4) returned 0x40358 [0082.144] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce63c, cPoints=0x2 | out: lpPoints=0x1ce63c) returned -7077974 [0082.144] SetWindowTextW (hWnd=0x203e4, lpString="0") returned 1 [0082.144] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e4, Msg=0xc, wParam=0x0, lParam=0x2293c44) returned 0x1 [0082.146] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e4, Msg=0x5, wParam=0x0, lParam=0x2a0062) returned 0x0 [0082.146] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e4, Msg=0x3, wParam=0x0, lParam=0x12c0029) returned 0x0 [0082.146] GetClientRect (in: hWnd=0x203e4, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.146] GetWindowRect (in: hWnd=0x203e4, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.146] GetParent (hWnd=0x203e4) returned 0x40358 [0082.146] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce694, cPoints=0x2 | out: lpPoints=0x1ce694) returned -7077974 [0082.146] SendMessageW (hWnd=0x203e4, Msg=0x2210, wParam=0x3e40001, lParam=0x203e4) returned 0x0 [0082.146] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e4, Msg=0x2210, wParam=0x3e40001, lParam=0x203e4) returned 0x0 [0082.147] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0082.147] GetParent (hWnd=0x203e4) returned 0x40358 [0082.147] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.147] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0082.147] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r10_ad1", lpWindowName="9", dwStyle=0x5601000b, X=145, Y=252, nWidth=46, nHeight=42, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x203e2 [0082.147] SetWindowLongW (hWnd=0x203e2, nIndex=-4, dwNewLong=2004791104) returned 75828310 [0082.148] GetWindowLongW (hWnd=0x203e2, nIndex=-4) returned 2004791104 [0082.148] SetWindowLongW (hWnd=0x203e2, nIndex=-4, dwNewLong=75842030) returned 2004791104 [0082.148] GetWindowLongW (hWnd=0x203e2, nIndex=-4) returned 75842030 [0082.148] GetWindowLongW (hWnd=0x203e2, nIndex=-16) returned 1174470667 [0082.148] GetWindowLongW (hWnd=0x203e2, nIndex=-12) returned 0 [0082.148] SetWindowLongW (hWnd=0x203e2, nIndex=-12, dwNewLong=132066) returned 0 [0082.148] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e2, Msg=0x81, wParam=0x0, lParam=0x1ce958) returned 0x1 [0082.149] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e2, Msg=0x83, wParam=0x0, lParam=0x1ce944) returned 0x0 [0082.149] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e2, Msg=0x1, wParam=0x0, lParam=0x1ce958) returned 0x0 [0082.149] GetWindow (hWnd=0x203e2, uCmd=0x3) returned 0x203e4 [0082.149] GetClientRect (in: hWnd=0x203e2, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.149] GetWindowRect (in: hWnd=0x203e2, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.149] GetParent (hWnd=0x203e2) returned 0x40358 [0082.149] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce63c, cPoints=0x2 | out: lpPoints=0x1ce63c) returned -7077974 [0082.149] SetWindowTextW (hWnd=0x203e2, lpString="9") returned 1 [0082.149] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e2, Msg=0xc, wParam=0x0, lParam=0x2293bb0) returned 0x1 [0082.150] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e2, Msg=0x5, wParam=0x0, lParam=0x2a002e) returned 0x0 [0082.150] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e2, Msg=0x3, wParam=0x0, lParam=0xfc0091) returned 0x0 [0082.150] GetClientRect (in: hWnd=0x203e2, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.150] GetWindowRect (in: hWnd=0x203e2, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.150] GetParent (hWnd=0x203e2) returned 0x40358 [0082.150] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce694, cPoints=0x2 | out: lpPoints=0x1ce694) returned -7077974 [0082.150] SendMessageW (hWnd=0x203e2, Msg=0x2210, wParam=0x3e20001, lParam=0x203e2) returned 0x0 [0082.150] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e2, Msg=0x2210, wParam=0x3e20001, lParam=0x203e2) returned 0x0 [0082.150] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0082.150] GetParent (hWnd=0x203e2) returned 0x40358 [0082.150] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.151] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0082.151] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r10_ad1", lpWindowName="8", dwStyle=0x5601000b, X=93, Y=252, nWidth=46, nHeight=42, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x203e0 [0082.151] SetWindowLongW (hWnd=0x203e0, nIndex=-4, dwNewLong=2004791104) returned 75828310 [0082.151] GetWindowLongW (hWnd=0x203e0, nIndex=-4) returned 2004791104 [0082.151] SetWindowLongW (hWnd=0x203e0, nIndex=-4, dwNewLong=75841990) returned 2004791104 [0082.151] GetWindowLongW (hWnd=0x203e0, nIndex=-4) returned 75841990 [0082.151] GetWindowLongW (hWnd=0x203e0, nIndex=-16) returned 1174470667 [0082.151] GetWindowLongW (hWnd=0x203e0, nIndex=-12) returned 0 [0082.151] SetWindowLongW (hWnd=0x203e0, nIndex=-12, dwNewLong=132064) returned 0 [0082.152] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e0, Msg=0x81, wParam=0x0, lParam=0x1ce958) returned 0x1 [0082.152] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e0, Msg=0x83, wParam=0x0, lParam=0x1ce944) returned 0x0 [0082.152] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e0, Msg=0x1, wParam=0x0, lParam=0x1ce958) returned 0x0 [0082.152] GetWindow (hWnd=0x203e0, uCmd=0x3) returned 0x203e2 [0082.152] GetClientRect (in: hWnd=0x203e0, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.152] GetWindowRect (in: hWnd=0x203e0, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.152] GetParent (hWnd=0x203e0) returned 0x40358 [0082.152] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce63c, cPoints=0x2 | out: lpPoints=0x1ce63c) returned -7077974 [0082.152] SetWindowTextW (hWnd=0x203e0, lpString="8") returned 1 [0082.153] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e0, Msg=0xc, wParam=0x0, lParam=0x22939f8) returned 0x1 [0082.153] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e0, Msg=0x5, wParam=0x0, lParam=0x2a002e) returned 0x0 [0082.153] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e0, Msg=0x3, wParam=0x0, lParam=0xfc005d) returned 0x0 [0082.153] GetClientRect (in: hWnd=0x203e0, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.153] GetWindowRect (in: hWnd=0x203e0, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.153] GetParent (hWnd=0x203e0) returned 0x40358 [0082.153] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce694, cPoints=0x2 | out: lpPoints=0x1ce694) returned -7077974 [0082.153] SendMessageW (hWnd=0x203e0, Msg=0x2210, wParam=0x3e00001, lParam=0x203e0) returned 0x0 [0082.153] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e0, Msg=0x2210, wParam=0x3e00001, lParam=0x203e0) returned 0x0 [0082.153] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0082.154] GetParent (hWnd=0x203e0) returned 0x40358 [0082.154] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.154] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0082.154] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r10_ad1", lpWindowName="7", dwStyle=0x5601000b, X=41, Y=252, nWidth=46, nHeight=42, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x203dc [0082.155] SetWindowLongW (hWnd=0x203dc, nIndex=-4, dwNewLong=2004791104) returned 75828310 [0082.155] GetWindowLongW (hWnd=0x203dc, nIndex=-4) returned 2004791104 [0082.155] SetWindowLongW (hWnd=0x203dc, nIndex=-4, dwNewLong=75842590) returned 2004791104 [0082.155] GetWindowLongW (hWnd=0x203dc, nIndex=-4) returned 75842590 [0082.155] GetWindowLongW (hWnd=0x203dc, nIndex=-16) returned 1174470667 [0082.155] GetWindowLongW (hWnd=0x203dc, nIndex=-12) returned 0 [0082.155] SetWindowLongW (hWnd=0x203dc, nIndex=-12, dwNewLong=132060) returned 0 [0082.155] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203dc, Msg=0x81, wParam=0x0, lParam=0x1ce958) returned 0x1 [0082.156] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203dc, Msg=0x83, wParam=0x0, lParam=0x1ce944) returned 0x0 [0082.156] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203dc, Msg=0x1, wParam=0x0, lParam=0x1ce958) returned 0x0 [0082.156] GetWindow (hWnd=0x203dc, uCmd=0x3) returned 0x203e0 [0082.156] GetClientRect (in: hWnd=0x203dc, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.156] GetWindowRect (in: hWnd=0x203dc, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.156] GetParent (hWnd=0x203dc) returned 0x40358 [0082.156] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce63c, cPoints=0x2 | out: lpPoints=0x1ce63c) returned -7077974 [0082.156] SetWindowTextW (hWnd=0x203dc, lpString="7") returned 1 [0082.156] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203dc, Msg=0xc, wParam=0x0, lParam=0x2293c34) returned 0x1 [0082.157] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203dc, Msg=0x5, wParam=0x0, lParam=0x2a002e) returned 0x0 [0082.157] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203dc, Msg=0x3, wParam=0x0, lParam=0xfc0029) returned 0x0 [0082.157] GetClientRect (in: hWnd=0x203dc, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.157] GetWindowRect (in: hWnd=0x203dc, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.157] GetParent (hWnd=0x203dc) returned 0x40358 [0082.157] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce694, cPoints=0x2 | out: lpPoints=0x1ce694) returned -7077974 [0082.157] SendMessageW (hWnd=0x203dc, Msg=0x2210, wParam=0x3dc0001, lParam=0x203dc) returned 0x0 [0082.157] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203dc, Msg=0x2210, wParam=0x3dc0001, lParam=0x203dc) returned 0x0 [0082.157] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203dc, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0082.157] GetParent (hWnd=0x203dc) returned 0x40358 [0082.157] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.158] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0082.158] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r10_ad1", lpWindowName="6", dwStyle=0x5601000b, X=145, Y=204, nWidth=46, nHeight=42, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x203de [0082.158] SetWindowLongW (hWnd=0x203de, nIndex=-4, dwNewLong=2004791104) returned 75828310 [0082.158] GetWindowLongW (hWnd=0x203de, nIndex=-4) returned 2004791104 [0082.158] SetWindowLongW (hWnd=0x203de, nIndex=-4, dwNewLong=75842470) returned 2004791104 [0082.158] GetWindowLongW (hWnd=0x203de, nIndex=-4) returned 75842470 [0082.158] GetWindowLongW (hWnd=0x203de, nIndex=-16) returned 1174470667 [0082.159] GetWindowLongW (hWnd=0x203de, nIndex=-12) returned 0 [0082.159] SetWindowLongW (hWnd=0x203de, nIndex=-12, dwNewLong=132062) returned 0 [0082.159] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203de, Msg=0x81, wParam=0x0, lParam=0x1ce958) returned 0x1 [0082.159] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203de, Msg=0x83, wParam=0x0, lParam=0x1ce944) returned 0x0 [0082.159] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203de, Msg=0x1, wParam=0x0, lParam=0x1ce958) returned 0x0 [0082.159] GetWindow (hWnd=0x203de, uCmd=0x3) returned 0x203dc [0082.159] GetClientRect (in: hWnd=0x203de, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.159] GetWindowRect (in: hWnd=0x203de, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.159] GetParent (hWnd=0x203de) returned 0x40358 [0082.159] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce63c, cPoints=0x2 | out: lpPoints=0x1ce63c) returned -7077974 [0082.159] SetWindowTextW (hWnd=0x203de, lpString="6") returned 1 [0082.160] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203de, Msg=0xc, wParam=0x0, lParam=0x2293e54) returned 0x1 [0082.160] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203de, Msg=0x5, wParam=0x0, lParam=0x2a002e) returned 0x0 [0082.160] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203de, Msg=0x3, wParam=0x0, lParam=0xcc0091) returned 0x0 [0082.160] GetClientRect (in: hWnd=0x203de, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.160] GetWindowRect (in: hWnd=0x203de, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.160] GetParent (hWnd=0x203de) returned 0x40358 [0082.160] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce694, cPoints=0x2 | out: lpPoints=0x1ce694) returned -7077974 [0082.160] SendMessageW (hWnd=0x203de, Msg=0x2210, wParam=0x3de0001, lParam=0x203de) returned 0x0 [0082.160] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203de, Msg=0x2210, wParam=0x3de0001, lParam=0x203de) returned 0x0 [0082.160] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203de, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0082.161] GetParent (hWnd=0x203de) returned 0x40358 [0082.161] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.161] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0082.161] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r10_ad1", lpWindowName="5", dwStyle=0x5601000b, X=93, Y=204, nWidth=46, nHeight=42, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x203da [0082.161] SetWindowLongW (hWnd=0x203da, nIndex=-4, dwNewLong=2004791104) returned 75828310 [0082.162] GetWindowLongW (hWnd=0x203da, nIndex=-4) returned 2004791104 [0082.162] SetWindowLongW (hWnd=0x203da, nIndex=-4, dwNewLong=75841910) returned 2004791104 [0082.162] GetWindowLongW (hWnd=0x203da, nIndex=-4) returned 75841910 [0082.162] GetWindowLongW (hWnd=0x203da, nIndex=-16) returned 1174470667 [0082.162] GetWindowLongW (hWnd=0x203da, nIndex=-12) returned 0 [0082.162] SetWindowLongW (hWnd=0x203da, nIndex=-12, dwNewLong=132058) returned 0 [0082.162] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203da, Msg=0x81, wParam=0x0, lParam=0x1ce958) returned 0x1 [0082.163] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203da, Msg=0x83, wParam=0x0, lParam=0x1ce944) returned 0x0 [0082.163] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203da, Msg=0x1, wParam=0x0, lParam=0x1ce958) returned 0x0 [0082.163] GetWindow (hWnd=0x203da, uCmd=0x3) returned 0x203de [0082.163] GetClientRect (in: hWnd=0x203da, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.163] GetWindowRect (in: hWnd=0x203da, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.163] GetParent (hWnd=0x203da) returned 0x40358 [0082.163] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce63c, cPoints=0x2 | out: lpPoints=0x1ce63c) returned -7077974 [0082.163] SetWindowTextW (hWnd=0x203da, lpString="5") returned 1 [0082.163] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203da, Msg=0xc, wParam=0x0, lParam=0x2293f30) returned 0x1 [0082.163] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203da, Msg=0x5, wParam=0x0, lParam=0x2a002e) returned 0x0 [0082.164] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203da, Msg=0x3, wParam=0x0, lParam=0xcc005d) returned 0x0 [0082.164] GetClientRect (in: hWnd=0x203da, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.164] GetWindowRect (in: hWnd=0x203da, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.164] GetParent (hWnd=0x203da) returned 0x40358 [0082.164] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce694, cPoints=0x2 | out: lpPoints=0x1ce694) returned -7077974 [0082.164] SendMessageW (hWnd=0x203da, Msg=0x2210, wParam=0x3da0001, lParam=0x203da) returned 0x0 [0082.164] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203da, Msg=0x2210, wParam=0x3da0001, lParam=0x203da) returned 0x0 [0082.164] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203da, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0082.164] GetParent (hWnd=0x203da) returned 0x40358 [0082.164] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.165] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0082.165] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r10_ad1", lpWindowName="4", dwStyle=0x5601000b, X=41, Y=204, nWidth=46, nHeight=42, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x203d8 [0082.165] SetWindowLongW (hWnd=0x203d8, nIndex=-4, dwNewLong=2004791104) returned 75828310 [0082.165] GetWindowLongW (hWnd=0x203d8, nIndex=-4) returned 2004791104 [0082.165] SetWindowLongW (hWnd=0x203d8, nIndex=-4, dwNewLong=75842190) returned 2004791104 [0082.165] GetWindowLongW (hWnd=0x203d8, nIndex=-4) returned 75842190 [0082.165] GetWindowLongW (hWnd=0x203d8, nIndex=-16) returned 1174470667 [0082.165] GetWindowLongW (hWnd=0x203d8, nIndex=-12) returned 0 [0082.165] SetWindowLongW (hWnd=0x203d8, nIndex=-12, dwNewLong=132056) returned 0 [0082.165] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d8, Msg=0x81, wParam=0x0, lParam=0x1ce958) returned 0x1 [0082.166] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d8, Msg=0x83, wParam=0x0, lParam=0x1ce944) returned 0x0 [0082.166] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d8, Msg=0x1, wParam=0x0, lParam=0x1ce958) returned 0x0 [0082.166] GetWindow (hWnd=0x203d8, uCmd=0x3) returned 0x203da [0082.166] GetClientRect (in: hWnd=0x203d8, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.166] GetWindowRect (in: hWnd=0x203d8, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.166] GetParent (hWnd=0x203d8) returned 0x40358 [0082.166] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce63c, cPoints=0x2 | out: lpPoints=0x1ce63c) returned -7077974 [0082.166] SetWindowTextW (hWnd=0x203d8, lpString="4") returned 1 [0082.166] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d8, Msg=0xc, wParam=0x0, lParam=0x2293dbc) returned 0x1 [0082.167] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d8, Msg=0x5, wParam=0x0, lParam=0x2a002e) returned 0x0 [0082.167] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d8, Msg=0x3, wParam=0x0, lParam=0xcc0029) returned 0x0 [0082.167] GetClientRect (in: hWnd=0x203d8, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.167] GetWindowRect (in: hWnd=0x203d8, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.167] GetParent (hWnd=0x203d8) returned 0x40358 [0082.167] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce694, cPoints=0x2 | out: lpPoints=0x1ce694) returned -7077974 [0082.167] SendMessageW (hWnd=0x203d8, Msg=0x2210, wParam=0x3d80001, lParam=0x203d8) returned 0x0 [0082.167] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d8, Msg=0x2210, wParam=0x3d80001, lParam=0x203d8) returned 0x0 [0082.167] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0082.167] GetParent (hWnd=0x203d8) returned 0x40358 [0082.168] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.168] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0082.168] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r10_ad1", lpWindowName="3", dwStyle=0x5601000b, X=145, Y=156, nWidth=46, nHeight=42, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x103fe [0082.168] SetWindowLongW (hWnd=0x103fe, nIndex=-4, dwNewLong=2004791104) returned 75828310 [0082.168] GetWindowLongW (hWnd=0x103fe, nIndex=-4) returned 2004791104 [0082.168] SetWindowLongW (hWnd=0x103fe, nIndex=-4, dwNewLong=75841870) returned 2004791104 [0082.169] GetWindowLongW (hWnd=0x103fe, nIndex=-4) returned 75841870 [0082.169] GetWindowLongW (hWnd=0x103fe, nIndex=-16) returned 1174470667 [0082.169] GetWindowLongW (hWnd=0x103fe, nIndex=-12) returned 0 [0082.169] SetWindowLongW (hWnd=0x103fe, nIndex=-12, dwNewLong=66558) returned 0 [0082.169] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x103fe, Msg=0x81, wParam=0x0, lParam=0x1ce958) returned 0x1 [0082.169] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x103fe, Msg=0x83, wParam=0x0, lParam=0x1ce944) returned 0x0 [0082.169] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x103fe, Msg=0x1, wParam=0x0, lParam=0x1ce958) returned 0x0 [0082.169] GetWindow (hWnd=0x103fe, uCmd=0x3) returned 0x203d8 [0082.169] GetClientRect (in: hWnd=0x103fe, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.169] GetWindowRect (in: hWnd=0x103fe, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.169] GetParent (hWnd=0x103fe) returned 0x40358 [0082.169] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce63c, cPoints=0x2 | out: lpPoints=0x1ce63c) returned -7077974 [0082.170] SetWindowTextW (hWnd=0x103fe, lpString="3") returned 1 [0082.170] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x103fe, Msg=0xc, wParam=0x0, lParam=0x2293a58) returned 0x1 [0082.170] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x103fe, Msg=0x5, wParam=0x0, lParam=0x2a002e) returned 0x0 [0082.170] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x103fe, Msg=0x3, wParam=0x0, lParam=0x9c0091) returned 0x0 [0082.170] GetClientRect (in: hWnd=0x103fe, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.170] GetWindowRect (in: hWnd=0x103fe, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.170] GetParent (hWnd=0x103fe) returned 0x40358 [0082.170] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce694, cPoints=0x2 | out: lpPoints=0x1ce694) returned -7077974 [0082.170] SendMessageW (hWnd=0x103fe, Msg=0x2210, wParam=0x3fe0001, lParam=0x103fe) returned 0x0 [0082.170] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x103fe, Msg=0x2210, wParam=0x3fe0001, lParam=0x103fe) returned 0x0 [0082.170] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x103fe, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0082.171] GetParent (hWnd=0x103fe) returned 0x40358 [0082.171] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.171] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0082.171] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r10_ad1", lpWindowName="2", dwStyle=0x5601000b, X=93, Y=156, nWidth=46, nHeight=42, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x10400 [0082.173] SetWindowLongW (hWnd=0x10400, nIndex=-4, dwNewLong=2004791104) returned 75828310 [0082.173] GetWindowLongW (hWnd=0x10400, nIndex=-4) returned 2004791104 [0082.173] SetWindowLongW (hWnd=0x10400, nIndex=-4, dwNewLong=75842670) returned 2004791104 [0082.173] GetWindowLongW (hWnd=0x10400, nIndex=-4) returned 75842670 [0082.173] GetWindowLongW (hWnd=0x10400, nIndex=-16) returned 1174470667 [0082.173] GetWindowLongW (hWnd=0x10400, nIndex=-12) returned 0 [0082.173] SetWindowLongW (hWnd=0x10400, nIndex=-12, dwNewLong=66560) returned 0 [0082.174] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10400, Msg=0x81, wParam=0x0, lParam=0x1ce958) returned 0x1 [0082.174] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10400, Msg=0x83, wParam=0x0, lParam=0x1ce944) returned 0x0 [0082.174] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10400, Msg=0x1, wParam=0x0, lParam=0x1ce958) returned 0x0 [0082.174] GetWindow (hWnd=0x10400, uCmd=0x3) returned 0x103fe [0082.174] GetClientRect (in: hWnd=0x10400, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.174] GetWindowRect (in: hWnd=0x10400, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.174] GetParent (hWnd=0x10400) returned 0x40358 [0082.174] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce63c, cPoints=0x2 | out: lpPoints=0x1ce63c) returned -7077974 [0082.174] SetWindowTextW (hWnd=0x10400, lpString="2") returned 1 [0082.174] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10400, Msg=0xc, wParam=0x0, lParam=0x2293ba0) returned 0x1 [0082.175] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10400, Msg=0x5, wParam=0x0, lParam=0x2a002e) returned 0x0 [0082.175] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10400, Msg=0x3, wParam=0x0, lParam=0x9c005d) returned 0x0 [0082.175] GetClientRect (in: hWnd=0x10400, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.175] GetWindowRect (in: hWnd=0x10400, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.175] GetParent (hWnd=0x10400) returned 0x40358 [0082.175] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce694, cPoints=0x2 | out: lpPoints=0x1ce694) returned -7077974 [0082.175] SendMessageW (hWnd=0x10400, Msg=0x2210, wParam=0x4000001, lParam=0x10400) returned 0x0 [0082.175] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10400, Msg=0x2210, wParam=0x4000001, lParam=0x10400) returned 0x0 [0082.175] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10400, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0082.176] GetParent (hWnd=0x10400) returned 0x40358 [0082.176] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.176] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0082.176] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r10_ad1", lpWindowName="1", dwStyle=0x5601000b, X=41, Y=156, nWidth=46, nHeight=42, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x10402 [0082.177] SetWindowLongW (hWnd=0x10402, nIndex=-4, dwNewLong=2004791104) returned 75828310 [0082.177] GetWindowLongW (hWnd=0x10402, nIndex=-4) returned 2004791104 [0082.177] SetWindowLongW (hWnd=0x10402, nIndex=-4, dwNewLong=75841950) returned 2004791104 [0082.177] GetWindowLongW (hWnd=0x10402, nIndex=-4) returned 75841950 [0082.177] GetWindowLongW (hWnd=0x10402, nIndex=-16) returned 1174470667 [0082.177] GetWindowLongW (hWnd=0x10402, nIndex=-12) returned 0 [0082.177] SetWindowLongW (hWnd=0x10402, nIndex=-12, dwNewLong=66562) returned 0 [0082.178] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x81, wParam=0x0, lParam=0x1ce958) returned 0x1 [0082.178] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x83, wParam=0x0, lParam=0x1ce944) returned 0x0 [0082.178] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x1, wParam=0x0, lParam=0x1ce958) returned 0x0 [0082.178] GetWindow (hWnd=0x10402, uCmd=0x3) returned 0x10400 [0082.178] GetClientRect (in: hWnd=0x10402, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.178] GetWindowRect (in: hWnd=0x10402, lpRect=0x1ce63c | out: lpRect=0x1ce63c) returned 1 [0082.178] GetParent (hWnd=0x10402) returned 0x40358 [0082.178] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce63c, cPoints=0x2 | out: lpPoints=0x1ce63c) returned -7077974 [0082.179] SetWindowTextW (hWnd=0x10402, lpString="1") returned 1 [0082.179] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0xc, wParam=0x0, lParam=0x2293a28) returned 0x1 [0082.179] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x5, wParam=0x0, lParam=0x2a002e) returned 0x0 [0082.179] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x3, wParam=0x0, lParam=0x9c0029) returned 0x0 [0082.179] GetClientRect (in: hWnd=0x10402, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.179] GetWindowRect (in: hWnd=0x10402, lpRect=0x1ce694 | out: lpRect=0x1ce694) returned 1 [0082.179] GetParent (hWnd=0x10402) returned 0x40358 [0082.179] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce694, cPoints=0x2 | out: lpPoints=0x1ce694) returned -7077974 [0082.179] SendMessageW (hWnd=0x10402, Msg=0x2210, wParam=0x4020001, lParam=0x10402) returned 0x0 [0082.179] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x2210, wParam=0x4020001, lParam=0x10402) returned 0x0 [0082.179] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0082.180] GetParent (hWnd=0x10402) returned 0x40358 [0082.180] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.180] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0082.180] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.1ca0192_r10_ad1", lpWindowName="MenuStrip1", dwStyle=0x56000000, X=0, Y=0, nWidth=287, nHeight=24, hWndParent=0x40358, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x10404 [0082.180] SetWindowLongW (hWnd=0x10404, nIndex=-4, dwNewLong=1950418912) returned 75826918 [0082.181] GetWindowLongW (hWnd=0x10404, nIndex=-4) returned 1950418912 [0082.181] SetWindowLongW (hWnd=0x10404, nIndex=-4, dwNewLong=75842150) returned 1950418912 [0082.181] GetWindowLongW (hWnd=0x10404, nIndex=-4) returned 75842150 [0082.181] GetWindowLongW (hWnd=0x10404, nIndex=-16) returned 1174405120 [0082.181] GetWindowLongW (hWnd=0x10404, nIndex=-12) returned 0 [0082.181] SetWindowLongW (hWnd=0x10404, nIndex=-12, dwNewLong=66564) returned 0 [0082.181] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0x81, wParam=0x0, lParam=0x1ce958) returned 0x1 [0082.181] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0x83, wParam=0x0, lParam=0x1ce944) returned 0x0 [0082.182] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0x1, wParam=0x0, lParam=0x1ce958) returned 0x0 [0082.182] GetWindow (hWnd=0x10404, uCmd=0x3) returned 0x10402 [0082.182] GetClientRect (in: hWnd=0x10404, lpRect=0x1ce5fc | out: lpRect=0x1ce5fc) returned 1 [0082.182] GetWindowRect (in: hWnd=0x10404, lpRect=0x1ce5fc | out: lpRect=0x1ce5fc) returned 1 [0082.182] GetParent (hWnd=0x10404) returned 0x40358 [0082.182] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce5fc, cPoints=0x2 | out: lpPoints=0x1ce5fc) returned -7077974 [0082.182] SetWindowTextW (hWnd=0x10404, lpString="MenuStrip1") returned 1 [0082.182] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0xc, wParam=0x0, lParam=0x2293a68) returned 0x1 [0082.182] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0x5, wParam=0x0, lParam=0x18011f) returned 0x0 [0082.182] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0082.183] GetClientRect (in: hWnd=0x10404, lpRect=0x1ce654 | out: lpRect=0x1ce654) returned 1 [0082.183] GetWindowRect (in: hWnd=0x10404, lpRect=0x1ce654 | out: lpRect=0x1ce654) returned 1 [0082.183] GetParent (hWnd=0x10404) returned 0x40358 [0082.183] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40358, lpPoints=0x1ce654, cPoints=0x2 | out: lpPoints=0x1ce654) returned -7077974 [0082.183] SendMessageW (hWnd=0x10404, Msg=0x2210, wParam=0x4040001, lParam=0x10404) returned 0x0 [0082.183] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0x2210, wParam=0x4040001, lParam=0x10404) returned 0x0 [0082.183] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0082.183] GetParent (hWnd=0x10404) returned 0x40358 [0082.184] GetWindowTextLengthW (hWnd=0x40358) returned 0 [0082.184] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0082.184] GetSystemMetrics (nIndex=42) returned 0 [0082.184] GetWindowTextW (in: hWnd=0x40358, lpString=0x1ceeec, nMaxCount=1 | out: lpString="") returned 0 [0082.184] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xd, wParam=0x1, lParam=0x1ceeec) returned 0x0 [0082.196] GetModuleHandleW (lpModuleName=0x0) returned 0x30000 [0082.196] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.0.app.0.1ca0192_r10_ad1", lpWindowName="TimerNativeWindow", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x30000, lpParam=0x0) returned 0x10406 [0082.196] SetWindowLongW (hWnd=0x10406, nIndex=-4, dwNewLong=1950418912) returned 75828230 [0082.196] GetWindowLongW (hWnd=0x10406, nIndex=-4) returned 1950418912 [0082.197] SetWindowLongW (hWnd=0x10406, nIndex=-4, dwNewLong=75842430) returned 1950418912 [0082.197] GetWindowLongW (hWnd=0x10406, nIndex=-4) returned 75842430 [0082.197] GetWindowLongW (hWnd=0x10406, nIndex=-16) returned 79691776 [0082.197] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10406, Msg=0x24, wParam=0x0, lParam=0x1ce944) returned 0x0 [0082.197] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10406, Msg=0x81, wParam=0x0, lParam=0x1ce938) returned 0x1 [0082.197] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10406, Msg=0x83, wParam=0x0, lParam=0x1ce924) returned 0x0 [0082.198] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10406, Msg=0x1, wParam=0x0, lParam=0x1ce938) returned 0x0 [0082.199] SetTimer (hWnd=0x10406, nIDEvent=0x1, uElapse=0x64, lpTimerFunc=0x0) returned 0x1 [0082.268] GetEnvironmentVariableW (in: lpName="Temp", lpBuffer=0x1cedc0, nSize=0x80 | out: lpBuffer="") returned 0x24 [0082.277] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe", nBufferLength=0x105, lpBuffer=0x1ce968, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe", lpFilePart=0x0) returned 0x32 [0082.287] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe", nBufferLength=0x105, lpBuffer=0x1ce968, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe", lpFilePart=0x0) returned 0x32 [0082.288] GetEnvironmentVariableW (in: lpName="Temp", lpBuffer=0x1cedc0, nSize=0x80 | out: lpBuffer="") returned 0x24 [0082.288] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe", nBufferLength=0x105, lpBuffer=0x1ce99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe", lpFilePart=0x0) returned 0x32 [0082.288] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x1ce988, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0082.289] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\Rnts.exe", nBufferLength=0x105, lpBuffer=0x1ce99c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\Rnts.exe", lpFilePart=0x0) returned 0x31 [0082.289] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\runit.exe"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\Rnts.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\rnts.exe"), bFailIfExists=0) returned 1 [0082.384] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1ceeb4 | out: phkResult=0x1ceeb4*=0x408) returned 0x0 [0082.384] GetEnvironmentVariableW (in: lpName="Temp", lpBuffer=0x1cedbc, nSize=0x80 | out: lpBuffer="") returned 0x24 [0082.389] RegQueryValueExW (in: hKey=0x408, lpValueName="Rnts.exe", lpReserved=0x0, lpType=0x1ceee4, lpData=0x0, lpcbData=0x1ceee0*=0x0 | out: lpType=0x1ceee4*=0x0, lpData=0x0, lpcbData=0x1ceee0*=0x0) returned 0x2 [0082.389] RegSetValueExW (in: hKey=0x408, lpValueName="Rnts.exe", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\Rnts.exe", cbData=0x5c | out: lpData="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\Rnts.exe") returned 0x0 [0082.390] InvalidateRect (hWnd=0x203d6, lpRect=0x0, bErase=0) returned 1 [0082.390] InvalidateRect (hWnd=0x203f8, lpRect=0x0, bErase=0) returned 1 [0082.390] InvalidateRect (hWnd=0x203f6, lpRect=0x0, bErase=1) returned 1 [0082.390] InvalidateRect (hWnd=0x203f2, lpRect=0x0, bErase=0) returned 1 [0082.390] InvalidateRect (hWnd=0x203f0, lpRect=0x0, bErase=0) returned 1 [0082.390] InvalidateRect (hWnd=0x203ee, lpRect=0x0, bErase=0) returned 1 [0082.390] InvalidateRect (hWnd=0x203ec, lpRect=0x0, bErase=0) returned 1 [0082.390] InvalidateRect (hWnd=0x203ea, lpRect=0x0, bErase=0) returned 1 [0082.390] InvalidateRect (hWnd=0x203e6, lpRect=0x0, bErase=0) returned 1 [0082.391] InvalidateRect (hWnd=0x203e8, lpRect=0x0, bErase=0) returned 1 [0082.391] InvalidateRect (hWnd=0x203e4, lpRect=0x0, bErase=0) returned 1 [0082.391] InvalidateRect (hWnd=0x203e2, lpRect=0x0, bErase=0) returned 1 [0082.391] InvalidateRect (hWnd=0x203e0, lpRect=0x0, bErase=0) returned 1 [0082.391] InvalidateRect (hWnd=0x203dc, lpRect=0x0, bErase=0) returned 1 [0082.391] InvalidateRect (hWnd=0x203de, lpRect=0x0, bErase=0) returned 1 [0082.391] InvalidateRect (hWnd=0x203da, lpRect=0x0, bErase=0) returned 1 [0082.391] InvalidateRect (hWnd=0x203d8, lpRect=0x0, bErase=0) returned 1 [0082.391] InvalidateRect (hWnd=0x103fe, lpRect=0x0, bErase=0) returned 1 [0082.391] InvalidateRect (hWnd=0x10400, lpRect=0x0, bErase=0) returned 1 [0082.391] InvalidateRect (hWnd=0x10402, lpRect=0x0, bErase=0) returned 1 [0082.391] InvalidateRect (hWnd=0x10404, lpRect=0x0, bErase=1) returned 1 [0082.392] GetWindowThreadProcessId (in: hWnd=0x40358, lpdwProcessId=0x1cef4c | out: lpdwProcessId=0x1cef4c) returned 0xd88 [0082.392] GetCurrentThreadId () returned 0xd88 [0082.392] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc215 [0082.392] PostMessageW (hWnd=0x40358, Msg=0xc215, wParam=0x0, lParam=0x0) returned 1 [0082.393] GetWindowTextLengthW (hWnd=0x40358) returned 0 [0082.393] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0082.393] GetSystemMetrics (nIndex=42) returned 0 [0082.393] GetWindowTextW (in: hWnd=0x40358, lpString=0x1ceed4, nMaxCount=1 | out: lpString="") returned 0 [0082.393] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xd, wParam=0x1, lParam=0x1ceed4) returned 0x0 [0082.393] GetWindowTextLengthW (hWnd=0x10404) returned 10 [0082.393] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0082.393] GetSystemMetrics (nIndex=42) returned 0 [0082.393] GetWindowTextW (in: hWnd=0x10404, lpString=0x1cec50, nMaxCount=11 | out: lpString="MenuStrip1") returned 10 [0082.393] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0xd, wParam=0xb, lParam=0x1cec50) returned 0xa [0082.393] GetWindowTextLengthW (hWnd=0x10404) returned 10 [0082.393] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0082.393] GetSystemMetrics (nIndex=42) returned 0 [0082.393] GetWindowTextW (in: hWnd=0x10404, lpString=0x1cee84, nMaxCount=11 | out: lpString="MenuStrip1") returned 10 [0082.393] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0xd, wParam=0xb, lParam=0x1cee84) returned 0xa [0082.393] InvalidateRect (hWnd=0x10404, lpRect=0x0, bErase=1) returned 1 [0082.394] GetWindowTextLengthW (hWnd=0x40358) returned 0 [0082.394] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0082.394] GetSystemMetrics (nIndex=42) returned 0 [0082.394] GetWindowTextW (in: hWnd=0x40358, lpString=0x1cee4c, nMaxCount=1 | out: lpString="") returned 0 [0082.394] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xd, wParam=0x1, lParam=0x1cee4c) returned 0x0 [0082.394] GetWindowTextLengthW (hWnd=0x10404) returned 10 [0082.394] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0082.394] GetSystemMetrics (nIndex=42) returned 0 [0082.394] GetWindowTextW (in: hWnd=0x10404, lpString=0x1cebc8, nMaxCount=11 | out: lpString="MenuStrip1") returned 10 [0082.394] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0xd, wParam=0xb, lParam=0x1cebc8) returned 0xa [0082.394] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x46, wParam=0x0, lParam=0x1cf31c) returned 0x0 [0082.414] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x46, wParam=0x0, lParam=0x1cf31c) returned 0x0 [0082.414] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x8001e, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0082.414] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0082.414] NtdllDefWindowProc_W (hWnd=0x60272, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0082.414] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0082.415] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0082.416] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0082.416] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0082.429] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xd, wParam=0x104, lParam=0x47062a0) returned 0x0 [0082.430] OleInitialize (pvReserved=0x0) returned 0x1 [0082.451] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x1cf0a0 | out: lplpMessageFilter=0x1cf0a0*=0x0) returned 0x0 [0082.460] InvalidateRect (hWnd=0x10402, lpRect=0x0, bErase=0) returned 1 [0082.460] GetFocus () returned 0x0 [0082.463] GetFocus () returned 0x0 [0082.464] SetFocus (hWnd=0x10402) returned 0x0 [0082.479] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0082.482] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0082.483] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0082.483] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0082.483] GetParent (hWnd=0x40358) returned 0x0 [0082.483] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0082.483] GetStockObject (i=5) returned 0x1900015 [0082.485] GetDlgItem (hDlg=0x40358, nIDDlgItem=66562) returned 0x10402 [0082.485] SendMessageW (hWnd=0x10402, Msg=0x202b, wParam=0x10402, lParam=0x1cea14) returned 0x0 [0082.485] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x202b, wParam=0x10402, lParam=0x1cea14) returned 0x0 [0082.485] InvalidateRect (hWnd=0x10402, lpRect=0x0, bErase=0) returned 1 [0082.485] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.487] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0082.487] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0082.488] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0082.489] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xd, wParam=0x104, lParam=0x47062a0) returned 0x0 [0082.490] GetWindowPlacement (in: hWnd=0x40358, lpwndpl=0x1cf0a8 | out: lpwndpl=0x1cf0a8) returned 1 [0082.490] GetClientRect (in: hWnd=0x40358, lpRect=0x1cf054 | out: lpRect=0x1cf054) returned 1 [0082.490] GetWindowTextLengthW (hWnd=0x40358) returned 0 [0082.490] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0082.490] GetSystemMetrics (nIndex=42) returned 0 [0082.490] GetWindowTextW (in: hWnd=0x40358, lpString=0x1cef28, nMaxCount=1 | out: lpString="") returned 0 [0082.490] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xd, wParam=0x1, lParam=0x1cef28) returned 0x0 [0082.490] GetClientRect (in: hWnd=0x40358, lpRect=0x1cef5c | out: lpRect=0x1cef5c) returned 1 [0082.492] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x48542b6, dwData=0x0) returned 1 [0082.492] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x1cebbc | out: lpmi=0x1cebbc) returned 1 [0082.492] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x860108b5 [0082.493] GetDeviceCaps (hdc=0x860108b5, index=12) returned 32 [0082.493] GetDeviceCaps (hdc=0x860108b5, index=14) returned 1 [0082.493] DeleteDC (hdc=0x860108b5) returned 1 [0082.493] GetCurrentObject (hdc=0x1b0107ae, type=0x1) returned 0x1b00017 [0082.493] GetCurrentObject (hdc=0x1b0107ae, type=0x2) returned 0x1900010 [0082.493] GetCurrentObject (hdc=0x1b0107ae, type=0x7) returned 0x8005019e [0082.493] GetCurrentObject (hdc=0x1b0107ae, type=0x6) returned 0x18a0048 [0082.493] SaveDC (hdc=0x1b0107ae) returned 1 [0082.493] GetNearestColor (hdc=0x1b0107ae, color=0xf0f0f0) returned 0xf0f0f0 [0082.494] CreateSolidBrush (color=0xf0f0f0) returned 0x311009da [0082.494] FillRect (hDC=0x1b0107ae, lprc=0x1cedfc, hbr=0x311009da) returned 1 [0082.495] DeleteObject (ho=0x311009da) returned 1 [0082.495] RestoreDC (hdc=0x1b0107ae, nSavedDC=-1) returned 1 [0082.495] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.495] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d6, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.496] GetStockObject (i=5) returned 0x1900015 [0082.496] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.496] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f8, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0082.496] GetStockObject (i=5) returned 0x1900015 [0082.496] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.496] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0082.497] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.497] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f2, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.497] GetStockObject (i=5) returned 0x1900015 [0082.497] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.497] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f0, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0082.497] GetStockObject (i=5) returned 0x1900015 [0082.497] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ee, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.498] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ee, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0082.498] GetStockObject (i=5) returned 0x1900015 [0082.498] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ec, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.498] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ec, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.498] GetStockObject (i=5) returned 0x1900015 [0082.498] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.499] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ea, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0082.499] GetStockObject (i=5) returned 0x1900015 [0082.499] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.499] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e6, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0082.499] GetStockObject (i=5) returned 0x1900015 [0082.499] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.499] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e8, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.499] GetStockObject (i=5) returned 0x1900015 [0082.500] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.500] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e4, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0082.500] GetStockObject (i=5) returned 0x1900015 [0082.500] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.500] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e2, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0082.500] GetStockObject (i=5) returned 0x1900015 [0082.500] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.501] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e0, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.501] GetStockObject (i=5) returned 0x1900015 [0082.501] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203dc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.501] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203dc, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0082.501] GetStockObject (i=5) returned 0x1900015 [0082.501] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203de, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.502] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203de, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0082.502] GetStockObject (i=5) returned 0x1900015 [0082.502] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203da, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.502] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203da, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.502] GetStockObject (i=5) returned 0x1900015 [0082.502] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.502] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d8, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0082.502] GetStockObject (i=5) returned 0x1900015 [0082.503] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x103fe, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.503] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x103fe, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0082.503] GetStockObject (i=5) returned 0x1900015 [0082.503] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10400, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.503] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10400, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.503] GetStockObject (i=5) returned 0x1900015 [0082.504] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.504] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0082.504] GetStockObject (i=5) returned 0x1900015 [0082.504] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.504] GetWindowPlacement (in: hWnd=0x40358, lpwndpl=0x1cf08c | out: lpwndpl=0x1cf08c) returned 1 [0082.648] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x47, wParam=0x0, lParam=0x1cf31c) returned 0x0 [0082.648] GetClientRect (in: hWnd=0x40358, lpRect=0x1cf03c | out: lpRect=0x1cf03c) returned 1 [0082.648] GetWindowRect (in: hWnd=0x40358, lpRect=0x1cf03c | out: lpRect=0x1cf03c) returned 1 [0082.652] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0082.652] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0082.652] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0082.653] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x5, wParam=0x0, lParam=0x173011f) returned 0x0 [0082.653] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x3, wParam=0x0, lParam=0x6d0056) returned 0x0 [0082.653] GetClientRect (in: hWnd=0x40358, lpRect=0x1cf06c | out: lpRect=0x1cf06c) returned 1 [0082.653] GetWindowRect (in: hWnd=0x40358, lpRect=0x1cf06c | out: lpRect=0x1cf06c) returned 1 [0082.654] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0082.654] IsWindowUnicode (hWnd=0x40358) returned 1 [0082.655] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0082.656] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0082.656] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0082.656] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x46, wParam=0x0, lParam=0x1cf1ac) returned 0x0 [0082.656] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x83, wParam=0x1, lParam=0x1cf184) returned 0x0 [0082.658] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.659] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0082.659] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0082.660] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0082.660] GetWindowPlacement (in: hWnd=0x40358, lpwndpl=0x1cef38 | out: lpwndpl=0x1cef38) returned 1 [0082.660] GetClientRect (in: hWnd=0x40358, lpRect=0x1ceee4 | out: lpRect=0x1ceee4) returned 1 [0082.660] GetWindowTextLengthW (hWnd=0x40358) returned 0 [0082.660] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0082.660] GetSystemMetrics (nIndex=42) returned 0 [0082.660] GetWindowTextW (in: hWnd=0x40358, lpString=0x1cedb8, nMaxCount=1 | out: lpString="") returned 0 [0082.660] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xd, wParam=0x1, lParam=0x1cedb8) returned 0x0 [0082.661] GetClientRect (in: hWnd=0x40358, lpRect=0x1cedec | out: lpRect=0x1cedec) returned 1 [0082.661] GetCurrentObject (hdc=0xc0100ae, type=0x1) returned 0x1b00017 [0082.661] GetCurrentObject (hdc=0xc0100ae, type=0x2) returned 0x1900010 [0082.661] GetCurrentObject (hdc=0xc0100ae, type=0x7) returned 0x8005019e [0082.661] GetCurrentObject (hdc=0xc0100ae, type=0x6) returned 0x18a0048 [0082.661] SaveDC (hdc=0xc0100ae) returned 1 [0082.661] GetNearestColor (hdc=0xc0100ae, color=0xf0f0f0) returned 0xf0f0f0 [0082.661] CreateSolidBrush (color=0xf0f0f0) returned 0x321009da [0082.661] FillRect (hDC=0xc0100ae, lprc=0x1cec8c, hbr=0x321009da) returned 1 [0082.668] DeleteObject (ho=0x321009da) returned 1 [0082.669] RestoreDC (hdc=0xc0100ae, nSavedDC=-1) returned 1 [0082.669] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.669] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d6, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0082.669] GetStockObject (i=5) returned 0x1900015 [0082.669] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.669] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f8, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.670] GetStockObject (i=5) returned 0x1900015 [0082.670] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.670] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0082.671] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.671] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f2, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0082.671] GetStockObject (i=5) returned 0x1900015 [0082.671] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.671] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f0, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.671] GetStockObject (i=5) returned 0x1900015 [0082.671] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ee, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.672] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ee, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0082.672] GetStockObject (i=5) returned 0x1900015 [0082.672] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ec, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.672] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ec, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0082.672] GetStockObject (i=5) returned 0x1900015 [0082.672] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.672] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ea, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.673] GetStockObject (i=5) returned 0x1900015 [0082.676] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.676] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e6, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0082.676] GetStockObject (i=5) returned 0x1900015 [0082.676] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.681] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e8, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0082.681] GetStockObject (i=5) returned 0x1900015 [0082.681] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.681] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e4, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.681] GetStockObject (i=5) returned 0x1900015 [0082.682] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.682] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e2, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0082.682] GetStockObject (i=5) returned 0x1900015 [0082.682] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.682] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e0, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0082.682] GetStockObject (i=5) returned 0x1900015 [0082.682] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203dc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.683] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203dc, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.683] GetStockObject (i=5) returned 0x1900015 [0082.683] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203de, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.683] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203de, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0082.683] GetStockObject (i=5) returned 0x1900015 [0082.683] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203da, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.684] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203da, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0082.684] GetStockObject (i=5) returned 0x1900015 [0082.684] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.684] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d8, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.684] GetStockObject (i=5) returned 0x1900015 [0082.684] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x103fe, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.684] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x103fe, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0082.685] GetStockObject (i=5) returned 0x1900015 [0082.685] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10400, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.685] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10400, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0082.685] GetStockObject (i=5) returned 0x1900015 [0082.685] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.686] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.686] GetStockObject (i=5) returned 0x1900015 [0082.686] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.686] GetWindowPlacement (in: hWnd=0x40358, lpwndpl=0x1cef1c | out: lpwndpl=0x1cef1c) returned 1 [0082.686] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x47, wParam=0x0, lParam=0x1cf1ac) returned 0x0 [0082.686] GetClientRect (in: hWnd=0x40358, lpRect=0x1ceecc | out: lpRect=0x1ceecc) returned 1 [0082.686] GetWindowRect (in: hWnd=0x40358, lpRect=0x1ceecc | out: lpRect=0x1ceecc) returned 1 [0082.688] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0082.688] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0082.688] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0082.689] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x83, wParam=0x1, lParam=0x1cecfc) returned 0x0 [0082.691] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.695] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0082.697] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0082.697] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0082.698] GetWindowPlacement (in: hWnd=0x40358, lpwndpl=0x1ceab0 | out: lpwndpl=0x1ceab0) returned 1 [0082.698] GetClientRect (in: hWnd=0x40358, lpRect=0x1cea5c | out: lpRect=0x1cea5c) returned 1 [0082.698] GetWindowTextLengthW (hWnd=0x40358) returned 0 [0082.698] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0082.698] GetSystemMetrics (nIndex=42) returned 0 [0082.698] GetWindowTextW (in: hWnd=0x40358, lpString=0x1ce930, nMaxCount=1 | out: lpString="") returned 0 [0082.698] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xd, wParam=0x1, lParam=0x1ce930) returned 0x0 [0082.698] GetClientRect (in: hWnd=0x40358, lpRect=0x1ce964 | out: lpRect=0x1ce964) returned 1 [0082.698] GetCurrentObject (hdc=0x220106d6, type=0x1) returned 0x1b00017 [0082.698] GetCurrentObject (hdc=0x220106d6, type=0x2) returned 0x1900010 [0082.698] GetCurrentObject (hdc=0x220106d6, type=0x7) returned 0x8005019e [0082.698] GetCurrentObject (hdc=0x220106d6, type=0x6) returned 0x18a0048 [0082.698] SaveDC (hdc=0x220106d6) returned 1 [0082.698] GetNearestColor (hdc=0x220106d6, color=0xf0f0f0) returned 0xf0f0f0 [0082.698] CreateSolidBrush (color=0xf0f0f0) returned 0x331009da [0082.698] FillRect (hDC=0x220106d6, lprc=0x1ce804, hbr=0x331009da) returned 1 [0082.746] DeleteObject (ho=0x331009da) returned 1 [0082.746] RestoreDC (hdc=0x220106d6, nSavedDC=-1) returned 1 [0082.755] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.755] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d6, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0082.755] GetStockObject (i=5) returned 0x1900015 [0082.755] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.755] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f8, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.755] GetStockObject (i=5) returned 0x1900015 [0082.756] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.759] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0082.774] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.775] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f2, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0082.786] GetStockObject (i=5) returned 0x1900015 [0082.787] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.789] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f0, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.789] GetStockObject (i=5) returned 0x1900015 [0082.789] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ee, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.790] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ee, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0082.790] GetStockObject (i=5) returned 0x1900015 [0082.790] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ec, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.790] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ec, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0082.790] GetStockObject (i=5) returned 0x1900015 [0082.790] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.791] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ea, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.791] GetStockObject (i=5) returned 0x1900015 [0082.791] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.791] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e6, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0082.791] GetStockObject (i=5) returned 0x1900015 [0082.791] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.792] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e8, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0082.792] GetStockObject (i=5) returned 0x1900015 [0082.792] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.792] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e4, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.792] GetStockObject (i=5) returned 0x1900015 [0082.792] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.792] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e2, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0082.793] GetStockObject (i=5) returned 0x1900015 [0082.793] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.793] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e0, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0082.793] GetStockObject (i=5) returned 0x1900015 [0082.793] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203dc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.794] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203dc, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.794] GetStockObject (i=5) returned 0x1900015 [0082.794] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203de, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.794] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203de, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0082.794] GetStockObject (i=5) returned 0x1900015 [0082.794] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203da, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.794] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203da, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0082.795] GetStockObject (i=5) returned 0x1900015 [0082.795] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.795] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d8, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.795] GetStockObject (i=5) returned 0x1900015 [0082.795] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x103fe, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.795] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x103fe, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0082.796] GetStockObject (i=5) returned 0x1900015 [0082.796] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10400, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.796] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10400, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0082.796] GetStockObject (i=5) returned 0x1900015 [0082.796] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.796] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0082.797] GetStockObject (i=5) returned 0x1900015 [0082.797] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.798] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0082.798] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0082.800] IsWindowUnicode (hWnd=0x8001e) returned 1 [0082.800] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0082.800] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0082.800] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0082.800] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x8001e, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0082.800] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0082.800] IsWindowUnicode (hWnd=0x40358) returned 1 [0082.800] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0082.800] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0082.800] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0082.801] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0082.801] IsWindowUnicode (hWnd=0x40358) returned 1 [0082.801] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0082.801] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0082.802] DispatchMessageW (lpMsg=0x1cf40c) [0082.802] BeginPaint (in: hWnd=0x40358, lpPaint=0x1ceecc | out: lpPaint=0x1ceecc) returned 0x1b0107ae [0082.803] GdipCreateHalftonePalette () returned 0xffffffffc90809e4 [0082.803] SelectPalette (hdc=0x1b0107ae, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0082.803] GetWindowTextLengthW (hWnd=0x40358) returned 0 [0082.803] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0082.803] GetSystemMetrics (nIndex=42) returned 0 [0082.803] GetWindowTextW (hWnd=0x40358, lpString=0x1cee70, nMaxCount=1) [0082.803] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xd, wParam=0x1, lParam=0x1cee70) returned 0x0 [0082.804] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0082.804] EndPaint (hWnd=0x40358, lpPaint=0x1ceec8) returned 1 [0082.804] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0082.804] IsWindowUnicode (hWnd=0x203d6) returned 1 [0082.804] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0082.804] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0082.804] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0082.805] BeginPaint (in: hWnd=0x203d6, lpPaint=0x1ceea4 | out: lpPaint=0x1ceea4) returned 0x220106d6 [0082.805] SelectPalette (hdc=0x220106d6, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0082.805] CreateCompatibleDC (hdc=0x220106d6) returned 0x3b01098e [0082.806] GetObjectType (h=0x220106d6) returned 0x3 [0082.806] CreateCompatibleBitmap (hdc=0x220106d6, cx=1, cy=1) returned 0xffffffffe70508b5 [0082.806] GetDIBits (in: hdc=0x220106d6, hbm=0xe70508b5, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x1ce994, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1ce994) returned 1 [0082.806] GetDIBits (in: hdc=0x220106d6, hbm=0xe70508b5, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x1ce994, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1ce994) returned 1 [0082.807] DeleteObject (ho=0xe70508b5) returned 1 [0082.807] CreateDIBSection (in: hdc=0x220106d6, lpbmi=0x1ce9e4, usage=0x0, ppvBits=0x1ceed8, hSection=0x0, offset=0x0 | out: ppvBits=0x1ceed8) returned 0x340509df [0082.807] SelectObject (hdc=0x3b01098e, h=0x340509df) returned 0x185000f [0082.807] GdipCreateFromHDC (hdc=0x3b01098e, graphics=0x1ceebc) returned 0x0 [0082.824] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0082.866] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=46, height=42, combineMode=0x0) returned 0x0 [0082.866] GdipCreateMatrix (matrix=0x1cef04) returned 0x0 [0082.866] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0082.867] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cef1c) returned 0x0 [0082.867] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0082.867] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0082.868] LocalFree (hMem=0x691830) returned 0x0 [0082.868] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0082.868] GdipCreateRegion (region=0x1cef04) returned 0x0 [0082.868] GdipGetClip (graphics=0x5bff610, region=0x5bfb098) returned 0x0 [0082.868] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cef10) returned 0x0 [0082.870] GdipSaveGraphics (graphics=0x5bff610, state=0x1cef3c) returned 0x0 [0082.870] GdipRestoreGraphics (graphics=0x5bff610, state=0xfdb10dbd) returned 0x0 [0082.871] GdipDeleteRegion (region=0x5bfb098) returned 0x0 [0082.872] SystemParametersInfoW (in: uiAction=0x42, uiParam=0xc, pvParam=0x1cedbc, fWinIni=0x0 | out: pvParam=0x1cedbc) returned 1 [0082.872] GdipGetDC (graphics=0x5bff610, hdc=0x1ced24) returned 0x0 [0082.872] GetCurrentObject (hdc=0x3b01098e, type=0x1) returned 0x1b00017 [0082.872] GetCurrentObject (hdc=0x3b01098e, type=0x2) returned 0x1900010 [0082.872] GetCurrentObject (hdc=0x3b01098e, type=0x7) returned 0x340509df [0082.873] GetCurrentObject (hdc=0x3b01098e, type=0x6) returned 0x18a0048 [0082.873] SaveDC (hdc=0x3b01098e) returned 1 [0082.873] GetNearestColor (hdc=0x3b01098e, color=0xf0f0f0) returned 0xf0f0f0 [0082.873] GetNearestColor (hdc=0x3b01098e, color=0xa0a0a0) returned 0xa0a0a0 [0082.873] GetNearestColor (hdc=0x3b01098e, color=0x696969) returned 0x696969 [0082.873] GetNearestColor (hdc=0x3b01098e, color=0xa0a0a0) returned 0xa0a0a0 [0082.873] GetNearestColor (hdc=0x3b01098e, color=0x0) returned 0x0 [0082.873] GetNearestColor (hdc=0x3b01098e, color=0xffffff) returned 0xffffff [0082.873] GetNearestColor (hdc=0x3b01098e, color=0xe5e5e5) returned 0xe5e5e5 [0082.873] GetNearestColor (hdc=0x3b01098e, color=0xd7d7d7) returned 0xd7d7d7 [0082.873] GetNearestColor (hdc=0x3b01098e, color=0x0) returned 0x0 [0082.873] RestoreDC (hdc=0x3b01098e, nSavedDC=-1) returned 1 [0082.873] GdipReleaseDC (graphics=0x5bff610, hdc=0x3b01098e) returned 0x0 [0082.874] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0082.874] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0082.875] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22caa00) returned 0x0 [0082.886] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0082.887] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0082.890] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x1ced90, fWinIni=0x0 | out: pvParam=0x1ced90) returned 1 [0082.890] SendMessageW (hWnd=0x40358, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0082.890] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0082.890] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.890] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.890] GetStockObject (i=5) returned 0x1900015 [0082.890] GetStockObject (i=5) returned 0x1900015 [0082.890] GetDlgItem (hDlg=0x40358, nIDDlgItem=132054) returned 0x203d6 [0082.890] SendMessageW (hWnd=0x203d6, Msg=0x202b, wParam=0x203d6, lParam=0x1cdd74) returned 0x0 [0082.890] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d6, Msg=0x202b, wParam=0x203d6, lParam=0x1cdd74) returned 0x0 [0082.891] RedrawWindow (hWnd=0x203d6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.891] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.891] GetStockObject (i=5) returned 0x1900015 [0082.891] GetStockObject (i=5) returned 0x1900015 [0082.891] GetDlgItem (hDlg=0x40358, nIDDlgItem=132088) returned 0x203f8 [0082.891] SendMessageW (hWnd=0x203f8, Msg=0x202b, wParam=0x203f8, lParam=0x1cdd74) returned 0x0 [0082.891] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f8, Msg=0x202b, wParam=0x203f8, lParam=0x1cdd74) returned 0x0 [0082.891] RedrawWindow (hWnd=0x203f8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.892] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.892] RedrawWindow (hWnd=0x203f6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.892] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.892] GetStockObject (i=5) returned 0x1900015 [0082.892] GetStockObject (i=5) returned 0x1900015 [0082.892] GetDlgItem (hDlg=0x40358, nIDDlgItem=132082) returned 0x203f2 [0082.892] SendMessageW (hWnd=0x203f2, Msg=0x202b, wParam=0x203f2, lParam=0x1cdd74) returned 0x0 [0082.892] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f2, Msg=0x202b, wParam=0x203f2, lParam=0x1cdd74) returned 0x0 [0082.892] RedrawWindow (hWnd=0x203f2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.893] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f0, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.893] GetStockObject (i=5) returned 0x1900015 [0082.893] GetStockObject (i=5) returned 0x1900015 [0082.893] GetDlgItem (hDlg=0x40358, nIDDlgItem=132080) returned 0x203f0 [0082.893] SendMessageW (hWnd=0x203f0, Msg=0x202b, wParam=0x203f0, lParam=0x1cdd74) returned 0x0 [0082.893] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f0, Msg=0x202b, wParam=0x203f0, lParam=0x1cdd74) returned 0x0 [0082.893] RedrawWindow (hWnd=0x203f0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.893] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ee, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.894] GetStockObject (i=5) returned 0x1900015 [0082.894] GetStockObject (i=5) returned 0x1900015 [0082.894] GetDlgItem (hDlg=0x40358, nIDDlgItem=132078) returned 0x203ee [0082.894] SendMessageW (hWnd=0x203ee, Msg=0x202b, wParam=0x203ee, lParam=0x1cdd74) returned 0x0 [0082.894] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ee, Msg=0x202b, wParam=0x203ee, lParam=0x1cdd74) returned 0x0 [0082.894] RedrawWindow (hWnd=0x203ee, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.894] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ec, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.894] GetStockObject (i=5) returned 0x1900015 [0082.895] GetStockObject (i=5) returned 0x1900015 [0082.895] GetDlgItem (hDlg=0x40358, nIDDlgItem=132076) returned 0x203ec [0082.895] SendMessageW (hWnd=0x203ec, Msg=0x202b, wParam=0x203ec, lParam=0x1cdd74) returned 0x0 [0082.895] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ec, Msg=0x202b, wParam=0x203ec, lParam=0x1cdd74) returned 0x0 [0082.895] RedrawWindow (hWnd=0x203ec, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.895] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ea, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.895] GetStockObject (i=5) returned 0x1900015 [0082.896] GetStockObject (i=5) returned 0x1900015 [0082.896] GetDlgItem (hDlg=0x40358, nIDDlgItem=132074) returned 0x203ea [0082.896] SendMessageW (hWnd=0x203ea, Msg=0x202b, wParam=0x203ea, lParam=0x1cdd74) returned 0x0 [0082.896] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ea, Msg=0x202b, wParam=0x203ea, lParam=0x1cdd74) returned 0x0 [0082.896] RedrawWindow (hWnd=0x203ea, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.896] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.896] GetStockObject (i=5) returned 0x1900015 [0082.896] GetStockObject (i=5) returned 0x1900015 [0082.896] GetDlgItem (hDlg=0x40358, nIDDlgItem=132070) returned 0x203e6 [0082.896] SendMessageW (hWnd=0x203e6, Msg=0x202b, wParam=0x203e6, lParam=0x1cdd74) returned 0x0 [0082.896] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e6, Msg=0x202b, wParam=0x203e6, lParam=0x1cdd74) returned 0x0 [0082.897] RedrawWindow (hWnd=0x203e6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.897] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.897] GetStockObject (i=5) returned 0x1900015 [0082.897] GetStockObject (i=5) returned 0x1900015 [0082.897] GetDlgItem (hDlg=0x40358, nIDDlgItem=132072) returned 0x203e8 [0082.897] SendMessageW (hWnd=0x203e8, Msg=0x202b, wParam=0x203e8, lParam=0x1cdd74) returned 0x0 [0082.897] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e8, Msg=0x202b, wParam=0x203e8, lParam=0x1cdd74) returned 0x0 [0082.897] RedrawWindow (hWnd=0x203e8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.898] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e4, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.898] GetStockObject (i=5) returned 0x1900015 [0082.898] GetStockObject (i=5) returned 0x1900015 [0082.898] GetDlgItem (hDlg=0x40358, nIDDlgItem=132068) returned 0x203e4 [0082.898] SendMessageW (hWnd=0x203e4, Msg=0x202b, wParam=0x203e4, lParam=0x1cdd74) returned 0x0 [0082.898] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e4, Msg=0x202b, wParam=0x203e4, lParam=0x1cdd74) returned 0x0 [0082.898] RedrawWindow (hWnd=0x203e4, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.898] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.899] GetStockObject (i=5) returned 0x1900015 [0082.899] GetStockObject (i=5) returned 0x1900015 [0082.899] GetDlgItem (hDlg=0x40358, nIDDlgItem=132066) returned 0x203e2 [0082.899] SendMessageW (hWnd=0x203e2, Msg=0x202b, wParam=0x203e2, lParam=0x1cdd74) returned 0x0 [0082.899] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e2, Msg=0x202b, wParam=0x203e2, lParam=0x1cdd74) returned 0x0 [0082.899] RedrawWindow (hWnd=0x203e2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.899] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e0, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.899] GetStockObject (i=5) returned 0x1900015 [0082.899] GetStockObject (i=5) returned 0x1900015 [0082.900] GetDlgItem (hDlg=0x40358, nIDDlgItem=132064) returned 0x203e0 [0082.900] SendMessageW (hWnd=0x203e0, Msg=0x202b, wParam=0x203e0, lParam=0x1cdd74) returned 0x0 [0082.900] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e0, Msg=0x202b, wParam=0x203e0, lParam=0x1cdd74) returned 0x0 [0082.900] RedrawWindow (hWnd=0x203e0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.900] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203dc, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.900] GetStockObject (i=5) returned 0x1900015 [0082.900] GetStockObject (i=5) returned 0x1900015 [0082.900] GetDlgItem (hDlg=0x40358, nIDDlgItem=132060) returned 0x203dc [0082.900] SendMessageW (hWnd=0x203dc, Msg=0x202b, wParam=0x203dc, lParam=0x1cdd74) returned 0x0 [0082.900] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203dc, Msg=0x202b, wParam=0x203dc, lParam=0x1cdd74) returned 0x0 [0082.900] RedrawWindow (hWnd=0x203dc, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.901] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203de, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.901] GetStockObject (i=5) returned 0x1900015 [0082.901] GetStockObject (i=5) returned 0x1900015 [0082.901] GetDlgItem (hDlg=0x40358, nIDDlgItem=132062) returned 0x203de [0082.901] SendMessageW (hWnd=0x203de, Msg=0x202b, wParam=0x203de, lParam=0x1cdd74) returned 0x0 [0082.901] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203de, Msg=0x202b, wParam=0x203de, lParam=0x1cdd74) returned 0x0 [0082.901] RedrawWindow (hWnd=0x203de, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.901] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203da, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.902] GetStockObject (i=5) returned 0x1900015 [0082.902] GetStockObject (i=5) returned 0x1900015 [0082.902] GetDlgItem (hDlg=0x40358, nIDDlgItem=132058) returned 0x203da [0082.902] SendMessageW (hWnd=0x203da, Msg=0x202b, wParam=0x203da, lParam=0x1cdd74) returned 0x0 [0082.902] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203da, Msg=0x202b, wParam=0x203da, lParam=0x1cdd74) returned 0x0 [0082.902] RedrawWindow (hWnd=0x203da, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.902] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.902] GetStockObject (i=5) returned 0x1900015 [0082.903] GetStockObject (i=5) returned 0x1900015 [0082.903] GetDlgItem (hDlg=0x40358, nIDDlgItem=132056) returned 0x203d8 [0082.903] SendMessageW (hWnd=0x203d8, Msg=0x202b, wParam=0x203d8, lParam=0x1cdd74) returned 0x0 [0082.903] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d8, Msg=0x202b, wParam=0x203d8, lParam=0x1cdd74) returned 0x0 [0082.903] RedrawWindow (hWnd=0x203d8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.903] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x103fe, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.903] GetStockObject (i=5) returned 0x1900015 [0082.903] GetStockObject (i=5) returned 0x1900015 [0082.904] GetDlgItem (hDlg=0x40358, nIDDlgItem=66558) returned 0x103fe [0082.904] SendMessageW (hWnd=0x103fe, Msg=0x202b, wParam=0x103fe, lParam=0x1cdd74) returned 0x0 [0082.904] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x103fe, Msg=0x202b, wParam=0x103fe, lParam=0x1cdd74) returned 0x0 [0082.904] RedrawWindow (hWnd=0x103fe, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.904] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10400, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.904] GetStockObject (i=5) returned 0x1900015 [0082.904] GetStockObject (i=5) returned 0x1900015 [0082.904] GetDlgItem (hDlg=0x40358, nIDDlgItem=66560) returned 0x10400 [0082.904] SendMessageW (hWnd=0x10400, Msg=0x202b, wParam=0x10400, lParam=0x1cdd74) returned 0x0 [0082.904] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10400, Msg=0x202b, wParam=0x10400, lParam=0x1cdd74) returned 0x0 [0082.904] RedrawWindow (hWnd=0x10400, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.905] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.905] GetStockObject (i=5) returned 0x1900015 [0082.905] GetStockObject (i=5) returned 0x1900015 [0082.905] GetDlgItem (hDlg=0x40358, nIDDlgItem=66562) returned 0x10402 [0082.905] SendMessageW (hWnd=0x10402, Msg=0x202b, wParam=0x10402, lParam=0x1cdd74) returned 0x0 [0082.905] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x202b, wParam=0x10402, lParam=0x1cdd74) returned 0x0 [0082.905] RedrawWindow (hWnd=0x10402, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.905] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0082.905] RedrawWindow (hWnd=0x10404, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.906] RedrawWindow (hWnd=0x40358, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.906] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0082.906] GdipGetStringFormatFlags (format=0x5bfb098, flags=0x1cedbc) returned 0x0 [0082.906] GdipGetStringFormatTrimming (format=0x5bfb098, trimming=0x1cedbc) returned 0x0 [0082.907] GdipGetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=0x1cedbc) returned 0x0 [0082.907] GdipGetStringFormatAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0082.907] GdipGetStringFormatLineAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0082.907] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0082.908] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0082.908] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0082.908] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1cec44) returned 0x0 [0082.908] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22cadf4) returned 0x0 [0082.909] GdipSetStringFormatFlags (format=0x5c01030, flags=0) returned 0x0 [0082.909] GdipSetStringFormatTrimming (format=0x5c01030, trimming=0x1) returned 0x0 [0082.909] GdipSetStringFormatHotkeyPrefix (format=0x5c01030, hotkeyPrefix=2) returned 0x0 [0082.909] GdipSetStringFormatAlign (format=0x5c01030, align=0x1) returned 0x0 [0082.909] GdipSetStringFormatLineAlign (format=0x5c01030, align=0x1) returned 0x0 [0082.909] GdipMeasureString (graphics=0x5c00d50, string="←", length=1, font=0x5bfab90, layoutRect=0x1cec24, stringFormat=0x5c01030, boundingBox=0x1cec14, codepointsFitted=0x1cec10, linesFilled=0x1cec0c) returned 0x0 [0082.910] GdipDeleteStringFormat (format=0x5c01030) returned 0x0 [0082.910] GdipDeleteGraphics (graphics=0x5c00d50) returned 0x0 [0082.910] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0082.910] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0082.955] GdipCreateRegion (region=0x1cec90) returned 0x0 [0082.955] GdipGetClip (graphics=0x5bff610, region=0x5bfb098) returned 0x0 [0082.955] GdipCreateMatrix (matrix=0x1cec90) returned 0x0 [0082.955] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0082.956] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1ceca8) returned 0x0 [0082.956] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0082.956] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0082.956] LocalFree (hMem=0x691830) returned 0x0 [0082.956] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0082.956] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0082.956] LocalFree (hMem=0x691830) returned 0x0 [0082.956] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0082.956] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cecd0) returned 0x0 [0082.956] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cecc0) returned 0x0 [0082.957] GdipGetRegionHRgn (region=0x5bfb098, graphics=0x5bff610, hRgn=0x1cecc0) returned 0x0 [0082.982] GdipDeleteRegion (region=0x5bfb098) returned 0x0 [0082.982] GdipGetDC (graphics=0x5bff610, hdc=0x1cecd8) returned 0x0 [0082.982] GetCurrentObject (hdc=0x3b01098e, type=0x1) returned 0x1b00017 [0082.982] GetCurrentObject (hdc=0x3b01098e, type=0x2) returned 0x1900010 [0082.982] GetCurrentObject (hdc=0x3b01098e, type=0x7) returned 0x340509df [0082.982] GetCurrentObject (hdc=0x3b01098e, type=0x6) returned 0x18a0048 [0082.982] SaveDC (hdc=0x3b01098e) returned 1 [0082.983] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x62040861 [0082.983] GetClipRgn (hdc=0x3b01098e, hrgn=0x62040861) returned 0 [0082.983] SelectClipRgn (hdc=0x3b01098e, hrgn=0x790406e1) returned 2 [0082.983] DeleteObject (ho=0x62040861) returned 1 [0082.983] DeleteObject (ho=0x790406e1) returned 1 [0082.983] OffsetViewportOrgEx (in: hdc=0x3b01098e, x=0, y=0, lppt=0x22cb008 | out: lppt=0x22cb008) returned 1 [0082.991] GetNearestColor (hdc=0x3b01098e, color=0xf0f0f0) returned 0xf0f0f0 [0082.991] CreateSolidBrush (color=0xf0f0f0) returned 0x341009da [0082.991] FillRect (hDC=0x3b01098e, lprc=0x1cecdc, hbr=0x341009da) returned 1 [0082.991] DeleteObject (ho=0x341009da) returned 1 [0082.991] RestoreDC (hdc=0x3b01098e, nSavedDC=-1) returned 1 [0082.992] GdipReleaseDC (graphics=0x5bff610, hdc=0x3b01098e) returned 0x0 [0082.992] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0082.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0082.992] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0082.992] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22cb090) returned 0x0 [0082.992] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0082.992] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0082.992] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0082.993] GdipCreateSolidFill (color=0xff000000, brush=0x1ced74) returned 0x0 [0082.993] GdipDrawString (graphics=0x5bff610, string="←", length=1, font=0x5bfab90, layoutRect=0x1ced5c, stringFormat=0x5bfb098, brush=0x5bfff58) returned 0x0 [0083.071] GdipDeleteBrush (brush=0x5bfff58) returned 0x0 [0083.071] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.071] GetFocus () returned 0x10402 [0083.071] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.071] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.072] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.072] GdipCreateRegion (region=0x1cebc4) returned 0x0 [0083.072] GdipGetClip (graphics=0x5bff610, region=0x5bfb098) returned 0x0 [0083.072] GdipCreateMatrix (matrix=0x1cebc4) returned 0x0 [0083.072] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0083.072] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cebdc) returned 0x0 [0083.072] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.072] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.072] LocalFree (hMem=0x691830) returned 0x0 [0083.072] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.072] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.072] LocalFree (hMem=0x691830) returned 0x0 [0083.072] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0083.072] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cec04) returned 0x0 [0083.072] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cebf4) returned 0x0 [0083.072] GdipGetRegionHRgn (region=0x5bfb098, graphics=0x5bff610, hRgn=0x1cebf4) returned 0x0 [0083.072] GdipDeleteRegion (region=0x5bfb098) returned 0x0 [0083.072] GdipGetDC (graphics=0x5bff610, hdc=0x1cec0c) returned 0x0 [0083.072] GetCurrentObject (hdc=0x3b01098e, type=0x1) returned 0x1b00017 [0083.073] GetCurrentObject (hdc=0x3b01098e, type=0x2) returned 0x1900010 [0083.073] GetCurrentObject (hdc=0x3b01098e, type=0x7) returned 0x340509df [0083.073] GetCurrentObject (hdc=0x3b01098e, type=0x6) returned 0x18a0048 [0083.073] SaveDC (hdc=0x3b01098e) returned 1 [0083.073] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7a0406e1 [0083.073] GetClipRgn (hdc=0x3b01098e, hrgn=0x7a0406e1) returned 0 [0083.073] SelectClipRgn (hdc=0x3b01098e, hrgn=0x63040861) returned 2 [0083.073] DeleteObject (ho=0x7a0406e1) returned 1 [0083.073] DeleteObject (ho=0x63040861) returned 1 [0083.073] OffsetViewportOrgEx (in: hdc=0x3b01098e, x=0, y=0, lppt=0x22cb2ac | out: lppt=0x22cb2ac) returned 1 [0083.073] GetROP2 (hdc=0x3b01098e) returned 13 [0083.073] GetBkMode (hdc=0x3b01098e) returned 2 [0083.073] SetBkMode (hdc=0x3b01098e, mode=1) returned 2 [0083.074] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x23009e8 [0083.074] SelectObject (hdc=0x3b01098e, h=0x23009e8) returned 0x1b00017 [0083.074] MoveToEx (in: hdc=0x3b01098e, x=45, y=0, lppt=0x22cb2ec | out: lppt=0x22cb2ec) returned 1 [0083.074] LineTo (hdc=0x3b01098e, x=0, y=0) returned 1 [0083.074] SetBkMode (hdc=0x3b01098e, mode=2) returned 1 [0083.074] MoveToEx (in: hdc=0x3b01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.074] GetROP2 (hdc=0x3b01098e) returned 13 [0083.074] GetBkMode (hdc=0x3b01098e) returned 2 [0083.074] SetBkMode (hdc=0x3b01098e, mode=1) returned 2 [0083.074] SelectObject (hdc=0x3b01098e, h=0x23009e8) returned 0x23009e8 [0083.074] MoveToEx (in: hdc=0x3b01098e, x=0, y=0, lppt=0x22cb2fc | out: lppt=0x22cb2fc) returned 1 [0083.074] LineTo (hdc=0x3b01098e, x=0, y=41) returned 1 [0083.074] SetBkMode (hdc=0x3b01098e, mode=2) returned 1 [0083.075] MoveToEx (in: hdc=0x3b01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.075] SelectObject (hdc=0x3b01098e, h=0x1b00017) returned 0x23009e8 [0083.075] DeleteObject (ho=0x23009e8) returned 1 [0083.075] GetROP2 (hdc=0x3b01098e) returned 13 [0083.075] GetBkMode (hdc=0x3b01098e) returned 2 [0083.075] SetBkMode (hdc=0x3b01098e, mode=1) returned 2 [0083.075] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x13009e9 [0083.075] SelectObject (hdc=0x3b01098e, h=0x13009e9) returned 0x1b00017 [0083.075] MoveToEx (in: hdc=0x3b01098e, x=0, y=41, lppt=0x22cb33c | out: lppt=0x22cb33c) returned 1 [0083.075] LineTo (hdc=0x3b01098e, x=45, y=41) returned 1 [0083.075] SetBkMode (hdc=0x3b01098e, mode=2) returned 1 [0083.075] MoveToEx (in: hdc=0x3b01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.075] GetROP2 (hdc=0x3b01098e) returned 13 [0083.075] GetBkMode (hdc=0x3b01098e) returned 2 [0083.075] SetBkMode (hdc=0x3b01098e, mode=1) returned 2 [0083.075] SelectObject (hdc=0x3b01098e, h=0x13009e9) returned 0x13009e9 [0083.075] MoveToEx (in: hdc=0x3b01098e, x=45, y=41, lppt=0x22cb34c | out: lppt=0x22cb34c) returned 1 [0083.075] LineTo (hdc=0x3b01098e, x=45, y=-1) returned 1 [0083.075] SetBkMode (hdc=0x3b01098e, mode=2) returned 1 [0083.075] MoveToEx (in: hdc=0x3b01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.075] SelectObject (hdc=0x3b01098e, h=0x1b00017) returned 0x13009e9 [0083.075] DeleteObject (ho=0x13009e9) returned 1 [0083.075] GetROP2 (hdc=0x3b01098e) returned 13 [0083.076] GetBkMode (hdc=0x3b01098e) returned 2 [0083.076] SetBkMode (hdc=0x3b01098e, mode=1) returned 2 [0083.076] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x33009e8 [0083.076] SelectObject (hdc=0x3b01098e, h=0x33009e8) returned 0x1b00017 [0083.076] MoveToEx (in: hdc=0x3b01098e, x=44, y=1, lppt=0x22cb38c | out: lppt=0x22cb38c) returned 1 [0083.076] LineTo (hdc=0x3b01098e, x=1, y=1) returned 1 [0083.076] SetBkMode (hdc=0x3b01098e, mode=2) returned 1 [0083.076] MoveToEx (in: hdc=0x3b01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.076] GetROP2 (hdc=0x3b01098e) returned 13 [0083.076] GetBkMode (hdc=0x3b01098e) returned 2 [0083.076] SetBkMode (hdc=0x3b01098e, mode=1) returned 2 [0083.076] SelectObject (hdc=0x3b01098e, h=0x33009e8) returned 0x33009e8 [0083.076] MoveToEx (in: hdc=0x3b01098e, x=1, y=1, lppt=0x22cb39c | out: lppt=0x22cb39c) returned 1 [0083.076] LineTo (hdc=0x3b01098e, x=1, y=40) returned 1 [0083.076] SetBkMode (hdc=0x3b01098e, mode=2) returned 1 [0083.076] MoveToEx (in: hdc=0x3b01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.076] SelectObject (hdc=0x3b01098e, h=0x1b00017) returned 0x33009e8 [0083.076] DeleteObject (ho=0x33009e8) returned 1 [0083.076] GetROP2 (hdc=0x3b01098e) returned 13 [0083.076] GetBkMode (hdc=0x3b01098e) returned 2 [0083.076] SetBkMode (hdc=0x3b01098e, mode=1) returned 2 [0083.076] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x23009e9 [0083.076] SelectObject (hdc=0x3b01098e, h=0x23009e9) returned 0x1b00017 [0083.077] MoveToEx (in: hdc=0x3b01098e, x=1, y=40, lppt=0x22cb3dc | out: lppt=0x22cb3dc) returned 1 [0083.077] LineTo (hdc=0x3b01098e, x=44, y=40) returned 1 [0083.077] SetBkMode (hdc=0x3b01098e, mode=2) returned 1 [0083.077] MoveToEx (in: hdc=0x3b01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.077] GetROP2 (hdc=0x3b01098e) returned 13 [0083.077] GetBkMode (hdc=0x3b01098e) returned 2 [0083.077] SetBkMode (hdc=0x3b01098e, mode=1) returned 2 [0083.077] SelectObject (hdc=0x3b01098e, h=0x23009e9) returned 0x23009e9 [0083.077] MoveToEx (in: hdc=0x3b01098e, x=44, y=40, lppt=0x22cb3ec | out: lppt=0x22cb3ec) returned 1 [0083.077] LineTo (hdc=0x3b01098e, x=44, y=0) returned 1 [0083.077] SetBkMode (hdc=0x3b01098e, mode=2) returned 1 [0083.077] MoveToEx (in: hdc=0x3b01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.077] SelectObject (hdc=0x3b01098e, h=0x1b00017) returned 0x23009e9 [0083.077] DeleteObject (ho=0x23009e9) returned 1 [0083.077] RestoreDC (hdc=0x3b01098e, nSavedDC=-1) returned 1 [0083.077] GdipReleaseDC (graphics=0x5bff610, hdc=0x3b01098e) returned 0x0 [0083.077] GdipGetDC (graphics=0x5bff610, hdc=0x1ceefc) returned 0x0 [0083.078] BitBlt (hdc=0x220106d6, x=0, y=0, cx=46, cy=42, hdcSrc=0x3b01098e, x1=0, y1=0, rop=0xcc0020) returned 1 [0083.101] GdipReleaseDC (graphics=0x5bff610, hdc=0x3b01098e) returned 0x0 [0083.101] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0083.104] SelectObject (hdc=0x3b01098e, h=0x185000f) returned 0x340509df [0083.119] DeleteDC (hdc=0x3b01098e) returned 1 [0083.119] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0083.119] EndPaint (hWnd=0x203d6, lpPaint=0x1ceea0) returned 1 [0083.119] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.119] IsWindowUnicode (hWnd=0x40358) returned 1 [0083.119] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.119] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0083.119] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0083.120] BeginPaint (in: hWnd=0x40358, lpPaint=0x1ceecc | out: lpPaint=0x1ceecc) returned 0x220106d6 [0083.120] GetWindowPlacement (in: hWnd=0x40358, lpwndpl=0x1cebf0 | out: lpwndpl=0x1cebf0) returned 1 [0083.120] GetClientRect (in: hWnd=0x40358, lpRect=0x1ceb9c | out: lpRect=0x1ceb9c) returned 1 [0083.120] GetWindowTextLengthW (hWnd=0x40358) returned 0 [0083.120] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0083.120] GetSystemMetrics (nIndex=42) returned 0 [0083.120] GetWindowTextW (in: hWnd=0x40358, lpString=0x1cea70, nMaxCount=1 | out: lpString="") returned 0 [0083.120] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xd, wParam=0x1, lParam=0x1cea70) returned 0x0 [0083.120] GetClientRect (in: hWnd=0x40358, lpRect=0x1ceaa4 | out: lpRect=0x1ceaa4) returned 1 [0083.120] GetCurrentObject (hdc=0x220106d6, type=0x1) returned 0x1b00017 [0083.120] GetCurrentObject (hdc=0x220106d6, type=0x2) returned 0x1900010 [0083.120] GetCurrentObject (hdc=0x220106d6, type=0x7) returned 0x8005019e [0083.120] GetCurrentObject (hdc=0x220106d6, type=0x6) returned 0x18a0048 [0083.120] SaveDC (hdc=0x220106d6) returned 1 [0083.120] GetNearestColor (hdc=0x220106d6, color=0xf0f0f0) returned 0xf0f0f0 [0083.120] CreateSolidBrush (color=0xf0f0f0) returned 0x351009da [0083.120] FillRect (hDC=0x220106d6, lprc=0x1ce944, hbr=0x351009da) returned 1 [0083.132] DeleteObject (ho=0x351009da) returned 1 [0083.132] RestoreDC (hdc=0x220106d6, nSavedDC=-1) returned 1 [0083.132] SelectPalette (hdc=0x220106d6, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0083.132] GetWindowTextLengthW (hWnd=0x40358) returned 0 [0083.132] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0083.132] GetSystemMetrics (nIndex=42) returned 0 [0083.132] GetWindowTextW (in: hWnd=0x40358, lpString=0x1cee70, nMaxCount=1 | out: lpString="") returned 0 [0083.132] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0xd, wParam=0x1, lParam=0x1cee70) returned 0x0 [0083.132] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0083.133] EndPaint (hWnd=0x40358, lpPaint=0x1ceec8) returned 1 [0083.133] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.133] IsWindowUnicode (hWnd=0x203d6) returned 1 [0083.133] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.133] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0083.133] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0083.133] BeginPaint (in: hWnd=0x203d6, lpPaint=0x1ceea4 | out: lpPaint=0x1ceea4) returned 0xc0100ae [0083.133] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0083.133] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d6, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0083.133] GetStockObject (i=5) returned 0x1900015 [0083.133] SelectPalette (hdc=0xc0100ae, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0083.134] CreateCompatibleDC (hdc=0xc0100ae) returned 0x280109e5 [0083.134] SelectObject (hdc=0x280109e5, h=0x340509df) returned 0x185000f [0083.134] GdipCreateFromHDC (hdc=0x280109e5, graphics=0x1ceebc) returned 0x0 [0083.134] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0083.134] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=46, height=42, combineMode=0x0) returned 0x0 [0083.134] GdipCreateMatrix (matrix=0x1cef04) returned 0x0 [0083.134] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0083.134] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cef1c) returned 0x0 [0083.134] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.134] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.134] LocalFree (hMem=0x691830) returned 0x0 [0083.159] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0083.159] GdipCreateRegion (region=0x1cef04) returned 0x0 [0083.159] GdipGetClip (graphics=0x5bff610, region=0x5bfb098) returned 0x0 [0083.159] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cef10) returned 0x0 [0083.159] GdipSaveGraphics (graphics=0x5bff610, state=0x1cef3c) returned 0x0 [0083.160] GdipRestoreGraphics (graphics=0x5bff610, state=0xfdae0dbd) returned 0x0 [0083.175] GdipDeleteRegion (region=0x5bfb098) returned 0x0 [0083.175] GdipGetDC (graphics=0x5bff610, hdc=0x1ced24) returned 0x0 [0083.175] GetCurrentObject (hdc=0x280109e5, type=0x1) returned 0x1b00017 [0083.175] GetCurrentObject (hdc=0x280109e5, type=0x2) returned 0x1900010 [0083.175] GetCurrentObject (hdc=0x280109e5, type=0x7) returned 0x340509df [0083.176] GetCurrentObject (hdc=0x280109e5, type=0x6) returned 0x18a0048 [0083.176] SaveDC (hdc=0x280109e5) returned 1 [0083.176] GetNearestColor (hdc=0x280109e5, color=0xf0f0f0) returned 0xf0f0f0 [0083.176] GetNearestColor (hdc=0x280109e5, color=0xa0a0a0) returned 0xa0a0a0 [0083.176] GetNearestColor (hdc=0x280109e5, color=0x696969) returned 0x696969 [0083.176] GetNearestColor (hdc=0x280109e5, color=0xa0a0a0) returned 0xa0a0a0 [0083.176] GetNearestColor (hdc=0x280109e5, color=0x0) returned 0x0 [0083.176] GetNearestColor (hdc=0x280109e5, color=0xffffff) returned 0xffffff [0083.176] GetNearestColor (hdc=0x280109e5, color=0xe5e5e5) returned 0xe5e5e5 [0083.176] GetNearestColor (hdc=0x280109e5, color=0xd7d7d7) returned 0xd7d7d7 [0083.176] GetNearestColor (hdc=0x280109e5, color=0x0) returned 0x0 [0083.177] RestoreDC (hdc=0x280109e5, nSavedDC=-1) returned 1 [0083.177] GdipReleaseDC (graphics=0x5bff610, hdc=0x280109e5) returned 0x0 [0083.177] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.177] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.177] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.177] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22cbb98) returned 0x0 [0083.177] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.177] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.178] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.178] GdipGetStringFormatFlags (format=0x5bfb098, flags=0x1cedbc) returned 0x0 [0083.178] GdipGetStringFormatTrimming (format=0x5bfb098, trimming=0x1cedbc) returned 0x0 [0083.178] GdipGetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=0x1cedbc) returned 0x0 [0083.178] GdipGetStringFormatAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.178] GdipGetStringFormatLineAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.178] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.178] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.178] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.178] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1cec44) returned 0x0 [0083.179] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22cbc74) returned 0x0 [0083.179] GdipSetStringFormatFlags (format=0x5bfff58, flags=0) returned 0x0 [0083.179] GdipSetStringFormatTrimming (format=0x5bfff58, trimming=0x1) returned 0x0 [0083.179] GdipSetStringFormatHotkeyPrefix (format=0x5bfff58, hotkeyPrefix=2) returned 0x0 [0083.179] GdipSetStringFormatAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.179] GdipSetStringFormatLineAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.179] GdipMeasureString (graphics=0x5c01210, string="←", length=1, font=0x5bfab90, layoutRect=0x1cec24, stringFormat=0x5bfff58, boundingBox=0x1cec14, codepointsFitted=0x1cec10, linesFilled=0x1cec0c) returned 0x0 [0083.179] GdipDeleteStringFormat (format=0x5bfff58) returned 0x0 [0083.179] GdipDeleteGraphics (graphics=0x5c01210) returned 0x0 [0083.179] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.179] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.180] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.180] GdipCreateRegion (region=0x1cec90) returned 0x0 [0083.180] GdipGetClip (graphics=0x5bff610, region=0x5bfb098) returned 0x0 [0083.180] GdipCreateMatrix (matrix=0x1cec90) returned 0x0 [0083.180] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0083.180] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1ceca8) returned 0x0 [0083.180] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.180] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.180] LocalFree (hMem=0x691830) returned 0x0 [0083.180] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.180] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.180] LocalFree (hMem=0x691830) returned 0x0 [0083.180] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0083.180] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cecd0) returned 0x0 [0083.180] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cecc0) returned 0x0 [0083.180] GdipGetRegionHRgn (region=0x5bfb098, graphics=0x5bff610, hRgn=0x1cecc0) returned 0x0 [0083.180] GdipDeleteRegion (region=0x5bfb098) returned 0x0 [0083.180] GdipGetDC (graphics=0x5bff610, hdc=0x1cecd8) returned 0x0 [0083.180] GetCurrentObject (hdc=0x280109e5, type=0x1) returned 0x1b00017 [0083.180] GetCurrentObject (hdc=0x280109e5, type=0x2) returned 0x1900010 [0083.180] GetCurrentObject (hdc=0x280109e5, type=0x7) returned 0x340509df [0083.180] GetCurrentObject (hdc=0x280109e5, type=0x6) returned 0x18a0048 [0083.181] SaveDC (hdc=0x280109e5) returned 1 [0083.181] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x64040861 [0083.181] GetClipRgn (hdc=0x280109e5, hrgn=0x64040861) returned 0 [0083.181] SelectClipRgn (hdc=0x280109e5, hrgn=0x7b0406e1) returned 2 [0083.181] DeleteObject (ho=0x64040861) returned 1 [0083.181] DeleteObject (ho=0x7b0406e1) returned 1 [0083.181] OffsetViewportOrgEx (in: hdc=0x280109e5, x=0, y=0, lppt=0x22cbe78 | out: lppt=0x22cbe78) returned 1 [0083.181] GetNearestColor (hdc=0x280109e5, color=0xf0f0f0) returned 0xf0f0f0 [0083.181] CreateSolidBrush (color=0xf0f0f0) returned 0x361009da [0083.181] FillRect (hDC=0x280109e5, lprc=0x1cecdc, hbr=0x361009da) returned 1 [0083.181] DeleteObject (ho=0x361009da) returned 1 [0083.181] RestoreDC (hdc=0x280109e5, nSavedDC=-1) returned 1 [0083.181] GdipReleaseDC (graphics=0x5bff610, hdc=0x280109e5) returned 0x0 [0083.181] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.182] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.182] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22cbf00) returned 0x0 [0083.182] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.182] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.182] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.182] GdipCreateSolidFill (color=0xff000000, brush=0x1ced74) returned 0x0 [0083.182] GdipDrawString (graphics=0x5bff610, string="←", length=1, font=0x5bfab90, layoutRect=0x1ced5c, stringFormat=0x5bfb098, brush=0x5bfff58) returned 0x0 [0083.182] GdipDeleteBrush (brush=0x5bfff58) returned 0x0 [0083.182] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.182] GetFocus () returned 0x10402 [0083.182] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.183] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.183] GdipCreateRegion (region=0x1cebc4) returned 0x0 [0083.183] GdipGetClip (graphics=0x5bff610, region=0x5bfb098) returned 0x0 [0083.183] GdipCreateMatrix (matrix=0x1cebc4) returned 0x0 [0083.183] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0083.183] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cebdc) returned 0x0 [0083.183] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.183] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.183] LocalFree (hMem=0x691830) returned 0x0 [0083.183] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.183] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.183] LocalFree (hMem=0x691830) returned 0x0 [0083.183] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0083.183] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cec04) returned 0x0 [0083.183] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cebf4) returned 0x0 [0083.183] GdipGetRegionHRgn (region=0x5bfb098, graphics=0x5bff610, hRgn=0x1cebf4) returned 0x0 [0083.184] GdipDeleteRegion (region=0x5bfb098) returned 0x0 [0083.184] GdipGetDC (graphics=0x5bff610, hdc=0x1cec0c) returned 0x0 [0083.184] GetCurrentObject (hdc=0x280109e5, type=0x1) returned 0x1b00017 [0083.184] GetCurrentObject (hdc=0x280109e5, type=0x2) returned 0x1900010 [0083.184] GetCurrentObject (hdc=0x280109e5, type=0x7) returned 0x340509df [0083.184] GetCurrentObject (hdc=0x280109e5, type=0x6) returned 0x18a0048 [0083.184] SaveDC (hdc=0x280109e5) returned 1 [0083.184] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7c0406e1 [0083.184] GetClipRgn (hdc=0x280109e5, hrgn=0x7c0406e1) returned 0 [0083.184] SelectClipRgn (hdc=0x280109e5, hrgn=0x65040861) returned 2 [0083.184] DeleteObject (ho=0x7c0406e1) returned 1 [0083.184] DeleteObject (ho=0x65040861) returned 1 [0083.184] OffsetViewportOrgEx (in: hdc=0x280109e5, x=0, y=0, lppt=0x22cc11c | out: lppt=0x22cc11c) returned 1 [0083.184] GetROP2 (hdc=0x280109e5) returned 13 [0083.184] GetBkMode (hdc=0x280109e5) returned 2 [0083.184] SetBkMode (hdc=0x280109e5, mode=1) returned 2 [0083.184] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x33009e9 [0083.184] SelectObject (hdc=0x280109e5, h=0x33009e9) returned 0x1b00017 [0083.184] MoveToEx (in: hdc=0x280109e5, x=45, y=0, lppt=0x22cc15c | out: lppt=0x22cc15c) returned 1 [0083.184] LineTo (hdc=0x280109e5, x=0, y=0) returned 1 [0083.185] SetBkMode (hdc=0x280109e5, mode=2) returned 1 [0083.185] MoveToEx (in: hdc=0x280109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.185] GetROP2 (hdc=0x280109e5) returned 13 [0083.185] GetBkMode (hdc=0x280109e5) returned 2 [0083.185] SetBkMode (hdc=0x280109e5, mode=1) returned 2 [0083.185] SelectObject (hdc=0x280109e5, h=0x33009e9) returned 0x33009e9 [0083.185] MoveToEx (in: hdc=0x280109e5, x=0, y=0, lppt=0x22cc16c | out: lppt=0x22cc16c) returned 1 [0083.185] LineTo (hdc=0x280109e5, x=0, y=41) returned 1 [0083.185] SetBkMode (hdc=0x280109e5, mode=2) returned 1 [0083.185] MoveToEx (in: hdc=0x280109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.185] SelectObject (hdc=0x280109e5, h=0x1b00017) returned 0x33009e9 [0083.185] DeleteObject (ho=0x33009e9) returned 1 [0083.185] GetROP2 (hdc=0x280109e5) returned 13 [0083.185] GetBkMode (hdc=0x280109e5) returned 2 [0083.185] SetBkMode (hdc=0x280109e5, mode=1) returned 2 [0083.185] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x43009e8 [0083.185] SelectObject (hdc=0x280109e5, h=0x43009e8) returned 0x1b00017 [0083.185] MoveToEx (in: hdc=0x280109e5, x=0, y=41, lppt=0x22cc1ac | out: lppt=0x22cc1ac) returned 1 [0083.185] LineTo (hdc=0x280109e5, x=45, y=41) returned 1 [0083.185] SetBkMode (hdc=0x280109e5, mode=2) returned 1 [0083.185] MoveToEx (in: hdc=0x280109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.186] GetROP2 (hdc=0x280109e5) returned 13 [0083.186] GetBkMode (hdc=0x280109e5) returned 2 [0083.186] SetBkMode (hdc=0x280109e5, mode=1) returned 2 [0083.186] SelectObject (hdc=0x280109e5, h=0x43009e8) returned 0x43009e8 [0083.186] MoveToEx (in: hdc=0x280109e5, x=45, y=41, lppt=0x22cc1bc | out: lppt=0x22cc1bc) returned 1 [0083.186] LineTo (hdc=0x280109e5, x=45, y=-1) returned 1 [0083.186] SetBkMode (hdc=0x280109e5, mode=2) returned 1 [0083.186] MoveToEx (in: hdc=0x280109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.186] SelectObject (hdc=0x280109e5, h=0x1b00017) returned 0x43009e8 [0083.186] DeleteObject (ho=0x43009e8) returned 1 [0083.186] GetROP2 (hdc=0x280109e5) returned 13 [0083.186] GetBkMode (hdc=0x280109e5) returned 2 [0083.186] SetBkMode (hdc=0x280109e5, mode=1) returned 2 [0083.186] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x43009e9 [0083.186] SelectObject (hdc=0x280109e5, h=0x43009e9) returned 0x1b00017 [0083.186] MoveToEx (in: hdc=0x280109e5, x=44, y=1, lppt=0x22cc1fc | out: lppt=0x22cc1fc) returned 1 [0083.186] LineTo (hdc=0x280109e5, x=1, y=1) returned 1 [0083.186] SetBkMode (hdc=0x280109e5, mode=2) returned 1 [0083.186] MoveToEx (in: hdc=0x280109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.186] GetROP2 (hdc=0x280109e5) returned 13 [0083.187] GetBkMode (hdc=0x280109e5) returned 2 [0083.187] SetBkMode (hdc=0x280109e5, mode=1) returned 2 [0083.187] SelectObject (hdc=0x280109e5, h=0x43009e9) returned 0x43009e9 [0083.187] MoveToEx (in: hdc=0x280109e5, x=1, y=1, lppt=0x22cc20c | out: lppt=0x22cc20c) returned 1 [0083.187] LineTo (hdc=0x280109e5, x=1, y=40) returned 1 [0083.187] SetBkMode (hdc=0x280109e5, mode=2) returned 1 [0083.187] MoveToEx (in: hdc=0x280109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.187] SelectObject (hdc=0x280109e5, h=0x1b00017) returned 0x43009e9 [0083.187] DeleteObject (ho=0x43009e9) returned 1 [0083.187] GetROP2 (hdc=0x280109e5) returned 13 [0083.187] GetBkMode (hdc=0x280109e5) returned 2 [0083.187] SetBkMode (hdc=0x280109e5, mode=1) returned 2 [0083.187] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x53009e8 [0083.187] SelectObject (hdc=0x280109e5, h=0x53009e8) returned 0x1b00017 [0083.187] MoveToEx (in: hdc=0x280109e5, x=1, y=40, lppt=0x22cc24c | out: lppt=0x22cc24c) returned 1 [0083.187] LineTo (hdc=0x280109e5, x=44, y=40) returned 1 [0083.187] SetBkMode (hdc=0x280109e5, mode=2) returned 1 [0083.187] MoveToEx (in: hdc=0x280109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.187] GetROP2 (hdc=0x280109e5) returned 13 [0083.187] GetBkMode (hdc=0x280109e5) returned 2 [0083.187] SetBkMode (hdc=0x280109e5, mode=1) returned 2 [0083.187] SelectObject (hdc=0x280109e5, h=0x53009e8) returned 0x53009e8 [0083.188] MoveToEx (in: hdc=0x280109e5, x=44, y=40, lppt=0x22cc25c | out: lppt=0x22cc25c) returned 1 [0083.188] LineTo (hdc=0x280109e5, x=44, y=0) returned 1 [0083.188] SetBkMode (hdc=0x280109e5, mode=2) returned 1 [0083.188] MoveToEx (in: hdc=0x280109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.188] SelectObject (hdc=0x280109e5, h=0x1b00017) returned 0x53009e8 [0083.188] DeleteObject (ho=0x53009e8) returned 1 [0083.188] RestoreDC (hdc=0x280109e5, nSavedDC=-1) returned 1 [0083.188] GdipReleaseDC (graphics=0x5bff610, hdc=0x280109e5) returned 0x0 [0083.188] GdipGetDC (graphics=0x5bff610, hdc=0x1ceefc) returned 0x0 [0083.188] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=46, cy=42, hdcSrc=0x280109e5, x1=0, y1=0, rop=0xcc0020) returned 1 [0083.194] GdipReleaseDC (graphics=0x5bff610, hdc=0x280109e5) returned 0x0 [0083.194] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0083.195] SelectObject (hdc=0x280109e5, h=0x185000f) returned 0x340509df [0083.195] DeleteDC (hdc=0x280109e5) returned 1 [0083.195] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0083.200] EndPaint (hWnd=0x203d6, lpPaint=0x1ceea0) returned 1 [0083.200] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.202] IsWindowUnicode (hWnd=0x203f8) returned 1 [0083.202] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.202] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0083.202] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0083.203] BeginPaint (in: hWnd=0x203f8, lpPaint=0x1ceea4 | out: lpPaint=0x1ceea4) returned 0x1b0107ae [0083.203] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0083.203] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f8, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0083.203] GetStockObject (i=5) returned 0x1900015 [0083.203] SelectPalette (hdc=0x1b0107ae, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0083.203] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x690109e3 [0083.203] SelectObject (hdc=0x690109e3, h=0x340509df) returned 0x185000f [0083.203] GdipCreateFromHDC (hdc=0x690109e3, graphics=0x1ceebc) returned 0x0 [0083.204] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0083.204] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=46, height=42, combineMode=0x0) returned 0x0 [0083.204] GdipCreateMatrix (matrix=0x1cef04) returned 0x0 [0083.204] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0083.204] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cef1c) returned 0x0 [0083.204] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.204] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.204] LocalFree (hMem=0x691830) returned 0x0 [0083.204] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0083.204] GdipCreateRegion (region=0x1cef04) returned 0x0 [0083.204] GdipGetClip (graphics=0x5bff610, region=0x5bfb098) returned 0x0 [0083.204] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cef10) returned 0x0 [0083.204] GdipSaveGraphics (graphics=0x5bff610, state=0x1cef3c) returned 0x0 [0083.204] GdipRestoreGraphics (graphics=0x5bff610, state=0xfdab0dbd) returned 0x0 [0083.204] GdipDeleteRegion (region=0x5bfb098) returned 0x0 [0083.204] GdipGetDC (graphics=0x5bff610, hdc=0x1ced24) returned 0x0 [0083.204] GetCurrentObject (hdc=0x690109e3, type=0x1) returned 0x1b00017 [0083.204] GetCurrentObject (hdc=0x690109e3, type=0x2) returned 0x1900010 [0083.204] GetCurrentObject (hdc=0x690109e3, type=0x7) returned 0x340509df [0083.204] GetCurrentObject (hdc=0x690109e3, type=0x6) returned 0x18a0048 [0083.204] SaveDC (hdc=0x690109e3) returned 1 [0083.205] GetNearestColor (hdc=0x690109e3, color=0xf0f0f0) returned 0xf0f0f0 [0083.205] GetNearestColor (hdc=0x690109e3, color=0xa0a0a0) returned 0xa0a0a0 [0083.219] GetNearestColor (hdc=0x690109e3, color=0x696969) returned 0x696969 [0083.219] GetNearestColor (hdc=0x690109e3, color=0xa0a0a0) returned 0xa0a0a0 [0083.219] GetNearestColor (hdc=0x690109e3, color=0x0) returned 0x0 [0083.219] GetNearestColor (hdc=0x690109e3, color=0xffffff) returned 0xffffff [0083.219] GetNearestColor (hdc=0x690109e3, color=0xe5e5e5) returned 0xe5e5e5 [0083.219] GetNearestColor (hdc=0x690109e3, color=0xd7d7d7) returned 0xd7d7d7 [0083.220] GetNearestColor (hdc=0x690109e3, color=0x0) returned 0x0 [0083.220] RestoreDC (hdc=0x690109e3, nSavedDC=-1) returned 1 [0083.220] GdipReleaseDC (graphics=0x5bff610, hdc=0x690109e3) returned 0x0 [0083.220] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.221] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.221] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.222] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22cc790) returned 0x0 [0083.222] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.222] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.222] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.223] GdipGetStringFormatFlags (format=0x5bfb098, flags=0x1cedbc) returned 0x0 [0083.223] GdipGetStringFormatTrimming (format=0x5bfb098, trimming=0x1cedbc) returned 0x0 [0083.223] GdipGetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=0x1cedbc) returned 0x0 [0083.223] GdipGetStringFormatAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.223] GdipGetStringFormatLineAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.223] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.224] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.224] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.225] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1cec44) returned 0x0 [0083.225] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22cc86c) returned 0x0 [0083.225] GdipSetStringFormatFlags (format=0x5bfff58, flags=0) returned 0x0 [0083.225] GdipSetStringFormatTrimming (format=0x5bfff58, trimming=0x1) returned 0x0 [0083.225] GdipSetStringFormatHotkeyPrefix (format=0x5bfff58, hotkeyPrefix=2) returned 0x0 [0083.226] GdipSetStringFormatAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.226] GdipSetStringFormatLineAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.226] GdipMeasureString (graphics=0x5c01210, string="CE", length=2, font=0x5bfab90, layoutRect=0x1cec24, stringFormat=0x5bfff58, boundingBox=0x1cec14, codepointsFitted=0x1cec10, linesFilled=0x1cec0c) returned 0x0 [0083.226] GdipDeleteStringFormat (format=0x5bfff58) returned 0x0 [0083.226] GdipDeleteGraphics (graphics=0x5c01210) returned 0x0 [0083.226] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.228] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.228] GdipCreateRegion (region=0x1cec90) returned 0x0 [0083.228] GdipGetClip (graphics=0x5bff610, region=0x5bfb098) returned 0x0 [0083.229] GdipCreateMatrix (matrix=0x1cec90) returned 0x0 [0083.229] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0083.229] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1ceca8) returned 0x0 [0083.229] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.229] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.229] LocalFree (hMem=0x691830) returned 0x0 [0083.229] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.230] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.230] LocalFree (hMem=0x691830) returned 0x0 [0083.230] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0083.230] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cecd0) returned 0x0 [0083.230] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cecc0) returned 0x0 [0083.230] GdipGetRegionHRgn (region=0x5bfb098, graphics=0x5bff610, hRgn=0x1cecc0) returned 0x0 [0083.230] GdipDeleteRegion (region=0x5bfb098) returned 0x0 [0083.231] GdipGetDC (graphics=0x5bff610, hdc=0x1cecd8) returned 0x0 [0083.231] GetCurrentObject (hdc=0x690109e3, type=0x1) returned 0x1b00017 [0083.232] GetCurrentObject (hdc=0x690109e3, type=0x2) returned 0x1900010 [0083.232] GetCurrentObject (hdc=0x690109e3, type=0x7) returned 0x340509df [0083.232] GetCurrentObject (hdc=0x690109e3, type=0x6) returned 0x18a0048 [0083.232] SaveDC (hdc=0x690109e3) returned 1 [0083.232] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x66040861 [0083.239] GetClipRgn (hdc=0x690109e3, hrgn=0x66040861) returned 0 [0083.239] SelectClipRgn (hdc=0x690109e3, hrgn=0x7d0406e1) returned 2 [0083.239] DeleteObject (ho=0x66040861) returned 1 [0083.239] DeleteObject (ho=0x7d0406e1) returned 1 [0083.239] OffsetViewportOrgEx (in: hdc=0x690109e3, x=0, y=0, lppt=0x22cca70 | out: lppt=0x22cca70) returned 1 [0083.239] GetNearestColor (hdc=0x690109e3, color=0xf0f0f0) returned 0xf0f0f0 [0083.239] CreateSolidBrush (color=0xf0f0f0) returned 0x371009da [0083.240] FillRect (hDC=0x690109e3, lprc=0x1cecdc, hbr=0x371009da) returned 1 [0083.240] DeleteObject (ho=0x371009da) returned 1 [0083.240] RestoreDC (hdc=0x690109e3, nSavedDC=-1) returned 1 [0083.240] GdipReleaseDC (graphics=0x5bff610, hdc=0x690109e3) returned 0x0 [0083.240] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.240] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.240] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22ccaf8) returned 0x0 [0083.240] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.240] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.240] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.240] GdipCreateSolidFill (color=0xff000000, brush=0x1ced74) returned 0x0 [0083.240] GdipDrawString (graphics=0x5bff610, string="CE", length=2, font=0x5bfab90, layoutRect=0x1ced5c, stringFormat=0x5bfb098, brush=0x5bfff58) returned 0x0 [0083.242] GdipDeleteBrush (brush=0x5bfff58) returned 0x0 [0083.242] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.242] GetFocus () returned 0x10402 [0083.242] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.242] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.242] GdipCreateRegion (region=0x1cebc4) returned 0x0 [0083.242] GdipGetClip (graphics=0x5bff610, region=0x5bfb098) returned 0x0 [0083.242] GdipCreateMatrix (matrix=0x1cebc4) returned 0x0 [0083.242] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0083.242] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cebdc) returned 0x0 [0083.242] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.243] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.243] LocalFree (hMem=0x691830) returned 0x0 [0083.243] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.243] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.243] LocalFree (hMem=0x691830) returned 0x0 [0083.243] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0083.243] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cec04) returned 0x0 [0083.243] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cebf4) returned 0x0 [0083.243] GdipGetRegionHRgn (region=0x5bfb098, graphics=0x5bff610, hRgn=0x1cebf4) returned 0x0 [0083.243] GdipDeleteRegion (region=0x5bfb098) returned 0x0 [0083.243] GdipGetDC (graphics=0x5bff610, hdc=0x1cec0c) returned 0x0 [0083.243] GetCurrentObject (hdc=0x690109e3, type=0x1) returned 0x1b00017 [0083.243] GetCurrentObject (hdc=0x690109e3, type=0x2) returned 0x1900010 [0083.243] GetCurrentObject (hdc=0x690109e3, type=0x7) returned 0x340509df [0083.243] GetCurrentObject (hdc=0x690109e3, type=0x6) returned 0x18a0048 [0083.243] SaveDC (hdc=0x690109e3) returned 1 [0083.243] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7e0406e1 [0083.243] GetClipRgn (hdc=0x690109e3, hrgn=0x7e0406e1) returned 0 [0083.243] SelectClipRgn (hdc=0x690109e3, hrgn=0x67040861) returned 2 [0083.243] DeleteObject (ho=0x7e0406e1) returned 1 [0083.243] DeleteObject (ho=0x67040861) returned 1 [0083.243] OffsetViewportOrgEx (in: hdc=0x690109e3, x=0, y=0, lppt=0x22ccd14 | out: lppt=0x22ccd14) returned 1 [0083.244] GetROP2 (hdc=0x690109e3) returned 13 [0083.244] GetBkMode (hdc=0x690109e3) returned 2 [0083.244] SetBkMode (hdc=0x690109e3, mode=1) returned 2 [0083.244] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x63009e8 [0083.244] SelectObject (hdc=0x690109e3, h=0x63009e8) returned 0x1b00017 [0083.244] MoveToEx (in: hdc=0x690109e3, x=45, y=0, lppt=0x22ccd54 | out: lppt=0x22ccd54) returned 1 [0083.244] LineTo (hdc=0x690109e3, x=0, y=0) returned 1 [0083.244] SetBkMode (hdc=0x690109e3, mode=2) returned 1 [0083.244] MoveToEx (in: hdc=0x690109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.244] GetROP2 (hdc=0x690109e3) returned 13 [0083.244] GetBkMode (hdc=0x690109e3) returned 2 [0083.244] SetBkMode (hdc=0x690109e3, mode=1) returned 2 [0083.244] SelectObject (hdc=0x690109e3, h=0x63009e8) returned 0x63009e8 [0083.244] MoveToEx (in: hdc=0x690109e3, x=0, y=0, lppt=0x22ccd64 | out: lppt=0x22ccd64) returned 1 [0083.244] LineTo (hdc=0x690109e3, x=0, y=41) returned 1 [0083.244] SetBkMode (hdc=0x690109e3, mode=2) returned 1 [0083.244] MoveToEx (in: hdc=0x690109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.244] SelectObject (hdc=0x690109e3, h=0x1b00017) returned 0x63009e8 [0083.244] DeleteObject (ho=0x63009e8) returned 1 [0083.244] GetROP2 (hdc=0x690109e3) returned 13 [0083.244] GetBkMode (hdc=0x690109e3) returned 2 [0083.244] SetBkMode (hdc=0x690109e3, mode=1) returned 2 [0083.244] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x53009e9 [0083.245] SelectObject (hdc=0x690109e3, h=0x53009e9) returned 0x1b00017 [0083.245] MoveToEx (in: hdc=0x690109e3, x=0, y=41, lppt=0x22ccda4 | out: lppt=0x22ccda4) returned 1 [0083.245] LineTo (hdc=0x690109e3, x=45, y=41) returned 1 [0083.245] SetBkMode (hdc=0x690109e3, mode=2) returned 1 [0083.245] MoveToEx (in: hdc=0x690109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.245] GetROP2 (hdc=0x690109e3) returned 13 [0083.245] GetBkMode (hdc=0x690109e3) returned 2 [0083.245] SetBkMode (hdc=0x690109e3, mode=1) returned 2 [0083.245] SelectObject (hdc=0x690109e3, h=0x53009e9) returned 0x53009e9 [0083.245] MoveToEx (in: hdc=0x690109e3, x=45, y=41, lppt=0x22ccdb4 | out: lppt=0x22ccdb4) returned 1 [0083.245] LineTo (hdc=0x690109e3, x=45, y=-1) returned 1 [0083.245] SetBkMode (hdc=0x690109e3, mode=2) returned 1 [0083.245] MoveToEx (in: hdc=0x690109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.245] SelectObject (hdc=0x690109e3, h=0x1b00017) returned 0x53009e9 [0083.245] DeleteObject (ho=0x53009e9) returned 1 [0083.245] GetROP2 (hdc=0x690109e3) returned 13 [0083.245] GetBkMode (hdc=0x690109e3) returned 2 [0083.245] SetBkMode (hdc=0x690109e3, mode=1) returned 2 [0083.245] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x73009e8 [0083.245] SelectObject (hdc=0x690109e3, h=0x73009e8) returned 0x1b00017 [0083.245] MoveToEx (in: hdc=0x690109e3, x=44, y=1, lppt=0x22ccdf4 | out: lppt=0x22ccdf4) returned 1 [0083.245] LineTo (hdc=0x690109e3, x=1, y=1) returned 1 [0083.245] SetBkMode (hdc=0x690109e3, mode=2) returned 1 [0083.246] MoveToEx (in: hdc=0x690109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.246] GetROP2 (hdc=0x690109e3) returned 13 [0083.246] GetBkMode (hdc=0x690109e3) returned 2 [0083.246] SetBkMode (hdc=0x690109e3, mode=1) returned 2 [0083.246] SelectObject (hdc=0x690109e3, h=0x73009e8) returned 0x73009e8 [0083.246] MoveToEx (in: hdc=0x690109e3, x=1, y=1, lppt=0x22cce04 | out: lppt=0x22cce04) returned 1 [0083.246] LineTo (hdc=0x690109e3, x=1, y=40) returned 1 [0083.246] SetBkMode (hdc=0x690109e3, mode=2) returned 1 [0083.246] MoveToEx (in: hdc=0x690109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.246] SelectObject (hdc=0x690109e3, h=0x1b00017) returned 0x73009e8 [0083.246] DeleteObject (ho=0x73009e8) returned 1 [0083.246] GetROP2 (hdc=0x690109e3) returned 13 [0083.246] GetBkMode (hdc=0x690109e3) returned 2 [0083.246] SetBkMode (hdc=0x690109e3, mode=1) returned 2 [0083.246] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x63009e9 [0083.246] SelectObject (hdc=0x690109e3, h=0x63009e9) returned 0x1b00017 [0083.246] MoveToEx (in: hdc=0x690109e3, x=1, y=40, lppt=0x22cce44 | out: lppt=0x22cce44) returned 1 [0083.246] LineTo (hdc=0x690109e3, x=44, y=40) returned 1 [0083.246] SetBkMode (hdc=0x690109e3, mode=2) returned 1 [0083.246] MoveToEx (in: hdc=0x690109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.246] GetROP2 (hdc=0x690109e3) returned 13 [0083.246] GetBkMode (hdc=0x690109e3) returned 2 [0083.246] SetBkMode (hdc=0x690109e3, mode=1) returned 2 [0083.247] SelectObject (hdc=0x690109e3, h=0x63009e9) returned 0x63009e9 [0083.247] MoveToEx (in: hdc=0x690109e3, x=44, y=40, lppt=0x22cce54 | out: lppt=0x22cce54) returned 1 [0083.247] LineTo (hdc=0x690109e3, x=44, y=0) returned 1 [0083.247] SetBkMode (hdc=0x690109e3, mode=2) returned 1 [0083.247] MoveToEx (in: hdc=0x690109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.247] SelectObject (hdc=0x690109e3, h=0x1b00017) returned 0x63009e9 [0083.247] DeleteObject (ho=0x63009e9) returned 1 [0083.247] RestoreDC (hdc=0x690109e3, nSavedDC=-1) returned 1 [0083.247] GdipReleaseDC (graphics=0x5bff610, hdc=0x690109e3) returned 0x0 [0083.247] GdipGetDC (graphics=0x5bff610, hdc=0x1ceefc) returned 0x0 [0083.247] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=46, cy=42, hdcSrc=0x690109e3, x1=0, y1=0, rop=0xcc0020) returned 1 [0083.251] GdipReleaseDC (graphics=0x5bff610, hdc=0x690109e3) returned 0x0 [0083.251] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0083.251] SelectObject (hdc=0x690109e3, h=0x185000f) returned 0x340509df [0083.251] DeleteDC (hdc=0x690109e3) returned 1 [0083.251] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0083.252] EndPaint (hWnd=0x203f8, lpPaint=0x1ceea0) returned 1 [0083.252] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.252] IsWindowUnicode (hWnd=0x203f6) returned 1 [0083.252] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.252] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0083.252] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0083.253] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0083.253] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0083.253] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0083.253] SendMessageW (hWnd=0x203f6, Msg=0x2111, wParam=0x40003f6, lParam=0x203f6) returned 0x0 [0083.253] SendMessageW (hWnd=0x203f6, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0083.253] CallWindowProcW (lpPrevWndFunc=0x6b7a83e0, hWnd=0x203f6, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0083.254] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.254] IsWindowUnicode (hWnd=0x203f2) returned 1 [0083.254] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.254] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0083.261] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0083.261] BeginPaint (in: hWnd=0x203f2, lpPaint=0x1ceea4 | out: lpPaint=0x1ceea4) returned 0x220106d6 [0083.261] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0083.261] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f2, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0083.265] GetStockObject (i=5) returned 0x1900015 [0083.265] SelectPalette (hdc=0x220106d6, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0083.265] CreateCompatibleDC (hdc=0x220106d6) returned 0x4a01098e [0083.265] SelectObject (hdc=0x4a01098e, h=0x340509df) returned 0x185000f [0083.265] GdipCreateFromHDC (hdc=0x4a01098e, graphics=0x1ceebc) returned 0x0 [0083.265] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0083.266] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=46, height=42, combineMode=0x0) returned 0x0 [0083.266] GdipCreateMatrix (matrix=0x1cef04) returned 0x0 [0083.266] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0083.266] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cef1c) returned 0x0 [0083.266] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.266] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.266] LocalFree (hMem=0x691830) returned 0x0 [0083.266] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0083.266] GdipCreateRegion (region=0x1cef04) returned 0x0 [0083.266] GdipGetClip (graphics=0x5bff610, region=0x5bfb098) returned 0x0 [0083.266] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cef10) returned 0x0 [0083.266] GdipSaveGraphics (graphics=0x5bff610, state=0x1cef3c) returned 0x0 [0083.266] GdipRestoreGraphics (graphics=0x5bff610, state=0xfda80dbd) returned 0x0 [0083.266] GdipDeleteRegion (region=0x5bfb098) returned 0x0 [0083.266] GdipGetDC (graphics=0x5bff610, hdc=0x1ced24) returned 0x0 [0083.266] GetCurrentObject (hdc=0x4a01098e, type=0x1) returned 0x1b00017 [0083.266] GetCurrentObject (hdc=0x4a01098e, type=0x2) returned 0x1900010 [0083.266] GetCurrentObject (hdc=0x4a01098e, type=0x7) returned 0x340509df [0083.266] GetCurrentObject (hdc=0x4a01098e, type=0x6) returned 0x18a0048 [0083.266] SaveDC (hdc=0x4a01098e) returned 1 [0083.266] GetNearestColor (hdc=0x4a01098e, color=0xf0f0f0) returned 0xf0f0f0 [0083.266] GetNearestColor (hdc=0x4a01098e, color=0xa0a0a0) returned 0xa0a0a0 [0083.267] GetNearestColor (hdc=0x4a01098e, color=0x696969) returned 0x696969 [0083.267] GetNearestColor (hdc=0x4a01098e, color=0xa0a0a0) returned 0xa0a0a0 [0083.267] GetNearestColor (hdc=0x4a01098e, color=0x0) returned 0x0 [0083.267] GetNearestColor (hdc=0x4a01098e, color=0xffffff) returned 0xffffff [0083.267] GetNearestColor (hdc=0x4a01098e, color=0xe5e5e5) returned 0xe5e5e5 [0083.267] GetNearestColor (hdc=0x4a01098e, color=0xd7d7d7) returned 0xd7d7d7 [0083.267] GetNearestColor (hdc=0x4a01098e, color=0x0) returned 0x0 [0083.267] RestoreDC (hdc=0x4a01098e, nSavedDC=-1) returned 1 [0083.267] GdipReleaseDC (graphics=0x5bff610, hdc=0x4a01098e) returned 0x0 [0083.267] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.268] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.268] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22cd388) returned 0x0 [0083.268] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.268] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.268] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.268] GdipGetStringFormatFlags (format=0x5bfb098, flags=0x1cedbc) returned 0x0 [0083.268] GdipGetStringFormatTrimming (format=0x5bfb098, trimming=0x1cedbc) returned 0x0 [0083.268] GdipGetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=0x1cedbc) returned 0x0 [0083.268] GdipGetStringFormatAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.268] GdipGetStringFormatLineAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.268] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.268] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.268] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.268] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1cec44) returned 0x0 [0083.269] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22cd464) returned 0x0 [0083.269] GdipSetStringFormatFlags (format=0x5bfff58, flags=0) returned 0x0 [0083.269] GdipSetStringFormatTrimming (format=0x5bfff58, trimming=0x1) returned 0x0 [0083.269] GdipSetStringFormatHotkeyPrefix (format=0x5bfff58, hotkeyPrefix=2) returned 0x0 [0083.269] GdipSetStringFormatAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.269] GdipSetStringFormatLineAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.269] GdipMeasureString (graphics=0x5c01210, string="+", length=1, font=0x5bfab90, layoutRect=0x1cec24, stringFormat=0x5bfff58, boundingBox=0x1cec14, codepointsFitted=0x1cec10, linesFilled=0x1cec0c) returned 0x0 [0083.269] GdipDeleteStringFormat (format=0x5bfff58) returned 0x0 [0083.269] GdipDeleteGraphics (graphics=0x5c01210) returned 0x0 [0083.269] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.270] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.270] GdipCreateRegion (region=0x1cec90) returned 0x0 [0083.270] GdipGetClip (graphics=0x5bff610, region=0x5bfb098) returned 0x0 [0083.270] GdipCreateMatrix (matrix=0x1cec90) returned 0x0 [0083.270] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0083.270] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1ceca8) returned 0x0 [0083.270] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.270] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.273] LocalFree (hMem=0x691830) returned 0x0 [0083.273] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.273] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.273] LocalFree (hMem=0x691830) returned 0x0 [0083.273] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0083.273] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cecd0) returned 0x0 [0083.273] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cecc0) returned 0x0 [0083.273] GdipGetRegionHRgn (region=0x5bfb098, graphics=0x5bff610, hRgn=0x1cecc0) returned 0x0 [0083.273] GdipDeleteRegion (region=0x5bfb098) returned 0x0 [0083.273] GdipGetDC (graphics=0x5bff610, hdc=0x1cecd8) returned 0x0 [0083.273] GetCurrentObject (hdc=0x4a01098e, type=0x1) returned 0x1b00017 [0083.273] GetCurrentObject (hdc=0x4a01098e, type=0x2) returned 0x1900010 [0083.274] GetCurrentObject (hdc=0x4a01098e, type=0x7) returned 0x340509df [0083.274] GetCurrentObject (hdc=0x4a01098e, type=0x6) returned 0x18a0048 [0083.274] SaveDC (hdc=0x4a01098e) returned 1 [0083.274] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x68040861 [0083.274] GetClipRgn (hdc=0x4a01098e, hrgn=0x68040861) returned 0 [0083.274] SelectClipRgn (hdc=0x4a01098e, hrgn=0x7f0406e1) returned 2 [0083.274] DeleteObject (ho=0x68040861) returned 1 [0083.274] DeleteObject (ho=0x7f0406e1) returned 1 [0083.274] OffsetViewportOrgEx (in: hdc=0x4a01098e, x=0, y=0, lppt=0x22cd668 | out: lppt=0x22cd668) returned 1 [0083.274] GetNearestColor (hdc=0x4a01098e, color=0xf0f0f0) returned 0xf0f0f0 [0083.274] CreateSolidBrush (color=0xf0f0f0) returned 0x381009da [0083.274] FillRect (hDC=0x4a01098e, lprc=0x1cecdc, hbr=0x381009da) returned 1 [0083.274] DeleteObject (ho=0x381009da) returned 1 [0083.274] RestoreDC (hdc=0x4a01098e, nSavedDC=-1) returned 1 [0083.274] GdipReleaseDC (graphics=0x5bff610, hdc=0x4a01098e) returned 0x0 [0083.274] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.275] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.275] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22cd6f0) returned 0x0 [0083.275] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.275] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.275] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.275] GdipCreateSolidFill (color=0xff000000, brush=0x1ced74) returned 0x0 [0083.275] GdipDrawString (graphics=0x5bff610, string="+", length=1, font=0x5bfab90, layoutRect=0x1ced5c, stringFormat=0x5bfb098, brush=0x5bfff58) returned 0x0 [0083.275] GdipDeleteBrush (brush=0x5bfff58) returned 0x0 [0083.275] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.275] GetFocus () returned 0x10402 [0083.275] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.276] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.276] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.276] GdipCreateRegion (region=0x1cebc4) returned 0x0 [0083.276] GdipGetClip (graphics=0x5bff610, region=0x5bfb098) returned 0x0 [0083.276] GdipCreateMatrix (matrix=0x1cebc4) returned 0x0 [0083.276] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0083.276] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cebdc) returned 0x0 [0083.276] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.276] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.276] LocalFree (hMem=0x691830) returned 0x0 [0083.276] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.276] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.276] LocalFree (hMem=0x691830) returned 0x0 [0083.276] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0083.276] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cec04) returned 0x0 [0083.276] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cebf4) returned 0x0 [0083.276] GdipGetRegionHRgn (region=0x5bfb098, graphics=0x5bff610, hRgn=0x1cebf4) returned 0x0 [0083.276] GdipDeleteRegion (region=0x5bfb098) returned 0x0 [0083.276] GdipGetDC (graphics=0x5bff610, hdc=0x1cec0c) returned 0x0 [0083.276] GetCurrentObject (hdc=0x4a01098e, type=0x1) returned 0x1b00017 [0083.276] GetCurrentObject (hdc=0x4a01098e, type=0x2) returned 0x1900010 [0083.277] GetCurrentObject (hdc=0x4a01098e, type=0x7) returned 0x340509df [0083.277] GetCurrentObject (hdc=0x4a01098e, type=0x6) returned 0x18a0048 [0083.277] SaveDC (hdc=0x4a01098e) returned 1 [0083.277] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x800406e1 [0083.277] GetClipRgn (hdc=0x4a01098e, hrgn=0x800406e1) returned 0 [0083.277] SelectClipRgn (hdc=0x4a01098e, hrgn=0x69040861) returned 2 [0083.277] DeleteObject (ho=0x800406e1) returned 1 [0083.277] DeleteObject (ho=0x69040861) returned 1 [0083.277] OffsetViewportOrgEx (in: hdc=0x4a01098e, x=0, y=0, lppt=0x22cd90c | out: lppt=0x22cd90c) returned 1 [0083.277] GetROP2 (hdc=0x4a01098e) returned 13 [0083.277] GetBkMode (hdc=0x4a01098e) returned 2 [0083.277] SetBkMode (hdc=0x4a01098e, mode=1) returned 2 [0083.277] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x73009e9 [0083.277] SelectObject (hdc=0x4a01098e, h=0x73009e9) returned 0x1b00017 [0083.277] MoveToEx (in: hdc=0x4a01098e, x=45, y=0, lppt=0x22cd94c | out: lppt=0x22cd94c) returned 1 [0083.277] LineTo (hdc=0x4a01098e, x=0, y=0) returned 1 [0083.277] SetBkMode (hdc=0x4a01098e, mode=2) returned 1 [0083.277] MoveToEx (in: hdc=0x4a01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.277] GetROP2 (hdc=0x4a01098e) returned 13 [0083.278] GetBkMode (hdc=0x4a01098e) returned 2 [0083.278] SetBkMode (hdc=0x4a01098e, mode=1) returned 2 [0083.278] SelectObject (hdc=0x4a01098e, h=0x73009e9) returned 0x73009e9 [0083.278] MoveToEx (in: hdc=0x4a01098e, x=0, y=0, lppt=0x22cd95c | out: lppt=0x22cd95c) returned 1 [0083.278] LineTo (hdc=0x4a01098e, x=0, y=41) returned 1 [0083.278] SetBkMode (hdc=0x4a01098e, mode=2) returned 1 [0083.278] MoveToEx (in: hdc=0x4a01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.278] SelectObject (hdc=0x4a01098e, h=0x1b00017) returned 0x73009e9 [0083.278] DeleteObject (ho=0x73009e9) returned 1 [0083.278] GetROP2 (hdc=0x4a01098e) returned 13 [0083.278] GetBkMode (hdc=0x4a01098e) returned 2 [0083.278] SetBkMode (hdc=0x4a01098e, mode=1) returned 2 [0083.278] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x83009e8 [0083.278] SelectObject (hdc=0x4a01098e, h=0x83009e8) returned 0x1b00017 [0083.278] MoveToEx (in: hdc=0x4a01098e, x=0, y=41, lppt=0x22cd99c | out: lppt=0x22cd99c) returned 1 [0083.278] LineTo (hdc=0x4a01098e, x=45, y=41) returned 1 [0083.278] SetBkMode (hdc=0x4a01098e, mode=2) returned 1 [0083.278] MoveToEx (in: hdc=0x4a01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.278] GetROP2 (hdc=0x4a01098e) returned 13 [0083.278] GetBkMode (hdc=0x4a01098e) returned 2 [0083.279] SetBkMode (hdc=0x4a01098e, mode=1) returned 2 [0083.279] SelectObject (hdc=0x4a01098e, h=0x83009e8) returned 0x83009e8 [0083.279] MoveToEx (in: hdc=0x4a01098e, x=45, y=41, lppt=0x22cd9ac | out: lppt=0x22cd9ac) returned 1 [0083.279] LineTo (hdc=0x4a01098e, x=45, y=-1) returned 1 [0083.279] SetBkMode (hdc=0x4a01098e, mode=2) returned 1 [0083.279] MoveToEx (in: hdc=0x4a01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.279] SelectObject (hdc=0x4a01098e, h=0x1b00017) returned 0x83009e8 [0083.279] DeleteObject (ho=0x83009e8) returned 1 [0083.279] GetROP2 (hdc=0x4a01098e) returned 13 [0083.279] GetBkMode (hdc=0x4a01098e) returned 2 [0083.279] SetBkMode (hdc=0x4a01098e, mode=1) returned 2 [0083.279] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x83009e9 [0083.279] SelectObject (hdc=0x4a01098e, h=0x83009e9) returned 0x1b00017 [0083.279] MoveToEx (in: hdc=0x4a01098e, x=44, y=1, lppt=0x22cd9ec | out: lppt=0x22cd9ec) returned 1 [0083.279] LineTo (hdc=0x4a01098e, x=1, y=1) returned 1 [0083.279] SetBkMode (hdc=0x4a01098e, mode=2) returned 1 [0083.279] MoveToEx (in: hdc=0x4a01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.279] GetROP2 (hdc=0x4a01098e) returned 13 [0083.279] GetBkMode (hdc=0x4a01098e) returned 2 [0083.279] SetBkMode (hdc=0x4a01098e, mode=1) returned 2 [0083.279] SelectObject (hdc=0x4a01098e, h=0x83009e9) returned 0x83009e9 [0083.279] MoveToEx (in: hdc=0x4a01098e, x=1, y=1, lppt=0x22cd9fc | out: lppt=0x22cd9fc) returned 1 [0083.280] LineTo (hdc=0x4a01098e, x=1, y=40) returned 1 [0083.280] SetBkMode (hdc=0x4a01098e, mode=2) returned 1 [0083.280] MoveToEx (in: hdc=0x4a01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.280] SelectObject (hdc=0x4a01098e, h=0x1b00017) returned 0x83009e9 [0083.280] DeleteObject (ho=0x83009e9) returned 1 [0083.280] GetROP2 (hdc=0x4a01098e) returned 13 [0083.280] GetBkMode (hdc=0x4a01098e) returned 2 [0083.280] SetBkMode (hdc=0x4a01098e, mode=1) returned 2 [0083.280] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x93009e8 [0083.280] SelectObject (hdc=0x4a01098e, h=0x93009e8) returned 0x1b00017 [0083.280] MoveToEx (in: hdc=0x4a01098e, x=1, y=40, lppt=0x22cda3c | out: lppt=0x22cda3c) returned 1 [0083.280] LineTo (hdc=0x4a01098e, x=44, y=40) returned 1 [0083.280] SetBkMode (hdc=0x4a01098e, mode=2) returned 1 [0083.280] MoveToEx (in: hdc=0x4a01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.280] GetROP2 (hdc=0x4a01098e) returned 13 [0083.280] GetBkMode (hdc=0x4a01098e) returned 2 [0083.280] SetBkMode (hdc=0x4a01098e, mode=1) returned 2 [0083.280] SelectObject (hdc=0x4a01098e, h=0x93009e8) returned 0x93009e8 [0083.280] MoveToEx (in: hdc=0x4a01098e, x=44, y=40, lppt=0x22cda4c | out: lppt=0x22cda4c) returned 1 [0083.280] LineTo (hdc=0x4a01098e, x=44, y=0) returned 1 [0083.280] SetBkMode (hdc=0x4a01098e, mode=2) returned 1 [0083.280] MoveToEx (in: hdc=0x4a01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.280] SelectObject (hdc=0x4a01098e, h=0x1b00017) returned 0x93009e8 [0083.281] DeleteObject (ho=0x93009e8) returned 1 [0083.281] RestoreDC (hdc=0x4a01098e, nSavedDC=-1) returned 1 [0083.281] GdipReleaseDC (graphics=0x5bff610, hdc=0x4a01098e) returned 0x0 [0083.281] GdipGetDC (graphics=0x5bff610, hdc=0x1ceefc) returned 0x0 [0083.281] BitBlt (hdc=0x220106d6, x=0, y=0, cx=46, cy=42, hdcSrc=0x4a01098e, x1=0, y1=0, rop=0xcc0020) returned 1 [0083.284] GdipReleaseDC (graphics=0x5bff610, hdc=0x4a01098e) returned 0x0 [0083.284] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0083.284] SelectObject (hdc=0x4a01098e, h=0x185000f) returned 0x340509df [0083.284] DeleteDC (hdc=0x4a01098e) returned 1 [0083.285] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0083.285] EndPaint (hWnd=0x203f2, lpPaint=0x1ceea0) returned 1 [0083.285] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.285] IsWindowUnicode (hWnd=0x203f0) returned 1 [0083.285] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.285] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0083.285] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0083.285] BeginPaint (in: hWnd=0x203f0, lpPaint=0x1ceea4 | out: lpPaint=0x1ceea4) returned 0xc0100ae [0083.285] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0083.285] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203f0, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0083.285] GetStockObject (i=5) returned 0x1900015 [0083.286] SelectPalette (hdc=0xc0100ae, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0083.286] CreateCompatibleDC (hdc=0xc0100ae) returned 0x310109e5 [0083.286] SelectObject (hdc=0x310109e5, h=0x340509df) returned 0x185000f [0083.286] GdipCreateFromHDC (hdc=0x310109e5, graphics=0x1ceebc) returned 0x0 [0083.286] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0083.286] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=46, height=42, combineMode=0x0) returned 0x0 [0083.286] GdipCreateMatrix (matrix=0x1cef04) returned 0x0 [0083.286] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0083.286] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cef1c) returned 0x0 [0083.286] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.286] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.286] LocalFree (hMem=0x691830) returned 0x0 [0083.287] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0083.287] GdipCreateRegion (region=0x1cef04) returned 0x0 [0083.287] GdipGetClip (graphics=0x5bff610, region=0x5bfb098) returned 0x0 [0083.287] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cef10) returned 0x0 [0083.287] GdipSaveGraphics (graphics=0x5bff610, state=0x1cef3c) returned 0x0 [0083.287] GdipRestoreGraphics (graphics=0x5bff610, state=0xfda50dbd) returned 0x0 [0083.287] GdipDeleteRegion (region=0x5bfb098) returned 0x0 [0083.287] GdipGetDC (graphics=0x5bff610, hdc=0x1ced24) returned 0x0 [0083.287] GetCurrentObject (hdc=0x310109e5, type=0x1) returned 0x1b00017 [0083.287] GetCurrentObject (hdc=0x310109e5, type=0x2) returned 0x1900010 [0083.287] GetCurrentObject (hdc=0x310109e5, type=0x7) returned 0x340509df [0083.287] GetCurrentObject (hdc=0x310109e5, type=0x6) returned 0x18a0048 [0083.287] SaveDC (hdc=0x310109e5) returned 1 [0083.287] GetNearestColor (hdc=0x310109e5, color=0xf0f0f0) returned 0xf0f0f0 [0083.287] GetNearestColor (hdc=0x310109e5, color=0xa0a0a0) returned 0xa0a0a0 [0083.287] GetNearestColor (hdc=0x310109e5, color=0x696969) returned 0x696969 [0083.287] GetNearestColor (hdc=0x310109e5, color=0xa0a0a0) returned 0xa0a0a0 [0083.287] GetNearestColor (hdc=0x310109e5, color=0x0) returned 0x0 [0083.287] GetNearestColor (hdc=0x310109e5, color=0xffffff) returned 0xffffff [0083.288] GetNearestColor (hdc=0x310109e5, color=0xe5e5e5) returned 0xe5e5e5 [0083.288] GetNearestColor (hdc=0x310109e5, color=0xd7d7d7) returned 0xd7d7d7 [0083.288] GetNearestColor (hdc=0x310109e5, color=0x0) returned 0x0 [0083.288] RestoreDC (hdc=0x310109e5, nSavedDC=-1) returned 1 [0083.288] GdipReleaseDC (graphics=0x5bff610, hdc=0x310109e5) returned 0x0 [0083.288] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.288] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.288] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.288] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22cdf80) returned 0x0 [0083.288] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.288] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.288] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.288] GdipGetStringFormatFlags (format=0x5bfb098, flags=0x1cedbc) returned 0x0 [0083.289] GdipGetStringFormatTrimming (format=0x5bfb098, trimming=0x1cedbc) returned 0x0 [0083.289] GdipGetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=0x1cedbc) returned 0x0 [0083.289] GdipGetStringFormatAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.289] GdipGetStringFormatLineAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.289] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.289] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.289] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.289] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.289] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1cec44) returned 0x0 [0083.289] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22ce05c) returned 0x0 [0083.289] GdipSetStringFormatFlags (format=0x5bfff58, flags=0) returned 0x0 [0083.290] GdipSetStringFormatTrimming (format=0x5bfff58, trimming=0x1) returned 0x0 [0083.290] GdipSetStringFormatHotkeyPrefix (format=0x5bfff58, hotkeyPrefix=2) returned 0x0 [0083.290] GdipSetStringFormatAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.290] GdipSetStringFormatLineAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.290] GdipMeasureString (graphics=0x5c01210, string="-", length=1, font=0x5bfab90, layoutRect=0x1cec24, stringFormat=0x5bfff58, boundingBox=0x1cec14, codepointsFitted=0x1cec10, linesFilled=0x1cec0c) returned 0x0 [0083.290] GdipDeleteStringFormat (format=0x5bfff58) returned 0x0 [0083.290] GdipDeleteGraphics (graphics=0x5c01210) returned 0x0 [0083.290] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.290] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.290] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.290] GdipCreateRegion (region=0x1cec90) returned 0x0 [0083.290] GdipGetClip (graphics=0x5bff610, region=0x5bfb098) returned 0x0 [0083.290] GdipCreateMatrix (matrix=0x1cec90) returned 0x0 [0083.290] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0083.290] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1ceca8) returned 0x0 [0083.290] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.291] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.291] LocalFree (hMem=0x691830) returned 0x0 [0083.291] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.291] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.291] LocalFree (hMem=0x691830) returned 0x0 [0083.291] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0083.291] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cecd0) returned 0x0 [0083.291] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cecc0) returned 0x0 [0083.291] GdipGetRegionHRgn (region=0x5bfb098, graphics=0x5bff610, hRgn=0x1cecc0) returned 0x0 [0083.291] GdipDeleteRegion (region=0x5bfb098) returned 0x0 [0083.291] GdipGetDC (graphics=0x5bff610, hdc=0x1cecd8) returned 0x0 [0083.291] GetCurrentObject (hdc=0x310109e5, type=0x1) returned 0x1b00017 [0083.291] GetCurrentObject (hdc=0x310109e5, type=0x2) returned 0x1900010 [0083.291] GetCurrentObject (hdc=0x310109e5, type=0x7) returned 0x340509df [0083.291] GetCurrentObject (hdc=0x310109e5, type=0x6) returned 0x18a0048 [0083.291] SaveDC (hdc=0x310109e5) returned 1 [0083.291] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6a040861 [0083.291] GetClipRgn (hdc=0x310109e5, hrgn=0x6a040861) returned 0 [0083.291] SelectClipRgn (hdc=0x310109e5, hrgn=0x810406e1) returned 2 [0083.291] DeleteObject (ho=0x6a040861) returned 1 [0083.291] DeleteObject (ho=0x810406e1) returned 1 [0083.291] OffsetViewportOrgEx (in: hdc=0x310109e5, x=0, y=0, lppt=0x22ce260 | out: lppt=0x22ce260) returned 1 [0083.291] GetNearestColor (hdc=0x310109e5, color=0xf0f0f0) returned 0xf0f0f0 [0083.292] CreateSolidBrush (color=0xf0f0f0) returned 0x391009da [0083.292] FillRect (hDC=0x310109e5, lprc=0x1cecdc, hbr=0x391009da) returned 1 [0083.292] DeleteObject (ho=0x391009da) returned 1 [0083.292] RestoreDC (hdc=0x310109e5, nSavedDC=-1) returned 1 [0083.292] GdipReleaseDC (graphics=0x5bff610, hdc=0x310109e5) returned 0x0 [0083.292] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.292] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.292] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22ce2e8) returned 0x0 [0083.292] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.292] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.292] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.292] GdipCreateSolidFill (color=0xff000000, brush=0x1ced74) returned 0x0 [0083.293] GdipDrawString (graphics=0x5bff610, string="-", length=1, font=0x5bfab90, layoutRect=0x1ced5c, stringFormat=0x5bfb098, brush=0x5bfff58) returned 0x0 [0083.293] GdipDeleteBrush (brush=0x5bfff58) returned 0x0 [0083.293] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.293] GetFocus () returned 0x10402 [0083.293] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.293] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.293] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.293] GdipCreateRegion (region=0x1cebc4) returned 0x0 [0083.293] GdipGetClip (graphics=0x5bff610, region=0x5bfb098) returned 0x0 [0083.293] GdipCreateMatrix (matrix=0x1cebc4) returned 0x0 [0083.293] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0083.294] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cebdc) returned 0x0 [0083.294] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.294] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.294] LocalFree (hMem=0x691830) returned 0x0 [0083.294] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.294] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.294] LocalFree (hMem=0x691830) returned 0x0 [0083.294] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0083.294] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cec04) returned 0x0 [0083.294] GdipIsInfiniteRegion (region=0x5bfb098, graphics=0x5bff610, result=0x1cebf4) returned 0x0 [0083.294] GdipGetRegionHRgn (region=0x5bfb098, graphics=0x5bff610, hRgn=0x1cebf4) returned 0x0 [0083.294] GdipDeleteRegion (region=0x5bfb098) returned 0x0 [0083.294] GdipGetDC (graphics=0x5bff610, hdc=0x1cec0c) returned 0x0 [0083.294] GetCurrentObject (hdc=0x310109e5, type=0x1) returned 0x1b00017 [0083.294] GetCurrentObject (hdc=0x310109e5, type=0x2) returned 0x1900010 [0083.294] GetCurrentObject (hdc=0x310109e5, type=0x7) returned 0x340509df [0083.294] GetCurrentObject (hdc=0x310109e5, type=0x6) returned 0x18a0048 [0083.294] SaveDC (hdc=0x310109e5) returned 1 [0083.294] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x820406e1 [0083.294] GetClipRgn (hdc=0x310109e5, hrgn=0x820406e1) returned 0 [0083.294] SelectClipRgn (hdc=0x310109e5, hrgn=0x6b040861) returned 2 [0083.294] DeleteObject (ho=0x820406e1) returned 1 [0083.295] DeleteObject (ho=0x6b040861) returned 1 [0083.295] OffsetViewportOrgEx (in: hdc=0x310109e5, x=0, y=0, lppt=0x22ce504 | out: lppt=0x22ce504) returned 1 [0083.295] GetROP2 (hdc=0x310109e5) returned 13 [0083.295] GetBkMode (hdc=0x310109e5) returned 2 [0083.295] SetBkMode (hdc=0x310109e5, mode=1) returned 2 [0083.295] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0xa3009e8 [0083.295] SelectObject (hdc=0x310109e5, h=0xa3009e8) returned 0x1b00017 [0083.295] MoveToEx (in: hdc=0x310109e5, x=45, y=0, lppt=0x22ce544 | out: lppt=0x22ce544) returned 1 [0083.295] LineTo (hdc=0x310109e5, x=0, y=0) returned 1 [0083.295] SetBkMode (hdc=0x310109e5, mode=2) returned 1 [0083.295] MoveToEx (in: hdc=0x310109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.295] GetROP2 (hdc=0x310109e5) returned 13 [0083.295] GetBkMode (hdc=0x310109e5) returned 2 [0083.295] SetBkMode (hdc=0x310109e5, mode=1) returned 2 [0083.295] SelectObject (hdc=0x310109e5, h=0xa3009e8) returned 0xa3009e8 [0083.295] MoveToEx (in: hdc=0x310109e5, x=0, y=0, lppt=0x22ce554 | out: lppt=0x22ce554) returned 1 [0083.295] LineTo (hdc=0x310109e5, x=0, y=41) returned 1 [0083.295] SetBkMode (hdc=0x310109e5, mode=2) returned 1 [0083.295] MoveToEx (in: hdc=0x310109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.295] SelectObject (hdc=0x310109e5, h=0x1b00017) returned 0xa3009e8 [0083.295] DeleteObject (ho=0xa3009e8) returned 1 [0083.295] GetROP2 (hdc=0x310109e5) returned 13 [0083.295] GetBkMode (hdc=0x310109e5) returned 2 [0083.295] SetBkMode (hdc=0x310109e5, mode=1) returned 2 [0083.296] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x93009e9 [0083.296] SelectObject (hdc=0x310109e5, h=0x93009e9) returned 0x1b00017 [0083.296] MoveToEx (in: hdc=0x310109e5, x=0, y=41, lppt=0x22ce594 | out: lppt=0x22ce594) returned 1 [0083.296] LineTo (hdc=0x310109e5, x=45, y=41) returned 1 [0083.296] SetBkMode (hdc=0x310109e5, mode=2) returned 1 [0083.296] MoveToEx (in: hdc=0x310109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.296] GetROP2 (hdc=0x310109e5) returned 13 [0083.296] GetBkMode (hdc=0x310109e5) returned 2 [0083.296] SetBkMode (hdc=0x310109e5, mode=1) returned 2 [0083.296] SelectObject (hdc=0x310109e5, h=0x93009e9) returned 0x93009e9 [0083.296] MoveToEx (in: hdc=0x310109e5, x=45, y=41, lppt=0x22ce5a4 | out: lppt=0x22ce5a4) returned 1 [0083.296] LineTo (hdc=0x310109e5, x=45, y=-1) returned 1 [0083.296] SetBkMode (hdc=0x310109e5, mode=2) returned 1 [0083.296] MoveToEx (in: hdc=0x310109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.296] SelectObject (hdc=0x310109e5, h=0x1b00017) returned 0x93009e9 [0083.296] DeleteObject (ho=0x93009e9) returned 1 [0083.296] GetROP2 (hdc=0x310109e5) returned 13 [0083.296] GetBkMode (hdc=0x310109e5) returned 2 [0083.296] SetBkMode (hdc=0x310109e5, mode=1) returned 2 [0083.296] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xb3009e8 [0083.296] SelectObject (hdc=0x310109e5, h=0xb3009e8) returned 0x1b00017 [0083.296] MoveToEx (in: hdc=0x310109e5, x=44, y=1, lppt=0x22ce5e4 | out: lppt=0x22ce5e4) returned 1 [0083.296] LineTo (hdc=0x310109e5, x=1, y=1) returned 1 [0083.297] SetBkMode (hdc=0x310109e5, mode=2) returned 1 [0083.297] MoveToEx (in: hdc=0x310109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.297] GetROP2 (hdc=0x310109e5) returned 13 [0083.297] GetBkMode (hdc=0x310109e5) returned 2 [0083.297] SetBkMode (hdc=0x310109e5, mode=1) returned 2 [0083.297] SelectObject (hdc=0x310109e5, h=0xb3009e8) returned 0xb3009e8 [0083.297] MoveToEx (in: hdc=0x310109e5, x=1, y=1, lppt=0x22ce5f4 | out: lppt=0x22ce5f4) returned 1 [0083.297] LineTo (hdc=0x310109e5, x=1, y=40) returned 1 [0083.297] SetBkMode (hdc=0x310109e5, mode=2) returned 1 [0083.297] MoveToEx (in: hdc=0x310109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.297] SelectObject (hdc=0x310109e5, h=0x1b00017) returned 0xb3009e8 [0083.297] DeleteObject (ho=0xb3009e8) returned 1 [0083.297] GetROP2 (hdc=0x310109e5) returned 13 [0083.297] GetBkMode (hdc=0x310109e5) returned 2 [0083.297] SetBkMode (hdc=0x310109e5, mode=1) returned 2 [0083.297] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xa3009e9 [0083.297] SelectObject (hdc=0x310109e5, h=0xa3009e9) returned 0x1b00017 [0083.297] MoveToEx (in: hdc=0x310109e5, x=1, y=40, lppt=0x22ce634 | out: lppt=0x22ce634) returned 1 [0083.297] LineTo (hdc=0x310109e5, x=44, y=40) returned 1 [0083.297] SetBkMode (hdc=0x310109e5, mode=2) returned 1 [0083.297] MoveToEx (in: hdc=0x310109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.297] GetROP2 (hdc=0x310109e5) returned 13 [0083.297] GetBkMode (hdc=0x310109e5) returned 2 [0083.298] SetBkMode (hdc=0x310109e5, mode=1) returned 2 [0083.298] SelectObject (hdc=0x310109e5, h=0xa3009e9) returned 0xa3009e9 [0083.298] MoveToEx (in: hdc=0x310109e5, x=44, y=40, lppt=0x22ce644 | out: lppt=0x22ce644) returned 1 [0083.298] LineTo (hdc=0x310109e5, x=44, y=0) returned 1 [0083.298] SetBkMode (hdc=0x310109e5, mode=2) returned 1 [0083.298] MoveToEx (in: hdc=0x310109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.298] SelectObject (hdc=0x310109e5, h=0x1b00017) returned 0xa3009e9 [0083.298] DeleteObject (ho=0xa3009e9) returned 1 [0083.298] RestoreDC (hdc=0x310109e5, nSavedDC=-1) returned 1 [0083.298] GdipReleaseDC (graphics=0x5bff610, hdc=0x310109e5) returned 0x0 [0083.298] GdipGetDC (graphics=0x5bff610, hdc=0x1ceefc) returned 0x0 [0083.298] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=46, cy=42, hdcSrc=0x310109e5, x1=0, y1=0, rop=0xcc0020) returned 1 [0083.298] GdipReleaseDC (graphics=0x5bff610, hdc=0x310109e5) returned 0x0 [0083.298] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0083.298] SelectObject (hdc=0x310109e5, h=0x185000f) returned 0x340509df [0083.298] DeleteDC (hdc=0x310109e5) returned 1 [0083.298] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0083.298] EndPaint (hWnd=0x203f0, lpPaint=0x1ceea0) returned 1 [0083.299] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.299] IsWindowUnicode (hWnd=0x203ee) returned 1 [0083.299] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.299] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0083.299] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0083.299] BeginPaint (in: hWnd=0x203ee, lpPaint=0x1ceea4 | out: lpPaint=0x1ceea4) returned 0x1b0107ae [0083.299] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ee, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0083.299] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ee, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0083.299] GetStockObject (i=5) returned 0x1900015 [0083.299] SelectPalette (hdc=0x1b0107ae, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0083.299] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x740109e3 [0083.299] SelectObject (hdc=0x740109e3, h=0x340509df) returned 0x185000f [0083.300] GdipCreateFromHDC (hdc=0x740109e3, graphics=0x1ceebc) returned 0x0 [0083.300] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0083.300] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=46, height=42, combineMode=0x0) returned 0x0 [0083.300] GdipCreateMatrix (matrix=0x1cef04) returned 0x0 [0083.300] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0083.300] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cef1c) returned 0x0 [0083.300] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.300] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.300] LocalFree (hMem=0x691830) returned 0x0 [0083.300] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0083.300] GdipCreateRegion (region=0x1cef04) returned 0x0 [0083.300] GdipGetClip (graphics=0x5bff610, region=0x5c01628) returned 0x0 [0083.300] GdipIsInfiniteRegion (region=0x5c01628, graphics=0x5bff610, result=0x1cef10) returned 0x0 [0083.301] GdipSaveGraphics (graphics=0x5bff610, state=0x1cef3c) returned 0x0 [0083.301] GdipRestoreGraphics (graphics=0x5bff610, state=0xfda20dbd) returned 0x0 [0083.301] GdipDeleteRegion (region=0x5c01628) returned 0x0 [0083.301] GdipGetDC (graphics=0x5bff610, hdc=0x1ced24) returned 0x0 [0083.301] GetCurrentObject (hdc=0x740109e3, type=0x1) returned 0x1b00017 [0083.301] GetCurrentObject (hdc=0x740109e3, type=0x2) returned 0x1900010 [0083.301] GetCurrentObject (hdc=0x740109e3, type=0x7) returned 0x340509df [0083.301] GetCurrentObject (hdc=0x740109e3, type=0x6) returned 0x18a0048 [0083.301] SaveDC (hdc=0x740109e3) returned 1 [0083.301] GetNearestColor (hdc=0x740109e3, color=0xf0f0f0) returned 0xf0f0f0 [0083.303] GetNearestColor (hdc=0x740109e3, color=0xa0a0a0) returned 0xa0a0a0 [0083.303] GetNearestColor (hdc=0x740109e3, color=0x696969) returned 0x696969 [0083.303] GetNearestColor (hdc=0x740109e3, color=0xa0a0a0) returned 0xa0a0a0 [0083.303] GetNearestColor (hdc=0x740109e3, color=0x0) returned 0x0 [0083.303] GetNearestColor (hdc=0x740109e3, color=0xffffff) returned 0xffffff [0083.303] GetNearestColor (hdc=0x740109e3, color=0xe5e5e5) returned 0xe5e5e5 [0083.303] GetNearestColor (hdc=0x740109e3, color=0xd7d7d7) returned 0xd7d7d7 [0083.303] GetNearestColor (hdc=0x740109e3, color=0x0) returned 0x0 [0083.303] RestoreDC (hdc=0x740109e3, nSavedDC=-1) returned 1 [0083.304] GdipReleaseDC (graphics=0x5bff610, hdc=0x740109e3) returned 0x0 [0083.304] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.304] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.304] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.304] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22ceb78) returned 0x0 [0083.304] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.304] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.304] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.304] GdipGetStringFormatFlags (format=0x5bfb098, flags=0x1cedbc) returned 0x0 [0083.304] GdipGetStringFormatTrimming (format=0x5bfb098, trimming=0x1cedbc) returned 0x0 [0083.304] GdipGetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=0x1cedbc) returned 0x0 [0083.304] GdipGetStringFormatAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.304] GdipGetStringFormatLineAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.304] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.305] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.305] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.305] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1cec44) returned 0x0 [0083.305] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22cec54) returned 0x0 [0083.305] GdipSetStringFormatFlags (format=0x5bfff58, flags=0) returned 0x0 [0083.305] GdipSetStringFormatTrimming (format=0x5bfff58, trimming=0x1) returned 0x0 [0083.305] GdipSetStringFormatHotkeyPrefix (format=0x5bfff58, hotkeyPrefix=2) returned 0x0 [0083.305] GdipSetStringFormatAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.305] GdipSetStringFormatLineAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.305] GdipMeasureString (graphics=0x5c02218, string="x", length=1, font=0x5bfab90, layoutRect=0x1cec24, stringFormat=0x5bfff58, boundingBox=0x1cec14, codepointsFitted=0x1cec10, linesFilled=0x1cec0c) returned 0x0 [0083.305] GdipDeleteStringFormat (format=0x5bfff58) returned 0x0 [0083.305] GdipDeleteGraphics (graphics=0x5c02218) returned 0x0 [0083.306] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.306] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.306] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.306] GdipCreateRegion (region=0x1cec90) returned 0x0 [0083.306] GdipGetClip (graphics=0x5bff610, region=0x5c01fb8) returned 0x0 [0083.306] GdipCreateMatrix (matrix=0x1cec90) returned 0x0 [0083.306] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0083.306] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1ceca8) returned 0x0 [0083.306] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.306] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.306] LocalFree (hMem=0x691830) returned 0x0 [0083.306] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.306] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.306] LocalFree (hMem=0x691830) returned 0x0 [0083.306] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0083.306] GdipIsInfiniteRegion (region=0x5c01fb8, graphics=0x5bff610, result=0x1cecd0) returned 0x0 [0083.307] GdipIsInfiniteRegion (region=0x5c01fb8, graphics=0x5bff610, result=0x1cecc0) returned 0x0 [0083.307] GdipGetRegionHRgn (region=0x5c01fb8, graphics=0x5bff610, hRgn=0x1cecc0) returned 0x0 [0083.307] GdipDeleteRegion (region=0x5c01fb8) returned 0x0 [0083.307] GdipGetDC (graphics=0x5bff610, hdc=0x1cecd8) returned 0x0 [0083.307] GetCurrentObject (hdc=0x740109e3, type=0x1) returned 0x1b00017 [0083.307] GetCurrentObject (hdc=0x740109e3, type=0x2) returned 0x1900010 [0083.307] GetCurrentObject (hdc=0x740109e3, type=0x7) returned 0x340509df [0083.307] GetCurrentObject (hdc=0x740109e3, type=0x6) returned 0x18a0048 [0083.307] SaveDC (hdc=0x740109e3) returned 1 [0083.307] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6c040861 [0083.307] GetClipRgn (hdc=0x740109e3, hrgn=0x6c040861) returned 0 [0083.307] SelectClipRgn (hdc=0x740109e3, hrgn=0x830406e1) returned 2 [0083.307] DeleteObject (ho=0x6c040861) returned 1 [0083.307] DeleteObject (ho=0x830406e1) returned 1 [0083.307] OffsetViewportOrgEx (in: hdc=0x740109e3, x=0, y=0, lppt=0x22cee58 | out: lppt=0x22cee58) returned 1 [0083.307] GetNearestColor (hdc=0x740109e3, color=0xf0f0f0) returned 0xf0f0f0 [0083.307] CreateSolidBrush (color=0xf0f0f0) returned 0x3a1009da [0083.307] FillRect (hDC=0x740109e3, lprc=0x1cecdc, hbr=0x3a1009da) returned 1 [0083.307] DeleteObject (ho=0x3a1009da) returned 1 [0083.307] RestoreDC (hdc=0x740109e3, nSavedDC=-1) returned 1 [0083.307] GdipReleaseDC (graphics=0x5bff610, hdc=0x740109e3) returned 0x0 [0083.308] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.308] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.308] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22ceee0) returned 0x0 [0083.308] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.308] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.308] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.308] GdipCreateSolidFill (color=0xff000000, brush=0x1ced74) returned 0x0 [0083.308] GdipDrawString (graphics=0x5bff610, string="x", length=1, font=0x5bfab90, layoutRect=0x1ced5c, stringFormat=0x5bfb098, brush=0x5bfff58) returned 0x0 [0083.319] GdipDeleteBrush (brush=0x5bfff58) returned 0x0 [0083.319] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.319] GetFocus () returned 0x10402 [0083.319] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.320] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.320] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.320] GdipCreateRegion (region=0x1cebc4) returned 0x0 [0083.320] GdipGetClip (graphics=0x5bff610, region=0x5c01a18) returned 0x0 [0083.320] GdipCreateMatrix (matrix=0x1cebc4) returned 0x0 [0083.320] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0083.320] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cebdc) returned 0x0 [0083.320] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.320] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.320] LocalFree (hMem=0x691830) returned 0x0 [0083.320] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.320] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.320] LocalFree (hMem=0x691830) returned 0x0 [0083.320] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0083.320] GdipIsInfiniteRegion (region=0x5c01a18, graphics=0x5bff610, result=0x1cec04) returned 0x0 [0083.320] GdipIsInfiniteRegion (region=0x5c01a18, graphics=0x5bff610, result=0x1cebf4) returned 0x0 [0083.320] GdipGetRegionHRgn (region=0x5c01a18, graphics=0x5bff610, hRgn=0x1cebf4) returned 0x0 [0083.320] GdipDeleteRegion (region=0x5c01a18) returned 0x0 [0083.320] GdipGetDC (graphics=0x5bff610, hdc=0x1cec0c) returned 0x0 [0083.320] GetCurrentObject (hdc=0x740109e3, type=0x1) returned 0x1b00017 [0083.321] GetCurrentObject (hdc=0x740109e3, type=0x2) returned 0x1900010 [0083.321] GetCurrentObject (hdc=0x740109e3, type=0x7) returned 0x340509df [0083.321] GetCurrentObject (hdc=0x740109e3, type=0x6) returned 0x18a0048 [0083.321] SaveDC (hdc=0x740109e3) returned 1 [0083.321] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x840406e1 [0083.321] GetClipRgn (hdc=0x740109e3, hrgn=0x840406e1) returned 0 [0083.321] SelectClipRgn (hdc=0x740109e3, hrgn=0x6d040861) returned 2 [0083.321] DeleteObject (ho=0x840406e1) returned 1 [0083.321] DeleteObject (ho=0x6d040861) returned 1 [0083.321] OffsetViewportOrgEx (in: hdc=0x740109e3, x=0, y=0, lppt=0x22cf0fc | out: lppt=0x22cf0fc) returned 1 [0083.321] GetROP2 (hdc=0x740109e3) returned 13 [0083.321] GetBkMode (hdc=0x740109e3) returned 2 [0083.321] SetBkMode (hdc=0x740109e3, mode=1) returned 2 [0083.321] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0xb3009e9 [0083.321] SelectObject (hdc=0x740109e3, h=0xb3009e9) returned 0x1b00017 [0083.321] MoveToEx (in: hdc=0x740109e3, x=45, y=0, lppt=0x22cf13c | out: lppt=0x22cf13c) returned 1 [0083.321] LineTo (hdc=0x740109e3, x=0, y=0) returned 1 [0083.321] SetBkMode (hdc=0x740109e3, mode=2) returned 1 [0083.321] MoveToEx (in: hdc=0x740109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.321] GetROP2 (hdc=0x740109e3) returned 13 [0083.322] GetBkMode (hdc=0x740109e3) returned 2 [0083.322] SetBkMode (hdc=0x740109e3, mode=1) returned 2 [0083.322] SelectObject (hdc=0x740109e3, h=0xb3009e9) returned 0xb3009e9 [0083.322] MoveToEx (in: hdc=0x740109e3, x=0, y=0, lppt=0x22cf14c | out: lppt=0x22cf14c) returned 1 [0083.322] LineTo (hdc=0x740109e3, x=0, y=41) returned 1 [0083.322] SetBkMode (hdc=0x740109e3, mode=2) returned 1 [0083.322] MoveToEx (in: hdc=0x740109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.322] SelectObject (hdc=0x740109e3, h=0x1b00017) returned 0xb3009e9 [0083.322] DeleteObject (ho=0xb3009e9) returned 1 [0083.322] GetROP2 (hdc=0x740109e3) returned 13 [0083.322] GetBkMode (hdc=0x740109e3) returned 2 [0083.322] SetBkMode (hdc=0x740109e3, mode=1) returned 2 [0083.322] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0xc3009e8 [0083.322] SelectObject (hdc=0x740109e3, h=0xc3009e8) returned 0x1b00017 [0083.322] MoveToEx (in: hdc=0x740109e3, x=0, y=41, lppt=0x22cf18c | out: lppt=0x22cf18c) returned 1 [0083.322] LineTo (hdc=0x740109e3, x=45, y=41) returned 1 [0083.322] SetBkMode (hdc=0x740109e3, mode=2) returned 1 [0083.322] MoveToEx (in: hdc=0x740109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.322] GetROP2 (hdc=0x740109e3) returned 13 [0083.322] GetBkMode (hdc=0x740109e3) returned 2 [0083.322] SetBkMode (hdc=0x740109e3, mode=1) returned 2 [0083.322] SelectObject (hdc=0x740109e3, h=0xc3009e8) returned 0xc3009e8 [0083.323] MoveToEx (in: hdc=0x740109e3, x=45, y=41, lppt=0x22cf19c | out: lppt=0x22cf19c) returned 1 [0083.323] LineTo (hdc=0x740109e3, x=45, y=-1) returned 1 [0083.323] SetBkMode (hdc=0x740109e3, mode=2) returned 1 [0083.323] MoveToEx (in: hdc=0x740109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.323] SelectObject (hdc=0x740109e3, h=0x1b00017) returned 0xc3009e8 [0083.323] DeleteObject (ho=0xc3009e8) returned 1 [0083.323] GetROP2 (hdc=0x740109e3) returned 13 [0083.323] GetBkMode (hdc=0x740109e3) returned 2 [0083.323] SetBkMode (hdc=0x740109e3, mode=1) returned 2 [0083.323] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xc3009e9 [0083.323] SelectObject (hdc=0x740109e3, h=0xc3009e9) returned 0x1b00017 [0083.323] MoveToEx (in: hdc=0x740109e3, x=44, y=1, lppt=0x22cf1dc | out: lppt=0x22cf1dc) returned 1 [0083.323] LineTo (hdc=0x740109e3, x=1, y=1) returned 1 [0083.323] SetBkMode (hdc=0x740109e3, mode=2) returned 1 [0083.323] MoveToEx (in: hdc=0x740109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.323] GetROP2 (hdc=0x740109e3) returned 13 [0083.323] GetBkMode (hdc=0x740109e3) returned 2 [0083.323] SetBkMode (hdc=0x740109e3, mode=1) returned 2 [0083.323] SelectObject (hdc=0x740109e3, h=0xc3009e9) returned 0xc3009e9 [0083.323] MoveToEx (in: hdc=0x740109e3, x=1, y=1, lppt=0x22cf1ec | out: lppt=0x22cf1ec) returned 1 [0083.324] LineTo (hdc=0x740109e3, x=1, y=40) returned 1 [0083.324] SetBkMode (hdc=0x740109e3, mode=2) returned 1 [0083.324] MoveToEx (in: hdc=0x740109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.324] SelectObject (hdc=0x740109e3, h=0x1b00017) returned 0xc3009e9 [0083.324] DeleteObject (ho=0xc3009e9) returned 1 [0083.324] GetROP2 (hdc=0x740109e3) returned 13 [0083.324] GetBkMode (hdc=0x740109e3) returned 2 [0083.324] SetBkMode (hdc=0x740109e3, mode=1) returned 2 [0083.324] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xd3009e8 [0083.324] SelectObject (hdc=0x740109e3, h=0xd3009e8) returned 0x1b00017 [0083.324] MoveToEx (in: hdc=0x740109e3, x=1, y=40, lppt=0x22cf22c | out: lppt=0x22cf22c) returned 1 [0083.324] LineTo (hdc=0x740109e3, x=44, y=40) returned 1 [0083.324] SetBkMode (hdc=0x740109e3, mode=2) returned 1 [0083.324] MoveToEx (in: hdc=0x740109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.324] GetROP2 (hdc=0x740109e3) returned 13 [0083.324] GetBkMode (hdc=0x740109e3) returned 2 [0083.324] SetBkMode (hdc=0x740109e3, mode=1) returned 2 [0083.324] SelectObject (hdc=0x740109e3, h=0xd3009e8) returned 0xd3009e8 [0083.324] MoveToEx (in: hdc=0x740109e3, x=44, y=40, lppt=0x22cf23c | out: lppt=0x22cf23c) returned 1 [0083.324] LineTo (hdc=0x740109e3, x=44, y=0) returned 1 [0083.324] SetBkMode (hdc=0x740109e3, mode=2) returned 1 [0083.324] MoveToEx (in: hdc=0x740109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.325] SelectObject (hdc=0x740109e3, h=0x1b00017) returned 0xd3009e8 [0083.325] DeleteObject (ho=0xd3009e8) returned 1 [0083.325] RestoreDC (hdc=0x740109e3, nSavedDC=-1) returned 1 [0083.325] GdipReleaseDC (graphics=0x5bff610, hdc=0x740109e3) returned 0x0 [0083.325] GdipGetDC (graphics=0x5bff610, hdc=0x1ceefc) returned 0x0 [0083.325] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=46, cy=42, hdcSrc=0x740109e3, x1=0, y1=0, rop=0xcc0020) returned 1 [0083.328] GdipReleaseDC (graphics=0x5bff610, hdc=0x740109e3) returned 0x0 [0083.328] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0083.328] SelectObject (hdc=0x740109e3, h=0x185000f) returned 0x340509df [0083.328] DeleteDC (hdc=0x740109e3) returned 1 [0083.328] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0083.329] EndPaint (hWnd=0x203ee, lpPaint=0x1ceea0) returned 1 [0083.329] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.329] IsWindowUnicode (hWnd=0x203ec) returned 1 [0083.329] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.329] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0083.329] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0083.329] BeginPaint (in: hWnd=0x203ec, lpPaint=0x1ceea4 | out: lpPaint=0x1ceea4) returned 0x220106d6 [0083.329] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ec, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0083.329] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ec, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0083.329] GetStockObject (i=5) returned 0x1900015 [0083.329] SelectPalette (hdc=0x220106d6, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0083.330] CreateCompatibleDC (hdc=0x220106d6) returned 0x5401098e [0083.330] SelectObject (hdc=0x5401098e, h=0x340509df) returned 0x185000f [0083.330] GdipCreateFromHDC (hdc=0x5401098e, graphics=0x1ceebc) returned 0x0 [0083.330] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0083.330] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=46, height=42, combineMode=0x0) returned 0x0 [0083.330] GdipCreateMatrix (matrix=0x1cef04) returned 0x0 [0083.330] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0083.330] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cef1c) returned 0x0 [0083.330] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.330] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.330] LocalFree (hMem=0x691830) returned 0x0 [0083.330] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0083.330] GdipCreateRegion (region=0x1cef04) returned 0x0 [0083.330] GdipGetClip (graphics=0x5bff610, region=0x5c01fb8) returned 0x0 [0083.330] GdipIsInfiniteRegion (region=0x5c01fb8, graphics=0x5bff610, result=0x1cef10) returned 0x0 [0083.330] GdipSaveGraphics (graphics=0x5bff610, state=0x1cef3c) returned 0x0 [0083.330] GdipRestoreGraphics (graphics=0x5bff610, state=0xfd9f0dbd) returned 0x0 [0083.330] GdipDeleteRegion (region=0x5c01fb8) returned 0x0 [0083.330] GdipGetDC (graphics=0x5bff610, hdc=0x1ced24) returned 0x0 [0083.331] GetCurrentObject (hdc=0x5401098e, type=0x1) returned 0x1b00017 [0083.331] GetCurrentObject (hdc=0x5401098e, type=0x2) returned 0x1900010 [0083.331] GetCurrentObject (hdc=0x5401098e, type=0x7) returned 0x340509df [0083.331] GetCurrentObject (hdc=0x5401098e, type=0x6) returned 0x18a0048 [0083.331] SaveDC (hdc=0x5401098e) returned 1 [0083.331] GetNearestColor (hdc=0x5401098e, color=0xf0f0f0) returned 0xf0f0f0 [0083.331] GetNearestColor (hdc=0x5401098e, color=0xa0a0a0) returned 0xa0a0a0 [0083.331] GetNearestColor (hdc=0x5401098e, color=0x696969) returned 0x696969 [0083.331] GetNearestColor (hdc=0x5401098e, color=0xa0a0a0) returned 0xa0a0a0 [0083.331] GetNearestColor (hdc=0x5401098e, color=0x0) returned 0x0 [0083.331] GetNearestColor (hdc=0x5401098e, color=0xffffff) returned 0xffffff [0083.331] GetNearestColor (hdc=0x5401098e, color=0xe5e5e5) returned 0xe5e5e5 [0083.331] GetNearestColor (hdc=0x5401098e, color=0xd7d7d7) returned 0xd7d7d7 [0083.331] GetNearestColor (hdc=0x5401098e, color=0x0) returned 0x0 [0083.331] RestoreDC (hdc=0x5401098e, nSavedDC=-1) returned 1 [0083.331] GdipReleaseDC (graphics=0x5bff610, hdc=0x5401098e) returned 0x0 [0083.332] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.332] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.332] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22cf770) returned 0x0 [0083.332] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.332] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.332] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.332] GdipGetStringFormatFlags (format=0x5bfb098, flags=0x1cedbc) returned 0x0 [0083.332] GdipGetStringFormatTrimming (format=0x5bfb098, trimming=0x1cedbc) returned 0x0 [0083.332] GdipGetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=0x1cedbc) returned 0x0 [0083.332] GdipGetStringFormatAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.332] GdipGetStringFormatLineAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.332] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.332] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.334] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.334] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1cec44) returned 0x0 [0083.335] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22cf84c) returned 0x0 [0083.335] GdipSetStringFormatFlags (format=0x5bfff58, flags=0) returned 0x0 [0083.335] GdipSetStringFormatTrimming (format=0x5bfff58, trimming=0x1) returned 0x0 [0083.335] GdipSetStringFormatHotkeyPrefix (format=0x5bfff58, hotkeyPrefix=2) returned 0x0 [0083.335] GdipSetStringFormatAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.335] GdipSetStringFormatLineAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.335] GdipMeasureString (graphics=0x5c02218, string="/", length=1, font=0x5bfab90, layoutRect=0x1cec24, stringFormat=0x5bfff58, boundingBox=0x1cec14, codepointsFitted=0x1cec10, linesFilled=0x1cec0c) returned 0x0 [0083.335] GdipDeleteStringFormat (format=0x5bfff58) returned 0x0 [0083.335] GdipDeleteGraphics (graphics=0x5c02218) returned 0x0 [0083.335] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.335] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.335] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.335] GdipCreateRegion (region=0x1cec90) returned 0x0 [0083.335] GdipGetClip (graphics=0x5bff610, region=0x5c017d8) returned 0x0 [0083.335] GdipCreateMatrix (matrix=0x1cec90) returned 0x0 [0083.336] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0083.336] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1ceca8) returned 0x0 [0083.336] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.336] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.336] LocalFree (hMem=0x691830) returned 0x0 [0083.336] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.336] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.336] LocalFree (hMem=0x691830) returned 0x0 [0083.336] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0083.336] GdipIsInfiniteRegion (region=0x5c017d8, graphics=0x5bff610, result=0x1cecd0) returned 0x0 [0083.336] GdipIsInfiniteRegion (region=0x5c017d8, graphics=0x5bff610, result=0x1cecc0) returned 0x0 [0083.336] GdipGetRegionHRgn (region=0x5c017d8, graphics=0x5bff610, hRgn=0x1cecc0) returned 0x0 [0083.336] GdipDeleteRegion (region=0x5c017d8) returned 0x0 [0083.336] GdipGetDC (graphics=0x5bff610, hdc=0x1cecd8) returned 0x0 [0083.336] GetCurrentObject (hdc=0x5401098e, type=0x1) returned 0x1b00017 [0083.336] GetCurrentObject (hdc=0x5401098e, type=0x2) returned 0x1900010 [0083.336] GetCurrentObject (hdc=0x5401098e, type=0x7) returned 0x340509df [0083.336] GetCurrentObject (hdc=0x5401098e, type=0x6) returned 0x18a0048 [0083.336] SaveDC (hdc=0x5401098e) returned 1 [0083.336] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6e040861 [0083.336] GetClipRgn (hdc=0x5401098e, hrgn=0x6e040861) returned 0 [0083.336] SelectClipRgn (hdc=0x5401098e, hrgn=0x850406e1) returned 2 [0083.337] DeleteObject (ho=0x6e040861) returned 1 [0083.337] DeleteObject (ho=0x850406e1) returned 1 [0083.337] OffsetViewportOrgEx (in: hdc=0x5401098e, x=0, y=0, lppt=0x22cfa50 | out: lppt=0x22cfa50) returned 1 [0083.337] GetNearestColor (hdc=0x5401098e, color=0xf0f0f0) returned 0xf0f0f0 [0083.337] CreateSolidBrush (color=0xf0f0f0) returned 0x3b1009da [0083.337] FillRect (hDC=0x5401098e, lprc=0x1cecdc, hbr=0x3b1009da) returned 1 [0083.337] DeleteObject (ho=0x3b1009da) returned 1 [0083.337] RestoreDC (hdc=0x5401098e, nSavedDC=-1) returned 1 [0083.337] GdipReleaseDC (graphics=0x5bff610, hdc=0x5401098e) returned 0x0 [0083.337] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.337] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.337] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.337] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22cfad8) returned 0x0 [0083.338] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.338] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.338] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.338] GdipCreateSolidFill (color=0xff000000, brush=0x1ced74) returned 0x0 [0083.338] GdipDrawString (graphics=0x5bff610, string="/", length=1, font=0x5bfab90, layoutRect=0x1ced5c, stringFormat=0x5bfb098, brush=0x5bfff58) returned 0x0 [0083.338] GdipDeleteBrush (brush=0x5bfff58) returned 0x0 [0083.338] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.338] GetFocus () returned 0x10402 [0083.338] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.339] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.339] GdipCreateRegion (region=0x1cebc4) returned 0x0 [0083.339] GdipGetClip (graphics=0x5bff610, region=0x5c01bc8) returned 0x0 [0083.339] GdipCreateMatrix (matrix=0x1cebc4) returned 0x0 [0083.339] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0083.339] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cebdc) returned 0x0 [0083.339] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.339] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.339] LocalFree (hMem=0x691830) returned 0x0 [0083.339] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.339] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.339] LocalFree (hMem=0x691830) returned 0x0 [0083.339] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0083.339] GdipIsInfiniteRegion (region=0x5c01bc8, graphics=0x5bff610, result=0x1cec04) returned 0x0 [0083.339] GdipIsInfiniteRegion (region=0x5c01bc8, graphics=0x5bff610, result=0x1cebf4) returned 0x0 [0083.339] GdipGetRegionHRgn (region=0x5c01bc8, graphics=0x5bff610, hRgn=0x1cebf4) returned 0x0 [0083.339] GdipDeleteRegion (region=0x5c01bc8) returned 0x0 [0083.339] GdipGetDC (graphics=0x5bff610, hdc=0x1cec0c) returned 0x0 [0083.339] GetCurrentObject (hdc=0x5401098e, type=0x1) returned 0x1b00017 [0083.339] GetCurrentObject (hdc=0x5401098e, type=0x2) returned 0x1900010 [0083.339] GetCurrentObject (hdc=0x5401098e, type=0x7) returned 0x340509df [0083.339] GetCurrentObject (hdc=0x5401098e, type=0x6) returned 0x18a0048 [0083.340] SaveDC (hdc=0x5401098e) returned 1 [0083.340] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x860406e1 [0083.340] GetClipRgn (hdc=0x5401098e, hrgn=0x860406e1) returned 0 [0083.340] SelectClipRgn (hdc=0x5401098e, hrgn=0x6f040861) returned 2 [0083.340] DeleteObject (ho=0x860406e1) returned 1 [0083.340] DeleteObject (ho=0x6f040861) returned 1 [0083.340] OffsetViewportOrgEx (in: hdc=0x5401098e, x=0, y=0, lppt=0x22cfcf4 | out: lppt=0x22cfcf4) returned 1 [0083.340] GetROP2 (hdc=0x5401098e) returned 13 [0083.340] GetBkMode (hdc=0x5401098e) returned 2 [0083.340] SetBkMode (hdc=0x5401098e, mode=1) returned 2 [0083.340] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0xe3009e8 [0083.340] SelectObject (hdc=0x5401098e, h=0xe3009e8) returned 0x1b00017 [0083.340] MoveToEx (in: hdc=0x5401098e, x=45, y=0, lppt=0x22cfd34 | out: lppt=0x22cfd34) returned 1 [0083.340] LineTo (hdc=0x5401098e, x=0, y=0) returned 1 [0083.340] SetBkMode (hdc=0x5401098e, mode=2) returned 1 [0083.340] MoveToEx (in: hdc=0x5401098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.340] GetROP2 (hdc=0x5401098e) returned 13 [0083.340] GetBkMode (hdc=0x5401098e) returned 2 [0083.340] SetBkMode (hdc=0x5401098e, mode=1) returned 2 [0083.340] SelectObject (hdc=0x5401098e, h=0xe3009e8) returned 0xe3009e8 [0083.340] MoveToEx (in: hdc=0x5401098e, x=0, y=0, lppt=0x22cfd44 | out: lppt=0x22cfd44) returned 1 [0083.340] LineTo (hdc=0x5401098e, x=0, y=41) returned 1 [0083.340] SetBkMode (hdc=0x5401098e, mode=2) returned 1 [0083.341] MoveToEx (in: hdc=0x5401098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.341] SelectObject (hdc=0x5401098e, h=0x1b00017) returned 0xe3009e8 [0083.341] DeleteObject (ho=0xe3009e8) returned 1 [0083.341] GetROP2 (hdc=0x5401098e) returned 13 [0083.341] GetBkMode (hdc=0x5401098e) returned 2 [0083.341] SetBkMode (hdc=0x5401098e, mode=1) returned 2 [0083.341] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0xd3009e9 [0083.341] SelectObject (hdc=0x5401098e, h=0xd3009e9) returned 0x1b00017 [0083.341] MoveToEx (in: hdc=0x5401098e, x=0, y=41, lppt=0x22cfd84 | out: lppt=0x22cfd84) returned 1 [0083.341] LineTo (hdc=0x5401098e, x=45, y=41) returned 1 [0083.341] SetBkMode (hdc=0x5401098e, mode=2) returned 1 [0083.341] MoveToEx (in: hdc=0x5401098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.341] GetROP2 (hdc=0x5401098e) returned 13 [0083.341] GetBkMode (hdc=0x5401098e) returned 2 [0083.341] SetBkMode (hdc=0x5401098e, mode=1) returned 2 [0083.341] SelectObject (hdc=0x5401098e, h=0xd3009e9) returned 0xd3009e9 [0083.341] MoveToEx (in: hdc=0x5401098e, x=45, y=41, lppt=0x22cfd94 | out: lppt=0x22cfd94) returned 1 [0083.341] LineTo (hdc=0x5401098e, x=45, y=-1) returned 1 [0083.341] SetBkMode (hdc=0x5401098e, mode=2) returned 1 [0083.341] MoveToEx (in: hdc=0x5401098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.341] SelectObject (hdc=0x5401098e, h=0x1b00017) returned 0xd3009e9 [0083.341] DeleteObject (ho=0xd3009e9) returned 1 [0083.341] GetROP2 (hdc=0x5401098e) returned 13 [0083.342] GetBkMode (hdc=0x5401098e) returned 2 [0083.342] SetBkMode (hdc=0x5401098e, mode=1) returned 2 [0083.342] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xf3009e8 [0083.342] SelectObject (hdc=0x5401098e, h=0xf3009e8) returned 0x1b00017 [0083.342] MoveToEx (in: hdc=0x5401098e, x=44, y=1, lppt=0x22cfdd4 | out: lppt=0x22cfdd4) returned 1 [0083.342] LineTo (hdc=0x5401098e, x=1, y=1) returned 1 [0083.342] SetBkMode (hdc=0x5401098e, mode=2) returned 1 [0083.342] MoveToEx (in: hdc=0x5401098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.342] GetROP2 (hdc=0x5401098e) returned 13 [0083.342] GetBkMode (hdc=0x5401098e) returned 2 [0083.342] SetBkMode (hdc=0x5401098e, mode=1) returned 2 [0083.342] SelectObject (hdc=0x5401098e, h=0xf3009e8) returned 0xf3009e8 [0083.342] MoveToEx (in: hdc=0x5401098e, x=1, y=1, lppt=0x22cfde4 | out: lppt=0x22cfde4) returned 1 [0083.342] LineTo (hdc=0x5401098e, x=1, y=40) returned 1 [0083.342] SetBkMode (hdc=0x5401098e, mode=2) returned 1 [0083.342] MoveToEx (in: hdc=0x5401098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.342] SelectObject (hdc=0x5401098e, h=0x1b00017) returned 0xf3009e8 [0083.342] DeleteObject (ho=0xf3009e8) returned 1 [0083.342] GetROP2 (hdc=0x5401098e) returned 13 [0083.342] GetBkMode (hdc=0x5401098e) returned 2 [0083.342] SetBkMode (hdc=0x5401098e, mode=1) returned 2 [0083.342] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xe3009e9 [0083.342] SelectObject (hdc=0x5401098e, h=0xe3009e9) returned 0x1b00017 [0083.342] MoveToEx (in: hdc=0x5401098e, x=1, y=40, lppt=0x22cfe24 | out: lppt=0x22cfe24) returned 1 [0083.343] LineTo (hdc=0x5401098e, x=44, y=40) returned 1 [0083.343] SetBkMode (hdc=0x5401098e, mode=2) returned 1 [0083.343] MoveToEx (in: hdc=0x5401098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.343] GetROP2 (hdc=0x5401098e) returned 13 [0083.343] GetBkMode (hdc=0x5401098e) returned 2 [0083.343] SetBkMode (hdc=0x5401098e, mode=1) returned 2 [0083.343] SelectObject (hdc=0x5401098e, h=0xe3009e9) returned 0xe3009e9 [0083.343] MoveToEx (in: hdc=0x5401098e, x=44, y=40, lppt=0x22cfe34 | out: lppt=0x22cfe34) returned 1 [0083.343] LineTo (hdc=0x5401098e, x=44, y=0) returned 1 [0083.343] SetBkMode (hdc=0x5401098e, mode=2) returned 1 [0083.343] MoveToEx (in: hdc=0x5401098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.343] SelectObject (hdc=0x5401098e, h=0x1b00017) returned 0xe3009e9 [0083.343] DeleteObject (ho=0xe3009e9) returned 1 [0083.343] RestoreDC (hdc=0x5401098e, nSavedDC=-1) returned 1 [0083.343] GdipReleaseDC (graphics=0x5bff610, hdc=0x5401098e) returned 0x0 [0083.343] GdipGetDC (graphics=0x5bff610, hdc=0x1ceefc) returned 0x0 [0083.343] BitBlt (hdc=0x220106d6, x=0, y=0, cx=46, cy=42, hdcSrc=0x5401098e, x1=0, y1=0, rop=0xcc0020) returned 1 [0083.352] GdipReleaseDC (graphics=0x5bff610, hdc=0x5401098e) returned 0x0 [0083.352] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0083.352] SelectObject (hdc=0x5401098e, h=0x185000f) returned 0x340509df [0083.352] DeleteDC (hdc=0x5401098e) returned 1 [0083.352] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0083.353] EndPaint (hWnd=0x203ec, lpPaint=0x1ceea0) returned 1 [0083.354] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.354] IsWindowUnicode (hWnd=0x203ea) returned 1 [0083.354] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.354] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0083.354] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0083.371] BeginPaint (in: hWnd=0x203ea, lpPaint=0x1ceea4 | out: lpPaint=0x1ceea4) returned 0xc0100ae [0083.371] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0083.395] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203ea, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0083.395] GetStockObject (i=5) returned 0x1900015 [0083.396] SelectPalette (hdc=0xc0100ae, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0083.396] CreateCompatibleDC (hdc=0xc0100ae) returned 0x3b0109e5 [0083.396] SelectObject (hdc=0x3b0109e5, h=0x340509df) returned 0x185000f [0083.396] GdipCreateFromHDC (hdc=0x3b0109e5, graphics=0x1ceebc) returned 0x0 [0083.396] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0083.396] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=46, height=42, combineMode=0x0) returned 0x0 [0083.396] GdipCreateMatrix (matrix=0x1cef04) returned 0x0 [0083.396] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0083.396] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cef1c) returned 0x0 [0083.396] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.396] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.396] LocalFree (hMem=0x691830) returned 0x0 [0083.396] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0083.396] GdipCreateRegion (region=0x1cef04) returned 0x0 [0083.396] GdipGetClip (graphics=0x5bff610, region=0x5c01988) returned 0x0 [0083.396] GdipIsInfiniteRegion (region=0x5c01988, graphics=0x5bff610, result=0x1cef10) returned 0x0 [0083.397] GdipSaveGraphics (graphics=0x5bff610, state=0x1cef3c) returned 0x0 [0083.397] GdipRestoreGraphics (graphics=0x5bff610, state=0xfd9c0dbd) returned 0x0 [0083.397] GdipDeleteRegion (region=0x5c01988) returned 0x0 [0083.397] GdipGetDC (graphics=0x5bff610, hdc=0x1ced24) returned 0x0 [0083.397] GetCurrentObject (hdc=0x3b0109e5, type=0x1) returned 0x1b00017 [0083.397] GetCurrentObject (hdc=0x3b0109e5, type=0x2) returned 0x1900010 [0083.397] GetCurrentObject (hdc=0x3b0109e5, type=0x7) returned 0x340509df [0083.397] GetCurrentObject (hdc=0x3b0109e5, type=0x6) returned 0x18a0048 [0083.397] SaveDC (hdc=0x3b0109e5) returned 1 [0083.397] GetNearestColor (hdc=0x3b0109e5, color=0xf0f0f0) returned 0xf0f0f0 [0083.397] GetNearestColor (hdc=0x3b0109e5, color=0xa0a0a0) returned 0xa0a0a0 [0083.397] GetNearestColor (hdc=0x3b0109e5, color=0x696969) returned 0x696969 [0083.397] GetNearestColor (hdc=0x3b0109e5, color=0xa0a0a0) returned 0xa0a0a0 [0083.397] GetNearestColor (hdc=0x3b0109e5, color=0x0) returned 0x0 [0083.397] GetNearestColor (hdc=0x3b0109e5, color=0xffffff) returned 0xffffff [0083.397] GetNearestColor (hdc=0x3b0109e5, color=0xe5e5e5) returned 0xe5e5e5 [0083.397] GetNearestColor (hdc=0x3b0109e5, color=0xd7d7d7) returned 0xd7d7d7 [0083.397] GetNearestColor (hdc=0x3b0109e5, color=0x0) returned 0x0 [0083.398] RestoreDC (hdc=0x3b0109e5, nSavedDC=-1) returned 1 [0083.398] GdipReleaseDC (graphics=0x5bff610, hdc=0x3b0109e5) returned 0x0 [0083.398] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.398] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.398] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.398] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d0368) returned 0x0 [0083.398] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.398] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.398] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.398] GdipGetStringFormatFlags (format=0x5bfb098, flags=0x1cedbc) returned 0x0 [0083.398] GdipGetStringFormatTrimming (format=0x5bfb098, trimming=0x1cedbc) returned 0x0 [0083.398] GdipGetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=0x1cedbc) returned 0x0 [0083.398] GdipGetStringFormatAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.399] GdipGetStringFormatLineAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.399] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.399] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.399] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.399] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.399] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1cec44) returned 0x0 [0083.399] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d0444) returned 0x0 [0083.399] GdipSetStringFormatFlags (format=0x5bfff58, flags=0) returned 0x0 [0083.399] GdipSetStringFormatTrimming (format=0x5bfff58, trimming=0x1) returned 0x0 [0083.399] GdipSetStringFormatHotkeyPrefix (format=0x5bfff58, hotkeyPrefix=2) returned 0x0 [0083.399] GdipSetStringFormatAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.400] GdipSetStringFormatLineAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.400] GdipMeasureString (graphics=0x5c02218, string="=", length=1, font=0x5bfab90, layoutRect=0x1cec24, stringFormat=0x5bfff58, boundingBox=0x1cec14, codepointsFitted=0x1cec10, linesFilled=0x1cec0c) returned 0x0 [0083.400] GdipDeleteStringFormat (format=0x5bfff58) returned 0x0 [0083.400] GdipDeleteGraphics (graphics=0x5c02218) returned 0x0 [0083.400] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.400] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.400] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.400] GdipCreateRegion (region=0x1cec90) returned 0x0 [0083.400] GdipGetClip (graphics=0x5bff610, region=0x5c01e08) returned 0x0 [0083.400] GdipCreateMatrix (matrix=0x1cec90) returned 0x0 [0083.400] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0083.400] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1ceca8) returned 0x0 [0083.400] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.400] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.401] LocalFree (hMem=0x691830) returned 0x0 [0083.401] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.401] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.401] LocalFree (hMem=0x691830) returned 0x0 [0083.401] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0083.401] GdipIsInfiniteRegion (region=0x5c01e08, graphics=0x5bff610, result=0x1cecd0) returned 0x0 [0083.401] GdipIsInfiniteRegion (region=0x5c01e08, graphics=0x5bff610, result=0x1cecc0) returned 0x0 [0083.401] GdipGetRegionHRgn (region=0x5c01e08, graphics=0x5bff610, hRgn=0x1cecc0) returned 0x0 [0083.401] GdipDeleteRegion (region=0x5c01e08) returned 0x0 [0083.401] GdipGetDC (graphics=0x5bff610, hdc=0x1cecd8) returned 0x0 [0083.401] GetCurrentObject (hdc=0x3b0109e5, type=0x1) returned 0x1b00017 [0083.401] GetCurrentObject (hdc=0x3b0109e5, type=0x2) returned 0x1900010 [0083.401] GetCurrentObject (hdc=0x3b0109e5, type=0x7) returned 0x340509df [0083.401] GetCurrentObject (hdc=0x3b0109e5, type=0x6) returned 0x18a0048 [0083.401] SaveDC (hdc=0x3b0109e5) returned 1 [0083.401] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x70040861 [0083.401] GetClipRgn (hdc=0x3b0109e5, hrgn=0x70040861) returned 0 [0083.401] SelectClipRgn (hdc=0x3b0109e5, hrgn=0x870406e1) returned 2 [0083.401] DeleteObject (ho=0x70040861) returned 1 [0083.402] DeleteObject (ho=0x870406e1) returned 1 [0083.402] OffsetViewportOrgEx (in: hdc=0x3b0109e5, x=0, y=0, lppt=0x22d0648 | out: lppt=0x22d0648) returned 1 [0083.402] GetNearestColor (hdc=0x3b0109e5, color=0xf0f0f0) returned 0xf0f0f0 [0083.402] CreateSolidBrush (color=0xf0f0f0) returned 0x3c1009da [0083.402] FillRect (hDC=0x3b0109e5, lprc=0x1cecdc, hbr=0x3c1009da) returned 1 [0083.402] DeleteObject (ho=0x3c1009da) returned 1 [0083.402] RestoreDC (hdc=0x3b0109e5, nSavedDC=-1) returned 1 [0083.402] GdipReleaseDC (graphics=0x5bff610, hdc=0x3b0109e5) returned 0x0 [0083.402] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.402] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.402] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.402] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d06d0) returned 0x0 [0083.402] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.402] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.403] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.403] GdipCreateSolidFill (color=0xff000000, brush=0x1ced74) returned 0x0 [0083.403] GdipDrawString (graphics=0x5bff610, string="=", length=1, font=0x5bfab90, layoutRect=0x1ced5c, stringFormat=0x5bfb098, brush=0x5bfff58) returned 0x0 [0083.403] GdipDeleteBrush (brush=0x5bfff58) returned 0x0 [0083.403] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.403] GetFocus () returned 0x10402 [0083.403] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.403] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.403] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.403] GdipCreateRegion (region=0x1cebc4) returned 0x0 [0083.403] GdipGetClip (graphics=0x5bff610, region=0x5c020d8) returned 0x0 [0083.404] GdipCreateMatrix (matrix=0x1cebc4) returned 0x0 [0083.404] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0083.404] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cebdc) returned 0x0 [0083.404] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.404] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.404] LocalFree (hMem=0x691830) returned 0x0 [0083.404] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.404] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.404] LocalFree (hMem=0x691830) returned 0x0 [0083.404] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0083.404] GdipIsInfiniteRegion (region=0x5c020d8, graphics=0x5bff610, result=0x1cec04) returned 0x0 [0083.404] GdipIsInfiniteRegion (region=0x5c020d8, graphics=0x5bff610, result=0x1cebf4) returned 0x0 [0083.404] GdipGetRegionHRgn (region=0x5c020d8, graphics=0x5bff610, hRgn=0x1cebf4) returned 0x0 [0083.404] GdipDeleteRegion (region=0x5c020d8) returned 0x0 [0083.404] GdipGetDC (graphics=0x5bff610, hdc=0x1cec0c) returned 0x0 [0083.404] GetCurrentObject (hdc=0x3b0109e5, type=0x1) returned 0x1b00017 [0083.404] GetCurrentObject (hdc=0x3b0109e5, type=0x2) returned 0x1900010 [0083.404] GetCurrentObject (hdc=0x3b0109e5, type=0x7) returned 0x340509df [0083.404] GetCurrentObject (hdc=0x3b0109e5, type=0x6) returned 0x18a0048 [0083.404] SaveDC (hdc=0x3b0109e5) returned 1 [0083.405] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x880406e1 [0083.405] GetClipRgn (hdc=0x3b0109e5, hrgn=0x880406e1) returned 0 [0083.405] SelectClipRgn (hdc=0x3b0109e5, hrgn=0x71040861) returned 2 [0083.405] DeleteObject (ho=0x880406e1) returned 1 [0083.405] DeleteObject (ho=0x71040861) returned 1 [0083.405] OffsetViewportOrgEx (in: hdc=0x3b0109e5, x=0, y=0, lppt=0x22d08ec | out: lppt=0x22d08ec) returned 1 [0083.405] GetROP2 (hdc=0x3b0109e5) returned 13 [0083.405] GetBkMode (hdc=0x3b0109e5) returned 2 [0083.405] SetBkMode (hdc=0x3b0109e5, mode=1) returned 2 [0083.405] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0xf3009e9 [0083.405] SelectObject (hdc=0x3b0109e5, h=0xf3009e9) returned 0x1b00017 [0083.405] MoveToEx (in: hdc=0x3b0109e5, x=45, y=0, lppt=0x22d092c | out: lppt=0x22d092c) returned 1 [0083.405] LineTo (hdc=0x3b0109e5, x=0, y=0) returned 1 [0083.405] SetBkMode (hdc=0x3b0109e5, mode=2) returned 1 [0083.405] MoveToEx (in: hdc=0x3b0109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.405] GetROP2 (hdc=0x3b0109e5) returned 13 [0083.405] GetBkMode (hdc=0x3b0109e5) returned 2 [0083.405] SetBkMode (hdc=0x3b0109e5, mode=1) returned 2 [0083.405] SelectObject (hdc=0x3b0109e5, h=0xf3009e9) returned 0xf3009e9 [0083.405] MoveToEx (in: hdc=0x3b0109e5, x=0, y=0, lppt=0x22d093c | out: lppt=0x22d093c) returned 1 [0083.405] LineTo (hdc=0x3b0109e5, x=0, y=41) returned 1 [0083.406] SetBkMode (hdc=0x3b0109e5, mode=2) returned 1 [0083.406] MoveToEx (in: hdc=0x3b0109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.406] SelectObject (hdc=0x3b0109e5, h=0x1b00017) returned 0xf3009e9 [0083.406] DeleteObject (ho=0xf3009e9) returned 1 [0083.406] GetROP2 (hdc=0x3b0109e5) returned 13 [0083.406] GetBkMode (hdc=0x3b0109e5) returned 2 [0083.406] SetBkMode (hdc=0x3b0109e5, mode=1) returned 2 [0083.406] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x103009e8 [0083.406] SelectObject (hdc=0x3b0109e5, h=0x103009e8) returned 0x1b00017 [0083.406] MoveToEx (in: hdc=0x3b0109e5, x=0, y=41, lppt=0x22d097c | out: lppt=0x22d097c) returned 1 [0083.406] LineTo (hdc=0x3b0109e5, x=45, y=41) returned 1 [0083.406] SetBkMode (hdc=0x3b0109e5, mode=2) returned 1 [0083.406] MoveToEx (in: hdc=0x3b0109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.406] GetROP2 (hdc=0x3b0109e5) returned 13 [0083.406] GetBkMode (hdc=0x3b0109e5) returned 2 [0083.406] SetBkMode (hdc=0x3b0109e5, mode=1) returned 2 [0083.406] SelectObject (hdc=0x3b0109e5, h=0x103009e8) returned 0x103009e8 [0083.406] MoveToEx (in: hdc=0x3b0109e5, x=45, y=41, lppt=0x22d098c | out: lppt=0x22d098c) returned 1 [0083.406] LineTo (hdc=0x3b0109e5, x=45, y=-1) returned 1 [0083.406] SetBkMode (hdc=0x3b0109e5, mode=2) returned 1 [0083.406] MoveToEx (in: hdc=0x3b0109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.406] SelectObject (hdc=0x3b0109e5, h=0x1b00017) returned 0x103009e8 [0083.407] DeleteObject (ho=0x103009e8) returned 1 [0083.407] GetROP2 (hdc=0x3b0109e5) returned 13 [0083.407] GetBkMode (hdc=0x3b0109e5) returned 2 [0083.407] SetBkMode (hdc=0x3b0109e5, mode=1) returned 2 [0083.407] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x103009e9 [0083.407] SelectObject (hdc=0x3b0109e5, h=0x103009e9) returned 0x1b00017 [0083.407] MoveToEx (in: hdc=0x3b0109e5, x=44, y=1, lppt=0x22d09cc | out: lppt=0x22d09cc) returned 1 [0083.407] LineTo (hdc=0x3b0109e5, x=1, y=1) returned 1 [0083.407] SetBkMode (hdc=0x3b0109e5, mode=2) returned 1 [0083.407] MoveToEx (in: hdc=0x3b0109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.407] GetROP2 (hdc=0x3b0109e5) returned 13 [0083.407] GetBkMode (hdc=0x3b0109e5) returned 2 [0083.407] SetBkMode (hdc=0x3b0109e5, mode=1) returned 2 [0083.407] SelectObject (hdc=0x3b0109e5, h=0x103009e9) returned 0x103009e9 [0083.407] MoveToEx (in: hdc=0x3b0109e5, x=1, y=1, lppt=0x22d09dc | out: lppt=0x22d09dc) returned 1 [0083.407] LineTo (hdc=0x3b0109e5, x=1, y=40) returned 1 [0083.407] SetBkMode (hdc=0x3b0109e5, mode=2) returned 1 [0083.407] MoveToEx (in: hdc=0x3b0109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.407] SelectObject (hdc=0x3b0109e5, h=0x1b00017) returned 0x103009e9 [0083.407] DeleteObject (ho=0x103009e9) returned 1 [0083.407] GetROP2 (hdc=0x3b0109e5) returned 13 [0083.407] GetBkMode (hdc=0x3b0109e5) returned 2 [0083.408] SetBkMode (hdc=0x3b0109e5, mode=1) returned 2 [0083.408] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x113009e8 [0083.408] SelectObject (hdc=0x3b0109e5, h=0x113009e8) returned 0x1b00017 [0083.408] MoveToEx (in: hdc=0x3b0109e5, x=1, y=40, lppt=0x22d0a1c | out: lppt=0x22d0a1c) returned 1 [0083.408] LineTo (hdc=0x3b0109e5, x=44, y=40) returned 1 [0083.408] SetBkMode (hdc=0x3b0109e5, mode=2) returned 1 [0083.408] MoveToEx (in: hdc=0x3b0109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.408] GetROP2 (hdc=0x3b0109e5) returned 13 [0083.408] GetBkMode (hdc=0x3b0109e5) returned 2 [0083.408] SetBkMode (hdc=0x3b0109e5, mode=1) returned 2 [0083.408] SelectObject (hdc=0x3b0109e5, h=0x113009e8) returned 0x113009e8 [0083.408] MoveToEx (in: hdc=0x3b0109e5, x=44, y=40, lppt=0x22d0a2c | out: lppt=0x22d0a2c) returned 1 [0083.408] LineTo (hdc=0x3b0109e5, x=44, y=0) returned 1 [0083.408] SetBkMode (hdc=0x3b0109e5, mode=2) returned 1 [0083.408] MoveToEx (in: hdc=0x3b0109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.408] SelectObject (hdc=0x3b0109e5, h=0x1b00017) returned 0x113009e8 [0083.408] DeleteObject (ho=0x113009e8) returned 1 [0083.408] RestoreDC (hdc=0x3b0109e5, nSavedDC=-1) returned 1 [0083.408] GdipReleaseDC (graphics=0x5bff610, hdc=0x3b0109e5) returned 0x0 [0083.408] GdipGetDC (graphics=0x5bff610, hdc=0x1ceefc) returned 0x0 [0083.408] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=46, cy=42, hdcSrc=0x3b0109e5, x1=0, y1=0, rop=0xcc0020) returned 1 [0083.458] GdipReleaseDC (graphics=0x5bff610, hdc=0x3b0109e5) returned 0x0 [0083.458] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0083.458] SelectObject (hdc=0x3b0109e5, h=0x185000f) returned 0x340509df [0083.458] DeleteDC (hdc=0x3b0109e5) returned 1 [0083.458] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0083.458] EndPaint (hWnd=0x203ea, lpPaint=0x1ceea0) returned 1 [0083.458] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.458] IsWindowUnicode (hWnd=0x203e6) returned 1 [0083.458] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.458] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0083.458] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0083.458] BeginPaint (in: hWnd=0x203e6, lpPaint=0x1ceea4 | out: lpPaint=0x1ceea4) returned 0x1b0107ae [0083.459] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0083.459] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e6, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0083.459] GetStockObject (i=5) returned 0x1900015 [0083.459] SelectPalette (hdc=0x1b0107ae, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0083.459] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x7e0109e3 [0083.459] SelectObject (hdc=0x7e0109e3, h=0x340509df) returned 0x185000f [0083.459] GdipCreateFromHDC (hdc=0x7e0109e3, graphics=0x1ceebc) returned 0x0 [0083.459] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0083.459] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=46, height=42, combineMode=0x0) returned 0x0 [0083.459] GdipCreateMatrix (matrix=0x1cef04) returned 0x0 [0083.459] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0083.459] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cef1c) returned 0x0 [0083.459] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.460] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.460] LocalFree (hMem=0x691830) returned 0x0 [0083.460] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0083.460] GdipCreateRegion (region=0x1cef04) returned 0x0 [0083.460] GdipGetClip (graphics=0x5bff610, region=0x5c01aa8) returned 0x0 [0083.460] GdipIsInfiniteRegion (region=0x5c01aa8, graphics=0x5bff610, result=0x1cef10) returned 0x0 [0083.460] GdipSaveGraphics (graphics=0x5bff610, state=0x1cef3c) returned 0x0 [0083.460] GdipRestoreGraphics (graphics=0x5bff610, state=0xfd990dbd) returned 0x0 [0083.460] GdipDeleteRegion (region=0x5c01aa8) returned 0x0 [0083.460] GdipGetDC (graphics=0x5bff610, hdc=0x1ced24) returned 0x0 [0083.460] GetCurrentObject (hdc=0x7e0109e3, type=0x1) returned 0x1b00017 [0083.460] GetCurrentObject (hdc=0x7e0109e3, type=0x2) returned 0x1900010 [0083.460] GetCurrentObject (hdc=0x7e0109e3, type=0x7) returned 0x340509df [0083.460] GetCurrentObject (hdc=0x7e0109e3, type=0x6) returned 0x18a0048 [0083.460] SaveDC (hdc=0x7e0109e3) returned 1 [0083.460] GetNearestColor (hdc=0x7e0109e3, color=0xf0f0f0) returned 0xf0f0f0 [0083.460] GetNearestColor (hdc=0x7e0109e3, color=0xa0a0a0) returned 0xa0a0a0 [0083.460] GetNearestColor (hdc=0x7e0109e3, color=0x696969) returned 0x696969 [0083.460] GetNearestColor (hdc=0x7e0109e3, color=0xa0a0a0) returned 0xa0a0a0 [0083.461] GetNearestColor (hdc=0x7e0109e3, color=0x0) returned 0x0 [0083.461] GetNearestColor (hdc=0x7e0109e3, color=0xffffff) returned 0xffffff [0083.461] GetNearestColor (hdc=0x7e0109e3, color=0xe5e5e5) returned 0xe5e5e5 [0083.461] GetNearestColor (hdc=0x7e0109e3, color=0xd7d7d7) returned 0xd7d7d7 [0083.461] GetNearestColor (hdc=0x7e0109e3, color=0x0) returned 0x0 [0083.461] RestoreDC (hdc=0x7e0109e3, nSavedDC=-1) returned 1 [0083.461] GdipReleaseDC (graphics=0x5bff610, hdc=0x7e0109e3) returned 0x0 [0083.461] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.461] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.461] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d0f60) returned 0x0 [0083.462] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.462] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.462] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.462] GdipGetStringFormatFlags (format=0x5bfb098, flags=0x1cedbc) returned 0x0 [0083.462] GdipGetStringFormatTrimming (format=0x5bfb098, trimming=0x1cedbc) returned 0x0 [0083.462] GdipGetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=0x1cedbc) returned 0x0 [0083.462] GdipGetStringFormatAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.462] GdipGetStringFormatLineAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.462] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.462] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.462] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.462] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.462] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1cec44) returned 0x0 [0083.463] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d103c) returned 0x0 [0083.463] GdipSetStringFormatFlags (format=0x5bfff58, flags=0) returned 0x0 [0083.463] GdipSetStringFormatTrimming (format=0x5bfff58, trimming=0x1) returned 0x0 [0083.463] GdipSetStringFormatHotkeyPrefix (format=0x5bfff58, hotkeyPrefix=2) returned 0x0 [0083.463] GdipSetStringFormatAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.463] GdipSetStringFormatLineAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.463] GdipMeasureString (graphics=0x5c02218, string="C", length=1, font=0x5bfab90, layoutRect=0x1cec24, stringFormat=0x5bfff58, boundingBox=0x1cec14, codepointsFitted=0x1cec10, linesFilled=0x1cec0c) returned 0x0 [0083.463] GdipDeleteStringFormat (format=0x5bfff58) returned 0x0 [0083.463] GdipDeleteGraphics (graphics=0x5c02218) returned 0x0 [0083.463] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.463] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.463] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.463] GdipCreateRegion (region=0x1cec90) returned 0x0 [0083.463] GdipGetClip (graphics=0x5bff610, region=0x5c01bc8) returned 0x0 [0083.464] GdipCreateMatrix (matrix=0x1cec90) returned 0x0 [0083.464] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0083.464] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1ceca8) returned 0x0 [0083.464] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.464] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.464] LocalFree (hMem=0x691830) returned 0x0 [0083.464] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.464] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.464] LocalFree (hMem=0x691830) returned 0x0 [0083.464] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0083.464] GdipIsInfiniteRegion (region=0x5c01bc8, graphics=0x5bff610, result=0x1cecd0) returned 0x0 [0083.464] GdipIsInfiniteRegion (region=0x5c01bc8, graphics=0x5bff610, result=0x1cecc0) returned 0x0 [0083.464] GdipGetRegionHRgn (region=0x5c01bc8, graphics=0x5bff610, hRgn=0x1cecc0) returned 0x0 [0083.464] GdipDeleteRegion (region=0x5c01bc8) returned 0x0 [0083.464] GdipGetDC (graphics=0x5bff610, hdc=0x1cecd8) returned 0x0 [0083.464] GetCurrentObject (hdc=0x7e0109e3, type=0x1) returned 0x1b00017 [0083.464] GetCurrentObject (hdc=0x7e0109e3, type=0x2) returned 0x1900010 [0083.464] GetCurrentObject (hdc=0x7e0109e3, type=0x7) returned 0x340509df [0083.464] GetCurrentObject (hdc=0x7e0109e3, type=0x6) returned 0x18a0048 [0083.464] SaveDC (hdc=0x7e0109e3) returned 1 [0083.464] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x72040861 [0083.464] GetClipRgn (hdc=0x7e0109e3, hrgn=0x72040861) returned 0 [0083.464] SelectClipRgn (hdc=0x7e0109e3, hrgn=0x890406e1) returned 2 [0083.465] DeleteObject (ho=0x72040861) returned 1 [0083.465] DeleteObject (ho=0x890406e1) returned 1 [0083.465] OffsetViewportOrgEx (in: hdc=0x7e0109e3, x=0, y=0, lppt=0x22d1240 | out: lppt=0x22d1240) returned 1 [0083.465] GetNearestColor (hdc=0x7e0109e3, color=0xf0f0f0) returned 0xf0f0f0 [0083.465] CreateSolidBrush (color=0xf0f0f0) returned 0x3d1009da [0083.465] FillRect (hDC=0x7e0109e3, lprc=0x1cecdc, hbr=0x3d1009da) returned 1 [0083.465] DeleteObject (ho=0x3d1009da) returned 1 [0083.465] RestoreDC (hdc=0x7e0109e3, nSavedDC=-1) returned 1 [0083.465] GdipReleaseDC (graphics=0x5bff610, hdc=0x7e0109e3) returned 0x0 [0083.465] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.466] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.466] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d12c8) returned 0x0 [0083.466] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.466] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.466] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.466] GdipCreateSolidFill (color=0xff000000, brush=0x1ced74) returned 0x0 [0083.466] GdipDrawString (graphics=0x5bff610, string="C", length=1, font=0x5bfab90, layoutRect=0x1ced5c, stringFormat=0x5bfb098, brush=0x5bfff58) returned 0x0 [0083.466] GdipDeleteBrush (brush=0x5bfff58) returned 0x0 [0083.466] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.466] GetFocus () returned 0x10402 [0083.466] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.467] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.467] GdipCreateRegion (region=0x1cebc4) returned 0x0 [0083.467] GdipGetClip (graphics=0x5bff610, region=0x5c02048) returned 0x0 [0083.467] GdipCreateMatrix (matrix=0x1cebc4) returned 0x0 [0083.467] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0083.467] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cebdc) returned 0x0 [0083.467] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.467] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.467] LocalFree (hMem=0x691830) returned 0x0 [0083.467] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.467] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.467] LocalFree (hMem=0x691830) returned 0x0 [0083.467] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0083.467] GdipIsInfiniteRegion (region=0x5c02048, graphics=0x5bff610, result=0x1cec04) returned 0x0 [0083.467] GdipIsInfiniteRegion (region=0x5c02048, graphics=0x5bff610, result=0x1cebf4) returned 0x0 [0083.467] GdipGetRegionHRgn (region=0x5c02048, graphics=0x5bff610, hRgn=0x1cebf4) returned 0x0 [0083.467] GdipDeleteRegion (region=0x5c02048) returned 0x0 [0083.467] GdipGetDC (graphics=0x5bff610, hdc=0x1cec0c) returned 0x0 [0083.467] GetCurrentObject (hdc=0x7e0109e3, type=0x1) returned 0x1b00017 [0083.467] GetCurrentObject (hdc=0x7e0109e3, type=0x2) returned 0x1900010 [0083.467] GetCurrentObject (hdc=0x7e0109e3, type=0x7) returned 0x340509df [0083.467] GetCurrentObject (hdc=0x7e0109e3, type=0x6) returned 0x18a0048 [0083.467] SaveDC (hdc=0x7e0109e3) returned 1 [0083.468] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8a0406e1 [0083.468] GetClipRgn (hdc=0x7e0109e3, hrgn=0x8a0406e1) returned 0 [0083.468] SelectClipRgn (hdc=0x7e0109e3, hrgn=0x73040861) returned 2 [0083.468] DeleteObject (ho=0x8a0406e1) returned 1 [0083.468] DeleteObject (ho=0x73040861) returned 1 [0083.468] OffsetViewportOrgEx (in: hdc=0x7e0109e3, x=0, y=0, lppt=0x22d14e4 | out: lppt=0x22d14e4) returned 1 [0083.468] GetROP2 (hdc=0x7e0109e3) returned 13 [0083.468] GetBkMode (hdc=0x7e0109e3) returned 2 [0083.468] SetBkMode (hdc=0x7e0109e3, mode=1) returned 2 [0083.468] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x123009e8 [0083.468] SelectObject (hdc=0x7e0109e3, h=0x123009e8) returned 0x1b00017 [0083.468] MoveToEx (in: hdc=0x7e0109e3, x=45, y=0, lppt=0x22d1524 | out: lppt=0x22d1524) returned 1 [0083.468] LineTo (hdc=0x7e0109e3, x=0, y=0) returned 1 [0083.468] SetBkMode (hdc=0x7e0109e3, mode=2) returned 1 [0083.468] MoveToEx (in: hdc=0x7e0109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.468] GetROP2 (hdc=0x7e0109e3) returned 13 [0083.468] GetBkMode (hdc=0x7e0109e3) returned 2 [0083.468] SetBkMode (hdc=0x7e0109e3, mode=1) returned 2 [0083.468] SelectObject (hdc=0x7e0109e3, h=0x123009e8) returned 0x123009e8 [0083.468] MoveToEx (in: hdc=0x7e0109e3, x=0, y=0, lppt=0x22d1534 | out: lppt=0x22d1534) returned 1 [0083.468] LineTo (hdc=0x7e0109e3, x=0, y=41) returned 1 [0083.468] SetBkMode (hdc=0x7e0109e3, mode=2) returned 1 [0083.469] MoveToEx (in: hdc=0x7e0109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.469] SelectObject (hdc=0x7e0109e3, h=0x1b00017) returned 0x123009e8 [0083.469] DeleteObject (ho=0x123009e8) returned 1 [0083.469] GetROP2 (hdc=0x7e0109e3) returned 13 [0083.469] GetBkMode (hdc=0x7e0109e3) returned 2 [0083.469] SetBkMode (hdc=0x7e0109e3, mode=1) returned 2 [0083.469] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x113009e9 [0083.469] SelectObject (hdc=0x7e0109e3, h=0x113009e9) returned 0x1b00017 [0083.469] MoveToEx (in: hdc=0x7e0109e3, x=0, y=41, lppt=0x22d1574 | out: lppt=0x22d1574) returned 1 [0083.469] LineTo (hdc=0x7e0109e3, x=45, y=41) returned 1 [0083.469] SetBkMode (hdc=0x7e0109e3, mode=2) returned 1 [0083.469] MoveToEx (in: hdc=0x7e0109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.469] GetROP2 (hdc=0x7e0109e3) returned 13 [0083.469] GetBkMode (hdc=0x7e0109e3) returned 2 [0083.469] SetBkMode (hdc=0x7e0109e3, mode=1) returned 2 [0083.469] SelectObject (hdc=0x7e0109e3, h=0x113009e9) returned 0x113009e9 [0083.469] MoveToEx (in: hdc=0x7e0109e3, x=45, y=41, lppt=0x22d1584 | out: lppt=0x22d1584) returned 1 [0083.469] LineTo (hdc=0x7e0109e3, x=45, y=-1) returned 1 [0083.469] SetBkMode (hdc=0x7e0109e3, mode=2) returned 1 [0083.469] MoveToEx (in: hdc=0x7e0109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.469] SelectObject (hdc=0x7e0109e3, h=0x1b00017) returned 0x113009e9 [0083.469] DeleteObject (ho=0x113009e9) returned 1 [0083.470] GetROP2 (hdc=0x7e0109e3) returned 13 [0083.470] GetBkMode (hdc=0x7e0109e3) returned 2 [0083.470] SetBkMode (hdc=0x7e0109e3, mode=1) returned 2 [0083.470] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x133009e8 [0083.470] SelectObject (hdc=0x7e0109e3, h=0x133009e8) returned 0x1b00017 [0083.470] MoveToEx (in: hdc=0x7e0109e3, x=44, y=1, lppt=0x22d15c4 | out: lppt=0x22d15c4) returned 1 [0083.470] LineTo (hdc=0x7e0109e3, x=1, y=1) returned 1 [0083.470] SetBkMode (hdc=0x7e0109e3, mode=2) returned 1 [0083.470] MoveToEx (in: hdc=0x7e0109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.470] GetROP2 (hdc=0x7e0109e3) returned 13 [0083.470] GetBkMode (hdc=0x7e0109e3) returned 2 [0083.470] SetBkMode (hdc=0x7e0109e3, mode=1) returned 2 [0083.470] SelectObject (hdc=0x7e0109e3, h=0x133009e8) returned 0x133009e8 [0083.470] MoveToEx (in: hdc=0x7e0109e3, x=1, y=1, lppt=0x22d15d4 | out: lppt=0x22d15d4) returned 1 [0083.470] LineTo (hdc=0x7e0109e3, x=1, y=40) returned 1 [0083.470] SetBkMode (hdc=0x7e0109e3, mode=2) returned 1 [0083.470] MoveToEx (in: hdc=0x7e0109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.470] SelectObject (hdc=0x7e0109e3, h=0x1b00017) returned 0x133009e8 [0083.470] DeleteObject (ho=0x133009e8) returned 1 [0083.470] GetROP2 (hdc=0x7e0109e3) returned 13 [0083.470] GetBkMode (hdc=0x7e0109e3) returned 2 [0083.471] SetBkMode (hdc=0x7e0109e3, mode=1) returned 2 [0083.471] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x123009e9 [0083.471] SelectObject (hdc=0x7e0109e3, h=0x123009e9) returned 0x1b00017 [0083.471] MoveToEx (in: hdc=0x7e0109e3, x=1, y=40, lppt=0x22d1614 | out: lppt=0x22d1614) returned 1 [0083.471] LineTo (hdc=0x7e0109e3, x=44, y=40) returned 1 [0083.471] SetBkMode (hdc=0x7e0109e3, mode=2) returned 1 [0083.471] MoveToEx (in: hdc=0x7e0109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.471] GetROP2 (hdc=0x7e0109e3) returned 13 [0083.471] GetBkMode (hdc=0x7e0109e3) returned 2 [0083.471] SetBkMode (hdc=0x7e0109e3, mode=1) returned 2 [0083.471] SelectObject (hdc=0x7e0109e3, h=0x123009e9) returned 0x123009e9 [0083.471] MoveToEx (in: hdc=0x7e0109e3, x=44, y=40, lppt=0x22d1624 | out: lppt=0x22d1624) returned 1 [0083.471] LineTo (hdc=0x7e0109e3, x=44, y=0) returned 1 [0083.471] SetBkMode (hdc=0x7e0109e3, mode=2) returned 1 [0083.471] MoveToEx (in: hdc=0x7e0109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.471] SelectObject (hdc=0x7e0109e3, h=0x1b00017) returned 0x123009e9 [0083.471] DeleteObject (ho=0x123009e9) returned 1 [0083.471] RestoreDC (hdc=0x7e0109e3, nSavedDC=-1) returned 1 [0083.471] GdipReleaseDC (graphics=0x5bff610, hdc=0x7e0109e3) returned 0x0 [0083.471] GdipGetDC (graphics=0x5bff610, hdc=0x1ceefc) returned 0x0 [0083.471] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=46, cy=42, hdcSrc=0x7e0109e3, x1=0, y1=0, rop=0xcc0020) returned 1 [0083.483] GdipReleaseDC (graphics=0x5bff610, hdc=0x7e0109e3) returned 0x0 [0083.483] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0083.484] SelectObject (hdc=0x7e0109e3, h=0x185000f) returned 0x340509df [0083.484] DeleteDC (hdc=0x7e0109e3) returned 1 [0083.484] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0083.484] EndPaint (hWnd=0x203e6, lpPaint=0x1ceea0) returned 1 [0083.485] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.523] IsWindowUnicode (hWnd=0x203e8) returned 1 [0083.523] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.523] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0083.523] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0083.523] BeginPaint (in: hWnd=0x203e8, lpPaint=0x1ceea4 | out: lpPaint=0x1ceea4) returned 0x1b0107ae [0083.523] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0083.523] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e8, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0083.523] GetStockObject (i=5) returned 0x1900015 [0083.523] SelectPalette (hdc=0x1b0107ae, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0083.523] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x5f01098e [0083.523] SelectObject (hdc=0x5f01098e, h=0x340509df) returned 0x185000f [0083.524] GdipCreateFromHDC (hdc=0x5f01098e, graphics=0x1ceebc) returned 0x0 [0083.524] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0083.524] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=46, height=42, combineMode=0x0) returned 0x0 [0083.524] GdipCreateMatrix (matrix=0x1cef04) returned 0x0 [0083.524] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0083.524] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cef1c) returned 0x0 [0083.524] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.524] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.524] LocalFree (hMem=0x691830) returned 0x0 [0083.524] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0083.524] GdipCreateRegion (region=0x1cef04) returned 0x0 [0083.524] GdipGetClip (graphics=0x5bff610, region=0x5c01478) returned 0x0 [0083.524] GdipIsInfiniteRegion (region=0x5c01478, graphics=0x5bff610, result=0x1cef10) returned 0x0 [0083.524] GdipSaveGraphics (graphics=0x5bff610, state=0x1cef3c) returned 0x0 [0083.524] GdipRestoreGraphics (graphics=0x5bff610, state=0xfd960dbd) returned 0x0 [0083.524] GdipDeleteRegion (region=0x5c01478) returned 0x0 [0083.524] GdipGetDC (graphics=0x5bff610, hdc=0x1ced24) returned 0x0 [0083.524] GetCurrentObject (hdc=0x5f01098e, type=0x1) returned 0x1b00017 [0083.524] GetCurrentObject (hdc=0x5f01098e, type=0x2) returned 0x1900010 [0083.524] GetCurrentObject (hdc=0x5f01098e, type=0x7) returned 0x340509df [0083.524] GetCurrentObject (hdc=0x5f01098e, type=0x6) returned 0x18a0048 [0083.525] SaveDC (hdc=0x5f01098e) returned 1 [0083.525] GetNearestColor (hdc=0x5f01098e, color=0xf0f0f0) returned 0xf0f0f0 [0083.525] GetNearestColor (hdc=0x5f01098e, color=0xa0a0a0) returned 0xa0a0a0 [0083.525] GetNearestColor (hdc=0x5f01098e, color=0x696969) returned 0x696969 [0083.525] GetNearestColor (hdc=0x5f01098e, color=0xa0a0a0) returned 0xa0a0a0 [0083.525] GetNearestColor (hdc=0x5f01098e, color=0x0) returned 0x0 [0083.525] GetNearestColor (hdc=0x5f01098e, color=0xffffff) returned 0xffffff [0083.525] GetNearestColor (hdc=0x5f01098e, color=0xe5e5e5) returned 0xe5e5e5 [0083.525] GetNearestColor (hdc=0x5f01098e, color=0xd7d7d7) returned 0xd7d7d7 [0083.525] GetNearestColor (hdc=0x5f01098e, color=0x0) returned 0x0 [0083.525] RestoreDC (hdc=0x5f01098e, nSavedDC=-1) returned 1 [0083.525] GdipReleaseDC (graphics=0x5bff610, hdc=0x5f01098e) returned 0x0 [0083.525] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.526] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.526] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.526] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d1b58) returned 0x0 [0083.526] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.526] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.526] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.526] GdipGetStringFormatFlags (format=0x5bfb098, flags=0x1cedbc) returned 0x0 [0083.526] GdipGetStringFormatTrimming (format=0x5bfb098, trimming=0x1cedbc) returned 0x0 [0083.526] GdipGetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=0x1cedbc) returned 0x0 [0083.526] GdipGetStringFormatAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.526] GdipGetStringFormatLineAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.526] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.526] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.527] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.527] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.527] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1cec44) returned 0x0 [0083.527] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d1c34) returned 0x0 [0083.527] GdipSetStringFormatFlags (format=0x5bfff58, flags=0) returned 0x0 [0083.527] GdipSetStringFormatTrimming (format=0x5bfff58, trimming=0x1) returned 0x0 [0083.527] GdipSetStringFormatHotkeyPrefix (format=0x5bfff58, hotkeyPrefix=2) returned 0x0 [0083.527] GdipSetStringFormatAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.527] GdipSetStringFormatLineAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.527] GdipMeasureString (graphics=0x5c02218, string=".", length=1, font=0x5bfab90, layoutRect=0x1cec24, stringFormat=0x5bfff58, boundingBox=0x1cec14, codepointsFitted=0x1cec10, linesFilled=0x1cec0c) returned 0x0 [0083.527] GdipDeleteStringFormat (format=0x5bfff58) returned 0x0 [0083.527] GdipDeleteGraphics (graphics=0x5c02218) returned 0x0 [0083.528] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.528] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.528] GdipCreateRegion (region=0x1cec90) returned 0x0 [0083.528] GdipGetClip (graphics=0x5bff610, region=0x5c01ce8) returned 0x0 [0083.528] GdipCreateMatrix (matrix=0x1cec90) returned 0x0 [0083.528] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0083.528] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1ceca8) returned 0x0 [0083.528] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.528] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.528] LocalFree (hMem=0x691830) returned 0x0 [0083.528] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.528] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.528] LocalFree (hMem=0x691830) returned 0x0 [0083.528] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0083.528] GdipIsInfiniteRegion (region=0x5c01ce8, graphics=0x5bff610, result=0x1cecd0) returned 0x0 [0083.528] GdipIsInfiniteRegion (region=0x5c01ce8, graphics=0x5bff610, result=0x1cecc0) returned 0x0 [0083.528] GdipGetRegionHRgn (region=0x5c01ce8, graphics=0x5bff610, hRgn=0x1cecc0) returned 0x0 [0083.528] GdipDeleteRegion (region=0x5c01ce8) returned 0x0 [0083.528] GdipGetDC (graphics=0x5bff610, hdc=0x1cecd8) returned 0x0 [0083.529] GetCurrentObject (hdc=0x5f01098e, type=0x1) returned 0x1b00017 [0083.529] GetCurrentObject (hdc=0x5f01098e, type=0x2) returned 0x1900010 [0083.529] GetCurrentObject (hdc=0x5f01098e, type=0x7) returned 0x340509df [0083.529] GetCurrentObject (hdc=0x5f01098e, type=0x6) returned 0x18a0048 [0083.529] SaveDC (hdc=0x5f01098e) returned 1 [0083.529] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x74040861 [0083.529] GetClipRgn (hdc=0x5f01098e, hrgn=0x74040861) returned 0 [0083.529] SelectClipRgn (hdc=0x5f01098e, hrgn=0x8b0406e1) returned 2 [0083.529] DeleteObject (ho=0x74040861) returned 1 [0083.529] DeleteObject (ho=0x8b0406e1) returned 1 [0083.529] OffsetViewportOrgEx (in: hdc=0x5f01098e, x=0, y=0, lppt=0x22d1e38 | out: lppt=0x22d1e38) returned 1 [0083.529] GetNearestColor (hdc=0x5f01098e, color=0xf0f0f0) returned 0xf0f0f0 [0083.529] CreateSolidBrush (color=0xf0f0f0) returned 0x3e1009da [0083.529] FillRect (hDC=0x5f01098e, lprc=0x1cecdc, hbr=0x3e1009da) returned 1 [0083.529] DeleteObject (ho=0x3e1009da) returned 1 [0083.529] RestoreDC (hdc=0x5f01098e, nSavedDC=-1) returned 1 [0083.529] GdipReleaseDC (graphics=0x5bff610, hdc=0x5f01098e) returned 0x0 [0083.530] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.530] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.530] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d1ec0) returned 0x0 [0083.530] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.530] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.530] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.530] GdipCreateSolidFill (color=0xff000000, brush=0x1ced74) returned 0x0 [0083.530] GdipDrawString (graphics=0x5bff610, string=".", length=1, font=0x5bfab90, layoutRect=0x1ced5c, stringFormat=0x5bfb098, brush=0x5bfff58) returned 0x0 [0083.531] GdipDeleteBrush (brush=0x5bfff58) returned 0x0 [0083.531] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.531] GetFocus () returned 0x10402 [0083.531] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.532] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.532] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.532] GdipCreateRegion (region=0x1cebc4) returned 0x0 [0083.532] GdipGetClip (graphics=0x5bff610, region=0x5c017d8) returned 0x0 [0083.532] GdipCreateMatrix (matrix=0x1cebc4) returned 0x0 [0083.532] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0083.532] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cebdc) returned 0x0 [0083.532] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.532] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.532] LocalFree (hMem=0x691830) returned 0x0 [0083.532] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.532] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.532] LocalFree (hMem=0x691830) returned 0x0 [0083.532] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0083.532] GdipIsInfiniteRegion (region=0x5c017d8, graphics=0x5bff610, result=0x1cec04) returned 0x0 [0083.532] GdipIsInfiniteRegion (region=0x5c017d8, graphics=0x5bff610, result=0x1cebf4) returned 0x0 [0083.532] GdipGetRegionHRgn (region=0x5c017d8, graphics=0x5bff610, hRgn=0x1cebf4) returned 0x0 [0083.532] GdipDeleteRegion (region=0x5c017d8) returned 0x0 [0083.532] GdipGetDC (graphics=0x5bff610, hdc=0x1cec0c) returned 0x0 [0083.533] GetCurrentObject (hdc=0x5f01098e, type=0x1) returned 0x1b00017 [0083.533] GetCurrentObject (hdc=0x5f01098e, type=0x2) returned 0x1900010 [0083.533] GetCurrentObject (hdc=0x5f01098e, type=0x7) returned 0x340509df [0083.533] GetCurrentObject (hdc=0x5f01098e, type=0x6) returned 0x18a0048 [0083.533] SaveDC (hdc=0x5f01098e) returned 1 [0083.533] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8c0406e1 [0083.533] GetClipRgn (hdc=0x5f01098e, hrgn=0x8c0406e1) returned 0 [0083.533] SelectClipRgn (hdc=0x5f01098e, hrgn=0x75040861) returned 2 [0083.534] DeleteObject (ho=0x8c0406e1) returned 1 [0083.534] DeleteObject (ho=0x75040861) returned 1 [0083.534] OffsetViewportOrgEx (in: hdc=0x5f01098e, x=0, y=0, lppt=0x22d20dc | out: lppt=0x22d20dc) returned 1 [0083.534] GetROP2 (hdc=0x5f01098e) returned 13 [0083.534] GetBkMode (hdc=0x5f01098e) returned 2 [0083.534] SetBkMode (hdc=0x5f01098e, mode=1) returned 2 [0083.534] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x133009e9 [0083.534] SelectObject (hdc=0x5f01098e, h=0x133009e9) returned 0x1b00017 [0083.534] MoveToEx (in: hdc=0x5f01098e, x=45, y=0, lppt=0x22d211c | out: lppt=0x22d211c) returned 1 [0083.534] LineTo (hdc=0x5f01098e, x=0, y=0) returned 1 [0083.534] SetBkMode (hdc=0x5f01098e, mode=2) returned 1 [0083.534] MoveToEx (in: hdc=0x5f01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.534] GetROP2 (hdc=0x5f01098e) returned 13 [0083.534] GetBkMode (hdc=0x5f01098e) returned 2 [0083.534] SetBkMode (hdc=0x5f01098e, mode=1) returned 2 [0083.534] SelectObject (hdc=0x5f01098e, h=0x133009e9) returned 0x133009e9 [0083.534] MoveToEx (in: hdc=0x5f01098e, x=0, y=0, lppt=0x22d212c | out: lppt=0x22d212c) returned 1 [0083.534] LineTo (hdc=0x5f01098e, x=0, y=41) returned 1 [0083.534] SetBkMode (hdc=0x5f01098e, mode=2) returned 1 [0083.534] MoveToEx (in: hdc=0x5f01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.534] SelectObject (hdc=0x5f01098e, h=0x1b00017) returned 0x133009e9 [0083.534] DeleteObject (ho=0x133009e9) returned 1 [0083.535] GetROP2 (hdc=0x5f01098e) returned 13 [0083.535] GetBkMode (hdc=0x5f01098e) returned 2 [0083.535] SetBkMode (hdc=0x5f01098e, mode=1) returned 2 [0083.535] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x143009e8 [0083.535] SelectObject (hdc=0x5f01098e, h=0x143009e8) returned 0x1b00017 [0083.535] MoveToEx (in: hdc=0x5f01098e, x=0, y=41, lppt=0x22d216c | out: lppt=0x22d216c) returned 1 [0083.535] LineTo (hdc=0x5f01098e, x=45, y=41) returned 1 [0083.535] SetBkMode (hdc=0x5f01098e, mode=2) returned 1 [0083.535] MoveToEx (in: hdc=0x5f01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.535] GetROP2 (hdc=0x5f01098e) returned 13 [0083.535] GetBkMode (hdc=0x5f01098e) returned 2 [0083.535] SetBkMode (hdc=0x5f01098e, mode=1) returned 2 [0083.535] SelectObject (hdc=0x5f01098e, h=0x143009e8) returned 0x143009e8 [0083.535] MoveToEx (in: hdc=0x5f01098e, x=45, y=41, lppt=0x22d217c | out: lppt=0x22d217c) returned 1 [0083.535] LineTo (hdc=0x5f01098e, x=45, y=-1) returned 1 [0083.535] SetBkMode (hdc=0x5f01098e, mode=2) returned 1 [0083.535] MoveToEx (in: hdc=0x5f01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.535] SelectObject (hdc=0x5f01098e, h=0x1b00017) returned 0x143009e8 [0083.535] DeleteObject (ho=0x143009e8) returned 1 [0083.535] GetROP2 (hdc=0x5f01098e) returned 13 [0083.535] GetBkMode (hdc=0x5f01098e) returned 2 [0083.536] SetBkMode (hdc=0x5f01098e, mode=1) returned 2 [0083.536] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x143009e9 [0083.536] SelectObject (hdc=0x5f01098e, h=0x143009e9) returned 0x1b00017 [0083.536] MoveToEx (in: hdc=0x5f01098e, x=44, y=1, lppt=0x22d21bc | out: lppt=0x22d21bc) returned 1 [0083.536] LineTo (hdc=0x5f01098e, x=1, y=1) returned 1 [0083.536] SetBkMode (hdc=0x5f01098e, mode=2) returned 1 [0083.536] MoveToEx (in: hdc=0x5f01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.536] GetROP2 (hdc=0x5f01098e) returned 13 [0083.536] GetBkMode (hdc=0x5f01098e) returned 2 [0083.536] SetBkMode (hdc=0x5f01098e, mode=1) returned 2 [0083.536] SelectObject (hdc=0x5f01098e, h=0x143009e9) returned 0x143009e9 [0083.536] MoveToEx (in: hdc=0x5f01098e, x=1, y=1, lppt=0x22d21cc | out: lppt=0x22d21cc) returned 1 [0083.536] LineTo (hdc=0x5f01098e, x=1, y=40) returned 1 [0083.536] SetBkMode (hdc=0x5f01098e, mode=2) returned 1 [0083.536] MoveToEx (in: hdc=0x5f01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.536] SelectObject (hdc=0x5f01098e, h=0x1b00017) returned 0x143009e9 [0083.536] DeleteObject (ho=0x143009e9) returned 1 [0083.536] GetROP2 (hdc=0x5f01098e) returned 13 [0083.537] GetBkMode (hdc=0x5f01098e) returned 2 [0083.537] SetBkMode (hdc=0x5f01098e, mode=1) returned 2 [0083.537] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x153009e8 [0083.537] SelectObject (hdc=0x5f01098e, h=0x153009e8) returned 0x1b00017 [0083.537] MoveToEx (in: hdc=0x5f01098e, x=1, y=40, lppt=0x22d220c | out: lppt=0x22d220c) returned 1 [0083.537] LineTo (hdc=0x5f01098e, x=44, y=40) returned 1 [0083.537] SetBkMode (hdc=0x5f01098e, mode=2) returned 1 [0083.537] MoveToEx (in: hdc=0x5f01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.537] GetROP2 (hdc=0x5f01098e) returned 13 [0083.537] GetBkMode (hdc=0x5f01098e) returned 2 [0083.537] SetBkMode (hdc=0x5f01098e, mode=1) returned 2 [0083.537] SelectObject (hdc=0x5f01098e, h=0x153009e8) returned 0x153009e8 [0083.537] MoveToEx (in: hdc=0x5f01098e, x=44, y=40, lppt=0x22d221c | out: lppt=0x22d221c) returned 1 [0083.537] LineTo (hdc=0x5f01098e, x=44, y=0) returned 1 [0083.537] SetBkMode (hdc=0x5f01098e, mode=2) returned 1 [0083.537] MoveToEx (in: hdc=0x5f01098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.537] SelectObject (hdc=0x5f01098e, h=0x1b00017) returned 0x153009e8 [0083.537] DeleteObject (ho=0x153009e8) returned 1 [0083.537] RestoreDC (hdc=0x5f01098e, nSavedDC=-1) returned 1 [0083.537] GdipReleaseDC (graphics=0x5bff610, hdc=0x5f01098e) returned 0x0 [0083.537] GdipGetDC (graphics=0x5bff610, hdc=0x1ceefc) returned 0x0 [0083.537] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=46, cy=42, hdcSrc=0x5f01098e, x1=0, y1=0, rop=0xcc0020) returned 1 [0083.572] GdipReleaseDC (graphics=0x5bff610, hdc=0x5f01098e) returned 0x0 [0083.572] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0083.572] SelectObject (hdc=0x5f01098e, h=0x185000f) returned 0x340509df [0083.572] DeleteDC (hdc=0x5f01098e) returned 1 [0083.572] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0083.584] EndPaint (hWnd=0x203e8, lpPaint=0x1ceea0) returned 1 [0083.585] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.585] IsWindowUnicode (hWnd=0x203e4) returned 1 [0083.585] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.585] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0083.585] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0083.585] BeginPaint (in: hWnd=0x203e4, lpPaint=0x1ceea4 | out: lpPaint=0x1ceea4) returned 0x220106d6 [0083.585] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0083.585] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e4, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0083.585] GetStockObject (i=5) returned 0x1900015 [0083.585] SelectPalette (hdc=0x220106d6, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0083.586] CreateCompatibleDC (hdc=0x220106d6) returned 0x450109e5 [0083.586] DeleteObject (ho=0x340509df) returned 1 [0083.586] GetObjectType (h=0x220106d6) returned 0x3 [0083.586] CreateCompatibleBitmap (hdc=0x220106d6, cx=1, cy=1) returned 0xffffffffe90508b5 [0083.586] GetDIBits (in: hdc=0x220106d6, hbm=0xe90508b5, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x1ce994, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1ce994) returned 1 [0083.586] GetDIBits (in: hdc=0x220106d6, hbm=0xe90508b5, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x1ce994, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1ce994) returned 1 [0083.586] DeleteObject (ho=0xe90508b5) returned 1 [0083.586] CreateDIBSection (in: hdc=0x220106d6, lpbmi=0x1ce9e4, usage=0x0, ppvBits=0x1ceed8, hSection=0x0, offset=0x0 | out: ppvBits=0x1ceed8) returned 0x350509df [0083.586] SelectObject (hdc=0x450109e5, h=0x350509df) returned 0x185000f [0083.586] GdipCreateFromHDC (hdc=0x450109e5, graphics=0x1ceebc) returned 0x0 [0083.587] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0083.587] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=98, height=42, combineMode=0x0) returned 0x0 [0083.587] GdipCreateMatrix (matrix=0x1cef04) returned 0x0 [0083.587] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0083.587] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cef1c) returned 0x0 [0083.587] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.587] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.587] LocalFree (hMem=0x691830) returned 0x0 [0083.587] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0083.587] GdipCreateRegion (region=0x1cef04) returned 0x0 [0083.587] GdipGetClip (graphics=0x5bff610, region=0x5c01f28) returned 0x0 [0083.587] GdipIsInfiniteRegion (region=0x5c01f28, graphics=0x5bff610, result=0x1cef10) returned 0x0 [0083.587] GdipSaveGraphics (graphics=0x5bff610, state=0x1cef3c) returned 0x0 [0083.587] GdipRestoreGraphics (graphics=0x5bff610, state=0xfd930dbd) returned 0x0 [0083.587] GdipDeleteRegion (region=0x5c01f28) returned 0x0 [0083.587] GdipGetDC (graphics=0x5bff610, hdc=0x1ced24) returned 0x0 [0083.587] GetCurrentObject (hdc=0x450109e5, type=0x1) returned 0x1b00017 [0083.587] GetCurrentObject (hdc=0x450109e5, type=0x2) returned 0x1900010 [0083.587] GetCurrentObject (hdc=0x450109e5, type=0x7) returned 0x350509df [0083.587] GetCurrentObject (hdc=0x450109e5, type=0x6) returned 0x18a0048 [0083.588] SaveDC (hdc=0x450109e5) returned 1 [0083.588] GetNearestColor (hdc=0x450109e5, color=0xf0f0f0) returned 0xf0f0f0 [0083.588] GetNearestColor (hdc=0x450109e5, color=0xa0a0a0) returned 0xa0a0a0 [0083.588] GetNearestColor (hdc=0x450109e5, color=0x696969) returned 0x696969 [0083.588] GetNearestColor (hdc=0x450109e5, color=0xa0a0a0) returned 0xa0a0a0 [0083.588] GetNearestColor (hdc=0x450109e5, color=0x0) returned 0x0 [0083.588] GetNearestColor (hdc=0x450109e5, color=0xffffff) returned 0xffffff [0083.588] GetNearestColor (hdc=0x450109e5, color=0xe5e5e5) returned 0xe5e5e5 [0083.588] GetNearestColor (hdc=0x450109e5, color=0xd7d7d7) returned 0xd7d7d7 [0083.588] GetNearestColor (hdc=0x450109e5, color=0x0) returned 0x0 [0083.588] RestoreDC (hdc=0x450109e5, nSavedDC=-1) returned 1 [0083.588] GdipReleaseDC (graphics=0x5bff610, hdc=0x450109e5) returned 0x0 [0083.588] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.589] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.589] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d3780) returned 0x0 [0083.589] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.589] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.589] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.589] GdipGetStringFormatFlags (format=0x5bfb098, flags=0x1cedbc) returned 0x0 [0083.589] GdipGetStringFormatTrimming (format=0x5bfb098, trimming=0x1cedbc) returned 0x0 [0083.589] GdipGetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=0x1cedbc) returned 0x0 [0083.589] GdipGetStringFormatAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.589] GdipGetStringFormatLineAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.589] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.589] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.590] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.590] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.590] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1cec44) returned 0x0 [0083.590] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d385c) returned 0x0 [0083.590] GdipSetStringFormatFlags (format=0x5bfff58, flags=0) returned 0x0 [0083.590] GdipSetStringFormatTrimming (format=0x5bfff58, trimming=0x1) returned 0x0 [0083.590] GdipSetStringFormatHotkeyPrefix (format=0x5bfff58, hotkeyPrefix=2) returned 0x0 [0083.590] GdipSetStringFormatAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.590] GdipSetStringFormatLineAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.590] GdipMeasureString (graphics=0x5c02218, string="0", length=1, font=0x5bfab90, layoutRect=0x1cec24, stringFormat=0x5bfff58, boundingBox=0x1cec14, codepointsFitted=0x1cec10, linesFilled=0x1cec0c) returned 0x0 [0083.591] GdipDeleteStringFormat (format=0x5bfff58) returned 0x0 [0083.591] GdipDeleteGraphics (graphics=0x5c02218) returned 0x0 [0083.592] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.592] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.592] GdipCreateRegion (region=0x1cec90) returned 0x0 [0083.592] GdipGetClip (graphics=0x5bff610, region=0x5c017d8) returned 0x0 [0083.592] GdipCreateMatrix (matrix=0x1cec90) returned 0x0 [0083.592] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0083.592] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1ceca8) returned 0x0 [0083.592] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.592] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.592] LocalFree (hMem=0x691830) returned 0x0 [0083.592] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.592] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.592] LocalFree (hMem=0x691830) returned 0x0 [0083.592] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0083.593] GdipIsInfiniteRegion (region=0x5c017d8, graphics=0x5bff610, result=0x1cecd0) returned 0x0 [0083.593] GdipIsInfiniteRegion (region=0x5c017d8, graphics=0x5bff610, result=0x1cecc0) returned 0x0 [0083.593] GdipGetRegionHRgn (region=0x5c017d8, graphics=0x5bff610, hRgn=0x1cecc0) returned 0x0 [0083.593] GdipDeleteRegion (region=0x5c017d8) returned 0x0 [0083.593] GdipGetDC (graphics=0x5bff610, hdc=0x1cecd8) returned 0x0 [0083.593] GetCurrentObject (hdc=0x450109e5, type=0x1) returned 0x1b00017 [0083.593] GetCurrentObject (hdc=0x450109e5, type=0x2) returned 0x1900010 [0083.593] GetCurrentObject (hdc=0x450109e5, type=0x7) returned 0x350509df [0083.593] GetCurrentObject (hdc=0x450109e5, type=0x6) returned 0x18a0048 [0083.593] SaveDC (hdc=0x450109e5) returned 1 [0083.593] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x76040861 [0083.593] GetClipRgn (hdc=0x450109e5, hrgn=0x76040861) returned 0 [0083.593] SelectClipRgn (hdc=0x450109e5, hrgn=0x8d0406e1) returned 2 [0083.593] DeleteObject (ho=0x76040861) returned 1 [0083.593] DeleteObject (ho=0x8d0406e1) returned 1 [0083.593] OffsetViewportOrgEx (in: hdc=0x450109e5, x=0, y=0, lppt=0x22d3a60 | out: lppt=0x22d3a60) returned 1 [0083.593] GetNearestColor (hdc=0x450109e5, color=0xf0f0f0) returned 0xf0f0f0 [0083.593] CreateSolidBrush (color=0xf0f0f0) returned 0x3f1009da [0083.593] FillRect (hDC=0x450109e5, lprc=0x1cecdc, hbr=0x3f1009da) returned 1 [0083.594] DeleteObject (ho=0x3f1009da) returned 1 [0083.594] RestoreDC (hdc=0x450109e5, nSavedDC=-1) returned 1 [0083.594] GdipReleaseDC (graphics=0x5bff610, hdc=0x450109e5) returned 0x0 [0083.594] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.594] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.594] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d3ae8) returned 0x0 [0083.594] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.594] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.594] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.594] GdipCreateSolidFill (color=0xff000000, brush=0x1ced74) returned 0x0 [0083.594] GdipDrawString (graphics=0x5bff610, string="0", length=1, font=0x5bfab90, layoutRect=0x1ced5c, stringFormat=0x5bfb098, brush=0x5bfff58) returned 0x0 [0083.595] GdipDeleteBrush (brush=0x5bfff58) returned 0x0 [0083.595] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.595] GetFocus () returned 0x10402 [0083.595] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.595] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.595] GdipCreateRegion (region=0x1cebc4) returned 0x0 [0083.595] GdipGetClip (graphics=0x5bff610, region=0x5c01aa8) returned 0x0 [0083.595] GdipCreateMatrix (matrix=0x1cebc4) returned 0x0 [0083.595] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0083.595] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cebdc) returned 0x0 [0083.596] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.596] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.596] LocalFree (hMem=0x691830) returned 0x0 [0083.596] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.596] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.596] LocalFree (hMem=0x691830) returned 0x0 [0083.596] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0083.596] GdipIsInfiniteRegion (region=0x5c01aa8, graphics=0x5bff610, result=0x1cec04) returned 0x0 [0083.596] GdipIsInfiniteRegion (region=0x5c01aa8, graphics=0x5bff610, result=0x1cebf4) returned 0x0 [0083.596] GdipGetRegionHRgn (region=0x5c01aa8, graphics=0x5bff610, hRgn=0x1cebf4) returned 0x0 [0083.596] GdipDeleteRegion (region=0x5c01aa8) returned 0x0 [0083.596] GdipGetDC (graphics=0x5bff610, hdc=0x1cec0c) returned 0x0 [0083.596] GetCurrentObject (hdc=0x450109e5, type=0x1) returned 0x1b00017 [0083.596] GetCurrentObject (hdc=0x450109e5, type=0x2) returned 0x1900010 [0083.596] GetCurrentObject (hdc=0x450109e5, type=0x7) returned 0x350509df [0083.596] GetCurrentObject (hdc=0x450109e5, type=0x6) returned 0x18a0048 [0083.596] SaveDC (hdc=0x450109e5) returned 1 [0083.596] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8e0406e1 [0083.596] GetClipRgn (hdc=0x450109e5, hrgn=0x8e0406e1) returned 0 [0083.596] SelectClipRgn (hdc=0x450109e5, hrgn=0x77040861) returned 2 [0083.596] DeleteObject (ho=0x8e0406e1) returned 1 [0083.597] DeleteObject (ho=0x77040861) returned 1 [0083.597] OffsetViewportOrgEx (in: hdc=0x450109e5, x=0, y=0, lppt=0x22d3d04 | out: lppt=0x22d3d04) returned 1 [0083.597] GetROP2 (hdc=0x450109e5) returned 13 [0083.597] GetBkMode (hdc=0x450109e5) returned 2 [0083.597] SetBkMode (hdc=0x450109e5, mode=1) returned 2 [0083.597] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x163009e8 [0083.597] SelectObject (hdc=0x450109e5, h=0x163009e8) returned 0x1b00017 [0083.597] MoveToEx (in: hdc=0x450109e5, x=97, y=0, lppt=0x22d3d44 | out: lppt=0x22d3d44) returned 1 [0083.597] LineTo (hdc=0x450109e5, x=0, y=0) returned 1 [0083.597] SetBkMode (hdc=0x450109e5, mode=2) returned 1 [0083.597] MoveToEx (in: hdc=0x450109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.597] GetROP2 (hdc=0x450109e5) returned 13 [0083.597] GetBkMode (hdc=0x450109e5) returned 2 [0083.597] SetBkMode (hdc=0x450109e5, mode=1) returned 2 [0083.597] SelectObject (hdc=0x450109e5, h=0x163009e8) returned 0x163009e8 [0083.597] MoveToEx (in: hdc=0x450109e5, x=0, y=0, lppt=0x22d3d54 | out: lppt=0x22d3d54) returned 1 [0083.597] LineTo (hdc=0x450109e5, x=0, y=41) returned 1 [0083.597] SetBkMode (hdc=0x450109e5, mode=2) returned 1 [0083.597] MoveToEx (in: hdc=0x450109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.597] SelectObject (hdc=0x450109e5, h=0x1b00017) returned 0x163009e8 [0083.598] DeleteObject (ho=0x163009e8) returned 1 [0083.598] GetROP2 (hdc=0x450109e5) returned 13 [0083.598] GetBkMode (hdc=0x450109e5) returned 2 [0083.598] SetBkMode (hdc=0x450109e5, mode=1) returned 2 [0083.598] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x153009e9 [0083.598] SelectObject (hdc=0x450109e5, h=0x153009e9) returned 0x1b00017 [0083.598] MoveToEx (in: hdc=0x450109e5, x=0, y=41, lppt=0x22d3d94 | out: lppt=0x22d3d94) returned 1 [0083.598] LineTo (hdc=0x450109e5, x=97, y=41) returned 1 [0083.598] SetBkMode (hdc=0x450109e5, mode=2) returned 1 [0083.598] MoveToEx (in: hdc=0x450109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.598] GetROP2 (hdc=0x450109e5) returned 13 [0083.598] GetBkMode (hdc=0x450109e5) returned 2 [0083.598] SetBkMode (hdc=0x450109e5, mode=1) returned 2 [0083.598] SelectObject (hdc=0x450109e5, h=0x153009e9) returned 0x153009e9 [0083.598] MoveToEx (in: hdc=0x450109e5, x=97, y=41, lppt=0x22d3da4 | out: lppt=0x22d3da4) returned 1 [0083.598] LineTo (hdc=0x450109e5, x=97, y=-1) returned 1 [0083.598] SetBkMode (hdc=0x450109e5, mode=2) returned 1 [0083.599] MoveToEx (in: hdc=0x450109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.599] SelectObject (hdc=0x450109e5, h=0x1b00017) returned 0x153009e9 [0083.599] DeleteObject (ho=0x153009e9) returned 1 [0083.599] GetROP2 (hdc=0x450109e5) returned 13 [0083.599] GetBkMode (hdc=0x450109e5) returned 2 [0083.599] SetBkMode (hdc=0x450109e5, mode=1) returned 2 [0083.599] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x173009e8 [0083.599] SelectObject (hdc=0x450109e5, h=0x173009e8) returned 0x1b00017 [0083.599] MoveToEx (in: hdc=0x450109e5, x=96, y=1, lppt=0x22d3de4 | out: lppt=0x22d3de4) returned 1 [0083.599] LineTo (hdc=0x450109e5, x=1, y=1) returned 1 [0083.599] SetBkMode (hdc=0x450109e5, mode=2) returned 1 [0083.599] MoveToEx (in: hdc=0x450109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.599] GetROP2 (hdc=0x450109e5) returned 13 [0083.599] GetBkMode (hdc=0x450109e5) returned 2 [0083.599] SetBkMode (hdc=0x450109e5, mode=1) returned 2 [0083.599] SelectObject (hdc=0x450109e5, h=0x173009e8) returned 0x173009e8 [0083.599] MoveToEx (in: hdc=0x450109e5, x=1, y=1, lppt=0x22d3df4 | out: lppt=0x22d3df4) returned 1 [0083.599] LineTo (hdc=0x450109e5, x=1, y=40) returned 1 [0083.599] SetBkMode (hdc=0x450109e5, mode=2) returned 1 [0083.599] MoveToEx (in: hdc=0x450109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.599] SelectObject (hdc=0x450109e5, h=0x1b00017) returned 0x173009e8 [0083.599] DeleteObject (ho=0x173009e8) returned 1 [0083.600] GetROP2 (hdc=0x450109e5) returned 13 [0083.600] GetBkMode (hdc=0x450109e5) returned 2 [0083.600] SetBkMode (hdc=0x450109e5, mode=1) returned 2 [0083.600] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x163009e9 [0083.600] SelectObject (hdc=0x450109e5, h=0x163009e9) returned 0x1b00017 [0083.600] MoveToEx (in: hdc=0x450109e5, x=1, y=40, lppt=0x22d3e34 | out: lppt=0x22d3e34) returned 1 [0083.600] LineTo (hdc=0x450109e5, x=96, y=40) returned 1 [0083.600] SetBkMode (hdc=0x450109e5, mode=2) returned 1 [0083.600] MoveToEx (in: hdc=0x450109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.600] GetROP2 (hdc=0x450109e5) returned 13 [0083.600] GetBkMode (hdc=0x450109e5) returned 2 [0083.600] SetBkMode (hdc=0x450109e5, mode=1) returned 2 [0083.600] SelectObject (hdc=0x450109e5, h=0x163009e9) returned 0x163009e9 [0083.600] MoveToEx (in: hdc=0x450109e5, x=96, y=40, lppt=0x22d3e44 | out: lppt=0x22d3e44) returned 1 [0083.600] LineTo (hdc=0x450109e5, x=96, y=0) returned 1 [0083.600] SetBkMode (hdc=0x450109e5, mode=2) returned 1 [0083.600] MoveToEx (in: hdc=0x450109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.600] SelectObject (hdc=0x450109e5, h=0x1b00017) returned 0x163009e9 [0083.600] DeleteObject (ho=0x163009e9) returned 1 [0083.600] RestoreDC (hdc=0x450109e5, nSavedDC=-1) returned 1 [0083.600] GdipReleaseDC (graphics=0x5bff610, hdc=0x450109e5) returned 0x0 [0083.600] GdipGetDC (graphics=0x5bff610, hdc=0x1ceefc) returned 0x0 [0083.601] BitBlt (hdc=0x220106d6, x=0, y=0, cx=98, cy=42, hdcSrc=0x450109e5, x1=0, y1=0, rop=0xcc0020) returned 1 [0083.652] GdipReleaseDC (graphics=0x5bff610, hdc=0x450109e5) returned 0x0 [0083.652] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0083.652] SelectObject (hdc=0x450109e5, h=0x185000f) returned 0x350509df [0083.652] DeleteDC (hdc=0x450109e5) returned 1 [0083.652] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0083.653] EndPaint (hWnd=0x203e4, lpPaint=0x1ceea0) returned 1 [0083.653] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.653] IsWindowUnicode (hWnd=0x203e2) returned 1 [0083.653] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.653] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0083.653] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0083.653] BeginPaint (in: hWnd=0x203e2, lpPaint=0x1ceea4 | out: lpPaint=0x1ceea4) returned 0xc0100ae [0083.653] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0083.653] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e2, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0083.654] GetStockObject (i=5) returned 0x1900015 [0083.654] SelectPalette (hdc=0xc0100ae, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0083.654] CreateCompatibleDC (hdc=0xc0100ae) returned 0x880109e3 [0083.654] SelectObject (hdc=0x880109e3, h=0x350509df) returned 0x185000f [0083.654] GdipCreateFromHDC (hdc=0x880109e3, graphics=0x1ceebc) returned 0x0 [0083.654] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0083.654] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=46, height=42, combineMode=0x0) returned 0x0 [0083.654] GdipCreateMatrix (matrix=0x1cef04) returned 0x0 [0083.654] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0083.654] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cef1c) returned 0x0 [0083.654] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.654] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.654] LocalFree (hMem=0x691830) returned 0x0 [0083.655] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0083.655] GdipCreateRegion (region=0x1cef04) returned 0x0 [0083.655] GdipGetClip (graphics=0x5bff610, region=0x5c02168) returned 0x0 [0083.655] GdipIsInfiniteRegion (region=0x5c02168, graphics=0x5bff610, result=0x1cef10) returned 0x0 [0083.655] GdipSaveGraphics (graphics=0x5bff610, state=0x1cef3c) returned 0x0 [0083.655] GdipRestoreGraphics (graphics=0x5bff610, state=0xfd900dbd) returned 0x0 [0083.655] GdipDeleteRegion (region=0x5c02168) returned 0x0 [0083.655] GdipGetDC (graphics=0x5bff610, hdc=0x1ced24) returned 0x0 [0083.655] GetCurrentObject (hdc=0x880109e3, type=0x1) returned 0x1b00017 [0083.655] GetCurrentObject (hdc=0x880109e3, type=0x2) returned 0x1900010 [0083.655] GetCurrentObject (hdc=0x880109e3, type=0x7) returned 0x350509df [0083.655] GetCurrentObject (hdc=0x880109e3, type=0x6) returned 0x18a0048 [0083.655] SaveDC (hdc=0x880109e3) returned 1 [0083.655] GetNearestColor (hdc=0x880109e3, color=0xf0f0f0) returned 0xf0f0f0 [0083.655] GetNearestColor (hdc=0x880109e3, color=0xa0a0a0) returned 0xa0a0a0 [0083.655] GetNearestColor (hdc=0x880109e3, color=0x696969) returned 0x696969 [0083.655] GetNearestColor (hdc=0x880109e3, color=0xa0a0a0) returned 0xa0a0a0 [0083.656] GetNearestColor (hdc=0x880109e3, color=0x0) returned 0x0 [0083.656] GetNearestColor (hdc=0x880109e3, color=0xffffff) returned 0xffffff [0083.656] GetNearestColor (hdc=0x880109e3, color=0xe5e5e5) returned 0xe5e5e5 [0083.656] GetNearestColor (hdc=0x880109e3, color=0xd7d7d7) returned 0xd7d7d7 [0083.656] GetNearestColor (hdc=0x880109e3, color=0x0) returned 0x0 [0083.656] RestoreDC (hdc=0x880109e3, nSavedDC=-1) returned 1 [0083.656] GdipReleaseDC (graphics=0x5bff610, hdc=0x880109e3) returned 0x0 [0083.656] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.656] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.657] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d4378) returned 0x0 [0083.657] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.657] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.657] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.657] GdipGetStringFormatFlags (format=0x5bfb098, flags=0x1cedbc) returned 0x0 [0083.657] GdipGetStringFormatTrimming (format=0x5bfb098, trimming=0x1cedbc) returned 0x0 [0083.657] GdipGetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=0x1cedbc) returned 0x0 [0083.657] GdipGetStringFormatAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.657] GdipGetStringFormatLineAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.657] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.657] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.657] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.657] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1cec44) returned 0x0 [0083.658] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d4454) returned 0x0 [0083.658] GdipSetStringFormatFlags (format=0x5bfff58, flags=0) returned 0x0 [0083.658] GdipSetStringFormatTrimming (format=0x5bfff58, trimming=0x1) returned 0x0 [0083.658] GdipSetStringFormatHotkeyPrefix (format=0x5bfff58, hotkeyPrefix=2) returned 0x0 [0083.658] GdipSetStringFormatAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.658] GdipSetStringFormatLineAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.658] GdipMeasureString (graphics=0x5c02218, string="9", length=1, font=0x5bfab90, layoutRect=0x1cec24, stringFormat=0x5bfff58, boundingBox=0x1cec14, codepointsFitted=0x1cec10, linesFilled=0x1cec0c) returned 0x0 [0083.658] GdipDeleteStringFormat (format=0x5bfff58) returned 0x0 [0083.658] GdipDeleteGraphics (graphics=0x5c02218) returned 0x0 [0083.658] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.658] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.659] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.659] GdipCreateRegion (region=0x1cec90) returned 0x0 [0083.659] GdipGetClip (graphics=0x5bff610, region=0x5c01868) returned 0x0 [0083.659] GdipCreateMatrix (matrix=0x1cec90) returned 0x0 [0083.659] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0083.659] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1ceca8) returned 0x0 [0083.659] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.659] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.659] LocalFree (hMem=0x691830) returned 0x0 [0083.659] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.659] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.659] LocalFree (hMem=0x691830) returned 0x0 [0083.659] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0083.659] GdipIsInfiniteRegion (region=0x5c01868, graphics=0x5bff610, result=0x1cecd0) returned 0x0 [0083.659] GdipIsInfiniteRegion (region=0x5c01868, graphics=0x5bff610, result=0x1cecc0) returned 0x0 [0083.659] GdipGetRegionHRgn (region=0x5c01868, graphics=0x5bff610, hRgn=0x1cecc0) returned 0x0 [0083.659] GdipDeleteRegion (region=0x5c01868) returned 0x0 [0083.659] GdipGetDC (graphics=0x5bff610, hdc=0x1cecd8) returned 0x0 [0083.659] GetCurrentObject (hdc=0x880109e3, type=0x1) returned 0x1b00017 [0083.659] GetCurrentObject (hdc=0x880109e3, type=0x2) returned 0x1900010 [0083.659] GetCurrentObject (hdc=0x880109e3, type=0x7) returned 0x350509df [0083.660] GetCurrentObject (hdc=0x880109e3, type=0x6) returned 0x18a0048 [0083.660] SaveDC (hdc=0x880109e3) returned 1 [0083.660] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x78040861 [0083.660] GetClipRgn (hdc=0x880109e3, hrgn=0x78040861) returned 0 [0083.660] SelectClipRgn (hdc=0x880109e3, hrgn=0x8f0406e1) returned 2 [0083.660] DeleteObject (ho=0x78040861) returned 1 [0083.660] DeleteObject (ho=0x8f0406e1) returned 1 [0083.660] OffsetViewportOrgEx (in: hdc=0x880109e3, x=0, y=0, lppt=0x22d4658 | out: lppt=0x22d4658) returned 1 [0083.660] GetNearestColor (hdc=0x880109e3, color=0xf0f0f0) returned 0xf0f0f0 [0083.660] CreateSolidBrush (color=0xf0f0f0) returned 0x401009da [0083.660] FillRect (hDC=0x880109e3, lprc=0x1cecdc, hbr=0x401009da) returned 1 [0083.660] DeleteObject (ho=0x401009da) returned 1 [0083.660] RestoreDC (hdc=0x880109e3, nSavedDC=-1) returned 1 [0083.660] GdipReleaseDC (graphics=0x5bff610, hdc=0x880109e3) returned 0x0 [0083.660] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.661] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.661] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.661] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d46e0) returned 0x0 [0083.661] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.661] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.661] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.661] GdipCreateSolidFill (color=0xff000000, brush=0x1ced74) returned 0x0 [0083.661] GdipDrawString (graphics=0x5bff610, string="9", length=1, font=0x5bfab90, layoutRect=0x1ced5c, stringFormat=0x5bfb098, brush=0x5bfff58) returned 0x0 [0083.661] GdipDeleteBrush (brush=0x5bfff58) returned 0x0 [0083.662] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.662] GetFocus () returned 0x10402 [0083.662] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.662] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.662] GdipCreateRegion (region=0x1cebc4) returned 0x0 [0083.662] GdipGetClip (graphics=0x5bff610, region=0x5c01fb8) returned 0x0 [0083.662] GdipCreateMatrix (matrix=0x1cebc4) returned 0x0 [0083.662] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0083.662] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cebdc) returned 0x0 [0083.662] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.662] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.662] LocalFree (hMem=0x691830) returned 0x0 [0083.663] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.663] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.663] LocalFree (hMem=0x691830) returned 0x0 [0083.663] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0083.663] GdipIsInfiniteRegion (region=0x5c01fb8, graphics=0x5bff610, result=0x1cec04) returned 0x0 [0083.663] GdipIsInfiniteRegion (region=0x5c01fb8, graphics=0x5bff610, result=0x1cebf4) returned 0x0 [0083.663] GdipGetRegionHRgn (region=0x5c01fb8, graphics=0x5bff610, hRgn=0x1cebf4) returned 0x0 [0083.663] GdipDeleteRegion (region=0x5c01fb8) returned 0x0 [0083.663] GdipGetDC (graphics=0x5bff610, hdc=0x1cec0c) returned 0x0 [0083.663] GetCurrentObject (hdc=0x880109e3, type=0x1) returned 0x1b00017 [0083.663] GetCurrentObject (hdc=0x880109e3, type=0x2) returned 0x1900010 [0083.663] GetCurrentObject (hdc=0x880109e3, type=0x7) returned 0x350509df [0083.663] GetCurrentObject (hdc=0x880109e3, type=0x6) returned 0x18a0048 [0083.663] SaveDC (hdc=0x880109e3) returned 1 [0083.663] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x900406e1 [0083.663] GetClipRgn (hdc=0x880109e3, hrgn=0x900406e1) returned 0 [0083.663] SelectClipRgn (hdc=0x880109e3, hrgn=0x79040861) returned 2 [0083.663] DeleteObject (ho=0x900406e1) returned 1 [0083.663] DeleteObject (ho=0x79040861) returned 1 [0083.664] OffsetViewportOrgEx (in: hdc=0x880109e3, x=0, y=0, lppt=0x22d48fc | out: lppt=0x22d48fc) returned 1 [0083.664] GetROP2 (hdc=0x880109e3) returned 13 [0083.664] GetBkMode (hdc=0x880109e3) returned 2 [0083.664] SetBkMode (hdc=0x880109e3, mode=1) returned 2 [0083.664] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x173009e9 [0083.664] SelectObject (hdc=0x880109e3, h=0x173009e9) returned 0x1b00017 [0083.664] MoveToEx (in: hdc=0x880109e3, x=45, y=0, lppt=0x22d493c | out: lppt=0x22d493c) returned 1 [0083.664] LineTo (hdc=0x880109e3, x=0, y=0) returned 1 [0083.664] SetBkMode (hdc=0x880109e3, mode=2) returned 1 [0083.664] MoveToEx (in: hdc=0x880109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.664] GetROP2 (hdc=0x880109e3) returned 13 [0083.664] GetBkMode (hdc=0x880109e3) returned 2 [0083.664] SetBkMode (hdc=0x880109e3, mode=1) returned 2 [0083.664] SelectObject (hdc=0x880109e3, h=0x173009e9) returned 0x173009e9 [0083.664] MoveToEx (in: hdc=0x880109e3, x=0, y=0, lppt=0x22d494c | out: lppt=0x22d494c) returned 1 [0083.664] LineTo (hdc=0x880109e3, x=0, y=41) returned 1 [0083.664] SetBkMode (hdc=0x880109e3, mode=2) returned 1 [0083.664] MoveToEx (in: hdc=0x880109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.664] SelectObject (hdc=0x880109e3, h=0x1b00017) returned 0x173009e9 [0083.664] DeleteObject (ho=0x173009e9) returned 1 [0083.664] GetROP2 (hdc=0x880109e3) returned 13 [0083.664] GetBkMode (hdc=0x880109e3) returned 2 [0083.665] SetBkMode (hdc=0x880109e3, mode=1) returned 2 [0083.665] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x183009e8 [0083.665] SelectObject (hdc=0x880109e3, h=0x183009e8) returned 0x1b00017 [0083.665] MoveToEx (in: hdc=0x880109e3, x=0, y=41, lppt=0x22d498c | out: lppt=0x22d498c) returned 1 [0083.665] LineTo (hdc=0x880109e3, x=45, y=41) returned 1 [0083.665] SetBkMode (hdc=0x880109e3, mode=2) returned 1 [0083.665] MoveToEx (in: hdc=0x880109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.665] GetROP2 (hdc=0x880109e3) returned 13 [0083.665] GetBkMode (hdc=0x880109e3) returned 2 [0083.665] SetBkMode (hdc=0x880109e3, mode=1) returned 2 [0083.665] SelectObject (hdc=0x880109e3, h=0x183009e8) returned 0x183009e8 [0083.665] MoveToEx (in: hdc=0x880109e3, x=45, y=41, lppt=0x22d499c | out: lppt=0x22d499c) returned 1 [0083.665] LineTo (hdc=0x880109e3, x=45, y=-1) returned 1 [0083.665] SetBkMode (hdc=0x880109e3, mode=2) returned 1 [0083.665] MoveToEx (in: hdc=0x880109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.665] SelectObject (hdc=0x880109e3, h=0x1b00017) returned 0x183009e8 [0083.665] DeleteObject (ho=0x183009e8) returned 1 [0083.665] GetROP2 (hdc=0x880109e3) returned 13 [0083.665] GetBkMode (hdc=0x880109e3) returned 2 [0083.665] SetBkMode (hdc=0x880109e3, mode=1) returned 2 [0083.665] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x183009e9 [0083.666] SelectObject (hdc=0x880109e3, h=0x183009e9) returned 0x1b00017 [0083.666] MoveToEx (in: hdc=0x880109e3, x=44, y=1, lppt=0x22d49dc | out: lppt=0x22d49dc) returned 1 [0083.666] LineTo (hdc=0x880109e3, x=1, y=1) returned 1 [0083.666] SetBkMode (hdc=0x880109e3, mode=2) returned 1 [0083.666] MoveToEx (in: hdc=0x880109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.666] GetROP2 (hdc=0x880109e3) returned 13 [0083.666] GetBkMode (hdc=0x880109e3) returned 2 [0083.666] SetBkMode (hdc=0x880109e3, mode=1) returned 2 [0083.666] SelectObject (hdc=0x880109e3, h=0x183009e9) returned 0x183009e9 [0083.666] MoveToEx (in: hdc=0x880109e3, x=1, y=1, lppt=0x22d49ec | out: lppt=0x22d49ec) returned 1 [0083.666] LineTo (hdc=0x880109e3, x=1, y=40) returned 1 [0083.666] SetBkMode (hdc=0x880109e3, mode=2) returned 1 [0083.666] MoveToEx (in: hdc=0x880109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.666] SelectObject (hdc=0x880109e3, h=0x1b00017) returned 0x183009e9 [0083.666] DeleteObject (ho=0x183009e9) returned 1 [0083.666] GetROP2 (hdc=0x880109e3) returned 13 [0083.666] GetBkMode (hdc=0x880109e3) returned 2 [0083.666] SetBkMode (hdc=0x880109e3, mode=1) returned 2 [0083.666] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x193009e8 [0083.666] SelectObject (hdc=0x880109e3, h=0x193009e8) returned 0x1b00017 [0083.666] MoveToEx (in: hdc=0x880109e3, x=1, y=40, lppt=0x22d4a2c | out: lppt=0x22d4a2c) returned 1 [0083.667] LineTo (hdc=0x880109e3, x=44, y=40) returned 1 [0083.667] SetBkMode (hdc=0x880109e3, mode=2) returned 1 [0083.667] MoveToEx (in: hdc=0x880109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.667] GetROP2 (hdc=0x880109e3) returned 13 [0083.667] GetBkMode (hdc=0x880109e3) returned 2 [0083.667] SetBkMode (hdc=0x880109e3, mode=1) returned 2 [0083.667] SelectObject (hdc=0x880109e3, h=0x193009e8) returned 0x193009e8 [0083.667] MoveToEx (in: hdc=0x880109e3, x=44, y=40, lppt=0x22d4a3c | out: lppt=0x22d4a3c) returned 1 [0083.667] LineTo (hdc=0x880109e3, x=44, y=0) returned 1 [0083.667] SetBkMode (hdc=0x880109e3, mode=2) returned 1 [0083.667] MoveToEx (in: hdc=0x880109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.667] SelectObject (hdc=0x880109e3, h=0x1b00017) returned 0x193009e8 [0083.667] DeleteObject (ho=0x193009e8) returned 1 [0083.667] RestoreDC (hdc=0x880109e3, nSavedDC=-1) returned 1 [0083.667] GdipReleaseDC (graphics=0x5bff610, hdc=0x880109e3) returned 0x0 [0083.667] GdipGetDC (graphics=0x5bff610, hdc=0x1ceefc) returned 0x0 [0083.667] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=46, cy=42, hdcSrc=0x880109e3, x1=0, y1=0, rop=0xcc0020) returned 1 [0083.710] GdipReleaseDC (graphics=0x5bff610, hdc=0x880109e3) returned 0x0 [0083.711] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0083.720] SelectObject (hdc=0x880109e3, h=0x185000f) returned 0x350509df [0083.720] DeleteDC (hdc=0x880109e3) returned 1 [0083.720] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0083.721] EndPaint (hWnd=0x203e2, lpPaint=0x1ceea0) returned 1 [0083.721] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.721] IsWindowUnicode (hWnd=0x203e0) returned 1 [0083.721] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.721] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0083.721] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0083.721] BeginPaint (in: hWnd=0x203e0, lpPaint=0x1ceea4 | out: lpPaint=0x1ceea4) returned 0x1b0107ae [0083.721] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0083.721] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203e0, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0083.721] GetStockObject (i=5) returned 0x1900015 [0083.722] SelectPalette (hdc=0x1b0107ae, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0083.722] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x6901098e [0083.722] SelectObject (hdc=0x6901098e, h=0x350509df) returned 0x185000f [0083.722] GdipCreateFromHDC (hdc=0x6901098e, graphics=0x1ceebc) returned 0x0 [0083.722] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0083.722] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=46, height=42, combineMode=0x0) returned 0x0 [0083.722] GdipCreateMatrix (matrix=0x1cef04) returned 0x0 [0083.722] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0083.722] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cef1c) returned 0x0 [0083.722] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.722] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.722] LocalFree (hMem=0x691830) returned 0x0 [0083.722] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0083.722] GdipCreateRegion (region=0x1cef04) returned 0x0 [0083.722] GdipGetClip (graphics=0x5bff610, region=0x5c01748) returned 0x0 [0083.723] GdipIsInfiniteRegion (region=0x5c01748, graphics=0x5bff610, result=0x1cef10) returned 0x0 [0083.723] GdipSaveGraphics (graphics=0x5bff610, state=0x1cef3c) returned 0x0 [0083.723] GdipRestoreGraphics (graphics=0x5bff610, state=0xfd8d0dbd) returned 0x0 [0083.723] GdipDeleteRegion (region=0x5c01748) returned 0x0 [0083.723] GdipGetDC (graphics=0x5bff610, hdc=0x1ced24) returned 0x0 [0083.723] GetCurrentObject (hdc=0x6901098e, type=0x1) returned 0x1b00017 [0083.723] GetCurrentObject (hdc=0x6901098e, type=0x2) returned 0x1900010 [0083.723] GetCurrentObject (hdc=0x6901098e, type=0x7) returned 0x350509df [0083.723] GetCurrentObject (hdc=0x6901098e, type=0x6) returned 0x18a0048 [0083.723] SaveDC (hdc=0x6901098e) returned 1 [0083.723] GetNearestColor (hdc=0x6901098e, color=0xf0f0f0) returned 0xf0f0f0 [0083.723] GetNearestColor (hdc=0x6901098e, color=0xa0a0a0) returned 0xa0a0a0 [0083.724] GetNearestColor (hdc=0x6901098e, color=0x696969) returned 0x696969 [0083.724] GetNearestColor (hdc=0x6901098e, color=0xa0a0a0) returned 0xa0a0a0 [0083.724] GetNearestColor (hdc=0x6901098e, color=0x0) returned 0x0 [0083.724] GetNearestColor (hdc=0x6901098e, color=0xffffff) returned 0xffffff [0083.724] GetNearestColor (hdc=0x6901098e, color=0xe5e5e5) returned 0xe5e5e5 [0083.724] GetNearestColor (hdc=0x6901098e, color=0xd7d7d7) returned 0xd7d7d7 [0083.724] GetNearestColor (hdc=0x6901098e, color=0x0) returned 0x0 [0083.724] RestoreDC (hdc=0x6901098e, nSavedDC=-1) returned 1 [0083.724] GdipReleaseDC (graphics=0x5bff610, hdc=0x6901098e) returned 0x0 [0083.724] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.725] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.725] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d4f70) returned 0x0 [0083.725] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.725] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.725] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.725] GdipGetStringFormatFlags (format=0x5bfb098, flags=0x1cedbc) returned 0x0 [0083.725] GdipGetStringFormatTrimming (format=0x5bfb098, trimming=0x1cedbc) returned 0x0 [0083.725] GdipGetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=0x1cedbc) returned 0x0 [0083.725] GdipGetStringFormatAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.725] GdipGetStringFormatLineAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.725] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.725] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.726] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.726] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1cec44) returned 0x0 [0083.726] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d504c) returned 0x0 [0083.726] GdipSetStringFormatFlags (format=0x5bfff58, flags=0) returned 0x0 [0083.726] GdipSetStringFormatTrimming (format=0x5bfff58, trimming=0x1) returned 0x0 [0083.726] GdipSetStringFormatHotkeyPrefix (format=0x5bfff58, hotkeyPrefix=2) returned 0x0 [0083.726] GdipSetStringFormatAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.726] GdipSetStringFormatLineAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.726] GdipMeasureString (graphics=0x5c02218, string="8", length=1, font=0x5bfab90, layoutRect=0x1cec24, stringFormat=0x5bfff58, boundingBox=0x1cec14, codepointsFitted=0x1cec10, linesFilled=0x1cec0c) returned 0x0 [0083.726] GdipDeleteStringFormat (format=0x5bfff58) returned 0x0 [0083.726] GdipDeleteGraphics (graphics=0x5c02218) returned 0x0 [0083.726] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.726] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.727] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.727] GdipCreateRegion (region=0x1cec90) returned 0x0 [0083.727] GdipGetClip (graphics=0x5bff610, region=0x5c01358) returned 0x0 [0083.727] GdipCreateMatrix (matrix=0x1cec90) returned 0x0 [0083.727] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0083.727] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1ceca8) returned 0x0 [0083.727] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.727] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.727] LocalFree (hMem=0x691830) returned 0x0 [0083.727] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.727] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.727] LocalFree (hMem=0x691830) returned 0x0 [0083.727] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0083.727] GdipIsInfiniteRegion (region=0x5c01358, graphics=0x5bff610, result=0x1cecd0) returned 0x0 [0083.727] GdipIsInfiniteRegion (region=0x5c01358, graphics=0x5bff610, result=0x1cecc0) returned 0x0 [0083.727] GdipGetRegionHRgn (region=0x5c01358, graphics=0x5bff610, hRgn=0x1cecc0) returned 0x0 [0083.727] GdipDeleteRegion (region=0x5c01358) returned 0x0 [0083.727] GdipGetDC (graphics=0x5bff610, hdc=0x1cecd8) returned 0x0 [0083.727] GetCurrentObject (hdc=0x6901098e, type=0x1) returned 0x1b00017 [0083.727] GetCurrentObject (hdc=0x6901098e, type=0x2) returned 0x1900010 [0083.728] GetCurrentObject (hdc=0x6901098e, type=0x7) returned 0x350509df [0083.728] GetCurrentObject (hdc=0x6901098e, type=0x6) returned 0x18a0048 [0083.728] SaveDC (hdc=0x6901098e) returned 1 [0083.728] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7a040861 [0083.728] GetClipRgn (hdc=0x6901098e, hrgn=0x7a040861) returned 0 [0083.728] SelectClipRgn (hdc=0x6901098e, hrgn=0x910406e1) returned 2 [0083.728] DeleteObject (ho=0x7a040861) returned 1 [0083.728] DeleteObject (ho=0x910406e1) returned 1 [0083.728] OffsetViewportOrgEx (in: hdc=0x6901098e, x=0, y=0, lppt=0x22d5250 | out: lppt=0x22d5250) returned 1 [0083.728] GetNearestColor (hdc=0x6901098e, color=0xf0f0f0) returned 0xf0f0f0 [0083.728] CreateSolidBrush (color=0xf0f0f0) returned 0x411009da [0083.728] FillRect (hDC=0x6901098e, lprc=0x1cecdc, hbr=0x411009da) returned 1 [0083.728] DeleteObject (ho=0x411009da) returned 1 [0083.728] RestoreDC (hdc=0x6901098e, nSavedDC=-1) returned 1 [0083.728] GdipReleaseDC (graphics=0x5bff610, hdc=0x6901098e) returned 0x0 [0083.728] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.729] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.729] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.729] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d52d8) returned 0x0 [0083.729] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.729] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.729] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.729] GdipCreateSolidFill (color=0xff000000, brush=0x1ced74) returned 0x0 [0083.729] GdipDrawString (graphics=0x5bff610, string="8", length=1, font=0x5bfab90, layoutRect=0x1ced5c, stringFormat=0x5bfb098, brush=0x5bfff58) returned 0x0 [0083.729] GdipDeleteBrush (brush=0x5bfff58) returned 0x0 [0083.729] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.729] GetFocus () returned 0x10402 [0083.730] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.730] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.730] GdipCreateRegion (region=0x1cebc4) returned 0x0 [0083.730] GdipGetClip (graphics=0x5bff610, region=0x5c02048) returned 0x0 [0083.730] GdipCreateMatrix (matrix=0x1cebc4) returned 0x0 [0083.730] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0083.730] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cebdc) returned 0x0 [0083.730] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.730] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.730] LocalFree (hMem=0x691830) returned 0x0 [0083.730] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.730] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.730] LocalFree (hMem=0x691830) returned 0x0 [0083.730] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0083.730] GdipIsInfiniteRegion (region=0x5c02048, graphics=0x5bff610, result=0x1cec04) returned 0x0 [0083.730] GdipIsInfiniteRegion (region=0x5c02048, graphics=0x5bff610, result=0x1cebf4) returned 0x0 [0083.731] GdipGetRegionHRgn (region=0x5c02048, graphics=0x5bff610, hRgn=0x1cebf4) returned 0x0 [0083.731] GdipDeleteRegion (region=0x5c02048) returned 0x0 [0083.731] GdipGetDC (graphics=0x5bff610, hdc=0x1cec0c) returned 0x0 [0083.731] GetCurrentObject (hdc=0x6901098e, type=0x1) returned 0x1b00017 [0083.731] GetCurrentObject (hdc=0x6901098e, type=0x2) returned 0x1900010 [0083.731] GetCurrentObject (hdc=0x6901098e, type=0x7) returned 0x350509df [0083.731] GetCurrentObject (hdc=0x6901098e, type=0x6) returned 0x18a0048 [0083.731] SaveDC (hdc=0x6901098e) returned 1 [0083.731] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x920406e1 [0083.731] GetClipRgn (hdc=0x6901098e, hrgn=0x920406e1) returned 0 [0083.731] SelectClipRgn (hdc=0x6901098e, hrgn=0x7b040861) returned 2 [0083.731] DeleteObject (ho=0x920406e1) returned 1 [0083.731] DeleteObject (ho=0x7b040861) returned 1 [0083.731] OffsetViewportOrgEx (in: hdc=0x6901098e, x=0, y=0, lppt=0x22d54f4 | out: lppt=0x22d54f4) returned 1 [0083.731] GetROP2 (hdc=0x6901098e) returned 13 [0083.731] GetBkMode (hdc=0x6901098e) returned 2 [0083.731] SetBkMode (hdc=0x6901098e, mode=1) returned 2 [0083.731] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x1a3009e8 [0083.731] SelectObject (hdc=0x6901098e, h=0x1a3009e8) returned 0x1b00017 [0083.731] MoveToEx (in: hdc=0x6901098e, x=45, y=0, lppt=0x22d5534 | out: lppt=0x22d5534) returned 1 [0083.731] LineTo (hdc=0x6901098e, x=0, y=0) returned 1 [0083.731] SetBkMode (hdc=0x6901098e, mode=2) returned 1 [0083.731] MoveToEx (in: hdc=0x6901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.732] GetROP2 (hdc=0x6901098e) returned 13 [0083.732] GetBkMode (hdc=0x6901098e) returned 2 [0083.732] SetBkMode (hdc=0x6901098e, mode=1) returned 2 [0083.732] SelectObject (hdc=0x6901098e, h=0x1a3009e8) returned 0x1a3009e8 [0083.732] MoveToEx (in: hdc=0x6901098e, x=0, y=0, lppt=0x22d5544 | out: lppt=0x22d5544) returned 1 [0083.732] LineTo (hdc=0x6901098e, x=0, y=41) returned 1 [0083.732] SetBkMode (hdc=0x6901098e, mode=2) returned 1 [0083.732] MoveToEx (in: hdc=0x6901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.732] SelectObject (hdc=0x6901098e, h=0x1b00017) returned 0x1a3009e8 [0083.732] DeleteObject (ho=0x1a3009e8) returned 1 [0083.732] GetROP2 (hdc=0x6901098e) returned 13 [0083.732] GetBkMode (hdc=0x6901098e) returned 2 [0083.732] SetBkMode (hdc=0x6901098e, mode=1) returned 2 [0083.732] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x193009e9 [0083.732] SelectObject (hdc=0x6901098e, h=0x193009e9) returned 0x1b00017 [0083.732] MoveToEx (in: hdc=0x6901098e, x=0, y=41, lppt=0x22d5584 | out: lppt=0x22d5584) returned 1 [0083.732] LineTo (hdc=0x6901098e, x=45, y=41) returned 1 [0083.732] SetBkMode (hdc=0x6901098e, mode=2) returned 1 [0083.732] MoveToEx (in: hdc=0x6901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.732] GetROP2 (hdc=0x6901098e) returned 13 [0083.732] GetBkMode (hdc=0x6901098e) returned 2 [0083.732] SetBkMode (hdc=0x6901098e, mode=1) returned 2 [0083.732] SelectObject (hdc=0x6901098e, h=0x193009e9) returned 0x193009e9 [0083.732] MoveToEx (in: hdc=0x6901098e, x=45, y=41, lppt=0x22d5594 | out: lppt=0x22d5594) returned 1 [0083.733] LineTo (hdc=0x6901098e, x=45, y=-1) returned 1 [0083.733] SetBkMode (hdc=0x6901098e, mode=2) returned 1 [0083.733] MoveToEx (in: hdc=0x6901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.733] SelectObject (hdc=0x6901098e, h=0x1b00017) returned 0x193009e9 [0083.733] DeleteObject (ho=0x193009e9) returned 1 [0083.733] GetROP2 (hdc=0x6901098e) returned 13 [0083.733] GetBkMode (hdc=0x6901098e) returned 2 [0083.733] SetBkMode (hdc=0x6901098e, mode=1) returned 2 [0083.733] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x1b3009e8 [0083.733] SelectObject (hdc=0x6901098e, h=0x1b3009e8) returned 0x1b00017 [0083.733] MoveToEx (in: hdc=0x6901098e, x=44, y=1, lppt=0x22d55d4 | out: lppt=0x22d55d4) returned 1 [0083.733] LineTo (hdc=0x6901098e, x=1, y=1) returned 1 [0083.733] SetBkMode (hdc=0x6901098e, mode=2) returned 1 [0083.733] MoveToEx (in: hdc=0x6901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.733] GetROP2 (hdc=0x6901098e) returned 13 [0083.733] GetBkMode (hdc=0x6901098e) returned 2 [0083.733] SetBkMode (hdc=0x6901098e, mode=1) returned 2 [0083.733] SelectObject (hdc=0x6901098e, h=0x1b3009e8) returned 0x1b3009e8 [0083.733] MoveToEx (in: hdc=0x6901098e, x=1, y=1, lppt=0x22d55e4 | out: lppt=0x22d55e4) returned 1 [0083.733] LineTo (hdc=0x6901098e, x=1, y=40) returned 1 [0083.733] SetBkMode (hdc=0x6901098e, mode=2) returned 1 [0083.734] MoveToEx (in: hdc=0x6901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.734] SelectObject (hdc=0x6901098e, h=0x1b00017) returned 0x1b3009e8 [0083.734] DeleteObject (ho=0x1b3009e8) returned 1 [0083.734] GetROP2 (hdc=0x6901098e) returned 13 [0083.734] GetBkMode (hdc=0x6901098e) returned 2 [0083.734] SetBkMode (hdc=0x6901098e, mode=1) returned 2 [0083.734] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x1a3009e9 [0083.734] SelectObject (hdc=0x6901098e, h=0x1a3009e9) returned 0x1b00017 [0083.734] MoveToEx (in: hdc=0x6901098e, x=1, y=40, lppt=0x22d5624 | out: lppt=0x22d5624) returned 1 [0083.734] LineTo (hdc=0x6901098e, x=44, y=40) returned 1 [0083.734] SetBkMode (hdc=0x6901098e, mode=2) returned 1 [0083.734] MoveToEx (in: hdc=0x6901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.734] GetROP2 (hdc=0x6901098e) returned 13 [0083.734] GetBkMode (hdc=0x6901098e) returned 2 [0083.734] SetBkMode (hdc=0x6901098e, mode=1) returned 2 [0083.734] SelectObject (hdc=0x6901098e, h=0x1a3009e9) returned 0x1a3009e9 [0083.734] MoveToEx (in: hdc=0x6901098e, x=44, y=40, lppt=0x22d5634 | out: lppt=0x22d5634) returned 1 [0083.734] LineTo (hdc=0x6901098e, x=44, y=0) returned 1 [0083.734] SetBkMode (hdc=0x6901098e, mode=2) returned 1 [0083.734] MoveToEx (in: hdc=0x6901098e, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.734] SelectObject (hdc=0x6901098e, h=0x1b00017) returned 0x1a3009e9 [0083.734] DeleteObject (ho=0x1a3009e9) returned 1 [0083.735] RestoreDC (hdc=0x6901098e, nSavedDC=-1) returned 1 [0083.735] GdipReleaseDC (graphics=0x5bff610, hdc=0x6901098e) returned 0x0 [0083.735] GdipGetDC (graphics=0x5bff610, hdc=0x1ceefc) returned 0x0 [0083.735] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=46, cy=42, hdcSrc=0x6901098e, x1=0, y1=0, rop=0xcc0020) returned 1 [0083.737] GdipReleaseDC (graphics=0x5bff610, hdc=0x6901098e) returned 0x0 [0083.737] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0083.737] SelectObject (hdc=0x6901098e, h=0x185000f) returned 0x350509df [0083.737] DeleteDC (hdc=0x6901098e) returned 1 [0083.737] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0083.737] EndPaint (hWnd=0x203e0, lpPaint=0x1ceea0) returned 1 [0083.738] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.738] IsWindowUnicode (hWnd=0x203dc) returned 1 [0083.738] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0083.738] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0083.738] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0083.738] BeginPaint (in: hWnd=0x203dc, lpPaint=0x1ceea4 | out: lpPaint=0x1ceea4) returned 0x220106d6 [0083.738] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203dc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0083.738] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203dc, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0083.738] GetStockObject (i=5) returned 0x1900015 [0083.738] SelectPalette (hdc=0x220106d6, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0083.739] CreateCompatibleDC (hdc=0x220106d6) returned 0x4f0109e5 [0083.739] SelectObject (hdc=0x4f0109e5, h=0x350509df) returned 0x185000f [0083.739] GdipCreateFromHDC (hdc=0x4f0109e5, graphics=0x1ceebc) returned 0x0 [0083.743] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0083.743] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=46, height=42, combineMode=0x0) returned 0x0 [0083.743] GdipCreateMatrix (matrix=0x1cef04) returned 0x0 [0083.743] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0083.743] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cef1c) returned 0x0 [0083.743] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.743] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.743] LocalFree (hMem=0x691830) returned 0x0 [0083.743] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0083.744] GdipCreateRegion (region=0x1cef04) returned 0x0 [0083.744] GdipGetClip (graphics=0x5bff610, region=0x5c02168) returned 0x0 [0083.744] GdipIsInfiniteRegion (region=0x5c02168, graphics=0x5bff610, result=0x1cef10) returned 0x0 [0083.744] GdipSaveGraphics (graphics=0x5bff610, state=0x1cef3c) returned 0x0 [0083.744] GdipRestoreGraphics (graphics=0x5bff610, state=0xfd8a0dbd) returned 0x0 [0083.744] GdipDeleteRegion (region=0x5c02168) returned 0x0 [0083.744] GdipGetDC (graphics=0x5bff610, hdc=0x1ced24) returned 0x0 [0083.744] GetCurrentObject (hdc=0x4f0109e5, type=0x1) returned 0x1b00017 [0083.744] GetCurrentObject (hdc=0x4f0109e5, type=0x2) returned 0x1900010 [0083.744] GetCurrentObject (hdc=0x4f0109e5, type=0x7) returned 0x350509df [0083.744] GetCurrentObject (hdc=0x4f0109e5, type=0x6) returned 0x18a0048 [0083.744] SaveDC (hdc=0x4f0109e5) returned 1 [0083.744] GetNearestColor (hdc=0x4f0109e5, color=0xf0f0f0) returned 0xf0f0f0 [0083.744] GetNearestColor (hdc=0x4f0109e5, color=0xa0a0a0) returned 0xa0a0a0 [0083.744] GetNearestColor (hdc=0x4f0109e5, color=0x696969) returned 0x696969 [0083.744] GetNearestColor (hdc=0x4f0109e5, color=0xa0a0a0) returned 0xa0a0a0 [0083.744] GetNearestColor (hdc=0x4f0109e5, color=0x0) returned 0x0 [0083.744] GetNearestColor (hdc=0x4f0109e5, color=0xffffff) returned 0xffffff [0083.745] GetNearestColor (hdc=0x4f0109e5, color=0xe5e5e5) returned 0xe5e5e5 [0083.745] GetNearestColor (hdc=0x4f0109e5, color=0xd7d7d7) returned 0xd7d7d7 [0083.745] GetNearestColor (hdc=0x4f0109e5, color=0x0) returned 0x0 [0083.745] RestoreDC (hdc=0x4f0109e5, nSavedDC=-1) returned 1 [0083.745] GdipReleaseDC (graphics=0x5bff610, hdc=0x4f0109e5) returned 0x0 [0083.745] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.745] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.745] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d5b68) returned 0x0 [0083.745] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.745] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.745] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.745] GdipGetStringFormatFlags (format=0x5bfb098, flags=0x1cedbc) returned 0x0 [0083.746] GdipGetStringFormatTrimming (format=0x5bfb098, trimming=0x1cedbc) returned 0x0 [0083.746] GdipGetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=0x1cedbc) returned 0x0 [0083.746] GdipGetStringFormatAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.746] GdipGetStringFormatLineAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0083.746] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.746] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.746] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.746] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1cec44) returned 0x0 [0083.746] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d5c44) returned 0x0 [0083.746] GdipSetStringFormatFlags (format=0x5bfff58, flags=0) returned 0x0 [0083.746] GdipSetStringFormatTrimming (format=0x5bfff58, trimming=0x1) returned 0x0 [0083.746] GdipSetStringFormatHotkeyPrefix (format=0x5bfff58, hotkeyPrefix=2) returned 0x0 [0083.747] GdipSetStringFormatAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.747] GdipSetStringFormatLineAlign (format=0x5bfff58, align=0x1) returned 0x0 [0083.747] GdipMeasureString (graphics=0x5c02218, string="7", length=1, font=0x5bfab90, layoutRect=0x1cec24, stringFormat=0x5bfff58, boundingBox=0x1cec14, codepointsFitted=0x1cec10, linesFilled=0x1cec0c) returned 0x0 [0083.747] GdipDeleteStringFormat (format=0x5bfff58) returned 0x0 [0083.747] GdipDeleteGraphics (graphics=0x5c02218) returned 0x0 [0083.747] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.747] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.747] GdipCreateRegion (region=0x1cec90) returned 0x0 [0083.747] GdipGetClip (graphics=0x5bff610, region=0x5c01e08) returned 0x0 [0083.747] GdipCreateMatrix (matrix=0x1cec90) returned 0x0 [0083.747] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0083.747] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1ceca8) returned 0x0 [0083.747] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.747] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.748] LocalFree (hMem=0x691830) returned 0x0 [0083.748] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.748] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0083.748] LocalFree (hMem=0x691830) returned 0x0 [0083.748] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0083.748] GdipIsInfiniteRegion (region=0x5c01e08, graphics=0x5bff610, result=0x1cecd0) returned 0x0 [0083.748] GdipIsInfiniteRegion (region=0x5c01e08, graphics=0x5bff610, result=0x1cecc0) returned 0x0 [0083.748] GdipGetRegionHRgn (region=0x5c01e08, graphics=0x5bff610, hRgn=0x1cecc0) returned 0x0 [0083.748] GdipDeleteRegion (region=0x5c01e08) returned 0x0 [0083.748] GdipGetDC (graphics=0x5bff610, hdc=0x1cecd8) returned 0x0 [0083.748] GetCurrentObject (hdc=0x4f0109e5, type=0x1) returned 0x1b00017 [0083.748] GetCurrentObject (hdc=0x4f0109e5, type=0x2) returned 0x1900010 [0083.748] GetCurrentObject (hdc=0x4f0109e5, type=0x7) returned 0x350509df [0083.748] GetCurrentObject (hdc=0x4f0109e5, type=0x6) returned 0x18a0048 [0083.748] SaveDC (hdc=0x4f0109e5) returned 1 [0083.748] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7c040861 [0083.748] GetClipRgn (hdc=0x4f0109e5, hrgn=0x7c040861) returned 0 [0083.748] SelectClipRgn (hdc=0x4f0109e5, hrgn=0x930406e1) returned 2 [0083.748] DeleteObject (ho=0x7c040861) returned 1 [0083.748] DeleteObject (ho=0x930406e1) returned 1 [0083.749] OffsetViewportOrgEx (in: hdc=0x4f0109e5, x=0, y=0, lppt=0x22d5e48 | out: lppt=0x22d5e48) returned 1 [0083.749] GetNearestColor (hdc=0x4f0109e5, color=0xf0f0f0) returned 0xf0f0f0 [0083.749] CreateSolidBrush (color=0xf0f0f0) returned 0x421009da [0083.749] FillRect (hDC=0x4f0109e5, lprc=0x1cecdc, hbr=0x421009da) returned 1 [0083.749] DeleteObject (ho=0x421009da) returned 1 [0083.749] RestoreDC (hdc=0x4f0109e5, nSavedDC=-1) returned 1 [0083.749] GdipReleaseDC (graphics=0x5bff610, hdc=0x4f0109e5) returned 0x0 [0083.749] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.749] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.749] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d5ed0) returned 0x0 [0083.749] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.749] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0083.750] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0083.750] GdipCreateSolidFill (color=0xff000000, brush=0x1ced74) returned 0x0 [0083.750] GdipDrawString (graphics=0x5bff610, string="7", length=1, font=0x5bfab90, layoutRect=0x1ced5c, stringFormat=0x5bfb098, brush=0x5bfff58) returned 0x0 [0083.750] GdipDeleteBrush (brush=0x5bfff58) returned 0x0 [0083.750] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0083.750] GetFocus () returned 0x10402 [0083.750] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0083.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0083.750] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0083.750] GdipCreateRegion (region=0x1cebc4) returned 0x0 [0083.750] GdipGetClip (graphics=0x5bff610, region=0x5c01238) returned 0x0 [0083.751] GdipCreateMatrix (matrix=0x1cebc4) returned 0x0 [0083.751] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0083.751] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cebdc) returned 0x0 [0083.751] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.751] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.751] LocalFree (hMem=0x691830) returned 0x0 [0083.751] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0083.751] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0083.751] LocalFree (hMem=0x691830) returned 0x0 [0083.751] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0083.751] GdipIsInfiniteRegion (region=0x5c01238, graphics=0x5bff610, result=0x1cec04) returned 0x0 [0083.751] GdipIsInfiniteRegion (region=0x5c01238, graphics=0x5bff610, result=0x1cebf4) returned 0x0 [0083.751] GdipGetRegionHRgn (region=0x5c01238, graphics=0x5bff610, hRgn=0x1cebf4) returned 0x0 [0083.751] GdipDeleteRegion (region=0x5c01238) returned 0x0 [0083.751] GdipGetDC (graphics=0x5bff610, hdc=0x1cec0c) returned 0x0 [0083.751] GetCurrentObject (hdc=0x4f0109e5, type=0x1) returned 0x1b00017 [0083.751] GetCurrentObject (hdc=0x4f0109e5, type=0x2) returned 0x1900010 [0083.751] GetCurrentObject (hdc=0x4f0109e5, type=0x7) returned 0x350509df [0083.751] GetCurrentObject (hdc=0x4f0109e5, type=0x6) returned 0x18a0048 [0083.752] SaveDC (hdc=0x4f0109e5) returned 1 [0083.752] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x940406e1 [0083.752] GetClipRgn (hdc=0x4f0109e5, hrgn=0x940406e1) returned 0 [0083.752] SelectClipRgn (hdc=0x4f0109e5, hrgn=0x7d040861) returned 2 [0083.752] DeleteObject (ho=0x940406e1) returned 1 [0083.752] DeleteObject (ho=0x7d040861) returned 1 [0083.752] OffsetViewportOrgEx (in: hdc=0x4f0109e5, x=0, y=0, lppt=0x22d60ec | out: lppt=0x22d60ec) returned 1 [0083.752] GetROP2 (hdc=0x4f0109e5) returned 13 [0083.752] GetBkMode (hdc=0x4f0109e5) returned 2 [0083.752] SetBkMode (hdc=0x4f0109e5, mode=1) returned 2 [0083.752] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x1b3009e9 [0083.752] SelectObject (hdc=0x4f0109e5, h=0x1b3009e9) returned 0x1b00017 [0083.752] MoveToEx (in: hdc=0x4f0109e5, x=45, y=0, lppt=0x22d612c | out: lppt=0x22d612c) returned 1 [0083.752] LineTo (hdc=0x4f0109e5, x=0, y=0) returned 1 [0083.752] SetBkMode (hdc=0x4f0109e5, mode=2) returned 1 [0083.752] MoveToEx (in: hdc=0x4f0109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.752] GetROP2 (hdc=0x4f0109e5) returned 13 [0083.752] GetBkMode (hdc=0x4f0109e5) returned 2 [0083.752] SetBkMode (hdc=0x4f0109e5, mode=1) returned 2 [0083.752] SelectObject (hdc=0x4f0109e5, h=0x1b3009e9) returned 0x1b3009e9 [0083.752] MoveToEx (in: hdc=0x4f0109e5, x=0, y=0, lppt=0x22d613c | out: lppt=0x22d613c) returned 1 [0083.752] LineTo (hdc=0x4f0109e5, x=0, y=41) returned 1 [0083.753] SetBkMode (hdc=0x4f0109e5, mode=2) returned 1 [0083.753] MoveToEx (in: hdc=0x4f0109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.753] SelectObject (hdc=0x4f0109e5, h=0x1b00017) returned 0x1b3009e9 [0083.753] DeleteObject (ho=0x1b3009e9) returned 1 [0083.753] GetROP2 (hdc=0x4f0109e5) returned 13 [0083.753] GetBkMode (hdc=0x4f0109e5) returned 2 [0083.753] SetBkMode (hdc=0x4f0109e5, mode=1) returned 2 [0083.753] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x1c3009e8 [0083.753] SelectObject (hdc=0x4f0109e5, h=0x1c3009e8) returned 0x1b00017 [0083.753] MoveToEx (in: hdc=0x4f0109e5, x=0, y=41, lppt=0x22d617c | out: lppt=0x22d617c) returned 1 [0083.753] LineTo (hdc=0x4f0109e5, x=45, y=41) returned 1 [0083.753] SetBkMode (hdc=0x4f0109e5, mode=2) returned 1 [0083.753] MoveToEx (in: hdc=0x4f0109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.753] GetROP2 (hdc=0x4f0109e5) returned 13 [0083.753] GetBkMode (hdc=0x4f0109e5) returned 2 [0083.753] SetBkMode (hdc=0x4f0109e5, mode=1) returned 2 [0083.753] SelectObject (hdc=0x4f0109e5, h=0x1c3009e8) returned 0x1c3009e8 [0083.753] MoveToEx (in: hdc=0x4f0109e5, x=45, y=41, lppt=0x22d618c | out: lppt=0x22d618c) returned 1 [0083.753] LineTo (hdc=0x4f0109e5, x=45, y=-1) returned 1 [0083.753] SetBkMode (hdc=0x4f0109e5, mode=2) returned 1 [0083.753] MoveToEx (in: hdc=0x4f0109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.754] SelectObject (hdc=0x4f0109e5, h=0x1b00017) returned 0x1c3009e8 [0083.754] DeleteObject (ho=0x1c3009e8) returned 1 [0083.754] GetROP2 (hdc=0x4f0109e5) returned 13 [0083.754] GetBkMode (hdc=0x4f0109e5) returned 2 [0083.754] SetBkMode (hdc=0x4f0109e5, mode=1) returned 2 [0083.754] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x1c3009e9 [0083.754] SelectObject (hdc=0x4f0109e5, h=0x1c3009e9) returned 0x1b00017 [0083.754] MoveToEx (in: hdc=0x4f0109e5, x=44, y=1, lppt=0x22d61cc | out: lppt=0x22d61cc) returned 1 [0083.754] LineTo (hdc=0x4f0109e5, x=1, y=1) returned 1 [0083.754] SetBkMode (hdc=0x4f0109e5, mode=2) returned 1 [0083.754] MoveToEx (in: hdc=0x4f0109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.754] GetROP2 (hdc=0x4f0109e5) returned 13 [0083.754] GetBkMode (hdc=0x4f0109e5) returned 2 [0083.754] SetBkMode (hdc=0x4f0109e5, mode=1) returned 2 [0083.754] SelectObject (hdc=0x4f0109e5, h=0x1c3009e9) returned 0x1c3009e9 [0083.754] MoveToEx (in: hdc=0x4f0109e5, x=1, y=1, lppt=0x22d61dc | out: lppt=0x22d61dc) returned 1 [0083.757] LineTo (hdc=0x4f0109e5, x=1, y=40) returned 1 [0083.757] SetBkMode (hdc=0x4f0109e5, mode=2) returned 1 [0083.757] MoveToEx (in: hdc=0x4f0109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.757] SelectObject (hdc=0x4f0109e5, h=0x1b00017) returned 0x1c3009e9 [0083.757] DeleteObject (ho=0x1c3009e9) returned 1 [0083.757] GetROP2 (hdc=0x4f0109e5) returned 13 [0083.757] GetBkMode (hdc=0x4f0109e5) returned 2 [0083.757] SetBkMode (hdc=0x4f0109e5, mode=1) returned 2 [0083.757] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x1d3009e8 [0083.757] SelectObject (hdc=0x4f0109e5, h=0x1d3009e8) returned 0x1b00017 [0083.757] MoveToEx (in: hdc=0x4f0109e5, x=1, y=40, lppt=0x22d621c | out: lppt=0x22d621c) returned 1 [0083.758] LineTo (hdc=0x4f0109e5, x=44, y=40) returned 1 [0083.758] SetBkMode (hdc=0x4f0109e5, mode=2) returned 1 [0083.758] MoveToEx (in: hdc=0x4f0109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.758] GetROP2 (hdc=0x4f0109e5) returned 13 [0083.758] GetBkMode (hdc=0x4f0109e5) returned 2 [0083.758] SetBkMode (hdc=0x4f0109e5, mode=1) returned 2 [0083.758] SelectObject (hdc=0x4f0109e5, h=0x1d3009e8) returned 0x1d3009e8 [0083.758] MoveToEx (in: hdc=0x4f0109e5, x=44, y=40, lppt=0x22d622c | out: lppt=0x22d622c) returned 1 [0083.758] LineTo (hdc=0x4f0109e5, x=44, y=0) returned 1 [0083.758] SetBkMode (hdc=0x4f0109e5, mode=2) returned 1 [0083.758] MoveToEx (in: hdc=0x4f0109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0083.758] SelectObject (hdc=0x4f0109e5, h=0x1b00017) returned 0x1d3009e8 [0083.758] DeleteObject (ho=0x1d3009e8) returned 1 [0083.758] RestoreDC (hdc=0x4f0109e5, nSavedDC=-1) returned 1 [0083.758] GdipReleaseDC (graphics=0x5bff610, hdc=0x4f0109e5) returned 0x0 [0083.758] GdipGetDC (graphics=0x5bff610, hdc=0x1ceefc) returned 0x0 [0083.758] BitBlt (hdc=0x220106d6, x=0, y=0, cx=46, cy=42, hdcSrc=0x4f0109e5, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.140] GdipReleaseDC (graphics=0x5bff610, hdc=0x4f0109e5) returned 0x0 [0084.140] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0084.140] SelectObject (hdc=0x4f0109e5, h=0x185000f) returned 0x350509df [0084.140] DeleteDC (hdc=0x4f0109e5) returned 1 [0084.140] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0084.140] EndPaint (hWnd=0x203dc, lpPaint=0x1ceea0) returned 1 [0084.140] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0084.140] IsWindowUnicode (hWnd=0x203de) returned 1 [0084.140] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0084.140] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0084.140] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0084.141] BeginPaint (in: hWnd=0x203de, lpPaint=0x1ceea4 | out: lpPaint=0x1ceea4) returned 0x220106d6 [0084.141] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203de, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.141] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203de, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0084.141] GetStockObject (i=5) returned 0x1900015 [0084.141] SelectPalette (hdc=0x220106d6, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0084.141] CreateCompatibleDC (hdc=0x220106d6) returned 0x910109e3 [0084.141] SelectObject (hdc=0x910109e3, h=0x350509df) returned 0x185000f [0084.141] GdipCreateFromHDC (hdc=0x910109e3, graphics=0x1ceebc) returned 0x0 [0084.141] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0084.142] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=46, height=42, combineMode=0x0) returned 0x0 [0084.142] GdipCreateMatrix (matrix=0x1cef04) returned 0x0 [0084.142] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0084.142] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cef1c) returned 0x0 [0084.142] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.142] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0084.142] LocalFree (hMem=0x691830) returned 0x0 [0084.142] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0084.142] GdipCreateRegion (region=0x1cef04) returned 0x0 [0084.142] GdipGetClip (graphics=0x5bff610, region=0x5c017d8) returned 0x0 [0084.142] GdipIsInfiniteRegion (region=0x5c017d8, graphics=0x5bff610, result=0x1cef10) returned 0x0 [0084.142] GdipSaveGraphics (graphics=0x5bff610, state=0x1cef3c) returned 0x0 [0084.142] GdipRestoreGraphics (graphics=0x5bff610, state=0xfd870dbd) returned 0x0 [0084.142] GdipDeleteRegion (region=0x5c017d8) returned 0x0 [0084.142] GdipGetDC (graphics=0x5bff610, hdc=0x1ced24) returned 0x0 [0084.142] GetCurrentObject (hdc=0x910109e3, type=0x1) returned 0x1b00017 [0084.142] GetCurrentObject (hdc=0x910109e3, type=0x2) returned 0x1900010 [0084.142] GetCurrentObject (hdc=0x910109e3, type=0x7) returned 0x350509df [0084.142] GetCurrentObject (hdc=0x910109e3, type=0x6) returned 0x18a0048 [0084.142] SaveDC (hdc=0x910109e3) returned 1 [0084.143] GetNearestColor (hdc=0x910109e3, color=0xf0f0f0) returned 0xf0f0f0 [0084.143] GetNearestColor (hdc=0x910109e3, color=0xa0a0a0) returned 0xa0a0a0 [0084.143] GetNearestColor (hdc=0x910109e3, color=0x696969) returned 0x696969 [0084.143] GetNearestColor (hdc=0x910109e3, color=0xa0a0a0) returned 0xa0a0a0 [0084.143] GetNearestColor (hdc=0x910109e3, color=0x0) returned 0x0 [0084.143] GetNearestColor (hdc=0x910109e3, color=0xffffff) returned 0xffffff [0084.143] GetNearestColor (hdc=0x910109e3, color=0xe5e5e5) returned 0xe5e5e5 [0084.143] GetNearestColor (hdc=0x910109e3, color=0xd7d7d7) returned 0xd7d7d7 [0084.143] GetNearestColor (hdc=0x910109e3, color=0x0) returned 0x0 [0084.143] RestoreDC (hdc=0x910109e3, nSavedDC=-1) returned 1 [0084.143] GdipReleaseDC (graphics=0x5bff610, hdc=0x910109e3) returned 0x0 [0084.143] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.144] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.144] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d6760) returned 0x0 [0084.144] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.144] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.144] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0084.144] GdipGetStringFormatFlags (format=0x5bfb098, flags=0x1cedbc) returned 0x0 [0084.144] GdipGetStringFormatTrimming (format=0x5bfb098, trimming=0x1cedbc) returned 0x0 [0084.144] GdipGetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=0x1cedbc) returned 0x0 [0084.144] GdipGetStringFormatAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0084.144] GdipGetStringFormatLineAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0084.144] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0084.145] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.145] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.145] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.145] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1cec44) returned 0x0 [0084.145] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d683c) returned 0x0 [0084.145] GdipSetStringFormatFlags (format=0x5bfff58, flags=0) returned 0x0 [0084.145] GdipSetStringFormatTrimming (format=0x5bfff58, trimming=0x1) returned 0x0 [0084.145] GdipSetStringFormatHotkeyPrefix (format=0x5bfff58, hotkeyPrefix=2) returned 0x0 [0084.145] GdipSetStringFormatAlign (format=0x5bfff58, align=0x1) returned 0x0 [0084.145] GdipSetStringFormatLineAlign (format=0x5bfff58, align=0x1) returned 0x0 [0084.146] GdipMeasureString (graphics=0x5c02218, string="6", length=1, font=0x5bfab90, layoutRect=0x1cec24, stringFormat=0x5bfff58, boundingBox=0x1cec14, codepointsFitted=0x1cec10, linesFilled=0x1cec0c) returned 0x0 [0084.146] GdipDeleteStringFormat (format=0x5bfff58) returned 0x0 [0084.146] GdipDeleteGraphics (graphics=0x5c02218) returned 0x0 [0084.146] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.146] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.146] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.146] GdipCreateRegion (region=0x1cec90) returned 0x0 [0084.146] GdipGetClip (graphics=0x5bff610, region=0x5c01598) returned 0x0 [0084.146] GdipCreateMatrix (matrix=0x1cec90) returned 0x0 [0084.146] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0084.146] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1ceca8) returned 0x0 [0084.146] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.146] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0084.146] LocalFree (hMem=0x691830) returned 0x0 [0084.147] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.147] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0084.147] LocalFree (hMem=0x691830) returned 0x0 [0084.147] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0084.147] GdipIsInfiniteRegion (region=0x5c01598, graphics=0x5bff610, result=0x1cecd0) returned 0x0 [0084.147] GdipIsInfiniteRegion (region=0x5c01598, graphics=0x5bff610, result=0x1cecc0) returned 0x0 [0084.147] GdipGetRegionHRgn (region=0x5c01598, graphics=0x5bff610, hRgn=0x1cecc0) returned 0x0 [0084.147] GdipDeleteRegion (region=0x5c01598) returned 0x0 [0084.147] GdipGetDC (graphics=0x5bff610, hdc=0x1cecd8) returned 0x0 [0084.147] GetCurrentObject (hdc=0x910109e3, type=0x1) returned 0x1b00017 [0084.147] GetCurrentObject (hdc=0x910109e3, type=0x2) returned 0x1900010 [0084.147] GetCurrentObject (hdc=0x910109e3, type=0x7) returned 0x350509df [0084.147] GetCurrentObject (hdc=0x910109e3, type=0x6) returned 0x18a0048 [0084.147] SaveDC (hdc=0x910109e3) returned 1 [0084.147] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7e040861 [0084.147] GetClipRgn (hdc=0x910109e3, hrgn=0x7e040861) returned 0 [0084.147] SelectClipRgn (hdc=0x910109e3, hrgn=0x950406e1) returned 2 [0084.147] DeleteObject (ho=0x7e040861) returned 1 [0084.147] DeleteObject (ho=0x950406e1) returned 1 [0084.147] OffsetViewportOrgEx (in: hdc=0x910109e3, x=0, y=0, lppt=0x22d6a40 | out: lppt=0x22d6a40) returned 1 [0084.147] GetNearestColor (hdc=0x910109e3, color=0xf0f0f0) returned 0xf0f0f0 [0084.148] CreateSolidBrush (color=0xf0f0f0) returned 0x431009da [0084.148] FillRect (hDC=0x910109e3, lprc=0x1cecdc, hbr=0x431009da) returned 1 [0084.148] DeleteObject (ho=0x431009da) returned 1 [0084.148] RestoreDC (hdc=0x910109e3, nSavedDC=-1) returned 1 [0084.148] GdipReleaseDC (graphics=0x5bff610, hdc=0x910109e3) returned 0x0 [0084.148] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.148] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.148] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.148] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d6ac8) returned 0x0 [0084.148] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.148] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.148] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0084.148] GdipCreateSolidFill (color=0xff000000, brush=0x1ced74) returned 0x0 [0084.148] GdipDrawString (graphics=0x5bff610, string="6", length=1, font=0x5bfab90, layoutRect=0x1ced5c, stringFormat=0x5bfb098, brush=0x5bfff58) returned 0x0 [0084.149] GdipDeleteBrush (brush=0x5bfff58) returned 0x0 [0084.149] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0084.149] GetFocus () returned 0x10402 [0084.149] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.149] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.149] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.152] GdipCreateRegion (region=0x1cebc4) returned 0x0 [0084.152] GdipGetClip (graphics=0x5bff610, region=0x5c01aa8) returned 0x0 [0084.152] GdipCreateMatrix (matrix=0x1cebc4) returned 0x0 [0084.152] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0084.152] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cebdc) returned 0x0 [0084.152] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.152] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0084.152] LocalFree (hMem=0x691830) returned 0x0 [0084.152] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.152] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0084.152] LocalFree (hMem=0x691830) returned 0x0 [0084.152] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0084.152] GdipIsInfiniteRegion (region=0x5c01aa8, graphics=0x5bff610, result=0x1cec04) returned 0x0 [0084.152] GdipIsInfiniteRegion (region=0x5c01aa8, graphics=0x5bff610, result=0x1cebf4) returned 0x0 [0084.153] GdipGetRegionHRgn (region=0x5c01aa8, graphics=0x5bff610, hRgn=0x1cebf4) returned 0x0 [0084.153] GdipDeleteRegion (region=0x5c01aa8) returned 0x0 [0084.153] GdipGetDC (graphics=0x5bff610, hdc=0x1cec0c) returned 0x0 [0084.153] GetCurrentObject (hdc=0x910109e3, type=0x1) returned 0x1b00017 [0084.153] GetCurrentObject (hdc=0x910109e3, type=0x2) returned 0x1900010 [0084.153] GetCurrentObject (hdc=0x910109e3, type=0x7) returned 0x350509df [0084.153] GetCurrentObject (hdc=0x910109e3, type=0x6) returned 0x18a0048 [0084.153] SaveDC (hdc=0x910109e3) returned 1 [0084.153] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x960406e1 [0084.153] GetClipRgn (hdc=0x910109e3, hrgn=0x960406e1) returned 0 [0084.153] SelectClipRgn (hdc=0x910109e3, hrgn=0x7f040861) returned 2 [0084.153] DeleteObject (ho=0x960406e1) returned 1 [0084.153] DeleteObject (ho=0x7f040861) returned 1 [0084.153] OffsetViewportOrgEx (in: hdc=0x910109e3, x=0, y=0, lppt=0x22d6ce4 | out: lppt=0x22d6ce4) returned 1 [0084.153] GetROP2 (hdc=0x910109e3) returned 13 [0084.153] GetBkMode (hdc=0x910109e3) returned 2 [0084.153] SetBkMode (hdc=0x910109e3, mode=1) returned 2 [0084.153] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x103009de [0084.153] SelectObject (hdc=0x910109e3, h=0x103009de) returned 0x1b00017 [0084.153] MoveToEx (in: hdc=0x910109e3, x=45, y=0, lppt=0x22d6d24 | out: lppt=0x22d6d24) returned 1 [0084.153] LineTo (hdc=0x910109e3, x=0, y=0) returned 1 [0084.154] SetBkMode (hdc=0x910109e3, mode=2) returned 1 [0084.154] MoveToEx (in: hdc=0x910109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.154] GetROP2 (hdc=0x910109e3) returned 13 [0084.154] GetBkMode (hdc=0x910109e3) returned 2 [0084.154] SetBkMode (hdc=0x910109e3, mode=1) returned 2 [0084.154] SelectObject (hdc=0x910109e3, h=0x103009de) returned 0x103009de [0084.154] MoveToEx (in: hdc=0x910109e3, x=0, y=0, lppt=0x22d6d34 | out: lppt=0x22d6d34) returned 1 [0084.154] LineTo (hdc=0x910109e3, x=0, y=41) returned 1 [0084.154] SetBkMode (hdc=0x910109e3, mode=2) returned 1 [0084.154] MoveToEx (in: hdc=0x910109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.154] SelectObject (hdc=0x910109e3, h=0x1b00017) returned 0x103009de [0084.154] DeleteObject (ho=0x103009de) returned 1 [0084.154] GetROP2 (hdc=0x910109e3) returned 13 [0084.154] GetBkMode (hdc=0x910109e3) returned 2 [0084.154] SetBkMode (hdc=0x910109e3, mode=1) returned 2 [0084.154] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x7230098e [0084.154] SelectObject (hdc=0x910109e3, h=0x7230098e) returned 0x1b00017 [0084.154] MoveToEx (in: hdc=0x910109e3, x=0, y=41, lppt=0x22d6d74 | out: lppt=0x22d6d74) returned 1 [0084.154] LineTo (hdc=0x910109e3, x=45, y=41) returned 1 [0084.154] SetBkMode (hdc=0x910109e3, mode=2) returned 1 [0084.154] MoveToEx (in: hdc=0x910109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.154] GetROP2 (hdc=0x910109e3) returned 13 [0084.155] GetBkMode (hdc=0x910109e3) returned 2 [0084.155] SetBkMode (hdc=0x910109e3, mode=1) returned 2 [0084.155] SelectObject (hdc=0x910109e3, h=0x7230098e) returned 0x7230098e [0084.155] MoveToEx (in: hdc=0x910109e3, x=45, y=41, lppt=0x22d6d84 | out: lppt=0x22d6d84) returned 1 [0084.155] LineTo (hdc=0x910109e3, x=45, y=-1) returned 1 [0084.155] SetBkMode (hdc=0x910109e3, mode=2) returned 1 [0084.155] MoveToEx (in: hdc=0x910109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.155] SelectObject (hdc=0x910109e3, h=0x1b00017) returned 0x7230098e [0084.155] DeleteObject (ho=0x7230098e) returned 1 [0084.155] GetROP2 (hdc=0x910109e3) returned 13 [0084.155] GetBkMode (hdc=0x910109e3) returned 2 [0084.155] SetBkMode (hdc=0x910109e3, mode=1) returned 2 [0084.155] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x113009de [0084.155] SelectObject (hdc=0x910109e3, h=0x113009de) returned 0x1b00017 [0084.155] MoveToEx (in: hdc=0x910109e3, x=44, y=1, lppt=0x22d6dc4 | out: lppt=0x22d6dc4) returned 1 [0084.155] LineTo (hdc=0x910109e3, x=1, y=1) returned 1 [0084.155] SetBkMode (hdc=0x910109e3, mode=2) returned 1 [0084.155] MoveToEx (in: hdc=0x910109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.155] GetROP2 (hdc=0x910109e3) returned 13 [0084.155] GetBkMode (hdc=0x910109e3) returned 2 [0084.155] SetBkMode (hdc=0x910109e3, mode=1) returned 2 [0084.155] SelectObject (hdc=0x910109e3, h=0x113009de) returned 0x113009de [0084.155] MoveToEx (in: hdc=0x910109e3, x=1, y=1, lppt=0x22d6dd4 | out: lppt=0x22d6dd4) returned 1 [0084.156] LineTo (hdc=0x910109e3, x=1, y=40) returned 1 [0084.156] SetBkMode (hdc=0x910109e3, mode=2) returned 1 [0084.156] MoveToEx (in: hdc=0x910109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.156] SelectObject (hdc=0x910109e3, h=0x1b00017) returned 0x113009de [0084.156] DeleteObject (ho=0x113009de) returned 1 [0084.156] GetROP2 (hdc=0x910109e3) returned 13 [0084.156] GetBkMode (hdc=0x910109e3) returned 2 [0084.156] SetBkMode (hdc=0x910109e3, mode=1) returned 2 [0084.156] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x7330098e [0084.156] SelectObject (hdc=0x910109e3, h=0x7330098e) returned 0x1b00017 [0084.156] MoveToEx (in: hdc=0x910109e3, x=1, y=40, lppt=0x22d6e14 | out: lppt=0x22d6e14) returned 1 [0084.156] LineTo (hdc=0x910109e3, x=44, y=40) returned 1 [0084.156] SetBkMode (hdc=0x910109e3, mode=2) returned 1 [0084.156] MoveToEx (in: hdc=0x910109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.156] GetROP2 (hdc=0x910109e3) returned 13 [0084.156] GetBkMode (hdc=0x910109e3) returned 2 [0084.156] SetBkMode (hdc=0x910109e3, mode=1) returned 2 [0084.156] SelectObject (hdc=0x910109e3, h=0x7330098e) returned 0x7330098e [0084.156] MoveToEx (in: hdc=0x910109e3, x=44, y=40, lppt=0x22d6e24 | out: lppt=0x22d6e24) returned 1 [0084.156] LineTo (hdc=0x910109e3, x=44, y=0) returned 1 [0084.156] SetBkMode (hdc=0x910109e3, mode=2) returned 1 [0084.156] MoveToEx (in: hdc=0x910109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.156] SelectObject (hdc=0x910109e3, h=0x1b00017) returned 0x7330098e [0084.157] DeleteObject (ho=0x7330098e) returned 1 [0084.157] RestoreDC (hdc=0x910109e3, nSavedDC=-1) returned 1 [0084.157] GdipReleaseDC (graphics=0x5bff610, hdc=0x910109e3) returned 0x0 [0084.157] GdipGetDC (graphics=0x5bff610, hdc=0x1ceefc) returned 0x0 [0084.157] BitBlt (hdc=0x220106d6, x=0, y=0, cx=46, cy=42, hdcSrc=0x910109e3, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.188] GdipReleaseDC (graphics=0x5bff610, hdc=0x910109e3) returned 0x0 [0084.188] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0084.188] SelectObject (hdc=0x910109e3, h=0x185000f) returned 0x350509df [0084.188] DeleteDC (hdc=0x910109e3) returned 1 [0084.188] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0084.188] EndPaint (hWnd=0x203de, lpPaint=0x1ceea0) returned 1 [0084.189] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0084.189] IsWindowUnicode (hWnd=0x203da) returned 1 [0084.189] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0084.189] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0084.189] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0084.189] BeginPaint (in: hWnd=0x203da, lpPaint=0x1ceea4 | out: lpPaint=0x1ceea4) returned 0xc0100ae [0084.189] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203da, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.189] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203da, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0084.190] GetStockObject (i=5) returned 0x1900015 [0084.190] SelectPalette (hdc=0xc0100ae, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0084.190] CreateCompatibleDC (hdc=0xc0100ae) returned 0x1b0109dd [0084.190] SelectObject (hdc=0x1b0109dd, h=0x350509df) returned 0x185000f [0084.190] GdipCreateFromHDC (hdc=0x1b0109dd, graphics=0x1ceebc) returned 0x0 [0084.190] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0084.190] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=46, height=42, combineMode=0x0) returned 0x0 [0084.190] GdipCreateMatrix (matrix=0x1cef04) returned 0x0 [0084.190] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0084.190] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cef1c) returned 0x0 [0084.190] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.190] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0084.190] LocalFree (hMem=0x691830) returned 0x0 [0084.191] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0084.191] GdipCreateRegion (region=0x1cef04) returned 0x0 [0084.191] GdipGetClip (graphics=0x5bff610, region=0x5c01868) returned 0x0 [0084.191] GdipIsInfiniteRegion (region=0x5c01868, graphics=0x5bff610, result=0x1cef10) returned 0x0 [0084.191] GdipSaveGraphics (graphics=0x5bff610, state=0x1cef3c) returned 0x0 [0084.191] GdipRestoreGraphics (graphics=0x5bff610, state=0xfd840dbd) returned 0x0 [0084.191] GdipDeleteRegion (region=0x5c01868) returned 0x0 [0084.191] GdipGetDC (graphics=0x5bff610, hdc=0x1ced24) returned 0x0 [0084.191] GetCurrentObject (hdc=0x1b0109dd, type=0x1) returned 0x1b00017 [0084.191] GetCurrentObject (hdc=0x1b0109dd, type=0x2) returned 0x1900010 [0084.191] GetCurrentObject (hdc=0x1b0109dd, type=0x7) returned 0x350509df [0084.191] GetCurrentObject (hdc=0x1b0109dd, type=0x6) returned 0x18a0048 [0084.191] SaveDC (hdc=0x1b0109dd) returned 1 [0084.191] GetNearestColor (hdc=0x1b0109dd, color=0xf0f0f0) returned 0xf0f0f0 [0084.191] GetNearestColor (hdc=0x1b0109dd, color=0xa0a0a0) returned 0xa0a0a0 [0084.191] GetNearestColor (hdc=0x1b0109dd, color=0x696969) returned 0x696969 [0084.191] GetNearestColor (hdc=0x1b0109dd, color=0xa0a0a0) returned 0xa0a0a0 [0084.191] GetNearestColor (hdc=0x1b0109dd, color=0x0) returned 0x0 [0084.191] GetNearestColor (hdc=0x1b0109dd, color=0xffffff) returned 0xffffff [0084.191] GetNearestColor (hdc=0x1b0109dd, color=0xe5e5e5) returned 0xe5e5e5 [0084.192] GetNearestColor (hdc=0x1b0109dd, color=0xd7d7d7) returned 0xd7d7d7 [0084.192] GetNearestColor (hdc=0x1b0109dd, color=0x0) returned 0x0 [0084.192] RestoreDC (hdc=0x1b0109dd, nSavedDC=-1) returned 1 [0084.192] GdipReleaseDC (graphics=0x5bff610, hdc=0x1b0109dd) returned 0x0 [0084.193] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.193] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.193] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d7358) returned 0x0 [0084.193] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.193] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.193] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0084.193] GdipGetStringFormatFlags (format=0x5bfb098, flags=0x1cedbc) returned 0x0 [0084.194] GdipGetStringFormatTrimming (format=0x5bfb098, trimming=0x1cedbc) returned 0x0 [0084.194] GdipGetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=0x1cedbc) returned 0x0 [0084.194] GdipGetStringFormatAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0084.194] GdipGetStringFormatLineAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0084.194] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0084.194] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.194] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.194] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1cec44) returned 0x0 [0084.194] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d7434) returned 0x0 [0084.194] GdipSetStringFormatFlags (format=0x5bfff58, flags=0) returned 0x0 [0084.194] GdipSetStringFormatTrimming (format=0x5bfff58, trimming=0x1) returned 0x0 [0084.195] GdipSetStringFormatHotkeyPrefix (format=0x5bfff58, hotkeyPrefix=2) returned 0x0 [0084.195] GdipSetStringFormatAlign (format=0x5bfff58, align=0x1) returned 0x0 [0084.195] GdipSetStringFormatLineAlign (format=0x5bfff58, align=0x1) returned 0x0 [0084.195] GdipMeasureString (graphics=0x5c02218, string="5", length=1, font=0x5bfab90, layoutRect=0x1cec24, stringFormat=0x5bfff58, boundingBox=0x1cec14, codepointsFitted=0x1cec10, linesFilled=0x1cec0c) returned 0x0 [0084.195] GdipDeleteStringFormat (format=0x5bfff58) returned 0x0 [0084.195] GdipDeleteGraphics (graphics=0x5c02218) returned 0x0 [0084.195] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.195] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.195] GdipCreateRegion (region=0x1cec90) returned 0x0 [0084.195] GdipGetClip (graphics=0x5bff610, region=0x5c01bc8) returned 0x0 [0084.195] GdipCreateMatrix (matrix=0x1cec90) returned 0x0 [0084.195] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0084.195] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1ceca8) returned 0x0 [0084.196] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.196] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0084.196] LocalFree (hMem=0x691830) returned 0x0 [0084.196] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.196] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0084.196] LocalFree (hMem=0x691830) returned 0x0 [0084.196] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0084.196] GdipIsInfiniteRegion (region=0x5c01bc8, graphics=0x5bff610, result=0x1cecd0) returned 0x0 [0084.196] GdipIsInfiniteRegion (region=0x5c01bc8, graphics=0x5bff610, result=0x1cecc0) returned 0x0 [0084.196] GdipGetRegionHRgn (region=0x5c01bc8, graphics=0x5bff610, hRgn=0x1cecc0) returned 0x0 [0084.196] GdipDeleteRegion (region=0x5c01bc8) returned 0x0 [0084.196] GdipGetDC (graphics=0x5bff610, hdc=0x1cecd8) returned 0x0 [0084.196] GetCurrentObject (hdc=0x1b0109dd, type=0x1) returned 0x1b00017 [0084.196] GetCurrentObject (hdc=0x1b0109dd, type=0x2) returned 0x1900010 [0084.196] GetCurrentObject (hdc=0x1b0109dd, type=0x7) returned 0x350509df [0084.196] GetCurrentObject (hdc=0x1b0109dd, type=0x6) returned 0x18a0048 [0084.196] SaveDC (hdc=0x1b0109dd) returned 1 [0084.196] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x80040861 [0084.196] GetClipRgn (hdc=0x1b0109dd, hrgn=0x80040861) returned 0 [0084.196] SelectClipRgn (hdc=0x1b0109dd, hrgn=0x970406e1) returned 2 [0084.196] DeleteObject (ho=0x80040861) returned 1 [0084.197] DeleteObject (ho=0x970406e1) returned 1 [0084.197] OffsetViewportOrgEx (in: hdc=0x1b0109dd, x=0, y=0, lppt=0x22d7638 | out: lppt=0x22d7638) returned 1 [0084.197] GetNearestColor (hdc=0x1b0109dd, color=0xf0f0f0) returned 0xf0f0f0 [0084.197] CreateSolidBrush (color=0xf0f0f0) returned 0x441009da [0084.197] FillRect (hDC=0x1b0109dd, lprc=0x1cecdc, hbr=0x441009da) returned 1 [0084.197] DeleteObject (ho=0x441009da) returned 1 [0084.197] RestoreDC (hdc=0x1b0109dd, nSavedDC=-1) returned 1 [0084.197] GdipReleaseDC (graphics=0x5bff610, hdc=0x1b0109dd) returned 0x0 [0084.197] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.197] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.197] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.197] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d76c0) returned 0x0 [0084.197] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.197] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.198] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0084.198] GdipCreateSolidFill (color=0xff000000, brush=0x1ced74) returned 0x0 [0084.198] GdipDrawString (graphics=0x5bff610, string="5", length=1, font=0x5bfab90, layoutRect=0x1ced5c, stringFormat=0x5bfb098, brush=0x5bfff58) returned 0x0 [0084.198] GdipDeleteBrush (brush=0x5bfff58) returned 0x0 [0084.198] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0084.198] GetFocus () returned 0x10402 [0084.198] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.198] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.198] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.198] GdipCreateRegion (region=0x1cebc4) returned 0x0 [0084.199] GdipGetClip (graphics=0x5bff610, region=0x5c020d8) returned 0x0 [0084.199] GdipCreateMatrix (matrix=0x1cebc4) returned 0x0 [0084.199] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0084.199] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cebdc) returned 0x0 [0084.199] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.199] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0084.199] LocalFree (hMem=0x691830) returned 0x0 [0084.199] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.199] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0084.199] LocalFree (hMem=0x691830) returned 0x0 [0084.199] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0084.199] GdipIsInfiniteRegion (region=0x5c020d8, graphics=0x5bff610, result=0x1cec04) returned 0x0 [0084.199] GdipIsInfiniteRegion (region=0x5c020d8, graphics=0x5bff610, result=0x1cebf4) returned 0x0 [0084.199] GdipGetRegionHRgn (region=0x5c020d8, graphics=0x5bff610, hRgn=0x1cebf4) returned 0x0 [0084.199] GdipDeleteRegion (region=0x5c020d8) returned 0x0 [0084.199] GdipGetDC (graphics=0x5bff610, hdc=0x1cec0c) returned 0x0 [0084.199] GetCurrentObject (hdc=0x1b0109dd, type=0x1) returned 0x1b00017 [0084.199] GetCurrentObject (hdc=0x1b0109dd, type=0x2) returned 0x1900010 [0084.199] GetCurrentObject (hdc=0x1b0109dd, type=0x7) returned 0x350509df [0084.199] GetCurrentObject (hdc=0x1b0109dd, type=0x6) returned 0x18a0048 [0084.199] SaveDC (hdc=0x1b0109dd) returned 1 [0084.200] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x980406e1 [0084.200] GetClipRgn (hdc=0x1b0109dd, hrgn=0x980406e1) returned 0 [0084.200] SelectClipRgn (hdc=0x1b0109dd, hrgn=0x81040861) returned 2 [0084.200] DeleteObject (ho=0x980406e1) returned 1 [0084.200] DeleteObject (ho=0x81040861) returned 1 [0084.200] OffsetViewportOrgEx (in: hdc=0x1b0109dd, x=0, y=0, lppt=0x22d78dc | out: lppt=0x22d78dc) returned 1 [0084.200] GetROP2 (hdc=0x1b0109dd) returned 13 [0084.200] GetBkMode (hdc=0x1b0109dd) returned 2 [0084.200] SetBkMode (hdc=0x1b0109dd, mode=1) returned 2 [0084.200] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x7430098e [0084.200] SelectObject (hdc=0x1b0109dd, h=0x7430098e) returned 0x1b00017 [0084.200] MoveToEx (in: hdc=0x1b0109dd, x=45, y=0, lppt=0x22d791c | out: lppt=0x22d791c) returned 1 [0084.200] LineTo (hdc=0x1b0109dd, x=0, y=0) returned 1 [0084.200] SetBkMode (hdc=0x1b0109dd, mode=2) returned 1 [0084.200] MoveToEx (in: hdc=0x1b0109dd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.200] GetROP2 (hdc=0x1b0109dd) returned 13 [0084.200] GetBkMode (hdc=0x1b0109dd) returned 2 [0084.200] SetBkMode (hdc=0x1b0109dd, mode=1) returned 2 [0084.200] SelectObject (hdc=0x1b0109dd, h=0x7430098e) returned 0x7430098e [0084.200] MoveToEx (in: hdc=0x1b0109dd, x=0, y=0, lppt=0x22d792c | out: lppt=0x22d792c) returned 1 [0084.200] LineTo (hdc=0x1b0109dd, x=0, y=41) returned 1 [0084.201] SetBkMode (hdc=0x1b0109dd, mode=2) returned 1 [0084.201] MoveToEx (in: hdc=0x1b0109dd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.201] SelectObject (hdc=0x1b0109dd, h=0x1b00017) returned 0x7430098e [0084.201] DeleteObject (ho=0x7430098e) returned 1 [0084.201] GetROP2 (hdc=0x1b0109dd) returned 13 [0084.201] GetBkMode (hdc=0x1b0109dd) returned 2 [0084.201] SetBkMode (hdc=0x1b0109dd, mode=1) returned 2 [0084.201] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x123009de [0084.201] SelectObject (hdc=0x1b0109dd, h=0x123009de) returned 0x1b00017 [0084.201] MoveToEx (in: hdc=0x1b0109dd, x=0, y=41, lppt=0x22d796c | out: lppt=0x22d796c) returned 1 [0084.201] LineTo (hdc=0x1b0109dd, x=45, y=41) returned 1 [0084.201] SetBkMode (hdc=0x1b0109dd, mode=2) returned 1 [0084.201] MoveToEx (in: hdc=0x1b0109dd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.201] GetROP2 (hdc=0x1b0109dd) returned 13 [0084.201] GetBkMode (hdc=0x1b0109dd) returned 2 [0084.201] SetBkMode (hdc=0x1b0109dd, mode=1) returned 2 [0084.201] SelectObject (hdc=0x1b0109dd, h=0x123009de) returned 0x123009de [0084.201] MoveToEx (in: hdc=0x1b0109dd, x=45, y=41, lppt=0x22d797c | out: lppt=0x22d797c) returned 1 [0084.201] LineTo (hdc=0x1b0109dd, x=45, y=-1) returned 1 [0084.201] SetBkMode (hdc=0x1b0109dd, mode=2) returned 1 [0084.201] MoveToEx (in: hdc=0x1b0109dd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.201] SelectObject (hdc=0x1b0109dd, h=0x1b00017) returned 0x123009de [0084.202] DeleteObject (ho=0x123009de) returned 1 [0084.202] GetROP2 (hdc=0x1b0109dd) returned 13 [0084.202] GetBkMode (hdc=0x1b0109dd) returned 2 [0084.202] SetBkMode (hdc=0x1b0109dd, mode=1) returned 2 [0084.202] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x7530098e [0084.202] SelectObject (hdc=0x1b0109dd, h=0x7530098e) returned 0x1b00017 [0084.202] MoveToEx (in: hdc=0x1b0109dd, x=44, y=1, lppt=0x22d79bc | out: lppt=0x22d79bc) returned 1 [0084.202] LineTo (hdc=0x1b0109dd, x=1, y=1) returned 1 [0084.202] SetBkMode (hdc=0x1b0109dd, mode=2) returned 1 [0084.202] MoveToEx (in: hdc=0x1b0109dd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.202] GetROP2 (hdc=0x1b0109dd) returned 13 [0084.202] GetBkMode (hdc=0x1b0109dd) returned 2 [0084.202] SetBkMode (hdc=0x1b0109dd, mode=1) returned 2 [0084.202] SelectObject (hdc=0x1b0109dd, h=0x7530098e) returned 0x7530098e [0084.202] MoveToEx (in: hdc=0x1b0109dd, x=1, y=1, lppt=0x22d79cc | out: lppt=0x22d79cc) returned 1 [0084.202] LineTo (hdc=0x1b0109dd, x=1, y=40) returned 1 [0084.202] SetBkMode (hdc=0x1b0109dd, mode=2) returned 1 [0084.202] MoveToEx (in: hdc=0x1b0109dd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.202] SelectObject (hdc=0x1b0109dd, h=0x1b00017) returned 0x7530098e [0084.202] DeleteObject (ho=0x7530098e) returned 1 [0084.202] GetROP2 (hdc=0x1b0109dd) returned 13 [0084.202] GetBkMode (hdc=0x1b0109dd) returned 2 [0084.203] SetBkMode (hdc=0x1b0109dd, mode=1) returned 2 [0084.203] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x133009de [0084.203] SelectObject (hdc=0x1b0109dd, h=0x133009de) returned 0x1b00017 [0084.203] MoveToEx (in: hdc=0x1b0109dd, x=1, y=40, lppt=0x22d7a0c | out: lppt=0x22d7a0c) returned 1 [0084.203] LineTo (hdc=0x1b0109dd, x=44, y=40) returned 1 [0084.203] SetBkMode (hdc=0x1b0109dd, mode=2) returned 1 [0084.203] MoveToEx (in: hdc=0x1b0109dd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.203] GetROP2 (hdc=0x1b0109dd) returned 13 [0084.203] GetBkMode (hdc=0x1b0109dd) returned 2 [0084.203] SetBkMode (hdc=0x1b0109dd, mode=1) returned 2 [0084.203] SelectObject (hdc=0x1b0109dd, h=0x133009de) returned 0x133009de [0084.203] MoveToEx (in: hdc=0x1b0109dd, x=44, y=40, lppt=0x22d7a1c | out: lppt=0x22d7a1c) returned 1 [0084.203] LineTo (hdc=0x1b0109dd, x=44, y=0) returned 1 [0084.203] SetBkMode (hdc=0x1b0109dd, mode=2) returned 1 [0084.203] MoveToEx (in: hdc=0x1b0109dd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.203] SelectObject (hdc=0x1b0109dd, h=0x1b00017) returned 0x133009de [0084.203] DeleteObject (ho=0x133009de) returned 1 [0084.203] RestoreDC (hdc=0x1b0109dd, nSavedDC=-1) returned 1 [0084.203] GdipReleaseDC (graphics=0x5bff610, hdc=0x1b0109dd) returned 0x0 [0084.203] GdipGetDC (graphics=0x5bff610, hdc=0x1ceefc) returned 0x0 [0084.203] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=46, cy=42, hdcSrc=0x1b0109dd, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.204] GdipReleaseDC (graphics=0x5bff610, hdc=0x1b0109dd) returned 0x0 [0084.204] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0084.204] SelectObject (hdc=0x1b0109dd, h=0x185000f) returned 0x350509df [0084.204] DeleteDC (hdc=0x1b0109dd) returned 1 [0084.204] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0084.205] EndPaint (hWnd=0x203da, lpPaint=0x1ceea0) returned 1 [0084.205] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0084.205] IsWindowUnicode (hWnd=0x203d8) returned 1 [0084.205] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0084.205] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0084.205] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0084.205] BeginPaint (in: hWnd=0x203d8, lpPaint=0x1ceea4 | out: lpPaint=0x1ceea4) returned 0x1b0107ae [0084.205] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.205] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x203d8, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0084.205] GetStockObject (i=5) returned 0x1900015 [0084.206] SelectPalette (hdc=0x1b0107ae, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0084.206] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x590109e5 [0084.206] SelectObject (hdc=0x590109e5, h=0x350509df) returned 0x185000f [0084.206] GdipCreateFromHDC (hdc=0x590109e5, graphics=0x1ceebc) returned 0x0 [0084.206] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0084.206] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=46, height=42, combineMode=0x0) returned 0x0 [0084.206] GdipCreateMatrix (matrix=0x1cef04) returned 0x0 [0084.206] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0084.207] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cef1c) returned 0x0 [0084.207] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.207] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0084.207] LocalFree (hMem=0x691830) returned 0x0 [0084.207] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0084.207] GdipCreateRegion (region=0x1cef04) returned 0x0 [0084.207] GdipGetClip (graphics=0x5bff610, region=0x5c01aa8) returned 0x0 [0084.207] GdipIsInfiniteRegion (region=0x5c01aa8, graphics=0x5bff610, result=0x1cef10) returned 0x0 [0084.207] GdipSaveGraphics (graphics=0x5bff610, state=0x1cef3c) returned 0x0 [0084.207] GdipRestoreGraphics (graphics=0x5bff610, state=0xfd810dbd) returned 0x0 [0084.207] GdipDeleteRegion (region=0x5c01aa8) returned 0x0 [0084.207] GdipGetDC (graphics=0x5bff610, hdc=0x1ced24) returned 0x0 [0084.207] GetCurrentObject (hdc=0x590109e5, type=0x1) returned 0x1b00017 [0084.207] GetCurrentObject (hdc=0x590109e5, type=0x2) returned 0x1900010 [0084.207] GetCurrentObject (hdc=0x590109e5, type=0x7) returned 0x350509df [0084.207] GetCurrentObject (hdc=0x590109e5, type=0x6) returned 0x18a0048 [0084.207] SaveDC (hdc=0x590109e5) returned 1 [0084.207] GetNearestColor (hdc=0x590109e5, color=0xf0f0f0) returned 0xf0f0f0 [0084.207] GetNearestColor (hdc=0x590109e5, color=0xa0a0a0) returned 0xa0a0a0 [0084.209] GetNearestColor (hdc=0x590109e5, color=0x696969) returned 0x696969 [0084.209] GetNearestColor (hdc=0x590109e5, color=0xa0a0a0) returned 0xa0a0a0 [0084.209] GetNearestColor (hdc=0x590109e5, color=0x0) returned 0x0 [0084.209] GetNearestColor (hdc=0x590109e5, color=0xffffff) returned 0xffffff [0084.209] GetNearestColor (hdc=0x590109e5, color=0xe5e5e5) returned 0xe5e5e5 [0084.209] GetNearestColor (hdc=0x590109e5, color=0xd7d7d7) returned 0xd7d7d7 [0084.209] GetNearestColor (hdc=0x590109e5, color=0x0) returned 0x0 [0084.209] RestoreDC (hdc=0x590109e5, nSavedDC=-1) returned 1 [0084.209] GdipReleaseDC (graphics=0x5bff610, hdc=0x590109e5) returned 0x0 [0084.210] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.210] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.210] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.210] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d7f50) returned 0x0 [0084.210] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.210] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.210] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0084.210] GdipGetStringFormatFlags (format=0x5bfb098, flags=0x1cedbc) returned 0x0 [0084.210] GdipGetStringFormatTrimming (format=0x5bfb098, trimming=0x1cedbc) returned 0x0 [0084.210] GdipGetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=0x1cedbc) returned 0x0 [0084.210] GdipGetStringFormatAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0084.210] GdipGetStringFormatLineAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0084.210] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0084.211] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.211] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.211] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1cec44) returned 0x0 [0084.211] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d802c) returned 0x0 [0084.211] GdipSetStringFormatFlags (format=0x5bfff58, flags=0) returned 0x0 [0084.211] GdipSetStringFormatTrimming (format=0x5bfff58, trimming=0x1) returned 0x0 [0084.211] GdipSetStringFormatHotkeyPrefix (format=0x5bfff58, hotkeyPrefix=2) returned 0x0 [0084.211] GdipSetStringFormatAlign (format=0x5bfff58, align=0x1) returned 0x0 [0084.211] GdipSetStringFormatLineAlign (format=0x5bfff58, align=0x1) returned 0x0 [0084.212] GdipMeasureString (graphics=0x5c02218, string="4", length=1, font=0x5bfab90, layoutRect=0x1cec24, stringFormat=0x5bfff58, boundingBox=0x1cec14, codepointsFitted=0x1cec10, linesFilled=0x1cec0c) returned 0x0 [0084.212] GdipDeleteStringFormat (format=0x5bfff58) returned 0x0 [0084.212] GdipDeleteGraphics (graphics=0x5c02218) returned 0x0 [0084.212] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.212] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.212] GdipCreateRegion (region=0x1cec90) returned 0x0 [0084.212] GdipGetClip (graphics=0x5bff610, region=0x5c01bc8) returned 0x0 [0084.212] GdipCreateMatrix (matrix=0x1cec90) returned 0x0 [0084.212] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0084.212] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1ceca8) returned 0x0 [0084.212] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.212] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0084.212] LocalFree (hMem=0x691830) returned 0x0 [0084.212] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.212] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0084.213] LocalFree (hMem=0x691830) returned 0x0 [0084.213] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0084.213] GdipIsInfiniteRegion (region=0x5c01bc8, graphics=0x5bff610, result=0x1cecd0) returned 0x0 [0084.213] GdipIsInfiniteRegion (region=0x5c01bc8, graphics=0x5bff610, result=0x1cecc0) returned 0x0 [0084.213] GdipGetRegionHRgn (region=0x5c01bc8, graphics=0x5bff610, hRgn=0x1cecc0) returned 0x0 [0084.213] GdipDeleteRegion (region=0x5c01bc8) returned 0x0 [0084.213] GdipGetDC (graphics=0x5bff610, hdc=0x1cecd8) returned 0x0 [0084.213] GetCurrentObject (hdc=0x590109e5, type=0x1) returned 0x1b00017 [0084.213] GetCurrentObject (hdc=0x590109e5, type=0x2) returned 0x1900010 [0084.213] GetCurrentObject (hdc=0x590109e5, type=0x7) returned 0x350509df [0084.213] GetCurrentObject (hdc=0x590109e5, type=0x6) returned 0x18a0048 [0084.213] SaveDC (hdc=0x590109e5) returned 1 [0084.213] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x82040861 [0084.213] GetClipRgn (hdc=0x590109e5, hrgn=0x82040861) returned 0 [0084.213] SelectClipRgn (hdc=0x590109e5, hrgn=0x990406e1) returned 2 [0084.213] DeleteObject (ho=0x82040861) returned 1 [0084.213] DeleteObject (ho=0x990406e1) returned 1 [0084.213] OffsetViewportOrgEx (in: hdc=0x590109e5, x=0, y=0, lppt=0x22d8230 | out: lppt=0x22d8230) returned 1 [0084.213] GetNearestColor (hdc=0x590109e5, color=0xf0f0f0) returned 0xf0f0f0 [0084.213] CreateSolidBrush (color=0xf0f0f0) returned 0x451009da [0084.213] FillRect (hDC=0x590109e5, lprc=0x1cecdc, hbr=0x451009da) returned 1 [0084.214] DeleteObject (ho=0x451009da) returned 1 [0084.214] RestoreDC (hdc=0x590109e5, nSavedDC=-1) returned 1 [0084.214] GdipReleaseDC (graphics=0x5bff610, hdc=0x590109e5) returned 0x0 [0084.214] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.214] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.214] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d82b8) returned 0x0 [0084.214] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.214] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.214] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0084.214] GdipCreateSolidFill (color=0xff000000, brush=0x1ced74) returned 0x0 [0084.214] GdipDrawString (graphics=0x5bff610, string="4", length=1, font=0x5bfab90, layoutRect=0x1ced5c, stringFormat=0x5bfb098, brush=0x5bfff58) returned 0x0 [0084.215] GdipDeleteBrush (brush=0x5bfff58) returned 0x0 [0084.215] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0084.215] GetFocus () returned 0x10402 [0084.215] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.215] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.215] GdipCreateRegion (region=0x1cebc4) returned 0x0 [0084.215] GdipGetClip (graphics=0x5bff610, region=0x5c02048) returned 0x0 [0084.215] GdipCreateMatrix (matrix=0x1cebc4) returned 0x0 [0084.215] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0084.215] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cebdc) returned 0x0 [0084.215] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.215] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0084.216] LocalFree (hMem=0x691830) returned 0x0 [0084.216] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.216] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0084.216] LocalFree (hMem=0x691830) returned 0x0 [0084.216] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0084.216] GdipIsInfiniteRegion (region=0x5c02048, graphics=0x5bff610, result=0x1cec04) returned 0x0 [0084.216] GdipIsInfiniteRegion (region=0x5c02048, graphics=0x5bff610, result=0x1cebf4) returned 0x0 [0084.216] GdipGetRegionHRgn (region=0x5c02048, graphics=0x5bff610, hRgn=0x1cebf4) returned 0x0 [0084.216] GdipDeleteRegion (region=0x5c02048) returned 0x0 [0084.216] GdipGetDC (graphics=0x5bff610, hdc=0x1cec0c) returned 0x0 [0084.216] GetCurrentObject (hdc=0x590109e5, type=0x1) returned 0x1b00017 [0084.216] GetCurrentObject (hdc=0x590109e5, type=0x2) returned 0x1900010 [0084.216] GetCurrentObject (hdc=0x590109e5, type=0x7) returned 0x350509df [0084.216] GetCurrentObject (hdc=0x590109e5, type=0x6) returned 0x18a0048 [0084.216] SaveDC (hdc=0x590109e5) returned 1 [0084.216] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9a0406e1 [0084.216] GetClipRgn (hdc=0x590109e5, hrgn=0x9a0406e1) returned 0 [0084.216] SelectClipRgn (hdc=0x590109e5, hrgn=0x83040861) returned 2 [0084.216] DeleteObject (ho=0x9a0406e1) returned 1 [0084.216] DeleteObject (ho=0x83040861) returned 1 [0084.216] OffsetViewportOrgEx (in: hdc=0x590109e5, x=0, y=0, lppt=0x22d84d4 | out: lppt=0x22d84d4) returned 1 [0084.216] GetROP2 (hdc=0x590109e5) returned 13 [0084.217] GetBkMode (hdc=0x590109e5) returned 2 [0084.217] SetBkMode (hdc=0x590109e5, mode=1) returned 2 [0084.217] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x143009de [0084.217] SelectObject (hdc=0x590109e5, h=0x143009de) returned 0x1b00017 [0084.217] MoveToEx (in: hdc=0x590109e5, x=45, y=0, lppt=0x22d8514 | out: lppt=0x22d8514) returned 1 [0084.217] LineTo (hdc=0x590109e5, x=0, y=0) returned 1 [0084.217] SetBkMode (hdc=0x590109e5, mode=2) returned 1 [0084.217] MoveToEx (in: hdc=0x590109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.217] GetROP2 (hdc=0x590109e5) returned 13 [0084.217] GetBkMode (hdc=0x590109e5) returned 2 [0084.217] SetBkMode (hdc=0x590109e5, mode=1) returned 2 [0084.217] SelectObject (hdc=0x590109e5, h=0x143009de) returned 0x143009de [0084.217] MoveToEx (in: hdc=0x590109e5, x=0, y=0, lppt=0x22d8524 | out: lppt=0x22d8524) returned 1 [0084.217] LineTo (hdc=0x590109e5, x=0, y=41) returned 1 [0084.217] SetBkMode (hdc=0x590109e5, mode=2) returned 1 [0084.217] MoveToEx (in: hdc=0x590109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.217] SelectObject (hdc=0x590109e5, h=0x1b00017) returned 0x143009de [0084.217] DeleteObject (ho=0x143009de) returned 1 [0084.217] GetROP2 (hdc=0x590109e5) returned 13 [0084.217] GetBkMode (hdc=0x590109e5) returned 2 [0084.217] SetBkMode (hdc=0x590109e5, mode=1) returned 2 [0084.217] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x7630098e [0084.217] SelectObject (hdc=0x590109e5, h=0x7630098e) returned 0x1b00017 [0084.218] MoveToEx (in: hdc=0x590109e5, x=0, y=41, lppt=0x22d8564 | out: lppt=0x22d8564) returned 1 [0084.218] LineTo (hdc=0x590109e5, x=45, y=41) returned 1 [0084.218] SetBkMode (hdc=0x590109e5, mode=2) returned 1 [0084.218] MoveToEx (in: hdc=0x590109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.218] GetROP2 (hdc=0x590109e5) returned 13 [0084.218] GetBkMode (hdc=0x590109e5) returned 2 [0084.218] SetBkMode (hdc=0x590109e5, mode=1) returned 2 [0084.218] SelectObject (hdc=0x590109e5, h=0x7630098e) returned 0x7630098e [0084.218] MoveToEx (in: hdc=0x590109e5, x=45, y=41, lppt=0x22d8574 | out: lppt=0x22d8574) returned 1 [0084.218] LineTo (hdc=0x590109e5, x=45, y=-1) returned 1 [0084.218] SetBkMode (hdc=0x590109e5, mode=2) returned 1 [0084.218] MoveToEx (in: hdc=0x590109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.218] SelectObject (hdc=0x590109e5, h=0x1b00017) returned 0x7630098e [0084.218] DeleteObject (ho=0x7630098e) returned 1 [0084.218] GetROP2 (hdc=0x590109e5) returned 13 [0084.218] GetBkMode (hdc=0x590109e5) returned 2 [0084.218] SetBkMode (hdc=0x590109e5, mode=1) returned 2 [0084.218] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x153009de [0084.218] SelectObject (hdc=0x590109e5, h=0x153009de) returned 0x1b00017 [0084.218] MoveToEx (in: hdc=0x590109e5, x=44, y=1, lppt=0x22d85b4 | out: lppt=0x22d85b4) returned 1 [0084.218] LineTo (hdc=0x590109e5, x=1, y=1) returned 1 [0084.218] SetBkMode (hdc=0x590109e5, mode=2) returned 1 [0084.219] MoveToEx (in: hdc=0x590109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.219] GetROP2 (hdc=0x590109e5) returned 13 [0084.219] GetBkMode (hdc=0x590109e5) returned 2 [0084.219] SetBkMode (hdc=0x590109e5, mode=1) returned 2 [0084.219] SelectObject (hdc=0x590109e5, h=0x153009de) returned 0x153009de [0084.219] MoveToEx (in: hdc=0x590109e5, x=1, y=1, lppt=0x22d85c4 | out: lppt=0x22d85c4) returned 1 [0084.219] LineTo (hdc=0x590109e5, x=1, y=40) returned 1 [0084.219] SetBkMode (hdc=0x590109e5, mode=2) returned 1 [0084.219] MoveToEx (in: hdc=0x590109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.219] SelectObject (hdc=0x590109e5, h=0x1b00017) returned 0x153009de [0084.219] DeleteObject (ho=0x153009de) returned 1 [0084.219] GetROP2 (hdc=0x590109e5) returned 13 [0084.219] GetBkMode (hdc=0x590109e5) returned 2 [0084.219] SetBkMode (hdc=0x590109e5, mode=1) returned 2 [0084.219] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x7730098e [0084.219] SelectObject (hdc=0x590109e5, h=0x7730098e) returned 0x1b00017 [0084.219] MoveToEx (in: hdc=0x590109e5, x=1, y=40, lppt=0x22d8604 | out: lppt=0x22d8604) returned 1 [0084.219] LineTo (hdc=0x590109e5, x=44, y=40) returned 1 [0084.219] SetBkMode (hdc=0x590109e5, mode=2) returned 1 [0084.219] MoveToEx (in: hdc=0x590109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.219] GetROP2 (hdc=0x590109e5) returned 13 [0084.219] GetBkMode (hdc=0x590109e5) returned 2 [0084.219] SetBkMode (hdc=0x590109e5, mode=1) returned 2 [0084.219] SelectObject (hdc=0x590109e5, h=0x7730098e) returned 0x7730098e [0084.219] MoveToEx (in: hdc=0x590109e5, x=44, y=40, lppt=0x22d8614 | out: lppt=0x22d8614) returned 1 [0084.220] LineTo (hdc=0x590109e5, x=44, y=0) returned 1 [0084.220] SetBkMode (hdc=0x590109e5, mode=2) returned 1 [0084.220] MoveToEx (in: hdc=0x590109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.220] SelectObject (hdc=0x590109e5, h=0x1b00017) returned 0x7730098e [0084.220] DeleteObject (ho=0x7730098e) returned 1 [0084.220] RestoreDC (hdc=0x590109e5, nSavedDC=-1) returned 1 [0084.220] GdipReleaseDC (graphics=0x5bff610, hdc=0x590109e5) returned 0x0 [0084.220] GdipGetDC (graphics=0x5bff610, hdc=0x1ceefc) returned 0x0 [0084.220] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=46, cy=42, hdcSrc=0x590109e5, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.222] GdipReleaseDC (graphics=0x5bff610, hdc=0x590109e5) returned 0x0 [0084.222] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0084.222] SelectObject (hdc=0x590109e5, h=0x185000f) returned 0x350509df [0084.222] DeleteDC (hdc=0x590109e5) returned 1 [0084.222] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0084.222] EndPaint (hWnd=0x203d8, lpPaint=0x1ceea0) returned 1 [0084.223] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0084.223] IsWindowUnicode (hWnd=0x103fe) returned 1 [0084.223] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0084.223] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0084.223] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0084.223] BeginPaint (in: hWnd=0x103fe, lpPaint=0x1ceea4 | out: lpPaint=0x1ceea4) returned 0x220106d6 [0084.223] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x103fe, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.223] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x103fe, Msg=0x14, wParam=0x220106d6, lParam=0x0) returned 0x1 [0084.223] GetStockObject (i=5) returned 0x1900015 [0084.224] SelectPalette (hdc=0x220106d6, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0084.224] CreateCompatibleDC (hdc=0x220106d6) returned 0x9b0109e3 [0084.225] SelectObject (hdc=0x9b0109e3, h=0x350509df) returned 0x185000f [0084.225] GdipCreateFromHDC (hdc=0x9b0109e3, graphics=0x1ceebc) returned 0x0 [0084.225] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0084.225] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=46, height=42, combineMode=0x0) returned 0x0 [0084.225] GdipCreateMatrix (matrix=0x1cef04) returned 0x0 [0084.225] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0084.225] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cef1c) returned 0x0 [0084.225] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.225] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0084.225] LocalFree (hMem=0x691830) returned 0x0 [0084.225] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0084.225] GdipCreateRegion (region=0x1cef04) returned 0x0 [0084.225] GdipGetClip (graphics=0x5bff610, region=0x5c01478) returned 0x0 [0084.225] GdipIsInfiniteRegion (region=0x5c01478, graphics=0x5bff610, result=0x1cef10) returned 0x0 [0084.225] GdipSaveGraphics (graphics=0x5bff610, state=0x1cef3c) returned 0x0 [0084.225] GdipRestoreGraphics (graphics=0x5bff610, state=0xfd7e0dbd) returned 0x0 [0084.225] GdipDeleteRegion (region=0x5c01478) returned 0x0 [0084.225] GdipGetDC (graphics=0x5bff610, hdc=0x1ced24) returned 0x0 [0084.225] GetCurrentObject (hdc=0x9b0109e3, type=0x1) returned 0x1b00017 [0084.226] GetCurrentObject (hdc=0x9b0109e3, type=0x2) returned 0x1900010 [0084.226] GetCurrentObject (hdc=0x9b0109e3, type=0x7) returned 0x350509df [0084.226] GetCurrentObject (hdc=0x9b0109e3, type=0x6) returned 0x18a0048 [0084.226] SaveDC (hdc=0x9b0109e3) returned 1 [0084.226] GetNearestColor (hdc=0x9b0109e3, color=0xf0f0f0) returned 0xf0f0f0 [0084.226] GetNearestColor (hdc=0x9b0109e3, color=0xa0a0a0) returned 0xa0a0a0 [0084.226] GetNearestColor (hdc=0x9b0109e3, color=0x696969) returned 0x696969 [0084.226] GetNearestColor (hdc=0x9b0109e3, color=0xa0a0a0) returned 0xa0a0a0 [0084.226] GetNearestColor (hdc=0x9b0109e3, color=0x0) returned 0x0 [0084.226] GetNearestColor (hdc=0x9b0109e3, color=0xffffff) returned 0xffffff [0084.226] GetNearestColor (hdc=0x9b0109e3, color=0xe5e5e5) returned 0xe5e5e5 [0084.226] GetNearestColor (hdc=0x9b0109e3, color=0xd7d7d7) returned 0xd7d7d7 [0084.226] GetNearestColor (hdc=0x9b0109e3, color=0x0) returned 0x0 [0084.226] RestoreDC (hdc=0x9b0109e3, nSavedDC=-1) returned 1 [0084.226] GdipReleaseDC (graphics=0x5bff610, hdc=0x9b0109e3) returned 0x0 [0084.227] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.227] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.227] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d8b48) returned 0x0 [0084.227] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.227] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.227] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0084.227] GdipGetStringFormatFlags (format=0x5bfb098, flags=0x1cedbc) returned 0x0 [0084.227] GdipGetStringFormatTrimming (format=0x5bfb098, trimming=0x1cedbc) returned 0x0 [0084.227] GdipGetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=0x1cedbc) returned 0x0 [0084.227] GdipGetStringFormatAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0084.227] GdipGetStringFormatLineAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0084.227] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0084.227] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.228] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.228] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.228] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1cec44) returned 0x0 [0084.228] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d8c24) returned 0x0 [0084.228] GdipSetStringFormatFlags (format=0x5bfff58, flags=0) returned 0x0 [0084.228] GdipSetStringFormatTrimming (format=0x5bfff58, trimming=0x1) returned 0x0 [0084.228] GdipSetStringFormatHotkeyPrefix (format=0x5bfff58, hotkeyPrefix=2) returned 0x0 [0084.228] GdipSetStringFormatAlign (format=0x5bfff58, align=0x1) returned 0x0 [0084.228] GdipSetStringFormatLineAlign (format=0x5bfff58, align=0x1) returned 0x0 [0084.228] GdipMeasureString (graphics=0x5c02218, string="3", length=1, font=0x5bfab90, layoutRect=0x1cec24, stringFormat=0x5bfff58, boundingBox=0x1cec14, codepointsFitted=0x1cec10, linesFilled=0x1cec0c) returned 0x0 [0084.228] GdipDeleteStringFormat (format=0x5bfff58) returned 0x0 [0084.228] GdipDeleteGraphics (graphics=0x5c02218) returned 0x0 [0084.228] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.229] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.229] GdipCreateRegion (region=0x1cec90) returned 0x0 [0084.229] GdipGetClip (graphics=0x5bff610, region=0x5c01ce8) returned 0x0 [0084.229] GdipCreateMatrix (matrix=0x1cec90) returned 0x0 [0084.229] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0084.229] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1ceca8) returned 0x0 [0084.229] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.229] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0084.229] LocalFree (hMem=0x691830) returned 0x0 [0084.229] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.229] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0084.229] LocalFree (hMem=0x691830) returned 0x0 [0084.229] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0084.229] GdipIsInfiniteRegion (region=0x5c01ce8, graphics=0x5bff610, result=0x1cecd0) returned 0x0 [0084.229] GdipIsInfiniteRegion (region=0x5c01ce8, graphics=0x5bff610, result=0x1cecc0) returned 0x0 [0084.229] GdipGetRegionHRgn (region=0x5c01ce8, graphics=0x5bff610, hRgn=0x1cecc0) returned 0x0 [0084.229] GdipDeleteRegion (region=0x5c01ce8) returned 0x0 [0084.229] GdipGetDC (graphics=0x5bff610, hdc=0x1cecd8) returned 0x0 [0084.230] GetCurrentObject (hdc=0x9b0109e3, type=0x1) returned 0x1b00017 [0084.230] GetCurrentObject (hdc=0x9b0109e3, type=0x2) returned 0x1900010 [0084.230] GetCurrentObject (hdc=0x9b0109e3, type=0x7) returned 0x350509df [0084.230] GetCurrentObject (hdc=0x9b0109e3, type=0x6) returned 0x18a0048 [0084.230] SaveDC (hdc=0x9b0109e3) returned 1 [0084.230] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x84040861 [0084.230] GetClipRgn (hdc=0x9b0109e3, hrgn=0x84040861) returned 0 [0084.230] SelectClipRgn (hdc=0x9b0109e3, hrgn=0x9b0406e1) returned 2 [0084.230] DeleteObject (ho=0x84040861) returned 1 [0084.230] DeleteObject (ho=0x9b0406e1) returned 1 [0084.230] OffsetViewportOrgEx (in: hdc=0x9b0109e3, x=0, y=0, lppt=0x22d8e28 | out: lppt=0x22d8e28) returned 1 [0084.230] GetNearestColor (hdc=0x9b0109e3, color=0xf0f0f0) returned 0xf0f0f0 [0084.230] CreateSolidBrush (color=0xf0f0f0) returned 0x461009da [0084.230] FillRect (hDC=0x9b0109e3, lprc=0x1cecdc, hbr=0x461009da) returned 1 [0084.230] DeleteObject (ho=0x461009da) returned 1 [0084.230] RestoreDC (hdc=0x9b0109e3, nSavedDC=-1) returned 1 [0084.230] GdipReleaseDC (graphics=0x5bff610, hdc=0x9b0109e3) returned 0x0 [0084.231] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.231] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.231] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d8eb0) returned 0x0 [0084.231] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.231] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.231] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0084.231] GdipCreateSolidFill (color=0xff000000, brush=0x1ced74) returned 0x0 [0084.231] GdipDrawString (graphics=0x5bff610, string="3", length=1, font=0x5bfab90, layoutRect=0x1ced5c, stringFormat=0x5bfb098, brush=0x5bfff58) returned 0x0 [0084.231] GdipDeleteBrush (brush=0x5bfff58) returned 0x0 [0084.231] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0084.231] GetFocus () returned 0x10402 [0084.233] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.233] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.233] GdipCreateRegion (region=0x1cebc4) returned 0x0 [0084.233] GdipGetClip (graphics=0x5bff610, region=0x5c01b38) returned 0x0 [0084.233] GdipCreateMatrix (matrix=0x1cebc4) returned 0x0 [0084.233] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0084.233] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cebdc) returned 0x0 [0084.233] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.233] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0084.233] LocalFree (hMem=0x691830) returned 0x0 [0084.233] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.233] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0084.233] LocalFree (hMem=0x691830) returned 0x0 [0084.233] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0084.234] GdipIsInfiniteRegion (region=0x5c01b38, graphics=0x5bff610, result=0x1cec04) returned 0x0 [0084.234] GdipIsInfiniteRegion (region=0x5c01b38, graphics=0x5bff610, result=0x1cebf4) returned 0x0 [0084.234] GdipGetRegionHRgn (region=0x5c01b38, graphics=0x5bff610, hRgn=0x1cebf4) returned 0x0 [0084.234] GdipDeleteRegion (region=0x5c01b38) returned 0x0 [0084.234] GdipGetDC (graphics=0x5bff610, hdc=0x1cec0c) returned 0x0 [0084.234] GetCurrentObject (hdc=0x9b0109e3, type=0x1) returned 0x1b00017 [0084.234] GetCurrentObject (hdc=0x9b0109e3, type=0x2) returned 0x1900010 [0084.234] GetCurrentObject (hdc=0x9b0109e3, type=0x7) returned 0x350509df [0084.234] GetCurrentObject (hdc=0x9b0109e3, type=0x6) returned 0x18a0048 [0084.234] SaveDC (hdc=0x9b0109e3) returned 1 [0084.234] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9c0406e1 [0084.234] GetClipRgn (hdc=0x9b0109e3, hrgn=0x9c0406e1) returned 0 [0084.234] SelectClipRgn (hdc=0x9b0109e3, hrgn=0x85040861) returned 2 [0084.234] DeleteObject (ho=0x9c0406e1) returned 1 [0084.234] DeleteObject (ho=0x85040861) returned 1 [0084.234] OffsetViewportOrgEx (in: hdc=0x9b0109e3, x=0, y=0, lppt=0x22d90cc | out: lppt=0x22d90cc) returned 1 [0084.234] GetROP2 (hdc=0x9b0109e3) returned 13 [0084.234] GetBkMode (hdc=0x9b0109e3) returned 2 [0084.234] SetBkMode (hdc=0x9b0109e3, mode=1) returned 2 [0084.235] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x7830098e [0084.235] SelectObject (hdc=0x9b0109e3, h=0x7830098e) returned 0x1b00017 [0084.235] MoveToEx (in: hdc=0x9b0109e3, x=45, y=0, lppt=0x22d910c | out: lppt=0x22d910c) returned 1 [0084.235] LineTo (hdc=0x9b0109e3, x=0, y=0) returned 1 [0084.235] SetBkMode (hdc=0x9b0109e3, mode=2) returned 1 [0084.235] MoveToEx (in: hdc=0x9b0109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.235] GetROP2 (hdc=0x9b0109e3) returned 13 [0084.235] GetBkMode (hdc=0x9b0109e3) returned 2 [0084.235] SetBkMode (hdc=0x9b0109e3, mode=1) returned 2 [0084.235] SelectObject (hdc=0x9b0109e3, h=0x7830098e) returned 0x7830098e [0084.235] MoveToEx (in: hdc=0x9b0109e3, x=0, y=0, lppt=0x22d911c | out: lppt=0x22d911c) returned 1 [0084.235] LineTo (hdc=0x9b0109e3, x=0, y=41) returned 1 [0084.235] SetBkMode (hdc=0x9b0109e3, mode=2) returned 1 [0084.235] MoveToEx (in: hdc=0x9b0109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.235] SelectObject (hdc=0x9b0109e3, h=0x1b00017) returned 0x7830098e [0084.235] DeleteObject (ho=0x7830098e) returned 1 [0084.235] GetROP2 (hdc=0x9b0109e3) returned 13 [0084.235] GetBkMode (hdc=0x9b0109e3) returned 2 [0084.235] SetBkMode (hdc=0x9b0109e3, mode=1) returned 2 [0084.235] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x163009de [0084.235] SelectObject (hdc=0x9b0109e3, h=0x163009de) returned 0x1b00017 [0084.235] MoveToEx (in: hdc=0x9b0109e3, x=0, y=41, lppt=0x22d915c | out: lppt=0x22d915c) returned 1 [0084.236] LineTo (hdc=0x9b0109e3, x=45, y=41) returned 1 [0084.236] SetBkMode (hdc=0x9b0109e3, mode=2) returned 1 [0084.236] MoveToEx (in: hdc=0x9b0109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.236] GetROP2 (hdc=0x9b0109e3) returned 13 [0084.236] GetBkMode (hdc=0x9b0109e3) returned 2 [0084.236] SetBkMode (hdc=0x9b0109e3, mode=1) returned 2 [0084.236] SelectObject (hdc=0x9b0109e3, h=0x163009de) returned 0x163009de [0084.236] MoveToEx (in: hdc=0x9b0109e3, x=45, y=41, lppt=0x22d916c | out: lppt=0x22d916c) returned 1 [0084.236] LineTo (hdc=0x9b0109e3, x=45, y=-1) returned 1 [0084.236] SetBkMode (hdc=0x9b0109e3, mode=2) returned 1 [0084.236] MoveToEx (in: hdc=0x9b0109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.236] SelectObject (hdc=0x9b0109e3, h=0x1b00017) returned 0x163009de [0084.236] DeleteObject (ho=0x163009de) returned 1 [0084.236] GetROP2 (hdc=0x9b0109e3) returned 13 [0084.236] GetBkMode (hdc=0x9b0109e3) returned 2 [0084.236] SetBkMode (hdc=0x9b0109e3, mode=1) returned 2 [0084.236] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x7930098e [0084.236] SelectObject (hdc=0x9b0109e3, h=0x7930098e) returned 0x1b00017 [0084.236] MoveToEx (in: hdc=0x9b0109e3, x=44, y=1, lppt=0x22d91ac | out: lppt=0x22d91ac) returned 1 [0084.236] LineTo (hdc=0x9b0109e3, x=1, y=1) returned 1 [0084.236] SetBkMode (hdc=0x9b0109e3, mode=2) returned 1 [0084.237] MoveToEx (in: hdc=0x9b0109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.237] GetROP2 (hdc=0x9b0109e3) returned 13 [0084.237] GetBkMode (hdc=0x9b0109e3) returned 2 [0084.237] SetBkMode (hdc=0x9b0109e3, mode=1) returned 2 [0084.237] SelectObject (hdc=0x9b0109e3, h=0x7930098e) returned 0x7930098e [0084.237] MoveToEx (in: hdc=0x9b0109e3, x=1, y=1, lppt=0x22d91bc | out: lppt=0x22d91bc) returned 1 [0084.237] LineTo (hdc=0x9b0109e3, x=1, y=40) returned 1 [0084.237] SetBkMode (hdc=0x9b0109e3, mode=2) returned 1 [0084.237] MoveToEx (in: hdc=0x9b0109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.237] SelectObject (hdc=0x9b0109e3, h=0x1b00017) returned 0x7930098e [0084.237] DeleteObject (ho=0x7930098e) returned 1 [0084.237] GetROP2 (hdc=0x9b0109e3) returned 13 [0084.237] GetBkMode (hdc=0x9b0109e3) returned 2 [0084.237] SetBkMode (hdc=0x9b0109e3, mode=1) returned 2 [0084.237] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x173009de [0084.237] SelectObject (hdc=0x9b0109e3, h=0x173009de) returned 0x1b00017 [0084.237] MoveToEx (in: hdc=0x9b0109e3, x=1, y=40, lppt=0x22d91fc | out: lppt=0x22d91fc) returned 1 [0084.237] LineTo (hdc=0x9b0109e3, x=44, y=40) returned 1 [0084.237] SetBkMode (hdc=0x9b0109e3, mode=2) returned 1 [0084.237] MoveToEx (in: hdc=0x9b0109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.237] GetROP2 (hdc=0x9b0109e3) returned 13 [0084.237] GetBkMode (hdc=0x9b0109e3) returned 2 [0084.238] SetBkMode (hdc=0x9b0109e3, mode=1) returned 2 [0084.238] SelectObject (hdc=0x9b0109e3, h=0x173009de) returned 0x173009de [0084.238] MoveToEx (in: hdc=0x9b0109e3, x=44, y=40, lppt=0x22d920c | out: lppt=0x22d920c) returned 1 [0084.238] LineTo (hdc=0x9b0109e3, x=44, y=0) returned 1 [0084.238] SetBkMode (hdc=0x9b0109e3, mode=2) returned 1 [0084.238] MoveToEx (in: hdc=0x9b0109e3, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.238] SelectObject (hdc=0x9b0109e3, h=0x1b00017) returned 0x173009de [0084.238] DeleteObject (ho=0x173009de) returned 1 [0084.238] RestoreDC (hdc=0x9b0109e3, nSavedDC=-1) returned 1 [0084.238] GdipReleaseDC (graphics=0x5bff610, hdc=0x9b0109e3) returned 0x0 [0084.238] GdipGetDC (graphics=0x5bff610, hdc=0x1ceefc) returned 0x0 [0084.238] BitBlt (hdc=0x220106d6, x=0, y=0, cx=46, cy=42, hdcSrc=0x9b0109e3, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.238] GdipReleaseDC (graphics=0x5bff610, hdc=0x9b0109e3) returned 0x0 [0084.238] SelectPalette (hdc=0x220106d6, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0084.238] SelectObject (hdc=0x9b0109e3, h=0x185000f) returned 0x350509df [0084.238] DeleteDC (hdc=0x9b0109e3) returned 1 [0084.238] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0084.238] EndPaint (hWnd=0x103fe, lpPaint=0x1ceea0) returned 1 [0084.239] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0084.267] IsWindowUnicode (hWnd=0x10400) returned 1 [0084.267] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0084.267] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0084.267] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0084.267] BeginPaint (in: hWnd=0x10400, lpPaint=0x1ceea4 | out: lpPaint=0x1ceea4) returned 0xc0100ae [0084.268] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10400, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.268] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10400, Msg=0x14, wParam=0xc0100ae, lParam=0x0) returned 0x1 [0084.269] GetStockObject (i=5) returned 0x1900015 [0084.270] SelectPalette (hdc=0xc0100ae, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0084.270] CreateCompatibleDC (hdc=0xc0100ae) returned 0x250109dd [0084.270] SelectObject (hdc=0x250109dd, h=0x350509df) returned 0x185000f [0084.271] GdipCreateFromHDC (hdc=0x250109dd, graphics=0x1ceebc) returned 0x0 [0084.271] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0084.271] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=46, height=42, combineMode=0x0) returned 0x0 [0084.271] GdipCreateMatrix (matrix=0x1cef04) returned 0x0 [0084.271] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0084.271] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cef1c) returned 0x0 [0084.271] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.271] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0084.271] LocalFree (hMem=0x691830) returned 0x0 [0084.271] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0084.271] GdipCreateRegion (region=0x1cef04) returned 0x0 [0084.271] GdipGetClip (graphics=0x5bff610, region=0x5c02048) returned 0x0 [0084.271] GdipIsInfiniteRegion (region=0x5c02048, graphics=0x5bff610, result=0x1cef10) returned 0x0 [0084.271] GdipSaveGraphics (graphics=0x5bff610, state=0x1cef3c) returned 0x0 [0084.271] GdipRestoreGraphics (graphics=0x5bff610, state=0xfd7b0dbd) returned 0x0 [0084.271] GdipDeleteRegion (region=0x5c02048) returned 0x0 [0084.271] GdipGetDC (graphics=0x5bff610, hdc=0x1ced24) returned 0x0 [0084.271] GetCurrentObject (hdc=0x250109dd, type=0x1) returned 0x1b00017 [0084.271] GetCurrentObject (hdc=0x250109dd, type=0x2) returned 0x1900010 [0084.272] GetCurrentObject (hdc=0x250109dd, type=0x7) returned 0x350509df [0084.272] GetCurrentObject (hdc=0x250109dd, type=0x6) returned 0x18a0048 [0084.272] SaveDC (hdc=0x250109dd) returned 1 [0084.272] GetNearestColor (hdc=0x250109dd, color=0xf0f0f0) returned 0xf0f0f0 [0084.272] GetNearestColor (hdc=0x250109dd, color=0xa0a0a0) returned 0xa0a0a0 [0084.272] GetNearestColor (hdc=0x250109dd, color=0x696969) returned 0x696969 [0084.272] GetNearestColor (hdc=0x250109dd, color=0xa0a0a0) returned 0xa0a0a0 [0084.272] GetNearestColor (hdc=0x250109dd, color=0x0) returned 0x0 [0084.272] GetNearestColor (hdc=0x250109dd, color=0xffffff) returned 0xffffff [0084.272] GetNearestColor (hdc=0x250109dd, color=0xe5e5e5) returned 0xe5e5e5 [0084.272] GetNearestColor (hdc=0x250109dd, color=0xd7d7d7) returned 0xd7d7d7 [0084.272] GetNearestColor (hdc=0x250109dd, color=0x0) returned 0x0 [0084.272] RestoreDC (hdc=0x250109dd, nSavedDC=-1) returned 1 [0084.272] GdipReleaseDC (graphics=0x5bff610, hdc=0x250109dd) returned 0x0 [0084.273] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.276] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.276] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d9740) returned 0x0 [0084.277] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.277] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.277] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0084.277] GdipGetStringFormatFlags (format=0x5bfb098, flags=0x1cedbc) returned 0x0 [0084.277] GdipGetStringFormatTrimming (format=0x5bfb098, trimming=0x1cedbc) returned 0x0 [0084.277] GdipGetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=0x1cedbc) returned 0x0 [0084.278] GdipGetStringFormatAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0084.278] GdipGetStringFormatLineAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0084.278] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0084.279] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.279] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.279] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1cec44) returned 0x0 [0084.279] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d981c) returned 0x0 [0084.279] GdipSetStringFormatFlags (format=0x5bfff58, flags=0) returned 0x0 [0084.279] GdipSetStringFormatTrimming (format=0x5bfff58, trimming=0x1) returned 0x0 [0084.279] GdipSetStringFormatHotkeyPrefix (format=0x5bfff58, hotkeyPrefix=2) returned 0x0 [0084.279] GdipSetStringFormatAlign (format=0x5bfff58, align=0x1) returned 0x0 [0084.279] GdipSetStringFormatLineAlign (format=0x5bfff58, align=0x1) returned 0x0 [0084.280] GdipMeasureString (graphics=0x5c02218, string="2", length=1, font=0x5bfab90, layoutRect=0x1cec24, stringFormat=0x5bfff58, boundingBox=0x1cec14, codepointsFitted=0x1cec10, linesFilled=0x1cec0c) returned 0x0 [0084.280] GdipDeleteStringFormat (format=0x5bfff58) returned 0x0 [0084.280] GdipDeleteGraphics (graphics=0x5c02218) returned 0x0 [0084.280] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.280] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.280] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.280] GdipCreateRegion (region=0x1cec90) returned 0x0 [0084.280] GdipGetClip (graphics=0x5bff610, region=0x5c016b8) returned 0x0 [0084.280] GdipCreateMatrix (matrix=0x1cec90) returned 0x0 [0084.280] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0084.280] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1ceca8) returned 0x0 [0084.280] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.280] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0084.280] LocalFree (hMem=0x691830) returned 0x0 [0084.281] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.281] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0084.281] LocalFree (hMem=0x691830) returned 0x0 [0084.281] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0084.281] GdipIsInfiniteRegion (region=0x5c016b8, graphics=0x5bff610, result=0x1cecd0) returned 0x0 [0084.281] GdipIsInfiniteRegion (region=0x5c016b8, graphics=0x5bff610, result=0x1cecc0) returned 0x0 [0084.281] GdipGetRegionHRgn (region=0x5c016b8, graphics=0x5bff610, hRgn=0x1cecc0) returned 0x0 [0084.281] GdipDeleteRegion (region=0x5c016b8) returned 0x0 [0084.281] GdipGetDC (graphics=0x5bff610, hdc=0x1cecd8) returned 0x0 [0084.281] GetCurrentObject (hdc=0x250109dd, type=0x1) returned 0x1b00017 [0084.281] GetCurrentObject (hdc=0x250109dd, type=0x2) returned 0x1900010 [0084.281] GetCurrentObject (hdc=0x250109dd, type=0x7) returned 0x350509df [0084.281] GetCurrentObject (hdc=0x250109dd, type=0x6) returned 0x18a0048 [0084.281] SaveDC (hdc=0x250109dd) returned 1 [0084.281] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x86040861 [0084.281] GetClipRgn (hdc=0x250109dd, hrgn=0x86040861) returned 0 [0084.281] SelectClipRgn (hdc=0x250109dd, hrgn=0x9d0406e1) returned 2 [0084.281] DeleteObject (ho=0x86040861) returned 1 [0084.281] DeleteObject (ho=0x9d0406e1) returned 1 [0084.281] OffsetViewportOrgEx (in: hdc=0x250109dd, x=0, y=0, lppt=0x22d9a20 | out: lppt=0x22d9a20) returned 1 [0084.281] GetNearestColor (hdc=0x250109dd, color=0xf0f0f0) returned 0xf0f0f0 [0084.282] CreateSolidBrush (color=0xf0f0f0) returned 0x471009da [0084.282] FillRect (hDC=0x250109dd, lprc=0x1cecdc, hbr=0x471009da) returned 1 [0084.282] DeleteObject (ho=0x471009da) returned 1 [0084.282] RestoreDC (hdc=0x250109dd, nSavedDC=-1) returned 1 [0084.282] GdipReleaseDC (graphics=0x5bff610, hdc=0x250109dd) returned 0x0 [0084.282] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.282] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.282] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.282] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22d9aa8) returned 0x0 [0084.282] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.282] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.282] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0084.282] GdipCreateSolidFill (color=0xff000000, brush=0x1ced74) returned 0x0 [0084.282] GdipDrawString (graphics=0x5bff610, string="2", length=1, font=0x5bfab90, layoutRect=0x1ced5c, stringFormat=0x5bfb098, brush=0x5bfff58) returned 0x0 [0084.283] GdipDeleteBrush (brush=0x5bfff58) returned 0x0 [0084.283] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0084.283] GetFocus () returned 0x10402 [0084.283] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.283] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.283] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.283] GdipCreateRegion (region=0x1cebc4) returned 0x0 [0084.283] GdipGetClip (graphics=0x5bff610, region=0x5c018f8) returned 0x0 [0084.283] GdipCreateMatrix (matrix=0x1cebc4) returned 0x0 [0084.283] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0084.283] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cebdc) returned 0x0 [0084.283] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.284] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0084.284] LocalFree (hMem=0x691830) returned 0x0 [0084.284] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.284] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0084.284] LocalFree (hMem=0x691830) returned 0x0 [0084.284] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0084.284] GdipIsInfiniteRegion (region=0x5c018f8, graphics=0x5bff610, result=0x1cec04) returned 0x0 [0084.284] GdipIsInfiniteRegion (region=0x5c018f8, graphics=0x5bff610, result=0x1cebf4) returned 0x0 [0084.284] GdipGetRegionHRgn (region=0x5c018f8, graphics=0x5bff610, hRgn=0x1cebf4) returned 0x0 [0084.284] GdipDeleteRegion (region=0x5c018f8) returned 0x0 [0084.284] GdipGetDC (graphics=0x5bff610, hdc=0x1cec0c) returned 0x0 [0084.284] GetCurrentObject (hdc=0x250109dd, type=0x1) returned 0x1b00017 [0084.284] GetCurrentObject (hdc=0x250109dd, type=0x2) returned 0x1900010 [0084.284] GetCurrentObject (hdc=0x250109dd, type=0x7) returned 0x350509df [0084.284] GetCurrentObject (hdc=0x250109dd, type=0x6) returned 0x18a0048 [0084.284] SaveDC (hdc=0x250109dd) returned 1 [0084.284] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9e0406e1 [0084.284] GetClipRgn (hdc=0x250109dd, hrgn=0x9e0406e1) returned 0 [0084.284] SelectClipRgn (hdc=0x250109dd, hrgn=0x87040861) returned 2 [0084.284] DeleteObject (ho=0x9e0406e1) returned 1 [0084.284] DeleteObject (ho=0x87040861) returned 1 [0084.284] OffsetViewportOrgEx (in: hdc=0x250109dd, x=0, y=0, lppt=0x22d9cc4 | out: lppt=0x22d9cc4) returned 1 [0084.285] GetROP2 (hdc=0x250109dd) returned 13 [0084.285] GetBkMode (hdc=0x250109dd) returned 2 [0084.285] SetBkMode (hdc=0x250109dd, mode=1) returned 2 [0084.285] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x183009de [0084.285] SelectObject (hdc=0x250109dd, h=0x183009de) returned 0x1b00017 [0084.285] MoveToEx (in: hdc=0x250109dd, x=45, y=0, lppt=0x22d9d04 | out: lppt=0x22d9d04) returned 1 [0084.285] LineTo (hdc=0x250109dd, x=0, y=0) returned 1 [0084.285] SetBkMode (hdc=0x250109dd, mode=2) returned 1 [0084.285] MoveToEx (in: hdc=0x250109dd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.285] GetROP2 (hdc=0x250109dd) returned 13 [0084.285] GetBkMode (hdc=0x250109dd) returned 2 [0084.285] SetBkMode (hdc=0x250109dd, mode=1) returned 2 [0084.285] SelectObject (hdc=0x250109dd, h=0x183009de) returned 0x183009de [0084.285] MoveToEx (in: hdc=0x250109dd, x=0, y=0, lppt=0x22d9d14 | out: lppt=0x22d9d14) returned 1 [0084.285] LineTo (hdc=0x250109dd, x=0, y=41) returned 1 [0084.285] SetBkMode (hdc=0x250109dd, mode=2) returned 1 [0084.285] MoveToEx (in: hdc=0x250109dd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.285] SelectObject (hdc=0x250109dd, h=0x1b00017) returned 0x183009de [0084.285] DeleteObject (ho=0x183009de) returned 1 [0084.285] GetROP2 (hdc=0x250109dd) returned 13 [0084.285] GetBkMode (hdc=0x250109dd) returned 2 [0084.285] SetBkMode (hdc=0x250109dd, mode=1) returned 2 [0084.286] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x7a30098e [0084.286] SelectObject (hdc=0x250109dd, h=0x7a30098e) returned 0x1b00017 [0084.286] MoveToEx (in: hdc=0x250109dd, x=0, y=41, lppt=0x22d9d54 | out: lppt=0x22d9d54) returned 1 [0084.286] LineTo (hdc=0x250109dd, x=45, y=41) returned 1 [0084.286] SetBkMode (hdc=0x250109dd, mode=2) returned 1 [0084.286] MoveToEx (in: hdc=0x250109dd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.286] GetROP2 (hdc=0x250109dd) returned 13 [0084.286] GetBkMode (hdc=0x250109dd) returned 2 [0084.286] SetBkMode (hdc=0x250109dd, mode=1) returned 2 [0084.286] SelectObject (hdc=0x250109dd, h=0x7a30098e) returned 0x7a30098e [0084.286] MoveToEx (in: hdc=0x250109dd, x=45, y=41, lppt=0x22d9d64 | out: lppt=0x22d9d64) returned 1 [0084.286] LineTo (hdc=0x250109dd, x=45, y=-1) returned 1 [0084.286] SetBkMode (hdc=0x250109dd, mode=2) returned 1 [0084.286] MoveToEx (in: hdc=0x250109dd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.286] SelectObject (hdc=0x250109dd, h=0x1b00017) returned 0x7a30098e [0084.286] DeleteObject (ho=0x7a30098e) returned 1 [0084.286] GetROP2 (hdc=0x250109dd) returned 13 [0084.286] GetBkMode (hdc=0x250109dd) returned 2 [0084.287] SetBkMode (hdc=0x250109dd, mode=1) returned 2 [0084.287] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x193009de [0084.287] SelectObject (hdc=0x250109dd, h=0x193009de) returned 0x1b00017 [0084.287] MoveToEx (in: hdc=0x250109dd, x=44, y=1, lppt=0x22d9da4 | out: lppt=0x22d9da4) returned 1 [0084.287] LineTo (hdc=0x250109dd, x=1, y=1) returned 1 [0084.287] SetBkMode (hdc=0x250109dd, mode=2) returned 1 [0084.287] MoveToEx (in: hdc=0x250109dd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.287] GetROP2 (hdc=0x250109dd) returned 13 [0084.287] GetBkMode (hdc=0x250109dd) returned 2 [0084.287] SetBkMode (hdc=0x250109dd, mode=1) returned 2 [0084.287] SelectObject (hdc=0x250109dd, h=0x193009de) returned 0x193009de [0084.287] MoveToEx (in: hdc=0x250109dd, x=1, y=1, lppt=0x22d9db4 | out: lppt=0x22d9db4) returned 1 [0084.287] LineTo (hdc=0x250109dd, x=1, y=40) returned 1 [0084.287] SetBkMode (hdc=0x250109dd, mode=2) returned 1 [0084.287] MoveToEx (in: hdc=0x250109dd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.287] SelectObject (hdc=0x250109dd, h=0x1b00017) returned 0x193009de [0084.287] DeleteObject (ho=0x193009de) returned 1 [0084.287] GetROP2 (hdc=0x250109dd) returned 13 [0084.287] GetBkMode (hdc=0x250109dd) returned 2 [0084.287] SetBkMode (hdc=0x250109dd, mode=1) returned 2 [0084.287] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x7b30098e [0084.287] SelectObject (hdc=0x250109dd, h=0x7b30098e) returned 0x1b00017 [0084.288] MoveToEx (in: hdc=0x250109dd, x=1, y=40, lppt=0x22d9df4 | out: lppt=0x22d9df4) returned 1 [0084.288] LineTo (hdc=0x250109dd, x=44, y=40) returned 1 [0084.288] SetBkMode (hdc=0x250109dd, mode=2) returned 1 [0084.288] MoveToEx (in: hdc=0x250109dd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.288] GetROP2 (hdc=0x250109dd) returned 13 [0084.288] GetBkMode (hdc=0x250109dd) returned 2 [0084.288] SetBkMode (hdc=0x250109dd, mode=1) returned 2 [0084.288] SelectObject (hdc=0x250109dd, h=0x7b30098e) returned 0x7b30098e [0084.288] MoveToEx (in: hdc=0x250109dd, x=44, y=40, lppt=0x22d9e04 | out: lppt=0x22d9e04) returned 1 [0084.288] LineTo (hdc=0x250109dd, x=44, y=0) returned 1 [0084.288] SetBkMode (hdc=0x250109dd, mode=2) returned 1 [0084.288] MoveToEx (in: hdc=0x250109dd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.288] SelectObject (hdc=0x250109dd, h=0x1b00017) returned 0x7b30098e [0084.288] DeleteObject (ho=0x7b30098e) returned 1 [0084.288] RestoreDC (hdc=0x250109dd, nSavedDC=-1) returned 1 [0084.288] GdipReleaseDC (graphics=0x5bff610, hdc=0x250109dd) returned 0x0 [0084.288] GdipGetDC (graphics=0x5bff610, hdc=0x1ceefc) returned 0x0 [0084.288] BitBlt (hdc=0xc0100ae, x=0, y=0, cx=46, cy=42, hdcSrc=0x250109dd, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.318] GdipReleaseDC (graphics=0x5bff610, hdc=0x250109dd) returned 0x0 [0084.318] SelectPalette (hdc=0xc0100ae, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0084.318] SelectObject (hdc=0x250109dd, h=0x185000f) returned 0x350509df [0084.318] DeleteDC (hdc=0x250109dd) returned 1 [0084.318] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0084.318] EndPaint (hWnd=0x10400, lpPaint=0x1ceea0) returned 1 [0084.319] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0084.319] IsWindowUnicode (hWnd=0x10402) returned 1 [0084.319] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0084.319] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0084.319] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0084.319] BeginPaint (in: hWnd=0x10402, lpPaint=0x1ceea4 | out: lpPaint=0x1ceea4) returned 0x1b0107ae [0084.319] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.319] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x14, wParam=0x1b0107ae, lParam=0x0) returned 0x1 [0084.319] GetStockObject (i=5) returned 0x1900015 [0084.319] SelectPalette (hdc=0x1b0107ae, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0084.319] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x620109e5 [0084.319] SelectObject (hdc=0x620109e5, h=0x350509df) returned 0x185000f [0084.319] GdipCreateFromHDC (hdc=0x620109e5, graphics=0x1ceebc) returned 0x0 [0084.320] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0084.320] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=46, height=42, combineMode=0x0) returned 0x0 [0084.320] GdipCreateMatrix (matrix=0x1cef04) returned 0x0 [0084.320] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0084.320] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cef1c) returned 0x0 [0084.320] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.320] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0084.320] LocalFree (hMem=0x691830) returned 0x0 [0084.320] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0084.320] GdipCreateRegion (region=0x1cef04) returned 0x0 [0084.320] GdipGetClip (graphics=0x5bff610, region=0x5c01628) returned 0x0 [0084.320] GdipIsInfiniteRegion (region=0x5c01628, graphics=0x5bff610, result=0x1cef10) returned 0x0 [0084.320] GdipSaveGraphics (graphics=0x5bff610, state=0x1cef3c) returned 0x0 [0084.320] GdipRestoreGraphics (graphics=0x5bff610, state=0xfd780dbd) returned 0x0 [0084.320] GdipDeleteRegion (region=0x5c01628) returned 0x0 [0084.320] GdipGetDC (graphics=0x5bff610, hdc=0x1ced24) returned 0x0 [0084.320] GetCurrentObject (hdc=0x620109e5, type=0x1) returned 0x1b00017 [0084.320] GetCurrentObject (hdc=0x620109e5, type=0x2) returned 0x1900010 [0084.320] GetCurrentObject (hdc=0x620109e5, type=0x7) returned 0x350509df [0084.321] GetCurrentObject (hdc=0x620109e5, type=0x6) returned 0x18a0048 [0084.321] SaveDC (hdc=0x620109e5) returned 1 [0084.321] GetNearestColor (hdc=0x620109e5, color=0xf0f0f0) returned 0xf0f0f0 [0084.321] GetNearestColor (hdc=0x620109e5, color=0xa0a0a0) returned 0xa0a0a0 [0084.321] GetNearestColor (hdc=0x620109e5, color=0x696969) returned 0x696969 [0084.321] GetNearestColor (hdc=0x620109e5, color=0xa0a0a0) returned 0xa0a0a0 [0084.321] GetNearestColor (hdc=0x620109e5, color=0x0) returned 0x0 [0084.321] GetNearestColor (hdc=0x620109e5, color=0xffffff) returned 0xffffff [0084.321] GetNearestColor (hdc=0x620109e5, color=0xe5e5e5) returned 0xe5e5e5 [0084.321] GetNearestColor (hdc=0x620109e5, color=0xd7d7d7) returned 0xd7d7d7 [0084.321] GetNearestColor (hdc=0x620109e5, color=0x0) returned 0x0 [0084.321] RestoreDC (hdc=0x620109e5, nSavedDC=-1) returned 1 [0084.321] GdipReleaseDC (graphics=0x5bff610, hdc=0x620109e5) returned 0x0 [0084.321] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.322] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.322] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.322] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22da338) returned 0x0 [0084.322] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.322] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.322] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0084.322] GdipGetStringFormatFlags (format=0x5bfb098, flags=0x1cedbc) returned 0x0 [0084.322] GdipGetStringFormatTrimming (format=0x5bfb098, trimming=0x1cedbc) returned 0x0 [0084.322] GdipGetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=0x1cedbc) returned 0x0 [0084.322] GdipGetStringFormatAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0084.322] GdipGetStringFormatLineAlign (format=0x5bfb098, align=0x1cedbc) returned 0x0 [0084.322] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0084.322] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.322] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.323] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.323] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1cec44) returned 0x0 [0084.323] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22da414) returned 0x0 [0084.323] GdipSetStringFormatFlags (format=0x5bfff58, flags=0) returned 0x0 [0084.323] GdipSetStringFormatTrimming (format=0x5bfff58, trimming=0x1) returned 0x0 [0084.323] GdipSetStringFormatHotkeyPrefix (format=0x5bfff58, hotkeyPrefix=2) returned 0x0 [0084.323] GdipSetStringFormatAlign (format=0x5bfff58, align=0x1) returned 0x0 [0084.323] GdipSetStringFormatLineAlign (format=0x5bfff58, align=0x1) returned 0x0 [0084.323] GdipMeasureString (graphics=0x5c02218, string="1", length=1, font=0x5bfab90, layoutRect=0x1cec24, stringFormat=0x5bfff58, boundingBox=0x1cec14, codepointsFitted=0x1cec10, linesFilled=0x1cec0c) returned 0x0 [0084.323] GdipDeleteStringFormat (format=0x5bfff58) returned 0x0 [0084.323] GdipDeleteGraphics (graphics=0x5c02218) returned 0x0 [0084.323] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.324] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.324] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.324] GdipCreateRegion (region=0x1cec90) returned 0x0 [0084.324] GdipGetClip (graphics=0x5bff610, region=0x5c01b38) returned 0x0 [0084.324] GdipCreateMatrix (matrix=0x1cec90) returned 0x0 [0084.324] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0084.324] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1ceca8) returned 0x0 [0084.324] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.324] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0084.324] LocalFree (hMem=0x691830) returned 0x0 [0084.324] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.324] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0084.324] LocalFree (hMem=0x691830) returned 0x0 [0084.324] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0084.324] GdipIsInfiniteRegion (region=0x5c01b38, graphics=0x5bff610, result=0x1cecd0) returned 0x0 [0084.324] GdipIsInfiniteRegion (region=0x5c01b38, graphics=0x5bff610, result=0x1cecc0) returned 0x0 [0084.324] GdipGetRegionHRgn (region=0x5c01b38, graphics=0x5bff610, hRgn=0x1cecc0) returned 0x0 [0084.324] GdipDeleteRegion (region=0x5c01b38) returned 0x0 [0084.324] GdipGetDC (graphics=0x5bff610, hdc=0x1cecd8) returned 0x0 [0084.324] GetCurrentObject (hdc=0x620109e5, type=0x1) returned 0x1b00017 [0084.324] GetCurrentObject (hdc=0x620109e5, type=0x2) returned 0x1900010 [0084.325] GetCurrentObject (hdc=0x620109e5, type=0x7) returned 0x350509df [0084.325] GetCurrentObject (hdc=0x620109e5, type=0x6) returned 0x18a0048 [0084.325] SaveDC (hdc=0x620109e5) returned 1 [0084.325] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x88040861 [0084.325] GetClipRgn (hdc=0x620109e5, hrgn=0x88040861) returned 0 [0084.325] SelectClipRgn (hdc=0x620109e5, hrgn=0x9f0406e1) returned 2 [0084.325] DeleteObject (ho=0x88040861) returned 1 [0084.325] DeleteObject (ho=0x9f0406e1) returned 1 [0084.325] OffsetViewportOrgEx (in: hdc=0x620109e5, x=0, y=0, lppt=0x22da618 | out: lppt=0x22da618) returned 1 [0084.325] GetNearestColor (hdc=0x620109e5, color=0xf0f0f0) returned 0xf0f0f0 [0084.325] CreateSolidBrush (color=0xf0f0f0) returned 0x481009da [0084.325] FillRect (hDC=0x620109e5, lprc=0x1cecdc, hbr=0x481009da) returned 1 [0084.325] DeleteObject (ho=0x481009da) returned 1 [0084.325] RestoreDC (hdc=0x620109e5, nSavedDC=-1) returned 1 [0084.325] GdipReleaseDC (graphics=0x5bff610, hdc=0x620109e5) returned 0x0 [0084.326] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.326] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.326] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.326] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22da6a0) returned 0x0 [0084.326] GdipSetStringFormatAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.326] GdipSetStringFormatLineAlign (format=0x5bfb098, align=0x1) returned 0x0 [0084.326] GdipSetStringFormatHotkeyPrefix (format=0x5bfb098, hotkeyPrefix=2) returned 0x0 [0084.326] GdipCreateSolidFill (color=0xff000000, brush=0x1ced74) returned 0x0 [0084.326] GdipDrawString (graphics=0x5bff610, string="1", length=1, font=0x5bfab90, layoutRect=0x1ced5c, stringFormat=0x5bfb098, brush=0x5bfff58) returned 0x0 [0084.326] GdipDeleteBrush (brush=0x5bfff58) returned 0x0 [0084.326] GdipDeleteStringFormat (format=0x5bfb098) returned 0x0 [0084.326] GetFocus () returned 0x10402 [0084.327] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.327] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced88, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\\ð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.327] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.327] GdipCreatePen1 (color=0xff000000, width=0x3f800000, unit=0x0, pen=0x1cedb0) returned 0x0 [0084.327] GdipDrawRectangleI (graphics=0x5bff610, pen=0x5c017d8, x=0, y=0, width=45, height=41) returned 0x0 [0084.328] GdipDeletePen (pen=0x5c017d8) returned 0x0 [0084.329] GdipCreateRegion (region=0x1cebc4) returned 0x0 [0084.329] GdipGetClip (graphics=0x5bff610, region=0x5c012c8) returned 0x0 [0084.329] GdipCreateMatrix (matrix=0x1cebc4) returned 0x0 [0084.329] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0084.329] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cebdc) returned 0x0 [0084.329] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.329] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0084.329] LocalFree (hMem=0x691830) returned 0x0 [0084.329] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.329] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0084.329] LocalFree (hMem=0x691830) returned 0x0 [0084.329] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0084.329] GdipIsInfiniteRegion (region=0x5c012c8, graphics=0x5bff610, result=0x1cec04) returned 0x0 [0084.329] GdipIsInfiniteRegion (region=0x5c012c8, graphics=0x5bff610, result=0x1cebf4) returned 0x0 [0084.329] GdipGetRegionHRgn (region=0x5c012c8, graphics=0x5bff610, hRgn=0x1cebf4) returned 0x0 [0084.329] GdipDeleteRegion (region=0x5c012c8) returned 0x0 [0084.329] GdipGetDC (graphics=0x5bff610, hdc=0x1cec0c) returned 0x0 [0084.329] GetCurrentObject (hdc=0x620109e5, type=0x1) returned 0x1b00017 [0084.329] GetCurrentObject (hdc=0x620109e5, type=0x2) returned 0x1900010 [0084.329] GetCurrentObject (hdc=0x620109e5, type=0x7) returned 0x350509df [0084.329] GetCurrentObject (hdc=0x620109e5, type=0x6) returned 0x18a0048 [0084.329] SaveDC (hdc=0x620109e5) returned 1 [0084.330] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa00406e1 [0084.330] GetClipRgn (hdc=0x620109e5, hrgn=0xa00406e1) returned 0 [0084.330] SelectClipRgn (hdc=0x620109e5, hrgn=0x89040861) returned 2 [0084.330] DeleteObject (ho=0xa00406e1) returned 1 [0084.330] DeleteObject (ho=0x89040861) returned 1 [0084.330] OffsetViewportOrgEx (in: hdc=0x620109e5, x=0, y=0, lppt=0x22da8e0 | out: lppt=0x22da8e0) returned 1 [0084.330] GetROP2 (hdc=0x620109e5) returned 13 [0084.330] GetBkMode (hdc=0x620109e5) returned 2 [0084.330] SetBkMode (hdc=0x620109e5, mode=1) returned 2 [0084.330] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x1e3009e8 [0084.330] SelectObject (hdc=0x620109e5, h=0x1e3009e8) returned 0x1b00017 [0084.330] MoveToEx (in: hdc=0x620109e5, x=44, y=1, lppt=0x22da920 | out: lppt=0x22da920) returned 1 [0084.330] LineTo (hdc=0x620109e5, x=1, y=1) returned 1 [0084.330] SetBkMode (hdc=0x620109e5, mode=2) returned 1 [0084.330] MoveToEx (in: hdc=0x620109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.330] GetROP2 (hdc=0x620109e5) returned 13 [0084.330] GetBkMode (hdc=0x620109e5) returned 2 [0084.330] SetBkMode (hdc=0x620109e5, mode=1) returned 2 [0084.330] SelectObject (hdc=0x620109e5, h=0x1e3009e8) returned 0x1e3009e8 [0084.330] MoveToEx (in: hdc=0x620109e5, x=1, y=1, lppt=0x22da930 | out: lppt=0x22da930) returned 1 [0084.330] LineTo (hdc=0x620109e5, x=1, y=40) returned 1 [0084.331] SetBkMode (hdc=0x620109e5, mode=2) returned 1 [0084.331] MoveToEx (in: hdc=0x620109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.331] SelectObject (hdc=0x620109e5, h=0x1b00017) returned 0x1e3009e8 [0084.331] DeleteObject (ho=0x1e3009e8) returned 1 [0084.331] GetROP2 (hdc=0x620109e5) returned 13 [0084.331] GetBkMode (hdc=0x620109e5) returned 2 [0084.331] SetBkMode (hdc=0x620109e5, mode=1) returned 2 [0084.331] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x1d3009e9 [0084.331] SelectObject (hdc=0x620109e5, h=0x1d3009e9) returned 0x1b00017 [0084.331] MoveToEx (in: hdc=0x620109e5, x=1, y=40, lppt=0x22da970 | out: lppt=0x22da970) returned 1 [0084.331] LineTo (hdc=0x620109e5, x=44, y=40) returned 1 [0084.331] SetBkMode (hdc=0x620109e5, mode=2) returned 1 [0084.331] MoveToEx (in: hdc=0x620109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.331] GetROP2 (hdc=0x620109e5) returned 13 [0084.331] GetBkMode (hdc=0x620109e5) returned 2 [0084.331] SetBkMode (hdc=0x620109e5, mode=1) returned 2 [0084.331] SelectObject (hdc=0x620109e5, h=0x1d3009e9) returned 0x1d3009e9 [0084.331] MoveToEx (in: hdc=0x620109e5, x=44, y=40, lppt=0x22da980 | out: lppt=0x22da980) returned 1 [0084.331] LineTo (hdc=0x620109e5, x=44, y=0) returned 1 [0084.331] SetBkMode (hdc=0x620109e5, mode=2) returned 1 [0084.331] MoveToEx (in: hdc=0x620109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.332] SelectObject (hdc=0x620109e5, h=0x1b00017) returned 0x1d3009e9 [0084.332] DeleteObject (ho=0x1d3009e9) returned 1 [0084.332] GetROP2 (hdc=0x620109e5) returned 13 [0084.332] GetBkMode (hdc=0x620109e5) returned 2 [0084.332] SetBkMode (hdc=0x620109e5, mode=1) returned 2 [0084.332] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x1f3009e8 [0084.332] SelectObject (hdc=0x620109e5, h=0x1f3009e8) returned 0x1b00017 [0084.332] MoveToEx (in: hdc=0x620109e5, x=43, y=2, lppt=0x22da9c0 | out: lppt=0x22da9c0) returned 1 [0084.332] LineTo (hdc=0x620109e5, x=2, y=2) returned 1 [0084.332] SetBkMode (hdc=0x620109e5, mode=2) returned 1 [0084.332] MoveToEx (in: hdc=0x620109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.332] GetROP2 (hdc=0x620109e5) returned 13 [0084.332] GetBkMode (hdc=0x620109e5) returned 2 [0084.332] SetBkMode (hdc=0x620109e5, mode=1) returned 2 [0084.332] SelectObject (hdc=0x620109e5, h=0x1f3009e8) returned 0x1f3009e8 [0084.332] MoveToEx (in: hdc=0x620109e5, x=2, y=2, lppt=0x22da9d0 | out: lppt=0x22da9d0) returned 1 [0084.332] LineTo (hdc=0x620109e5, x=2, y=39) returned 1 [0084.332] SetBkMode (hdc=0x620109e5, mode=2) returned 1 [0084.332] MoveToEx (in: hdc=0x620109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.332] SelectObject (hdc=0x620109e5, h=0x1b00017) returned 0x1f3009e8 [0084.332] DeleteObject (ho=0x1f3009e8) returned 1 [0084.332] GetROP2 (hdc=0x620109e5) returned 13 [0084.333] GetBkMode (hdc=0x620109e5) returned 2 [0084.333] SetBkMode (hdc=0x620109e5, mode=1) returned 2 [0084.333] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x1e3009e9 [0084.333] SelectObject (hdc=0x620109e5, h=0x1e3009e9) returned 0x1b00017 [0084.333] MoveToEx (in: hdc=0x620109e5, x=2, y=39, lppt=0x22daa10 | out: lppt=0x22daa10) returned 1 [0084.333] LineTo (hdc=0x620109e5, x=43, y=39) returned 1 [0084.333] SetBkMode (hdc=0x620109e5, mode=2) returned 1 [0084.333] MoveToEx (in: hdc=0x620109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.333] GetROP2 (hdc=0x620109e5) returned 13 [0084.333] GetBkMode (hdc=0x620109e5) returned 2 [0084.333] SetBkMode (hdc=0x620109e5, mode=1) returned 2 [0084.333] SelectObject (hdc=0x620109e5, h=0x1e3009e9) returned 0x1e3009e9 [0084.333] MoveToEx (in: hdc=0x620109e5, x=43, y=39, lppt=0x22daa20 | out: lppt=0x22daa20) returned 1 [0084.333] LineTo (hdc=0x620109e5, x=43, y=1) returned 1 [0084.333] SetBkMode (hdc=0x620109e5, mode=2) returned 1 [0084.333] MoveToEx (in: hdc=0x620109e5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0084.333] SelectObject (hdc=0x620109e5, h=0x1b00017) returned 0x1e3009e9 [0084.333] DeleteObject (ho=0x1e3009e9) returned 1 [0084.333] RestoreDC (hdc=0x620109e5, nSavedDC=-1) returned 1 [0084.333] GdipReleaseDC (graphics=0x5bff610, hdc=0x620109e5) returned 0x0 [0084.333] GdipGetDC (graphics=0x5bff610, hdc=0x1ceefc) returned 0x0 [0084.334] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=46, cy=42, hdcSrc=0x620109e5, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.379] GdipReleaseDC (graphics=0x5bff610, hdc=0x620109e5) returned 0x0 [0084.379] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0084.379] SelectObject (hdc=0x620109e5, h=0x185000f) returned 0x350509df [0084.379] DeleteDC (hdc=0x620109e5) returned 1 [0084.379] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0084.379] EndPaint (hWnd=0x10402, lpPaint=0x1ceea0) returned 1 [0084.379] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0084.379] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0084.381] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0084.381] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0084.382] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0084.384] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x46, wParam=0x0, lParam=0x1cf2e4) returned 0x0 [0084.384] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x8001e, Msg=0x46, wParam=0x0, lParam=0x1cf2e4) returned 0x0 [0084.385] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0084.385] GetWindowPlacement (in: hWnd=0x40358, lpwndpl=0x1cf054 | out: lpwndpl=0x1cf054) returned 1 [0084.385] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x47, wParam=0x0, lParam=0x1cf2e4) returned 0x0 [0084.385] GetClientRect (in: hWnd=0x40358, lpRect=0x1cf004 | out: lpRect=0x1cf004) returned 1 [0084.386] GetWindowRect (in: hWnd=0x40358, lpRect=0x1cf004 | out: lpRect=0x1cf004) returned 1 [0084.387] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0084.387] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0084.387] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0084.388] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x8001e, Msg=0x47, wParam=0x0, lParam=0x1cf2e4) returned 0x0 [0084.388] IsWindowUnicode (hWnd=0x10402) returned 1 [0084.388] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0084.393] GetKeyState (nVirtKey=16) returned 0 [0084.393] GetKeyState (nVirtKey=17) returned 0 [0084.393] GetKeyState (nVirtKey=18) returned -127 [0084.393] TranslateMessage (lpMsg=0x1cf40c) returned 1 [0084.393] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0084.394] GetKeyState (nVirtKey=16) returned 0 [0084.395] GetKeyState (nVirtKey=17) returned 0 [0084.395] GetKeyState (nVirtKey=18) returned -127 [0084.396] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x105, wParam=0x1b, lParam=0xe0010001) returned 0x0 [0084.396] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0084.396] IsWindowUnicode (hWnd=0x10402) returned 1 [0084.396] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0084.397] GetKeyState (nVirtKey=16) returned 0 [0084.397] GetKeyState (nVirtKey=17) returned 0 [0084.397] GetKeyState (nVirtKey=18) returned 1 [0084.397] TranslateMessage (lpMsg=0x1cf40c) returned 1 [0084.397] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0084.397] GetKeyState (nVirtKey=16) returned 0 [0084.397] GetKeyState (nVirtKey=17) returned 0 [0084.397] GetKeyState (nVirtKey=18) returned 1 [0084.397] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0084.397] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0084.397] IsWindowUnicode (hWnd=0x10404) returned 1 [0084.397] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0084.397] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0084.397] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0084.398] BeginPaint (in: hWnd=0x10404, lpPaint=0x1cee64 | out: lpPaint=0x1cee64) returned 0x1b0107ae [0084.398] SelectPalette (hdc=0x1b0107ae, hPal=0xc90809e4, bForceBkgd=1) returned 0x188000b [0084.398] CreateCompatibleDC (hdc=0x1b0107ae) returned 0x690109e5 [0084.398] DeleteObject (ho=0x350509df) returned 1 [0084.398] GetObjectType (h=0x1b0107ae) returned 0x3 [0084.398] CreateCompatibleBitmap (hdc=0x1b0107ae, cx=1, cy=1) returned 0xffffffffeb0508b5 [0084.398] GetDIBits (in: hdc=0x1b0107ae, hbm=0xeb0508b5, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x1ce954, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1ce954) returned 1 [0084.398] GetDIBits (in: hdc=0x1b0107ae, hbm=0xeb0508b5, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x1ce954, usage=0x0 | out: lpvBits=0x0, lpbmi=0x1ce954) returned 1 [0084.398] DeleteObject (ho=0xeb0508b5) returned 1 [0084.398] CreateDIBSection (in: hdc=0x1b0107ae, lpbmi=0x1ce9a4, usage=0x0, ppvBits=0x1cee98, hSection=0x0, offset=0x0 | out: ppvBits=0x1cee98) returned 0x360509df [0084.398] SelectObject (hdc=0x690109e5, h=0x360509df) returned 0x185000f [0084.398] GdipCreateFromHDC (hdc=0x690109e5, graphics=0x1cee7c) returned 0x0 [0084.399] GdipTranslateWorldTransform (graphics=0x5bff610, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0084.399] GdipSetClipRectI (graphics=0x5bff610, x=0, y=0, width=287, height=24, combineMode=0x0) returned 0x0 [0084.399] GdipCreateMatrix (matrix=0x1ceec4) returned 0x0 [0084.399] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0084.399] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1ceedc) returned 0x0 [0084.399] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.399] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0084.399] LocalFree (hMem=0x691830) returned 0x0 [0084.399] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0084.399] GdipCreateRegion (region=0x1ceec4) returned 0x0 [0084.399] GdipGetClip (graphics=0x5bff610, region=0x5c01bc8) returned 0x0 [0084.399] GdipIsInfiniteRegion (region=0x5c01bc8, graphics=0x5bff610, result=0x1ceed0) returned 0x0 [0084.399] GdipSaveGraphics (graphics=0x5bff610, state=0x1ceefc) returned 0x0 [0084.399] GetWindowTextLengthW (hWnd=0x10404) returned 10 [0084.399] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0084.399] GetSystemMetrics (nIndex=42) returned 0 [0084.399] GetWindowTextW (in: hWnd=0x10404, lpString=0x1cee00, nMaxCount=11 | out: lpString="MenuStrip1") returned 10 [0084.399] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0xd, wParam=0xb, lParam=0x1cee00) returned 0xa [0084.400] GetClientRect (in: hWnd=0x10404, lpRect=0x1cee00 | out: lpRect=0x1cee00) returned 1 [0084.400] GdipCreateRegion (region=0x1cec54) returned 0x0 [0084.400] GdipGetClip (graphics=0x5bff610, region=0x5c01478) returned 0x0 [0084.400] GdipCreateMatrix (matrix=0x1cec54) returned 0x0 [0084.400] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bfb1f8) returned 0x0 [0084.400] GdipIsMatrixIdentity (matrix=0x5bfb1f8, result=0x1cec6c) returned 0x0 [0084.400] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.400] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0084.400] LocalFree (hMem=0x691830) returned 0x0 [0084.400] GdipCombineRegionRegion (region=0x5c01478, region2=0x5c01bc8, combineMode=0x1) returned 0x0 [0084.400] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.400] GdipGetMatrixElements (matrix=0x5bfb1f8, matrixOut=0x691830) returned 0x0 [0084.400] LocalFree (hMem=0x691830) returned 0x0 [0084.400] GdipDeleteMatrix (matrix=0x5bfb1f8) returned 0x0 [0084.400] GdipIsInfiniteRegion (region=0x5c01478, graphics=0x5bff610, result=0x1cec94) returned 0x0 [0084.400] GdipIsInfiniteRegion (region=0x5c01478, graphics=0x5bff610, result=0x1cec84) returned 0x0 [0084.400] GdipGetRegionHRgn (region=0x5c01478, graphics=0x5bff610, hRgn=0x1cec84) returned 0x0 [0084.400] GdipDeleteRegion (region=0x5c01478) returned 0x0 [0084.400] GdipGetDC (graphics=0x5bff610, hdc=0x1cec9c) returned 0x0 [0084.401] GetCurrentObject (hdc=0x690109e5, type=0x1) returned 0x1b00017 [0084.401] GetCurrentObject (hdc=0x690109e5, type=0x2) returned 0x1900010 [0084.401] GetCurrentObject (hdc=0x690109e5, type=0x7) returned 0x360509df [0084.401] GetCurrentObject (hdc=0x690109e5, type=0x6) returned 0x18a0048 [0084.401] SaveDC (hdc=0x690109e5) returned 1 [0084.401] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8a040861 [0084.401] GetClipRgn (hdc=0x690109e5, hrgn=0x8a040861) returned 0 [0084.401] SelectClipRgn (hdc=0x690109e5, hrgn=0xa10406e1) returned 2 [0084.401] DeleteObject (ho=0x8a040861) returned 1 [0084.401] DeleteObject (ho=0xa10406e1) returned 1 [0084.401] OffsetViewportOrgEx (in: hdc=0x690109e5, x=0, y=0, lppt=0x22dbdf4 | out: lppt=0x22dbdf4) returned 1 [0084.401] GetNearestColor (hdc=0x690109e5, color=0xf0f0f0) returned 0xf0f0f0 [0084.401] CreateSolidBrush (color=0xf0f0f0) returned 0x491009da [0084.401] FillRect (hDC=0x690109e5, lprc=0x1ceca0, hbr=0x491009da) returned 1 [0084.402] DeleteObject (ho=0x491009da) returned 1 [0084.402] RestoreDC (hdc=0x690109e5, nSavedDC=-1) returned 1 [0084.402] GdipReleaseDC (graphics=0x5bff610, hdc=0x690109e5) returned 0x0 [0084.402] GdipCreateMatrix (matrix=0x1cee5c) returned 0x0 [0084.402] GdipGetWorldTransform (graphics=0x5bff610, matrix=0x5bff8f0) returned 0x0 [0084.402] GdipIsMatrixIdentity (matrix=0x5bff8f0, result=0x1cee74) returned 0x0 [0084.402] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x691830 [0084.402] GdipGetMatrixElements (matrix=0x5bff8f0, matrixOut=0x691830) returned 0x0 [0084.402] LocalFree (hMem=0x691830) returned 0x0 [0084.402] GdipDeleteMatrix (matrix=0x5bff8f0) returned 0x0 [0084.402] GdipCreateRegion (region=0x1cee5c) returned 0x0 [0084.402] GdipGetClip (graphics=0x5bff610, region=0x5c02168) returned 0x0 [0084.402] GdipIsInfiniteRegion (region=0x5c02168, graphics=0x5bff610, result=0x1cee68) returned 0x0 [0084.402] GdipSaveGraphics (graphics=0x5bff610, state=0x1cee94) returned 0x0 [0084.438] IsAppThemed () returned 0x1 [0084.438] IsAppThemed () returned 0x1 [0084.438] GetThemeAppProperties () returned 0x3 [0084.438] GetThemeAppProperties () returned 0x3 [0084.439] OpenThemeData () returned 0x30002 [0084.439] IsAppThemed () returned 0x1 [0084.439] CoTaskMemAlloc (cb=0x404) returned 0x69c488 [0084.439] GetCurrentThemeName () returned 0x0 [0084.439] CoTaskMemFree (pv=0x69c488) [0084.440] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.441] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced68, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\x1cð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.441] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.444] GdipCreateFromHDC (hdc=0x62010987, graphics=0x1ce6a0) returned 0x0 [0084.446] GdipGetNearestColor (graphics=0x5c03630, argb=0x1ce630) returned 0x0 [0084.449] GdipGetNearestColor (graphics=0x5c03630, argb=0x1ce630) returned 0x0 [0084.449] GdipGetNearestColor (graphics=0x5c03630, argb=0x1ce630) returned 0x0 [0084.449] GdipGetNearestColor (graphics=0x5c03630, argb=0x1ce630) returned 0x0 [0084.449] GdipDeleteGraphics (graphics=0x5c03630) returned 0x0 [0084.450] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6b980000 [0084.450] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x1ced68, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExiDl\x12zAß(úXo\x1cð\x1c", lpUsedDefaultChar=0x0) returned 17 [0084.451] GetProcAddress (hModule=0x6b980000, lpProcName="ImageList_WriteEx") returned 0x0 [0084.451] GdipCreateLineBrushFromRectI (rect=0x1cece8, color1=0xfff0f0f0, color2=0xfffcfcfc, mode=0x0, wrapMode=0x0, lineGradient=0x1cecf8) returned 0x0 [0084.451] GdipTranslateLineTransform (brush=0x5c00e58, dx=0x43978000, dy=0x43cd0000, order=0x0) returned 0x0 [0084.452] GdipFillRectangleI (graphics=0x5bff610, brush=0x5c00e58, x=0, y=0, width=287, height=24) returned 0x0 [0084.453] GdipDeleteBrush (brush=0x5c00e58) returned 0x0 [0084.453] GdipRestoreGraphics (graphics=0x5bff610, state=0xfd740dbe) returned 0x0 [0084.453] GdipDeleteRegion (region=0x5c02168) returned 0x0 [0084.454] GdipRestoreGraphics (graphics=0x5bff610, state=0xfd750dbd) returned 0x0 [0084.454] GdipDeleteRegion (region=0x5c01bc8) returned 0x0 [0084.454] GetWindowTextLengthW (hWnd=0x10404) returned 10 [0084.454] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0084.454] GetSystemMetrics (nIndex=42) returned 0 [0084.454] GetWindowTextW (in: hWnd=0x10404, lpString=0x1cee00, nMaxCount=11 | out: lpString="MenuStrip1") returned 10 [0084.454] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x10404, Msg=0xd, wParam=0xb, lParam=0x1cee00) returned 0xa [0084.455] GdipGetDC (graphics=0x5bff610, hdc=0x1ceebc) returned 0x0 [0084.455] BitBlt (hdc=0x1b0107ae, x=0, y=0, cx=287, cy=24, hdcSrc=0x690109e5, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.525] GdipReleaseDC (graphics=0x5bff610, hdc=0x690109e5) returned 0x0 [0084.525] SelectPalette (hdc=0x1b0107ae, hPal=0x188000b, bForceBkgd=0) returned 0xc90809e4 [0084.525] SelectObject (hdc=0x690109e5, h=0x185000f) returned 0x360509df [0084.525] DeleteDC (hdc=0x690109e5) returned 1 [0084.525] GdipDeleteGraphics (graphics=0x5bff610) returned 0x0 [0084.525] EndPaint (hWnd=0x10404, lpPaint=0x1cee60) returned 1 [0084.525] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0084.525] IsWindowUnicode (hWnd=0x10406) returned 1 [0084.525] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0084.525] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0084.526] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0084.549] GetFocus () returned 0x10402 [0084.549] IsChild (hWndParent=0x40358, hWnd=0x10402) returned 1 [0084.550] ShowWindow (hWnd=0x40358, nCmdShow=0) returned 1 [0084.550] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0084.553] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x46, wParam=0x0, lParam=0x1cf03c) returned 0x0 [0084.553] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x8001e, Msg=0x46, wParam=0x0, lParam=0x1cf03c) returned 0x0 [0084.554] GetWindowPlacement (in: hWnd=0x40358, lpwndpl=0x1cedac | out: lpwndpl=0x1cedac) returned 1 [0084.554] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x47, wParam=0x0, lParam=0x1cf03c) returned 0x0 [0084.554] GetClientRect (in: hWnd=0x40358, lpRect=0x1ced5c | out: lpRect=0x1ced5c) returned 1 [0084.554] GetWindowRect (in: hWnd=0x40358, lpRect=0x1ced5c | out: lpRect=0x1ced5c) returned 1 [0084.555] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0084.555] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0084.556] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0084.732] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0084.733] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0084.734] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0084.734] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0084.735] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x40358, Msg=0x1c, wParam=0x0, lParam=0xdbc) returned 0x0 [0084.735] CallWindowProcW (lpPrevWndFunc=0x744107e0, hWnd=0x8001e, Msg=0x1c, wParam=0x0, lParam=0xdbc) returned 0x0 [0084.735] NtdllDefWindowProc_W (hWnd=0x60272, Msg=0x1c, wParam=0x0, lParam=0xdbc) returned 0x0 [0084.735] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0084.735] GetCapture () returned 0x0 [0084.735] InvalidateRect (hWnd=0x10402, lpRect=0x0, bErase=0) returned 1 [0084.738] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0084.738] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0084.738] CallWindowProcW (lpPrevWndFunc=0x777eaf40, hWnd=0x10402, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0085.097] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0085.101] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0085.103] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f729c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1ceb80 | out: ppvObject=0x1ceb80*=0x0) returned 0x80004002 [0085.103] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f729bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1ce99c | out: ppvObject=0x1ce99c*=0x0) returned 0x80004002 [0085.107] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f729c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1ce774 | out: ppvObject=0x1ce774*=0x0) returned 0x80004002 [0085.107] IUnknown:AddRef (This=0x691830) returned 0x3 [0085.107] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f7298cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1ce4d4 | out: ppvObject=0x1ce4d4*=0x0) returned 0x80004002 [0085.107] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f729820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1ce484 | out: ppvObject=0x1ce484*=0x0) returned 0x80004002 [0085.107] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5ca540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ce490 | out: ppvObject=0x1ce490*=0x0) returned 0x80004002 [0085.108] CoGetContextToken (in: pToken=0x1ce4f0 | out: pToken=0x1ce4f0) returned 0x0 [0085.108] CObjectContext::QueryInterface () returned 0x0 [0085.108] CObjectContext::GetCurrentApartmentType () returned 0x0 [0085.108] Release () returned 0x0 [0085.109] CoGetObjectContext (in: riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x6b67bc | out: ppv=0x6b67bc*=0x64a158) returned 0x0 [0085.109] CoGetContextToken (in: pToken=0x1ce8f8 | out: pToken=0x1ce8f8) returned 0x0 [0085.109] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f729b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ce984 | out: ppvObject=0x1ce984*=0x0) returned 0x80004002 [0085.109] IUnknown:Release (This=0x691830) returned 0x2 [0085.109] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0085.109] CoGetContextToken (in: pToken=0x1cee38 | out: pToken=0x1cee38) returned 0x0 [0085.109] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef08*(Data1=0x10e, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cef04 | out: ppvObject=0x1cef04*=0x691830) returned 0x0 [0085.109] IUnknown:AddRef (This=0x691830) returned 0x4 [0085.110] IUnknown:Release (This=0x691830) returned 0x3 [0085.110] IUnknown:Release (This=0x691830) returned 0x2 [0085.111] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0085.112] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0085.112] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0085.132] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0085.135] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0085.151] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0085.152] GlobalUnlock (hMem=0x757003c) returned 0 [0085.157] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0085.157] IsWindowUnicode (hWnd=0x10406) returned 1 [0085.157] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0085.157] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0085.157] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0085.157] IsWindowVisible (hWnd=0x40358) returned 0 [0085.158] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0085.158] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0085.158] IUnknown:Release (This=0x691830) returned 0x3 [0085.158] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0085.158] IUnknown:AddRef (This=0x691830) returned 0x4 [0085.158] IUnknown:Release (This=0x691830) returned 0x3 [0085.158] IUnknown:Release (This=0x691830) returned 0x2 [0085.158] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0085.158] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0085.158] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0085.158] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0085.158] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0085.159] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0085.159] GlobalUnlock (hMem=0x757003c) returned 0 [0085.159] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0085.160] IsWindowUnicode (hWnd=0x10408) returned 1 [0085.160] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0085.239] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0085.240] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0085.240] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0085.240] IsWindowUnicode (hWnd=0x10406) returned 1 [0085.240] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0085.240] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0085.240] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0085.240] IsWindowVisible (hWnd=0x40358) returned 0 [0085.240] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0085.240] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0085.240] IUnknown:Release (This=0x691830) returned 0x3 [0085.240] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0085.240] IUnknown:AddRef (This=0x691830) returned 0x4 [0085.240] IUnknown:Release (This=0x691830) returned 0x3 [0085.240] IUnknown:Release (This=0x691830) returned 0x2 [0085.240] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0085.240] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0085.241] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0085.241] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0085.241] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0085.241] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0085.241] GlobalUnlock (hMem=0x757003c) returned 0 [0085.241] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0085.242] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0085.242] WaitMessage () returned 1 [0085.348] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0085.348] IsWindowUnicode (hWnd=0x10406) returned 1 [0085.349] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0085.349] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0085.349] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0085.349] IsWindowVisible (hWnd=0x40358) returned 0 [0085.349] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0085.349] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0085.349] IUnknown:Release (This=0x691830) returned 0x3 [0085.349] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0085.349] IUnknown:AddRef (This=0x691830) returned 0x4 [0085.349] IUnknown:Release (This=0x691830) returned 0x3 [0085.349] IUnknown:Release (This=0x691830) returned 0x2 [0085.349] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0085.349] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0085.349] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0085.349] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0085.350] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0085.353] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0085.353] GlobalUnlock (hMem=0x757003c) returned 0 [0085.353] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0085.353] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0085.353] WaitMessage () returned 1 [0085.458] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0085.458] IsWindowUnicode (hWnd=0x10406) returned 1 [0085.458] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0085.458] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0085.458] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0085.458] IsWindowVisible (hWnd=0x40358) returned 0 [0085.458] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0085.458] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0085.458] IUnknown:Release (This=0x691830) returned 0x3 [0085.458] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0085.458] IUnknown:AddRef (This=0x691830) returned 0x4 [0085.459] IUnknown:Release (This=0x691830) returned 0x3 [0085.459] IUnknown:Release (This=0x691830) returned 0x2 [0085.459] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0085.459] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0085.459] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0085.459] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0085.459] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0085.459] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0085.459] GlobalUnlock (hMem=0x757003c) returned 0 [0085.459] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0085.459] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0085.459] WaitMessage () returned 1 [0085.567] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0085.567] IsWindowUnicode (hWnd=0x10406) returned 1 [0085.567] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0085.567] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0085.567] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0085.567] IsWindowVisible (hWnd=0x40358) returned 0 [0085.567] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0085.568] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0085.568] IUnknown:Release (This=0x691830) returned 0x3 [0085.568] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0085.568] IUnknown:AddRef (This=0x691830) returned 0x4 [0085.568] IUnknown:Release (This=0x691830) returned 0x3 [0085.568] IUnknown:Release (This=0x691830) returned 0x2 [0085.568] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0085.568] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0085.568] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0085.568] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0085.568] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0085.569] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0085.569] GlobalUnlock (hMem=0x757003c) returned 0 [0085.569] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0085.569] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0085.569] WaitMessage () returned 1 [0085.677] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0085.677] IsWindowUnicode (hWnd=0x10406) returned 1 [0085.677] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0085.677] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0085.677] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0085.677] IsWindowVisible (hWnd=0x40358) returned 0 [0085.677] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0085.677] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0085.678] IUnknown:Release (This=0x691830) returned 0x3 [0085.678] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0085.678] IUnknown:AddRef (This=0x691830) returned 0x4 [0085.678] IUnknown:Release (This=0x691830) returned 0x3 [0085.678] IUnknown:Release (This=0x691830) returned 0x2 [0085.678] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0085.678] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0085.678] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0085.678] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0085.678] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0085.678] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0085.678] GlobalUnlock (hMem=0x757003c) returned 0 [0085.679] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0085.679] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0085.679] WaitMessage () returned 1 [0085.787] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0085.787] IsWindowUnicode (hWnd=0x10406) returned 1 [0085.787] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0085.787] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0085.787] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0085.787] IsWindowVisible (hWnd=0x40358) returned 0 [0085.787] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0085.788] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0085.788] IUnknown:Release (This=0x691830) returned 0x3 [0085.788] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0085.788] IUnknown:AddRef (This=0x691830) returned 0x4 [0085.788] IUnknown:Release (This=0x691830) returned 0x3 [0085.788] IUnknown:Release (This=0x691830) returned 0x2 [0085.788] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0085.788] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0085.788] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0085.788] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0085.788] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0085.789] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0085.789] GlobalUnlock (hMem=0x757003c) returned 0 [0085.789] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0085.789] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0085.789] WaitMessage () returned 1 [0085.896] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0085.896] IsWindowUnicode (hWnd=0x10406) returned 1 [0085.896] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0085.896] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0085.896] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0085.896] IsWindowVisible (hWnd=0x40358) returned 0 [0085.896] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0085.896] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0085.896] IUnknown:Release (This=0x691830) returned 0x3 [0085.896] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0085.896] IUnknown:AddRef (This=0x691830) returned 0x4 [0085.896] IUnknown:Release (This=0x691830) returned 0x3 [0085.896] IUnknown:Release (This=0x691830) returned 0x2 [0085.897] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0085.897] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0085.897] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0085.897] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0085.897] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0085.897] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0085.897] GlobalUnlock (hMem=0x757003c) returned 0 [0085.898] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0085.898] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0085.898] WaitMessage () returned 1 [0086.006] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0086.006] IsWindowUnicode (hWnd=0x10406) returned 1 [0086.006] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0086.006] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0086.006] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0086.006] IsWindowVisible (hWnd=0x40358) returned 0 [0086.006] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0086.006] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0086.006] IUnknown:Release (This=0x691830) returned 0x3 [0086.006] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0086.006] IUnknown:AddRef (This=0x691830) returned 0x4 [0086.006] IUnknown:Release (This=0x691830) returned 0x3 [0086.007] IUnknown:Release (This=0x691830) returned 0x2 [0086.007] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0086.007] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0086.007] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0086.007] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0086.007] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0086.007] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0086.007] GlobalUnlock (hMem=0x757003c) returned 0 [0086.007] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0086.007] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0086.007] WaitMessage () returned 1 [0086.114] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0086.114] IsWindowUnicode (hWnd=0x10406) returned 1 [0086.114] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0086.114] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0086.114] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0086.114] IsWindowVisible (hWnd=0x40358) returned 0 [0086.114] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0086.115] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0086.115] IUnknown:Release (This=0x691830) returned 0x3 [0086.115] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0086.115] IUnknown:AddRef (This=0x691830) returned 0x4 [0086.115] IUnknown:Release (This=0x691830) returned 0x3 [0086.115] IUnknown:Release (This=0x691830) returned 0x2 [0086.115] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0086.115] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0086.115] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0086.115] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0086.115] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0086.116] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0086.116] GlobalUnlock (hMem=0x757003c) returned 0 [0086.116] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0086.116] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0086.116] WaitMessage () returned 1 [0086.223] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0086.223] IsWindowUnicode (hWnd=0x10406) returned 1 [0086.223] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0086.224] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0086.224] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0086.224] IsWindowVisible (hWnd=0x40358) returned 0 [0086.224] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0086.224] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0086.224] IUnknown:Release (This=0x691830) returned 0x3 [0086.224] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0086.224] IUnknown:AddRef (This=0x691830) returned 0x4 [0086.224] IUnknown:Release (This=0x691830) returned 0x3 [0086.224] IUnknown:Release (This=0x691830) returned 0x2 [0086.224] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0086.224] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0086.224] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0086.225] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0086.225] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0086.225] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0086.225] GlobalUnlock (hMem=0x757003c) returned 0 [0086.225] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0086.225] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0086.225] WaitMessage () returned 1 [0086.333] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0086.333] IsWindowUnicode (hWnd=0x10406) returned 1 [0086.333] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0086.333] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0086.333] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0086.333] IsWindowVisible (hWnd=0x40358) returned 0 [0086.333] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0086.334] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0086.334] IUnknown:Release (This=0x691830) returned 0x3 [0086.334] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0086.334] IUnknown:AddRef (This=0x691830) returned 0x4 [0086.334] IUnknown:Release (This=0x691830) returned 0x3 [0086.334] IUnknown:Release (This=0x691830) returned 0x2 [0086.334] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0086.334] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0086.334] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0086.334] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0086.334] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0086.334] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0086.335] GlobalUnlock (hMem=0x757003c) returned 0 [0086.335] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0086.335] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0086.335] WaitMessage () returned 1 [0086.443] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0086.443] IsWindowUnicode (hWnd=0x10406) returned 1 [0086.443] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0086.443] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0086.443] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0086.443] IsWindowVisible (hWnd=0x40358) returned 0 [0086.444] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0086.444] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0086.444] IUnknown:Release (This=0x691830) returned 0x3 [0086.444] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0086.444] IUnknown:AddRef (This=0x691830) returned 0x4 [0086.444] IUnknown:Release (This=0x691830) returned 0x3 [0086.444] IUnknown:Release (This=0x691830) returned 0x2 [0086.444] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0086.444] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0086.444] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0086.444] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0086.444] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0086.452] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0086.452] GlobalUnlock (hMem=0x757003c) returned 0 [0086.452] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0086.452] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0086.452] WaitMessage () returned 1 [0086.553] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0086.553] IsWindowUnicode (hWnd=0x10406) returned 1 [0086.553] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0086.553] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0086.553] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0086.553] IsWindowVisible (hWnd=0x40358) returned 0 [0086.553] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0086.554] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0086.554] IUnknown:Release (This=0x691830) returned 0x3 [0086.554] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0086.554] IUnknown:AddRef (This=0x691830) returned 0x4 [0086.554] IUnknown:Release (This=0x691830) returned 0x3 [0086.554] IUnknown:Release (This=0x691830) returned 0x2 [0086.554] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0086.554] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0086.554] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0086.554] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0086.554] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0086.555] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0086.555] GlobalUnlock (hMem=0x757003c) returned 0 [0086.555] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0086.555] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0086.555] WaitMessage () returned 1 [0086.662] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0086.662] IsWindowUnicode (hWnd=0x10406) returned 1 [0086.663] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0086.663] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0086.663] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0086.663] IsWindowVisible (hWnd=0x40358) returned 0 [0086.663] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0086.663] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0086.663] IUnknown:Release (This=0x691830) returned 0x3 [0086.663] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0086.663] IUnknown:AddRef (This=0x691830) returned 0x4 [0086.663] IUnknown:Release (This=0x691830) returned 0x3 [0086.663] IUnknown:Release (This=0x691830) returned 0x2 [0086.663] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0086.663] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0086.663] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0086.664] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0086.664] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0086.664] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0086.664] GlobalUnlock (hMem=0x757003c) returned 0 [0086.664] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0086.664] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0086.664] WaitMessage () returned 1 [0086.771] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0086.771] IsWindowUnicode (hWnd=0x10406) returned 1 [0086.771] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0086.771] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0086.771] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0086.771] IsWindowVisible (hWnd=0x40358) returned 0 [0086.771] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0086.772] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0086.772] IUnknown:Release (This=0x691830) returned 0x3 [0086.772] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0086.772] IUnknown:AddRef (This=0x691830) returned 0x4 [0086.772] IUnknown:Release (This=0x691830) returned 0x3 [0086.772] IUnknown:Release (This=0x691830) returned 0x2 [0086.772] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0086.772] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0086.772] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0086.772] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0086.772] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0086.772] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0086.773] GlobalUnlock (hMem=0x757003c) returned 0 [0086.773] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0086.773] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0086.773] WaitMessage () returned 1 [0086.881] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0086.882] IsWindowUnicode (hWnd=0x10406) returned 1 [0086.882] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0086.882] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0086.882] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0086.882] IsWindowVisible (hWnd=0x40358) returned 0 [0086.882] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0086.882] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0086.882] IUnknown:Release (This=0x691830) returned 0x3 [0086.882] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0086.882] IUnknown:AddRef (This=0x691830) returned 0x4 [0086.882] IUnknown:Release (This=0x691830) returned 0x3 [0086.882] IUnknown:Release (This=0x691830) returned 0x2 [0086.882] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0086.882] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0086.882] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0086.883] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0086.883] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0086.883] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0086.883] GlobalUnlock (hMem=0x757003c) returned 0 [0086.883] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0086.883] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0086.883] WaitMessage () returned 1 [0086.989] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0086.989] IsWindowUnicode (hWnd=0x10406) returned 1 [0086.989] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0086.989] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0086.989] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0086.989] IsWindowVisible (hWnd=0x40358) returned 0 [0086.989] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0086.990] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0086.990] IUnknown:Release (This=0x691830) returned 0x3 [0086.990] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0086.990] IUnknown:AddRef (This=0x691830) returned 0x4 [0086.990] IUnknown:Release (This=0x691830) returned 0x3 [0086.990] IUnknown:Release (This=0x691830) returned 0x2 [0086.990] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0086.990] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0086.990] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0086.990] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0086.990] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0086.991] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0086.991] GlobalUnlock (hMem=0x757003c) returned 0 [0086.991] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0086.991] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0086.991] WaitMessage () returned 1 [0087.099] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0087.099] IsWindowUnicode (hWnd=0x10406) returned 1 [0087.099] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0087.100] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0087.100] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0087.100] IsWindowVisible (hWnd=0x40358) returned 0 [0087.100] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0087.100] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0087.100] IUnknown:Release (This=0x691830) returned 0x3 [0087.100] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0087.100] IUnknown:AddRef (This=0x691830) returned 0x4 [0087.100] IUnknown:Release (This=0x691830) returned 0x3 [0087.100] IUnknown:Release (This=0x691830) returned 0x2 [0087.100] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0087.100] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0087.100] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0087.100] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0087.101] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0087.101] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0087.101] GlobalUnlock (hMem=0x757003c) returned 0 [0087.101] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0087.101] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0087.101] WaitMessage () returned 1 [0087.209] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0087.209] IsWindowUnicode (hWnd=0x10406) returned 1 [0087.209] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0087.209] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0087.209] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0087.209] IsWindowVisible (hWnd=0x40358) returned 0 [0087.209] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0087.209] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0087.210] IUnknown:Release (This=0x691830) returned 0x3 [0087.210] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0087.210] IUnknown:AddRef (This=0x691830) returned 0x4 [0087.210] IUnknown:Release (This=0x691830) returned 0x3 [0087.210] IUnknown:Release (This=0x691830) returned 0x2 [0087.210] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0087.210] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0087.210] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0087.210] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0087.210] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0087.210] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0087.210] GlobalUnlock (hMem=0x757003c) returned 0 [0087.211] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0087.211] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0087.211] WaitMessage () returned 1 [0087.318] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0087.318] IsWindowUnicode (hWnd=0x10406) returned 1 [0087.318] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0087.318] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0087.319] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0087.319] IsWindowVisible (hWnd=0x40358) returned 0 [0087.319] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0087.319] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0087.319] IUnknown:Release (This=0x691830) returned 0x3 [0087.319] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0087.319] IUnknown:AddRef (This=0x691830) returned 0x4 [0087.319] IUnknown:Release (This=0x691830) returned 0x3 [0087.319] IUnknown:Release (This=0x691830) returned 0x2 [0087.319] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0087.319] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0087.319] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0087.319] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0087.320] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0087.320] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0087.320] GlobalUnlock (hMem=0x757003c) returned 0 [0087.320] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0087.320] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0087.320] WaitMessage () returned 1 [0087.427] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0087.427] IsWindowUnicode (hWnd=0x10406) returned 1 [0087.427] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0087.427] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0087.427] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0087.427] IsWindowVisible (hWnd=0x40358) returned 0 [0087.427] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0087.428] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0087.428] IUnknown:Release (This=0x691830) returned 0x3 [0087.428] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0087.428] IUnknown:AddRef (This=0x691830) returned 0x4 [0087.428] IUnknown:Release (This=0x691830) returned 0x3 [0087.428] IUnknown:Release (This=0x691830) returned 0x2 [0087.428] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0087.428] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0087.428] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0087.428] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0087.428] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0087.429] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0087.429] GlobalUnlock (hMem=0x757003c) returned 0 [0087.429] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0087.429] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0087.429] WaitMessage () returned 1 [0087.537] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0087.537] IsWindowUnicode (hWnd=0x10406) returned 1 [0087.537] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0087.537] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0087.537] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0087.537] IsWindowVisible (hWnd=0x40358) returned 0 [0087.537] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0087.538] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0087.538] IUnknown:Release (This=0x691830) returned 0x3 [0087.538] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0087.538] IUnknown:AddRef (This=0x691830) returned 0x4 [0087.538] IUnknown:Release (This=0x691830) returned 0x3 [0087.538] IUnknown:Release (This=0x691830) returned 0x2 [0087.538] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0087.538] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0087.538] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0087.538] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0087.538] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0087.538] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0087.538] GlobalUnlock (hMem=0x757003c) returned 0 [0087.539] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0087.539] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0087.539] WaitMessage () returned 1 [0087.646] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0087.646] IsWindowUnicode (hWnd=0x10406) returned 1 [0087.646] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0087.646] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0087.646] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0087.646] IsWindowVisible (hWnd=0x40358) returned 0 [0087.646] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0087.647] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0087.647] IUnknown:Release (This=0x691830) returned 0x3 [0087.647] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0087.647] IUnknown:AddRef (This=0x691830) returned 0x4 [0087.647] IUnknown:Release (This=0x691830) returned 0x3 [0087.647] IUnknown:Release (This=0x691830) returned 0x2 [0087.647] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0087.647] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0087.647] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0087.647] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0087.647] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0087.648] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0087.648] GlobalUnlock (hMem=0x757003c) returned 0 [0087.648] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0087.648] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0087.648] WaitMessage () returned 1 [0087.756] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0087.756] IsWindowUnicode (hWnd=0x10406) returned 1 [0087.756] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0087.756] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0087.756] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0087.756] IsWindowVisible (hWnd=0x40358) returned 0 [0087.756] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0087.756] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0087.756] IUnknown:Release (This=0x691830) returned 0x3 [0087.756] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0087.756] IUnknown:AddRef (This=0x691830) returned 0x4 [0087.757] IUnknown:Release (This=0x691830) returned 0x3 [0087.757] IUnknown:Release (This=0x691830) returned 0x2 [0087.757] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0087.757] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0087.757] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0087.757] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0087.757] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0087.757] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0087.757] GlobalUnlock (hMem=0x757003c) returned 0 [0087.757] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0087.757] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0087.757] WaitMessage () returned 1 [0087.865] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0087.865] IsWindowUnicode (hWnd=0x10406) returned 1 [0087.865] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0087.865] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0087.865] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0087.865] IsWindowVisible (hWnd=0x40358) returned 0 [0087.865] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0087.866] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0087.866] IUnknown:Release (This=0x691830) returned 0x3 [0087.866] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0087.866] IUnknown:AddRef (This=0x691830) returned 0x4 [0087.866] IUnknown:Release (This=0x691830) returned 0x3 [0087.866] IUnknown:Release (This=0x691830) returned 0x2 [0087.866] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0087.866] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0087.866] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0087.866] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0087.866] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0087.867] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0087.867] GlobalUnlock (hMem=0x757003c) returned 0 [0087.867] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0087.867] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0087.867] WaitMessage () returned 1 [0087.974] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0087.974] IsWindowUnicode (hWnd=0x10406) returned 1 [0087.974] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0087.974] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0087.974] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0087.974] IsWindowVisible (hWnd=0x40358) returned 0 [0087.974] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0087.975] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0087.975] IUnknown:Release (This=0x691830) returned 0x3 [0087.975] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0087.975] IUnknown:AddRef (This=0x691830) returned 0x4 [0087.975] IUnknown:Release (This=0x691830) returned 0x3 [0087.975] IUnknown:Release (This=0x691830) returned 0x2 [0087.975] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0087.975] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0087.975] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0087.975] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0087.975] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0087.976] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0087.976] GlobalUnlock (hMem=0x757003c) returned 0 [0087.976] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0087.976] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0087.976] WaitMessage () returned 1 [0088.085] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0088.085] IsWindowUnicode (hWnd=0x10406) returned 1 [0088.085] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0088.085] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0088.085] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0088.085] IsWindowVisible (hWnd=0x40358) returned 0 [0088.085] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0088.085] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0088.085] IUnknown:Release (This=0x691830) returned 0x3 [0088.085] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0088.085] IUnknown:AddRef (This=0x691830) returned 0x4 [0088.085] IUnknown:Release (This=0x691830) returned 0x3 [0088.085] IUnknown:Release (This=0x691830) returned 0x2 [0088.086] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0088.086] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0088.086] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0088.086] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0088.086] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0088.086] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0088.086] GlobalUnlock (hMem=0x757003c) returned 0 [0088.086] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0088.086] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0088.086] WaitMessage () returned 1 [0088.195] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0088.196] IsWindowUnicode (hWnd=0x10406) returned 1 [0088.196] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0088.196] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0088.196] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0088.196] IsWindowVisible (hWnd=0x40358) returned 0 [0088.196] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0088.196] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0088.196] IUnknown:Release (This=0x691830) returned 0x3 [0088.196] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0088.196] IUnknown:AddRef (This=0x691830) returned 0x4 [0088.196] IUnknown:Release (This=0x691830) returned 0x3 [0088.197] IUnknown:Release (This=0x691830) returned 0x2 [0088.197] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0088.197] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0088.197] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0088.197] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0088.197] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0088.197] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0088.197] GlobalUnlock (hMem=0x757003c) returned 0 [0088.198] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0088.198] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0088.198] WaitMessage () returned 1 [0088.303] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0088.303] IsWindowUnicode (hWnd=0x10406) returned 1 [0088.303] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0088.303] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0088.303] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0088.303] IsWindowVisible (hWnd=0x40358) returned 0 [0088.303] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0088.303] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0088.304] IUnknown:Release (This=0x691830) returned 0x3 [0088.304] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0088.304] IUnknown:AddRef (This=0x691830) returned 0x4 [0088.304] IUnknown:Release (This=0x691830) returned 0x3 [0088.304] IUnknown:Release (This=0x691830) returned 0x2 [0088.304] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0088.304] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0088.304] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0088.304] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0088.304] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0088.304] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0088.304] GlobalUnlock (hMem=0x757003c) returned 0 [0088.305] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0088.305] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0088.305] WaitMessage () returned 1 [0088.413] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0088.413] IsWindowUnicode (hWnd=0x10406) returned 1 [0088.413] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0088.413] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0088.413] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0088.413] IsWindowVisible (hWnd=0x40358) returned 0 [0088.413] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0088.414] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0088.414] IUnknown:Release (This=0x691830) returned 0x3 [0088.414] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0088.414] IUnknown:AddRef (This=0x691830) returned 0x4 [0088.414] IUnknown:Release (This=0x691830) returned 0x3 [0088.414] IUnknown:Release (This=0x691830) returned 0x2 [0088.414] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0088.414] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0088.414] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0088.414] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0088.414] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0088.415] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0088.415] GlobalUnlock (hMem=0x757003c) returned 0 [0088.415] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0088.415] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0088.415] WaitMessage () returned 1 [0088.520] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0088.520] IsWindowUnicode (hWnd=0x10406) returned 1 [0088.520] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0088.521] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0088.521] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0088.521] IsWindowVisible (hWnd=0x40358) returned 0 [0088.521] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0088.521] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0088.521] IUnknown:Release (This=0x691830) returned 0x3 [0088.521] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0088.521] IUnknown:AddRef (This=0x691830) returned 0x4 [0088.521] IUnknown:Release (This=0x691830) returned 0x3 [0088.521] IUnknown:Release (This=0x691830) returned 0x2 [0088.521] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0088.521] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0088.521] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0088.521] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0088.522] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0088.522] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0088.522] GlobalUnlock (hMem=0x757003c) returned 0 [0088.522] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0088.522] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0088.522] WaitMessage () returned 1 [0088.630] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0088.630] IsWindowUnicode (hWnd=0x10406) returned 1 [0088.630] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0088.630] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0088.630] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0088.630] IsWindowVisible (hWnd=0x40358) returned 0 [0088.630] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0088.630] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0088.630] IUnknown:Release (This=0x691830) returned 0x3 [0088.630] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0088.630] IUnknown:AddRef (This=0x691830) returned 0x4 [0088.630] IUnknown:Release (This=0x691830) returned 0x3 [0088.631] IUnknown:Release (This=0x691830) returned 0x2 [0088.631] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0088.631] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0088.631] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0088.631] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0088.631] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0088.631] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0088.631] GlobalUnlock (hMem=0x757003c) returned 0 [0088.631] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0088.631] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0088.631] WaitMessage () returned 1 [0088.739] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0088.739] IsWindowUnicode (hWnd=0x10406) returned 1 [0088.739] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0088.739] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0088.739] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0088.739] IsWindowVisible (hWnd=0x40358) returned 0 [0088.739] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0088.740] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0088.740] IUnknown:Release (This=0x691830) returned 0x3 [0088.740] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0088.740] IUnknown:AddRef (This=0x691830) returned 0x4 [0088.740] IUnknown:Release (This=0x691830) returned 0x3 [0088.740] IUnknown:Release (This=0x691830) returned 0x2 [0088.740] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0088.740] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0088.740] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0088.740] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0088.740] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0088.740] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0088.740] GlobalUnlock (hMem=0x757003c) returned 0 [0088.741] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0088.741] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0088.741] WaitMessage () returned 1 [0088.849] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0088.849] IsWindowUnicode (hWnd=0x10406) returned 1 [0088.849] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0088.849] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0088.849] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0088.849] IsWindowVisible (hWnd=0x40358) returned 0 [0088.849] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0088.849] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0088.849] IUnknown:Release (This=0x691830) returned 0x3 [0088.849] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0088.849] IUnknown:AddRef (This=0x691830) returned 0x4 [0088.849] IUnknown:Release (This=0x691830) returned 0x3 [0088.849] IUnknown:Release (This=0x691830) returned 0x2 [0088.849] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0088.849] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0088.849] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0088.850] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0088.850] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0088.850] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0088.850] GlobalUnlock (hMem=0x757003c) returned 0 [0088.850] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0088.850] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0088.850] WaitMessage () returned 1 [0088.958] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0088.958] IsWindowUnicode (hWnd=0x10406) returned 1 [0088.958] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0088.958] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0088.958] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0088.958] IsWindowVisible (hWnd=0x40358) returned 0 [0088.958] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0088.959] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0088.959] IUnknown:Release (This=0x691830) returned 0x3 [0088.959] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0088.959] IUnknown:AddRef (This=0x691830) returned 0x4 [0088.959] IUnknown:Release (This=0x691830) returned 0x3 [0088.959] IUnknown:Release (This=0x691830) returned 0x2 [0088.959] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0088.959] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0088.959] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0088.959] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0088.959] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0088.960] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0088.960] GlobalUnlock (hMem=0x757003c) returned 0 [0088.960] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0088.960] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0088.960] WaitMessage () returned 1 [0089.078] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0089.078] IsWindowUnicode (hWnd=0x10406) returned 1 [0089.078] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0089.078] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0089.078] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0089.079] IsWindowVisible (hWnd=0x40358) returned 0 [0089.079] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0089.079] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0089.079] IUnknown:Release (This=0x691830) returned 0x3 [0089.079] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0089.079] IUnknown:AddRef (This=0x691830) returned 0x4 [0089.079] IUnknown:Release (This=0x691830) returned 0x3 [0089.079] IUnknown:Release (This=0x691830) returned 0x2 [0089.079] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0089.079] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0089.079] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0089.079] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0089.080] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0089.080] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0089.080] GlobalUnlock (hMem=0x757003c) returned 0 [0089.080] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0089.080] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0089.080] WaitMessage () returned 1 [0089.177] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0089.177] IsWindowUnicode (hWnd=0x10406) returned 1 [0089.177] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0089.177] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0089.177] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0089.177] IsWindowVisible (hWnd=0x40358) returned 0 [0089.177] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0089.177] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0089.177] IUnknown:Release (This=0x691830) returned 0x3 [0089.177] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0089.178] IUnknown:AddRef (This=0x691830) returned 0x4 [0089.178] IUnknown:Release (This=0x691830) returned 0x3 [0089.178] IUnknown:Release (This=0x691830) returned 0x2 [0089.178] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0089.178] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0089.178] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0089.178] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0089.178] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0089.178] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0089.178] GlobalUnlock (hMem=0x757003c) returned 0 [0089.178] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0089.178] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0089.178] WaitMessage () returned 1 [0089.286] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0089.286] IsWindowUnicode (hWnd=0x10406) returned 1 [0089.286] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0089.286] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0089.286] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0089.286] IsWindowVisible (hWnd=0x40358) returned 0 [0089.286] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0089.287] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0089.287] IUnknown:Release (This=0x691830) returned 0x3 [0089.287] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0089.287] IUnknown:AddRef (This=0x691830) returned 0x4 [0089.287] IUnknown:Release (This=0x691830) returned 0x3 [0089.287] IUnknown:Release (This=0x691830) returned 0x2 [0089.287] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0089.287] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0089.287] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0089.287] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0089.287] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0089.288] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0089.288] GlobalUnlock (hMem=0x757003c) returned 0 [0089.288] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0089.288] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0089.288] WaitMessage () returned 1 [0089.442] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0089.442] IsWindowUnicode (hWnd=0x10406) returned 1 [0089.442] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0089.443] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0089.443] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0089.443] IsWindowVisible (hWnd=0x40358) returned 0 [0089.443] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0089.443] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0089.443] IUnknown:Release (This=0x691830) returned 0x3 [0089.443] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0089.443] IUnknown:AddRef (This=0x691830) returned 0x4 [0089.443] IUnknown:Release (This=0x691830) returned 0x3 [0089.443] IUnknown:Release (This=0x691830) returned 0x2 [0089.443] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0089.444] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0089.444] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0089.444] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0089.444] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0089.444] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0089.444] GlobalUnlock (hMem=0x757003c) returned 0 [0089.444] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0089.444] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0089.444] WaitMessage () returned 1 [0089.506] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0089.506] IsWindowUnicode (hWnd=0x10406) returned 1 [0089.506] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0089.506] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0089.506] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0089.506] IsWindowVisible (hWnd=0x40358) returned 0 [0089.506] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0089.508] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0089.508] IUnknown:Release (This=0x691830) returned 0x3 [0089.508] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0089.508] IUnknown:AddRef (This=0x691830) returned 0x4 [0089.508] IUnknown:Release (This=0x691830) returned 0x3 [0089.508] IUnknown:Release (This=0x691830) returned 0x2 [0089.508] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0089.508] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0089.508] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0089.508] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0089.508] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0089.509] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0089.509] GlobalUnlock (hMem=0x757003c) returned 0 [0089.509] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0089.509] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0089.509] WaitMessage () returned 1 [0089.616] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0089.616] IsWindowUnicode (hWnd=0x10406) returned 1 [0089.616] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0089.616] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0089.616] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0089.616] IsWindowVisible (hWnd=0x40358) returned 0 [0089.616] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0089.617] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0089.617] IUnknown:Release (This=0x691830) returned 0x3 [0089.617] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0089.617] IUnknown:AddRef (This=0x691830) returned 0x4 [0089.617] IUnknown:Release (This=0x691830) returned 0x3 [0089.617] IUnknown:Release (This=0x691830) returned 0x2 [0089.617] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0089.617] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0089.617] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0089.617] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0089.617] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0089.618] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0089.618] GlobalUnlock (hMem=0x757003c) returned 0 [0089.618] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0089.618] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0089.618] WaitMessage () returned 1 [0089.726] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0089.726] IsWindowUnicode (hWnd=0x10406) returned 1 [0089.726] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0089.726] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0089.726] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0089.726] IsWindowVisible (hWnd=0x40358) returned 0 [0089.726] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0089.726] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0089.727] IUnknown:Release (This=0x691830) returned 0x3 [0089.727] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0089.727] IUnknown:AddRef (This=0x691830) returned 0x4 [0089.727] IUnknown:Release (This=0x691830) returned 0x3 [0089.727] IUnknown:Release (This=0x691830) returned 0x2 [0089.727] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0089.727] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0089.727] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0089.727] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0089.727] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0089.727] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0089.727] GlobalUnlock (hMem=0x757003c) returned 0 [0089.728] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0089.728] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0089.728] WaitMessage () returned 1 [0089.834] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0089.834] IsWindowUnicode (hWnd=0x10406) returned 1 [0089.834] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0089.834] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0089.834] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0089.834] IsWindowVisible (hWnd=0x40358) returned 0 [0089.834] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0089.835] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0089.835] IUnknown:Release (This=0x691830) returned 0x3 [0089.835] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0089.835] IUnknown:AddRef (This=0x691830) returned 0x4 [0089.835] IUnknown:Release (This=0x691830) returned 0x3 [0089.835] IUnknown:Release (This=0x691830) returned 0x2 [0089.835] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0089.835] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0089.835] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0089.835] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0089.835] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0089.835] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0089.835] GlobalUnlock (hMem=0x757003c) returned 0 [0089.836] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0089.836] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0089.836] WaitMessage () returned 1 [0089.942] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0089.942] IsWindowUnicode (hWnd=0x10406) returned 1 [0089.942] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0089.943] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0089.943] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0089.943] IsWindowVisible (hWnd=0x40358) returned 0 [0089.943] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0089.943] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0089.943] IUnknown:Release (This=0x691830) returned 0x3 [0089.943] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0089.943] IUnknown:AddRef (This=0x691830) returned 0x4 [0089.943] IUnknown:Release (This=0x691830) returned 0x3 [0089.943] IUnknown:Release (This=0x691830) returned 0x2 [0089.943] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0089.943] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0089.943] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0089.943] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0089.943] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0089.944] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0089.944] GlobalUnlock (hMem=0x757003c) returned 0 [0089.944] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0089.944] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0089.944] WaitMessage () returned 1 [0090.052] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0090.052] IsWindowUnicode (hWnd=0x10406) returned 1 [0090.052] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0090.052] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0090.052] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0090.052] IsWindowVisible (hWnd=0x40358) returned 0 [0090.052] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0090.053] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0090.053] IUnknown:Release (This=0x691830) returned 0x3 [0090.053] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0090.053] IUnknown:AddRef (This=0x691830) returned 0x4 [0090.053] IUnknown:Release (This=0x691830) returned 0x3 [0090.053] IUnknown:Release (This=0x691830) returned 0x2 [0090.053] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0090.053] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0090.053] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0090.053] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0090.053] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0090.053] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0090.054] GlobalUnlock (hMem=0x757003c) returned 0 [0090.054] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0090.054] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0090.054] WaitMessage () returned 1 [0090.163] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0090.164] IsWindowUnicode (hWnd=0x10406) returned 1 [0090.164] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0090.164] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0090.164] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0090.164] IsWindowVisible (hWnd=0x40358) returned 0 [0090.164] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0090.164] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0090.164] IUnknown:Release (This=0x691830) returned 0x3 [0090.164] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0090.164] IUnknown:AddRef (This=0x691830) returned 0x4 [0090.164] IUnknown:Release (This=0x691830) returned 0x3 [0090.164] IUnknown:Release (This=0x691830) returned 0x2 [0090.165] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0090.165] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0090.165] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0090.165] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0090.165] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0090.165] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0090.165] GlobalUnlock (hMem=0x757003c) returned 0 [0090.165] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0090.165] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0090.165] WaitMessage () returned 1 [0090.270] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0090.270] IsWindowUnicode (hWnd=0x10406) returned 1 [0090.271] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0090.271] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0090.271] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0090.271] IsWindowVisible (hWnd=0x40358) returned 0 [0090.271] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0090.271] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0090.271] IUnknown:Release (This=0x691830) returned 0x3 [0090.271] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0090.271] IUnknown:AddRef (This=0x691830) returned 0x4 [0090.271] IUnknown:Release (This=0x691830) returned 0x3 [0090.271] IUnknown:Release (This=0x691830) returned 0x2 [0090.271] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0090.272] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0090.272] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0090.272] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0090.272] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0090.272] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0090.272] GlobalUnlock (hMem=0x757003c) returned 0 [0090.272] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0090.272] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0090.272] WaitMessage () returned 1 [0090.428] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0090.428] IsWindowUnicode (hWnd=0x10406) returned 1 [0090.428] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0090.428] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0090.428] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0090.428] IsWindowVisible (hWnd=0x40358) returned 0 [0090.428] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0090.429] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0090.429] IUnknown:Release (This=0x691830) returned 0x3 [0090.429] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0090.429] IUnknown:AddRef (This=0x691830) returned 0x4 [0090.429] IUnknown:Release (This=0x691830) returned 0x3 [0090.429] IUnknown:Release (This=0x691830) returned 0x2 [0090.429] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0090.429] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0090.429] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0090.429] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0090.429] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0090.430] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0090.430] GlobalUnlock (hMem=0x757003c) returned 0 [0090.430] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0090.430] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0090.430] WaitMessage () returned 1 [0090.491] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0090.491] IsWindowUnicode (hWnd=0x10406) returned 1 [0090.491] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0090.491] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0090.491] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0090.491] IsWindowVisible (hWnd=0x40358) returned 0 [0090.491] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0090.492] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0090.492] IUnknown:Release (This=0x691830) returned 0x3 [0090.492] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0090.492] IUnknown:AddRef (This=0x691830) returned 0x4 [0090.492] IUnknown:Release (This=0x691830) returned 0x3 [0090.492] IUnknown:Release (This=0x691830) returned 0x2 [0090.492] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0090.492] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0090.492] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0090.492] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0090.492] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0090.493] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0090.493] GlobalUnlock (hMem=0x757003c) returned 0 [0090.493] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0090.493] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0090.493] WaitMessage () returned 1 [0090.599] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0090.599] IsWindowUnicode (hWnd=0x10406) returned 1 [0090.600] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0090.600] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0090.600] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0090.600] IsWindowVisible (hWnd=0x40358) returned 0 [0090.600] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0090.600] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0090.600] IUnknown:Release (This=0x691830) returned 0x3 [0090.600] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0090.600] IUnknown:AddRef (This=0x691830) returned 0x4 [0090.600] IUnknown:Release (This=0x691830) returned 0x3 [0090.600] IUnknown:Release (This=0x691830) returned 0x2 [0090.601] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0090.601] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0090.601] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0090.601] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0090.601] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0090.601] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0090.601] GlobalUnlock (hMem=0x757003c) returned 0 [0090.601] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0090.601] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0090.601] WaitMessage () returned 1 [0090.708] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0090.708] IsWindowUnicode (hWnd=0x10406) returned 1 [0090.708] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0090.708] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0090.708] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0090.708] IsWindowVisible (hWnd=0x40358) returned 0 [0090.708] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0090.709] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0090.709] IUnknown:Release (This=0x691830) returned 0x3 [0090.709] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0090.709] IUnknown:AddRef (This=0x691830) returned 0x4 [0090.709] IUnknown:Release (This=0x691830) returned 0x3 [0090.709] IUnknown:Release (This=0x691830) returned 0x2 [0090.709] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0090.709] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0090.709] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0090.709] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0090.709] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0090.710] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0090.710] GlobalUnlock (hMem=0x757003c) returned 0 [0090.710] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0090.710] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0090.710] WaitMessage () returned 1 [0090.817] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0090.817] IsWindowUnicode (hWnd=0x10406) returned 1 [0090.817] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0090.817] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0090.817] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0090.818] IsWindowVisible (hWnd=0x40358) returned 0 [0090.818] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0090.818] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0090.818] IUnknown:Release (This=0x691830) returned 0x3 [0090.818] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0090.818] IUnknown:AddRef (This=0x691830) returned 0x4 [0090.818] IUnknown:Release (This=0x691830) returned 0x3 [0090.818] IUnknown:Release (This=0x691830) returned 0x2 [0090.818] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0090.818] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0090.818] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0090.819] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0090.819] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0090.819] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0090.819] GlobalUnlock (hMem=0x757003c) returned 0 [0090.819] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0090.819] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0090.819] WaitMessage () returned 1 [0090.927] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0090.927] IsWindowUnicode (hWnd=0x10406) returned 1 [0090.927] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0090.927] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0090.927] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0090.927] IsWindowVisible (hWnd=0x40358) returned 0 [0090.927] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0090.927] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0090.927] IUnknown:Release (This=0x691830) returned 0x3 [0090.927] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0090.927] IUnknown:AddRef (This=0x691830) returned 0x4 [0090.927] IUnknown:Release (This=0x691830) returned 0x3 [0090.927] IUnknown:Release (This=0x691830) returned 0x2 [0090.928] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0090.928] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0090.928] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0090.928] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0090.928] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0090.928] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0090.928] GlobalUnlock (hMem=0x757003c) returned 0 [0090.928] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0090.928] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0090.928] WaitMessage () returned 1 [0091.036] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0091.036] IsWindowUnicode (hWnd=0x10406) returned 1 [0091.036] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0091.036] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0091.036] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0091.036] IsWindowVisible (hWnd=0x40358) returned 0 [0091.036] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0091.037] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0091.037] IUnknown:Release (This=0x691830) returned 0x3 [0091.037] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0091.037] IUnknown:AddRef (This=0x691830) returned 0x4 [0091.037] IUnknown:Release (This=0x691830) returned 0x3 [0091.037] IUnknown:Release (This=0x691830) returned 0x2 [0091.037] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0091.037] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0091.037] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0091.037] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0091.037] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0091.038] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0091.038] GlobalUnlock (hMem=0x757003c) returned 0 [0091.038] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0091.038] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0091.038] WaitMessage () returned 1 [0091.145] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0091.145] IsWindowUnicode (hWnd=0x10406) returned 1 [0091.145] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0091.146] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0091.146] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0091.146] IsWindowVisible (hWnd=0x40358) returned 0 [0091.146] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0091.146] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0091.146] IUnknown:Release (This=0x691830) returned 0x3 [0091.146] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0091.146] IUnknown:AddRef (This=0x691830) returned 0x4 [0091.146] IUnknown:Release (This=0x691830) returned 0x3 [0091.146] IUnknown:Release (This=0x691830) returned 0x2 [0091.146] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0091.146] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0091.146] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0091.146] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0091.147] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0091.147] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0091.147] GlobalUnlock (hMem=0x757003c) returned 0 [0091.147] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0091.147] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0091.147] WaitMessage () returned 1 [0091.255] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0091.255] IsWindowUnicode (hWnd=0x10406) returned 1 [0091.255] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0091.255] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0091.255] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0091.255] IsWindowVisible (hWnd=0x40358) returned 0 [0091.255] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0091.255] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0091.255] IUnknown:Release (This=0x691830) returned 0x3 [0091.255] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0091.255] IUnknown:AddRef (This=0x691830) returned 0x4 [0091.255] IUnknown:Release (This=0x691830) returned 0x3 [0091.255] IUnknown:Release (This=0x691830) returned 0x2 [0091.255] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0091.255] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0091.255] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0091.256] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0091.256] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0091.256] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0091.256] GlobalUnlock (hMem=0x757003c) returned 0 [0091.256] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0091.256] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0091.256] WaitMessage () returned 1 [0091.419] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0091.419] IsWindowUnicode (hWnd=0x10406) returned 1 [0091.420] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0091.420] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0091.420] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0091.420] IsWindowVisible (hWnd=0x40358) returned 0 [0091.420] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0091.420] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0091.420] IUnknown:Release (This=0x691830) returned 0x3 [0091.420] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0091.420] IUnknown:AddRef (This=0x691830) returned 0x4 [0091.420] IUnknown:Release (This=0x691830) returned 0x3 [0091.420] IUnknown:Release (This=0x691830) returned 0x2 [0091.420] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0091.420] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0091.420] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0091.420] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0091.421] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0091.421] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0091.421] GlobalUnlock (hMem=0x757003c) returned 0 [0091.421] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0091.421] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0091.421] WaitMessage () returned 1 [0091.521] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0091.521] IsWindowUnicode (hWnd=0x10406) returned 1 [0091.521] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0091.521] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0091.521] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0091.522] IsWindowVisible (hWnd=0x40358) returned 0 [0091.522] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0091.522] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0091.522] IUnknown:Release (This=0x691830) returned 0x3 [0091.522] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0091.522] IUnknown:AddRef (This=0x691830) returned 0x4 [0091.522] IUnknown:Release (This=0x691830) returned 0x3 [0091.522] IUnknown:Release (This=0x691830) returned 0x2 [0091.522] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0091.522] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0091.522] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0091.522] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0091.522] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0091.523] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0091.523] GlobalUnlock (hMem=0x757003c) returned 0 [0091.523] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0091.523] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0091.523] WaitMessage () returned 1 [0091.632] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0091.632] IsWindowUnicode (hWnd=0x10406) returned 1 [0091.632] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0091.632] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0091.632] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0091.632] IsWindowVisible (hWnd=0x40358) returned 0 [0091.632] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0091.632] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0091.632] IUnknown:Release (This=0x691830) returned 0x3 [0091.632] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0091.632] IUnknown:AddRef (This=0x691830) returned 0x4 [0091.632] IUnknown:Release (This=0x691830) returned 0x3 [0091.632] IUnknown:Release (This=0x691830) returned 0x2 [0091.632] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0091.632] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0091.633] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0091.633] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0091.633] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0091.633] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0091.633] GlobalUnlock (hMem=0x757003c) returned 0 [0091.633] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0091.633] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0091.633] WaitMessage () returned 1 [0091.740] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0091.740] IsWindowUnicode (hWnd=0x10406) returned 1 [0091.740] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0091.740] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0091.740] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0091.740] IsWindowVisible (hWnd=0x40358) returned 0 [0091.740] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0091.740] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0091.741] IUnknown:Release (This=0x691830) returned 0x3 [0091.741] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0091.741] IUnknown:AddRef (This=0x691830) returned 0x4 [0091.741] IUnknown:Release (This=0x691830) returned 0x3 [0091.741] IUnknown:Release (This=0x691830) returned 0x2 [0091.741] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0091.741] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0091.741] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0091.741] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0091.741] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0091.741] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0091.741] GlobalUnlock (hMem=0x757003c) returned 0 [0091.742] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0091.742] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0091.742] WaitMessage () returned 1 [0091.848] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0091.849] IsWindowUnicode (hWnd=0x10406) returned 1 [0091.849] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0091.849] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0091.849] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0091.849] IsWindowVisible (hWnd=0x40358) returned 0 [0091.849] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0091.849] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0091.849] IUnknown:Release (This=0x691830) returned 0x3 [0091.849] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0091.849] IUnknown:AddRef (This=0x691830) returned 0x4 [0091.849] IUnknown:Release (This=0x691830) returned 0x3 [0091.849] IUnknown:Release (This=0x691830) returned 0x2 [0091.849] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0091.849] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0091.849] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0091.850] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0091.850] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0091.850] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0091.850] GlobalUnlock (hMem=0x757003c) returned 0 [0091.850] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0091.850] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0091.850] WaitMessage () returned 1 [0091.958] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0091.958] IsWindowUnicode (hWnd=0x10406) returned 1 [0091.958] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0091.958] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0091.958] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0091.958] IsWindowVisible (hWnd=0x40358) returned 0 [0091.958] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0091.960] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0091.960] IUnknown:Release (This=0x691830) returned 0x3 [0091.960] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0091.960] IUnknown:AddRef (This=0x691830) returned 0x4 [0091.960] IUnknown:Release (This=0x691830) returned 0x3 [0091.960] IUnknown:Release (This=0x691830) returned 0x2 [0091.960] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0091.960] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0091.960] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0091.960] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0091.960] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0091.961] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0091.961] GlobalUnlock (hMem=0x757003c) returned 0 [0091.961] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0091.961] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0091.961] WaitMessage () returned 1 [0092.067] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0092.067] IsWindowUnicode (hWnd=0x10406) returned 1 [0092.067] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0092.067] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0092.067] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0092.067] IsWindowVisible (hWnd=0x40358) returned 0 [0092.067] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0092.068] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0092.068] IUnknown:Release (This=0x691830) returned 0x3 [0092.068] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0092.068] IUnknown:AddRef (This=0x691830) returned 0x4 [0092.068] IUnknown:Release (This=0x691830) returned 0x3 [0092.068] IUnknown:Release (This=0x691830) returned 0x2 [0092.068] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0092.068] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0092.068] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0092.068] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0092.068] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0092.069] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0092.069] GlobalUnlock (hMem=0x757003c) returned 0 [0092.069] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0092.069] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0092.069] WaitMessage () returned 1 [0092.177] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0092.177] IsWindowUnicode (hWnd=0x10406) returned 1 [0092.177] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0092.177] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0092.177] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0092.177] IsWindowVisible (hWnd=0x40358) returned 0 [0092.177] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0092.177] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0092.177] IUnknown:Release (This=0x691830) returned 0x3 [0092.177] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0092.177] IUnknown:AddRef (This=0x691830) returned 0x4 [0092.177] IUnknown:Release (This=0x691830) returned 0x3 [0092.178] IUnknown:Release (This=0x691830) returned 0x2 [0092.178] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0092.178] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0092.178] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0092.178] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0092.178] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0092.178] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0092.178] GlobalUnlock (hMem=0x757003c) returned 0 [0092.178] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0092.178] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0092.178] WaitMessage () returned 1 [0092.286] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0092.286] IsWindowUnicode (hWnd=0x10406) returned 1 [0092.286] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0092.286] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0092.286] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0092.286] IsWindowVisible (hWnd=0x40358) returned 0 [0092.286] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0092.287] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0092.287] IUnknown:Release (This=0x691830) returned 0x3 [0092.287] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0092.287] IUnknown:AddRef (This=0x691830) returned 0x4 [0092.287] IUnknown:Release (This=0x691830) returned 0x3 [0092.287] IUnknown:Release (This=0x691830) returned 0x2 [0092.287] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0092.287] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0092.287] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0092.287] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0092.287] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0092.288] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0092.288] GlobalUnlock (hMem=0x757003c) returned 0 [0092.288] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0092.288] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0092.288] WaitMessage () returned 1 [0092.395] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0092.395] IsWindowUnicode (hWnd=0x10406) returned 1 [0092.396] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0092.396] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0092.396] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0092.396] IsWindowVisible (hWnd=0x40358) returned 0 [0092.396] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0092.396] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0092.396] IUnknown:Release (This=0x691830) returned 0x3 [0092.396] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0092.396] IUnknown:AddRef (This=0x691830) returned 0x4 [0092.396] IUnknown:Release (This=0x691830) returned 0x3 [0092.396] IUnknown:Release (This=0x691830) returned 0x2 [0092.397] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0092.397] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0092.397] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0092.397] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0092.397] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0092.397] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0092.397] GlobalUnlock (hMem=0x757003c) returned 0 [0092.397] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0092.397] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0092.397] WaitMessage () returned 1 [0092.505] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0092.505] IsWindowUnicode (hWnd=0x10406) returned 1 [0092.505] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0092.505] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0092.505] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0092.505] IsWindowVisible (hWnd=0x40358) returned 0 [0092.505] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0092.506] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0092.506] IUnknown:Release (This=0x691830) returned 0x3 [0092.506] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0092.506] IUnknown:AddRef (This=0x691830) returned 0x4 [0092.506] IUnknown:Release (This=0x691830) returned 0x3 [0092.506] IUnknown:Release (This=0x691830) returned 0x2 [0092.506] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0092.506] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0092.506] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0092.506] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0092.506] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0092.506] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0092.506] GlobalUnlock (hMem=0x757003c) returned 0 [0092.507] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0092.507] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0092.507] WaitMessage () returned 1 [0092.615] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0092.615] IsWindowUnicode (hWnd=0x10406) returned 1 [0092.615] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0092.615] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0092.615] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0092.615] IsWindowVisible (hWnd=0x40358) returned 0 [0092.616] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0092.616] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0092.616] IUnknown:Release (This=0x691830) returned 0x3 [0092.616] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0092.616] IUnknown:AddRef (This=0x691830) returned 0x4 [0092.616] IUnknown:Release (This=0x691830) returned 0x3 [0092.616] IUnknown:Release (This=0x691830) returned 0x2 [0092.616] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0092.616] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0092.616] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0092.616] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0092.616] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0092.617] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0092.617] GlobalUnlock (hMem=0x757003c) returned 0 [0092.617] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0092.617] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0092.617] WaitMessage () returned 1 [0092.726] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0092.726] IsWindowUnicode (hWnd=0x10406) returned 1 [0092.726] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0092.726] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0092.726] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0092.726] IsWindowVisible (hWnd=0x40358) returned 0 [0092.726] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0092.727] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0092.727] IUnknown:Release (This=0x691830) returned 0x3 [0092.727] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0092.727] IUnknown:AddRef (This=0x691830) returned 0x4 [0092.727] IUnknown:Release (This=0x691830) returned 0x3 [0092.727] IUnknown:Release (This=0x691830) returned 0x2 [0092.727] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0092.727] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0092.727] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0092.727] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0092.728] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0092.728] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0092.728] GlobalUnlock (hMem=0x757003c) returned 0 [0092.729] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0092.729] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0092.729] WaitMessage () returned 1 [0092.833] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0092.833] IsWindowUnicode (hWnd=0x10406) returned 1 [0092.833] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0092.833] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0092.833] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0092.833] IsWindowVisible (hWnd=0x40358) returned 0 [0092.833] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0092.834] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0092.834] IUnknown:Release (This=0x691830) returned 0x3 [0092.834] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0092.834] IUnknown:AddRef (This=0x691830) returned 0x4 [0092.834] IUnknown:Release (This=0x691830) returned 0x3 [0092.834] IUnknown:Release (This=0x691830) returned 0x2 [0092.834] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0092.834] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0092.834] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0092.834] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0092.834] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0092.835] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0092.835] GlobalUnlock (hMem=0x757003c) returned 0 [0092.835] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0092.835] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0092.835] WaitMessage () returned 1 [0092.942] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0092.942] IsWindowUnicode (hWnd=0x10406) returned 1 [0092.942] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0092.942] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0092.943] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0092.943] IsWindowVisible (hWnd=0x40358) returned 0 [0092.943] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0092.943] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0092.943] IUnknown:Release (This=0x691830) returned 0x3 [0092.943] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0092.943] IUnknown:AddRef (This=0x691830) returned 0x4 [0092.943] IUnknown:Release (This=0x691830) returned 0x3 [0092.943] IUnknown:Release (This=0x691830) returned 0x2 [0092.943] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0092.943] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0092.943] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0092.944] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0092.944] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0092.944] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0092.944] GlobalUnlock (hMem=0x757003c) returned 0 [0092.944] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0092.944] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0092.944] WaitMessage () returned 1 [0093.052] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0093.052] IsWindowUnicode (hWnd=0x10406) returned 1 [0093.052] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0093.052] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0093.052] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0093.053] IsWindowVisible (hWnd=0x40358) returned 0 [0093.053] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0093.053] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0093.054] IUnknown:Release (This=0x691830) returned 0x3 [0093.054] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0093.054] IUnknown:AddRef (This=0x691830) returned 0x4 [0093.054] IUnknown:Release (This=0x691830) returned 0x3 [0093.054] IUnknown:Release (This=0x691830) returned 0x2 [0093.054] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0093.054] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0093.054] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0093.054] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0093.054] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0093.055] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0093.055] GlobalUnlock (hMem=0x757003c) returned 0 [0093.055] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0093.055] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0093.055] WaitMessage () returned 1 [0093.163] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0093.163] IsWindowUnicode (hWnd=0x10406) returned 1 [0093.163] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0093.163] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0093.163] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0093.163] IsWindowVisible (hWnd=0x40358) returned 0 [0093.163] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0093.163] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0093.163] IUnknown:Release (This=0x691830) returned 0x3 [0093.164] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0093.164] IUnknown:AddRef (This=0x691830) returned 0x4 [0093.164] IUnknown:Release (This=0x691830) returned 0x3 [0093.164] IUnknown:Release (This=0x691830) returned 0x2 [0093.164] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0093.164] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0093.164] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0093.164] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0093.164] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0093.164] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0093.164] GlobalUnlock (hMem=0x757003c) returned 0 [0093.164] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0093.164] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0093.165] WaitMessage () returned 1 [0093.272] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 1 [0093.272] IsWindowUnicode (hWnd=0x10406) returned 1 [0093.272] GetMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x1cf40c) returned 1 [0093.272] TranslateMessage (lpMsg=0x1cf40c) returned 0 [0093.272] DispatchMessageW (lpMsg=0x1cf40c) returned 0x0 [0093.272] IsWindowVisible (hWnd=0x40358) returned 0 [0093.272] OleGetClipboard (in: ppDataObj=0x1cf10c | out: ppDataObj=0x1cf10c*=0x691830) returned 0x0 [0093.273] IUnknown:QueryInterface (in: This=0x691830, riid=0x6f5bde2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1cebc4 | out: ppvObject=0x1cebc4*=0x691830) returned 0x0 [0093.273] IUnknown:Release (This=0x691830) returned 0x3 [0093.273] CoGetContextToken (in: pToken=0x1ceed8 | out: pToken=0x1ceed8) returned 0x0 [0093.273] IUnknown:AddRef (This=0x691830) returned 0x4 [0093.273] IUnknown:Release (This=0x691830) returned 0x3 [0093.273] IUnknown:Release (This=0x691830) returned 0x2 [0093.273] CoGetContextToken (in: pToken=0x1cef58 | out: pToken=0x1cef58) returned 0x0 [0093.273] CoGetContextToken (in: pToken=0x1ceeb8 | out: pToken=0x1ceeb8) returned 0x0 [0093.273] IUnknown:QueryInterface (in: This=0x691830, riid=0x1cef88*(Data1=0x3cee8cc1, Data2=0x1adb, Data3=0x327f, Data4=([0]=0x9b, [1]=0x97, [2]=0x7a, [3]=0x9c, [4]=0x80, [5]=0x89, [6]=0xbf, [7]=0xb3)), ppvObject=0x1cef84 | out: ppvObject=0x1cef84*=0x0) returned 0x80004002 [0093.273] IDataObject:QueryGetData (This=0x691830, pformatetc=0x1cf0cc) returned 0x0 [0093.273] IDataObject:RemoteGetData (in: This=0x691830, pformatetcIn=0x1cf0cc, pRemoteMedium=0x1cf05c | out: pRemoteMedium=0x1cf05c) returned 0x0 [0093.274] GlobalLock (hMem=0x757003c) returned 0x69c9c8 [0093.274] GlobalUnlock (hMem=0x757003c) returned 0 [0093.274] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0093.274] PeekMessageW (in: lpMsg=0x1cf40c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x1cf40c) returned 0 [0093.274] WaitMessage () Thread: id = 19 os_tid = 0xd84 Thread: id = 23 os_tid = 0xe64 Thread: id = 24 os_tid = 0xd50 [0065.406] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0065.407] RoInitialize () returned 0x1 [0065.407] RoUninitialize () returned 0x0 Thread: id = 30 os_tid = 0xc84 Thread: id = 31 os_tid = 0xc68 Thread: id = 32 os_tid = 0xc18 Thread: id = 33 os_tid = 0xddc Process: id = "5" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x75d0d000" os_pid = "0x35c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "3" os_parent_pid = "0x214" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b166" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 1490 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1491 start_va = 0x20000 end_va = 0x20fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 1492 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1493 start_va = 0x50000 end_va = 0xcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1494 start_va = 0xd0000 end_va = 0xd3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 1495 start_va = 0xe0000 end_va = 0xe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 1496 start_va = 0xf0000 end_va = 0xf1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 1497 start_va = 0x100000 end_va = 0x100fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 1498 start_va = 0x110000 end_va = 0x110fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1499 start_va = 0x130000 end_va = 0x141fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dnsapi.dll.mui" filename = "\\Windows\\System32\\en-US\\dnsapi.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dnsapi.dll.mui") Region: id = 1500 start_va = 0x150000 end_va = 0x159fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "crypt32.dll.mui" filename = "\\Windows\\System32\\en-US\\crypt32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\crypt32.dll.mui") Region: id = 1501 start_va = 0x180000 end_va = 0x186fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 1502 start_va = 0x190000 end_va = 0x190fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 1503 start_va = 0x1a0000 end_va = 0x1a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 1504 start_va = 0x1b0000 end_va = 0x1b6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 1505 start_va = 0x1c0000 end_va = 0x1c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 1506 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 1507 start_va = 0x1f0000 end_va = 0x1fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 1508 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 1509 start_va = 0x400000 end_va = 0x4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 1510 start_va = 0x500000 end_va = 0x5bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1511 start_va = 0x5c0000 end_va = 0x747fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005c0000" filename = "" Region: id = 1512 start_va = 0x750000 end_va = 0x750fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000750000" filename = "" Region: id = 1513 start_va = 0x760000 end_va = 0x760fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000760000" filename = "" Region: id = 1514 start_va = 0x770000 end_va = 0x77cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\gpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\gpsvc.dll.mui") Region: id = 1515 start_va = 0x780000 end_va = 0x781fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000780000" filename = "" Region: id = 1516 start_va = 0x790000 end_va = 0x796fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 1517 start_va = 0x7a0000 end_va = 0x7a3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1518 start_va = 0x7b0000 end_va = 0x7f4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db") Region: id = 1519 start_va = 0x800000 end_va = 0x8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000800000" filename = "" Region: id = 1520 start_va = 0x900000 end_va = 0xa80fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000900000" filename = "" Region: id = 1521 start_va = 0xa90000 end_va = 0xb4ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a90000" filename = "" Region: id = 1522 start_va = 0xb50000 end_va = 0xbcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b50000" filename = "" Region: id = 1523 start_va = 0xbd0000 end_va = 0xbd3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1524 start_va = 0xbe0000 end_va = 0xbf0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 1525 start_va = 0xc10000 end_va = 0xc11fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c10000" filename = "" Region: id = 1526 start_va = 0xc20000 end_va = 0xc21fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "activeds.dll.mui" filename = "\\Windows\\System32\\en-US\\activeds.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\activeds.dll.mui") Region: id = 1527 start_va = 0xc30000 end_va = 0xc34fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll" filename = "\\Windows\\System32\\winnlsres.dll" (normalized: "c:\\windows\\system32\\winnlsres.dll") Region: id = 1528 start_va = 0xc40000 end_va = 0xc46fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c40000" filename = "" Region: id = 1529 start_va = 0xc50000 end_va = 0xccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c50000" filename = "" Region: id = 1530 start_va = 0xcd0000 end_va = 0xcd8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vsstrace.dll.mui" filename = "\\Windows\\System32\\en-US\\vsstrace.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\vsstrace.dll.mui") Region: id = 1531 start_va = 0xce0000 end_va = 0xce0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ce0000" filename = "" Region: id = 1532 start_va = 0xcf0000 end_va = 0xcfffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll.mui" filename = "\\Windows\\System32\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winnlsres.dll.mui") Region: id = 1533 start_va = 0xd00000 end_va = 0xdfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d00000" filename = "" Region: id = 1534 start_va = 0xe00000 end_va = 0xefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 1535 start_va = 0xf00000 end_va = 0xffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f00000" filename = "" Region: id = 1536 start_va = 0x1000000 end_va = 0x1336fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1537 start_va = 0x1340000 end_va = 0x13bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001340000" filename = "" Region: id = 1538 start_va = 0x13c0000 end_va = 0x143ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000013c0000" filename = "" Region: id = 1539 start_va = 0x1440000 end_va = 0x153ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001440000" filename = "" Region: id = 1540 start_va = 0x1540000 end_va = 0x163ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001540000" filename = "" Region: id = 1541 start_va = 0x1640000 end_va = 0x16bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001640000" filename = "" Region: id = 1542 start_va = 0x16d0000 end_va = 0x16d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usocore.dll.mui" filename = "\\Windows\\System32\\en-US\\usocore.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\usocore.dll.mui") Region: id = 1543 start_va = 0x16e0000 end_va = 0x16e2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mswsock.dll.mui" filename = "\\Windows\\System32\\en-US\\mswsock.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mswsock.dll.mui") Region: id = 1544 start_va = 0x16f0000 end_va = 0x16f1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000016f0000" filename = "" Region: id = 1545 start_va = 0x1700000 end_va = 0x1706fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001700000" filename = "" Region: id = 1546 start_va = 0x1710000 end_va = 0x178ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001710000" filename = "" Region: id = 1547 start_va = 0x1790000 end_va = 0x17a7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001790000" filename = "" Region: id = 1548 start_va = 0x17d0000 end_va = 0x17d6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000017d0000" filename = "" Region: id = 1549 start_va = 0x1800000 end_va = 0x18fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001800000" filename = "" Region: id = 1550 start_va = 0x1900000 end_va = 0x19dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 1551 start_va = 0x1a00000 end_va = 0x1afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001a00000" filename = "" Region: id = 1552 start_va = 0x1b00000 end_va = 0x1bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001b00000" filename = "" Region: id = 1553 start_va = 0x1c00000 end_va = 0x1cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001c00000" filename = "" Region: id = 1554 start_va = 0x1d00000 end_va = 0x1dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d00000" filename = "" Region: id = 1555 start_va = 0x1e00000 end_va = 0x1efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e00000" filename = "" Region: id = 1556 start_va = 0x1f00000 end_va = 0x1f7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f00000" filename = "" Region: id = 1557 start_va = 0x1f80000 end_va = 0x1ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Region: id = 1558 start_va = 0x2000000 end_va = 0x20fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002000000" filename = "" Region: id = 1559 start_va = 0x2100000 end_va = 0x21fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002100000" filename = "" Region: id = 1560 start_va = 0x2200000 end_va = 0x22fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002200000" filename = "" Region: id = 1561 start_va = 0x2300000 end_va = 0x23fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002300000" filename = "" Region: id = 1562 start_va = 0x2400000 end_va = 0x24fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002400000" filename = "" Region: id = 1563 start_va = 0x2500000 end_va = 0x25fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002500000" filename = "" Region: id = 1564 start_va = 0x2600000 end_va = 0x26fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002600000" filename = "" Region: id = 1565 start_va = 0x2700000 end_va = 0x27fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002700000" filename = "" Region: id = 1566 start_va = 0x2880000 end_va = 0x28fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002880000" filename = "" Region: id = 1567 start_va = 0x2900000 end_va = 0x29fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002900000" filename = "" Region: id = 1568 start_va = 0x2a00000 end_va = 0x2a8dfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 1569 start_va = 0x2a90000 end_va = 0x2b8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 1570 start_va = 0x2b90000 end_va = 0x2c8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b90000" filename = "" Region: id = 1571 start_va = 0x2c90000 end_va = 0x2d8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c90000" filename = "" Region: id = 1572 start_va = 0x2e10000 end_va = 0x2e8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002e10000" filename = "" Region: id = 1573 start_va = 0x2f10000 end_va = 0x2f8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002f10000" filename = "" Region: id = 1574 start_va = 0x2f90000 end_va = 0x308ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002f90000" filename = "" Region: id = 1575 start_va = 0x3090000 end_va = 0x318ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003090000" filename = "" Region: id = 1576 start_va = 0x3190000 end_va = 0x328ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003190000" filename = "" Region: id = 1577 start_va = 0x3430000 end_va = 0x34affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003430000" filename = "" Region: id = 1578 start_va = 0x34b0000 end_va = 0x352ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000034b0000" filename = "" Region: id = 1579 start_va = 0x3530000 end_va = 0x35affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003530000" filename = "" Region: id = 1580 start_va = 0x3600000 end_va = 0x36fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003600000" filename = "" Region: id = 1581 start_va = 0x3700000 end_va = 0x37fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003700000" filename = "" Region: id = 1582 start_va = 0x3800000 end_va = 0x38fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003800000" filename = "" Region: id = 1583 start_va = 0x3900000 end_va = 0x39fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003900000" filename = "" Region: id = 1584 start_va = 0x3b00000 end_va = 0x3bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003b00000" filename = "" Region: id = 1585 start_va = 0x3c00000 end_va = 0x3cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003c00000" filename = "" Region: id = 1586 start_va = 0x3d00000 end_va = 0x3dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003d00000" filename = "" Region: id = 1587 start_va = 0x3e00000 end_va = 0x3efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e00000" filename = "" Region: id = 1588 start_va = 0x3f00000 end_va = 0x3ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003f00000" filename = "" Region: id = 1589 start_va = 0x4000000 end_va = 0x40fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004000000" filename = "" Region: id = 1590 start_va = 0x4100000 end_va = 0x41fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004100000" filename = "" Region: id = 1591 start_va = 0x4200000 end_va = 0x42fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004200000" filename = "" Region: id = 1592 start_va = 0x4300000 end_va = 0x4306fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004300000" filename = "" Region: id = 1593 start_va = 0x4310000 end_va = 0x438ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004310000" filename = "" Region: id = 1594 start_va = 0x43e0000 end_va = 0x43e6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000043e0000" filename = "" Region: id = 1595 start_va = 0x4400000 end_va = 0x44fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004400000" filename = "" Region: id = 1596 start_va = 0x4500000 end_va = 0x45fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004500000" filename = "" Region: id = 1597 start_va = 0x4600000 end_va = 0x46fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004600000" filename = "" Region: id = 1598 start_va = 0x4700000 end_va = 0x47fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004700000" filename = "" Region: id = 1599 start_va = 0x4800000 end_va = 0x48fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004800000" filename = "" Region: id = 1600 start_va = 0x4900000 end_va = 0x49fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004900000" filename = "" Region: id = 1601 start_va = 0x4a00000 end_va = 0x4afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a00000" filename = "" Region: id = 1602 start_va = 0x4b00000 end_va = 0x4bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b00000" filename = "" Region: id = 1603 start_va = 0x4c00000 end_va = 0x4cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004c00000" filename = "" Region: id = 1604 start_va = 0x4d00000 end_va = 0x4dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d00000" filename = "" Region: id = 1605 start_va = 0x4e00000 end_va = 0x4efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004e00000" filename = "" Region: id = 1606 start_va = 0x4f00000 end_va = 0x4ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004f00000" filename = "" Region: id = 1607 start_va = 0x5000000 end_va = 0x50fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005000000" filename = "" Region: id = 1608 start_va = 0x5100000 end_va = 0x51fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005100000" filename = "" Region: id = 1609 start_va = 0x5200000 end_va = 0x52fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005200000" filename = "" Region: id = 1610 start_va = 0x5300000 end_va = 0x53fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005300000" filename = "" Region: id = 1611 start_va = 0x5400000 end_va = 0x54fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005400000" filename = "" Region: id = 1612 start_va = 0x5500000 end_va = 0x55fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005500000" filename = "" Region: id = 1613 start_va = 0x5600000 end_va = 0x56fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005600000" filename = "" Region: id = 1614 start_va = 0x5700000 end_va = 0x57fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005700000" filename = "" Region: id = 1615 start_va = 0x5900000 end_va = 0x59fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005900000" filename = "" Region: id = 1616 start_va = 0x5ce0000 end_va = 0x5ce6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005ce0000" filename = "" Region: id = 1617 start_va = 0x5cf0000 end_va = 0x5deffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005cf0000" filename = "" Region: id = 1618 start_va = 0x5df0000 end_va = 0x5df6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005df0000" filename = "" Region: id = 1619 start_va = 0x5e00000 end_va = 0x5efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005e00000" filename = "" Region: id = 1620 start_va = 0x6000000 end_va = 0x60fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006000000" filename = "" Region: id = 1621 start_va = 0x6100000 end_va = 0x61fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006100000" filename = "" Region: id = 1622 start_va = 0x6200000 end_va = 0x62fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006200000" filename = "" Region: id = 1623 start_va = 0x6300000 end_va = 0x63fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006300000" filename = "" Region: id = 1624 start_va = 0x6400000 end_va = 0x64fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006400000" filename = "" Region: id = 1625 start_va = 0x6500000 end_va = 0x65fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006500000" filename = "" Region: id = 1626 start_va = 0x6700000 end_va = 0x67fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006700000" filename = "" Region: id = 1627 start_va = 0x6800000 end_va = 0x68fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006800000" filename = "" Region: id = 1628 start_va = 0x6900000 end_va = 0x69fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006900000" filename = "" Region: id = 1629 start_va = 0x6a00000 end_va = 0x6afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006a00000" filename = "" Region: id = 1630 start_va = 0x6b00000 end_va = 0x6bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006b00000" filename = "" Region: id = 1631 start_va = 0x7000000 end_va = 0x70fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007000000" filename = "" Region: id = 1632 start_va = 0x7100000 end_va = 0x71fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007100000" filename = "" Region: id = 1633 start_va = 0x7400000 end_va = 0x74fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007400000" filename = "" Region: id = 1634 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1635 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 1636 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 1637 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 1638 start_va = 0x7ff766920000 end_va = 0x7ff76692cfff monitored = 0 entry_point = 0x7ff766923980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 1639 start_va = 0x7ffcf12c0000 end_va = 0x7ffcf1394fff monitored = 0 entry_point = 0x7ffcf12dcf80 region_type = mapped_file name = "wuapi.dll" filename = "\\Windows\\System32\\wuapi.dll" (normalized: "c:\\windows\\system32\\wuapi.dll") Region: id = 1640 start_va = 0x7ffcf48f0000 end_va = 0x7ffcf4b9ffff monitored = 0 entry_point = 0x7ffcf48f1cf0 region_type = mapped_file name = "netshell.dll" filename = "\\Windows\\System32\\netshell.dll" (normalized: "c:\\windows\\system32\\netshell.dll") Region: id = 1641 start_va = 0x7ffcf5210000 end_va = 0x7ffcf5226fff monitored = 0 entry_point = 0x7ffcf5217520 region_type = mapped_file name = "usoapi.dll" filename = "\\Windows\\System32\\usoapi.dll" (normalized: "c:\\windows\\system32\\usoapi.dll") Region: id = 1642 start_va = 0x7ffcf59a0000 end_va = 0x7ffcf59e3fff monitored = 0 entry_point = 0x7ffcf59c83e0 region_type = mapped_file name = "updatehandlers.dll" filename = "\\Windows\\System32\\updatehandlers.dll" (normalized: "c:\\windows\\system32\\updatehandlers.dll") Region: id = 1643 start_va = 0x7ffcf59f0000 end_va = 0x7ffcf5a11fff monitored = 0 entry_point = 0x7ffcf5a02540 region_type = mapped_file name = "updatepolicy.dll" filename = "\\Windows\\System32\\updatepolicy.dll" (normalized: "c:\\windows\\system32\\updatepolicy.dll") Region: id = 1644 start_va = 0x7ffcf5e40000 end_va = 0x7ffcf5f5cfff monitored = 0 entry_point = 0x7ffcf5e6fe60 region_type = mapped_file name = "qmgr.dll" filename = "\\Windows\\System32\\qmgr.dll" (normalized: "c:\\windows\\system32\\qmgr.dll") Region: id = 1645 start_va = 0x7ffcf62c0000 end_va = 0x7ffcf62d7fff monitored = 0 entry_point = 0x7ffcf62cb850 region_type = mapped_file name = "dmcmnutils.dll" filename = "\\Windows\\System32\\dmcmnutils.dll" (normalized: "c:\\windows\\system32\\dmcmnutils.dll") Region: id = 1646 start_va = 0x7ffcf62e0000 end_va = 0x7ffcf633cfff monitored = 0 entry_point = 0x7ffcf630e510 region_type = mapped_file name = "usocore.dll" filename = "\\Windows\\System32\\usocore.dll" (normalized: "c:\\windows\\system32\\usocore.dll") Region: id = 1647 start_va = 0x7ffcf8390000 end_va = 0x7ffcf83cefff monitored = 0 entry_point = 0x7ffcf83b82d0 region_type = mapped_file name = "tcpipcfg.dll" filename = "\\Windows\\System32\\tcpipcfg.dll" (normalized: "c:\\windows\\system32\\tcpipcfg.dll") Region: id = 1648 start_va = 0x7ffcf8690000 end_va = 0x7ffcf86a3fff monitored = 0 entry_point = 0x7ffcf8693710 region_type = mapped_file name = "mskeyprotect.dll" filename = "\\Windows\\System32\\mskeyprotect.dll" (normalized: "c:\\windows\\system32\\mskeyprotect.dll") Region: id = 1649 start_va = 0x7ffcf8740000 end_va = 0x7ffcf875dfff monitored = 0 entry_point = 0x7ffcf874ef80 region_type = mapped_file name = "ncryptsslp.dll" filename = "\\Windows\\System32\\ncryptsslp.dll" (normalized: "c:\\windows\\system32\\ncryptsslp.dll") Region: id = 1650 start_va = 0x7ffcf8840000 end_va = 0x7ffcf88a6fff monitored = 0 entry_point = 0x7ffcf884b160 region_type = mapped_file name = "upnp.dll" filename = "\\Windows\\System32\\upnp.dll" (normalized: "c:\\windows\\system32\\upnp.dll") Region: id = 1651 start_va = 0x7ffcfbe90000 end_va = 0x7ffcfbe97fff monitored = 0 entry_point = 0x7ffcfbe913b0 region_type = mapped_file name = "dmiso8601utils.dll" filename = "\\Windows\\System32\\dmiso8601utils.dll" (normalized: "c:\\windows\\system32\\dmiso8601utils.dll") Region: id = 1652 start_va = 0x7ffcfc0e0000 end_va = 0x7ffcfc115fff monitored = 0 entry_point = 0x7ffcfc0e27f0 region_type = mapped_file name = "windows.networking.hostname.dll" filename = "\\Windows\\System32\\Windows.Networking.HostName.dll" (normalized: "c:\\windows\\system32\\windows.networking.hostname.dll") Region: id = 1653 start_va = 0x7ffcfc1c0000 end_va = 0x7ffcfc1d5fff monitored = 0 entry_point = 0x7ffcfc1c1d50 region_type = mapped_file name = "wwapi.dll" filename = "\\Windows\\System32\\wwapi.dll" (normalized: "c:\\windows\\system32\\wwapi.dll") Region: id = 1654 start_va = 0x7ffcfc520000 end_va = 0x7ffcfc530fff monitored = 0 entry_point = 0x7ffcfc527480 region_type = mapped_file name = "tetheringclient.dll" filename = "\\Windows\\System32\\tetheringclient.dll" (normalized: "c:\\windows\\system32\\tetheringclient.dll") Region: id = 1655 start_va = 0x7ffcfc540000 end_va = 0x7ffcfc5c3fff monitored = 0 entry_point = 0x7ffcfc558d50 region_type = mapped_file name = "wbemess.dll" filename = "\\Windows\\System32\\wbem\\wbemess.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemess.dll") Region: id = 1656 start_va = 0x7ffcfc5f0000 end_va = 0x7ffcfc605fff monitored = 0 entry_point = 0x7ffcfc5f55e0 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 1657 start_va = 0x7ffcfc610000 end_va = 0x7ffcfc6e5fff monitored = 0 entry_point = 0x7ffcfc63a800 region_type = mapped_file name = "wmiprvsd.dll" filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprvsd.dll") Region: id = 1658 start_va = 0x7ffcfc6f0000 end_va = 0x7ffcfc705fff monitored = 0 entry_point = 0x7ffcfc6f1af0 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 1659 start_va = 0x7ffcfc710000 end_va = 0x7ffcfc729fff monitored = 0 entry_point = 0x7ffcfc712330 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 1660 start_va = 0x7ffcfc750000 end_va = 0x7ffcfc7b3fff monitored = 0 entry_point = 0x7ffcfc76bed0 region_type = mapped_file name = "repdrvfs.dll" filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" (normalized: "c:\\windows\\system32\\wbem\\repdrvfs.dll") Region: id = 1661 start_va = 0x7ffcfc7c0000 end_va = 0x7ffcfc7e4fff monitored = 0 entry_point = 0x7ffcfc7c9900 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 1662 start_va = 0x7ffcfc7f0000 end_va = 0x7ffcfc8e5fff monitored = 0 entry_point = 0x7ffcfc829590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 1663 start_va = 0x7ffcfc8f0000 end_va = 0x7ffcfca26fff monitored = 0 entry_point = 0x7ffcfc930480 region_type = mapped_file name = "wbemcore.dll" filename = "\\Windows\\System32\\wbem\\wbemcore.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemcore.dll") Region: id = 1664 start_va = 0x7ffcfca40000 end_va = 0x7ffcfca4efff monitored = 0 entry_point = 0x7ffcfca44960 region_type = mapped_file name = "nci.dll" filename = "\\Windows\\System32\\nci.dll" (normalized: "c:\\windows\\system32\\nci.dll") Region: id = 1665 start_va = 0x7ffcfca60000 end_va = 0x7ffcfca70fff monitored = 0 entry_point = 0x7ffcfca62fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 1666 start_va = 0x7ffcfca80000 end_va = 0x7ffcfca9dfff monitored = 0 entry_point = 0x7ffcfca83a40 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 1667 start_va = 0x7ffcfcaa0000 end_va = 0x7ffcfcb21fff monitored = 0 entry_point = 0x7ffcfcaa2a10 region_type = mapped_file name = "hnetcfg.dll" filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll") Region: id = 1668 start_va = 0x7ffcfcba0000 end_va = 0x7ffcfcbacfff monitored = 0 entry_point = 0x7ffcfcba1420 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 1669 start_va = 0x7ffcfcbb0000 end_va = 0x7ffcfcbc3fff monitored = 0 entry_point = 0x7ffcfcbb1800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 1670 start_va = 0x7ffcfcbd0000 end_va = 0x7ffcfcc43fff monitored = 0 entry_point = 0x7ffcfcbe5eb0 region_type = mapped_file name = "esscli.dll" filename = "\\Windows\\System32\\wbem\\esscli.dll" (normalized: "c:\\windows\\system32\\wbem\\esscli.dll") Region: id = 1671 start_va = 0x7ffcfcd40000 end_va = 0x7ffcfcd4bfff monitored = 0 entry_point = 0x7ffcfcd435c0 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 1672 start_va = 0x7ffcfcda0000 end_va = 0x7ffcfcddffff monitored = 0 entry_point = 0x7ffcfcdacbe0 region_type = mapped_file name = "adsldpc.dll" filename = "\\Windows\\System32\\adsldpc.dll" (normalized: "c:\\windows\\system32\\adsldpc.dll") Region: id = 1673 start_va = 0x7ffcfcde0000 end_va = 0x7ffcfce26fff monitored = 0 entry_point = 0x7ffcfcde1d10 region_type = mapped_file name = "activeds.dll" filename = "\\Windows\\System32\\activeds.dll" (normalized: "c:\\windows\\system32\\activeds.dll") Region: id = 1674 start_va = 0x7ffcfd100000 end_va = 0x7ffcfd141fff monitored = 0 entry_point = 0x7ffcfd103670 region_type = mapped_file name = "wdscore.dll" filename = "\\Windows\\System32\\wdscore.dll" (normalized: "c:\\windows\\system32\\wdscore.dll") Region: id = 1675 start_va = 0x7ffcfd150000 end_va = 0x7ffcfd16efff monitored = 0 entry_point = 0x7ffcfd1537e0 region_type = mapped_file name = "netsetupapi.dll" filename = "\\Windows\\System32\\NetSetupApi.dll" (normalized: "c:\\windows\\system32\\netsetupapi.dll") Region: id = 1676 start_va = 0x7ffcfd170000 end_va = 0x7ffcfd1e8fff monitored = 0 entry_point = 0x7ffcfd1776a0 region_type = mapped_file name = "netsetupshim.dll" filename = "\\Windows\\System32\\NetSetupShim.dll" (normalized: "c:\\windows\\system32\\netsetupshim.dll") Region: id = 1677 start_va = 0x7ffcfdec0000 end_va = 0x7ffcfdf62fff monitored = 0 entry_point = 0x7ffcfdec2c10 region_type = mapped_file name = "clusapi.dll" filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll") Region: id = 1678 start_va = 0x7ffcfdf70000 end_va = 0x7ffcfdfc1fff monitored = 0 entry_point = 0x7ffcfdf75770 region_type = mapped_file name = "resutils.dll" filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll") Region: id = 1679 start_va = 0x7ffcfdfd0000 end_va = 0x7ffcfdffdfff monitored = 1 entry_point = 0x7ffcfdfd2300 region_type = mapped_file name = "wmidcom.dll" filename = "\\Windows\\System32\\wmidcom.dll" (normalized: "c:\\windows\\system32\\wmidcom.dll") Region: id = 1680 start_va = 0x7ffcfe000000 end_va = 0x7ffcfe05dfff monitored = 0 entry_point = 0x7ffcfe005080 region_type = mapped_file name = "miutils.dll" filename = "\\Windows\\System32\\miutils.dll" (normalized: "c:\\windows\\system32\\miutils.dll") Region: id = 1681 start_va = 0x7ffcfe060000 end_va = 0x7ffcfe07ffff monitored = 0 entry_point = 0x7ffcfe061f50 region_type = mapped_file name = "mi.dll" filename = "\\Windows\\System32\\mi.dll" (normalized: "c:\\windows\\system32\\mi.dll") Region: id = 1682 start_va = 0x7ffcfe080000 end_va = 0x7ffcfe088fff monitored = 0 entry_point = 0x7ffcfe0818f0 region_type = mapped_file name = "sscoreext.dll" filename = "\\Windows\\System32\\sscoreext.dll" (normalized: "c:\\windows\\system32\\sscoreext.dll") Region: id = 1683 start_va = 0x7ffcfe090000 end_va = 0x7ffcfe0a0fff monitored = 0 entry_point = 0x7ffcfe091d30 region_type = mapped_file name = "sscore.dll" filename = "\\Windows\\System32\\sscore.dll" (normalized: "c:\\windows\\system32\\sscore.dll") Region: id = 1684 start_va = 0x7ffcfe5f0000 end_va = 0x7ffcfe607fff monitored = 0 entry_point = 0x7ffcfe5f4e10 region_type = mapped_file name = "adhsvc.dll" filename = "\\Windows\\System32\\adhsvc.dll" (normalized: "c:\\windows\\system32\\adhsvc.dll") Region: id = 1685 start_va = 0x7ffcfe610000 end_va = 0x7ffcfe634fff monitored = 0 entry_point = 0x7ffcfe615ca0 region_type = mapped_file name = "httpprxm.dll" filename = "\\Windows\\System32\\httpprxm.dll" (normalized: "c:\\windows\\system32\\httpprxm.dll") Region: id = 1686 start_va = 0x7ffcfe670000 end_va = 0x7ffcfe6b0fff monitored = 0 entry_point = 0x7ffcfe673750 region_type = mapped_file name = "sqmapi.dll" filename = "\\Windows\\System32\\sqmapi.dll" (normalized: "c:\\windows\\system32\\sqmapi.dll") Region: id = 1687 start_va = 0x7ffcfe6c0000 end_va = 0x7ffcfe7b2fff monitored = 0 entry_point = 0x7ffcfe6e5d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 1688 start_va = 0x7ffcfe7c0000 end_va = 0x7ffcfe80bfff monitored = 0 entry_point = 0x7ffcfe7d5310 region_type = mapped_file name = "srvsvc.dll" filename = "\\Windows\\System32\\srvsvc.dll" (normalized: "c:\\windows\\system32\\srvsvc.dll") Region: id = 1689 start_va = 0x7ffcfe810000 end_va = 0x7ffcfe827fff monitored = 0 entry_point = 0x7ffcfe812000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 1690 start_va = 0x7ffcfe830000 end_va = 0x7ffcfe9b1fff monitored = 0 entry_point = 0x7ffcfe8482a0 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 1691 start_va = 0x7ffcfe9e0000 end_va = 0x7ffcfea5efff monitored = 0 entry_point = 0x7ffcfe9f7110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 1692 start_va = 0x7ffcfea60000 end_va = 0x7ffcfea9bfff monitored = 0 entry_point = 0x7ffcfea66aa0 region_type = mapped_file name = "wmisvc.dll" filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wmisvc.dll") Region: id = 1693 start_va = 0x7ffcfeb60000 end_va = 0x7ffcfeb94fff monitored = 0 entry_point = 0x7ffcfeb6a270 region_type = mapped_file name = "fwpolicyiomgr.dll" filename = "\\Windows\\System32\\fwpolicyiomgr.dll" (normalized: "c:\\windows\\system32\\fwpolicyiomgr.dll") Region: id = 1694 start_va = 0x7ffcfec80000 end_va = 0x7ffcfecbffff monitored = 0 entry_point = 0x7ffcfec96c60 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 1695 start_va = 0x7ffcfecc0000 end_va = 0x7ffcfecc8fff monitored = 0 entry_point = 0x7ffcfecc21d0 region_type = mapped_file name = "httpprxc.dll" filename = "\\Windows\\System32\\httpprxc.dll" (normalized: "c:\\windows\\system32\\httpprxc.dll") Region: id = 1696 start_va = 0x7ffd01b00000 end_va = 0x7ffd01b09fff monitored = 0 entry_point = 0x7ffd01b014c0 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 1697 start_va = 0x7ffd01bc0000 end_va = 0x7ffd01bd1fff monitored = 0 entry_point = 0x7ffd01bc3580 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 1698 start_va = 0x7ffd01c50000 end_va = 0x7ffd01c6afff monitored = 0 entry_point = 0x7ffd01c51040 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 1699 start_va = 0x7ffd02190000 end_va = 0x7ffd021c1fff monitored = 0 entry_point = 0x7ffd0219b0c0 region_type = mapped_file name = "shacct.dll" filename = "\\Windows\\System32\\shacct.dll" (normalized: "c:\\windows\\system32\\shacct.dll") Region: id = 1700 start_va = 0x7ffd021d0000 end_va = 0x7ffd021dbfff monitored = 0 entry_point = 0x7ffd021d2830 region_type = mapped_file name = "bi.dll" filename = "\\Windows\\System32\\bi.dll" (normalized: "c:\\windows\\system32\\bi.dll") Region: id = 1701 start_va = 0x7ffd021e0000 end_va = 0x7ffd0225ffff monitored = 0 entry_point = 0x7ffd0220d280 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 1702 start_va = 0x7ffd02380000 end_va = 0x7ffd0238dfff monitored = 0 entry_point = 0x7ffd02381460 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 1703 start_va = 0x7ffd02390000 end_va = 0x7ffd023a4fff monitored = 0 entry_point = 0x7ffd02392dc0 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll") Region: id = 1704 start_va = 0x7ffd025d0000 end_va = 0x7ffd025dffff monitored = 0 entry_point = 0x7ffd025d1700 region_type = mapped_file name = "proximityservicepal.dll" filename = "\\Windows\\System32\\ProximityServicePal.dll" (normalized: "c:\\windows\\system32\\proximityservicepal.dll") Region: id = 1705 start_va = 0x7ffd025e0000 end_va = 0x7ffd025e8fff monitored = 0 entry_point = 0x7ffd025e1ed0 region_type = mapped_file name = "proximitycommonpal.dll" filename = "\\Windows\\System32\\ProximityCommonPal.dll" (normalized: "c:\\windows\\system32\\proximitycommonpal.dll") Region: id = 1706 start_va = 0x7ffd025f0000 end_va = 0x7ffd0261cfff monitored = 0 entry_point = 0x7ffd025f2290 region_type = mapped_file name = "proximitycommon.dll" filename = "\\Windows\\System32\\ProximityCommon.dll" (normalized: "c:\\windows\\system32\\proximitycommon.dll") Region: id = 1707 start_va = 0x7ffd02620000 end_va = 0x7ffd02671fff monitored = 0 entry_point = 0x7ffd026238e0 region_type = mapped_file name = "proximityservice.dll" filename = "\\Windows\\System32\\ProximityService.dll" (normalized: "c:\\windows\\system32\\proximityservice.dll") Region: id = 1708 start_va = 0x7ffd02680000 end_va = 0x7ffd02719fff monitored = 0 entry_point = 0x7ffd0269ada0 region_type = mapped_file name = "shsvcs.dll" filename = "\\Windows\\System32\\shsvcs.dll" (normalized: "c:\\windows\\system32\\shsvcs.dll") Region: id = 1709 start_va = 0x7ffd02730000 end_va = 0x7ffd02796fff monitored = 0 entry_point = 0x7ffd027363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1710 start_va = 0x7ffd027d0000 end_va = 0x7ffd027ecfff monitored = 0 entry_point = 0x7ffd027d4f60 region_type = mapped_file name = "appinfo.dll" filename = "\\Windows\\System32\\appinfo.dll" (normalized: "c:\\windows\\system32\\appinfo.dll") Region: id = 1711 start_va = 0x7ffd027f0000 end_va = 0x7ffd02804fff monitored = 0 entry_point = 0x7ffd027f3460 region_type = mapped_file name = "ssdpapi.dll" filename = "\\Windows\\System32\\ssdpapi.dll" (normalized: "c:\\windows\\system32\\ssdpapi.dll") Region: id = 1712 start_va = 0x7ffd02980000 end_va = 0x7ffd029c5fff monitored = 0 entry_point = 0x7ffd029879a0 region_type = mapped_file name = "adsldp.dll" filename = "\\Windows\\System32\\adsldp.dll" (normalized: "c:\\windows\\system32\\adsldp.dll") Region: id = 1713 start_va = 0x7ffd02a70000 end_va = 0x7ffd02a89fff monitored = 0 entry_point = 0x7ffd02a72430 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 1714 start_va = 0x7ffd02a90000 end_va = 0x7ffd02aa5fff monitored = 0 entry_point = 0x7ffd02a919f0 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 1715 start_va = 0x7ffd02ab0000 end_va = 0x7ffd02b6ffff monitored = 0 entry_point = 0x7ffd02adfd20 region_type = mapped_file name = "fveapi.dll" filename = "\\Windows\\System32\\fveapi.dll" (normalized: "c:\\windows\\system32\\fveapi.dll") Region: id = 1716 start_va = 0x7ffd02c80000 end_va = 0x7ffd02cb7fff monitored = 0 entry_point = 0x7ffd02c98cc0 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 1717 start_va = 0x7ffd02f10000 end_va = 0x7ffd02f1afff monitored = 0 entry_point = 0x7ffd02f11d30 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1718 start_va = 0x7ffd02f80000 end_va = 0x7ffd02f90fff monitored = 0 entry_point = 0x7ffd02f828d0 region_type = mapped_file name = "credentialmigrationhandler.dll" filename = "\\Windows\\System32\\CredentialMigrationHandler.dll" (normalized: "c:\\windows\\system32\\credentialmigrationhandler.dll") Region: id = 1719 start_va = 0x7ffd031f0000 end_va = 0x7ffd03203fff monitored = 0 entry_point = 0x7ffd031f2d50 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 1720 start_va = 0x7ffd03730000 end_va = 0x7ffd03748fff monitored = 0 entry_point = 0x7ffd03734520 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 1721 start_va = 0x7ffd03760000 end_va = 0x7ffd03771fff monitored = 0 entry_point = 0x7ffd03761a80 region_type = mapped_file name = "bitsproxy.dll" filename = "\\Windows\\System32\\BitsProxy.dll" (normalized: "c:\\windows\\system32\\bitsproxy.dll") Region: id = 1722 start_va = 0x7ffd03bf0000 end_va = 0x7ffd03c06fff monitored = 0 entry_point = 0x7ffd03bf5630 region_type = mapped_file name = "sens.dll" filename = "\\Windows\\System32\\Sens.dll" (normalized: "c:\\windows\\system32\\sens.dll") Region: id = 1723 start_va = 0x7ffd03c70000 end_va = 0x7ffd03c82fff monitored = 0 entry_point = 0x7ffd03c757f0 region_type = mapped_file name = "themeservice.dll" filename = "\\Windows\\System32\\themeservice.dll" (normalized: "c:\\windows\\system32\\themeservice.dll") Region: id = 1724 start_va = 0x7ffd03c90000 end_va = 0x7ffd03d09fff monitored = 0 entry_point = 0x7ffd03cb7630 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 1725 start_va = 0x7ffd03ed0000 end_va = 0x7ffd04251fff monitored = 0 entry_point = 0x7ffd03f21220 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 1726 start_va = 0x7ffd05350000 end_va = 0x7ffd0545dfff monitored = 0 entry_point = 0x7ffd0539eaa0 region_type = mapped_file name = "mrmcorer.dll" filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll") Region: id = 1727 start_va = 0x7ffd05540000 end_va = 0x7ffd05557fff monitored = 0 entry_point = 0x7ffd05541b10 region_type = mapped_file name = "locationframeworkinternalps.dll" filename = "\\Windows\\System32\\LocationFrameworkInternalPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkinternalps.dll") Region: id = 1728 start_va = 0x7ffd05770000 end_va = 0x7ffd0579dfff monitored = 0 entry_point = 0x7ffd05777550 region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll") Region: id = 1729 start_va = 0x7ffd057a0000 end_va = 0x7ffd057b5fff monitored = 0 entry_point = 0x7ffd057a1b60 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 1730 start_va = 0x7ffd057c0000 end_va = 0x7ffd05823fff monitored = 0 entry_point = 0x7ffd057d5ae0 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 1731 start_va = 0x7ffd059f0000 end_va = 0x7ffd05a9dfff monitored = 0 entry_point = 0x7ffd05a080c0 region_type = mapped_file name = "windows.networking.connectivity.dll" filename = "\\Windows\\System32\\Windows.Networking.Connectivity.dll" (normalized: "c:\\windows\\system32\\windows.networking.connectivity.dll") Region: id = 1732 start_va = 0x7ffd05aa0000 end_va = 0x7ffd05ab1fff monitored = 0 entry_point = 0x7ffd05aa9260 region_type = mapped_file name = "rilproxy.dll" filename = "\\Windows\\System32\\rilproxy.dll" (normalized: "c:\\windows\\system32\\rilproxy.dll") Region: id = 1733 start_va = 0x7ffd05ac0000 end_va = 0x7ffd05b70fff monitored = 0 entry_point = 0x7ffd05b388b0 region_type = mapped_file name = "cellularapi.dll" filename = "\\Windows\\System32\\CellularAPI.dll" (normalized: "c:\\windows\\system32\\cellularapi.dll") Region: id = 1734 start_va = 0x7ffd05b80000 end_va = 0x7ffd05ba4fff monitored = 0 entry_point = 0x7ffd05b92f20 region_type = mapped_file name = "wificonnapi.dll" filename = "\\Windows\\System32\\wificonnapi.dll" (normalized: "c:\\windows\\system32\\wificonnapi.dll") Region: id = 1735 start_va = 0x7ffd05bb0000 end_va = 0x7ffd05bc0fff monitored = 0 entry_point = 0x7ffd05bb7ea0 region_type = mapped_file name = "dcpapi.dll" filename = "\\Windows\\System32\\dcpapi.dll" (normalized: "c:\\windows\\system32\\dcpapi.dll") Region: id = 1736 start_va = 0x7ffd05bd0000 end_va = 0x7ffd05be9fff monitored = 0 entry_point = 0x7ffd05bd2cf0 region_type = mapped_file name = "locationpelegacywinlocation.dll" filename = "\\Windows\\System32\\LocationPeLegacyWinLocation.dll" (normalized: "c:\\windows\\system32\\locationpelegacywinlocation.dll") Region: id = 1737 start_va = 0x7ffd05bf0000 end_va = 0x7ffd05bfbfff monitored = 0 entry_point = 0x7ffd05bf14d0 region_type = mapped_file name = "locationframeworkps.dll" filename = "\\Windows\\System32\\LocationFrameworkPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkps.dll") Region: id = 1738 start_va = 0x7ffd05c00000 end_va = 0x7ffd05c54fff monitored = 0 entry_point = 0x7ffd05c03fb0 region_type = mapped_file name = "policymanager.dll" filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll") Region: id = 1739 start_va = 0x7ffd05c60000 end_va = 0x7ffd05c96fff monitored = 0 entry_point = 0x7ffd05c66020 region_type = mapped_file name = "gnssadapter.dll" filename = "\\Windows\\System32\\GnssAdapter.dll" (normalized: "c:\\windows\\system32\\gnssadapter.dll") Region: id = 1740 start_va = 0x7ffd05ca0000 end_va = 0x7ffd05cbffff monitored = 0 entry_point = 0x7ffd05ca39a0 region_type = mapped_file name = "locationwinpalmisc.dll" filename = "\\Windows\\System32\\LocationWinPalMisc.dll" (normalized: "c:\\windows\\system32\\locationwinpalmisc.dll") Region: id = 1741 start_va = 0x7ffd05cc0000 end_va = 0x7ffd05d00fff monitored = 0 entry_point = 0x7ffd05cc4840 region_type = mapped_file name = "usermgrproxy.dll" filename = "\\Windows\\System32\\UserMgrProxy.dll" (normalized: "c:\\windows\\system32\\usermgrproxy.dll") Region: id = 1742 start_va = 0x7ffd05d10000 end_va = 0x7ffd05dd7fff monitored = 0 entry_point = 0x7ffd05d513f0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 1743 start_va = 0x7ffd05de0000 end_va = 0x7ffd05e40fff monitored = 0 entry_point = 0x7ffd05de4b50 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 1744 start_va = 0x7ffd05e50000 end_va = 0x7ffd05fcbfff monitored = 0 entry_point = 0x7ffd05ea1650 region_type = mapped_file name = "locationframework.dll" filename = "\\Windows\\System32\\LocationFramework.dll" (normalized: "c:\\windows\\system32\\locationframework.dll") Region: id = 1745 start_va = 0x7ffd05fd0000 end_va = 0x7ffd05fdafff monitored = 0 entry_point = 0x7ffd05fd1770 region_type = mapped_file name = "lfsvc.dll" filename = "\\Windows\\System32\\lfsvc.dll" (normalized: "c:\\windows\\system32\\lfsvc.dll") Region: id = 1746 start_va = 0x7ffd05fe0000 end_va = 0x7ffd06115fff monitored = 0 entry_point = 0x7ffd0600f350 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 1747 start_va = 0x7ffd06120000 end_va = 0x7ffd06205fff monitored = 0 entry_point = 0x7ffd0613cf10 region_type = mapped_file name = "usermgr.dll" filename = "\\Windows\\System32\\usermgr.dll" (normalized: "c:\\windows\\system32\\usermgr.dll") Region: id = 1748 start_va = 0x7ffd062a0000 end_va = 0x7ffd06331fff monitored = 0 entry_point = 0x7ffd062ea780 region_type = mapped_file name = "msvcp110_win.dll" filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll") Region: id = 1749 start_va = 0x7ffd063e0000 end_va = 0x7ffd0641dfff monitored = 0 entry_point = 0x7ffd063ea050 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 1750 start_va = 0x7ffd06420000 end_va = 0x7ffd06446fff monitored = 0 entry_point = 0x7ffd06423bf0 region_type = mapped_file name = "profsvcext.dll" filename = "\\Windows\\System32\\profsvcext.dll" (normalized: "c:\\windows\\system32\\profsvcext.dll") Region: id = 1751 start_va = 0x7ffd06450000 end_va = 0x7ffd064a4fff monitored = 0 entry_point = 0x7ffd0645fc00 region_type = mapped_file name = "profsvc.dll" filename = "\\Windows\\System32\\profsvc.dll" (normalized: "c:\\windows\\system32\\profsvc.dll") Region: id = 1752 start_va = 0x7ffd064b0000 end_va = 0x7ffd064bcfff monitored = 0 entry_point = 0x7ffd064b2ca0 region_type = mapped_file name = "csystemeventsbrokerclient.dll" filename = "\\Windows\\System32\\CSystemEventsBrokerClient.dll" (normalized: "c:\\windows\\system32\\csystemeventsbrokerclient.dll") Region: id = 1753 start_va = 0x7ffd064c0000 end_va = 0x7ffd064eefff monitored = 0 entry_point = 0x7ffd064c8910 region_type = mapped_file name = "wptaskscheduler.dll" filename = "\\Windows\\System32\\WPTaskScheduler.dll" (normalized: "c:\\windows\\system32\\wptaskscheduler.dll") Region: id = 1754 start_va = 0x7ffd064f0000 end_va = 0x7ffd06503fff monitored = 0 entry_point = 0x7ffd064f2a00 region_type = mapped_file name = "bitsigd.dll" filename = "\\Windows\\System32\\bitsigd.dll" (normalized: "c:\\windows\\system32\\bitsigd.dll") Region: id = 1755 start_va = 0x7ffd06510000 end_va = 0x7ffd0652efff monitored = 0 entry_point = 0x7ffd06514960 region_type = mapped_file name = "ncprov.dll" filename = "\\Windows\\System32\\wbem\\NCProv.dll" (normalized: "c:\\windows\\system32\\wbem\\ncprov.dll") Region: id = 1756 start_va = 0x7ffd06530000 end_va = 0x7ffd0653afff monitored = 0 entry_point = 0x7ffd06531de0 region_type = mapped_file name = "bitsperf.dll" filename = "\\Windows\\System32\\bitsperf.dll" (normalized: "c:\\windows\\system32\\bitsperf.dll") Region: id = 1757 start_va = 0x7ffd06540000 end_va = 0x7ffd0654ffff monitored = 0 entry_point = 0x7ffd06542c60 region_type = mapped_file name = "usermgrcli.dll" filename = "\\Windows\\System32\\usermgrcli.dll" (normalized: "c:\\windows\\system32\\usermgrcli.dll") Region: id = 1758 start_va = 0x7ffd06580000 end_va = 0x7ffd065edfff monitored = 0 entry_point = 0x7ffd06587f60 region_type = mapped_file name = "taskcomp.dll" filename = "\\Windows\\System32\\taskcomp.dll" (normalized: "c:\\windows\\system32\\taskcomp.dll") Region: id = 1759 start_va = 0x7ffd06610000 end_va = 0x7ffd06620fff monitored = 0 entry_point = 0x7ffd06613320 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 1760 start_va = 0x7ffd06630000 end_va = 0x7ffd06670fff monitored = 0 entry_point = 0x7ffd06647eb0 region_type = mapped_file name = "ubpm.dll" filename = "\\Windows\\System32\\ubpm.dll" (normalized: "c:\\windows\\system32\\ubpm.dll") Region: id = 1761 start_va = 0x7ffd06680000 end_va = 0x7ffd0677bfff monitored = 0 entry_point = 0x7ffd066b6df0 region_type = mapped_file name = "schedsvc.dll" filename = "\\Windows\\System32\\schedsvc.dll" (normalized: "c:\\windows\\system32\\schedsvc.dll") Region: id = 1762 start_va = 0x7ffd06780000 end_va = 0x7ffd0683efff monitored = 0 entry_point = 0x7ffd067a1c50 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 1763 start_va = 0x7ffd06870000 end_va = 0x7ffd068a5fff monitored = 0 entry_point = 0x7ffd06880070 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 1764 start_va = 0x7ffd07100000 end_va = 0x7ffd07109fff monitored = 0 entry_point = 0x7ffd07101660 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 1765 start_va = 0x7ffd07110000 end_va = 0x7ffd07127fff monitored = 0 entry_point = 0x7ffd07115910 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 1766 start_va = 0x7ffd07130000 end_va = 0x7ffd0727cfff monitored = 0 entry_point = 0x7ffd07173da0 region_type = mapped_file name = "gpsvc.dll" filename = "\\Windows\\System32\\gpsvc.dll" (normalized: "c:\\windows\\system32\\gpsvc.dll") Region: id = 1767 start_va = 0x7ffd07cf0000 end_va = 0x7ffd07d68fff monitored = 0 entry_point = 0x7ffd07d0fb90 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 1768 start_va = 0x7ffd07f20000 end_va = 0x7ffd083b2fff monitored = 0 entry_point = 0x7ffd07f2f760 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 1769 start_va = 0x7ffd083c0000 end_va = 0x7ffd08426fff monitored = 0 entry_point = 0x7ffd083de710 region_type = mapped_file name = "bcp47langs.dll" filename = "\\Windows\\System32\\BCP47Langs.dll" (normalized: "c:\\windows\\system32\\bcp47langs.dll") Region: id = 1770 start_va = 0x7ffd08480000 end_va = 0x7ffd08487fff monitored = 0 entry_point = 0x7ffd084813e0 region_type = mapped_file name = "dabapi.dll" filename = "\\Windows\\System32\\dabapi.dll" (normalized: "c:\\windows\\system32\\dabapi.dll") Region: id = 1771 start_va = 0x7ffd084c0000 end_va = 0x7ffd08645fff monitored = 0 entry_point = 0x7ffd0850d700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 1772 start_va = 0x7ffd08650000 end_va = 0x7ffd0866bfff monitored = 0 entry_point = 0x7ffd086537a0 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 1773 start_va = 0x7ffd086b0000 end_va = 0x7ffd086c2fff monitored = 0 entry_point = 0x7ffd086b2760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 1774 start_va = 0x7ffd08820000 end_va = 0x7ffd0885ffff monitored = 0 entry_point = 0x7ffd08831960 region_type = mapped_file name = "brokerlib.dll" filename = "\\Windows\\System32\\BrokerLib.dll" (normalized: "c:\\windows\\system32\\brokerlib.dll") Region: id = 1775 start_va = 0x7ffd08990000 end_va = 0x7ffd089b6fff monitored = 0 entry_point = 0x7ffd08997940 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 1776 start_va = 0x7ffd089e0000 end_va = 0x7ffd08a89fff monitored = 0 entry_point = 0x7ffd08a07910 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 1777 start_va = 0x7ffd08a90000 end_va = 0x7ffd08b8ffff monitored = 0 entry_point = 0x7ffd08ad0f80 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 1778 start_va = 0x7ffd08c20000 end_va = 0x7ffd08c2bfff monitored = 0 entry_point = 0x7ffd08c22480 region_type = mapped_file name = "sysntfy.dll" filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll") Region: id = 1779 start_va = 0x7ffd08cf0000 end_va = 0x7ffd08d21fff monitored = 0 entry_point = 0x7ffd08d02340 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll") Region: id = 1780 start_va = 0x7ffd08f60000 end_va = 0x7ffd08f6bfff monitored = 0 entry_point = 0x7ffd08f62790 region_type = mapped_file name = "hid.dll" filename = "\\Windows\\System32\\hid.dll" (normalized: "c:\\windows\\system32\\hid.dll") Region: id = 1781 start_va = 0x7ffd08f70000 end_va = 0x7ffd08f93fff monitored = 0 entry_point = 0x7ffd08f73260 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 1782 start_va = 0x7ffd09110000 end_va = 0x7ffd09203fff monitored = 0 entry_point = 0x7ffd0911a960 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 1783 start_va = 0x7ffd09260000 end_va = 0x7ffd092a8fff monitored = 0 entry_point = 0x7ffd0926a090 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 1784 start_va = 0x7ffd09380000 end_va = 0x7ffd0938bfff monitored = 0 entry_point = 0x7ffd093827e0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 1785 start_va = 0x7ffd09460000 end_va = 0x7ffd09490fff monitored = 0 entry_point = 0x7ffd09467d10 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 1786 start_va = 0x7ffd094c0000 end_va = 0x7ffd09539fff monitored = 0 entry_point = 0x7ffd094e1a50 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 1787 start_va = 0x7ffd09580000 end_va = 0x7ffd095b3fff monitored = 0 entry_point = 0x7ffd0959ae70 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1788 start_va = 0x7ffd095c0000 end_va = 0x7ffd095c9fff monitored = 0 entry_point = 0x7ffd095c1830 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll") Region: id = 1789 start_va = 0x7ffd096d0000 end_va = 0x7ffd096eefff monitored = 0 entry_point = 0x7ffd096d5d30 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 1790 start_va = 0x7ffd09840000 end_va = 0x7ffd0989bfff monitored = 0 entry_point = 0x7ffd09856f70 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 1791 start_va = 0x7ffd098f0000 end_va = 0x7ffd09906fff monitored = 0 entry_point = 0x7ffd098f79d0 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1792 start_va = 0x7ffd09a10000 end_va = 0x7ffd09a1afff monitored = 0 entry_point = 0x7ffd09a119a0 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1793 start_va = 0x7ffd09a50000 end_va = 0x7ffd09a70fff monitored = 0 entry_point = 0x7ffd09a60250 region_type = mapped_file name = "joinutil.dll" filename = "\\Windows\\System32\\joinutil.dll" (normalized: "c:\\windows\\system32\\joinutil.dll") Region: id = 1794 start_va = 0x7ffd09aa0000 end_va = 0x7ffd09ad9fff monitored = 0 entry_point = 0x7ffd09aa8d20 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll") Region: id = 1795 start_va = 0x7ffd09ae0000 end_va = 0x7ffd09b06fff monitored = 0 entry_point = 0x7ffd09af0aa0 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 1796 start_va = 0x7ffd09bf0000 end_va = 0x7ffd09c1cfff monitored = 0 entry_point = 0x7ffd09c09d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1797 start_va = 0x7ffd09d80000 end_va = 0x7ffd09dd5fff monitored = 0 entry_point = 0x7ffd09d90bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 1798 start_va = 0x7ffd09de0000 end_va = 0x7ffd09df8fff monitored = 0 entry_point = 0x7ffd09de5e10 region_type = mapped_file name = "eventaggregation.dll" filename = "\\Windows\\System32\\EventAggregation.dll" (normalized: "c:\\windows\\system32\\eventaggregation.dll") Region: id = 1799 start_va = 0x7ffd09e00000 end_va = 0x7ffd09e28fff monitored = 0 entry_point = 0x7ffd09e14530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1800 start_va = 0x7ffd09e30000 end_va = 0x7ffd09ec8fff monitored = 0 entry_point = 0x7ffd09e5f4e0 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 1801 start_va = 0x7ffd09f70000 end_va = 0x7ffd09f83fff monitored = 0 entry_point = 0x7ffd09f752e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1802 start_va = 0x7ffd09f90000 end_va = 0x7ffd09fdafff monitored = 0 entry_point = 0x7ffd09f935f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 1803 start_va = 0x7ffd09fe0000 end_va = 0x7ffd09feffff monitored = 0 entry_point = 0x7ffd09fe56e0 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1804 start_va = 0x7ffd09ff0000 end_va = 0x7ffd09ffefff monitored = 0 entry_point = 0x7ffd09ff3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 1805 start_va = 0x7ffd0a000000 end_va = 0x7ffd0a069fff monitored = 0 entry_point = 0x7ffd0a036d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1806 start_va = 0x7ffd0a070000 end_va = 0x7ffd0a257fff monitored = 0 entry_point = 0x7ffd0a09ba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1807 start_va = 0x7ffd0a260000 end_va = 0x7ffd0a314fff monitored = 0 entry_point = 0x7ffd0a2a22e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 1808 start_va = 0x7ffd0a320000 end_va = 0x7ffd0a963fff monitored = 0 entry_point = 0x7ffd0a4e64b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 1809 start_va = 0x7ffd0a970000 end_va = 0x7ffd0a986fff monitored = 0 entry_point = 0x7ffd0a971390 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 1810 start_va = 0x7ffd0a990000 end_va = 0x7ffd0ab56fff monitored = 0 entry_point = 0x7ffd0a9edb80 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1811 start_va = 0x7ffd0ab60000 end_va = 0x7ffd0abb4fff monitored = 0 entry_point = 0x7ffd0ab77970 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 1812 start_va = 0x7ffd0abc0000 end_va = 0x7ffd0ac45fff monitored = 0 entry_point = 0x7ffd0abcd8f0 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 1813 start_va = 0x7ffd0ac50000 end_va = 0x7ffd0ac92fff monitored = 0 entry_point = 0x7ffd0ac64b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1814 start_va = 0x7ffd0ad50000 end_va = 0x7ffd0ae10fff monitored = 0 entry_point = 0x7ffd0ad70da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1815 start_va = 0x7ffd0ae20000 end_va = 0x7ffd0ae7afff monitored = 0 entry_point = 0x7ffd0ae338b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1816 start_va = 0x7ffd0ae80000 end_va = 0x7ffd0afc2fff monitored = 0 entry_point = 0x7ffd0aea8210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1817 start_va = 0x7ffd0afd0000 end_va = 0x7ffd0b03afff monitored = 0 entry_point = 0x7ffd0afe90c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1818 start_va = 0x7ffd0b040000 end_va = 0x7ffd0b0dcfff monitored = 0 entry_point = 0x7ffd0b0478a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1819 start_va = 0x7ffd0b140000 end_va = 0x7ffd0b1e6fff monitored = 0 entry_point = 0x7ffd0b1558d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1820 start_va = 0x7ffd0b1f0000 end_va = 0x7ffd0b1f7fff monitored = 0 entry_point = 0x7ffd0b1f1ea0 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1821 start_va = 0x7ffd0b2b0000 end_va = 0x7ffd0b30bfff monitored = 0 entry_point = 0x7ffd0b2cb720 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 1822 start_va = 0x7ffd0b310000 end_va = 0x7ffd0b361fff monitored = 0 entry_point = 0x7ffd0b31f530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1823 start_va = 0x7ffd0b370000 end_va = 0x7ffd0b48bfff monitored = 0 entry_point = 0x7ffd0b3b02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1824 start_va = 0x7ffd0b490000 end_va = 0x7ffd0b5e5fff monitored = 0 entry_point = 0x7ffd0b49a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1825 start_va = 0x7ffd0b5f0000 end_va = 0x7ffd0b696fff monitored = 0 entry_point = 0x7ffd0b5fb4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1826 start_va = 0x7ffd0b850000 end_va = 0x7ffd0b9d5fff monitored = 0 entry_point = 0x7ffd0b89ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1827 start_va = 0x7ffd0bb70000 end_va = 0x7ffd0bf98fff monitored = 0 entry_point = 0x7ffd0bb98740 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 1828 start_va = 0x7ffd0bfa0000 end_va = 0x7ffd0c21cfff monitored = 0 entry_point = 0x7ffd0c074970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 1829 start_va = 0x7ffd0c220000 end_va = 0x7ffd0c2ccfff monitored = 0 entry_point = 0x7ffd0c2381a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1830 start_va = 0x7ffd0c2d0000 end_va = 0x7ffd0d82efff monitored = 0 entry_point = 0x7ffd0c4311f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 1831 start_va = 0x7ffd0d950000 end_va = 0x7ffd0db10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1845 start_va = 0x7600000 end_va = 0x76fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007600000" filename = "" Region: id = 1846 start_va = 0x7700000 end_va = 0x77fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007700000" filename = "" Region: id = 1847 start_va = 0x7800000 end_va = 0x78fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007800000" filename = "" Region: id = 1848 start_va = 0x7900000 end_va = 0x79fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007900000" filename = "" Region: id = 1936 start_va = 0x120000 end_va = 0x124fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2556 start_va = 0x120000 end_va = 0x122fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2558 start_va = 0x120000 end_va = 0x122fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2565 start_va = 0x7a00000 end_va = 0x7afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007a00000" filename = "" Region: id = 2566 start_va = 0x120000 end_va = 0x121fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2567 start_va = 0x160000 end_va = 0x162fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 2568 start_va = 0x160000 end_va = 0x162fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 2569 start_va = 0x160000 end_va = 0x162fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Thread: id = 37 os_tid = 0x13ec Thread: id = 38 os_tid = 0x11a8 Thread: id = 39 os_tid = 0x11a4 Thread: id = 40 os_tid = 0x1080 Thread: id = 41 os_tid = 0x604 Thread: id = 42 os_tid = 0xb8 Thread: id = 43 os_tid = 0xadc Thread: id = 44 os_tid = 0x6d0 Thread: id = 45 os_tid = 0x610 Thread: id = 46 os_tid = 0x300 Thread: id = 47 os_tid = 0x6dc Thread: id = 48 os_tid = 0x6d4 Thread: id = 49 os_tid = 0xae0 Thread: id = 50 os_tid = 0x284 Thread: id = 51 os_tid = 0x524 Thread: id = 52 os_tid = 0x7a4 Thread: id = 53 os_tid = 0x784 Thread: id = 54 os_tid = 0x6b8 Thread: id = 55 os_tid = 0x5bc Thread: id = 56 os_tid = 0x7ac Thread: id = 57 os_tid = 0x748 Thread: id = 58 os_tid = 0x764 Thread: id = 59 os_tid = 0x1c4 Thread: id = 60 os_tid = 0xb48 Thread: id = 61 os_tid = 0x4f4 Thread: id = 62 os_tid = 0x338 Thread: id = 63 os_tid = 0x2fc Thread: id = 64 os_tid = 0xb8c Thread: id = 65 os_tid = 0xaa8 Thread: id = 66 os_tid = 0x72c Thread: id = 67 os_tid = 0x9fc Thread: id = 68 os_tid = 0xbcc Thread: id = 69 os_tid = 0x82c Thread: id = 70 os_tid = 0x90c Thread: id = 71 os_tid = 0x7f8 Thread: id = 72 os_tid = 0x904 Thread: id = 73 os_tid = 0x4a8 Thread: id = 74 os_tid = 0x580 Thread: id = 75 os_tid = 0xb18 Thread: id = 76 os_tid = 0x998 Thread: id = 77 os_tid = 0x994 Thread: id = 78 os_tid = 0x990 Thread: id = 79 os_tid = 0x910 Thread: id = 80 os_tid = 0x8fc Thread: id = 81 os_tid = 0x8f0 Thread: id = 82 os_tid = 0x8c0 Thread: id = 83 os_tid = 0x8b4 Thread: id = 84 os_tid = 0x8a8 Thread: id = 85 os_tid = 0x898 Thread: id = 86 os_tid = 0x87c Thread: id = 87 os_tid = 0x858 Thread: id = 88 os_tid = 0x850 Thread: id = 89 os_tid = 0x84c Thread: id = 90 os_tid = 0x81c Thread: id = 91 os_tid = 0x744 Thread: id = 92 os_tid = 0x574 Thread: id = 93 os_tid = 0x500 Thread: id = 94 os_tid = 0x434 Thread: id = 95 os_tid = 0x488 Thread: id = 96 os_tid = 0x6f8 Thread: id = 97 os_tid = 0x698 Thread: id = 98 os_tid = 0x54c Thread: id = 99 os_tid = 0x4cc Thread: id = 100 os_tid = 0x4c8 Thread: id = 101 os_tid = 0x4b0 Thread: id = 102 os_tid = 0x60 Thread: id = 103 os_tid = 0x2f0 Thread: id = 104 os_tid = 0x164 Thread: id = 105 os_tid = 0x154 Thread: id = 106 os_tid = 0x184 Thread: id = 107 os_tid = 0x190 Thread: id = 108 os_tid = 0x12c Thread: id = 109 os_tid = 0xfc Thread: id = 110 os_tid = 0x3f4 Thread: id = 111 os_tid = 0x3f0 Thread: id = 112 os_tid = 0x3d4 Thread: id = 113 os_tid = 0x360 Thread: id = 132 os_tid = 0x10c8 Thread: id = 133 os_tid = 0x10c4 Thread: id = 134 os_tid = 0x10bc Thread: id = 135 os_tid = 0x854 Thread: id = 136 os_tid = 0x7e4 Process: id = "6" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x7c08f000" os_pid = "0x10d4" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0x274" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:00058241" [0xc000000f] Region: id = 1849 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1850 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1851 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1852 start_va = 0x50000 end_va = 0xcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1853 start_va = 0xd0000 end_va = 0xd3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 1854 start_va = 0xe0000 end_va = 0xe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 1855 start_va = 0xf0000 end_va = 0xf1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 1856 start_va = 0x100000 end_va = 0x1bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1857 start_va = 0x1c0000 end_va = 0x1c6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 1858 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 1859 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1860 start_va = 0x1f0000 end_va = 0x1f4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 1861 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 1862 start_va = 0x400000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 1863 start_va = 0x480000 end_va = 0x480fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000480000" filename = "" Region: id = 1864 start_va = 0x490000 end_va = 0x50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000490000" filename = "" Region: id = 1865 start_va = 0x510000 end_va = 0x510fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000510000" filename = "" Region: id = 1866 start_va = 0x520000 end_va = 0x61ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 1867 start_va = 0x620000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000620000" filename = "" Region: id = 1868 start_va = 0x6e0000 end_va = 0x6e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 1869 start_va = 0x700000 end_va = 0x702fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "security.dll" filename = "\\Windows\\System32\\security.dll" (normalized: "c:\\windows\\system32\\security.dll") Region: id = 1870 start_va = 0x730000 end_va = 0x732fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cimwin32.dll.mui" filename = "\\Windows\\System32\\wbem\\en-US\\cimwin32.dll.mui" (normalized: "c:\\windows\\system32\\wbem\\en-us\\cimwin32.dll.mui") Region: id = 1871 start_va = 0x750000 end_va = 0x75ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000750000" filename = "" Region: id = 1872 start_va = 0x760000 end_va = 0xa96fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1873 start_va = 0xaa0000 end_va = 0xc27fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000aa0000" filename = "" Region: id = 1874 start_va = 0xc30000 end_va = 0xdb0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c30000" filename = "" Region: id = 1875 start_va = 0xdc0000 end_va = 0xebffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000dc0000" filename = "" Region: id = 1876 start_va = 0xec0000 end_va = 0xf3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ec0000" filename = "" Region: id = 1877 start_va = 0xf40000 end_va = 0xfbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f40000" filename = "" Region: id = 1878 start_va = 0xfc0000 end_va = 0x103ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fc0000" filename = "" Region: id = 1879 start_va = 0x1040000 end_va = 0x10bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001040000" filename = "" Region: id = 1880 start_va = 0x10c0000 end_va = 0x113ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000010c0000" filename = "" Region: id = 1881 start_va = 0x1140000 end_va = 0x11bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001140000" filename = "" Region: id = 1882 start_va = 0x11c0000 end_va = 0x123ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000011c0000" filename = "" Region: id = 1883 start_va = 0x1240000 end_va = 0x133ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001240000" filename = "" Region: id = 1884 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1885 start_va = 0x180000000 end_va = 0x180002fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wmi.dll" filename = "\\Windows\\System32\\wmi.dll" (normalized: "c:\\windows\\system32\\wmi.dll") Region: id = 1886 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 1887 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 1888 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 1889 start_va = 0x7ff6d5fc0000 end_va = 0x7ff6d603ffff monitored = 0 entry_point = 0x7ff6d5fd5f50 region_type = mapped_file name = "wmiprvse.exe" filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe") Region: id = 1890 start_va = 0x7ffcf16a0000 end_va = 0x7ffcf186efff monitored = 1 entry_point = 0x7ffcf16c7df0 region_type = mapped_file name = "cimwin32.dll" filename = "\\Windows\\System32\\wbem\\cimwin32.dll" (normalized: "c:\\windows\\system32\\wbem\\cimwin32.dll") Region: id = 1891 start_va = 0x7ffcf45b0000 end_va = 0x7ffcf45fdfff monitored = 0 entry_point = 0x7ffcf45c1ce0 region_type = mapped_file name = "framedynos.dll" filename = "\\Windows\\System32\\framedynos.dll" (normalized: "c:\\windows\\system32\\framedynos.dll") Region: id = 1892 start_va = 0x7ffcfc5f0000 end_va = 0x7ffcfc605fff monitored = 0 entry_point = 0x7ffcfc5f55e0 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 1893 start_va = 0x7ffcfc7c0000 end_va = 0x7ffcfc7e4fff monitored = 0 entry_point = 0x7ffcfc7c9900 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 1894 start_va = 0x7ffcfc7f0000 end_va = 0x7ffcfc8e5fff monitored = 0 entry_point = 0x7ffcfc829590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 1895 start_va = 0x7ffcfca60000 end_va = 0x7ffcfca70fff monitored = 0 entry_point = 0x7ffcfca62fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 1896 start_va = 0x7ffcfcbb0000 end_va = 0x7ffcfcbc3fff monitored = 0 entry_point = 0x7ffcfcbb1800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 1897 start_va = 0x7ffcfccd0000 end_va = 0x7ffcfccddfff monitored = 0 entry_point = 0x7ffcfccd1da0 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\System32\\winbrand.dll" (normalized: "c:\\windows\\system32\\winbrand.dll") Region: id = 1898 start_va = 0x7ffcfcd40000 end_va = 0x7ffcfcd4bfff monitored = 0 entry_point = 0x7ffcfcd435c0 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 1899 start_va = 0x7ffcfcd50000 end_va = 0x7ffcfcd63fff monitored = 0 entry_point = 0x7ffcfcd51310 region_type = mapped_file name = "browcli.dll" filename = "\\Windows\\System32\\browcli.dll" (normalized: "c:\\windows\\system32\\browcli.dll") Region: id = 1900 start_va = 0x7ffcfe9e0000 end_va = 0x7ffcfea5efff monitored = 1 entry_point = 0x7ffcfe9f7110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 1901 start_va = 0x7ffcff8d0000 end_va = 0x7ffcff8f5fff monitored = 0 entry_point = 0x7ffcff8d1cf0 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 1902 start_va = 0x7ffd01bc0000 end_va = 0x7ffd01bd1fff monitored = 0 entry_point = 0x7ffd01bc3580 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 1903 start_va = 0x7ffd02720000 end_va = 0x7ffd0272afff monitored = 0 entry_point = 0x7ffd027212b0 region_type = mapped_file name = "schedcli.dll" filename = "\\Windows\\System32\\schedcli.dll" (normalized: "c:\\windows\\system32\\schedcli.dll") Region: id = 1904 start_va = 0x7ffd03730000 end_va = 0x7ffd03748fff monitored = 0 entry_point = 0x7ffd03734520 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 1905 start_va = 0x7ffd057a0000 end_va = 0x7ffd057b5fff monitored = 0 entry_point = 0x7ffd057a1b60 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 1906 start_va = 0x7ffd063e0000 end_va = 0x7ffd0641dfff monitored = 0 entry_point = 0x7ffd063ea050 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 1907 start_va = 0x7ffd06610000 end_va = 0x7ffd06620fff monitored = 0 entry_point = 0x7ffd06613320 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 1908 start_va = 0x7ffd07100000 end_va = 0x7ffd07109fff monitored = 0 entry_point = 0x7ffd07101660 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 1909 start_va = 0x7ffd086b0000 end_va = 0x7ffd086c2fff monitored = 0 entry_point = 0x7ffd086b2760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 1910 start_va = 0x7ffd08990000 end_va = 0x7ffd089b6fff monitored = 0 entry_point = 0x7ffd08997940 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 1911 start_va = 0x7ffd09380000 end_va = 0x7ffd0938bfff monitored = 0 entry_point = 0x7ffd093827e0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 1912 start_va = 0x7ffd094c0000 end_va = 0x7ffd09539fff monitored = 0 entry_point = 0x7ffd094e1a50 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 1913 start_va = 0x7ffd09bf0000 end_va = 0x7ffd09c1cfff monitored = 0 entry_point = 0x7ffd09c09d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1914 start_va = 0x7ffd09d80000 end_va = 0x7ffd09dd5fff monitored = 0 entry_point = 0x7ffd09d90bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 1915 start_va = 0x7ffd09e00000 end_va = 0x7ffd09e28fff monitored = 0 entry_point = 0x7ffd09e14530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1916 start_va = 0x7ffd09f90000 end_va = 0x7ffd09fdafff monitored = 0 entry_point = 0x7ffd09f935f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 1917 start_va = 0x7ffd09fe0000 end_va = 0x7ffd09feffff monitored = 0 entry_point = 0x7ffd09fe56e0 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1918 start_va = 0x7ffd09ff0000 end_va = 0x7ffd09ffefff monitored = 0 entry_point = 0x7ffd09ff3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 1919 start_va = 0x7ffd0a000000 end_va = 0x7ffd0a069fff monitored = 0 entry_point = 0x7ffd0a036d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1920 start_va = 0x7ffd0a070000 end_va = 0x7ffd0a257fff monitored = 0 entry_point = 0x7ffd0a09ba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1921 start_va = 0x7ffd0a970000 end_va = 0x7ffd0a986fff monitored = 0 entry_point = 0x7ffd0a971390 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 1922 start_va = 0x7ffd0a990000 end_va = 0x7ffd0ab56fff monitored = 0 entry_point = 0x7ffd0a9edb80 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1923 start_va = 0x7ffd0ac50000 end_va = 0x7ffd0ac92fff monitored = 0 entry_point = 0x7ffd0ac64b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1924 start_va = 0x7ffd0ad50000 end_va = 0x7ffd0ae10fff monitored = 0 entry_point = 0x7ffd0ad70da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1925 start_va = 0x7ffd0ae20000 end_va = 0x7ffd0ae7afff monitored = 0 entry_point = 0x7ffd0ae338b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1926 start_va = 0x7ffd0afd0000 end_va = 0x7ffd0b03afff monitored = 0 entry_point = 0x7ffd0afe90c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1927 start_va = 0x7ffd0b040000 end_va = 0x7ffd0b0dcfff monitored = 0 entry_point = 0x7ffd0b0478a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1928 start_va = 0x7ffd0b140000 end_va = 0x7ffd0b1e6fff monitored = 0 entry_point = 0x7ffd0b1558d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1929 start_va = 0x7ffd0b370000 end_va = 0x7ffd0b48bfff monitored = 0 entry_point = 0x7ffd0b3b02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1930 start_va = 0x7ffd0b490000 end_va = 0x7ffd0b5e5fff monitored = 0 entry_point = 0x7ffd0b49a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1931 start_va = 0x7ffd0b5f0000 end_va = 0x7ffd0b696fff monitored = 0 entry_point = 0x7ffd0b5fb4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1932 start_va = 0x7ffd0b850000 end_va = 0x7ffd0b9d5fff monitored = 0 entry_point = 0x7ffd0b89ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1933 start_va = 0x7ffd0bfa0000 end_va = 0x7ffd0c21cfff monitored = 0 entry_point = 0x7ffd0c074970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 1934 start_va = 0x7ffd0c220000 end_va = 0x7ffd0c2ccfff monitored = 0 entry_point = 0x7ffd0c2381a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1935 start_va = 0x7ffd0d950000 end_va = 0x7ffd0db10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1937 start_va = 0x6f0000 end_va = 0x6f4fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006f0000" filename = "" Region: id = 1938 start_va = 0x1340000 end_va = 0x143ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001340000" filename = "" Region: id = 1939 start_va = 0x6f0000 end_va = 0x6f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 1940 start_va = 0x710000 end_va = 0x725fff monitored = 0 entry_point = 0x720420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 1941 start_va = 0x6f0000 end_va = 0x6f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 1942 start_va = 0x710000 end_va = 0x725fff monitored = 0 entry_point = 0x720420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 1943 start_va = 0x6f0000 end_va = 0x6f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 1944 start_va = 0x710000 end_va = 0x725fff monitored = 0 entry_point = 0x720420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 1945 start_va = 0x6f0000 end_va = 0x6f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 1946 start_va = 0x710000 end_va = 0x725fff monitored = 0 entry_point = 0x720420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 1947 start_va = 0x6f0000 end_va = 0x6f5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "workflowservicehostperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui") Region: id = 1948 start_va = 0x710000 end_va = 0x729fff monitored = 1 entry_point = 0x711190 region_type = mapped_file name = "workflowservicehostperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll") Region: id = 1949 start_va = 0x6f0000 end_va = 0x6f5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "workflowservicehostperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui") Region: id = 1950 start_va = 0x710000 end_va = 0x729fff monitored = 1 entry_point = 0x711190 region_type = mapped_file name = "workflowservicehostperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll") Region: id = 1951 start_va = 0x6f0000 end_va = 0x6f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsm.dll.mui" filename = "\\Windows\\System32\\en-US\\lsm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\lsm.dll.mui") Region: id = 1952 start_va = 0x1440000 end_va = 0x14fbfff monitored = 0 entry_point = 0x147c480 region_type = mapped_file name = "lsm.dll" filename = "\\Windows\\System32\\lsm.dll" (normalized: "c:\\windows\\system32\\lsm.dll") Region: id = 1953 start_va = 0x6f0000 end_va = 0x6f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsm.dll.mui" filename = "\\Windows\\System32\\en-US\\lsm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\lsm.dll.mui") Region: id = 1954 start_va = 0x1440000 end_va = 0x14fbfff monitored = 0 entry_point = 0x147c480 region_type = mapped_file name = "lsm.dll" filename = "\\Windows\\System32\\lsm.dll" (normalized: "c:\\windows\\system32\\lsm.dll") Region: id = 1955 start_va = 0x6f0000 end_va = 0x6f4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 1956 start_va = 0x1440000 end_va = 0x146afff monitored = 0 entry_point = 0x145d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 1957 start_va = 0x6f0000 end_va = 0x6f4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 1958 start_va = 0x1440000 end_va = 0x146afff monitored = 0 entry_point = 0x145d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 1959 start_va = 0x6f0000 end_va = 0x6f4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 1960 start_va = 0x1440000 end_va = 0x146afff monitored = 0 entry_point = 0x145d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 1961 start_va = 0x6f0000 end_va = 0x6f4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 1962 start_va = 0x1440000 end_va = 0x146afff monitored = 0 entry_point = 0x145d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 1963 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 1964 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1965 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 1966 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1967 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 1968 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1969 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 1970 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1971 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 1972 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1973 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 1974 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1975 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 1976 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1977 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 1978 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1979 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 1980 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1981 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 1982 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1983 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 1984 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1985 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 1986 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1987 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 1988 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1989 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 1990 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1991 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 1992 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1993 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 1994 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1995 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 1996 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1997 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 1998 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1999 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2000 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2001 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2002 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2003 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2004 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2005 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2006 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2007 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2008 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2009 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2010 start_va = 0x1440000 end_va = 0x14a6fff monitored = 0 entry_point = 0x14463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2011 start_va = 0x6f0000 end_va = 0x6f3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pnrpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\pnrpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\pnrpsvc.dll.mui") Region: id = 2012 start_va = 0x1440000 end_va = 0x1499fff monitored = 0 entry_point = 0x1485b00 region_type = mapped_file name = "pnrpsvc.dll" filename = "\\Windows\\System32\\pnrpsvc.dll" (normalized: "c:\\windows\\system32\\pnrpsvc.dll") Region: id = 2013 start_va = 0x6f0000 end_va = 0x6f3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pnrpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\pnrpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\pnrpsvc.dll.mui") Region: id = 2014 start_va = 0x1440000 end_va = 0x1499fff monitored = 0 entry_point = 0x1485b00 region_type = mapped_file name = "pnrpsvc.dll" filename = "\\Windows\\System32\\pnrpsvc.dll" (normalized: "c:\\windows\\system32\\pnrpsvc.dll") Region: id = 2015 start_va = 0x6f0000 end_va = 0x6f0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "azroles.dll.mui" filename = "\\Windows\\System32\\en-US\\azroles.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\azroles.dll.mui") Region: id = 2016 start_va = 0x1440000 end_va = 0x1521fff monitored = 0 entry_point = 0x149d100 region_type = mapped_file name = "azroles.dll" filename = "\\Windows\\System32\\azroles.dll" (normalized: "c:\\windows\\system32\\azroles.dll") Region: id = 2017 start_va = 0x6f0000 end_va = 0x6f0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "azroles.dll.mui" filename = "\\Windows\\System32\\en-US\\azroles.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\azroles.dll.mui") Region: id = 2018 start_va = 0x1440000 end_va = 0x1521fff monitored = 0 entry_point = 0x149d100 region_type = mapped_file name = "azroles.dll" filename = "\\Windows\\System32\\azroles.dll" (normalized: "c:\\windows\\system32\\azroles.dll") Region: id = 2019 start_va = 0x1440000 end_va = 0x1523fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll" filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll") Region: id = 2020 start_va = 0x1530000 end_va = 0x1558fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll.mui" filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui") Region: id = 2021 start_va = 0x1440000 end_va = 0x1523fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll" filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll") Region: id = 2022 start_va = 0x1530000 end_va = 0x1558fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll.mui" filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui") Region: id = 2023 start_va = 0x6f0000 end_va = 0x6f5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "afd.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui") Region: id = 2024 start_va = 0x1440000 end_va = 0x14d2fff monitored = 0 entry_point = 0x14b9000 region_type = mapped_file name = "afd.sys" filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys") Region: id = 2025 start_va = 0x6f0000 end_va = 0x6f5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "afd.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui") Region: id = 2026 start_va = 0x1440000 end_va = 0x14d2fff monitored = 0 entry_point = 0x14b9000 region_type = mapped_file name = "afd.sys" filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys") Region: id = 2027 start_va = 0x6f0000 end_va = 0x6f5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fvevol.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui") Region: id = 2028 start_va = 0x1440000 end_va = 0x14e0fff monitored = 0 entry_point = 0x14d3000 region_type = mapped_file name = "fvevol.sys" filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys") Region: id = 2029 start_va = 0x6f0000 end_va = 0x6f5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fvevol.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui") Region: id = 2030 start_va = 0x1440000 end_va = 0x14e0fff monitored = 0 entry_point = 0x14d3000 region_type = mapped_file name = "fvevol.sys" filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys") Region: id = 2031 start_va = 0x6f0000 end_va = 0x6fafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 2032 start_va = 0x1440000 end_va = 0x14c5fff monitored = 0 entry_point = 0x14b1000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 2033 start_va = 0x6f0000 end_va = 0x6fafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 2034 start_va = 0x1440000 end_va = 0x14c5fff monitored = 0 entry_point = 0x14b1000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 2035 start_va = 0x6f0000 end_va = 0x6fafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 2036 start_va = 0x1440000 end_va = 0x14c5fff monitored = 0 entry_point = 0x14b1000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 2037 start_va = 0x6f0000 end_va = 0x6fafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 2038 start_va = 0x1440000 end_va = 0x14c5fff monitored = 0 entry_point = 0x14b1000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 2039 start_va = 0x6f0000 end_va = 0x6f5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 2040 start_va = 0x1440000 end_va = 0x14f7fff monitored = 0 entry_point = 0x1441d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 2041 start_va = 0x6f0000 end_va = 0x6f5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 2042 start_va = 0x1440000 end_va = 0x14f7fff monitored = 0 entry_point = 0x1441d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 2043 start_va = 0x6f0000 end_va = 0x6f5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 2044 start_va = 0x1440000 end_va = 0x14f7fff monitored = 0 entry_point = 0x1441d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 2045 start_va = 0x6f0000 end_va = 0x6f5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 2046 start_va = 0x1440000 end_va = 0x14f7fff monitored = 0 entry_point = 0x1441d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 2047 start_va = 0x6f0000 end_va = 0x6fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2048 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2049 start_va = 0x6f0000 end_va = 0x6fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2050 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2051 start_va = 0x6f0000 end_va = 0x6fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2052 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2053 start_va = 0x6f0000 end_va = 0x6fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2054 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2055 start_va = 0x6f0000 end_va = 0x6fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2056 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2057 start_va = 0x6f0000 end_va = 0x6fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2058 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2059 start_va = 0x6f0000 end_va = 0x6fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2060 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2061 start_va = 0x6f0000 end_va = 0x6fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2062 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2063 start_va = 0x6f0000 end_va = 0x6fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2064 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2065 start_va = 0x6f0000 end_va = 0x6fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2066 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2067 start_va = 0x6f0000 end_va = 0x6fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2068 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2069 start_va = 0x6f0000 end_va = 0x6fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2070 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2071 start_va = 0x6f0000 end_va = 0x6fefff monitored = 0 entry_point = 0x6f36e0 region_type = mapped_file name = "dmvsc.sys" filename = "\\Windows\\System32\\drivers\\dmvsc.sys" (normalized: "c:\\windows\\system32\\drivers\\dmvsc.sys") Region: id = 2072 start_va = 0x710000 end_va = 0x711fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dmvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\dmvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\dmvsc.sys.mui") Region: id = 2073 start_va = 0x6f0000 end_va = 0x6fefff monitored = 0 entry_point = 0x6f36e0 region_type = mapped_file name = "dmvsc.sys" filename = "\\Windows\\System32\\drivers\\dmvsc.sys" (normalized: "c:\\windows\\system32\\drivers\\dmvsc.sys") Region: id = 2074 start_va = 0x710000 end_va = 0x711fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dmvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\dmvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\dmvsc.sys.mui") Region: id = 2075 start_va = 0x6f0000 end_va = 0x6fbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 2076 start_va = 0x710000 end_va = 0x72afff monitored = 1 entry_point = 0x711190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 2077 start_va = 0x6f0000 end_va = 0x6fbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 2078 start_va = 0x710000 end_va = 0x72afff monitored = 1 entry_point = 0x711190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 2079 start_va = 0x6f0000 end_va = 0x6fbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 2080 start_va = 0x710000 end_va = 0x72afff monitored = 1 entry_point = 0x711190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 2081 start_va = 0x6f0000 end_va = 0x6fbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 2082 start_va = 0x710000 end_va = 0x72afff monitored = 1 entry_point = 0x711190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 2083 start_va = 0x6f0000 end_va = 0x6fbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 2084 start_va = 0x710000 end_va = 0x72afff monitored = 1 entry_point = 0x711190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 2085 start_va = 0x6f0000 end_va = 0x6fbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 2086 start_va = 0x710000 end_va = 0x72afff monitored = 1 entry_point = 0x711190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 2087 start_va = 0x6f0000 end_va = 0x6f1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 2088 start_va = 0x1440000 end_va = 0x154efff monitored = 0 entry_point = 0x147c010 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 2089 start_va = 0x6f0000 end_va = 0x6f1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 2090 start_va = 0x1440000 end_va = 0x154efff monitored = 0 entry_point = 0x147c010 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 2091 start_va = 0x6f0000 end_va = 0x6f1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 2092 start_va = 0x710000 end_va = 0x725fff monitored = 0 entry_point = 0x713630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 2093 start_va = 0x6f0000 end_va = 0x6f1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 2094 start_va = 0x710000 end_va = 0x725fff monitored = 0 entry_point = 0x713630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 2095 start_va = 0x6f0000 end_va = 0x6f1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 2096 start_va = 0x710000 end_va = 0x725fff monitored = 0 entry_point = 0x713630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 2097 start_va = 0x6f0000 end_va = 0x6f1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 2098 start_va = 0x710000 end_va = 0x725fff monitored = 0 entry_point = 0x713630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 2099 start_va = 0x710000 end_va = 0x726fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcpip.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui") Region: id = 2100 start_va = 0x1440000 end_va = 0x1696fff monitored = 0 entry_point = 0x164ce10 region_type = mapped_file name = "tcpip.sys" filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys") Region: id = 2101 start_va = 0x710000 end_va = 0x726fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcpip.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui") Region: id = 2102 start_va = 0x1440000 end_va = 0x1696fff monitored = 0 entry_point = 0x164ce10 region_type = mapped_file name = "tcpip.sys" filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys") Region: id = 2103 start_va = 0x6f0000 end_va = 0x6f9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 2104 start_va = 0x1440000 end_va = 0x1550fff monitored = 0 entry_point = 0x1531bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 2105 start_va = 0x6f0000 end_va = 0x6f9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 2106 start_va = 0x1440000 end_va = 0x1550fff monitored = 0 entry_point = 0x1531bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 2107 start_va = 0x6f0000 end_va = 0x6f9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 2108 start_va = 0x1440000 end_va = 0x1550fff monitored = 0 entry_point = 0x1531bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 2109 start_va = 0x6f0000 end_va = 0x6f9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 2110 start_va = 0x1440000 end_va = 0x1550fff monitored = 0 entry_point = 0x1531bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 2111 start_va = 0x6f0000 end_va = 0x6f9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 2112 start_va = 0x1440000 end_va = 0x1550fff monitored = 0 entry_point = 0x1531bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 2113 start_va = 0x6f0000 end_va = 0x6f9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 2114 start_va = 0x1440000 end_va = 0x1550fff monitored = 0 entry_point = 0x1531bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 2115 start_va = 0x6f0000 end_va = 0x6fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll") Region: id = 2116 start_va = 0x710000 end_va = 0x71dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui") Region: id = 2117 start_va = 0x6f0000 end_va = 0x6fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll") Region: id = 2118 start_va = 0x710000 end_va = 0x71dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui") Region: id = 2119 start_va = 0x400000 end_va = 0x406fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 2120 start_va = 0x1440000 end_va = 0x1847fff monitored = 0 entry_point = 0x150e3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 2121 start_va = 0x400000 end_va = 0x406fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 2122 start_va = 0x1440000 end_va = 0x1847fff monitored = 0 entry_point = 0x150e3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 2123 start_va = 0x400000 end_va = 0x406fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 2124 start_va = 0x1440000 end_va = 0x1847fff monitored = 0 entry_point = 0x150e3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 2125 start_va = 0x400000 end_va = 0x406fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 2126 start_va = 0x1440000 end_va = 0x1847fff monitored = 0 entry_point = 0x150e3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 2127 start_va = 0x400000 end_va = 0x411fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 2128 start_va = 0x1440000 end_va = 0x14eefff monitored = 0 entry_point = 0x14b7000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 2129 start_va = 0x400000 end_va = 0x411fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 2130 start_va = 0x1440000 end_va = 0x14eefff monitored = 0 entry_point = 0x14b7000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 2131 start_va = 0x400000 end_va = 0x411fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 2132 start_va = 0x1440000 end_va = 0x14eefff monitored = 0 entry_point = 0x14b7000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 2133 start_va = 0x400000 end_va = 0x411fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 2134 start_va = 0x1440000 end_va = 0x14eefff monitored = 0 entry_point = 0x14b7000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 2135 start_va = 0x400000 end_va = 0x411fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 2136 start_va = 0x1440000 end_va = 0x14eefff monitored = 0 entry_point = 0x14b7000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 2137 start_va = 0x400000 end_va = 0x411fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 2138 start_va = 0x1440000 end_va = 0x14eefff monitored = 0 entry_point = 0x14b7000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 2139 start_va = 0x400000 end_va = 0x403fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netlogon.dll.mui" filename = "\\Windows\\System32\\en-US\\netlogon.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\netlogon.dll.mui") Region: id = 2140 start_va = 0x1440000 end_va = 0x1514fff monitored = 0 entry_point = 0x146e0b0 region_type = mapped_file name = "netlogon.dll" filename = "\\Windows\\System32\\netlogon.dll" (normalized: "c:\\windows\\system32\\netlogon.dll") Region: id = 2141 start_va = 0x400000 end_va = 0x403fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netlogon.dll.mui" filename = "\\Windows\\System32\\en-US\\netlogon.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\netlogon.dll.mui") Region: id = 2142 start_va = 0x1440000 end_va = 0x1514fff monitored = 0 entry_point = 0x146e0b0 region_type = mapped_file name = "netlogon.dll" filename = "\\Windows\\System32\\netlogon.dll" (normalized: "c:\\windows\\system32\\netlogon.dll") Region: id = 2143 start_va = 0x400000 end_va = 0x460fff monitored = 0 entry_point = 0x410770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 2144 start_va = 0x470000 end_va = 0x473fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 2145 start_va = 0x400000 end_va = 0x460fff monitored = 0 entry_point = 0x410770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 2146 start_va = 0x470000 end_va = 0x473fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 2147 start_va = 0x400000 end_va = 0x460fff monitored = 0 entry_point = 0x410770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 2148 start_va = 0x470000 end_va = 0x473fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 2149 start_va = 0x400000 end_va = 0x460fff monitored = 0 entry_point = 0x410770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 2150 start_va = 0x470000 end_va = 0x473fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 2151 start_va = 0x400000 end_va = 0x460fff monitored = 0 entry_point = 0x410770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 2152 start_va = 0x470000 end_va = 0x473fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 2153 start_va = 0x400000 end_va = 0x460fff monitored = 0 entry_point = 0x410770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 2154 start_va = 0x470000 end_va = 0x473fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 2155 start_va = 0x400000 end_va = 0x447fff monitored = 0 entry_point = 0x43acf0 region_type = mapped_file name = "drt.dll" filename = "\\Windows\\System32\\drt.dll" (normalized: "c:\\windows\\system32\\drt.dll") Region: id = 2156 start_va = 0x450000 end_va = 0x452fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "drt.dll.mui" filename = "\\Windows\\System32\\en-US\\drt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\drt.dll.mui") Region: id = 2157 start_va = 0x400000 end_va = 0x447fff monitored = 0 entry_point = 0x43acf0 region_type = mapped_file name = "drt.dll" filename = "\\Windows\\System32\\drt.dll" (normalized: "c:\\windows\\system32\\drt.dll") Region: id = 2158 start_va = 0x450000 end_va = 0x452fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "drt.dll.mui" filename = "\\Windows\\System32\\en-US\\drt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\drt.dll.mui") Region: id = 2159 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2160 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2161 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2162 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2163 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2164 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2165 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2166 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2167 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2168 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2169 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2170 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2171 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2172 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2173 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2174 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2175 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2176 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2177 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2178 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2179 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2180 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2181 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2182 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2183 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2184 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2185 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2186 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2187 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2188 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2189 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2190 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2191 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2192 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2193 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2194 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2195 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2196 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2197 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2198 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2199 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2200 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2201 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2202 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2203 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2204 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2205 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2206 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2207 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2208 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2209 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2210 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2211 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2212 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2213 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2214 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2215 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2216 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2217 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2218 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2219 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2220 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2221 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2222 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2223 start_va = 0x400000 end_va = 0x471fff monitored = 0 entry_point = 0x457000 region_type = mapped_file name = "mrxsmb.sys" filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys") Region: id = 2224 start_va = 0x6f0000 end_va = 0x6fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mrxsmb.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui") Region: id = 2225 start_va = 0x400000 end_va = 0x471fff monitored = 0 entry_point = 0x457000 region_type = mapped_file name = "mrxsmb.sys" filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys") Region: id = 2226 start_va = 0x6f0000 end_va = 0x6fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mrxsmb.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui") Region: id = 2227 start_va = 0x400000 end_va = 0x418fff monitored = 0 entry_point = 0x40b610 region_type = mapped_file name = "eqossnap.dll" filename = "\\Windows\\System32\\eqossnap.dll" (normalized: "c:\\windows\\system32\\eqossnap.dll") Region: id = 2228 start_va = 0x420000 end_va = 0x425fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "eqossnap.dll.mui" filename = "\\Windows\\System32\\en-US\\eqossnap.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\eqossnap.dll.mui") Region: id = 2229 start_va = 0x400000 end_va = 0x418fff monitored = 0 entry_point = 0x40b610 region_type = mapped_file name = "eqossnap.dll" filename = "\\Windows\\System32\\eqossnap.dll" (normalized: "c:\\windows\\system32\\eqossnap.dll") Region: id = 2230 start_va = 0x420000 end_va = 0x425fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "eqossnap.dll.mui" filename = "\\Windows\\System32\\en-US\\eqossnap.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\eqossnap.dll.mui") Region: id = 2231 start_va = 0x400000 end_va = 0x407fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "peerdistsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\PeerDistSvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\peerdistsvc.dll.mui") Region: id = 2232 start_va = 0x1440000 end_va = 0x1628fff monitored = 0 entry_point = 0x14415f0 region_type = mapped_file name = "peerdistsvc.dll" filename = "\\Windows\\System32\\PeerDistSvc.dll" (normalized: "c:\\windows\\system32\\peerdistsvc.dll") Region: id = 2233 start_va = 0x400000 end_va = 0x407fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "peerdistsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\PeerDistSvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\peerdistsvc.dll.mui") Region: id = 2234 start_va = 0x1440000 end_va = 0x1628fff monitored = 0 entry_point = 0x14415f0 region_type = mapped_file name = "peerdistsvc.dll" filename = "\\Windows\\System32\\PeerDistSvc.dll" (normalized: "c:\\windows\\system32\\peerdistsvc.dll") Region: id = 2235 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll" filename = "\\Windows\\System32\\WsmRes.dll" (normalized: "c:\\windows\\system32\\wsmres.dll") Region: id = 2236 start_va = 0x420000 end_va = 0x479fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll.mui" filename = "\\Windows\\System32\\en-US\\WsmRes.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wsmres.dll.mui") Region: id = 2237 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll" filename = "\\Windows\\System32\\WsmRes.dll" (normalized: "c:\\windows\\system32\\wsmres.dll") Region: id = 2238 start_va = 0x420000 end_va = 0x479fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll.mui" filename = "\\Windows\\System32\\en-US\\WsmRes.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wsmres.dll.mui") Region: id = 2239 start_va = 0x400000 end_va = 0x401fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mprddm.dll.mui" filename = "\\Windows\\System32\\en-US\\mprddm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mprddm.dll.mui") Region: id = 2240 start_va = 0x1440000 end_va = 0x151ffff monitored = 0 entry_point = 0x14d2eb0 region_type = mapped_file name = "mprddm.dll" filename = "\\Windows\\System32\\mprddm.dll" (normalized: "c:\\windows\\system32\\mprddm.dll") Region: id = 2241 start_va = 0x400000 end_va = 0x401fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mprddm.dll.mui" filename = "\\Windows\\System32\\en-US\\mprddm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mprddm.dll.mui") Region: id = 2242 start_va = 0x1440000 end_va = 0x151ffff monitored = 0 entry_point = 0x14d2eb0 region_type = mapped_file name = "mprddm.dll" filename = "\\Windows\\System32\\mprddm.dll" (normalized: "c:\\windows\\system32\\mprddm.dll") Region: id = 2243 start_va = 0x400000 end_va = 0x415fff monitored = 0 entry_point = 0x410420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 2244 start_va = 0x420000 end_va = 0x422fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 2245 start_va = 0x400000 end_va = 0x415fff monitored = 0 entry_point = 0x410420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 2246 start_va = 0x420000 end_va = 0x422fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 2247 start_va = 0x400000 end_va = 0x415fff monitored = 0 entry_point = 0x410420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 2248 start_va = 0x420000 end_va = 0x422fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 2249 start_va = 0x400000 end_va = 0x415fff monitored = 0 entry_point = 0x410420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 2250 start_va = 0x420000 end_va = 0x422fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 2251 start_va = 0x400000 end_va = 0x419fff monitored = 1 entry_point = 0x401190 region_type = mapped_file name = "workflowservicehostperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll") Region: id = 2252 start_va = 0x420000 end_va = 0x425fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "workflowservicehostperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui") Region: id = 2253 start_va = 0x400000 end_va = 0x419fff monitored = 1 entry_point = 0x401190 region_type = mapped_file name = "workflowservicehostperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll") Region: id = 2254 start_va = 0x420000 end_va = 0x425fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "workflowservicehostperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui") Region: id = 2255 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsm.dll.mui" filename = "\\Windows\\System32\\en-US\\lsm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\lsm.dll.mui") Region: id = 2256 start_va = 0x1440000 end_va = 0x14fbfff monitored = 0 entry_point = 0x147c480 region_type = mapped_file name = "lsm.dll" filename = "\\Windows\\System32\\lsm.dll" (normalized: "c:\\windows\\system32\\lsm.dll") Region: id = 2257 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsm.dll.mui" filename = "\\Windows\\System32\\en-US\\lsm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\lsm.dll.mui") Region: id = 2258 start_va = 0x1440000 end_va = 0x14fbfff monitored = 0 entry_point = 0x147c480 region_type = mapped_file name = "lsm.dll" filename = "\\Windows\\System32\\lsm.dll" (normalized: "c:\\windows\\system32\\lsm.dll") Region: id = 2259 start_va = 0x400000 end_va = 0x42afff monitored = 0 entry_point = 0x41d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 2260 start_va = 0x430000 end_va = 0x434fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 2261 start_va = 0x400000 end_va = 0x42afff monitored = 0 entry_point = 0x41d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 2262 start_va = 0x430000 end_va = 0x434fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 2263 start_va = 0x400000 end_va = 0x42afff monitored = 0 entry_point = 0x41d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 2264 start_va = 0x430000 end_va = 0x434fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 2265 start_va = 0x400000 end_va = 0x42afff monitored = 0 entry_point = 0x41d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 2266 start_va = 0x430000 end_va = 0x434fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 2267 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2268 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2269 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2270 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2271 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2272 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2273 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2274 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2275 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2276 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2277 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2278 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2279 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2280 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2281 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2282 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2283 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2284 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2285 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2286 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2287 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2288 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2289 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2290 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2291 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2292 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2293 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2294 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2295 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2296 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2297 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2298 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2299 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2300 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2301 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2302 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2303 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2304 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2305 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2306 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2307 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2308 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2309 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2310 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2311 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2312 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2313 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2314 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2315 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2316 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2317 start_va = 0x400000 end_va = 0x466fff monitored = 0 entry_point = 0x4063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2318 start_va = 0x710000 end_va = 0x72cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 2319 start_va = 0x400000 end_va = 0x459fff monitored = 0 entry_point = 0x445b00 region_type = mapped_file name = "pnrpsvc.dll" filename = "\\Windows\\System32\\pnrpsvc.dll" (normalized: "c:\\windows\\system32\\pnrpsvc.dll") Region: id = 2320 start_va = 0x460000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pnrpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\pnrpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\pnrpsvc.dll.mui") Region: id = 2321 start_va = 0x400000 end_va = 0x459fff monitored = 0 entry_point = 0x445b00 region_type = mapped_file name = "pnrpsvc.dll" filename = "\\Windows\\System32\\pnrpsvc.dll" (normalized: "c:\\windows\\system32\\pnrpsvc.dll") Region: id = 2322 start_va = 0x460000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pnrpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\pnrpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\pnrpsvc.dll.mui") Region: id = 2323 start_va = 0x400000 end_va = 0x400fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "azroles.dll.mui" filename = "\\Windows\\System32\\en-US\\azroles.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\azroles.dll.mui") Region: id = 2324 start_va = 0x1440000 end_va = 0x1521fff monitored = 0 entry_point = 0x149d100 region_type = mapped_file name = "azroles.dll" filename = "\\Windows\\System32\\azroles.dll" (normalized: "c:\\windows\\system32\\azroles.dll") Region: id = 2325 start_va = 0x400000 end_va = 0x400fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "azroles.dll.mui" filename = "\\Windows\\System32\\en-US\\azroles.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\azroles.dll.mui") Region: id = 2326 start_va = 0x1440000 end_va = 0x1521fff monitored = 0 entry_point = 0x149d100 region_type = mapped_file name = "azroles.dll" filename = "\\Windows\\System32\\azroles.dll" (normalized: "c:\\windows\\system32\\azroles.dll") Region: id = 2327 start_va = 0x400000 end_va = 0x428fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll.mui" filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui") Region: id = 2328 start_va = 0x1440000 end_va = 0x1523fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll" filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll") Region: id = 2329 start_va = 0x400000 end_va = 0x428fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll.mui" filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui") Region: id = 2330 start_va = 0x1440000 end_va = 0x1523fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll" filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll") Region: id = 2331 start_va = 0x400000 end_va = 0x405fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "afd.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui") Region: id = 2332 start_va = 0x1440000 end_va = 0x14d2fff monitored = 0 entry_point = 0x14b9000 region_type = mapped_file name = "afd.sys" filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys") Region: id = 2333 start_va = 0x400000 end_va = 0x405fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "afd.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui") Region: id = 2334 start_va = 0x1440000 end_va = 0x14d2fff monitored = 0 entry_point = 0x14b9000 region_type = mapped_file name = "afd.sys" filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys") Region: id = 2335 start_va = 0x400000 end_va = 0x405fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fvevol.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui") Region: id = 2336 start_va = 0x1440000 end_va = 0x14e0fff monitored = 0 entry_point = 0x14d3000 region_type = mapped_file name = "fvevol.sys" filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys") Region: id = 2337 start_va = 0x400000 end_va = 0x405fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fvevol.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui") Region: id = 2338 start_va = 0x1440000 end_va = 0x14e0fff monitored = 0 entry_point = 0x14d3000 region_type = mapped_file name = "fvevol.sys" filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys") Region: id = 2339 start_va = 0x400000 end_va = 0x40afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 2340 start_va = 0x1440000 end_va = 0x14c5fff monitored = 0 entry_point = 0x14b1000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 2341 start_va = 0x400000 end_va = 0x40afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 2342 start_va = 0x1440000 end_va = 0x14c5fff monitored = 0 entry_point = 0x14b1000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 2343 start_va = 0x400000 end_va = 0x40afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 2344 start_va = 0x1440000 end_va = 0x14c5fff monitored = 0 entry_point = 0x14b1000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 2345 start_va = 0x400000 end_va = 0x40afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 2346 start_va = 0x1440000 end_va = 0x14c5fff monitored = 0 entry_point = 0x14b1000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 2347 start_va = 0x400000 end_va = 0x405fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 2348 start_va = 0x1440000 end_va = 0x14f7fff monitored = 0 entry_point = 0x1441d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 2349 start_va = 0x400000 end_va = 0x405fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 2350 start_va = 0x1440000 end_va = 0x14f7fff monitored = 0 entry_point = 0x1441d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 2351 start_va = 0x400000 end_va = 0x405fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 2352 start_va = 0x1440000 end_va = 0x14f7fff monitored = 0 entry_point = 0x1441d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 2353 start_va = 0x400000 end_va = 0x405fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 2354 start_va = 0x1440000 end_va = 0x14f7fff monitored = 0 entry_point = 0x1441d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 2355 start_va = 0x400000 end_va = 0x40cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2356 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2357 start_va = 0x400000 end_va = 0x40cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2358 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2359 start_va = 0x400000 end_va = 0x40cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2360 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2361 start_va = 0x400000 end_va = 0x40cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2362 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2363 start_va = 0x400000 end_va = 0x40cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2364 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2365 start_va = 0x400000 end_va = 0x40cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2366 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2367 start_va = 0x400000 end_va = 0x40cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2368 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2369 start_va = 0x400000 end_va = 0x40cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2370 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2371 start_va = 0x400000 end_va = 0x40cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2372 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2373 start_va = 0x400000 end_va = 0x40cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2374 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2375 start_va = 0x400000 end_va = 0x40cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2376 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2377 start_va = 0x400000 end_va = 0x40cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 2378 start_va = 0x1440000 end_va = 0x1532fff monitored = 0 entry_point = 0x1465d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2379 start_va = 0x400000 end_va = 0x40efff monitored = 0 entry_point = 0x4036e0 region_type = mapped_file name = "dmvsc.sys" filename = "\\Windows\\System32\\drivers\\dmvsc.sys" (normalized: "c:\\windows\\system32\\drivers\\dmvsc.sys") Region: id = 2380 start_va = 0x410000 end_va = 0x411fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dmvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\dmvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\dmvsc.sys.mui") Region: id = 2381 start_va = 0x400000 end_va = 0x41afff monitored = 1 entry_point = 0x401190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 2382 start_va = 0x420000 end_va = 0x42bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 2383 start_va = 0x400000 end_va = 0x41afff monitored = 1 entry_point = 0x401190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 2384 start_va = 0x420000 end_va = 0x42bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 2385 start_va = 0x400000 end_va = 0x41afff monitored = 1 entry_point = 0x401190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 2386 start_va = 0x420000 end_va = 0x42bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 2387 start_va = 0x400000 end_va = 0x41afff monitored = 1 entry_point = 0x401190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 2388 start_va = 0x420000 end_va = 0x42bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 2389 start_va = 0x400000 end_va = 0x41afff monitored = 1 entry_point = 0x401190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 2390 start_va = 0x420000 end_va = 0x42bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 2391 start_va = 0x400000 end_va = 0x41afff monitored = 1 entry_point = 0x401190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 2392 start_va = 0x420000 end_va = 0x42bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 2393 start_va = 0x400000 end_va = 0x41afff monitored = 1 entry_point = 0x401190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 2394 start_va = 0x420000 end_va = 0x42bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 2395 start_va = 0x400000 end_va = 0x401fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 2396 start_va = 0x1440000 end_va = 0x154efff monitored = 0 entry_point = 0x147c010 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 2397 start_va = 0x400000 end_va = 0x401fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 2398 start_va = 0x1440000 end_va = 0x154efff monitored = 0 entry_point = 0x147c010 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 2399 start_va = 0x400000 end_va = 0x415fff monitored = 0 entry_point = 0x403630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 2400 start_va = 0x420000 end_va = 0x421fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 2401 start_va = 0x400000 end_va = 0x415fff monitored = 0 entry_point = 0x403630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 2402 start_va = 0x420000 end_va = 0x421fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 2403 start_va = 0x400000 end_va = 0x415fff monitored = 0 entry_point = 0x403630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 2404 start_va = 0x420000 end_va = 0x421fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 2405 start_va = 0x400000 end_va = 0x415fff monitored = 0 entry_point = 0x403630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 2406 start_va = 0x420000 end_va = 0x421fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 2407 start_va = 0x400000 end_va = 0x416fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcpip.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui") Region: id = 2408 start_va = 0x1440000 end_va = 0x1696fff monitored = 0 entry_point = 0x164ce10 region_type = mapped_file name = "tcpip.sys" filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys") Region: id = 2409 start_va = 0x400000 end_va = 0x416fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcpip.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui") Region: id = 2410 start_va = 0x1440000 end_va = 0x1696fff monitored = 0 entry_point = 0x164ce10 region_type = mapped_file name = "tcpip.sys" filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys") Region: id = 2411 start_va = 0x400000 end_va = 0x409fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 2412 start_va = 0x1440000 end_va = 0x1550fff monitored = 0 entry_point = 0x1531bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 2413 start_va = 0x400000 end_va = 0x409fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 2414 start_va = 0x1440000 end_va = 0x1550fff monitored = 0 entry_point = 0x1531bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 2415 start_va = 0x400000 end_va = 0x409fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 2416 start_va = 0x1440000 end_va = 0x1550fff monitored = 0 entry_point = 0x1531bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 2417 start_va = 0x400000 end_va = 0x409fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 2418 start_va = 0x1440000 end_va = 0x1550fff monitored = 0 entry_point = 0x1531bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 2419 start_va = 0x400000 end_va = 0x409fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 2420 start_va = 0x1440000 end_va = 0x1550fff monitored = 0 entry_point = 0x1531bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 2421 start_va = 0x400000 end_va = 0x409fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 2422 start_va = 0x1440000 end_va = 0x1550fff monitored = 0 entry_point = 0x1531bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 2423 start_va = 0x400000 end_va = 0x40ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll") Region: id = 2424 start_va = 0x410000 end_va = 0x41dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui") Region: id = 2425 start_va = 0x400000 end_va = 0x40ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll") Region: id = 2426 start_va = 0x410000 end_va = 0x41dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui") Region: id = 2427 start_va = 0x400000 end_va = 0x40ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll") Region: id = 2428 start_va = 0x410000 end_va = 0x41dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui") Region: id = 2429 start_va = 0x400000 end_va = 0x406fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 2430 start_va = 0x1440000 end_va = 0x1847fff monitored = 0 entry_point = 0x150e3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 2431 start_va = 0x400000 end_va = 0x406fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 2432 start_va = 0x1440000 end_va = 0x1847fff monitored = 0 entry_point = 0x150e3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 2433 start_va = 0x400000 end_va = 0x406fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 2434 start_va = 0x1440000 end_va = 0x1847fff monitored = 0 entry_point = 0x150e3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 2435 start_va = 0x400000 end_va = 0x406fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 2436 start_va = 0x1440000 end_va = 0x1847fff monitored = 0 entry_point = 0x150e3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 2437 start_va = 0x400000 end_va = 0x411fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 2438 start_va = 0x1440000 end_va = 0x14eefff monitored = 0 entry_point = 0x14b7000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 2439 start_va = 0x400000 end_va = 0x411fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 2440 start_va = 0x1440000 end_va = 0x14eefff monitored = 0 entry_point = 0x14b7000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 2441 start_va = 0x400000 end_va = 0x411fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 2442 start_va = 0x1440000 end_va = 0x14eefff monitored = 0 entry_point = 0x14b7000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 2443 start_va = 0x400000 end_va = 0x411fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 2444 start_va = 0x1440000 end_va = 0x14eefff monitored = 0 entry_point = 0x14b7000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 2445 start_va = 0x400000 end_va = 0x411fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 2446 start_va = 0x1440000 end_va = 0x14eefff monitored = 0 entry_point = 0x14b7000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 2447 start_va = 0x400000 end_va = 0x411fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 2448 start_va = 0x1440000 end_va = 0x14eefff monitored = 0 entry_point = 0x14b7000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 2449 start_va = 0x400000 end_va = 0x403fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netlogon.dll.mui" filename = "\\Windows\\System32\\en-US\\netlogon.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\netlogon.dll.mui") Region: id = 2450 start_va = 0x1440000 end_va = 0x1514fff monitored = 0 entry_point = 0x146e0b0 region_type = mapped_file name = "netlogon.dll" filename = "\\Windows\\System32\\netlogon.dll" (normalized: "c:\\windows\\system32\\netlogon.dll") Region: id = 2451 start_va = 0x400000 end_va = 0x403fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netlogon.dll.mui" filename = "\\Windows\\System32\\en-US\\netlogon.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\netlogon.dll.mui") Region: id = 2452 start_va = 0x1440000 end_va = 0x1514fff monitored = 0 entry_point = 0x146e0b0 region_type = mapped_file name = "netlogon.dll" filename = "\\Windows\\System32\\netlogon.dll" (normalized: "c:\\windows\\system32\\netlogon.dll") Region: id = 2453 start_va = 0x400000 end_va = 0x460fff monitored = 0 entry_point = 0x410770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 2454 start_va = 0x470000 end_va = 0x473fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 2455 start_va = 0x400000 end_va = 0x460fff monitored = 0 entry_point = 0x410770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 2456 start_va = 0x470000 end_va = 0x473fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 2457 start_va = 0x400000 end_va = 0x460fff monitored = 0 entry_point = 0x410770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 2458 start_va = 0x470000 end_va = 0x473fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 2459 start_va = 0x400000 end_va = 0x460fff monitored = 0 entry_point = 0x410770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 2460 start_va = 0x470000 end_va = 0x473fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 2461 start_va = 0x400000 end_va = 0x460fff monitored = 0 entry_point = 0x410770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 2462 start_va = 0x470000 end_va = 0x473fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 2463 start_va = 0x400000 end_va = 0x460fff monitored = 0 entry_point = 0x410770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 2464 start_va = 0x470000 end_va = 0x473fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 2465 start_va = 0x400000 end_va = 0x447fff monitored = 0 entry_point = 0x43acf0 region_type = mapped_file name = "drt.dll" filename = "\\Windows\\System32\\drt.dll" (normalized: "c:\\windows\\system32\\drt.dll") Region: id = 2466 start_va = 0x450000 end_va = 0x452fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "drt.dll.mui" filename = "\\Windows\\System32\\en-US\\drt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\drt.dll.mui") Region: id = 2467 start_va = 0x400000 end_va = 0x447fff monitored = 0 entry_point = 0x43acf0 region_type = mapped_file name = "drt.dll" filename = "\\Windows\\System32\\drt.dll" (normalized: "c:\\windows\\system32\\drt.dll") Region: id = 2468 start_va = 0x450000 end_va = 0x452fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "drt.dll.mui" filename = "\\Windows\\System32\\en-US\\drt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\drt.dll.mui") Region: id = 2469 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2470 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2471 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2472 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2473 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2474 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2475 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2476 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2477 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2478 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2479 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2480 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2481 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2482 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2483 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2484 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2485 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2486 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2487 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2488 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2489 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2490 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2491 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2492 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2493 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2494 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2495 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2496 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2497 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2498 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2499 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2500 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2501 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2502 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2503 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 2504 start_va = 0x1440000 end_va = 0x155ffff monitored = 0 entry_point = 0x153c040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 2505 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2506 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2507 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2508 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2509 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2510 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2511 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2512 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2513 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2514 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2515 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2516 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2517 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2518 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2519 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2520 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2521 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2522 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2523 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2524 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2525 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2526 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2527 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2528 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2529 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2530 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2531 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2532 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2533 start_va = 0x400000 end_va = 0x402fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 2534 start_va = 0x410000 end_va = 0x420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 2535 start_va = 0x400000 end_va = 0x471fff monitored = 0 entry_point = 0x457000 region_type = mapped_file name = "mrxsmb.sys" filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys") Region: id = 2536 start_va = 0x6f0000 end_va = 0x6fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mrxsmb.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui") Region: id = 2537 start_va = 0x400000 end_va = 0x471fff monitored = 0 entry_point = 0x457000 region_type = mapped_file name = "mrxsmb.sys" filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys") Region: id = 2538 start_va = 0x6f0000 end_va = 0x6fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mrxsmb.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui") Region: id = 2539 start_va = 0x400000 end_va = 0x418fff monitored = 0 entry_point = 0x40b610 region_type = mapped_file name = "eqossnap.dll" filename = "\\Windows\\System32\\eqossnap.dll" (normalized: "c:\\windows\\system32\\eqossnap.dll") Region: id = 2540 start_va = 0x420000 end_va = 0x425fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "eqossnap.dll.mui" filename = "\\Windows\\System32\\en-US\\eqossnap.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\eqossnap.dll.mui") Region: id = 2541 start_va = 0x400000 end_va = 0x418fff monitored = 0 entry_point = 0x40b610 region_type = mapped_file name = "eqossnap.dll" filename = "\\Windows\\System32\\eqossnap.dll" (normalized: "c:\\windows\\system32\\eqossnap.dll") Region: id = 2542 start_va = 0x420000 end_va = 0x425fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "eqossnap.dll.mui" filename = "\\Windows\\System32\\en-US\\eqossnap.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\eqossnap.dll.mui") Region: id = 2543 start_va = 0x400000 end_va = 0x407fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "peerdistsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\PeerDistSvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\peerdistsvc.dll.mui") Region: id = 2544 start_va = 0x1440000 end_va = 0x1628fff monitored = 0 entry_point = 0x14415f0 region_type = mapped_file name = "peerdistsvc.dll" filename = "\\Windows\\System32\\PeerDistSvc.dll" (normalized: "c:\\windows\\system32\\peerdistsvc.dll") Region: id = 2545 start_va = 0x400000 end_va = 0x407fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "peerdistsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\PeerDistSvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\peerdistsvc.dll.mui") Region: id = 2546 start_va = 0x1440000 end_va = 0x1628fff monitored = 0 entry_point = 0x14415f0 region_type = mapped_file name = "peerdistsvc.dll" filename = "\\Windows\\System32\\PeerDistSvc.dll" (normalized: "c:\\windows\\system32\\peerdistsvc.dll") Region: id = 2547 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll" filename = "\\Windows\\System32\\WsmRes.dll" (normalized: "c:\\windows\\system32\\wsmres.dll") Region: id = 2548 start_va = 0x420000 end_va = 0x479fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll.mui" filename = "\\Windows\\System32\\en-US\\WsmRes.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wsmres.dll.mui") Region: id = 2549 start_va = 0x400000 end_va = 0x410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll" filename = "\\Windows\\System32\\WsmRes.dll" (normalized: "c:\\windows\\system32\\wsmres.dll") Region: id = 2550 start_va = 0x420000 end_va = 0x479fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll.mui" filename = "\\Windows\\System32\\en-US\\WsmRes.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wsmres.dll.mui") Region: id = 2551 start_va = 0x400000 end_va = 0x401fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mprddm.dll.mui" filename = "\\Windows\\System32\\en-US\\mprddm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mprddm.dll.mui") Region: id = 2552 start_va = 0x1440000 end_va = 0x151ffff monitored = 0 entry_point = 0x14d2eb0 region_type = mapped_file name = "mprddm.dll" filename = "\\Windows\\System32\\mprddm.dll" (normalized: "c:\\windows\\system32\\mprddm.dll") Region: id = 2553 start_va = 0x400000 end_va = 0x401fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mprddm.dll.mui" filename = "\\Windows\\System32\\en-US\\mprddm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mprddm.dll.mui") Region: id = 2554 start_va = 0x1440000 end_va = 0x151ffff monitored = 0 entry_point = 0x14d2eb0 region_type = mapped_file name = "mprddm.dll" filename = "\\Windows\\System32\\mprddm.dll" (normalized: "c:\\windows\\system32\\mprddm.dll") Region: id = 2555 start_va = 0x7ffd07f10000 end_va = 0x7ffd07f1dfff monitored = 0 entry_point = 0x7ffd07f12b10 region_type = mapped_file name = "perfos.dll" filename = "\\Windows\\System32\\perfos.dll" (normalized: "c:\\windows\\system32\\perfos.dll") Region: id = 2563 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 2564 start_va = 0x1440000 end_va = 0x163ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001440000" filename = "" Thread: id = 114 os_tid = 0x1114 [0092.731] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x123ff60 | out: lpSystemTimeAsFileTime=0x123ff60*(dwLowDateTime=0xbd89029b, dwHighDateTime=0x1d92b8e)) [0092.733] free (_Block=0xdde1a0) [0092.733] FreeLibrary (hLibModule=0x180000000) returned 1 [0092.736] free (_Block=0xde31b0) [0092.736] free (_Block=0xddcf30) [0092.736] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x123ff60 | out: lpSystemTimeAsFileTime=0x123ff60*(dwLowDateTime=0xbd89029b, dwHighDateTime=0x1d92b8e)) [0092.736] free (_Block=0xde1960) [0092.736] FreeLibrary (hLibModule=0x700000) returned 1 [0092.738] free (_Block=0xde5be0) [0092.738] free (_Block=0xde5c80) [0092.738] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x123ff60 | out: lpSystemTimeAsFileTime=0x123ff60*(dwLowDateTime=0xbd89029b, dwHighDateTime=0x1d92b8e)) [0092.739] free (_Block=0xde1b40) [0092.739] FreeLibrary (hLibModule=0x7ffd0c220000) returned 1 [0092.739] free (_Block=0xde6890) [0092.739] free (_Block=0xde5a50) [0092.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x123ff60 | out: lpSystemTimeAsFileTime=0x123ff60*(dwLowDateTime=0xbd8b631f, dwHighDateTime=0x1d92b8e)) [0092.739] free (_Block=0xde1aa0) [0092.739] FreeLibrary (hLibModule=0x7ffd0a970000) returned 1 [0092.749] free (_Block=0xde4e70) [0092.749] free (_Block=0xde5e10) [0092.749] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x123ff60 | out: lpSystemTimeAsFileTime=0x123ff60*(dwLowDateTime=0xbd8b631f, dwHighDateTime=0x1d92b8e)) [0092.749] free (_Block=0xde1e00) [0092.749] FreeLibrary (hLibModule=0x7ffd0ac50000) returned 1 [0092.750] free (_Block=0xde67b0) [0092.750] free (_Block=0xde5b90) [0092.750] WaitForSingleObjectEx (hHandle=0x254, dwMilliseconds=0xffffffff, bAlertable=0) Thread: id = 115 os_tid = 0x1104 Thread: id = 116 os_tid = 0x10f8 Thread: id = 117 os_tid = 0x10f4 Thread: id = 118 os_tid = 0x10f0 Thread: id = 119 os_tid = 0x10ec Thread: id = 120 os_tid = 0x10e8 [0085.272] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0085.334] RtlRestoreLastWin32Error () returned 0x3fc000 [0085.334] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0xf3e118, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0xf3e010 | out: pulNumLanguages=0xf3e118, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0xf3e010) returned 1 [0085.334] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x8) returned 0x548330 [0085.334] RtlRestoreLastWin32Error () returned 0x3fc000 [0085.334] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0xf3e118, pwszLanguagesBuffer=0x548330, pcchLanguagesBuffer=0xf3e010 | out: pulNumLanguages=0xf3e118, pwszLanguagesBuffer=0x548330, pcchLanguagesBuffer=0xf3e010) returned 1 [0085.334] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x8) returned 0x5483d0 [0085.334] RtlFreeHeap (HeapHandle=0x520000, Flags=0x0, BaseAddress=0x548330) returned 1 [0085.334] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x14) returned 0x5876c0 [0085.334] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5876c0, pulNumLanguages=0xf3e118 | out: pulNumLanguages=0xf3e118) returned 1 [0085.335] RtlFreeHeap (HeapHandle=0x520000, Flags=0x0, BaseAddress=0x5876c0) returned 1 [0085.338] malloc (_Size=0x600) returned 0xe091a0 [0085.338] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0xf3d7f8 | out: Buffer=0x0, ReturnedLength=0xf3d7f8) returned 0 [0085.338] GetLastError () returned 0x7a [0085.338] malloc (_Size=0x250) returned 0xde6d60 [0085.339] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0xde6d60, ReturnedLength=0xf3d7f8 | out: Buffer=0xde6d60, ReturnedLength=0xf3d7f8) returned 1 [0085.339] GetActiveProcessorCount (GroupNumber=0xffff) returned 0x4 [0085.339] GetMaximumProcessorGroupCount () returned 0x1 [0085.339] malloc (_Size=0x40) returned 0xde59b0 [0085.339] malloc (_Size=0x40) returned 0xde6220 [0085.339] malloc (_Size=0x8) returned 0xde6c30 [0085.339] memcpy (in: _Dst=0xde59b0, _Src=0xde6d80, _Size=0x10 | out: _Dst=0xde59b0) returned 0xde59b0 [0085.346] GetActiveProcessorCount (GroupNumber=0x0) returned 0x4 [0085.346] NtPowerInformation (in: InformationLevel=0x2e, InputBuffer=0xf3d7f0, InputBufferLength=0x2, OutputBuffer=0xe091a0, OutputBufferLength=0x60 | out: OutputBuffer=0xe091a0) returned 0x0 [0085.346] _vsnwprintf (in: _Buffer=0xf3d690, _BufferCount=0x63, _Format="CPU%d", _ArgList=0xf3cf88 | out: _Buffer="CPU0") returned 4 [0085.347] GetCurrentThread () returned 0xfffffffffffffffe [0085.347] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0xf3cee0, PreviousGroupAffinity=0xf3cef0 | out: PreviousGroupAffinity=0xf3cef0) returned 1 [0085.347] GetSystemInfo (in: lpSystemInfo=0xf3d020 | out: lpSystemInfo=0xf3d020*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0085.347] mbstowcs (in: _Dest=0xf3d2a8, _Source="GenuineIntel", _MaxCount=0x28 | out: _Dest="GenuineIntel") returned 0xc [0085.347] _wcsicmp (_String1="GenuineIntel", _String2="GenuineIntel") returned 0 [0085.354] mbstowcs (in: _Dest=0xf3d118, _Source="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", _MaxCount=0x28 | out: _Dest="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x27 [0085.354] GetCurrentThread () returned 0xfffffffffffffffe [0085.354] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0xf3cef0, PreviousGroupAffinity=0x0 | out: PreviousGroupAffinity=0x0) returned 1 [0085.358] LoadStringW (in: hInstance=0x7ffcf16a0000, uID=0x2c, lpBuffer=0xf3ccf0, cchBufferMax=256 | out: lpBuffer="CPU %d") returned 0x6 [0087.579] malloc (_Size=0x35140) returned 0xe0aae0 [0087.590] _wtoi (_String="238") returned 238 [0087.590] _wtoi (_String="6") returned 6 [0087.590] _itow (in: _Dest=0x0, _Radix=15979968 | out: _Dest=0x0) returned="0" [0087.590] _itow (in: _Dest=0xee, _Radix=15978256 | out: _Dest=0xee) returned="238" [0087.590] malloc (_Size=0x4000) returned 0xe3fc30 [0087.591] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x0, lpData=0xe3fc30, lpcbData=0xf3cee4*=0x4000 | out: lpType=0x0, lpData=0xe3fc30*=0x50, lpcbData=0xf3cee4*=0x600) returned 0x0 [0087.605] free (_Block=0xe3fc30) [0087.605] Sleep (dwMilliseconds=0x3e8) [0088.614] _itow (in: _Dest=0xee, _Radix=15978256 | out: _Dest=0xee) returned="238" [0088.614] malloc (_Size=0x4000) returned 0xe3fc30 [0088.614] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x0, lpData=0xe3fc30, lpcbData=0xf3cee4*=0x4000 | out: lpType=0x0, lpData=0xe3fc30*=0x50, lpcbData=0xf3cee4*=0x600) returned 0x0 [0088.653] free (_Block=0xe3fc30) [0088.653] free (_Block=0xe0aae0) [0088.659] _vsnwprintf (in: _Buffer=0xf3d5c0, _BufferCount=0x40, _Format="%04X%04X%04X%04X", _ArgList=0xf3cf88 | out: _Buffer="0F8BFBFF00050654") returned 16 [0088.661] lstrlenW (lpString=" 0") returned 2 [0088.662] lstrlenW (lpString="Intel(R) Xeon(R) Gold 6126 CPU @ 2.60GHz") returned 40 [0088.662] lstrlenW (lpString="") returned 0 [0088.663] lstrlenW (lpString="") returned 0 [0088.663] lstrlenW (lpString="") returned 0 [0088.665] IsProcessorFeaturePresent (ProcessorFeature=0x14) returned 1 [0088.665] IsProcessorFeaturePresent (ProcessorFeature=0x15) returned 1 [0088.667] RtlNumberOfSetBitsUlongPtr (Target=0x1) returned 0x1 [0088.667] RtlNumberOfSetBitsUlongPtr (Target=0x2) returned 0x1 [0088.668] RtlNumberOfSetBitsUlongPtr (Target=0x4) returned 0x1 [0088.668] RtlNumberOfSetBitsUlongPtr (Target=0x8) returned 0x1 [0088.668] _vsnwprintf (in: _Buffer=0xf3d880, _BufferCount=0x63, _Format="CPU%d", _ArgList=0xf3d7c8 | out: _Buffer="CPU0") returned 4 [0088.669] free (_Block=0xde6c30) [0088.669] free (_Block=0xde6220) [0088.669] free (_Block=0xde59b0) [0088.669] free (_Block=0xde6d60) [0088.669] free (_Block=0xe091a0) [0088.681] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x4) returned 0x5f3620 [0088.681] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5f3620, pulNumLanguages=0xf3e1c0 | out: pulNumLanguages=0xf3e1c0) returned 1 [0088.681] RtlFreeHeap (HeapHandle=0x520000, Flags=0x0, BaseAddress=0x5f3620) returned 1 [0088.681] RtlFreeHeap (HeapHandle=0x520000, Flags=0x0, BaseAddress=0x5483d0) returned 1 [0088.779] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0089.999] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0090.072] RtlRestoreLastWin32Error () returned 0x3fc000 [0090.072] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0xf3e118, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0xf3e010 | out: pulNumLanguages=0xf3e118, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0xf3e010) returned 1 [0090.072] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x8) returned 0x5f3320 [0090.072] RtlRestoreLastWin32Error () returned 0x3fc000 [0090.072] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0xf3e118, pwszLanguagesBuffer=0x5f3320, pcchLanguagesBuffer=0xf3e010 | out: pulNumLanguages=0xf3e118, pwszLanguagesBuffer=0x5f3320, pcchLanguagesBuffer=0xf3e010) returned 1 [0090.072] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x8) returned 0x5f3450 [0090.072] RtlFreeHeap (HeapHandle=0x520000, Flags=0x0, BaseAddress=0x5f3320) returned 1 [0090.072] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x14) returned 0x587440 [0090.072] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x587440, pulNumLanguages=0xf3e118 | out: pulNumLanguages=0xf3e118) returned 1 [0090.072] RtlFreeHeap (HeapHandle=0x520000, Flags=0x0, BaseAddress=0x587440) returned 1 [0090.074] malloc (_Size=0x600) returned 0xe091a0 [0090.074] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0xf3d7f8 | out: Buffer=0x0, ReturnedLength=0xf3d7f8) returned 0 [0090.074] GetLastError () returned 0x7a [0090.074] malloc (_Size=0x250) returned 0xde6d60 [0090.074] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0xde6d60, ReturnedLength=0xf3d7f8 | out: Buffer=0xde6d60, ReturnedLength=0xf3d7f8) returned 1 [0090.074] GetActiveProcessorCount (GroupNumber=0xffff) returned 0x4 [0090.074] GetMaximumProcessorGroupCount () returned 0x1 [0090.074] malloc (_Size=0x40) returned 0xde62c0 [0090.074] malloc (_Size=0x40) returned 0xde60e0 [0090.074] malloc (_Size=0x8) returned 0xde6d40 [0090.074] memcpy (in: _Dst=0xde62c0, _Src=0xde6d80, _Size=0x10 | out: _Dst=0xde62c0) returned 0xde62c0 [0090.074] GetActiveProcessorCount (GroupNumber=0x0) returned 0x4 [0090.074] NtPowerInformation (in: InformationLevel=0x2e, InputBuffer=0xf3d7f0, InputBufferLength=0x2, OutputBuffer=0xe091a0, OutputBufferLength=0x60 | out: OutputBuffer=0xe091a0) returned 0x0 [0090.075] _vsnwprintf (in: _Buffer=0xf3d690, _BufferCount=0x63, _Format="CPU%d", _ArgList=0xf3cf88 | out: _Buffer="CPU0") returned 4 [0090.075] GetCurrentThread () returned 0xfffffffffffffffe [0090.075] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0xf3cee0, PreviousGroupAffinity=0xf3cef0 | out: PreviousGroupAffinity=0xf3cef0) returned 1 [0090.075] GetSystemInfo (in: lpSystemInfo=0xf3d020 | out: lpSystemInfo=0xf3d020*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0090.075] mbstowcs (in: _Dest=0xf3d2a8, _Source="GenuineIntel", _MaxCount=0x28 | out: _Dest="GenuineIntel") returned 0xc [0090.075] _wcsicmp (_String1="GenuineIntel", _String2="GenuineIntel") returned 0 [0090.077] mbstowcs (in: _Dest=0xf3d118, _Source="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", _MaxCount=0x28 | out: _Dest="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x27 [0090.077] GetCurrentThread () returned 0xfffffffffffffffe [0090.077] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0xf3cef0, PreviousGroupAffinity=0x0 | out: PreviousGroupAffinity=0x0) returned 1 [0090.081] LoadStringW (in: hInstance=0x7ffcf16a0000, uID=0x2c, lpBuffer=0xf3ccf0, cchBufferMax=256 | out: lpBuffer="CPU %d") returned 0x6 [0090.118] malloc (_Size=0x35140) returned 0xe0a1c0 [0090.125] _wtoi (_String="238") returned 238 [0090.125] _wtoi (_String="6") returned 6 [0090.125] _itow (in: _Dest=0x0, _Radix=15979968 | out: _Dest=0x0) returned="0" [0090.125] _itow (in: _Dest=0xee, _Radix=15978256 | out: _Dest=0xee) returned="238" [0090.125] malloc (_Size=0x4000) returned 0xe3f310 [0090.126] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x0, lpData=0xe3f310, lpcbData=0xf3cee4*=0x4000 | out: lpType=0x0, lpData=0xe3f310*=0x50, lpcbData=0xf3cee4*=0x600) returned 0x0 [0090.126] free (_Block=0xe3f310) [0090.126] Sleep (dwMilliseconds=0x3e8) [0091.147] _itow (in: _Dest=0xee, _Radix=15978256 | out: _Dest=0xee) returned="238" [0091.147] malloc (_Size=0x4000) returned 0xe3f310 [0091.147] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x0, lpData=0xe3f310, lpcbData=0xf3cee4*=0x4000 | out: lpType=0x0, lpData=0xe3f310*=0x50, lpcbData=0xf3cee4*=0x600) returned 0x0 [0091.148] free (_Block=0xe3f310) [0091.148] free (_Block=0xe0a1c0) [0091.154] _vsnwprintf (in: _Buffer=0xf3d5c0, _BufferCount=0x40, _Format="%04X%04X%04X%04X", _ArgList=0xf3cf88 | out: _Buffer="0F8BFBFF00050654") returned 16 [0091.155] lstrlenW (lpString=" 0") returned 2 [0091.155] lstrlenW (lpString="Intel(R) Xeon(R) Gold 6126 CPU @ 2.60GHz") returned 40 [0091.156] lstrlenW (lpString="") returned 0 [0091.156] lstrlenW (lpString="") returned 0 [0091.157] lstrlenW (lpString="") returned 0 [0091.159] IsProcessorFeaturePresent (ProcessorFeature=0x14) returned 1 [0091.159] IsProcessorFeaturePresent (ProcessorFeature=0x15) returned 1 [0091.162] RtlNumberOfSetBitsUlongPtr (Target=0x1) returned 0x1 [0091.162] RtlNumberOfSetBitsUlongPtr (Target=0x2) returned 0x1 [0091.162] RtlNumberOfSetBitsUlongPtr (Target=0x4) returned 0x1 [0091.162] RtlNumberOfSetBitsUlongPtr (Target=0x8) returned 0x1 [0091.162] _vsnwprintf (in: _Buffer=0xf3d880, _BufferCount=0x63, _Format="CPU%d", _ArgList=0xf3d7c8 | out: _Buffer="CPU0") returned 4 [0091.163] free (_Block=0xde6d40) [0091.163] free (_Block=0xde60e0) [0091.163] free (_Block=0xde62c0) [0091.163] free (_Block=0xde6d60) [0091.163] free (_Block=0xe091a0) [0091.176] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x4) returned 0x5f3640 [0091.176] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5f3640, pulNumLanguages=0xf3e1c0 | out: pulNumLanguages=0xf3e1c0) returned 1 [0091.176] RtlFreeHeap (HeapHandle=0x520000, Flags=0x0, BaseAddress=0x5f3640) returned 1 [0091.176] RtlFreeHeap (HeapHandle=0x520000, Flags=0x0, BaseAddress=0x5f3450) returned 1 [0091.245] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0092.619] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0092.721] RtlRestoreLastWin32Error () returned 0x3fc000 [0092.722] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0xf3e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0xf3dff0 | out: pulNumLanguages=0xf3e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0xf3dff0) returned 1 [0092.722] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x8) returned 0x5f3510 [0092.722] RtlRestoreLastWin32Error () returned 0x3fc000 [0092.722] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0xf3e0f8, pwszLanguagesBuffer=0x5f3510, pcchLanguagesBuffer=0xf3dff0 | out: pulNumLanguages=0xf3e0f8, pwszLanguagesBuffer=0x5f3510, pcchLanguagesBuffer=0xf3dff0) returned 1 [0092.722] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x8) returned 0x5f35c0 [0092.722] RtlFreeHeap (HeapHandle=0x520000, Flags=0x0, BaseAddress=0x5f3510) returned 1 [0092.722] RtlAllocateHeap (HeapHandle=0x520000, Flags=0x0, Size=0x14) returned 0x5872e0 [0092.722] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5872e0, pulNumLanguages=0xf3e0f8 | out: pulNumLanguages=0xf3e0f8) returned 1 [0092.722] RtlFreeHeap (HeapHandle=0x520000, Flags=0x0, BaseAddress=0x5872e0) returned 1 [0092.729] SafeArrayGetElemsize (psa=0x5f2490) returned 0x8 [0092.729] SafeArrayPutElement (psa=0x5f2490, rgIndices=0xf3d898, pv=0x57ac08) returned 0x0 [0092.729] SafeArrayRedim (in: psa=0x5f2490, psaboundNew=0xf3d8b0 | out: psa=0x5f2490) returned 0x0 [0092.729] SafeArrayCopy (in: psa=0x5f2490, ppsaOut=0xf3d800 | out: ppsaOut=0xf3d800) returned 0x0 [0092.730] SetEvent (hEvent=0x254) returned 1 [0092.730] free (_Block=0xde55f0) [0092.730] GetCurrentThread () returned 0xfffffffffffffffe [0092.731] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0xf3d660 | out: TokenHandle=0xf3d660*=0x240) returned 1 [0092.731] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0xf3d69c | out: lpLuid=0xf3d69c*(LowPart=0x14, HighPart=0)) returned 1 [0092.752] RtlRestoreLastWin32Error () returned 0x3fc000 [0092.752] AdjustTokenPrivileges (in: TokenHandle=0x240, DisableAllPrivileges=0, NewState=0xf3d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0092.752] GetLastError () returned 0x0 [0092.752] CloseHandle (hObject=0x240) returned 1 [0092.752] malloc (_Size=0x8000) returned 0xde7160 [0092.752] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xde7160, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xde7160, ResultLength=0x0) returned 0xc0000004 [0092.753] free (_Block=0xde7160) [0092.754] malloc (_Size=0x10000) returned 0xde7160 [0092.754] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xde7160, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xde7160, ResultLength=0x0) returned 0xc0000004 [0092.759] free (_Block=0xde7160) [0092.760] malloc (_Size=0x18000) returned 0xde7160 [0092.760] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xde7160, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xde7160, ResultLength=0x0) returned 0xc0000004 [0092.762] free (_Block=0xde7160) [0092.762] malloc (_Size=0x20000) returned 0xde7160 [0092.762] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xde7160, Length=0x20000, ResultLength=0x0 | out: SystemInformation=0xde7160, ResultLength=0x0) returned 0x0 [0092.763] _ui64tow_s (in: _Value=0x0, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0092.767] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="0") returned 1 [0092.768] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0xd972958, dwBuildNumber=0x7ffd, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0092.768] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0092.785] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0092.785] CloseHandle (hObject=0x0) returned 0 [0092.786] _ui64tow_s (in: _Value=0x4, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0092.790] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="4") returned 1 [0092.791] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0092.791] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0092.807] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0092.807] CloseHandle (hObject=0x0) returned 0 [0092.808] _ui64tow_s (in: _Value=0x138, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="312") returned 0x0 [0092.815] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="312") returned 3 [0092.818] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0092.818] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0092.831] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x138) returned 0x0 [0092.831] CloseHandle (hObject=0x0) returned 0 [0092.831] _ui64tow_s (in: _Value=0x180, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="384") returned 0x0 [0092.837] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="384") returned 3 [0092.838] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0092.838] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0092.850] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x180) returned 0x0 [0092.850] CloseHandle (hObject=0x0) returned 0 [0092.850] _ui64tow_s (in: _Value=0x1bc, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="444") returned 0x0 [0092.853] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="444") returned 3 [0092.854] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0092.854] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0092.867] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1bc) returned 0x0 [0092.867] CloseHandle (hObject=0x0) returned 0 [0092.868] _ui64tow_s (in: _Value=0x1c8, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="456") returned 0x0 [0092.871] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="456") returned 3 [0092.872] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0092.872] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0092.883] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c8) returned 0x0 [0092.883] CloseHandle (hObject=0x0) returned 0 [0092.883] _ui64tow_s (in: _Value=0x1fc, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="508") returned 0x0 [0092.886] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="508") returned 3 [0092.887] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0092.887] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0092.900] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1fc) returned 0x240 [0092.900] GetLastError () returned 0x0 [0092.900] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c850, ReturnLength=0x0) returned 0x0 [0092.900] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x3b7018, lpBuffer=0xf3c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c820*, lpNumberOfBytesRead=0x0) returned 1 [0092.901] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x7ffd0da95220, lpBuffer=0xf3c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c810*, lpNumberOfBytesRead=0x0) returned 1 [0092.901] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0xe16a0, lpBuffer=0xf3cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3cc30*, lpNumberOfBytesRead=0x0) returned 1 [0092.901] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0xe13b0, lpBuffer=0xf3c580, nSize=0x42, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c580*, lpNumberOfBytesRead=0x0) returned 1 [0092.901] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x1, ProcessInformation=0xf3c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c880, ReturnLength=0x0) returned 0x0 [0092.902] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c358, ReturnLength=0x0) returned 0x0 [0092.902] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x3b7020, lpBuffer=0xf3c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c340*, lpNumberOfBytesRead=0x0) returned 1 [0092.902] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0xe0d90, lpBuffer=0xf3c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c390*, lpNumberOfBytesRead=0x0) returned 1 [0092.903] malloc (_Size=0x1c) returned 0xe0a000 [0092.903] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0xe13f2, lpBuffer=0xe0a000, nSize=0x1a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xe0a000*, lpNumberOfBytesRead=0x0) returned 1 [0092.903] free (_Block=0xe0a000) [0092.903] CloseHandle (hObject=0x240) returned 1 [0092.904] _ui64tow_s (in: _Value=0x214, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="532") returned 0x0 [0092.907] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="532") returned 3 [0092.907] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0092.907] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0092.919] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x214) returned 0x0 [0092.919] CloseHandle (hObject=0x0) returned 0 [0092.919] _ui64tow_s (in: _Value=0x21c, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="540") returned 0x0 [0092.922] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="540") returned 3 [0092.923] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0092.923] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0092.934] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x21c) returned 0x240 [0092.934] GetLastError () returned 0x0 [0092.934] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c850, ReturnLength=0x0) returned 0x0 [0092.934] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x2ca018, lpBuffer=0xf3c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c820*, lpNumberOfBytesRead=0x0) returned 1 [0092.934] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x7ffd0da95220, lpBuffer=0xf3c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c810*, lpNumberOfBytesRead=0x0) returned 1 [0092.935] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x4032b0, lpBuffer=0xf3cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3cc30*, lpNumberOfBytesRead=0x0) returned 1 [0092.935] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x402f08, lpBuffer=0xf3c580, nSize=0x3c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c580*, lpNumberOfBytesRead=0x0) returned 1 [0092.935] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x1, ProcessInformation=0xf3c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c880, ReturnLength=0x0) returned 0x0 [0092.936] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c358, ReturnLength=0x0) returned 0x0 [0092.936] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x2ca020, lpBuffer=0xf3c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c340*, lpNumberOfBytesRead=0x0) returned 1 [0092.936] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x4028f0, lpBuffer=0xf3c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c390*, lpNumberOfBytesRead=0x0) returned 1 [0092.936] malloc (_Size=0x3e) returned 0xddcf30 [0092.936] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x402f44, lpBuffer=0xddcf30, nSize=0x3c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xddcf30*, lpNumberOfBytesRead=0x0) returned 1 [0092.937] free (_Block=0xddcf30) [0092.937] CloseHandle (hObject=0x240) returned 1 [0092.937] _ui64tow_s (in: _Value=0x274, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="628") returned 0x0 [0092.940] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="628") returned 3 [0092.941] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0092.941] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0092.955] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x274) returned 0x240 [0092.955] GetLastError () returned 0x0 [0092.955] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c850, ReturnLength=0x0) returned 0x0 [0092.955] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x36e018, lpBuffer=0xf3c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c820*, lpNumberOfBytesRead=0x0) returned 1 [0092.955] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x7ffd0da95220, lpBuffer=0xf3c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c810*, lpNumberOfBytesRead=0x0) returned 1 [0092.955] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x6033e0, lpBuffer=0xf3cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3cc30*, lpNumberOfBytesRead=0x0) returned 1 [0092.956] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x603048, lpBuffer=0xf3c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c580*, lpNumberOfBytesRead=0x0) returned 1 [0092.956] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x1, ProcessInformation=0xf3c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c880, ReturnLength=0x0) returned 0x0 [0092.957] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c358, ReturnLength=0x0) returned 0x0 [0092.957] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x36e020, lpBuffer=0xf3c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c340*, lpNumberOfBytesRead=0x0) returned 1 [0092.957] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x602a30, lpBuffer=0xf3c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c390*, lpNumberOfBytesRead=0x0) returned 1 [0092.957] malloc (_Size=0x5e) returned 0xde0840 [0092.959] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x603088, lpBuffer=0xde0840, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xde0840*, lpNumberOfBytesRead=0x0) returned 1 [0092.959] free (_Block=0xde0840) [0092.959] CloseHandle (hObject=0x240) returned 1 [0092.959] _ui64tow_s (in: _Value=0x2a0, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="672") returned 0x0 [0092.962] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="672") returned 3 [0092.963] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0092.963] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0092.974] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2a0) returned 0x240 [0092.974] GetLastError () returned 0x0 [0092.974] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c850, ReturnLength=0x0) returned 0x0 [0092.974] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x357018, lpBuffer=0xf3c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c820*, lpNumberOfBytesRead=0x0) returned 1 [0092.975] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x7ffd0da95220, lpBuffer=0xf3c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c810*, lpNumberOfBytesRead=0x0) returned 1 [0092.975] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x403450, lpBuffer=0xf3cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3cc30*, lpNumberOfBytesRead=0x0) returned 1 [0092.975] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x4030c8, lpBuffer=0xf3c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c580*, lpNumberOfBytesRead=0x0) returned 1 [0092.975] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x1, ProcessInformation=0xf3c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c880, ReturnLength=0x0) returned 0x0 [0092.977] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c358, ReturnLength=0x0) returned 0x0 [0092.977] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x357020, lpBuffer=0xf3c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c340*, lpNumberOfBytesRead=0x0) returned 1 [0092.977] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x402ab0, lpBuffer=0xf3c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c390*, lpNumberOfBytesRead=0x0) returned 1 [0092.978] malloc (_Size=0x54) returned 0xde5600 [0092.978] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x403108, lpBuffer=0xde5600, nSize=0x52, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xde5600*, lpNumberOfBytesRead=0x0) returned 1 [0092.978] free (_Block=0xde5600) [0092.978] CloseHandle (hObject=0x240) returned 1 [0092.979] _ui64tow_s (in: _Value=0x32c, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="812") returned 0x0 [0092.982] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="812") returned 3 [0092.983] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0092.983] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0093.094] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x32c) returned 0x240 [0093.094] GetLastError () returned 0x0 [0093.094] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c850, ReturnLength=0x0) returned 0x0 [0093.094] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x3a9018, lpBuffer=0xf3c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c820*, lpNumberOfBytesRead=0x0) returned 1 [0093.095] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x7ffd0da95220, lpBuffer=0xf3c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c810*, lpNumberOfBytesRead=0x0) returned 1 [0093.095] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x4319f0, lpBuffer=0xf3cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3cc30*, lpNumberOfBytesRead=0x0) returned 1 [0093.095] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x4316e8, lpBuffer=0xf3c580, nSize=0x38, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c580*, lpNumberOfBytesRead=0x0) returned 1 [0093.096] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x1, ProcessInformation=0xf3c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c880, ReturnLength=0x0) returned 0x0 [0093.103] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c358, ReturnLength=0x0) returned 0x0 [0093.103] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x3a9020, lpBuffer=0xf3c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c340*, lpNumberOfBytesRead=0x0) returned 1 [0093.103] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x4310d0, lpBuffer=0xf3c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c390*, lpNumberOfBytesRead=0x0) returned 1 [0093.103] malloc (_Size=0x16) returned 0xde1960 [0093.103] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x431720, lpBuffer=0xde1960, nSize=0x14, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xde1960*, lpNumberOfBytesRead=0x0) returned 1 [0093.104] free (_Block=0xde1960) [0093.105] CloseHandle (hObject=0x240) returned 1 [0093.106] _ui64tow_s (in: _Value=0x35c, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="860") returned 0x0 [0093.110] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="860") returned 3 [0093.110] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0093.110] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0093.122] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x35c) returned 0x240 [0093.122] GetLastError () returned 0x0 [0093.122] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c850, ReturnLength=0x0) returned 0x0 [0093.122] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x2da018, lpBuffer=0xf3c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c820*, lpNumberOfBytesRead=0x0) returned 1 [0093.122] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x7ffd0da95220, lpBuffer=0xf3c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c810*, lpNumberOfBytesRead=0x0) returned 1 [0093.122] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x4033e0, lpBuffer=0xf3cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3cc30*, lpNumberOfBytesRead=0x0) returned 1 [0093.122] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x403048, lpBuffer=0xf3c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c580*, lpNumberOfBytesRead=0x0) returned 1 [0093.123] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x1, ProcessInformation=0xf3c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c880, ReturnLength=0x0) returned 0x0 [0093.123] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c358, ReturnLength=0x0) returned 0x0 [0093.124] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x2da020, lpBuffer=0xf3c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c340*, lpNumberOfBytesRead=0x0) returned 1 [0093.124] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x402a30, lpBuffer=0xf3c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c390*, lpNumberOfBytesRead=0x0) returned 1 [0093.124] malloc (_Size=0x58) returned 0xde5420 [0093.124] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x403088, lpBuffer=0xde5420, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xde5420*, lpNumberOfBytesRead=0x0) returned 1 [0093.124] free (_Block=0xde5420) [0093.124] CloseHandle (hObject=0x240) returned 1 [0093.125] _ui64tow_s (in: _Value=0x368, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="872") returned 0x0 [0093.128] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="872") returned 3 [0093.128] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0093.129] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0093.149] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x368) returned 0x240 [0093.149] GetLastError () returned 0x0 [0093.149] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c850, ReturnLength=0x0) returned 0x0 [0093.149] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x304018, lpBuffer=0xf3c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c820*, lpNumberOfBytesRead=0x0) returned 1 [0093.149] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x7ffd0da95220, lpBuffer=0xf3c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c810*, lpNumberOfBytesRead=0x0) returned 1 [0093.149] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x403470, lpBuffer=0xf3cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3cc30*, lpNumberOfBytesRead=0x0) returned 1 [0093.149] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x4030c8, lpBuffer=0xf3c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c580*, lpNumberOfBytesRead=0x0) returned 1 [0093.150] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x1, ProcessInformation=0xf3c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c880, ReturnLength=0x0) returned 0x0 [0093.151] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c358, ReturnLength=0x0) returned 0x0 [0093.151] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x304020, lpBuffer=0xf3c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c340*, lpNumberOfBytesRead=0x0) returned 1 [0093.151] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x402ab0, lpBuffer=0xf3c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c390*, lpNumberOfBytesRead=0x0) returned 1 [0093.151] malloc (_Size=0x74) returned 0xde2120 [0093.151] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x403108, lpBuffer=0xde2120, nSize=0x72, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xde2120*, lpNumberOfBytesRead=0x0) returned 1 [0093.151] free (_Block=0xde2120) [0093.152] CloseHandle (hObject=0x240) returned 1 [0093.152] _ui64tow_s (in: _Value=0x390, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="912") returned 0x0 [0093.155] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="912") returned 3 [0093.156] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0093.156] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0093.171] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x390) returned 0x240 [0093.171] GetLastError () returned 0x0 [0093.171] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c850, ReturnLength=0x0) returned 0x0 [0093.171] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x3ef018, lpBuffer=0xf3c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c820*, lpNumberOfBytesRead=0x0) returned 1 [0093.172] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x7ffd0da95220, lpBuffer=0xf3c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c810*, lpNumberOfBytesRead=0x0) returned 1 [0093.172] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x603480, lpBuffer=0xf3cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3cc30*, lpNumberOfBytesRead=0x0) returned 1 [0093.172] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x6030c8, lpBuffer=0xf3c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c580*, lpNumberOfBytesRead=0x0) returned 1 [0093.172] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x1, ProcessInformation=0xf3c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c880, ReturnLength=0x0) returned 0x0 [0093.173] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c358, ReturnLength=0x0) returned 0x0 [0093.173] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x3ef020, lpBuffer=0xf3c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c340*, lpNumberOfBytesRead=0x0) returned 1 [0093.173] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x602ab0, lpBuffer=0xf3c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c390*, lpNumberOfBytesRead=0x0) returned 1 [0093.173] malloc (_Size=0x84) returned 0xde31b0 [0093.174] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x603108, lpBuffer=0xde31b0, nSize=0x82, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xde31b0*, lpNumberOfBytesRead=0x0) returned 1 [0093.174] free (_Block=0xde31b0) [0093.174] CloseHandle (hObject=0x240) returned 1 [0093.174] _ui64tow_s (in: _Value=0x3a0, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="928") returned 0x0 [0093.178] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="928") returned 3 [0093.179] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0093.179] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0093.190] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a0) returned 0x240 [0093.190] GetLastError () returned 0x0 [0093.190] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c850, ReturnLength=0x0) returned 0x0 [0093.190] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x390018, lpBuffer=0xf3c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c820*, lpNumberOfBytesRead=0x0) returned 1 [0093.190] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x7ffd0da95220, lpBuffer=0xf3c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c810*, lpNumberOfBytesRead=0x0) returned 1 [0093.190] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x403480, lpBuffer=0xf3cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3cc30*, lpNumberOfBytesRead=0x0) returned 1 [0093.190] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x4030c8, lpBuffer=0xf3c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c580*, lpNumberOfBytesRead=0x0) returned 1 [0093.191] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x1, ProcessInformation=0xf3c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c880, ReturnLength=0x0) returned 0x0 [0093.194] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c358, ReturnLength=0x0) returned 0x0 [0093.194] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x390020, lpBuffer=0xf3c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c340*, lpNumberOfBytesRead=0x0) returned 1 [0093.194] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x402ab0, lpBuffer=0xf3c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c390*, lpNumberOfBytesRead=0x0) returned 1 [0093.194] malloc (_Size=0x86) returned 0xde31b0 [0093.194] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x403108, lpBuffer=0xde31b0, nSize=0x84, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xde31b0*, lpNumberOfBytesRead=0x0) returned 1 [0093.194] free (_Block=0xde31b0) [0093.195] CloseHandle (hObject=0x240) returned 1 [0093.195] _ui64tow_s (in: _Value=0x3e0, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="992") returned 0x0 [0093.198] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="992") returned 3 [0093.199] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0093.199] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0093.248] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3e0) returned 0x240 [0093.248] GetLastError () returned 0x0 [0093.249] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c850, ReturnLength=0x0) returned 0x0 [0093.249] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x29f018, lpBuffer=0xf3c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c820*, lpNumberOfBytesRead=0x0) returned 1 [0093.249] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x7ffd0da95220, lpBuffer=0xf3c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c810*, lpNumberOfBytesRead=0x0) returned 1 [0093.249] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x603460, lpBuffer=0xf3cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3cc30*, lpNumberOfBytesRead=0x0) returned 1 [0093.249] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x6030c8, lpBuffer=0xf3c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c580*, lpNumberOfBytesRead=0x0) returned 1 [0093.250] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x1, ProcessInformation=0xf3c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c880, ReturnLength=0x0) returned 0x0 [0093.250] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c358, ReturnLength=0x0) returned 0x0 [0093.250] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x29f020, lpBuffer=0xf3c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c340*, lpNumberOfBytesRead=0x0) returned 1 [0093.251] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x602ab0, lpBuffer=0xf3c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c390*, lpNumberOfBytesRead=0x0) returned 1 [0093.251] malloc (_Size=0x62) returned 0xde01b0 [0093.251] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x603108, lpBuffer=0xde01b0, nSize=0x60, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xde01b0*, lpNumberOfBytesRead=0x0) returned 1 [0093.251] free (_Block=0xde01b0) [0093.251] CloseHandle (hObject=0x240) returned 1 [0093.252] _ui64tow_s (in: _Value=0x288, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="648") returned 0x0 [0093.255] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="648") returned 3 [0093.256] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0093.256] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0093.267] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x288) returned 0x240 [0093.267] GetLastError () returned 0x0 [0093.267] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c850, ReturnLength=0x0) returned 0x0 [0093.267] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x2d8018, lpBuffer=0xf3c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c820*, lpNumberOfBytesRead=0x0) returned 1 [0093.267] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x7ffd0da95220, lpBuffer=0xf3c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c810*, lpNumberOfBytesRead=0x0) returned 1 [0093.267] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x403400, lpBuffer=0xf3cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3cc30*, lpNumberOfBytesRead=0x0) returned 1 [0093.267] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x403048, lpBuffer=0xf3c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c580*, lpNumberOfBytesRead=0x0) returned 1 [0093.268] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x1, ProcessInformation=0xf3c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c880, ReturnLength=0x0) returned 0x0 [0093.269] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c358, ReturnLength=0x0) returned 0x0 [0093.269] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x2d8020, lpBuffer=0xf3c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c340*, lpNumberOfBytesRead=0x0) returned 1 [0093.269] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x402a30, lpBuffer=0xf3c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c390*, lpNumberOfBytesRead=0x0) returned 1 [0093.269] malloc (_Size=0x82) returned 0xde31b0 [0093.269] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x403088, lpBuffer=0xde31b0, nSize=0x80, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xde31b0*, lpNumberOfBytesRead=0x0) returned 1 [0093.269] free (_Block=0xde31b0) [0093.270] CloseHandle (hObject=0x240) returned 1 [0093.275] _ui64tow_s (in: _Value=0x47c, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0093.278] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="1148") returned 4 [0093.279] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0093.279] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0093.291] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x240 [0093.291] GetLastError () returned 0x0 [0093.291] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c850, ReturnLength=0x0) returned 0x0 [0093.291] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x2aa018, lpBuffer=0xf3c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c820*, lpNumberOfBytesRead=0x0) returned 1 [0093.291] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x7ffd0da95220, lpBuffer=0xf3c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c810*, lpNumberOfBytesRead=0x0) returned 1 [0093.291] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x403460, lpBuffer=0xf3cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3cc30*, lpNumberOfBytesRead=0x0) returned 1 [0093.292] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x4030c8, lpBuffer=0xf3c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c580*, lpNumberOfBytesRead=0x0) returned 1 [0093.292] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x1, ProcessInformation=0xf3c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c880, ReturnLength=0x0) returned 0x0 [0093.293] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c358, ReturnLength=0x0) returned 0x0 [0093.293] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x2aa020, lpBuffer=0xf3c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c340*, lpNumberOfBytesRead=0x0) returned 1 [0093.293] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x402ab0, lpBuffer=0xf3c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c390*, lpNumberOfBytesRead=0x0) returned 1 [0093.293] malloc (_Size=0x66) returned 0xde0290 [0093.293] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x403108, lpBuffer=0xde0290, nSize=0x64, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xde0290*, lpNumberOfBytesRead=0x0) returned 1 [0093.293] free (_Block=0xde0290) [0093.294] CloseHandle (hObject=0x240) returned 1 [0093.294] _ui64tow_s (in: _Value=0x4dc, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1244") returned 0x0 [0093.297] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="1244") returned 4 [0093.298] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0093.298] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0093.311] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4dc) returned 0x240 [0093.311] GetLastError () returned 0x0 [0093.311] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c850, ReturnLength=0x0) returned 0x0 [0093.311] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x2cb018, lpBuffer=0xf3c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c820*, lpNumberOfBytesRead=0x0) returned 1 [0093.311] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x7ffd0da95220, lpBuffer=0xf3c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c810*, lpNumberOfBytesRead=0x0) returned 1 [0093.311] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x4c1b70, lpBuffer=0xf3cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3cc30*, lpNumberOfBytesRead=0x0) returned 1 [0093.311] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x4c1818, lpBuffer=0xf3c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c580*, lpNumberOfBytesRead=0x0) returned 1 [0093.312] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x1, ProcessInformation=0xf3c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c880, ReturnLength=0x0) returned 0x0 [0093.313] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c358, ReturnLength=0x0) returned 0x0 [0093.313] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x2cb020, lpBuffer=0xf3c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c340*, lpNumberOfBytesRead=0x0) returned 1 [0093.313] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x4c1200, lpBuffer=0xf3c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c390*, lpNumberOfBytesRead=0x0) returned 1 [0093.313] malloc (_Size=0x42) returned 0xddd480 [0093.313] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x4c1858, lpBuffer=0xddd480, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xddd480*, lpNumberOfBytesRead=0x0) returned 1 [0093.313] free (_Block=0xddd480) [0093.313] CloseHandle (hObject=0x240) returned 1 [0093.314] _ui64tow_s (in: _Value=0x5b4, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1460") returned 0x0 [0093.317] _vsnwprintf (in: _Buffer=0xf3d470, _BufferCount=0x103, _Format="%lu", _ArgList=0xf3c7f8 | out: _Buffer="1460") returned 4 [0093.318] GetVersionExW (in: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0xf3c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0093.318] _vsnwprintf (in: _Buffer=0xf3d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0xf3c7f8 | out: _Buffer="10.0.10586") returned 10 [0093.329] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5b4) returned 0x240 [0093.329] GetLastError () returned 0x0 [0093.329] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c850, ReturnLength=0x0) returned 0x0 [0093.329] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x267018, lpBuffer=0xf3c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c820*, lpNumberOfBytesRead=0x0) returned 1 [0093.329] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x7ffd0da95220, lpBuffer=0xf3c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c810*, lpNumberOfBytesRead=0x0) returned 1 [0093.329] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x5b1bf0, lpBuffer=0xf3cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3cc30*, lpNumberOfBytesRead=0x0) returned 1 [0093.330] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x5b18c8, lpBuffer=0xf3c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c580*, lpNumberOfBytesRead=0x0) returned 1 [0093.330] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x1, ProcessInformation=0xf3c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c880, ReturnLength=0x0) returned 0x0 [0093.331] NtQueryInformationProcess (in: ProcessHandle=0x240, ProcessInformationClass=0x0, ProcessInformation=0xf3c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0xf3c358, ReturnLength=0x0) returned 0x0 [0093.331] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x267020, lpBuffer=0xf3c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c340*, lpNumberOfBytesRead=0x0) returned 1 [0093.331] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x5b12b0, lpBuffer=0xf3c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xf3c390*, lpNumberOfBytesRead=0x0) returned 1 [0093.331] malloc (_Size=0x18) returned 0xde20c0 [0093.331] ReadProcessMemory (in: hProcess=0x240, lpBaseAddress=0x5b1906, lpBuffer=0xde20c0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xde20c0*, lpNumberOfBytesRead=0x0) returned 1 [0093.331] free (_Block=0xde20c0) [0093.332] CloseHandle (hObject=0x240) returned 1 [0093.332] _ui64tow_s (in: _Value=0x620, _Buffer=0xf3d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1568") returned 0x0 Thread: id = 121 os_tid = 0x10e0 Thread: id = 122 os_tid = 0x10dc Thread: id = 123 os_tid = 0x10d8 Process: id = "7" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x79e2b000" os_pid = "0x9d8" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0x274" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xe], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b166" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 124 os_tid = 0xad4 Thread: id = 125 os_tid = 0x31c Thread: id = 126 os_tid = 0xbec Thread: id = 127 os_tid = 0x680 Thread: id = 128 os_tid = 0x520 Thread: id = 129 os_tid = 0x6cc Thread: id = 130 os_tid = 0x49c Thread: id = 131 os_tid = 0x864 Process: id = "8" image_name = "windowsdatac.exe" filename = "c:\\programdata\\windowsdatac.exe" page_root = "0x2f0ca000" os_pid = "0x898" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x64c" cmd_line = "\"C:\\ProgramData\\WindowsDataC.exe\" " cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000126d6" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2731 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2732 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2733 start_va = 0x50000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 2734 start_va = 0x150000 end_va = 0x153fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 2735 start_va = 0x160000 end_va = 0x160fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 2736 start_va = 0x170000 end_va = 0x171fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 2737 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 2738 start_va = 0x400000 end_va = 0x45bfff monitored = 1 entry_point = 0x454e8e region_type = mapped_file name = "windowsdatac.exe" filename = "\\ProgramData\\WindowsDataC.exe" (normalized: "c:\\programdata\\windowsdatac.exe") Region: id = 2739 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2740 start_va = 0x7ff5fffd0000 end_va = 0x7ff5ffff2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5fffd0000" filename = "" Region: id = 2741 start_va = 0x7ffa5f840000 end_va = 0x7ffa5fa00fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2879 start_va = 0x460000 end_va = 0x6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 2880 start_va = 0x7ffa59df0000 end_va = 0x7ffa59e57fff monitored = 1 entry_point = 0x7ffa59df4970 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 2881 start_va = 0x7ffa5dba0000 end_va = 0x7ffa5dc4cfff monitored = 0 entry_point = 0x7ffa5dbb81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2882 start_va = 0x7ffa5c8d0000 end_va = 0x7ffa5cab7fff monitored = 0 entry_point = 0x7ffa5c8fba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2883 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2884 start_va = 0x7ff5ffed0000 end_va = 0x7ff5fffcffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ffed0000" filename = "" Region: id = 2885 start_va = 0x460000 end_va = 0x51dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2886 start_va = 0x600000 end_va = 0x6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 2887 start_va = 0x700000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000700000" filename = "" Region: id = 2888 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2889 start_va = 0x7ffa59c20000 end_va = 0x7ffa59c98fff monitored = 0 entry_point = 0x7ffa59c3fb90 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 2890 start_va = 0x7ff5ffe50000 end_va = 0x7ff5ffecdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\apppatch64\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\apppatch64\\sysmain.sdb") Region: id = 2891 start_va = 0x7ffa5df10000 end_va = 0x7ffa5dfb6fff monitored = 0 entry_point = 0x7ffa5df258d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2892 start_va = 0x7ffa5d880000 end_va = 0x7ffa5d91cfff monitored = 0 entry_point = 0x7ffa5d8878a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2893 start_va = 0x700000 end_va = 0x7fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000700000" filename = "" Region: id = 2894 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 2895 start_va = 0x180000 end_va = 0x186fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 2896 start_va = 0x7ffa5db40000 end_va = 0x7ffa5db9afff monitored = 0 entry_point = 0x7ffa5db538b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2897 start_va = 0x7ffa5ccb0000 end_va = 0x7ffa5cdcbfff monitored = 0 entry_point = 0x7ffa5ccf02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2898 start_va = 0x840000 end_va = 0x97ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 2899 start_va = 0x190000 end_va = 0x196fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 2900 start_va = 0x7ffa59d50000 end_va = 0x7ffa59decfff monitored = 1 entry_point = 0x7ffa59d51010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 2901 start_va = 0x7ffa5cc40000 end_va = 0x7ffa5cc91fff monitored = 0 entry_point = 0x7ffa5cc4f530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2902 start_va = 0x7ffa5dc50000 end_va = 0x7ffa5deccfff monitored = 0 entry_point = 0x7ffa5dd24970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 2903 start_va = 0x7ffa5cbd0000 end_va = 0x7ffa5cc39fff monitored = 0 entry_point = 0x7ffa5cc06d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 2904 start_va = 0x7ffa5d050000 end_va = 0x7ffa5d1d5fff monitored = 0 entry_point = 0x7ffa5d09ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2905 start_va = 0x7ffa5d1e0000 end_va = 0x7ffa5d335fff monitored = 0 entry_point = 0x7ffa5d1ea8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2906 start_va = 0x1a0000 end_va = 0x1d8fff monitored = 0 entry_point = 0x1a12f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2907 start_va = 0x980000 end_va = 0xb07fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000980000" filename = "" Region: id = 2908 start_va = 0x7ffa5ded0000 end_va = 0x7ffa5df0afff monitored = 0 entry_point = 0x7ffa5ded12f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2909 start_va = 0x1a0000 end_va = 0x1a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 2910 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 2911 start_va = 0xb10000 end_va = 0xc90fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b10000" filename = "" Region: id = 2912 start_va = 0xca0000 end_va = 0x209ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ca0000" filename = "" Region: id = 2913 start_va = 0x520000 end_va = 0x573fff monitored = 1 entry_point = 0x574e8e region_type = mapped_file name = "windowsdatac.exe" filename = "\\ProgramData\\WindowsDataC.exe" (normalized: "c:\\programdata\\windowsdatac.exe") Region: id = 2914 start_va = 0x7ffa5beb0000 end_va = 0x7ffa5bebefff monitored = 0 entry_point = 0x7ffa5beb3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 2915 start_va = 0x7ffa4d840000 end_va = 0x7ffa4d849fff monitored = 0 entry_point = 0x7ffa4d841350 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 2916 start_va = 0x7ffa48560000 end_va = 0x7ffa48f45fff monitored = 1 entry_point = 0x7ffa48565b60 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2917 start_va = 0x7ffa57f80000 end_va = 0x7ffa58076fff monitored = 0 entry_point = 0x7ffa57fa4d80 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\System32\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll") Region: id = 2918 start_va = 0x1c0000 end_va = 0x1c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 2919 start_va = 0x1d0000 end_va = 0x1dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 2920 start_va = 0x1e0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 2921 start_va = 0x7ff9e8e40000 end_va = 0x7ff9e8e4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff9e8e40000" filename = "" Region: id = 2922 start_va = 0x7ff9e8e50000 end_va = 0x7ff9e8e5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff9e8e50000" filename = "" Region: id = 2923 start_va = 0x7ff9e8e60000 end_va = 0x7ff9e8eeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff9e8e60000" filename = "" Region: id = 2924 start_va = 0x7ff9e8ef0000 end_va = 0x7ff9e8f5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff9e8ef0000" filename = "" Region: id = 2925 start_va = 0x1f0000 end_va = 0x1f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 2926 start_va = 0x520000 end_va = 0x520fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 2927 start_va = 0x530000 end_va = 0x54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 2928 start_va = 0x840000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 2929 start_va = 0x970000 end_va = 0x97ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000970000" filename = "" Region: id = 2930 start_va = 0x20a0000 end_va = 0x219ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020a0000" filename = "" Region: id = 2931 start_va = 0x530000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 2932 start_va = 0x540000 end_va = 0x54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000540000" filename = "" Region: id = 2933 start_va = 0x21a0000 end_va = 0x1a19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021a0000" filename = "" Region: id = 2934 start_va = 0x1a1a0000 end_va = 0x1a50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a1a0000" filename = "" Region: id = 2935 start_va = 0x1a510000 end_va = 0x1a615fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a510000" filename = "" Region: id = 2936 start_va = 0x1a620000 end_va = 0x1a71ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001a620000" filename = "" Region: id = 2937 start_va = 0x1a720000 end_va = 0x1aa56fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2938 start_va = 0x7ffa47070000 end_va = 0x7ffa48557fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\f89061884b75dab0e3967d7221e5290d\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\f89061884b75dab0e3967d7221e5290d\\mscorlib.ni.dll") Region: id = 2939 start_va = 0x7ffa5d9f0000 end_va = 0x7ffa5db32fff monitored = 0 entry_point = 0x7ffa5da18210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2940 start_va = 0x840000 end_va = 0x8fffff monitored = 0 entry_point = 0x860da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2941 start_va = 0x910000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 2942 start_va = 0x1aa60000 end_va = 0x1ab3cfff monitored = 0 entry_point = 0x1aabe0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 2943 start_va = 0x7ffa5a7e0000 end_va = 0x7ffa5a875fff monitored = 0 entry_point = 0x7ffa5a805570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 2944 start_va = 0x840000 end_va = 0x90ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 2945 start_va = 0x7ff5ffe30000 end_va = 0x7ff5ffecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff5ffe30000" filename = "" Region: id = 2946 start_va = 0x7ff5ffe20000 end_va = 0x7ff5ffe2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff5ffe20000" filename = "" Region: id = 2947 start_va = 0x7ff9e8f60000 end_va = 0x7ff9e8f6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff9e8f60000" filename = "" Region: id = 2948 start_va = 0x7ffa46420000 end_va = 0x7ffa47063fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\60b77585c8aa9cfd1b30a64092c81041\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\60b77585c8aa9cfd1b30a64092c81041\\system.ni.dll") Region: id = 2949 start_va = 0x7ffa4cd80000 end_va = 0x7ffa4cf6afff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\43de4a177616225e9b6262468e1c3b53\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\43de4a177616225e9b6262468e1c3b53\\system.drawing.ni.dll") Region: id = 2950 start_va = 0x7ffa45520000 end_va = 0x7ffa46410fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\37004ddc6f466d807c52ca3b7f9f9827\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\37004ddc6f466d807c52ca3b7f9f9827\\system.windows.forms.ni.dll") Region: id = 2951 start_va = 0x7ff9e8f70000 end_va = 0x7ff9e8faffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff9e8f70000" filename = "" Region: id = 2952 start_va = 0x7ffa57e70000 end_va = 0x7ffa57f7dfff monitored = 1 entry_point = 0x7ffa57e71080 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 2953 start_va = 0x7ffa5d920000 end_va = 0x7ffa5d9e0fff monitored = 0 entry_point = 0x7ffa5d940da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2954 start_va = 0x530000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 2955 start_va = 0x550000 end_va = 0x5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 2956 start_va = 0x7ffa44b90000 end_va = 0x7ffa45511fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Core\\d1da4b8a843ec63bb8be25f8202bedc1\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.core\\d1da4b8a843ec63bb8be25f8202bedc1\\system.core.ni.dll") Region: id = 2957 start_va = 0x7ffa44960000 end_va = 0x7ffa44b83fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "microsoft.visualbasic.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\Microsoft.V9921e851#\\85a40a6654f0aac2a2c52d1deb4d3f17\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\microsoft.v9921e851#\\85a40a6654f0aac2a2c52d1deb4d3f17\\microsoft.visualbasic.ni.dll") Region: id = 2958 start_va = 0x550000 end_va = 0x55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 2959 start_va = 0x5d0000 end_va = 0x5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 2960 start_va = 0x550000 end_va = 0x55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 2961 start_va = 0x560000 end_va = 0x56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 2962 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 2963 start_va = 0x580000 end_va = 0x58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 2964 start_va = 0x590000 end_va = 0x59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 2965 start_va = 0x550000 end_va = 0x55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 2966 start_va = 0x560000 end_va = 0x56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 2967 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 2968 start_va = 0x840000 end_va = 0x8e5fff monitored = 0 entry_point = 0x8493e0 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_396e892957c7fb25\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_396e892957c7fb25\\comctl32.dll") Region: id = 2969 start_va = 0x900000 end_va = 0x90ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000900000" filename = "" Region: id = 2970 start_va = 0x7ffa55a30000 end_va = 0x7ffa55ad9fff monitored = 0 entry_point = 0x7ffa55a393e0 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_396e892957c7fb25\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_396e892957c7fb25\\comctl32.dll") Region: id = 2971 start_va = 0x1aa60000 end_va = 0x1ac3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa60000" filename = "" Region: id = 2972 start_va = 0x550000 end_va = 0x550fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000550000" filename = "" Region: id = 2973 start_va = 0x840000 end_va = 0x8fbfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000840000" filename = "" Region: id = 2974 start_va = 0x550000 end_va = 0x553fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000550000" filename = "" Region: id = 2975 start_va = 0x560000 end_va = 0x566fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 2976 start_va = 0x7ffa596f0000 end_va = 0x7ffa59711fff monitored = 0 entry_point = 0x7ffa596f1a40 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 2977 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 2978 start_va = 0x580000 end_va = 0x58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 2979 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 2980 start_va = 0x580000 end_va = 0x58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 2981 start_va = 0x590000 end_va = 0x59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 2982 start_va = 0x5a0000 end_va = 0x5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 2983 start_va = 0x5b0000 end_va = 0x5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 2984 start_va = 0x5c0000 end_va = 0x5cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 2985 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2986 start_va = 0x5f0000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 2987 start_va = 0x800000 end_va = 0x80ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000800000" filename = "" Region: id = 2988 start_va = 0x810000 end_va = 0x81ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000810000" filename = "" Region: id = 2989 start_va = 0x820000 end_va = 0x82ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000820000" filename = "" Region: id = 2990 start_va = 0x920000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 2991 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 2992 start_va = 0x940000 end_va = 0x94ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000940000" filename = "" Region: id = 2993 start_va = 0x950000 end_va = 0x95ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000950000" filename = "" Region: id = 2994 start_va = 0x960000 end_va = 0x96ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 2995 start_va = 0x1aa60000 end_va = 0x1aa6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa60000" filename = "" Region: id = 2996 start_va = 0x1ac30000 end_va = 0x1ac3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac30000" filename = "" Region: id = 2997 start_va = 0x1aa70000 end_va = 0x1aa7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa70000" filename = "" Region: id = 2998 start_va = 0x1aa80000 end_va = 0x1aa8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa80000" filename = "" Region: id = 2999 start_va = 0x1aa90000 end_va = 0x1aa9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa90000" filename = "" Region: id = 3000 start_va = 0x1aaa0000 end_va = 0x1aaaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aaa0000" filename = "" Region: id = 3001 start_va = 0x1aab0000 end_va = 0x1aabffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aab0000" filename = "" Region: id = 3002 start_va = 0x1aac0000 end_va = 0x1aacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aac0000" filename = "" Region: id = 3003 start_va = 0x1aad0000 end_va = 0x1aadffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aad0000" filename = "" Region: id = 3004 start_va = 0x1aae0000 end_va = 0x1aaeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aae0000" filename = "" Region: id = 3005 start_va = 0x1aaf0000 end_va = 0x1aafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aaf0000" filename = "" Region: id = 3006 start_va = 0x1ab00000 end_va = 0x1ab0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab00000" filename = "" Region: id = 3007 start_va = 0x1ab10000 end_va = 0x1ab1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab10000" filename = "" Region: id = 3008 start_va = 0x1ab20000 end_va = 0x1ab2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab20000" filename = "" Region: id = 3009 start_va = 0x1ab30000 end_va = 0x1ab3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab30000" filename = "" Region: id = 3010 start_va = 0x1ab40000 end_va = 0x1ab4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab40000" filename = "" Region: id = 3011 start_va = 0x1ab50000 end_va = 0x1ab5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab50000" filename = "" Region: id = 3012 start_va = 0x1ab60000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab60000" filename = "" Region: id = 3013 start_va = 0x1ab70000 end_va = 0x1ab7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab70000" filename = "" Region: id = 3014 start_va = 0x1ab80000 end_va = 0x1ab8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab80000" filename = "" Region: id = 3015 start_va = 0x1ab90000 end_va = 0x1ab9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab90000" filename = "" Region: id = 3016 start_va = 0x1aba0000 end_va = 0x1abaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aba0000" filename = "" Region: id = 3017 start_va = 0x1abb0000 end_va = 0x1abbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abb0000" filename = "" Region: id = 3018 start_va = 0x1abc0000 end_va = 0x1abdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abc0000" filename = "" Region: id = 3019 start_va = 0x1abe0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 3020 start_va = 0x1ac00000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac00000" filename = "" Region: id = 3021 start_va = 0x1ac40000 end_va = 0x1ac6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac40000" filename = "" Region: id = 3022 start_va = 0x1ac70000 end_va = 0x1ac7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac70000" filename = "" Region: id = 3023 start_va = 0x1ac80000 end_va = 0x1ac8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac80000" filename = "" Region: id = 3024 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 3025 start_va = 0x1aca0000 end_va = 0x1acaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aca0000" filename = "" Region: id = 3026 start_va = 0x1acb0000 end_va = 0x1acbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 3027 start_va = 0x1acc0000 end_va = 0x1accffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acc0000" filename = "" Region: id = 3028 start_va = 0x1acd0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acd0000" filename = "" Region: id = 3029 start_va = 0x1ace0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 3030 start_va = 0x1acf0000 end_va = 0x1acfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acf0000" filename = "" Region: id = 3031 start_va = 0x1ad00000 end_va = 0x1ad0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad00000" filename = "" Region: id = 3032 start_va = 0x1ad10000 end_va = 0x1ad1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad10000" filename = "" Region: id = 3033 start_va = 0x1ad20000 end_va = 0x1ad2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad20000" filename = "" Region: id = 3034 start_va = 0x1ad30000 end_va = 0x1ad3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad30000" filename = "" Region: id = 3035 start_va = 0x1ad40000 end_va = 0x1ad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad40000" filename = "" Region: id = 3036 start_va = 0x1ad50000 end_va = 0x1ad5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad50000" filename = "" Region: id = 3037 start_va = 0x1ad60000 end_va = 0x1ad6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 3038 start_va = 0x1ad70000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad70000" filename = "" Region: id = 3039 start_va = 0x1ad80000 end_va = 0x1ad8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 3040 start_va = 0x1ad90000 end_va = 0x1ad9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad90000" filename = "" Region: id = 3041 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 3042 start_va = 0x580000 end_va = 0x58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 3043 start_va = 0x590000 end_va = 0x59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 3044 start_va = 0x5a0000 end_va = 0x5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 3045 start_va = 0x5b0000 end_va = 0x5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 3046 start_va = 0x5c0000 end_va = 0x5cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 3047 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3048 start_va = 0x5f0000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 3049 start_va = 0x800000 end_va = 0x80ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000800000" filename = "" Region: id = 3050 start_va = 0x810000 end_va = 0x81ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000810000" filename = "" Region: id = 3051 start_va = 0x820000 end_va = 0x82ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000820000" filename = "" Region: id = 3052 start_va = 0x920000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 3053 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 3054 start_va = 0x940000 end_va = 0x94ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000940000" filename = "" Region: id = 3055 start_va = 0x950000 end_va = 0x95ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000950000" filename = "" Region: id = 3056 start_va = 0x960000 end_va = 0x96ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 3057 start_va = 0x1aa60000 end_va = 0x1aa6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa60000" filename = "" Region: id = 3058 start_va = 0x1aa70000 end_va = 0x1aa7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa70000" filename = "" Region: id = 3059 start_va = 0x1aa80000 end_va = 0x1aa8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa80000" filename = "" Region: id = 3060 start_va = 0x1aa90000 end_va = 0x1aa9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa90000" filename = "" Region: id = 3061 start_va = 0x1aaa0000 end_va = 0x1aaaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aaa0000" filename = "" Region: id = 3062 start_va = 0x1aab0000 end_va = 0x1aabffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aab0000" filename = "" Region: id = 3063 start_va = 0x1aac0000 end_va = 0x1aacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aac0000" filename = "" Region: id = 3064 start_va = 0x1aad0000 end_va = 0x1aadffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aad0000" filename = "" Region: id = 3065 start_va = 0x1aae0000 end_va = 0x1aaeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aae0000" filename = "" Region: id = 3066 start_va = 0x1aaf0000 end_va = 0x1aafffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aaf0000" filename = "" Region: id = 3067 start_va = 0x1ab00000 end_va = 0x1ab1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab00000" filename = "" Region: id = 3068 start_va = 0x1ab20000 end_va = 0x1ab4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab20000" filename = "" Region: id = 3069 start_va = 0x1ab50000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab50000" filename = "" Region: id = 3070 start_va = 0x1ab70000 end_va = 0x1abcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab70000" filename = "" Region: id = 3071 start_va = 0x1abd0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abd0000" filename = "" Region: id = 3072 start_va = 0x1ac00000 end_va = 0x1ac0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac00000" filename = "" Region: id = 3073 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 3074 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 3075 start_va = 0x1ac40000 end_va = 0x1ac4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac40000" filename = "" Region: id = 3076 start_va = 0x1ac50000 end_va = 0x1ac5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac50000" filename = "" Region: id = 3077 start_va = 0x1ac60000 end_va = 0x1ac6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac60000" filename = "" Region: id = 3078 start_va = 0x1ac70000 end_va = 0x1ac7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac70000" filename = "" Region: id = 3079 start_va = 0x1ac80000 end_va = 0x1ac8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac80000" filename = "" Region: id = 3080 start_va = 0x1ac90000 end_va = 0x1ac9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac90000" filename = "" Region: id = 3081 start_va = 0x7ffa50bd0000 end_va = 0x7ffa50d78fff monitored = 0 entry_point = 0x7ffa50c24060 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_0bdd1d3064f6384a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_0bdd1d3064f6384a\\gdiplus.dll") Region: id = 3082 start_va = 0x1aa60000 end_va = 0x1ab7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa60000" filename = "" Region: id = 3083 start_va = 0x1aa60000 end_va = 0x1ab5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aa60000" filename = "" Region: id = 3084 start_va = 0x1ab70000 end_va = 0x1ab7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab70000" filename = "" Region: id = 3085 start_va = 0x7ffa5cef0000 end_va = 0x7ffa5d049fff monitored = 0 entry_point = 0x7ffa5cf338e0 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 3086 start_va = 0x7ffa55d30000 end_va = 0x7ffa55f8ffff monitored = 0 entry_point = 0x7ffa55ddb5b0 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\System32\\DWrite.dll" (normalized: "c:\\windows\\system32\\dwrite.dll") Region: id = 3087 start_va = 0x570000 end_va = 0x5b8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-system.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-System.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-system.dat") Region: id = 3088 start_va = 0x1ac40000 end_va = 0x1ad3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac40000" filename = "" Region: id = 3089 start_va = 0x1ad40000 end_va = 0x1bd3ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-fontface.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-FontFace.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-fontface.dat") Region: id = 3090 start_va = 0x5c0000 end_va = 0x5c6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 3091 start_va = 0x1bd40000 end_va = 0x1be3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001bd40000" filename = "" Region: id = 3092 start_va = 0x1be40000 end_va = 0x1c331fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001be40000" filename = "" Region: id = 3093 start_va = 0x1c340000 end_va = 0x1c3fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 3094 start_va = 0x1c400000 end_va = 0x1c7fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001c400000" filename = "" Region: id = 3095 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3096 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3097 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3098 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3099 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3100 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3101 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3102 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3103 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3104 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3105 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3106 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3107 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3108 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3109 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3110 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3111 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3112 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3113 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3114 start_va = 0x5f0000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 3115 start_va = 0x7ff9e8fb0000 end_va = 0x7ff9e8fbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff9e8fb0000" filename = "" Region: id = 3116 start_va = 0x7ff9e8fc0000 end_va = 0x7ff9e8fcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff9e8fc0000" filename = "" Region: id = 3117 start_va = 0x920000 end_va = 0x957fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000920000" filename = "" Region: id = 3118 start_va = 0x5e0000 end_va = 0x5e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 3119 start_va = 0x7ffa5bef0000 end_va = 0x7ffa5bfa4fff monitored = 0 entry_point = 0x7ffa5bf322e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 3120 start_va = 0x5f0000 end_va = 0x5f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 3121 start_va = 0x800000 end_va = 0x804fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 3122 start_va = 0x810000 end_va = 0x810fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000810000" filename = "" Region: id = 3123 start_va = 0x1c800000 end_va = 0x1d83ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 3124 start_va = 0x1d840000 end_va = 0x1d93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d840000" filename = "" Region: id = 3125 start_va = 0x820000 end_va = 0x826fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000820000" filename = "" Region: id = 3126 start_va = 0x1d940000 end_va = 0x1da3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001d940000" filename = "" Region: id = 3127 start_va = 0x960000 end_va = 0x96ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 3128 start_va = 0x1ab60000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab60000" filename = "" Region: id = 3129 start_va = 0x960000 end_va = 0x96ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 3130 start_va = 0x1da40000 end_va = 0x1db3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001da40000" filename = "" Region: id = 3131 start_va = 0x960000 end_va = 0x96ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 3132 start_va = 0x1ab60000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab60000" filename = "" Region: id = 3133 start_va = 0x1ab80000 end_va = 0x1ab8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab80000" filename = "" Region: id = 3134 start_va = 0x1ab60000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab60000" filename = "" Region: id = 3135 start_va = 0x7ff9e8fd0000 end_va = 0x7ff9e8fdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ff9e8fd0000" filename = "" Region: id = 3136 start_va = 0x1ab60000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab60000" filename = "" Region: id = 3137 start_va = 0x1ab80000 end_va = 0x1ab8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab80000" filename = "" Region: id = 3138 start_va = 0x1ab90000 end_va = 0x1ab9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab90000" filename = "" Region: id = 3139 start_va = 0x1ab60000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab60000" filename = "" Region: id = 3140 start_va = 0x1ab60000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab60000" filename = "" Region: id = 3141 start_va = 0x1ab60000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab60000" filename = "" Region: id = 3142 start_va = 0x960000 end_va = 0x96ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 3143 start_va = 0x7ffa5e0b0000 end_va = 0x7ffa5f60efff monitored = 0 entry_point = 0x7ffa5e2111f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 3144 start_va = 0x7ffa5bfb0000 end_va = 0x7ffa5bff2fff monitored = 0 entry_point = 0x7ffa5bfc4b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 3145 start_va = 0x7ffa5c260000 end_va = 0x7ffa5c8a3fff monitored = 0 entry_point = 0x7ffa5c4264b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 3146 start_va = 0x7ffa5be60000 end_va = 0x7ffa5beaafff monitored = 0 entry_point = 0x7ffa5be635f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 3147 start_va = 0x7ffa5bec0000 end_va = 0x7ffa5bed3fff monitored = 0 entry_point = 0x7ffa5bec52e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 3148 start_va = 0x960000 end_va = 0x96ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 3149 start_va = 0x1ab60000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab60000" filename = "" Region: id = 3150 start_va = 0x1ab80000 end_va = 0x1ab8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab80000" filename = "" Region: id = 3151 start_va = 0x1ab90000 end_va = 0x1ab9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab90000" filename = "" Region: id = 3152 start_va = 0x1aba0000 end_va = 0x1abaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aba0000" filename = "" Region: id = 3153 start_va = 0x1abb0000 end_va = 0x1abbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abb0000" filename = "" Region: id = 3154 start_va = 0x1abc0000 end_va = 0x1abcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abc0000" filename = "" Region: id = 3155 start_va = 0x1abd0000 end_va = 0x1abdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abd0000" filename = "" Region: id = 3156 start_va = 0x1abe0000 end_va = 0x1abeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abe0000" filename = "" Region: id = 3157 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 3158 start_va = 0x1ac00000 end_va = 0x1ac0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac00000" filename = "" Region: id = 3159 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 3160 start_va = 0x1ac20000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac20000" filename = "" Region: id = 3161 start_va = 0x1db40000 end_va = 0x1db4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db40000" filename = "" Region: id = 3162 start_va = 0x1db50000 end_va = 0x1db5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db50000" filename = "" Region: id = 3163 start_va = 0x1db60000 end_va = 0x1db6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db60000" filename = "" Region: id = 3164 start_va = 0x1db60000 end_va = 0x1db6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db60000" filename = "" Region: id = 3165 start_va = 0x1db60000 end_va = 0x1db6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db60000" filename = "" Region: id = 3166 start_va = 0x1db60000 end_va = 0x1db6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db60000" filename = "" Region: id = 3167 start_va = 0x1db60000 end_va = 0x1db6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db60000" filename = "" Region: id = 3168 start_va = 0x1db70000 end_va = 0x1db7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db70000" filename = "" Region: id = 3169 start_va = 0x1db60000 end_va = 0x1db6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db60000" filename = "" Region: id = 3170 start_va = 0x1db60000 end_va = 0x1db6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db60000" filename = "" Region: id = 3171 start_va = 0x1db60000 end_va = 0x1db6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db60000" filename = "" Region: id = 3172 start_va = 0x1db60000 end_va = 0x1db6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db60000" filename = "" Region: id = 3173 start_va = 0x1db60000 end_va = 0x1db6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db60000" filename = "" Region: id = 3174 start_va = 0x1db60000 end_va = 0x1db6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db60000" filename = "" Region: id = 3175 start_va = 0x1db70000 end_va = 0x1db7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db70000" filename = "" Region: id = 3176 start_va = 0x1db60000 end_va = 0x1db6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db60000" filename = "" Region: id = 3177 start_va = 0x1db60000 end_va = 0x1db6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db60000" filename = "" Region: id = 3178 start_va = 0x1db80000 end_va = 0x1db8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db80000" filename = "" Region: id = 3179 start_va = 0x1db90000 end_va = 0x1db9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001db90000" filename = "" Region: id = 3180 start_va = 0x1dba0000 end_va = 0x1dbaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dba0000" filename = "" Region: id = 3181 start_va = 0x1dbb0000 end_va = 0x1dbbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dbb0000" filename = "" Region: id = 3182 start_va = 0x1dbc0000 end_va = 0x1dbcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dbc0000" filename = "" Region: id = 3183 start_va = 0x1dbd0000 end_va = 0x1dbdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dbd0000" filename = "" Region: id = 3184 start_va = 0x1dbe0000 end_va = 0x1dbeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dbe0000" filename = "" Region: id = 3185 start_va = 0x1dbf0000 end_va = 0x1dbfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dbf0000" filename = "" Region: id = 3186 start_va = 0x1dc00000 end_va = 0x1dc0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc00000" filename = "" Region: id = 3187 start_va = 0x1dc10000 end_va = 0x1dc1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc10000" filename = "" Region: id = 3188 start_va = 0x1dc20000 end_va = 0x1dc2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc20000" filename = "" Region: id = 3189 start_va = 0x1dc30000 end_va = 0x1dc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc30000" filename = "" Region: id = 3190 start_va = 0x1dc30000 end_va = 0x1dc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc30000" filename = "" Region: id = 3191 start_va = 0x1dc30000 end_va = 0x1dc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc30000" filename = "" Region: id = 3192 start_va = 0x1dc30000 end_va = 0x1dc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc30000" filename = "" Region: id = 3193 start_va = 0x1dc30000 end_va = 0x1dc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc30000" filename = "" Region: id = 3194 start_va = 0x1dc40000 end_va = 0x1dc4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc40000" filename = "" Region: id = 3195 start_va = 0x1dc50000 end_va = 0x1dc5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc50000" filename = "" Region: id = 3196 start_va = 0x1dc60000 end_va = 0x1dc6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc60000" filename = "" Region: id = 3197 start_va = 0x1dc70000 end_va = 0x1dc7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc70000" filename = "" Region: id = 3198 start_va = 0x1dc80000 end_va = 0x1dc8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc80000" filename = "" Region: id = 3199 start_va = 0x1dc90000 end_va = 0x1dc9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc90000" filename = "" Region: id = 3200 start_va = 0x1dca0000 end_va = 0x1dcaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dca0000" filename = "" Region: id = 3201 start_va = 0x1dcb0000 end_va = 0x1dcbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dcb0000" filename = "" Region: id = 3202 start_va = 0x1dcc0000 end_va = 0x1dcdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dcc0000" filename = "" Region: id = 3203 start_va = 0x1dce0000 end_va = 0x1dcfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dce0000" filename = "" Region: id = 3204 start_va = 0x1dd00000 end_va = 0x1dd2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dd00000" filename = "" Region: id = 3205 start_va = 0x1dc30000 end_va = 0x1dc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc30000" filename = "" Region: id = 3206 start_va = 0x1dc30000 end_va = 0x1dc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc30000" filename = "" Region: id = 3207 start_va = 0x1dc30000 end_va = 0x1dc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc30000" filename = "" Region: id = 3208 start_va = 0x1dd30000 end_va = 0x1dd3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dd30000" filename = "" Region: id = 3209 start_va = 0x1dc30000 end_va = 0x1dc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc30000" filename = "" Region: id = 3210 start_va = 0x1dc30000 end_va = 0x1dc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc30000" filename = "" Region: id = 3211 start_va = 0x1dc30000 end_va = 0x1dc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc30000" filename = "" Region: id = 3212 start_va = 0x1dc30000 end_va = 0x1dc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc30000" filename = "" Region: id = 3213 start_va = 0x1dc30000 end_va = 0x1dc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc30000" filename = "" Region: id = 3214 start_va = 0x1dd30000 end_va = 0x1dd5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dd30000" filename = "" Region: id = 3215 start_va = 0x1dc30000 end_va = 0x1dc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc30000" filename = "" Region: id = 3216 start_va = 0x1dd60000 end_va = 0x1dd6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dd60000" filename = "" Region: id = 3217 start_va = 0x1dd70000 end_va = 0x1dd7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dd70000" filename = "" Region: id = 3218 start_va = 0x1dd80000 end_va = 0x1dd8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dd80000" filename = "" Region: id = 3219 start_va = 0x1dd90000 end_va = 0x1dd9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dd90000" filename = "" Region: id = 3220 start_va = 0x1dda0000 end_va = 0x1ddaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dda0000" filename = "" Region: id = 3221 start_va = 0x1ddb0000 end_va = 0x1ddbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ddb0000" filename = "" Region: id = 3222 start_va = 0x1ddc0000 end_va = 0x1ddcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ddc0000" filename = "" Region: id = 3223 start_va = 0x1ddd0000 end_va = 0x1dddffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ddd0000" filename = "" Region: id = 3224 start_va = 0x1dde0000 end_va = 0x1ddeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dde0000" filename = "" Region: id = 3225 start_va = 0x1ddf0000 end_va = 0x1ddfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ddf0000" filename = "" Region: id = 3226 start_va = 0x1de00000 end_va = 0x1de0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001de00000" filename = "" Region: id = 3227 start_va = 0x1de10000 end_va = 0x1de1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001de10000" filename = "" Region: id = 3228 start_va = 0x1de20000 end_va = 0x1de2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001de20000" filename = "" Region: id = 3229 start_va = 0x1de30000 end_va = 0x1de3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001de30000" filename = "" Region: id = 3230 start_va = 0x1de40000 end_va = 0x1de4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001de40000" filename = "" Region: id = 3231 start_va = 0x1de50000 end_va = 0x1de5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001de50000" filename = "" Region: id = 3232 start_va = 0x1de60000 end_va = 0x1de6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001de60000" filename = "" Region: id = 3233 start_va = 0x1ab80000 end_va = 0x1abe1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscorrc.dll") Region: id = 3234 start_va = 0x960000 end_va = 0x96ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 3235 start_va = 0x1ab60000 end_va = 0x1ab6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ab60000" filename = "" Region: id = 3236 start_va = 0x1abf0000 end_va = 0x1abfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001abf0000" filename = "" Region: id = 3237 start_va = 0x1ac00000 end_va = 0x1ac0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac00000" filename = "" Region: id = 3238 start_va = 0x1ac10000 end_va = 0x1ac1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 3239 start_va = 0x960000 end_va = 0x96ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 3240 start_va = 0x1db40000 end_va = 0x1db91fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001db40000" filename = "" Region: id = 3241 start_va = 0x1dba0000 end_va = 0x1dbf1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001dba0000" filename = "" Region: id = 3242 start_va = 0x960000 end_va = 0x96ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 3243 start_va = 0x960000 end_va = 0x96ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 3244 start_va = 0x1dc00000 end_va = 0x1dcfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001dc00000" filename = "" Region: id = 3245 start_va = 0x7ffa5a460000 end_va = 0x7ffa5a5e5fff monitored = 0 entry_point = 0x7ffa5a4ad700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 3246 start_va = 0x960000 end_va = 0x960fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000960000" filename = "" Region: id = 3247 start_va = 0x7ffa5d7d0000 end_va = 0x7ffa5d876fff monitored = 0 entry_point = 0x7ffa5d7db4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 3248 start_va = 0x1ab60000 end_va = 0x1ab60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ab60000" filename = "" Region: id = 3249 start_va = 0x1abf0000 end_va = 0x1abf3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 3250 start_va = 0x1dd00000 end_va = 0x1dd44fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db") Region: id = 3251 start_va = 0x1ac00000 end_va = 0x1ac03fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 3252 start_va = 0x1dd50000 end_va = 0x1ddddfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 3253 start_va = 0x1ac10000 end_va = 0x1ac20fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 3254 start_va = 0x1dde0000 end_va = 0x1ddf0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 3255 start_va = 0x1de00000 end_va = 0x1de03fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 3256 start_va = 0x1de10000 end_va = 0x1de2afff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db") Region: id = 3257 start_va = 0x1de30000 end_va = 0x1de30fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001de30000" filename = "" Region: id = 3258 start_va = 0x1de40000 end_va = 0x1df3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001de40000" filename = "" Region: id = 3259 start_va = 0x1df40000 end_va = 0x1e01cfff monitored = 0 entry_point = 0x1df9e0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 3260 start_va = 0x1df40000 end_va = 0x1e03ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001df40000" filename = "" Region: id = 3261 start_va = 0x1e040000 end_va = 0x1e13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e040000" filename = "" Region: id = 3262 start_va = 0x1e140000 end_va = 0x1e23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e140000" filename = "" Region: id = 3263 start_va = 0x1e240000 end_va = 0x1e33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001e240000" filename = "" Region: id = 3264 start_va = 0x7ffa4ffd0000 end_va = 0x7ffa50187fff monitored = 0 entry_point = 0x7ffa5003e630 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 3265 start_va = 0x7ffa566b0000 end_va = 0x7ffa56a31fff monitored = 0 entry_point = 0x7ffa56701220 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 3266 start_va = 0x7ffa5bb40000 end_va = 0x7ffa5bb6cfff monitored = 0 entry_point = 0x7ffa5bb59d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 3267 start_va = 0x1ac10000 end_va = 0x1ac10fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ac10000" filename = "" Region: id = 3268 start_va = 0x7ff5ffa70000 end_va = 0x7ff5ffe10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 3289 start_va = 0x7ff5ffa70000 end_va = 0x7ff5ffe10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 3306 start_va = 0x1ac20000 end_va = 0x1ac20fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ac20000" filename = "" Region: id = 3307 start_va = 0x920000 end_va = 0x920fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 3308 start_va = 0x1e340000 end_va = 0x1eb3ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-s-1-5-21-1560258661-3990802383-1811730007-1000.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-S-1-5-21-1560258661-3990802383-1811730007-1000.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-s-1-5-21-1560258661-3990802383-1811730007-1000.dat") Region: id = 3309 start_va = 0x1be40000 end_va = 0x1be77fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001be40000" filename = "" Region: id = 3310 start_va = 0x920000 end_va = 0x921fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 3311 start_va = 0x930000 end_va = 0x930fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 6161 start_va = 0x700000 end_va = 0x737fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000700000" filename = "" Region: id = 6162 start_va = 0x740000 end_va = 0x744fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll" filename = "\\Windows\\System32\\winnlsres.dll" (normalized: "c:\\windows\\system32\\winnlsres.dll") Region: id = 6163 start_va = 0x750000 end_va = 0x75ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll.mui" filename = "\\Windows\\System32\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winnlsres.dll.mui") Thread: id = 143 os_tid = 0x89c [0150.371] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0150.445] RoInitialize () returned 0x1 [0150.445] RoUninitialize () returned 0x0 [0152.820] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc065 [0152.820] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc150 [0152.894] GetSystemMetrics (nIndex=75) returned 1 [0152.904] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0152.907] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7ffa55a30000 [0152.933] AdjustWindowRectEx (in: lpRect=0x14e590, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x14e590) returned 1 [0152.952] GetCurrentProcess () returned 0xffffffffffffffff [0152.952] GetCurrentThread () returned 0xfffffffffffffffe [0152.952] GetCurrentProcess () returned 0xffffffffffffffff [0152.952] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x14e3a0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x14e3a0*=0x250) returned 1 [0152.957] GetCurrentThreadId () returned 0x89c [0152.972] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0152.977] GetModuleHandleW (lpModuleName="user32.dll") returned 0x7ffa5d1e0000 [0152.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0x14dfd0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcW", lpUsedDefaultChar=0x0) returned 14 [0152.978] GetProcAddress (hModule=0x7ffa5d1e0000, lpProcName="DefWindowProcW") returned 0x7ffa5f8e4a40 [0152.978] GetStockObject (i=5) returned 0x1900015 [0152.982] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0152.986] CoTaskMemAlloc (cb=0x5a) returned 0x6902f0 [0152.986] RegisterClassW (lpWndClass=0x14df90) returned 0xc151 [0152.987] CoTaskMemFree (pv=0x6902f0) [0152.987] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0152.988] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.1ca0192_r8_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x30044 [0152.996] SetWindowLongPtrW (hWnd=0x30044, nIndex=-4, dwNewLong=0x7ffa5f8e4a40) returned 0x5d089c [0152.999] GetWindowLongPtrW (hWnd=0x30044, nIndex=-4) returned 0x7ffa5f8e4a40 [0153.009] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x14d358 | out: phkResult=0x14d358*=0x254) returned 0x0 [0153.011] RegQueryValueExW (in: hKey=0x254, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x14d3a8, lpData=0x0, lpcbData=0x14d3a0*=0x0 | out: lpType=0x14d3a8*=0x0, lpData=0x0, lpcbData=0x14d3a0*=0x0) returned 0x2 [0153.011] RegQueryValueExW (in: hKey=0x254, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x14d3a8, lpData=0x0, lpcbData=0x14d3a0*=0x0 | out: lpType=0x14d3a8*=0x0, lpData=0x0, lpcbData=0x14d3a0*=0x0) returned 0x2 [0153.011] RegCloseKey (hKey=0x254) returned 0x0 [0153.015] SetWindowLongPtrW (hWnd=0x30044, nIndex=-4, dwNewLong=0x5d08ec) returned 0x7ffa5f8e4a40 [0153.015] GetWindowLongPtrW (hWnd=0x30044, nIndex=-4) returned 0x5d08ec [0153.015] GetWindowLongPtrW (hWnd=0x30044, nIndex=-16) returned 0x6c10000 [0153.018] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc136 [0153.019] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x30044, Msg=0x24, wParam=0x0, lParam=0x14d9b0) returned 0x0 [0153.019] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc137 [0153.019] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x30044, Msg=0x81, wParam=0x0, lParam=0x14d920) returned 0x1 [0153.019] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x30044, Msg=0x83, wParam=0x0, lParam=0x14d9d0) returned 0x0 [0153.023] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x30044, Msg=0x1, wParam=0x0, lParam=0x14d920) returned 0x0 [0153.023] GetClientRect (in: hWnd=0x30044, lpRect=0x14d3b0 | out: lpRect=0x14d3b0) returned 1 [0153.024] GetWindowRect (in: hWnd=0x30044, lpRect=0x14d3b0 | out: lpRect=0x14d3b0) returned 1 [0153.027] GetParent (hWnd=0x30044) returned 0x0 [0153.544] GetSystemDefaultLCID () returned 0x409 [0153.545] GetStockObject (i=17) returned 0x10a0047 [0153.549] GetObjectW (in: h=0x10a0047, c=92, pv=0x14d6e0 | out: pv=0x14d6e0) returned 92 [0153.551] GetDC (hWnd=0x0) returned 0xa0100d0 [0153.561] GdiplusStartup (in: token=0x7ff9e8e56f40, input=0x14bfa8, output=0x14c058 | out: token=0x7ff9e8e56f40, output=0x14c058) returned 0x0 [0153.567] CoTaskMemAlloc (cb=0x5c) returned 0x68fd40 [0153.589] GdipCreateFontFromLogfontW (hdc=0xa0100d0, logfont=0x68fd40, font=0x14d820) returned 0x0 [0153.689] CoTaskMemFree (pv=0x68fd40) [0153.690] CoTaskMemAlloc (cb=0x5c) returned 0x6904b0 [0153.691] CoTaskMemFree (pv=0x6904b0) [0153.692] CoTaskMemAlloc (cb=0x5c) returned 0x690600 [0153.693] CoTaskMemFree (pv=0x690600) [0153.695] GdipGetFontUnit (font=0x1ab734f0, unit=0x14d790) returned 0x0 [0153.695] GdipGetFontSize (font=0x1ab734f0, size=0x14d79c) returned 0x0 [0153.695] GdipGetFontStyle (font=0x1ab734f0, style=0x14d788) returned 0x0 [0153.695] GdipGetFamily (font=0x1ab734f0, family=0x14d780) returned 0x0 [0153.698] GdipGetFontSize (font=0x1ab734f0, size=0x21b0f58) returned 0x0 [0153.699] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0153.702] GetDC (hWnd=0x0) returned 0xa0100d0 [0153.702] GdipCreateFromHDC (hdc=0xa0100d0, graphics=0x14d798) returned 0x0 [0153.711] GdipGetDpiY (graphics=0x1bd51520, dpi=0x21b1130) returned 0x0 [0153.711] GdipGetFontHeight (font=0x1ab734f0, graphics=0x1bd51520, height=0x14d794) returned 0x0 [0153.712] GdipGetEmHeight (family=0x1ab7a760, style=0, EmHeight=0x14d798) returned 0x0 [0153.714] GdipGetLineSpacing (family=0x1ab7a760, style=0, LineSpacing=0x14d798) returned 0x0 [0153.715] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0153.715] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0153.721] GdipCreateFont (fontFamily=0x1ab7a760, emSize=0x7ffa4cded4a5, style=0, unit=0x3, font=0x21b10c0) returned 0x0 [0153.721] GdipGetFontSize (font=0x1ab7ebe0, size=0x21b10c8) returned 0x0 [0153.722] GdipDeleteFont (font=0x1ab734f0) returned 0x0 [0153.724] GetDC (hWnd=0x0) returned 0xa0100d0 [0153.724] GdipCreateFromHDC (hdc=0xa0100d0, graphics=0x14d8f8) returned 0x0 [0153.725] GdipGetFontHeight (font=0x1ab7ebe0, graphics=0x1bd51520, height=0x14d8f4) returned 0x0 [0153.725] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0153.726] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0153.726] GetSystemMetrics (nIndex=5) returned 1 [0153.726] GetSystemMetrics (nIndex=6) returned 1 [0153.727] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0153.728] AdjustWindowRectEx (in: lpRect=0x14dba0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14dba0) returned 1 [0153.741] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0153.742] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0153.773] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0153.773] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0153.801] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0153.802] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0153.826] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0153.826] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0153.850] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0153.850] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0153.875] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0153.875] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0153.901] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0153.901] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0153.924] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0153.924] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0153.951] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0153.951] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0153.977] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0153.977] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0153.996] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0153.996] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0154.000] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.001] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0154.006] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.006] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0154.009] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.009] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0154.017] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.017] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0154.020] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.020] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0154.023] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.023] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0154.026] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.026] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0154.031] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.031] AdjustWindowRectEx (in: lpRect=0x14db80, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db80) returned 1 [0154.051] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x14db50) returned 0x0 [0154.052] GdipCreateFont (fontFamily=0x1ab7a760, emSize=0x7ffa4cded4a5, style=1, unit=0x3, font=0x21b4d38) returned 0x0 [0154.052] GdipGetFontSize (font=0x1ab734f0, size=0x21b4d40) returned 0x0 [0154.061] GetDC (hWnd=0x0) returned 0xa0100d0 [0154.062] GdipCreateFromHDC (hdc=0xa0100d0, graphics=0x14da78) returned 0x0 [0154.062] GdipGetFontHeight (font=0x1ab734f0, graphics=0x1bd51520, height=0x14da74) returned 0x0 [0154.062] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0154.062] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0154.070] GetDC (hWnd=0x0) returned 0xa0100d0 [0154.070] GdipCreateFromHDC (hdc=0xa0100d0, graphics=0x14d948) returned 0x0 [0154.070] GdipGetFontHeight (font=0x1ab734f0, graphics=0x1bd51520, height=0x14d944) returned 0x0 [0154.070] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0154.070] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0154.070] GetSystemMetrics (nIndex=5) returned 1 [0154.071] GetSystemMetrics (nIndex=6) returned 1 [0154.071] GetSystemMetrics (nIndex=5) returned 1 [0154.071] GetSystemMetrics (nIndex=6) returned 1 [0154.071] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.071] AdjustWindowRectEx (in: lpRect=0x14d998, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d998) returned 1 [0154.079] GetSystemMetrics (nIndex=5) returned 1 [0154.079] GetSystemMetrics (nIndex=6) returned 1 [0154.079] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.079] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14da78) returned 1 [0154.084] GetSystemMetrics (nIndex=5) returned 1 [0154.084] GetSystemMetrics (nIndex=6) returned 1 [0154.084] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.084] AdjustWindowRectEx (in: lpRect=0x14d998, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d998) returned 1 [0154.085] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.085] AdjustWindowRectEx (in: lpRect=0x14d998, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d998) returned 1 [0154.092] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.092] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14da78) returned 1 [0154.113] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.113] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.127] GetProcessWindowStation () returned 0xcc [0154.131] GetUserObjectInformationA (in: hObj=0xcc, nIndex=1, pvInfo=0x21b59c0, nLength=0xc, lpnLengthNeeded=0x14d6f0 | out: pvInfo=0x21b59c0, lpnLengthNeeded=0x14d6f0) returned 1 [0154.133] SetConsoleCtrlHandler (HandlerRoutine=0x5d093c, Add=1) returned 1 [0154.134] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.134] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.136] GetClassInfoW (in: hInstance=0x400000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.1ca0192.0", lpWndClass=0x21b5a80 | out: lpWndClass=0x21b5a80) returned 0 [0154.137] CoTaskMemAlloc (cb=0x58) returned 0x6c0ac0 [0154.137] RegisterClassW (lpWndClass=0x14d500) returned 0xc153 [0154.137] CoTaskMemFree (pv=0x6c0ac0) [0154.138] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.1ca0192.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.1ca0192.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x30038 [0154.140] NtdllDefWindowProc_W (hWnd=0x30038, Msg=0x81, wParam=0x0, lParam=0x14ce20) returned 0x1 [0154.147] NtdllDefWindowProc_W (hWnd=0x30038, Msg=0x83, wParam=0x0, lParam=0x14ced0) returned 0x0 [0154.147] NtdllDefWindowProc_W (hWnd=0x30038, Msg=0x1, wParam=0x0, lParam=0x14cdc0) returned 0x0 [0154.147] NtdllDefWindowProc_W (hWnd=0x30038, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0154.147] NtdllDefWindowProc_W (hWnd=0x30038, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0154.151] GetSysColor (nIndex=10) returned 0xb4b4b4 [0154.152] GetSysColor (nIndex=2) returned 0xd1b499 [0154.152] GetSysColor (nIndex=9) returned 0x0 [0154.152] GetSysColor (nIndex=12) returned 0xababab [0154.152] GetSysColor (nIndex=15) returned 0xf0f0f0 [0154.152] GetSysColor (nIndex=20) returned 0xffffff [0154.152] GetSysColor (nIndex=16) returned 0xa0a0a0 [0154.152] GetSysColor (nIndex=15) returned 0xf0f0f0 [0154.152] GetSysColor (nIndex=16) returned 0xa0a0a0 [0154.152] GetSysColor (nIndex=21) returned 0x696969 [0154.152] GetSysColor (nIndex=22) returned 0xe3e3e3 [0154.152] GetSysColor (nIndex=20) returned 0xffffff [0154.152] GetSysColor (nIndex=18) returned 0x0 [0154.152] GetSysColor (nIndex=1) returned 0x0 [0154.152] GetSysColor (nIndex=27) returned 0xead1b9 [0154.152] GetSysColor (nIndex=28) returned 0xf2e4d7 [0154.152] GetSysColor (nIndex=17) returned 0x6d6d6d [0154.152] GetSysColor (nIndex=13) returned 0xff9933 [0154.152] GetSysColor (nIndex=14) returned 0xffffff [0154.152] GetSysColor (nIndex=26) returned 0xcc6600 [0154.152] GetSysColor (nIndex=11) returned 0xfcf7f4 [0154.152] GetSysColor (nIndex=3) returned 0xdbcdbf [0154.152] GetSysColor (nIndex=19) returned 0x0 [0154.152] GetSysColor (nIndex=24) returned 0xe1ffff [0154.152] GetSysColor (nIndex=23) returned 0x0 [0154.152] GetSysColor (nIndex=4) returned 0xf0f0f0 [0154.153] GetSysColor (nIndex=30) returned 0xf0f0f0 [0154.153] GetSysColor (nIndex=29) returned 0xff9933 [0154.153] GetSysColor (nIndex=7) returned 0x0 [0154.153] GetSysColor (nIndex=0) returned 0xc8c8c8 [0154.153] GetSysColor (nIndex=5) returned 0xffffff [0154.153] GetSysColor (nIndex=6) returned 0x646464 [0154.153] GetSysColor (nIndex=8) returned 0x0 [0154.153] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.153] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.160] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.160] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.161] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.161] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.163] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.163] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.163] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.163] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.165] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.165] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.165] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.165] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.168] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.168] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.168] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.168] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.169] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.169] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.169] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.169] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.170] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.170] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.170] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.170] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.171] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.171] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.171] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.171] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.172] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.172] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.172] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.172] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.172] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.172] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.173] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.173] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.173] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.173] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.174] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.174] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.174] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.174] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.175] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.175] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.175] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.175] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.175] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.176] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.176] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.176] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.176] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.176] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.181] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.181] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.182] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.182] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.182] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.182] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.183] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.183] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.183] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x14db50) returned 0x0 [0154.183] GdipCreateFont (fontFamily=0x1ab7a760, emSize=0x7ffa4cded4a5, style=1, unit=0x3, font=0x21b7080) returned 0x0 [0154.183] GdipGetFontSize (font=0x1ab7ec20, size=0x21b7088) returned 0x0 [0154.185] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.185] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.185] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.185] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.186] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.186] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.186] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.186] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.187] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.187] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.187] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.187] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0154.191] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.191] AdjustWindowRectEx (in: lpRect=0x14dad8, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14dad8) returned 1 [0154.191] GetSystemMetrics (nIndex=59) returned 1456 [0154.191] GetSystemMetrics (nIndex=60) returned 916 [0154.191] GetSystemMetrics (nIndex=34) returned 136 [0154.191] GetSystemMetrics (nIndex=35) returned 39 [0154.191] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.191] AdjustWindowRectEx (in: lpRect=0x14d898, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14d898) returned 1 [0154.192] GetCurrentThreadId () returned 0x89c [0154.192] GetCurrentThreadId () returned 0x89c [0154.195] GetCurrentThreadId () returned 0x89c [0154.195] GetCurrentThreadId () returned 0x89c [0154.195] GetCurrentThreadId () returned 0x89c [0154.195] GetCurrentThreadId () returned 0x89c [0154.195] GetCurrentThreadId () returned 0x89c [0154.195] GetCurrentThreadId () returned 0x89c [0154.195] GetCurrentThreadId () returned 0x89c [0154.195] GetCurrentThreadId () returned 0x89c [0154.195] GetCurrentThreadId () returned 0x89c [0154.195] GetCurrentThreadId () returned 0x89c [0154.195] GetCurrentThreadId () returned 0x89c [0154.195] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.196] GetCurrentThreadId () returned 0x89c [0154.228] CreateCompatibleDC (hdc=0x0) returned 0x2c010686 [0154.229] GetDC (hWnd=0x0) returned 0xa0100d0 [0154.229] GdipCreateFromHDC (hdc=0xa0100d0, graphics=0x14d728) returned 0x0 [0154.230] CoTaskMemAlloc (cb=0x5c) returned 0x68fd40 [0154.230] GdipGetLogFontW (font=0x1ab7ebe0, graphics=0x1bd51520, logfontW=0x68fd40) returned 0x0 [0154.231] CoTaskMemFree (pv=0x68fd40) [0154.231] CoTaskMemAlloc (cb=0x5c) returned 0x6902f0 [0154.231] CoTaskMemFree (pv=0x6902f0) [0154.232] CoTaskMemAlloc (cb=0x5c) returned 0x68fd40 [0154.232] CoTaskMemFree (pv=0x68fd40) [0154.232] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0154.232] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0154.232] CoTaskMemAlloc (cb=0x5c) returned 0x6902f0 [0154.232] CreateFontIndirectW (lplf=0x6902f0) returned 0x200a0556 [0154.232] CoTaskMemFree (pv=0x6902f0) [0154.233] SelectObject (hdc=0x2c010686, h=0x200a0556) returned 0x18a0048 [0154.233] GetTextMetricsW (in: hdc=0x2c010686, lptm=0x14d9a8 | out: lptm=0x14d9a8) returned 1 [0154.234] GetTextExtentPoint32W (in: hdc=0x2c010686, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x21b9e48 | out: psizl=0x21b9e48) returned 1 [0154.236] SelectObject (hdc=0x2c010686, h=0x18a0048) returned 0x200a0556 [0154.236] DeleteDC (hdc=0x2c010686) returned 1 [0154.237] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.238] AdjustWindowRectEx (in: lpRect=0x14d610, dwStyle=0x2cc0000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x14d610) returned 1 [0154.238] AdjustWindowRectEx (in: lpRect=0x14d890, dwStyle=0x2cc0000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x14d890) returned 1 [0154.238] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.238] AdjustWindowRectEx (in: lpRect=0x14d500, dwStyle=0x2cc0000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x14d500) returned 1 [0154.238] AdjustWindowRectEx (in: lpRect=0x14d680, dwStyle=0x2cc0000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x14d680) returned 1 [0154.239] GetSystemMetrics (nIndex=34) returned 136 [0154.239] GetSystemMetrics (nIndex=35) returned 39 [0154.240] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.241] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0154.241] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.241] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0154.241] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.241] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0154.241] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.241] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0154.241] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.242] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0154.242] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.242] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0154.242] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.242] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0154.242] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.242] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0154.242] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.242] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0154.242] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.243] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0154.243] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.243] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0154.243] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.243] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0154.243] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.243] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0154.243] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.243] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0154.243] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.244] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0154.244] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.244] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0154.244] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.244] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0154.244] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.244] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0154.244] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.244] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0154.245] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.245] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0154.245] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.245] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0154.245] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.245] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0154.245] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.245] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0154.245] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.245] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0154.246] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.246] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0154.246] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.246] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0154.246] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.246] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0154.246] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.246] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0154.246] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.246] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0154.247] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.247] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0154.247] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.247] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0154.247] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.247] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0154.247] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.247] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0154.247] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.247] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0154.248] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.248] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0154.248] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.248] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0154.248] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.248] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8a0) returned 1 [0154.248] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.248] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d6f0) returned 1 [0154.248] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.248] AdjustWindowRectEx (in: lpRect=0x14d8a0, dwStyle=0x56010046, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d8a0) returned 1 [0154.249] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.249] AdjustWindowRectEx (in: lpRect=0x14d6f0, dwStyle=0x56010046, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d6f0) returned 1 [0154.259] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.259] AdjustWindowRectEx (in: lpRect=0x14eb70, dwStyle=0x2cc0000, bMenu=0, dwExStyle=0x90001 | out: lpRect=0x14eb70) returned 1 [0154.259] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.259] CreateWindowExW (dwExStyle=0x90001, lpClassName="WindowsForms10.Window.8.app.0.1ca0192_r8_ad1", lpWindowName="Form1", dwStyle=0x2cc0000, X=-2147483648, Y=-2147483648, nWidth=274, nHeight=208, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x3002a [0154.259] SetWindowLongPtrW (hWnd=0x3002a, nIndex=-4, dwNewLong=0x7ffa5f8e4a40) returned 0x5d089c [0154.260] GetWindowLongPtrW (hWnd=0x3002a, nIndex=-4) returned 0x7ffa5f8e4a40 [0154.260] SetWindowLongPtrW (hWnd=0x3002a, nIndex=-4, dwNewLong=0x5d09dc) returned 0x7ffa5f8e4a40 [0154.260] GetWindowLongPtrW (hWnd=0x3002a, nIndex=-4) returned 0x5d09dc [0154.260] GetWindowLongPtrW (hWnd=0x3002a, nIndex=-16) returned 0x6cc0000 [0154.261] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x81, wParam=0x0, lParam=0x14e2d0) returned 0x1 [0154.262] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x83, wParam=0x0, lParam=0x14e380) returned 0x0 [0154.263] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x1, wParam=0x0, lParam=0x14e2b0) returned 0x0 [0154.263] GetClientRect (in: hWnd=0x3002a, lpRect=0x14dd00 | out: lpRect=0x14dd00) returned 1 [0154.263] GetWindowRect (in: hWnd=0x3002a, lpRect=0x14dd00 | out: lpRect=0x14dd00) returned 1 [0154.264] SetWindowTextW (hWnd=0x3002a, lpString="Form1") returned 1 [0154.264] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xc, wParam=0x0, lParam=0x21b866c) returned 0x1 [0154.269] SetLayeredWindowAttributes (hwnd=0x3002a, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0154.272] GetStartupInfoW (in: lpStartupInfo=0x21ba9c0 | out: lpStartupInfo=0x21ba9c0*(cb=0x68, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\ProgramData\\WindowsDataC.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0154.273] GetParent (hWnd=0x3002a) returned 0x0 [0154.275] GetStockObject (i=5) returned 0x1900015 [0154.275] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.275] CoTaskMemAlloc (cb=0x5a) returned 0x68fd40 [0154.276] RegisterClassW (lpWndClass=0x14e950) returned 0xc154 [0154.276] CoTaskMemFree (pv=0x68fd40) [0154.276] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.276] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.1ca0192_r8_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20148 [0154.276] SetWindowLongPtrW (hWnd=0x20148, nIndex=-4, dwNewLong=0x7ffa5f8e4a40) returned 0x5d0a2c [0154.276] GetWindowLongPtrW (hWnd=0x20148, nIndex=-4) returned 0x7ffa5f8e4a40 [0154.277] SetWindowLongPtrW (hWnd=0x20148, nIndex=-4, dwNewLong=0x5d0a7c) returned 0x7ffa5f8e4a40 [0154.277] GetWindowLongPtrW (hWnd=0x20148, nIndex=-4) returned 0x5d0a7c [0154.277] GetWindowLongPtrW (hWnd=0x20148, nIndex=-16) returned 0x4c00000 [0154.277] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x20148, Msg=0x24, wParam=0x0, lParam=0x14e370) returned 0x0 [0154.277] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x20148, Msg=0x81, wParam=0x0, lParam=0x14e2e0) returned 0x1 [0154.277] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x20148, Msg=0x83, wParam=0x0, lParam=0x14e390) returned 0x0 [0154.278] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x20148, Msg=0x1, wParam=0x0, lParam=0x14e2e0) returned 0x0 [0154.278] SetWindowLongPtrW (hWnd=0x3002a, nIndex=-8, dwNewLong=0x20148) returned 0x0 [0154.280] SendMessageW (hWnd=0x3002a, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0154.280] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0154.280] SendMessageW (hWnd=0x3002a, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0154.280] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0154.287] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0154.295] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0154.295] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0154.325] GetSystemMenu (hWnd=0x3002a, bRevert=0) returned 0x3009d [0154.326] GetWindowPlacement (in: hWnd=0x3002a, lpwndpl=0x14ec58 | out: lpwndpl=0x14ec58) returned 1 [0154.326] EnableMenuItem (hMenu=0x3009d, uIDEnableItem=0xf020, uEnable=0x1) returned 0 [0154.326] EnableMenuItem (hMenu=0x3009d, uIDEnableItem=0xf030, uEnable=0x1) returned 0 [0154.326] EnableMenuItem (hMenu=0x3009d, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0154.326] EnableMenuItem (hMenu=0x3009d, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0154.326] EnableMenuItem (hMenu=0x3009d, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0154.327] GetClientRect (in: hWnd=0x3002a, lpRect=0x14ed20 | out: lpRect=0x14ed20) returned 1 [0154.327] GetClientRect (in: hWnd=0x3002a, lpRect=0x14ec50 | out: lpRect=0x14ec50) returned 1 [0154.327] GetWindowRect (in: hWnd=0x3002a, lpRect=0x14ec50 | out: lpRect=0x14ec50) returned 1 [0154.327] SetWindowLongPtrW (hWnd=0x3002a, nIndex=-8, dwNewLong=0x20148) returned 0x20148 [0154.337] GetSystemMetrics (nIndex=11) returned 32 [0154.337] GetSystemMetrics (nIndex=12) returned 32 [0154.337] GetDC (hWnd=0x0) returned 0xa0100d0 [0154.337] GetDeviceCaps (hdc=0xa0100d0, index=12) returned 32 [0154.337] GetDeviceCaps (hdc=0xa0100d0, index=14) returned 1 [0154.337] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0154.338] CreateIconFromResourceEx (presbits=0x21bda08, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x200eb [0154.340] SendMessageW (hWnd=0x20148, Msg=0x80, wParam=0x1, lParam=0x200eb) returned 0x0 [0154.340] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x20148, Msg=0x80, wParam=0x1, lParam=0x200eb) returned 0x0 [0154.342] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.342] GetWindowLongPtrW (hWnd=0x3002a, nIndex=-16) returned 0x6cc0000 [0154.342] GetWindowTextLengthW (hWnd=0x3002a) returned 5 [0154.342] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0154.343] GetSystemMetrics (nIndex=42) returned 0 [0154.343] GetWindowTextW (in: hWnd=0x3002a, lpString=0x14ea60, nMaxCount=6 | out: lpString="Form1") returned 5 [0154.343] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xd, wParam=0x6, lParam=0x14ea60) returned 0x5 [0154.346] GetWindowTextLengthW (hWnd=0x3002a) returned 5 [0154.346] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0154.346] GetSystemMetrics (nIndex=42) returned 0 [0154.346] GetWindowTextW (in: hWnd=0x3002a, lpString=0x14ea60, nMaxCount=6 | out: lpString="Form1") returned 5 [0154.346] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xd, wParam=0x6, lParam=0x14ea60) returned 0x5 [0154.346] GetWindowLongPtrW (hWnd=0x3002a, nIndex=-16) returned 0x6cc0000 [0154.346] GetWindowLongPtrW (hWnd=0x3002a, nIndex=-20) returned 0x90101 [0154.346] SetWindowLongPtrW (hWnd=0x3002a, nIndex=-16, dwNewLong=0x2cc0000) returned 0x6cc0000 [0154.346] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x14eb20) returned 0x0 [0154.347] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x14eb20) returned 0x0 [0154.347] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0154.347] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0154.348] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0154.348] SetWindowLongPtrW (hWnd=0x3002a, nIndex=-20, dwNewLong=0x90001) returned 0x90101 [0154.348] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x14eb20) returned 0x0 [0154.348] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x14eb20) returned 0x0 [0154.349] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0154.349] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0154.349] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0154.350] SetWindowPos (hWnd=0x3002a, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0154.350] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x46, wParam=0x0, lParam=0x14eb80) returned 0x0 [0154.350] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x83, wParam=0x1, lParam=0x14eb50) returned 0x0 [0154.351] GetWindowPlacement (in: hWnd=0x3002a, lpwndpl=0x14e728 | out: lpwndpl=0x14e728) returned 1 [0154.351] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x47, wParam=0x0, lParam=0x14eb80) returned 0x0 [0154.351] GetClientRect (in: hWnd=0x3002a, lpRect=0x14e5c0 | out: lpRect=0x14e5c0) returned 1 [0154.351] GetWindowRect (in: hWnd=0x3002a, lpRect=0x14e5c0 | out: lpRect=0x14e5c0) returned 1 [0154.353] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0154.353] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0154.353] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0154.355] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x83, wParam=0x1, lParam=0x14e420) returned 0x0 [0154.357] RedrawWindow (hWnd=0x3002a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0154.358] GetSystemMenu (hWnd=0x3002a, bRevert=0) returned 0x3009d [0154.358] GetWindowPlacement (in: hWnd=0x3002a, lpwndpl=0x14ebf8 | out: lpwndpl=0x14ebf8) returned 1 [0154.358] EnableMenuItem (hMenu=0x3009d, uIDEnableItem=0xf020, uEnable=0x1) returned 1 [0154.358] EnableMenuItem (hMenu=0x3009d, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0154.358] EnableMenuItem (hMenu=0x3009d, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0154.358] EnableMenuItem (hMenu=0x3009d, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0154.358] EnableMenuItem (hMenu=0x3009d, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0154.358] ShowWindow (hWnd=0x3002a, nCmdShow=5) returned 0 [0154.358] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.359] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.360] GetClassInfoW (in: hInstance=0x0, lpClassName="BUTTON", lpWndClass=0x21bedc0 | out: lpWndClass=0x21bedc0) returned 1 [0154.361] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.361] CoTaskMemAlloc (cb=0x56) returned 0x6c0d00 [0154.361] RegisterClassW (lpWndClass=0x14e300) returned 0xc155 [0154.361] CoTaskMemFree (pv=0x6c0d00) [0154.361] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.361] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="*", dwStyle=0x5601000b, X=215, Y=60, nWidth=26, nHeight=23, hWndParent=0x3002a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x30132 [0154.362] SetWindowLongPtrW (hWnd=0x30132, nIndex=-4, dwNewLong=0x7ffa5f8e4aa0) returned 0x5d0acc [0154.362] GetWindowLongPtrW (hWnd=0x30132, nIndex=-4) returned 0x7ffa5f8e4aa0 [0154.362] SetWindowLongPtrW (hWnd=0x30132, nIndex=-4, dwNewLong=0x5d0b1c) returned 0x7ffa5f8e4aa0 [0154.362] GetWindowLongPtrW (hWnd=0x30132, nIndex=-4) returned 0x5d0b1c [0154.362] GetWindowLongPtrW (hWnd=0x30132, nIndex=-16) returned 0x4601000b [0154.362] GetWindowLongPtrW (hWnd=0x30132, nIndex=-12) returned 0x0 [0154.362] SetWindowLongPtrW (hWnd=0x30132, nIndex=-12, dwNewLong=0x30132) returned 0x0 [0154.362] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x30132, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0154.363] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x30132, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0154.363] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x30132, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0154.364] GetWindow (hWnd=0x30132, uCmd=0x3) returned 0x0 [0154.364] GetClientRect (in: hWnd=0x30132, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.364] GetWindowRect (in: hWnd=0x30132, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.364] GetParent (hWnd=0x30132) returned 0x3002a [0154.364] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -12189860 [0154.365] SetWindowTextW (hWnd=0x30132, lpString="*") returned 1 [0154.365] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x30132, Msg=0xc, wParam=0x0, lParam=0x21b6784) returned 0x1 [0154.366] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x30132, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0154.366] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x30132, Msg=0x3, wParam=0x0, lParam=0x3c00d7) returned 0x0 [0154.366] GetClientRect (in: hWnd=0x30132, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.366] GetWindowRect (in: hWnd=0x30132, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.366] GetParent (hWnd=0x30132) returned 0x3002a [0154.366] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -12189860 [0154.368] SendMessageW (hWnd=0x30132, Msg=0x2210, wParam=0x1320001, lParam=0x30132) returned 0x0 [0154.368] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x30132, Msg=0x2210, wParam=0x1320001, lParam=0x30132) returned 0x0 [0154.372] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x30132, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.373] GetParent (hWnd=0x30132) returned 0x3002a [0154.373] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.373] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.373] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="=", dwStyle=0x5601000b, X=183, Y=118, nWidth=58, nHeight=23, hWndParent=0x3002a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20146 [0154.373] SetWindowLongPtrW (hWnd=0x20146, nIndex=-4, dwNewLong=0x7ffa5f8e4aa0) returned 0x5d0acc [0154.373] GetWindowLongPtrW (hWnd=0x20146, nIndex=-4) returned 0x7ffa5f8e4aa0 [0154.374] SetWindowLongPtrW (hWnd=0x20146, nIndex=-4, dwNewLong=0x5d0b6c) returned 0x7ffa5f8e4aa0 [0154.374] GetWindowLongPtrW (hWnd=0x20146, nIndex=-4) returned 0x5d0b6c [0154.374] GetWindowLongPtrW (hWnd=0x20146, nIndex=-16) returned 0x4601000b [0154.374] GetWindowLongPtrW (hWnd=0x20146, nIndex=-12) returned 0x0 [0154.374] SetWindowLongPtrW (hWnd=0x20146, nIndex=-12, dwNewLong=0x20146) returned 0x0 [0154.374] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20146, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0154.374] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20146, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0154.375] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20146, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0154.375] GetWindow (hWnd=0x20146, uCmd=0x3) returned 0x30132 [0154.375] GetClientRect (in: hWnd=0x20146, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.375] GetWindowRect (in: hWnd=0x20146, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.375] GetParent (hWnd=0x20146) returned 0x3002a [0154.375] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -12189860 [0154.375] SetWindowTextW (hWnd=0x20146, lpString="=") returned 1 [0154.375] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20146, Msg=0xc, wParam=0x0, lParam=0x21b755c) returned 0x1 [0154.376] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20146, Msg=0x5, wParam=0x0, lParam=0x17003a) returned 0x0 [0154.376] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20146, Msg=0x3, wParam=0x0, lParam=0x7600b7) returned 0x0 [0154.376] GetClientRect (in: hWnd=0x20146, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.376] GetWindowRect (in: hWnd=0x20146, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.376] GetParent (hWnd=0x20146) returned 0x3002a [0154.376] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -12189860 [0154.376] SendMessageW (hWnd=0x20146, Msg=0x2210, wParam=0x1460001, lParam=0x20146) returned 0x0 [0154.376] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20146, Msg=0x2210, wParam=0x1460001, lParam=0x20146) returned 0x0 [0154.376] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20146, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.376] GetParent (hWnd=0x20146) returned 0x3002a [0154.376] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.377] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.377] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="log", dwStyle=0x5601000b, X=183, Y=89, nWidth=58, nHeight=23, hWndParent=0x3002a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x3015e [0154.377] SetWindowLongPtrW (hWnd=0x3015e, nIndex=-4, dwNewLong=0x7ffa5f8e4aa0) returned 0x5d0acc [0154.377] GetWindowLongPtrW (hWnd=0x3015e, nIndex=-4) returned 0x7ffa5f8e4aa0 [0154.377] SetWindowLongPtrW (hWnd=0x3015e, nIndex=-4, dwNewLong=0x5d0bbc) returned 0x7ffa5f8e4aa0 [0154.377] GetWindowLongPtrW (hWnd=0x3015e, nIndex=-4) returned 0x5d0bbc [0154.377] GetWindowLongPtrW (hWnd=0x3015e, nIndex=-16) returned 0x4601000b [0154.377] GetWindowLongPtrW (hWnd=0x3015e, nIndex=-12) returned 0x0 [0154.377] SetWindowLongPtrW (hWnd=0x3015e, nIndex=-12, dwNewLong=0x3015e) returned 0x0 [0154.377] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x3015e, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0154.378] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x3015e, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0154.378] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x3015e, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0154.378] GetWindow (hWnd=0x3015e, uCmd=0x3) returned 0x20146 [0154.378] GetClientRect (in: hWnd=0x3015e, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.378] GetWindowRect (in: hWnd=0x3015e, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.378] GetParent (hWnd=0x3015e) returned 0x3002a [0154.378] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -12189860 [0154.379] SetWindowTextW (hWnd=0x3015e, lpString="log") returned 1 [0154.379] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x3015e, Msg=0xc, wParam=0x0, lParam=0x21b6d14) returned 0x1 [0154.379] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x3015e, Msg=0x5, wParam=0x0, lParam=0x17003a) returned 0x0 [0154.379] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x3015e, Msg=0x3, wParam=0x0, lParam=0x5900b7) returned 0x0 [0154.379] GetClientRect (in: hWnd=0x3015e, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.379] GetWindowRect (in: hWnd=0x3015e, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.379] GetParent (hWnd=0x3015e) returned 0x3002a [0154.379] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -12189860 [0154.379] SendMessageW (hWnd=0x3015e, Msg=0x2210, wParam=0x15e0001, lParam=0x3015e) returned 0x0 [0154.380] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x3015e, Msg=0x2210, wParam=0x15e0001, lParam=0x3015e) returned 0x0 [0154.380] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x3015e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.380] GetParent (hWnd=0x3015e) returned 0x3002a [0154.380] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.380] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.380] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="e^", dwStyle=0x5601000b, X=151, Y=118, nWidth=33, nHeight=23, hWndParent=0x3002a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x4002c [0154.380] SetWindowLongPtrW (hWnd=0x4002c, nIndex=-4, dwNewLong=0x7ffa5f8e4aa0) returned 0x5d0acc [0154.381] GetWindowLongPtrW (hWnd=0x4002c, nIndex=-4) returned 0x7ffa5f8e4aa0 [0154.381] SetWindowLongPtrW (hWnd=0x4002c, nIndex=-4, dwNewLong=0x5d0c0c) returned 0x7ffa5f8e4aa0 [0154.381] GetWindowLongPtrW (hWnd=0x4002c, nIndex=-4) returned 0x5d0c0c [0154.381] GetWindowLongPtrW (hWnd=0x4002c, nIndex=-16) returned 0x4601000b [0154.381] GetWindowLongPtrW (hWnd=0x4002c, nIndex=-12) returned 0x0 [0154.381] SetWindowLongPtrW (hWnd=0x4002c, nIndex=-12, dwNewLong=0x4002c) returned 0x0 [0154.381] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x4002c, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0154.382] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x4002c, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0154.382] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x4002c, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0154.382] GetWindow (hWnd=0x4002c, uCmd=0x3) returned 0x3015e [0154.382] GetClientRect (in: hWnd=0x4002c, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.382] GetWindowRect (in: hWnd=0x4002c, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.382] GetParent (hWnd=0x4002c) returned 0x3002a [0154.382] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -12189860 [0154.382] SetWindowTextW (hWnd=0x4002c, lpString="e^") returned 1 [0154.382] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x4002c, Msg=0xc, wParam=0x0, lParam=0x21b746c) returned 0x1 [0154.383] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x4002c, Msg=0x5, wParam=0x0, lParam=0x170021) returned 0x0 [0154.383] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x4002c, Msg=0x3, wParam=0x0, lParam=0x760097) returned 0x0 [0154.383] GetClientRect (in: hWnd=0x4002c, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.383] GetWindowRect (in: hWnd=0x4002c, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.383] GetParent (hWnd=0x4002c) returned 0x3002a [0154.383] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -12189860 [0154.383] SendMessageW (hWnd=0x4002c, Msg=0x2210, wParam=0x2c0001, lParam=0x4002c) returned 0x0 [0154.383] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x4002c, Msg=0x2210, wParam=0x2c0001, lParam=0x4002c) returned 0x0 [0154.383] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x4002c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.384] GetParent (hWnd=0x4002c) returned 0x3002a [0154.384] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.384] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.384] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="/", dwStyle=0x5601000b, X=151, Y=89, nWidth=26, nHeight=23, hWndParent=0x3002a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x201bc [0154.384] SetWindowLongPtrW (hWnd=0x201bc, nIndex=-4, dwNewLong=0x7ffa5f8e4aa0) returned 0x5d0acc [0154.384] GetWindowLongPtrW (hWnd=0x201bc, nIndex=-4) returned 0x7ffa5f8e4aa0 [0154.385] SetWindowLongPtrW (hWnd=0x201bc, nIndex=-4, dwNewLong=0x5d0c5c) returned 0x7ffa5f8e4aa0 [0154.385] GetWindowLongPtrW (hWnd=0x201bc, nIndex=-4) returned 0x5d0c5c [0154.385] GetWindowLongPtrW (hWnd=0x201bc, nIndex=-16) returned 0x4601000b [0154.385] GetWindowLongPtrW (hWnd=0x201bc, nIndex=-12) returned 0x0 [0154.385] SetWindowLongPtrW (hWnd=0x201bc, nIndex=-12, dwNewLong=0x201bc) returned 0x0 [0154.385] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x201bc, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0154.386] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x201bc, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0154.386] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x201bc, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0154.386] GetWindow (hWnd=0x201bc, uCmd=0x3) returned 0x4002c [0154.386] GetClientRect (in: hWnd=0x201bc, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.386] GetWindowRect (in: hWnd=0x201bc, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.386] GetParent (hWnd=0x201bc) returned 0x3002a [0154.386] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -12189860 [0154.386] SetWindowTextW (hWnd=0x201bc, lpString="/") returned 1 [0154.386] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x201bc, Msg=0xc, wParam=0x0, lParam=0x21b6c24) returned 0x1 [0154.387] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x201bc, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0154.387] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x201bc, Msg=0x3, wParam=0x0, lParam=0x590097) returned 0x0 [0154.387] GetClientRect (in: hWnd=0x201bc, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.387] GetWindowRect (in: hWnd=0x201bc, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.387] GetParent (hWnd=0x201bc) returned 0x3002a [0154.387] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -12189860 [0154.387] SendMessageW (hWnd=0x201bc, Msg=0x2210, wParam=0x1bc0001, lParam=0x201bc) returned 0x0 [0154.387] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x201bc, Msg=0x2210, wParam=0x1bc0001, lParam=0x201bc) returned 0x0 [0154.388] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x201bc, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.388] GetParent (hWnd=0x201bc) returned 0x3002a [0154.388] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.388] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.388] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName=";", dwStyle=0x5601000b, X=119, Y=118, nWidth=26, nHeight=23, hWndParent=0x3002a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x40046 [0154.388] SetWindowLongPtrW (hWnd=0x40046, nIndex=-4, dwNewLong=0x7ffa5f8e4aa0) returned 0x5d0acc [0154.388] GetWindowLongPtrW (hWnd=0x40046, nIndex=-4) returned 0x7ffa5f8e4aa0 [0154.389] SetWindowLongPtrW (hWnd=0x40046, nIndex=-4, dwNewLong=0x5d0cac) returned 0x7ffa5f8e4aa0 [0154.389] GetWindowLongPtrW (hWnd=0x40046, nIndex=-4) returned 0x5d0cac [0154.389] GetWindowLongPtrW (hWnd=0x40046, nIndex=-16) returned 0x4601000b [0154.389] GetWindowLongPtrW (hWnd=0x40046, nIndex=-12) returned 0x0 [0154.389] SetWindowLongPtrW (hWnd=0x40046, nIndex=-12, dwNewLong=0x40046) returned 0x0 [0154.389] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x40046, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0154.389] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x40046, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0154.390] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x40046, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0154.390] GetWindow (hWnd=0x40046, uCmd=0x3) returned 0x201bc [0154.390] GetClientRect (in: hWnd=0x40046, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.390] GetWindowRect (in: hWnd=0x40046, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.390] GetParent (hWnd=0x40046) returned 0x3002a [0154.390] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -12189860 [0154.390] SetWindowTextW (hWnd=0x40046, lpString=";") returned 1 [0154.390] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x40046, Msg=0xc, wParam=0x0, lParam=0x21b737c) returned 0x1 [0154.391] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x40046, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0154.391] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x40046, Msg=0x3, wParam=0x0, lParam=0x760077) returned 0x0 [0154.391] GetClientRect (in: hWnd=0x40046, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.391] GetWindowRect (in: hWnd=0x40046, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.391] GetParent (hWnd=0x40046) returned 0x3002a [0154.391] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -12189860 [0154.391] SendMessageW (hWnd=0x40046, Msg=0x2210, wParam=0x460001, lParam=0x40046) returned 0x0 [0154.391] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x40046, Msg=0x2210, wParam=0x460001, lParam=0x40046) returned 0x0 [0154.391] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x40046, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.391] GetParent (hWnd=0x40046) returned 0x3002a [0154.391] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.392] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.392] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="-", dwStyle=0x5601000b, X=183, Y=60, nWidth=26, nHeight=23, hWndParent=0x3002a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20042 [0154.392] SetWindowLongPtrW (hWnd=0x20042, nIndex=-4, dwNewLong=0x7ffa5f8e4aa0) returned 0x5d0acc [0154.392] GetWindowLongPtrW (hWnd=0x20042, nIndex=-4) returned 0x7ffa5f8e4aa0 [0154.392] SetWindowLongPtrW (hWnd=0x20042, nIndex=-4, dwNewLong=0x5d0cfc) returned 0x7ffa5f8e4aa0 [0154.392] GetWindowLongPtrW (hWnd=0x20042, nIndex=-4) returned 0x5d0cfc [0154.392] GetWindowLongPtrW (hWnd=0x20042, nIndex=-16) returned 0x4601000b [0154.392] GetWindowLongPtrW (hWnd=0x20042, nIndex=-12) returned 0x0 [0154.392] SetWindowLongPtrW (hWnd=0x20042, nIndex=-12, dwNewLong=0x20042) returned 0x0 [0154.392] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20042, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0154.393] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20042, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0154.393] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20042, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0154.393] GetWindow (hWnd=0x20042, uCmd=0x3) returned 0x40046 [0154.393] GetClientRect (in: hWnd=0x20042, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.393] GetWindowRect (in: hWnd=0x20042, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.393] GetParent (hWnd=0x20042) returned 0x3002a [0154.394] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -12189860 [0154.394] SetWindowTextW (hWnd=0x20042, lpString="-") returned 1 [0154.394] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20042, Msg=0xc, wParam=0x0, lParam=0x21b669c) returned 0x1 [0154.395] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20042, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0154.395] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20042, Msg=0x3, wParam=0x0, lParam=0x3c00b7) returned 0x0 [0154.395] GetClientRect (in: hWnd=0x20042, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.395] GetWindowRect (in: hWnd=0x20042, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.395] GetParent (hWnd=0x20042) returned 0x3002a [0154.395] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -12189860 [0154.395] SendMessageW (hWnd=0x20042, Msg=0x2210, wParam=0x420001, lParam=0x20042) returned 0x0 [0154.395] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20042, Msg=0x2210, wParam=0x420001, lParam=0x20042) returned 0x0 [0154.395] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20042, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.395] GetParent (hWnd=0x20042) returned 0x3002a [0154.395] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.396] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.396] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="8", dwStyle=0x5601000b, X=119, Y=89, nWidth=26, nHeight=23, hWndParent=0x3002a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20034 [0154.396] SetWindowLongPtrW (hWnd=0x20034, nIndex=-4, dwNewLong=0x7ffa5f8e4aa0) returned 0x5d0acc [0154.396] GetWindowLongPtrW (hWnd=0x20034, nIndex=-4) returned 0x7ffa5f8e4aa0 [0154.396] SetWindowLongPtrW (hWnd=0x20034, nIndex=-4, dwNewLong=0x5d0d4c) returned 0x7ffa5f8e4aa0 [0154.396] GetWindowLongPtrW (hWnd=0x20034, nIndex=-4) returned 0x5d0d4c [0154.396] GetWindowLongPtrW (hWnd=0x20034, nIndex=-16) returned 0x4601000b [0154.396] GetWindowLongPtrW (hWnd=0x20034, nIndex=-12) returned 0x0 [0154.396] SetWindowLongPtrW (hWnd=0x20034, nIndex=-12, dwNewLong=0x20034) returned 0x0 [0154.396] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20034, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0154.397] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20034, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0154.397] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20034, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0154.397] GetWindow (hWnd=0x20034, uCmd=0x3) returned 0x20042 [0154.397] GetClientRect (in: hWnd=0x20034, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.397] GetWindowRect (in: hWnd=0x20034, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.397] GetParent (hWnd=0x20034) returned 0x3002a [0154.397] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -12189860 [0154.398] SetWindowTextW (hWnd=0x20034, lpString="8") returned 1 [0154.398] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20034, Msg=0xc, wParam=0x0, lParam=0x21b6b34) returned 0x1 [0154.398] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20034, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0154.398] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20034, Msg=0x3, wParam=0x0, lParam=0x590077) returned 0x0 [0154.398] GetClientRect (in: hWnd=0x20034, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.398] GetWindowRect (in: hWnd=0x20034, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.398] GetParent (hWnd=0x20034) returned 0x3002a [0154.398] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -12189860 [0154.398] SendMessageW (hWnd=0x20034, Msg=0x2210, wParam=0x340001, lParam=0x20034) returned 0x0 [0154.398] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20034, Msg=0x2210, wParam=0x340001, lParam=0x20034) returned 0x0 [0154.398] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20034, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.399] GetParent (hWnd=0x20034) returned 0x3002a [0154.399] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.399] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.399] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="c", dwStyle=0x5601000b, X=87, Y=118, nWidth=26, nHeight=23, hWndParent=0x3002a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2004c [0154.399] SetWindowLongPtrW (hWnd=0x2004c, nIndex=-4, dwNewLong=0x7ffa5f8e4aa0) returned 0x5d0acc [0154.399] GetWindowLongPtrW (hWnd=0x2004c, nIndex=-4) returned 0x7ffa5f8e4aa0 [0154.400] SetWindowLongPtrW (hWnd=0x2004c, nIndex=-4, dwNewLong=0x5d0d9c) returned 0x7ffa5f8e4aa0 [0154.400] GetWindowLongPtrW (hWnd=0x2004c, nIndex=-4) returned 0x5d0d9c [0154.400] GetWindowLongPtrW (hWnd=0x2004c, nIndex=-16) returned 0x4601000b [0154.400] GetWindowLongPtrW (hWnd=0x2004c, nIndex=-12) returned 0x0 [0154.400] SetWindowLongPtrW (hWnd=0x2004c, nIndex=-12, dwNewLong=0x2004c) returned 0x0 [0154.400] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x2004c, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0154.401] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x2004c, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0154.401] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x2004c, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0154.401] GetWindow (hWnd=0x2004c, uCmd=0x3) returned 0x20034 [0154.401] GetClientRect (in: hWnd=0x2004c, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.401] GetWindowRect (in: hWnd=0x2004c, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.401] GetParent (hWnd=0x2004c) returned 0x3002a [0154.401] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -12189860 [0154.402] SetWindowTextW (hWnd=0x2004c, lpString="c") returned 1 [0154.402] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x2004c, Msg=0xc, wParam=0x0, lParam=0x21b6fe4) returned 0x1 [0154.402] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x2004c, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0154.402] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x2004c, Msg=0x3, wParam=0x0, lParam=0x760057) returned 0x0 [0154.403] GetClientRect (in: hWnd=0x2004c, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.403] GetWindowRect (in: hWnd=0x2004c, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.403] GetParent (hWnd=0x2004c) returned 0x3002a [0154.403] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -12189860 [0154.403] SendMessageW (hWnd=0x2004c, Msg=0x2210, wParam=0x4c0001, lParam=0x2004c) returned 0x0 [0154.403] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x2004c, Msg=0x2210, wParam=0x4c0001, lParam=0x2004c) returned 0x0 [0154.403] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x2004c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.403] GetParent (hWnd=0x2004c) returned 0x3002a [0154.403] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.403] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.403] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="+", dwStyle=0x5601000b, X=151, Y=60, nWidth=26, nHeight=23, hWndParent=0x3002a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x101e4 [0154.404] SetWindowLongPtrW (hWnd=0x101e4, nIndex=-4, dwNewLong=0x7ffa5f8e4aa0) returned 0x5d0acc [0154.404] GetWindowLongPtrW (hWnd=0x101e4, nIndex=-4) returned 0x7ffa5f8e4aa0 [0154.405] SetWindowLongPtrW (hWnd=0x101e4, nIndex=-4, dwNewLong=0x5d074c) returned 0x7ffa5f8e4aa0 [0154.405] GetWindowLongPtrW (hWnd=0x101e4, nIndex=-4) returned 0x5d074c [0154.405] GetWindowLongPtrW (hWnd=0x101e4, nIndex=-16) returned 0x4601000b [0154.405] GetWindowLongPtrW (hWnd=0x101e4, nIndex=-12) returned 0x0 [0154.405] SetWindowLongPtrW (hWnd=0x101e4, nIndex=-12, dwNewLong=0x101e4) returned 0x0 [0154.405] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e4, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0154.405] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e4, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0154.405] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e4, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0154.405] GetWindow (hWnd=0x101e4, uCmd=0x3) returned 0x2004c [0154.405] GetClientRect (in: hWnd=0x101e4, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.406] GetWindowRect (in: hWnd=0x101e4, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.406] GetParent (hWnd=0x101e4) returned 0x3002a [0154.406] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -12189860 [0154.406] SetWindowTextW (hWnd=0x101e4, lpString="+") returned 1 [0154.406] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e4, Msg=0xc, wParam=0x0, lParam=0x21b65b4) returned 0x1 [0154.407] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e4, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0154.407] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e4, Msg=0x3, wParam=0x0, lParam=0x3c0097) returned 0x0 [0154.407] GetClientRect (in: hWnd=0x101e4, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.407] GetWindowRect (in: hWnd=0x101e4, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.407] GetParent (hWnd=0x101e4) returned 0x3002a [0154.407] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -12189860 [0154.407] SendMessageW (hWnd=0x101e4, Msg=0x2210, wParam=0x1e40001, lParam=0x101e4) returned 0x0 [0154.407] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e4, Msg=0x2210, wParam=0x1e40001, lParam=0x101e4) returned 0x0 [0154.407] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.407] GetParent (hWnd=0x101e4) returned 0x3002a [0154.407] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.408] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.408] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="7", dwStyle=0x5601000b, X=87, Y=89, nWidth=26, nHeight=23, hWndParent=0x3002a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x101e6 [0154.413] SetWindowLongPtrW (hWnd=0x101e6, nIndex=-4, dwNewLong=0x7ffa5f8e4aa0) returned 0x5d0acc [0154.414] GetWindowLongPtrW (hWnd=0x101e6, nIndex=-4) returned 0x7ffa5f8e4aa0 [0154.414] SetWindowLongPtrW (hWnd=0x101e6, nIndex=-4, dwNewLong=0x5d389c) returned 0x7ffa5f8e4aa0 [0154.414] GetWindowLongPtrW (hWnd=0x101e6, nIndex=-4) returned 0x5d389c [0154.414] GetWindowLongPtrW (hWnd=0x101e6, nIndex=-16) returned 0x4601000b [0154.414] GetWindowLongPtrW (hWnd=0x101e6, nIndex=-12) returned 0x0 [0154.414] SetWindowLongPtrW (hWnd=0x101e6, nIndex=-12, dwNewLong=0x101e6) returned 0x0 [0154.414] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e6, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0154.414] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e6, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0154.415] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e6, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0154.415] GetWindow (hWnd=0x101e6, uCmd=0x3) returned 0x101e4 [0154.415] GetClientRect (in: hWnd=0x101e6, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.415] GetWindowRect (in: hWnd=0x101e6, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.415] GetParent (hWnd=0x101e6) returned 0x3002a [0154.415] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -12189860 [0154.415] SetWindowTextW (hWnd=0x101e6, lpString="7") returned 1 [0154.415] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e6, Msg=0xc, wParam=0x0, lParam=0x21b6a44) returned 0x1 [0154.416] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e6, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0154.416] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e6, Msg=0x3, wParam=0x0, lParam=0x590057) returned 0x0 [0154.416] GetClientRect (in: hWnd=0x101e6, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.416] GetWindowRect (in: hWnd=0x101e6, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.416] GetParent (hWnd=0x101e6) returned 0x3002a [0154.416] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -12189860 [0154.417] SendMessageW (hWnd=0x101e6, Msg=0x2210, wParam=0x1e60001, lParam=0x101e6) returned 0x0 [0154.417] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e6, Msg=0x2210, wParam=0x1e60001, lParam=0x101e6) returned 0x0 [0154.417] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.417] GetParent (hWnd=0x101e6) returned 0x3002a [0154.417] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.417] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.417] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="0", dwStyle=0x5601000b, X=55, Y=118, nWidth=26, nHeight=23, hWndParent=0x3002a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x101e8 [0154.418] SetWindowLongPtrW (hWnd=0x101e8, nIndex=-4, dwNewLong=0x7ffa5f8e4aa0) returned 0x5d0acc [0154.418] GetWindowLongPtrW (hWnd=0x101e8, nIndex=-4) returned 0x7ffa5f8e4aa0 [0154.418] SetWindowLongPtrW (hWnd=0x101e8, nIndex=-4, dwNewLong=0x5d37fc) returned 0x7ffa5f8e4aa0 [0154.418] GetWindowLongPtrW (hWnd=0x101e8, nIndex=-4) returned 0x5d37fc [0154.418] GetWindowLongPtrW (hWnd=0x101e8, nIndex=-16) returned 0x4601000b [0154.418] GetWindowLongPtrW (hWnd=0x101e8, nIndex=-12) returned 0x0 [0154.418] SetWindowLongPtrW (hWnd=0x101e8, nIndex=-12, dwNewLong=0x101e8) returned 0x0 [0154.418] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e8, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0154.419] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e8, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0154.419] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e8, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0154.419] GetWindow (hWnd=0x101e8, uCmd=0x3) returned 0x101e6 [0154.419] GetClientRect (in: hWnd=0x101e8, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.419] GetWindowRect (in: hWnd=0x101e8, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.419] GetParent (hWnd=0x101e8) returned 0x3002a [0154.419] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -12189860 [0154.420] SetWindowTextW (hWnd=0x101e8, lpString="0") returned 1 [0154.420] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e8, Msg=0xc, wParam=0x0, lParam=0x21b6ef4) returned 0x1 [0154.420] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e8, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0154.420] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e8, Msg=0x3, wParam=0x0, lParam=0x760037) returned 0x0 [0154.421] GetClientRect (in: hWnd=0x101e8, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.421] GetWindowRect (in: hWnd=0x101e8, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.421] GetParent (hWnd=0x101e8) returned 0x3002a [0154.421] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -12189860 [0154.421] SendMessageW (hWnd=0x101e8, Msg=0x2210, wParam=0x1e80001, lParam=0x101e8) returned 0x0 [0154.421] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e8, Msg=0x2210, wParam=0x1e80001, lParam=0x101e8) returned 0x0 [0154.421] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.421] GetParent (hWnd=0x101e8) returned 0x3002a [0154.421] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.421] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.422] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="4", dwStyle=0x5601000b, X=119, Y=60, nWidth=26, nHeight=23, hWndParent=0x3002a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x101ea [0154.422] SetWindowLongPtrW (hWnd=0x101ea, nIndex=-4, dwNewLong=0x7ffa5f8e4aa0) returned 0x5d0acc [0154.422] GetWindowLongPtrW (hWnd=0x101ea, nIndex=-4) returned 0x7ffa5f8e4aa0 [0154.422] SetWindowLongPtrW (hWnd=0x101ea, nIndex=-4, dwNewLong=0x5d34dc) returned 0x7ffa5f8e4aa0 [0154.422] GetWindowLongPtrW (hWnd=0x101ea, nIndex=-4) returned 0x5d34dc [0154.422] GetWindowLongPtrW (hWnd=0x101ea, nIndex=-16) returned 0x4601000b [0154.422] GetWindowLongPtrW (hWnd=0x101ea, nIndex=-12) returned 0x0 [0154.422] SetWindowLongPtrW (hWnd=0x101ea, nIndex=-12, dwNewLong=0x101ea) returned 0x0 [0154.422] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ea, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0154.423] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ea, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0154.423] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ea, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0154.423] GetWindow (hWnd=0x101ea, uCmd=0x3) returned 0x101e8 [0154.423] GetClientRect (in: hWnd=0x101ea, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.423] GetWindowRect (in: hWnd=0x101ea, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.423] GetParent (hWnd=0x101ea) returned 0x3002a [0154.423] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -12189860 [0154.424] SetWindowTextW (hWnd=0x101ea, lpString="4") returned 1 [0154.424] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ea, Msg=0xc, wParam=0x0, lParam=0x21b64cc) returned 0x1 [0154.424] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ea, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0154.424] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ea, Msg=0x3, wParam=0x0, lParam=0x3c0077) returned 0x0 [0154.425] GetClientRect (in: hWnd=0x101ea, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.425] GetWindowRect (in: hWnd=0x101ea, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.425] GetParent (hWnd=0x101ea) returned 0x3002a [0154.425] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -12189860 [0154.425] SendMessageW (hWnd=0x101ea, Msg=0x2210, wParam=0x1ea0001, lParam=0x101ea) returned 0x0 [0154.425] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ea, Msg=0x2210, wParam=0x1ea0001, lParam=0x101ea) returned 0x0 [0154.425] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ea, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.425] GetParent (hWnd=0x101ea) returned 0x3002a [0154.425] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.425] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.426] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="6", dwStyle=0x5601000b, X=55, Y=89, nWidth=26, nHeight=23, hWndParent=0x3002a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x101ec [0154.426] SetWindowLongPtrW (hWnd=0x101ec, nIndex=-4, dwNewLong=0x7ffa5f8e4aa0) returned 0x5d0acc [0154.426] GetWindowLongPtrW (hWnd=0x101ec, nIndex=-4) returned 0x7ffa5f8e4aa0 [0154.426] SetWindowLongPtrW (hWnd=0x101ec, nIndex=-4, dwNewLong=0x5d37ac) returned 0x7ffa5f8e4aa0 [0154.426] GetWindowLongPtrW (hWnd=0x101ec, nIndex=-4) returned 0x5d37ac [0154.426] GetWindowLongPtrW (hWnd=0x101ec, nIndex=-16) returned 0x4601000b [0154.426] GetWindowLongPtrW (hWnd=0x101ec, nIndex=-12) returned 0x0 [0154.426] SetWindowLongPtrW (hWnd=0x101ec, nIndex=-12, dwNewLong=0x101ec) returned 0x0 [0154.426] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ec, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0154.427] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ec, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0154.427] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ec, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0154.427] GetWindow (hWnd=0x101ec, uCmd=0x3) returned 0x101ea [0154.427] GetClientRect (in: hWnd=0x101ec, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.427] GetWindowRect (in: hWnd=0x101ec, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.427] GetParent (hWnd=0x101ec) returned 0x3002a [0154.427] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -12189860 [0154.428] SetWindowTextW (hWnd=0x101ec, lpString="6") returned 1 [0154.428] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ec, Msg=0xc, wParam=0x0, lParam=0x21b6954) returned 0x1 [0154.428] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ec, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0154.428] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ec, Msg=0x3, wParam=0x0, lParam=0x590037) returned 0x0 [0154.429] GetClientRect (in: hWnd=0x101ec, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.429] GetWindowRect (in: hWnd=0x101ec, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.429] GetParent (hWnd=0x101ec) returned 0x3002a [0154.429] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -12189860 [0154.429] SendMessageW (hWnd=0x101ec, Msg=0x2210, wParam=0x1ec0001, lParam=0x101ec) returned 0x0 [0154.429] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ec, Msg=0x2210, wParam=0x1ec0001, lParam=0x101ec) returned 0x0 [0154.429] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ec, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.429] GetParent (hWnd=0x101ec) returned 0x3002a [0154.429] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.429] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.429] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="9", dwStyle=0x5601000b, X=23, Y=118, nWidth=26, nHeight=23, hWndParent=0x3002a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x101ee [0154.430] SetWindowLongPtrW (hWnd=0x101ee, nIndex=-4, dwNewLong=0x7ffa5f8e4aa0) returned 0x5d0acc [0154.430] GetWindowLongPtrW (hWnd=0x101ee, nIndex=-4) returned 0x7ffa5f8e4aa0 [0154.430] SetWindowLongPtrW (hWnd=0x101ee, nIndex=-4, dwNewLong=0x5d370c) returned 0x7ffa5f8e4aa0 [0154.430] GetWindowLongPtrW (hWnd=0x101ee, nIndex=-4) returned 0x5d370c [0154.430] GetWindowLongPtrW (hWnd=0x101ee, nIndex=-16) returned 0x4601000b [0154.430] GetWindowLongPtrW (hWnd=0x101ee, nIndex=-12) returned 0x0 [0154.430] SetWindowLongPtrW (hWnd=0x101ee, nIndex=-12, dwNewLong=0x101ee) returned 0x0 [0154.430] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ee, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0154.431] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ee, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0154.431] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ee, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0154.431] GetWindow (hWnd=0x101ee, uCmd=0x3) returned 0x101ec [0154.431] GetClientRect (in: hWnd=0x101ee, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.431] GetWindowRect (in: hWnd=0x101ee, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.431] GetParent (hWnd=0x101ee) returned 0x3002a [0154.431] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -12189860 [0154.432] SetWindowTextW (hWnd=0x101ee, lpString="9") returned 1 [0154.432] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ee, Msg=0xc, wParam=0x0, lParam=0x21b6e04) returned 0x1 [0154.433] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ee, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0154.433] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ee, Msg=0x3, wParam=0x0, lParam=0x760017) returned 0x0 [0154.433] GetClientRect (in: hWnd=0x101ee, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.433] GetWindowRect (in: hWnd=0x101ee, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.433] GetParent (hWnd=0x101ee) returned 0x3002a [0154.433] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -12189860 [0154.433] SendMessageW (hWnd=0x101ee, Msg=0x2210, wParam=0x1ee0001, lParam=0x101ee) returned 0x0 [0154.433] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ee, Msg=0x2210, wParam=0x1ee0001, lParam=0x101ee) returned 0x0 [0154.433] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ee, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.433] GetParent (hWnd=0x101ee) returned 0x3002a [0154.433] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.434] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.434] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="3", dwStyle=0x5601000b, X=87, Y=60, nWidth=26, nHeight=23, hWndParent=0x3002a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x101f0 [0154.434] SetWindowLongPtrW (hWnd=0x101f0, nIndex=-4, dwNewLong=0x7ffa5f8e4aa0) returned 0x5d0acc [0154.434] GetWindowLongPtrW (hWnd=0x101f0, nIndex=-4) returned 0x7ffa5f8e4aa0 [0154.434] SetWindowLongPtrW (hWnd=0x101f0, nIndex=-4, dwNewLong=0x5d32fc) returned 0x7ffa5f8e4aa0 [0154.434] GetWindowLongPtrW (hWnd=0x101f0, nIndex=-4) returned 0x5d32fc [0154.434] GetWindowLongPtrW (hWnd=0x101f0, nIndex=-16) returned 0x4601000b [0154.434] GetWindowLongPtrW (hWnd=0x101f0, nIndex=-12) returned 0x0 [0154.434] SetWindowLongPtrW (hWnd=0x101f0, nIndex=-12, dwNewLong=0x101f0) returned 0x0 [0154.434] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f0, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0154.435] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f0, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0154.435] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f0, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0154.435] GetWindow (hWnd=0x101f0, uCmd=0x3) returned 0x101ee [0154.435] GetClientRect (in: hWnd=0x101f0, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.435] GetWindowRect (in: hWnd=0x101f0, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.435] GetParent (hWnd=0x101f0) returned 0x3002a [0154.435] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -12189860 [0154.436] SetWindowTextW (hWnd=0x101f0, lpString="3") returned 1 [0154.436] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f0, Msg=0xc, wParam=0x0, lParam=0x21b63e4) returned 0x1 [0154.436] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f0, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0154.436] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f0, Msg=0x3, wParam=0x0, lParam=0x3c0057) returned 0x0 [0154.436] GetClientRect (in: hWnd=0x101f0, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.436] GetWindowRect (in: hWnd=0x101f0, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.436] GetParent (hWnd=0x101f0) returned 0x3002a [0154.436] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -12189860 [0154.436] SendMessageW (hWnd=0x101f0, Msg=0x2210, wParam=0x1f00001, lParam=0x101f0) returned 0x0 [0154.436] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f0, Msg=0x2210, wParam=0x1f00001, lParam=0x101f0) returned 0x0 [0154.436] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.437] GetParent (hWnd=0x101f0) returned 0x3002a [0154.437] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.437] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.437] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="5", dwStyle=0x5601000b, X=23, Y=89, nWidth=26, nHeight=23, hWndParent=0x3002a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x101f2 [0154.437] SetWindowLongPtrW (hWnd=0x101f2, nIndex=-4, dwNewLong=0x7ffa5f8e4aa0) returned 0x5d0acc [0154.437] GetWindowLongPtrW (hWnd=0x101f2, nIndex=-4) returned 0x7ffa5f8e4aa0 [0154.438] SetWindowLongPtrW (hWnd=0x101f2, nIndex=-4, dwNewLong=0x5d352c) returned 0x7ffa5f8e4aa0 [0154.438] GetWindowLongPtrW (hWnd=0x101f2, nIndex=-4) returned 0x5d352c [0154.438] GetWindowLongPtrW (hWnd=0x101f2, nIndex=-16) returned 0x4601000b [0154.438] GetWindowLongPtrW (hWnd=0x101f2, nIndex=-12) returned 0x0 [0154.438] SetWindowLongPtrW (hWnd=0x101f2, nIndex=-12, dwNewLong=0x101f2) returned 0x0 [0154.438] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f2, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0154.438] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f2, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0154.438] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f2, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0154.438] GetWindow (hWnd=0x101f2, uCmd=0x3) returned 0x101f0 [0154.438] GetClientRect (in: hWnd=0x101f2, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.438] GetWindowRect (in: hWnd=0x101f2, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.438] GetParent (hWnd=0x101f2) returned 0x3002a [0154.438] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -12189860 [0154.439] SetWindowTextW (hWnd=0x101f2, lpString="5") returned 1 [0154.439] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f2, Msg=0xc, wParam=0x0, lParam=0x21b686c) returned 0x1 [0154.440] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f2, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0154.440] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f2, Msg=0x3, wParam=0x0, lParam=0x590017) returned 0x0 [0154.440] GetClientRect (in: hWnd=0x101f2, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.440] GetWindowRect (in: hWnd=0x101f2, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.440] GetParent (hWnd=0x101f2) returned 0x3002a [0154.440] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -12189860 [0154.440] SendMessageW (hWnd=0x101f2, Msg=0x2210, wParam=0x1f20001, lParam=0x101f2) returned 0x0 [0154.440] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f2, Msg=0x2210, wParam=0x1f20001, lParam=0x101f2) returned 0x0 [0154.440] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.440] GetParent (hWnd=0x101f2) returned 0x3002a [0154.440] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.440] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.440] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="2", dwStyle=0x5601000b, X=55, Y=60, nWidth=26, nHeight=23, hWndParent=0x3002a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x101f4 [0154.441] SetWindowLongPtrW (hWnd=0x101f4, nIndex=-4, dwNewLong=0x7ffa5f8e4aa0) returned 0x5d0acc [0154.441] GetWindowLongPtrW (hWnd=0x101f4, nIndex=-4) returned 0x7ffa5f8e4aa0 [0154.441] SetWindowLongPtrW (hWnd=0x101f4, nIndex=-4, dwNewLong=0x5d361c) returned 0x7ffa5f8e4aa0 [0154.441] GetWindowLongPtrW (hWnd=0x101f4, nIndex=-4) returned 0x5d361c [0154.441] GetWindowLongPtrW (hWnd=0x101f4, nIndex=-16) returned 0x4601000b [0154.441] GetWindowLongPtrW (hWnd=0x101f4, nIndex=-12) returned 0x0 [0154.441] SetWindowLongPtrW (hWnd=0x101f4, nIndex=-12, dwNewLong=0x101f4) returned 0x0 [0154.441] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f4, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0154.442] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f4, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0154.442] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f4, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0154.442] GetWindow (hWnd=0x101f4, uCmd=0x3) returned 0x101f2 [0154.442] GetClientRect (in: hWnd=0x101f4, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.442] GetWindowRect (in: hWnd=0x101f4, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.442] GetParent (hWnd=0x101f4) returned 0x3002a [0154.442] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -12189860 [0154.443] SetWindowTextW (hWnd=0x101f4, lpString="2") returned 1 [0154.443] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f4, Msg=0xc, wParam=0x0, lParam=0x21b62fc) returned 0x1 [0154.443] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f4, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0154.443] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f4, Msg=0x3, wParam=0x0, lParam=0x3c0037) returned 0x0 [0154.443] GetClientRect (in: hWnd=0x101f4, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.443] GetWindowRect (in: hWnd=0x101f4, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.443] GetParent (hWnd=0x101f4) returned 0x3002a [0154.443] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -12189860 [0154.443] SendMessageW (hWnd=0x101f4, Msg=0x2210, wParam=0x1f40001, lParam=0x101f4) returned 0x0 [0154.443] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f4, Msg=0x2210, wParam=0x1f40001, lParam=0x101f4) returned 0x0 [0154.443] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.444] GetParent (hWnd=0x101f4) returned 0x3002a [0154.444] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.444] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.444] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.1ca0192_r8_ad1", lpWindowName="1", dwStyle=0x5601000b, X=23, Y=60, nWidth=26, nHeight=23, hWndParent=0x3002a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x101f6 [0154.444] SetWindowLongPtrW (hWnd=0x101f6, nIndex=-4, dwNewLong=0x7ffa5f8e4aa0) returned 0x5d0acc [0154.444] GetWindowLongPtrW (hWnd=0x101f6, nIndex=-4) returned 0x7ffa5f8e4aa0 [0154.445] SetWindowLongPtrW (hWnd=0x101f6, nIndex=-4, dwNewLong=0x5d38ec) returned 0x7ffa5f8e4aa0 [0154.445] GetWindowLongPtrW (hWnd=0x101f6, nIndex=-4) returned 0x5d38ec [0154.445] GetWindowLongPtrW (hWnd=0x101f6, nIndex=-16) returned 0x4601000b [0154.445] GetWindowLongPtrW (hWnd=0x101f6, nIndex=-12) returned 0x0 [0154.445] SetWindowLongPtrW (hWnd=0x101f6, nIndex=-12, dwNewLong=0x101f6) returned 0x0 [0154.445] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f6, Msg=0x81, wParam=0x0, lParam=0x14dc90) returned 0x1 [0154.445] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f6, Msg=0x83, wParam=0x0, lParam=0x14dd40) returned 0x0 [0154.445] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f6, Msg=0x1, wParam=0x0, lParam=0x14dc80) returned 0x0 [0154.445] GetWindow (hWnd=0x101f6, uCmd=0x3) returned 0x101f4 [0154.445] GetClientRect (in: hWnd=0x101f6, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.445] GetWindowRect (in: hWnd=0x101f6, lpRect=0x14d660 | out: lpRect=0x14d660) returned 1 [0154.445] GetParent (hWnd=0x101f6) returned 0x3002a [0154.446] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d660, cPoints=0x2 | out: lpPoints=0x14d660) returned -12189860 [0154.446] SetWindowTextW (hWnd=0x101f6, lpString="1") returned 1 [0154.446] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f6, Msg=0xc, wParam=0x0, lParam=0x21b6214) returned 0x1 [0154.447] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f6, Msg=0x5, wParam=0x0, lParam=0x17001a) returned 0x0 [0154.447] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f6, Msg=0x3, wParam=0x0, lParam=0x3c0017) returned 0x0 [0154.447] GetClientRect (in: hWnd=0x101f6, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.447] GetWindowRect (in: hWnd=0x101f6, lpRect=0x14d780 | out: lpRect=0x14d780) returned 1 [0154.447] GetParent (hWnd=0x101f6) returned 0x3002a [0154.447] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d780, cPoints=0x2 | out: lpPoints=0x14d780) returned -12189860 [0154.447] SendMessageW (hWnd=0x101f6, Msg=0x2210, wParam=0x1f60001, lParam=0x101f6) returned 0x0 [0154.447] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f6, Msg=0x2210, wParam=0x1f60001, lParam=0x101f6) returned 0x0 [0154.447] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.448] GetParent (hWnd=0x101f6) returned 0x3002a [0154.448] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0154.448] GetClassInfoW (in: hInstance=0x0, lpClassName="EDIT", lpWndClass=0x21c0908 | out: lpWndClass=0x21c0908) returned 1 [0154.448] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.449] CoTaskMemAlloc (cb=0x52) returned 0x6c0e80 [0154.449] RegisterClassW (lpWndClass=0x14e2c0) returned 0xc156 [0154.449] CoTaskMemFree (pv=0x6c0e80) [0154.449] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.449] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.1ca0192_r8_ad1", lpWindowName="0", dwStyle=0x56010046, X=23, Y=12, nWidth=218, nHeight=41, hWndParent=0x3002a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x101f8 [0154.449] SetWindowLongPtrW (hWnd=0x101f8, nIndex=-4, dwNewLong=0x7ffa5f8e4b20) returned 0x5d366c [0154.449] GetWindowLongPtrW (hWnd=0x101f8, nIndex=-4) returned 0x7ffa5f8e4b20 [0154.450] SetWindowLongPtrW (hWnd=0x101f8, nIndex=-4, dwNewLong=0x5d384c) returned 0x7ffa5f8e4b20 [0154.450] GetWindowLongPtrW (hWnd=0x101f8, nIndex=-4) returned 0x5d384c [0154.450] GetWindowLongPtrW (hWnd=0x101f8, nIndex=-16) returned 0x46010046 [0154.450] GetWindowLongPtrW (hWnd=0x101f8, nIndex=-12) returned 0x0 [0154.450] SetWindowLongPtrW (hWnd=0x101f8, nIndex=-12, dwNewLong=0x101f8) returned 0x0 [0154.450] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x81, wParam=0x0, lParam=0x14dc50) returned 0x1 [0154.453] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x83, wParam=0x0, lParam=0x14dd00) returned 0x0 [0154.453] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x1, wParam=0x0, lParam=0x14dc40) returned 0x1 [0154.473] GetWindow (hWnd=0x101f8, uCmd=0x3) returned 0x101f6 [0154.473] GetClientRect (in: hWnd=0x101f8, lpRect=0x14d680 | out: lpRect=0x14d680) returned 1 [0154.473] GetWindowRect (in: hWnd=0x101f8, lpRect=0x14d680 | out: lpRect=0x14d680) returned 1 [0154.473] GetParent (hWnd=0x101f8) returned 0x3002a [0154.473] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d680, cPoints=0x2 | out: lpPoints=0x14d680) returned -12189860 [0154.474] GetDC (hWnd=0x0) returned 0xffffffffd001053c [0154.474] GdipCreateFromHDC (hdc=0xffffffffd001053c, graphics=0x14d348) returned 0x0 [0154.474] CoTaskMemAlloc (cb=0x5c) returned 0x6904b0 [0154.474] GdipGetLogFontW (font=0x1ab734f0, graphics=0x1bd51520, logfontW=0x6904b0) returned 0x0 [0154.475] CoTaskMemFree (pv=0x6904b0) [0154.475] CoTaskMemAlloc (cb=0x5c) returned 0x6900c0 [0154.475] CoTaskMemFree (pv=0x6900c0) [0154.475] CoTaskMemAlloc (cb=0x5c) returned 0x6902f0 [0154.475] CoTaskMemFree (pv=0x6902f0) [0154.475] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0154.475] ReleaseDC (hWnd=0x0, hDC=0xffffffffd001053c) returned 1 [0154.475] CoTaskMemAlloc (cb=0x5c) returned 0x68fd40 [0154.475] CreateFontIndirectW (lplf=0x68fd40) returned 0x190a0557 [0154.475] CoTaskMemFree (pv=0x68fd40) [0154.475] SendMessageW (hWnd=0x101f8, Msg=0x30, wParam=0x190a0557, lParam=0x0) returned 0x1 [0154.475] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x30, wParam=0x190a0557, lParam=0x0) returned 0x1 [0154.510] SetWindowTextW (hWnd=0x101f8, lpString="0") returned 1 [0154.510] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0xc, wParam=0x0, lParam=0x21b51ac) returned 0x1 [0154.511] GetSystemMetrics (nIndex=5) returned 1 [0154.511] GetSystemMetrics (nIndex=6) returned 1 [0154.511] SendMessageW (hWnd=0x101f8, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0154.511] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0154.511] SendMessageW (hWnd=0x101f8, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0154.511] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0154.513] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x5, wParam=0x0, lParam=0x2500d6) returned 0x1 [0154.513] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x3, wParam=0x0, lParam=0xe0019) returned 0x0 [0154.513] GetClientRect (in: hWnd=0x101f8, lpRect=0x14d7a0 | out: lpRect=0x14d7a0) returned 1 [0154.513] GetWindowRect (in: hWnd=0x101f8, lpRect=0x14d7a0 | out: lpRect=0x14d7a0) returned 1 [0154.513] GetParent (hWnd=0x101f8) returned 0x3002a [0154.513] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x3002a, lpPoints=0x14d7a0, cPoints=0x2 | out: lpPoints=0x14d7a0) returned -12189860 [0154.513] SendMessageW (hWnd=0x101f8, Msg=0x2210, wParam=0x1f80001, lParam=0x101f8) returned 0x0 [0154.513] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x2210, wParam=0x1f80001, lParam=0x101f8) returned 0x0 [0154.513] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.514] GetParent (hWnd=0x101f8) returned 0x3002a [0154.514] GetWindowTextLengthW (hWnd=0x3002a) returned 5 [0154.514] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0154.514] GetSystemMetrics (nIndex=42) returned 0 [0154.514] GetWindowTextW (in: hWnd=0x3002a, lpString=0x14e590, nMaxCount=6 | out: lpString="Form1") returned 5 [0154.514] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xd, wParam=0x6, lParam=0x14e590) returned 0x5 [0154.742] CoTaskMemAlloc (cb=0x20c) returned 0x6a9fd0 [0154.742] SHGetFolderPathW (in: hwnd=0x0, csidl=35, hToken=0x0, dwFlags=0x0, pszPath=0x6a9fd0 | out: pszPath="C:\\ProgramData") returned 0x0 [0154.747] CoTaskMemFree (pv=0x6a9fd0) [0154.795] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x14b2c8 | out: phkResult=0x14b2c8*=0x0) returned 0x2 [0154.797] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x14dd00, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0154.810] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\WindowsDataC.exe", nBufferLength=0x105, lpBuffer=0x14dd00, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\WindowsDataC.exe", lpFilePart=0x0) returned 0x1f [0154.878] CoTaskMemAlloc (cb=0x20c) returned 0x6aaa70 [0154.878] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x6aaa70 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0154.878] CoTaskMemFree (pv=0x6aaa70) [0154.879] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x14df10, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0154.880] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x14df30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29 [0154.882] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x14df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29 [0154.883] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x14def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x28 [0154.884] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x14def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23 [0154.884] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x14def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x28 [0154.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e340) returned 1 [0154.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0x14e420 | out: lpFileInformation=0x14e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xb7505a73, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xb7505a73, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0154.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e300) returned 1 [0154.885] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x14dee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x28 [0154.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e330) returned 1 [0154.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0x14e410 | out: lpFileInformation=0x14e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xb7505a73, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xb7505a73, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0154.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e2f0) returned 1 [0154.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e370) returned 1 [0154.888] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x14de50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23 [0154.895] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp"), lpFindFileData=0x14e080 | out: lpFindFileData=0x14e080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xb7505a73, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xb7505a73, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0x6c1780 [0154.898] FindNextFileW (in: hFindFile=0x6c1780, lpFindFileData=0x14e040 | out: lpFindFileData=0x14e040*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.898] FindClose (in: hFindFile=0x6c1780 | out: hFindFile=0x6c1780) returned 1 [0154.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e2a0) returned 1 [0154.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e260) returned 1 [0155.030] EtwEventRegister () returned 0x0 [0155.032] EtwEventSetInformation () returned 0x0 [0155.042] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\WindowsDataC.exe.config", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\WindowsDataC.exe.config", lpFilePart=0x0) returned 0x26 [0155.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dfa0) returned 1 [0155.042] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\WindowsDataC.exe.config" (normalized: "c:\\programdata\\windowsdatac.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x14e080 | out: lpFileInformation=0x14e080*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0155.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df60) returned 1 [0155.480] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x51c00, lpName=0x0) returned 0x320 [0155.488] memcpy (in: _Dst=0x1dba0000, _Src=0x122ced88, _Size=0x51c00 | out: _Dst=0x1dba0000) returned 0x1dba0000 [0155.585] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe", nBufferLength=0x105, lpBuffer=0x14ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe", lpFilePart=0x0) returned 0x32 [0155.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e2d0) returned 1 [0155.585] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\runit.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x334 [0155.586] GetFileType (hFile=0x334) returned 0x1 [0155.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e240) returned 1 [0155.586] GetFileType (hFile=0x334) returned 0x1 [0155.586] WriteFile (in: hFile=0x334, lpBuffer=0x123209c0*, nNumberOfBytesToWrite=0x23e00, lpNumberOfBytesWritten=0x14e3f8, lpOverlapped=0x0 | out: lpBuffer=0x123209c0*, lpNumberOfBytesWritten=0x14e3f8*=0x23e00, lpOverlapped=0x0) returned 1 [0155.589] CloseHandle (hObject=0x334) returned 1 [0155.593] CoTaskMemAlloc (cb=0x20c) returned 0x6a9fd0 [0155.593] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x6a9fd0 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0155.593] CoTaskMemFree (pv=0x6a9fd0) [0155.593] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x14df10, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0155.593] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x14df30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29 [0155.593] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x14df50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29 [0155.593] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x14def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x28 [0155.593] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x14def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23 [0155.593] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x14def0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x28 [0155.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e340) returned 1 [0155.594] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0x14e420 | out: lpFileInformation=0x14e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xb7505a73, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xb7505a73, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0155.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e300) returned 1 [0155.594] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x14dee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x28 [0155.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e330) returned 1 [0155.594] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0x14e410 | out: lpFileInformation=0x14e410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xb7505a73, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xb7505a73, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0155.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e2f0) returned 1 [0155.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e370) returned 1 [0155.594] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x14de50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local", lpFilePart=0x0) returned 0x23 [0155.594] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp"), lpFindFileData=0x14e080 | out: lpFindFileData=0x14e080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xb7505a73, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xb7505a73, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0x6c12a0 [0155.595] FindNextFileW (in: hFindFile=0x6c12a0, lpFindFileData=0x14e040 | out: lpFindFileData=0x14e040*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.595] FindClose (in: hFindFile=0x6c12a0 | out: hFindFile=0x6c12a0) returned 1 [0155.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e2a0) returned 1 [0155.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e260) returned 1 [0155.616] LocalAlloc (uFlags=0x0, uBytes=0x66) returned 0x6900c0 [0155.620] ShellExecuteExW (in: pExecInfo=0x21e2658*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x21e2658*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\RunIt.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x4f0)) returned 1 [0156.250] LocalFree (hMem=0x6900c0) returned 0x0 [0156.259] InvalidateRect (hWnd=0x30132, lpRect=0x0, bErase=0) returned 1 [0156.259] InvalidateRect (hWnd=0x20146, lpRect=0x0, bErase=0) returned 1 [0156.259] InvalidateRect (hWnd=0x3015e, lpRect=0x0, bErase=0) returned 1 [0156.259] InvalidateRect (hWnd=0x4002c, lpRect=0x0, bErase=0) returned 1 [0156.259] InvalidateRect (hWnd=0x201bc, lpRect=0x0, bErase=0) returned 1 [0156.259] InvalidateRect (hWnd=0x40046, lpRect=0x0, bErase=0) returned 1 [0156.259] InvalidateRect (hWnd=0x20042, lpRect=0x0, bErase=0) returned 1 [0156.259] InvalidateRect (hWnd=0x20034, lpRect=0x0, bErase=0) returned 1 [0156.260] InvalidateRect (hWnd=0x2004c, lpRect=0x0, bErase=0) returned 1 [0156.260] InvalidateRect (hWnd=0x101e4, lpRect=0x0, bErase=0) returned 1 [0156.260] InvalidateRect (hWnd=0x101e6, lpRect=0x0, bErase=0) returned 1 [0156.260] InvalidateRect (hWnd=0x101e8, lpRect=0x0, bErase=0) returned 1 [0156.260] InvalidateRect (hWnd=0x101ea, lpRect=0x0, bErase=0) returned 1 [0156.260] InvalidateRect (hWnd=0x101ec, lpRect=0x0, bErase=0) returned 1 [0156.260] InvalidateRect (hWnd=0x101ee, lpRect=0x0, bErase=0) returned 1 [0156.260] InvalidateRect (hWnd=0x101f0, lpRect=0x0, bErase=0) returned 1 [0156.260] InvalidateRect (hWnd=0x101f2, lpRect=0x0, bErase=0) returned 1 [0156.260] InvalidateRect (hWnd=0x101f4, lpRect=0x0, bErase=0) returned 1 [0156.260] InvalidateRect (hWnd=0x101f6, lpRect=0x0, bErase=0) returned 1 [0156.260] InvalidateRect (hWnd=0x101f8, lpRect=0x0, bErase=1) returned 1 [0156.262] GetWindowThreadProcessId (in: hWnd=0x3002a, lpdwProcessId=0x14e650 | out: lpdwProcessId=0x14e650) returned 0x89c [0156.262] GetCurrentThreadId () returned 0x89c [0156.262] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc157 [0156.262] PostMessageW (hWnd=0x3002a, Msg=0xc157, wParam=0x0, lParam=0x0) returned 1 [0156.262] GetWindowTextLengthW (hWnd=0x3002a) returned 5 [0156.262] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0156.262] GetSystemMetrics (nIndex=42) returned 0 [0156.262] GetWindowTextW (in: hWnd=0x3002a, lpString=0x14e560, nMaxCount=6 | out: lpString="Form1") returned 5 [0156.263] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xd, wParam=0x6, lParam=0x14e560) returned 0x5 [0156.264] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x46, wParam=0x0, lParam=0x14ed90) returned 0x0 [0156.264] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x20148, Msg=0x46, wParam=0x0, lParam=0x14ed90) returned 0x0 [0156.279] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x46, wParam=0x0, lParam=0x14ed90) returned 0x0 [0156.279] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x20148, Msg=0x46, wParam=0x0, lParam=0x14ed90) returned 0x0 [0156.279] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x1c, wParam=0x1, lParam=0x680) returned 0x0 [0156.279] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x20148, Msg=0x1c, wParam=0x1, lParam=0x680) returned 0x0 [0156.279] NtdllDefWindowProc_W (hWnd=0x30038, Msg=0x1c, wParam=0x1, lParam=0x680) returned 0x0 [0156.279] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0156.281] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0156.281] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0156.282] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0156.288] OleInitialize (pvReserved=0x0) returned 0x0 [0156.288] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x14e948 | out: lplpMessageFilter=0x14e948*=0x0) returned 0x0 [0156.308] GetFocus () returned 0x0 [0156.310] GetFocus () returned 0x0 [0156.310] SetFocus (hWnd=0x101f8) returned 0x0 [0156.317] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0156.320] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0156.321] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0156.321] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0156.322] GetParent (hWnd=0x3002a) returned 0x0 [0156.324] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x1 [0156.324] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0156.324] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0 [0156.324] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0156.324] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x282, wParam=0xf, lParam=0x30177) returned 0x0 [0156.340] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0156.340] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0 [0156.340] SendMessageW (hWnd=0x101f8, Msg=0x2111, wParam=0x10001f8, lParam=0x101f8) returned 0x0 [0156.347] SendMessageW (hWnd=0x101f8, Msg=0xb0, wParam=0x14e200, lParam=0x14e1a0) returned 0x0 [0156.347] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0xb0, wParam=0x14e200, lParam=0x14e1a0) returned 0x0 [0156.348] GetKeyState (nVirtKey=1) returned 0 [0156.348] GetKeyState (nVirtKey=2) returned 0 [0156.348] GetKeyState (nVirtKey=4) returned 0 [0156.348] GetKeyState (nVirtKey=5) returned 0 [0156.348] GetKeyState (nVirtKey=6) returned 0 [0156.348] GetWindowTextLengthW (hWnd=0x101f8) returned 1 [0156.348] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1 [0156.348] SendMessageW (hWnd=0x101f8, Msg=0xb1, wParam=0x0, lParam=0x1) returned 0x1 [0156.348] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0xb1, wParam=0x0, lParam=0x1) returned 0x1 [0156.349] SetTextColor (hdc=0xffffffffd001053c, color=0x0) returned 0x0 [0156.349] SetBkColor (hdc=0xffffffffd001053c, color=0xffffff) returned 0xffffff [0156.349] GetSysColorBrush (nIndex=5) returned 0x110007b [0156.351] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0156.351] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0 [0156.351] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.353] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0156.353] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0156.353] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0156.354] GetWindowPlacement (in: hWnd=0x3002a, lpwndpl=0x14e958 | out: lpwndpl=0x14e958) returned 1 [0156.354] GetClientRect (in: hWnd=0x3002a, lpRect=0x14e870 | out: lpRect=0x14e870) returned 1 [0156.354] GetWindowTextLengthW (hWnd=0x3002a) returned 5 [0156.354] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0156.354] GetSystemMetrics (nIndex=42) returned 0 [0156.354] GetWindowTextW (in: hWnd=0x3002a, lpString=0x14e5e0, nMaxCount=6 | out: lpString="Form1") returned 5 [0156.354] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xd, wParam=0x6, lParam=0x14e5e0) returned 0x5 [0156.355] GetClientRect (in: hWnd=0x3002a, lpRect=0x14e658 | out: lpRect=0x14e658) returned 1 [0156.358] GetSystemMetrics (nIndex=80) returned 1 [0156.359] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x5d393c, dwData=0x0) returned 1 [0156.365] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14de50 | out: lpmi=0x14de50) returned 1 [0156.366] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x5a0105c2 [0156.366] GetDeviceCaps (hdc=0x5a0105c2, index=12) returned 32 [0156.366] GetDeviceCaps (hdc=0x5a0105c2, index=14) returned 1 [0156.366] DeleteDC (hdc=0x5a0105c2) returned 1 [0156.368] GetCurrentObject (hdc=0xffffffffd001053c, type=0x1) returned 0x1b00017 [0156.368] GetCurrentObject (hdc=0xffffffffd001053c, type=0x2) returned 0x1900010 [0156.368] GetCurrentObject (hdc=0xffffffffd001053c, type=0x7) returned 0x1a050531 [0156.368] GetCurrentObject (hdc=0xffffffffd001053c, type=0x6) returned 0x18a0048 [0156.371] SaveDC (hdc=0xffffffffd001053c) returned 1 [0156.373] GetNearestColor (hdc=0xffffffffd001053c, color=0xf0f0f0) returned 0xf0f0f0 [0156.378] CreateSolidBrush (color=0xf0f0f0) returned 0x81006b3 [0156.379] FillRect (hDC=0xffffffffd001053c, lprc=0x14e348, hbr=0x81006b3) returned 1 [0156.381] DeleteObject (ho=0x81006b3) returned 1 [0156.382] RestoreDC (hdc=0xffffffffd001053c, nSavedDC=-1) returned 1 [0156.385] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x30132, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.385] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x30132, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.385] GetStockObject (i=5) returned 0x1900015 [0156.386] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20146, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.386] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20146, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.386] GetStockObject (i=5) returned 0x1900015 [0156.386] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x3015e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.386] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x3015e, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.386] GetStockObject (i=5) returned 0x1900015 [0156.386] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x4002c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.386] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x4002c, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.386] GetStockObject (i=5) returned 0x1900015 [0156.387] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x201bc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.387] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x201bc, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.387] GetStockObject (i=5) returned 0x1900015 [0156.387] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x40046, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.387] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x40046, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.387] GetStockObject (i=5) returned 0x1900015 [0156.387] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20042, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.387] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20042, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.388] GetStockObject (i=5) returned 0x1900015 [0156.388] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20034, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.388] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20034, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.388] GetStockObject (i=5) returned 0x1900015 [0156.388] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x2004c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.388] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x2004c, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.388] GetStockObject (i=5) returned 0x1900015 [0156.395] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.395] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e4, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.395] GetStockObject (i=5) returned 0x1900015 [0156.395] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.395] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e6, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.395] GetStockObject (i=5) returned 0x1900015 [0156.395] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.396] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e8, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.396] GetStockObject (i=5) returned 0x1900015 [0156.396] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.396] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ea, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.396] GetStockObject (i=5) returned 0x1900015 [0156.396] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ec, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.396] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ec, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.396] GetStockObject (i=5) returned 0x1900015 [0156.397] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ee, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.397] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ee, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.397] GetStockObject (i=5) returned 0x1900015 [0156.397] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.397] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f0, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.397] GetStockObject (i=5) returned 0x1900015 [0156.397] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.398] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f2, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.398] GetStockObject (i=5) returned 0x1900015 [0156.398] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.398] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f4, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.398] GetStockObject (i=5) returned 0x1900015 [0156.398] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.398] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f6, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.398] GetStockObject (i=5) returned 0x1900015 [0156.398] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.399] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.399] SetTextColor (hdc=0xa0100d0, color=0x0) returned 0x0 [0156.399] SetBkColor (hdc=0xa0100d0, color=0xffffff) returned 0xffffff [0156.399] GetWindowPlacement (in: hWnd=0x3002a, lpwndpl=0x14e938 | out: lpwndpl=0x14e938) returned 1 [0156.399] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x47, wParam=0x0, lParam=0x14ed90) returned 0x0 [0156.399] GetClientRect (in: hWnd=0x3002a, lpRect=0x14e7d0 | out: lpRect=0x14e7d0) returned 1 [0156.399] GetWindowRect (in: hWnd=0x3002a, lpRect=0x14e7d0 | out: lpRect=0x14e7d0) returned 1 [0156.400] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0156.401] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0156.401] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0156.401] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x5, wParam=0x0, lParam=0xa90102) returned 0x0 [0156.401] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x3, wParam=0x0, lParam=0xbb00a4) returned 0x0 [0156.401] GetClientRect (in: hWnd=0x3002a, lpRect=0x14e860 | out: lpRect=0x14e860) returned 1 [0156.401] GetWindowRect (in: hWnd=0x3002a, lpRect=0x14e860 | out: lpRect=0x14e860) returned 1 [0156.402] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.402] IsWindowUnicode (hWnd=0x3002a) returned 1 [0156.403] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.404] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.404] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0156.404] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x46, wParam=0x0, lParam=0x14eae0) returned 0x0 [0156.404] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x83, wParam=0x1, lParam=0x14eab0) returned 0x0 [0156.405] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.406] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0156.406] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0156.406] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0156.410] GetWindowPlacement (in: hWnd=0x3002a, lpwndpl=0x14e6a8 | out: lpwndpl=0x14e6a8) returned 1 [0156.410] GetClientRect (in: hWnd=0x3002a, lpRect=0x14e5c0 | out: lpRect=0x14e5c0) returned 1 [0156.410] GetWindowTextLengthW (hWnd=0x3002a) returned 5 [0156.410] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0156.410] GetSystemMetrics (nIndex=42) returned 0 [0156.410] GetWindowTextW (in: hWnd=0x3002a, lpString=0x14e330, nMaxCount=6 | out: lpString="Form1") returned 5 [0156.410] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xd, wParam=0x6, lParam=0x14e330) returned 0x5 [0156.410] GetClientRect (in: hWnd=0x3002a, lpRect=0x14e3a8 | out: lpRect=0x14e3a8) returned 1 [0156.410] GetCurrentObject (hdc=0xffffffffd001053c, type=0x1) returned 0x1b00017 [0156.410] GetCurrentObject (hdc=0xffffffffd001053c, type=0x2) returned 0x1900010 [0156.410] GetCurrentObject (hdc=0xffffffffd001053c, type=0x7) returned 0x1a050531 [0156.410] GetCurrentObject (hdc=0xffffffffd001053c, type=0x6) returned 0x18a0048 [0156.410] SaveDC (hdc=0xffffffffd001053c) returned 1 [0156.410] GetNearestColor (hdc=0xffffffffd001053c, color=0xf0f0f0) returned 0xf0f0f0 [0156.410] CreateSolidBrush (color=0xf0f0f0) returned 0x91006b3 [0156.410] FillRect (hDC=0xffffffffd001053c, lprc=0x14e098, hbr=0x91006b3) returned 1 [0156.411] DeleteObject (ho=0x91006b3) returned 1 [0156.411] RestoreDC (hdc=0xffffffffd001053c, nSavedDC=-1) returned 1 [0156.414] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x30132, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.414] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x30132, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.414] GetStockObject (i=5) returned 0x1900015 [0156.414] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20146, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.415] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20146, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.415] GetStockObject (i=5) returned 0x1900015 [0156.415] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x3015e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.415] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x3015e, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.415] GetStockObject (i=5) returned 0x1900015 [0156.415] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x4002c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.415] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x4002c, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.415] GetStockObject (i=5) returned 0x1900015 [0156.416] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x201bc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.416] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x201bc, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.416] GetStockObject (i=5) returned 0x1900015 [0156.416] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x40046, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.416] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x40046, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.416] GetStockObject (i=5) returned 0x1900015 [0156.416] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20042, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.417] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20042, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.417] GetStockObject (i=5) returned 0x1900015 [0156.417] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20034, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.417] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20034, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.417] GetStockObject (i=5) returned 0x1900015 [0156.417] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x2004c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.417] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x2004c, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.417] GetStockObject (i=5) returned 0x1900015 [0156.418] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.418] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e4, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.418] GetStockObject (i=5) returned 0x1900015 [0156.418] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.418] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e6, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.418] GetStockObject (i=5) returned 0x1900015 [0156.418] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.418] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e8, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.418] GetStockObject (i=5) returned 0x1900015 [0156.419] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.419] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ea, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.419] GetStockObject (i=5) returned 0x1900015 [0156.419] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ec, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.419] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ec, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.419] GetStockObject (i=5) returned 0x1900015 [0156.419] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ee, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.419] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ee, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.420] GetStockObject (i=5) returned 0x1900015 [0156.420] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.420] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f0, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.420] GetStockObject (i=5) returned 0x1900015 [0156.420] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.420] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f2, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.420] GetStockObject (i=5) returned 0x1900015 [0156.420] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.421] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f4, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.421] GetStockObject (i=5) returned 0x1900015 [0156.421] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.421] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f6, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.421] GetStockObject (i=5) returned 0x1900015 [0156.421] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.423] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.424] SetTextColor (hdc=0xffffffffd001053c, color=0x0) returned 0x0 [0156.424] SetBkColor (hdc=0xffffffffd001053c, color=0xffffff) returned 0xffffff [0156.424] GetWindowPlacement (in: hWnd=0x3002a, lpwndpl=0x14e688 | out: lpwndpl=0x14e688) returned 1 [0156.424] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x47, wParam=0x0, lParam=0x14eae0) returned 0x0 [0156.424] GetClientRect (in: hWnd=0x3002a, lpRect=0x14e520 | out: lpRect=0x14e520) returned 1 [0156.424] GetWindowRect (in: hWnd=0x3002a, lpRect=0x14e520 | out: lpRect=0x14e520) returned 1 [0156.425] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0156.426] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0156.426] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0156.426] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x83, wParam=0x1, lParam=0x14e380) returned 0x0 [0156.427] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.428] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0156.428] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0156.428] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0156.429] GetWindowPlacement (in: hWnd=0x3002a, lpwndpl=0x14df78 | out: lpwndpl=0x14df78) returned 1 [0156.429] GetClientRect (in: hWnd=0x3002a, lpRect=0x14de90 | out: lpRect=0x14de90) returned 1 [0156.429] GetWindowTextLengthW (hWnd=0x3002a) returned 5 [0156.429] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0156.429] GetSystemMetrics (nIndex=42) returned 0 [0156.429] GetWindowTextW (in: hWnd=0x3002a, lpString=0x14dc00, nMaxCount=6 | out: lpString="Form1") returned 5 [0156.429] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xd, wParam=0x6, lParam=0x14dc00) returned 0x5 [0156.429] GetClientRect (in: hWnd=0x3002a, lpRect=0x14dc78 | out: lpRect=0x14dc78) returned 1 [0156.429] GetCurrentObject (hdc=0xa0100d0, type=0x1) returned 0x1b00017 [0156.429] GetCurrentObject (hdc=0xa0100d0, type=0x2) returned 0x1900010 [0156.429] GetCurrentObject (hdc=0xa0100d0, type=0x7) returned 0x1a050531 [0156.429] GetCurrentObject (hdc=0xa0100d0, type=0x6) returned 0x18a0048 [0156.429] SaveDC (hdc=0xa0100d0) returned 1 [0156.430] GetNearestColor (hdc=0xa0100d0, color=0xf0f0f0) returned 0xf0f0f0 [0156.430] CreateSolidBrush (color=0xf0f0f0) returned 0xa1006b3 [0156.430] FillRect (hDC=0xa0100d0, lprc=0x14d968, hbr=0xa1006b3) returned 1 [0156.436] DeleteObject (ho=0xa1006b3) returned 1 [0156.436] RestoreDC (hdc=0xa0100d0, nSavedDC=-1) returned 1 [0156.436] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x30132, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.436] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x30132, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.436] GetStockObject (i=5) returned 0x1900015 [0156.436] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20146, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.437] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20146, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.437] GetStockObject (i=5) returned 0x1900015 [0156.437] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x3015e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.437] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x3015e, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.437] GetStockObject (i=5) returned 0x1900015 [0156.437] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x4002c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.437] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x4002c, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.437] GetStockObject (i=5) returned 0x1900015 [0156.440] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x201bc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.440] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x201bc, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.440] GetStockObject (i=5) returned 0x1900015 [0156.440] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x40046, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.440] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x40046, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.441] GetStockObject (i=5) returned 0x1900015 [0156.441] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20042, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.441] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20042, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.441] GetStockObject (i=5) returned 0x1900015 [0156.441] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20034, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.441] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20034, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.441] GetStockObject (i=5) returned 0x1900015 [0156.441] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x2004c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.442] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x2004c, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.442] GetStockObject (i=5) returned 0x1900015 [0156.442] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.442] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e4, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.442] GetStockObject (i=5) returned 0x1900015 [0156.442] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.442] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e6, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.442] GetStockObject (i=5) returned 0x1900015 [0156.443] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.443] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e8, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.443] GetStockObject (i=5) returned 0x1900015 [0156.443] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.443] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ea, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.443] GetStockObject (i=5) returned 0x1900015 [0156.443] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ec, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.443] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ec, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.444] GetStockObject (i=5) returned 0x1900015 [0156.444] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ee, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.444] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ee, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.444] GetStockObject (i=5) returned 0x1900015 [0156.444] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.444] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f0, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.444] GetStockObject (i=5) returned 0x1900015 [0156.444] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f2, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.445] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f2, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.445] GetStockObject (i=5) returned 0x1900015 [0156.445] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.445] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f4, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.445] GetStockObject (i=5) returned 0x1900015 [0156.445] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.445] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f6, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.445] GetStockObject (i=5) returned 0x1900015 [0156.445] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.446] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0156.446] SetTextColor (hdc=0xa0100d0, color=0x0) returned 0x0 [0156.446] SetBkColor (hdc=0xa0100d0, color=0xffffff) returned 0xffffff [0156.447] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0156.447] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.447] IsWindowUnicode (hWnd=0x20148) returned 1 [0156.447] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.447] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.447] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0156.447] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x20148, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0156.447] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.447] IsWindowUnicode (hWnd=0x3002a) returned 1 [0156.447] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.447] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.447] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0156.448] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.448] IsWindowUnicode (hWnd=0x3002a) returned 1 [0156.448] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.448] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.448] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0156.449] BeginPaint (in: hWnd=0x3002a, lpPaint=0x14e618 | out: lpPaint=0x14e618) returned 0xffffffffd001053c [0156.450] GdipCreateHalftonePalette () returned 0xffffffffe80805c2 [0156.451] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0156.451] GetWindowTextLengthW (hWnd=0x3002a) returned 5 [0156.451] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0156.451] GetSystemMetrics (nIndex=42) returned 0 [0156.451] GetWindowTextW (in: hWnd=0x3002a, lpString=0x14e4c0, nMaxCount=6 | out: lpString="Form1") returned 5 [0156.451] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xd, wParam=0x6, lParam=0x14e4c0) returned 0x5 [0156.451] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0156.451] EndPaint (hWnd=0x3002a, lpPaint=0x14e5b8) returned 1 [0156.451] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.451] IsWindowUnicode (hWnd=0x30132) returned 1 [0156.451] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.451] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.451] DispatchMessageW (lpMsg=0x14ef10) [0156.452] BeginPaint (in: hWnd=0x30132, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xffffffffd001053c [0156.452] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0156.453] CreateCompatibleDC (hdc=0xffffffffd001053c) returned 0x21010558 [0156.453] GetObjectType (h=0xffffffffd001053c) returned 0x3 [0156.453] CreateCompatibleBitmap (hdc=0xffffffffd001053c, cx=1, cy=1) returned 0x190506b0 [0156.486] GetDIBits (in: hdc=0xffffffffd001053c, hbm=0x190506b0, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x14df38, usage=0x0 | out: lpvBits=0x0, lpbmi=0x14df38) returned 1 [0156.486] GetDIBits (in: hdc=0xffffffffd001053c, hbm=0x190506b0, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x14df38, usage=0x0 | out: lpvBits=0x0, lpbmi=0x14df38) returned 1 [0156.486] DeleteObject (ho=0x190506b0) returned 1 [0156.486] CreateDIBSection (in: hdc=0xffffffffd001053c, lpbmi=0x14dfe8, usage=0x0, ppvBits=0x14e5a8, hSection=0x0, offset=0x0 | out: ppvBits=0x14e5a8) returned 0x50506af [0156.486] SelectObject (hdc=0x21010558, h=0x50506af) returned 0x185000f [0156.486] GdipCreateFromHDC (hdc=0x21010558, graphics=0x14e528) returned 0x0 [0156.489] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0156.489] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0156.491] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0156.491] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd518f0) returned 0x0 [0156.492] GdipIsMatrixIdentity (matrix=0x1bd518f0, result=0x14e5b8) returned 0x0 [0156.492] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0156.492] GdipGetMatrixElements (matrix=0x1bd518f0, matrixOut=0x1d888150) returned 0x0 [0156.494] LocalFree (hMem=0x1d888150) returned 0x0 [0156.494] GdipDeleteMatrix (matrix=0x1bd518f0) returned 0x0 [0156.495] GdipCreateRegion (region=0x14e550) returned 0x0 [0156.496] GdipGetClip (graphics=0x1bd51520, region=0x1ab7eee0) returned 0x0 [0156.498] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0156.498] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0156.499] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffdb40dbd) returned 0x0 [0156.499] GdipDeleteRegion (region=0x1ab7eee0) returned 0x0 [0156.502] SystemParametersInfoW (in: uiAction=0x42, uiParam=0x10, pvParam=0x14e3b8, fWinIni=0x0 | out: pvParam=0x14e3b8) returned 1 [0156.502] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0156.503] GetCurrentObject (hdc=0x21010558, type=0x1) returned 0x1b00017 [0156.503] GetCurrentObject (hdc=0x21010558, type=0x2) returned 0x1900010 [0156.503] GetCurrentObject (hdc=0x21010558, type=0x7) returned 0x50506af [0156.503] GetCurrentObject (hdc=0x21010558, type=0x6) returned 0x18a0048 [0156.503] SaveDC (hdc=0x21010558) returned 1 [0156.503] GetNearestColor (hdc=0x21010558, color=0xf0f0f0) returned 0xf0f0f0 [0156.503] GetNearestColor (hdc=0x21010558, color=0xa0a0a0) returned 0xa0a0a0 [0156.503] GetNearestColor (hdc=0x21010558, color=0x696969) returned 0x696969 [0156.503] GetNearestColor (hdc=0x21010558, color=0xa0a0a0) returned 0xa0a0a0 [0156.503] GetNearestColor (hdc=0x21010558, color=0x0) returned 0x0 [0156.503] GetNearestColor (hdc=0x21010558, color=0xffffff) returned 0xffffff [0156.503] GetNearestColor (hdc=0x21010558, color=0xe5e5e5) returned 0xe5e5e5 [0156.503] GetNearestColor (hdc=0x21010558, color=0xd8d8d8) returned 0xd8d8d8 [0156.503] GetNearestColor (hdc=0x21010558, color=0x0) returned 0x0 [0156.503] RestoreDC (hdc=0x21010558, nSavedDC=-1) returned 1 [0156.504] GdipReleaseDC (graphics=0x1bd51520, hdc=0x21010558) returned 0x0 [0156.504] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.504] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExc\x1e\x02", lpUsedDefaultChar=0x0) returned 17 [0156.505] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.508] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21e6968) returned 0x0 [0156.510] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.510] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.510] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x14e368, fWinIni=0x0 | out: pvParam=0x14e368) returned 1 [0156.510] SendMessageW (hWnd=0x3002a, Msg=0x127, wParam=0x30001, lParam=0x0) [0156.510] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x127, wParam=0x30001, lParam=0x0) [0156.510] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x128, wParam=0x30001, lParam=0x0) [0156.511] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x30132, Msg=0x128, wParam=0x30001, lParam=0x0) [0156.511] GetStockObject (i=5) returned 0x1900015 [0156.511] GetStockObject (i=5) returned 0x1900015 [0156.512] GetDlgItem (hDlg=0x3002a, nIDDlgItem=196914) returned 0x30132 [0156.512] SendMessageW (hWnd=0x30132, Msg=0x202b, wParam=0x30132, lParam=0x14c6f0) [0156.512] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x30132, Msg=0x202b, wParam=0x30132, lParam=0x14c6f0) returned 0x0 [0156.512] RedrawWindow (hWnd=0x30132, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0156.512] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20146, Msg=0x128, wParam=0x30001, lParam=0x0) [0156.512] GetStockObject (i=5) returned 0x1900015 [0156.513] GetStockObject (i=5) returned 0x1900015 [0156.513] GetDlgItem (hDlg=0x3002a, nIDDlgItem=131398) returned 0x20146 [0156.513] SendMessageW (hWnd=0x20146, Msg=0x202b, wParam=0x20146, lParam=0x14c6f0) [0156.513] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20146, Msg=0x202b, wParam=0x20146, lParam=0x14c6f0) returned 0x0 [0156.513] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x3015e, Msg=0x128, wParam=0x30001, lParam=0x0) [0156.513] GetStockObject (i=5) returned 0x1900015 [0156.513] GetStockObject (i=5) returned 0x1900015 [0156.513] GetDlgItem (hDlg=0x3002a, nIDDlgItem=196958) returned 0x3015e [0156.514] SendMessageW (hWnd=0x3015e, Msg=0x202b, wParam=0x3015e, lParam=0x14c6f0) [0156.514] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x3015e, Msg=0x202b, wParam=0x3015e, lParam=0x14c6f0) returned 0x0 [0156.514] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x4002c, Msg=0x128, wParam=0x30001, lParam=0x0) [0156.514] GetStockObject (i=5) returned 0x1900015 [0156.514] GetStockObject (i=5) returned 0x1900015 [0156.514] GetDlgItem (hDlg=0x3002a, nIDDlgItem=262188) returned 0x4002c [0156.514] SendMessageW (hWnd=0x4002c, Msg=0x202b, wParam=0x4002c, lParam=0x14c6f0) [0156.514] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x4002c, Msg=0x202b, wParam=0x4002c, lParam=0x14c6f0) returned 0x0 [0156.514] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x201bc, Msg=0x128, wParam=0x30001, lParam=0x0) [0156.514] GetStockObject (i=5) returned 0x1900015 [0156.515] GetStockObject (i=5) returned 0x1900015 [0156.515] GetDlgItem (hDlg=0x3002a, nIDDlgItem=131516) returned 0x201bc [0156.515] SendMessageW (hWnd=0x201bc, Msg=0x202b, wParam=0x201bc, lParam=0x14c6f0) [0156.515] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x201bc, Msg=0x202b, wParam=0x201bc, lParam=0x14c6f0) returned 0x0 [0156.515] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x40046, Msg=0x128, wParam=0x30001, lParam=0x0) [0156.515] GetStockObject (i=5) returned 0x1900015 [0156.515] GetStockObject (i=5) returned 0x1900015 [0156.515] GetDlgItem (hDlg=0x3002a, nIDDlgItem=262214) returned 0x40046 [0156.515] SendMessageW (hWnd=0x40046, Msg=0x202b, wParam=0x40046, lParam=0x14c6f0) [0156.515] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x40046, Msg=0x202b, wParam=0x40046, lParam=0x14c6f0) returned 0x0 [0156.515] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20042, Msg=0x128, wParam=0x30001, lParam=0x0) [0156.516] GetStockObject (i=5) returned 0x1900015 [0156.516] GetStockObject (i=5) returned 0x1900015 [0156.517] GetDlgItem (hDlg=0x3002a, nIDDlgItem=131138) returned 0x20042 [0156.517] SendMessageW (hWnd=0x20042, Msg=0x202b, wParam=0x20042, lParam=0x14c6f0) [0156.517] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20042, Msg=0x202b, wParam=0x20042, lParam=0x14c6f0) returned 0x0 [0156.517] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20034, Msg=0x128, wParam=0x30001, lParam=0x0) [0156.517] GetStockObject (i=5) returned 0x1900015 [0156.517] GetStockObject (i=5) returned 0x1900015 [0156.517] GetDlgItem (hDlg=0x3002a, nIDDlgItem=131124) returned 0x20034 [0156.517] SendMessageW (hWnd=0x20034, Msg=0x202b, wParam=0x20034, lParam=0x14c6f0) [0156.517] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20034, Msg=0x202b, wParam=0x20034, lParam=0x14c6f0) returned 0x0 [0156.517] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x2004c, Msg=0x128, wParam=0x30001, lParam=0x0) [0156.517] GetStockObject (i=5) returned 0x1900015 [0156.518] GetStockObject (i=5) returned 0x1900015 [0156.518] GetDlgItem (hDlg=0x3002a, nIDDlgItem=131148) returned 0x2004c [0156.518] SendMessageW (hWnd=0x2004c, Msg=0x202b, wParam=0x2004c, lParam=0x14c6f0) [0156.518] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x2004c, Msg=0x202b, wParam=0x2004c, lParam=0x14c6f0) returned 0x0 [0156.518] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e4, Msg=0x128, wParam=0x30001, lParam=0x0) [0156.518] GetStockObject (i=5) returned 0x1900015 [0156.518] GetStockObject (i=5) returned 0x1900015 [0156.518] GetDlgItem (hDlg=0x3002a, nIDDlgItem=66020) returned 0x101e4 [0156.518] SendMessageW (hWnd=0x101e4, Msg=0x202b, wParam=0x101e4, lParam=0x14c6f0) [0156.518] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e4, Msg=0x202b, wParam=0x101e4, lParam=0x14c6f0) returned 0x0 [0156.518] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e6, Msg=0x128, wParam=0x30001, lParam=0x0) [0156.519] GetStockObject (i=5) returned 0x1900015 [0156.519] GetStockObject (i=5) returned 0x1900015 [0156.519] GetDlgItem (hDlg=0x3002a, nIDDlgItem=66022) returned 0x101e6 [0156.519] SendMessageW (hWnd=0x101e6, Msg=0x202b, wParam=0x101e6, lParam=0x14c6f0) [0156.519] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e6, Msg=0x202b, wParam=0x101e6, lParam=0x14c6f0) returned 0x0 [0156.519] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e8, Msg=0x128, wParam=0x30001, lParam=0x0) [0156.519] GetStockObject (i=5) returned 0x1900015 [0156.519] GetStockObject (i=5) returned 0x1900015 [0156.519] GetDlgItem (hDlg=0x3002a, nIDDlgItem=66024) returned 0x101e8 [0156.519] SendMessageW (hWnd=0x101e8, Msg=0x202b, wParam=0x101e8, lParam=0x14c6f0) [0156.519] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e8, Msg=0x202b, wParam=0x101e8, lParam=0x14c6f0) returned 0x0 [0156.520] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ea, Msg=0x128, wParam=0x30001, lParam=0x0) [0156.520] GetStockObject (i=5) returned 0x1900015 [0156.520] GetStockObject (i=5) returned 0x1900015 [0156.520] GetDlgItem (hDlg=0x3002a, nIDDlgItem=66026) returned 0x101ea [0156.520] SendMessageW (hWnd=0x101ea, Msg=0x202b, wParam=0x101ea, lParam=0x14c6f0) [0156.520] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ea, Msg=0x202b, wParam=0x101ea, lParam=0x14c6f0) returned 0x0 [0156.520] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ec, Msg=0x128, wParam=0x30001, lParam=0x0) [0156.520] GetStockObject (i=5) returned 0x1900015 [0156.520] GetStockObject (i=5) returned 0x1900015 [0156.521] GetDlgItem (hDlg=0x3002a, nIDDlgItem=66028) returned 0x101ec [0156.521] SendMessageW (hWnd=0x101ec, Msg=0x202b, wParam=0x101ec, lParam=0x14c6f0) [0156.521] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ec, Msg=0x202b, wParam=0x101ec, lParam=0x14c6f0) returned 0x0 [0156.521] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ee, Msg=0x128, wParam=0x30001, lParam=0x0) [0156.521] GetStockObject (i=5) returned 0x1900015 [0156.521] GetStockObject (i=5) returned 0x1900015 [0156.521] GetDlgItem (hDlg=0x3002a, nIDDlgItem=66030) returned 0x101ee [0156.521] SendMessageW (hWnd=0x101ee, Msg=0x202b, wParam=0x101ee, lParam=0x14c6f0) [0156.521] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ee, Msg=0x202b, wParam=0x101ee, lParam=0x14c6f0) returned 0x0 [0156.521] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f0, Msg=0x128, wParam=0x30001, lParam=0x0) [0156.521] GetStockObject (i=5) returned 0x1900015 [0156.523] GetStockObject (i=5) returned 0x1900015 [0156.523] GetDlgItem (hDlg=0x3002a, nIDDlgItem=66032) returned 0x101f0 [0156.523] SendMessageW (hWnd=0x101f0, Msg=0x202b, wParam=0x101f0, lParam=0x14c6f0) [0156.523] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f0, Msg=0x202b, wParam=0x101f0, lParam=0x14c6f0) returned 0x0 [0156.524] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f2, Msg=0x128, wParam=0x30001, lParam=0x0) [0156.524] GetStockObject (i=5) returned 0x1900015 [0156.524] GetStockObject (i=5) returned 0x1900015 [0156.524] GetDlgItem (hDlg=0x3002a, nIDDlgItem=66034) returned 0x101f2 [0156.524] SendMessageW (hWnd=0x101f2, Msg=0x202b, wParam=0x101f2, lParam=0x14c6f0) [0156.524] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f2, Msg=0x202b, wParam=0x101f2, lParam=0x14c6f0) returned 0x0 [0156.524] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f4, Msg=0x128, wParam=0x30001, lParam=0x0) [0156.524] GetStockObject (i=5) returned 0x1900015 [0156.524] GetStockObject (i=5) returned 0x1900015 [0156.524] GetDlgItem (hDlg=0x3002a, nIDDlgItem=66036) returned 0x101f4 [0156.524] SendMessageW (hWnd=0x101f4, Msg=0x202b, wParam=0x101f4, lParam=0x14c6f0) [0156.524] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f4, Msg=0x202b, wParam=0x101f4, lParam=0x14c6f0) returned 0x0 [0156.525] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f6, Msg=0x128, wParam=0x30001, lParam=0x0) [0156.525] GetStockObject (i=5) returned 0x1900015 [0156.525] GetStockObject (i=5) returned 0x1900015 [0156.525] GetDlgItem (hDlg=0x3002a, nIDDlgItem=66038) returned 0x101f6 [0156.525] SendMessageW (hWnd=0x101f6, Msg=0x202b, wParam=0x101f6, lParam=0x14c6f0) [0156.525] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101f6, Msg=0x202b, wParam=0x101f6, lParam=0x14c6f0) returned 0x0 [0156.525] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0156.525] RedrawWindow (hWnd=0x101f8, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0156.526] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.527] GdipGetStringFormatFlags (format=0x1ab7eee0, flags=0x14e378) returned 0x0 [0156.527] GdipGetStringFormatTrimming (format=0x1ab7eee0, trimming=0x14e378) returned 0x0 [0156.528] GdipGetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=0x14e378) returned 0x0 [0156.528] GdipGetFontSize (font=0x1ab7eee0, size=0x14e378) returned 0x0 [0156.529] GdipGetFontStyle (font=0x1ab7eee0, style=0x14e378) returned 0x0 [0156.529] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.530] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.530] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.531] CreateCompatibleDC (hdc=0x0) returned 0x190106ae [0156.531] GetCurrentObject (hdc=0x190106ae, type=0x1) returned 0x1b00017 [0156.531] GetCurrentObject (hdc=0x190106ae, type=0x2) returned 0x1900010 [0156.531] GetCurrentObject (hdc=0x190106ae, type=0x7) returned 0x185000f [0156.531] GetCurrentObject (hdc=0x190106ae, type=0x6) returned 0x18a0048 [0156.531] SaveDC (hdc=0x190106ae) returned 1 [0156.531] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0156.531] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21e7208) returned 0x0 [0156.532] GdipSetStringFormatFlags (format=0x1bd56bc0, flags=0) returned 0x0 [0156.533] GdipSetStringFormatTrimming (format=0x1bd56bc0, trimming=0x1) returned 0x0 [0156.533] GdipSetStringFormatHotkeyPrefix (format=0x1bd56bc0, hotkeyPrefix=2) returned 0x0 [0156.534] GdipSetStringFormatAlign (format=0x1bd56bc0, align=0x1) returned 0x0 [0156.534] GdipSetStringFormatLineAlign (format=0x1bd56bc0, align=0x1) returned 0x0 [0156.536] GdipMeasureString (graphics=0x1bd567f0, string="*", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1bd56bc0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0156.539] GdipDeleteStringFormat (format=0x1bd56bc0) returned 0x0 [0156.539] GdipDeleteGraphics (graphics=0x1bd567f0) returned 0x0 [0156.540] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.540] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.540] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.541] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0156.541] GdipGetClip (graphics=0x1bd51520, region=0x1ab7eee0) returned 0x0 [0156.541] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0156.541] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd567f0) returned 0x0 [0156.541] GdipIsMatrixIdentity (matrix=0x1bd567f0, result=0x14e128) returned 0x0 [0156.541] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888850 [0156.541] GdipGetMatrixElements (matrix=0x1bd567f0, matrixOut=0x1d888850) returned 0x0 [0156.542] LocalFree (hMem=0x1d888850) returned 0x0 [0156.542] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8884d0 [0156.542] GdipGetMatrixElements (matrix=0x1bd567f0, matrixOut=0x1d8884d0) returned 0x0 [0156.543] LocalFree (hMem=0x1d8884d0) returned 0x0 [0156.543] GdipDeleteMatrix (matrix=0x1bd567f0) returned 0x0 [0156.543] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0156.543] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0156.544] GdipGetRegionHRgn (region=0x1ab7eee0, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0156.545] GdipDeleteRegion (region=0x1ab7eee0) returned 0x0 [0156.545] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0156.545] GetCurrentObject (hdc=0x21010558, type=0x1) returned 0x1b00017 [0156.545] GetCurrentObject (hdc=0x21010558, type=0x2) returned 0x1900010 [0156.546] GetCurrentObject (hdc=0x21010558, type=0x7) returned 0x50506af [0156.546] GetCurrentObject (hdc=0x21010558, type=0x6) returned 0x18a0048 [0156.549] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x15040554 [0156.549] GetClipRgn (hdc=0x21010558, hrgn=0x15040554) returned 0 [0156.549] SelectClipRgn (hdc=0x21010558, hrgn=0x4804064d) returned 2 [0156.549] DeleteObject (ho=0x15040554) returned 1 [0156.549] DeleteObject (ho=0x4804064d) returned 1 [0156.550] OffsetViewportOrgEx (in: hdc=0x21010558, x=0, y=0, lppt=0x21e75e0 | out: lppt=0x21e75e0) returned 1 [0156.550] GetNearestColor (hdc=0x21010558, color=0xf0f0f0) returned 0xf0f0f0 [0156.550] CreateSolidBrush (color=0xf0f0f0) returned 0xb1006b3 [0156.550] FillRect (hDC=0x21010558, lprc=0x14e1c8, hbr=0xb1006b3) returned 1 [0156.550] DeleteObject (ho=0xb1006b3) returned 1 [0156.551] GdipReleaseDC (graphics=0x1bd51520, hdc=0x21010558) returned 0x0 [0156.551] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.551] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0156.551] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.551] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21e76e0) returned 0x0 [0156.551] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.551] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.551] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.552] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0156.556] GdipDrawString (graphics=0x1bd51520, string="*", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7eee0, brush=0x1bd56830) returned 0x0 [0156.576] GdipDeleteBrush (brush=0x1bd56830) returned 0x0 [0156.576] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.576] GetFocus () returned 0x101f8 [0156.576] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExV·\x1a", lpUsedDefaultChar=0x0) returned 17 [0156.577] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.577] GdipCreateRegion (region=0x14e030) returned 0x0 [0156.577] GdipGetClip (graphics=0x1bd51520, region=0x1ab7eee0) returned 0x0 [0156.577] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0156.577] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd518f0) returned 0x0 [0156.577] GdipIsMatrixIdentity (matrix=0x1bd518f0, result=0x14e098) returned 0x0 [0156.577] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888350 [0156.577] GdipGetMatrixElements (matrix=0x1bd518f0, matrixOut=0x1d888350) returned 0x0 [0156.578] LocalFree (hMem=0x1d888350) returned 0x0 [0156.578] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888750 [0156.578] GdipGetMatrixElements (matrix=0x1bd518f0, matrixOut=0x1d888750) returned 0x0 [0156.578] LocalFree (hMem=0x1d888750) returned 0x0 [0156.579] GdipDeleteMatrix (matrix=0x1bd518f0) returned 0x0 [0156.579] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0156.579] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0156.579] GdipGetRegionHRgn (region=0x1ab7eee0, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0156.579] GdipDeleteRegion (region=0x1ab7eee0) returned 0x0 [0156.579] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0156.579] GetCurrentObject (hdc=0x21010558, type=0x1) returned 0x1b00017 [0156.579] GetCurrentObject (hdc=0x21010558, type=0x2) returned 0x1900010 [0156.579] GetCurrentObject (hdc=0x21010558, type=0x7) returned 0x50506af [0156.579] GetCurrentObject (hdc=0x21010558, type=0x6) returned 0x18a0048 [0156.579] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4904064d [0156.579] DeleteObject (ho=0x4904064d) returned 1 [0156.579] DeleteObject (ho=0x16040554) returned 1 [0156.579] OffsetViewportOrgEx (in: hdc=0x21010558, x=0, y=0, lppt=0x21e7ac8 | out: lppt=0x21e7ac8) returned 1 [0156.581] GetROP2 (hdc=0x21010558) returned 13 [0156.582] GetBkMode (hdc=0x21010558) returned 2 [0156.582] SetBkMode (hdc=0x21010558, mode=1) returned 2 [0156.582] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x13006b6 [0156.583] SelectObject (hdc=0x21010558, h=0x13006b6) returned 0x1b00017 [0156.583] MoveToEx (in: hdc=0x21010558, x=25, y=0, lppt=0x21e7b30 | out: lppt=0x21e7b30) returned 1 [0156.583] LineTo (hdc=0x21010558, x=0, y=0) returned 1 [0156.583] MoveToEx (in: hdc=0x21010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.583] GetROP2 (hdc=0x21010558) returned 13 [0156.583] MoveToEx (in: hdc=0x21010558, x=0, y=0, lppt=0x21e7b48 | out: lppt=0x21e7b48) returned 1 [0156.583] LineTo (hdc=0x21010558, x=0, y=22) returned 1 [0156.583] MoveToEx (in: hdc=0x21010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.583] DeleteObject (ho=0x13006b6) returned 1 [0156.583] GetROP2 (hdc=0x21010558) returned 13 [0156.583] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x13006b7 [0156.583] MoveToEx (in: hdc=0x21010558, x=0, y=22, lppt=0x21e7bb0 | out: lppt=0x21e7bb0) returned 1 [0156.584] LineTo (hdc=0x21010558, x=25, y=22) returned 1 [0156.584] MoveToEx (in: hdc=0x21010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.584] GetROP2 (hdc=0x21010558) returned 13 [0156.584] MoveToEx (in: hdc=0x21010558, x=25, y=22, lppt=0x21e7bc8 | out: lppt=0x21e7bc8) returned 1 [0156.584] LineTo (hdc=0x21010558, x=25, y=-1) returned 1 [0156.584] MoveToEx (in: hdc=0x21010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.584] DeleteObject (ho=0x13006b7) returned 1 [0156.584] GetROP2 (hdc=0x21010558) returned 13 [0156.584] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x23006b6 [0156.584] MoveToEx (in: hdc=0x21010558, x=24, y=1, lppt=0x21e7c30 | out: lppt=0x21e7c30) returned 1 [0156.584] LineTo (hdc=0x21010558, x=1, y=1) returned 1 [0156.584] MoveToEx (in: hdc=0x21010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.584] GetROP2 (hdc=0x21010558) returned 13 [0156.584] MoveToEx (in: hdc=0x21010558, x=1, y=1, lppt=0x21e7c48 | out: lppt=0x21e7c48) returned 1 [0156.584] LineTo (hdc=0x21010558, x=1, y=21) returned 1 [0156.584] MoveToEx (in: hdc=0x21010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.584] DeleteObject (ho=0x23006b6) returned 1 [0156.584] GetROP2 (hdc=0x21010558) returned 13 [0156.584] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x23006b7 [0156.584] MoveToEx (in: hdc=0x21010558, x=1, y=21, lppt=0x21e7cb0 | out: lppt=0x21e7cb0) returned 1 [0156.584] LineTo (hdc=0x21010558, x=24, y=21) returned 1 [0156.585] MoveToEx (in: hdc=0x21010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.585] GetROP2 (hdc=0x21010558) returned 13 [0156.585] MoveToEx (in: hdc=0x21010558, x=24, y=21, lppt=0x21e7cc8 | out: lppt=0x21e7cc8) returned 1 [0156.585] LineTo (hdc=0x21010558, x=24, y=0) returned 1 [0156.585] MoveToEx (in: hdc=0x21010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.585] DeleteObject (ho=0x23006b7) returned 1 [0156.585] GdipReleaseDC (graphics=0x1bd51520, hdc=0x21010558) returned 0x0 [0156.585] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0156.585] BitBlt (hdc=0xffffffffd001053c, x=0, y=0, cx=26, cy=23, hdcSrc=0x21010558, x1=0, y1=0, rop=0xcc0020) returned 1 [0156.586] GdipReleaseDC (graphics=0x1bd51520, hdc=0x21010558) returned 0x0 [0156.586] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0156.586] SelectObject (hdc=0x21010558, h=0x185000f) returned 0x50506af [0156.586] DeleteDC (hdc=0x21010558) returned 1 [0156.586] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0156.586] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.586] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.586] DispatchMessageW (lpMsg=0x14ef10) [0156.586] BeginPaint (hWnd=0x3002a, lpPaint=0x14e618) [0156.587] GetWindowPlacement (in: hWnd=0x3002a, lpwndpl=0x14e108 | out: lpwndpl=0x14e108) returned 1 [0156.587] GetClientRect (in: hWnd=0x3002a, lpRect=0x14e020 | out: lpRect=0x14e020) returned 1 [0156.587] GetWindowTextLengthW (hWnd=0x3002a) [0156.587] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0156.587] GetSystemMetrics (nIndex=42) returned 0 [0156.587] GetWindowTextW (hWnd=0x3002a, lpString=0x14dd90, nMaxCount=6) [0156.587] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xd, wParam=0x6, lParam=0x14dd90) returned 0x5 [0156.587] GetCurrentObject (hdc=0xffffffffd001053c, type=0x1) returned 0x1b00017 [0156.587] GetCurrentObject (hdc=0xffffffffd001053c, type=0x2) returned 0x1900010 [0156.587] GetCurrentObject (hdc=0xffffffffd001053c, type=0x7) returned 0x1a050531 [0156.587] GetCurrentObject (hdc=0xffffffffd001053c, type=0x6) returned 0x18a0048 [0156.587] GetNearestColor (hdc=0xffffffffd001053c, color=0xf0f0f0) returned 0xf0f0f0 [0156.587] CreateSolidBrush (color=0xf0f0f0) returned 0xc1006b3 [0156.587] FillRect (hDC=0xffffffffd001053c, lprc=0x14daf8, hbr=0xc1006b3) returned 1 [0156.588] DeleteObject (ho=0xc1006b3) returned 1 [0156.588] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0156.588] GetSystemMetrics (nIndex=42) returned 0 [0156.588] GetWindowTextW (hWnd=0x3002a, lpString=0x14e4c0, nMaxCount=6) [0156.588] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xd, wParam=0x6, lParam=0x14e4c0) returned 0x5 [0156.588] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0156.588] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.588] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.588] DispatchMessageW (lpMsg=0x14ef10) [0156.588] BeginPaint (hWnd=0x30132, lpPaint=0x14e5a8) [0156.588] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x30132, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.589] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x30132, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.589] GetStockObject (i=5) returned 0x1900015 [0156.589] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0156.589] GdipCreateFromHDC (hdc=0x60106b5, graphics=0x14e528) returned 0x0 [0156.590] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0156.590] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0156.590] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0156.590] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1ab7eee0) returned 0x0 [0156.590] GdipIsMatrixIdentity (matrix=0x1ab7eee0, result=0x14e5b8) returned 0x0 [0156.590] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888d10 [0156.590] GdipGetMatrixElements (matrix=0x1ab7eee0, matrixOut=0x1d888d10) returned 0x0 [0156.591] LocalFree (hMem=0x1d888d10) returned 0x0 [0156.591] GdipDeleteMatrix (matrix=0x1ab7eee0) returned 0x0 [0156.591] GdipCreateRegion (region=0x14e550) returned 0x0 [0156.591] GdipGetClip (graphics=0x1bd51520, region=0x1bd567f0) returned 0x0 [0156.591] GdipIsInfiniteRegion (region=0x1bd567f0, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0156.591] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0156.591] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffdb10dbd) returned 0x0 [0156.591] GdipDeleteRegion (region=0x1bd567f0) returned 0x0 [0156.591] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0156.591] GetCurrentObject (hdc=0x60106b5, type=0x1) returned 0x1b00017 [0156.591] GetCurrentObject (hdc=0x60106b5, type=0x2) returned 0x1900010 [0156.591] GetCurrentObject (hdc=0x60106b5, type=0x7) returned 0x50506af [0156.591] GetCurrentObject (hdc=0x60106b5, type=0x6) returned 0x18a0048 [0156.591] GetNearestColor (hdc=0x60106b5, color=0xf0f0f0) returned 0xf0f0f0 [0156.591] GetNearestColor (hdc=0x60106b5, color=0xa0a0a0) returned 0xa0a0a0 [0156.591] GetNearestColor (hdc=0x60106b5, color=0x696969) returned 0x696969 [0156.591] GetNearestColor (hdc=0x60106b5, color=0xa0a0a0) returned 0xa0a0a0 [0156.591] GetNearestColor (hdc=0x60106b5, color=0x0) returned 0x0 [0156.591] GetNearestColor (hdc=0x60106b5, color=0xffffff) returned 0xffffff [0156.592] GetNearestColor (hdc=0x60106b5, color=0xe5e5e5) returned 0xe5e5e5 [0156.592] GetNearestColor (hdc=0x60106b5, color=0xd8d8d8) returned 0xd8d8d8 [0156.592] GetNearestColor (hdc=0x60106b5, color=0x0) returned 0x0 [0156.592] GdipReleaseDC (graphics=0x1bd51520, hdc=0x60106b5) returned 0x0 [0156.592] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.592] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x84\x1e\x02", lpUsedDefaultChar=0x0) returned 17 [0156.592] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.592] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21e8b10) returned 0x0 [0156.592] GdipSetStringFormatAlign (format=0x1ab7ef20, align=0x1) returned 0x0 [0156.592] GdipSetStringFormatLineAlign (format=0x1ab7ef20, align=0x1) returned 0x0 [0156.592] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ef20, hotkeyPrefix=2) returned 0x0 [0156.592] GdipGetStringFormatFlags (format=0x1ab7ef20, flags=0x14e378) returned 0x0 [0156.592] GdipGetStringFormatTrimming (format=0x1ab7ef20, trimming=0x14e378) returned 0x0 [0156.592] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ef20, hotkeyPrefix=0x14e378) returned 0x0 [0156.593] GdipGetFontSize (font=0x1ab7ef20, size=0x14e378) returned 0x0 [0156.593] GdipGetFontStyle (font=0x1ab7ef20, style=0x14e378) returned 0x0 [0156.593] GdipDeleteStringFormat (format=0x1ab7ef20) returned 0x0 [0156.593] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.593] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.593] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.593] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0156.593] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21e8c40) returned 0x0 [0156.593] GdipSetStringFormatFlags (format=0x1bd567f0, flags=0) returned 0x0 [0156.593] GdipSetStringFormatTrimming (format=0x1bd567f0, trimming=0x1) returned 0x0 [0156.593] GdipSetStringFormatHotkeyPrefix (format=0x1bd567f0, hotkeyPrefix=2) returned 0x0 [0156.593] GdipSetStringFormatAlign (format=0x1bd567f0, align=0x1) returned 0x0 [0156.593] GdipSetStringFormatLineAlign (format=0x1bd567f0, align=0x1) returned 0x0 [0156.594] GdipMeasureString (graphics=0x1bd56b10, string="*", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1bd567f0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0156.594] GdipDeleteStringFormat (format=0x1bd567f0) returned 0x0 [0156.594] GdipDeleteGraphics (graphics=0x1bd56b10) returned 0x0 [0156.594] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.594] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.594] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.594] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0156.594] GdipGetClip (graphics=0x1bd51520, region=0x1bd567f0) returned 0x0 [0156.594] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0156.594] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd518f0) returned 0x0 [0156.594] GdipIsMatrixIdentity (matrix=0x1bd518f0, result=0x14e128) returned 0x0 [0156.594] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888350 [0156.594] GdipGetMatrixElements (matrix=0x1bd518f0, matrixOut=0x1d888350) returned 0x0 [0156.595] LocalFree (hMem=0x1d888350) returned 0x0 [0156.595] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888750 [0156.595] GdipGetMatrixElements (matrix=0x1bd518f0, matrixOut=0x1d888750) returned 0x0 [0156.596] LocalFree (hMem=0x1d888750) returned 0x0 [0156.596] GdipDeleteMatrix (matrix=0x1bd518f0) returned 0x0 [0156.596] GdipIsInfiniteRegion (region=0x1bd567f0, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0156.596] GdipIsInfiniteRegion (region=0x1bd567f0, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0156.596] GdipGetRegionHRgn (region=0x1bd567f0, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0156.596] GdipDeleteRegion (region=0x1bd567f0) returned 0x0 [0156.596] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0156.596] GetCurrentObject (hdc=0x60106b5, type=0x1) returned 0x1b00017 [0156.596] GetCurrentObject (hdc=0x60106b5, type=0x2) returned 0x1900010 [0156.596] GetCurrentObject (hdc=0x60106b5, type=0x7) returned 0x50506af [0156.596] GetCurrentObject (hdc=0x60106b5, type=0x6) returned 0x18a0048 [0156.596] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x17040554 [0156.596] DeleteObject (ho=0x17040554) returned 1 [0156.596] DeleteObject (ho=0x4a04064d) returned 1 [0156.596] OffsetViewportOrgEx (in: hdc=0x60106b5, x=0, y=0, lppt=0x21e9000 | out: lppt=0x21e9000) returned 1 [0156.596] GetNearestColor (hdc=0x60106b5, color=0xf0f0f0) returned 0xf0f0f0 [0156.596] CreateSolidBrush (color=0xf0f0f0) returned 0xd1006b3 [0156.596] FillRect (hDC=0x60106b5, lprc=0x14e1c8, hbr=0xd1006b3) returned 1 [0156.597] DeleteObject (ho=0xd1006b3) returned 1 [0156.597] GdipReleaseDC (graphics=0x1bd51520, hdc=0x60106b5) returned 0x0 [0156.597] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.597] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0156.597] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.597] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21e9100) returned 0x0 [0156.597] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.597] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.597] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.597] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0156.597] GdipDrawString (graphics=0x1bd51520, string="*", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7eee0, brush=0x1bd567f0) returned 0x0 [0156.597] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0156.598] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.598] GetFocus () returned 0x101f8 [0156.598] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.598] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x82\x1e\x02", lpUsedDefaultChar=0x0) returned 17 [0156.598] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.598] GdipCreateRegion (region=0x14e030) returned 0x0 [0156.598] GdipGetClip (graphics=0x1bd51520, region=0x1ab7eee0) returned 0x0 [0156.598] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0156.598] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd567f0) returned 0x0 [0156.598] GdipIsMatrixIdentity (matrix=0x1bd567f0, result=0x14e098) returned 0x0 [0156.598] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888310 [0156.598] GdipGetMatrixElements (matrix=0x1bd567f0, matrixOut=0x1d888310) returned 0x0 [0156.599] LocalFree (hMem=0x1d888310) returned 0x0 [0156.599] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0156.599] GdipGetMatrixElements (matrix=0x1bd567f0, matrixOut=0x1d888150) returned 0x0 [0156.600] LocalFree (hMem=0x1d888150) returned 0x0 [0156.600] GdipDeleteMatrix (matrix=0x1bd567f0) returned 0x0 [0156.600] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0156.600] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0156.600] GdipGetRegionHRgn (region=0x1ab7eee0, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0156.600] GdipDeleteRegion (region=0x1ab7eee0) returned 0x0 [0156.600] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0156.600] GetCurrentObject (hdc=0x60106b5, type=0x1) returned 0x1b00017 [0156.600] GetCurrentObject (hdc=0x60106b5, type=0x2) returned 0x1900010 [0156.600] GetCurrentObject (hdc=0x60106b5, type=0x7) returned 0x50506af [0156.600] GetCurrentObject (hdc=0x60106b5, type=0x6) returned 0x18a0048 [0156.600] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4b04064d [0156.600] DeleteObject (ho=0x4b04064d) returned 1 [0156.600] DeleteObject (ho=0x18040554) returned 1 [0156.600] OffsetViewportOrgEx (in: hdc=0x60106b5, x=0, y=0, lppt=0x21e94e8 | out: lppt=0x21e94e8) returned 1 [0156.600] GetROP2 (hdc=0x60106b5) returned 13 [0156.600] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x33006b7 [0156.600] MoveToEx (in: hdc=0x60106b5, x=25, y=0, lppt=0x21e9550 | out: lppt=0x21e9550) returned 1 [0156.600] LineTo (hdc=0x60106b5, x=0, y=0) returned 1 [0156.600] MoveToEx (in: hdc=0x60106b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.600] GetROP2 (hdc=0x60106b5) returned 13 [0156.601] MoveToEx (in: hdc=0x60106b5, x=0, y=0, lppt=0x21e9568 | out: lppt=0x21e9568) returned 1 [0156.601] LineTo (hdc=0x60106b5, x=0, y=22) returned 1 [0156.601] MoveToEx (in: hdc=0x60106b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.601] DeleteObject (ho=0x33006b7) returned 1 [0156.601] GetROP2 (hdc=0x60106b5) returned 13 [0156.601] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x33006b6 [0156.601] MoveToEx (in: hdc=0x60106b5, x=0, y=22, lppt=0x21e95d0 | out: lppt=0x21e95d0) returned 1 [0156.601] LineTo (hdc=0x60106b5, x=25, y=22) returned 1 [0156.601] MoveToEx (in: hdc=0x60106b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.601] GetROP2 (hdc=0x60106b5) returned 13 [0156.601] MoveToEx (in: hdc=0x60106b5, x=25, y=22, lppt=0x21e95e8 | out: lppt=0x21e95e8) returned 1 [0156.601] LineTo (hdc=0x60106b5, x=25, y=-1) returned 1 [0156.601] MoveToEx (in: hdc=0x60106b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.601] DeleteObject (ho=0x33006b6) returned 1 [0156.601] GetROP2 (hdc=0x60106b5) returned 13 [0156.601] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x43006b7 [0156.601] MoveToEx (in: hdc=0x60106b5, x=24, y=1, lppt=0x21e9650 | out: lppt=0x21e9650) returned 1 [0156.601] LineTo (hdc=0x60106b5, x=1, y=1) returned 1 [0156.601] MoveToEx (in: hdc=0x60106b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.601] GetROP2 (hdc=0x60106b5) returned 13 [0156.601] MoveToEx (in: hdc=0x60106b5, x=1, y=1, lppt=0x21e9668 | out: lppt=0x21e9668) returned 1 [0156.601] LineTo (hdc=0x60106b5, x=1, y=21) returned 1 [0156.602] MoveToEx (in: hdc=0x60106b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.602] DeleteObject (ho=0x43006b7) returned 1 [0156.602] GetROP2 (hdc=0x60106b5) returned 13 [0156.602] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x43006b6 [0156.602] MoveToEx (in: hdc=0x60106b5, x=1, y=21, lppt=0x21e96d0 | out: lppt=0x21e96d0) returned 1 [0156.602] LineTo (hdc=0x60106b5, x=24, y=21) returned 1 [0156.602] MoveToEx (in: hdc=0x60106b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.602] GetROP2 (hdc=0x60106b5) returned 13 [0156.602] MoveToEx (in: hdc=0x60106b5, x=24, y=21, lppt=0x21e96e8 | out: lppt=0x21e96e8) returned 1 [0156.602] LineTo (hdc=0x60106b5, x=24, y=0) returned 1 [0156.602] MoveToEx (in: hdc=0x60106b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.602] DeleteObject (ho=0x43006b6) returned 1 [0156.602] GdipReleaseDC (graphics=0x1bd51520, hdc=0x60106b5) returned 0x0 [0156.602] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0156.602] GdipReleaseDC (graphics=0x1bd51520, hdc=0x60106b5) returned 0x0 [0156.603] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0156.603] DeleteDC (hdc=0x60106b5) returned 1 [0156.603] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0156.603] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.603] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.603] DispatchMessageW (lpMsg=0x14ef10) [0156.603] BeginPaint (hWnd=0x20146, lpPaint=0x14e5a8) [0156.603] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20146, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.603] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20146, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.603] GetStockObject (i=5) returned 0x1900015 [0156.603] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0156.603] DeleteObject (ho=0x50506af) returned 1 [0156.604] CreateCompatibleBitmap (hdc=0xffffffffd001053c, cx=1, cy=1) returned 0x1b0506b0 [0156.604] GetDIBits (in: hdc=0xffffffffd001053c, hbm=0x1b0506b0, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x14df38, usage=0x0 | out: lpvBits=0x0, lpbmi=0x14df38) returned 1 [0156.604] GetDIBits (in: hdc=0xffffffffd001053c, hbm=0x1b0506b0, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x14df38, usage=0x0 | out: lpvBits=0x0, lpbmi=0x14df38) returned 1 [0156.604] DeleteObject (ho=0x1b0506b0) returned 1 [0156.604] CreateDIBSection (in: hdc=0xffffffffd001053c, lpbmi=0x14dfe8, usage=0x0, ppvBits=0x14e5a8, hSection=0x0, offset=0x0 | out: ppvBits=0x14e5a8) returned 0x60506af [0156.604] GdipCreateFromHDC (hdc=0x90106b4, graphics=0x14e528) returned 0x0 [0156.604] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0156.604] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=58, height=23, combineMode=0x0) returned 0x0 [0156.604] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0156.604] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd518f0) returned 0x0 [0156.604] GdipIsMatrixIdentity (matrix=0x1bd518f0, result=0x14e5b8) returned 0x0 [0156.604] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8883d0 [0156.604] GdipGetMatrixElements (matrix=0x1bd518f0, matrixOut=0x1d8883d0) returned 0x0 [0156.605] LocalFree (hMem=0x1d8883d0) returned 0x0 [0156.605] GdipDeleteMatrix (matrix=0x1bd518f0) returned 0x0 [0156.605] GdipCreateRegion (region=0x14e550) returned 0x0 [0156.605] GdipGetClip (graphics=0x1bd51520, region=0x1ab7eee0) returned 0x0 [0156.605] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0156.605] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0156.605] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffdae0dbd) returned 0x0 [0156.605] GdipDeleteRegion (region=0x1ab7eee0) returned 0x0 [0156.605] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0156.606] GetCurrentObject (hdc=0x90106b4, type=0x1) returned 0x1b00017 [0156.606] GetCurrentObject (hdc=0x90106b4, type=0x2) returned 0x1900010 [0156.606] GetCurrentObject (hdc=0x90106b4, type=0x7) returned 0x60506af [0156.606] GetCurrentObject (hdc=0x90106b4, type=0x6) returned 0x18a0048 [0156.606] GetNearestColor (hdc=0x90106b4, color=0xf0f0f0) returned 0xf0f0f0 [0156.606] GetNearestColor (hdc=0x90106b4, color=0xa0a0a0) returned 0xa0a0a0 [0156.606] GetNearestColor (hdc=0x90106b4, color=0x696969) returned 0x696969 [0156.606] GetNearestColor (hdc=0x90106b4, color=0xa0a0a0) returned 0xa0a0a0 [0156.606] GetNearestColor (hdc=0x90106b4, color=0x0) returned 0x0 [0156.606] GetNearestColor (hdc=0x90106b4, color=0xffffff) returned 0xffffff [0156.606] GetNearestColor (hdc=0x90106b4, color=0xe5e5e5) returned 0xe5e5e5 [0156.606] GetNearestColor (hdc=0x90106b4, color=0xd8d8d8) returned 0xd8d8d8 [0156.606] GetNearestColor (hdc=0x90106b4, color=0x0) returned 0x0 [0156.606] GdipReleaseDC (graphics=0x1bd51520, hdc=0x90106b4) returned 0x0 [0156.606] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.607] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExª\x1e\x02", lpUsedDefaultChar=0x0) returned 17 [0156.607] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.607] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21eb080) returned 0x0 [0156.607] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.607] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.607] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.607] GdipGetStringFormatFlags (format=0x1ab7eee0, flags=0x14e378) returned 0x0 [0156.607] GdipGetStringFormatTrimming (format=0x1ab7eee0, trimming=0x14e378) returned 0x0 [0156.607] GdipGetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=0x14e378) returned 0x0 [0156.607] GdipGetFontSize (font=0x1ab7eee0, size=0x14e378) returned 0x0 [0156.607] GdipGetFontStyle (font=0x1ab7eee0, style=0x14e378) returned 0x0 [0156.607] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.607] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.607] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.608] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.608] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0156.608] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21eb1b0) returned 0x0 [0156.608] GdipSetStringFormatFlags (format=0x1bd567f0, flags=0) returned 0x0 [0156.608] GdipSetStringFormatTrimming (format=0x1bd567f0, trimming=0x1) returned 0x0 [0156.608] GdipSetStringFormatHotkeyPrefix (format=0x1bd567f0, hotkeyPrefix=2) returned 0x0 [0156.608] GdipSetStringFormatAlign (format=0x1bd567f0, align=0x1) returned 0x0 [0156.608] GdipSetStringFormatLineAlign (format=0x1bd567f0, align=0x1) returned 0x0 [0156.608] GdipMeasureString (graphics=0x1bd56b10, string="=", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1bd567f0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0156.608] GdipDeleteStringFormat (format=0x1bd567f0) returned 0x0 [0156.608] GdipDeleteGraphics (graphics=0x1bd56b10) returned 0x0 [0156.608] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.608] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.609] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.609] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0156.609] GdipGetClip (graphics=0x1bd51520, region=0x1ab7eee0) returned 0x0 [0156.609] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0156.609] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd567f0) returned 0x0 [0156.609] GdipIsMatrixIdentity (matrix=0x1bd567f0, result=0x14e128) returned 0x0 [0156.609] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888ad0 [0156.609] GdipGetMatrixElements (matrix=0x1bd567f0, matrixOut=0x1d888ad0) returned 0x0 [0156.609] LocalFree (hMem=0x1d888ad0) returned 0x0 [0156.642] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0156.642] GdipGetMatrixElements (matrix=0x1bd567f0, matrixOut=0x1d888150) returned 0x0 [0156.643] LocalFree (hMem=0x1d888150) returned 0x0 [0156.643] GdipDeleteMatrix (matrix=0x1bd567f0) returned 0x0 [0156.643] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0156.643] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0156.643] GdipGetRegionHRgn (region=0x1ab7eee0, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0156.643] GdipDeleteRegion (region=0x1ab7eee0) returned 0x0 [0156.644] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0156.644] GetCurrentObject (hdc=0x90106b4, type=0x1) returned 0x1b00017 [0156.644] GetCurrentObject (hdc=0x90106b4, type=0x2) returned 0x1900010 [0156.644] GetCurrentObject (hdc=0x90106b4, type=0x7) returned 0x60506af [0156.644] GetCurrentObject (hdc=0x90106b4, type=0x6) returned 0x18a0048 [0156.644] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x19040554 [0156.644] DeleteObject (ho=0x19040554) returned 1 [0156.644] DeleteObject (ho=0x4c04064d) returned 1 [0156.644] OffsetViewportOrgEx (in: hdc=0x90106b4, x=0, y=0, lppt=0x21eb570 | out: lppt=0x21eb570) returned 1 [0156.644] GetNearestColor (hdc=0x90106b4, color=0xf0f0f0) returned 0xf0f0f0 [0156.644] CreateSolidBrush (color=0xf0f0f0) returned 0xe1006b3 [0156.644] FillRect (hDC=0x90106b4, lprc=0x14e1c8, hbr=0xe1006b3) returned 1 [0156.644] DeleteObject (ho=0xe1006b3) returned 1 [0156.644] GdipReleaseDC (graphics=0x1bd51520, hdc=0x90106b4) returned 0x0 [0156.644] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.645] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0156.645] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.645] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21eb670) returned 0x0 [0156.645] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.645] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.645] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.645] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0156.645] GdipDrawString (graphics=0x1bd51520, string="=", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7eee0, brush=0x1bd56830) returned 0x0 [0156.650] GdipDeleteBrush (brush=0x1bd56830) returned 0x0 [0156.650] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.650] GetFocus () returned 0x101f8 [0156.650] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.650] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx§\x1e\x02", lpUsedDefaultChar=0x0) returned 17 [0156.651] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.651] GdipCreateRegion (region=0x14e030) returned 0x0 [0156.651] GdipGetClip (graphics=0x1bd51520, region=0x1ab7eee0) returned 0x0 [0156.651] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0156.651] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd518f0) returned 0x0 [0156.651] GdipIsMatrixIdentity (matrix=0x1bd518f0, result=0x14e098) returned 0x0 [0156.651] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0156.651] GdipGetMatrixElements (matrix=0x1bd518f0, matrixOut=0x1d888150) returned 0x0 [0156.652] LocalFree (hMem=0x1d888150) returned 0x0 [0156.652] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8883d0 [0156.652] GdipGetMatrixElements (matrix=0x1bd518f0, matrixOut=0x1d8883d0) returned 0x0 [0156.652] LocalFree (hMem=0x1d8883d0) returned 0x0 [0156.652] GdipDeleteMatrix (matrix=0x1bd518f0) returned 0x0 [0156.652] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0156.652] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0156.652] GdipGetRegionHRgn (region=0x1ab7eee0, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0156.652] GdipDeleteRegion (region=0x1ab7eee0) returned 0x0 [0156.652] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0156.652] GetCurrentObject (hdc=0x90106b4, type=0x1) returned 0x1b00017 [0156.653] GetCurrentObject (hdc=0x90106b4, type=0x2) returned 0x1900010 [0156.653] GetCurrentObject (hdc=0x90106b4, type=0x7) returned 0x60506af [0156.653] GetCurrentObject (hdc=0x90106b4, type=0x6) returned 0x18a0048 [0156.653] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4d04064d [0156.653] DeleteObject (ho=0x4d04064d) returned 1 [0156.653] DeleteObject (ho=0x1a040554) returned 1 [0156.653] OffsetViewportOrgEx (in: hdc=0x90106b4, x=0, y=0, lppt=0x21eba58 | out: lppt=0x21eba58) returned 1 [0156.653] GetROP2 (hdc=0x90106b4) returned 13 [0156.653] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x53006b6 [0156.653] MoveToEx (in: hdc=0x90106b4, x=57, y=0, lppt=0x21ebac0 | out: lppt=0x21ebac0) returned 1 [0156.653] LineTo (hdc=0x90106b4, x=0, y=0) returned 1 [0156.653] MoveToEx (in: hdc=0x90106b4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.653] GetROP2 (hdc=0x90106b4) returned 13 [0156.653] MoveToEx (in: hdc=0x90106b4, x=0, y=0, lppt=0x21ebad8 | out: lppt=0x21ebad8) returned 1 [0156.653] LineTo (hdc=0x90106b4, x=0, y=22) returned 1 [0156.653] MoveToEx (in: hdc=0x90106b4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.653] DeleteObject (ho=0x53006b6) returned 1 [0156.653] GetROP2 (hdc=0x90106b4) returned 13 [0156.653] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x53006b7 [0156.653] MoveToEx (in: hdc=0x90106b4, x=0, y=22, lppt=0x21ebb40 | out: lppt=0x21ebb40) returned 1 [0156.653] LineTo (hdc=0x90106b4, x=57, y=22) returned 1 [0156.654] MoveToEx (in: hdc=0x90106b4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.654] GetROP2 (hdc=0x90106b4) returned 13 [0156.654] MoveToEx (in: hdc=0x90106b4, x=57, y=22, lppt=0x21ebb58 | out: lppt=0x21ebb58) returned 1 [0156.654] LineTo (hdc=0x90106b4, x=57, y=-1) returned 1 [0156.654] MoveToEx (in: hdc=0x90106b4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.654] DeleteObject (ho=0x53006b7) returned 1 [0156.654] GetROP2 (hdc=0x90106b4) returned 13 [0156.654] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x63006b6 [0156.654] MoveToEx (in: hdc=0x90106b4, x=56, y=1, lppt=0x21ebbc0 | out: lppt=0x21ebbc0) returned 1 [0156.654] LineTo (hdc=0x90106b4, x=1, y=1) returned 1 [0156.654] MoveToEx (in: hdc=0x90106b4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.654] GetROP2 (hdc=0x90106b4) returned 13 [0156.654] MoveToEx (in: hdc=0x90106b4, x=1, y=1, lppt=0x21ebbd8 | out: lppt=0x21ebbd8) returned 1 [0156.654] LineTo (hdc=0x90106b4, x=1, y=21) returned 1 [0156.654] MoveToEx (in: hdc=0x90106b4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.654] DeleteObject (ho=0x63006b6) returned 1 [0156.654] GetROP2 (hdc=0x90106b4) returned 13 [0156.654] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x63006b7 [0156.654] MoveToEx (in: hdc=0x90106b4, x=1, y=21, lppt=0x21ebc40 | out: lppt=0x21ebc40) returned 1 [0156.654] LineTo (hdc=0x90106b4, x=56, y=21) returned 1 [0156.654] MoveToEx (in: hdc=0x90106b4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.655] GetROP2 (hdc=0x90106b4) returned 13 [0156.655] MoveToEx (in: hdc=0x90106b4, x=56, y=21, lppt=0x21ebc58 | out: lppt=0x21ebc58) returned 1 [0156.655] LineTo (hdc=0x90106b4, x=56, y=0) returned 1 [0156.655] MoveToEx (in: hdc=0x90106b4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.655] DeleteObject (ho=0x63006b7) returned 1 [0156.655] GdipReleaseDC (graphics=0x1bd51520, hdc=0x90106b4) returned 0x0 [0156.655] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0156.655] GdipReleaseDC (graphics=0x1bd51520, hdc=0x90106b4) returned 0x0 [0156.655] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0156.655] DeleteDC (hdc=0x90106b4) returned 1 [0156.655] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0156.655] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.655] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.655] DispatchMessageW (lpMsg=0x14ef10) [0156.655] BeginPaint (hWnd=0x3015e, lpPaint=0x14e5a8) [0156.655] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x3015e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.656] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x3015e, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.656] GetStockObject (i=5) returned 0x1900015 [0156.656] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0156.656] GdipCreateFromHDC (hdc=0x2b010558, graphics=0x14e528) returned 0x0 [0156.656] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0156.656] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=58, height=23, combineMode=0x0) returned 0x0 [0156.656] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0156.656] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1ab7eee0) returned 0x0 [0156.656] GdipIsMatrixIdentity (matrix=0x1ab7eee0, result=0x14e5b8) returned 0x0 [0156.656] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0156.656] GdipGetMatrixElements (matrix=0x1ab7eee0, matrixOut=0x1d888150) returned 0x0 [0156.657] LocalFree (hMem=0x1d888150) returned 0x0 [0156.657] GdipDeleteMatrix (matrix=0x1ab7eee0) returned 0x0 [0156.657] GdipCreateRegion (region=0x14e550) returned 0x0 [0156.657] GdipGetClip (graphics=0x1bd51520, region=0x1bd567f0) returned 0x0 [0156.657] GdipIsInfiniteRegion (region=0x1bd567f0, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0156.657] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0156.657] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffdab0dbd) returned 0x0 [0156.657] GdipDeleteRegion (region=0x1bd567f0) returned 0x0 [0156.657] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0156.658] GetCurrentObject (hdc=0x2b010558, type=0x1) returned 0x1b00017 [0156.658] GetCurrentObject (hdc=0x2b010558, type=0x2) returned 0x1900010 [0156.658] GetCurrentObject (hdc=0x2b010558, type=0x7) returned 0x60506af [0156.658] GetCurrentObject (hdc=0x2b010558, type=0x6) returned 0x18a0048 [0156.658] GetNearestColor (hdc=0x2b010558, color=0xf0f0f0) returned 0xf0f0f0 [0156.658] GetNearestColor (hdc=0x2b010558, color=0xa0a0a0) returned 0xa0a0a0 [0156.658] GetNearestColor (hdc=0x2b010558, color=0x696969) returned 0x696969 [0156.658] GetNearestColor (hdc=0x2b010558, color=0xa0a0a0) returned 0xa0a0a0 [0156.658] GetNearestColor (hdc=0x2b010558, color=0x0) returned 0x0 [0156.658] GetNearestColor (hdc=0x2b010558, color=0xffffff) returned 0xffffff [0156.658] GetNearestColor (hdc=0x2b010558, color=0xe5e5e5) returned 0xe5e5e5 [0156.658] GetNearestColor (hdc=0x2b010558, color=0xd8d8d8) returned 0xd8d8d8 [0156.658] GetNearestColor (hdc=0x2b010558, color=0x0) returned 0x0 [0156.658] GdipReleaseDC (graphics=0x1bd51520, hdc=0x2b010558) returned 0x0 [0156.658] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx¿\x1e\x02", lpUsedDefaultChar=0x0) returned 17 [0156.659] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.659] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21ec590) returned 0x0 [0156.659] GdipSetStringFormatAlign (format=0x1ab7ef20, align=0x1) returned 0x0 [0156.659] GdipSetStringFormatLineAlign (format=0x1ab7ef20, align=0x1) returned 0x0 [0156.659] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ef20, hotkeyPrefix=2) returned 0x0 [0156.659] GdipGetStringFormatFlags (format=0x1ab7ef20, flags=0x14e378) returned 0x0 [0156.659] GdipGetStringFormatTrimming (format=0x1ab7ef20, trimming=0x14e378) returned 0x0 [0156.659] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ef20, hotkeyPrefix=0x14e378) returned 0x0 [0156.659] GdipGetFontSize (font=0x1ab7ef20, size=0x14e378) returned 0x0 [0156.659] GdipGetFontStyle (font=0x1ab7ef20, style=0x14e378) returned 0x0 [0156.659] GdipDeleteStringFormat (format=0x1ab7ef20) returned 0x0 [0156.659] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.660] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.660] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0156.660] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21ec6c0) returned 0x0 [0156.660] GdipSetStringFormatFlags (format=0x1bd567f0, flags=0) returned 0x0 [0156.660] GdipSetStringFormatTrimming (format=0x1bd567f0, trimming=0x1) returned 0x0 [0156.660] GdipSetStringFormatHotkeyPrefix (format=0x1bd567f0, hotkeyPrefix=2) returned 0x0 [0156.660] GdipSetStringFormatAlign (format=0x1bd567f0, align=0x1) returned 0x0 [0156.660] GdipSetStringFormatLineAlign (format=0x1bd567f0, align=0x1) returned 0x0 [0156.660] GdipMeasureString (graphics=0x1bd56b10, string="log", length=3, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1bd567f0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0156.660] GdipDeleteStringFormat (format=0x1bd567f0) returned 0x0 [0156.660] GdipDeleteGraphics (graphics=0x1bd56b10) returned 0x0 [0156.660] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.660] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.661] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.661] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0156.661] GdipGetClip (graphics=0x1bd51520, region=0x1bd567f0) returned 0x0 [0156.661] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0156.661] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd518f0) returned 0x0 [0156.661] GdipIsMatrixIdentity (matrix=0x1bd518f0, result=0x14e128) returned 0x0 [0156.661] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888b50 [0156.661] GdipGetMatrixElements (matrix=0x1bd518f0, matrixOut=0x1d888b50) returned 0x0 [0156.661] LocalFree (hMem=0x1d888b50) returned 0x0 [0156.662] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888ad0 [0156.662] GdipGetMatrixElements (matrix=0x1bd518f0, matrixOut=0x1d888ad0) returned 0x0 [0156.662] LocalFree (hMem=0x1d888ad0) returned 0x0 [0156.662] GdipDeleteMatrix (matrix=0x1bd518f0) returned 0x0 [0156.662] GdipIsInfiniteRegion (region=0x1bd567f0, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0156.662] GdipIsInfiniteRegion (region=0x1bd567f0, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0156.662] GdipGetRegionHRgn (region=0x1bd567f0, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0156.662] GdipDeleteRegion (region=0x1bd567f0) returned 0x0 [0156.662] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0156.662] GetCurrentObject (hdc=0x2b010558, type=0x1) returned 0x1b00017 [0156.662] GetCurrentObject (hdc=0x2b010558, type=0x2) returned 0x1900010 [0156.662] GetCurrentObject (hdc=0x2b010558, type=0x7) returned 0x60506af [0156.662] GetCurrentObject (hdc=0x2b010558, type=0x6) returned 0x18a0048 [0156.663] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1b040554 [0156.663] DeleteObject (ho=0x1b040554) returned 1 [0156.663] DeleteObject (ho=0x4e04064d) returned 1 [0156.663] OffsetViewportOrgEx (in: hdc=0x2b010558, x=0, y=0, lppt=0x21eca80 | out: lppt=0x21eca80) returned 1 [0156.663] GetNearestColor (hdc=0x2b010558, color=0xf0f0f0) returned 0xf0f0f0 [0156.663] CreateSolidBrush (color=0xf0f0f0) returned 0xf1006b3 [0156.663] FillRect (hDC=0x2b010558, lprc=0x14e1c8, hbr=0xf1006b3) returned 1 [0156.663] DeleteObject (ho=0xf1006b3) returned 1 [0156.663] GdipReleaseDC (graphics=0x1bd51520, hdc=0x2b010558) returned 0x0 [0156.663] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.663] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0156.663] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.663] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21ecb80) returned 0x0 [0156.663] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.663] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.664] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.664] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0156.664] GdipDrawString (graphics=0x1bd51520, string="log", length=3, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7eee0, brush=0x1bd567f0) returned 0x0 [0156.668] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0156.668] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.669] GetFocus () returned 0x101f8 [0156.669] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.669] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx¼\x1e\x02", lpUsedDefaultChar=0x0) returned 17 [0156.669] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.669] GdipCreateRegion (region=0x14e030) returned 0x0 [0156.669] GdipGetClip (graphics=0x1bd51520, region=0x1ab7eee0) returned 0x0 [0156.669] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0156.669] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd567f0) returned 0x0 [0156.669] GdipIsMatrixIdentity (matrix=0x1bd567f0, result=0x14e098) returned 0x0 [0156.669] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8884d0 [0156.669] GdipGetMatrixElements (matrix=0x1bd567f0, matrixOut=0x1d8884d0) returned 0x0 [0156.670] LocalFree (hMem=0x1d8884d0) returned 0x0 [0156.670] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8881d0 [0156.670] GdipGetMatrixElements (matrix=0x1bd567f0, matrixOut=0x1d8881d0) returned 0x0 [0156.670] LocalFree (hMem=0x1d8881d0) returned 0x0 [0156.671] GdipDeleteMatrix (matrix=0x1bd567f0) returned 0x0 [0156.671] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0156.671] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0156.671] GdipGetRegionHRgn (region=0x1ab7eee0, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0156.671] GdipDeleteRegion (region=0x1ab7eee0) returned 0x0 [0156.671] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0156.671] GetCurrentObject (hdc=0x2b010558, type=0x1) returned 0x1b00017 [0156.671] GetCurrentObject (hdc=0x2b010558, type=0x2) returned 0x1900010 [0156.671] GetCurrentObject (hdc=0x2b010558, type=0x7) returned 0x60506af [0156.671] GetCurrentObject (hdc=0x2b010558, type=0x6) returned 0x18a0048 [0156.671] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4f04064d [0156.671] DeleteObject (ho=0x4f04064d) returned 1 [0156.671] DeleteObject (ho=0x1c040554) returned 1 [0156.671] OffsetViewportOrgEx (in: hdc=0x2b010558, x=0, y=0, lppt=0x21ecf68 | out: lppt=0x21ecf68) returned 1 [0156.671] GetROP2 (hdc=0x2b010558) returned 13 [0156.671] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x73006b7 [0156.671] MoveToEx (in: hdc=0x2b010558, x=57, y=0, lppt=0x21ecfd0 | out: lppt=0x21ecfd0) returned 1 [0156.671] LineTo (hdc=0x2b010558, x=0, y=0) returned 1 [0156.671] MoveToEx (in: hdc=0x2b010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.671] GetROP2 (hdc=0x2b010558) returned 13 [0156.671] MoveToEx (in: hdc=0x2b010558, x=0, y=0, lppt=0x21ecfe8 | out: lppt=0x21ecfe8) returned 1 [0156.671] LineTo (hdc=0x2b010558, x=0, y=22) returned 1 [0156.672] MoveToEx (in: hdc=0x2b010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.672] DeleteObject (ho=0x73006b7) returned 1 [0156.672] GetROP2 (hdc=0x2b010558) returned 13 [0156.672] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x73006b6 [0156.672] MoveToEx (in: hdc=0x2b010558, x=0, y=22, lppt=0x21ed050 | out: lppt=0x21ed050) returned 1 [0156.672] LineTo (hdc=0x2b010558, x=57, y=22) returned 1 [0156.672] MoveToEx (in: hdc=0x2b010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.672] GetROP2 (hdc=0x2b010558) returned 13 [0156.674] MoveToEx (in: hdc=0x2b010558, x=57, y=22, lppt=0x21ed068 | out: lppt=0x21ed068) returned 1 [0156.674] LineTo (hdc=0x2b010558, x=57, y=-1) returned 1 [0156.674] MoveToEx (in: hdc=0x2b010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.674] DeleteObject (ho=0x73006b6) returned 1 [0156.674] GetROP2 (hdc=0x2b010558) returned 13 [0156.674] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x83006b7 [0156.674] MoveToEx (in: hdc=0x2b010558, x=56, y=1, lppt=0x21ed0d0 | out: lppt=0x21ed0d0) returned 1 [0156.674] LineTo (hdc=0x2b010558, x=1, y=1) returned 1 [0156.674] MoveToEx (in: hdc=0x2b010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.674] GetROP2 (hdc=0x2b010558) returned 13 [0156.674] MoveToEx (in: hdc=0x2b010558, x=1, y=1, lppt=0x21ed0e8 | out: lppt=0x21ed0e8) returned 1 [0156.674] LineTo (hdc=0x2b010558, x=1, y=21) returned 1 [0156.674] MoveToEx (in: hdc=0x2b010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.675] DeleteObject (ho=0x83006b7) returned 1 [0156.675] GetROP2 (hdc=0x2b010558) returned 13 [0156.675] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x83006b6 [0156.675] MoveToEx (in: hdc=0x2b010558, x=1, y=21, lppt=0x21ed150 | out: lppt=0x21ed150) returned 1 [0156.675] LineTo (hdc=0x2b010558, x=56, y=21) returned 1 [0156.675] MoveToEx (in: hdc=0x2b010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.675] GetROP2 (hdc=0x2b010558) returned 13 [0156.675] MoveToEx (in: hdc=0x2b010558, x=56, y=21, lppt=0x21ed168 | out: lppt=0x21ed168) returned 1 [0156.675] LineTo (hdc=0x2b010558, x=56, y=0) returned 1 [0156.675] MoveToEx (in: hdc=0x2b010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.675] DeleteObject (ho=0x83006b6) returned 1 [0156.675] GdipReleaseDC (graphics=0x1bd51520, hdc=0x2b010558) returned 0x0 [0156.675] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0156.675] GdipReleaseDC (graphics=0x1bd51520, hdc=0x2b010558) returned 0x0 [0156.675] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0156.675] DeleteDC (hdc=0x2b010558) returned 1 [0156.675] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0156.676] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.676] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.676] DispatchMessageW (lpMsg=0x14ef10) [0156.676] BeginPaint (hWnd=0x4002c, lpPaint=0x14e5a8) [0156.676] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x4002c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.676] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x4002c, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.676] GetStockObject (i=5) returned 0x1900015 [0156.676] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0156.676] GdipCreateFromHDC (hdc=0xf0106b5, graphics=0x14e528) returned 0x0 [0156.676] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0156.676] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=32, height=23, combineMode=0x0) returned 0x0 [0156.677] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0156.677] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd518f0) returned 0x0 [0156.677] GdipIsMatrixIdentity (matrix=0x1bd518f0, result=0x14e5b8) returned 0x0 [0156.677] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888290 [0156.677] GdipGetMatrixElements (matrix=0x1bd518f0, matrixOut=0x1d888290) returned 0x0 [0156.677] LocalFree (hMem=0x1d888290) returned 0x0 [0156.677] GdipDeleteMatrix (matrix=0x1bd518f0) returned 0x0 [0156.677] GdipCreateRegion (region=0x14e550) returned 0x0 [0156.677] GdipGetClip (graphics=0x1bd51520, region=0x1ab7eee0) returned 0x0 [0156.678] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0156.678] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0156.678] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffda80dbd) returned 0x0 [0156.678] GdipDeleteRegion (region=0x1ab7eee0) returned 0x0 [0156.678] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0156.678] GetCurrentObject (hdc=0xf0106b5, type=0x1) returned 0x1b00017 [0156.678] GetCurrentObject (hdc=0xf0106b5, type=0x2) returned 0x1900010 [0156.678] GetCurrentObject (hdc=0xf0106b5, type=0x7) returned 0x60506af [0156.678] GetCurrentObject (hdc=0xf0106b5, type=0x6) returned 0x18a0048 [0156.678] GetNearestColor (hdc=0xf0106b5, color=0xf0f0f0) returned 0xf0f0f0 [0156.678] GetNearestColor (hdc=0xf0106b5, color=0xa0a0a0) returned 0xa0a0a0 [0156.678] GetNearestColor (hdc=0xf0106b5, color=0x696969) returned 0x696969 [0156.678] GetNearestColor (hdc=0xf0106b5, color=0xa0a0a0) returned 0xa0a0a0 [0156.678] GetNearestColor (hdc=0xf0106b5, color=0x0) returned 0x0 [0156.678] GetNearestColor (hdc=0xf0106b5, color=0xffffff) returned 0xffffff [0156.678] GetNearestColor (hdc=0xf0106b5, color=0xe5e5e5) returned 0xe5e5e5 [0156.678] GetNearestColor (hdc=0xf0106b5, color=0xd8d8d8) returned 0xd8d8d8 [0156.678] GetNearestColor (hdc=0xf0106b5, color=0x0) returned 0x0 [0156.678] GdipReleaseDC (graphics=0x1bd51520, hdc=0xf0106b5) returned 0x0 [0156.679] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÔ\x1e\x02", lpUsedDefaultChar=0x0) returned 17 [0156.679] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.679] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21edaa0) returned 0x0 [0156.679] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.679] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.679] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.679] GdipGetStringFormatFlags (format=0x1ab7eee0, flags=0x14e378) returned 0x0 [0156.679] GdipGetStringFormatTrimming (format=0x1ab7eee0, trimming=0x14e378) returned 0x0 [0156.679] GdipGetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=0x14e378) returned 0x0 [0156.679] GdipGetFontSize (font=0x1ab7eee0, size=0x14e378) returned 0x0 [0156.679] GdipGetFontStyle (font=0x1ab7eee0, style=0x14e378) returned 0x0 [0156.679] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.679] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.680] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.680] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0156.680] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21edbd0) returned 0x0 [0156.680] GdipSetStringFormatFlags (format=0x1bd567f0, flags=0) returned 0x0 [0156.680] GdipSetStringFormatTrimming (format=0x1bd567f0, trimming=0x1) returned 0x0 [0156.680] GdipSetStringFormatHotkeyPrefix (format=0x1bd567f0, hotkeyPrefix=2) returned 0x0 [0156.680] GdipSetStringFormatAlign (format=0x1bd567f0, align=0x1) returned 0x0 [0156.680] GdipSetStringFormatLineAlign (format=0x1bd567f0, align=0x1) returned 0x0 [0156.680] GdipMeasureString (graphics=0x1bd56b10, string="e^", length=2, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1bd567f0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0156.680] GdipDeleteStringFormat (format=0x1bd567f0) returned 0x0 [0156.680] GdipDeleteGraphics (graphics=0x1bd56b10) returned 0x0 [0156.680] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.681] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.681] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.681] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0156.681] GdipGetClip (graphics=0x1bd51520, region=0x1ab7eee0) returned 0x0 [0156.681] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0156.681] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd567f0) returned 0x0 [0156.681] GdipIsMatrixIdentity (matrix=0x1bd567f0, result=0x14e128) returned 0x0 [0156.681] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888750 [0156.681] GdipGetMatrixElements (matrix=0x1bd567f0, matrixOut=0x1d888750) returned 0x0 [0156.682] LocalFree (hMem=0x1d888750) returned 0x0 [0156.682] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888bd0 [0156.682] GdipGetMatrixElements (matrix=0x1bd567f0, matrixOut=0x1d888bd0) returned 0x0 [0156.682] LocalFree (hMem=0x1d888bd0) returned 0x0 [0156.682] GdipDeleteMatrix (matrix=0x1bd567f0) returned 0x0 [0156.682] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0156.682] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0156.682] GdipGetRegionHRgn (region=0x1ab7eee0, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0156.682] GdipDeleteRegion (region=0x1ab7eee0) returned 0x0 [0156.682] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0156.683] GetCurrentObject (hdc=0xf0106b5, type=0x1) returned 0x1b00017 [0156.683] GetCurrentObject (hdc=0xf0106b5, type=0x2) returned 0x1900010 [0156.683] GetCurrentObject (hdc=0xf0106b5, type=0x7) returned 0x60506af [0156.683] GetCurrentObject (hdc=0xf0106b5, type=0x6) returned 0x18a0048 [0156.683] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1d040554 [0156.683] DeleteObject (ho=0x1d040554) returned 1 [0156.683] DeleteObject (ho=0x5004064d) returned 1 [0156.683] OffsetViewportOrgEx (in: hdc=0xf0106b5, x=0, y=0, lppt=0x21edf90 | out: lppt=0x21edf90) returned 1 [0156.683] GetNearestColor (hdc=0xf0106b5, color=0xf0f0f0) returned 0xf0f0f0 [0156.683] CreateSolidBrush (color=0xf0f0f0) returned 0x101006b3 [0156.683] FillRect (hDC=0xf0106b5, lprc=0x14e1c8, hbr=0x101006b3) returned 1 [0156.683] DeleteObject (ho=0x101006b3) returned 1 [0156.683] GdipReleaseDC (graphics=0x1bd51520, hdc=0xf0106b5) returned 0x0 [0156.683] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.683] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0156.684] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.684] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21ee090) returned 0x0 [0156.684] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.684] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.684] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.684] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0156.684] GdipDrawString (graphics=0x1bd51520, string="e^", length=2, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7eee0, brush=0x1bd56830) returned 0x0 [0156.690] GdipDeleteBrush (brush=0x1bd56830) returned 0x0 [0156.690] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.690] GetFocus () returned 0x101f8 [0156.691] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.691] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÑ\x1e\x02", lpUsedDefaultChar=0x0) returned 17 [0156.691] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.691] GdipCreateRegion (region=0x14e030) returned 0x0 [0156.691] GdipGetClip (graphics=0x1bd51520, region=0x1ab7eee0) returned 0x0 [0156.691] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0156.691] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd518f0) returned 0x0 [0156.691] GdipIsMatrixIdentity (matrix=0x1bd518f0, result=0x14e098) returned 0x0 [0156.691] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888ad0 [0156.691] GdipGetMatrixElements (matrix=0x1bd518f0, matrixOut=0x1d888ad0) returned 0x0 [0156.692] LocalFree (hMem=0x1d888ad0) returned 0x0 [0156.692] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888b50 [0156.692] GdipGetMatrixElements (matrix=0x1bd518f0, matrixOut=0x1d888b50) returned 0x0 [0156.692] LocalFree (hMem=0x1d888b50) returned 0x0 [0156.693] GdipDeleteMatrix (matrix=0x1bd518f0) returned 0x0 [0156.693] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0156.693] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0156.693] GdipGetRegionHRgn (region=0x1ab7eee0, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0156.693] GdipDeleteRegion (region=0x1ab7eee0) returned 0x0 [0156.693] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0156.693] GetCurrentObject (hdc=0xf0106b5, type=0x1) returned 0x1b00017 [0156.693] GetCurrentObject (hdc=0xf0106b5, type=0x2) returned 0x1900010 [0156.693] GetCurrentObject (hdc=0xf0106b5, type=0x7) returned 0x60506af [0156.693] GetCurrentObject (hdc=0xf0106b5, type=0x6) returned 0x18a0048 [0156.693] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5104064d [0156.693] DeleteObject (ho=0x5104064d) returned 1 [0156.693] DeleteObject (ho=0x1e040554) returned 1 [0156.693] OffsetViewportOrgEx (in: hdc=0xf0106b5, x=0, y=0, lppt=0x21ee478 | out: lppt=0x21ee478) returned 1 [0156.693] GetROP2 (hdc=0xf0106b5) returned 13 [0156.693] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x93006b6 [0156.693] MoveToEx (in: hdc=0xf0106b5, x=32, y=0, lppt=0x21ee4e0 | out: lppt=0x21ee4e0) returned 1 [0156.693] LineTo (hdc=0xf0106b5, x=0, y=0) returned 1 [0156.693] MoveToEx (in: hdc=0xf0106b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.693] GetROP2 (hdc=0xf0106b5) returned 13 [0156.693] MoveToEx (in: hdc=0xf0106b5, x=0, y=0, lppt=0x21ee4f8 | out: lppt=0x21ee4f8) returned 1 [0156.693] LineTo (hdc=0xf0106b5, x=0, y=22) returned 1 [0156.694] MoveToEx (in: hdc=0xf0106b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.694] DeleteObject (ho=0x93006b6) returned 1 [0156.694] GetROP2 (hdc=0xf0106b5) returned 13 [0156.694] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x93006b7 [0156.694] MoveToEx (in: hdc=0xf0106b5, x=0, y=22, lppt=0x21ee560 | out: lppt=0x21ee560) returned 1 [0156.694] LineTo (hdc=0xf0106b5, x=32, y=22) returned 1 [0156.694] MoveToEx (in: hdc=0xf0106b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.694] GetROP2 (hdc=0xf0106b5) returned 13 [0156.694] MoveToEx (in: hdc=0xf0106b5, x=32, y=22, lppt=0x21ee578 | out: lppt=0x21ee578) returned 1 [0156.694] LineTo (hdc=0xf0106b5, x=32, y=-1) returned 1 [0156.694] MoveToEx (in: hdc=0xf0106b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.694] DeleteObject (ho=0x93006b7) returned 1 [0156.694] GetROP2 (hdc=0xf0106b5) returned 13 [0156.694] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xa3006b6 [0156.694] MoveToEx (in: hdc=0xf0106b5, x=31, y=1, lppt=0x21ee5e0 | out: lppt=0x21ee5e0) returned 1 [0156.694] LineTo (hdc=0xf0106b5, x=1, y=1) returned 1 [0156.694] MoveToEx (in: hdc=0xf0106b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.694] GetROP2 (hdc=0xf0106b5) returned 13 [0156.694] MoveToEx (in: hdc=0xf0106b5, x=1, y=1, lppt=0x21ee5f8 | out: lppt=0x21ee5f8) returned 1 [0156.694] LineTo (hdc=0xf0106b5, x=1, y=21) returned 1 [0156.694] MoveToEx (in: hdc=0xf0106b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.695] DeleteObject (ho=0xa3006b6) returned 1 [0156.695] GetROP2 (hdc=0xf0106b5) returned 13 [0156.695] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xa3006b7 [0156.695] MoveToEx (in: hdc=0xf0106b5, x=1, y=21, lppt=0x21ee660 | out: lppt=0x21ee660) returned 1 [0156.695] LineTo (hdc=0xf0106b5, x=31, y=21) returned 1 [0156.695] MoveToEx (in: hdc=0xf0106b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.695] GetROP2 (hdc=0xf0106b5) returned 13 [0156.695] MoveToEx (in: hdc=0xf0106b5, x=31, y=21, lppt=0x21ee678 | out: lppt=0x21ee678) returned 1 [0156.695] LineTo (hdc=0xf0106b5, x=31, y=0) returned 1 [0156.695] MoveToEx (in: hdc=0xf0106b5, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.695] DeleteObject (ho=0xa3006b7) returned 1 [0156.695] GdipReleaseDC (graphics=0x1bd51520, hdc=0xf0106b5) returned 0x0 [0156.695] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0156.695] GdipReleaseDC (graphics=0x1bd51520, hdc=0xf0106b5) returned 0x0 [0156.695] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0156.695] DeleteDC (hdc=0xf0106b5) returned 1 [0156.695] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0156.695] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.696] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.696] DispatchMessageW (lpMsg=0x14ef10) [0156.696] BeginPaint (hWnd=0x201bc, lpPaint=0x14e5a8) [0156.696] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x201bc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.696] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x201bc, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.696] GetStockObject (i=5) returned 0x1900015 [0156.696] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0156.696] GdipCreateFromHDC (hdc=0x120106b4, graphics=0x14e528) returned 0x0 [0156.696] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0156.696] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0156.696] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0156.696] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1ab7eee0) returned 0x0 [0156.697] GdipIsMatrixIdentity (matrix=0x1ab7eee0, result=0x14e5b8) returned 0x0 [0156.697] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888310 [0156.697] GdipGetMatrixElements (matrix=0x1ab7eee0, matrixOut=0x1d888310) returned 0x0 [0156.697] LocalFree (hMem=0x1d888310) returned 0x0 [0156.697] GdipDeleteMatrix (matrix=0x1ab7eee0) returned 0x0 [0156.697] GdipCreateRegion (region=0x14e550) returned 0x0 [0156.697] GdipGetClip (graphics=0x1bd51520, region=0x1bd567f0) returned 0x0 [0156.697] GdipIsInfiniteRegion (region=0x1bd567f0, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0156.697] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0156.697] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffda50dbd) returned 0x0 [0156.698] GdipDeleteRegion (region=0x1bd567f0) returned 0x0 [0156.698] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0156.698] GetCurrentObject (hdc=0x120106b4, type=0x1) returned 0x1b00017 [0156.698] GetCurrentObject (hdc=0x120106b4, type=0x2) returned 0x1900010 [0156.698] GetCurrentObject (hdc=0x120106b4, type=0x7) returned 0x60506af [0156.698] GetCurrentObject (hdc=0x120106b4, type=0x6) returned 0x18a0048 [0156.698] GetNearestColor (hdc=0x120106b4, color=0xf0f0f0) returned 0xf0f0f0 [0156.698] GetNearestColor (hdc=0x120106b4, color=0xa0a0a0) returned 0xa0a0a0 [0156.698] GetNearestColor (hdc=0x120106b4, color=0x696969) returned 0x696969 [0156.698] GetNearestColor (hdc=0x120106b4, color=0xa0a0a0) returned 0xa0a0a0 [0156.698] GetNearestColor (hdc=0x120106b4, color=0x0) returned 0x0 [0156.698] GetNearestColor (hdc=0x120106b4, color=0xffffff) returned 0xffffff [0156.698] GetNearestColor (hdc=0x120106b4, color=0xe5e5e5) returned 0xe5e5e5 [0156.698] GetNearestColor (hdc=0x120106b4, color=0xd8d8d8) returned 0xd8d8d8 [0156.698] GetNearestColor (hdc=0x120106b4, color=0x0) returned 0x0 [0156.698] GdipReleaseDC (graphics=0x1bd51520, hdc=0x120106b4) returned 0x0 [0156.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExé\x1e\x02", lpUsedDefaultChar=0x0) returned 17 [0156.699] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.699] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21eefb0) returned 0x0 [0156.699] GdipSetStringFormatAlign (format=0x1ab7ef20, align=0x1) returned 0x0 [0156.699] GdipSetStringFormatLineAlign (format=0x1ab7ef20, align=0x1) returned 0x0 [0156.699] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ef20, hotkeyPrefix=2) returned 0x0 [0156.699] GdipGetStringFormatFlags (format=0x1ab7ef20, flags=0x14e378) returned 0x0 [0156.699] GdipGetStringFormatTrimming (format=0x1ab7ef20, trimming=0x14e378) returned 0x0 [0156.699] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ef20, hotkeyPrefix=0x14e378) returned 0x0 [0156.699] GdipGetFontSize (font=0x1ab7ef20, size=0x14e378) returned 0x0 [0156.699] GdipGetFontStyle (font=0x1ab7ef20, style=0x14e378) returned 0x0 [0156.699] GdipDeleteStringFormat (format=0x1ab7ef20) returned 0x0 [0156.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.700] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.700] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0156.700] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21ef0e0) returned 0x0 [0156.700] GdipSetStringFormatFlags (format=0x1bd567f0, flags=0) returned 0x0 [0156.700] GdipSetStringFormatTrimming (format=0x1bd567f0, trimming=0x1) returned 0x0 [0156.700] GdipSetStringFormatHotkeyPrefix (format=0x1bd567f0, hotkeyPrefix=2) returned 0x0 [0156.700] GdipSetStringFormatAlign (format=0x1bd567f0, align=0x1) returned 0x0 [0156.700] GdipSetStringFormatLineAlign (format=0x1bd567f0, align=0x1) returned 0x0 [0156.700] GdipMeasureString (graphics=0x1bd56b10, string="/", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1bd567f0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0156.700] GdipDeleteStringFormat (format=0x1bd567f0) returned 0x0 [0156.700] GdipDeleteGraphics (graphics=0x1bd56b10) returned 0x0 [0156.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.701] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.701] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0156.701] GdipGetClip (graphics=0x1bd51520, region=0x1bd567f0) returned 0x0 [0156.701] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0156.701] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd518f0) returned 0x0 [0156.701] GdipIsMatrixIdentity (matrix=0x1bd518f0, result=0x14e128) returned 0x0 [0156.701] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888d90 [0156.701] GdipGetMatrixElements (matrix=0x1bd518f0, matrixOut=0x1d888d90) returned 0x0 [0156.702] LocalFree (hMem=0x1d888d90) returned 0x0 [0156.702] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0156.702] GdipGetMatrixElements (matrix=0x1bd518f0, matrixOut=0x1d888150) returned 0x0 [0156.702] LocalFree (hMem=0x1d888150) returned 0x0 [0156.702] GdipDeleteMatrix (matrix=0x1bd518f0) returned 0x0 [0156.702] GdipIsInfiniteRegion (region=0x1bd567f0, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0156.702] GdipIsInfiniteRegion (region=0x1bd567f0, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0156.702] GdipGetRegionHRgn (region=0x1bd567f0, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0156.702] GdipDeleteRegion (region=0x1bd567f0) returned 0x0 [0156.702] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0156.702] GetCurrentObject (hdc=0x120106b4, type=0x1) returned 0x1b00017 [0156.702] GetCurrentObject (hdc=0x120106b4, type=0x2) returned 0x1900010 [0156.703] GetCurrentObject (hdc=0x120106b4, type=0x7) returned 0x60506af [0156.703] GetCurrentObject (hdc=0x120106b4, type=0x6) returned 0x18a0048 [0156.703] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1f040554 [0156.703] DeleteObject (ho=0x1f040554) returned 1 [0156.703] DeleteObject (ho=0x5204064d) returned 1 [0156.703] OffsetViewportOrgEx (in: hdc=0x120106b4, x=0, y=0, lppt=0x21ef4a0 | out: lppt=0x21ef4a0) returned 1 [0156.703] GetNearestColor (hdc=0x120106b4, color=0xf0f0f0) returned 0xf0f0f0 [0156.703] CreateSolidBrush (color=0xf0f0f0) returned 0x111006b3 [0156.703] FillRect (hDC=0x120106b4, lprc=0x14e1c8, hbr=0x111006b3) returned 1 [0156.703] DeleteObject (ho=0x111006b3) returned 1 [0156.703] GdipReleaseDC (graphics=0x1bd51520, hdc=0x120106b4) returned 0x0 [0156.703] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0156.704] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.704] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21ef5a0) returned 0x0 [0156.704] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.704] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.704] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.704] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0156.704] GdipDrawString (graphics=0x1bd51520, string="/", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7eee0, brush=0x1bd567f0) returned 0x0 [0156.708] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0156.708] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.708] GetFocus () returned 0x101f8 [0156.708] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExæ\x1e\x02", lpUsedDefaultChar=0x0) returned 17 [0156.709] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.709] GdipCreateRegion (region=0x14e030) returned 0x0 [0156.709] GdipGetClip (graphics=0x1bd51520, region=0x1ab7eee0) returned 0x0 [0156.709] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0156.709] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd567f0) returned 0x0 [0156.709] GdipIsMatrixIdentity (matrix=0x1bd567f0, result=0x14e098) returned 0x0 [0156.709] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888bd0 [0156.709] GdipGetMatrixElements (matrix=0x1bd567f0, matrixOut=0x1d888bd0) returned 0x0 [0156.710] LocalFree (hMem=0x1d888bd0) returned 0x0 [0156.710] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0156.710] GdipGetMatrixElements (matrix=0x1bd567f0, matrixOut=0x1d888150) returned 0x0 [0156.710] LocalFree (hMem=0x1d888150) returned 0x0 [0156.710] GdipDeleteMatrix (matrix=0x1bd567f0) returned 0x0 [0156.710] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0156.710] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0156.710] GdipGetRegionHRgn (region=0x1ab7eee0, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0156.710] GdipDeleteRegion (region=0x1ab7eee0) returned 0x0 [0156.710] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0156.710] GetCurrentObject (hdc=0x120106b4, type=0x1) returned 0x1b00017 [0156.710] GetCurrentObject (hdc=0x120106b4, type=0x2) returned 0x1900010 [0156.710] GetCurrentObject (hdc=0x120106b4, type=0x7) returned 0x60506af [0156.711] GetCurrentObject (hdc=0x120106b4, type=0x6) returned 0x18a0048 [0156.711] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5304064d [0156.711] DeleteObject (ho=0x5304064d) returned 1 [0156.711] DeleteObject (ho=0x20040554) returned 1 [0156.711] OffsetViewportOrgEx (in: hdc=0x120106b4, x=0, y=0, lppt=0x21ef988 | out: lppt=0x21ef988) returned 1 [0156.711] GetROP2 (hdc=0x120106b4) returned 13 [0156.711] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0xb3006b7 [0156.711] MoveToEx (in: hdc=0x120106b4, x=25, y=0, lppt=0x21ef9f0 | out: lppt=0x21ef9f0) returned 1 [0156.711] LineTo (hdc=0x120106b4, x=0, y=0) returned 1 [0156.711] MoveToEx (in: hdc=0x120106b4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.711] GetROP2 (hdc=0x120106b4) returned 13 [0156.711] MoveToEx (in: hdc=0x120106b4, x=0, y=0, lppt=0x21efa08 | out: lppt=0x21efa08) returned 1 [0156.711] LineTo (hdc=0x120106b4, x=0, y=22) returned 1 [0156.711] MoveToEx (in: hdc=0x120106b4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.711] DeleteObject (ho=0xb3006b7) returned 1 [0156.711] GetROP2 (hdc=0x120106b4) returned 13 [0156.711] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0xb3006b6 [0156.711] MoveToEx (in: hdc=0x120106b4, x=0, y=22, lppt=0x21efa70 | out: lppt=0x21efa70) returned 1 [0156.711] LineTo (hdc=0x120106b4, x=25, y=22) returned 1 [0156.711] MoveToEx (in: hdc=0x120106b4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.711] GetROP2 (hdc=0x120106b4) returned 13 [0156.712] MoveToEx (in: hdc=0x120106b4, x=25, y=22, lppt=0x21efa88 | out: lppt=0x21efa88) returned 1 [0156.712] LineTo (hdc=0x120106b4, x=25, y=-1) returned 1 [0156.712] MoveToEx (in: hdc=0x120106b4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.712] DeleteObject (ho=0xb3006b6) returned 1 [0156.712] GetROP2 (hdc=0x120106b4) returned 13 [0156.712] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xc3006b7 [0156.712] MoveToEx (in: hdc=0x120106b4, x=24, y=1, lppt=0x21efaf0 | out: lppt=0x21efaf0) returned 1 [0156.712] LineTo (hdc=0x120106b4, x=1, y=1) returned 1 [0156.712] MoveToEx (in: hdc=0x120106b4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.712] GetROP2 (hdc=0x120106b4) returned 13 [0156.712] MoveToEx (in: hdc=0x120106b4, x=1, y=1, lppt=0x21efb08 | out: lppt=0x21efb08) returned 1 [0156.712] LineTo (hdc=0x120106b4, x=1, y=21) returned 1 [0156.712] MoveToEx (in: hdc=0x120106b4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.712] DeleteObject (ho=0xc3006b7) returned 1 [0156.712] GetROP2 (hdc=0x120106b4) returned 13 [0156.712] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xc3006b6 [0156.712] MoveToEx (in: hdc=0x120106b4, x=1, y=21, lppt=0x21efb70 | out: lppt=0x21efb70) returned 1 [0156.712] LineTo (hdc=0x120106b4, x=24, y=21) returned 1 [0156.712] MoveToEx (in: hdc=0x120106b4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.712] GetROP2 (hdc=0x120106b4) returned 13 [0156.712] MoveToEx (in: hdc=0x120106b4, x=24, y=21, lppt=0x21efb88 | out: lppt=0x21efb88) returned 1 [0156.712] LineTo (hdc=0x120106b4, x=24, y=0) returned 1 [0156.713] MoveToEx (in: hdc=0x120106b4, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.713] DeleteObject (ho=0xc3006b6) returned 1 [0156.713] GdipReleaseDC (graphics=0x1bd51520, hdc=0x120106b4) returned 0x0 [0156.713] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0156.713] GdipReleaseDC (graphics=0x1bd51520, hdc=0x120106b4) returned 0x0 [0156.713] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0156.713] DeleteDC (hdc=0x120106b4) returned 1 [0156.713] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0156.713] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.713] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.713] DispatchMessageW (lpMsg=0x14ef10) [0156.713] BeginPaint (hWnd=0x40046, lpPaint=0x14e5a8) [0156.713] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x40046, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.713] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x40046, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.714] GetStockObject (i=5) returned 0x1900015 [0156.714] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0156.714] GdipCreateFromHDC (hdc=0x36010558, graphics=0x14e528) returned 0x0 [0156.714] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0156.714] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0156.714] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0156.714] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd518f0) returned 0x0 [0156.714] GdipIsMatrixIdentity (matrix=0x1bd518f0, result=0x14e5b8) returned 0x0 [0156.714] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8881d0 [0156.714] GdipGetMatrixElements (matrix=0x1bd518f0, matrixOut=0x1d8881d0) returned 0x0 [0156.715] LocalFree (hMem=0x1d8881d0) returned 0x0 [0156.715] GdipDeleteMatrix (matrix=0x1bd518f0) returned 0x0 [0156.715] GdipCreateRegion (region=0x14e550) returned 0x0 [0156.715] GdipGetClip (graphics=0x1bd51520, region=0x1ab7eee0) returned 0x0 [0156.715] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0156.715] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0156.715] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffda20dbd) returned 0x0 [0156.715] GdipDeleteRegion (region=0x1ab7eee0) returned 0x0 [0156.715] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0156.715] GetCurrentObject (hdc=0x36010558, type=0x1) returned 0x1b00017 [0156.715] GetCurrentObject (hdc=0x36010558, type=0x2) returned 0x1900010 [0156.715] GetCurrentObject (hdc=0x36010558, type=0x7) returned 0x60506af [0156.715] GetCurrentObject (hdc=0x36010558, type=0x6) returned 0x18a0048 [0156.715] GetNearestColor (hdc=0x36010558, color=0xf0f0f0) returned 0xf0f0f0 [0156.716] GetNearestColor (hdc=0x36010558, color=0xa0a0a0) returned 0xa0a0a0 [0156.716] GetNearestColor (hdc=0x36010558, color=0x696969) returned 0x696969 [0156.716] GetNearestColor (hdc=0x36010558, color=0xa0a0a0) returned 0xa0a0a0 [0156.716] GetNearestColor (hdc=0x36010558, color=0x0) returned 0x0 [0156.716] GetNearestColor (hdc=0x36010558, color=0xffffff) returned 0xffffff [0156.716] GetNearestColor (hdc=0x36010558, color=0xe5e5e5) returned 0xe5e5e5 [0156.716] GetNearestColor (hdc=0x36010558, color=0xd8d8d8) returned 0xd8d8d8 [0156.716] GetNearestColor (hdc=0x36010558, color=0x0) returned 0x0 [0156.716] GdipReleaseDC (graphics=0x1bd51520, hdc=0x36010558) returned 0x0 [0156.716] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.716] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExþ\x1e\x02", lpUsedDefaultChar=0x0) returned 17 [0156.716] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.717] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f04c0) returned 0x0 [0156.717] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.717] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.717] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.717] GdipGetStringFormatFlags (format=0x1ab7eee0, flags=0x14e378) returned 0x0 [0156.717] GdipGetStringFormatTrimming (format=0x1ab7eee0, trimming=0x14e378) returned 0x0 [0156.717] GdipGetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=0x14e378) returned 0x0 [0156.717] GdipGetFontSize (font=0x1ab7eee0, size=0x14e378) returned 0x0 [0156.717] GdipGetFontStyle (font=0x1ab7eee0, style=0x14e378) returned 0x0 [0156.717] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.717] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.717] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.717] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0156.718] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f05f0) returned 0x0 [0156.718] GdipSetStringFormatFlags (format=0x1bd567f0, flags=0) returned 0x0 [0156.718] GdipSetStringFormatTrimming (format=0x1bd567f0, trimming=0x1) returned 0x0 [0156.718] GdipSetStringFormatHotkeyPrefix (format=0x1bd567f0, hotkeyPrefix=2) returned 0x0 [0156.718] GdipSetStringFormatAlign (format=0x1bd567f0, align=0x1) returned 0x0 [0156.718] GdipSetStringFormatLineAlign (format=0x1bd567f0, align=0x1) returned 0x0 [0156.718] GdipMeasureString (graphics=0x1bd56b10, string=";", length=1, font=0x1ab7ec20, layoutRect=0x14dfb8, stringFormat=0x1bd567f0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0156.718] GdipDeleteStringFormat (format=0x1bd567f0) returned 0x0 [0156.718] GdipDeleteGraphics (graphics=0x1bd56b10) returned 0x0 [0156.719] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.719] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.721] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0156.721] GdipGetClip (graphics=0x1bd51520, region=0x1ab7eee0) returned 0x0 [0156.721] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0156.721] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd567f0) returned 0x0 [0156.721] GdipIsMatrixIdentity (matrix=0x1bd567f0, result=0x14e128) returned 0x0 [0156.721] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888b50 [0156.721] GdipGetMatrixElements (matrix=0x1bd567f0, matrixOut=0x1d888b50) returned 0x0 [0156.722] LocalFree (hMem=0x1d888b50) returned 0x0 [0156.722] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888ad0 [0156.722] GdipGetMatrixElements (matrix=0x1bd567f0, matrixOut=0x1d888ad0) returned 0x0 [0156.723] LocalFree (hMem=0x1d888ad0) returned 0x0 [0156.723] GdipDeleteMatrix (matrix=0x1bd567f0) returned 0x0 [0156.723] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0156.723] GdipIsInfiniteRegion (region=0x1ab7eee0, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0156.723] GdipGetRegionHRgn (region=0x1ab7eee0, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0156.723] GdipDeleteRegion (region=0x1ab7eee0) returned 0x0 [0156.723] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0156.723] GetCurrentObject (hdc=0x36010558, type=0x1) returned 0x1b00017 [0156.723] GetCurrentObject (hdc=0x36010558, type=0x2) returned 0x1900010 [0156.723] GetCurrentObject (hdc=0x36010558, type=0x7) returned 0x60506af [0156.723] GetCurrentObject (hdc=0x36010558, type=0x6) returned 0x18a0048 [0156.723] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x21040554 [0156.723] DeleteObject (ho=0x21040554) returned 1 [0156.723] DeleteObject (ho=0x5404064d) returned 1 [0156.723] OffsetViewportOrgEx (in: hdc=0x36010558, x=0, y=0, lppt=0x21f09b0 | out: lppt=0x21f09b0) returned 1 [0156.723] GetNearestColor (hdc=0x36010558, color=0xf0f0f0) returned 0xf0f0f0 [0156.723] CreateSolidBrush (color=0xf0f0f0) returned 0x121006b3 [0156.723] FillRect (hDC=0x36010558, lprc=0x14e1c8, hbr=0x121006b3) returned 1 [0156.723] DeleteObject (ho=0x121006b3) returned 1 [0156.723] GdipReleaseDC (graphics=0x1bd51520, hdc=0x36010558) returned 0x0 [0156.724] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.724] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0156.724] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.724] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f0ab0) returned 0x0 [0156.724] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.724] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.724] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.724] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0156.724] GdipDrawString (graphics=0x1bd51520, string=";", length=1, font=0x1ab7ec20, layoutRect=0x14e338, stringFormat=0x1ab7eee0, brush=0x1bd56830) returned 0x0 [0156.729] GdipDeleteBrush (brush=0x1bd56830) returned 0x0 [0156.729] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.729] GetFocus () returned 0x101f8 [0156.730] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.730] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExû\x1e\x02", lpUsedDefaultChar=0x0) returned 17 [0156.730] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.731] GdipCreateRegion (region=0x14e030) returned 0x0 [0156.731] GdipGetClip (graphics=0x1bd51520, region=0x1bd56c70) returned 0x0 [0156.732] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0156.732] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd518f0) returned 0x0 [0156.732] GdipIsMatrixIdentity (matrix=0x1bd518f0, result=0x14e098) returned 0x0 [0156.732] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0156.732] GdipGetMatrixElements (matrix=0x1bd518f0, matrixOut=0x1d888150) returned 0x0 [0156.733] LocalFree (hMem=0x1d888150) returned 0x0 [0156.733] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888cd0 [0156.733] GdipGetMatrixElements (matrix=0x1bd518f0, matrixOut=0x1d888cd0) returned 0x0 [0156.733] LocalFree (hMem=0x1d888cd0) returned 0x0 [0156.733] GdipDeleteMatrix (matrix=0x1bd518f0) returned 0x0 [0156.733] GdipIsInfiniteRegion (region=0x1bd56c70, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0156.733] GdipIsInfiniteRegion (region=0x1bd56c70, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0156.733] GdipGetRegionHRgn (region=0x1bd56c70, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0156.733] GdipDeleteRegion (region=0x1bd56c70) returned 0x0 [0156.733] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0156.733] GetCurrentObject (hdc=0x36010558, type=0x1) returned 0x1b00017 [0156.733] GetCurrentObject (hdc=0x36010558, type=0x2) returned 0x1900010 [0156.733] GetCurrentObject (hdc=0x36010558, type=0x7) returned 0x60506af [0156.734] GetCurrentObject (hdc=0x36010558, type=0x6) returned 0x18a0048 [0156.734] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5504064d [0156.734] DeleteObject (ho=0x5504064d) returned 1 [0156.734] DeleteObject (ho=0x22040554) returned 1 [0156.734] OffsetViewportOrgEx (in: hdc=0x36010558, x=0, y=0, lppt=0x21f0e98 | out: lppt=0x21f0e98) returned 1 [0156.734] GetROP2 (hdc=0x36010558) returned 13 [0156.734] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0xd3006b7 [0156.734] MoveToEx (in: hdc=0x36010558, x=25, y=0, lppt=0x21f0f00 | out: lppt=0x21f0f00) returned 1 [0156.734] LineTo (hdc=0x36010558, x=0, y=0) returned 1 [0156.734] MoveToEx (in: hdc=0x36010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.734] GetROP2 (hdc=0x36010558) returned 13 [0156.734] MoveToEx (in: hdc=0x36010558, x=0, y=0, lppt=0x21f0f18 | out: lppt=0x21f0f18) returned 1 [0156.734] LineTo (hdc=0x36010558, x=0, y=22) returned 1 [0156.734] MoveToEx (in: hdc=0x36010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.734] DeleteObject (ho=0xd3006b7) returned 1 [0156.734] GetROP2 (hdc=0x36010558) returned 13 [0156.734] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x13006b8 [0156.734] MoveToEx (in: hdc=0x36010558, x=0, y=22, lppt=0x21f0f80 | out: lppt=0x21f0f80) returned 1 [0156.734] LineTo (hdc=0x36010558, x=25, y=22) returned 1 [0156.735] MoveToEx (in: hdc=0x36010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.735] GetROP2 (hdc=0x36010558) returned 13 [0156.735] MoveToEx (in: hdc=0x36010558, x=25, y=22, lppt=0x21f0f98 | out: lppt=0x21f0f98) returned 1 [0156.735] LineTo (hdc=0x36010558, x=25, y=-1) returned 1 [0156.735] MoveToEx (in: hdc=0x36010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.735] DeleteObject (ho=0x13006b8) returned 1 [0156.735] GetROP2 (hdc=0x36010558) returned 13 [0156.735] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xe3006b7 [0156.735] MoveToEx (in: hdc=0x36010558, x=24, y=1, lppt=0x21f1000 | out: lppt=0x21f1000) returned 1 [0156.735] LineTo (hdc=0x36010558, x=1, y=1) returned 1 [0156.735] MoveToEx (in: hdc=0x36010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.735] GetROP2 (hdc=0x36010558) returned 13 [0156.735] MoveToEx (in: hdc=0x36010558, x=1, y=1, lppt=0x21f1018 | out: lppt=0x21f1018) returned 1 [0156.735] LineTo (hdc=0x36010558, x=1, y=21) returned 1 [0156.735] MoveToEx (in: hdc=0x36010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.735] DeleteObject (ho=0xe3006b7) returned 1 [0156.735] GetROP2 (hdc=0x36010558) returned 13 [0156.735] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x23006b8 [0156.735] MoveToEx (in: hdc=0x36010558, x=1, y=21, lppt=0x21f1080 | out: lppt=0x21f1080) returned 1 [0156.735] LineTo (hdc=0x36010558, x=24, y=21) returned 1 [0156.735] MoveToEx (in: hdc=0x36010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.735] GetROP2 (hdc=0x36010558) returned 13 [0156.736] MoveToEx (in: hdc=0x36010558, x=24, y=21, lppt=0x21f1098 | out: lppt=0x21f1098) returned 1 [0156.736] LineTo (hdc=0x36010558, x=24, y=0) returned 1 [0156.736] MoveToEx (in: hdc=0x36010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.736] DeleteObject (ho=0x23006b8) returned 1 [0156.736] GdipReleaseDC (graphics=0x1bd51520, hdc=0x36010558) returned 0x0 [0156.736] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0156.736] GdipReleaseDC (graphics=0x1bd51520, hdc=0x36010558) returned 0x0 [0156.736] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0156.736] DeleteDC (hdc=0x36010558) returned 1 [0156.736] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0156.736] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.736] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.736] DispatchMessageW (lpMsg=0x14ef10) [0156.736] BeginPaint (hWnd=0x20042, lpPaint=0x14e5a8) [0156.736] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20042, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.737] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20042, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.737] GetStockObject (i=5) returned 0x1900015 [0156.737] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0156.737] GdipCreateFromHDC (hdc=0x39010558, graphics=0x14e528) returned 0x0 [0156.737] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0156.737] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0156.737] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0156.737] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57d60) returned 0x0 [0156.737] GdipIsMatrixIdentity (matrix=0x1bd57d60, result=0x14e5b8) returned 0x0 [0156.737] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0156.737] GdipGetMatrixElements (matrix=0x1bd57d60, matrixOut=0x1d888150) returned 0x0 [0156.738] LocalFree (hMem=0x1d888150) returned 0x0 [0156.738] GdipDeleteMatrix (matrix=0x1bd57d60) returned 0x0 [0156.738] GdipCreateRegion (region=0x14e550) returned 0x0 [0156.738] GdipGetClip (graphics=0x1bd51520, region=0x1bd57e60) returned 0x0 [0156.738] GdipIsInfiniteRegion (region=0x1bd57e60, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0156.738] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0156.738] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd9f0dbd) returned 0x0 [0156.739] GdipDeleteRegion (region=0x1bd57e60) returned 0x0 [0156.739] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0156.739] GetCurrentObject (hdc=0x39010558, type=0x1) returned 0x1b00017 [0156.739] GetCurrentObject (hdc=0x39010558, type=0x2) returned 0x1900010 [0156.739] GetCurrentObject (hdc=0x39010558, type=0x7) returned 0x60506af [0156.739] GetCurrentObject (hdc=0x39010558, type=0x6) returned 0x18a0048 [0156.739] GetNearestColor (hdc=0x39010558, color=0xf0f0f0) returned 0xf0f0f0 [0156.739] GetNearestColor (hdc=0x39010558, color=0xa0a0a0) returned 0xa0a0a0 [0156.739] GetNearestColor (hdc=0x39010558, color=0x696969) returned 0x696969 [0156.739] GetNearestColor (hdc=0x39010558, color=0xa0a0a0) returned 0xa0a0a0 [0156.739] GetNearestColor (hdc=0x39010558, color=0x0) returned 0x0 [0156.739] GetNearestColor (hdc=0x39010558, color=0xffffff) returned 0xffffff [0156.739] GetNearestColor (hdc=0x39010558, color=0xe5e5e5) returned 0xe5e5e5 [0156.739] GetNearestColor (hdc=0x39010558, color=0xd8d8d8) returned 0xd8d8d8 [0156.739] GetNearestColor (hdc=0x39010558, color=0x0) returned 0x0 [0156.739] GdipReleaseDC (graphics=0x1bd51520, hdc=0x39010558) returned 0x0 [0156.739] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x13\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0156.740] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.740] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f19d0) returned 0x0 [0156.740] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.740] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.740] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0156.740] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0156.740] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0156.740] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0156.740] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0156.740] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0156.740] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0156.740] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.741] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.741] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0156.741] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f1b00) returned 0x0 [0156.741] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0156.741] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0156.741] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.741] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.741] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.741] GdipMeasureString (graphics=0x1bd57e60, string="-", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0156.741] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.741] GdipDeleteGraphics (graphics=0x1bd57e60) returned 0x0 [0156.741] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.742] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.742] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0156.742] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.742] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0156.742] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57720) returned 0x0 [0156.742] GdipIsMatrixIdentity (matrix=0x1bd57720, result=0x14e128) returned 0x0 [0156.742] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888cd0 [0156.742] GdipGetMatrixElements (matrix=0x1bd57720, matrixOut=0x1d888cd0) returned 0x0 [0156.743] LocalFree (hMem=0x1d888cd0) returned 0x0 [0156.743] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888d50 [0156.743] GdipGetMatrixElements (matrix=0x1bd57720, matrixOut=0x1d888d50) returned 0x0 [0156.743] LocalFree (hMem=0x1d888d50) returned 0x0 [0156.743] GdipDeleteMatrix (matrix=0x1bd57720) returned 0x0 [0156.743] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0156.743] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0156.743] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0156.743] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.743] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0156.743] GetCurrentObject (hdc=0x39010558, type=0x1) returned 0x1b00017 [0156.743] GetCurrentObject (hdc=0x39010558, type=0x2) returned 0x1900010 [0156.743] GetCurrentObject (hdc=0x39010558, type=0x7) returned 0x60506af [0156.744] GetCurrentObject (hdc=0x39010558, type=0x6) returned 0x18a0048 [0156.744] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x23040554 [0156.744] DeleteObject (ho=0x23040554) returned 1 [0156.744] DeleteObject (ho=0x5604064d) returned 1 [0156.744] OffsetViewportOrgEx (in: hdc=0x39010558, x=0, y=0, lppt=0x21f1ec0 | out: lppt=0x21f1ec0) returned 1 [0156.744] GetNearestColor (hdc=0x39010558, color=0xf0f0f0) returned 0xf0f0f0 [0156.744] CreateSolidBrush (color=0xf0f0f0) returned 0x131006b3 [0156.744] FillRect (hDC=0x39010558, lprc=0x14e1c8, hbr=0x131006b3) returned 1 [0156.744] DeleteObject (ho=0x131006b3) returned 1 [0156.744] GdipReleaseDC (graphics=0x1bd51520, hdc=0x39010558) returned 0x0 [0156.744] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0156.744] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.744] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f1fc0) returned 0x0 [0156.745] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.745] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.745] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0156.745] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0156.745] GdipDrawString (graphics=0x1bd51520, string="-", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0156.750] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0156.750] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0156.750] GetFocus () returned 0x101f8 [0156.750] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x10\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0156.750] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.785] GdipCreateRegion (region=0x14e030) returned 0x0 [0156.785] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.785] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0156.785] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57aa0) returned 0x0 [0156.785] GdipIsMatrixIdentity (matrix=0x1bd57aa0, result=0x14e098) returned 0x0 [0156.785] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888350 [0156.785] GdipGetMatrixElements (matrix=0x1bd57aa0, matrixOut=0x1d888350) returned 0x0 [0156.786] LocalFree (hMem=0x1d888350) returned 0x0 [0156.786] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888b50 [0156.786] GdipGetMatrixElements (matrix=0x1bd57aa0, matrixOut=0x1d888b50) returned 0x0 [0156.786] LocalFree (hMem=0x1d888b50) returned 0x0 [0156.786] GdipDeleteMatrix (matrix=0x1bd57aa0) returned 0x0 [0156.786] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0156.786] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0156.786] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0156.786] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.786] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0156.787] GetCurrentObject (hdc=0x39010558, type=0x1) returned 0x1b00017 [0156.787] GetCurrentObject (hdc=0x39010558, type=0x2) returned 0x1900010 [0156.787] GetCurrentObject (hdc=0x39010558, type=0x7) returned 0x60506af [0156.787] GetCurrentObject (hdc=0x39010558, type=0x6) returned 0x18a0048 [0156.787] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5704064d [0156.787] DeleteObject (ho=0x5704064d) returned 1 [0156.787] DeleteObject (ho=0x24040554) returned 1 [0156.787] OffsetViewportOrgEx (in: hdc=0x39010558, x=0, y=0, lppt=0x21f23a8 | out: lppt=0x21f23a8) returned 1 [0156.787] GetROP2 (hdc=0x39010558) returned 13 [0156.787] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0xf3006b7 [0156.787] MoveToEx (in: hdc=0x39010558, x=25, y=0, lppt=0x21f2410 | out: lppt=0x21f2410) returned 1 [0156.787] LineTo (hdc=0x39010558, x=0, y=0) returned 1 [0156.787] MoveToEx (in: hdc=0x39010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.787] GetROP2 (hdc=0x39010558) returned 13 [0156.787] MoveToEx (in: hdc=0x39010558, x=0, y=0, lppt=0x21f2428 | out: lppt=0x21f2428) returned 1 [0156.787] LineTo (hdc=0x39010558, x=0, y=22) returned 1 [0156.787] MoveToEx (in: hdc=0x39010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.787] DeleteObject (ho=0xf3006b7) returned 1 [0156.787] GetROP2 (hdc=0x39010558) returned 13 [0156.787] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x13006b9 [0156.788] MoveToEx (in: hdc=0x39010558, x=0, y=22, lppt=0x21f2490 | out: lppt=0x21f2490) returned 1 [0156.788] LineTo (hdc=0x39010558, x=25, y=22) returned 1 [0156.788] MoveToEx (in: hdc=0x39010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.788] GetROP2 (hdc=0x39010558) returned 13 [0156.788] MoveToEx (in: hdc=0x39010558, x=25, y=22, lppt=0x21f24a8 | out: lppt=0x21f24a8) returned 1 [0156.788] LineTo (hdc=0x39010558, x=25, y=-1) returned 1 [0156.788] MoveToEx (in: hdc=0x39010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.788] DeleteObject (ho=0x13006b9) returned 1 [0156.788] GetROP2 (hdc=0x39010558) returned 13 [0156.788] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x103006b7 [0156.788] MoveToEx (in: hdc=0x39010558, x=24, y=1, lppt=0x21f2510 | out: lppt=0x21f2510) returned 1 [0156.788] LineTo (hdc=0x39010558, x=1, y=1) returned 1 [0156.788] MoveToEx (in: hdc=0x39010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.788] GetROP2 (hdc=0x39010558) returned 13 [0156.788] MoveToEx (in: hdc=0x39010558, x=1, y=1, lppt=0x21f2528 | out: lppt=0x21f2528) returned 1 [0156.788] LineTo (hdc=0x39010558, x=1, y=21) returned 1 [0156.788] MoveToEx (in: hdc=0x39010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.788] DeleteObject (ho=0x103006b7) returned 1 [0156.788] GetROP2 (hdc=0x39010558) returned 13 [0156.788] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x23006b9 [0156.788] MoveToEx (in: hdc=0x39010558, x=1, y=21, lppt=0x21f2590 | out: lppt=0x21f2590) returned 1 [0156.788] LineTo (hdc=0x39010558, x=24, y=21) returned 1 [0156.789] MoveToEx (in: hdc=0x39010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.789] GetROP2 (hdc=0x39010558) returned 13 [0156.789] MoveToEx (in: hdc=0x39010558, x=24, y=21, lppt=0x21f25a8 | out: lppt=0x21f25a8) returned 1 [0156.789] LineTo (hdc=0x39010558, x=24, y=0) returned 1 [0156.789] MoveToEx (in: hdc=0x39010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.789] DeleteObject (ho=0x23006b9) returned 1 [0156.789] GdipReleaseDC (graphics=0x1bd51520, hdc=0x39010558) returned 0x0 [0156.789] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0156.789] GdipReleaseDC (graphics=0x1bd51520, hdc=0x39010558) returned 0x0 [0156.789] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0156.789] DeleteDC (hdc=0x39010558) returned 1 [0156.789] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0156.789] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.789] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.789] DispatchMessageW (lpMsg=0x14ef10) [0156.789] BeginPaint (hWnd=0x20034, lpPaint=0x14e5a8) [0156.789] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20034, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.790] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20034, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.790] GetStockObject (i=5) returned 0x1900015 [0156.790] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0156.790] GdipCreateFromHDC (hdc=0x60106b8, graphics=0x14e528) returned 0x0 [0156.790] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0156.790] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0156.790] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0156.790] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd577a0) returned 0x0 [0156.790] GdipIsMatrixIdentity (matrix=0x1bd577a0, result=0x14e5b8) returned 0x0 [0156.790] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888750 [0156.790] GdipGetMatrixElements (matrix=0x1bd577a0, matrixOut=0x1d888750) returned 0x0 [0156.792] LocalFree (hMem=0x1d888750) returned 0x0 [0156.792] GdipDeleteMatrix (matrix=0x1bd577a0) returned 0x0 [0156.792] GdipCreateRegion (region=0x14e550) returned 0x0 [0156.792] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.792] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0156.792] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0156.792] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd9c0dbd) returned 0x0 [0156.792] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.792] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0156.792] GetCurrentObject (hdc=0x60106b8, type=0x1) returned 0x1b00017 [0156.792] GetCurrentObject (hdc=0x60106b8, type=0x2) returned 0x1900010 [0156.792] GetCurrentObject (hdc=0x60106b8, type=0x7) returned 0x60506af [0156.792] GetCurrentObject (hdc=0x60106b8, type=0x6) returned 0x18a0048 [0156.792] GetNearestColor (hdc=0x60106b8, color=0xf0f0f0) returned 0xf0f0f0 [0156.792] GetNearestColor (hdc=0x60106b8, color=0xa0a0a0) returned 0xa0a0a0 [0156.792] GetNearestColor (hdc=0x60106b8, color=0x696969) returned 0x696969 [0156.792] GetNearestColor (hdc=0x60106b8, color=0xa0a0a0) returned 0xa0a0a0 [0156.792] GetNearestColor (hdc=0x60106b8, color=0x0) returned 0x0 [0156.792] GetNearestColor (hdc=0x60106b8, color=0xffffff) returned 0xffffff [0156.792] GetNearestColor (hdc=0x60106b8, color=0xe5e5e5) returned 0xe5e5e5 [0156.793] GetNearestColor (hdc=0x60106b8, color=0xd8d8d8) returned 0xd8d8d8 [0156.793] GetNearestColor (hdc=0x60106b8, color=0x0) returned 0x0 [0156.793] GdipReleaseDC (graphics=0x1bd51520, hdc=0x60106b8) returned 0x0 [0156.793] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.793] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx(\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0156.793] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.793] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f2ee0) returned 0x0 [0156.793] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.793] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.793] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0156.793] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0156.793] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0156.793] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0156.793] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0156.793] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0156.794] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0156.794] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.794] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.794] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.794] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0156.794] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f3010) returned 0x0 [0156.794] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0156.794] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0156.794] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.794] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.794] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.794] GdipMeasureString (graphics=0x1bd57e60, string="8", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0156.795] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.796] GdipDeleteGraphics (graphics=0x1bd57e60) returned 0x0 [0156.796] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.796] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.796] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.796] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0156.796] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.796] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0156.796] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57a20) returned 0x0 [0156.796] GdipIsMatrixIdentity (matrix=0x1bd57a20, result=0x14e128) returned 0x0 [0156.796] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888750 [0156.796] GdipGetMatrixElements (matrix=0x1bd57a20, matrixOut=0x1d888750) returned 0x0 [0156.797] LocalFree (hMem=0x1d888750) returned 0x0 [0156.799] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8884d0 [0156.799] GdipGetMatrixElements (matrix=0x1bd57a20, matrixOut=0x1d8884d0) returned 0x0 [0156.799] LocalFree (hMem=0x1d8884d0) returned 0x0 [0156.799] GdipDeleteMatrix (matrix=0x1bd57a20) returned 0x0 [0156.799] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0156.799] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0156.799] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0156.800] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.800] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0156.800] GetCurrentObject (hdc=0x60106b8, type=0x1) returned 0x1b00017 [0156.800] GetCurrentObject (hdc=0x60106b8, type=0x2) returned 0x1900010 [0156.800] GetCurrentObject (hdc=0x60106b8, type=0x7) returned 0x60506af [0156.800] GetCurrentObject (hdc=0x60106b8, type=0x6) returned 0x18a0048 [0156.800] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x25040554 [0156.800] DeleteObject (ho=0x25040554) returned 1 [0156.800] DeleteObject (ho=0x5804064d) returned 1 [0156.800] OffsetViewportOrgEx (in: hdc=0x60106b8, x=0, y=0, lppt=0x21f33d0 | out: lppt=0x21f33d0) returned 1 [0156.800] GetNearestColor (hdc=0x60106b8, color=0xf0f0f0) returned 0xf0f0f0 [0156.800] CreateSolidBrush (color=0xf0f0f0) returned 0x141006b3 [0156.800] FillRect (hDC=0x60106b8, lprc=0x14e1c8, hbr=0x141006b3) returned 1 [0156.800] DeleteObject (ho=0x141006b3) returned 1 [0156.800] GdipReleaseDC (graphics=0x1bd51520, hdc=0x60106b8) returned 0x0 [0156.800] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0156.801] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.801] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f34d0) returned 0x0 [0156.801] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.801] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.801] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0156.801] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0156.801] GdipDrawString (graphics=0x1bd51520, string="8", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0156.805] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0156.805] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0156.806] GetFocus () returned 0x101f8 [0156.806] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.806] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx%\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0156.806] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.806] GdipCreateRegion (region=0x14e030) returned 0x0 [0156.806] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.806] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0156.806] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57ca0) returned 0x0 [0156.806] GdipIsMatrixIdentity (matrix=0x1bd57ca0, result=0x14e098) returned 0x0 [0156.806] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888410 [0156.806] GdipGetMatrixElements (matrix=0x1bd57ca0, matrixOut=0x1d888410) returned 0x0 [0156.807] LocalFree (hMem=0x1d888410) returned 0x0 [0156.807] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888310 [0156.807] GdipGetMatrixElements (matrix=0x1bd57ca0, matrixOut=0x1d888310) returned 0x0 [0156.808] LocalFree (hMem=0x1d888310) returned 0x0 [0156.808] GdipDeleteMatrix (matrix=0x1bd57ca0) returned 0x0 [0156.808] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0156.808] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0156.808] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0156.808] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.808] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0156.808] GetCurrentObject (hdc=0x60106b8, type=0x1) returned 0x1b00017 [0156.808] GetCurrentObject (hdc=0x60106b8, type=0x2) returned 0x1900010 [0156.808] GetCurrentObject (hdc=0x60106b8, type=0x7) returned 0x60506af [0156.808] GetCurrentObject (hdc=0x60106b8, type=0x6) returned 0x18a0048 [0156.808] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5904064d [0156.808] DeleteObject (ho=0x5904064d) returned 1 [0156.808] DeleteObject (ho=0x26040554) returned 1 [0156.808] OffsetViewportOrgEx (in: hdc=0x60106b8, x=0, y=0, lppt=0x21f38b8 | out: lppt=0x21f38b8) returned 1 [0156.808] GetROP2 (hdc=0x60106b8) returned 13 [0156.808] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x33006b9 [0156.808] MoveToEx (in: hdc=0x60106b8, x=25, y=0, lppt=0x21f3920 | out: lppt=0x21f3920) returned 1 [0156.808] LineTo (hdc=0x60106b8, x=0, y=0) returned 1 [0156.808] MoveToEx (in: hdc=0x60106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.808] GetROP2 (hdc=0x60106b8) returned 13 [0156.808] MoveToEx (in: hdc=0x60106b8, x=0, y=0, lppt=0x21f3938 | out: lppt=0x21f3938) returned 1 [0156.809] LineTo (hdc=0x60106b8, x=0, y=22) returned 1 [0156.809] MoveToEx (in: hdc=0x60106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.809] DeleteObject (ho=0x33006b9) returned 1 [0156.809] GetROP2 (hdc=0x60106b8) returned 13 [0156.809] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x113006b7 [0156.809] MoveToEx (in: hdc=0x60106b8, x=0, y=22, lppt=0x21f39a0 | out: lppt=0x21f39a0) returned 1 [0156.809] LineTo (hdc=0x60106b8, x=25, y=22) returned 1 [0156.809] MoveToEx (in: hdc=0x60106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.809] GetROP2 (hdc=0x60106b8) returned 13 [0156.809] MoveToEx (in: hdc=0x60106b8, x=25, y=22, lppt=0x21f39b8 | out: lppt=0x21f39b8) returned 1 [0156.809] LineTo (hdc=0x60106b8, x=25, y=-1) returned 1 [0156.809] MoveToEx (in: hdc=0x60106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.809] DeleteObject (ho=0x113006b7) returned 1 [0156.809] GetROP2 (hdc=0x60106b8) returned 13 [0156.809] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x43006b9 [0156.809] MoveToEx (in: hdc=0x60106b8, x=24, y=1, lppt=0x21f3a20 | out: lppt=0x21f3a20) returned 1 [0156.809] LineTo (hdc=0x60106b8, x=1, y=1) returned 1 [0156.809] MoveToEx (in: hdc=0x60106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.809] GetROP2 (hdc=0x60106b8) returned 13 [0156.809] MoveToEx (in: hdc=0x60106b8, x=1, y=1, lppt=0x21f3a38 | out: lppt=0x21f3a38) returned 1 [0156.809] LineTo (hdc=0x60106b8, x=1, y=21) returned 1 [0156.810] MoveToEx (in: hdc=0x60106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.810] DeleteObject (ho=0x43006b9) returned 1 [0156.810] GetROP2 (hdc=0x60106b8) returned 13 [0156.810] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x123006b7 [0156.810] MoveToEx (in: hdc=0x60106b8, x=1, y=21, lppt=0x21f3aa0 | out: lppt=0x21f3aa0) returned 1 [0156.810] LineTo (hdc=0x60106b8, x=24, y=21) returned 1 [0156.810] MoveToEx (in: hdc=0x60106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.810] GetROP2 (hdc=0x60106b8) returned 13 [0156.810] MoveToEx (in: hdc=0x60106b8, x=24, y=21, lppt=0x21f3ab8 | out: lppt=0x21f3ab8) returned 1 [0156.810] LineTo (hdc=0x60106b8, x=24, y=0) returned 1 [0156.810] MoveToEx (in: hdc=0x60106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.810] DeleteObject (ho=0x123006b7) returned 1 [0156.810] GdipReleaseDC (graphics=0x1bd51520, hdc=0x60106b8) returned 0x0 [0156.810] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0156.810] GdipReleaseDC (graphics=0x1bd51520, hdc=0x60106b8) returned 0x0 [0156.810] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0156.810] DeleteDC (hdc=0x60106b8) returned 1 [0156.810] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0156.811] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.811] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.811] DispatchMessageW (lpMsg=0x14ef10) [0156.811] BeginPaint (hWnd=0x2004c, lpPaint=0x14e5a8) [0156.811] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x2004c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.811] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x2004c, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.811] GetStockObject (i=5) returned 0x1900015 [0156.811] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0156.811] GdipCreateFromHDC (hdc=0x160106b6, graphics=0x14e528) returned 0x0 [0156.811] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0156.811] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0156.811] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0156.811] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57be0) returned 0x0 [0156.811] GdipIsMatrixIdentity (matrix=0x1bd57be0, result=0x14e5b8) returned 0x0 [0156.812] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888510 [0156.812] GdipGetMatrixElements (matrix=0x1bd57be0, matrixOut=0x1d888510) returned 0x0 [0156.812] LocalFree (hMem=0x1d888510) returned 0x0 [0156.812] GdipDeleteMatrix (matrix=0x1bd57be0) returned 0x0 [0156.812] GdipCreateRegion (region=0x14e550) returned 0x0 [0156.812] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.812] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0156.812] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0156.813] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd990dbd) returned 0x0 [0156.813] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.813] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0156.813] GetCurrentObject (hdc=0x160106b6, type=0x1) returned 0x1b00017 [0156.813] GetCurrentObject (hdc=0x160106b6, type=0x2) returned 0x1900010 [0156.813] GetCurrentObject (hdc=0x160106b6, type=0x7) returned 0x60506af [0156.813] GetCurrentObject (hdc=0x160106b6, type=0x6) returned 0x18a0048 [0156.813] GetNearestColor (hdc=0x160106b6, color=0xf0f0f0) returned 0xf0f0f0 [0156.813] GetNearestColor (hdc=0x160106b6, color=0xa0a0a0) returned 0xa0a0a0 [0156.813] GetNearestColor (hdc=0x160106b6, color=0x696969) returned 0x696969 [0156.813] GetNearestColor (hdc=0x160106b6, color=0xa0a0a0) returned 0xa0a0a0 [0156.813] GetNearestColor (hdc=0x160106b6, color=0x0) returned 0x0 [0156.813] GetNearestColor (hdc=0x160106b6, color=0xffffff) returned 0xffffff [0156.813] GetNearestColor (hdc=0x160106b6, color=0xe5e5e5) returned 0xe5e5e5 [0156.813] GetNearestColor (hdc=0x160106b6, color=0xd8d8d8) returned 0xd8d8d8 [0156.813] GetNearestColor (hdc=0x160106b6, color=0x0) returned 0x0 [0156.813] GdipReleaseDC (graphics=0x1bd51520, hdc=0x160106b6) returned 0x0 [0156.814] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.814] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx=\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0156.814] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.814] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f43f0) returned 0x0 [0156.814] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.814] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.814] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0156.814] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0156.814] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0156.814] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0156.814] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0156.814] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0156.814] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0156.815] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.815] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.815] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.815] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0156.815] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f4520) returned 0x0 [0156.815] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0156.815] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0156.815] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.815] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.815] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.815] GdipMeasureString (graphics=0x1bd57e60, string="c", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0156.815] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.815] GdipDeleteGraphics (graphics=0x1bd57e60) returned 0x0 [0156.815] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.816] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.816] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0156.816] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.816] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0156.816] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57da0) returned 0x0 [0156.816] GdipIsMatrixIdentity (matrix=0x1bd57da0, result=0x14e128) returned 0x0 [0156.816] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888cd0 [0156.816] GdipGetMatrixElements (matrix=0x1bd57da0, matrixOut=0x1d888cd0) returned 0x0 [0156.817] LocalFree (hMem=0x1d888cd0) returned 0x0 [0156.817] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888cd0 [0156.817] GdipGetMatrixElements (matrix=0x1bd57da0, matrixOut=0x1d888cd0) returned 0x0 [0156.817] LocalFree (hMem=0x1d888cd0) returned 0x0 [0156.817] GdipDeleteMatrix (matrix=0x1bd57da0) returned 0x0 [0156.817] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0156.817] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0156.817] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0156.817] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.818] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0156.818] GetCurrentObject (hdc=0x160106b6, type=0x1) returned 0x1b00017 [0156.818] GetCurrentObject (hdc=0x160106b6, type=0x2) returned 0x1900010 [0156.818] GetCurrentObject (hdc=0x160106b6, type=0x7) returned 0x60506af [0156.818] GetCurrentObject (hdc=0x160106b6, type=0x6) returned 0x18a0048 [0156.818] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x27040554 [0156.818] DeleteObject (ho=0x27040554) returned 1 [0156.818] DeleteObject (ho=0x5a04064d) returned 1 [0156.818] OffsetViewportOrgEx (in: hdc=0x160106b6, x=0, y=0, lppt=0x21f48e0 | out: lppt=0x21f48e0) returned 1 [0156.818] GetNearestColor (hdc=0x160106b6, color=0xf0f0f0) returned 0xf0f0f0 [0156.818] CreateSolidBrush (color=0xf0f0f0) returned 0x151006b3 [0156.818] FillRect (hDC=0x160106b6, lprc=0x14e1c8, hbr=0x151006b3) returned 1 [0156.818] DeleteObject (ho=0x151006b3) returned 1 [0156.818] GdipReleaseDC (graphics=0x1bd51520, hdc=0x160106b6) returned 0x0 [0156.818] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.818] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0156.819] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.819] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f49e0) returned 0x0 [0156.819] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.819] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.819] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0156.819] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0156.819] GdipDrawString (graphics=0x1bd51520, string="c", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0156.823] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0156.823] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0156.823] GetFocus () returned 0x101f8 [0156.823] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx;\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0156.824] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.824] GdipCreateRegion (region=0x14e030) returned 0x0 [0156.824] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.824] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0156.824] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57b60) returned 0x0 [0156.824] GdipIsMatrixIdentity (matrix=0x1bd57b60, result=0x14e098) returned 0x0 [0156.824] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888890 [0156.824] GdipGetMatrixElements (matrix=0x1bd57b60, matrixOut=0x1d888890) returned 0x0 [0156.825] LocalFree (hMem=0x1d888890) returned 0x0 [0156.825] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888290 [0156.825] GdipGetMatrixElements (matrix=0x1bd57b60, matrixOut=0x1d888290) returned 0x0 [0156.825] LocalFree (hMem=0x1d888290) returned 0x0 [0156.825] GdipDeleteMatrix (matrix=0x1bd57b60) returned 0x0 [0156.825] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0156.825] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0156.825] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0156.825] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.825] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0156.826] GetCurrentObject (hdc=0x160106b6, type=0x1) returned 0x1b00017 [0156.826] GetCurrentObject (hdc=0x160106b6, type=0x2) returned 0x1900010 [0156.826] GetCurrentObject (hdc=0x160106b6, type=0x7) returned 0x60506af [0156.826] GetCurrentObject (hdc=0x160106b6, type=0x6) returned 0x18a0048 [0156.826] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5b04064d [0156.826] DeleteObject (ho=0x5b04064d) returned 1 [0156.826] DeleteObject (ho=0x28040554) returned 1 [0156.826] OffsetViewportOrgEx (in: hdc=0x160106b6, x=0, y=0, lppt=0x21f4dc8 | out: lppt=0x21f4dc8) returned 1 [0156.826] GetROP2 (hdc=0x160106b6) returned 13 [0156.826] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x133006b7 [0156.826] MoveToEx (in: hdc=0x160106b6, x=25, y=0, lppt=0x21f4e30 | out: lppt=0x21f4e30) returned 1 [0156.826] LineTo (hdc=0x160106b6, x=0, y=0) returned 1 [0156.826] MoveToEx (in: hdc=0x160106b6, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.826] GetROP2 (hdc=0x160106b6) returned 13 [0156.826] MoveToEx (in: hdc=0x160106b6, x=0, y=0, lppt=0x21f4e48 | out: lppt=0x21f4e48) returned 1 [0156.826] LineTo (hdc=0x160106b6, x=0, y=22) returned 1 [0156.826] MoveToEx (in: hdc=0x160106b6, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.826] DeleteObject (ho=0x133006b7) returned 1 [0156.826] GetROP2 (hdc=0x160106b6) returned 13 [0156.826] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x53006b9 [0156.826] MoveToEx (in: hdc=0x160106b6, x=0, y=22, lppt=0x21f4eb0 | out: lppt=0x21f4eb0) returned 1 [0156.826] LineTo (hdc=0x160106b6, x=25, y=22) returned 1 [0156.827] MoveToEx (in: hdc=0x160106b6, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.827] GetROP2 (hdc=0x160106b6) returned 13 [0156.827] MoveToEx (in: hdc=0x160106b6, x=25, y=22, lppt=0x21f4ec8 | out: lppt=0x21f4ec8) returned 1 [0156.827] LineTo (hdc=0x160106b6, x=25, y=-1) returned 1 [0156.827] MoveToEx (in: hdc=0x160106b6, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.827] DeleteObject (ho=0x53006b9) returned 1 [0156.827] GetROP2 (hdc=0x160106b6) returned 13 [0156.827] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x143006b7 [0156.827] MoveToEx (in: hdc=0x160106b6, x=24, y=1, lppt=0x21f4f30 | out: lppt=0x21f4f30) returned 1 [0156.827] LineTo (hdc=0x160106b6, x=1, y=1) returned 1 [0156.827] MoveToEx (in: hdc=0x160106b6, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.827] GetROP2 (hdc=0x160106b6) returned 13 [0156.827] MoveToEx (in: hdc=0x160106b6, x=1, y=1, lppt=0x21f4f48 | out: lppt=0x21f4f48) returned 1 [0156.827] LineTo (hdc=0x160106b6, x=1, y=21) returned 1 [0156.827] MoveToEx (in: hdc=0x160106b6, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.827] DeleteObject (ho=0x143006b7) returned 1 [0156.827] GetROP2 (hdc=0x160106b6) returned 13 [0156.827] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x63006b9 [0156.827] MoveToEx (in: hdc=0x160106b6, x=1, y=21, lppt=0x21f4fb0 | out: lppt=0x21f4fb0) returned 1 [0156.827] LineTo (hdc=0x160106b6, x=24, y=21) returned 1 [0156.827] MoveToEx (in: hdc=0x160106b6, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.828] GetROP2 (hdc=0x160106b6) returned 13 [0156.828] MoveToEx (in: hdc=0x160106b6, x=24, y=21, lppt=0x21f4fc8 | out: lppt=0x21f4fc8) returned 1 [0156.828] LineTo (hdc=0x160106b6, x=24, y=0) returned 1 [0156.828] MoveToEx (in: hdc=0x160106b6, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.828] DeleteObject (ho=0x63006b9) returned 1 [0156.828] GdipReleaseDC (graphics=0x1bd51520, hdc=0x160106b6) returned 0x0 [0156.828] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0156.828] GdipReleaseDC (graphics=0x1bd51520, hdc=0x160106b6) returned 0x0 [0156.828] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0156.828] DeleteDC (hdc=0x160106b6) returned 1 [0156.828] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0156.830] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.830] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.830] DispatchMessageW (lpMsg=0x14ef10) [0156.830] BeginPaint (hWnd=0x101e4, lpPaint=0x14e5a8) [0156.831] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.831] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e4, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.831] GetStockObject (i=5) returned 0x1900015 [0156.831] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0156.832] GdipCreateFromHDC (hdc=0x42010558, graphics=0x14e528) returned 0x0 [0156.832] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0156.832] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0156.832] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0156.832] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57ba0) returned 0x0 [0156.832] GdipIsMatrixIdentity (matrix=0x1bd57ba0, result=0x14e5b8) returned 0x0 [0156.832] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8882d0 [0156.832] GdipGetMatrixElements (matrix=0x1bd57ba0, matrixOut=0x1d8882d0) returned 0x0 [0156.833] LocalFree (hMem=0x1d8882d0) returned 0x0 [0156.833] GdipDeleteMatrix (matrix=0x1bd57ba0) returned 0x0 [0156.833] GdipCreateRegion (region=0x14e550) returned 0x0 [0156.833] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.833] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0156.833] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0156.833] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd960dbd) returned 0x0 [0156.833] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.834] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0156.834] GetCurrentObject (hdc=0x42010558, type=0x1) returned 0x1b00017 [0156.834] GetCurrentObject (hdc=0x42010558, type=0x2) returned 0x1900010 [0156.834] GetCurrentObject (hdc=0x42010558, type=0x7) returned 0x60506af [0156.834] GetCurrentObject (hdc=0x42010558, type=0x6) returned 0x18a0048 [0156.834] GetNearestColor (hdc=0x42010558, color=0xf0f0f0) returned 0xf0f0f0 [0156.834] GetNearestColor (hdc=0x42010558, color=0xa0a0a0) returned 0xa0a0a0 [0156.834] GetNearestColor (hdc=0x42010558, color=0x696969) returned 0x696969 [0156.834] GetNearestColor (hdc=0x42010558, color=0xa0a0a0) returned 0xa0a0a0 [0156.834] GetNearestColor (hdc=0x42010558, color=0x0) returned 0x0 [0156.834] GetNearestColor (hdc=0x42010558, color=0xffffff) returned 0xffffff [0156.834] GetNearestColor (hdc=0x42010558, color=0xe5e5e5) returned 0xe5e5e5 [0156.834] GetNearestColor (hdc=0x42010558, color=0xd8d8d8) returned 0xd8d8d8 [0156.834] GetNearestColor (hdc=0x42010558, color=0x0) returned 0x0 [0156.834] GdipReleaseDC (graphics=0x1bd51520, hdc=0x42010558) returned 0x0 [0156.834] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExR\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0156.835] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.835] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f5900) returned 0x0 [0156.835] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.835] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.835] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0156.835] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0156.835] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0156.835] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0156.835] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0156.835] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0156.835] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0156.835] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.836] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.836] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0156.836] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f5a30) returned 0x0 [0156.836] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0156.836] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0156.836] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.836] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.836] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.836] GdipMeasureString (graphics=0x1bd57e60, string="+", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0156.836] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.836] GdipDeleteGraphics (graphics=0x1bd57e60) returned 0x0 [0156.836] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.836] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.837] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.837] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0156.837] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.837] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0156.837] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57a20) returned 0x0 [0156.837] GdipIsMatrixIdentity (matrix=0x1bd57a20, result=0x14e128) returned 0x0 [0156.837] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8881d0 [0156.837] GdipGetMatrixElements (matrix=0x1bd57a20, matrixOut=0x1d8881d0) returned 0x0 [0156.837] LocalFree (hMem=0x1d8881d0) returned 0x0 [0156.837] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0156.838] GdipGetMatrixElements (matrix=0x1bd57a20, matrixOut=0x1d888150) returned 0x0 [0156.838] LocalFree (hMem=0x1d888150) returned 0x0 [0156.838] GdipDeleteMatrix (matrix=0x1bd57a20) returned 0x0 [0156.838] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0156.838] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0156.838] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0156.838] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.838] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0156.838] GetCurrentObject (hdc=0x42010558, type=0x1) returned 0x1b00017 [0156.838] GetCurrentObject (hdc=0x42010558, type=0x2) returned 0x1900010 [0156.838] GetCurrentObject (hdc=0x42010558, type=0x7) returned 0x60506af [0156.839] GetCurrentObject (hdc=0x42010558, type=0x6) returned 0x18a0048 [0156.839] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x29040554 [0156.839] DeleteObject (ho=0x29040554) returned 1 [0156.839] DeleteObject (ho=0x5c04064d) returned 1 [0156.839] OffsetViewportOrgEx (in: hdc=0x42010558, x=0, y=0, lppt=0x21f5df0 | out: lppt=0x21f5df0) returned 1 [0156.839] GetNearestColor (hdc=0x42010558, color=0xf0f0f0) returned 0xf0f0f0 [0156.839] CreateSolidBrush (color=0xf0f0f0) returned 0x161006b3 [0156.839] FillRect (hDC=0x42010558, lprc=0x14e1c8, hbr=0x161006b3) returned 1 [0156.839] DeleteObject (ho=0x161006b3) returned 1 [0156.839] GdipReleaseDC (graphics=0x1bd51520, hdc=0x42010558) returned 0x0 [0156.839] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.839] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0156.839] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.839] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f5ef0) returned 0x0 [0156.839] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.839] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.840] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0156.840] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0156.840] GdipDrawString (graphics=0x1bd51520, string="+", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0156.844] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0156.844] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0156.844] GetFocus () returned 0x101f8 [0156.845] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExP\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0156.845] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.845] GdipCreateRegion (region=0x14e030) returned 0x0 [0156.845] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.845] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0156.845] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57a60) returned 0x0 [0156.845] GdipIsMatrixIdentity (matrix=0x1bd57a60, result=0x14e098) returned 0x0 [0156.845] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0156.845] GdipGetMatrixElements (matrix=0x1bd57a60, matrixOut=0x1d888150) returned 0x0 [0156.846] LocalFree (hMem=0x1d888150) returned 0x0 [0156.846] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8884d0 [0156.846] GdipGetMatrixElements (matrix=0x1bd57a60, matrixOut=0x1d8884d0) returned 0x0 [0156.846] LocalFree (hMem=0x1d8884d0) returned 0x0 [0156.846] GdipDeleteMatrix (matrix=0x1bd57a60) returned 0x0 [0156.846] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0156.846] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0156.846] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0156.847] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.847] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0156.847] GetCurrentObject (hdc=0x42010558, type=0x1) returned 0x1b00017 [0156.847] GetCurrentObject (hdc=0x42010558, type=0x2) returned 0x1900010 [0156.847] GetCurrentObject (hdc=0x42010558, type=0x7) returned 0x60506af [0156.847] GetCurrentObject (hdc=0x42010558, type=0x6) returned 0x18a0048 [0156.847] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5d04064d [0156.847] DeleteObject (ho=0x5d04064d) returned 1 [0156.847] DeleteObject (ho=0x2a040554) returned 1 [0156.847] OffsetViewportOrgEx (in: hdc=0x42010558, x=0, y=0, lppt=0x21f62d8 | out: lppt=0x21f62d8) returned 1 [0156.847] GetROP2 (hdc=0x42010558) returned 13 [0156.847] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x73006b9 [0156.847] MoveToEx (in: hdc=0x42010558, x=25, y=0, lppt=0x21f6340 | out: lppt=0x21f6340) returned 1 [0156.847] LineTo (hdc=0x42010558, x=0, y=0) returned 1 [0156.847] MoveToEx (in: hdc=0x42010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.847] GetROP2 (hdc=0x42010558) returned 13 [0156.847] MoveToEx (in: hdc=0x42010558, x=0, y=0, lppt=0x21f6358 | out: lppt=0x21f6358) returned 1 [0156.847] LineTo (hdc=0x42010558, x=0, y=22) returned 1 [0156.847] MoveToEx (in: hdc=0x42010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.847] DeleteObject (ho=0x73006b9) returned 1 [0156.847] GetROP2 (hdc=0x42010558) returned 13 [0156.847] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x153006b7 [0156.848] MoveToEx (in: hdc=0x42010558, x=0, y=22, lppt=0x21f63c0 | out: lppt=0x21f63c0) returned 1 [0156.848] LineTo (hdc=0x42010558, x=25, y=22) returned 1 [0156.848] MoveToEx (in: hdc=0x42010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.848] GetROP2 (hdc=0x42010558) returned 13 [0156.848] MoveToEx (in: hdc=0x42010558, x=25, y=22, lppt=0x21f63d8 | out: lppt=0x21f63d8) returned 1 [0156.848] LineTo (hdc=0x42010558, x=25, y=-1) returned 1 [0156.848] MoveToEx (in: hdc=0x42010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.848] DeleteObject (ho=0x153006b7) returned 1 [0156.848] GetROP2 (hdc=0x42010558) returned 13 [0156.848] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x83006b9 [0156.848] MoveToEx (in: hdc=0x42010558, x=24, y=1, lppt=0x21f6440 | out: lppt=0x21f6440) returned 1 [0156.848] LineTo (hdc=0x42010558, x=1, y=1) returned 1 [0156.848] MoveToEx (in: hdc=0x42010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.848] GetROP2 (hdc=0x42010558) returned 13 [0156.848] MoveToEx (in: hdc=0x42010558, x=1, y=1, lppt=0x21f6458 | out: lppt=0x21f6458) returned 1 [0156.848] LineTo (hdc=0x42010558, x=1, y=21) returned 1 [0156.848] MoveToEx (in: hdc=0x42010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.848] DeleteObject (ho=0x83006b9) returned 1 [0156.848] GetROP2 (hdc=0x42010558) returned 13 [0156.848] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x163006b7 [0156.848] MoveToEx (in: hdc=0x42010558, x=1, y=21, lppt=0x21f64c0 | out: lppt=0x21f64c0) returned 1 [0156.849] LineTo (hdc=0x42010558, x=24, y=21) returned 1 [0156.849] MoveToEx (in: hdc=0x42010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.849] GetROP2 (hdc=0x42010558) returned 13 [0156.849] MoveToEx (in: hdc=0x42010558, x=24, y=21, lppt=0x21f64d8 | out: lppt=0x21f64d8) returned 1 [0156.849] LineTo (hdc=0x42010558, x=24, y=0) returned 1 [0156.849] MoveToEx (in: hdc=0x42010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.849] DeleteObject (ho=0x163006b7) returned 1 [0156.849] GdipReleaseDC (graphics=0x1bd51520, hdc=0x42010558) returned 0x0 [0156.849] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0156.849] GdipReleaseDC (graphics=0x1bd51520, hdc=0x42010558) returned 0x0 [0156.849] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0156.849] DeleteDC (hdc=0x42010558) returned 1 [0156.849] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0156.849] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.849] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.849] DispatchMessageW (lpMsg=0x14ef10) [0156.849] BeginPaint (hWnd=0x101e6, lpPaint=0x14e5a8) [0156.850] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.850] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e6, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.850] GetStockObject (i=5) returned 0x1900015 [0156.850] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0156.850] GdipCreateFromHDC (hdc=0xf0106b8, graphics=0x14e528) returned 0x0 [0156.850] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0156.850] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0156.850] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0156.850] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd576a0) returned 0x0 [0156.850] GdipIsMatrixIdentity (matrix=0x1bd576a0, result=0x14e5b8) returned 0x0 [0156.850] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888290 [0156.850] GdipGetMatrixElements (matrix=0x1bd576a0, matrixOut=0x1d888290) returned 0x0 [0156.851] LocalFree (hMem=0x1d888290) returned 0x0 [0156.851] GdipDeleteMatrix (matrix=0x1bd576a0) returned 0x0 [0156.851] GdipCreateRegion (region=0x14e550) returned 0x0 [0156.851] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.851] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0156.851] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0156.851] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd930dbd) returned 0x0 [0156.851] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.851] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0156.851] GetCurrentObject (hdc=0xf0106b8, type=0x1) returned 0x1b00017 [0156.851] GetCurrentObject (hdc=0xf0106b8, type=0x2) returned 0x1900010 [0156.851] GetCurrentObject (hdc=0xf0106b8, type=0x7) returned 0x60506af [0156.851] GetCurrentObject (hdc=0xf0106b8, type=0x6) returned 0x18a0048 [0156.852] GetNearestColor (hdc=0xf0106b8, color=0xf0f0f0) returned 0xf0f0f0 [0156.852] GetNearestColor (hdc=0xf0106b8, color=0xa0a0a0) returned 0xa0a0a0 [0156.852] GetNearestColor (hdc=0xf0106b8, color=0x696969) returned 0x696969 [0156.852] GetNearestColor (hdc=0xf0106b8, color=0xa0a0a0) returned 0xa0a0a0 [0156.852] GetNearestColor (hdc=0xf0106b8, color=0x0) returned 0x0 [0156.852] GetNearestColor (hdc=0xf0106b8, color=0xffffff) returned 0xffffff [0156.852] GetNearestColor (hdc=0xf0106b8, color=0xe5e5e5) returned 0xe5e5e5 [0156.852] GetNearestColor (hdc=0xf0106b8, color=0xd8d8d8) returned 0xd8d8d8 [0156.852] GetNearestColor (hdc=0xf0106b8, color=0x0) returned 0x0 [0156.852] GdipReleaseDC (graphics=0x1bd51520, hdc=0xf0106b8) returned 0x0 [0156.852] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExg\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0156.852] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.853] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f6e10) returned 0x0 [0156.853] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.853] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.853] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0156.853] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0156.853] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0156.853] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0156.853] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0156.853] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0156.853] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0156.853] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.853] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.853] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0156.854] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f6f40) returned 0x0 [0156.854] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0156.854] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0156.854] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.854] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.854] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.854] GdipMeasureString (graphics=0x1bd57e60, string="7", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0156.854] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.854] GdipDeleteGraphics (graphics=0x1bd57e60) returned 0x0 [0156.854] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.854] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.854] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0156.854] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.854] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0156.855] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57960) returned 0x0 [0156.855] GdipIsMatrixIdentity (matrix=0x1bd57960, result=0x14e128) returned 0x0 [0156.855] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888bd0 [0156.855] GdipGetMatrixElements (matrix=0x1bd57960, matrixOut=0x1d888bd0) returned 0x0 [0156.855] LocalFree (hMem=0x1d888bd0) returned 0x0 [0156.855] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888d50 [0156.855] GdipGetMatrixElements (matrix=0x1bd57960, matrixOut=0x1d888d50) returned 0x0 [0156.856] LocalFree (hMem=0x1d888d50) returned 0x0 [0156.856] GdipDeleteMatrix (matrix=0x1bd57960) returned 0x0 [0156.856] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0156.856] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0156.856] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0156.856] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.856] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0156.856] GetCurrentObject (hdc=0xf0106b8, type=0x1) returned 0x1b00017 [0156.856] GetCurrentObject (hdc=0xf0106b8, type=0x2) returned 0x1900010 [0156.856] GetCurrentObject (hdc=0xf0106b8, type=0x7) returned 0x60506af [0156.856] GetCurrentObject (hdc=0xf0106b8, type=0x6) returned 0x18a0048 [0156.856] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2b040554 [0156.856] DeleteObject (ho=0x2b040554) returned 1 [0156.856] DeleteObject (ho=0x5e04064d) returned 1 [0156.856] OffsetViewportOrgEx (in: hdc=0xf0106b8, x=0, y=0, lppt=0x21f7300 | out: lppt=0x21f7300) returned 1 [0156.856] GetNearestColor (hdc=0xf0106b8, color=0xf0f0f0) returned 0xf0f0f0 [0156.857] CreateSolidBrush (color=0xf0f0f0) returned 0x171006b3 [0156.857] FillRect (hDC=0xf0106b8, lprc=0x14e1c8, hbr=0x171006b3) returned 1 [0156.857] DeleteObject (ho=0x171006b3) returned 1 [0156.857] GdipReleaseDC (graphics=0x1bd51520, hdc=0xf0106b8) returned 0x0 [0156.857] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0156.857] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.857] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f7400) returned 0x0 [0156.857] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.857] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.857] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0156.857] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0156.857] GdipDrawString (graphics=0x1bd51520, string="7", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0156.864] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0156.864] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0156.864] GetFocus () returned 0x101f8 [0156.864] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExe\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0156.864] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.864] GdipCreateRegion (region=0x14e030) returned 0x0 [0156.864] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.864] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0156.864] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57b20) returned 0x0 [0156.864] GdipIsMatrixIdentity (matrix=0x1bd57b20, result=0x14e098) returned 0x0 [0156.864] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0156.864] GdipGetMatrixElements (matrix=0x1bd57b20, matrixOut=0x1d888150) returned 0x0 [0156.865] LocalFree (hMem=0x1d888150) returned 0x0 [0156.865] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888350 [0156.865] GdipGetMatrixElements (matrix=0x1bd57b20, matrixOut=0x1d888350) returned 0x0 [0156.866] LocalFree (hMem=0x1d888350) returned 0x0 [0156.866] GdipDeleteMatrix (matrix=0x1bd57b20) returned 0x0 [0156.866] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0156.866] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0156.866] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0156.866] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.866] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0156.866] GetCurrentObject (hdc=0xf0106b8, type=0x1) returned 0x1b00017 [0156.866] GetCurrentObject (hdc=0xf0106b8, type=0x2) returned 0x1900010 [0156.866] GetCurrentObject (hdc=0xf0106b8, type=0x7) returned 0x60506af [0156.866] GetCurrentObject (hdc=0xf0106b8, type=0x6) returned 0x18a0048 [0156.866] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5f04064d [0156.866] DeleteObject (ho=0x5f04064d) returned 1 [0156.866] DeleteObject (ho=0x2c040554) returned 1 [0156.866] OffsetViewportOrgEx (in: hdc=0xf0106b8, x=0, y=0, lppt=0x21f77e8 | out: lppt=0x21f77e8) returned 1 [0156.866] GetROP2 (hdc=0xf0106b8) returned 13 [0156.866] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x173006b7 [0156.866] MoveToEx (in: hdc=0xf0106b8, x=25, y=0, lppt=0x21f7850 | out: lppt=0x21f7850) returned 1 [0156.866] LineTo (hdc=0xf0106b8, x=0, y=0) returned 1 [0156.866] MoveToEx (in: hdc=0xf0106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.866] GetROP2 (hdc=0xf0106b8) returned 13 [0156.866] MoveToEx (in: hdc=0xf0106b8, x=0, y=0, lppt=0x21f7868 | out: lppt=0x21f7868) returned 1 [0156.867] LineTo (hdc=0xf0106b8, x=0, y=22) returned 1 [0156.867] MoveToEx (in: hdc=0xf0106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.867] DeleteObject (ho=0x173006b7) returned 1 [0156.867] GetROP2 (hdc=0xf0106b8) returned 13 [0156.867] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x93006b9 [0156.867] MoveToEx (in: hdc=0xf0106b8, x=0, y=22, lppt=0x21f78d0 | out: lppt=0x21f78d0) returned 1 [0156.867] LineTo (hdc=0xf0106b8, x=25, y=22) returned 1 [0156.867] MoveToEx (in: hdc=0xf0106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.867] GetROP2 (hdc=0xf0106b8) returned 13 [0156.867] MoveToEx (in: hdc=0xf0106b8, x=25, y=22, lppt=0x21f78e8 | out: lppt=0x21f78e8) returned 1 [0156.867] LineTo (hdc=0xf0106b8, x=25, y=-1) returned 1 [0156.867] MoveToEx (in: hdc=0xf0106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.867] DeleteObject (ho=0x93006b9) returned 1 [0156.867] GetROP2 (hdc=0xf0106b8) returned 13 [0156.867] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x183006b7 [0156.867] MoveToEx (in: hdc=0xf0106b8, x=24, y=1, lppt=0x21f7950 | out: lppt=0x21f7950) returned 1 [0156.867] LineTo (hdc=0xf0106b8, x=1, y=1) returned 1 [0156.867] MoveToEx (in: hdc=0xf0106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.867] GetROP2 (hdc=0xf0106b8) returned 13 [0156.867] MoveToEx (in: hdc=0xf0106b8, x=1, y=1, lppt=0x21f7968 | out: lppt=0x21f7968) returned 1 [0156.867] LineTo (hdc=0xf0106b8, x=1, y=21) returned 1 [0156.867] MoveToEx (in: hdc=0xf0106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.868] DeleteObject (ho=0x183006b7) returned 1 [0156.868] GetROP2 (hdc=0xf0106b8) returned 13 [0156.868] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xa3006b9 [0156.868] MoveToEx (in: hdc=0xf0106b8, x=1, y=21, lppt=0x21f79d0 | out: lppt=0x21f79d0) returned 1 [0156.868] LineTo (hdc=0xf0106b8, x=24, y=21) returned 1 [0156.868] MoveToEx (in: hdc=0xf0106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.868] GetROP2 (hdc=0xf0106b8) returned 13 [0156.868] MoveToEx (in: hdc=0xf0106b8, x=24, y=21, lppt=0x21f79e8 | out: lppt=0x21f79e8) returned 1 [0156.868] LineTo (hdc=0xf0106b8, x=24, y=0) returned 1 [0156.868] MoveToEx (in: hdc=0xf0106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.868] DeleteObject (ho=0xa3006b9) returned 1 [0156.868] GdipReleaseDC (graphics=0x1bd51520, hdc=0xf0106b8) returned 0x0 [0156.868] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0156.868] GdipReleaseDC (graphics=0x1bd51520, hdc=0xf0106b8) returned 0x0 [0156.868] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0156.868] DeleteDC (hdc=0xf0106b8) returned 1 [0156.868] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0156.869] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.869] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.869] DispatchMessageW (lpMsg=0x14ef10) [0156.869] BeginPaint (hWnd=0x101e8, lpPaint=0x14e5a8) [0156.869] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.869] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e8, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.869] GetStockObject (i=5) returned 0x1900015 [0156.869] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0156.869] GdipCreateFromHDC (hdc=0x1f0106b6, graphics=0x14e528) returned 0x0 [0156.869] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0156.869] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0156.869] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0156.869] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57960) returned 0x0 [0156.870] GdipIsMatrixIdentity (matrix=0x1bd57960, result=0x14e5b8) returned 0x0 [0156.870] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888ad0 [0156.870] GdipGetMatrixElements (matrix=0x1bd57960, matrixOut=0x1d888ad0) returned 0x0 [0156.870] LocalFree (hMem=0x1d888ad0) returned 0x0 [0156.870] GdipDeleteMatrix (matrix=0x1bd57960) returned 0x0 [0156.870] GdipCreateRegion (region=0x14e550) returned 0x0 [0156.870] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.870] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0156.870] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0156.870] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd900dbd) returned 0x0 [0156.870] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.871] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0156.871] GetCurrentObject (hdc=0x1f0106b6, type=0x1) returned 0x1b00017 [0156.871] GetCurrentObject (hdc=0x1f0106b6, type=0x2) returned 0x1900010 [0156.871] GetCurrentObject (hdc=0x1f0106b6, type=0x7) returned 0x60506af [0156.871] GetCurrentObject (hdc=0x1f0106b6, type=0x6) returned 0x18a0048 [0156.871] GetNearestColor (hdc=0x1f0106b6, color=0xf0f0f0) returned 0xf0f0f0 [0156.871] GetNearestColor (hdc=0x1f0106b6, color=0xa0a0a0) returned 0xa0a0a0 [0156.871] GetNearestColor (hdc=0x1f0106b6, color=0x696969) returned 0x696969 [0156.871] GetNearestColor (hdc=0x1f0106b6, color=0xa0a0a0) returned 0xa0a0a0 [0156.871] GetNearestColor (hdc=0x1f0106b6, color=0x0) returned 0x0 [0156.871] GetNearestColor (hdc=0x1f0106b6, color=0xffffff) returned 0xffffff [0156.871] GetNearestColor (hdc=0x1f0106b6, color=0xe5e5e5) returned 0xe5e5e5 [0156.871] GetNearestColor (hdc=0x1f0106b6, color=0xd8d8d8) returned 0xd8d8d8 [0156.871] GetNearestColor (hdc=0x1f0106b6, color=0x0) returned 0x0 [0156.871] GdipReleaseDC (graphics=0x1bd51520, hdc=0x1f0106b6) returned 0x0 [0156.871] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx}\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0156.872] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.872] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f8320) returned 0x0 [0156.872] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.872] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.872] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0156.872] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0156.872] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0156.872] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0156.872] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0156.872] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0156.872] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0156.872] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.873] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.873] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0156.873] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f8450) returned 0x0 [0156.873] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0156.873] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0156.873] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.873] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.873] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.873] GdipMeasureString (graphics=0x1bd57e60, string="0", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0156.873] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.873] GdipDeleteGraphics (graphics=0x1bd57e60) returned 0x0 [0156.873] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.874] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.874] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0156.874] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.874] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0156.874] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57ae0) returned 0x0 [0156.874] GdipIsMatrixIdentity (matrix=0x1bd57ae0, result=0x14e128) returned 0x0 [0156.874] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888b50 [0156.874] GdipGetMatrixElements (matrix=0x1bd57ae0, matrixOut=0x1d888b50) returned 0x0 [0156.875] LocalFree (hMem=0x1d888b50) returned 0x0 [0156.875] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888310 [0156.875] GdipGetMatrixElements (matrix=0x1bd57ae0, matrixOut=0x1d888310) returned 0x0 [0156.875] LocalFree (hMem=0x1d888310) returned 0x0 [0156.877] GdipDeleteMatrix (matrix=0x1bd57ae0) returned 0x0 [0156.877] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0156.877] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0156.877] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0156.877] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.877] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0156.877] GetCurrentObject (hdc=0x1f0106b6, type=0x1) returned 0x1b00017 [0156.877] GetCurrentObject (hdc=0x1f0106b6, type=0x2) returned 0x1900010 [0156.877] GetCurrentObject (hdc=0x1f0106b6, type=0x7) returned 0x60506af [0156.877] GetCurrentObject (hdc=0x1f0106b6, type=0x6) returned 0x18a0048 [0156.877] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2d040554 [0156.878] DeleteObject (ho=0x2d040554) returned 1 [0156.878] DeleteObject (ho=0x6004064d) returned 1 [0156.878] OffsetViewportOrgEx (in: hdc=0x1f0106b6, x=0, y=0, lppt=0x21f8810 | out: lppt=0x21f8810) returned 1 [0156.878] GetNearestColor (hdc=0x1f0106b6, color=0xf0f0f0) returned 0xf0f0f0 [0156.878] CreateSolidBrush (color=0xf0f0f0) returned 0x181006b3 [0156.878] FillRect (hDC=0x1f0106b6, lprc=0x14e1c8, hbr=0x181006b3) returned 1 [0156.878] DeleteObject (ho=0x181006b3) returned 1 [0156.878] GdipReleaseDC (graphics=0x1bd51520, hdc=0x1f0106b6) returned 0x0 [0156.878] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0156.878] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.878] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f8910) returned 0x0 [0156.878] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.878] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.878] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0156.879] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0156.879] GdipDrawString (graphics=0x1bd51520, string="0", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0156.883] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0156.883] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0156.883] GetFocus () returned 0x101f8 [0156.883] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExz\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0156.883] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.883] GdipCreateRegion (region=0x14e030) returned 0x0 [0156.884] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.884] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0156.884] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57820) returned 0x0 [0156.884] GdipIsMatrixIdentity (matrix=0x1bd57820, result=0x14e098) returned 0x0 [0156.884] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888890 [0156.884] GdipGetMatrixElements (matrix=0x1bd57820, matrixOut=0x1d888890) returned 0x0 [0156.884] LocalFree (hMem=0x1d888890) returned 0x0 [0156.884] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888850 [0156.884] GdipGetMatrixElements (matrix=0x1bd57820, matrixOut=0x1d888850) returned 0x0 [0156.885] LocalFree (hMem=0x1d888850) returned 0x0 [0156.885] GdipDeleteMatrix (matrix=0x1bd57820) returned 0x0 [0156.885] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0156.885] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0156.885] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0156.885] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.885] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0156.885] GetCurrentObject (hdc=0x1f0106b6, type=0x1) returned 0x1b00017 [0156.885] GetCurrentObject (hdc=0x1f0106b6, type=0x2) returned 0x1900010 [0156.885] GetCurrentObject (hdc=0x1f0106b6, type=0x7) returned 0x60506af [0156.885] GetCurrentObject (hdc=0x1f0106b6, type=0x6) returned 0x18a0048 [0156.885] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6104064d [0156.886] DeleteObject (ho=0x6104064d) returned 1 [0156.886] DeleteObject (ho=0x2e040554) returned 1 [0156.886] OffsetViewportOrgEx (in: hdc=0x1f0106b6, x=0, y=0, lppt=0x21f8cf8 | out: lppt=0x21f8cf8) returned 1 [0156.886] GetROP2 (hdc=0x1f0106b6) returned 13 [0156.886] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0xb3006b9 [0156.886] MoveToEx (in: hdc=0x1f0106b6, x=25, y=0, lppt=0x21f8d60 | out: lppt=0x21f8d60) returned 1 [0156.886] LineTo (hdc=0x1f0106b6, x=0, y=0) returned 1 [0156.886] MoveToEx (in: hdc=0x1f0106b6, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.886] GetROP2 (hdc=0x1f0106b6) returned 13 [0156.886] MoveToEx (in: hdc=0x1f0106b6, x=0, y=0, lppt=0x21f8d78 | out: lppt=0x21f8d78) returned 1 [0156.886] LineTo (hdc=0x1f0106b6, x=0, y=22) returned 1 [0156.886] MoveToEx (in: hdc=0x1f0106b6, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.886] DeleteObject (ho=0xb3006b9) returned 1 [0156.886] GetROP2 (hdc=0x1f0106b6) returned 13 [0156.886] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x193006b7 [0156.886] MoveToEx (in: hdc=0x1f0106b6, x=0, y=22, lppt=0x21f8de0 | out: lppt=0x21f8de0) returned 1 [0156.886] LineTo (hdc=0x1f0106b6, x=25, y=22) returned 1 [0156.886] MoveToEx (in: hdc=0x1f0106b6, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.886] GetROP2 (hdc=0x1f0106b6) returned 13 [0156.886] MoveToEx (in: hdc=0x1f0106b6, x=25, y=22, lppt=0x21f8df8 | out: lppt=0x21f8df8) returned 1 [0156.886] LineTo (hdc=0x1f0106b6, x=25, y=-1) returned 1 [0156.886] MoveToEx (in: hdc=0x1f0106b6, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.887] DeleteObject (ho=0x193006b7) returned 1 [0156.887] GetROP2 (hdc=0x1f0106b6) returned 13 [0156.887] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xc3006b9 [0156.887] MoveToEx (in: hdc=0x1f0106b6, x=24, y=1, lppt=0x21f8e60 | out: lppt=0x21f8e60) returned 1 [0156.887] LineTo (hdc=0x1f0106b6, x=1, y=1) returned 1 [0156.887] MoveToEx (in: hdc=0x1f0106b6, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.887] GetROP2 (hdc=0x1f0106b6) returned 13 [0156.887] MoveToEx (in: hdc=0x1f0106b6, x=1, y=1, lppt=0x21f8e78 | out: lppt=0x21f8e78) returned 1 [0156.887] LineTo (hdc=0x1f0106b6, x=1, y=21) returned 1 [0156.887] MoveToEx (in: hdc=0x1f0106b6, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.887] DeleteObject (ho=0xc3006b9) returned 1 [0156.887] GetROP2 (hdc=0x1f0106b6) returned 13 [0156.887] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x1a3006b7 [0156.887] MoveToEx (in: hdc=0x1f0106b6, x=1, y=21, lppt=0x21f8ee0 | out: lppt=0x21f8ee0) returned 1 [0156.887] LineTo (hdc=0x1f0106b6, x=24, y=21) returned 1 [0156.887] MoveToEx (in: hdc=0x1f0106b6, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.887] GetROP2 (hdc=0x1f0106b6) returned 13 [0156.887] MoveToEx (in: hdc=0x1f0106b6, x=24, y=21, lppt=0x21f8ef8 | out: lppt=0x21f8ef8) returned 1 [0156.887] LineTo (hdc=0x1f0106b6, x=24, y=0) returned 1 [0156.887] MoveToEx (in: hdc=0x1f0106b6, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.887] DeleteObject (ho=0x1a3006b7) returned 1 [0156.887] GdipReleaseDC (graphics=0x1bd51520, hdc=0x1f0106b6) returned 0x0 [0156.887] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0156.888] GdipReleaseDC (graphics=0x1bd51520, hdc=0x1f0106b6) returned 0x0 [0156.888] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0156.888] DeleteDC (hdc=0x1f0106b6) returned 1 [0156.888] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0156.888] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.888] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.888] DispatchMessageW (lpMsg=0x14ef10) [0156.888] BeginPaint (hWnd=0x101ea, lpPaint=0x14e5a8) [0156.888] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.888] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ea, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.888] GetStockObject (i=5) returned 0x1900015 [0156.889] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0156.889] GdipCreateFromHDC (hdc=0x4b010558, graphics=0x14e528) returned 0x0 [0156.889] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0156.889] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0156.889] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0156.889] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57d20) returned 0x0 [0156.889] GdipIsMatrixIdentity (matrix=0x1bd57d20, result=0x14e5b8) returned 0x0 [0156.889] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888610 [0156.889] GdipGetMatrixElements (matrix=0x1bd57d20, matrixOut=0x1d888610) returned 0x0 [0156.890] LocalFree (hMem=0x1d888610) returned 0x0 [0156.890] GdipDeleteMatrix (matrix=0x1bd57d20) returned 0x0 [0156.890] GdipCreateRegion (region=0x14e550) returned 0x0 [0156.890] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.890] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0156.890] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0156.890] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd8d0dbd) returned 0x0 [0156.890] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.890] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0156.890] GetCurrentObject (hdc=0x4b010558, type=0x1) returned 0x1b00017 [0156.890] GetCurrentObject (hdc=0x4b010558, type=0x2) returned 0x1900010 [0156.890] GetCurrentObject (hdc=0x4b010558, type=0x7) returned 0x60506af [0156.890] GetCurrentObject (hdc=0x4b010558, type=0x6) returned 0x18a0048 [0156.890] GetNearestColor (hdc=0x4b010558, color=0xf0f0f0) returned 0xf0f0f0 [0156.890] GetNearestColor (hdc=0x4b010558, color=0xa0a0a0) returned 0xa0a0a0 [0156.890] GetNearestColor (hdc=0x4b010558, color=0x696969) returned 0x696969 [0156.890] GetNearestColor (hdc=0x4b010558, color=0xa0a0a0) returned 0xa0a0a0 [0156.890] GetNearestColor (hdc=0x4b010558, color=0x0) returned 0x0 [0156.890] GetNearestColor (hdc=0x4b010558, color=0xffffff) returned 0xffffff [0156.891] GetNearestColor (hdc=0x4b010558, color=0xe5e5e5) returned 0xe5e5e5 [0156.891] GetNearestColor (hdc=0x4b010558, color=0xd8d8d8) returned 0xd8d8d8 [0156.931] GetNearestColor (hdc=0x4b010558, color=0x0) returned 0x0 [0156.931] GdipReleaseDC (graphics=0x1bd51520, hdc=0x4b010558) returned 0x0 [0156.931] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x92\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0156.931] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.931] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f9830) returned 0x0 [0156.931] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.931] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.931] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0156.931] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0156.931] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0156.931] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0156.931] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0156.931] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0156.931] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0156.932] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.932] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.932] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.932] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0156.932] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f9960) returned 0x0 [0156.932] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0156.932] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0156.932] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.932] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.932] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.932] GdipMeasureString (graphics=0x1bd57e60, string="4", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0156.932] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.932] GdipDeleteGraphics (graphics=0x1bd57e60) returned 0x0 [0156.933] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.933] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.933] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.933] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0156.933] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.933] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0156.933] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57ca0) returned 0x0 [0156.933] GdipIsMatrixIdentity (matrix=0x1bd57ca0, result=0x14e128) returned 0x0 [0156.933] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8883d0 [0156.933] GdipGetMatrixElements (matrix=0x1bd57ca0, matrixOut=0x1d8883d0) returned 0x0 [0156.934] LocalFree (hMem=0x1d8883d0) returned 0x0 [0156.934] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0156.934] GdipGetMatrixElements (matrix=0x1bd57ca0, matrixOut=0x1d888150) returned 0x0 [0156.935] LocalFree (hMem=0x1d888150) returned 0x0 [0156.935] GdipDeleteMatrix (matrix=0x1bd57ca0) returned 0x0 [0156.935] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0156.935] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0156.935] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0156.935] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.935] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0156.935] GetCurrentObject (hdc=0x4b010558, type=0x1) returned 0x1b00017 [0156.935] GetCurrentObject (hdc=0x4b010558, type=0x2) returned 0x1900010 [0156.935] GetCurrentObject (hdc=0x4b010558, type=0x7) returned 0x60506af [0156.935] GetCurrentObject (hdc=0x4b010558, type=0x6) returned 0x18a0048 [0156.935] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2f040554 [0156.935] DeleteObject (ho=0x2f040554) returned 1 [0156.935] DeleteObject (ho=0x6204064d) returned 1 [0156.935] OffsetViewportOrgEx (in: hdc=0x4b010558, x=0, y=0, lppt=0x21f9d20 | out: lppt=0x21f9d20) returned 1 [0156.935] GetNearestColor (hdc=0x4b010558, color=0xf0f0f0) returned 0xf0f0f0 [0156.935] CreateSolidBrush (color=0xf0f0f0) returned 0x191006b3 [0156.935] FillRect (hDC=0x4b010558, lprc=0x14e1c8, hbr=0x191006b3) returned 1 [0156.935] DeleteObject (ho=0x191006b3) returned 1 [0156.935] GdipReleaseDC (graphics=0x1bd51520, hdc=0x4b010558) returned 0x0 [0156.936] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.936] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0156.936] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.936] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21f9e20) returned 0x0 [0156.936] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.936] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.936] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0156.936] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0156.936] GdipDrawString (graphics=0x1bd51520, string="4", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0156.941] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0156.941] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0156.941] GetFocus () returned 0x101f8 [0156.942] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x8f\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0156.942] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.945] GdipCreateRegion (region=0x14e030) returned 0x0 [0156.945] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.945] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0156.945] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd576e0) returned 0x0 [0156.945] GdipIsMatrixIdentity (matrix=0x1bd576e0, result=0x14e098) returned 0x0 [0156.945] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8884d0 [0156.945] GdipGetMatrixElements (matrix=0x1bd576e0, matrixOut=0x1d8884d0) returned 0x0 [0156.945] LocalFree (hMem=0x1d8884d0) returned 0x0 [0156.945] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888750 [0156.946] GdipGetMatrixElements (matrix=0x1bd576e0, matrixOut=0x1d888750) returned 0x0 [0156.946] LocalFree (hMem=0x1d888750) returned 0x0 [0156.946] GdipDeleteMatrix (matrix=0x1bd576e0) returned 0x0 [0156.946] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0156.946] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0156.946] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0156.946] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.946] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0156.946] GetCurrentObject (hdc=0x4b010558, type=0x1) returned 0x1b00017 [0156.946] GetCurrentObject (hdc=0x4b010558, type=0x2) returned 0x1900010 [0156.946] GetCurrentObject (hdc=0x4b010558, type=0x7) returned 0x60506af [0156.947] GetCurrentObject (hdc=0x4b010558, type=0x6) returned 0x18a0048 [0156.947] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6304064d [0156.947] DeleteObject (ho=0x6304064d) returned 1 [0156.947] DeleteObject (ho=0x30040554) returned 1 [0156.947] OffsetViewportOrgEx (in: hdc=0x4b010558, x=0, y=0, lppt=0x21fa208 | out: lppt=0x21fa208) returned 1 [0156.947] GetROP2 (hdc=0x4b010558) returned 13 [0156.947] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x1b3006b7 [0156.947] MoveToEx (in: hdc=0x4b010558, x=25, y=0, lppt=0x21fa270 | out: lppt=0x21fa270) returned 1 [0156.947] LineTo (hdc=0x4b010558, x=0, y=0) returned 1 [0156.947] MoveToEx (in: hdc=0x4b010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.947] GetROP2 (hdc=0x4b010558) returned 13 [0156.947] MoveToEx (in: hdc=0x4b010558, x=0, y=0, lppt=0x21fa288 | out: lppt=0x21fa288) returned 1 [0156.947] LineTo (hdc=0x4b010558, x=0, y=22) returned 1 [0156.947] MoveToEx (in: hdc=0x4b010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.947] DeleteObject (ho=0x1b3006b7) returned 1 [0156.947] GetROP2 (hdc=0x4b010558) returned 13 [0156.947] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0xd3006b9 [0156.947] MoveToEx (in: hdc=0x4b010558, x=0, y=22, lppt=0x21fa2f0 | out: lppt=0x21fa2f0) returned 1 [0156.947] LineTo (hdc=0x4b010558, x=25, y=22) returned 1 [0156.947] MoveToEx (in: hdc=0x4b010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.947] GetROP2 (hdc=0x4b010558) returned 13 [0156.947] MoveToEx (in: hdc=0x4b010558, x=25, y=22, lppt=0x21fa308 | out: lppt=0x21fa308) returned 1 [0156.948] LineTo (hdc=0x4b010558, x=25, y=-1) returned 1 [0156.948] MoveToEx (in: hdc=0x4b010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.948] DeleteObject (ho=0xd3006b9) returned 1 [0156.948] GetROP2 (hdc=0x4b010558) returned 13 [0156.948] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x1c3006b7 [0156.948] MoveToEx (in: hdc=0x4b010558, x=24, y=1, lppt=0x21fa370 | out: lppt=0x21fa370) returned 1 [0156.948] LineTo (hdc=0x4b010558, x=1, y=1) returned 1 [0156.948] MoveToEx (in: hdc=0x4b010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.948] GetROP2 (hdc=0x4b010558) returned 13 [0156.948] MoveToEx (in: hdc=0x4b010558, x=1, y=1, lppt=0x21fa388 | out: lppt=0x21fa388) returned 1 [0156.948] LineTo (hdc=0x4b010558, x=1, y=21) returned 1 [0156.948] MoveToEx (in: hdc=0x4b010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.948] DeleteObject (ho=0x1c3006b7) returned 1 [0156.948] GetROP2 (hdc=0x4b010558) returned 13 [0156.948] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xe3006b9 [0156.948] MoveToEx (in: hdc=0x4b010558, x=1, y=21, lppt=0x21fa3f0 | out: lppt=0x21fa3f0) returned 1 [0156.948] LineTo (hdc=0x4b010558, x=24, y=21) returned 1 [0156.948] MoveToEx (in: hdc=0x4b010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.948] GetROP2 (hdc=0x4b010558) returned 13 [0156.948] MoveToEx (in: hdc=0x4b010558, x=24, y=21, lppt=0x21fa408 | out: lppt=0x21fa408) returned 1 [0156.948] LineTo (hdc=0x4b010558, x=24, y=0) returned 1 [0156.948] MoveToEx (in: hdc=0x4b010558, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.949] DeleteObject (ho=0xe3006b9) returned 1 [0156.949] GdipReleaseDC (graphics=0x1bd51520, hdc=0x4b010558) returned 0x0 [0156.949] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0156.949] GdipReleaseDC (graphics=0x1bd51520, hdc=0x4b010558) returned 0x0 [0156.949] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0156.949] DeleteDC (hdc=0x4b010558) returned 1 [0156.949] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0156.949] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.949] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.949] DispatchMessageW (lpMsg=0x14ef10) [0156.949] BeginPaint (hWnd=0x101ec, lpPaint=0x14e5a8) [0156.949] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ec, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.950] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ec, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0156.950] GetStockObject (i=5) returned 0x1900015 [0156.950] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0156.950] GdipCreateFromHDC (hdc=0x180106b8, graphics=0x14e528) returned 0x0 [0156.950] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0156.950] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0156.950] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0156.950] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd577e0) returned 0x0 [0156.950] GdipIsMatrixIdentity (matrix=0x1bd577e0, result=0x14e5b8) returned 0x0 [0156.950] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0156.950] GdipGetMatrixElements (matrix=0x1bd577e0, matrixOut=0x1d888150) returned 0x0 [0156.951] LocalFree (hMem=0x1d888150) returned 0x0 [0156.951] GdipDeleteMatrix (matrix=0x1bd577e0) returned 0x0 [0156.951] GdipCreateRegion (region=0x14e550) returned 0x0 [0156.951] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.951] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0156.951] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0156.951] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd8a0dbd) returned 0x0 [0156.951] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.951] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0156.951] GetCurrentObject (hdc=0x180106b8, type=0x1) returned 0x1b00017 [0156.951] GetCurrentObject (hdc=0x180106b8, type=0x2) returned 0x1900010 [0156.951] GetCurrentObject (hdc=0x180106b8, type=0x7) returned 0x60506af [0156.951] GetCurrentObject (hdc=0x180106b8, type=0x6) returned 0x18a0048 [0156.951] GetNearestColor (hdc=0x180106b8, color=0xf0f0f0) returned 0xf0f0f0 [0156.951] GetNearestColor (hdc=0x180106b8, color=0xa0a0a0) returned 0xa0a0a0 [0156.952] GetNearestColor (hdc=0x180106b8, color=0x696969) returned 0x696969 [0156.952] GetNearestColor (hdc=0x180106b8, color=0xa0a0a0) returned 0xa0a0a0 [0156.952] GetNearestColor (hdc=0x180106b8, color=0x0) returned 0x0 [0156.952] GetNearestColor (hdc=0x180106b8, color=0xffffff) returned 0xffffff [0156.952] GetNearestColor (hdc=0x180106b8, color=0xe5e5e5) returned 0xe5e5e5 [0156.952] GetNearestColor (hdc=0x180106b8, color=0xd8d8d8) returned 0xd8d8d8 [0156.952] GetNearestColor (hdc=0x180106b8, color=0x0) returned 0x0 [0156.952] GdipReleaseDC (graphics=0x1bd51520, hdc=0x180106b8) returned 0x0 [0156.952] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx§\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0156.952] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.952] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21fad40) returned 0x0 [0156.952] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.952] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.953] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0156.953] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0156.953] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0156.953] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0156.953] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0156.953] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0156.953] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0156.953] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.953] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.953] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.955] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0156.955] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21fae70) returned 0x0 [0156.955] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0156.955] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0156.955] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.955] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.955] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.955] GdipMeasureString (graphics=0x1bd57e60, string="6", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0156.956] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.956] GdipDeleteGraphics (graphics=0x1bd57e60) returned 0x0 [0156.956] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.956] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.956] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.956] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0156.956] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.956] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0156.956] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd576a0) returned 0x0 [0156.956] GdipIsMatrixIdentity (matrix=0x1bd576a0, result=0x14e128) returned 0x0 [0156.956] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888850 [0156.956] GdipGetMatrixElements (matrix=0x1bd576a0, matrixOut=0x1d888850) returned 0x0 [0156.957] LocalFree (hMem=0x1d888850) returned 0x0 [0156.957] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888750 [0156.957] GdipGetMatrixElements (matrix=0x1bd576a0, matrixOut=0x1d888750) returned 0x0 [0156.958] LocalFree (hMem=0x1d888750) returned 0x0 [0156.958] GdipDeleteMatrix (matrix=0x1bd576a0) returned 0x0 [0156.958] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0156.958] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0156.958] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0156.958] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.958] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0156.958] GetCurrentObject (hdc=0x180106b8, type=0x1) returned 0x1b00017 [0156.958] GetCurrentObject (hdc=0x180106b8, type=0x2) returned 0x1900010 [0156.958] GetCurrentObject (hdc=0x180106b8, type=0x7) returned 0x60506af [0156.958] GetCurrentObject (hdc=0x180106b8, type=0x6) returned 0x18a0048 [0156.958] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x31040554 [0156.958] DeleteObject (ho=0x31040554) returned 1 [0156.958] DeleteObject (ho=0x6404064d) returned 1 [0156.958] OffsetViewportOrgEx (in: hdc=0x180106b8, x=0, y=0, lppt=0x21fb230 | out: lppt=0x21fb230) returned 1 [0156.958] GetNearestColor (hdc=0x180106b8, color=0xf0f0f0) returned 0xf0f0f0 [0156.958] CreateSolidBrush (color=0xf0f0f0) returned 0x1a1006b3 [0156.958] FillRect (hDC=0x180106b8, lprc=0x14e1c8, hbr=0x1a1006b3) returned 1 [0156.958] DeleteObject (ho=0x1a1006b3) returned 1 [0156.958] GdipReleaseDC (graphics=0x1bd51520, hdc=0x180106b8) returned 0x0 [0156.959] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0156.959] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.959] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21fb330) returned 0x0 [0156.959] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.959] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.959] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0156.959] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0156.959] GdipDrawString (graphics=0x1bd51520, string="6", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0156.963] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0156.963] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0156.963] GetFocus () returned 0x101f8 [0156.964] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.964] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx¤\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0156.964] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.964] GdipCreateRegion (region=0x14e030) returned 0x0 [0156.964] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.964] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0156.964] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57d20) returned 0x0 [0156.964] GdipIsMatrixIdentity (matrix=0x1bd57d20, result=0x14e098) returned 0x0 [0156.964] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8884d0 [0156.964] GdipGetMatrixElements (matrix=0x1bd57d20, matrixOut=0x1d8884d0) returned 0x0 [0156.965] LocalFree (hMem=0x1d8884d0) returned 0x0 [0156.965] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8889d0 [0156.965] GdipGetMatrixElements (matrix=0x1bd57d20, matrixOut=0x1d8889d0) returned 0x0 [0156.966] LocalFree (hMem=0x1d8889d0) returned 0x0 [0156.966] GdipDeleteMatrix (matrix=0x1bd57d20) returned 0x0 [0156.966] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0156.966] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0156.966] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0156.966] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.966] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0156.966] GetCurrentObject (hdc=0x180106b8, type=0x1) returned 0x1b00017 [0156.966] GetCurrentObject (hdc=0x180106b8, type=0x2) returned 0x1900010 [0156.966] GetCurrentObject (hdc=0x180106b8, type=0x7) returned 0x60506af [0156.966] GetCurrentObject (hdc=0x180106b8, type=0x6) returned 0x18a0048 [0156.966] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6504064d [0156.966] DeleteObject (ho=0x6504064d) returned 1 [0156.966] DeleteObject (ho=0x32040554) returned 1 [0156.966] OffsetViewportOrgEx (in: hdc=0x180106b8, x=0, y=0, lppt=0x21fb718 | out: lppt=0x21fb718) returned 1 [0156.966] GetROP2 (hdc=0x180106b8) returned 13 [0156.966] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0xf3006b9 [0156.966] MoveToEx (in: hdc=0x180106b8, x=25, y=0, lppt=0x21fb780 | out: lppt=0x21fb780) returned 1 [0156.966] LineTo (hdc=0x180106b8, x=0, y=0) returned 1 [0156.966] MoveToEx (in: hdc=0x180106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.966] GetROP2 (hdc=0x180106b8) returned 13 [0156.966] MoveToEx (in: hdc=0x180106b8, x=0, y=0, lppt=0x21fb798 | out: lppt=0x21fb798) returned 1 [0156.967] LineTo (hdc=0x180106b8, x=0, y=22) returned 1 [0156.967] MoveToEx (in: hdc=0x180106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.967] DeleteObject (ho=0xf3006b9) returned 1 [0156.967] GetROP2 (hdc=0x180106b8) returned 13 [0156.967] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x1d3006b7 [0156.967] MoveToEx (in: hdc=0x180106b8, x=0, y=22, lppt=0x21fb800 | out: lppt=0x21fb800) returned 1 [0156.967] LineTo (hdc=0x180106b8, x=25, y=22) returned 1 [0156.967] MoveToEx (in: hdc=0x180106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.967] GetROP2 (hdc=0x180106b8) returned 13 [0156.967] MoveToEx (in: hdc=0x180106b8, x=25, y=22, lppt=0x21fb818 | out: lppt=0x21fb818) returned 1 [0156.967] LineTo (hdc=0x180106b8, x=25, y=-1) returned 1 [0156.967] MoveToEx (in: hdc=0x180106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.967] DeleteObject (ho=0x1d3006b7) returned 1 [0156.967] GetROP2 (hdc=0x180106b8) returned 13 [0156.967] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x103006b9 [0156.967] MoveToEx (in: hdc=0x180106b8, x=24, y=1, lppt=0x21fb880 | out: lppt=0x21fb880) returned 1 [0156.967] LineTo (hdc=0x180106b8, x=1, y=1) returned 1 [0156.967] MoveToEx (in: hdc=0x180106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.967] GetROP2 (hdc=0x180106b8) returned 13 [0156.967] MoveToEx (in: hdc=0x180106b8, x=1, y=1, lppt=0x21fb898 | out: lppt=0x21fb898) returned 1 [0156.967] LineTo (hdc=0x180106b8, x=1, y=21) returned 1 [0156.967] MoveToEx (in: hdc=0x180106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.967] DeleteObject (ho=0x103006b9) returned 1 [0156.968] GetROP2 (hdc=0x180106b8) returned 13 [0156.968] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x1e3006b7 [0156.968] MoveToEx (in: hdc=0x180106b8, x=1, y=21, lppt=0x21fb900 | out: lppt=0x21fb900) returned 1 [0156.968] LineTo (hdc=0x180106b8, x=24, y=21) returned 1 [0156.968] MoveToEx (in: hdc=0x180106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.968] GetROP2 (hdc=0x180106b8) returned 13 [0156.968] MoveToEx (in: hdc=0x180106b8, x=24, y=21, lppt=0x21fb918 | out: lppt=0x21fb918) returned 1 [0156.968] LineTo (hdc=0x180106b8, x=24, y=0) returned 1 [0156.968] MoveToEx (in: hdc=0x180106b8, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.968] DeleteObject (ho=0x1e3006b7) returned 1 [0156.968] GdipReleaseDC (graphics=0x1bd51520, hdc=0x180106b8) returned 0x0 [0156.968] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0156.968] GdipReleaseDC (graphics=0x1bd51520, hdc=0x180106b8) returned 0x0 [0156.968] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0156.968] DeleteDC (hdc=0x180106b8) returned 1 [0156.968] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0156.968] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.969] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.969] DispatchMessageW (lpMsg=0x14ef10) [0156.969] BeginPaint (hWnd=0x101ee, lpPaint=0x14e5a8) [0156.969] GetStockObject (i=5) returned 0x1900015 [0156.970] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0156.970] GdipCreateFromHDC (hdc=0x280106b6, graphics=0x14e528) returned 0x0 [0156.970] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0156.970] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0156.970] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0156.970] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd579e0) returned 0x0 [0156.970] GdipIsMatrixIdentity (matrix=0x1bd579e0, result=0x14e5b8) returned 0x0 [0156.970] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888ad0 [0156.970] GdipGetMatrixElements (matrix=0x1bd579e0, matrixOut=0x1d888ad0) returned 0x0 [0156.971] LocalFree (hMem=0x1d888ad0) returned 0x0 [0156.971] GdipDeleteMatrix (matrix=0x1bd579e0) returned 0x0 [0156.971] GdipCreateRegion (region=0x14e550) returned 0x0 [0156.971] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.971] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0156.971] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0156.971] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd870dbd) returned 0x0 [0156.971] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.971] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0156.971] GetCurrentObject (hdc=0x280106b6, type=0x1) returned 0x1b00017 [0156.971] GetCurrentObject (hdc=0x280106b6, type=0x2) returned 0x1900010 [0156.971] GetCurrentObject (hdc=0x280106b6, type=0x7) returned 0x60506af [0156.971] GetCurrentObject (hdc=0x280106b6, type=0x6) returned 0x18a0048 [0156.971] GetNearestColor (hdc=0x280106b6, color=0xf0f0f0) returned 0xf0f0f0 [0156.971] GetNearestColor (hdc=0x280106b6, color=0xa0a0a0) returned 0xa0a0a0 [0156.971] GetNearestColor (hdc=0x280106b6, color=0x696969) returned 0x696969 [0156.971] GetNearestColor (hdc=0x280106b6, color=0xa0a0a0) returned 0xa0a0a0 [0156.971] GetNearestColor (hdc=0x280106b6, color=0x0) returned 0x0 [0156.972] GetNearestColor (hdc=0x280106b6, color=0xffffff) returned 0xffffff [0156.972] GetNearestColor (hdc=0x280106b6, color=0xe5e5e5) returned 0xe5e5e5 [0156.972] GetNearestColor (hdc=0x280106b6, color=0xd8d8d8) returned 0xd8d8d8 [0156.972] GetNearestColor (hdc=0x280106b6, color=0x0) returned 0x0 [0156.972] GdipReleaseDC (graphics=0x1bd51520, hdc=0x280106b6) returned 0x0 [0156.972] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.972] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx¼\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0156.972] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.972] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21fc250) returned 0x0 [0156.972] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.972] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.972] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0156.972] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0156.972] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0156.972] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0156.973] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0156.973] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0156.973] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0156.973] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.973] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.973] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.973] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0156.973] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21fc380) returned 0x0 [0156.973] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0156.973] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0156.973] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.973] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.973] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.974] GdipMeasureString (graphics=0x1bd57e60, string="9", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0156.974] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.974] GdipDeleteGraphics (graphics=0x1bd57e60) returned 0x0 [0156.974] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.974] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.974] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.974] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0156.974] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.974] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0156.974] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57ba0) returned 0x0 [0156.974] GdipIsMatrixIdentity (matrix=0x1bd57ba0, result=0x14e128) returned 0x0 [0156.974] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888990 [0156.974] GdipGetMatrixElements (matrix=0x1bd57ba0, matrixOut=0x1d888990) returned 0x0 [0156.975] LocalFree (hMem=0x1d888990) returned 0x0 [0156.975] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888350 [0156.975] GdipGetMatrixElements (matrix=0x1bd57ba0, matrixOut=0x1d888350) returned 0x0 [0156.976] LocalFree (hMem=0x1d888350) returned 0x0 [0156.976] GdipDeleteMatrix (matrix=0x1bd57ba0) returned 0x0 [0156.976] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0156.976] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0156.976] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0156.976] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.976] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0156.976] GetCurrentObject (hdc=0x280106b6, type=0x1) returned 0x1b00017 [0156.976] GetCurrentObject (hdc=0x280106b6, type=0x2) returned 0x1900010 [0156.976] GetCurrentObject (hdc=0x280106b6, type=0x7) returned 0x60506af [0156.976] GetCurrentObject (hdc=0x280106b6, type=0x6) returned 0x18a0048 [0156.976] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x33040554 [0156.976] DeleteObject (ho=0x33040554) returned 1 [0156.976] DeleteObject (ho=0x6604064d) returned 1 [0156.976] OffsetViewportOrgEx (in: hdc=0x280106b6, x=0, y=0, lppt=0x21fc740 | out: lppt=0x21fc740) returned 1 [0156.976] GetNearestColor (hdc=0x280106b6, color=0xf0f0f0) returned 0xf0f0f0 [0156.976] CreateSolidBrush (color=0xf0f0f0) returned 0x1b1006b3 [0156.976] DeleteObject (ho=0x1b1006b3) returned 1 [0156.977] GdipReleaseDC (graphics=0x1bd51520, hdc=0x280106b6) returned 0x0 [0156.977] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.977] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0156.977] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.977] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21fc840) returned 0x0 [0156.977] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.977] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.977] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0156.977] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0156.977] GdipDrawString (graphics=0x1bd51520, string="9", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0156.982] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0156.982] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0156.982] GetFocus () returned 0x101f8 [0156.982] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.982] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx¹\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0156.982] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.982] GdipCreateRegion (region=0x14e030) returned 0x0 [0156.982] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.982] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0156.982] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57ca0) returned 0x0 [0156.982] GdipIsMatrixIdentity (matrix=0x1bd57ca0, result=0x14e098) returned 0x0 [0156.982] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888ad0 [0156.982] GdipGetMatrixElements (matrix=0x1bd57ca0, matrixOut=0x1d888ad0) returned 0x0 [0156.983] LocalFree (hMem=0x1d888ad0) returned 0x0 [0156.983] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0156.983] GdipGetMatrixElements (matrix=0x1bd57ca0, matrixOut=0x1d888150) returned 0x0 [0156.984] LocalFree (hMem=0x1d888150) returned 0x0 [0156.984] GdipDeleteMatrix (matrix=0x1bd57ca0) returned 0x0 [0156.984] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0156.984] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0156.984] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0156.984] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.984] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0156.984] GetCurrentObject (hdc=0x280106b6, type=0x1) returned 0x1b00017 [0156.984] GetCurrentObject (hdc=0x280106b6, type=0x2) returned 0x1900010 [0156.984] GetCurrentObject (hdc=0x280106b6, type=0x7) returned 0x60506af [0156.984] GetCurrentObject (hdc=0x280106b6, type=0x6) returned 0x18a0048 [0156.984] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6704064d [0156.984] DeleteObject (ho=0x6704064d) returned 1 [0156.984] DeleteObject (ho=0x34040554) returned 1 [0156.984] OffsetViewportOrgEx (in: hdc=0x280106b6, x=0, y=0, lppt=0x21fcc28 | out: lppt=0x21fcc28) returned 1 [0156.986] GetROP2 (hdc=0x280106b6) returned 13 [0156.986] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x1f3006b7 [0156.986] MoveToEx (in: hdc=0x280106b6, x=25, y=0, lppt=0x21fcc90 | out: lppt=0x21fcc90) returned 1 [0156.987] LineTo (hdc=0x280106b6, x=0, y=0) returned 1 [0156.987] MoveToEx (in: hdc=0x280106b6, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.987] GetROP2 (hdc=0x280106b6) returned 13 [0156.987] MoveToEx (in: hdc=0x280106b6, x=0, y=0, lppt=0x21fcca8 | out: lppt=0x21fcca8) returned 1 [0156.987] LineTo (hdc=0x280106b6, x=0, y=22) returned 1 [0156.987] MoveToEx (in: hdc=0x280106b6, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.987] DeleteObject (ho=0x1f3006b7) returned 1 [0156.987] GetROP2 (hdc=0x280106b6) returned 13 [0156.987] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x113006b9 [0156.987] MoveToEx (in: hdc=0x280106b6, x=0, y=22, lppt=0x21fcd10 | out: lppt=0x21fcd10) returned 1 [0156.987] LineTo (hdc=0x280106b6, x=25, y=22) returned 1 [0156.987] MoveToEx (in: hdc=0x280106b6, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.987] GetROP2 (hdc=0x280106b6) returned 13 [0156.987] MoveToEx (in: hdc=0x280106b6, x=25, y=22, lppt=0x21fcd28 | out: lppt=0x21fcd28) returned 1 [0156.987] LineTo (hdc=0x280106b6, x=25, y=-1) returned 1 [0156.987] MoveToEx (in: hdc=0x280106b6, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0156.987] DeleteObject (ho=0x113006b9) returned 1 [0156.987] GetROP2 (hdc=0x280106b6) returned 13 [0156.987] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x203006b7 [0156.987] MoveToEx (in: hdc=0x280106b6, x=24, y=1, lppt=0x21fcd90 | out: lppt=0x21fcd90) returned 1 [0156.987] LineTo (hdc=0x280106b6, x=1, y=1) returned 1 [0156.988] GetROP2 (hdc=0x280106b6) returned 13 [0156.988] LineTo (hdc=0x280106b6, x=1, y=21) returned 1 [0156.988] DeleteObject (ho=0x203006b7) returned 1 [0156.988] GetROP2 (hdc=0x280106b6) returned 13 [0156.988] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x123006b9 [0156.988] LineTo (hdc=0x280106b6, x=24, y=21) returned 1 [0156.988] GetROP2 (hdc=0x280106b6) returned 13 [0156.988] LineTo (hdc=0x280106b6, x=24, y=0) returned 1 [0156.988] DeleteObject (ho=0x123006b9) returned 1 [0156.988] GdipReleaseDC (graphics=0x1bd51520, hdc=0x280106b6) returned 0x0 [0156.988] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0156.988] GdipReleaseDC (graphics=0x1bd51520, hdc=0x280106b6) returned 0x0 [0156.988] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0156.988] DeleteDC (hdc=0x280106b6) returned 1 [0156.988] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0156.988] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0156.988] TranslateMessage (lpMsg=0x14ef10) returned 0 [0156.989] DispatchMessageW (lpMsg=0x14ef10) [0156.989] BeginPaint (hWnd=0x101f0, lpPaint=0x14e5a8) [0156.989] GetStockObject (i=5) returned 0x1900015 [0156.989] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0156.989] GdipCreateFromHDC (hdc=0x54010558, graphics=0x14e528) returned 0x0 [0156.989] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0156.989] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0156.989] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0156.989] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57b20) returned 0x0 [0156.989] GdipIsMatrixIdentity (matrix=0x1bd57b20, result=0x14e5b8) returned 0x0 [0156.990] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8889d0 [0156.990] GdipGetMatrixElements (matrix=0x1bd57b20, matrixOut=0x1d8889d0) returned 0x0 [0156.990] LocalFree (hMem=0x1d8889d0) returned 0x0 [0156.990] GdipDeleteMatrix (matrix=0x1bd57b20) returned 0x0 [0156.990] GdipCreateRegion (region=0x14e550) returned 0x0 [0156.990] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.990] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0156.991] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0156.991] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd840dbd) returned 0x0 [0156.991] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.991] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0156.991] GetCurrentObject (hdc=0x54010558, type=0x1) returned 0x1b00017 [0156.991] GetCurrentObject (hdc=0x54010558, type=0x2) returned 0x1900010 [0156.991] GetCurrentObject (hdc=0x54010558, type=0x7) returned 0x60506af [0156.991] GetCurrentObject (hdc=0x54010558, type=0x6) returned 0x18a0048 [0156.991] GetNearestColor (hdc=0x54010558, color=0xf0f0f0) returned 0xf0f0f0 [0156.991] GetNearestColor (hdc=0x54010558, color=0xa0a0a0) returned 0xa0a0a0 [0156.991] GetNearestColor (hdc=0x54010558, color=0x696969) returned 0x696969 [0156.991] GetNearestColor (hdc=0x54010558, color=0xa0a0a0) returned 0xa0a0a0 [0156.991] GetNearestColor (hdc=0x54010558, color=0x0) returned 0x0 [0156.991] GetNearestColor (hdc=0x54010558, color=0xffffff) returned 0xffffff [0156.991] GetNearestColor (hdc=0x54010558, color=0xe5e5e5) returned 0xe5e5e5 [0156.991] GetNearestColor (hdc=0x54010558, color=0xd8d8d8) returned 0xd8d8d8 [0156.991] GetNearestColor (hdc=0x54010558, color=0x0) returned 0x0 [0156.991] GdipReleaseDC (graphics=0x1bd51520, hdc=0x54010558) returned 0x0 [0156.992] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÑ\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0156.992] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.992] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21fd760) returned 0x0 [0156.992] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.992] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.992] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0156.992] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0156.992] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0156.992] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0156.992] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0156.992] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0156.992] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0156.992] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.993] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.993] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0156.993] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21fd890) returned 0x0 [0156.993] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0156.993] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0156.993] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0156.993] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.993] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0156.993] GdipMeasureString (graphics=0x1bd57e60, string="3", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0156.993] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0156.993] GdipDeleteGraphics (graphics=0x1bd57e60) returned 0x0 [0156.993] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.993] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0156.994] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.994] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0156.994] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0156.994] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0156.994] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57ce0) returned 0x0 [0156.994] GdipIsMatrixIdentity (matrix=0x1bd57ce0, result=0x14e128) returned 0x0 [0156.994] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888d90 [0156.994] GdipGetMatrixElements (matrix=0x1bd57ce0, matrixOut=0x1d888d90) returned 0x0 [0156.995] LocalFree (hMem=0x1d888d90) returned 0x0 [0156.995] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888410 [0156.995] GdipGetMatrixElements (matrix=0x1bd57ce0, matrixOut=0x1d888410) returned 0x0 [0156.995] LocalFree (hMem=0x1d888410) returned 0x0 [0156.995] GdipDeleteMatrix (matrix=0x1bd57ce0) returned 0x0 [0156.995] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0156.995] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0156.995] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0156.995] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0156.995] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0156.996] GetCurrentObject (hdc=0x54010558, type=0x1) returned 0x1b00017 [0156.996] GetCurrentObject (hdc=0x54010558, type=0x2) returned 0x1900010 [0156.996] GetCurrentObject (hdc=0x54010558, type=0x7) returned 0x60506af [0156.996] GetCurrentObject (hdc=0x54010558, type=0x6) returned 0x18a0048 [0156.996] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x35040554 [0156.996] DeleteObject (ho=0x35040554) returned 1 [0156.996] DeleteObject (ho=0x6804064d) returned 1 [0156.996] OffsetViewportOrgEx (in: hdc=0x54010558, x=0, y=0, lppt=0x21fdc50 | out: lppt=0x21fdc50) returned 1 [0156.996] GetNearestColor (hdc=0x54010558, color=0xf0f0f0) returned 0xf0f0f0 [0156.996] CreateSolidBrush (color=0xf0f0f0) returned 0x1c1006b3 [0156.996] DeleteObject (ho=0x1c1006b3) returned 1 [0156.996] GdipReleaseDC (graphics=0x1bd51520, hdc=0x54010558) returned 0x0 [0156.996] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0156.996] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0156.996] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0156.997] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21fdd50) returned 0x0 [0156.997] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.997] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0156.997] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0156.997] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0156.997] GdipDrawString (graphics=0x1bd51520, string="3", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0157.003] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0157.003] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0157.003] GetFocus () returned 0x101f8 [0157.003] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0157.003] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÎ\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0157.003] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0157.003] GdipCreateRegion (region=0x14e030) returned 0x0 [0157.003] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0157.003] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0157.004] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd578a0) returned 0x0 [0157.004] GdipIsMatrixIdentity (matrix=0x1bd578a0, result=0x14e098) returned 0x0 [0157.004] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0157.004] GdipGetMatrixElements (matrix=0x1bd578a0, matrixOut=0x1d888150) returned 0x0 [0157.004] LocalFree (hMem=0x1d888150) returned 0x0 [0157.004] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8884d0 [0157.004] GdipGetMatrixElements (matrix=0x1bd578a0, matrixOut=0x1d8884d0) returned 0x0 [0157.005] LocalFree (hMem=0x1d8884d0) returned 0x0 [0157.005] GdipDeleteMatrix (matrix=0x1bd578a0) returned 0x0 [0157.005] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0157.005] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0157.005] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0157.005] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0157.005] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0157.005] GetCurrentObject (hdc=0x54010558, type=0x1) returned 0x1b00017 [0157.005] GetCurrentObject (hdc=0x54010558, type=0x2) returned 0x1900010 [0157.005] GetCurrentObject (hdc=0x54010558, type=0x7) returned 0x60506af [0157.005] GetCurrentObject (hdc=0x54010558, type=0x6) returned 0x18a0048 [0157.005] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6904064d [0157.006] DeleteObject (ho=0x6904064d) returned 1 [0157.006] DeleteObject (ho=0x36040554) returned 1 [0157.006] OffsetViewportOrgEx (in: hdc=0x54010558, x=0, y=0, lppt=0x21fe138 | out: lppt=0x21fe138) returned 1 [0157.006] GetROP2 (hdc=0x54010558) returned 13 [0157.006] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x133006b9 [0157.006] LineTo (hdc=0x54010558, x=0, y=0) returned 1 [0157.006] GetROP2 (hdc=0x54010558) returned 13 [0157.006] LineTo (hdc=0x54010558, x=0, y=22) returned 1 [0157.006] DeleteObject (ho=0x133006b9) returned 1 [0157.006] GetROP2 (hdc=0x54010558) returned 13 [0157.006] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x213006b7 [0157.006] LineTo (hdc=0x54010558, x=25, y=22) returned 1 [0157.006] GetROP2 (hdc=0x54010558) returned 13 [0157.006] LineTo (hdc=0x54010558, x=25, y=-1) returned 1 [0157.006] DeleteObject (ho=0x213006b7) returned 1 [0157.006] GetROP2 (hdc=0x54010558) returned 13 [0157.006] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x143006b9 [0157.006] LineTo (hdc=0x54010558, x=1, y=1) returned 1 [0157.006] GetROP2 (hdc=0x54010558) returned 13 [0157.006] LineTo (hdc=0x54010558, x=1, y=21) returned 1 [0157.007] DeleteObject (ho=0x143006b9) returned 1 [0157.007] GetROP2 (hdc=0x54010558) returned 13 [0157.007] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x223006b7 [0157.007] LineTo (hdc=0x54010558, x=24, y=21) returned 1 [0157.007] GetROP2 (hdc=0x54010558) returned 13 [0157.007] LineTo (hdc=0x54010558, x=24, y=0) returned 1 [0157.007] DeleteObject (ho=0x223006b7) returned 1 [0157.007] GdipReleaseDC (graphics=0x1bd51520, hdc=0x54010558) returned 0x0 [0157.007] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0157.007] GdipReleaseDC (graphics=0x1bd51520, hdc=0x54010558) returned 0x0 [0157.007] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0157.007] DeleteDC (hdc=0x54010558) returned 1 [0157.007] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0157.007] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0157.007] TranslateMessage (lpMsg=0x14ef10) returned 0 [0157.007] DispatchMessageW (lpMsg=0x14ef10) [0157.007] BeginPaint (hWnd=0x101f2, lpPaint=0x14e5a8) [0157.008] GetStockObject (i=5) returned 0x1900015 [0157.008] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0157.008] GdipCreateFromHDC (hdc=0x210106b8, graphics=0x14e528) returned 0x0 [0157.008] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0157.008] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0157.008] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0157.008] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd576e0) returned 0x0 [0157.008] GdipIsMatrixIdentity (matrix=0x1bd576e0, result=0x14e5b8) returned 0x0 [0157.008] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888950 [0157.008] GdipGetMatrixElements (matrix=0x1bd576e0, matrixOut=0x1d888950) returned 0x0 [0157.009] LocalFree (hMem=0x1d888950) returned 0x0 [0157.009] GdipDeleteMatrix (matrix=0x1bd576e0) returned 0x0 [0157.009] GdipCreateRegion (region=0x14e550) returned 0x0 [0157.009] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0157.009] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0157.009] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0157.009] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd810dbd) returned 0x0 [0157.009] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0157.009] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0157.009] GetCurrentObject (hdc=0x210106b8, type=0x1) returned 0x1b00017 [0157.009] GetCurrentObject (hdc=0x210106b8, type=0x2) returned 0x1900010 [0157.009] GetCurrentObject (hdc=0x210106b8, type=0x7) returned 0x60506af [0157.009] GetCurrentObject (hdc=0x210106b8, type=0x6) returned 0x18a0048 [0157.010] GetNearestColor (hdc=0x210106b8, color=0xf0f0f0) returned 0xf0f0f0 [0157.010] GetNearestColor (hdc=0x210106b8, color=0xa0a0a0) returned 0xa0a0a0 [0157.010] GetNearestColor (hdc=0x210106b8, color=0x696969) returned 0x696969 [0157.010] GetNearestColor (hdc=0x210106b8, color=0xa0a0a0) returned 0xa0a0a0 [0157.010] GetNearestColor (hdc=0x210106b8, color=0x0) returned 0x0 [0157.010] GetNearestColor (hdc=0x210106b8, color=0xffffff) returned 0xffffff [0157.010] GetNearestColor (hdc=0x210106b8, color=0xe5e5e5) returned 0xe5e5e5 [0157.010] GetNearestColor (hdc=0x210106b8, color=0xd8d8d8) returned 0xd8d8d8 [0157.010] GetNearestColor (hdc=0x210106b8, color=0x0) returned 0x0 [0157.010] GdipReleaseDC (graphics=0x1bd51520, hdc=0x210106b8) returned 0x0 [0157.010] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0157.010] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExæ\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0157.011] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0157.011] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21fec70) returned 0x0 [0157.011] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0157.011] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0157.011] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0157.011] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0157.011] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0157.011] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0157.011] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0157.011] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0157.011] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0157.011] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0157.011] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0157.011] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0157.011] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0157.012] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21feda0) returned 0x0 [0157.012] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0157.012] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0157.012] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0157.012] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0157.012] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0157.012] GdipMeasureString (graphics=0x1bd57e60, string="5", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0157.012] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0157.012] GdipDeleteGraphics (graphics=0x1bd57e60) returned 0x0 [0157.012] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0157.012] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0157.012] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0157.012] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0157.012] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0157.012] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0157.012] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57a20) returned 0x0 [0157.013] GdipIsMatrixIdentity (matrix=0x1bd57a20, result=0x14e128) returned 0x0 [0157.013] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888b50 [0157.013] GdipGetMatrixElements (matrix=0x1bd57a20, matrixOut=0x1d888b50) returned 0x0 [0157.013] LocalFree (hMem=0x1d888b50) returned 0x0 [0157.013] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888890 [0157.013] GdipGetMatrixElements (matrix=0x1bd57a20, matrixOut=0x1d888890) returned 0x0 [0157.014] LocalFree (hMem=0x1d888890) returned 0x0 [0157.014] GdipDeleteMatrix (matrix=0x1bd57a20) returned 0x0 [0157.014] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0157.014] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0157.014] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0157.014] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0157.014] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0157.014] GetCurrentObject (hdc=0x210106b8, type=0x1) returned 0x1b00017 [0157.014] GetCurrentObject (hdc=0x210106b8, type=0x2) returned 0x1900010 [0157.014] GetCurrentObject (hdc=0x210106b8, type=0x7) returned 0x60506af [0157.014] GetCurrentObject (hdc=0x210106b8, type=0x6) returned 0x18a0048 [0157.014] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x37040554 [0157.014] DeleteObject (ho=0x37040554) returned 1 [0157.014] DeleteObject (ho=0x6a04064d) returned 1 [0157.014] OffsetViewportOrgEx (in: hdc=0x210106b8, x=0, y=0, lppt=0x21ff160 | out: lppt=0x21ff160) returned 1 [0157.014] GetNearestColor (hdc=0x210106b8, color=0xf0f0f0) returned 0xf0f0f0 [0157.014] CreateSolidBrush (color=0xf0f0f0) returned 0x1d1006b3 [0157.014] DeleteObject (ho=0x1d1006b3) returned 1 [0157.014] GdipReleaseDC (graphics=0x1bd51520, hdc=0x210106b8) returned 0x0 [0157.015] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0157.015] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0157.015] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0157.015] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x21ff260) returned 0x0 [0157.015] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0157.015] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0157.015] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0157.015] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0157.015] GdipDrawString (graphics=0x1bd51520, string="5", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0157.020] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0157.020] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0157.020] GetFocus () returned 0x101f8 [0157.020] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0157.020] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExã\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0157.020] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0157.020] GdipCreateRegion (region=0x14e030) returned 0x0 [0157.021] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0157.021] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0157.021] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57860) returned 0x0 [0157.021] GdipIsMatrixIdentity (matrix=0x1bd57860, result=0x14e098) returned 0x0 [0157.021] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888ad0 [0157.021] GdipGetMatrixElements (matrix=0x1bd57860, matrixOut=0x1d888ad0) returned 0x0 [0157.021] LocalFree (hMem=0x1d888ad0) returned 0x0 [0157.021] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888290 [0157.021] GdipGetMatrixElements (matrix=0x1bd57860, matrixOut=0x1d888290) returned 0x0 [0157.022] LocalFree (hMem=0x1d888290) returned 0x0 [0157.022] GdipDeleteMatrix (matrix=0x1bd57860) returned 0x0 [0157.022] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0157.022] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0157.022] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0157.022] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0157.022] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0157.022] GetCurrentObject (hdc=0x210106b8, type=0x1) returned 0x1b00017 [0157.022] GetCurrentObject (hdc=0x210106b8, type=0x2) returned 0x1900010 [0157.022] GetCurrentObject (hdc=0x210106b8, type=0x7) returned 0x60506af [0157.022] GetCurrentObject (hdc=0x210106b8, type=0x6) returned 0x18a0048 [0157.022] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6b04064d [0157.023] DeleteObject (ho=0x6b04064d) returned 1 [0157.023] DeleteObject (ho=0x38040554) returned 1 [0157.023] OffsetViewportOrgEx (in: hdc=0x210106b8, x=0, y=0, lppt=0x21ff648 | out: lppt=0x21ff648) returned 1 [0157.023] GetROP2 (hdc=0x210106b8) returned 13 [0157.023] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x233006b7 [0157.023] LineTo (hdc=0x210106b8, x=0, y=0) returned 1 [0157.023] GetROP2 (hdc=0x210106b8) returned 13 [0157.023] LineTo (hdc=0x210106b8, x=0, y=22) returned 1 [0157.023] DeleteObject (ho=0x233006b7) returned 1 [0157.023] GetROP2 (hdc=0x210106b8) returned 13 [0157.023] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x153006b9 [0157.023] LineTo (hdc=0x210106b8, x=25, y=22) returned 1 [0157.023] GetROP2 (hdc=0x210106b8) returned 13 [0157.023] LineTo (hdc=0x210106b8, x=25, y=-1) returned 1 [0157.023] DeleteObject (ho=0x153006b9) returned 1 [0157.023] GetROP2 (hdc=0x210106b8) returned 13 [0157.023] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x243006b7 [0157.023] LineTo (hdc=0x210106b8, x=1, y=1) returned 1 [0157.023] GetROP2 (hdc=0x210106b8) returned 13 [0157.023] LineTo (hdc=0x210106b8, x=1, y=21) returned 1 [0157.024] DeleteObject (ho=0x243006b7) returned 1 [0157.024] GetROP2 (hdc=0x210106b8) returned 13 [0157.024] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x163006b9 [0157.024] LineTo (hdc=0x210106b8, x=24, y=21) returned 1 [0157.024] GetROP2 (hdc=0x210106b8) returned 13 [0157.024] LineTo (hdc=0x210106b8, x=24, y=0) returned 1 [0157.024] DeleteObject (ho=0x163006b9) returned 1 [0157.024] GdipReleaseDC (graphics=0x1bd51520, hdc=0x210106b8) returned 0x0 [0157.024] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0157.024] GdipReleaseDC (graphics=0x1bd51520, hdc=0x210106b8) returned 0x0 [0157.024] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0157.024] DeleteDC (hdc=0x210106b8) returned 1 [0157.024] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0157.024] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0157.024] TranslateMessage (lpMsg=0x14ef10) returned 0 [0157.024] DispatchMessageW (lpMsg=0x14ef10) [0157.024] BeginPaint (hWnd=0x101f4, lpPaint=0x14e5a8) [0157.025] GetStockObject (i=5) returned 0x1900015 [0157.025] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0157.025] GdipCreateFromHDC (hdc=0x310106b6, graphics=0x14e528) returned 0x0 [0157.025] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0157.025] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0157.025] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0157.025] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57c20) returned 0x0 [0157.025] GdipIsMatrixIdentity (matrix=0x1bd57c20, result=0x14e5b8) returned 0x0 [0157.025] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888d50 [0157.025] GdipGetMatrixElements (matrix=0x1bd57c20, matrixOut=0x1d888d50) returned 0x0 [0157.026] LocalFree (hMem=0x1d888d50) returned 0x0 [0157.026] GdipDeleteMatrix (matrix=0x1bd57c20) returned 0x0 [0157.026] GdipCreateRegion (region=0x14e550) returned 0x0 [0157.026] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0157.026] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0157.026] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0157.026] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd7e0dbd) returned 0x0 [0157.026] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0157.026] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0157.026] GetCurrentObject (hdc=0x310106b6, type=0x1) returned 0x1b00017 [0157.026] GetCurrentObject (hdc=0x310106b6, type=0x2) returned 0x1900010 [0157.026] GetCurrentObject (hdc=0x310106b6, type=0x7) returned 0x60506af [0157.026] GetCurrentObject (hdc=0x310106b6, type=0x6) returned 0x18a0048 [0157.026] GetNearestColor (hdc=0x310106b6, color=0xf0f0f0) returned 0xf0f0f0 [0157.026] GetNearestColor (hdc=0x310106b6, color=0xa0a0a0) returned 0xa0a0a0 [0157.027] GetNearestColor (hdc=0x310106b6, color=0x696969) returned 0x696969 [0157.027] GetNearestColor (hdc=0x310106b6, color=0xa0a0a0) returned 0xa0a0a0 [0157.027] GetNearestColor (hdc=0x310106b6, color=0x0) returned 0x0 [0157.027] GetNearestColor (hdc=0x310106b6, color=0xffffff) returned 0xffffff [0157.027] GetNearestColor (hdc=0x310106b6, color=0xe5e5e5) returned 0xe5e5e5 [0157.027] GetNearestColor (hdc=0x310106b6, color=0xd8d8d8) returned 0xd8d8d8 [0157.027] GetNearestColor (hdc=0x310106b6, color=0x0) returned 0x0 [0157.027] GdipReleaseDC (graphics=0x1bd51520, hdc=0x310106b6) returned 0x0 [0157.027] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0157.027] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExû\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0157.027] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0157.027] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2200180) returned 0x0 [0157.028] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0157.028] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0157.028] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0157.028] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0157.028] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0157.028] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0157.028] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0157.028] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0157.028] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0157.028] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0157.028] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0157.028] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0157.028] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0157.028] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22002b0) returned 0x0 [0157.028] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0157.029] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0157.029] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0157.029] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0157.029] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0157.029] GdipMeasureString (graphics=0x1bd57e60, string="2", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0157.029] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0157.029] GdipDeleteGraphics (graphics=0x1bd57e60) returned 0x0 [0157.029] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0157.029] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0157.029] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0157.029] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0157.029] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0157.029] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0157.029] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57ae0) returned 0x0 [0157.029] GdipIsMatrixIdentity (matrix=0x1bd57ae0, result=0x14e128) returned 0x0 [0157.030] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888890 [0157.030] GdipGetMatrixElements (matrix=0x1bd57ae0, matrixOut=0x1d888890) returned 0x0 [0157.030] LocalFree (hMem=0x1d888890) returned 0x0 [0157.030] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0157.030] GdipGetMatrixElements (matrix=0x1bd57ae0, matrixOut=0x1d888150) returned 0x0 [0157.031] LocalFree (hMem=0x1d888150) returned 0x0 [0157.031] GdipDeleteMatrix (matrix=0x1bd57ae0) returned 0x0 [0157.031] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0157.031] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0157.033] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0157.033] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0157.033] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0157.033] GetCurrentObject (hdc=0x310106b6, type=0x1) returned 0x1b00017 [0157.033] GetCurrentObject (hdc=0x310106b6, type=0x2) returned 0x1900010 [0157.033] GetCurrentObject (hdc=0x310106b6, type=0x7) returned 0x60506af [0157.034] GetCurrentObject (hdc=0x310106b6, type=0x6) returned 0x18a0048 [0157.034] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x39040554 [0157.034] DeleteObject (ho=0x39040554) returned 1 [0157.034] DeleteObject (ho=0x6c04064d) returned 1 [0157.034] OffsetViewportOrgEx (in: hdc=0x310106b6, x=0, y=0, lppt=0x2200670 | out: lppt=0x2200670) returned 1 [0157.034] GetNearestColor (hdc=0x310106b6, color=0xf0f0f0) returned 0xf0f0f0 [0157.034] CreateSolidBrush (color=0xf0f0f0) returned 0x1e1006b3 [0157.034] DeleteObject (ho=0x1e1006b3) returned 1 [0157.034] GdipReleaseDC (graphics=0x1bd51520, hdc=0x310106b6) returned 0x0 [0157.034] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0157.034] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0157.034] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0157.034] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2200770) returned 0x0 [0157.034] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0157.034] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0157.035] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0157.035] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0157.035] GdipDrawString (graphics=0x1bd51520, string="2", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0157.039] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0157.039] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0157.039] GetFocus () returned 0x101f8 [0157.039] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0157.039] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExø\x1f\x02", lpUsedDefaultChar=0x0) returned 17 [0157.039] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0157.040] GdipCreateRegion (region=0x14e030) returned 0x0 [0157.040] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0157.040] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0157.040] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57a60) returned 0x0 [0157.040] GdipIsMatrixIdentity (matrix=0x1bd57a60, result=0x14e098) returned 0x0 [0157.040] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888950 [0157.040] GdipGetMatrixElements (matrix=0x1bd57a60, matrixOut=0x1d888950) returned 0x0 [0157.040] LocalFree (hMem=0x1d888950) returned 0x0 [0157.040] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888750 [0157.040] GdipGetMatrixElements (matrix=0x1bd57a60, matrixOut=0x1d888750) returned 0x0 [0157.041] LocalFree (hMem=0x1d888750) returned 0x0 [0157.041] GdipDeleteMatrix (matrix=0x1bd57a60) returned 0x0 [0157.041] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0157.041] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0157.041] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0157.041] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0157.041] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0157.041] GetCurrentObject (hdc=0x310106b6, type=0x1) returned 0x1b00017 [0157.041] GetCurrentObject (hdc=0x310106b6, type=0x2) returned 0x1900010 [0157.041] GetCurrentObject (hdc=0x310106b6, type=0x7) returned 0x60506af [0157.041] GetCurrentObject (hdc=0x310106b6, type=0x6) returned 0x18a0048 [0157.041] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6d04064d [0157.041] DeleteObject (ho=0x6d04064d) returned 1 [0157.041] DeleteObject (ho=0x3a040554) returned 1 [0157.042] OffsetViewportOrgEx (in: hdc=0x310106b6, x=0, y=0, lppt=0x2200b58 | out: lppt=0x2200b58) returned 1 [0157.042] GetROP2 (hdc=0x310106b6) returned 13 [0157.042] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x173006b9 [0157.042] LineTo (hdc=0x310106b6, x=0, y=0) returned 1 [0157.042] GetROP2 (hdc=0x310106b6) returned 13 [0157.042] LineTo (hdc=0x310106b6, x=0, y=22) returned 1 [0157.042] DeleteObject (ho=0x173006b9) returned 1 [0157.042] GetROP2 (hdc=0x310106b6) returned 13 [0157.042] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x253006b7 [0157.042] LineTo (hdc=0x310106b6, x=25, y=22) returned 1 [0157.042] GetROP2 (hdc=0x310106b6) returned 13 [0157.042] LineTo (hdc=0x310106b6, x=25, y=-1) returned 1 [0157.042] DeleteObject (ho=0x253006b7) returned 1 [0157.042] GetROP2 (hdc=0x310106b6) returned 13 [0157.042] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x183006b9 [0157.042] LineTo (hdc=0x310106b6, x=1, y=1) returned 1 [0157.042] GetROP2 (hdc=0x310106b6) returned 13 [0157.042] LineTo (hdc=0x310106b6, x=1, y=21) returned 1 [0157.042] DeleteObject (ho=0x183006b9) returned 1 [0157.042] GetROP2 (hdc=0x310106b6) returned 13 [0157.043] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x263006b7 [0157.043] LineTo (hdc=0x310106b6, x=24, y=21) returned 1 [0157.043] GetROP2 (hdc=0x310106b6) returned 13 [0157.043] LineTo (hdc=0x310106b6, x=24, y=0) returned 1 [0157.043] DeleteObject (ho=0x263006b7) returned 1 [0157.043] GdipReleaseDC (graphics=0x1bd51520, hdc=0x310106b6) returned 0x0 [0157.043] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0157.043] GdipReleaseDC (graphics=0x1bd51520, hdc=0x310106b6) returned 0x0 [0157.043] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0157.043] DeleteDC (hdc=0x310106b6) returned 1 [0157.043] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0157.043] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0157.043] TranslateMessage (lpMsg=0x14ef10) returned 0 [0157.043] DispatchMessageW (lpMsg=0x14ef10) [0157.043] BeginPaint (hWnd=0x101f6, lpPaint=0x14e5a8) [0157.044] GetStockObject (i=5) returned 0x1900015 [0157.044] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0157.044] GdipCreateFromHDC (hdc=0x5d010558, graphics=0x14e528) returned 0x0 [0157.044] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0157.044] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0157.044] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0157.044] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57820) returned 0x0 [0157.044] GdipIsMatrixIdentity (matrix=0x1bd57820, result=0x14e5b8) returned 0x0 [0157.044] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888750 [0157.044] GdipGetMatrixElements (matrix=0x1bd57820, matrixOut=0x1d888750) returned 0x0 [0157.045] LocalFree (hMem=0x1d888750) returned 0x0 [0157.045] GdipDeleteMatrix (matrix=0x1bd57820) returned 0x0 [0157.045] GdipCreateRegion (region=0x14e550) returned 0x0 [0157.045] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0157.045] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0157.045] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0157.045] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd7b0dbd) returned 0x0 [0157.045] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0157.045] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0157.045] GetCurrentObject (hdc=0x5d010558, type=0x1) returned 0x1b00017 [0157.045] GetNearestColor (hdc=0x5d010558, color=0xf0f0f0) returned 0xf0f0f0 [0157.045] GetNearestColor (hdc=0x5d010558, color=0xa0a0a0) returned 0xa0a0a0 [0157.045] GetNearestColor (hdc=0x5d010558, color=0x696969) returned 0x696969 [0157.045] GetNearestColor (hdc=0x5d010558, color=0xa0a0a0) returned 0xa0a0a0 [0157.045] GetNearestColor (hdc=0x5d010558, color=0x0) returned 0x0 [0157.045] GetNearestColor (hdc=0x5d010558, color=0xffffff) returned 0xffffff [0157.045] GetNearestColor (hdc=0x5d010558, color=0xe5e5e5) returned 0xe5e5e5 [0157.046] GetNearestColor (hdc=0x5d010558, color=0xd8d8d8) returned 0xd8d8d8 [0157.046] GetNearestColor (hdc=0x5d010558, color=0x0) returned 0x0 [0157.046] GdipReleaseDC (graphics=0x1bd51520, hdc=0x5d010558) returned 0x0 [0157.046] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0157.046] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x10 \x02", lpUsedDefaultChar=0x0) returned 17 [0157.046] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0157.046] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2201690) returned 0x0 [0157.046] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0157.046] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0157.046] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0157.046] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0157.046] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0157.046] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0157.046] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0157.046] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0157.047] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0157.047] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0157.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0157.047] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0157.083] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0157.083] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22017c0) returned 0x0 [0157.083] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0157.083] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0157.083] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=2) returned 0x0 [0157.083] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0157.083] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0157.083] GdipMeasureString (graphics=0x1bd57e60, string="1", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0157.083] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0157.084] GdipDeleteGraphics (graphics=0x1bd57e60) returned 0x0 [0157.084] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0157.084] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0157.084] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0157.084] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0157.084] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0157.084] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0157.084] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd578a0) returned 0x0 [0157.084] GdipIsMatrixIdentity (matrix=0x1bd578a0, result=0x14e128) returned 0x0 [0157.084] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888ad0 [0157.084] GdipGetMatrixElements (matrix=0x1bd578a0, matrixOut=0x1d888ad0) returned 0x0 [0157.085] LocalFree (hMem=0x1d888ad0) returned 0x0 [0157.085] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0157.085] GdipGetMatrixElements (matrix=0x1bd578a0, matrixOut=0x1d888150) returned 0x0 [0157.086] LocalFree (hMem=0x1d888150) returned 0x0 [0157.086] GdipDeleteMatrix (matrix=0x1bd578a0) returned 0x0 [0157.086] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0157.086] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0157.086] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0157.086] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0157.086] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0157.086] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3b040554 [0157.086] DeleteObject (ho=0x3b040554) returned 1 [0157.086] DeleteObject (ho=0x6e04064d) returned 1 [0157.086] OffsetViewportOrgEx (in: hdc=0x5d010558, x=0, y=0, lppt=0x2201b80 | out: lppt=0x2201b80) returned 1 [0157.086] GetNearestColor (hdc=0x5d010558, color=0xf0f0f0) returned 0xf0f0f0 [0157.086] CreateSolidBrush (color=0xf0f0f0) returned 0x1f1006b3 [0157.086] DeleteObject (ho=0x1f1006b3) returned 1 [0157.086] GdipReleaseDC (graphics=0x1bd51520, hdc=0x5d010558) returned 0x0 [0157.086] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0157.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0157.087] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0157.087] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2201c80) returned 0x0 [0157.087] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0157.087] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0157.087] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=2) returned 0x0 [0157.087] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0157.087] GdipDrawString (graphics=0x1bd51520, string="1", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0157.091] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0157.091] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0157.091] GetFocus () returned 0x101f8 [0157.091] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0157.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\r \x02", lpUsedDefaultChar=0x0) returned 17 [0157.092] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0157.092] GdipCreateRegion (region=0x14e030) returned 0x0 [0157.092] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0157.092] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0157.092] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57a20) returned 0x0 [0157.092] GdipIsMatrixIdentity (matrix=0x1bd57a20, result=0x14e098) returned 0x0 [0157.092] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0157.092] GdipGetMatrixElements (matrix=0x1bd57a20, matrixOut=0x1d888150) returned 0x0 [0157.093] LocalFree (hMem=0x1d888150) returned 0x0 [0157.093] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888cd0 [0157.093] GdipGetMatrixElements (matrix=0x1bd57a20, matrixOut=0x1d888cd0) returned 0x0 [0157.093] LocalFree (hMem=0x1d888cd0) returned 0x0 [0157.093] GdipDeleteMatrix (matrix=0x1bd57a20) returned 0x0 [0157.093] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0157.093] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0157.093] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0157.093] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0157.094] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0157.094] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6f04064d [0157.094] DeleteObject (ho=0x6f04064d) returned 1 [0157.094] DeleteObject (ho=0x3c040554) returned 1 [0157.094] OffsetViewportOrgEx (in: hdc=0x5d010558, x=0, y=0, lppt=0x2202068 | out: lppt=0x2202068) returned 1 [0157.094] GetROP2 (hdc=0x5d010558) returned 13 [0157.094] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x273006b7 [0157.094] LineTo (hdc=0x5d010558, x=0, y=0) returned 1 [0157.095] GetROP2 (hdc=0x5d010558) returned 13 [0157.095] LineTo (hdc=0x5d010558, x=0, y=22) returned 1 [0157.095] DeleteObject (ho=0x273006b7) returned 1 [0157.095] GetROP2 (hdc=0x5d010558) returned 13 [0157.095] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x193006b9 [0157.095] LineTo (hdc=0x5d010558, x=25, y=22) returned 1 [0157.095] GetROP2 (hdc=0x5d010558) returned 13 [0157.095] LineTo (hdc=0x5d010558, x=25, y=-1) returned 1 [0157.095] DeleteObject (ho=0x193006b9) returned 1 [0157.095] GetROP2 (hdc=0x5d010558) returned 13 [0157.095] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x283006b7 [0157.095] LineTo (hdc=0x5d010558, x=1, y=1) returned 1 [0157.095] GetROP2 (hdc=0x5d010558) returned 13 [0157.095] LineTo (hdc=0x5d010558, x=1, y=21) returned 1 [0157.095] DeleteObject (ho=0x283006b7) returned 1 [0157.095] GetROP2 (hdc=0x5d010558) returned 13 [0157.095] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x1a3006b9 [0157.095] LineTo (hdc=0x5d010558, x=24, y=21) returned 1 [0157.096] GetROP2 (hdc=0x5d010558) returned 13 [0157.096] LineTo (hdc=0x5d010558, x=24, y=0) returned 1 [0157.096] DeleteObject (ho=0x1a3006b9) returned 1 [0157.096] GdipReleaseDC (graphics=0x1bd51520, hdc=0x5d010558) returned 0x0 [0157.096] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0157.096] GdipReleaseDC (graphics=0x1bd51520, hdc=0x5d010558) returned 0x0 [0157.096] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0157.097] DeleteDC (hdc=0x5d010558) returned 1 [0157.097] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0157.097] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0157.097] TranslateMessage (lpMsg=0x14ef10) returned 0 [0157.097] DispatchMessageW (lpMsg=0x14ef10) [0157.098] SetTextColor (hdc=0xffffffffd001053c, color=0x0) returned 0x0 [0157.099] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0157.099] TranslateMessage (lpMsg=0x14ef10) returned 0 [0157.099] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0157.099] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0157.100] WaitMessage () returned 1 [0157.650] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0157.650] IsWindowUnicode (hWnd=0x101f8) returned 1 [0157.650] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0157.650] TranslateMessage (lpMsg=0x14ef10) returned 0 [0157.650] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0157.650] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0157.650] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0157.650] WaitMessage () returned 1 [0158.175] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0158.175] IsWindowUnicode (hWnd=0x101f8) returned 1 [0158.175] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0158.175] TranslateMessage (lpMsg=0x14ef10) returned 0 [0158.175] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0158.176] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0158.176] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0158.176] WaitMessage () returned 1 [0158.708] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0158.708] IsWindowUnicode (hWnd=0x101f8) returned 1 [0158.708] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0158.708] TranslateMessage (lpMsg=0x14ef10) returned 0 [0158.708] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0158.708] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0158.708] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0158.708] WaitMessage () returned 1 [0159.240] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.240] IsWindowUnicode (hWnd=0x101f8) returned 1 [0159.240] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.240] TranslateMessage (lpMsg=0x14ef10) returned 0 [0159.240] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0159.240] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0159.240] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 0 [0159.240] WaitMessage () returned 1 [0159.357] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.357] IsWindowUnicode (hWnd=0x101f8) returned 1 [0159.357] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.361] GetKeyState (nVirtKey=16) returned 0 [0159.361] GetKeyState (nVirtKey=17) returned 0 [0159.361] GetKeyState (nVirtKey=18) returned -127 [0159.364] SendMessageW (hWnd=0x101f8, Msg=0x129, wParam=0x0, lParam=0x0) [0159.364] GetParent (hWnd=0x3002a) returned 0x0 [0159.364] SendMessageW (hWnd=0x3002a, Msg=0x127, wParam=0x20002, lParam=0x0) [0159.364] GetStockObject (i=5) returned 0x1900015 [0159.365] GetStockObject (i=5) returned 0x1900015 [0159.365] GetStockObject (i=5) returned 0x1900015 [0159.365] GetStockObject (i=5) returned 0x1900015 [0159.366] GetStockObject (i=5) returned 0x1900015 [0159.366] GetStockObject (i=5) returned 0x1900015 [0159.366] GetStockObject (i=5) returned 0x1900015 [0159.366] GetStockObject (i=5) returned 0x1900015 [0159.367] GetStockObject (i=5) returned 0x1900015 [0159.367] GetStockObject (i=5) returned 0x1900015 [0159.367] GetStockObject (i=5) returned 0x1900015 [0159.367] GetStockObject (i=5) returned 0x1900015 [0159.367] GetStockObject (i=5) returned 0x1900015 [0159.368] GetStockObject (i=5) returned 0x1900015 [0159.368] GetStockObject (i=5) returned 0x1900015 [0159.368] GetStockObject (i=5) returned 0x1900015 [0159.368] GetStockObject (i=5) returned 0x1900015 [0159.368] GetStockObject (i=5) returned 0x1900015 [0159.369] GetStockObject (i=5) returned 0x1900015 [0159.369] GetStockObject (i=5) returned 0x1900015 [0159.369] GetStockObject (i=5) returned 0x1900015 [0159.369] GetStockObject (i=5) returned 0x1900015 [0159.369] GetStockObject (i=5) returned 0x1900015 [0159.370] GetStockObject (i=5) returned 0x1900015 [0159.370] GetStockObject (i=5) returned 0x1900015 [0159.370] GetStockObject (i=5) returned 0x1900015 [0159.370] GetStockObject (i=5) returned 0x1900015 [0159.370] GetStockObject (i=5) returned 0x1900015 [0159.371] GetStockObject (i=5) returned 0x1900015 [0159.371] GetStockObject (i=5) returned 0x1900015 [0159.372] GetStockObject (i=5) returned 0x1900015 [0159.372] GetStockObject (i=5) returned 0x1900015 [0159.372] GetStockObject (i=5) returned 0x1900015 [0159.372] GetStockObject (i=5) returned 0x1900015 [0159.373] GetStockObject (i=5) returned 0x1900015 [0159.373] GetStockObject (i=5) returned 0x1900015 [0159.373] GetStockObject (i=5) returned 0x1900015 [0159.373] GetStockObject (i=5) returned 0x1900015 [0159.375] GetKeyState (nVirtKey=16) returned 0 [0159.375] GetKeyState (nVirtKey=17) returned 0 [0159.375] GetKeyState (nVirtKey=18) returned -127 [0159.410] TranslateMessage (lpMsg=0x14ef10) returned 1 [0159.410] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0159.411] GetKeyState (nVirtKey=16) returned 0 [0159.411] GetKeyState (nVirtKey=17) returned 0 [0159.411] GetKeyState (nVirtKey=18) returned -127 [0159.411] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0159.411] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.411] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0159.412] IsWindowUnicode (hWnd=0x3002a) returned 1 [0159.412] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.412] GetKeyState (nVirtKey=16) returned 0 [0159.412] GetKeyState (nVirtKey=17) returned 0 [0159.412] GetKeyState (nVirtKey=18) returned -127 [0159.412] TranslateMessage (lpMsg=0x14ef10) returned 1 [0159.412] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0159.412] GetKeyState (nVirtKey=16) returned 0 [0159.412] GetKeyState (nVirtKey=17) returned 0 [0159.412] GetKeyState (nVirtKey=18) returned -127 [0159.412] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x105, wParam=0x1b, lParam=0xa0010001) returned 0x0 [0159.412] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.412] IsWindowUnicode (hWnd=0x101f8) returned 1 [0159.413] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.413] GetKeyState (nVirtKey=16) returned 0 [0159.413] GetKeyState (nVirtKey=17) returned 0 [0159.413] GetKeyState (nVirtKey=18) returned 1 [0159.413] TranslateMessage (lpMsg=0x14ef10) returned 1 [0159.413] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0159.413] GetKeyState (nVirtKey=16) returned 0 [0159.413] GetKeyState (nVirtKey=17) returned 0 [0159.413] GetKeyState (nVirtKey=18) returned 1 [0159.413] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4b20, hWnd=0x101f8, Msg=0x101, wParam=0x12, lParam=0xc0380001) returned 0x0 [0159.413] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.413] IsWindowUnicode (hWnd=0x3002a) returned 1 [0159.413] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.413] TranslateMessage (lpMsg=0x14ef10) returned 0 [0159.413] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0159.414] BeginPaint (in: hWnd=0x3002a, lpPaint=0x14e618 | out: lpPaint=0x14e618) returned 0xffffffffd001053c [0159.414] GetWindowPlacement (in: hWnd=0x3002a, lpwndpl=0x14e108 | out: lpwndpl=0x14e108) returned 1 [0159.414] GetClientRect (in: hWnd=0x3002a, lpRect=0x14e020 | out: lpRect=0x14e020) returned 1 [0159.414] GetWindowTextLengthW (hWnd=0x3002a) returned 5 [0159.414] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0159.414] GetSystemMetrics (nIndex=42) returned 0 [0159.414] GetWindowTextW (in: hWnd=0x3002a, lpString=0x14dd90, nMaxCount=6 | out: lpString="Form1") returned 5 [0159.414] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xd, wParam=0x6, lParam=0x14dd90) returned 0x5 [0159.414] GetClientRect (in: hWnd=0x3002a, lpRect=0x14de08 | out: lpRect=0x14de08) returned 1 [0159.414] GetCurrentObject (hdc=0xffffffffd001053c, type=0x1) returned 0x1b00017 [0159.414] GetCurrentObject (hdc=0xffffffffd001053c, type=0x2) returned 0x1900010 [0159.414] GetCurrentObject (hdc=0xffffffffd001053c, type=0x7) returned 0x1a050531 [0159.414] GetCurrentObject (hdc=0xffffffffd001053c, type=0x6) returned 0x18a0048 [0159.414] SaveDC (hdc=0xffffffffd001053c) returned 1 [0159.414] GetNearestColor (hdc=0xffffffffd001053c, color=0xf0f0f0) returned 0xf0f0f0 [0159.414] CreateSolidBrush (color=0xf0f0f0) returned 0x201006b3 [0159.414] FillRect (hDC=0xffffffffd001053c, lprc=0x14daf8, hbr=0x201006b3) returned 1 [0159.415] DeleteObject (ho=0x201006b3) returned 1 [0159.415] RestoreDC (hdc=0xffffffffd001053c, nSavedDC=-1) returned 1 [0159.415] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0159.415] GetWindowTextLengthW (hWnd=0x3002a) returned 5 [0159.415] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0159.415] GetSystemMetrics (nIndex=42) returned 0 [0159.415] GetWindowTextW (in: hWnd=0x3002a, lpString=0x14e4c0, nMaxCount=6 | out: lpString="Form1") returned 5 [0159.415] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4a40, hWnd=0x3002a, Msg=0xd, wParam=0x6, lParam=0x14e4c0) returned 0x5 [0159.415] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0159.415] EndPaint (hWnd=0x3002a, lpPaint=0x14e5b8) returned 1 [0159.415] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.415] IsWindowUnicode (hWnd=0x30132) returned 1 [0159.415] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.415] TranslateMessage (lpMsg=0x14ef10) returned 0 [0159.415] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0159.416] BeginPaint (in: hWnd=0x30132, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xffffffffd001053c [0159.416] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x30132, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0159.416] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x30132, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0159.416] GetStockObject (i=5) returned 0x1900015 [0159.416] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0159.416] CreateCompatibleDC (hdc=0xffffffffd001053c) returned 0x180106bd [0159.416] SelectObject (hdc=0x180106bd, h=0x60506af) returned 0x185000f [0159.416] GdipCreateFromHDC (hdc=0x180106bd, graphics=0x14e528) returned 0x0 [0159.417] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0159.417] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0159.417] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0159.417] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd578a0) returned 0x0 [0159.417] GdipIsMatrixIdentity (matrix=0x1bd578a0, result=0x14e5b8) returned 0x0 [0159.417] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0159.417] GdipGetMatrixElements (matrix=0x1bd578a0, matrixOut=0x1d888150) returned 0x0 [0159.418] LocalFree (hMem=0x1d888150) returned 0x0 [0159.418] GdipDeleteMatrix (matrix=0x1bd578a0) returned 0x0 [0159.418] GdipCreateRegion (region=0x14e550) returned 0x0 [0159.418] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.418] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0159.418] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0159.418] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd780dbd) returned 0x0 [0159.418] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.418] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0159.418] GetCurrentObject (hdc=0x180106bd, type=0x1) returned 0x1b00017 [0159.418] GetCurrentObject (hdc=0x180106bd, type=0x2) returned 0x1900010 [0159.418] GetCurrentObject (hdc=0x180106bd, type=0x7) returned 0x60506af [0159.418] GetCurrentObject (hdc=0x180106bd, type=0x6) returned 0x18a0048 [0159.418] SaveDC (hdc=0x180106bd) returned 1 [0159.418] GetNearestColor (hdc=0x180106bd, color=0xf0f0f0) returned 0xf0f0f0 [0159.418] GetNearestColor (hdc=0x180106bd, color=0xa0a0a0) returned 0xa0a0a0 [0159.418] GetNearestColor (hdc=0x180106bd, color=0x696969) returned 0x696969 [0159.419] GetNearestColor (hdc=0x180106bd, color=0xa0a0a0) returned 0xa0a0a0 [0159.419] GetNearestColor (hdc=0x180106bd, color=0x0) returned 0x0 [0159.419] GetNearestColor (hdc=0x180106bd, color=0xffffff) returned 0xffffff [0159.419] GetNearestColor (hdc=0x180106bd, color=0xe5e5e5) returned 0xe5e5e5 [0159.419] GetNearestColor (hdc=0x180106bd, color=0xd8d8d8) returned 0xd8d8d8 [0159.419] GetNearestColor (hdc=0x180106bd, color=0x0) returned 0x0 [0159.419] RestoreDC (hdc=0x180106bd, nSavedDC=-1) returned 1 [0159.419] GdipReleaseDC (graphics=0x1bd51520, hdc=0x180106bd) returned 0x0 [0159.419] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.419] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExA \x02", lpUsedDefaultChar=0x0) returned 17 [0159.420] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.420] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2204758) returned 0x0 [0159.420] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.420] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.420] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.420] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0159.420] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0159.420] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0159.420] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0159.420] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0159.420] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.420] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.420] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.421] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.421] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0159.421] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2204888) returned 0x0 [0159.421] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0159.421] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0159.421] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=1) returned 0x0 [0159.421] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.421] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.421] GdipMeasureString (graphics=0x1bd57e60, string="*", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0159.421] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0159.421] GdipDeleteGraphics (graphics=0x1bd57e60) returned 0x0 [0159.421] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.421] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.422] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.422] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0159.422] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.422] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0159.422] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd577a0) returned 0x0 [0159.422] GdipIsMatrixIdentity (matrix=0x1bd577a0, result=0x14e128) returned 0x0 [0159.422] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0159.422] GdipGetMatrixElements (matrix=0x1bd577a0, matrixOut=0x1d888150) returned 0x0 [0159.425] LocalFree (hMem=0x1d888150) returned 0x0 [0159.425] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8882d0 [0159.425] GdipGetMatrixElements (matrix=0x1bd577a0, matrixOut=0x1d8882d0) returned 0x0 [0159.426] LocalFree (hMem=0x1d8882d0) returned 0x0 [0159.426] GdipDeleteMatrix (matrix=0x1bd577a0) returned 0x0 [0159.426] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0159.426] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0159.426] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0159.426] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.426] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0159.426] GetCurrentObject (hdc=0x180106bd, type=0x1) returned 0x1b00017 [0159.426] GetCurrentObject (hdc=0x180106bd, type=0x2) returned 0x1900010 [0159.426] GetCurrentObject (hdc=0x180106bd, type=0x7) returned 0x60506af [0159.426] GetCurrentObject (hdc=0x180106bd, type=0x6) returned 0x18a0048 [0159.426] SaveDC (hdc=0x180106bd) returned 1 [0159.426] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3d040554 [0159.426] GetClipRgn (hdc=0x180106bd, hrgn=0x3d040554) returned 0 [0159.426] SelectClipRgn (hdc=0x180106bd, hrgn=0x7004064d) returned 2 [0159.426] DeleteObject (ho=0x3d040554) returned 1 [0159.426] DeleteObject (ho=0x7004064d) returned 1 [0159.427] OffsetViewportOrgEx (in: hdc=0x180106bd, x=0, y=0, lppt=0x2204c48 | out: lppt=0x2204c48) returned 1 [0159.427] GetNearestColor (hdc=0x180106bd, color=0xf0f0f0) returned 0xf0f0f0 [0159.427] CreateSolidBrush (color=0xf0f0f0) returned 0x211006b3 [0159.427] FillRect (hDC=0x180106bd, lprc=0x14e1c8, hbr=0x211006b3) returned 1 [0159.427] DeleteObject (ho=0x211006b3) returned 1 [0159.427] RestoreDC (hdc=0x180106bd, nSavedDC=-1) returned 1 [0159.427] GdipReleaseDC (graphics=0x1bd51520, hdc=0x180106bd) returned 0x0 [0159.427] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.427] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0159.427] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.427] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2204d48) returned 0x0 [0159.427] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.428] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.428] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.428] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0159.428] GdipDrawString (graphics=0x1bd51520, string="*", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0159.428] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0159.428] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.428] GetFocus () returned 0x101f8 [0159.428] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.428] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx> \x02", lpUsedDefaultChar=0x0) returned 17 [0159.429] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.429] GdipCreateRegion (region=0x14e030) returned 0x0 [0159.429] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.429] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0159.429] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd576e0) returned 0x0 [0159.429] GdipIsMatrixIdentity (matrix=0x1bd576e0, result=0x14e098) returned 0x0 [0159.429] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888950 [0159.429] GdipGetMatrixElements (matrix=0x1bd576e0, matrixOut=0x1d888950) returned 0x0 [0159.429] LocalFree (hMem=0x1d888950) returned 0x0 [0159.430] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888cd0 [0159.430] GdipGetMatrixElements (matrix=0x1bd576e0, matrixOut=0x1d888cd0) returned 0x0 [0159.430] LocalFree (hMem=0x1d888cd0) returned 0x0 [0159.430] GdipDeleteMatrix (matrix=0x1bd576e0) returned 0x0 [0159.430] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0159.430] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0159.430] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0159.430] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.430] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0159.430] GetCurrentObject (hdc=0x180106bd, type=0x1) returned 0x1b00017 [0159.430] GetCurrentObject (hdc=0x180106bd, type=0x2) returned 0x1900010 [0159.430] GetCurrentObject (hdc=0x180106bd, type=0x7) returned 0x60506af [0159.430] GetCurrentObject (hdc=0x180106bd, type=0x6) returned 0x18a0048 [0159.431] SaveDC (hdc=0x180106bd) returned 1 [0159.431] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7104064d [0159.431] GetClipRgn (hdc=0x180106bd, hrgn=0x7104064d) returned 0 [0159.431] SelectClipRgn (hdc=0x180106bd, hrgn=0x3e040554) returned 2 [0159.431] DeleteObject (ho=0x7104064d) returned 1 [0159.431] DeleteObject (ho=0x3e040554) returned 1 [0159.431] OffsetViewportOrgEx (in: hdc=0x180106bd, x=0, y=0, lppt=0x2205130 | out: lppt=0x2205130) returned 1 [0159.431] GetROP2 (hdc=0x180106bd) returned 13 [0159.431] GetBkMode (hdc=0x180106bd) returned 2 [0159.431] SetBkMode (hdc=0x180106bd, mode=1) returned 2 [0159.431] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x13006c0 [0159.431] SelectObject (hdc=0x180106bd, h=0x13006c0) returned 0x1b00017 [0159.431] MoveToEx (in: hdc=0x180106bd, x=25, y=0, lppt=0x2205198 | out: lppt=0x2205198) returned 1 [0159.431] LineTo (hdc=0x180106bd, x=0, y=0) returned 1 [0159.431] SetBkMode (hdc=0x180106bd, mode=2) returned 1 [0159.431] MoveToEx (in: hdc=0x180106bd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.431] GetROP2 (hdc=0x180106bd) returned 13 [0159.431] GetBkMode (hdc=0x180106bd) returned 2 [0159.431] SetBkMode (hdc=0x180106bd, mode=1) returned 2 [0159.431] SelectObject (hdc=0x180106bd, h=0x13006c0) returned 0x13006c0 [0159.431] MoveToEx (in: hdc=0x180106bd, x=0, y=0, lppt=0x22051b0 | out: lppt=0x22051b0) returned 1 [0159.432] LineTo (hdc=0x180106bd, x=0, y=22) returned 1 [0159.432] SetBkMode (hdc=0x180106bd, mode=2) returned 1 [0159.432] MoveToEx (in: hdc=0x180106bd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.432] SelectObject (hdc=0x180106bd, h=0x1b00017) returned 0x13006c0 [0159.432] DeleteObject (ho=0x13006c0) returned 1 [0159.432] GetROP2 (hdc=0x180106bd) returned 13 [0159.432] GetBkMode (hdc=0x180106bd) returned 2 [0159.432] SetBkMode (hdc=0x180106bd, mode=1) returned 2 [0159.432] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x13006c1 [0159.432] SelectObject (hdc=0x180106bd, h=0x13006c1) returned 0x1b00017 [0159.432] MoveToEx (in: hdc=0x180106bd, x=0, y=22, lppt=0x2205218 | out: lppt=0x2205218) returned 1 [0159.432] LineTo (hdc=0x180106bd, x=25, y=22) returned 1 [0159.432] SetBkMode (hdc=0x180106bd, mode=2) returned 1 [0159.432] MoveToEx (in: hdc=0x180106bd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.432] GetROP2 (hdc=0x180106bd) returned 13 [0159.432] GetBkMode (hdc=0x180106bd) returned 2 [0159.432] SetBkMode (hdc=0x180106bd, mode=1) returned 2 [0159.432] SelectObject (hdc=0x180106bd, h=0x13006c1) returned 0x13006c1 [0159.432] MoveToEx (in: hdc=0x180106bd, x=25, y=22, lppt=0x2205230 | out: lppt=0x2205230) returned 1 [0159.432] LineTo (hdc=0x180106bd, x=25, y=-1) returned 1 [0159.432] SetBkMode (hdc=0x180106bd, mode=2) returned 1 [0159.432] MoveToEx (in: hdc=0x180106bd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.433] SelectObject (hdc=0x180106bd, h=0x1b00017) returned 0x13006c1 [0159.433] DeleteObject (ho=0x13006c1) returned 1 [0159.433] GetROP2 (hdc=0x180106bd) returned 13 [0159.433] GetBkMode (hdc=0x180106bd) returned 2 [0159.433] SetBkMode (hdc=0x180106bd, mode=1) returned 2 [0159.433] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x23006c0 [0159.433] SelectObject (hdc=0x180106bd, h=0x23006c0) returned 0x1b00017 [0159.433] MoveToEx (in: hdc=0x180106bd, x=24, y=1, lppt=0x2205298 | out: lppt=0x2205298) returned 1 [0159.433] LineTo (hdc=0x180106bd, x=1, y=1) returned 1 [0159.433] SetBkMode (hdc=0x180106bd, mode=2) returned 1 [0159.433] MoveToEx (in: hdc=0x180106bd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.433] GetROP2 (hdc=0x180106bd) returned 13 [0159.433] GetBkMode (hdc=0x180106bd) returned 2 [0159.433] SetBkMode (hdc=0x180106bd, mode=1) returned 2 [0159.433] SelectObject (hdc=0x180106bd, h=0x23006c0) returned 0x23006c0 [0159.433] MoveToEx (in: hdc=0x180106bd, x=1, y=1, lppt=0x22052b0 | out: lppt=0x22052b0) returned 1 [0159.433] LineTo (hdc=0x180106bd, x=1, y=21) returned 1 [0159.433] SetBkMode (hdc=0x180106bd, mode=2) returned 1 [0159.433] MoveToEx (in: hdc=0x180106bd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.433] SelectObject (hdc=0x180106bd, h=0x1b00017) returned 0x23006c0 [0159.433] DeleteObject (ho=0x23006c0) returned 1 [0159.434] GetROP2 (hdc=0x180106bd) returned 13 [0159.434] GetBkMode (hdc=0x180106bd) returned 2 [0159.434] SetBkMode (hdc=0x180106bd, mode=1) returned 2 [0159.434] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x23006c1 [0159.434] SelectObject (hdc=0x180106bd, h=0x23006c1) returned 0x1b00017 [0159.434] MoveToEx (in: hdc=0x180106bd, x=1, y=21, lppt=0x2205318 | out: lppt=0x2205318) returned 1 [0159.434] LineTo (hdc=0x180106bd, x=24, y=21) returned 1 [0159.434] SetBkMode (hdc=0x180106bd, mode=2) returned 1 [0159.434] MoveToEx (in: hdc=0x180106bd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.434] GetROP2 (hdc=0x180106bd) returned 13 [0159.434] GetBkMode (hdc=0x180106bd) returned 2 [0159.434] SetBkMode (hdc=0x180106bd, mode=1) returned 2 [0159.434] SelectObject (hdc=0x180106bd, h=0x23006c1) returned 0x23006c1 [0159.434] MoveToEx (in: hdc=0x180106bd, x=24, y=21, lppt=0x2205330 | out: lppt=0x2205330) returned 1 [0159.434] LineTo (hdc=0x180106bd, x=24, y=0) returned 1 [0159.434] SetBkMode (hdc=0x180106bd, mode=2) returned 1 [0159.434] MoveToEx (in: hdc=0x180106bd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.434] SelectObject (hdc=0x180106bd, h=0x1b00017) returned 0x23006c1 [0159.434] DeleteObject (ho=0x23006c1) returned 1 [0159.434] RestoreDC (hdc=0x180106bd, nSavedDC=-1) returned 1 [0159.434] GdipReleaseDC (graphics=0x1bd51520, hdc=0x180106bd) returned 0x0 [0159.435] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0159.435] BitBlt (hdc=0xffffffffd001053c, x=0, y=0, cx=26, cy=23, hdcSrc=0x180106bd, x1=0, y1=0, rop=0xcc0020) returned 1 [0159.435] GdipReleaseDC (graphics=0x1bd51520, hdc=0x180106bd) returned 0x0 [0159.435] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0159.435] SelectObject (hdc=0x180106bd, h=0x185000f) returned 0x60506af [0159.435] DeleteDC (hdc=0x180106bd) returned 1 [0159.435] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0159.435] EndPaint (hWnd=0x30132, lpPaint=0x14e548) returned 1 [0159.435] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.435] IsWindowUnicode (hWnd=0x20146) returned 1 [0159.435] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.435] TranslateMessage (lpMsg=0x14ef10) returned 0 [0159.435] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0159.436] BeginPaint (in: hWnd=0x20146, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xffffffffd001053c [0159.436] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20146, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0159.436] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20146, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0159.436] GetStockObject (i=5) returned 0x1900015 [0159.436] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0159.436] CreateCompatibleDC (hdc=0xffffffffd001053c) returned 0x40106bf [0159.436] SelectObject (hdc=0x40106bf, h=0x60506af) returned 0x185000f [0159.436] GdipCreateFromHDC (hdc=0x40106bf, graphics=0x14e528) returned 0x0 [0159.436] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0159.436] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=58, height=23, combineMode=0x0) returned 0x0 [0159.437] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0159.437] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57ba0) returned 0x0 [0159.437] GdipIsMatrixIdentity (matrix=0x1bd57ba0, result=0x14e5b8) returned 0x0 [0159.437] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0159.437] GdipGetMatrixElements (matrix=0x1bd57ba0, matrixOut=0x1d888150) returned 0x0 [0159.437] LocalFree (hMem=0x1d888150) returned 0x0 [0159.437] GdipDeleteMatrix (matrix=0x1bd57ba0) returned 0x0 [0159.437] GdipCreateRegion (region=0x14e550) returned 0x0 [0159.437] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.437] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0159.438] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0159.438] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd750dbd) returned 0x0 [0159.438] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.438] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0159.438] GetCurrentObject (hdc=0x40106bf, type=0x1) returned 0x1b00017 [0159.438] GetCurrentObject (hdc=0x40106bf, type=0x2) returned 0x1900010 [0159.438] GetCurrentObject (hdc=0x40106bf, type=0x7) returned 0x60506af [0159.438] GetCurrentObject (hdc=0x40106bf, type=0x6) returned 0x18a0048 [0159.438] SaveDC (hdc=0x40106bf) returned 1 [0159.438] GetNearestColor (hdc=0x40106bf, color=0xf0f0f0) returned 0xf0f0f0 [0159.438] GetNearestColor (hdc=0x40106bf, color=0xa0a0a0) returned 0xa0a0a0 [0159.438] GetNearestColor (hdc=0x40106bf, color=0x696969) returned 0x696969 [0159.438] GetNearestColor (hdc=0x40106bf, color=0xa0a0a0) returned 0xa0a0a0 [0159.438] GetNearestColor (hdc=0x40106bf, color=0x0) returned 0x0 [0159.438] GetNearestColor (hdc=0x40106bf, color=0xffffff) returned 0xffffff [0159.438] GetNearestColor (hdc=0x40106bf, color=0xe5e5e5) returned 0xe5e5e5 [0159.439] GetNearestColor (hdc=0x40106bf, color=0xd8d8d8) returned 0xd8d8d8 [0159.439] GetNearestColor (hdc=0x40106bf, color=0x0) returned 0x0 [0159.439] RestoreDC (hdc=0x40106bf, nSavedDC=-1) returned 1 [0159.439] GdipReleaseDC (graphics=0x1bd51520, hdc=0x40106bf) returned 0x0 [0159.439] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.439] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExV \x02", lpUsedDefaultChar=0x0) returned 17 [0159.439] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.439] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2205c50) returned 0x0 [0159.439] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.439] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.439] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.439] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0159.439] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0159.440] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0159.440] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0159.440] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0159.440] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.440] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.440] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.440] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.440] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0159.440] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2205d80) returned 0x0 [0159.440] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0159.440] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0159.440] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=1) returned 0x0 [0159.440] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.441] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.441] GdipMeasureString (graphics=0x1bd57e60, string="=", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0159.441] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0159.441] GdipDeleteGraphics (graphics=0x1bd57e60) returned 0x0 [0159.441] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.441] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.441] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.441] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0159.441] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.441] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0159.441] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57720) returned 0x0 [0159.441] GdipIsMatrixIdentity (matrix=0x1bd57720, result=0x14e128) returned 0x0 [0159.441] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888b50 [0159.441] GdipGetMatrixElements (matrix=0x1bd57720, matrixOut=0x1d888b50) returned 0x0 [0159.442] LocalFree (hMem=0x1d888b50) returned 0x0 [0159.442] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8882d0 [0159.442] GdipGetMatrixElements (matrix=0x1bd57720, matrixOut=0x1d8882d0) returned 0x0 [0159.442] LocalFree (hMem=0x1d8882d0) returned 0x0 [0159.442] GdipDeleteMatrix (matrix=0x1bd57720) returned 0x0 [0159.442] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0159.442] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0159.442] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0159.442] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.442] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0159.442] GetCurrentObject (hdc=0x40106bf, type=0x1) returned 0x1b00017 [0159.442] GetCurrentObject (hdc=0x40106bf, type=0x2) returned 0x1900010 [0159.442] GetCurrentObject (hdc=0x40106bf, type=0x7) returned 0x60506af [0159.443] GetCurrentObject (hdc=0x40106bf, type=0x6) returned 0x18a0048 [0159.443] SaveDC (hdc=0x40106bf) returned 1 [0159.443] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3f040554 [0159.443] GetClipRgn (hdc=0x40106bf, hrgn=0x3f040554) returned 0 [0159.443] SelectClipRgn (hdc=0x40106bf, hrgn=0x7204064d) returned 2 [0159.443] DeleteObject (ho=0x3f040554) returned 1 [0159.443] DeleteObject (ho=0x7204064d) returned 1 [0159.443] OffsetViewportOrgEx (in: hdc=0x40106bf, x=0, y=0, lppt=0x2206140 | out: lppt=0x2206140) returned 1 [0159.443] GetNearestColor (hdc=0x40106bf, color=0xf0f0f0) returned 0xf0f0f0 [0159.443] CreateSolidBrush (color=0xf0f0f0) returned 0x221006b3 [0159.443] FillRect (hDC=0x40106bf, lprc=0x14e1c8, hbr=0x221006b3) returned 1 [0159.443] DeleteObject (ho=0x221006b3) returned 1 [0159.443] RestoreDC (hdc=0x40106bf, nSavedDC=-1) returned 1 [0159.443] GdipReleaseDC (graphics=0x1bd51520, hdc=0x40106bf) returned 0x0 [0159.443] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.443] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0159.444] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.444] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2206240) returned 0x0 [0159.444] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.444] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.444] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.444] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0159.444] GdipDrawString (graphics=0x1bd51520, string="=", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0159.444] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0159.444] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.444] GetFocus () returned 0x101f8 [0159.444] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.445] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExS \x02", lpUsedDefaultChar=0x0) returned 17 [0159.445] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.445] GdipCreateRegion (region=0x14e030) returned 0x0 [0159.445] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.445] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0159.445] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57920) returned 0x0 [0159.445] GdipIsMatrixIdentity (matrix=0x1bd57920, result=0x14e098) returned 0x0 [0159.445] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0159.445] GdipGetMatrixElements (matrix=0x1bd57920, matrixOut=0x1d888150) returned 0x0 [0159.445] LocalFree (hMem=0x1d888150) returned 0x0 [0159.445] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888350 [0159.445] GdipGetMatrixElements (matrix=0x1bd57920, matrixOut=0x1d888350) returned 0x0 [0159.446] LocalFree (hMem=0x1d888350) returned 0x0 [0159.446] GdipDeleteMatrix (matrix=0x1bd57920) returned 0x0 [0159.446] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0159.446] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0159.446] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0159.446] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.446] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0159.446] GetCurrentObject (hdc=0x40106bf, type=0x1) returned 0x1b00017 [0159.446] GetCurrentObject (hdc=0x40106bf, type=0x2) returned 0x1900010 [0159.446] GetCurrentObject (hdc=0x40106bf, type=0x7) returned 0x60506af [0159.446] GetCurrentObject (hdc=0x40106bf, type=0x6) returned 0x18a0048 [0159.446] SaveDC (hdc=0x40106bf) returned 1 [0159.446] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7304064d [0159.446] GetClipRgn (hdc=0x40106bf, hrgn=0x7304064d) returned 0 [0159.446] SelectClipRgn (hdc=0x40106bf, hrgn=0x40040554) returned 2 [0159.446] DeleteObject (ho=0x7304064d) returned 1 [0159.447] DeleteObject (ho=0x40040554) returned 1 [0159.447] OffsetViewportOrgEx (in: hdc=0x40106bf, x=0, y=0, lppt=0x2206628 | out: lppt=0x2206628) returned 1 [0159.447] GetROP2 (hdc=0x40106bf) returned 13 [0159.447] GetBkMode (hdc=0x40106bf) returned 2 [0159.447] SetBkMode (hdc=0x40106bf, mode=1) returned 2 [0159.447] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x33006c1 [0159.447] SelectObject (hdc=0x40106bf, h=0x33006c1) returned 0x1b00017 [0159.447] MoveToEx (in: hdc=0x40106bf, x=57, y=0, lppt=0x2206690 | out: lppt=0x2206690) returned 1 [0159.447] LineTo (hdc=0x40106bf, x=0, y=0) returned 1 [0159.447] SetBkMode (hdc=0x40106bf, mode=2) returned 1 [0159.447] MoveToEx (in: hdc=0x40106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.447] GetROP2 (hdc=0x40106bf) returned 13 [0159.447] GetBkMode (hdc=0x40106bf) returned 2 [0159.447] SetBkMode (hdc=0x40106bf, mode=1) returned 2 [0159.447] SelectObject (hdc=0x40106bf, h=0x33006c1) returned 0x33006c1 [0159.447] MoveToEx (in: hdc=0x40106bf, x=0, y=0, lppt=0x22066a8 | out: lppt=0x22066a8) returned 1 [0159.447] LineTo (hdc=0x40106bf, x=0, y=22) returned 1 [0159.447] SetBkMode (hdc=0x40106bf, mode=2) returned 1 [0159.447] MoveToEx (in: hdc=0x40106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.447] SelectObject (hdc=0x40106bf, h=0x1b00017) returned 0x33006c1 [0159.447] DeleteObject (ho=0x33006c1) returned 1 [0159.447] GetROP2 (hdc=0x40106bf) returned 13 [0159.447] GetBkMode (hdc=0x40106bf) returned 2 [0159.447] SetBkMode (hdc=0x40106bf, mode=1) returned 2 [0159.447] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x33006c0 [0159.448] SelectObject (hdc=0x40106bf, h=0x33006c0) returned 0x1b00017 [0159.448] MoveToEx (in: hdc=0x40106bf, x=0, y=22, lppt=0x2206710 | out: lppt=0x2206710) returned 1 [0159.448] LineTo (hdc=0x40106bf, x=57, y=22) returned 1 [0159.448] SetBkMode (hdc=0x40106bf, mode=2) returned 1 [0159.448] MoveToEx (in: hdc=0x40106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.448] GetROP2 (hdc=0x40106bf) returned 13 [0159.448] GetBkMode (hdc=0x40106bf) returned 2 [0159.448] SetBkMode (hdc=0x40106bf, mode=1) returned 2 [0159.448] SelectObject (hdc=0x40106bf, h=0x33006c0) returned 0x33006c0 [0159.448] MoveToEx (in: hdc=0x40106bf, x=57, y=22, lppt=0x2206728 | out: lppt=0x2206728) returned 1 [0159.448] LineTo (hdc=0x40106bf, x=57, y=-1) returned 1 [0159.448] SetBkMode (hdc=0x40106bf, mode=2) returned 1 [0159.448] MoveToEx (in: hdc=0x40106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.448] SelectObject (hdc=0x40106bf, h=0x1b00017) returned 0x33006c0 [0159.448] DeleteObject (ho=0x33006c0) returned 1 [0159.448] GetROP2 (hdc=0x40106bf) returned 13 [0159.448] GetBkMode (hdc=0x40106bf) returned 2 [0159.448] SetBkMode (hdc=0x40106bf, mode=1) returned 2 [0159.448] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x43006c1 [0159.448] SelectObject (hdc=0x40106bf, h=0x43006c1) returned 0x1b00017 [0159.448] MoveToEx (in: hdc=0x40106bf, x=56, y=1, lppt=0x2206790 | out: lppt=0x2206790) returned 1 [0159.448] LineTo (hdc=0x40106bf, x=1, y=1) returned 1 [0159.448] SetBkMode (hdc=0x40106bf, mode=2) returned 1 [0159.448] MoveToEx (in: hdc=0x40106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.449] GetROP2 (hdc=0x40106bf) returned 13 [0159.449] GetBkMode (hdc=0x40106bf) returned 2 [0159.449] SetBkMode (hdc=0x40106bf, mode=1) returned 2 [0159.449] SelectObject (hdc=0x40106bf, h=0x43006c1) returned 0x43006c1 [0159.449] MoveToEx (in: hdc=0x40106bf, x=1, y=1, lppt=0x22067a8 | out: lppt=0x22067a8) returned 1 [0159.449] LineTo (hdc=0x40106bf, x=1, y=21) returned 1 [0159.449] SetBkMode (hdc=0x40106bf, mode=2) returned 1 [0159.449] MoveToEx (in: hdc=0x40106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.449] SelectObject (hdc=0x40106bf, h=0x1b00017) returned 0x43006c1 [0159.449] DeleteObject (ho=0x43006c1) returned 1 [0159.449] GetROP2 (hdc=0x40106bf) returned 13 [0159.449] GetBkMode (hdc=0x40106bf) returned 2 [0159.449] SetBkMode (hdc=0x40106bf, mode=1) returned 2 [0159.449] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x43006c0 [0159.449] SelectObject (hdc=0x40106bf, h=0x43006c0) returned 0x1b00017 [0159.449] MoveToEx (in: hdc=0x40106bf, x=1, y=21, lppt=0x2206810 | out: lppt=0x2206810) returned 1 [0159.449] LineTo (hdc=0x40106bf, x=56, y=21) returned 1 [0159.449] SetBkMode (hdc=0x40106bf, mode=2) returned 1 [0159.449] MoveToEx (in: hdc=0x40106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.449] GetROP2 (hdc=0x40106bf) returned 13 [0159.449] GetBkMode (hdc=0x40106bf) returned 2 [0159.449] SetBkMode (hdc=0x40106bf, mode=1) returned 2 [0159.449] SelectObject (hdc=0x40106bf, h=0x43006c0) returned 0x43006c0 [0159.450] MoveToEx (in: hdc=0x40106bf, x=56, y=21, lppt=0x2206828 | out: lppt=0x2206828) returned 1 [0159.450] LineTo (hdc=0x40106bf, x=56, y=0) returned 1 [0159.450] SetBkMode (hdc=0x40106bf, mode=2) returned 1 [0159.450] MoveToEx (in: hdc=0x40106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.450] SelectObject (hdc=0x40106bf, h=0x1b00017) returned 0x43006c0 [0159.450] DeleteObject (ho=0x43006c0) returned 1 [0159.450] RestoreDC (hdc=0x40106bf, nSavedDC=-1) returned 1 [0159.450] GdipReleaseDC (graphics=0x1bd51520, hdc=0x40106bf) returned 0x0 [0159.450] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0159.450] BitBlt (hdc=0xffffffffd001053c, x=0, y=0, cx=58, cy=23, hdcSrc=0x40106bf, x1=0, y1=0, rop=0xcc0020) returned 1 [0159.450] GdipReleaseDC (graphics=0x1bd51520, hdc=0x40106bf) returned 0x0 [0159.450] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0159.450] SelectObject (hdc=0x40106bf, h=0x185000f) returned 0x60506af [0159.450] DeleteDC (hdc=0x40106bf) returned 1 [0159.450] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0159.450] EndPaint (hWnd=0x20146, lpPaint=0x14e548) returned 1 [0159.450] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.451] IsWindowUnicode (hWnd=0x3015e) returned 1 [0159.451] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.451] TranslateMessage (lpMsg=0x14ef10) returned 0 [0159.451] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0159.451] BeginPaint (in: hWnd=0x3015e, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xffffffffd001053c [0159.451] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x3015e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0159.451] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x3015e, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0159.451] GetStockObject (i=5) returned 0x1900015 [0159.451] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0159.451] CreateCompatibleDC (hdc=0xffffffffd001053c) returned 0xb0106be [0159.451] SelectObject (hdc=0xb0106be, h=0x60506af) returned 0x185000f [0159.451] GdipCreateFromHDC (hdc=0xb0106be, graphics=0x14e528) returned 0x0 [0159.452] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0159.452] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=58, height=23, combineMode=0x0) returned 0x0 [0159.452] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0159.452] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57720) returned 0x0 [0159.452] GdipIsMatrixIdentity (matrix=0x1bd57720, result=0x14e5b8) returned 0x0 [0159.452] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888ad0 [0159.452] GdipGetMatrixElements (matrix=0x1bd57720, matrixOut=0x1d888ad0) returned 0x0 [0159.452] LocalFree (hMem=0x1d888ad0) returned 0x0 [0159.452] GdipDeleteMatrix (matrix=0x1bd57720) returned 0x0 [0159.452] GdipCreateRegion (region=0x14e550) returned 0x0 [0159.452] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.452] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0159.452] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0159.452] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd720dbd) returned 0x0 [0159.453] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.453] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0159.453] GetCurrentObject (hdc=0xb0106be, type=0x1) returned 0x1b00017 [0159.453] GetCurrentObject (hdc=0xb0106be, type=0x2) returned 0x1900010 [0159.453] GetCurrentObject (hdc=0xb0106be, type=0x7) returned 0x60506af [0159.453] GetCurrentObject (hdc=0xb0106be, type=0x6) returned 0x18a0048 [0159.453] SaveDC (hdc=0xb0106be) returned 1 [0159.453] GetNearestColor (hdc=0xb0106be, color=0xf0f0f0) returned 0xf0f0f0 [0159.453] GetNearestColor (hdc=0xb0106be, color=0xa0a0a0) returned 0xa0a0a0 [0159.453] GetNearestColor (hdc=0xb0106be, color=0x696969) returned 0x696969 [0159.453] GetNearestColor (hdc=0xb0106be, color=0xa0a0a0) returned 0xa0a0a0 [0159.453] GetNearestColor (hdc=0xb0106be, color=0x0) returned 0x0 [0159.460] GetNearestColor (hdc=0xb0106be, color=0xffffff) returned 0xffffff [0159.460] GetNearestColor (hdc=0xb0106be, color=0xe5e5e5) returned 0xe5e5e5 [0159.460] GetNearestColor (hdc=0xb0106be, color=0xd8d8d8) returned 0xd8d8d8 [0159.460] GetNearestColor (hdc=0xb0106be, color=0x0) returned 0x0 [0159.461] RestoreDC (hdc=0xb0106be, nSavedDC=-1) returned 1 [0159.461] GdipReleaseDC (graphics=0x1bd51520, hdc=0xb0106be) returned 0x0 [0159.461] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.461] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExk \x02", lpUsedDefaultChar=0x0) returned 17 [0159.461] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.461] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2207148) returned 0x0 [0159.461] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.461] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.461] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.461] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0159.461] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0159.462] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0159.462] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0159.462] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0159.462] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.462] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.462] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.462] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.462] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0159.462] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2207278) returned 0x0 [0159.462] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0159.462] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0159.462] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=1) returned 0x0 [0159.462] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.463] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.463] GdipMeasureString (graphics=0x1bd57e60, string="log", length=3, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0159.463] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0159.463] GdipDeleteGraphics (graphics=0x1bd57e60) returned 0x0 [0159.463] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.463] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.463] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.463] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0159.463] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.463] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0159.463] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57de0) returned 0x0 [0159.463] GdipIsMatrixIdentity (matrix=0x1bd57de0, result=0x14e128) returned 0x0 [0159.463] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8881d0 [0159.463] GdipGetMatrixElements (matrix=0x1bd57de0, matrixOut=0x1d8881d0) returned 0x0 [0159.464] LocalFree (hMem=0x1d8881d0) returned 0x0 [0159.464] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888250 [0159.464] GdipGetMatrixElements (matrix=0x1bd57de0, matrixOut=0x1d888250) returned 0x0 [0159.464] LocalFree (hMem=0x1d888250) returned 0x0 [0159.464] GdipDeleteMatrix (matrix=0x1bd57de0) returned 0x0 [0159.465] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0159.465] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0159.465] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0159.465] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.465] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0159.465] GetCurrentObject (hdc=0xb0106be, type=0x1) returned 0x1b00017 [0159.465] GetCurrentObject (hdc=0xb0106be, type=0x2) returned 0x1900010 [0159.465] GetCurrentObject (hdc=0xb0106be, type=0x7) returned 0x60506af [0159.465] GetCurrentObject (hdc=0xb0106be, type=0x6) returned 0x18a0048 [0159.465] SaveDC (hdc=0xb0106be) returned 1 [0159.465] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x41040554 [0159.465] GetClipRgn (hdc=0xb0106be, hrgn=0x41040554) returned 0 [0159.465] SelectClipRgn (hdc=0xb0106be, hrgn=0x7404064d) returned 2 [0159.465] DeleteObject (ho=0x41040554) returned 1 [0159.465] DeleteObject (ho=0x7404064d) returned 1 [0159.465] OffsetViewportOrgEx (in: hdc=0xb0106be, x=0, y=0, lppt=0x2207638 | out: lppt=0x2207638) returned 1 [0159.465] GetNearestColor (hdc=0xb0106be, color=0xf0f0f0) returned 0xf0f0f0 [0159.465] CreateSolidBrush (color=0xf0f0f0) returned 0x231006b3 [0159.465] FillRect (hDC=0xb0106be, lprc=0x14e1c8, hbr=0x231006b3) returned 1 [0159.465] DeleteObject (ho=0x231006b3) returned 1 [0159.465] RestoreDC (hdc=0xb0106be, nSavedDC=-1) returned 1 [0159.466] GdipReleaseDC (graphics=0x1bd51520, hdc=0xb0106be) returned 0x0 [0159.466] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.466] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0159.466] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.466] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2207738) returned 0x0 [0159.466] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.466] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.466] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.466] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0159.466] GdipDrawString (graphics=0x1bd51520, string="log", length=3, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0159.466] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0159.467] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.467] GetFocus () returned 0x101f8 [0159.467] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExh \x02", lpUsedDefaultChar=0x0) returned 17 [0159.467] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.467] GdipCreateRegion (region=0x14e030) returned 0x0 [0159.467] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.467] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0159.467] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd579e0) returned 0x0 [0159.467] GdipIsMatrixIdentity (matrix=0x1bd579e0, result=0x14e098) returned 0x0 [0159.467] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888bd0 [0159.467] GdipGetMatrixElements (matrix=0x1bd579e0, matrixOut=0x1d888bd0) returned 0x0 [0159.468] LocalFree (hMem=0x1d888bd0) returned 0x0 [0159.468] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888950 [0159.468] GdipGetMatrixElements (matrix=0x1bd579e0, matrixOut=0x1d888950) returned 0x0 [0159.468] LocalFree (hMem=0x1d888950) returned 0x0 [0159.468] GdipDeleteMatrix (matrix=0x1bd579e0) returned 0x0 [0159.468] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0159.468] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0159.468] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0159.468] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.469] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0159.469] GetCurrentObject (hdc=0xb0106be, type=0x1) returned 0x1b00017 [0159.469] GetCurrentObject (hdc=0xb0106be, type=0x2) returned 0x1900010 [0159.469] GetCurrentObject (hdc=0xb0106be, type=0x7) returned 0x60506af [0159.469] GetCurrentObject (hdc=0xb0106be, type=0x6) returned 0x18a0048 [0159.470] SaveDC (hdc=0xb0106be) returned 1 [0159.470] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7504064d [0159.470] GetClipRgn (hdc=0xb0106be, hrgn=0x7504064d) returned 0 [0159.470] SelectClipRgn (hdc=0xb0106be, hrgn=0x42040554) returned 2 [0159.470] DeleteObject (ho=0x7504064d) returned 1 [0159.470] DeleteObject (ho=0x42040554) returned 1 [0159.470] OffsetViewportOrgEx (in: hdc=0xb0106be, x=0, y=0, lppt=0x2207b20 | out: lppt=0x2207b20) returned 1 [0159.470] GetROP2 (hdc=0xb0106be) returned 13 [0159.470] GetBkMode (hdc=0xb0106be) returned 2 [0159.470] SetBkMode (hdc=0xb0106be, mode=1) returned 2 [0159.470] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x53006c0 [0159.470] SelectObject (hdc=0xb0106be, h=0x53006c0) returned 0x1b00017 [0159.470] MoveToEx (in: hdc=0xb0106be, x=57, y=0, lppt=0x2207b88 | out: lppt=0x2207b88) returned 1 [0159.470] LineTo (hdc=0xb0106be, x=0, y=0) returned 1 [0159.470] SetBkMode (hdc=0xb0106be, mode=2) returned 1 [0159.470] MoveToEx (in: hdc=0xb0106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.470] GetROP2 (hdc=0xb0106be) returned 13 [0159.470] GetBkMode (hdc=0xb0106be) returned 2 [0159.470] SetBkMode (hdc=0xb0106be, mode=1) returned 2 [0159.470] SelectObject (hdc=0xb0106be, h=0x53006c0) returned 0x53006c0 [0159.470] MoveToEx (in: hdc=0xb0106be, x=0, y=0, lppt=0x2207ba0 | out: lppt=0x2207ba0) returned 1 [0159.470] LineTo (hdc=0xb0106be, x=0, y=22) returned 1 [0159.471] SetBkMode (hdc=0xb0106be, mode=2) returned 1 [0159.471] MoveToEx (in: hdc=0xb0106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.471] SelectObject (hdc=0xb0106be, h=0x1b00017) returned 0x53006c0 [0159.471] DeleteObject (ho=0x53006c0) returned 1 [0159.471] GetROP2 (hdc=0xb0106be) returned 13 [0159.471] GetBkMode (hdc=0xb0106be) returned 2 [0159.471] SetBkMode (hdc=0xb0106be, mode=1) returned 2 [0159.471] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x53006c1 [0159.471] SelectObject (hdc=0xb0106be, h=0x53006c1) returned 0x1b00017 [0159.471] MoveToEx (in: hdc=0xb0106be, x=0, y=22, lppt=0x2207c08 | out: lppt=0x2207c08) returned 1 [0159.471] LineTo (hdc=0xb0106be, x=57, y=22) returned 1 [0159.471] SetBkMode (hdc=0xb0106be, mode=2) returned 1 [0159.471] MoveToEx (in: hdc=0xb0106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.471] GetROP2 (hdc=0xb0106be) returned 13 [0159.471] GetBkMode (hdc=0xb0106be) returned 2 [0159.471] SetBkMode (hdc=0xb0106be, mode=1) returned 2 [0159.471] SelectObject (hdc=0xb0106be, h=0x53006c1) returned 0x53006c1 [0159.471] MoveToEx (in: hdc=0xb0106be, x=57, y=22, lppt=0x2207c20 | out: lppt=0x2207c20) returned 1 [0159.471] LineTo (hdc=0xb0106be, x=57, y=-1) returned 1 [0159.471] SetBkMode (hdc=0xb0106be, mode=2) returned 1 [0159.471] MoveToEx (in: hdc=0xb0106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.471] SelectObject (hdc=0xb0106be, h=0x1b00017) returned 0x53006c1 [0159.471] DeleteObject (ho=0x53006c1) returned 1 [0159.472] GetROP2 (hdc=0xb0106be) returned 13 [0159.472] GetBkMode (hdc=0xb0106be) returned 2 [0159.472] SetBkMode (hdc=0xb0106be, mode=1) returned 2 [0159.472] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x63006c0 [0159.472] SelectObject (hdc=0xb0106be, h=0x63006c0) returned 0x1b00017 [0159.472] MoveToEx (in: hdc=0xb0106be, x=56, y=1, lppt=0x2207c88 | out: lppt=0x2207c88) returned 1 [0159.472] LineTo (hdc=0xb0106be, x=1, y=1) returned 1 [0159.472] SetBkMode (hdc=0xb0106be, mode=2) returned 1 [0159.472] MoveToEx (in: hdc=0xb0106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.472] GetROP2 (hdc=0xb0106be) returned 13 [0159.472] GetBkMode (hdc=0xb0106be) returned 2 [0159.472] SetBkMode (hdc=0xb0106be, mode=1) returned 2 [0159.472] SelectObject (hdc=0xb0106be, h=0x63006c0) returned 0x63006c0 [0159.472] MoveToEx (in: hdc=0xb0106be, x=1, y=1, lppt=0x2207ca0 | out: lppt=0x2207ca0) returned 1 [0159.472] LineTo (hdc=0xb0106be, x=1, y=21) returned 1 [0159.472] SetBkMode (hdc=0xb0106be, mode=2) returned 1 [0159.472] MoveToEx (in: hdc=0xb0106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.472] SelectObject (hdc=0xb0106be, h=0x1b00017) returned 0x63006c0 [0159.472] DeleteObject (ho=0x63006c0) returned 1 [0159.472] GetROP2 (hdc=0xb0106be) returned 13 [0159.472] GetBkMode (hdc=0xb0106be) returned 2 [0159.472] SetBkMode (hdc=0xb0106be, mode=1) returned 2 [0159.472] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x63006c1 [0159.472] SelectObject (hdc=0xb0106be, h=0x63006c1) returned 0x1b00017 [0159.472] MoveToEx (in: hdc=0xb0106be, x=1, y=21, lppt=0x2207d08 | out: lppt=0x2207d08) returned 1 [0159.473] LineTo (hdc=0xb0106be, x=56, y=21) returned 1 [0159.473] SetBkMode (hdc=0xb0106be, mode=2) returned 1 [0159.473] MoveToEx (in: hdc=0xb0106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.473] GetROP2 (hdc=0xb0106be) returned 13 [0159.473] GetBkMode (hdc=0xb0106be) returned 2 [0159.473] SetBkMode (hdc=0xb0106be, mode=1) returned 2 [0159.473] SelectObject (hdc=0xb0106be, h=0x63006c1) returned 0x63006c1 [0159.473] MoveToEx (in: hdc=0xb0106be, x=56, y=21, lppt=0x2207d20 | out: lppt=0x2207d20) returned 1 [0159.473] LineTo (hdc=0xb0106be, x=56, y=0) returned 1 [0159.473] SetBkMode (hdc=0xb0106be, mode=2) returned 1 [0159.473] MoveToEx (in: hdc=0xb0106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.473] SelectObject (hdc=0xb0106be, h=0x1b00017) returned 0x63006c1 [0159.473] DeleteObject (ho=0x63006c1) returned 1 [0159.473] RestoreDC (hdc=0xb0106be, nSavedDC=-1) returned 1 [0159.473] GdipReleaseDC (graphics=0x1bd51520, hdc=0xb0106be) returned 0x0 [0159.473] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0159.473] BitBlt (hdc=0xffffffffd001053c, x=0, y=0, cx=58, cy=23, hdcSrc=0xb0106be, x1=0, y1=0, rop=0xcc0020) returned 1 [0159.473] GdipReleaseDC (graphics=0x1bd51520, hdc=0xb0106be) returned 0x0 [0159.473] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0159.473] SelectObject (hdc=0xb0106be, h=0x185000f) returned 0x60506af [0159.473] DeleteDC (hdc=0xb0106be) returned 1 [0159.474] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0159.474] EndPaint (hWnd=0x3015e, lpPaint=0x14e548) returned 1 [0159.474] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.474] IsWindowUnicode (hWnd=0x4002c) returned 1 [0159.474] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.474] TranslateMessage (lpMsg=0x14ef10) returned 0 [0159.474] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0159.475] BeginPaint (in: hWnd=0x4002c, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xffffffffd001053c [0159.475] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x4002c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0159.475] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x4002c, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0159.475] GetStockObject (i=5) returned 0x1900015 [0159.475] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0159.475] CreateCompatibleDC (hdc=0xffffffffd001053c) returned 0x210106bd [0159.476] SelectObject (hdc=0x210106bd, h=0x60506af) returned 0x185000f [0159.476] GdipCreateFromHDC (hdc=0x210106bd, graphics=0x14e528) returned 0x0 [0159.476] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0159.476] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=32, height=23, combineMode=0x0) returned 0x0 [0159.476] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0159.476] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57aa0) returned 0x0 [0159.476] GdipIsMatrixIdentity (matrix=0x1bd57aa0, result=0x14e5b8) returned 0x0 [0159.476] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888950 [0159.476] GdipGetMatrixElements (matrix=0x1bd57aa0, matrixOut=0x1d888950) returned 0x0 [0159.477] LocalFree (hMem=0x1d888950) returned 0x0 [0159.477] GdipDeleteMatrix (matrix=0x1bd57aa0) returned 0x0 [0159.477] GdipCreateRegion (region=0x14e550) returned 0x0 [0159.477] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.477] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0159.477] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0159.477] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd6f0dbd) returned 0x0 [0159.477] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.477] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0159.477] GetCurrentObject (hdc=0x210106bd, type=0x1) returned 0x1b00017 [0159.477] GetCurrentObject (hdc=0x210106bd, type=0x2) returned 0x1900010 [0159.477] GetCurrentObject (hdc=0x210106bd, type=0x7) returned 0x60506af [0159.477] GetCurrentObject (hdc=0x210106bd, type=0x6) returned 0x18a0048 [0159.477] SaveDC (hdc=0x210106bd) returned 1 [0159.477] GetNearestColor (hdc=0x210106bd, color=0xf0f0f0) returned 0xf0f0f0 [0159.477] GetNearestColor (hdc=0x210106bd, color=0xa0a0a0) returned 0xa0a0a0 [0159.477] GetNearestColor (hdc=0x210106bd, color=0x696969) returned 0x696969 [0159.477] GetNearestColor (hdc=0x210106bd, color=0xa0a0a0) returned 0xa0a0a0 [0159.478] GetNearestColor (hdc=0x210106bd, color=0x0) returned 0x0 [0159.478] GetNearestColor (hdc=0x210106bd, color=0xffffff) returned 0xffffff [0159.478] GetNearestColor (hdc=0x210106bd, color=0xe5e5e5) returned 0xe5e5e5 [0159.478] GetNearestColor (hdc=0x210106bd, color=0xd8d8d8) returned 0xd8d8d8 [0159.478] GetNearestColor (hdc=0x210106bd, color=0x0) returned 0x0 [0159.478] RestoreDC (hdc=0x210106bd, nSavedDC=-1) returned 1 [0159.478] GdipReleaseDC (graphics=0x1bd51520, hdc=0x210106bd) returned 0x0 [0159.478] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x80 \x02", lpUsedDefaultChar=0x0) returned 17 [0159.478] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.478] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2208640) returned 0x0 [0159.478] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.478] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.479] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.479] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0159.479] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0159.479] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0159.479] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0159.479] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0159.479] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.479] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.479] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.479] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.479] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0159.479] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2208770) returned 0x0 [0159.479] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0159.479] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0159.479] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=1) returned 0x0 [0159.480] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.480] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.480] GdipMeasureString (graphics=0x1bd57e60, string="e^", length=2, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0159.480] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0159.480] GdipDeleteGraphics (graphics=0x1bd57e60) returned 0x0 [0159.480] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.480] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.480] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0159.480] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.480] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0159.480] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57d20) returned 0x0 [0159.480] GdipIsMatrixIdentity (matrix=0x1bd57d20, result=0x14e128) returned 0x0 [0159.480] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888b50 [0159.480] GdipGetMatrixElements (matrix=0x1bd57d20, matrixOut=0x1d888b50) returned 0x0 [0159.481] LocalFree (hMem=0x1d888b50) returned 0x0 [0159.481] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888510 [0159.481] GdipGetMatrixElements (matrix=0x1bd57d20, matrixOut=0x1d888510) returned 0x0 [0159.482] LocalFree (hMem=0x1d888510) returned 0x0 [0159.482] GdipDeleteMatrix (matrix=0x1bd57d20) returned 0x0 [0159.482] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0159.482] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0159.482] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0159.482] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.482] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0159.482] GetCurrentObject (hdc=0x210106bd, type=0x1) returned 0x1b00017 [0159.482] GetCurrentObject (hdc=0x210106bd, type=0x2) returned 0x1900010 [0159.482] GetCurrentObject (hdc=0x210106bd, type=0x7) returned 0x60506af [0159.482] GetCurrentObject (hdc=0x210106bd, type=0x6) returned 0x18a0048 [0159.482] SaveDC (hdc=0x210106bd) returned 1 [0159.482] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x43040554 [0159.482] GetClipRgn (hdc=0x210106bd, hrgn=0x43040554) returned 0 [0159.483] SelectClipRgn (hdc=0x210106bd, hrgn=0x7604064d) returned 2 [0159.483] DeleteObject (ho=0x43040554) returned 1 [0159.483] DeleteObject (ho=0x7604064d) returned 1 [0159.483] OffsetViewportOrgEx (in: hdc=0x210106bd, x=0, y=0, lppt=0x2208b30 | out: lppt=0x2208b30) returned 1 [0159.483] GetNearestColor (hdc=0x210106bd, color=0xf0f0f0) returned 0xf0f0f0 [0159.483] CreateSolidBrush (color=0xf0f0f0) returned 0x241006b3 [0159.483] FillRect (hDC=0x210106bd, lprc=0x14e1c8, hbr=0x241006b3) returned 1 [0159.483] DeleteObject (ho=0x241006b3) returned 1 [0159.483] RestoreDC (hdc=0x210106bd, nSavedDC=-1) returned 1 [0159.483] GdipReleaseDC (graphics=0x1bd51520, hdc=0x210106bd) returned 0x0 [0159.483] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.483] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0159.483] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.483] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2208c30) returned 0x0 [0159.483] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.484] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.484] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.484] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0159.484] GdipDrawString (graphics=0x1bd51520, string="e^", length=2, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0159.484] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0159.484] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.484] GetFocus () returned 0x101f8 [0159.484] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx} \x02", lpUsedDefaultChar=0x0) returned 17 [0159.484] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.486] GdipCreateRegion (region=0x14e030) returned 0x0 [0159.486] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.486] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0159.487] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57960) returned 0x0 [0159.487] GdipIsMatrixIdentity (matrix=0x1bd57960, result=0x14e098) returned 0x0 [0159.487] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888ad0 [0159.487] GdipGetMatrixElements (matrix=0x1bd57960, matrixOut=0x1d888ad0) returned 0x0 [0159.487] LocalFree (hMem=0x1d888ad0) returned 0x0 [0159.487] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888750 [0159.487] GdipGetMatrixElements (matrix=0x1bd57960, matrixOut=0x1d888750) returned 0x0 [0159.488] LocalFree (hMem=0x1d888750) returned 0x0 [0159.488] GdipDeleteMatrix (matrix=0x1bd57960) returned 0x0 [0159.488] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0159.488] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0159.488] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0159.488] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.488] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0159.488] GetCurrentObject (hdc=0x210106bd, type=0x1) returned 0x1b00017 [0159.488] GetCurrentObject (hdc=0x210106bd, type=0x2) returned 0x1900010 [0159.488] GetCurrentObject (hdc=0x210106bd, type=0x7) returned 0x60506af [0159.488] GetCurrentObject (hdc=0x210106bd, type=0x6) returned 0x18a0048 [0159.488] SaveDC (hdc=0x210106bd) returned 1 [0159.488] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7704064d [0159.489] GetClipRgn (hdc=0x210106bd, hrgn=0x7704064d) returned 0 [0159.489] SelectClipRgn (hdc=0x210106bd, hrgn=0x44040554) returned 2 [0159.489] DeleteObject (ho=0x7704064d) returned 1 [0159.489] DeleteObject (ho=0x44040554) returned 1 [0159.489] OffsetViewportOrgEx (in: hdc=0x210106bd, x=0, y=0, lppt=0x2209018 | out: lppt=0x2209018) returned 1 [0159.489] GetROP2 (hdc=0x210106bd) returned 13 [0159.489] GetBkMode (hdc=0x210106bd) returned 2 [0159.489] SetBkMode (hdc=0x210106bd, mode=1) returned 2 [0159.489] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x73006c1 [0159.489] SelectObject (hdc=0x210106bd, h=0x73006c1) returned 0x1b00017 [0159.489] MoveToEx (in: hdc=0x210106bd, x=32, y=0, lppt=0x2209080 | out: lppt=0x2209080) returned 1 [0159.489] LineTo (hdc=0x210106bd, x=0, y=0) returned 1 [0159.489] SetBkMode (hdc=0x210106bd, mode=2) returned 1 [0159.489] MoveToEx (in: hdc=0x210106bd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.489] GetROP2 (hdc=0x210106bd) returned 13 [0159.489] GetBkMode (hdc=0x210106bd) returned 2 [0159.489] SetBkMode (hdc=0x210106bd, mode=1) returned 2 [0159.489] SelectObject (hdc=0x210106bd, h=0x73006c1) returned 0x73006c1 [0159.489] MoveToEx (in: hdc=0x210106bd, x=0, y=0, lppt=0x2209098 | out: lppt=0x2209098) returned 1 [0159.489] LineTo (hdc=0x210106bd, x=0, y=22) returned 1 [0159.489] SetBkMode (hdc=0x210106bd, mode=2) returned 1 [0159.489] MoveToEx (in: hdc=0x210106bd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.489] SelectObject (hdc=0x210106bd, h=0x1b00017) returned 0x73006c1 [0159.489] DeleteObject (ho=0x73006c1) returned 1 [0159.490] GetROP2 (hdc=0x210106bd) returned 13 [0159.490] GetBkMode (hdc=0x210106bd) returned 2 [0159.490] SetBkMode (hdc=0x210106bd, mode=1) returned 2 [0159.490] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x73006c0 [0159.490] SelectObject (hdc=0x210106bd, h=0x73006c0) returned 0x1b00017 [0159.490] MoveToEx (in: hdc=0x210106bd, x=0, y=22, lppt=0x2209100 | out: lppt=0x2209100) returned 1 [0159.490] LineTo (hdc=0x210106bd, x=32, y=22) returned 1 [0159.490] SetBkMode (hdc=0x210106bd, mode=2) returned 1 [0159.490] MoveToEx (in: hdc=0x210106bd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.490] GetROP2 (hdc=0x210106bd) returned 13 [0159.490] GetBkMode (hdc=0x210106bd) returned 2 [0159.490] SetBkMode (hdc=0x210106bd, mode=1) returned 2 [0159.490] SelectObject (hdc=0x210106bd, h=0x73006c0) returned 0x73006c0 [0159.490] MoveToEx (in: hdc=0x210106bd, x=32, y=22, lppt=0x2209118 | out: lppt=0x2209118) returned 1 [0159.490] LineTo (hdc=0x210106bd, x=32, y=-1) returned 1 [0159.490] SetBkMode (hdc=0x210106bd, mode=2) returned 1 [0159.490] MoveToEx (in: hdc=0x210106bd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.490] SelectObject (hdc=0x210106bd, h=0x1b00017) returned 0x73006c0 [0159.490] DeleteObject (ho=0x73006c0) returned 1 [0159.490] GetROP2 (hdc=0x210106bd) returned 13 [0159.490] GetBkMode (hdc=0x210106bd) returned 2 [0159.490] SetBkMode (hdc=0x210106bd, mode=1) returned 2 [0159.490] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x83006c1 [0159.490] SelectObject (hdc=0x210106bd, h=0x83006c1) returned 0x1b00017 [0159.491] MoveToEx (in: hdc=0x210106bd, x=31, y=1, lppt=0x2209180 | out: lppt=0x2209180) returned 1 [0159.491] LineTo (hdc=0x210106bd, x=1, y=1) returned 1 [0159.491] SetBkMode (hdc=0x210106bd, mode=2) returned 1 [0159.491] MoveToEx (in: hdc=0x210106bd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.491] GetROP2 (hdc=0x210106bd) returned 13 [0159.491] GetBkMode (hdc=0x210106bd) returned 2 [0159.491] SetBkMode (hdc=0x210106bd, mode=1) returned 2 [0159.491] SelectObject (hdc=0x210106bd, h=0x83006c1) returned 0x83006c1 [0159.491] MoveToEx (in: hdc=0x210106bd, x=1, y=1, lppt=0x2209198 | out: lppt=0x2209198) returned 1 [0159.491] LineTo (hdc=0x210106bd, x=1, y=21) returned 1 [0159.491] SetBkMode (hdc=0x210106bd, mode=2) returned 1 [0159.491] MoveToEx (in: hdc=0x210106bd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.491] SelectObject (hdc=0x210106bd, h=0x1b00017) returned 0x83006c1 [0159.491] DeleteObject (ho=0x83006c1) returned 1 [0159.491] GetROP2 (hdc=0x210106bd) returned 13 [0159.491] GetBkMode (hdc=0x210106bd) returned 2 [0159.491] SetBkMode (hdc=0x210106bd, mode=1) returned 2 [0159.491] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x83006c0 [0159.491] SelectObject (hdc=0x210106bd, h=0x83006c0) returned 0x1b00017 [0159.491] MoveToEx (in: hdc=0x210106bd, x=1, y=21, lppt=0x2209200 | out: lppt=0x2209200) returned 1 [0159.491] LineTo (hdc=0x210106bd, x=31, y=21) returned 1 [0159.491] SetBkMode (hdc=0x210106bd, mode=2) returned 1 [0159.491] MoveToEx (in: hdc=0x210106bd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.491] GetROP2 (hdc=0x210106bd) returned 13 [0159.492] GetBkMode (hdc=0x210106bd) returned 2 [0159.492] SetBkMode (hdc=0x210106bd, mode=1) returned 2 [0159.492] SelectObject (hdc=0x210106bd, h=0x83006c0) returned 0x83006c0 [0159.492] MoveToEx (in: hdc=0x210106bd, x=31, y=21, lppt=0x2209218 | out: lppt=0x2209218) returned 1 [0159.492] LineTo (hdc=0x210106bd, x=31, y=0) returned 1 [0159.492] SetBkMode (hdc=0x210106bd, mode=2) returned 1 [0159.492] MoveToEx (in: hdc=0x210106bd, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.492] SelectObject (hdc=0x210106bd, h=0x1b00017) returned 0x83006c0 [0159.492] DeleteObject (ho=0x83006c0) returned 1 [0159.492] RestoreDC (hdc=0x210106bd, nSavedDC=-1) returned 1 [0159.492] GdipReleaseDC (graphics=0x1bd51520, hdc=0x210106bd) returned 0x0 [0159.492] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0159.492] BitBlt (hdc=0xffffffffd001053c, x=0, y=0, cx=33, cy=23, hdcSrc=0x210106bd, x1=0, y1=0, rop=0xcc0020) returned 1 [0159.492] GdipReleaseDC (graphics=0x1bd51520, hdc=0x210106bd) returned 0x0 [0159.492] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0159.492] SelectObject (hdc=0x210106bd, h=0x185000f) returned 0x60506af [0159.492] DeleteDC (hdc=0x210106bd) returned 1 [0159.492] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0159.492] EndPaint (hWnd=0x4002c, lpPaint=0x14e548) returned 1 [0159.493] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.493] IsWindowUnicode (hWnd=0x201bc) returned 1 [0159.493] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.493] TranslateMessage (lpMsg=0x14ef10) returned 0 [0159.493] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0159.493] BeginPaint (in: hWnd=0x201bc, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xffffffffd001053c [0159.493] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x201bc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0159.493] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x201bc, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0159.493] GetStockObject (i=5) returned 0x1900015 [0159.493] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0159.493] CreateCompatibleDC (hdc=0xffffffffd001053c) returned 0xd0106bf [0159.493] SelectObject (hdc=0xd0106bf, h=0x60506af) returned 0x185000f [0159.493] GdipCreateFromHDC (hdc=0xd0106bf, graphics=0x14e528) returned 0x0 [0159.494] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0159.494] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0159.494] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0159.494] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57b60) returned 0x0 [0159.494] GdipIsMatrixIdentity (matrix=0x1bd57b60, result=0x14e5b8) returned 0x0 [0159.494] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888d50 [0159.494] GdipGetMatrixElements (matrix=0x1bd57b60, matrixOut=0x1d888d50) returned 0x0 [0159.494] LocalFree (hMem=0x1d888d50) returned 0x0 [0159.494] GdipDeleteMatrix (matrix=0x1bd57b60) returned 0x0 [0159.494] GdipCreateRegion (region=0x14e550) returned 0x0 [0159.494] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.495] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0159.495] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0159.495] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd6c0dbd) returned 0x0 [0159.495] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.495] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0159.495] GetCurrentObject (hdc=0xd0106bf, type=0x1) returned 0x1b00017 [0159.495] GetCurrentObject (hdc=0xd0106bf, type=0x2) returned 0x1900010 [0159.495] GetCurrentObject (hdc=0xd0106bf, type=0x7) returned 0x60506af [0159.495] GetCurrentObject (hdc=0xd0106bf, type=0x6) returned 0x18a0048 [0159.495] SaveDC (hdc=0xd0106bf) returned 1 [0159.495] GetNearestColor (hdc=0xd0106bf, color=0xf0f0f0) returned 0xf0f0f0 [0159.495] GetNearestColor (hdc=0xd0106bf, color=0xa0a0a0) returned 0xa0a0a0 [0159.495] GetNearestColor (hdc=0xd0106bf, color=0x696969) returned 0x696969 [0159.495] GetNearestColor (hdc=0xd0106bf, color=0xa0a0a0) returned 0xa0a0a0 [0159.495] GetNearestColor (hdc=0xd0106bf, color=0x0) returned 0x0 [0159.495] GetNearestColor (hdc=0xd0106bf, color=0xffffff) returned 0xffffff [0159.495] GetNearestColor (hdc=0xd0106bf, color=0xe5e5e5) returned 0xe5e5e5 [0159.495] GetNearestColor (hdc=0xd0106bf, color=0xd8d8d8) returned 0xd8d8d8 [0159.495] GetNearestColor (hdc=0xd0106bf, color=0x0) returned 0x0 [0159.495] RestoreDC (hdc=0xd0106bf, nSavedDC=-1) returned 1 [0159.496] GdipReleaseDC (graphics=0x1bd51520, hdc=0xd0106bf) returned 0x0 [0159.496] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.496] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x95 \x02", lpUsedDefaultChar=0x0) returned 17 [0159.496] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.496] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2209b38) returned 0x0 [0159.496] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.496] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.496] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.496] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0159.496] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0159.496] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0159.496] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0159.496] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0159.496] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.497] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.497] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.497] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.497] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0159.497] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2209c68) returned 0x0 [0159.497] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0159.497] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0159.497] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=1) returned 0x0 [0159.497] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.497] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.497] GdipMeasureString (graphics=0x1bd58670, string="/", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0159.497] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0159.497] GdipDeleteGraphics (graphics=0x1bd58670) returned 0x0 [0159.498] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.498] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.498] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.498] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0159.498] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.498] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0159.498] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57d60) returned 0x0 [0159.498] GdipIsMatrixIdentity (matrix=0x1bd57d60, result=0x14e128) returned 0x0 [0159.498] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888cd0 [0159.498] GdipGetMatrixElements (matrix=0x1bd57d60, matrixOut=0x1d888cd0) returned 0x0 [0159.499] LocalFree (hMem=0x1d888cd0) returned 0x0 [0159.499] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0159.499] GdipGetMatrixElements (matrix=0x1bd57d60, matrixOut=0x1d888150) returned 0x0 [0159.499] LocalFree (hMem=0x1d888150) returned 0x0 [0159.499] GdipDeleteMatrix (matrix=0x1bd57d60) returned 0x0 [0159.499] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0159.499] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0159.499] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0159.499] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.499] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0159.499] GetCurrentObject (hdc=0xd0106bf, type=0x1) returned 0x1b00017 [0159.499] GetCurrentObject (hdc=0xd0106bf, type=0x2) returned 0x1900010 [0159.499] GetCurrentObject (hdc=0xd0106bf, type=0x7) returned 0x60506af [0159.499] GetCurrentObject (hdc=0xd0106bf, type=0x6) returned 0x18a0048 [0159.500] SaveDC (hdc=0xd0106bf) returned 1 [0159.500] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x45040554 [0159.500] GetClipRgn (hdc=0xd0106bf, hrgn=0x45040554) returned 0 [0159.500] SelectClipRgn (hdc=0xd0106bf, hrgn=0x7804064d) returned 2 [0159.500] DeleteObject (ho=0x45040554) returned 1 [0159.500] DeleteObject (ho=0x7804064d) returned 1 [0159.500] OffsetViewportOrgEx (in: hdc=0xd0106bf, x=0, y=0, lppt=0x220a028 | out: lppt=0x220a028) returned 1 [0159.500] GetNearestColor (hdc=0xd0106bf, color=0xf0f0f0) returned 0xf0f0f0 [0159.500] CreateSolidBrush (color=0xf0f0f0) returned 0x251006b3 [0159.500] FillRect (hDC=0xd0106bf, lprc=0x14e1c8, hbr=0x251006b3) returned 1 [0159.500] DeleteObject (ho=0x251006b3) returned 1 [0159.500] RestoreDC (hdc=0xd0106bf, nSavedDC=-1) returned 1 [0159.500] GdipReleaseDC (graphics=0x1bd51520, hdc=0xd0106bf) returned 0x0 [0159.500] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.501] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0159.501] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.501] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220a128) returned 0x0 [0159.501] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.501] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.501] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.501] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0159.501] GdipDrawString (graphics=0x1bd51520, string="/", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0159.501] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0159.501] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.501] GetFocus () returned 0x101f8 [0159.502] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.503] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x92 \x02", lpUsedDefaultChar=0x0) returned 17 [0159.503] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.503] GdipCreateRegion (region=0x14e030) returned 0x0 [0159.503] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.503] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0159.503] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57ba0) returned 0x0 [0159.503] GdipIsMatrixIdentity (matrix=0x1bd57ba0, result=0x14e098) returned 0x0 [0159.503] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888990 [0159.503] GdipGetMatrixElements (matrix=0x1bd57ba0, matrixOut=0x1d888990) returned 0x0 [0159.503] LocalFree (hMem=0x1d888990) returned 0x0 [0159.504] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888350 [0159.504] GdipGetMatrixElements (matrix=0x1bd57ba0, matrixOut=0x1d888350) returned 0x0 [0159.504] LocalFree (hMem=0x1d888350) returned 0x0 [0159.504] GdipDeleteMatrix (matrix=0x1bd57ba0) returned 0x0 [0159.504] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0159.504] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0159.504] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0159.504] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.504] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0159.504] GetCurrentObject (hdc=0xd0106bf, type=0x1) returned 0x1b00017 [0159.504] GetCurrentObject (hdc=0xd0106bf, type=0x2) returned 0x1900010 [0159.504] GetCurrentObject (hdc=0xd0106bf, type=0x7) returned 0x60506af [0159.504] GetCurrentObject (hdc=0xd0106bf, type=0x6) returned 0x18a0048 [0159.504] SaveDC (hdc=0xd0106bf) returned 1 [0159.504] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7904064d [0159.504] GetClipRgn (hdc=0xd0106bf, hrgn=0x7904064d) returned 0 [0159.505] SelectClipRgn (hdc=0xd0106bf, hrgn=0x46040554) returned 2 [0159.505] DeleteObject (ho=0x7904064d) returned 1 [0159.505] DeleteObject (ho=0x46040554) returned 1 [0159.505] OffsetViewportOrgEx (in: hdc=0xd0106bf, x=0, y=0, lppt=0x220a510 | out: lppt=0x220a510) returned 1 [0159.505] GetROP2 (hdc=0xd0106bf) returned 13 [0159.505] GetBkMode (hdc=0xd0106bf) returned 2 [0159.505] SetBkMode (hdc=0xd0106bf, mode=1) returned 2 [0159.505] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x93006c0 [0159.505] SelectObject (hdc=0xd0106bf, h=0x93006c0) returned 0x1b00017 [0159.505] MoveToEx (in: hdc=0xd0106bf, x=25, y=0, lppt=0x220a578 | out: lppt=0x220a578) returned 1 [0159.505] LineTo (hdc=0xd0106bf, x=0, y=0) returned 1 [0159.505] SetBkMode (hdc=0xd0106bf, mode=2) returned 1 [0159.505] MoveToEx (in: hdc=0xd0106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.505] GetROP2 (hdc=0xd0106bf) returned 13 [0159.505] GetBkMode (hdc=0xd0106bf) returned 2 [0159.505] SetBkMode (hdc=0xd0106bf, mode=1) returned 2 [0159.505] SelectObject (hdc=0xd0106bf, h=0x93006c0) returned 0x93006c0 [0159.505] MoveToEx (in: hdc=0xd0106bf, x=0, y=0, lppt=0x220a590 | out: lppt=0x220a590) returned 1 [0159.505] LineTo (hdc=0xd0106bf, x=0, y=22) returned 1 [0159.505] SetBkMode (hdc=0xd0106bf, mode=2) returned 1 [0159.505] MoveToEx (in: hdc=0xd0106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.505] SelectObject (hdc=0xd0106bf, h=0x1b00017) returned 0x93006c0 [0159.505] DeleteObject (ho=0x93006c0) returned 1 [0159.506] GetROP2 (hdc=0xd0106bf) returned 13 [0159.506] GetBkMode (hdc=0xd0106bf) returned 2 [0159.506] SetBkMode (hdc=0xd0106bf, mode=1) returned 2 [0159.506] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x93006c1 [0159.506] SelectObject (hdc=0xd0106bf, h=0x93006c1) returned 0x1b00017 [0159.506] MoveToEx (in: hdc=0xd0106bf, x=0, y=22, lppt=0x220a5f8 | out: lppt=0x220a5f8) returned 1 [0159.506] LineTo (hdc=0xd0106bf, x=25, y=22) returned 1 [0159.506] SetBkMode (hdc=0xd0106bf, mode=2) returned 1 [0159.506] MoveToEx (in: hdc=0xd0106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.506] GetROP2 (hdc=0xd0106bf) returned 13 [0159.506] GetBkMode (hdc=0xd0106bf) returned 2 [0159.506] SetBkMode (hdc=0xd0106bf, mode=1) returned 2 [0159.506] SelectObject (hdc=0xd0106bf, h=0x93006c1) returned 0x93006c1 [0159.506] MoveToEx (in: hdc=0xd0106bf, x=25, y=22, lppt=0x220a610 | out: lppt=0x220a610) returned 1 [0159.506] LineTo (hdc=0xd0106bf, x=25, y=-1) returned 1 [0159.506] SetBkMode (hdc=0xd0106bf, mode=2) returned 1 [0159.506] MoveToEx (in: hdc=0xd0106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.506] SelectObject (hdc=0xd0106bf, h=0x1b00017) returned 0x93006c1 [0159.506] DeleteObject (ho=0x93006c1) returned 1 [0159.506] GetROP2 (hdc=0xd0106bf) returned 13 [0159.506] GetBkMode (hdc=0xd0106bf) returned 2 [0159.506] SetBkMode (hdc=0xd0106bf, mode=1) returned 2 [0159.506] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xa3006c0 [0159.506] SelectObject (hdc=0xd0106bf, h=0xa3006c0) returned 0x1b00017 [0159.506] MoveToEx (in: hdc=0xd0106bf, x=24, y=1, lppt=0x220a678 | out: lppt=0x220a678) returned 1 [0159.507] LineTo (hdc=0xd0106bf, x=1, y=1) returned 1 [0159.507] SetBkMode (hdc=0xd0106bf, mode=2) returned 1 [0159.507] MoveToEx (in: hdc=0xd0106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.507] GetROP2 (hdc=0xd0106bf) returned 13 [0159.507] GetBkMode (hdc=0xd0106bf) returned 2 [0159.507] SetBkMode (hdc=0xd0106bf, mode=1) returned 2 [0159.507] SelectObject (hdc=0xd0106bf, h=0xa3006c0) returned 0xa3006c0 [0159.507] MoveToEx (in: hdc=0xd0106bf, x=1, y=1, lppt=0x220a690 | out: lppt=0x220a690) returned 1 [0159.507] LineTo (hdc=0xd0106bf, x=1, y=21) returned 1 [0159.507] SetBkMode (hdc=0xd0106bf, mode=2) returned 1 [0159.507] MoveToEx (in: hdc=0xd0106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.507] SelectObject (hdc=0xd0106bf, h=0x1b00017) returned 0xa3006c0 [0159.507] DeleteObject (ho=0xa3006c0) returned 1 [0159.507] GetROP2 (hdc=0xd0106bf) returned 13 [0159.507] GetBkMode (hdc=0xd0106bf) returned 2 [0159.507] SetBkMode (hdc=0xd0106bf, mode=1) returned 2 [0159.507] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xa3006c1 [0159.507] SelectObject (hdc=0xd0106bf, h=0xa3006c1) returned 0x1b00017 [0159.507] MoveToEx (in: hdc=0xd0106bf, x=1, y=21, lppt=0x220a6f8 | out: lppt=0x220a6f8) returned 1 [0159.507] LineTo (hdc=0xd0106bf, x=24, y=21) returned 1 [0159.507] SetBkMode (hdc=0xd0106bf, mode=2) returned 1 [0159.507] MoveToEx (in: hdc=0xd0106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.507] GetROP2 (hdc=0xd0106bf) returned 13 [0159.507] GetBkMode (hdc=0xd0106bf) returned 2 [0159.508] SetBkMode (hdc=0xd0106bf, mode=1) returned 2 [0159.508] SelectObject (hdc=0xd0106bf, h=0xa3006c1) returned 0xa3006c1 [0159.508] MoveToEx (in: hdc=0xd0106bf, x=24, y=21, lppt=0x220a710 | out: lppt=0x220a710) returned 1 [0159.508] LineTo (hdc=0xd0106bf, x=24, y=0) returned 1 [0159.508] SetBkMode (hdc=0xd0106bf, mode=2) returned 1 [0159.508] MoveToEx (in: hdc=0xd0106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.508] SelectObject (hdc=0xd0106bf, h=0x1b00017) returned 0xa3006c1 [0159.508] DeleteObject (ho=0xa3006c1) returned 1 [0159.508] RestoreDC (hdc=0xd0106bf, nSavedDC=-1) returned 1 [0159.508] GdipReleaseDC (graphics=0x1bd51520, hdc=0xd0106bf) returned 0x0 [0159.508] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0159.508] BitBlt (hdc=0xffffffffd001053c, x=0, y=0, cx=26, cy=23, hdcSrc=0xd0106bf, x1=0, y1=0, rop=0xcc0020) returned 1 [0159.508] GdipReleaseDC (graphics=0x1bd51520, hdc=0xd0106bf) returned 0x0 [0159.508] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0159.508] SelectObject (hdc=0xd0106bf, h=0x185000f) returned 0x60506af [0159.508] DeleteDC (hdc=0xd0106bf) returned 1 [0159.508] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0159.508] EndPaint (hWnd=0x201bc, lpPaint=0x14e548) returned 1 [0159.508] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.509] IsWindowUnicode (hWnd=0x40046) returned 1 [0159.509] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.509] TranslateMessage (lpMsg=0x14ef10) returned 0 [0159.509] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0159.509] BeginPaint (in: hWnd=0x40046, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xffffffffd001053c [0159.509] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x40046, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0159.509] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x40046, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0159.509] GetStockObject (i=5) returned 0x1900015 [0159.509] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0159.509] CreateCompatibleDC (hdc=0xffffffffd001053c) returned 0x160106be [0159.509] SelectObject (hdc=0x160106be, h=0x60506af) returned 0x185000f [0159.509] GdipCreateFromHDC (hdc=0x160106be, graphics=0x14e528) returned 0x0 [0159.510] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0159.510] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0159.510] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0159.510] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57b60) returned 0x0 [0159.510] GdipIsMatrixIdentity (matrix=0x1bd57b60, result=0x14e5b8) returned 0x0 [0159.510] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888350 [0159.510] GdipGetMatrixElements (matrix=0x1bd57b60, matrixOut=0x1d888350) returned 0x0 [0159.510] LocalFree (hMem=0x1d888350) returned 0x0 [0159.510] GdipDeleteMatrix (matrix=0x1bd57b60) returned 0x0 [0159.510] GdipCreateRegion (region=0x14e550) returned 0x0 [0159.510] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.511] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0159.511] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0159.511] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd690dbd) returned 0x0 [0159.511] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.511] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0159.511] GetCurrentObject (hdc=0x160106be, type=0x1) returned 0x1b00017 [0159.511] GetCurrentObject (hdc=0x160106be, type=0x2) returned 0x1900010 [0159.511] GetCurrentObject (hdc=0x160106be, type=0x7) returned 0x60506af [0159.511] GetCurrentObject (hdc=0x160106be, type=0x6) returned 0x18a0048 [0159.511] SaveDC (hdc=0x160106be) returned 1 [0159.511] GetNearestColor (hdc=0x160106be, color=0xf0f0f0) returned 0xf0f0f0 [0159.511] GetNearestColor (hdc=0x160106be, color=0xa0a0a0) returned 0xa0a0a0 [0159.511] GetNearestColor (hdc=0x160106be, color=0x696969) returned 0x696969 [0159.511] GetNearestColor (hdc=0x160106be, color=0xa0a0a0) returned 0xa0a0a0 [0159.511] GetNearestColor (hdc=0x160106be, color=0x0) returned 0x0 [0159.511] GetNearestColor (hdc=0x160106be, color=0xffffff) returned 0xffffff [0159.511] GetNearestColor (hdc=0x160106be, color=0xe5e5e5) returned 0xe5e5e5 [0159.511] GetNearestColor (hdc=0x160106be, color=0xd8d8d8) returned 0xd8d8d8 [0159.511] GetNearestColor (hdc=0x160106be, color=0x0) returned 0x0 [0159.511] RestoreDC (hdc=0x160106be, nSavedDC=-1) returned 1 [0159.512] GdipReleaseDC (graphics=0x1bd51520, hdc=0x160106be) returned 0x0 [0159.512] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.512] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExª \x02", lpUsedDefaultChar=0x0) returned 17 [0159.512] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.512] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220b030) returned 0x0 [0159.512] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.512] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.512] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.512] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0159.512] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0159.512] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0159.512] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0159.512] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0159.512] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.513] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.513] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.513] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.513] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0159.513] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220b160) returned 0x0 [0159.513] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0159.513] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0159.513] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=1) returned 0x0 [0159.513] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.513] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.513] GdipMeasureString (graphics=0x1bd58670, string=";", length=1, font=0x1ab7ec20, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0159.513] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0159.513] GdipDeleteGraphics (graphics=0x1bd58670) returned 0x0 [0159.514] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.514] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.514] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.514] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0159.514] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.514] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0159.514] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57a20) returned 0x0 [0159.514] GdipIsMatrixIdentity (matrix=0x1bd57a20, result=0x14e128) returned 0x0 [0159.514] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888750 [0159.514] GdipGetMatrixElements (matrix=0x1bd57a20, matrixOut=0x1d888750) returned 0x0 [0159.515] LocalFree (hMem=0x1d888750) returned 0x0 [0159.515] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8884d0 [0159.515] GdipGetMatrixElements (matrix=0x1bd57a20, matrixOut=0x1d8884d0) returned 0x0 [0159.515] LocalFree (hMem=0x1d8884d0) returned 0x0 [0159.515] GdipDeleteMatrix (matrix=0x1bd57a20) returned 0x0 [0159.515] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0159.515] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0159.515] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0159.515] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.516] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0159.516] GetCurrentObject (hdc=0x160106be, type=0x1) returned 0x1b00017 [0159.516] GetCurrentObject (hdc=0x160106be, type=0x2) returned 0x1900010 [0159.518] GetCurrentObject (hdc=0x160106be, type=0x7) returned 0x60506af [0159.518] GetCurrentObject (hdc=0x160106be, type=0x6) returned 0x18a0048 [0159.518] SaveDC (hdc=0x160106be) returned 1 [0159.518] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x47040554 [0159.518] GetClipRgn (hdc=0x160106be, hrgn=0x47040554) returned 0 [0159.518] SelectClipRgn (hdc=0x160106be, hrgn=0x7a04064d) returned 2 [0159.518] DeleteObject (ho=0x47040554) returned 1 [0159.518] DeleteObject (ho=0x7a04064d) returned 1 [0159.518] OffsetViewportOrgEx (in: hdc=0x160106be, x=0, y=0, lppt=0x220b520 | out: lppt=0x220b520) returned 1 [0159.518] GetNearestColor (hdc=0x160106be, color=0xf0f0f0) returned 0xf0f0f0 [0159.518] CreateSolidBrush (color=0xf0f0f0) returned 0x261006b3 [0159.518] FillRect (hDC=0x160106be, lprc=0x14e1c8, hbr=0x261006b3) returned 1 [0159.518] DeleteObject (ho=0x261006b3) returned 1 [0159.518] RestoreDC (hdc=0x160106be, nSavedDC=-1) returned 1 [0159.518] GdipReleaseDC (graphics=0x1bd51520, hdc=0x160106be) returned 0x0 [0159.519] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.519] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0159.519] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.519] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220b620) returned 0x0 [0159.519] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.519] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.519] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.519] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0159.519] GdipDrawString (graphics=0x1bd51520, string=";", length=1, font=0x1ab7ec20, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0159.519] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0159.519] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.519] GetFocus () returned 0x101f8 [0159.520] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx§ \x02", lpUsedDefaultChar=0x0) returned 17 [0159.520] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.520] GdipCreateRegion (region=0x14e030) returned 0x0 [0159.520] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.520] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0159.520] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd578e0) returned 0x0 [0159.520] GdipIsMatrixIdentity (matrix=0x1bd578e0, result=0x14e098) returned 0x0 [0159.520] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888310 [0159.520] GdipGetMatrixElements (matrix=0x1bd578e0, matrixOut=0x1d888310) returned 0x0 [0159.520] LocalFree (hMem=0x1d888310) returned 0x0 [0159.520] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0159.520] GdipGetMatrixElements (matrix=0x1bd578e0, matrixOut=0x1d888150) returned 0x0 [0159.521] LocalFree (hMem=0x1d888150) returned 0x0 [0159.521] GdipDeleteMatrix (matrix=0x1bd578e0) returned 0x0 [0159.521] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0159.521] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0159.521] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0159.521] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.521] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0159.521] GetCurrentObject (hdc=0x160106be, type=0x1) returned 0x1b00017 [0159.521] GetCurrentObject (hdc=0x160106be, type=0x2) returned 0x1900010 [0159.521] GetCurrentObject (hdc=0x160106be, type=0x7) returned 0x60506af [0159.521] GetCurrentObject (hdc=0x160106be, type=0x6) returned 0x18a0048 [0159.521] SaveDC (hdc=0x160106be) returned 1 [0159.521] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7b04064d [0159.521] GetClipRgn (hdc=0x160106be, hrgn=0x7b04064d) returned 0 [0159.521] SelectClipRgn (hdc=0x160106be, hrgn=0x48040554) returned 2 [0159.521] DeleteObject (ho=0x7b04064d) returned 1 [0159.521] DeleteObject (ho=0x48040554) returned 1 [0159.521] OffsetViewportOrgEx (in: hdc=0x160106be, x=0, y=0, lppt=0x220ba08 | out: lppt=0x220ba08) returned 1 [0159.521] GetROP2 (hdc=0x160106be) returned 13 [0159.521] GetBkMode (hdc=0x160106be) returned 2 [0159.522] SetBkMode (hdc=0x160106be, mode=1) returned 2 [0159.522] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x273006bd [0159.522] SelectObject (hdc=0x160106be, h=0x273006bd) returned 0x1b00017 [0159.522] MoveToEx (in: hdc=0x160106be, x=25, y=0, lppt=0x220ba70 | out: lppt=0x220ba70) returned 1 [0159.522] LineTo (hdc=0x160106be, x=0, y=0) returned 1 [0159.522] SetBkMode (hdc=0x160106be, mode=2) returned 1 [0159.522] MoveToEx (in: hdc=0x160106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.522] GetROP2 (hdc=0x160106be) returned 13 [0159.522] GetBkMode (hdc=0x160106be) returned 2 [0159.522] SetBkMode (hdc=0x160106be, mode=1) returned 2 [0159.522] SelectObject (hdc=0x160106be, h=0x273006bd) returned 0x273006bd [0159.522] MoveToEx (in: hdc=0x160106be, x=0, y=0, lppt=0x220ba88 | out: lppt=0x220ba88) returned 1 [0159.522] LineTo (hdc=0x160106be, x=0, y=22) returned 1 [0159.522] SetBkMode (hdc=0x160106be, mode=2) returned 1 [0159.522] MoveToEx (in: hdc=0x160106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.522] SelectObject (hdc=0x160106be, h=0x1b00017) returned 0x273006bd [0159.522] DeleteObject (ho=0x273006bd) returned 1 [0159.522] GetROP2 (hdc=0x160106be) returned 13 [0159.522] GetBkMode (hdc=0x160106be) returned 2 [0159.522] SetBkMode (hdc=0x160106be, mode=1) returned 2 [0159.522] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0xb3006c1 [0159.522] SelectObject (hdc=0x160106be, h=0xb3006c1) returned 0x1b00017 [0159.522] MoveToEx (in: hdc=0x160106be, x=0, y=22, lppt=0x220baf0 | out: lppt=0x220baf0) returned 1 [0159.522] LineTo (hdc=0x160106be, x=25, y=22) returned 1 [0159.523] SetBkMode (hdc=0x160106be, mode=2) returned 1 [0159.523] MoveToEx (in: hdc=0x160106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.523] GetROP2 (hdc=0x160106be) returned 13 [0159.523] GetBkMode (hdc=0x160106be) returned 2 [0159.523] SetBkMode (hdc=0x160106be, mode=1) returned 2 [0159.523] SelectObject (hdc=0x160106be, h=0xb3006c1) returned 0xb3006c1 [0159.523] MoveToEx (in: hdc=0x160106be, x=25, y=22, lppt=0x220bb08 | out: lppt=0x220bb08) returned 1 [0159.523] LineTo (hdc=0x160106be, x=25, y=-1) returned 1 [0159.523] SetBkMode (hdc=0x160106be, mode=2) returned 1 [0159.523] MoveToEx (in: hdc=0x160106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.523] SelectObject (hdc=0x160106be, h=0x1b00017) returned 0xb3006c1 [0159.523] DeleteObject (ho=0xb3006c1) returned 1 [0159.523] GetROP2 (hdc=0x160106be) returned 13 [0159.523] GetBkMode (hdc=0x160106be) returned 2 [0159.523] SetBkMode (hdc=0x160106be, mode=1) returned 2 [0159.523] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x283006bd [0159.523] SelectObject (hdc=0x160106be, h=0x283006bd) returned 0x1b00017 [0159.523] MoveToEx (in: hdc=0x160106be, x=24, y=1, lppt=0x220bb70 | out: lppt=0x220bb70) returned 1 [0159.523] LineTo (hdc=0x160106be, x=1, y=1) returned 1 [0159.523] SetBkMode (hdc=0x160106be, mode=2) returned 1 [0159.523] MoveToEx (in: hdc=0x160106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.523] GetROP2 (hdc=0x160106be) returned 13 [0159.523] GetBkMode (hdc=0x160106be) returned 2 [0159.523] SetBkMode (hdc=0x160106be, mode=1) returned 2 [0159.523] SelectObject (hdc=0x160106be, h=0x283006bd) returned 0x283006bd [0159.523] MoveToEx (in: hdc=0x160106be, x=1, y=1, lppt=0x220bb88 | out: lppt=0x220bb88) returned 1 [0159.524] LineTo (hdc=0x160106be, x=1, y=21) returned 1 [0159.524] SetBkMode (hdc=0x160106be, mode=2) returned 1 [0159.524] MoveToEx (in: hdc=0x160106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.524] SelectObject (hdc=0x160106be, h=0x1b00017) returned 0x283006bd [0159.524] DeleteObject (ho=0x283006bd) returned 1 [0159.524] GetROP2 (hdc=0x160106be) returned 13 [0159.524] GetBkMode (hdc=0x160106be) returned 2 [0159.524] SetBkMode (hdc=0x160106be, mode=1) returned 2 [0159.524] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xc3006c1 [0159.524] SelectObject (hdc=0x160106be, h=0xc3006c1) returned 0x1b00017 [0159.524] MoveToEx (in: hdc=0x160106be, x=1, y=21, lppt=0x220bbf0 | out: lppt=0x220bbf0) returned 1 [0159.524] LineTo (hdc=0x160106be, x=24, y=21) returned 1 [0159.524] SetBkMode (hdc=0x160106be, mode=2) returned 1 [0159.524] MoveToEx (in: hdc=0x160106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.524] GetROP2 (hdc=0x160106be) returned 13 [0159.524] GetBkMode (hdc=0x160106be) returned 2 [0159.524] SetBkMode (hdc=0x160106be, mode=1) returned 2 [0159.524] SelectObject (hdc=0x160106be, h=0xc3006c1) returned 0xc3006c1 [0159.524] MoveToEx (in: hdc=0x160106be, x=24, y=21, lppt=0x220bc08 | out: lppt=0x220bc08) returned 1 [0159.524] LineTo (hdc=0x160106be, x=24, y=0) returned 1 [0159.524] SetBkMode (hdc=0x160106be, mode=2) returned 1 [0159.524] MoveToEx (in: hdc=0x160106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.524] SelectObject (hdc=0x160106be, h=0x1b00017) returned 0xc3006c1 [0159.524] DeleteObject (ho=0xc3006c1) returned 1 [0159.524] RestoreDC (hdc=0x160106be, nSavedDC=-1) returned 1 [0159.525] GdipReleaseDC (graphics=0x1bd51520, hdc=0x160106be) returned 0x0 [0159.525] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0159.525] BitBlt (hdc=0xffffffffd001053c, x=0, y=0, cx=26, cy=23, hdcSrc=0x160106be, x1=0, y1=0, rop=0xcc0020) returned 1 [0159.525] GdipReleaseDC (graphics=0x1bd51520, hdc=0x160106be) returned 0x0 [0159.525] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0159.525] SelectObject (hdc=0x160106be, h=0x185000f) returned 0x60506af [0159.525] DeleteDC (hdc=0x160106be) returned 1 [0159.525] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0159.526] EndPaint (hWnd=0x40046, lpPaint=0x14e548) returned 1 [0159.526] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.526] IsWindowUnicode (hWnd=0x20042) returned 1 [0159.526] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.526] TranslateMessage (lpMsg=0x14ef10) returned 0 [0159.526] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0159.526] BeginPaint (in: hWnd=0x20042, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xffffffffd001053c [0159.526] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20042, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0159.526] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20042, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0159.526] GetStockObject (i=5) returned 0x1900015 [0159.526] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0159.526] CreateCompatibleDC (hdc=0xffffffffd001053c) returned 0x190106be [0159.527] SelectObject (hdc=0x190106be, h=0x60506af) returned 0x185000f [0159.527] GdipCreateFromHDC (hdc=0x190106be, graphics=0x14e528) returned 0x0 [0159.527] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0159.527] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0159.527] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0159.527] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57b20) returned 0x0 [0159.527] GdipIsMatrixIdentity (matrix=0x1bd57b20, result=0x14e5b8) returned 0x0 [0159.527] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888790 [0159.527] GdipGetMatrixElements (matrix=0x1bd57b20, matrixOut=0x1d888790) returned 0x0 [0159.527] LocalFree (hMem=0x1d888790) returned 0x0 [0159.527] GdipDeleteMatrix (matrix=0x1bd57b20) returned 0x0 [0159.527] GdipCreateRegion (region=0x14e550) returned 0x0 [0159.527] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.528] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0159.528] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0159.528] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd660dbd) returned 0x0 [0159.528] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.528] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0159.528] GetCurrentObject (hdc=0x190106be, type=0x1) returned 0x1b00017 [0159.528] GetCurrentObject (hdc=0x190106be, type=0x2) returned 0x1900010 [0159.528] GetCurrentObject (hdc=0x190106be, type=0x7) returned 0x60506af [0159.528] GetCurrentObject (hdc=0x190106be, type=0x6) returned 0x18a0048 [0159.528] SaveDC (hdc=0x190106be) returned 1 [0159.528] GetNearestColor (hdc=0x190106be, color=0xf0f0f0) returned 0xf0f0f0 [0159.528] GetNearestColor (hdc=0x190106be, color=0xa0a0a0) returned 0xa0a0a0 [0159.528] GetNearestColor (hdc=0x190106be, color=0x696969) returned 0x696969 [0159.528] GetNearestColor (hdc=0x190106be, color=0xa0a0a0) returned 0xa0a0a0 [0159.528] GetNearestColor (hdc=0x190106be, color=0x0) returned 0x0 [0159.528] GetNearestColor (hdc=0x190106be, color=0xffffff) returned 0xffffff [0159.528] GetNearestColor (hdc=0x190106be, color=0xe5e5e5) returned 0xe5e5e5 [0159.528] GetNearestColor (hdc=0x190106be, color=0xd8d8d8) returned 0xd8d8d8 [0159.528] GetNearestColor (hdc=0x190106be, color=0x0) returned 0x0 [0159.528] RestoreDC (hdc=0x190106be, nSavedDC=-1) returned 1 [0159.529] GdipReleaseDC (graphics=0x1bd51520, hdc=0x190106be) returned 0x0 [0159.529] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.529] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx¿ \x02", lpUsedDefaultChar=0x0) returned 17 [0159.529] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.529] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c528) returned 0x0 [0159.529] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.529] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.529] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.529] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0159.529] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0159.529] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0159.529] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0159.529] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0159.529] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.530] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.530] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.530] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.530] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0159.530] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220c658) returned 0x0 [0159.530] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0159.530] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0159.530] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=1) returned 0x0 [0159.530] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.530] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.530] GdipMeasureString (graphics=0x1bd58670, string="-", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0159.530] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0159.530] GdipDeleteGraphics (graphics=0x1bd58670) returned 0x0 [0159.531] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.531] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.531] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.531] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0159.531] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.531] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0159.531] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd577e0) returned 0x0 [0159.531] GdipIsMatrixIdentity (matrix=0x1bd577e0, result=0x14e128) returned 0x0 [0159.531] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888250 [0159.531] GdipGetMatrixElements (matrix=0x1bd577e0, matrixOut=0x1d888250) returned 0x0 [0159.531] LocalFree (hMem=0x1d888250) returned 0x0 [0159.533] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888cd0 [0159.534] GdipGetMatrixElements (matrix=0x1bd577e0, matrixOut=0x1d888cd0) returned 0x0 [0159.534] LocalFree (hMem=0x1d888cd0) returned 0x0 [0159.534] GdipDeleteMatrix (matrix=0x1bd577e0) returned 0x0 [0159.534] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0159.534] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0159.534] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0159.534] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.534] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0159.534] GetCurrentObject (hdc=0x190106be, type=0x1) returned 0x1b00017 [0159.534] GetCurrentObject (hdc=0x190106be, type=0x2) returned 0x1900010 [0159.534] GetCurrentObject (hdc=0x190106be, type=0x7) returned 0x60506af [0159.534] GetCurrentObject (hdc=0x190106be, type=0x6) returned 0x18a0048 [0159.534] SaveDC (hdc=0x190106be) returned 1 [0159.535] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x49040554 [0159.535] GetClipRgn (hdc=0x190106be, hrgn=0x49040554) returned 0 [0159.535] SelectClipRgn (hdc=0x190106be, hrgn=0x7c04064d) returned 2 [0159.535] DeleteObject (ho=0x49040554) returned 1 [0159.535] DeleteObject (ho=0x7c04064d) returned 1 [0159.535] OffsetViewportOrgEx (in: hdc=0x190106be, x=0, y=0, lppt=0x220ca18 | out: lppt=0x220ca18) returned 1 [0159.535] GetNearestColor (hdc=0x190106be, color=0xf0f0f0) returned 0xf0f0f0 [0159.535] CreateSolidBrush (color=0xf0f0f0) returned 0x271006b3 [0159.535] FillRect (hDC=0x190106be, lprc=0x14e1c8, hbr=0x271006b3) returned 1 [0159.535] DeleteObject (ho=0x271006b3) returned 1 [0159.535] RestoreDC (hdc=0x190106be, nSavedDC=-1) returned 1 [0159.535] GdipReleaseDC (graphics=0x1bd51520, hdc=0x190106be) returned 0x0 [0159.535] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.535] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0159.536] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.536] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220cb18) returned 0x0 [0159.536] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.536] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.536] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.536] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0159.536] GdipDrawString (graphics=0x1bd51520, string="-", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0159.536] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0159.536] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.536] GetFocus () returned 0x101f8 [0159.536] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.536] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx¼ \x02", lpUsedDefaultChar=0x0) returned 17 [0159.537] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.537] GdipCreateRegion (region=0x14e030) returned 0x0 [0159.537] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.537] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0159.537] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57c20) returned 0x0 [0159.537] GdipIsMatrixIdentity (matrix=0x1bd57c20, result=0x14e098) returned 0x0 [0159.537] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888bd0 [0159.537] GdipGetMatrixElements (matrix=0x1bd57c20, matrixOut=0x1d888bd0) returned 0x0 [0159.537] LocalFree (hMem=0x1d888bd0) returned 0x0 [0159.537] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888ad0 [0159.537] GdipGetMatrixElements (matrix=0x1bd57c20, matrixOut=0x1d888ad0) returned 0x0 [0159.538] LocalFree (hMem=0x1d888ad0) returned 0x0 [0159.538] GdipDeleteMatrix (matrix=0x1bd57c20) returned 0x0 [0159.538] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0159.538] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0159.538] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0159.538] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.538] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0159.538] GetCurrentObject (hdc=0x190106be, type=0x1) returned 0x1b00017 [0159.538] GetCurrentObject (hdc=0x190106be, type=0x2) returned 0x1900010 [0159.538] GetCurrentObject (hdc=0x190106be, type=0x7) returned 0x60506af [0159.538] GetCurrentObject (hdc=0x190106be, type=0x6) returned 0x18a0048 [0159.538] SaveDC (hdc=0x190106be) returned 1 [0159.538] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7d04064d [0159.538] GetClipRgn (hdc=0x190106be, hrgn=0x7d04064d) returned 0 [0159.538] SelectClipRgn (hdc=0x190106be, hrgn=0x4a040554) returned 2 [0159.538] DeleteObject (ho=0x7d04064d) returned 1 [0159.538] DeleteObject (ho=0x4a040554) returned 1 [0159.538] OffsetViewportOrgEx (in: hdc=0x190106be, x=0, y=0, lppt=0x220cf00 | out: lppt=0x220cf00) returned 1 [0159.538] GetROP2 (hdc=0x190106be) returned 13 [0159.538] GetBkMode (hdc=0x190106be) returned 2 [0159.538] SetBkMode (hdc=0x190106be, mode=1) returned 2 [0159.539] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x293006bd [0159.539] SelectObject (hdc=0x190106be, h=0x293006bd) returned 0x1b00017 [0159.539] MoveToEx (in: hdc=0x190106be, x=25, y=0, lppt=0x220cf68 | out: lppt=0x220cf68) returned 1 [0159.539] LineTo (hdc=0x190106be, x=0, y=0) returned 1 [0159.539] SetBkMode (hdc=0x190106be, mode=2) returned 1 [0159.539] MoveToEx (in: hdc=0x190106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.539] GetROP2 (hdc=0x190106be) returned 13 [0159.539] GetBkMode (hdc=0x190106be) returned 2 [0159.539] SetBkMode (hdc=0x190106be, mode=1) returned 2 [0159.539] SelectObject (hdc=0x190106be, h=0x293006bd) returned 0x293006bd [0159.539] MoveToEx (in: hdc=0x190106be, x=0, y=0, lppt=0x220cf80 | out: lppt=0x220cf80) returned 1 [0159.539] LineTo (hdc=0x190106be, x=0, y=22) returned 1 [0159.539] SetBkMode (hdc=0x190106be, mode=2) returned 1 [0159.539] MoveToEx (in: hdc=0x190106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.539] SelectObject (hdc=0x190106be, h=0x1b00017) returned 0x293006bd [0159.539] DeleteObject (ho=0x293006bd) returned 1 [0159.539] GetROP2 (hdc=0x190106be) returned 13 [0159.539] GetBkMode (hdc=0x190106be) returned 2 [0159.539] SetBkMode (hdc=0x190106be, mode=1) returned 2 [0159.539] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0xb3006c0 [0159.539] SelectObject (hdc=0x190106be, h=0xb3006c0) returned 0x1b00017 [0159.539] MoveToEx (in: hdc=0x190106be, x=0, y=22, lppt=0x220cfe8 | out: lppt=0x220cfe8) returned 1 [0159.539] LineTo (hdc=0x190106be, x=25, y=22) returned 1 [0159.539] SetBkMode (hdc=0x190106be, mode=2) returned 1 [0159.539] MoveToEx (in: hdc=0x190106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.540] GetROP2 (hdc=0x190106be) returned 13 [0159.540] GetBkMode (hdc=0x190106be) returned 2 [0159.540] SetBkMode (hdc=0x190106be, mode=1) returned 2 [0159.540] SelectObject (hdc=0x190106be, h=0xb3006c0) returned 0xb3006c0 [0159.540] MoveToEx (in: hdc=0x190106be, x=25, y=22, lppt=0x220d000 | out: lppt=0x220d000) returned 1 [0159.540] LineTo (hdc=0x190106be, x=25, y=-1) returned 1 [0159.540] SetBkMode (hdc=0x190106be, mode=2) returned 1 [0159.540] MoveToEx (in: hdc=0x190106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.540] SelectObject (hdc=0x190106be, h=0x1b00017) returned 0xb3006c0 [0159.540] DeleteObject (ho=0xb3006c0) returned 1 [0159.540] GetROP2 (hdc=0x190106be) returned 13 [0159.540] GetBkMode (hdc=0x190106be) returned 2 [0159.540] SetBkMode (hdc=0x190106be, mode=1) returned 2 [0159.540] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x2a3006bd [0159.540] SelectObject (hdc=0x190106be, h=0x2a3006bd) returned 0x1b00017 [0159.540] MoveToEx (in: hdc=0x190106be, x=24, y=1, lppt=0x220d068 | out: lppt=0x220d068) returned 1 [0159.540] LineTo (hdc=0x190106be, x=1, y=1) returned 1 [0159.540] SetBkMode (hdc=0x190106be, mode=2) returned 1 [0159.540] MoveToEx (in: hdc=0x190106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.540] GetROP2 (hdc=0x190106be) returned 13 [0159.540] GetBkMode (hdc=0x190106be) returned 2 [0159.540] SetBkMode (hdc=0x190106be, mode=1) returned 2 [0159.540] SelectObject (hdc=0x190106be, h=0x2a3006bd) returned 0x2a3006bd [0159.540] MoveToEx (in: hdc=0x190106be, x=1, y=1, lppt=0x220d080 | out: lppt=0x220d080) returned 1 [0159.540] LineTo (hdc=0x190106be, x=1, y=21) returned 1 [0159.541] SetBkMode (hdc=0x190106be, mode=2) returned 1 [0159.541] MoveToEx (in: hdc=0x190106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.541] SelectObject (hdc=0x190106be, h=0x1b00017) returned 0x2a3006bd [0159.541] DeleteObject (ho=0x2a3006bd) returned 1 [0159.541] GetROP2 (hdc=0x190106be) returned 13 [0159.541] GetBkMode (hdc=0x190106be) returned 2 [0159.541] SetBkMode (hdc=0x190106be, mode=1) returned 2 [0159.541] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0xc3006c0 [0159.541] SelectObject (hdc=0x190106be, h=0xc3006c0) returned 0x1b00017 [0159.541] MoveToEx (in: hdc=0x190106be, x=1, y=21, lppt=0x220d0e8 | out: lppt=0x220d0e8) returned 1 [0159.541] LineTo (hdc=0x190106be, x=24, y=21) returned 1 [0159.541] SetBkMode (hdc=0x190106be, mode=2) returned 1 [0159.541] MoveToEx (in: hdc=0x190106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.541] GetROP2 (hdc=0x190106be) returned 13 [0159.541] GetBkMode (hdc=0x190106be) returned 2 [0159.541] SetBkMode (hdc=0x190106be, mode=1) returned 2 [0159.541] SelectObject (hdc=0x190106be, h=0xc3006c0) returned 0xc3006c0 [0159.541] MoveToEx (in: hdc=0x190106be, x=24, y=21, lppt=0x220d100 | out: lppt=0x220d100) returned 1 [0159.541] LineTo (hdc=0x190106be, x=24, y=0) returned 1 [0159.541] SetBkMode (hdc=0x190106be, mode=2) returned 1 [0159.541] MoveToEx (in: hdc=0x190106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.541] SelectObject (hdc=0x190106be, h=0x1b00017) returned 0xc3006c0 [0159.541] DeleteObject (ho=0xc3006c0) returned 1 [0159.541] RestoreDC (hdc=0x190106be, nSavedDC=-1) returned 1 [0159.542] GdipReleaseDC (graphics=0x1bd51520, hdc=0x190106be) returned 0x0 [0159.542] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0159.542] BitBlt (hdc=0xffffffffd001053c, x=0, y=0, cx=26, cy=23, hdcSrc=0x190106be, x1=0, y1=0, rop=0xcc0020) returned 1 [0159.542] GdipReleaseDC (graphics=0x1bd51520, hdc=0x190106be) returned 0x0 [0159.542] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0159.542] SelectObject (hdc=0x190106be, h=0x185000f) returned 0x60506af [0159.542] DeleteDC (hdc=0x190106be) returned 1 [0159.542] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0159.542] EndPaint (hWnd=0x20042, lpPaint=0x14e548) returned 1 [0159.542] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.542] IsWindowUnicode (hWnd=0x20034) returned 1 [0159.542] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.542] TranslateMessage (lpMsg=0x14ef10) returned 0 [0159.542] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0159.542] BeginPaint (in: hWnd=0x20034, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xffffffffd001053c [0159.543] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20034, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0159.543] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x20034, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0159.543] GetStockObject (i=5) returned 0x1900015 [0159.543] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0159.543] CreateCompatibleDC (hdc=0xffffffffd001053c) returned 0x100106c1 [0159.543] SelectObject (hdc=0x100106c1, h=0x60506af) returned 0x185000f [0159.543] GdipCreateFromHDC (hdc=0x100106c1, graphics=0x14e528) returned 0x0 [0159.543] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0159.543] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0159.543] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0159.543] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57a20) returned 0x0 [0159.543] GdipIsMatrixIdentity (matrix=0x1bd57a20, result=0x14e5b8) returned 0x0 [0159.543] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888cd0 [0159.543] GdipGetMatrixElements (matrix=0x1bd57a20, matrixOut=0x1d888cd0) returned 0x0 [0159.544] LocalFree (hMem=0x1d888cd0) returned 0x0 [0159.544] GdipDeleteMatrix (matrix=0x1bd57a20) returned 0x0 [0159.544] GdipCreateRegion (region=0x14e550) returned 0x0 [0159.544] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.544] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0159.544] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0159.544] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd630dbd) returned 0x0 [0159.544] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.544] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0159.544] GetCurrentObject (hdc=0x100106c1, type=0x1) returned 0x1b00017 [0159.544] GetCurrentObject (hdc=0x100106c1, type=0x2) returned 0x1900010 [0159.544] GetCurrentObject (hdc=0x100106c1, type=0x7) returned 0x60506af [0159.544] GetCurrentObject (hdc=0x100106c1, type=0x6) returned 0x18a0048 [0159.544] SaveDC (hdc=0x100106c1) returned 1 [0159.544] GetNearestColor (hdc=0x100106c1, color=0xf0f0f0) returned 0xf0f0f0 [0159.544] GetNearestColor (hdc=0x100106c1, color=0xa0a0a0) returned 0xa0a0a0 [0159.545] GetNearestColor (hdc=0x100106c1, color=0x696969) returned 0x696969 [0159.545] GetNearestColor (hdc=0x100106c1, color=0xa0a0a0) returned 0xa0a0a0 [0159.545] GetNearestColor (hdc=0x100106c1, color=0x0) returned 0x0 [0159.545] GetNearestColor (hdc=0x100106c1, color=0xffffff) returned 0xffffff [0159.545] GetNearestColor (hdc=0x100106c1, color=0xe5e5e5) returned 0xe5e5e5 [0159.545] GetNearestColor (hdc=0x100106c1, color=0xd8d8d8) returned 0xd8d8d8 [0159.545] GetNearestColor (hdc=0x100106c1, color=0x0) returned 0x0 [0159.545] RestoreDC (hdc=0x100106c1, nSavedDC=-1) returned 1 [0159.545] GdipReleaseDC (graphics=0x1bd51520, hdc=0x100106c1) returned 0x0 [0159.545] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.545] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÔ \x02", lpUsedDefaultChar=0x0) returned 17 [0159.545] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.545] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220da20) returned 0x0 [0159.546] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.546] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.546] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.546] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0159.546] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0159.546] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0159.546] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0159.546] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0159.546] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.546] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.546] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.546] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.546] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0159.546] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220db50) returned 0x0 [0159.547] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0159.547] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0159.547] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=1) returned 0x0 [0159.547] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.547] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.547] GdipMeasureString (graphics=0x1bd58670, string="8", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0159.547] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0159.547] GdipDeleteGraphics (graphics=0x1bd58670) returned 0x0 [0159.547] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.547] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.547] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.547] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0159.548] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.548] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0159.548] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57960) returned 0x0 [0159.548] GdipIsMatrixIdentity (matrix=0x1bd57960, result=0x14e128) returned 0x0 [0159.548] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0159.548] GdipGetMatrixElements (matrix=0x1bd57960, matrixOut=0x1d888150) returned 0x0 [0159.548] LocalFree (hMem=0x1d888150) returned 0x0 [0159.548] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8884d0 [0159.548] GdipGetMatrixElements (matrix=0x1bd57960, matrixOut=0x1d8884d0) returned 0x0 [0159.548] LocalFree (hMem=0x1d8884d0) returned 0x0 [0159.548] GdipDeleteMatrix (matrix=0x1bd57960) returned 0x0 [0159.548] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0159.548] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0159.549] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0159.549] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.549] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0159.549] GetCurrentObject (hdc=0x100106c1, type=0x1) returned 0x1b00017 [0159.549] GetCurrentObject (hdc=0x100106c1, type=0x2) returned 0x1900010 [0159.549] GetCurrentObject (hdc=0x100106c1, type=0x7) returned 0x60506af [0159.549] GetCurrentObject (hdc=0x100106c1, type=0x6) returned 0x18a0048 [0159.549] SaveDC (hdc=0x100106c1) returned 1 [0159.549] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4b040554 [0159.549] GetClipRgn (hdc=0x100106c1, hrgn=0x4b040554) returned 0 [0159.549] SelectClipRgn (hdc=0x100106c1, hrgn=0x7e04064d) returned 2 [0159.549] DeleteObject (ho=0x4b040554) returned 1 [0159.549] DeleteObject (ho=0x7e04064d) returned 1 [0159.549] OffsetViewportOrgEx (in: hdc=0x100106c1, x=0, y=0, lppt=0x220df10 | out: lppt=0x220df10) returned 1 [0159.550] GetNearestColor (hdc=0x100106c1, color=0xf0f0f0) returned 0xf0f0f0 [0159.550] CreateSolidBrush (color=0xf0f0f0) returned 0x281006b3 [0159.550] FillRect (hDC=0x100106c1, lprc=0x14e1c8, hbr=0x281006b3) returned 1 [0159.550] DeleteObject (ho=0x281006b3) returned 1 [0159.550] RestoreDC (hdc=0x100106c1, nSavedDC=-1) returned 1 [0159.550] GdipReleaseDC (graphics=0x1bd51520, hdc=0x100106c1) returned 0x0 [0159.550] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.550] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0159.550] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.550] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220e010) returned 0x0 [0159.550] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.550] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.550] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.550] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0159.551] GdipDrawString (graphics=0x1bd51520, string="8", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0159.551] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0159.551] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.551] GetFocus () returned 0x101f8 [0159.551] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.551] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExÑ \x02", lpUsedDefaultChar=0x0) returned 17 [0159.551] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.551] GdipCreateRegion (region=0x14e030) returned 0x0 [0159.551] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.551] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0159.551] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd576e0) returned 0x0 [0159.552] GdipIsMatrixIdentity (matrix=0x1bd576e0, result=0x14e098) returned 0x0 [0159.552] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888950 [0159.552] GdipGetMatrixElements (matrix=0x1bd576e0, matrixOut=0x1d888950) returned 0x0 [0159.552] LocalFree (hMem=0x1d888950) returned 0x0 [0159.552] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888510 [0159.552] GdipGetMatrixElements (matrix=0x1bd576e0, matrixOut=0x1d888510) returned 0x0 [0159.552] LocalFree (hMem=0x1d888510) returned 0x0 [0159.552] GdipDeleteMatrix (matrix=0x1bd576e0) returned 0x0 [0159.552] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0159.552] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0159.552] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0159.552] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.552] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0159.553] GetCurrentObject (hdc=0x100106c1, type=0x1) returned 0x1b00017 [0159.553] GetCurrentObject (hdc=0x100106c1, type=0x2) returned 0x1900010 [0159.553] GetCurrentObject (hdc=0x100106c1, type=0x7) returned 0x60506af [0159.553] GetCurrentObject (hdc=0x100106c1, type=0x6) returned 0x18a0048 [0159.553] SaveDC (hdc=0x100106c1) returned 1 [0159.553] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7f04064d [0159.553] GetClipRgn (hdc=0x100106c1, hrgn=0x7f04064d) returned 0 [0159.553] SelectClipRgn (hdc=0x100106c1, hrgn=0x4c040554) returned 2 [0159.553] DeleteObject (ho=0x7f04064d) returned 1 [0159.553] DeleteObject (ho=0x4c040554) returned 1 [0159.553] OffsetViewportOrgEx (in: hdc=0x100106c1, x=0, y=0, lppt=0x220e3f8 | out: lppt=0x220e3f8) returned 1 [0159.553] GetROP2 (hdc=0x100106c1) returned 13 [0159.553] GetBkMode (hdc=0x100106c1) returned 2 [0159.553] SetBkMode (hdc=0x100106c1, mode=1) returned 2 [0159.553] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0xd3006c0 [0159.553] SelectObject (hdc=0x100106c1, h=0xd3006c0) returned 0x1b00017 [0159.553] MoveToEx (in: hdc=0x100106c1, x=25, y=0, lppt=0x220e460 | out: lppt=0x220e460) returned 1 [0159.553] LineTo (hdc=0x100106c1, x=0, y=0) returned 1 [0159.553] SetBkMode (hdc=0x100106c1, mode=2) returned 1 [0159.553] MoveToEx (in: hdc=0x100106c1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.553] GetROP2 (hdc=0x100106c1) returned 13 [0159.554] GetBkMode (hdc=0x100106c1) returned 2 [0159.554] SetBkMode (hdc=0x100106c1, mode=1) returned 2 [0159.554] SelectObject (hdc=0x100106c1, h=0xd3006c0) returned 0xd3006c0 [0159.554] MoveToEx (in: hdc=0x100106c1, x=0, y=0, lppt=0x220e478 | out: lppt=0x220e478) returned 1 [0159.554] LineTo (hdc=0x100106c1, x=0, y=22) returned 1 [0159.554] SetBkMode (hdc=0x100106c1, mode=2) returned 1 [0159.554] MoveToEx (in: hdc=0x100106c1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.554] SelectObject (hdc=0x100106c1, h=0x1b00017) returned 0xd3006c0 [0159.554] DeleteObject (ho=0xd3006c0) returned 1 [0159.554] GetROP2 (hdc=0x100106c1) returned 13 [0159.554] GetBkMode (hdc=0x100106c1) returned 2 [0159.554] SetBkMode (hdc=0x100106c1, mode=1) returned 2 [0159.554] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x2b3006bd [0159.554] SelectObject (hdc=0x100106c1, h=0x2b3006bd) returned 0x1b00017 [0159.554] MoveToEx (in: hdc=0x100106c1, x=0, y=22, lppt=0x220e4e0 | out: lppt=0x220e4e0) returned 1 [0159.554] LineTo (hdc=0x100106c1, x=25, y=22) returned 1 [0159.554] SetBkMode (hdc=0x100106c1, mode=2) returned 1 [0159.554] MoveToEx (in: hdc=0x100106c1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.554] GetROP2 (hdc=0x100106c1) returned 13 [0159.554] GetBkMode (hdc=0x100106c1) returned 2 [0159.554] SetBkMode (hdc=0x100106c1, mode=1) returned 2 [0159.554] SelectObject (hdc=0x100106c1, h=0x2b3006bd) returned 0x2b3006bd [0159.554] MoveToEx (in: hdc=0x100106c1, x=25, y=22, lppt=0x220e4f8 | out: lppt=0x220e4f8) returned 1 [0159.554] LineTo (hdc=0x100106c1, x=25, y=-1) returned 1 [0159.555] SetBkMode (hdc=0x100106c1, mode=2) returned 1 [0159.555] MoveToEx (in: hdc=0x100106c1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.555] SelectObject (hdc=0x100106c1, h=0x1b00017) returned 0x2b3006bd [0159.555] DeleteObject (ho=0x2b3006bd) returned 1 [0159.555] GetROP2 (hdc=0x100106c1) returned 13 [0159.555] GetBkMode (hdc=0x100106c1) returned 2 [0159.555] SetBkMode (hdc=0x100106c1, mode=1) returned 2 [0159.555] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0xe3006c0 [0159.555] SelectObject (hdc=0x100106c1, h=0xe3006c0) returned 0x1b00017 [0159.555] MoveToEx (in: hdc=0x100106c1, x=24, y=1, lppt=0x220e560 | out: lppt=0x220e560) returned 1 [0159.555] LineTo (hdc=0x100106c1, x=1, y=1) returned 1 [0159.555] SetBkMode (hdc=0x100106c1, mode=2) returned 1 [0159.555] MoveToEx (in: hdc=0x100106c1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.555] GetROP2 (hdc=0x100106c1) returned 13 [0159.555] GetBkMode (hdc=0x100106c1) returned 2 [0159.555] SetBkMode (hdc=0x100106c1, mode=1) returned 2 [0159.555] SelectObject (hdc=0x100106c1, h=0xe3006c0) returned 0xe3006c0 [0159.555] MoveToEx (in: hdc=0x100106c1, x=1, y=1, lppt=0x220e578 | out: lppt=0x220e578) returned 1 [0159.555] LineTo (hdc=0x100106c1, x=1, y=21) returned 1 [0159.555] SetBkMode (hdc=0x100106c1, mode=2) returned 1 [0159.555] MoveToEx (in: hdc=0x100106c1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.555] SelectObject (hdc=0x100106c1, h=0x1b00017) returned 0xe3006c0 [0159.555] DeleteObject (ho=0xe3006c0) returned 1 [0159.555] GetROP2 (hdc=0x100106c1) returned 13 [0159.555] GetBkMode (hdc=0x100106c1) returned 2 [0159.556] SetBkMode (hdc=0x100106c1, mode=1) returned 2 [0159.556] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x2c3006bd [0159.556] SelectObject (hdc=0x100106c1, h=0x2c3006bd) returned 0x1b00017 [0159.556] MoveToEx (in: hdc=0x100106c1, x=1, y=21, lppt=0x220e5e0 | out: lppt=0x220e5e0) returned 1 [0159.556] LineTo (hdc=0x100106c1, x=24, y=21) returned 1 [0159.556] SetBkMode (hdc=0x100106c1, mode=2) returned 1 [0159.556] MoveToEx (in: hdc=0x100106c1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.556] GetROP2 (hdc=0x100106c1) returned 13 [0159.556] GetBkMode (hdc=0x100106c1) returned 2 [0159.556] SetBkMode (hdc=0x100106c1, mode=1) returned 2 [0159.556] SelectObject (hdc=0x100106c1, h=0x2c3006bd) returned 0x2c3006bd [0159.556] MoveToEx (in: hdc=0x100106c1, x=24, y=21, lppt=0x220e5f8 | out: lppt=0x220e5f8) returned 1 [0159.556] LineTo (hdc=0x100106c1, x=24, y=0) returned 1 [0159.556] SetBkMode (hdc=0x100106c1, mode=2) returned 1 [0159.556] MoveToEx (in: hdc=0x100106c1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.556] SelectObject (hdc=0x100106c1, h=0x1b00017) returned 0x2c3006bd [0159.556] DeleteObject (ho=0x2c3006bd) returned 1 [0159.556] RestoreDC (hdc=0x100106c1, nSavedDC=-1) returned 1 [0159.556] GdipReleaseDC (graphics=0x1bd51520, hdc=0x100106c1) returned 0x0 [0159.556] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0159.556] BitBlt (hdc=0xffffffffd001053c, x=0, y=0, cx=26, cy=23, hdcSrc=0x100106c1, x1=0, y1=0, rop=0xcc0020) returned 1 [0159.556] GdipReleaseDC (graphics=0x1bd51520, hdc=0x100106c1) returned 0x0 [0159.557] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0159.557] SelectObject (hdc=0x100106c1, h=0x185000f) returned 0x60506af [0159.557] DeleteDC (hdc=0x100106c1) returned 1 [0159.557] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0159.557] EndPaint (hWnd=0x20034, lpPaint=0x14e548) returned 1 [0159.557] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.557] IsWindowUnicode (hWnd=0x2004c) returned 1 [0159.557] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.557] TranslateMessage (lpMsg=0x14ef10) returned 0 [0159.557] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0159.557] BeginPaint (in: hWnd=0x2004c, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xffffffffd001053c [0159.557] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x2004c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0159.557] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x2004c, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0159.557] GetStockObject (i=5) returned 0x1900015 [0159.558] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0159.558] CreateCompatibleDC (hdc=0xffffffffd001053c) returned 0x1a0106bf [0159.558] SelectObject (hdc=0x1a0106bf, h=0x60506af) returned 0x185000f [0159.558] GdipCreateFromHDC (hdc=0x1a0106bf, graphics=0x14e528) returned 0x0 [0159.558] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0159.558] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0159.558] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0159.558] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd578a0) returned 0x0 [0159.558] GdipIsMatrixIdentity (matrix=0x1bd578a0, result=0x14e5b8) returned 0x0 [0159.558] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888bd0 [0159.558] GdipGetMatrixElements (matrix=0x1bd578a0, matrixOut=0x1d888bd0) returned 0x0 [0159.559] LocalFree (hMem=0x1d888bd0) returned 0x0 [0159.559] GdipDeleteMatrix (matrix=0x1bd578a0) returned 0x0 [0159.559] GdipCreateRegion (region=0x14e550) returned 0x0 [0159.559] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.559] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0159.559] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0159.559] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd600dbd) returned 0x0 [0159.559] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.559] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0159.559] GetCurrentObject (hdc=0x1a0106bf, type=0x1) returned 0x1b00017 [0159.559] GetCurrentObject (hdc=0x1a0106bf, type=0x2) returned 0x1900010 [0159.559] GetCurrentObject (hdc=0x1a0106bf, type=0x7) returned 0x60506af [0159.559] GetCurrentObject (hdc=0x1a0106bf, type=0x6) returned 0x18a0048 [0159.559] SaveDC (hdc=0x1a0106bf) returned 1 [0159.559] GetNearestColor (hdc=0x1a0106bf, color=0xf0f0f0) returned 0xf0f0f0 [0159.559] GetNearestColor (hdc=0x1a0106bf, color=0xa0a0a0) returned 0xa0a0a0 [0159.559] GetNearestColor (hdc=0x1a0106bf, color=0x696969) returned 0x696969 [0159.559] GetNearestColor (hdc=0x1a0106bf, color=0xa0a0a0) returned 0xa0a0a0 [0159.559] GetNearestColor (hdc=0x1a0106bf, color=0x0) returned 0x0 [0159.559] GetNearestColor (hdc=0x1a0106bf, color=0xffffff) returned 0xffffff [0159.560] GetNearestColor (hdc=0x1a0106bf, color=0xe5e5e5) returned 0xe5e5e5 [0159.560] GetNearestColor (hdc=0x1a0106bf, color=0xd8d8d8) returned 0xd8d8d8 [0159.560] GetNearestColor (hdc=0x1a0106bf, color=0x0) returned 0x0 [0159.560] RestoreDC (hdc=0x1a0106bf, nSavedDC=-1) returned 1 [0159.560] GdipReleaseDC (graphics=0x1bd51520, hdc=0x1a0106bf) returned 0x0 [0159.560] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.560] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExè \x02", lpUsedDefaultChar=0x0) returned 17 [0159.560] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.560] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220ef18) returned 0x0 [0159.560] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.560] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.560] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.560] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0159.560] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0159.561] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0159.561] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0159.561] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0159.561] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.561] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.561] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.561] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.561] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0159.561] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f048) returned 0x0 [0159.561] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0159.561] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0159.561] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=1) returned 0x0 [0159.561] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.561] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.562] GdipMeasureString (graphics=0x1bd58670, string="c", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0159.562] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0159.562] GdipDeleteGraphics (graphics=0x1bd58670) returned 0x0 [0159.562] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.562] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.562] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.562] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0159.562] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.562] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0159.562] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57a60) returned 0x0 [0159.562] GdipIsMatrixIdentity (matrix=0x1bd57a60, result=0x14e128) returned 0x0 [0159.562] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888cd0 [0159.562] GdipGetMatrixElements (matrix=0x1bd57a60, matrixOut=0x1d888cd0) returned 0x0 [0159.563] LocalFree (hMem=0x1d888cd0) returned 0x0 [0159.595] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888550 [0159.595] GdipGetMatrixElements (matrix=0x1bd57a60, matrixOut=0x1d888550) returned 0x0 [0159.595] LocalFree (hMem=0x1d888550) returned 0x0 [0159.595] GdipDeleteMatrix (matrix=0x1bd57a60) returned 0x0 [0159.595] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0159.595] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0159.595] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0159.596] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.596] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0159.596] GetCurrentObject (hdc=0x1a0106bf, type=0x1) returned 0x1b00017 [0159.596] GetCurrentObject (hdc=0x1a0106bf, type=0x2) returned 0x1900010 [0159.596] GetCurrentObject (hdc=0x1a0106bf, type=0x7) returned 0x60506af [0159.596] GetCurrentObject (hdc=0x1a0106bf, type=0x6) returned 0x18a0048 [0159.596] SaveDC (hdc=0x1a0106bf) returned 1 [0159.596] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4d040554 [0159.596] GetClipRgn (hdc=0x1a0106bf, hrgn=0x4d040554) returned 0 [0159.596] SelectClipRgn (hdc=0x1a0106bf, hrgn=0xffffffff8004064d) returned 2 [0159.596] DeleteObject (ho=0x4d040554) returned 1 [0159.596] DeleteObject (ho=0xffffffff8004064d) returned 1 [0159.596] OffsetViewportOrgEx (in: hdc=0x1a0106bf, x=0, y=0, lppt=0x220f408 | out: lppt=0x220f408) returned 1 [0159.596] GetNearestColor (hdc=0x1a0106bf, color=0xf0f0f0) returned 0xf0f0f0 [0159.596] CreateSolidBrush (color=0xf0f0f0) returned 0x291006b3 [0159.596] FillRect (hDC=0x1a0106bf, lprc=0x14e1c8, hbr=0x291006b3) returned 1 [0159.596] DeleteObject (ho=0x291006b3) returned 1 [0159.596] RestoreDC (hdc=0x1a0106bf, nSavedDC=-1) returned 1 [0159.596] GdipReleaseDC (graphics=0x1bd51520, hdc=0x1a0106bf) returned 0x0 [0159.597] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.597] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0159.597] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.597] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x220f508) returned 0x0 [0159.597] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.597] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.597] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.597] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0159.597] GdipDrawString (graphics=0x1bd51520, string="c", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0159.598] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0159.598] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.598] GetFocus () returned 0x101f8 [0159.598] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.598] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExæ \x02", lpUsedDefaultChar=0x0) returned 17 [0159.598] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.598] GdipCreateRegion (region=0x14e030) returned 0x0 [0159.598] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.599] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0159.599] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57760) returned 0x0 [0159.599] GdipIsMatrixIdentity (matrix=0x1bd57760, result=0x14e098) returned 0x0 [0159.599] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888410 [0159.599] GdipGetMatrixElements (matrix=0x1bd57760, matrixOut=0x1d888410) returned 0x0 [0159.599] LocalFree (hMem=0x1d888410) returned 0x0 [0159.599] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8882d0 [0159.599] GdipGetMatrixElements (matrix=0x1bd57760, matrixOut=0x1d8882d0) returned 0x0 [0159.600] LocalFree (hMem=0x1d8882d0) returned 0x0 [0159.600] GdipDeleteMatrix (matrix=0x1bd57760) returned 0x0 [0159.600] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0159.601] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0159.601] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0159.601] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.601] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0159.601] GetCurrentObject (hdc=0x1a0106bf, type=0x1) returned 0x1b00017 [0159.601] GetCurrentObject (hdc=0x1a0106bf, type=0x2) returned 0x1900010 [0159.601] GetCurrentObject (hdc=0x1a0106bf, type=0x7) returned 0x60506af [0159.601] GetCurrentObject (hdc=0x1a0106bf, type=0x6) returned 0x18a0048 [0159.601] SaveDC (hdc=0x1a0106bf) returned 1 [0159.601] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8104064d [0159.601] GetClipRgn (hdc=0x1a0106bf, hrgn=0xffffffff8104064d) returned 0 [0159.601] SelectClipRgn (hdc=0x1a0106bf, hrgn=0x4e040554) returned 2 [0159.601] DeleteObject (ho=0xffffffff8104064d) returned 1 [0159.601] DeleteObject (ho=0x4e040554) returned 1 [0159.601] OffsetViewportOrgEx (in: hdc=0x1a0106bf, x=0, y=0, lppt=0x220f8f0 | out: lppt=0x220f8f0) returned 1 [0159.601] GetROP2 (hdc=0x1a0106bf) returned 13 [0159.601] GetBkMode (hdc=0x1a0106bf) returned 2 [0159.601] SetBkMode (hdc=0x1a0106bf, mode=1) returned 2 [0159.601] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x2d3006bd [0159.601] SelectObject (hdc=0x1a0106bf, h=0x2d3006bd) returned 0x1b00017 [0159.601] MoveToEx (in: hdc=0x1a0106bf, x=25, y=0, lppt=0x220f958 | out: lppt=0x220f958) returned 1 [0159.602] LineTo (hdc=0x1a0106bf, x=0, y=0) returned 1 [0159.602] SetBkMode (hdc=0x1a0106bf, mode=2) returned 1 [0159.602] MoveToEx (in: hdc=0x1a0106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.602] GetROP2 (hdc=0x1a0106bf) returned 13 [0159.602] GetBkMode (hdc=0x1a0106bf) returned 2 [0159.602] SetBkMode (hdc=0x1a0106bf, mode=1) returned 2 [0159.602] SelectObject (hdc=0x1a0106bf, h=0x2d3006bd) returned 0x2d3006bd [0159.602] MoveToEx (in: hdc=0x1a0106bf, x=0, y=0, lppt=0x220f970 | out: lppt=0x220f970) returned 1 [0159.602] LineTo (hdc=0x1a0106bf, x=0, y=22) returned 1 [0159.602] SetBkMode (hdc=0x1a0106bf, mode=2) returned 1 [0159.602] MoveToEx (in: hdc=0x1a0106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.602] SelectObject (hdc=0x1a0106bf, h=0x1b00017) returned 0x2d3006bd [0159.602] DeleteObject (ho=0x2d3006bd) returned 1 [0159.602] GetROP2 (hdc=0x1a0106bf) returned 13 [0159.602] GetBkMode (hdc=0x1a0106bf) returned 2 [0159.602] SetBkMode (hdc=0x1a0106bf, mode=1) returned 2 [0159.602] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0xf3006c0 [0159.602] SelectObject (hdc=0x1a0106bf, h=0xf3006c0) returned 0x1b00017 [0159.602] MoveToEx (in: hdc=0x1a0106bf, x=0, y=22, lppt=0x220f9d8 | out: lppt=0x220f9d8) returned 1 [0159.602] LineTo (hdc=0x1a0106bf, x=25, y=22) returned 1 [0159.602] SetBkMode (hdc=0x1a0106bf, mode=2) returned 1 [0159.602] MoveToEx (in: hdc=0x1a0106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.602] GetROP2 (hdc=0x1a0106bf) returned 13 [0159.603] GetBkMode (hdc=0x1a0106bf) returned 2 [0159.603] SetBkMode (hdc=0x1a0106bf, mode=1) returned 2 [0159.603] SelectObject (hdc=0x1a0106bf, h=0xf3006c0) returned 0xf3006c0 [0159.603] MoveToEx (in: hdc=0x1a0106bf, x=25, y=22, lppt=0x220f9f0 | out: lppt=0x220f9f0) returned 1 [0159.603] LineTo (hdc=0x1a0106bf, x=25, y=-1) returned 1 [0159.603] SetBkMode (hdc=0x1a0106bf, mode=2) returned 1 [0159.603] MoveToEx (in: hdc=0x1a0106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.603] SelectObject (hdc=0x1a0106bf, h=0x1b00017) returned 0xf3006c0 [0159.603] DeleteObject (ho=0xf3006c0) returned 1 [0159.603] GetROP2 (hdc=0x1a0106bf) returned 13 [0159.603] GetBkMode (hdc=0x1a0106bf) returned 2 [0159.603] SetBkMode (hdc=0x1a0106bf, mode=1) returned 2 [0159.603] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x2e3006bd [0159.603] SelectObject (hdc=0x1a0106bf, h=0x2e3006bd) returned 0x1b00017 [0159.603] MoveToEx (in: hdc=0x1a0106bf, x=24, y=1, lppt=0x220fa58 | out: lppt=0x220fa58) returned 1 [0159.603] LineTo (hdc=0x1a0106bf, x=1, y=1) returned 1 [0159.603] SetBkMode (hdc=0x1a0106bf, mode=2) returned 1 [0159.603] MoveToEx (in: hdc=0x1a0106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.603] GetROP2 (hdc=0x1a0106bf) returned 13 [0159.603] GetBkMode (hdc=0x1a0106bf) returned 2 [0159.603] SetBkMode (hdc=0x1a0106bf, mode=1) returned 2 [0159.603] SelectObject (hdc=0x1a0106bf, h=0x2e3006bd) returned 0x2e3006bd [0159.603] MoveToEx (in: hdc=0x1a0106bf, x=1, y=1, lppt=0x220fa70 | out: lppt=0x220fa70) returned 1 [0159.604] LineTo (hdc=0x1a0106bf, x=1, y=21) returned 1 [0159.604] SetBkMode (hdc=0x1a0106bf, mode=2) returned 1 [0159.604] MoveToEx (in: hdc=0x1a0106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.604] SelectObject (hdc=0x1a0106bf, h=0x1b00017) returned 0x2e3006bd [0159.604] DeleteObject (ho=0x2e3006bd) returned 1 [0159.604] GetROP2 (hdc=0x1a0106bf) returned 13 [0159.604] GetBkMode (hdc=0x1a0106bf) returned 2 [0159.604] SetBkMode (hdc=0x1a0106bf, mode=1) returned 2 [0159.604] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x103006c0 [0159.604] SelectObject (hdc=0x1a0106bf, h=0x103006c0) returned 0x1b00017 [0159.604] MoveToEx (in: hdc=0x1a0106bf, x=1, y=21, lppt=0x220fad8 | out: lppt=0x220fad8) returned 1 [0159.604] LineTo (hdc=0x1a0106bf, x=24, y=21) returned 1 [0159.604] SetBkMode (hdc=0x1a0106bf, mode=2) returned 1 [0159.604] MoveToEx (in: hdc=0x1a0106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.604] GetROP2 (hdc=0x1a0106bf) returned 13 [0159.604] GetBkMode (hdc=0x1a0106bf) returned 2 [0159.604] SetBkMode (hdc=0x1a0106bf, mode=1) returned 2 [0159.604] SelectObject (hdc=0x1a0106bf, h=0x103006c0) returned 0x103006c0 [0159.604] MoveToEx (in: hdc=0x1a0106bf, x=24, y=21, lppt=0x220faf0 | out: lppt=0x220faf0) returned 1 [0159.604] LineTo (hdc=0x1a0106bf, x=24, y=0) returned 1 [0159.604] SetBkMode (hdc=0x1a0106bf, mode=2) returned 1 [0159.604] MoveToEx (in: hdc=0x1a0106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.604] SelectObject (hdc=0x1a0106bf, h=0x1b00017) returned 0x103006c0 [0159.605] DeleteObject (ho=0x103006c0) returned 1 [0159.605] RestoreDC (hdc=0x1a0106bf, nSavedDC=-1) returned 1 [0159.605] GdipReleaseDC (graphics=0x1bd51520, hdc=0x1a0106bf) returned 0x0 [0159.605] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0159.605] BitBlt (hdc=0xffffffffd001053c, x=0, y=0, cx=26, cy=23, hdcSrc=0x1a0106bf, x1=0, y1=0, rop=0xcc0020) returned 1 [0159.605] GdipReleaseDC (graphics=0x1bd51520, hdc=0x1a0106bf) returned 0x0 [0159.605] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0159.605] SelectObject (hdc=0x1a0106bf, h=0x185000f) returned 0x60506af [0159.605] DeleteDC (hdc=0x1a0106bf) returned 1 [0159.605] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0159.605] EndPaint (hWnd=0x2004c, lpPaint=0x14e548) returned 1 [0159.605] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.605] IsWindowUnicode (hWnd=0x101e4) returned 1 [0159.605] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.605] TranslateMessage (lpMsg=0x14ef10) returned 0 [0159.605] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0159.606] BeginPaint (in: hWnd=0x101e4, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xffffffffd001053c [0159.606] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e4, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0159.606] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e4, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0159.606] GetStockObject (i=5) returned 0x1900015 [0159.606] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0159.606] CreateCompatibleDC (hdc=0xffffffffd001053c) returned 0x220106be [0159.606] SelectObject (hdc=0x220106be, h=0x60506af) returned 0x185000f [0159.606] GdipCreateFromHDC (hdc=0x220106be, graphics=0x14e528) returned 0x0 [0159.607] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0159.607] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0159.607] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0159.607] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57b60) returned 0x0 [0159.607] GdipIsMatrixIdentity (matrix=0x1bd57b60, result=0x14e5b8) returned 0x0 [0159.607] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888ad0 [0159.607] GdipGetMatrixElements (matrix=0x1bd57b60, matrixOut=0x1d888ad0) returned 0x0 [0159.607] LocalFree (hMem=0x1d888ad0) returned 0x0 [0159.607] GdipDeleteMatrix (matrix=0x1bd57b60) returned 0x0 [0159.608] GdipCreateRegion (region=0x14e550) returned 0x0 [0159.608] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.608] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0159.608] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0159.608] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd5d0dbd) returned 0x0 [0159.608] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.608] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0159.608] GetCurrentObject (hdc=0x220106be, type=0x1) returned 0x1b00017 [0159.608] GetCurrentObject (hdc=0x220106be, type=0x2) returned 0x1900010 [0159.608] GetCurrentObject (hdc=0x220106be, type=0x7) returned 0x60506af [0159.608] GetCurrentObject (hdc=0x220106be, type=0x6) returned 0x18a0048 [0159.608] SaveDC (hdc=0x220106be) returned 1 [0159.608] GetNearestColor (hdc=0x220106be, color=0xf0f0f0) returned 0xf0f0f0 [0159.608] GetNearestColor (hdc=0x220106be, color=0xa0a0a0) returned 0xa0a0a0 [0159.608] GetNearestColor (hdc=0x220106be, color=0x696969) returned 0x696969 [0159.608] GetNearestColor (hdc=0x220106be, color=0xa0a0a0) returned 0xa0a0a0 [0159.608] GetNearestColor (hdc=0x220106be, color=0x0) returned 0x0 [0159.608] GetNearestColor (hdc=0x220106be, color=0xffffff) returned 0xffffff [0159.608] GetNearestColor (hdc=0x220106be, color=0xe5e5e5) returned 0xe5e5e5 [0159.609] GetNearestColor (hdc=0x220106be, color=0xd8d8d8) returned 0xd8d8d8 [0159.609] GetNearestColor (hdc=0x220106be, color=0x0) returned 0x0 [0159.609] RestoreDC (hdc=0x220106be, nSavedDC=-1) returned 1 [0159.609] GdipReleaseDC (graphics=0x1bd51520, hdc=0x220106be) returned 0x0 [0159.609] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.609] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExý \x02", lpUsedDefaultChar=0x0) returned 17 [0159.609] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.610] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210410) returned 0x0 [0159.610] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.610] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.610] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.610] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0159.610] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0159.610] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0159.610] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0159.610] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0159.610] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.610] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.611] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.611] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0159.611] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210540) returned 0x0 [0159.611] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0159.611] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0159.611] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=1) returned 0x0 [0159.611] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.611] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.611] GdipMeasureString (graphics=0x1bd58670, string="+", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0159.611] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0159.611] GdipDeleteGraphics (graphics=0x1bd58670) returned 0x0 [0159.612] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.612] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.612] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.612] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0159.612] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.612] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0159.612] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57c60) returned 0x0 [0159.612] GdipIsMatrixIdentity (matrix=0x1bd57c60, result=0x14e128) returned 0x0 [0159.612] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0159.612] GdipGetMatrixElements (matrix=0x1bd57c60, matrixOut=0x1d888150) returned 0x0 [0159.613] LocalFree (hMem=0x1d888150) returned 0x0 [0159.613] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8883d0 [0159.613] GdipGetMatrixElements (matrix=0x1bd57c60, matrixOut=0x1d8883d0) returned 0x0 [0159.613] LocalFree (hMem=0x1d8883d0) returned 0x0 [0159.613] GdipDeleteMatrix (matrix=0x1bd57c60) returned 0x0 [0159.614] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0159.614] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0159.614] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0159.614] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.614] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0159.614] GetCurrentObject (hdc=0x220106be, type=0x1) returned 0x1b00017 [0159.614] GetCurrentObject (hdc=0x220106be, type=0x2) returned 0x1900010 [0159.614] GetCurrentObject (hdc=0x220106be, type=0x7) returned 0x60506af [0159.614] GetCurrentObject (hdc=0x220106be, type=0x6) returned 0x18a0048 [0159.614] SaveDC (hdc=0x220106be) returned 1 [0159.614] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4f040554 [0159.614] GetClipRgn (hdc=0x220106be, hrgn=0x4f040554) returned 0 [0159.614] SelectClipRgn (hdc=0x220106be, hrgn=0xffffffff8204064d) returned 2 [0159.614] DeleteObject (ho=0x4f040554) returned 1 [0159.614] DeleteObject (ho=0xffffffff8204064d) returned 1 [0159.614] OffsetViewportOrgEx (in: hdc=0x220106be, x=0, y=0, lppt=0x2210900 | out: lppt=0x2210900) returned 1 [0159.614] GetNearestColor (hdc=0x220106be, color=0xf0f0f0) returned 0xf0f0f0 [0159.614] CreateSolidBrush (color=0xf0f0f0) returned 0x2a1006b3 [0159.614] FillRect (hDC=0x220106be, lprc=0x14e1c8, hbr=0x2a1006b3) returned 1 [0159.614] DeleteObject (ho=0x2a1006b3) returned 1 [0159.614] RestoreDC (hdc=0x220106be, nSavedDC=-1) returned 1 [0159.615] GdipReleaseDC (graphics=0x1bd51520, hdc=0x220106be) returned 0x0 [0159.615] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.615] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0159.615] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.615] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2210a00) returned 0x0 [0159.615] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.615] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.615] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.615] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0159.615] GdipDrawString (graphics=0x1bd51520, string="+", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0159.615] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0159.615] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.616] GetFocus () returned 0x101f8 [0159.616] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteExû \x02", lpUsedDefaultChar=0x0) returned 17 [0159.616] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.616] GdipCreateRegion (region=0x14e030) returned 0x0 [0159.616] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.616] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0159.616] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd579a0) returned 0x0 [0159.616] GdipIsMatrixIdentity (matrix=0x1bd579a0, result=0x14e098) returned 0x0 [0159.616] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0159.616] GdipGetMatrixElements (matrix=0x1bd579a0, matrixOut=0x1d888150) returned 0x0 [0159.617] LocalFree (hMem=0x1d888150) returned 0x0 [0159.617] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0159.617] GdipGetMatrixElements (matrix=0x1bd579a0, matrixOut=0x1d888150) returned 0x0 [0159.618] LocalFree (hMem=0x1d888150) returned 0x0 [0159.618] GdipDeleteMatrix (matrix=0x1bd579a0) returned 0x0 [0159.618] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0159.618] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0159.618] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0159.618] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.618] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0159.618] GetCurrentObject (hdc=0x220106be, type=0x1) returned 0x1b00017 [0159.618] GetCurrentObject (hdc=0x220106be, type=0x2) returned 0x1900010 [0159.618] GetCurrentObject (hdc=0x220106be, type=0x7) returned 0x60506af [0159.618] GetCurrentObject (hdc=0x220106be, type=0x6) returned 0x18a0048 [0159.618] SaveDC (hdc=0x220106be) returned 1 [0159.618] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8304064d [0159.618] GetClipRgn (hdc=0x220106be, hrgn=0xffffffff8304064d) returned 0 [0159.618] SelectClipRgn (hdc=0x220106be, hrgn=0x50040554) returned 2 [0159.618] DeleteObject (ho=0xffffffff8304064d) returned 1 [0159.618] DeleteObject (ho=0x50040554) returned 1 [0159.618] OffsetViewportOrgEx (in: hdc=0x220106be, x=0, y=0, lppt=0x2210de8 | out: lppt=0x2210de8) returned 1 [0159.618] GetROP2 (hdc=0x220106be) returned 13 [0159.618] GetBkMode (hdc=0x220106be) returned 2 [0159.618] SetBkMode (hdc=0x220106be, mode=1) returned 2 [0159.619] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x113006c0 [0159.619] SelectObject (hdc=0x220106be, h=0x113006c0) returned 0x1b00017 [0159.619] MoveToEx (in: hdc=0x220106be, x=25, y=0, lppt=0x2210e50 | out: lppt=0x2210e50) returned 1 [0159.619] LineTo (hdc=0x220106be, x=0, y=0) returned 1 [0159.619] SetBkMode (hdc=0x220106be, mode=2) returned 1 [0159.619] MoveToEx (in: hdc=0x220106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.619] GetROP2 (hdc=0x220106be) returned 13 [0159.619] GetBkMode (hdc=0x220106be) returned 2 [0159.619] SetBkMode (hdc=0x220106be, mode=1) returned 2 [0159.619] SelectObject (hdc=0x220106be, h=0x113006c0) returned 0x113006c0 [0159.619] MoveToEx (in: hdc=0x220106be, x=0, y=0, lppt=0x2210e68 | out: lppt=0x2210e68) returned 1 [0159.619] LineTo (hdc=0x220106be, x=0, y=22) returned 1 [0159.619] SetBkMode (hdc=0x220106be, mode=2) returned 1 [0159.619] MoveToEx (in: hdc=0x220106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.619] SelectObject (hdc=0x220106be, h=0x1b00017) returned 0x113006c0 [0159.619] DeleteObject (ho=0x113006c0) returned 1 [0159.619] GetROP2 (hdc=0x220106be) returned 13 [0159.619] GetBkMode (hdc=0x220106be) returned 2 [0159.619] SetBkMode (hdc=0x220106be, mode=1) returned 2 [0159.619] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x2f3006bd [0159.619] SelectObject (hdc=0x220106be, h=0x2f3006bd) returned 0x1b00017 [0159.619] MoveToEx (in: hdc=0x220106be, x=0, y=22, lppt=0x2210ed0 | out: lppt=0x2210ed0) returned 1 [0159.619] LineTo (hdc=0x220106be, x=25, y=22) returned 1 [0159.620] SetBkMode (hdc=0x220106be, mode=2) returned 1 [0159.620] MoveToEx (in: hdc=0x220106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.620] GetROP2 (hdc=0x220106be) returned 13 [0159.620] GetBkMode (hdc=0x220106be) returned 2 [0159.620] SetBkMode (hdc=0x220106be, mode=1) returned 2 [0159.620] SelectObject (hdc=0x220106be, h=0x2f3006bd) returned 0x2f3006bd [0159.620] MoveToEx (in: hdc=0x220106be, x=25, y=22, lppt=0x2210ee8 | out: lppt=0x2210ee8) returned 1 [0159.620] LineTo (hdc=0x220106be, x=25, y=-1) returned 1 [0159.620] SetBkMode (hdc=0x220106be, mode=2) returned 1 [0159.621] MoveToEx (in: hdc=0x220106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.621] SelectObject (hdc=0x220106be, h=0x1b00017) returned 0x2f3006bd [0159.621] DeleteObject (ho=0x2f3006bd) returned 1 [0159.621] GetROP2 (hdc=0x220106be) returned 13 [0159.621] GetBkMode (hdc=0x220106be) returned 2 [0159.621] SetBkMode (hdc=0x220106be, mode=1) returned 2 [0159.621] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x123006c0 [0159.621] SelectObject (hdc=0x220106be, h=0x123006c0) returned 0x1b00017 [0159.621] MoveToEx (in: hdc=0x220106be, x=24, y=1, lppt=0x2210f50 | out: lppt=0x2210f50) returned 1 [0159.621] LineTo (hdc=0x220106be, x=1, y=1) returned 1 [0159.621] SetBkMode (hdc=0x220106be, mode=2) returned 1 [0159.621] MoveToEx (in: hdc=0x220106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.621] GetROP2 (hdc=0x220106be) returned 13 [0159.621] GetBkMode (hdc=0x220106be) returned 2 [0159.621] SetBkMode (hdc=0x220106be, mode=1) returned 2 [0159.621] SelectObject (hdc=0x220106be, h=0x123006c0) returned 0x123006c0 [0159.621] MoveToEx (in: hdc=0x220106be, x=1, y=1, lppt=0x2210f68 | out: lppt=0x2210f68) returned 1 [0159.621] LineTo (hdc=0x220106be, x=1, y=21) returned 1 [0159.621] SetBkMode (hdc=0x220106be, mode=2) returned 1 [0159.622] MoveToEx (in: hdc=0x220106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.622] SelectObject (hdc=0x220106be, h=0x1b00017) returned 0x123006c0 [0159.622] DeleteObject (ho=0x123006c0) returned 1 [0159.622] GetROP2 (hdc=0x220106be) returned 13 [0159.622] GetBkMode (hdc=0x220106be) returned 2 [0159.622] SetBkMode (hdc=0x220106be, mode=1) returned 2 [0159.622] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x303006bd [0159.622] SelectObject (hdc=0x220106be, h=0x303006bd) returned 0x1b00017 [0159.622] MoveToEx (in: hdc=0x220106be, x=1, y=21, lppt=0x2210fd0 | out: lppt=0x2210fd0) returned 1 [0159.622] LineTo (hdc=0x220106be, x=24, y=21) returned 1 [0159.622] SetBkMode (hdc=0x220106be, mode=2) returned 1 [0159.622] MoveToEx (in: hdc=0x220106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.622] GetROP2 (hdc=0x220106be) returned 13 [0159.622] GetBkMode (hdc=0x220106be) returned 2 [0159.622] SetBkMode (hdc=0x220106be, mode=1) returned 2 [0159.622] SelectObject (hdc=0x220106be, h=0x303006bd) returned 0x303006bd [0159.622] MoveToEx (in: hdc=0x220106be, x=24, y=21, lppt=0x2210fe8 | out: lppt=0x2210fe8) returned 1 [0159.622] LineTo (hdc=0x220106be, x=24, y=0) returned 1 [0159.622] SetBkMode (hdc=0x220106be, mode=2) returned 1 [0159.622] MoveToEx (in: hdc=0x220106be, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.622] SelectObject (hdc=0x220106be, h=0x1b00017) returned 0x303006bd [0159.622] DeleteObject (ho=0x303006bd) returned 1 [0159.622] RestoreDC (hdc=0x220106be, nSavedDC=-1) returned 1 [0159.623] GdipReleaseDC (graphics=0x1bd51520, hdc=0x220106be) returned 0x0 [0159.623] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0159.623] BitBlt (hdc=0xffffffffd001053c, x=0, y=0, cx=26, cy=23, hdcSrc=0x220106be, x1=0, y1=0, rop=0xcc0020) returned 1 [0159.623] GdipReleaseDC (graphics=0x1bd51520, hdc=0x220106be) returned 0x0 [0159.623] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0159.623] SelectObject (hdc=0x220106be, h=0x185000f) returned 0x60506af [0159.623] DeleteDC (hdc=0x220106be) returned 1 [0159.623] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0159.623] EndPaint (hWnd=0x101e4, lpPaint=0x14e548) returned 1 [0159.623] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.623] IsWindowUnicode (hWnd=0x101e6) returned 1 [0159.623] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.623] TranslateMessage (lpMsg=0x14ef10) returned 0 [0159.623] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0159.623] BeginPaint (in: hWnd=0x101e6, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xffffffffd001053c [0159.623] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0159.624] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e6, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0159.624] GetStockObject (i=5) returned 0x1900015 [0159.624] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0159.624] CreateCompatibleDC (hdc=0xffffffffd001053c) returned 0x190106c1 [0159.624] SelectObject (hdc=0x190106c1, h=0x60506af) returned 0x185000f [0159.624] GdipCreateFromHDC (hdc=0x190106c1, graphics=0x14e528) returned 0x0 [0159.624] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0159.624] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0159.624] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0159.624] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57860) returned 0x0 [0159.624] GdipIsMatrixIdentity (matrix=0x1bd57860, result=0x14e5b8) returned 0x0 [0159.624] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888890 [0159.624] GdipGetMatrixElements (matrix=0x1bd57860, matrixOut=0x1d888890) returned 0x0 [0159.625] LocalFree (hMem=0x1d888890) returned 0x0 [0159.633] GdipDeleteMatrix (matrix=0x1bd57860) returned 0x0 [0159.633] GdipCreateRegion (region=0x14e550) returned 0x0 [0159.633] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.633] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0159.633] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0159.633] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd5a0dbd) returned 0x0 [0159.634] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.634] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0159.634] GetCurrentObject (hdc=0x190106c1, type=0x1) returned 0x1b00017 [0159.634] GetCurrentObject (hdc=0x190106c1, type=0x2) returned 0x1900010 [0159.634] GetCurrentObject (hdc=0x190106c1, type=0x7) returned 0x60506af [0159.634] GetCurrentObject (hdc=0x190106c1, type=0x6) returned 0x18a0048 [0159.634] SaveDC (hdc=0x190106c1) returned 1 [0159.634] GetNearestColor (hdc=0x190106c1, color=0xf0f0f0) returned 0xf0f0f0 [0159.634] GetNearestColor (hdc=0x190106c1, color=0xa0a0a0) returned 0xa0a0a0 [0159.634] GetNearestColor (hdc=0x190106c1, color=0x696969) returned 0x696969 [0159.634] GetNearestColor (hdc=0x190106c1, color=0xa0a0a0) returned 0xa0a0a0 [0159.634] GetNearestColor (hdc=0x190106c1, color=0x0) returned 0x0 [0159.634] GetNearestColor (hdc=0x190106c1, color=0xffffff) returned 0xffffff [0159.634] GetNearestColor (hdc=0x190106c1, color=0xe5e5e5) returned 0xe5e5e5 [0159.634] GetNearestColor (hdc=0x190106c1, color=0xd8d8d8) returned 0xd8d8d8 [0159.634] GetNearestColor (hdc=0x190106c1, color=0x0) returned 0x0 [0159.634] RestoreDC (hdc=0x190106c1, nSavedDC=-1) returned 1 [0159.634] GdipReleaseDC (graphics=0x1bd51520, hdc=0x190106c1) returned 0x0 [0159.635] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x12!\x02", lpUsedDefaultChar=0x0) returned 17 [0159.635] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.635] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211908) returned 0x0 [0159.635] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.635] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.635] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.635] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0159.635] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0159.635] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0159.635] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0159.635] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0159.635] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.636] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.636] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.636] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.636] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0159.636] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211a38) returned 0x0 [0159.636] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0159.636] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0159.636] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=1) returned 0x0 [0159.636] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.636] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.636] GdipMeasureString (graphics=0x1bd58670, string="7", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0159.636] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0159.637] GdipDeleteGraphics (graphics=0x1bd58670) returned 0x0 [0159.637] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.637] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.637] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0159.637] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.637] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0159.637] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57b60) returned 0x0 [0159.637] GdipIsMatrixIdentity (matrix=0x1bd57b60, result=0x14e128) returned 0x0 [0159.637] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8882d0 [0159.637] GdipGetMatrixElements (matrix=0x1bd57b60, matrixOut=0x1d8882d0) returned 0x0 [0159.638] LocalFree (hMem=0x1d8882d0) returned 0x0 [0159.638] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0159.638] GdipGetMatrixElements (matrix=0x1bd57b60, matrixOut=0x1d888150) returned 0x0 [0159.639] LocalFree (hMem=0x1d888150) returned 0x0 [0159.639] GdipDeleteMatrix (matrix=0x1bd57b60) returned 0x0 [0159.639] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0159.639] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0159.639] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0159.639] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.639] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0159.639] GetCurrentObject (hdc=0x190106c1, type=0x1) returned 0x1b00017 [0159.639] GetCurrentObject (hdc=0x190106c1, type=0x2) returned 0x1900010 [0159.639] GetCurrentObject (hdc=0x190106c1, type=0x7) returned 0x60506af [0159.639] GetCurrentObject (hdc=0x190106c1, type=0x6) returned 0x18a0048 [0159.639] SaveDC (hdc=0x190106c1) returned 1 [0159.639] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x51040554 [0159.639] GetClipRgn (hdc=0x190106c1, hrgn=0x51040554) returned 0 [0159.639] SelectClipRgn (hdc=0x190106c1, hrgn=0xffffffff8404064d) returned 2 [0159.639] DeleteObject (ho=0x51040554) returned 1 [0159.639] DeleteObject (ho=0xffffffff8404064d) returned 1 [0159.639] OffsetViewportOrgEx (in: hdc=0x190106c1, x=0, y=0, lppt=0x2211df8 | out: lppt=0x2211df8) returned 1 [0159.639] GetNearestColor (hdc=0x190106c1, color=0xf0f0f0) returned 0xf0f0f0 [0159.639] CreateSolidBrush (color=0xf0f0f0) returned 0x2b1006b3 [0159.639] FillRect (hDC=0x190106c1, lprc=0x14e1c8, hbr=0x2b1006b3) returned 1 [0159.640] DeleteObject (ho=0x2b1006b3) returned 1 [0159.640] RestoreDC (hdc=0x190106c1, nSavedDC=-1) returned 1 [0159.640] GdipReleaseDC (graphics=0x1bd51520, hdc=0x190106c1) returned 0x0 [0159.640] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.640] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0159.640] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.640] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2211ef8) returned 0x0 [0159.640] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.640] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.640] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.640] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0159.640] GdipDrawString (graphics=0x1bd51520, string="7", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0159.641] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0159.641] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.641] GetFocus () returned 0x101f8 [0159.641] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x10!\x02", lpUsedDefaultChar=0x0) returned 17 [0159.641] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.641] GdipCreateRegion (region=0x14e030) returned 0x0 [0159.641] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.641] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0159.641] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd576e0) returned 0x0 [0159.642] GdipIsMatrixIdentity (matrix=0x1bd576e0, result=0x14e098) returned 0x0 [0159.642] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888850 [0159.642] GdipGetMatrixElements (matrix=0x1bd576e0, matrixOut=0x1d888850) returned 0x0 [0159.643] LocalFree (hMem=0x1d888850) returned 0x0 [0159.643] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0159.643] GdipGetMatrixElements (matrix=0x1bd576e0, matrixOut=0x1d888150) returned 0x0 [0159.643] LocalFree (hMem=0x1d888150) returned 0x0 [0159.643] GdipDeleteMatrix (matrix=0x1bd576e0) returned 0x0 [0159.643] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0159.643] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0159.643] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0159.643] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.644] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0159.644] GetCurrentObject (hdc=0x190106c1, type=0x1) returned 0x1b00017 [0159.644] GetCurrentObject (hdc=0x190106c1, type=0x2) returned 0x1900010 [0159.644] GetCurrentObject (hdc=0x190106c1, type=0x7) returned 0x60506af [0159.644] GetCurrentObject (hdc=0x190106c1, type=0x6) returned 0x18a0048 [0159.644] SaveDC (hdc=0x190106c1) returned 1 [0159.644] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8504064d [0159.644] GetClipRgn (hdc=0x190106c1, hrgn=0xffffffff8504064d) returned 0 [0159.644] SelectClipRgn (hdc=0x190106c1, hrgn=0x52040554) returned 2 [0159.644] DeleteObject (ho=0xffffffff8504064d) returned 1 [0159.644] DeleteObject (ho=0x52040554) returned 1 [0159.644] OffsetViewportOrgEx (in: hdc=0x190106c1, x=0, y=0, lppt=0x22122e0 | out: lppt=0x22122e0) returned 1 [0159.644] GetROP2 (hdc=0x190106c1) returned 13 [0159.644] GetBkMode (hdc=0x190106c1) returned 2 [0159.644] SetBkMode (hdc=0x190106c1, mode=1) returned 2 [0159.644] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x313006bd [0159.644] SelectObject (hdc=0x190106c1, h=0x313006bd) returned 0x1b00017 [0159.644] MoveToEx (in: hdc=0x190106c1, x=25, y=0, lppt=0x2212348 | out: lppt=0x2212348) returned 1 [0159.644] LineTo (hdc=0x190106c1, x=0, y=0) returned 1 [0159.644] SetBkMode (hdc=0x190106c1, mode=2) returned 1 [0159.644] MoveToEx (in: hdc=0x190106c1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.645] GetROP2 (hdc=0x190106c1) returned 13 [0159.645] GetBkMode (hdc=0x190106c1) returned 2 [0159.645] SetBkMode (hdc=0x190106c1, mode=1) returned 2 [0159.645] SelectObject (hdc=0x190106c1, h=0x313006bd) returned 0x313006bd [0159.645] MoveToEx (in: hdc=0x190106c1, x=0, y=0, lppt=0x2212360 | out: lppt=0x2212360) returned 1 [0159.645] LineTo (hdc=0x190106c1, x=0, y=22) returned 1 [0159.645] SetBkMode (hdc=0x190106c1, mode=2) returned 1 [0159.645] MoveToEx (in: hdc=0x190106c1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.645] SelectObject (hdc=0x190106c1, h=0x1b00017) returned 0x313006bd [0159.645] DeleteObject (ho=0x313006bd) returned 1 [0159.645] GetROP2 (hdc=0x190106c1) returned 13 [0159.645] GetBkMode (hdc=0x190106c1) returned 2 [0159.645] SetBkMode (hdc=0x190106c1, mode=1) returned 2 [0159.645] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x133006c0 [0159.645] SelectObject (hdc=0x190106c1, h=0x133006c0) returned 0x1b00017 [0159.645] MoveToEx (in: hdc=0x190106c1, x=0, y=22, lppt=0x22123c8 | out: lppt=0x22123c8) returned 1 [0159.645] LineTo (hdc=0x190106c1, x=25, y=22) returned 1 [0159.645] SetBkMode (hdc=0x190106c1, mode=2) returned 1 [0159.645] MoveToEx (in: hdc=0x190106c1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.645] GetROP2 (hdc=0x190106c1) returned 13 [0159.645] GetBkMode (hdc=0x190106c1) returned 2 [0159.645] SetBkMode (hdc=0x190106c1, mode=1) returned 2 [0159.645] SelectObject (hdc=0x190106c1, h=0x133006c0) returned 0x133006c0 [0159.645] MoveToEx (in: hdc=0x190106c1, x=25, y=22, lppt=0x22123e0 | out: lppt=0x22123e0) returned 1 [0159.645] LineTo (hdc=0x190106c1, x=25, y=-1) returned 1 [0159.646] SetBkMode (hdc=0x190106c1, mode=2) returned 1 [0159.646] MoveToEx (in: hdc=0x190106c1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.646] SelectObject (hdc=0x190106c1, h=0x1b00017) returned 0x133006c0 [0159.646] DeleteObject (ho=0x133006c0) returned 1 [0159.646] GetROP2 (hdc=0x190106c1) returned 13 [0159.646] GetBkMode (hdc=0x190106c1) returned 2 [0159.646] SetBkMode (hdc=0x190106c1, mode=1) returned 2 [0159.646] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x323006bd [0159.646] SelectObject (hdc=0x190106c1, h=0x323006bd) returned 0x1b00017 [0159.646] MoveToEx (in: hdc=0x190106c1, x=24, y=1, lppt=0x2212448 | out: lppt=0x2212448) returned 1 [0159.646] LineTo (hdc=0x190106c1, x=1, y=1) returned 1 [0159.646] SetBkMode (hdc=0x190106c1, mode=2) returned 1 [0159.646] MoveToEx (in: hdc=0x190106c1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.646] GetROP2 (hdc=0x190106c1) returned 13 [0159.646] GetBkMode (hdc=0x190106c1) returned 2 [0159.646] SetBkMode (hdc=0x190106c1, mode=1) returned 2 [0159.646] SelectObject (hdc=0x190106c1, h=0x323006bd) returned 0x323006bd [0159.646] MoveToEx (in: hdc=0x190106c1, x=1, y=1, lppt=0x2212460 | out: lppt=0x2212460) returned 1 [0159.646] LineTo (hdc=0x190106c1, x=1, y=21) returned 1 [0159.646] SetBkMode (hdc=0x190106c1, mode=2) returned 1 [0159.646] MoveToEx (in: hdc=0x190106c1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.646] SelectObject (hdc=0x190106c1, h=0x1b00017) returned 0x323006bd [0159.646] DeleteObject (ho=0x323006bd) returned 1 [0159.646] GetROP2 (hdc=0x190106c1) returned 13 [0159.646] GetBkMode (hdc=0x190106c1) returned 2 [0159.647] SetBkMode (hdc=0x190106c1, mode=1) returned 2 [0159.647] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x143006c0 [0159.647] SelectObject (hdc=0x190106c1, h=0x143006c0) returned 0x1b00017 [0159.647] MoveToEx (in: hdc=0x190106c1, x=1, y=21, lppt=0x22124c8 | out: lppt=0x22124c8) returned 1 [0159.647] LineTo (hdc=0x190106c1, x=24, y=21) returned 1 [0159.647] SetBkMode (hdc=0x190106c1, mode=2) returned 1 [0159.647] MoveToEx (in: hdc=0x190106c1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.647] GetROP2 (hdc=0x190106c1) returned 13 [0159.647] GetBkMode (hdc=0x190106c1) returned 2 [0159.647] SetBkMode (hdc=0x190106c1, mode=1) returned 2 [0159.647] SelectObject (hdc=0x190106c1, h=0x143006c0) returned 0x143006c0 [0159.647] MoveToEx (in: hdc=0x190106c1, x=24, y=21, lppt=0x22124e0 | out: lppt=0x22124e0) returned 1 [0159.647] LineTo (hdc=0x190106c1, x=24, y=0) returned 1 [0159.647] SetBkMode (hdc=0x190106c1, mode=2) returned 1 [0159.647] MoveToEx (in: hdc=0x190106c1, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.647] SelectObject (hdc=0x190106c1, h=0x1b00017) returned 0x143006c0 [0159.647] DeleteObject (ho=0x143006c0) returned 1 [0159.647] RestoreDC (hdc=0x190106c1, nSavedDC=-1) returned 1 [0159.647] GdipReleaseDC (graphics=0x1bd51520, hdc=0x190106c1) returned 0x0 [0159.647] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0159.647] BitBlt (hdc=0xffffffffd001053c, x=0, y=0, cx=26, cy=23, hdcSrc=0x190106c1, x1=0, y1=0, rop=0xcc0020) returned 1 [0159.647] GdipReleaseDC (graphics=0x1bd51520, hdc=0x190106c1) returned 0x0 [0159.647] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0159.648] SelectObject (hdc=0x190106c1, h=0x185000f) returned 0x60506af [0159.648] DeleteDC (hdc=0x190106c1) returned 1 [0159.648] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0159.648] EndPaint (hWnd=0x101e6, lpPaint=0x14e548) returned 1 [0159.648] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.648] IsWindowUnicode (hWnd=0x101e8) returned 1 [0159.648] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.648] TranslateMessage (lpMsg=0x14ef10) returned 0 [0159.648] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0159.648] BeginPaint (in: hWnd=0x101e8, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xffffffffd001053c [0159.648] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e8, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0159.648] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101e8, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0159.648] GetStockObject (i=5) returned 0x1900015 [0159.649] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0159.649] CreateCompatibleDC (hdc=0xffffffffd001053c) returned 0x230106bf [0159.649] SelectObject (hdc=0x230106bf, h=0x60506af) returned 0x185000f [0159.649] GdipCreateFromHDC (hdc=0x230106bf, graphics=0x14e528) returned 0x0 [0159.649] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0159.649] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0159.649] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0159.649] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd579e0) returned 0x0 [0159.649] GdipIsMatrixIdentity (matrix=0x1bd579e0, result=0x14e5b8) returned 0x0 [0159.649] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888750 [0159.649] GdipGetMatrixElements (matrix=0x1bd579e0, matrixOut=0x1d888750) returned 0x0 [0159.650] LocalFree (hMem=0x1d888750) returned 0x0 [0159.650] GdipDeleteMatrix (matrix=0x1bd579e0) returned 0x0 [0159.650] GdipCreateRegion (region=0x14e550) returned 0x0 [0159.650] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.650] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0159.650] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0159.650] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd570dbd) returned 0x0 [0159.650] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.650] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0159.650] GetCurrentObject (hdc=0x230106bf, type=0x1) returned 0x1b00017 [0159.650] GetCurrentObject (hdc=0x230106bf, type=0x2) returned 0x1900010 [0159.650] GetCurrentObject (hdc=0x230106bf, type=0x7) returned 0x60506af [0159.650] GetCurrentObject (hdc=0x230106bf, type=0x6) returned 0x18a0048 [0159.650] SaveDC (hdc=0x230106bf) returned 1 [0159.650] GetNearestColor (hdc=0x230106bf, color=0xf0f0f0) returned 0xf0f0f0 [0159.650] GetNearestColor (hdc=0x230106bf, color=0xa0a0a0) returned 0xa0a0a0 [0159.650] GetNearestColor (hdc=0x230106bf, color=0x696969) returned 0x696969 [0159.650] GetNearestColor (hdc=0x230106bf, color=0xa0a0a0) returned 0xa0a0a0 [0159.651] GetNearestColor (hdc=0x230106bf, color=0x0) returned 0x0 [0159.651] GetNearestColor (hdc=0x230106bf, color=0xffffff) returned 0xffffff [0159.651] GetNearestColor (hdc=0x230106bf, color=0xe5e5e5) returned 0xe5e5e5 [0159.651] GetNearestColor (hdc=0x230106bf, color=0xd8d8d8) returned 0xd8d8d8 [0159.651] GetNearestColor (hdc=0x230106bf, color=0x0) returned 0x0 [0159.651] RestoreDC (hdc=0x230106bf, nSavedDC=-1) returned 1 [0159.651] GdipReleaseDC (graphics=0x1bd51520, hdc=0x230106bf) returned 0x0 [0159.651] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx'!\x02", lpUsedDefaultChar=0x0) returned 17 [0159.651] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.651] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212e00) returned 0x0 [0159.651] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.651] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.652] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.652] GdipGetStringFormatFlags (format=0x1ab7ee50, flags=0x14e378) returned 0x0 [0159.652] GdipGetStringFormatTrimming (format=0x1ab7ee50, trimming=0x14e378) returned 0x0 [0159.652] GdipGetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=0x14e378) returned 0x0 [0159.652] GdipGetFontSize (font=0x1ab7ee50, size=0x14e378) returned 0x0 [0159.652] GdipGetFontStyle (font=0x1ab7ee50, style=0x14e378) returned 0x0 [0159.652] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.652] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.652] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.652] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.652] GdipCreateFromHDC (hdc=0x190106ae, graphics=0x14dfe8) returned 0x0 [0159.652] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x2212f30) returned 0x0 [0159.652] GdipSetStringFormatFlags (format=0x1ab7eee0, flags=0) returned 0x0 [0159.652] GdipSetStringFormatTrimming (format=0x1ab7eee0, trimming=0x1) returned 0x0 [0159.653] GdipSetStringFormatHotkeyPrefix (format=0x1ab7eee0, hotkeyPrefix=1) returned 0x0 [0159.653] GdipSetStringFormatAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.653] GdipSetStringFormatLineAlign (format=0x1ab7eee0, align=0x1) returned 0x0 [0159.653] GdipMeasureString (graphics=0x1bd58670, string="0", length=1, font=0x1ab7ebe0, layoutRect=0x14dfb8, stringFormat=0x1ab7eee0, boundingBox=0x14dfa8, codepointsFitted=0x14dfa0, linesFilled=0x14df98) returned 0x0 [0159.653] GdipDeleteStringFormat (format=0x1ab7eee0) returned 0x0 [0159.653] GdipDeleteGraphics (graphics=0x1bd58670) returned 0x0 [0159.653] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx", lpUsedDefaultChar=0x0) returned 17 [0159.653] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.653] GdipCreateRegion (region=0x14e0c0) returned 0x0 [0159.653] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.653] GdipCreateMatrix (matrix=0x14e0c0) returned 0x0 [0159.653] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57a60) returned 0x0 [0159.653] GdipIsMatrixIdentity (matrix=0x1bd57a60, result=0x14e128) returned 0x0 [0159.653] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8882d0 [0159.653] GdipGetMatrixElements (matrix=0x1bd57a60, matrixOut=0x1d8882d0) returned 0x0 [0159.654] LocalFree (hMem=0x1d8882d0) returned 0x0 [0159.654] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d8884d0 [0159.654] GdipGetMatrixElements (matrix=0x1bd57a60, matrixOut=0x1d8884d0) returned 0x0 [0159.655] LocalFree (hMem=0x1d8884d0) returned 0x0 [0159.655] GdipDeleteMatrix (matrix=0x1bd57a60) returned 0x0 [0159.655] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e190) returned 0x0 [0159.655] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e150) returned 0x0 [0159.655] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e150) returned 0x0 [0159.655] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.655] GdipGetDC (graphics=0x1bd51520, hdc=0x14e198) returned 0x0 [0159.655] GetCurrentObject (hdc=0x230106bf, type=0x1) returned 0x1b00017 [0159.655] GetCurrentObject (hdc=0x230106bf, type=0x2) returned 0x1900010 [0159.655] GetCurrentObject (hdc=0x230106bf, type=0x7) returned 0x60506af [0159.655] GetCurrentObject (hdc=0x230106bf, type=0x6) returned 0x18a0048 [0159.655] SaveDC (hdc=0x230106bf) returned 1 [0159.655] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x53040554 [0159.655] GetClipRgn (hdc=0x230106bf, hrgn=0x53040554) returned 0 [0159.655] SelectClipRgn (hdc=0x230106bf, hrgn=0xffffffff8604064d) returned 2 [0159.655] DeleteObject (ho=0x53040554) returned 1 [0159.655] DeleteObject (ho=0xffffffff8604064d) returned 1 [0159.655] OffsetViewportOrgEx (in: hdc=0x230106bf, x=0, y=0, lppt=0x22132f0 | out: lppt=0x22132f0) returned 1 [0159.655] GetNearestColor (hdc=0x230106bf, color=0xf0f0f0) returned 0xf0f0f0 [0159.655] CreateSolidBrush (color=0xf0f0f0) returned 0x2c1006b3 [0159.655] FillRect (hDC=0x230106bf, lprc=0x14e1c8, hbr=0x2c1006b3) returned 1 [0159.655] DeleteObject (ho=0x2c1006b3) returned 1 [0159.655] RestoreDC (hdc=0x230106bf, nSavedDC=-1) returned 1 [0159.656] GdipReleaseDC (graphics=0x1bd51520, hdc=0x230106bf) returned 0x0 [0159.656] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx\x98\x1a\x02", lpUsedDefaultChar=0x0) returned 17 [0159.656] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.656] GdipCreateStringFormat (formatAttributes=0, language=0x0, format=0x22133f0) returned 0x0 [0159.656] GdipSetStringFormatAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.656] GdipSetStringFormatLineAlign (format=0x1ab7ee50, align=0x1) returned 0x0 [0159.656] GdipSetStringFormatHotkeyPrefix (format=0x1ab7ee50, hotkeyPrefix=1) returned 0x0 [0159.656] GdipCreateSolidFill (color=0xffffffffff000000, brush=0x14e350) returned 0x0 [0159.656] GdipDrawString (graphics=0x1bd51520, string="0", length=1, font=0x1ab7ebe0, layoutRect=0x14e338, stringFormat=0x1ab7ee50, brush=0x1bd567f0) returned 0x0 [0159.661] GdipDeleteBrush (brush=0x1bd567f0) returned 0x0 [0159.661] GdipDeleteStringFormat (format=0x1ab7ee50) returned 0x0 [0159.661] GetFocus () returned 0x101f8 [0159.662] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx%!\x02", lpUsedDefaultChar=0x0) returned 17 [0159.662] GetProcAddress (hModule=0x7ffa55a30000, lpProcName="ImageList_WriteEx") returned 0x0 [0159.662] GdipCreateRegion (region=0x14e030) returned 0x0 [0159.662] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.662] GdipCreateMatrix (matrix=0x14e030) returned 0x0 [0159.662] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd57ae0) returned 0x0 [0159.662] GdipIsMatrixIdentity (matrix=0x1bd57ae0, result=0x14e098) returned 0x0 [0159.662] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888890 [0159.662] GdipGetMatrixElements (matrix=0x1bd57ae0, matrixOut=0x1d888890) returned 0x0 [0159.663] LocalFree (hMem=0x1d888890) returned 0x0 [0159.663] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888150 [0159.663] GdipGetMatrixElements (matrix=0x1bd57ae0, matrixOut=0x1d888150) returned 0x0 [0159.663] LocalFree (hMem=0x1d888150) returned 0x0 [0159.663] GdipDeleteMatrix (matrix=0x1bd57ae0) returned 0x0 [0159.664] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e100) returned 0x0 [0159.664] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e0c0) returned 0x0 [0159.664] GdipGetRegionHRgn (region=0x1ab7ee50, graphics=0x1bd51520, hRgn=0x14e0c0) returned 0x0 [0159.664] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.664] GdipGetDC (graphics=0x1bd51520, hdc=0x14e108) returned 0x0 [0159.664] GetCurrentObject (hdc=0x230106bf, type=0x1) returned 0x1b00017 [0159.664] GetCurrentObject (hdc=0x230106bf, type=0x2) returned 0x1900010 [0159.664] GetCurrentObject (hdc=0x230106bf, type=0x7) returned 0x60506af [0159.664] GetCurrentObject (hdc=0x230106bf, type=0x6) returned 0x18a0048 [0159.664] SaveDC (hdc=0x230106bf) returned 1 [0159.664] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8704064d [0159.664] GetClipRgn (hdc=0x230106bf, hrgn=0xffffffff8704064d) returned 0 [0159.664] SelectClipRgn (hdc=0x230106bf, hrgn=0x54040554) returned 2 [0159.664] DeleteObject (ho=0xffffffff8704064d) returned 1 [0159.664] DeleteObject (ho=0x54040554) returned 1 [0159.664] OffsetViewportOrgEx (in: hdc=0x230106bf, x=0, y=0, lppt=0x22137d8 | out: lppt=0x22137d8) returned 1 [0159.664] GetROP2 (hdc=0x230106bf) returned 13 [0159.664] GetBkMode (hdc=0x230106bf) returned 2 [0159.664] SetBkMode (hdc=0x230106bf, mode=1) returned 2 [0159.664] CreatePen (iStyle=0, cWidth=1, color=0xffffff) returned 0x153006c0 [0159.664] SelectObject (hdc=0x230106bf, h=0x153006c0) returned 0x1b00017 [0159.665] MoveToEx (in: hdc=0x230106bf, x=25, y=0, lppt=0x2213840 | out: lppt=0x2213840) returned 1 [0159.665] LineTo (hdc=0x230106bf, x=0, y=0) returned 1 [0159.665] SetBkMode (hdc=0x230106bf, mode=2) returned 1 [0159.665] MoveToEx (in: hdc=0x230106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.665] GetROP2 (hdc=0x230106bf) returned 13 [0159.665] GetBkMode (hdc=0x230106bf) returned 2 [0159.665] SetBkMode (hdc=0x230106bf, mode=1) returned 2 [0159.665] SelectObject (hdc=0x230106bf, h=0x153006c0) returned 0x153006c0 [0159.665] MoveToEx (in: hdc=0x230106bf, x=0, y=0, lppt=0x2213858 | out: lppt=0x2213858) returned 1 [0159.665] LineTo (hdc=0x230106bf, x=0, y=22) returned 1 [0159.665] SetBkMode (hdc=0x230106bf, mode=2) returned 1 [0159.665] MoveToEx (in: hdc=0x230106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.665] SelectObject (hdc=0x230106bf, h=0x1b00017) returned 0x153006c0 [0159.665] DeleteObject (ho=0x153006c0) returned 1 [0159.665] GetROP2 (hdc=0x230106bf) returned 13 [0159.665] GetBkMode (hdc=0x230106bf) returned 2 [0159.665] SetBkMode (hdc=0x230106bf, mode=1) returned 2 [0159.665] CreatePen (iStyle=0, cWidth=1, color=0x696969) returned 0x333006bd [0159.665] SelectObject (hdc=0x230106bf, h=0x333006bd) returned 0x1b00017 [0159.665] MoveToEx (in: hdc=0x230106bf, x=0, y=22, lppt=0x22138c0 | out: lppt=0x22138c0) returned 1 [0159.665] LineTo (hdc=0x230106bf, x=25, y=22) returned 1 [0159.665] SetBkMode (hdc=0x230106bf, mode=2) returned 1 [0159.665] MoveToEx (in: hdc=0x230106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.666] GetROP2 (hdc=0x230106bf) returned 13 [0159.666] GetBkMode (hdc=0x230106bf) returned 2 [0159.666] SetBkMode (hdc=0x230106bf, mode=1) returned 2 [0159.666] SelectObject (hdc=0x230106bf, h=0x333006bd) returned 0x333006bd [0159.666] MoveToEx (in: hdc=0x230106bf, x=25, y=22, lppt=0x22138d8 | out: lppt=0x22138d8) returned 1 [0159.666] LineTo (hdc=0x230106bf, x=25, y=-1) returned 1 [0159.666] SetBkMode (hdc=0x230106bf, mode=2) returned 1 [0159.666] MoveToEx (in: hdc=0x230106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.666] SelectObject (hdc=0x230106bf, h=0x1b00017) returned 0x333006bd [0159.666] DeleteObject (ho=0x333006bd) returned 1 [0159.666] GetROP2 (hdc=0x230106bf) returned 13 [0159.666] GetBkMode (hdc=0x230106bf) returned 2 [0159.666] SetBkMode (hdc=0x230106bf, mode=1) returned 2 [0159.666] CreatePen (iStyle=0, cWidth=1, color=0xf0f0f0) returned 0x163006c0 [0159.666] SelectObject (hdc=0x230106bf, h=0x163006c0) returned 0x1b00017 [0159.666] MoveToEx (in: hdc=0x230106bf, x=24, y=1, lppt=0x2213940 | out: lppt=0x2213940) returned 1 [0159.666] LineTo (hdc=0x230106bf, x=1, y=1) returned 1 [0159.666] SetBkMode (hdc=0x230106bf, mode=2) returned 1 [0159.666] MoveToEx (in: hdc=0x230106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.666] GetROP2 (hdc=0x230106bf) returned 13 [0159.666] GetBkMode (hdc=0x230106bf) returned 2 [0159.666] SetBkMode (hdc=0x230106bf, mode=1) returned 2 [0159.666] SelectObject (hdc=0x230106bf, h=0x163006c0) returned 0x163006c0 [0159.666] MoveToEx (in: hdc=0x230106bf, x=1, y=1, lppt=0x2213958 | out: lppt=0x2213958) returned 1 [0159.667] LineTo (hdc=0x230106bf, x=1, y=21) returned 1 [0159.667] SetBkMode (hdc=0x230106bf, mode=2) returned 1 [0159.667] MoveToEx (in: hdc=0x230106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.667] SelectObject (hdc=0x230106bf, h=0x1b00017) returned 0x163006c0 [0159.667] DeleteObject (ho=0x163006c0) returned 1 [0159.667] GetROP2 (hdc=0x230106bf) returned 13 [0159.667] GetBkMode (hdc=0x230106bf) returned 2 [0159.667] SetBkMode (hdc=0x230106bf, mode=1) returned 2 [0159.667] CreatePen (iStyle=0, cWidth=1, color=0xa0a0a0) returned 0x343006bd [0159.667] SelectObject (hdc=0x230106bf, h=0x343006bd) returned 0x1b00017 [0159.667] MoveToEx (in: hdc=0x230106bf, x=1, y=21, lppt=0x22139c0 | out: lppt=0x22139c0) returned 1 [0159.667] LineTo (hdc=0x230106bf, x=24, y=21) returned 1 [0159.667] SetBkMode (hdc=0x230106bf, mode=2) returned 1 [0159.667] MoveToEx (in: hdc=0x230106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.667] GetROP2 (hdc=0x230106bf) returned 13 [0159.667] GetBkMode (hdc=0x230106bf) returned 2 [0159.667] SetBkMode (hdc=0x230106bf, mode=1) returned 2 [0159.667] SelectObject (hdc=0x230106bf, h=0x343006bd) returned 0x343006bd [0159.667] MoveToEx (in: hdc=0x230106bf, x=24, y=21, lppt=0x22139d8 | out: lppt=0x22139d8) returned 1 [0159.667] LineTo (hdc=0x230106bf, x=24, y=0) returned 1 [0159.667] SetBkMode (hdc=0x230106bf, mode=2) returned 1 [0159.667] MoveToEx (in: hdc=0x230106bf, x=0, y=0, lppt=0x0 | out: lppt=0x0) returned 1 [0159.667] SelectObject (hdc=0x230106bf, h=0x1b00017) returned 0x343006bd [0159.668] DeleteObject (ho=0x343006bd) returned 1 [0159.668] RestoreDC (hdc=0x230106bf, nSavedDC=-1) returned 1 [0159.668] GdipReleaseDC (graphics=0x1bd51520, hdc=0x230106bf) returned 0x0 [0159.668] GdipGetDC (graphics=0x1bd51520, hdc=0x14e568) returned 0x0 [0159.668] BitBlt (hdc=0xffffffffd001053c, x=0, y=0, cx=26, cy=23, hdcSrc=0x230106bf, x1=0, y1=0, rop=0xcc0020) returned 1 [0159.668] GdipReleaseDC (graphics=0x1bd51520, hdc=0x230106bf) returned 0x0 [0159.668] SelectPalette (hdc=0xffffffffd001053c, hPal=0x188000b, bForceBkgd=0) returned 0xffffffffe80805c2 [0159.668] SelectObject (hdc=0x230106bf, h=0x185000f) returned 0x60506af [0159.668] DeleteDC (hdc=0x230106bf) returned 1 [0159.668] GdipDeleteGraphics (graphics=0x1bd51520) returned 0x0 [0159.668] EndPaint (hWnd=0x101e8, lpPaint=0x14e548) returned 1 [0159.668] PeekMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.668] IsWindowUnicode (hWnd=0x101ea) returned 1 [0159.668] GetMessageW (in: lpMsg=0x14ef10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14ef10) returned 1 [0159.668] TranslateMessage (lpMsg=0x14ef10) returned 0 [0159.668] DispatchMessageW (lpMsg=0x14ef10) returned 0x0 [0159.669] BeginPaint (in: hWnd=0x101ea, lpPaint=0x14e5a8 | out: lpPaint=0x14e5a8) returned 0xffffffffd001053c [0159.669] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ea, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0159.669] CallWindowProcW (lpPrevWndFunc=0x7ffa5f8e4aa0, hWnd=0x101ea, Msg=0x14, wParam=0xffffffffd001053c, lParam=0x0) returned 0x1 [0159.669] GetStockObject (i=5) returned 0x1900015 [0159.669] SelectPalette (hdc=0xffffffffd001053c, hPal=0xffffffffe80805c2, bForceBkgd=1) returned 0x188000b [0159.669] CreateCompatibleDC (hdc=0xffffffffd001053c) returned 0x2b0106be [0159.669] SelectObject (hdc=0x2b0106be, h=0x60506af) returned 0x185000f [0159.669] GdipCreateFromHDC (hdc=0x2b0106be, graphics=0x14e528) returned 0x0 [0159.669] GdipTranslateWorldTransform (graphics=0x1bd51520, dx=0x7ffa4cdee692, dy=0x7b40933ef5c2, order=0x0) returned 0x0 [0159.669] GdipSetClipRectI (graphics=0x1bd51520, x=0, y=0, width=26, height=23, combineMode=0x0) returned 0x0 [0159.669] GdipCreateMatrix (matrix=0x14e550) returned 0x0 [0159.669] GdipGetWorldTransform (graphics=0x1bd51520, matrix=0x1bd576e0) returned 0x0 [0159.670] GdipIsMatrixIdentity (matrix=0x1bd576e0, result=0x14e5b8) returned 0x0 [0159.670] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x1d888750 [0159.670] GdipGetMatrixElements (matrix=0x1bd576e0, matrixOut=0x1d888750) returned 0x0 [0159.670] LocalFree (hMem=0x1d888750) returned 0x0 [0159.670] GdipDeleteMatrix (matrix=0x1bd576e0) returned 0x0 [0159.670] GdipCreateRegion (region=0x14e550) returned 0x0 [0159.670] GdipGetClip (graphics=0x1bd51520, region=0x1ab7ee50) returned 0x0 [0159.670] GdipIsInfiniteRegion (region=0x1ab7ee50, graphics=0x1bd51520, result=0x14e5b0) returned 0x0 [0159.671] GdipSaveGraphics (graphics=0x1bd51520, state=0x14e650) returned 0x0 [0159.671] GdipRestoreGraphics (graphics=0x1bd51520, state=0xfffffffffd540dbd) returned 0x0 [0159.671] GdipDeleteRegion (region=0x1ab7ee50) returned 0x0 [0159.671] GdipGetDC (graphics=0x1bd51520, hdc=0x14e2c8) returned 0x0 [0159.671] GetCurrentObject (hdc=0x2b0106be, type=0x1) returned 0x1b00017 [0159.671] GetCurrentObject (hdc=0x2b0106be, type=0x2) returned 0x1900010 [0159.671] GetCurrentObject (hdc=0x2b0106be, type=0x7) returned 0x60506af [0159.671] GetCurrentObject (hdc=0x2b0106be, type=0x6) returned 0x18a0048 [0159.671] SaveDC (hdc=0x2b0106be) returned 1 [0159.671] GetNearestColor (hdc=0x2b0106be, color=0xf0f0f0) returned 0xf0f0f0 [0159.671] GetNearestColor (hdc=0x2b0106be, color=0xa0a0a0) returned 0xa0a0a0 [0159.671] GetNearestColor (hdc=0x2b0106be, color=0x696969) returned 0x696969 [0159.671] GetNearestColor (hdc=0x2b0106be, color=0xa0a0a0) returned 0xa0a0a0 [0159.671] GetNearestColor (hdc=0x2b0106be, color=0x0) returned 0x0 [0159.671] GetNearestColor (hdc=0x2b0106be, color=0xffffff) returned 0xffffff [0159.671] GetNearestColor (hdc=0x2b0106be, color=0xe5e5e5) returned 0xe5e5e5 [0159.671] GetNearestColor (hdc=0x2b0106be, color=0xd8d8d8) returned 0xd8d8d8 [0159.671] GetNearestColor (hdc=0x2b0106be, color=0x0) returned 0x0 [0159.671] RestoreDC (hdc=0x2b0106be, nSavedDC=-1) returned 1 [0159.672] GdipReleaseDC (graphics=0x1bd51520, hdc=0x2b0106be) returned 0x0 [0159.672] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ffa55a30000 [0159.672] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ImageList_WriteEx", cchWideChar=17, lpMultiByteStr=0x14e310, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ImageList_WriteEx::Write () returned 0x0 [0235.646] GenericStreamBase::Write () returned 0x0 [0235.647] CoCreateGuid (in: pguid=0x7489f4c0 | out: pguid=0x7489f4c0*(Data1=0x238f004a, Data2=0xfa1, Data3=0x47a2, Data4=([0]=0xbc, [1]=0x50, [2]=0xe4, [3]=0xbd, [4]=0x3, [5]=0x45, [6]=0x4b, [7]=0x52))) returned 0x0 [0235.647] GenericStreamBase::Write () returned 0x0 [0235.652] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x0 [0235.652] Microsoft::WRL::Details::RuntimeClass >,Microsoft::WRL::RuntimeClassFlags<1>,1,1,0>::AddRef () returned 0x3 [0235.652] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x80004002 [0235.652] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x0 [0235.652] Release () returned 0x3 [0235.652] CoGetContextToken (in: pToken=0x19de80 | out: pToken=0x19de80) returned 0x0 [0235.652] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x80004002 [0235.654] WindowsCreateString () returned 0x0 [0235.654] Microsoft::WRL::Details::RuntimeClass >,Microsoft::WRL::RuntimeClassFlags<1>,1,1,0>::AddRef () returned 0x4 [0235.654] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x3 [0235.654] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::get_Enabled () returned 0x0 [0235.656] EtwEventRegister (in: ProviderId=0x251035c, EnableCallback=0x2193a56, CallbackContext=0x0, RegHandle=0x2510338 | out: RegHandle=0x2510338) returned 0x0 [0235.656] EtwEventSetInformation (RegHandle=0x4bc1320, InformationClass=0x83, EventInformation=0x2, InformationLength=0x2510308) returned 0x0 [0235.947] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x780 [0235.947] setsockopt (s=0x780, level=65535, optname=4098, optval="", optlen=4) returned 0 [0235.947] setsockopt (s=0x780, level=65535, optname=4097, optval="", optlen=4) returned 0 [0235.950] WSAConnect (in: s=0x780, name=0x252e188*(sa_family=2, sin_port=0x1e1b, sin_addr="127.0.0.1"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1 [0237.280] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x19f184, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0242.300] closesocket (s=0x780) returned 0 [0242.300] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x780 [0242.301] setsockopt (s=0x780, level=65535, optname=4098, optval="", optlen=4) returned 0 [0242.301] setsockopt (s=0x780, level=65535, optname=4097, optval="", optlen=4) returned 0 [0242.301] WSAConnect (in: s=0x780, name=0x252ee28*(sa_family=2, sin_port=0x2268, sin_addr="127.0.0.1"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1 [0243.501] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x19f184, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0248.517] closesocket (s=0x780) returned 0 [0248.517] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x780 [0248.517] setsockopt (s=0x780, level=65535, optname=4098, optval="", optlen=4) returned 0 [0248.518] setsockopt (s=0x780, level=65535, optname=4097, optval="", optlen=4) returned 0 [0248.518] WSAConnect (in: s=0x780, name=0x252fab4*(sa_family=2, sin_port=0x1e1b, sin_addr="127.0.0.1"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1 [0249.689] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x19f184, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0254.707] closesocket (s=0x780) returned 0 [0254.708] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x780 [0254.710] setsockopt (s=0x780, level=65535, optname=4098, optval="", optlen=4) returned 0 [0254.710] setsockopt (s=0x780, level=65535, optname=4097, optval="", optlen=4) returned 0 [0254.711] WSAConnect (in: s=0x780, name=0x2530740*(sa_family=2, sin_port=0x19ce, sin_addr="127.0.0.1"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1 [0256.002] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x19f184, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0261.017] closesocket (s=0x780) returned 0 [0261.017] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x780 [0261.018] setsockopt (s=0x780, level=65535, optname=4098, optval="", optlen=4) returned 0 [0261.018] setsockopt (s=0x780, level=65535, optname=4097, optval="", optlen=4) returned 0 [0261.018] WSAConnect (in: s=0x780, name=0x25313cc*(sa_family=2, sin_port=0x2268, sin_addr="127.0.0.1"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1 [0262.189] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x19f184, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0267.205] closesocket (s=0x780) returned 0 [0267.205] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x780 [0267.206] setsockopt (s=0x780, level=65535, optname=4098, optval="", optlen=4) returned 0 [0267.206] setsockopt (s=0x780, level=65535, optname=4097, optval="", optlen=4) returned 0 [0267.207] WSAConnect (in: s=0x780, name=0x2532058*(sa_family=2, sin_port=0x1e1b, sin_addr="127.0.0.1"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1 [0268.502] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x19f184, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0273.508] closesocket (s=0x780) returned 0 [0273.509] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x780 [0273.511] setsockopt (s=0x780, level=65535, optname=4098, optval="", optlen=4) returned 0 [0273.511] setsockopt (s=0x780, level=65535, optname=4097, optval="", optlen=4) returned 0 [0273.512] WSAConnect (in: s=0x780, name=0x2532ce4*(sa_family=2, sin_port=0x19ce, sin_addr="127.0.0.1"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1 [0274.534] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x19f184, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0279.551] closesocket (s=0x780) returned 0 [0279.552] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x780 [0279.553] setsockopt (s=0x780, level=65535, optname=4098, optval="", optlen=4) returned 0 [0279.553] setsockopt (s=0x780, level=65535, optname=4097, optval="", optlen=4) returned 0 [0279.553] WSAConnect (in: s=0x780, name=0x2533970*(sa_family=2, sin_port=0x19ce, sin_addr="127.0.0.1"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1 [0280.580] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x19f184, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0285.600] closesocket (s=0x780) returned 0 [0285.601] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x780 [0285.602] setsockopt (s=0x780, level=65535, optname=4098, optval="", optlen=4) returned 0 [0285.602] setsockopt (s=0x780, level=65535, optname=4097, optval="", optlen=4) returned 0 [0285.603] WSAConnect (in: s=0x780, name=0x25345fc*(sa_family=2, sin_port=0x1e1b, sin_addr="127.0.0.1"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned -1 [0286.627] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x19f184, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d Thread: id = 157 os_tid = 0x318 Thread: id = 159 os_tid = 0x2f0 Thread: id = 161 os_tid = 0x2fc [0161.185] CoGetContextToken (in: pToken=0x433fc74 | out: pToken=0x433fc74) returned 0x0 [0161.185] CObjectContext::QueryInterface () returned 0x0 [0161.186] CObjectContext::GetCurrentThreadType () returned 0x0 [0161.186] Release () returned 0x0 [0161.186] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0161.186] RoInitialize () returned 0x1 [0161.186] RoUninitialize () returned 0x0 [0169.447] CloseHandle (hObject=0x278) returned 1 [0169.447] CloseHandle (hObject=0x294) returned 1 [0169.447] CloseHandle (hObject=0x274) returned 1 [0169.447] CloseHandle (hObject=0x284) returned 1 [0169.448] CloseHandle (hObject=0x270) returned 1 [0169.448] CloseHandle (hObject=0x26c) returned 1 [0169.448] CloseHandle (hObject=0x280) returned 1 [0169.448] CloseHandle (hObject=0x290) returned 1 [0169.448] CloseHandle (hObject=0x27c) returned 1 [0169.448] CloseHandle (hObject=0x268) returned 1 [0179.284] CoGetContextToken (in: pToken=0x433fc60 | out: pToken=0x433fc60) returned 0x0 [0179.284] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0179.284] WbemLocator:IUnknown:Release (This=0x80a750) returned 0x1 [0179.284] WbemLocator:IUnknown:Release (This=0x80a750) returned 0x0 [0179.284] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0179.284] IUnknown:Release (This=0x823b20) returned 0x2 [0179.284] IUnknown:Release (This=0x823b20) returned 0x1 [0179.284] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0179.284] WbemLocator:IUnknown:Release (This=0x80a770) returned 0x1 [0179.284] WbemLocator:IUnknown:Release (This=0x80a770) returned 0x0 [0179.284] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0179.284] IUnknown:Release (This=0x823980) returned 0x2 [0179.284] IUnknown:Release (This=0x823980) returned 0x1 [0179.284] IUnknown:Release (This=0x823980) returned 0x0 [0179.284] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0179.284] WbemLocator:IUnknown:Release (This=0x81a208) returned 0x1 [0179.284] IUnknown:Release (This=0x7b75f8) returned 0x0 [0179.286] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0179.286] WbemLocator:IUnknown:Release (This=0x81d600) returned 0x1 [0179.286] IUnknown:Release (This=0x7b76c0) returned 0x0 [0179.288] IUnknown:Release (This=0x823b20) returned 0x0 [0179.288] CryptDestroyKey (hKey=0x7aa2f8) returned 1 [0179.288] CryptReleaseContext (hProv=0x7a7040, dwFlags=0x0) returned 1 [0179.288] CryptReleaseContext (hProv=0x7a7040, dwFlags=0x0) returned 1 [0179.288] CryptDestroyKey (hKey=0x7aa678) returned 1 [0179.288] CryptReleaseContext (hProv=0x7a6c88, dwFlags=0x0) returned 1 [0179.288] CryptReleaseContext (hProv=0x7a6c88, dwFlags=0x0) returned 1 [0179.288] CryptDestroyKey (hKey=0x7a9df8) returned 1 [0179.288] CryptReleaseContext (hProv=0x7a71d8, dwFlags=0x0) returned 1 [0179.288] CryptReleaseContext (hProv=0x7a71d8, dwFlags=0x0) returned 1 [0179.289] CryptDestroyKey (hKey=0x7a9ff8) returned 1 [0179.289] CryptReleaseContext (hProv=0x7a6b78, dwFlags=0x0) returned 1 [0179.289] CryptReleaseContext (hProv=0x7a6b78, dwFlags=0x0) returned 1 [0179.289] CryptDestroyKey (hKey=0x7aa0b8) returned 1 [0179.289] CryptReleaseContext (hProv=0x7a6f30, dwFlags=0x0) returned 1 [0179.289] CryptReleaseContext (hProv=0x7a6f30, dwFlags=0x0) returned 1 [0179.289] CryptDestroyKey (hKey=0x7aa6f8) returned 1 [0179.289] CryptReleaseContext (hProv=0x7a66b0, dwFlags=0x0) returned 1 [0179.289] CryptReleaseContext (hProv=0x7a66b0, dwFlags=0x0) returned 1 [0179.289] CryptDestroyKey (hKey=0x7a9f78) returned 1 [0179.289] CryptReleaseContext (hProv=0x7a6ea8, dwFlags=0x0) returned 1 [0179.289] CryptReleaseContext (hProv=0x7a6ea8, dwFlags=0x0) returned 1 [0179.290] CryptDestroyKey (hKey=0x7aaa38) returned 1 [0179.290] CryptReleaseContext (hProv=0x7a6d10, dwFlags=0x0) returned 1 [0179.290] CryptReleaseContext (hProv=0x7a6d10, dwFlags=0x0) returned 1 [0179.290] LocalFree (hMem=0x7fe560) returned 0x0 [0179.290] CryptDestroyKey (hKey=0x7aabb8) returned 1 [0179.290] CryptReleaseContext (hProv=0x7a6a68, dwFlags=0x0) returned 1 [0179.290] CryptReleaseContext (hProv=0x7a6a68, dwFlags=0x0) returned 1 [0179.290] CryptDestroyKey (hKey=0x7aac78) returned 1 [0179.290] CryptReleaseContext (hProv=0x7a7260, dwFlags=0x0) returned 1 [0179.291] CryptReleaseContext (hProv=0x7a7260, dwFlags=0x0) returned 1 [0179.291] CryptDestroyKey (hKey=0x7aacb8) returned 1 [0179.291] CryptReleaseContext (hProv=0x7a7508, dwFlags=0x0) returned 1 [0179.291] CryptReleaseContext (hProv=0x7a7508, dwFlags=0x0) returned 1 [0179.291] CryptDestroyKey (hKey=0x7aab78) returned 1 [0179.291] CryptReleaseContext (hProv=0x7a68d0, dwFlags=0x0) returned 1 [0179.291] CryptReleaseContext (hProv=0x7a68d0, dwFlags=0x0) returned 1 [0179.291] CryptDestroyKey (hKey=0x7aa338) returned 1 [0179.291] CryptReleaseContext (hProv=0x7a6c00, dwFlags=0x0) returned 1 [0179.291] CryptReleaseContext (hProv=0x7a6c00, dwFlags=0x0) returned 1 [0196.786] CoGetContextToken (in: pToken=0x433fc60 | out: pToken=0x433fc60) returned 0x0 [0196.786] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.786] WbemLocator:IUnknown:Release (This=0x829c70) returned 0x1 [0196.786] WbemLocator:IUnknown:Release (This=0x829c70) returned 0x0 [0196.786] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.786] IUnknown:Release (This=0x7bbb18) returned 0x2 [0196.786] IUnknown:Release (This=0x7bbb18) returned 0x1 [0196.786] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.786] WbemLocator:IUnknown:Release (This=0x81b2e8) returned 0x1 [0196.786] WbemLocator:IUnknown:Release (This=0x7ac0e0) returned 0x0 [0196.786] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.786] WbemLocator:IUnknown:Release (This=0x81cc00) returned 0x1 [0196.786] WbemLocator:IUnknown:Release (This=0x824f30) returned 0x0 [0196.787] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.787] WbemLocator:IUnknown:Release (This=0x829ac0) returned 0x1 [0196.787] WbemLocator:IUnknown:Release (This=0x829ac0) returned 0x0 [0196.787] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.787] IUnknown:Release (This=0x7f6248) returned 0x2 [0196.787] IUnknown:Release (This=0x7f6248) returned 0x1 [0196.787] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.787] WbemLocator:IUnknown:Release (This=0x829db0) returned 0x1 [0196.787] WbemLocator:IUnknown:Release (This=0x829db0) returned 0x0 [0196.787] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.787] IUnknown:Release (This=0x842c68) returned 0x2 [0196.787] IUnknown:Release (This=0x842c68) returned 0x1 [0196.787] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.787] IUnknown:Release (This=0x8427a0) returned 0x2 [0196.787] IUnknown:Release (This=0x8427a0) returned 0x1 [0196.787] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.787] IUnknown:Release (This=0x842ad0) returned 0x2 [0196.788] IUnknown:Release (This=0x842ad0) returned 0x1 [0196.788] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.788] IUnknown:Release (This=0x842e00) returned 0x2 [0196.788] IUnknown:Release (This=0x842e00) returned 0x1 [0196.788] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.788] IUnknown:Release (This=0x842f98) returned 0x2 [0196.788] IUnknown:Release (This=0x842f98) returned 0x1 [0196.788] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.788] IUnknown:Release (This=0x842938) returned 0x2 [0196.788] IUnknown:Release (This=0x842938) returned 0x1 [0196.788] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.788] IUnknown:Release (This=0x842470) returned 0x2 [0196.788] IUnknown:Release (This=0x842470) returned 0x1 [0196.788] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.788] IUnknown:Release (This=0x842608) returned 0x2 [0196.788] IUnknown:Release (This=0x842608) returned 0x1 [0196.788] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.788] IUnknown:Release (This=0x841458) returned 0x2 [0196.788] IUnknown:Release (This=0x841458) returned 0x1 [0196.788] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.788] IUnknown:Release (This=0x840600) returned 0x2 [0196.788] IUnknown:Release (This=0x840600) returned 0x1 [0196.788] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.788] IUnknown:Release (This=0x841de8) returned 0x2 [0196.788] IUnknown:Release (This=0x841de8) returned 0x1 [0196.788] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.788] IUnknown:Release (This=0x840f90) returned 0x2 [0196.788] IUnknown:Release (This=0x840f90) returned 0x1 [0196.788] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.788] IUnknown:Release (This=0x8415f0) returned 0x2 [0196.788] IUnknown:Release (This=0x8415f0) returned 0x1 [0196.788] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.789] IUnknown:Release (This=0x841c50) returned 0x2 [0196.789] IUnknown:Release (This=0x841c50) returned 0x1 [0196.789] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.789] IUnknown:Release (This=0x840ac8) returned 0x2 [0196.789] IUnknown:Release (This=0x840ac8) returned 0x1 [0196.789] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.789] IUnknown:Release (This=0x8402d0) returned 0x2 [0196.789] IUnknown:Release (This=0x8402d0) returned 0x1 [0196.789] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.789] IUnknown:Release (This=0x841ab8) returned 0x2 [0196.789] IUnknown:Release (This=0x841ab8) returned 0x1 [0196.789] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.789] IUnknown:Release (This=0x840798) returned 0x2 [0196.789] IUnknown:Release (This=0x840798) returned 0x1 [0196.789] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.789] IUnknown:Release (This=0x841f80) returned 0x2 [0196.789] IUnknown:Release (This=0x841f80) returned 0x1 [0196.789] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.789] IUnknown:Release (This=0x841128) returned 0x2 [0196.789] IUnknown:Release (This=0x841128) returned 0x1 [0196.789] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.789] IUnknown:Release (This=0x841788) returned 0x2 [0196.789] IUnknown:Release (This=0x841788) returned 0x1 [0196.789] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.789] IUnknown:Release (This=0x842118) returned 0x2 [0196.789] IUnknown:Release (This=0x842118) returned 0x1 [0196.789] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.789] IUnknown:Release (This=0x840c60) returned 0x2 [0196.789] IUnknown:Release (This=0x840c60) returned 0x1 [0196.789] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.789] IUnknown:Release (This=0x840468) returned 0x2 [0196.789] IUnknown:Release (This=0x840468) returned 0x1 [0196.790] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.790] IUnknown:Release (This=0x8412c0) returned 0x2 [0196.790] IUnknown:Release (This=0x8412c0) returned 0x1 [0196.790] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.790] IUnknown:Release (This=0x841920) returned 0x2 [0196.790] IUnknown:Release (This=0x841920) returned 0x1 [0196.790] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.790] IUnknown:Release (This=0x840930) returned 0x2 [0196.790] IUnknown:Release (This=0x840930) returned 0x1 [0196.790] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.790] IUnknown:Release (This=0x840df8) returned 0x2 [0196.790] IUnknown:Release (This=0x840df8) returned 0x1 [0196.790] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.790] IUnknown:Release (This=0x4ae3530) returned 0x2 [0196.790] IUnknown:Release (This=0x4ae3530) returned 0x1 [0196.790] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.790] IUnknown:Release (This=0x4ae3d28) returned 0x2 [0196.790] IUnknown:Release (This=0x4ae3d28) returned 0x1 [0196.790] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.790] IUnknown:Release (This=0x4ae23a8) returned 0x2 [0196.790] IUnknown:Release (This=0x4ae23a8) returned 0x1 [0196.790] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.790] IUnknown:Release (This=0x4ae2ed0) returned 0x2 [0196.790] IUnknown:Release (This=0x4ae2ed0) returned 0x1 [0196.790] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.790] IUnknown:Release (This=0x4ae3068) returned 0x2 [0196.790] IUnknown:Release (This=0x4ae3068) returned 0x1 [0196.790] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.790] WbemLocator:IUnknown:Release (This=0x829dd0) returned 0x1 [0196.790] WbemLocator:IUnknown:Release (This=0x829dd0) returned 0x0 [0196.790] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.791] IUnknown:Release (This=0x4ae26d8) returned 0x2 [0196.791] IUnknown:Release (This=0x4ae26d8) returned 0x1 [0196.791] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.791] IUnknown:Release (This=0x4ae2210) returned 0x2 [0196.791] IUnknown:Release (This=0x4ae2210) returned 0x1 [0196.791] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.791] IUnknown:Release (This=0x4ae2d38) returned 0x2 [0196.791] IUnknown:Release (This=0x4ae2d38) returned 0x1 [0196.791] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.791] IUnknown:Release (This=0x4ae3200) returned 0x2 [0196.791] IUnknown:Release (This=0x4ae3200) returned 0x1 [0196.791] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.791] IUnknown:Release (This=0x4ae3398) returned 0x2 [0196.791] IUnknown:Release (This=0x4ae3398) returned 0x1 [0196.791] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.791] IUnknown:Release (This=0x4ae36c8) returned 0x2 [0196.791] IUnknown:Release (This=0x4ae36c8) returned 0x1 [0196.791] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.791] IUnknown:Release (This=0x4ae3860) returned 0x2 [0196.791] IUnknown:Release (This=0x4ae3860) returned 0x1 [0196.791] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.791] IUnknown:Release (This=0x4ae3b90) returned 0x2 [0196.791] IUnknown:Release (This=0x4ae3b90) returned 0x1 [0196.791] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.791] IUnknown:Release (This=0x4ae2870) returned 0x2 [0196.791] IUnknown:Release (This=0x4ae2870) returned 0x1 [0196.791] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.791] IUnknown:Release (This=0x4ae2a08) returned 0x2 [0196.791] IUnknown:Release (This=0x4ae2a08) returned 0x1 [0196.791] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.791] IUnknown:Release (This=0x4ae39f8) returned 0x2 [0196.791] IUnknown:Release (This=0x4ae39f8) returned 0x1 [0196.791] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.792] IUnknown:Release (This=0x4ae3ec0) returned 0x2 [0196.792] IUnknown:Release (This=0x4ae3ec0) returned 0x1 [0196.792] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.792] IUnknown:Release (This=0x4ae2078) returned 0x2 [0196.792] IUnknown:Release (This=0x4ae2078) returned 0x1 [0196.792] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.792] IUnknown:Release (This=0x4ae2ba0) returned 0x2 [0196.792] IUnknown:Release (This=0x4ae2ba0) returned 0x1 [0196.792] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.792] IUnknown:Release (This=0x4ae63b8) returned 0x2 [0196.792] IUnknown:Release (This=0x4ae63b8) returned 0x1 [0196.792] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.792] IUnknown:Release (This=0x4ae66e8) returned 0x2 [0196.792] IUnknown:Release (This=0x4ae66e8) returned 0x1 [0196.792] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.792] IUnknown:Release (This=0x4ae7210) returned 0x2 [0196.792] IUnknown:Release (This=0x4ae7210) returned 0x1 [0196.792] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.792] IUnknown:Release (This=0x4ae7870) returned 0x2 [0196.792] IUnknown:Release (This=0x4ae7870) returned 0x1 [0196.792] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.792] IUnknown:Release (This=0x4ae6a18) returned 0x2 [0196.792] IUnknown:Release (This=0x4ae6a18) returned 0x1 [0196.792] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.792] IUnknown:Release (This=0x4ae7d38) returned 0x2 [0196.792] IUnknown:Release (This=0x4ae7d38) returned 0x1 [0196.792] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.792] IUnknown:Release (This=0x4ae6220) returned 0x2 [0196.792] IUnknown:Release (This=0x4ae6220) returned 0x1 [0196.792] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.792] IUnknown:Release (This=0x4ae6d48) returned 0x2 [0196.793] IUnknown:Release (This=0x4ae6d48) returned 0x1 [0196.793] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.793] IUnknown:Release (This=0x4ae7a08) returned 0x2 [0196.793] IUnknown:Release (This=0x4ae7a08) returned 0x1 [0196.793] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.793] IUnknown:Release (This=0x4ae6088) returned 0x2 [0196.793] IUnknown:Release (This=0x4ae6088) returned 0x1 [0196.793] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.793] IUnknown:Release (This=0x4ae7ba0) returned 0x2 [0196.793] IUnknown:Release (This=0x4ae7ba0) returned 0x1 [0196.793] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.793] IUnknown:Release (This=0x4ae7ed0) returned 0x2 [0196.793] IUnknown:Release (This=0x4ae7ed0) returned 0x1 [0196.793] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.793] IUnknown:Release (This=0x4ae6ee0) returned 0x2 [0196.793] IUnknown:Release (This=0x4ae6ee0) returned 0x1 [0196.793] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.793] IUnknown:Release (This=0x4ae6550) returned 0x2 [0196.793] IUnknown:Release (This=0x4ae6550) returned 0x1 [0196.793] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.793] IUnknown:Release (This=0x4ae6880) returned 0x2 [0196.793] IUnknown:Release (This=0x4ae6880) returned 0x1 [0196.793] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.793] IUnknown:Release (This=0x4ae6bb0) returned 0x2 [0196.793] IUnknown:Release (This=0x4ae6bb0) returned 0x1 [0196.793] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.793] IUnknown:Release (This=0x4ae7078) returned 0x2 [0196.793] IUnknown:Release (This=0x4ae7078) returned 0x1 [0196.793] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.793] IUnknown:Release (This=0x4ae73a8) returned 0x2 [0196.793] IUnknown:Release (This=0x4ae73a8) returned 0x1 [0196.794] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.794] IUnknown:Release (This=0x4ae7540) returned 0x2 [0196.794] IUnknown:Release (This=0x4ae7540) returned 0x1 [0196.794] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.794] WbemLocator:IUnknown:Release (This=0x829b90) returned 0x1 [0196.794] WbemLocator:IUnknown:Release (This=0x829b90) returned 0x0 [0196.794] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.794] IUnknown:Release (This=0x4ae76d8) returned 0x2 [0196.794] IUnknown:Release (This=0x4ae76d8) returned 0x1 [0196.794] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.794] IUnknown:Release (This=0x4ae9ee8) returned 0x2 [0196.794] IUnknown:Release (This=0x4ae9ee8) returned 0x1 [0196.794] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.794] IUnknown:Release (This=0x4aea3b0) returned 0x2 [0196.794] IUnknown:Release (This=0x4aea3b0) returned 0x1 [0196.794] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.794] IUnknown:Release (This=0x4ae9558) returned 0x2 [0196.794] IUnknown:Release (This=0x4ae9558) returned 0x1 [0196.794] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.794] IUnknown:Release (This=0x4ae9d50) returned 0x2 [0196.794] IUnknown:Release (This=0x4ae9d50) returned 0x1 [0196.794] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.794] IUnknown:Release (This=0x4aea6e0) returned 0x2 [0196.794] IUnknown:Release (This=0x4aea6e0) returned 0x1 [0196.794] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.794] IUnknown:Release (This=0x4ae8bc8) returned 0x2 [0196.794] IUnknown:Release (This=0x4ae8bc8) returned 0x1 [0196.794] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.794] IUnknown:Release (This=0x4ae9888) returned 0x2 [0196.794] IUnknown:Release (This=0x4ae9888) returned 0x1 [0196.794] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.794] IUnknown:Release (This=0x4ae9a20) returned 0x2 [0196.795] IUnknown:Release (This=0x4ae9a20) returned 0x1 [0196.795] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.795] IUnknown:Release (This=0x4aea080) returned 0x2 [0196.795] IUnknown:Release (This=0x4aea080) returned 0x1 [0196.795] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.795] IUnknown:Release (This=0x4aea548) returned 0x2 [0196.795] IUnknown:Release (This=0x4aea548) returned 0x1 [0196.795] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.795] IUnknown:Release (This=0x4ae9bb8) returned 0x2 [0196.795] IUnknown:Release (This=0x4ae9bb8) returned 0x1 [0196.795] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.795] IUnknown:Release (This=0x4aea218) returned 0x2 [0196.795] IUnknown:Release (This=0x4aea218) returned 0x1 [0196.795] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.795] IUnknown:Release (This=0x4ae8898) returned 0x2 [0196.795] IUnknown:Release (This=0x4ae8898) returned 0x1 [0196.795] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.795] IUnknown:Release (This=0x4ae8ef8) returned 0x2 [0196.795] IUnknown:Release (This=0x4ae8ef8) returned 0x1 [0196.795] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.795] IUnknown:Release (This=0x4ae8a30) returned 0x2 [0196.795] IUnknown:Release (This=0x4ae8a30) returned 0x1 [0196.795] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.795] IUnknown:Release (This=0x4ae8d60) returned 0x2 [0196.795] IUnknown:Release (This=0x4ae8d60) returned 0x1 [0196.795] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.795] IUnknown:Release (This=0x4ae9090) returned 0x2 [0196.795] IUnknown:Release (This=0x4ae9090) returned 0x1 [0196.795] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.795] IUnknown:Release (This=0x4ae9228) returned 0x2 [0196.795] IUnknown:Release (This=0x4ae9228) returned 0x1 [0196.795] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.796] IUnknown:Release (This=0x4ae93c0) returned 0x2 [0196.796] IUnknown:Release (This=0x4ae93c0) returned 0x1 [0196.796] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.796] IUnknown:Release (This=0x4aedd60) returned 0x2 [0196.796] IUnknown:Release (This=0x4aedd60) returned 0x1 [0196.796] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.796] IUnknown:Release (This=0x4aee228) returned 0x2 [0196.796] IUnknown:Release (This=0x4aee228) returned 0x1 [0196.796] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.796] IUnknown:Release (This=0x4aec8a8) returned 0x2 [0196.796] IUnknown:Release (This=0x4aec8a8) returned 0x1 [0196.796] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.796] IUnknown:Release (This=0x4aeca40) returned 0x2 [0196.796] IUnknown:Release (This=0x4aeca40) returned 0x1 [0196.796] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.796] IUnknown:Release (This=0x4aed700) returned 0x2 [0196.796] IUnknown:Release (This=0x4aed700) returned 0x1 [0196.796] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.796] IUnknown:Release (This=0x4aed3d0) returned 0x2 [0196.796] IUnknown:Release (This=0x4aed3d0) returned 0x1 [0196.796] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.796] IUnknown:Release (This=0x4aecf08) returned 0x2 [0196.796] IUnknown:Release (This=0x4aecf08) returned 0x1 [0196.796] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.796] IUnknown:Release (This=0x4aedbc8) returned 0x2 [0196.796] IUnknown:Release (This=0x4aedbc8) returned 0x1 [0196.796] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.796] IUnknown:Release (This=0x4aed568) returned 0x2 [0196.796] IUnknown:Release (This=0x4aed568) returned 0x1 [0196.796] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.796] IUnknown:Release (This=0x4aecbd8) returned 0x2 [0196.796] IUnknown:Release (This=0x4aecbd8) returned 0x1 [0196.796] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.797] IUnknown:Release (This=0x4aed0a0) returned 0x2 [0196.797] IUnknown:Release (This=0x4aed0a0) returned 0x1 [0196.797] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.797] IUnknown:Release (This=0x4aedef8) returned 0x2 [0196.797] IUnknown:Release (This=0x4aedef8) returned 0x1 [0196.797] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.797] IUnknown:Release (This=0x4aee090) returned 0x2 [0196.797] IUnknown:Release (This=0x4aee090) returned 0x1 [0196.797] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.797] WbemLocator:IUnknown:Release (This=0x7ab348) returned 0x1 [0196.798] WbemLocator:IUnknown:Release (This=0x7ab348) returned 0x0 [0196.798] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.798] IUnknown:Release (This=0x4aecd70) returned 0x2 [0196.798] IUnknown:Release (This=0x4aecd70) returned 0x1 [0196.798] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.798] IUnknown:Release (This=0x4aee3c0) returned 0x2 [0196.798] IUnknown:Release (This=0x4aee3c0) returned 0x1 [0196.798] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.799] IUnknown:Release (This=0x4aee558) returned 0x2 [0196.799] IUnknown:Release (This=0x4aee558) returned 0x1 [0196.799] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.799] IUnknown:Release (This=0x4aed898) returned 0x2 [0196.799] IUnknown:Release (This=0x4aed898) returned 0x1 [0196.799] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.799] IUnknown:Release (This=0x4aee6f0) returned 0x2 [0196.799] IUnknown:Release (This=0x4aee6f0) returned 0x1 [0196.799] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.799] IUnknown:Release (This=0x4aeda30) returned 0x2 [0196.799] IUnknown:Release (This=0x4aeda30) returned 0x1 [0196.799] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.799] IUnknown:Release (This=0x82c650) returned 0x2 [0196.799] IUnknown:Release (This=0x82c650) returned 0x1 [0196.799] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.799] IUnknown:Release (This=0x82c320) returned 0x2 [0196.799] IUnknown:Release (This=0x82c320) returned 0x1 [0196.799] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.799] IUnknown:Release (This=0x82d7d8) returned 0x2 [0196.799] IUnknown:Release (This=0x82d7d8) returned 0x1 [0196.799] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.799] IUnknown:Release (This=0x82dca0) returned 0x2 [0196.799] IUnknown:Release (This=0x82dca0) returned 0x1 [0196.800] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.800] IUnknown:Release (This=0x82be58) returned 0x2 [0196.800] IUnknown:Release (This=0x82be58) returned 0x1 [0196.800] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.800] IUnknown:Release (This=0x82ce48) returned 0x2 [0196.800] IUnknown:Release (This=0x82ce48) returned 0x1 [0196.800] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.800] IUnknown:Release (This=0x82db08) returned 0x2 [0196.800] IUnknown:Release (This=0x82db08) returned 0x1 [0196.800] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.800] IUnknown:Release (This=0x82c4b8) returned 0x2 [0196.800] IUnknown:Release (This=0x82c4b8) returned 0x1 [0196.800] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.800] IUnknown:Release (This=0x82bff0) returned 0x2 [0196.800] IUnknown:Release (This=0x82bff0) returned 0x1 [0196.800] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.800] IUnknown:Release (This=0x82c7e8) returned 0x2 [0196.800] IUnknown:Release (This=0x82c7e8) returned 0x1 [0196.800] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.800] IUnknown:Release (This=0x82c188) returned 0x2 [0196.800] IUnknown:Release (This=0x82c188) returned 0x1 [0196.800] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.800] IUnknown:Release (This=0x82c980) returned 0x2 [0196.800] IUnknown:Release (This=0x82c980) returned 0x1 [0196.800] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.800] IUnknown:Release (This=0x82cb18) returned 0x2 [0196.800] IUnknown:Release (This=0x82cb18) returned 0x1 [0196.800] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.800] IUnknown:Release (This=0x82ccb0) returned 0x2 [0196.800] IUnknown:Release (This=0x82ccb0) returned 0x1 [0196.800] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.800] IUnknown:Release (This=0x82cfe0) returned 0x2 [0196.800] IUnknown:Release (This=0x82cfe0) returned 0x1 [0196.801] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.801] IUnknown:Release (This=0x82d4a8) returned 0x2 [0196.801] IUnknown:Release (This=0x82d4a8) returned 0x1 [0196.801] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.801] IUnknown:Release (This=0x82d178) returned 0x2 [0196.801] IUnknown:Release (This=0x82d178) returned 0x1 [0196.801] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.801] IUnknown:Release (This=0x82d310) returned 0x2 [0196.801] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.801] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.801] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.801] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.801] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.801] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.801] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.801] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.801] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.801] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.801] WbemLocator:IUnknown:Release (This=0x7ab438) returned 0x1 [0196.801] WbemLocator:IUnknown:Release (This=0x7ab438) returned 0x0 [0196.801] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.802] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.802] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.802] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.802] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.802] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.802] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.802] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.802] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.802] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.802] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.802] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.802] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.802] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.802] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.802] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.802] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.802] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.802] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.803] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.803] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.803] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.803] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.803] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.803] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.803] WbemLocator:IUnknown:Release (This=0x7ab3d8) returned 0x1 [0196.803] WbemLocator:IUnknown:Release (This=0x7ab3d8) returned 0x0 [0196.803] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.803] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.803] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.803] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.803] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.803] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.803] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.803] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.803] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.803] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.804] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.804] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.804] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.804] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.804] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.804] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.804] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.804] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.804] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.804] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.804] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.804] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.804] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.804] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.804] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.804] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.804] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.805] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.805] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.805] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.805] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.805] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.805] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.805] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.805] WbemLocator:IUnknown:Release (This=0x7ab478) returned 0x1 [0196.805] WbemLocator:IUnknown:Release (This=0x7ab478) returned 0x0 [0196.805] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.805] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.805] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.805] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.805] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.805] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.805] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.805] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.805] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.806] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.806] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.806] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.806] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.806] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.806] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.806] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.806] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.806] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.806] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.806] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.806] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.806] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.806] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.806] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.806] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.806] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.806] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.807] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.807] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.807] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.807] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.807] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.807] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.807] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.807] WbemLocator:IUnknown:Release (This=0x7ab198) returned 0x1 [0196.807] WbemLocator:IUnknown:Release (This=0x7ab198) returned 0x0 [0196.807] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.807] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.807] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.807] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.807] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.807] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.807] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.807] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.807] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.808] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.808] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.808] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0196.808] WbemLocator:IUnknown:Release (This=0x80a7d0) returned 0x1 [0196.808] WbemLocator:IUnknown:Release (This=0x80a7d0) returned 0x0 [0196.808] WbemLocator:IUnknown:Release (This=0x80a7e0) returned 0x1 [0196.808] WbemLocator:IUnknown:Release (This=0x80a7e0) returned 0x0 [0196.808] WbemLocator:IUnknown:Release (This=0x80a740) returned 0x1 [0196.808] WbemLocator:IUnknown:Release (This=0x80a740) returned 0x0 [0196.808] WbemLocator:IUnknown:Release (This=0x7ab308) returned 0x1 [0196.808] WbemLocator:IUnknown:Release (This=0x7ab308) returned 0x0 [0196.808] WbemLocator:IUnknown:Release (This=0x7ab328) returned 0x1 [0196.808] WbemLocator:IUnknown:Release (This=0x7ab328) returned 0x0 [0196.808] WbemLocator:IUnknown:Release (This=0x78a3b0) returned 0x1 [0196.808] WbemLocator:IUnknown:Release (This=0x78a3b0) returned 0x0 [0196.808] WbemDefPath:IUnknown:Release (This=0x80ac00) returned 0x1 [0196.808] WbemDefPath:IUnknown:Release (This=0x80ac00) returned 0x0 [0196.808] WbemDefPath:IUnknown:Release (This=0x809018) returned 0x1 [0196.808] WbemDefPath:IUnknown:Release (This=0x809018) returned 0x0 [0196.808] WbemDefPath:IUnknown:Release (This=0x823ea0) returned 0x1 [0196.808] WbemDefPath:IUnknown:Release (This=0x823ea0) returned 0x0 [0196.808] WbemDefPath:IUnknown:Release (This=0x824290) returned 0x1 [0196.809] WbemDefPath:IUnknown:Release (This=0x824290) returned 0x0 [0196.809] IUnknown:Release (This=0x841128) returned 0x0 [0196.809] IUnknown:Release (This=0x841f80) returned 0x0 [0196.809] IUnknown:Release (This=0x840798) returned 0x0 [0196.809] IUnknown:Release (This=0x841ab8) returned 0x0 [0196.809] IUnknown:Release (This=0x8402d0) returned 0x0 [0196.809] IUnknown:Release (This=0x840ac8) returned 0x0 [0196.809] IUnknown:Release (This=0x841c50) returned 0x0 [0196.810] IUnknown:Release (This=0x8415f0) returned 0x0 [0196.810] IUnknown:Release (This=0x840f90) returned 0x0 [0196.810] IUnknown:Release (This=0x841de8) returned 0x0 [0196.810] IUnknown:Release (This=0x840600) returned 0x0 [0196.810] IUnknown:Release (This=0x841458) returned 0x0 [0196.810] IUnknown:Release (This=0x842608) returned 0x0 [0196.810] IUnknown:Release (This=0x842470) returned 0x0 [0196.810] IUnknown:Release (This=0x842938) returned 0x0 [0196.811] IUnknown:Release (This=0x842f98) returned 0x0 [0196.811] IUnknown:Release (This=0x842e00) returned 0x0 [0196.811] IUnknown:Release (This=0x842ad0) returned 0x0 [0196.811] IUnknown:Release (This=0x8427a0) returned 0x0 [0196.811] IUnknown:Release (This=0x842c68) returned 0x0 [0196.811] IUnknown:Release (This=0x4b46868) returned 0x0 [0196.811] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0196.811] WbemLocator:IUnknown:Release (This=0x81e200) returned 0x1 [0196.811] IUnknown:Release (This=0x7b81b0) returned 0x0 [0196.820] IUnknown:Release (This=0x4b46070) returned 0x0 [0196.820] IUnknown:Release (This=0x4b479f0) returned 0x0 [0196.820] IUnknown:Release (This=0x4b46b98) returned 0x0 [0196.820] IUnknown:Release (This=0x4b489e0) returned 0x0 [0196.820] IUnknown:Release (This=0x4b2aba8) returned 0x0 [0196.820] IUnknown:Release (This=0x4b2aa10) returned 0x0 [0196.821] IUnknown:Release (This=0x4b2a878) returned 0x0 [0196.821] IUnknown:Release (This=0x4b2a548) returned 0x0 [0196.821] IUnknown:Release (This=0x4b296f0) returned 0x0 [0196.821] IUnknown:Release (This=0x4b2a3b0) returned 0x0 [0196.821] IUnknown:Release (This=0x4b29558) returned 0x0 [0196.821] IUnknown:Release (This=0x4b29d50) returned 0x0 [0196.821] IUnknown:Release (This=0x4b29a20) returned 0x0 [0196.821] IUnknown:Release (This=0x4b2a080) returned 0x0 [0196.822] IUnknown:Release (This=0x4b293c0) returned 0x0 [0196.822] IUnknown:Release (This=0x4b29228) returned 0x0 [0196.822] IUnknown:Release (This=0x4b29090) returned 0x0 [0196.822] IUnknown:Release (This=0x4b28bc8) returned 0x0 [0196.822] IUnknown:Release (This=0x4b28a30) returned 0x0 [0196.822] IUnknown:Release (This=0x4b28898) returned 0x0 [0196.822] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0196.822] WbemLocator:IUnknown:Release (This=0x4b15650) returned 0x1 [0196.822] IUnknown:Release (This=0x7b80e8) returned 0x0 [0196.827] IUnknown:Release (This=0x4b46208) returned 0x0 [0196.827] IUnknown:Release (This=0x4b28700) returned 0x0 [0196.827] IUnknown:Release (This=0x4b2b3a0) returned 0x0 [0196.827] IUnknown:Release (This=0x4b2a218) returned 0x0 [0196.827] IUnknown:Release (This=0x4b2ad40) returned 0x0 [0196.827] IUnknown:Release (This=0x4b28ef8) returned 0x0 [0196.827] IUnknown:Release (This=0x4b29bb8) returned 0x0 [0196.827] IUnknown:Release (This=0x4b29ee8) returned 0x0 [0196.828] IUnknown:Release (This=0x4b28238) returned 0x0 [0196.828] IUnknown:Release (This=0x4b28d60) returned 0x0 [0196.828] IUnknown:Release (This=0x4b2aed8) returned 0x0 [0196.828] IUnknown:Release (This=0x4b283d0) returned 0x0 [0196.828] IUnknown:Release (This=0x4b2b208) returned 0x0 [0196.831] IUnknown:Release (This=0x4b2b070) returned 0x0 [0196.831] IUnknown:Release (This=0x4b28568) returned 0x0 [0196.831] IUnknown:Release (This=0x4b29888) returned 0x0 [0196.831] IUnknown:Release (This=0x4b2fcf0) returned 0x0 [0196.831] IUnknown:Release (This=0x4b2fb58) returned 0x0 [0196.831] IUnknown:Release (This=0x4b2f828) returned 0x0 [0196.831] IUnknown:Release (This=0x4b2f690) returned 0x0 [0196.831] IUnknown:Release (This=0x4b2e838) returned 0x0 [0196.832] IUnknown:Release (This=0x4b2f4f8) returned 0x0 [0196.832] IUnknown:Release (This=0x4b2ed00) returned 0x0 [0196.832] IUnknown:Release (This=0x4b2eb68) returned 0x0 [0196.832] IUnknown:Release (This=0x4b2f360) returned 0x0 [0196.832] IUnknown:Release (This=0x4b2f9c0) returned 0x0 [0196.832] IUnknown:Release (This=0x4b2ee98) returned 0x0 [0196.832] IUnknown:Release (This=0x4b2fe88) returned 0x0 [0196.832] IUnknown:Release (This=0x4b2f1c8) returned 0x0 [0196.833] IUnknown:Release (This=0x4b2f030) returned 0x0 [0196.833] IUnknown:Release (This=0x4b2e9d0) returned 0x0 [0196.833] IUnknown:Release (This=0x4b48518) returned 0x0 [0196.833] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0196.833] WbemLocator:IUnknown:Release (This=0x4b14c50) returned 0x1 [0196.833] IUnknown:Release (This=0x7b7468) returned 0x0 [0196.839] IUnknown:Release (This=0x4b486b0) returned 0x0 [0196.839] IUnknown:Release (This=0x4b463a0) returned 0x0 [0196.839] IUnknown:Release (This=0x4b2db78) returned 0x0 [0196.839] IUnknown:Release (This=0x4b2d9e0) returned 0x0 [0196.840] IUnknown:Release (This=0x4b2d6b0) returned 0x0 [0196.840] IUnknown:Release (This=0x4b2c528) returned 0x0 [0196.840] IUnknown:Release (This=0x4b2c1f8) returned 0x0 [0196.840] IUnknown:Release (This=0x4b2c060) returned 0x0 [0196.840] IUnknown:Release (This=0x4b2c390) returned 0x0 [0196.840] IUnknown:Release (This=0x4b2d518) returned 0x0 [0196.840] IUnknown:Release (This=0x4b2ceb8) returned 0x0 [0196.841] IUnknown:Release (This=0x7f6248) returned 0x0 [0196.841] IUnknown:Release (This=0x4b2bd30) returned 0x0 [0196.841] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0196.841] WbemLocator:IUnknown:Release (This=0x81e300) returned 0x1 [0196.841] IUnknown:Release (This=0x7b7d00) returned 0x0 [0196.842] IUnknown:Release (This=0x7bbb18) returned 0x0 [0196.843] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0196.843] WbemLocator:IUnknown:Release (This=0x81cd00) returned 0x1 [0196.843] IUnknown:Release (This=0x7b7aa8) returned 0x0 [0196.846] IUnknown:Release (This=0x4b2bb98) returned 0x0 [0196.846] IUnknown:Release (This=0x4b2cb88) returned 0x0 [0196.847] IUnknown:Release (This=0x4b2d380) returned 0x0 [0196.847] IUnknown:Release (This=0x4b2ba00) returned 0x0 [0196.847] IUnknown:Release (This=0x4b2cd20) returned 0x0 [0196.847] IUnknown:Release (This=0x4b2b538) returned 0x0 [0196.847] IUnknown:Release (This=0x4b2e6a0) returned 0x0 [0196.847] IUnknown:Release (This=0x4b2bec8) returned 0x0 [0196.848] IUnknown:Release (This=0x4b2b868) returned 0x0 [0196.848] IUnknown:Release (This=0x4b2dea8) returned 0x0 [0196.848] IUnknown:Release (This=0x4b2c9f0) returned 0x0 [0196.849] IUnknown:Release (This=0x4b2e040) returned 0x0 [0196.849] IUnknown:Release (This=0x4b2e508) returned 0x0 [0196.849] IUnknown:Release (This=0x4b2d050) returned 0x0 [0196.849] IUnknown:Release (This=0x4b2d848) returned 0x0 [0196.849] IUnknown:Release (This=0x4b2c6c0) returned 0x0 [0196.849] IUnknown:Release (This=0x4b2e1d8) returned 0x0 [0196.849] IUnknown:Release (This=0x4b2d1e8) returned 0x0 [0196.850] IUnknown:Release (This=0x4b2dd10) returned 0x0 [0196.850] IUnknown:Release (This=0x4b2c858) returned 0x0 [0196.850] IUnknown:Release (This=0x4b2b6d0) returned 0x0 [0196.850] IUnknown:Release (This=0x4b2e370) returned 0x0 [0196.850] IUnknown:Release (This=0x4b205c0) returned 0x0 [0196.850] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0196.850] WbemLocator:IUnknown:Release (This=0x4b15050) returned 0x1 [0196.850] IUnknown:Release (This=0x7b7918) returned 0x0 [0196.866] IUnknown:Release (This=0x4b481e8) returned 0x0 [0196.866] IUnknown:Release (This=0x4b220d8) returned 0x0 [0196.866] IUnknown:Release (This=0x4b1ff60) returned 0x0 [0196.866] IUnknown:Release (This=0x4b21f40) returned 0x0 [0196.866] IUnknown:Release (This=0x4b1fdc8) returned 0x0 [0196.866] IUnknown:Release (This=0x4b22f30) returned 0x0 [0196.867] IUnknown:Release (This=0x4b21da8) returned 0x0 [0196.867] IUnknown:Release (This=0x4b22d98) returned 0x0 [0196.867] IUnknown:Release (This=0x4b20428) returned 0x0 [0196.867] IUnknown:Release (This=0x4b22c00) returned 0x0 [0196.867] IUnknown:Release (This=0x4b21c10) returned 0x0 [0196.867] IUnknown:Release (This=0x4b22a68) returned 0x0 [0196.867] IUnknown:Release (This=0x4b21a78) returned 0x0 [0196.867] IUnknown:Release (This=0x4b228d0) returned 0x0 [0196.868] IUnknown:Release (This=0x4b215b0) returned 0x0 [0196.868] IUnknown:Release (This=0x4b21418) returned 0x0 [0196.868] IUnknown:Release (This=0x4b20290) returned 0x0 [0196.868] IUnknown:Release (This=0x4b208f0) returned 0x0 [0196.868] IUnknown:Release (This=0x4b21280) returned 0x0 [0196.868] IUnknown:Release (This=0x4b22408) returned 0x0 [0196.868] IUnknown:Release (This=0x4b218e0) returned 0x0 [0196.868] IUnknown:Release (This=0x4b22738) returned 0x0 [0196.869] IUnknown:Release (This=0x4b210e8) returned 0x0 [0196.869] IUnknown:Release (This=0x4b20f50) returned 0x0 [0196.869] IUnknown:Release (This=0x4b200f8) returned 0x0 [0196.869] IUnknown:Release (This=0x4b20758) returned 0x0 [0196.869] IUnknown:Release (This=0x4b20db8) returned 0x0 [0196.869] IUnknown:Release (This=0x4b22270) returned 0x0 [0196.869] IUnknown:Release (This=0x4b21748) returned 0x0 [0196.869] IUnknown:Release (This=0x4b225a0) returned 0x0 [0196.870] IUnknown:Release (This=0x4b20c20) returned 0x0 [0196.870] IUnknown:Release (This=0x4b23bf0) returned 0x0 [0196.870] IUnknown:Release (This=0x4b230c8) returned 0x0 [0196.870] IUnknown:Release (This=0x4b238c0) returned 0x0 [0196.870] IUnknown:Release (This=0x4b47eb8) returned 0x0 [0196.870] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0196.870] WbemLocator:IUnknown:Release (This=0x4b13f50) returned 0x1 [0196.870] IUnknown:Release (This=0x7b8020) returned 0x0 [0196.881] IUnknown:Release (This=0x4b48b78) returned 0x0 [0196.881] IUnknown:Release (This=0x4b45ed8) returned 0x0 [0196.881] IUnknown:Release (This=0x4b45ba8) returned 0x0 [0196.881] IUnknown:Release (This=0x4b23728) returned 0x0 [0196.881] IUnknown:Release (This=0x4b23260) returned 0x0 [0196.881] IUnknown:Release (This=0x4b23590) returned 0x0 [0196.881] IUnknown:Release (This=0x4b233f8) returned 0x0 [0196.881] IUnknown:Release (This=0x4b1b588) returned 0x0 [0196.882] IUnknown:Release (This=0x4b1b3f0) returned 0x0 [0196.882] IUnknown:Release (This=0x4b1b720) returned 0x0 [0196.882] IUnknown:Release (This=0x4b1b258) returned 0x0 [0196.882] IUnknown:Release (This=0x4b1b0c0) returned 0x0 [0196.882] IUnknown:Release (This=0x4b1bbe8) returned 0x0 [0196.882] IUnknown:Release (This=0x4b1ba50) returned 0x0 [0196.882] IUnknown:Release (This=0x4b1b8b8) returned 0x0 [0196.882] IUnknown:Release (This=0x4b18420) returned 0x0 [0196.883] IUnknown:Release (This=0x4b18288) returned 0x0 [0196.883] IUnknown:Release (This=0x4b1ad90) returned 0x0 [0196.883] IUnknown:Release (This=0x4b1a8c8) returned 0x0 [0196.883] IUnknown:Release (This=0x4b1a730) returned 0x0 [0196.883] IUnknown:Release (This=0x4b1a598) returned 0x0 [0196.883] IUnknown:Release (This=0x4b19410) returned 0x0 [0196.883] IUnknown:Release (This=0x4b180f0) returned 0x0 [0196.883] IUnknown:Release (This=0x4b19278) returned 0x0 [0196.884] IUnknown:Release (This=0x4b198d8) returned 0x0 [0196.884] IUnknown:Release (This=0x4b190e0) returned 0x0 [0196.884] IUnknown:Release (This=0x4b1a268) returned 0x0 [0196.884] IUnknown:Release (This=0x4b1a0d0) returned 0x0 [0196.884] IUnknown:Release (This=0x4b18c18) returned 0x0 [0196.884] IUnknown:Release (This=0x4b18a80) returned 0x0 [0196.884] IUnknown:Release (This=0x4b17f58) returned 0x0 [0196.884] IUnknown:Release (This=0x4b18750) returned 0x0 [0196.885] IUnknown:Release (This=0x4b195a8) returned 0x0 [0196.885] IUnknown:Release (This=0x4b18f48) returned 0x0 [0196.885] IUnknown:Release (This=0x4b19f38) returned 0x0 [0196.885] IUnknown:Release (This=0x4b188e8) returned 0x0 [0196.885] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0196.885] WbemLocator:IUnknown:Release (This=0x4b14250) returned 0x1 [0196.885] IUnknown:Release (This=0x7b7f58) returned 0x0 [0196.894] IUnknown:Release (This=0x4b471f8) returned 0x0 [0196.895] IUnknown:Release (This=0x4b466d0) returned 0x0 [0196.895] IUnknown:Release (This=0x4b17dc0) returned 0x0 [0196.895] IUnknown:Release (This=0x4b1aa60) returned 0x0 [0196.895] IUnknown:Release (This=0x4b1af28) returned 0x0 [0196.895] IUnknown:Release (This=0x4b1abf8) returned 0x0 [0196.895] IUnknown:Release (This=0x4b18db0) returned 0x0 [0196.895] IUnknown:Release (This=0x4b19da0) returned 0x0 [0196.895] IUnknown:Release (This=0x4b19740) returned 0x0 [0196.896] IUnknown:Release (This=0x4b19a70) returned 0x0 [0196.896] IUnknown:Release (This=0x4b185b8) returned 0x0 [0196.896] IUnknown:Release (This=0x4b1a400) returned 0x0 [0196.897] IUnknown:Release (This=0x4b120f8) returned 0x0 [0196.897] IUnknown:Release (This=0x4b11f60) returned 0x0 [0196.897] IUnknown:Release (This=0x4b115d0) returned 0x0 [0196.897] IUnknown:Release (This=0x4b11c30) returned 0x0 [0196.897] IUnknown:Release (This=0x4b11dc8) returned 0x0 [0196.897] IUnknown:Release (This=0x4b11900) returned 0x0 [0196.898] IUnknown:Release (This=0x4b11a98) returned 0x0 [0196.898] IUnknown:Release (This=0x4b11768) returned 0x0 [0196.898] IUnknown:Release (This=0x4b10118) returned 0x0 [0196.898] IUnknown:Release (This=0x4b0ff80) returned 0x0 [0196.898] IUnknown:Release (This=0x4b0fde8) returned 0x0 [0196.898] IUnknown:Release (This=0x4b0f5f0) returned 0x0 [0196.898] IUnknown:Release (This=0x4b0f458) returned 0x0 [0196.899] IUnknown:Release (This=0x4b0e798) returned 0x0 [0196.899] IUnknown:Release (This=0x4b10dd8) returned 0x0 [0196.899] IUnknown:Release (This=0x4b10aa8) returned 0x0 [0196.899] IUnknown:Release (This=0x4b0e600) returned 0x0 [0196.899] IUnknown:Release (This=0x4b10910) returned 0x0 [0196.899] IUnknown:Release (This=0x4b0f2c0) returned 0x0 [0196.899] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0196.899] WbemLocator:IUnknown:Release (This=0x4b15250) returned 0x1 [0196.899] IUnknown:Release (This=0x7b8278) returned 0x0 [0196.929] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0196.929] WbemLocator:IUnknown:Release (This=0x81e000) returned 0x1 [0196.930] IUnknown:Release (This=0x7b7e90) returned 0x0 [0197.024] IUnknown:Release (This=0x4b47b88) returned 0x0 [0197.024] IUnknown:Release (This=0x4b46d30) returned 0x0 [0197.025] IUnknown:Release (This=0x4b47060) returned 0x0 [0197.025] IUnknown:Release (This=0x4b0e468) returned 0x0 [0197.025] IUnknown:Release (This=0x4b10778) returned 0x0 [0197.025] IUnknown:Release (This=0x4b10c40) returned 0x0 [0197.025] IUnknown:Release (This=0x4b10448) returned 0x0 [0197.025] IUnknown:Release (This=0x4b0f128) returned 0x0 [0197.025] IUnknown:Release (This=0x4b0ef90) returned 0x0 [0197.025] IUnknown:Release (This=0x4b102b0) returned 0x0 [0197.026] IUnknown:Release (This=0x4b0fab8) returned 0x0 [0197.026] IUnknown:Release (This=0x4b0ec60) returned 0x0 [0197.026] IUnknown:Release (This=0x4b0edf8) returned 0x0 [0197.026] IUnknown:Release (This=0x4b0f920) returned 0x0 [0197.026] IUnknown:Release (This=0x4b0e2d0) returned 0x0 [0197.026] IUnknown:Release (This=0x4b11438) returned 0x0 [0197.026] IUnknown:Release (This=0x4b112a0) returned 0x0 [0197.027] IUnknown:Release (This=0x4b105e0) returned 0x0 [0197.027] IUnknown:Release (This=0x4b0eac8) returned 0x0 [0197.027] IUnknown:Release (This=0x4b10f70) returned 0x0 [0197.027] IUnknown:Release (This=0x4b0e930) returned 0x0 [0197.027] IUnknown:Release (This=0x4b0f788) returned 0x0 [0197.027] IUnknown:Release (This=0x4b11108) returned 0x0 [0197.027] IUnknown:Release (This=0x4b08198) returned 0x0 [0197.027] IUnknown:Release (This=0x4b08000) returned 0x0 [0197.028] IUnknown:Release (This=0x4b07e68) returned 0x0 [0197.028] IUnknown:Release (This=0x4b08330) returned 0x0 [0197.028] IUnknown:Release (This=0x4b07cd0) returned 0x0 [0197.028] IUnknown:Release (This=0x4b084c8) returned 0x0 [0197.028] IUnknown:Release (This=0x4b07b38) returned 0x0 [0197.028] IUnknown:Release (This=0x4b08660) returned 0x0 [0197.028] IUnknown:Release (This=0x4b06b48) returned 0x0 [0197.028] IUnknown:Release (This=0x4b069b0) returned 0x0 [0197.029] IUnknown:Release (This=0x4b06818) returned 0x0 [0197.029] IUnknown:Release (This=0x4b054f8) returned 0x0 [0197.029] IUnknown:Release (This=0x4b06350) returned 0x0 [0197.029] IUnknown:Release (This=0x4b48848) returned 0x0 [0197.029] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0197.029] WbemLocator:IUnknown:Release (This=0x81d400) returned 0x1 [0197.029] IUnknown:Release (This=0x7b7dc8) returned 0x0 [0197.244] IUnknown:Release (This=0x4b47390) returned 0x0 [0197.244] IUnknown:Release (This=0x4b064e8) returned 0x0 [0197.244] IUnknown:Release (This=0x4b05360) returned 0x0 [0197.244] IUnknown:Release (This=0x4b061b8) returned 0x0 [0197.245] IUnknown:Release (This=0x4b051c8) returned 0x0 [0197.245] IUnknown:Release (This=0x4b05030) returned 0x0 [0197.245] IUnknown:Release (This=0x4b04b68) returned 0x0 [0197.245] IUnknown:Release (This=0x4b07670) returned 0x0 [0197.245] IUnknown:Release (This=0x4b05cf0) returned 0x0 [0197.245] IUnknown:Release (This=0x4b074d8) returned 0x0 [0197.245] IUnknown:Release (This=0x4b07340) returned 0x0 [0197.245] IUnknown:Release (This=0x4b04e98) returned 0x0 [0197.246] IUnknown:Release (This=0x4b071a8) returned 0x0 [0197.246] IUnknown:Release (This=0x4b049d0) returned 0x0 [0197.246] IUnknown:Release (This=0x4b05b58) returned 0x0 [0197.246] IUnknown:Release (This=0x4b06020) returned 0x0 [0197.246] IUnknown:Release (This=0x4b079a0) returned 0x0 [0197.246] IUnknown:Release (This=0x4b07010) returned 0x0 [0197.246] IUnknown:Release (This=0x4b059c0) returned 0x0 [0197.246] IUnknown:Release (This=0x4b04d00) returned 0x0 [0197.247] IUnknown:Release (This=0x4b06ce0) returned 0x0 [0197.247] IUnknown:Release (This=0x4b04838) returned 0x0 [0197.247] IUnknown:Release (This=0x4b05690) returned 0x0 [0197.247] IUnknown:Release (This=0x4b05e88) returned 0x0 [0197.247] IUnknown:Release (This=0x4b07808) returned 0x0 [0197.247] IUnknown:Release (This=0x4b06e78) returned 0x0 [0197.247] IUnknown:Release (This=0x4b05828) returned 0x0 [0197.247] IUnknown:Release (This=0x4afd6d8) returned 0x0 [0197.248] IUnknown:Release (This=0x4afd540) returned 0x0 [0197.248] IUnknown:Release (This=0x4afd3a8) returned 0x0 [0197.248] IUnknown:Release (This=0x4afd210) returned 0x0 [0197.248] IUnknown:Release (This=0x4afd078) returned 0x0 [0197.248] IUnknown:Release (This=0x4afdd38) returned 0x0 [0197.248] IUnknown:Release (This=0x4afcbb0) returned 0x0 [0197.248] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0197.248] WbemLocator:IUnknown:Release (This=0x81de00) returned 0x1 [0197.248] IUnknown:Release (This=0x7b7788) returned 0x0 [0197.464] IUnknown:Release (This=0x4b47528) returned 0x0 [0197.465] IUnknown:Release (This=0x4b45d40) returned 0x0 [0197.465] IUnknown:Release (This=0x4afcee0) returned 0x0 [0197.465] IUnknown:Release (This=0x4afca18) returned 0x0 [0197.465] IUnknown:Release (This=0x4afc880) returned 0x0 [0197.465] IUnknown:Release (This=0x4afdba0) returned 0x0 [0197.465] IUnknown:Release (This=0x4afc6e8) returned 0x0 [0197.466] IUnknown:Release (This=0x4afda08) returned 0x0 [0197.466] IUnknown:Release (This=0x4afe068) returned 0x0 [0197.467] IUnknown:Release (This=0x4afe398) returned 0x0 [0197.467] IUnknown:Release (This=0x4afded0) returned 0x0 [0197.467] IUnknown:Release (This=0x4afc550) returned 0x0 [0197.467] IUnknown:Release (This=0x4afe200) returned 0x0 [0197.467] IUnknown:Release (This=0x4afd870) returned 0x0 [0197.467] IUnknown:Release (This=0x4af5248) returned 0x0 [0197.467] IUnknown:Release (This=0x4af58a8) returned 0x0 [0197.467] IUnknown:Release (This=0x4af4be8) returned 0x0 [0197.468] IUnknown:Release (This=0x4af4258) returned 0x0 [0197.468] IUnknown:Release (This=0x4af50b0) returned 0x0 [0197.468] IUnknown:Release (This=0x4af4a50) returned 0x0 [0197.468] IUnknown:Release (This=0x4af3f28) returned 0x0 [0197.468] IUnknown:Release (This=0x4af40c0) returned 0x0 [0197.468] IUnknown:Release (This=0x4af4588) returned 0x0 [0197.468] IUnknown:Release (This=0x4af43f0) returned 0x0 [0197.468] IUnknown:Release (This=0x4af5710) returned 0x0 [0197.469] IUnknown:Release (This=0x4af4f18) returned 0x0 [0197.469] IUnknown:Release (This=0x4b46a00) returned 0x0 [0197.469] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0197.469] WbemLocator:IUnknown:Release (This=0x81d000) returned 0x1 [0197.469] IUnknown:Release (This=0x7b7c38) returned 0x0 [0197.663] IUnknown:Release (This=0x4b47d20) returned 0x0 [0197.663] IUnknown:Release (This=0x4b47858) returned 0x0 [0197.663] IUnknown:Release (This=0x4af5578) returned 0x0 [0197.663] IUnknown:Release (This=0x4af3d90) returned 0x0 [0197.663] IUnknown:Release (This=0x4af48b8) returned 0x0 [0197.663] IUnknown:Release (This=0x4af53e0) returned 0x0 [0197.663] IUnknown:Release (This=0x4af4d80) returned 0x0 [0197.664] IUnknown:Release (This=0x4af4720) returned 0x0 [0197.664] IUnknown:Release (This=0x4af3a60) returned 0x0 [0197.664] IUnknown:Release (This=0x82d970) returned 0x0 [0197.664] IUnknown:Release (This=0x82d640) returned 0x0 [0197.664] IUnknown:Release (This=0x82d310) returned 0x0 [0197.664] IUnknown:Release (This=0x82d178) returned 0x0 [0197.664] IUnknown:Release (This=0x82d4a8) returned 0x0 [0197.665] IUnknown:Release (This=0x82cfe0) returned 0x0 [0197.665] IUnknown:Release (This=0x82ccb0) returned 0x0 [0197.665] IUnknown:Release (This=0x82cb18) returned 0x0 [0197.665] IUnknown:Release (This=0x82c980) returned 0x0 [0197.665] IUnknown:Release (This=0x82c188) returned 0x0 [0197.665] IUnknown:Release (This=0x82c7e8) returned 0x0 [0197.665] IUnknown:Release (This=0x82bff0) returned 0x0 [0197.665] IUnknown:Release (This=0x82c4b8) returned 0x0 [0197.666] IUnknown:Release (This=0x82db08) returned 0x0 [0197.666] IUnknown:Release (This=0x82ce48) returned 0x0 [0197.666] IUnknown:Release (This=0x82be58) returned 0x0 [0197.666] IUnknown:Release (This=0x82dca0) returned 0x0 [0197.666] IUnknown:Release (This=0x82d7d8) returned 0x0 [0197.666] IUnknown:Release (This=0x82c320) returned 0x0 [0197.666] IUnknown:Release (This=0x82c650) returned 0x0 [0197.666] IUnknown:Release (This=0x4aeda30) returned 0x0 [0197.667] IUnknown:Release (This=0x4aee6f0) returned 0x0 [0197.667] IUnknown:Release (This=0x4aed898) returned 0x0 [0197.667] IUnknown:Release (This=0x4aee558) returned 0x0 [0197.667] IUnknown:Release (This=0x4aee3c0) returned 0x0 [0197.667] IUnknown:Release (This=0x4aecd70) returned 0x0 [0197.667] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0197.667] WbemLocator:IUnknown:Release (This=0x81d500) returned 0x1 [0197.667] IUnknown:Release (This=0x7b7b70) returned 0x0 [0197.774] IUnknown:Release (This=0x4b46538) returned 0x0 [0197.774] IUnknown:Release (This=0x4aee090) returned 0x0 [0197.774] IUnknown:Release (This=0x4aedef8) returned 0x0 [0197.774] IUnknown:Release (This=0x4aed0a0) returned 0x0 [0197.774] IUnknown:Release (This=0x4aecbd8) returned 0x0 [0197.774] IUnknown:Release (This=0x4aed568) returned 0x0 [0197.775] IUnknown:Release (This=0x4aedbc8) returned 0x0 [0197.775] IUnknown:Release (This=0x4aecf08) returned 0x0 [0197.775] IUnknown:Release (This=0x4aed3d0) returned 0x0 [0197.775] IUnknown:Release (This=0x4aed700) returned 0x0 [0197.775] IUnknown:Release (This=0x4aeca40) returned 0x0 [0197.775] IUnknown:Release (This=0x4aec8a8) returned 0x0 [0197.775] IUnknown:Release (This=0x4aee228) returned 0x0 [0197.775] IUnknown:Release (This=0x4aedd60) returned 0x0 [0197.776] IUnknown:Release (This=0x4ae93c0) returned 0x0 [0197.776] IUnknown:Release (This=0x4ae9228) returned 0x0 [0197.776] IUnknown:Release (This=0x4ae9090) returned 0x0 [0197.776] IUnknown:Release (This=0x4ae8d60) returned 0x0 [0197.776] IUnknown:Release (This=0x4ae8a30) returned 0x0 [0197.776] IUnknown:Release (This=0x4ae8ef8) returned 0x0 [0197.776] IUnknown:Release (This=0x4ae8898) returned 0x0 [0197.776] IUnknown:Release (This=0x4aea218) returned 0x0 [0197.777] IUnknown:Release (This=0x4ae9bb8) returned 0x0 [0197.777] IUnknown:Release (This=0x4aea548) returned 0x0 [0197.777] IUnknown:Release (This=0x4aea080) returned 0x0 [0197.777] IUnknown:Release (This=0x4ae9a20) returned 0x0 [0197.777] IUnknown:Release (This=0x4ae9888) returned 0x0 [0197.777] IUnknown:Release (This=0x4ae8bc8) returned 0x0 [0197.777] IUnknown:Release (This=0x4aea6e0) returned 0x0 [0197.777] IUnknown:Release (This=0x4ae9d50) returned 0x0 [0197.778] IUnknown:Release (This=0x4ae9558) returned 0x0 [0197.778] IUnknown:Release (This=0x4aea3b0) returned 0x0 [0197.778] IUnknown:Release (This=0x4ae9ee8) returned 0x0 [0197.778] IUnknown:Release (This=0x4ae76d8) returned 0x0 [0197.778] IUnknown:Release (This=0x4b48d10) returned 0x0 [0197.778] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0197.778] WbemLocator:IUnknown:Release (This=0x81d600) returned 0x1 [0197.778] IUnknown:Release (This=0x7b73a0) returned 0x0 [0197.877] IUnknown:Release (This=0x4b48380) returned 0x0 [0197.877] IUnknown:Release (This=0x4ae7540) returned 0x0 [0197.877] IUnknown:Release (This=0x4ae73a8) returned 0x0 [0197.877] IUnknown:Release (This=0x4ae7078) returned 0x0 [0197.878] IUnknown:Release (This=0x4ae6bb0) returned 0x0 [0197.878] IUnknown:Release (This=0x4ae6880) returned 0x0 [0197.878] IUnknown:Release (This=0x4ae6550) returned 0x0 [0197.878] IUnknown:Release (This=0x4ae6ee0) returned 0x0 [0197.878] IUnknown:Release (This=0x4ae7ed0) returned 0x0 [0197.878] IUnknown:Release (This=0x4ae7ba0) returned 0x0 [0197.878] IUnknown:Release (This=0x4ae6088) returned 0x0 [0197.878] IUnknown:Release (This=0x4ae7a08) returned 0x0 [0197.879] IUnknown:Release (This=0x4ae6d48) returned 0x0 [0197.879] IUnknown:Release (This=0x4ae6220) returned 0x0 [0197.879] IUnknown:Release (This=0x4ae7d38) returned 0x0 [0197.879] IUnknown:Release (This=0x4ae6a18) returned 0x0 [0197.879] IUnknown:Release (This=0x4ae7870) returned 0x0 [0197.879] IUnknown:Release (This=0x4ae7210) returned 0x0 [0197.879] IUnknown:Release (This=0x4ae66e8) returned 0x0 [0197.879] IUnknown:Release (This=0x4ae63b8) returned 0x0 [0197.880] IUnknown:Release (This=0x4ae2ba0) returned 0x0 [0197.880] IUnknown:Release (This=0x4ae2078) returned 0x0 [0197.880] IUnknown:Release (This=0x4ae3ec0) returned 0x0 [0197.880] IUnknown:Release (This=0x4ae39f8) returned 0x0 [0197.880] IUnknown:Release (This=0x4ae2a08) returned 0x0 [0197.880] IUnknown:Release (This=0x4ae2870) returned 0x0 [0197.880] IUnknown:Release (This=0x4ae3b90) returned 0x0 [0197.880] IUnknown:Release (This=0x4ae3860) returned 0x0 [0197.881] IUnknown:Release (This=0x4ae36c8) returned 0x0 [0197.881] IUnknown:Release (This=0x4ae3398) returned 0x0 [0197.881] IUnknown:Release (This=0x4ae3200) returned 0x0 [0197.881] IUnknown:Release (This=0x4ae2d38) returned 0x0 [0197.881] IUnknown:Release (This=0x4ae2210) returned 0x0 [0197.881] IUnknown:Release (This=0x4ae26d8) returned 0x0 [0197.881] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0197.881] WbemLocator:IUnknown:Release (This=0x81dc00) returned 0x1 [0197.881] IUnknown:Release (This=0x7b7850) returned 0x0 [0197.951] IUnknown:Release (This=0x4b49040) returned 0x0 [0197.951] IUnknown:Release (This=0x4b476c0) returned 0x0 [0197.951] IUnknown:Release (This=0x4b46ec8) returned 0x0 [0197.951] IUnknown:Release (This=0x4ae3068) returned 0x0 [0197.951] IUnknown:Release (This=0x4ae2ed0) returned 0x0 [0197.951] IUnknown:Release (This=0x4ae23a8) returned 0x0 [0197.951] IUnknown:Release (This=0x4ae3d28) returned 0x0 [0197.952] IUnknown:Release (This=0x4ae3530) returned 0x0 [0197.952] IUnknown:Release (This=0x840df8) returned 0x0 [0197.953] IUnknown:Release (This=0x840930) returned 0x0 [0197.953] IUnknown:Release (This=0x841920) returned 0x0 [0197.953] IUnknown:Release (This=0x8412c0) returned 0x0 [0197.953] IUnknown:Release (This=0x840468) returned 0x0 [0197.953] IUnknown:Release (This=0x840c60) returned 0x0 [0197.953] IUnknown:Release (This=0x842118) returned 0x0 [0197.953] IUnknown:Release (This=0x841788) returned 0x0 [0197.954] IUnknown:Release (This=0x4b4b350) returned 0x0 [0197.954] IUnknown:Release (This=0x4b4b1b8) returned 0x0 [0197.954] IUnknown:Release (This=0x4b4bce0) returned 0x0 [0197.956] IUnknown:Release (This=0x4b49508) returned 0x0 [0197.956] IUnknown:Release (This=0x4b491d8) returned 0x0 [0197.956] IUnknown:Release (This=0x4b49370) returned 0x0 [0197.956] IUnknown:Release (This=0x4b4b020) returned 0x0 [0197.957] IUnknown:Release (This=0x4b48ea8) returned 0x0 [0197.957] IUnknown:Release (This=0x4b4acf0) returned 0x0 [0197.957] IUnknown:Release (This=0x4b4b680) returned 0x0 [0197.957] IUnknown:Release (This=0x4b4b9b0) returned 0x0 [0197.957] IUnknown:Release (This=0x4b4a690) returned 0x0 [0197.957] IUnknown:Release (This=0x4b4a360) returned 0x0 [0197.957] IUnknown:Release (This=0x4b496a0) returned 0x0 [0197.957] IUnknown:Release (This=0x4b4c010) returned 0x0 [0197.958] IUnknown:Release (This=0x4b4a1c8) returned 0x0 [0197.958] IUnknown:Release (This=0x4b49838) returned 0x0 [0197.958] IUnknown:Release (This=0x4b4a4f8) returned 0x0 [0197.958] RegCloseKey (hKey=0x490) returned 0x0 [0197.959] RegCloseKey (hKey=0x48c) returned 0x0 [0197.959] RegCloseKey (hKey=0x488) returned 0x0 [0233.244] CoGetContextToken (in: pToken=0x433fc60 | out: pToken=0x433fc60) returned 0x0 [0233.244] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.244] IUnknown:Release (This=0x4b5bbc0) returned 0x2 [0233.244] IUnknown:Release (This=0x4b5bbc0) returned 0x1 [0233.244] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.244] IUnknown:Release (This=0x4b5bef0) returned 0x2 [0233.244] IUnknown:Release (This=0x4b5bef0) returned 0x1 [0233.244] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.244] IUnknown:Release (This=0x4b5b560) returned 0x2 [0233.244] IUnknown:Release (This=0x4b5b560) returned 0x1 [0233.245] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.245] IUnknown:Release (This=0x4b5ba28) returned 0x2 [0233.245] IUnknown:Release (This=0x4b5ba28) returned 0x1 [0233.245] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.245] IUnknown:Release (This=0x4b5b6f8) returned 0x2 [0233.245] IUnknown:Release (This=0x4b5b6f8) returned 0x1 [0233.245] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.245] IUnknown:Release (This=0x4b59be0) returned 0x2 [0233.245] IUnknown:Release (This=0x4b59be0) returned 0x1 [0233.245] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.245] IUnknown:Release (This=0x4b5a570) returned 0x2 [0233.245] IUnknown:Release (This=0x4b5a570) returned 0x1 [0233.245] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.245] IUnknown:Release (This=0x4b59a48) returned 0x2 [0233.245] IUnknown:Release (This=0x4b59a48) returned 0x1 [0233.245] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.245] IUnknown:Release (This=0x4b5a240) returned 0x2 [0233.245] IUnknown:Release (This=0x4b5a240) returned 0x1 [0233.245] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.245] IUnknown:Release (This=0x4b580c8) returned 0x2 [0233.245] IUnknown:Release (This=0x4b580c8) returned 0x1 [0233.245] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.245] IUnknown:Release (This=0x4b57408) returned 0x2 [0233.245] IUnknown:Release (This=0x4b57408) returned 0x1 [0233.245] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.245] IUnknown:Release (This=0x4b588c0) returned 0x2 [0233.245] IUnknown:Release (This=0x4b588c0) returned 0x1 [0233.245] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.245] IUnknown:Release (This=0x4b5a0a8) returned 0x2 [0233.245] IUnknown:Release (This=0x4b5a0a8) returned 0x1 [0233.245] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.245] IUnknown:Release (This=0x4b598b0) returned 0x2 [0233.245] IUnknown:Release (This=0x4b598b0) returned 0x1 [0233.246] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.246] IUnknown:Release (This=0x4b57738) returned 0x2 [0233.246] IUnknown:Release (This=0x4b57738) returned 0x1 [0233.246] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.246] IUnknown:Release (This=0x4b58590) returned 0x2 [0233.246] IUnknown:Release (This=0x4b58590) returned 0x1 [0233.246] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.246] IUnknown:Release (This=0x4b57f30) returned 0x2 [0233.246] IUnknown:Release (This=0x4b57f30) returned 0x1 [0233.246] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.246] IUnknown:Release (This=0x4b59f10) returned 0x2 [0233.246] IUnknown:Release (This=0x4b59f10) returned 0x1 [0233.246] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.246] IUnknown:Release (This=0x4b57a68) returned 0x2 [0233.246] IUnknown:Release (This=0x4b57a68) returned 0x1 [0233.246] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.246] IUnknown:Release (This=0x4b58d88) returned 0x2 [0233.246] IUnknown:Release (This=0x4b58d88) returned 0x1 [0233.246] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.246] IUnknown:Release (This=0x4b59718) returned 0x2 [0233.246] IUnknown:Release (This=0x4b59718) returned 0x1 [0233.246] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.246] IUnknown:Release (This=0x4b58bf0) returned 0x2 [0233.246] IUnknown:Release (This=0x4b58bf0) returned 0x1 [0233.246] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.246] IUnknown:Release (This=0x4b5a3d8) returned 0x2 [0233.246] IUnknown:Release (This=0x4b5a3d8) returned 0x1 [0233.246] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.246] IUnknown:Release (This=0x4b593e8) returned 0x2 [0233.246] IUnknown:Release (This=0x4b593e8) returned 0x1 [0233.246] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.246] IUnknown:Release (This=0x4b59250) returned 0x2 [0233.246] IUnknown:Release (This=0x4b59250) returned 0x1 [0233.247] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.247] IUnknown:Release (This=0x4b590b8) returned 0x2 [0233.247] IUnknown:Release (This=0x4b590b8) returned 0x1 [0233.247] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.247] IUnknown:Release (This=0x4b58a58) returned 0x2 [0233.247] IUnknown:Release (This=0x4b58a58) returned 0x1 [0233.247] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.247] IUnknown:Release (This=0x4b58728) returned 0x2 [0233.247] IUnknown:Release (This=0x4b58728) returned 0x1 [0233.247] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.247] IUnknown:Release (This=0x4b578d0) returned 0x2 [0233.247] IUnknown:Release (This=0x4b578d0) returned 0x1 [0233.247] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.247] IUnknown:Release (This=0x4b59580) returned 0x2 [0233.247] IUnknown:Release (This=0x4b59580) returned 0x1 [0233.247] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.247] IUnknown:Release (This=0x4b58f20) returned 0x2 [0233.247] IUnknown:Release (This=0x4b58f20) returned 0x1 [0233.247] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.247] WbemLocator:IUnknown:Release (This=0x829b00) returned 0x1 [0233.247] WbemLocator:IUnknown:Release (This=0x829b00) returned 0x0 [0233.247] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.247] IUnknown:Release (This=0x4b58260) returned 0x2 [0233.247] IUnknown:Release (This=0x4b58260) returned 0x1 [0233.247] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.247] IUnknown:Release (This=0x4b575a0) returned 0x2 [0233.247] IUnknown:Release (This=0x4b575a0) returned 0x1 [0233.247] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.247] IUnknown:Release (This=0x4b57c00) returned 0x2 [0233.247] IUnknown:Release (This=0x4b57c00) returned 0x1 [0233.247] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.247] IUnknown:Release (This=0x4b59d78) returned 0x2 [0233.247] IUnknown:Release (This=0x4b59d78) returned 0x1 [0233.248] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.248] IUnknown:Release (This=0x4b57d98) returned 0x2 [0233.248] IUnknown:Release (This=0x4b57d98) returned 0x1 [0233.248] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.248] IUnknown:Release (This=0x4b4d660) returned 0x2 [0233.248] IUnknown:Release (This=0x4b4d660) returned 0x1 [0233.248] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.248] IUnknown:Release (This=0x4b4d4c8) returned 0x2 [0233.248] IUnknown:Release (This=0x4b4d4c8) returned 0x1 [0233.248] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.248] IUnknown:Release (This=0x4b4c808) returned 0x2 [0233.248] IUnknown:Release (This=0x4b4c808) returned 0x1 [0233.248] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.248] IUnknown:Release (This=0x4b4c4d8) returned 0x2 [0233.248] IUnknown:Release (This=0x4b4c4d8) returned 0x1 [0233.248] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.248] IUnknown:Release (This=0x4b4d330) returned 0x2 [0233.248] IUnknown:Release (This=0x4b4d330) returned 0x1 [0233.248] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.248] IUnknown:Release (This=0x4b4d198) returned 0x2 [0233.248] IUnknown:Release (This=0x4b4d198) returned 0x1 [0233.248] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.248] IUnknown:Release (This=0x4b4d000) returned 0x2 [0233.248] IUnknown:Release (This=0x4b4d000) returned 0x1 [0233.248] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.248] IUnknown:Release (This=0x4b4c340) returned 0x2 [0233.248] IUnknown:Release (This=0x4b4c340) returned 0x1 [0233.248] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.248] IUnknown:Release (This=0x4b4ce68) returned 0x2 [0233.248] IUnknown:Release (This=0x4b4ce68) returned 0x1 [0233.248] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.248] IUnknown:Release (This=0x4b4d7f8) returned 0x2 [0233.249] IUnknown:Release (This=0x4b4d7f8) returned 0x1 [0233.249] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.249] IUnknown:Release (This=0x4b4ccd0) returned 0x2 [0233.249] IUnknown:Release (This=0x4b4ccd0) returned 0x1 [0233.249] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.249] IUnknown:Release (This=0x4b4d990) returned 0x2 [0233.249] IUnknown:Release (This=0x4b4d990) returned 0x1 [0233.249] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.249] IUnknown:Release (This=0x4b4c9a0) returned 0x2 [0233.249] IUnknown:Release (This=0x4b4c9a0) returned 0x1 [0233.249] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.249] IUnknown:Release (This=0x4b4c1a8) returned 0x2 [0233.249] IUnknown:Release (This=0x4b4c1a8) returned 0x1 [0233.249] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.249] IUnknown:Release (This=0x4b4c670) returned 0x2 [0233.249] IUnknown:Release (This=0x4b4c670) returned 0x1 [0233.249] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.249] IUnknown:Release (This=0x4b4cb38) returned 0x2 [0233.249] IUnknown:Release (This=0x4b4cb38) returned 0x1 [0233.249] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.249] IUnknown:Release (This=0x4b496a0) returned 0x2 [0233.249] IUnknown:Release (This=0x4b496a0) returned 0x1 [0233.249] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.249] IUnknown:Release (This=0x4b491d8) returned 0x2 [0233.249] IUnknown:Release (This=0x4b491d8) returned 0x1 [0233.249] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.249] IUnknown:Release (This=0x4b4bce0) returned 0x2 [0233.249] IUnknown:Release (This=0x4b4bce0) returned 0x1 [0233.249] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.249] IUnknown:Release (This=0x4b4bb48) returned 0x2 [0233.250] IUnknown:Release (This=0x4b4bb48) returned 0x1 [0233.250] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.250] IUnknown:Release (This=0x4b49040) returned 0x2 [0233.250] IUnknown:Release (This=0x4b49040) returned 0x1 [0233.250] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.250] IUnknown:Release (This=0x4b4b4e8) returned 0x2 [0233.250] IUnknown:Release (This=0x4b4b4e8) returned 0x1 [0233.250] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.250] IUnknown:Release (This=0x4b4b350) returned 0x2 [0233.250] IUnknown:Release (This=0x4b4b350) returned 0x1 [0233.250] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.250] IUnknown:Release (This=0x4b49b68) returned 0x2 [0233.250] IUnknown:Release (This=0x4b49b68) returned 0x1 [0233.250] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.250] IUnknown:Release (This=0x4b499d0) returned 0x2 [0233.250] IUnknown:Release (This=0x4b499d0) returned 0x1 [0233.250] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.250] IUnknown:Release (This=0x4b4b1b8) returned 0x2 [0233.250] IUnknown:Release (This=0x4b4b1b8) returned 0x1 [0233.250] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.250] IUnknown:Release (This=0x4b4b680) returned 0x2 [0233.251] IUnknown:Release (This=0x4b4b680) returned 0x1 [0233.251] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.251] IUnknown:Release (This=0x4b4a360) returned 0x2 [0233.251] IUnknown:Release (This=0x4b4a360) returned 0x1 [0233.251] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.251] WbemLocator:IUnknown:Release (This=0x829ad0) returned 0x1 [0233.251] WbemLocator:IUnknown:Release (This=0x829ad0) returned 0x0 [0233.251] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.251] IUnknown:Release (This=0x4b48ea8) returned 0x2 [0233.251] IUnknown:Release (This=0x4b48ea8) returned 0x1 [0233.251] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.251] IUnknown:Release (This=0x4b49838) returned 0x2 [0233.251] IUnknown:Release (This=0x4b49838) returned 0x1 [0233.251] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.251] IUnknown:Release (This=0x4b49d00) returned 0x2 [0233.251] IUnknown:Release (This=0x4b49d00) returned 0x1 [0233.251] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.251] IUnknown:Release (This=0x4b4b818) returned 0x2 [0233.251] IUnknown:Release (This=0x4b4b818) returned 0x1 [0233.251] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.251] IUnknown:Release (This=0x4b4b9b0) returned 0x2 [0233.251] IUnknown:Release (This=0x4b4b9b0) returned 0x1 [0233.251] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.251] IUnknown:Release (This=0x4b49508) returned 0x2 [0233.251] IUnknown:Release (This=0x4b49508) returned 0x1 [0233.251] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.251] IUnknown:Release (This=0x4b4a828) returned 0x2 [0233.251] IUnknown:Release (This=0x4b4a828) returned 0x1 [0233.251] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.251] IUnknown:Release (This=0x4b4c010) returned 0x2 [0233.251] IUnknown:Release (This=0x4b4c010) returned 0x1 [0233.252] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.252] IUnknown:Release (This=0x4b4a690) returned 0x2 [0233.252] IUnknown:Release (This=0x4b4a690) returned 0x1 [0233.252] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.252] IUnknown:Release (This=0x4b4be78) returned 0x2 [0233.252] IUnknown:Release (This=0x4b4be78) returned 0x1 [0233.252] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.252] IUnknown:Release (This=0x4b4ae88) returned 0x2 [0233.252] IUnknown:Release (This=0x4b4ae88) returned 0x1 [0233.252] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.252] IUnknown:Release (This=0x4b4acf0) returned 0x2 [0233.252] IUnknown:Release (This=0x4b4acf0) returned 0x1 [0233.252] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.252] IUnknown:Release (This=0x4b4a9c0) returned 0x2 [0233.252] IUnknown:Release (This=0x4b4a9c0) returned 0x1 [0233.252] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.252] IUnknown:Release (This=0x4b4a4f8) returned 0x2 [0233.252] IUnknown:Release (This=0x4b4a4f8) returned 0x1 [0233.252] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.252] IUnknown:Release (This=0x4b4a1c8) returned 0x2 [0233.252] IUnknown:Release (This=0x4b4a1c8) returned 0x1 [0233.252] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.252] IUnknown:Release (This=0x4b49370) returned 0x2 [0233.252] IUnknown:Release (This=0x4b49370) returned 0x1 [0233.252] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.252] IUnknown:Release (This=0x4b4b020) returned 0x2 [0233.252] IUnknown:Release (This=0x4b4b020) returned 0x1 [0233.252] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.252] IUnknown:Release (This=0x4b49e98) returned 0x2 [0233.252] IUnknown:Release (This=0x4b49e98) returned 0x1 [0233.252] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.252] IUnknown:Release (This=0x4b4a030) returned 0x2 [0233.253] IUnknown:Release (This=0x4b4a030) returned 0x1 [0233.253] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.253] IUnknown:Release (This=0x4b46ec8) returned 0x2 [0233.253] IUnknown:Release (This=0x4b46ec8) returned 0x1 [0233.253] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.253] IUnknown:Release (This=0x4b46d30) returned 0x2 [0233.253] IUnknown:Release (This=0x4b46d30) returned 0x1 [0233.253] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.253] IUnknown:Release (This=0x4b46b98) returned 0x2 [0233.253] IUnknown:Release (This=0x4b46b98) returned 0x1 [0233.253] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.253] IUnknown:Release (This=0x4b46868) returned 0x2 [0233.253] IUnknown:Release (This=0x4b46868) returned 0x1 [0233.253] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.253] IUnknown:Release (This=0x4b466d0) returned 0x2 [0233.253] IUnknown:Release (This=0x4b466d0) returned 0x1 [0233.253] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.253] IUnknown:Release (This=0x4b46208) returned 0x2 [0233.253] IUnknown:Release (This=0x4b46208) returned 0x1 [0233.253] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.253] IUnknown:Release (This=0x4b47858) returned 0x2 [0233.253] IUnknown:Release (This=0x4b47858) returned 0x1 [0233.253] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.253] IUnknown:Release (This=0x4b45ba8) returned 0x2 [0233.253] IUnknown:Release (This=0x4b45ba8) returned 0x1 [0233.253] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.253] WbemLocator:IUnknown:Release (This=0x829b20) returned 0x1 [0233.253] WbemLocator:IUnknown:Release (This=0x829b20) returned 0x0 [0233.253] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.253] IUnknown:Release (This=0x4b48848) returned 0x2 [0233.253] IUnknown:Release (This=0x4b48848) returned 0x1 [0233.253] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.253] IUnknown:Release (This=0x4b48d10) returned 0x2 [0233.254] IUnknown:Release (This=0x4b48d10) returned 0x1 [0233.254] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.254] IUnknown:Release (This=0x4b486b0) returned 0x2 [0233.254] IUnknown:Release (This=0x4b486b0) returned 0x1 [0233.254] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.254] IUnknown:Release (This=0x4b46070) returned 0x2 [0233.254] IUnknown:Release (This=0x4b46070) returned 0x1 [0233.254] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.254] IUnknown:Release (This=0x4b48518) returned 0x2 [0233.254] IUnknown:Release (This=0x4b48518) returned 0x1 [0233.254] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.254] IUnknown:Release (This=0x4b476c0) returned 0x2 [0233.254] IUnknown:Release (This=0x4b476c0) returned 0x1 [0233.254] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.254] IUnknown:Release (This=0x4b463a0) returned 0x2 [0233.254] IUnknown:Release (This=0x4b463a0) returned 0x1 [0233.254] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.254] IUnknown:Release (This=0x4b48b78) returned 0x2 [0233.254] IUnknown:Release (This=0x4b48b78) returned 0x1 [0233.254] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.254] IUnknown:Release (This=0x4b47528) returned 0x2 [0233.254] IUnknown:Release (This=0x4b47528) returned 0x1 [0233.254] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.254] IUnknown:Release (This=0x4b46538) returned 0x2 [0233.254] IUnknown:Release (This=0x4b46538) returned 0x1 [0233.254] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.254] IUnknown:Release (This=0x4b471f8) returned 0x2 [0233.254] IUnknown:Release (This=0x4b471f8) returned 0x1 [0233.254] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.254] IUnknown:Release (This=0x4b45ed8) returned 0x2 [0233.254] IUnknown:Release (This=0x4b45ed8) returned 0x1 [0233.255] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.255] IUnknown:Release (This=0x4b47d20) returned 0x2 [0233.255] IUnknown:Release (This=0x4b47d20) returned 0x1 [0233.255] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.255] IUnknown:Release (This=0x4b47390) returned 0x2 [0233.255] IUnknown:Release (This=0x4b47390) returned 0x1 [0233.255] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.255] IUnknown:Release (This=0x4b479f0) returned 0x2 [0233.255] IUnknown:Release (This=0x4b479f0) returned 0x1 [0233.255] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.255] IUnknown:Release (This=0x4b46a00) returned 0x2 [0233.255] IUnknown:Release (This=0x4b46a00) returned 0x1 [0233.255] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.255] IUnknown:Release (This=0x4b481e8) returned 0x2 [0233.255] IUnknown:Release (This=0x4b481e8) returned 0x1 [0233.255] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.255] IUnknown:Release (This=0x4b48050) returned 0x2 [0233.255] IUnknown:Release (This=0x4b48050) returned 0x1 [0233.255] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.255] IUnknown:Release (This=0x4b47060) returned 0x2 [0233.255] IUnknown:Release (This=0x4b47060) returned 0x1 [0233.255] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.255] IUnknown:Release (This=0x4b489e0) returned 0x2 [0233.255] IUnknown:Release (This=0x4b489e0) returned 0x1 [0233.255] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.255] IUnknown:Release (This=0x4b48380) returned 0x2 [0233.255] IUnknown:Release (This=0x4b48380) returned 0x1 [0233.255] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.255] IUnknown:Release (This=0x4b47eb8) returned 0x2 [0233.255] IUnknown:Release (This=0x4b47eb8) returned 0x1 [0233.255] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.255] IUnknown:Release (This=0x4b083a0) returned 0x2 [0233.256] IUnknown:Release (This=0x4b083a0) returned 0x1 [0233.256] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.256] WbemLocator:IUnknown:Release (This=0x4b3d530) returned 0x1 [0233.256] WbemLocator:IUnknown:Release (This=0x4b3d530) returned 0x0 [0233.256] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.256] IUnknown:Release (This=0x4b07a10) returned 0x2 [0233.256] IUnknown:Release (This=0x4b07a10) returned 0x1 [0233.256] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.256] IUnknown:Release (This=0x4b07878) returned 0x2 [0233.256] IUnknown:Release (This=0x4b07878) returned 0x1 [0233.256] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.256] IUnknown:Release (This=0x4b08208) returned 0x2 [0233.256] IUnknown:Release (This=0x4b08208) returned 0x1 [0233.256] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.256] IUnknown:Release (This=0x4b08070) returned 0x2 [0233.256] IUnknown:Release (This=0x4b08070) returned 0x1 [0233.256] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.256] IUnknown:Release (This=0x4b07ed8) returned 0x2 [0233.256] IUnknown:Release (This=0x4b07ed8) returned 0x1 [0233.256] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.256] IUnknown:Release (This=0x4b07d40) returned 0x2 [0233.256] IUnknown:Release (This=0x4b07d40) returned 0x1 [0233.256] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.256] IUnknown:Release (This=0x4b07ba8) returned 0x2 [0233.256] IUnknown:Release (This=0x4b07ba8) returned 0x1 [0233.256] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.256] IUnknown:Release (This=0x4b05a30) returned 0x2 [0233.256] IUnknown:Release (This=0x4b05a30) returned 0x1 [0233.256] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.256] IUnknown:Release (This=0x4b06558) returned 0x2 [0233.256] IUnknown:Release (This=0x4b06558) returned 0x1 [0233.256] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.257] IUnknown:Release (This=0x4b05700) returned 0x2 [0233.257] IUnknown:Release (This=0x4b05700) returned 0x1 [0233.257] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.257] IUnknown:Release (This=0x4b05568) returned 0x2 [0233.257] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.257] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.257] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.257] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.257] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.257] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.257] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.257] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.257] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.257] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.257] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.257] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.257] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.257] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.257] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.257] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.257] WbemLocator:IUnknown:Release (This=0x4b3d570) returned 0x1 [0233.257] WbemLocator:IUnknown:Release (This=0x4b3d570) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.258] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.259] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.259] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.259] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.259] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.259] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.259] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.259] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.259] WbemLocator:IUnknown:Release (This=0x4b3d5b0) returned 0x1 [0233.259] WbemLocator:IUnknown:Release (This=0x4b3d5b0) returned 0x0 [0233.259] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.259] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.259] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.259] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.259] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.259] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.259] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.259] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.259] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.259] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.259] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.259] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.260] WbemLocator:IUnknown:Release (This=0x4b3d670) returned 0x1 [0233.260] WbemLocator:IUnknown:Release (This=0x4b3d670) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.261] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.262] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.262] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.262] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.262] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.262] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.262] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.262] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.262] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.262] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.262] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.262] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.262] WbemLocator:IUnknown:Release (This=0x4b3d630) returned 0x1 [0233.262] WbemLocator:IUnknown:Release (This=0x4b3d630) returned 0x0 [0233.262] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.262] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.262] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.262] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.262] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.262] CoGetContextToken (in: pToken=0x433fbe0 | out: pToken=0x433fbe0) returned 0x0 [0233.262] WbemLocator:IUnknown:Release (This=0x4b3d650) returned 0x1 [0233.262] WbemLocator:IUnknown:Release (This=0x4b3d650) returned 0x0 [0233.262] WbemLocator:IUnknown:Release (This=0x4b3d720) returned 0x1 [0233.263] WbemLocator:IUnknown:Release (This=0x4b3d720) returned 0x0 [0233.263] WbemLocator:IUnknown:Release (This=0x4b3d740) returned 0x1 [0233.263] WbemLocator:IUnknown:Release (This=0x4b3d740) returned 0x0 [0233.263] WbemLocator:IUnknown:Release (This=0x4b3d6f0) returned 0x1 [0233.263] WbemLocator:IUnknown:Release (This=0x4b3d6f0) returned 0x0 [0233.263] WbemLocator:IUnknown:Release (This=0x4b3d7f0) returned 0x1 [0233.263] WbemLocator:IUnknown:Release (This=0x4b3d7f0) returned 0x0 [0233.263] WbemLocator:IUnknown:Release (This=0x4b3d810) returned 0x1 [0233.263] WbemLocator:IUnknown:Release (This=0x4b3d810) returned 0x0 [0233.263] WbemLocator:IUnknown:Release (This=0x829c10) returned 0x1 [0233.263] WbemLocator:IUnknown:Release (This=0x829c10) returned 0x0 [0233.263] WbemLocator:IUnknown:Release (This=0x829c00) returned 0x1 [0233.263] WbemLocator:IUnknown:Release (This=0x829c00) returned 0x0 [0233.263] WbemLocator:IUnknown:Release (This=0x829a70) returned 0x1 [0233.263] WbemLocator:IUnknown:Release (This=0x829a70) returned 0x0 [0233.263] WbemLocator:IUnknown:Release (This=0x829d60) returned 0x1 [0233.263] WbemLocator:IUnknown:Release (This=0x829d60) returned 0x0 [0233.263] WbemLocator:IUnknown:Release (This=0x80a720) returned 0x1 [0233.263] WbemLocator:IUnknown:Release (This=0x80a720) returned 0x0 [0233.263] WbemLocator:IUnknown:Release (This=0x80a7a0) returned 0x1 [0233.263] WbemLocator:IUnknown:Release (This=0x80a7a0) returned 0x0 [0233.263] WbemLocator:IUnknown:Release (This=0x829e00) returned 0x1 [0233.264] WbemLocator:IUnknown:Release (This=0x829e00) returned 0x0 [0233.264] WbemLocator:IUnknown:Release (This=0x829ce0) returned 0x1 [0233.264] WbemLocator:IUnknown:Release (This=0x829ce0) returned 0x0 [0233.264] WbemLocator:IUnknown:Release (This=0x4b87ad8) returned 0x1 [0233.264] WbemLocator:IUnknown:Release (This=0x4b87ad8) returned 0x0 [0233.264] WbemLocator:IUnknown:Release (This=0x4b87b68) returned 0x1 [0233.264] WbemLocator:IUnknown:Release (This=0x4b87b68) returned 0x0 [0233.264] WbemLocator:IUnknown:Release (This=0x4b87c28) returned 0x1 [0233.264] WbemLocator:IUnknown:Release (This=0x4b87c28) returned 0x0 [0233.264] WbemLocator:IUnknown:Release (This=0x4b87ba8) returned 0x1 [0233.264] WbemLocator:IUnknown:Release (This=0x4b87ba8) returned 0x0 [0233.264] WbemLocator:IUnknown:Release (This=0x4b87d38) returned 0x1 [0233.264] WbemLocator:IUnknown:Release (This=0x4b87d38) returned 0x0 [0233.264] WbemLocator:IUnknown:Release (This=0x4b87da8) returned 0x1 [0233.264] WbemLocator:IUnknown:Release (This=0x4b87da8) returned 0x0 [0233.264] WbemLocator:IUnknown:Release (This=0x4b87cf8) returned 0x1 [0233.264] WbemLocator:IUnknown:Release (This=0x4b87cf8) returned 0x0 [0233.264] WbemLocator:IUnknown:Release (This=0x4b87d08) returned 0x1 [0233.264] WbemLocator:IUnknown:Release (This=0x4b87d08) returned 0x0 [0233.264] WbemLocator:IUnknown:Release (This=0x4b87d98) returned 0x1 [0233.264] WbemLocator:IUnknown:Release (This=0x4b87d98) returned 0x0 [0233.265] IUnknown:Release (This=0x4b67d68) returned 0x0 [0233.265] IUnknown:Release (This=0x4b67240) returned 0x0 [0233.265] IUnknown:Release (This=0x4b673d8) returned 0x0 [0233.265] IUnknown:Release (This=0x4b67bd0) returned 0x0 [0233.265] IUnknown:Release (This=0x4b670a8) returned 0x0 [0233.265] IUnknown:Release (This=0x4b66d78) returned 0x0 [0233.265] IUnknown:Release (This=0x4b648d0) returned 0x0 [0233.265] IUnknown:Release (This=0x4b645a0) returned 0x0 [0233.266] IUnknown:Release (This=0x4b63da8) returned 0x0 [0233.266] IUnknown:Release (This=0x4b64738) returned 0x0 [0233.266] IUnknown:Release (This=0x4b663e8) returned 0x0 [0233.266] IUnknown:Release (This=0x4b65d88) returned 0x0 [0233.266] IUnknown:Release (This=0x4b64408) returned 0x0 [0233.266] IUnknown:Release (This=0x4b65a58) returned 0x0 [0233.267] IUnknown:Release (This=0x4b63a78) returned 0x0 [0233.267] IUnknown:Release (This=0x4b65728) returned 0x0 [0233.267] IUnknown:Release (This=0x4b638e0) returned 0x0 [0233.267] IUnknown:Release (This=0x4b63418) returned 0x0 [0233.267] IUnknown:Release (This=0x4b65f20) returned 0x0 [0233.267] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.267] WbemLocator:IUnknown:Release (This=0x4b5e4b8) returned 0x1 [0233.267] IUnknown:Release (This=0x7b7468) returned 0x0 [0233.272] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.272] WbemLocator:IUnknown:Release (This=0x4b5e6b8) returned 0x1 [0233.272] IUnknown:Release (This=0x4b71c58) returned 0x0 [0233.276] IUnknown:Release (This=0x4b817a0) returned 0x0 [0233.276] IUnknown:Release (This=0x4b82130) returned 0x0 [0233.277] IUnknown:Release (This=0x4b66250) returned 0x0 [0233.277] IUnknown:Release (This=0x4b65590) returned 0x0 [0233.277] IUnknown:Release (This=0x4b653f8) returned 0x0 [0233.277] IUnknown:Release (This=0x4b66580) returned 0x0 [0233.277] IUnknown:Release (This=0x4b63f40) returned 0x0 [0233.277] IUnknown:Release (This=0x4b658c0) returned 0x0 [0233.277] IUnknown:Release (This=0x4b64c00) returned 0x0 [0233.278] IUnknown:Release (This=0x4b63c10) returned 0x0 [0233.278] IUnknown:Release (This=0x4b64a68) returned 0x0 [0233.278] IUnknown:Release (This=0x4b650c8) returned 0x0 [0233.278] IUnknown:Release (This=0x4b65bf0) returned 0x0 [0233.278] IUnknown:Release (This=0x4b63748) returned 0x0 [0233.278] IUnknown:Release (This=0x4b64270) returned 0x0 [0233.279] IUnknown:Release (This=0x4b64d98) returned 0x0 [0233.279] IUnknown:Release (This=0x4b635b0) returned 0x0 [0233.279] IUnknown:Release (This=0x4b660b8) returned 0x0 [0233.279] IUnknown:Release (This=0x4b64f30) returned 0x0 [0233.279] IUnknown:Release (This=0x4b65260) returned 0x0 [0233.279] IUnknown:Release (This=0x4b615d0) returned 0x0 [0233.280] IUnknown:Release (This=0x4b61438) returned 0x0 [0233.280] IUnknown:Release (This=0x4b612a0) returned 0x0 [0233.280] IUnknown:Release (This=0x4b61108) returned 0x0 [0233.280] IUnknown:Release (This=0x4b62db8) returned 0x0 [0233.280] IUnknown:Release (This=0x4b60dd8) returned 0x0 [0233.280] IUnknown:Release (This=0x4b60aa8) returned 0x0 [0233.281] IUnknown:Release (This=0x4b60910) returned 0x0 [0233.281] IUnknown:Release (This=0x4b62c20) returned 0x0 [0233.281] IUnknown:Release (This=0x4b61c30) returned 0x0 [0233.281] IUnknown:Release (This=0x4b61f60) returned 0x0 [0233.281] IUnknown:Release (This=0x4b60778) returned 0x0 [0233.282] IUnknown:Release (This=0x4b61dc8) returned 0x0 [0233.282] IUnknown:Release (This=0x4b602b0) returned 0x0 [0233.282] IUnknown:Release (This=0x4b61a98) returned 0x0 [0233.283] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.283] WbemLocator:IUnknown:Release (This=0x4b5fbb8) returned 0x1 [0233.283] IUnknown:Release (This=0x4b72040) returned 0x0 [0233.300] IUnknown:Release (This=0x4b2c390) returned 0x0 [0233.300] IUnknown:Release (This=0x4b678a0) returned 0x0 [0233.300] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.300] WbemLocator:IUnknown:Release (This=0x4b14850) returned 0x1 [0233.300] IUnknown:Release (This=0x7b75f8) returned 0x0 [0233.343] IUnknown:Release (This=0x4b29888) returned 0x0 [0233.343] IUnknown:Release (This=0x4b28a30) returned 0x0 [0233.345] IUnknown:Release (This=0x4b2aba8) returned 0x0 [0233.345] IUnknown:Release (This=0x4b28bc8) returned 0x0 [0233.345] IUnknown:Release (This=0x4b2a548) returned 0x0 [0233.345] IUnknown:Release (This=0x4b2bb98) returned 0x0 [0233.346] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.346] WbemLocator:IUnknown:Release (This=0x4b5f9b8) returned 0x1 [0233.346] IUnknown:Release (This=0x7b73a0) returned 0x0 [0233.353] IUnknown:Release (This=0x4b630e8) returned 0x0 [0233.353] IUnknown:Release (This=0x4b60118) returned 0x0 [0233.353] IUnknown:Release (This=0x4b62758) returned 0x0 [0233.353] IUnknown:Release (This=0x4b60c40) returned 0x0 [0233.353] IUnknown:Release (This=0x4b625c0) returned 0x0 [0233.353] IUnknown:Release (This=0x4b62428) returned 0x0 [0233.353] IUnknown:Release (This=0x4b63280) returned 0x0 [0233.353] IUnknown:Release (This=0x4b62a88) returned 0x0 [0233.354] IUnknown:Release (This=0x4b60448) returned 0x0 [0233.354] IUnknown:Release (This=0x4b62290) returned 0x0 [0233.354] IUnknown:Release (This=0x4b62f50) returned 0x0 [0233.354] IUnknown:Release (This=0x4b620f8) returned 0x0 [0233.354] IUnknown:Release (This=0x4b61768) returned 0x0 [0233.354] IUnknown:Release (This=0x4b605e0) returned 0x0 [0233.354] IUnknown:Release (This=0x4b61900) returned 0x0 [0233.355] IUnknown:Release (This=0x4b60f70) returned 0x0 [0233.355] IUnknown:Release (This=0x4b55290) returned 0x0 [0233.355] IUnknown:Release (This=0x4b56748) returned 0x0 [0233.355] IUnknown:Release (This=0x4b565b0) returned 0x0 [0233.355] IUnknown:Release (This=0x4b560e8) returned 0x0 [0233.355] IUnknown:Release (This=0x4b550f8) returned 0x0 [0233.355] IUnknown:Release (This=0x4b54dc8) returned 0x0 [0233.355] IUnknown:Release (This=0x4b54a98) returned 0x0 [0233.356] IUnknown:Release (This=0x4b56280) returned 0x0 [0233.356] IUnknown:Release (This=0x4b54900) returned 0x0 [0233.356] IUnknown:Release (This=0x4b56da8) returned 0x0 [0233.356] IUnknown:Release (This=0x4b54768) returned 0x0 [0233.356] IUnknown:Release (This=0x4b54438) returned 0x0 [0233.356] IUnknown:Release (This=0x4b54108) returned 0x0 [0233.356] IUnknown:Release (This=0x4b56418) returned 0x0 [0233.356] IUnknown:Release (This=0x4b54c30) returned 0x0 [0233.357] IUnknown:Release (This=0x4b55f50) returned 0x0 [0233.357] IUnknown:Release (This=0x4b570d8) returned 0x0 [0233.357] IUnknown:Release (This=0x4b80618) returned 0x0 [0233.357] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.357] WbemLocator:IUnknown:Release (This=0x4b5efb8) returned 0x1 [0233.357] IUnknown:Release (This=0x7b81b0) returned 0x0 [0233.362] CloseHandle (hObject=0x410) returned 1 [0233.362] CloseHandle (hObject=0x428) returned 1 [0233.363] IUnknown:Release (This=0x4b55db8) returned 0x0 [0233.363] IUnknown:Release (This=0x4b555c0) returned 0x0 [0233.363] IUnknown:Release (This=0x4b56f40) returned 0x0 [0233.363] IUnknown:Release (This=0x4b55c20) returned 0x0 [0233.363] IUnknown:Release (This=0x4b55a88) returned 0x0 [0233.363] IUnknown:Release (This=0x4b542a0) returned 0x0 [0233.364] IUnknown:Release (This=0x4b568e0) returned 0x0 [0233.364] IUnknown:Release (This=0x4b57270) returned 0x0 [0233.364] IUnknown:Release (This=0x4b56a78) returned 0x0 [0233.364] IUnknown:Release (This=0x4b558f0) returned 0x0 [0233.364] IUnknown:Release (This=0x4b55758) returned 0x0 [0233.364] IUnknown:Release (This=0x4b54f60) returned 0x0 [0233.364] IUnknown:Release (This=0x4b55428) returned 0x0 [0233.364] IUnknown:Release (This=0x4b545d0) returned 0x0 [0233.365] IUnknown:Release (This=0x4b5b890) returned 0x0 [0233.365] IUnknown:Release (This=0x4b5b3c8) returned 0x0 [0233.365] IUnknown:Release (This=0x4b5b098) returned 0x0 [0233.365] IUnknown:Release (This=0x4b5af00) returned 0x0 [0233.365] IUnknown:Release (This=0x4b5abd0) returned 0x0 [0233.365] IUnknown:Release (This=0x4b5a708) returned 0x0 [0233.365] IUnknown:Release (This=0x4b5ad68) returned 0x0 [0233.365] IUnknown:Release (This=0x4b5aa38) returned 0x0 [0233.366] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.366] WbemLocator:IUnknown:Release (This=0x4b5c1b8) returned 0x1 [0233.366] IUnknown:Release (This=0x4b712f8) returned 0x0 [0233.367] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.367] WbemLocator:IUnknown:Release (This=0x81e000) returned 0x1 [0233.367] IUnknown:Release (This=0x7b80e8) returned 0x0 [0233.394] IUnknown:Release (This=0x4b2a218) returned 0x0 [0233.394] IUnknown:Release (This=0x4b29228) returned 0x0 [0233.394] IUnknown:Release (This=0x4b28700) returned 0x0 [0233.394] IUnknown:Release (This=0x4b2aed8) returned 0x0 [0233.395] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.395] WbemLocator:IUnknown:Release (This=0x4b5f2b8) returned 0x1 [0233.395] IUnknown:Release (This=0x4b71f78) returned 0x0 [0233.396] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.396] WbemLocator:IUnknown:Release (This=0x4b5d7b8) returned 0x1 [0233.396] IUnknown:Release (This=0x4b70420) returned 0x0 [0233.397] IUnknown:Release (This=0x4b5b230) returned 0x0 [0233.397] IUnknown:Release (This=0x4b5a8a0) returned 0x0 [0233.398] IUnknown:Release (This=0x4b5bbc0) returned 0x0 [0233.398] IUnknown:Release (This=0x4b5bef0) returned 0x0 [0233.398] IUnknown:Release (This=0x4b5b560) returned 0x0 [0233.398] IUnknown:Release (This=0x4b5ba28) returned 0x0 [0233.399] IUnknown:Release (This=0x4b5b6f8) returned 0x0 [0233.399] IUnknown:Release (This=0x4b59be0) returned 0x0 [0233.400] IUnknown:Release (This=0x4b5a570) returned 0x0 [0233.400] IUnknown:Release (This=0x4b59a48) returned 0x0 [0233.400] IUnknown:Release (This=0x4b5a240) returned 0x0 [0233.400] IUnknown:Release (This=0x4b580c8) returned 0x0 [0233.400] IUnknown:Release (This=0x4b57408) returned 0x0 [0233.400] IUnknown:Release (This=0x4b588c0) returned 0x0 [0233.400] IUnknown:Release (This=0x4b5a0a8) returned 0x0 [0233.400] IUnknown:Release (This=0x4b598b0) returned 0x0 [0233.401] IUnknown:Release (This=0x4b57738) returned 0x0 [0233.401] IUnknown:Release (This=0x4b58590) returned 0x0 [0233.401] IUnknown:Release (This=0x4b57f30) returned 0x0 [0233.401] IUnknown:Release (This=0x4b59f10) returned 0x0 [0233.401] IUnknown:Release (This=0x4b57a68) returned 0x0 [0233.401] IUnknown:Release (This=0x4b58d88) returned 0x0 [0233.401] IUnknown:Release (This=0x4b59718) returned 0x0 [0233.401] IUnknown:Release (This=0x4b58bf0) returned 0x0 [0233.402] IUnknown:Release (This=0x4b5a3d8) returned 0x0 [0233.402] IUnknown:Release (This=0x4b593e8) returned 0x0 [0233.402] IUnknown:Release (This=0x4b59250) returned 0x0 [0233.402] IUnknown:Release (This=0x4b590b8) returned 0x0 [0233.402] IUnknown:Release (This=0x4b58a58) returned 0x0 [0233.402] IUnknown:Release (This=0x4b58728) returned 0x0 [0233.402] IUnknown:Release (This=0x4b578d0) returned 0x0 [0233.402] IUnknown:Release (This=0x4b59580) returned 0x0 [0233.403] IUnknown:Release (This=0x4b58f20) returned 0x0 [0233.403] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.403] WbemLocator:IUnknown:Release (This=0x81d000) returned 0x1 [0233.403] IUnknown:Release (This=0x7b8020) returned 0x0 [0233.409] IUnknown:Release (This=0x4b81608) returned 0x0 [0233.409] IUnknown:Release (This=0x4b58260) returned 0x0 [0233.409] IUnknown:Release (This=0x4b575a0) returned 0x0 [0233.409] IUnknown:Release (This=0x4b57c00) returned 0x0 [0233.409] IUnknown:Release (This=0x4b59d78) returned 0x0 [0233.410] IUnknown:Release (This=0x4b57d98) returned 0x0 [0233.410] IUnknown:Release (This=0x4b4d660) returned 0x0 [0233.410] IUnknown:Release (This=0x4b4d4c8) returned 0x0 [0233.410] IUnknown:Release (This=0x4b4c808) returned 0x0 [0233.410] IUnknown:Release (This=0x4b4c4d8) returned 0x0 [0233.410] IUnknown:Release (This=0x4b4d330) returned 0x0 [0233.410] IUnknown:Release (This=0x4b4d198) returned 0x0 [0233.410] IUnknown:Release (This=0x4b4d000) returned 0x0 [0233.411] IUnknown:Release (This=0x4b4c340) returned 0x0 [0233.411] IUnknown:Release (This=0x4b4ce68) returned 0x0 [0233.411] IUnknown:Release (This=0x4b4d7f8) returned 0x0 [0233.411] IUnknown:Release (This=0x4b4ccd0) returned 0x0 [0233.411] IUnknown:Release (This=0x4b4d990) returned 0x0 [0233.411] IUnknown:Release (This=0x4b4c9a0) returned 0x0 [0233.411] IUnknown:Release (This=0x4b4c1a8) returned 0x0 [0233.411] IUnknown:Release (This=0x4b4c670) returned 0x0 [0233.412] IUnknown:Release (This=0x4b4cb38) returned 0x0 [0233.412] IUnknown:Release (This=0x4b496a0) returned 0x0 [0233.412] IUnknown:Release (This=0x4b491d8) returned 0x0 [0233.412] IUnknown:Release (This=0x4b4bce0) returned 0x0 [0233.412] IUnknown:Release (This=0x4b4bb48) returned 0x0 [0233.412] IUnknown:Release (This=0x4b49040) returned 0x0 [0233.412] IUnknown:Release (This=0x4b4b4e8) returned 0x0 [0233.412] IUnknown:Release (This=0x4b4b350) returned 0x0 [0233.413] IUnknown:Release (This=0x4b49b68) returned 0x0 [0233.413] IUnknown:Release (This=0x4b499d0) returned 0x0 [0233.413] IUnknown:Release (This=0x4b4b1b8) returned 0x0 [0233.413] IUnknown:Release (This=0x4b4b680) returned 0x0 [0233.413] IUnknown:Release (This=0x4b4a360) returned 0x0 [0233.413] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.413] WbemLocator:IUnknown:Release (This=0x4b5ecb8) returned 0x1 [0233.413] IUnknown:Release (This=0x4b71de8) returned 0x0 [0233.415] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.415] WbemLocator:IUnknown:Release (This=0x81de00) returned 0x1 [0233.415] IUnknown:Release (This=0x7b7e90) returned 0x0 [0233.423] IUnknown:Release (This=0x4b48ea8) returned 0x0 [0233.423] IUnknown:Release (This=0x4b49838) returned 0x0 [0233.423] IUnknown:Release (This=0x4b49d00) returned 0x0 [0233.423] IUnknown:Release (This=0x4b4b818) returned 0x0 [0233.423] IUnknown:Release (This=0x4b4b9b0) returned 0x0 [0233.423] IUnknown:Release (This=0x4b49508) returned 0x0 [0233.424] IUnknown:Release (This=0x4b4a828) returned 0x0 [0233.424] IUnknown:Release (This=0x4b4c010) returned 0x0 [0233.424] IUnknown:Release (This=0x4b4a690) returned 0x0 [0233.424] IUnknown:Release (This=0x4b4be78) returned 0x0 [0233.424] IUnknown:Release (This=0x4b4ae88) returned 0x0 [0233.424] IUnknown:Release (This=0x4b4acf0) returned 0x0 [0233.424] IUnknown:Release (This=0x4b4a9c0) returned 0x0 [0233.424] IUnknown:Release (This=0x4b4a4f8) returned 0x0 [0233.425] IUnknown:Release (This=0x4b4a1c8) returned 0x0 [0233.425] IUnknown:Release (This=0x4b49370) returned 0x0 [0233.425] IUnknown:Release (This=0x4b4b020) returned 0x0 [0233.425] IUnknown:Release (This=0x4b49e98) returned 0x0 [0233.425] IUnknown:Release (This=0x4b4a030) returned 0x0 [0233.425] IUnknown:Release (This=0x4b46ec8) returned 0x0 [0233.425] IUnknown:Release (This=0x4b46d30) returned 0x0 [0233.425] IUnknown:Release (This=0x4b46b98) returned 0x0 [0233.426] IUnknown:Release (This=0x4b46868) returned 0x0 [0233.426] IUnknown:Release (This=0x4b466d0) returned 0x0 [0233.426] IUnknown:Release (This=0x4b46208) returned 0x0 [0233.426] IUnknown:Release (This=0x4b47858) returned 0x0 [0233.426] IUnknown:Release (This=0x4b45ba8) returned 0x0 [0233.426] IUnknown:Release (This=0x4b7faf0) returned 0x0 [0233.426] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.426] WbemLocator:IUnknown:Release (This=0x81d600) returned 0x1 [0233.426] IUnknown:Release (This=0x7b8278) returned 0x0 [0233.432] IUnknown:Release (This=0x4b81f98) returned 0x0 [0233.432] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.432] WbemLocator:IUnknown:Release (This=0x4b5e9b8) returned 0x1 [0233.432] IUnknown:Release (This=0x4b71ac8) returned 0x0 [0233.437] CloseHandle (hObject=0x418) returned 1 [0233.437] CloseHandle (hObject=0x46c) returned 1 [0233.437] IUnknown:Release (This=0x4b48848) returned 0x0 [0233.438] IUnknown:Release (This=0x4b48d10) returned 0x0 [0233.438] IUnknown:Release (This=0x4b486b0) returned 0x0 [0233.438] IUnknown:Release (This=0x4b46070) returned 0x0 [0233.438] IUnknown:Release (This=0x4b48518) returned 0x0 [0233.438] IUnknown:Release (This=0x4b476c0) returned 0x0 [0233.438] IUnknown:Release (This=0x4b463a0) returned 0x0 [0233.438] IUnknown:Release (This=0x4b48b78) returned 0x0 [0233.439] IUnknown:Release (This=0x4b47528) returned 0x0 [0233.439] IUnknown:Release (This=0x4b46538) returned 0x0 [0233.439] IUnknown:Release (This=0x4b471f8) returned 0x0 [0233.439] IUnknown:Release (This=0x4b45ed8) returned 0x0 [0233.439] IUnknown:Release (This=0x4b47d20) returned 0x0 [0233.439] IUnknown:Release (This=0x4b47390) returned 0x0 [0233.439] IUnknown:Release (This=0x4b479f0) returned 0x0 [0233.439] IUnknown:Release (This=0x4b46a00) returned 0x0 [0233.440] IUnknown:Release (This=0x4b481e8) returned 0x0 [0233.440] IUnknown:Release (This=0x4b48050) returned 0x0 [0233.440] IUnknown:Release (This=0x4b47060) returned 0x0 [0233.440] IUnknown:Release (This=0x4b489e0) returned 0x0 [0233.440] IUnknown:Release (This=0x4b48380) returned 0x0 [0233.440] IUnknown:Release (This=0x4b47eb8) returned 0x0 [0233.440] IUnknown:Release (This=0x4b083a0) returned 0x0 [0233.442] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.442] WbemLocator:IUnknown:Release (This=0x81df00) returned 0x1 [0233.442] IUnknown:Release (This=0x7b7b70) returned 0x0 [0233.449] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.449] WbemLocator:IUnknown:Release (This=0x4b5c3b8) returned 0x1 [0233.449] IUnknown:Release (This=0x4b70358) returned 0x0 [0233.460] IUnknown:Release (This=0x4b29a20) returned 0x0 [0233.460] IUnknown:Release (This=0x4b07a10) returned 0x0 [0233.460] IUnknown:Release (This=0x4b07878) returned 0x0 [0233.460] IUnknown:Release (This=0x4b08208) returned 0x0 [0233.461] IUnknown:Release (This=0x4b08070) returned 0x0 [0233.461] IUnknown:Release (This=0x4b07ed8) returned 0x0 [0233.461] IUnknown:Release (This=0x4b07d40) returned 0x0 [0233.461] IUnknown:Release (This=0x4b07ba8) returned 0x0 [0233.461] IUnknown:Release (This=0x4b05a30) returned 0x0 [0233.461] IUnknown:Release (This=0x4b06558) returned 0x0 [0233.461] IUnknown:Release (This=0x4b05700) returned 0x0 [0233.461] IUnknown:Release (This=0x4b05568) returned 0x0 [0233.462] IUnknown:Release (This=0x4b053d0) returned 0x0 [0233.462] IUnknown:Release (This=0x4b063c0) returned 0x0 [0233.462] IUnknown:Release (This=0x4b04bd8) returned 0x0 [0233.462] IUnknown:Release (This=0x4b04a40) returned 0x0 [0233.462] IUnknown:Release (This=0x4b048a8) returned 0x0 [0233.462] IUnknown:Release (This=0x4b050a0) returned 0x0 [0233.462] IUnknown:Release (This=0x4b04f08) returned 0x0 [0233.462] IUnknown:Release (This=0x4b06228) returned 0x0 [0233.463] IUnknown:Release (This=0x4b076e0) returned 0x0 [0233.463] IUnknown:Release (This=0x4b06ee8) returned 0x0 [0233.463] IUnknown:Release (This=0x4b04578) returned 0x0 [0233.463] IUnknown:Release (This=0x4b06090) returned 0x0 [0233.463] IUnknown:Release (This=0x4b06bb8) returned 0x0 [0233.464] IUnknown:Release (This=0x4b05ef8) returned 0x0 [0233.464] IUnknown:Release (This=0x4b04d70) returned 0x0 [0233.464] IUnknown:Release (This=0x4b81938) returned 0x0 [0233.464] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.464] WbemLocator:IUnknown:Release (This=0x81c900) returned 0x1 [0233.464] IUnknown:Release (This=0x7b7918) returned 0x0 [0233.472] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.472] WbemLocator:IUnknown:Release (This=0x4b5dbb8) returned 0x1 [0233.472] IUnknown:Release (This=0x4b70290) returned 0x0 [0233.482] IUnknown:Release (This=0x4b81470) returned 0x0 [0233.482] IUnknown:Release (This=0x4b06a20) returned 0x0 [0233.482] IUnknown:Release (This=0x4b07080) returned 0x0 [0233.482] IUnknown:Release (This=0x4b07548) returned 0x0 [0233.482] IUnknown:Release (This=0x4b073b0) returned 0x0 [0233.482] IUnknown:Release (This=0x4b04710) returned 0x0 [0233.483] IUnknown:Release (This=0x4b05d60) returned 0x0 [0233.483] IUnknown:Release (This=0x4b05bc8) returned 0x0 [0233.483] IUnknown:Release (This=0x4b07218) returned 0x0 [0233.483] IUnknown:Release (This=0x4b05898) returned 0x0 [0233.483] IUnknown:Release (This=0x4b06d50) returned 0x0 [0233.483] IUnknown:Release (This=0x4b06888) returned 0x0 [0233.483] IUnknown:Release (This=0x4b066f0) returned 0x0 [0233.483] IUnknown:Release (This=0x82bca0) returned 0x0 [0233.484] IUnknown:Release (This=0x82bb08) returned 0x0 [0233.484] IUnknown:Release (This=0x82b640) returned 0x0 [0233.484] IUnknown:Release (This=0x82b310) returned 0x0 [0233.484] IUnknown:Release (This=0x82ab18) returned 0x0 [0233.484] IUnknown:Release (This=0x82a980) returned 0x0 [0233.484] IUnknown:Release (This=0x82b178) returned 0x0 [0233.484] IUnknown:Release (This=0x82b4a8) returned 0x0 [0233.485] IUnknown:Release (This=0x82a4b8) returned 0x0 [0233.485] IUnknown:Release (This=0x829e58) returned 0x0 [0233.485] IUnknown:Release (This=0x82a320) returned 0x0 [0233.485] IUnknown:Release (This=0x82cfc0) returned 0x0 [0233.485] IUnknown:Release (This=0x82acb0) returned 0x0 [0233.485] IUnknown:Release (This=0x82a188) returned 0x0 [0233.485] IUnknown:Release (This=0x82caf8) returned 0x0 [0233.486] IUnknown:Release (This=0x82afe0) returned 0x0 [0233.486] IUnknown:Release (This=0x4b7f7c0) returned 0x0 [0233.486] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.486] WbemLocator:IUnknown:Release (This=0x81d800) returned 0x1 [0233.486] IUnknown:Release (This=0x7b7d00) returned 0x0 [0233.517] IUnknown:Release (This=0x4b7f628) returned 0x0 [0233.517] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.518] WbemLocator:IUnknown:Release (This=0x4b5feb8) returned 0x1 [0233.518] IUnknown:Release (This=0x4b71b90) returned 0x0 [0233.519] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.519] WbemLocator:IUnknown:Release (This=0x4b5cdb8) returned 0x1 [0233.519] IUnknown:Release (This=0x4b704e8) returned 0x0 [0233.522] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.522] WbemLocator:IUnknown:Release (This=0x4b5fab8) returned 0x1 [0233.522] IUnknown:Release (This=0x4b71eb0) returned 0x0 [0233.523] IUnknown:Release (This=0x82a7e8) returned 0x0 [0233.523] IUnknown:Release (This=0x82b970) returned 0x0 [0233.523] IUnknown:Release (This=0x82c7c8) returned 0x0 [0233.524] IUnknown:Release (This=0x82c498) returned 0x0 [0233.524] IUnknown:Release (This=0x82c300) returned 0x0 [0233.524] IUnknown:Release (This=0x82ae48) returned 0x0 [0233.524] IUnknown:Release (This=0x82c168) returned 0x0 [0233.524] IUnknown:Release (This=0x82bfd0) returned 0x0 [0233.524] IUnknown:Release (This=0x82cc90) returned 0x0 [0233.524] IUnknown:Release (This=0x829ff0) returned 0x0 [0233.524] IUnknown:Release (This=0x82be38) returned 0x0 [0233.525] IUnknown:Release (This=0x82c960) returned 0x0 [0233.525] IUnknown:Release (This=0x82c630) returned 0x0 [0233.525] IUnknown:Release (This=0x82ce28) returned 0x0 [0233.525] IUnknown:Release (This=0x82b7d8) returned 0x0 [0233.525] IUnknown:Release (This=0x82d158) returned 0x0 [0233.525] IUnknown:Release (This=0x82dc80) returned 0x0 [0233.525] IUnknown:Release (This=0x82d950) returned 0x0 [0233.525] IUnknown:Release (This=0x82d488) returned 0x0 [0233.526] IUnknown:Release (This=0x82d7b8) returned 0x0 [0233.526] IUnknown:Release (This=0x82d620) returned 0x0 [0233.526] IUnknown:Release (This=0x82d2f0) returned 0x0 [0233.526] IUnknown:Release (This=0x82dae8) returned 0x0 [0233.526] IUnknown:Release (This=0x4b1aa60) returned 0x0 [0233.526] IUnknown:Release (This=0x4b19a70) returned 0x0 [0233.526] IUnknown:Release (This=0x4b1a598) returned 0x0 [0233.526] IUnknown:Release (This=0x4b198d8) returned 0x0 [0233.527] IUnknown:Release (This=0x4b19740) returned 0x0 [0233.527] IUnknown:Release (This=0x4b195a8) returned 0x0 [0233.527] IUnknown:Release (This=0x4b19da0) returned 0x0 [0233.527] IUnknown:Release (This=0x4b19f38) returned 0x0 [0233.527] IUnknown:Release (This=0x4b18420) returned 0x0 [0233.527] IUnknown:Release (This=0x4b190e0) returned 0x0 [0233.527] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.527] WbemLocator:IUnknown:Release (This=0x4b15350) returned 0x1 [0233.527] IUnknown:Release (This=0x7b7aa8) returned 0x0 [0233.533] IUnknown:Release (This=0x4b66f10) returned 0x0 [0233.533] IUnknown:Release (This=0x4b18db0) returned 0x0 [0233.533] IUnknown:Release (This=0x4b180f0) returned 0x0 [0233.533] IUnknown:Release (This=0x4b1a400) returned 0x0 [0233.534] IUnknown:Release (This=0x4b185b8) returned 0x0 [0233.534] IUnknown:Release (This=0x4b18288) returned 0x0 [0233.534] IUnknown:Release (This=0x4b1a8c8) returned 0x0 [0233.534] IUnknown:Release (This=0x4b17f58) returned 0x0 [0233.534] IUnknown:Release (This=0x4b1a0d0) returned 0x0 [0233.534] IUnknown:Release (This=0x4b188e8) returned 0x0 [0233.534] IUnknown:Release (This=0x4b17dc0) returned 0x0 [0233.534] IUnknown:Release (This=0x4b1af28) returned 0x0 [0233.535] IUnknown:Release (This=0x4b18c18) returned 0x0 [0233.535] IUnknown:Release (This=0x4b1a730) returned 0x0 [0233.535] IUnknown:Release (This=0x4b18f48) returned 0x0 [0233.535] IUnknown:Release (This=0x4b1ad90) returned 0x0 [0233.535] IUnknown:Release (This=0x4b18a80) returned 0x0 [0233.535] IUnknown:Release (This=0x4b1abf8) returned 0x0 [0233.535] IUnknown:Release (This=0x4b18750) returned 0x0 [0233.535] IUnknown:Release (This=0x4b19278) returned 0x0 [0233.536] IUnknown:Release (This=0x4b19c08) returned 0x0 [0233.536] IUnknown:Release (This=0x4b1a268) returned 0x0 [0233.536] IUnknown:Release (This=0x4b1bbe8) returned 0x0 [0233.536] IUnknown:Release (This=0x4b1ba50) returned 0x0 [0233.536] IUnknown:Release (This=0x4b1b0c0) returned 0x0 [0233.536] IUnknown:Release (This=0x4b1b8b8) returned 0x0 [0233.536] IUnknown:Release (This=0x4b1b588) returned 0x0 [0233.536] IUnknown:Release (This=0x4b1b3f0) returned 0x0 [0233.537] IUnknown:Release (This=0x4b1b258) returned 0x0 [0233.537] IUnknown:Release (This=0x4b1b720) returned 0x0 [0233.537] IUnknown:Release (This=0x4b23590) returned 0x0 [0233.537] IUnknown:Release (This=0x4b23260) returned 0x0 [0233.537] IUnknown:Release (This=0x4b230c8) returned 0x0 [0233.537] IUnknown:Release (This=0x4b233f8) returned 0x0 [0233.537] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.537] WbemLocator:IUnknown:Release (This=0x4b14e50) returned 0x1 [0233.537] IUnknown:Release (This=0x7b7850) returned 0x0 [0233.544] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.544] WbemLocator:IUnknown:Release (This=0x4b5fcb8) returned 0x1 [0233.544] IUnknown:Release (This=0x4b71d20) returned 0x0 [0233.547] IUnknown:Release (This=0x4b23728) returned 0x0 [0233.548] IUnknown:Release (This=0x4b238c0) returned 0x0 [0233.548] IUnknown:Release (This=0x4b23bf0) returned 0x0 [0233.548] IUnknown:Release (This=0x4b20290) returned 0x0 [0233.548] IUnknown:Release (This=0x4b20f50) returned 0x0 [0233.548] IUnknown:Release (This=0x4b22f30) returned 0x0 [0233.548] IUnknown:Release (This=0x4b22408) returned 0x0 [0233.548] IUnknown:Release (This=0x4b22d98) returned 0x0 [0233.549] IUnknown:Release (This=0x4b21a78) returned 0x0 [0233.549] IUnknown:Release (This=0x4b22a68) returned 0x0 [0233.549] IUnknown:Release (This=0x4b20428) returned 0x0 [0233.549] IUnknown:Release (This=0x4b218e0) returned 0x0 [0233.549] IUnknown:Release (This=0x4b20db8) returned 0x0 [0233.549] IUnknown:Release (This=0x4b21748) returned 0x0 [0233.549] IUnknown:Release (This=0x4b200f8) returned 0x0 [0233.549] IUnknown:Release (This=0x4b21f40) returned 0x0 [0233.550] IUnknown:Release (This=0x4b215b0) returned 0x0 [0233.550] IUnknown:Release (This=0x4b21da8) returned 0x0 [0233.550] IUnknown:Release (This=0x4b20c20) returned 0x0 [0233.550] IUnknown:Release (This=0x4b1ff60) returned 0x0 [0233.550] IUnknown:Release (This=0x4b22270) returned 0x0 [0233.550] IUnknown:Release (This=0x4b21418) returned 0x0 [0233.550] IUnknown:Release (This=0x4b22c00) returned 0x0 [0233.550] IUnknown:Release (This=0x4b22738) returned 0x0 [0233.551] IUnknown:Release (This=0x4b220d8) returned 0x0 [0233.551] IUnknown:Release (This=0x4b210e8) returned 0x0 [0233.551] IUnknown:Release (This=0x4b21280) returned 0x0 [0233.551] IUnknown:Release (This=0x4b208f0) returned 0x0 [0233.551] IUnknown:Release (This=0x4b21c10) returned 0x0 [0233.551] IUnknown:Release (This=0x4b20758) returned 0x0 [0233.551] IUnknown:Release (This=0x4b20a88) returned 0x0 [0233.551] IUnknown:Release (This=0x4b228d0) returned 0x0 [0233.551] IUnknown:Release (This=0x4b1fdc8) returned 0x0 [0233.552] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.552] WbemLocator:IUnknown:Release (This=0x4b14550) returned 0x1 [0233.552] IUnknown:Release (This=0x7b7788) returned 0x0 [0233.557] IUnknown:Release (This=0x4b66a48) returned 0x0 [0233.558] IUnknown:Release (This=0x4b205c0) returned 0x0 [0233.560] IUnknown:Release (This=0x4ae6550) returned 0x0 [0233.560] IUnknown:Release (This=0x4ae6220) returned 0x0 [0233.560] IUnknown:Release (This=0x4ae7ed0) returned 0x0 [0233.560] IUnknown:Release (This=0x4ae7a08) returned 0x0 [0233.560] IUnknown:Release (This=0x4ae7870) returned 0x0 [0233.560] IUnknown:Release (This=0x4ae7540) returned 0x0 [0233.561] IUnknown:Release (This=0x4ae6ee0) returned 0x0 [0233.561] IUnknown:Release (This=0x4ae6088) returned 0x0 [0233.561] IUnknown:Release (This=0x4ae76d8) returned 0x0 [0233.561] IUnknown:Release (This=0x4ae6d48) returned 0x0 [0233.561] IUnknown:Release (This=0x4ae7210) returned 0x0 [0233.561] IUnknown:Release (This=0x4ae63b8) returned 0x0 [0233.561] IUnknown:Release (This=0x4ae7ba0) returned 0x0 [0233.561] IUnknown:Release (This=0x4ae6bb0) returned 0x0 [0233.562] IUnknown:Release (This=0x4ae6a18) returned 0x0 [0233.562] IUnknown:Release (This=0x4ae7d38) returned 0x0 [0233.562] IUnknown:Release (This=0x4ae7078) returned 0x0 [0233.562] IUnknown:Release (This=0x4ae6880) returned 0x0 [0233.562] IUnknown:Release (This=0x4ae73a8) returned 0x0 [0233.562] IUnknown:Release (This=0x4ae66e8) returned 0x0 [0233.562] IUnknown:Release (This=0x4ae8a30) returned 0x0 [0233.562] IUnknown:Release (This=0x4ae9ee8) returned 0x0 [0233.565] IUnknown:Release (This=0x4ae9090) returned 0x0 [0233.565] IUnknown:Release (This=0x4ae9a20) returned 0x0 [0233.565] IUnknown:Release (This=0x4ae8898) returned 0x0 [0233.565] IUnknown:Release (This=0x4ae8ef8) returned 0x0 [0233.565] IUnknown:Release (This=0x4aea6e0) returned 0x0 [0233.565] IUnknown:Release (This=0x4aea218) returned 0x0 [0233.565] IUnknown:Release (This=0x4ae96f0) returned 0x0 [0233.566] IUnknown:Release (This=0x4ae9bb8) returned 0x0 [0233.566] IUnknown:Release (This=0x4ae93c0) returned 0x0 [0233.566] IUnknown:Release (This=0x4aea548) returned 0x0 [0233.566] IUnknown:Release (This=0x4b668b0) returned 0x0 [0233.566] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.566] WbemLocator:IUnknown:Release (This=0x4b14450) returned 0x1 [0233.566] IUnknown:Release (This=0x7b7c38) returned 0x0 [0233.585] IUnknown:Release (This=0x4b66718) returned 0x0 [0233.585] IUnknown:Release (This=0x4ae9888) returned 0x0 [0233.585] IUnknown:Release (This=0x4ae8bc8) returned 0x0 [0233.585] IUnknown:Release (This=0x4aea3b0) returned 0x0 [0233.586] IUnknown:Release (This=0x4ae9228) returned 0x0 [0233.586] IUnknown:Release (This=0x4ae9d50) returned 0x0 [0233.586] IUnknown:Release (This=0x4aea080) returned 0x0 [0233.586] IUnknown:Release (This=0x4ae9558) returned 0x0 [0233.586] IUnknown:Release (This=0x4ae3860) returned 0x0 [0233.586] IUnknown:Release (This=0x4ae3200) returned 0x0 [0233.586] IUnknown:Release (This=0x4ae3068) returned 0x0 [0233.586] IUnknown:Release (This=0x4ae2d38) returned 0x0 [0233.587] IUnknown:Release (This=0x4ae3b90) returned 0x0 [0233.587] IUnknown:Release (This=0x4ae2ba0) returned 0x0 [0233.587] IUnknown:Release (This=0x4ae3530) returned 0x0 [0233.587] IUnknown:Release (This=0x4ae2ed0) returned 0x0 [0233.587] IUnknown:Release (This=0x4ae2540) returned 0x0 [0233.587] IUnknown:Release (This=0x4ae3398) returned 0x0 [0233.587] IUnknown:Release (This=0x4ae2a08) returned 0x0 [0233.587] IUnknown:Release (This=0x4ae3ec0) returned 0x0 [0233.588] IUnknown:Release (This=0x4ae23a8) returned 0x0 [0233.588] IUnknown:Release (This=0x4ae39f8) returned 0x0 [0233.588] IUnknown:Release (This=0x4ae2870) returned 0x0 [0233.588] IUnknown:Release (This=0x4ae2210) returned 0x0 [0233.588] IUnknown:Release (This=0x4ae2078) returned 0x0 [0233.588] IUnknown:Release (This=0x4ae36c8) returned 0x0 [0233.588] IUnknown:Release (This=0x4ae3d28) returned 0x0 [0233.588] IUnknown:Release (This=0x4ae26d8) returned 0x0 [0233.589] IUnknown:Release (This=0x826830) returned 0x0 [0233.589] IUnknown:Release (This=0x826698) returned 0x0 [0233.589] IUnknown:Release (This=0x8284e0) returned 0x0 [0233.589] IUnknown:Release (This=0x827b50) returned 0x0 [0233.589] IUnknown:Release (This=0x826b60) returned 0x0 [0233.589] IUnknown:Release (This=0x828348) returned 0x0 [0233.589] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.589] WbemLocator:IUnknown:Release (This=0x4b13e50) returned 0x1 [0233.589] IUnknown:Release (This=0x7b76c0) returned 0x0 [0233.597] IUnknown:Release (This=0x4b67a38) returned 0x0 [0233.597] IUnknown:Release (This=0x8274f0) returned 0x0 [0233.598] IUnknown:Release (This=0x8279b8) returned 0x0 [0233.598] IUnknown:Release (This=0x827028) returned 0x0 [0233.598] IUnknown:Release (This=0x8269c8) returned 0x0 [0233.598] IUnknown:Release (This=0x8271c0) returned 0x0 [0233.598] IUnknown:Release (This=0x827820) returned 0x0 [0233.598] IUnknown:Release (This=0x828018) returned 0x0 [0233.598] IUnknown:Release (This=0x827e80) returned 0x0 [0233.598] IUnknown:Release (This=0x827358) returned 0x0 [0233.599] IUnknown:Release (This=0x826cf8) returned 0x0 [0233.599] IUnknown:Release (This=0x827ce8) returned 0x0 [0233.599] IUnknown:Release (This=0x826e90) returned 0x0 [0233.599] IUnknown:Release (This=0x8281b0) returned 0x0 [0233.599] IUnknown:Release (This=0x822898) returned 0x0 [0233.599] IUnknown:Release (This=0x822d60) returned 0x0 [0233.599] IUnknown:Release (This=0x822ef8) returned 0x0 [0233.599] IUnknown:Release (This=0x822700) returned 0x0 [0233.600] IUnknown:Release (This=0x822a30) returned 0x0 [0233.600] IUnknown:Release (This=0x823228) returned 0x0 [0233.600] IUnknown:Release (This=0x822bc8) returned 0x0 [0233.600] IUnknown:Release (This=0x8233c0) returned 0x0 [0233.600] IUnknown:Release (This=0x823090) returned 0x0 [0233.600] IUnknown:Release (This=0x4b2f828) returned 0x0 [0233.600] IUnknown:Release (This=0x4b2fcf0) returned 0x0 [0233.600] IUnknown:Release (This=0x4b2f4f8) returned 0x0 [0233.601] IUnknown:Release (This=0x4b2e838) returned 0x0 [0233.601] IUnknown:Release (This=0x4b2f030) returned 0x0 [0233.601] IUnknown:Release (This=0x4b2ee98) returned 0x0 [0233.601] IUnknown:Release (This=0x4b2fe88) returned 0x0 [0233.601] IUnknown:Release (This=0x4b2fb58) returned 0x0 [0233.601] IUnknown:Release (This=0x4b2ed00) returned 0x0 [0233.601] IUnknown:Release (This=0x4b2e9d0) returned 0x0 [0233.601] IUnknown:Release (This=0x4b2f690) returned 0x0 [0233.602] IUnknown:Release (This=0x4b67708) returned 0x0 [0233.602] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.602] WbemLocator:IUnknown:Release (This=0x4b14250) returned 0x1 [0233.602] IUnknown:Release (This=0x7b7f58) returned 0x0 [0233.611] IUnknown:Release (This=0x4b67570) returned 0x0 [0233.611] IUnknown:Release (This=0x4b30020) returned 0x0 [0233.611] IUnknown:Release (This=0x4b2f9c0) returned 0x0 [0233.611] IUnknown:Release (This=0x4b2eb68) returned 0x0 [0233.612] IUnknown:Release (This=0x4b2f1c8) returned 0x0 [0233.612] IUnknown:Release (This=0x4b2e370) returned 0x0 [0233.612] IUnknown:Release (This=0x4b2db78) returned 0x0 [0233.612] IUnknown:Release (This=0x4b2d9e0) returned 0x0 [0233.612] IUnknown:Release (This=0x4b2d848) returned 0x0 [0233.612] IUnknown:Release (This=0x4b2d6b0) returned 0x0 [0233.612] IUnknown:Release (This=0x4b2d518) returned 0x0 [0233.612] IUnknown:Release (This=0x4b2dea8) returned 0x0 [0233.613] IUnknown:Release (This=0x4b2b868) returned 0x0 [0233.613] IUnknown:Release (This=0x4b2d380) returned 0x0 [0233.613] IUnknown:Release (This=0x4b2d050) returned 0x0 [0233.613] IUnknown:Release (This=0x4b2c1f8) returned 0x0 [0233.613] IUnknown:Release (This=0x4b2c060) returned 0x0 [0233.613] IUnknown:Release (This=0x4b2bec8) returned 0x0 [0233.613] IUnknown:Release (This=0x4b2dd10) returned 0x0 [0233.613] IUnknown:Release (This=0x4b2cd20) returned 0x0 [0233.614] IUnknown:Release (This=0x4b2e6a0) returned 0x0 [0233.614] IUnknown:Release (This=0x4b2ba00) returned 0x0 [0233.614] IUnknown:Release (This=0x4b2d1e8) returned 0x0 [0233.614] IUnknown:Release (This=0x4b2e040) returned 0x0 [0233.614] IUnknown:Release (This=0x4b2e508) returned 0x0 [0233.614] IUnknown:Release (This=0x4b2b6d0) returned 0x0 [0233.614] IUnknown:Release (This=0x4b2cb88) returned 0x0 [0233.614] IUnknown:Release (This=0x4b2c9f0) returned 0x0 [0233.615] IUnknown:Release (This=0x4b2c858) returned 0x0 [0233.615] IUnknown:Release (This=0x4b2ceb8) returned 0x0 [0233.615] IUnknown:Release (This=0x4b2bd30) returned 0x0 [0233.615] IUnknown:Release (This=0x4b2e1d8) returned 0x0 [0233.615] IUnknown:Release (This=0x4b2c6c0) returned 0x0 [0233.615] IUnknown:Release (This=0x4b28898) returned 0x0 [0233.615] CoGetContextToken (in: pToken=0x433faa8 | out: pToken=0x433faa8) returned 0x0 [0233.615] WbemLocator:IUnknown:Release (This=0x4b15c50) returned 0x1 [0233.615] IUnknown:Release (This=0x7b7dc8) returned 0x0 [0233.625] IUnknown:Release (This=0x4b67f00) returned 0x0 [0233.625] IUnknown:Release (This=0x4b28568) returned 0x0 [0233.625] IUnknown:Release (This=0x4b28238) returned 0x0 [0233.625] IUnknown:Release (This=0x4b2a878) returned 0x0 [0233.625] IUnknown:Release (This=0x4b29ee8) returned 0x0 [0233.625] IUnknown:Release (This=0x4b29d50) returned 0x0 [0233.626] IUnknown:Release (This=0x4b2a3b0) returned 0x0 [0233.626] IUnknown:Release (This=0x4b283d0) returned 0x0 [0233.626] IUnknown:Release (This=0x4b29bb8) returned 0x0 [0233.626] IUnknown:Release (This=0x4b296f0) returned 0x0 [0233.626] IUnknown:Release (This=0x4b29090) returned 0x0 [0233.626] IUnknown:Release (This=0x4b2b3a0) returned 0x0 [0233.626] IUnknown:Release (This=0x4b29558) returned 0x0 [0233.626] IUnknown:Release (This=0x4b2ad40) returned 0x0 [0233.627] IUnknown:Release (This=0x4b2a6e0) returned 0x0 [0233.627] IUnknown:Release (This=0x4b293c0) returned 0x0 [0233.627] IUnknown:Release (This=0x4b28ef8) returned 0x0 [0233.627] IUnknown:Release (This=0x4b2a080) returned 0x0 [0233.627] IUnknown:Release (This=0x4b2b208) returned 0x0 [0233.627] IUnknown:Release (This=0x4b28d60) returned 0x0 [0233.627] IUnknown:Release (This=0x4b2b070) returned 0x0 [0233.627] IUnknown:Release (This=0x4b2aa10) returned 0x0 [0233.630] CloseHandle (hObject=0x53c) returned 1 [0233.630] CloseHandle (hObject=0x544) returned 1 [0233.630] CloseHandle (hObject=0x538) returned 1 [0233.630] CloseHandle (hObject=0x5fc) returned 1 [0233.630] CloseHandle (hObject=0x534) returned 1 [0233.631] RegCloseKey (hKey=0x3fc) returned 0x0 [0233.631] CloseHandle (hObject=0x540) returned 1 [0233.631] CloseHandle (hObject=0x600) returned 1 [0233.632] RegCloseKey (hKey=0x40c) returned 0x0 [0235.282] CertFreeCertificateContext (pCertContext=0x4bbe860) returned 1 [0235.282] CloseHandle (hObject=0x61c) returned 1 [0235.283] CloseHandle (hObject=0x618) returned 1 [0235.283] CertFreeCertificateContext (pCertContext=0x4bbea40) returned 1 [0235.283] CertFreeCertificateContext (pCertContext=0x4bbe8b0) returned 1 [0235.283] CloseHandle (hObject=0x540) returned 1 [0235.284] CertFreeCertificateContext (pCertContext=0x4b6f848) returned 1 [0235.284] CertFreeCertificateContext (pCertContext=0x4b70068) returned 1 [0235.285] CertFreeCertificateContext (pCertContext=0x4bbea90) returned 1 [0235.285] DeleteSecurityContext (phContext=0x23c8068) returned 0x0 [0235.285] CertFreeCertificateContext (pCertContext=0x4bbe680) returned 1 [0235.285] setsockopt (s=0x6f0, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0235.286] closesocket (s=0x6f0) returned 0 [0235.286] CertCloseStore (hCertStore=0x8232c0, dwFlags=0x0) returned 1 [0235.286] FreeContextBuffer (in: pvContextBuffer=0x4b9db40 | out: pvContextBuffer=0x4b9db40) returned 0x0 [0235.287] SysStringLen (param_1="퀪㮲㾌℉皀㴄\㣛リ　　㔀　㘀㔀㐀∀) returned 0x10 [0235.288] CertFreeCertificateContext (pCertContext=0x4bbe680) returned 1 [0235.288] CertFreeCertificateContext (pCertContext=0x4b6f848) returned 1 [0235.288] CertFreeCertificateContext (pCertContext=0x4b70068) returned 1 [0235.288] CertFreeCertificateContext (pCertContext=0x7abf90) returned 1 [0235.289] CertFreeCertificateContext (pCertContext=0x4bbea90) returned 1 [0235.289] CertCloseStore (hCertStore=0x822c30, dwFlags=0x0) returned 1 [0235.289] CertFreeCertificateContext (pCertContext=0x7abf90) returned 1 [0235.289] CertFreeCertificateContext (pCertContext=0x7ac350) returned 1 [0235.290] CertFreeCertificateContext (pCertContext=0x7ac260) returned 1 [0235.290] CertFreeCertificateContext (pCertContext=0x7ac030) returned 1 [0235.290] CertFreeCertificateContext (pCertContext=0x4bbe5e0) returned 1 [0235.290] CertFreeCertificateContext (pCertContext=0x4bbeae0) returned 1 [0235.290] FreeContextBuffer (in: pvContextBuffer=0x4b9d300 | out: pvContextBuffer=0x4b9d300) returned 0x0 [0235.291] CertFreeCertificateContext (pCertContext=0x4bbe680) returned 1 [0235.291] CertFreeCertificateContext (pCertContext=0x4b6f848) returned 1 [0235.291] CertFreeCertificateContext (pCertContext=0x4b70068) returned 1 [0235.292] CertFreeCertificateContext (pCertContext=0x4bbe9a0) returned 1 [0235.292] CertFreeCertificateContext (pCertContext=0x4bbec20) returned 1 [0235.294] CertFreeCertificateContext (pCertContext=0x7ab770) returned 1 [0235.294] CertFreeCertificateContext (pCertContext=0x824840) returned 1 [0235.294] CertFreeCertificateContext (pCertContext=0x8246b0) returned 1 [0235.294] CertCloseStore (hCertStore=0x823068, dwFlags=0x0) returned 1 [0235.294] CertCloseStore (hCertStore=0x801890, dwFlags=0x0) returned 1 [0235.295] CertFreeCertificateContext (pCertContext=0x8246b0) returned 1 [0235.295] CertFreeCertificateContext (pCertContext=0x824d40) returned 1 [0235.295] CertFreeCertificateContext (pCertContext=0x4bbe9a0) returned 1 Thread: id = 168 os_tid = 0x2ec Thread: id = 169 os_tid = 0xbb8 Thread: id = 170 os_tid = 0xbbc Thread: id = 242 os_tid = 0xbd4 [0181.479] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0181.479] RoInitialize () returned 0x1 [0181.479] RoUninitialize () returned 0x0 [0181.490] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x4b1f404, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d [0181.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8a8) returned 1 [0181.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x4b1f924 | out: lpFileInformation=0x4b1f924*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9b1bad97, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x9b1bad97, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0181.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8a4) returned 1 [0181.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f928) returned 1 [0181.491] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d [0181.492] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\*"), lpFindFileData=0x4b1f650 | out: lpFindFileData=0x4b1f650*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9b1bad97, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x9b1bad97, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aabf8 [0181.493] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9b1bad97, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x9b1bad97, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.494] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ed649e0, ftCreationTime.dwHighDateTime=0x1d8ba82, ftLastAccessTime.dwLowDateTime=0xdde77d40, ftLastAccessTime.dwHighDateTime=0x1d8bc54, ftLastWriteTime.dwLowDateTime=0xdde77d40, ftLastWriteTime.dwHighDateTime=0x1d8bc54, nFileSizeHigh=0x0, nFileSizeLow=0x1009f, dwReserved0=0x0, dwReserved1=0x0, cFileName="-6j3wVd6H.wav", cAlternateFileName="-6J3WV~1.WAV")) returned 1 [0181.494] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0fb6300, ftCreationTime.dwHighDateTime=0x1d8b7b8, ftLastAccessTime.dwLowDateTime=0xaa1357d0, ftLastAccessTime.dwHighDateTime=0x1d8b7ce, ftLastWriteTime.dwLowDateTime=0xaa1357d0, ftLastWriteTime.dwHighDateTime=0x1d8b7ce, nFileSizeHigh=0x0, nFileSizeLow=0x3401, dwReserved0=0x0, dwReserved1=0x0, cFileName="2yaTsjufwmYx.bmp", cAlternateFileName="2YATSJ~1.BMP")) returned 1 [0181.494] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8179fc40, ftCreationTime.dwHighDateTime=0x1d8b81c, ftLastAccessTime.dwLowDateTime=0x1c74a8d0, ftLastAccessTime.dwHighDateTime=0x1d8ba7f, ftLastWriteTime.dwLowDateTime=0x1c74a8d0, ftLastWriteTime.dwHighDateTime=0x1d8ba7f, nFileSizeHigh=0x0, nFileSizeLow=0x1104b, dwReserved0=0x0, dwReserved1=0x0, cFileName="5nZcfaMBhgu2LD.flv", cAlternateFileName="5NZCFA~1.FLV")) returned 1 [0181.494] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83291b80, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0x83291b80, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x1e69c300, ftLastWriteTime.dwHighDateTime=0x1d92b86, nFileSizeHigh=0x0, nFileSizeLow=0x53e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe", cAlternateFileName="82ACC1~1.EXE")) returned 1 [0181.494] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9468f3b0, ftCreationTime.dwHighDateTime=0x1d8b8e4, ftLastAccessTime.dwLowDateTime=0x16c9c580, ftLastAccessTime.dwHighDateTime=0x1d8b9b9, ftLastWriteTime.dwLowDateTime=0x16c9c580, ftLastWriteTime.dwHighDateTime=0x1d8b9b9, nFileSizeHigh=0x0, nFileSizeLow=0x17e1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Bco.avi", cAlternateFileName="")) returned 1 [0181.495] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda8992f0, ftCreationTime.dwHighDateTime=0x1d8b777, ftLastAccessTime.dwLowDateTime=0xe32b5830, ftLastAccessTime.dwHighDateTime=0x1d8bd58, ftLastWriteTime.dwLowDateTime=0xe32b5830, ftLastWriteTime.dwHighDateTime=0x1d8bd58, nFileSizeHigh=0x0, nFileSizeLow=0xaa7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="9tqipBAM.m4a", cAlternateFileName="")) returned 1 [0181.495] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcac9fcd0, ftCreationTime.dwHighDateTime=0x1d8b5db, ftLastAccessTime.dwLowDateTime=0xaaa97110, ftLastAccessTime.dwHighDateTime=0x1d8bdd3, ftLastWriteTime.dwLowDateTime=0xaaa97110, ftLastWriteTime.dwHighDateTime=0x1d8bdd3, nFileSizeHigh=0x0, nFileSizeLow=0x18f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chh7tG4ZOOPfle3.png", cAlternateFileName="CHH7TG~1.PNG")) returned 1 [0181.495] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e0dddf0, ftCreationTime.dwHighDateTime=0x1d8bd4d, ftLastAccessTime.dwLowDateTime=0x113a3390, ftLastAccessTime.dwHighDateTime=0x1d8c060, ftLastWriteTime.dwLowDateTime=0x113a3390, ftLastWriteTime.dwHighDateTime=0x1d8c060, nFileSizeHigh=0x0, nFileSizeLow=0x310c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cib-t5wDlO7eTKCnU2.swf", cAlternateFileName="CIB-T5~1.SWF")) returned 1 [0181.495] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24ff58a0, ftCreationTime.dwHighDateTime=0x1d8bbf7, ftLastAccessTime.dwLowDateTime=0xaea43270, ftLastAccessTime.dwHighDateTime=0x1d8c051, ftLastWriteTime.dwLowDateTime=0xaea43270, ftLastWriteTime.dwHighDateTime=0x1d8c051, nFileSizeHigh=0x0, nFileSizeLow=0x65b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CpGUjN4mN5ak.wav", cAlternateFileName="CPGUJN~1.WAV")) returned 1 [0181.495] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0181.495] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93b0cf40, ftCreationTime.dwHighDateTime=0x1d8b88c, ftLastAccessTime.dwLowDateTime=0xc913fdc0, ftLastAccessTime.dwHighDateTime=0x1d8ba20, ftLastWriteTime.dwLowDateTime=0xc913fdc0, ftLastWriteTime.dwHighDateTime=0x1d8ba20, nFileSizeHigh=0x0, nFileSizeLow=0x14a4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="eUlg.ods", cAlternateFileName="")) returned 1 [0181.496] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6110a880, ftCreationTime.dwHighDateTime=0x1d8bb02, ftLastAccessTime.dwLowDateTime=0xbebbc8c0, ftLastAccessTime.dwHighDateTime=0x1d8c0de, ftLastWriteTime.dwLowDateTime=0xbebbc8c0, ftLastWriteTime.dwHighDateTime=0x1d8c0de, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="FYJ1.pptx", cAlternateFileName="FYJ1~1.PPT")) returned 1 [0181.496] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52e375c0, ftCreationTime.dwHighDateTime=0x1d8c107, ftLastAccessTime.dwLowDateTime=0x53360b20, ftLastAccessTime.dwHighDateTime=0x1d8c11e, ftLastWriteTime.dwLowDateTime=0x53360b20, ftLastWriteTime.dwHighDateTime=0x1d8c11e, nFileSizeHigh=0x0, nFileSizeLow=0x849e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HJDXtUSQzN.odp", cAlternateFileName="HJDXTU~1.ODP")) returned 1 [0181.496] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmKLkObpH51ed_", cAlternateFileName="HMKLKO~1")) returned 1 [0181.496] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95d451f0, ftCreationTime.dwHighDateTime=0x1d8bcb2, ftLastAccessTime.dwLowDateTime=0x3e5310e0, ftLastAccessTime.dwHighDateTime=0x1d8bdae, ftLastWriteTime.dwLowDateTime=0x3e5310e0, ftLastWriteTime.dwHighDateTime=0x1d8bdae, nFileSizeHigh=0x0, nFileSizeLow=0x13469, dwReserved0=0x0, dwReserved1=0x0, cFileName="iLq3zNHP1Bvq2jgkzC.swf", cAlternateFileName="ILQ3ZN~1.SWF")) returned 1 [0181.496] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7197bc0, ftCreationTime.dwHighDateTime=0x1d8b7ad, ftLastAccessTime.dwLowDateTime=0xcea29ec0, ftLastAccessTime.dwHighDateTime=0x1d8ba9f, ftLastWriteTime.dwLowDateTime=0xcea29ec0, ftLastWriteTime.dwHighDateTime=0x1d8ba9f, nFileSizeHigh=0x0, nFileSizeLow=0x29eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="irK2.png", cAlternateFileName="")) returned 1 [0181.497] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe882b260, ftCreationTime.dwHighDateTime=0x1d8b93e, ftLastAccessTime.dwLowDateTime=0x55ed7ad0, ftLastAccessTime.dwHighDateTime=0x1d8ba4b, ftLastWriteTime.dwLowDateTime=0x55ed7ad0, ftLastWriteTime.dwHighDateTime=0x1d8ba4b, nFileSizeHigh=0x0, nFileSizeLow=0x53c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="knJlrMn.jpg", cAlternateFileName="")) returned 1 [0181.497] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406f8380, ftCreationTime.dwHighDateTime=0x1d8b5f3, ftLastAccessTime.dwLowDateTime=0x36788730, ftLastAccessTime.dwHighDateTime=0x1d8bb86, ftLastWriteTime.dwLowDateTime=0x36788730, ftLastWriteTime.dwHighDateTime=0x1d8bb86, nFileSizeHigh=0x0, nFileSizeLow=0x4cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="L18V.ods", cAlternateFileName="")) returned 1 [0181.497] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e94e0, ftCreationTime.dwHighDateTime=0x1d8b31e, ftLastAccessTime.dwLowDateTime=0xf98eff50, ftLastAccessTime.dwHighDateTime=0x1d8bf65, ftLastWriteTime.dwLowDateTime=0xf98eff50, ftLastWriteTime.dwHighDateTime=0x1d8bf65, nFileSizeHigh=0x0, nFileSizeLow=0xde75, dwReserved0=0x0, dwReserved1=0x0, cFileName="mGLbr8EHVJwWvBHC.mp3", cAlternateFileName="MGLBR8~1.MP3")) returned 1 [0181.497] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2085c7f0, ftCreationTime.dwHighDateTime=0x1d8b6d4, ftLastAccessTime.dwLowDateTime=0xc9273680, ftLastAccessTime.dwHighDateTime=0x1d8bbb3, ftLastWriteTime.dwLowDateTime=0xc9273680, ftLastWriteTime.dwHighDateTime=0x1d8bbb3, nFileSizeHigh=0x0, nFileSizeLow=0xa6b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MgsHDnP3Ixv1ZL.mp3", cAlternateFileName="MGSHDN~1.MP3")) returned 1 [0181.497] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1622410, ftCreationTime.dwHighDateTime=0x1d8b29b, ftLastAccessTime.dwLowDateTime=0x203e2830, ftLastAccessTime.dwHighDateTime=0x1d8ba64, ftLastWriteTime.dwLowDateTime=0x203e2830, ftLastWriteTime.dwHighDateTime=0x1d8ba64, nFileSizeHigh=0x0, nFileSizeLow=0x17703, dwReserved0=0x0, dwReserved1=0x0, cFileName="nsIVnWY.png", cAlternateFileName="")) returned 1 [0181.497] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6bbbb10, ftCreationTime.dwHighDateTime=0x1d8b776, ftLastAccessTime.dwLowDateTime=0x9d1ca770, ftLastAccessTime.dwHighDateTime=0x1d8b92c, ftLastWriteTime.dwLowDateTime=0x9d1ca770, ftLastWriteTime.dwHighDateTime=0x1d8b92c, nFileSizeHigh=0x0, nFileSizeLow=0xb566, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmYoSoLSWK_urmMNr1Bb.flv", cAlternateFileName="SMYOSO~1.FLV")) returned 1 [0181.498] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37934860, ftCreationTime.dwHighDateTime=0x1d8b1f6, ftLastAccessTime.dwLowDateTime=0x1b53c930, ftLastAccessTime.dwHighDateTime=0x1d8b742, ftLastWriteTime.dwLowDateTime=0x1b53c930, ftLastWriteTime.dwHighDateTime=0x1d8b742, nFileSizeHigh=0x0, nFileSizeLow=0x11ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="tftcjhfP.m4a", cAlternateFileName="")) returned 1 [0181.498] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb43f9c60, ftCreationTime.dwHighDateTime=0x1d8b3e5, ftLastAccessTime.dwLowDateTime=0x166bae30, ftLastAccessTime.dwHighDateTime=0x1d8baf1, ftLastWriteTime.dwLowDateTime=0x166bae30, ftLastWriteTime.dwHighDateTime=0x1d8baf1, nFileSizeHigh=0x0, nFileSizeLow=0x177ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="TPZCYP.wav", cAlternateFileName="")) returned 1 [0181.498] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cb842b0, ftCreationTime.dwHighDateTime=0x1d8bdf4, ftLastAccessTime.dwLowDateTime=0xce3e2fd0, ftLastAccessTime.dwHighDateTime=0x1d8bffe, ftLastWriteTime.dwLowDateTime=0xce3e2fd0, ftLastWriteTime.dwHighDateTime=0x1d8bffe, nFileSizeHigh=0x0, nFileSizeLow=0x24e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uz lX.flv", cAlternateFileName="UZLX~1.FLV")) returned 1 [0181.498] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a7a9470, ftCreationTime.dwHighDateTime=0x1d8c09c, ftLastAccessTime.dwLowDateTime=0x6725f750, ftLastAccessTime.dwHighDateTime=0x1d8c0b3, ftLastWriteTime.dwLowDateTime=0x6725f750, ftLastWriteTime.dwHighDateTime=0x1d8c0b3, nFileSizeHigh=0x0, nFileSizeLow=0x47f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ve Adh4F7cSMF.swf", cAlternateFileName="VEADH4~1.SWF")) returned 1 [0181.498] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x982c8420, ftCreationTime.dwHighDateTime=0x1d8c123, ftLastAccessTime.dwLowDateTime=0xb3f47f60, ftLastAccessTime.dwHighDateTime=0x1d8c127, ftLastWriteTime.dwLowDateTime=0xb3f47f60, ftLastWriteTime.dwHighDateTime=0x1d8c127, nFileSizeHigh=0x0, nFileSizeLow=0x53df, dwReserved0=0x0, dwReserved1=0x0, cFileName="vHaRBzu.bmp", cAlternateFileName="")) returned 1 [0181.498] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb438f9e0, ftCreationTime.dwHighDateTime=0x1d8b26a, ftLastAccessTime.dwLowDateTime=0xe816cce0, ftLastAccessTime.dwHighDateTime=0x1d8b37a, ftLastWriteTime.dwLowDateTime=0xe816cce0, ftLastWriteTime.dwHighDateTime=0x1d8b37a, nFileSizeHigh=0x0, nFileSizeLow=0x15c1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="vPTw68y.flv", cAlternateFileName="")) returned 1 [0181.498] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20202850, ftCreationTime.dwHighDateTime=0x1d8b6d4, ftLastAccessTime.dwLowDateTime=0x9edd100, ftLastAccessTime.dwHighDateTime=0x1d8c065, ftLastWriteTime.dwLowDateTime=0x9edd100, ftLastWriteTime.dwHighDateTime=0x1d8c065, nFileSizeHigh=0x0, nFileSizeLow=0x17dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbS7-JwT.flv", cAlternateFileName="")) returned 1 [0181.499] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20202850, ftCreationTime.dwHighDateTime=0x1d8b6d4, ftLastAccessTime.dwLowDateTime=0x9edd100, ftLastAccessTime.dwHighDateTime=0x1d8c065, ftLastWriteTime.dwLowDateTime=0x9edd100, ftLastWriteTime.dwHighDateTime=0x1d8c065, nFileSizeHigh=0x0, nFileSizeLow=0x17dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbS7-JwT.flv", cAlternateFileName="")) returned 0 [0181.499] FindClose (in: hFindFile=0x7aabf8 | out: hFindFile=0x7aabf8) returned 1 [0181.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8e4) returned 1 [0181.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8f0) returned 1 [0181.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f928) returned 1 [0181.499] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x1d [0181.499] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\*"), lpFindFileData=0x4b1f650 | out: lpFindFileData=0x4b1f650*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9b1bad97, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x9b1bad97, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aabf8 [0181.499] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9b1bad97, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x9b1bad97, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.500] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ed649e0, ftCreationTime.dwHighDateTime=0x1d8ba82, ftLastAccessTime.dwLowDateTime=0xdde77d40, ftLastAccessTime.dwHighDateTime=0x1d8bc54, ftLastWriteTime.dwLowDateTime=0xdde77d40, ftLastWriteTime.dwHighDateTime=0x1d8bc54, nFileSizeHigh=0x0, nFileSizeLow=0x1009f, dwReserved0=0x0, dwReserved1=0x0, cFileName="-6j3wVd6H.wav", cAlternateFileName="-6J3WV~1.WAV")) returned 1 [0181.500] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0fb6300, ftCreationTime.dwHighDateTime=0x1d8b7b8, ftLastAccessTime.dwLowDateTime=0xaa1357d0, ftLastAccessTime.dwHighDateTime=0x1d8b7ce, ftLastWriteTime.dwLowDateTime=0xaa1357d0, ftLastWriteTime.dwHighDateTime=0x1d8b7ce, nFileSizeHigh=0x0, nFileSizeLow=0x3401, dwReserved0=0x0, dwReserved1=0x0, cFileName="2yaTsjufwmYx.bmp", cAlternateFileName="2YATSJ~1.BMP")) returned 1 [0181.500] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8179fc40, ftCreationTime.dwHighDateTime=0x1d8b81c, ftLastAccessTime.dwLowDateTime=0x1c74a8d0, ftLastAccessTime.dwHighDateTime=0x1d8ba7f, ftLastWriteTime.dwLowDateTime=0x1c74a8d0, ftLastWriteTime.dwHighDateTime=0x1d8ba7f, nFileSizeHigh=0x0, nFileSizeLow=0x1104b, dwReserved0=0x0, dwReserved1=0x0, cFileName="5nZcfaMBhgu2LD.flv", cAlternateFileName="5NZCFA~1.FLV")) returned 1 [0181.500] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83291b80, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0x83291b80, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x1e69c300, ftLastWriteTime.dwHighDateTime=0x1d92b86, nFileSizeHigh=0x0, nFileSizeLow=0x53e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe", cAlternateFileName="82ACC1~1.EXE")) returned 1 [0181.501] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9468f3b0, ftCreationTime.dwHighDateTime=0x1d8b8e4, ftLastAccessTime.dwLowDateTime=0x16c9c580, ftLastAccessTime.dwHighDateTime=0x1d8b9b9, ftLastWriteTime.dwLowDateTime=0x16c9c580, ftLastWriteTime.dwHighDateTime=0x1d8b9b9, nFileSizeHigh=0x0, nFileSizeLow=0x17e1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Bco.avi", cAlternateFileName="")) returned 1 [0181.501] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda8992f0, ftCreationTime.dwHighDateTime=0x1d8b777, ftLastAccessTime.dwLowDateTime=0xe32b5830, ftLastAccessTime.dwHighDateTime=0x1d8bd58, ftLastWriteTime.dwLowDateTime=0xe32b5830, ftLastWriteTime.dwHighDateTime=0x1d8bd58, nFileSizeHigh=0x0, nFileSizeLow=0xaa7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="9tqipBAM.m4a", cAlternateFileName="")) returned 1 [0181.501] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcac9fcd0, ftCreationTime.dwHighDateTime=0x1d8b5db, ftLastAccessTime.dwLowDateTime=0xaaa97110, ftLastAccessTime.dwHighDateTime=0x1d8bdd3, ftLastWriteTime.dwLowDateTime=0xaaa97110, ftLastWriteTime.dwHighDateTime=0x1d8bdd3, nFileSizeHigh=0x0, nFileSizeLow=0x18f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chh7tG4ZOOPfle3.png", cAlternateFileName="CHH7TG~1.PNG")) returned 1 [0181.501] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e0dddf0, ftCreationTime.dwHighDateTime=0x1d8bd4d, ftLastAccessTime.dwLowDateTime=0x113a3390, ftLastAccessTime.dwHighDateTime=0x1d8c060, ftLastWriteTime.dwLowDateTime=0x113a3390, ftLastWriteTime.dwHighDateTime=0x1d8c060, nFileSizeHigh=0x0, nFileSizeLow=0x310c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cib-t5wDlO7eTKCnU2.swf", cAlternateFileName="CIB-T5~1.SWF")) returned 1 [0181.502] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24ff58a0, ftCreationTime.dwHighDateTime=0x1d8bbf7, ftLastAccessTime.dwLowDateTime=0xaea43270, ftLastAccessTime.dwHighDateTime=0x1d8c051, ftLastWriteTime.dwLowDateTime=0xaea43270, ftLastWriteTime.dwHighDateTime=0x1d8c051, nFileSizeHigh=0x0, nFileSizeLow=0x65b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CpGUjN4mN5ak.wav", cAlternateFileName="CPGUJN~1.WAV")) returned 1 [0181.502] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0181.502] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93b0cf40, ftCreationTime.dwHighDateTime=0x1d8b88c, ftLastAccessTime.dwLowDateTime=0xc913fdc0, ftLastAccessTime.dwHighDateTime=0x1d8ba20, ftLastWriteTime.dwLowDateTime=0xc913fdc0, ftLastWriteTime.dwHighDateTime=0x1d8ba20, nFileSizeHigh=0x0, nFileSizeLow=0x14a4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="eUlg.ods", cAlternateFileName="")) returned 1 [0181.502] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6110a880, ftCreationTime.dwHighDateTime=0x1d8bb02, ftLastAccessTime.dwLowDateTime=0xbebbc8c0, ftLastAccessTime.dwHighDateTime=0x1d8c0de, ftLastWriteTime.dwLowDateTime=0xbebbc8c0, ftLastWriteTime.dwHighDateTime=0x1d8c0de, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0x0, cFileName="FYJ1.pptx", cAlternateFileName="FYJ1~1.PPT")) returned 1 [0181.502] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52e375c0, ftCreationTime.dwHighDateTime=0x1d8c107, ftLastAccessTime.dwLowDateTime=0x53360b20, ftLastAccessTime.dwHighDateTime=0x1d8c11e, ftLastWriteTime.dwLowDateTime=0x53360b20, ftLastWriteTime.dwHighDateTime=0x1d8c11e, nFileSizeHigh=0x0, nFileSizeLow=0x849e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HJDXtUSQzN.odp", cAlternateFileName="HJDXTU~1.ODP")) returned 1 [0181.502] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmKLkObpH51ed_", cAlternateFileName="HMKLKO~1")) returned 1 [0181.502] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95d451f0, ftCreationTime.dwHighDateTime=0x1d8bcb2, ftLastAccessTime.dwLowDateTime=0x3e5310e0, ftLastAccessTime.dwHighDateTime=0x1d8bdae, ftLastWriteTime.dwLowDateTime=0x3e5310e0, ftLastWriteTime.dwHighDateTime=0x1d8bdae, nFileSizeHigh=0x0, nFileSizeLow=0x13469, dwReserved0=0x0, dwReserved1=0x0, cFileName="iLq3zNHP1Bvq2jgkzC.swf", cAlternateFileName="ILQ3ZN~1.SWF")) returned 1 [0181.503] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7197bc0, ftCreationTime.dwHighDateTime=0x1d8b7ad, ftLastAccessTime.dwLowDateTime=0xcea29ec0, ftLastAccessTime.dwHighDateTime=0x1d8ba9f, ftLastWriteTime.dwLowDateTime=0xcea29ec0, ftLastWriteTime.dwHighDateTime=0x1d8ba9f, nFileSizeHigh=0x0, nFileSizeLow=0x29eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="irK2.png", cAlternateFileName="")) returned 1 [0181.503] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe882b260, ftCreationTime.dwHighDateTime=0x1d8b93e, ftLastAccessTime.dwLowDateTime=0x55ed7ad0, ftLastAccessTime.dwHighDateTime=0x1d8ba4b, ftLastWriteTime.dwLowDateTime=0x55ed7ad0, ftLastWriteTime.dwHighDateTime=0x1d8ba4b, nFileSizeHigh=0x0, nFileSizeLow=0x53c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="knJlrMn.jpg", cAlternateFileName="")) returned 1 [0181.503] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406f8380, ftCreationTime.dwHighDateTime=0x1d8b5f3, ftLastAccessTime.dwLowDateTime=0x36788730, ftLastAccessTime.dwHighDateTime=0x1d8bb86, ftLastWriteTime.dwLowDateTime=0x36788730, ftLastWriteTime.dwHighDateTime=0x1d8bb86, nFileSizeHigh=0x0, nFileSizeLow=0x4cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="L18V.ods", cAlternateFileName="")) returned 1 [0181.503] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e94e0, ftCreationTime.dwHighDateTime=0x1d8b31e, ftLastAccessTime.dwLowDateTime=0xf98eff50, ftLastAccessTime.dwHighDateTime=0x1d8bf65, ftLastWriteTime.dwLowDateTime=0xf98eff50, ftLastWriteTime.dwHighDateTime=0x1d8bf65, nFileSizeHigh=0x0, nFileSizeLow=0xde75, dwReserved0=0x0, dwReserved1=0x0, cFileName="mGLbr8EHVJwWvBHC.mp3", cAlternateFileName="MGLBR8~1.MP3")) returned 1 [0181.503] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2085c7f0, ftCreationTime.dwHighDateTime=0x1d8b6d4, ftLastAccessTime.dwLowDateTime=0xc9273680, ftLastAccessTime.dwHighDateTime=0x1d8bbb3, ftLastWriteTime.dwLowDateTime=0xc9273680, ftLastWriteTime.dwHighDateTime=0x1d8bbb3, nFileSizeHigh=0x0, nFileSizeLow=0xa6b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MgsHDnP3Ixv1ZL.mp3", cAlternateFileName="MGSHDN~1.MP3")) returned 1 [0181.503] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1622410, ftCreationTime.dwHighDateTime=0x1d8b29b, ftLastAccessTime.dwLowDateTime=0x203e2830, ftLastAccessTime.dwHighDateTime=0x1d8ba64, ftLastWriteTime.dwLowDateTime=0x203e2830, ftLastWriteTime.dwHighDateTime=0x1d8ba64, nFileSizeHigh=0x0, nFileSizeLow=0x17703, dwReserved0=0x0, dwReserved1=0x0, cFileName="nsIVnWY.png", cAlternateFileName="")) returned 1 [0181.503] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6bbbb10, ftCreationTime.dwHighDateTime=0x1d8b776, ftLastAccessTime.dwLowDateTime=0x9d1ca770, ftLastAccessTime.dwHighDateTime=0x1d8b92c, ftLastWriteTime.dwLowDateTime=0x9d1ca770, ftLastWriteTime.dwHighDateTime=0x1d8b92c, nFileSizeHigh=0x0, nFileSizeLow=0xb566, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmYoSoLSWK_urmMNr1Bb.flv", cAlternateFileName="SMYOSO~1.FLV")) returned 1 [0181.503] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37934860, ftCreationTime.dwHighDateTime=0x1d8b1f6, ftLastAccessTime.dwLowDateTime=0x1b53c930, ftLastAccessTime.dwHighDateTime=0x1d8b742, ftLastWriteTime.dwLowDateTime=0x1b53c930, ftLastWriteTime.dwHighDateTime=0x1d8b742, nFileSizeHigh=0x0, nFileSizeLow=0x11ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="tftcjhfP.m4a", cAlternateFileName="")) returned 1 [0181.504] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb43f9c60, ftCreationTime.dwHighDateTime=0x1d8b3e5, ftLastAccessTime.dwLowDateTime=0x166bae30, ftLastAccessTime.dwHighDateTime=0x1d8baf1, ftLastWriteTime.dwLowDateTime=0x166bae30, ftLastWriteTime.dwHighDateTime=0x1d8baf1, nFileSizeHigh=0x0, nFileSizeLow=0x177ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="TPZCYP.wav", cAlternateFileName="")) returned 1 [0181.504] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cb842b0, ftCreationTime.dwHighDateTime=0x1d8bdf4, ftLastAccessTime.dwLowDateTime=0xce3e2fd0, ftLastAccessTime.dwHighDateTime=0x1d8bffe, ftLastWriteTime.dwLowDateTime=0xce3e2fd0, ftLastWriteTime.dwHighDateTime=0x1d8bffe, nFileSizeHigh=0x0, nFileSizeLow=0x24e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uz lX.flv", cAlternateFileName="UZLX~1.FLV")) returned 1 [0181.504] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a7a9470, ftCreationTime.dwHighDateTime=0x1d8c09c, ftLastAccessTime.dwLowDateTime=0x6725f750, ftLastAccessTime.dwHighDateTime=0x1d8c0b3, ftLastWriteTime.dwLowDateTime=0x6725f750, ftLastWriteTime.dwHighDateTime=0x1d8c0b3, nFileSizeHigh=0x0, nFileSizeLow=0x47f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ve Adh4F7cSMF.swf", cAlternateFileName="VEADH4~1.SWF")) returned 1 [0181.504] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x982c8420, ftCreationTime.dwHighDateTime=0x1d8c123, ftLastAccessTime.dwLowDateTime=0xb3f47f60, ftLastAccessTime.dwHighDateTime=0x1d8c127, ftLastWriteTime.dwLowDateTime=0xb3f47f60, ftLastWriteTime.dwHighDateTime=0x1d8c127, nFileSizeHigh=0x0, nFileSizeLow=0x53df, dwReserved0=0x0, dwReserved1=0x0, cFileName="vHaRBzu.bmp", cAlternateFileName="")) returned 1 [0181.504] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb438f9e0, ftCreationTime.dwHighDateTime=0x1d8b26a, ftLastAccessTime.dwLowDateTime=0xe816cce0, ftLastAccessTime.dwHighDateTime=0x1d8b37a, ftLastWriteTime.dwLowDateTime=0xe816cce0, ftLastWriteTime.dwHighDateTime=0x1d8b37a, nFileSizeHigh=0x0, nFileSizeLow=0x15c1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="vPTw68y.flv", cAlternateFileName="")) returned 1 [0181.504] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20202850, ftCreationTime.dwHighDateTime=0x1d8b6d4, ftLastAccessTime.dwLowDateTime=0x9edd100, ftLastAccessTime.dwHighDateTime=0x1d8c065, ftLastWriteTime.dwLowDateTime=0x9edd100, ftLastWriteTime.dwHighDateTime=0x1d8c065, nFileSizeHigh=0x0, nFileSizeLow=0x17dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="YbS7-JwT.flv", cAlternateFileName="")) returned 1 [0181.504] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4b1f65c | out: lpFindFileData=0x4b1f65c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0181.504] FindClose (in: hFindFile=0x7aabf8 | out: hFindFile=0x7aabf8) returned 1 [0181.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8e4) returned 1 [0181.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8f0) returned 1 [0181.550] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-6j3wVd6H.wav", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-6j3wVd6H.wav", lpFilePart=0x0) returned 0x2b [0181.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-6j3wVd6H.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-6j3wvd6h.wav"), fInfoLevelId=0x0, lpFileInformation=0x22e0150 | out: lpFileInformation=0x22e0150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ed649e0, ftCreationTime.dwHighDateTime=0x1d8ba82, ftLastAccessTime.dwLowDateTime=0xdde77d40, ftLastAccessTime.dwHighDateTime=0x1d8bc54, ftLastWriteTime.dwLowDateTime=0xdde77d40, ftLastWriteTime.dwHighDateTime=0x1d8bc54, nFileSizeHigh=0x0, nFileSizeLow=0x1009f)) returned 1 [0181.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.553] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\2yaTsjufwmYx.bmp", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\2yaTsjufwmYx.bmp", lpFilePart=0x0) returned 0x2e [0181.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\2yaTsjufwmYx.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\2yatsjufwmyx.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22e0220 | out: lpFileInformation=0x22e0220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0fb6300, ftCreationTime.dwHighDateTime=0x1d8b7b8, ftLastAccessTime.dwLowDateTime=0xaa1357d0, ftLastAccessTime.dwHighDateTime=0x1d8b7ce, ftLastWriteTime.dwLowDateTime=0xaa1357d0, ftLastWriteTime.dwHighDateTime=0x1d8b7ce, nFileSizeHigh=0x0, nFileSizeLow=0x3401)) returned 1 [0181.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.553] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\5nZcfaMBhgu2LD.flv", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\5nZcfaMBhgu2LD.flv", lpFilePart=0x0) returned 0x30 [0181.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\5nZcfaMBhgu2LD.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\5nzcfambhgu2ld.flv"), fInfoLevelId=0x0, lpFileInformation=0x22e0300 | out: lpFileInformation=0x22e0300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8179fc40, ftCreationTime.dwHighDateTime=0x1d8b81c, ftLastAccessTime.dwLowDateTime=0x1c74a8d0, ftLastAccessTime.dwHighDateTime=0x1d8ba7f, ftLastWriteTime.dwLowDateTime=0x1c74a8d0, ftLastWriteTime.dwHighDateTime=0x1d8ba7f, nFileSizeHigh=0x0, nFileSizeLow=0x1104b)) returned 1 [0181.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.554] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe", lpFilePart=0x0) returned 0x62 [0181.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\82acc1095843da9a689f138666b41520ccb2bda8be0c8b3cd734adbfa14d6746.exe"), fInfoLevelId=0x0, lpFileInformation=0x22e03e8 | out: lpFileInformation=0x22e03e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83291b80, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0x83291b80, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0x1e69c300, ftLastWriteTime.dwHighDateTime=0x1d92b86, nFileSizeHigh=0x0, nFileSizeLow=0x53e00)) returned 1 [0181.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.554] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9Bco.avi", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9Bco.avi", lpFilePart=0x0) returned 0x26 [0181.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9Bco.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\9bco.avi"), fInfoLevelId=0x0, lpFileInformation=0x22e0598 | out: lpFileInformation=0x22e0598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9468f3b0, ftCreationTime.dwHighDateTime=0x1d8b8e4, ftLastAccessTime.dwLowDateTime=0x16c9c580, ftLastAccessTime.dwHighDateTime=0x1d8b9b9, ftLastWriteTime.dwLowDateTime=0x16c9c580, ftLastWriteTime.dwHighDateTime=0x1d8b9b9, nFileSizeHigh=0x0, nFileSizeLow=0x17e1a)) returned 1 [0181.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.554] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9tqipBAM.m4a", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9tqipBAM.m4a", lpFilePart=0x0) returned 0x2a [0181.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9tqipBAM.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\9tqipbam.m4a"), fInfoLevelId=0x0, lpFileInformation=0x22e0658 | out: lpFileInformation=0x22e0658*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda8992f0, ftCreationTime.dwHighDateTime=0x1d8b777, ftLastAccessTime.dwLowDateTime=0xe32b5830, ftLastAccessTime.dwHighDateTime=0x1d8bd58, ftLastWriteTime.dwLowDateTime=0xe32b5830, ftLastWriteTime.dwHighDateTime=0x1d8bd58, nFileSizeHigh=0x0, nFileSizeLow=0xaa7d)) returned 1 [0181.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.555] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\chh7tG4ZOOPfle3.png", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\chh7tG4ZOOPfle3.png", lpFilePart=0x0) returned 0x31 [0181.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\chh7tG4ZOOPfle3.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\chh7tg4zoopfle3.png"), fInfoLevelId=0x0, lpFileInformation=0x22e0728 | out: lpFileInformation=0x22e0728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcac9fcd0, ftCreationTime.dwHighDateTime=0x1d8b5db, ftLastAccessTime.dwLowDateTime=0xaaa97110, ftLastAccessTime.dwHighDateTime=0x1d8bdd3, ftLastWriteTime.dwLowDateTime=0xaaa97110, ftLastWriteTime.dwHighDateTime=0x1d8bdd3, nFileSizeHigh=0x0, nFileSizeLow=0x18f7f)) returned 1 [0181.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.555] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cib-t5wDlO7eTKCnU2.swf", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cib-t5wDlO7eTKCnU2.swf", lpFilePart=0x0) returned 0x34 [0181.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\cib-t5wDlO7eTKCnU2.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cib-t5wdlo7etkcnu2.swf"), fInfoLevelId=0x0, lpFileInformation=0x22e0810 | out: lpFileInformation=0x22e0810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e0dddf0, ftCreationTime.dwHighDateTime=0x1d8bd4d, ftLastAccessTime.dwLowDateTime=0x113a3390, ftLastAccessTime.dwHighDateTime=0x1d8c060, ftLastWriteTime.dwLowDateTime=0x113a3390, ftLastWriteTime.dwHighDateTime=0x1d8c060, nFileSizeHigh=0x0, nFileSizeLow=0x310c)) returned 1 [0181.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.555] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\CpGUjN4mN5ak.wav", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\CpGUjN4mN5ak.wav", lpFilePart=0x0) returned 0x2e [0181.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\CpGUjN4mN5ak.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cpgujn4mn5ak.wav"), fInfoLevelId=0x0, lpFileInformation=0x22e0908 | out: lpFileInformation=0x22e0908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24ff58a0, ftCreationTime.dwHighDateTime=0x1d8bbf7, ftLastAccessTime.dwLowDateTime=0xaea43270, ftLastAccessTime.dwHighDateTime=0x1d8c051, ftLastWriteTime.dwLowDateTime=0xaea43270, ftLastWriteTime.dwHighDateTime=0x1d8c051, nFileSizeHigh=0x0, nFileSizeLow=0x65b8)) returned 1 [0181.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.556] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0181.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22e09e8 | out: lpFileInformation=0x22e09e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0181.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.649] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x4b1f3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x89 [0181.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f888) returned 1 [0181.649] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x4b1f904 | out: lpFileInformation=0x4b1f904*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f884) returned 1 [0181.650] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x0) returned 0x89 [0181.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f818) returned 1 [0181.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x4b1f894 | out: lpFileInformation=0x4b1f894*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f814) returned 1 [0181.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f818) returned 1 [0181.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x4b1f894 | out: lpFileInformation=0x4b1f894*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f814) returned 1 [0181.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f818) returned 1 [0181.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx"), fInfoLevelId=0x0, lpFileInformation=0x4b1f894 | out: lpFileInformation=0x4b1f894*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f814) returned 1 [0181.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f818) returned 1 [0181.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users"), fInfoLevelId=0x0, lpFileInformation=0x4b1f894 | out: lpFileInformation=0x4b1f894*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f814) returned 1 [0181.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f818) returned 1 [0181.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c"), fInfoLevelId=0x0, lpFileInformation=0x4b1f894 | out: lpFileInformation=0x4b1f894*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f814) returned 1 [0181.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f818) returned 1 [0181.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber"), fInfoLevelId=0x0, lpFileInformation=0x4b1f894 | out: lpFileInformation=0x4b1f894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2209c4a, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xf2209c4a, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xf2209c4a, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0181.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f814) returned 1 [0181.651] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c"), lpSecurityAttributes=0x0) returned 1 [0181.652] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users"), lpSecurityAttributes=0x0) returned 1 [0181.653] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx"), lpSecurityAttributes=0x0) returned 1 [0181.653] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\desktop"), lpSecurityAttributes=0x0) returned 1 [0181.655] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4b1f3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0181.655] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4b1f3b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x95 [0181.656] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\desktop\\desktop.ini"), bFailIfExists=0) returned 1 [0181.677] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\eUlg.ods", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\eUlg.ods", lpFilePart=0x0) returned 0x26 [0181.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\eUlg.ods" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\eulg.ods"), fInfoLevelId=0x0, lpFileInformation=0x22ed368 | out: lpFileInformation=0x22ed368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93b0cf40, ftCreationTime.dwHighDateTime=0x1d8b88c, ftLastAccessTime.dwLowDateTime=0xc913fdc0, ftLastAccessTime.dwHighDateTime=0x1d8ba20, ftLastWriteTime.dwLowDateTime=0xc913fdc0, ftLastWriteTime.dwHighDateTime=0x1d8ba20, nFileSizeHigh=0x0, nFileSizeLow=0x14a4a)) returned 1 [0181.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.677] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\FYJ1.pptx", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\FYJ1.pptx", lpFilePart=0x0) returned 0x27 [0181.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\FYJ1.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fyj1.pptx"), fInfoLevelId=0x0, lpFileInformation=0x22ed428 | out: lpFileInformation=0x22ed428*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6110a880, ftCreationTime.dwHighDateTime=0x1d8bb02, ftLastAccessTime.dwLowDateTime=0xbebbc8c0, ftLastAccessTime.dwHighDateTime=0x1d8c0de, ftLastWriteTime.dwLowDateTime=0xbebbc8c0, ftLastWriteTime.dwHighDateTime=0x1d8c0de, nFileSizeHigh=0x0, nFileSizeLow=0x6292)) returned 1 [0181.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.678] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\HJDXtUSQzN.odp", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\HJDXtUSQzN.odp", lpFilePart=0x0) returned 0x2c [0181.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.678] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\HJDXtUSQzN.odp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hjdxtusqzn.odp"), fInfoLevelId=0x0, lpFileInformation=0x22ed4e8 | out: lpFileInformation=0x22ed4e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52e375c0, ftCreationTime.dwHighDateTime=0x1d8c107, ftLastAccessTime.dwLowDateTime=0x53360b20, ftLastAccessTime.dwHighDateTime=0x1d8c11e, ftLastWriteTime.dwLowDateTime=0x53360b20, ftLastWriteTime.dwHighDateTime=0x1d8c11e, nFileSizeHigh=0x0, nFileSizeLow=0x849e)) returned 1 [0181.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.678] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\iLq3zNHP1Bvq2jgkzC.swf", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\iLq3zNHP1Bvq2jgkzC.swf", lpFilePart=0x0) returned 0x34 [0181.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.678] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\iLq3zNHP1Bvq2jgkzC.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ilq3znhp1bvq2jgkzc.swf"), fInfoLevelId=0x0, lpFileInformation=0x22ed5c0 | out: lpFileInformation=0x22ed5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95d451f0, ftCreationTime.dwHighDateTime=0x1d8bcb2, ftLastAccessTime.dwLowDateTime=0x3e5310e0, ftLastAccessTime.dwHighDateTime=0x1d8bdae, ftLastWriteTime.dwLowDateTime=0x3e5310e0, ftLastWriteTime.dwHighDateTime=0x1d8bdae, nFileSizeHigh=0x0, nFileSizeLow=0x13469)) returned 1 [0181.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.678] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\irK2.png", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\irK2.png", lpFilePart=0x0) returned 0x26 [0181.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.678] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\irK2.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\irk2.png"), fInfoLevelId=0x0, lpFileInformation=0x22ed6b8 | out: lpFileInformation=0x22ed6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7197bc0, ftCreationTime.dwHighDateTime=0x1d8b7ad, ftLastAccessTime.dwLowDateTime=0xcea29ec0, ftLastAccessTime.dwHighDateTime=0x1d8ba9f, ftLastWriteTime.dwLowDateTime=0xcea29ec0, ftLastWriteTime.dwHighDateTime=0x1d8ba9f, nFileSizeHigh=0x0, nFileSizeLow=0x29eb)) returned 1 [0181.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.679] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\knJlrMn.jpg", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\knJlrMn.jpg", lpFilePart=0x0) returned 0x29 [0181.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\knJlrMn.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\knjlrmn.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22ed778 | out: lpFileInformation=0x22ed778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe882b260, ftCreationTime.dwHighDateTime=0x1d8b93e, ftLastAccessTime.dwLowDateTime=0x55ed7ad0, ftLastAccessTime.dwHighDateTime=0x1d8ba4b, ftLastWriteTime.dwLowDateTime=0x55ed7ad0, ftLastWriteTime.dwHighDateTime=0x1d8ba4b, nFileSizeHigh=0x0, nFileSizeLow=0x53c3)) returned 1 [0181.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.679] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\L18V.ods", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\L18V.ods", lpFilePart=0x0) returned 0x26 [0181.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\L18V.ods" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\l18v.ods"), fInfoLevelId=0x0, lpFileInformation=0x22ed840 | out: lpFileInformation=0x22ed840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406f8380, ftCreationTime.dwHighDateTime=0x1d8b5f3, ftLastAccessTime.dwLowDateTime=0x36788730, ftLastAccessTime.dwHighDateTime=0x1d8bb86, ftLastWriteTime.dwLowDateTime=0x36788730, ftLastWriteTime.dwHighDateTime=0x1d8bb86, nFileSizeHigh=0x0, nFileSizeLow=0x4cd)) returned 1 [0181.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.679] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\mGLbr8EHVJwWvBHC.mp3", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\mGLbr8EHVJwWvBHC.mp3", lpFilePart=0x0) returned 0x32 [0181.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\mGLbr8EHVJwWvBHC.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\mglbr8ehvjwwvbhc.mp3"), fInfoLevelId=0x0, lpFileInformation=0x22ed940 | out: lpFileInformation=0x22ed940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e94e0, ftCreationTime.dwHighDateTime=0x1d8b31e, ftLastAccessTime.dwLowDateTime=0xf98eff50, ftLastAccessTime.dwHighDateTime=0x1d8bf65, ftLastWriteTime.dwLowDateTime=0xf98eff50, ftLastWriteTime.dwHighDateTime=0x1d8bf65, nFileSizeHigh=0x0, nFileSizeLow=0xde75)) returned 1 [0181.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.680] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\MgsHDnP3Ixv1ZL.mp3", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\MgsHDnP3Ixv1ZL.mp3", lpFilePart=0x0) returned 0x30 [0181.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\MgsHDnP3Ixv1ZL.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\mgshdnp3ixv1zl.mp3"), fInfoLevelId=0x0, lpFileInformation=0x22eda30 | out: lpFileInformation=0x22eda30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2085c7f0, ftCreationTime.dwHighDateTime=0x1d8b6d4, ftLastAccessTime.dwLowDateTime=0xc9273680, ftLastAccessTime.dwHighDateTime=0x1d8bbb3, ftLastWriteTime.dwLowDateTime=0xc9273680, ftLastWriteTime.dwHighDateTime=0x1d8bbb3, nFileSizeHigh=0x0, nFileSizeLow=0xa6b3)) returned 1 [0181.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.680] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\nsIVnWY.png", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\nsIVnWY.png", lpFilePart=0x0) returned 0x29 [0181.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\nsIVnWY.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\nsivnwy.png"), fInfoLevelId=0x0, lpFileInformation=0x22edb18 | out: lpFileInformation=0x22edb18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1622410, ftCreationTime.dwHighDateTime=0x1d8b29b, ftLastAccessTime.dwLowDateTime=0x203e2830, ftLastAccessTime.dwHighDateTime=0x1d8ba64, ftLastWriteTime.dwLowDateTime=0x203e2830, ftLastWriteTime.dwHighDateTime=0x1d8ba64, nFileSizeHigh=0x0, nFileSizeLow=0x17703)) returned 1 [0181.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.680] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\SmYoSoLSWK_urmMNr1Bb.flv", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\SmYoSoLSWK_urmMNr1Bb.flv", lpFilePart=0x0) returned 0x36 [0181.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\SmYoSoLSWK_urmMNr1Bb.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\smyosolswk_urmmnr1bb.flv"), fInfoLevelId=0x0, lpFileInformation=0x22edbe0 | out: lpFileInformation=0x22edbe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6bbbb10, ftCreationTime.dwHighDateTime=0x1d8b776, ftLastAccessTime.dwLowDateTime=0x9d1ca770, ftLastAccessTime.dwHighDateTime=0x1d8b92c, ftLastWriteTime.dwLowDateTime=0x9d1ca770, ftLastWriteTime.dwHighDateTime=0x1d8b92c, nFileSizeHigh=0x0, nFileSizeLow=0xb566)) returned 1 [0181.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.680] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\tftcjhfP.m4a", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\tftcjhfP.m4a", lpFilePart=0x0) returned 0x2a [0181.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\tftcjhfP.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\tftcjhfp.m4a"), fInfoLevelId=0x0, lpFileInformation=0x22edce0 | out: lpFileInformation=0x22edce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37934860, ftCreationTime.dwHighDateTime=0x1d8b1f6, ftLastAccessTime.dwLowDateTime=0x1b53c930, ftLastAccessTime.dwHighDateTime=0x1d8b742, ftLastWriteTime.dwLowDateTime=0x1b53c930, ftLastWriteTime.dwHighDateTime=0x1d8b742, nFileSizeHigh=0x0, nFileSizeLow=0x11ce8)) returned 1 [0181.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.681] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\TPZCYP.wav", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\TPZCYP.wav", lpFilePart=0x0) returned 0x28 [0181.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\TPZCYP.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\tpzcyp.wav"), fInfoLevelId=0x0, lpFileInformation=0x22eddb0 | out: lpFileInformation=0x22eddb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb43f9c60, ftCreationTime.dwHighDateTime=0x1d8b3e5, ftLastAccessTime.dwLowDateTime=0x166bae30, ftLastAccessTime.dwHighDateTime=0x1d8baf1, ftLastWriteTime.dwLowDateTime=0x166bae30, ftLastWriteTime.dwHighDateTime=0x1d8baf1, nFileSizeHigh=0x0, nFileSizeLow=0x177ee)) returned 1 [0181.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.681] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Uz lX.flv", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Uz lX.flv", lpFilePart=0x0) returned 0x27 [0181.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Uz lX.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\uz lx.flv"), fInfoLevelId=0x0, lpFileInformation=0x22ede78 | out: lpFileInformation=0x22ede78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cb842b0, ftCreationTime.dwHighDateTime=0x1d8bdf4, ftLastAccessTime.dwLowDateTime=0xce3e2fd0, ftLastAccessTime.dwHighDateTime=0x1d8bffe, ftLastWriteTime.dwLowDateTime=0xce3e2fd0, ftLastWriteTime.dwHighDateTime=0x1d8bffe, nFileSizeHigh=0x0, nFileSizeLow=0x24e6)) returned 1 [0181.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.681] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Ve Adh4F7cSMF.swf", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Ve Adh4F7cSMF.swf", lpFilePart=0x0) returned 0x2f [0181.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Ve Adh4F7cSMF.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ve adh4f7csmf.swf"), fInfoLevelId=0x0, lpFileInformation=0x22edf38 | out: lpFileInformation=0x22edf38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a7a9470, ftCreationTime.dwHighDateTime=0x1d8c09c, ftLastAccessTime.dwLowDateTime=0x6725f750, ftLastAccessTime.dwHighDateTime=0x1d8c0b3, ftLastWriteTime.dwLowDateTime=0x6725f750, ftLastWriteTime.dwHighDateTime=0x1d8c0b3, nFileSizeHigh=0x0, nFileSizeLow=0x47f0)) returned 1 [0181.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.682] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\vHaRBzu.bmp", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\vHaRBzu.bmp", lpFilePart=0x0) returned 0x29 [0181.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\vHaRBzu.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\vharbzu.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22ee018 | out: lpFileInformation=0x22ee018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x982c8420, ftCreationTime.dwHighDateTime=0x1d8c123, ftLastAccessTime.dwLowDateTime=0xb3f47f60, ftLastAccessTime.dwHighDateTime=0x1d8c127, ftLastWriteTime.dwLowDateTime=0xb3f47f60, ftLastWriteTime.dwHighDateTime=0x1d8c127, nFileSizeHigh=0x0, nFileSizeLow=0x53df)) returned 1 [0181.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.682] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\vPTw68y.flv", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\vPTw68y.flv", lpFilePart=0x0) returned 0x29 [0181.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\vPTw68y.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\vptw68y.flv"), fInfoLevelId=0x0, lpFileInformation=0x22ee0e0 | out: lpFileInformation=0x22ee0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb438f9e0, ftCreationTime.dwHighDateTime=0x1d8b26a, ftLastAccessTime.dwLowDateTime=0xe816cce0, ftLastAccessTime.dwHighDateTime=0x1d8b37a, ftLastWriteTime.dwLowDateTime=0xe816cce0, ftLastWriteTime.dwHighDateTime=0x1d8b37a, nFileSizeHigh=0x0, nFileSizeLow=0x15c1b)) returned 1 [0181.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.682] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\YbS7-JwT.flv", nBufferLength=0x105, lpBuffer=0x4b1f3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\YbS7-JwT.flv", lpFilePart=0x0) returned 0x2a [0181.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8dc) returned 1 [0181.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\YbS7-JwT.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ybs7-jwt.flv"), fInfoLevelId=0x0, lpFileInformation=0x22ee1a8 | out: lpFileInformation=0x22ee1a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20202850, ftCreationTime.dwHighDateTime=0x1d8b6d4, ftLastAccessTime.dwLowDateTime=0x9edd100, ftLastAccessTime.dwHighDateTime=0x1d8c065, ftLastWriteTime.dwLowDateTime=0x9edd100, ftLastWriteTime.dwHighDateTime=0x1d8c065, nFileSizeHigh=0x0, nFileSizeLow=0x17dfe)) returned 1 [0181.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8d8) returned 1 [0181.683] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_", nBufferLength=0x105, lpBuffer=0x4b1f3d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_", lpFilePart=0x0) returned 0x2c [0181.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f878) returned 1 [0181.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_"), fInfoLevelId=0x0, lpFileInformation=0x4b1f8f4 | out: lpFileInformation=0x4b1f8f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0181.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f874) returned 1 [0181.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8f8) returned 1 [0181.683] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_", nBufferLength=0x105, lpBuffer=0x4b1f3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_", lpFilePart=0x0) returned 0x2c [0181.683] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\*"), lpFindFileData=0x4b1f620 | out: lpFindFileData=0x4b1f620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aac38 [0181.807] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f62c | out: lpFindFileData=0x4b1f62c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.807] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f62c | out: lpFindFileData=0x4b1f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf15daed0, ftCreationTime.dwHighDateTime=0x1d8b876, ftLastAccessTime.dwLowDateTime=0x4e1ae0a0, ftLastAccessTime.dwHighDateTime=0x1d8bed7, ftLastWriteTime.dwLowDateTime=0x4e1ae0a0, ftLastWriteTime.dwHighDateTime=0x1d8bed7, nFileSizeHigh=0x0, nFileSizeLow=0xbd08, dwReserved0=0x0, dwReserved1=0x0, cFileName="4JORAA_2dvLjbNy7.mp3", cAlternateFileName="4JORAA~1.MP3")) returned 1 [0181.807] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f62c | out: lpFindFileData=0x4b1f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x861947c0, ftCreationTime.dwHighDateTime=0x1d8bd1b, ftLastAccessTime.dwLowDateTime=0xeb856a0, ftLastAccessTime.dwHighDateTime=0x1d8bd1e, ftLastWriteTime.dwLowDateTime=0xeb856a0, ftLastWriteTime.dwHighDateTime=0x1d8bd1e, nFileSizeHigh=0x0, nFileSizeLow=0x173a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ek6U.wav", cAlternateFileName="")) returned 1 [0181.807] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f62c | out: lpFindFileData=0x4b1f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe60e750, ftCreationTime.dwHighDateTime=0x1d8b163, ftLastAccessTime.dwLowDateTime=0x8ace7090, ftLastAccessTime.dwHighDateTime=0x1d8bf7a, ftLastWriteTime.dwLowDateTime=0x8ace7090, ftLastWriteTime.dwHighDateTime=0x1d8bf7a, nFileSizeHigh=0x0, nFileSizeLow=0x64f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gvQ3Hjy8U2-C2P1Q.gif", cAlternateFileName="GVQ3HJ~1.GIF")) returned 1 [0181.807] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f62c | out: lpFindFileData=0x4b1f62c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LJIKB", cAlternateFileName="")) returned 1 [0181.807] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f62c | out: lpFindFileData=0x4b1f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf842c10, ftCreationTime.dwHighDateTime=0x1d8c095, ftLastAccessTime.dwLowDateTime=0xf91ebb60, ftLastAccessTime.dwHighDateTime=0x1d8c0a4, ftLastWriteTime.dwLowDateTime=0xf91ebb60, ftLastWriteTime.dwHighDateTime=0x1d8c0a4, nFileSizeHigh=0x0, nFileSizeLow=0x596c, dwReserved0=0x0, dwReserved1=0x0, cFileName="o5MUa-6.wav", cAlternateFileName="")) returned 1 [0181.808] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f62c | out: lpFindFileData=0x4b1f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8877cb70, ftCreationTime.dwHighDateTime=0x1d8b2fa, ftLastAccessTime.dwLowDateTime=0xe2c31410, ftLastAccessTime.dwHighDateTime=0x1d8b703, ftLastWriteTime.dwLowDateTime=0xe2c31410, ftLastWriteTime.dwHighDateTime=0x1d8b703, nFileSizeHigh=0x0, nFileSizeLow=0x12e5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Od i5WMI4-V8Moa.ots", cAlternateFileName="ODI5WM~1.OTS")) returned 1 [0181.808] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f62c | out: lpFindFileData=0x4b1f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f826dc0, ftCreationTime.dwHighDateTime=0x1d8b935, ftLastAccessTime.dwLowDateTime=0xcc8e6400, ftLastAccessTime.dwHighDateTime=0x1d8beed, ftLastWriteTime.dwLowDateTime=0xcc8e6400, ftLastWriteTime.dwHighDateTime=0x1d8beed, nFileSizeHigh=0x0, nFileSizeLow=0x725a, dwReserved0=0x0, dwReserved1=0x0, cFileName="_QGFEo2A2-pto23JslcT.png", cAlternateFileName="_QGFEO~1.PNG")) returned 1 [0181.808] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f62c | out: lpFindFileData=0x4b1f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f826dc0, ftCreationTime.dwHighDateTime=0x1d8b935, ftLastAccessTime.dwLowDateTime=0xcc8e6400, ftLastAccessTime.dwHighDateTime=0x1d8beed, ftLastWriteTime.dwLowDateTime=0xcc8e6400, ftLastWriteTime.dwHighDateTime=0x1d8beed, nFileSizeHigh=0x0, nFileSizeLow=0x725a, dwReserved0=0x0, dwReserved1=0x0, cFileName="_QGFEo2A2-pto23JslcT.png", cAlternateFileName="_QGFEO~1.PNG")) returned 0 [0181.808] FindClose (in: hFindFile=0x7aac38 | out: hFindFile=0x7aac38) returned 1 [0181.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8b4) returned 1 [0181.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8c0) returned 1 [0181.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8f8) returned 1 [0181.809] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_", nBufferLength=0x105, lpBuffer=0x4b1f3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_", lpFilePart=0x0) returned 0x2c [0181.809] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\*"), lpFindFileData=0x4b1f620 | out: lpFindFileData=0x4b1f620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aac38 [0181.810] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f62c | out: lpFindFileData=0x4b1f62c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf247870, ftCreationTime.dwHighDateTime=0x1d8b1cb, ftLastAccessTime.dwLowDateTime=0x1d898cf0, ftLastAccessTime.dwHighDateTime=0x1d8ba0b, ftLastWriteTime.dwLowDateTime=0x1d898cf0, ftLastWriteTime.dwHighDateTime=0x1d8ba0b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.810] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f62c | out: lpFindFileData=0x4b1f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf15daed0, ftCreationTime.dwHighDateTime=0x1d8b876, ftLastAccessTime.dwLowDateTime=0x4e1ae0a0, ftLastAccessTime.dwHighDateTime=0x1d8bed7, ftLastWriteTime.dwLowDateTime=0x4e1ae0a0, ftLastWriteTime.dwHighDateTime=0x1d8bed7, nFileSizeHigh=0x0, nFileSizeLow=0xbd08, dwReserved0=0x0, dwReserved1=0x0, cFileName="4JORAA_2dvLjbNy7.mp3", cAlternateFileName="4JORAA~1.MP3")) returned 1 [0181.810] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f62c | out: lpFindFileData=0x4b1f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x861947c0, ftCreationTime.dwHighDateTime=0x1d8bd1b, ftLastAccessTime.dwLowDateTime=0xeb856a0, ftLastAccessTime.dwHighDateTime=0x1d8bd1e, ftLastWriteTime.dwLowDateTime=0xeb856a0, ftLastWriteTime.dwHighDateTime=0x1d8bd1e, nFileSizeHigh=0x0, nFileSizeLow=0x173a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ek6U.wav", cAlternateFileName="")) returned 1 [0181.810] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f62c | out: lpFindFileData=0x4b1f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe60e750, ftCreationTime.dwHighDateTime=0x1d8b163, ftLastAccessTime.dwLowDateTime=0x8ace7090, ftLastAccessTime.dwHighDateTime=0x1d8bf7a, ftLastWriteTime.dwLowDateTime=0x8ace7090, ftLastWriteTime.dwHighDateTime=0x1d8bf7a, nFileSizeHigh=0x0, nFileSizeLow=0x64f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="gvQ3Hjy8U2-C2P1Q.gif", cAlternateFileName="GVQ3HJ~1.GIF")) returned 1 [0181.810] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f62c | out: lpFindFileData=0x4b1f62c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LJIKB", cAlternateFileName="")) returned 1 [0181.811] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f62c | out: lpFindFileData=0x4b1f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf842c10, ftCreationTime.dwHighDateTime=0x1d8c095, ftLastAccessTime.dwLowDateTime=0xf91ebb60, ftLastAccessTime.dwHighDateTime=0x1d8c0a4, ftLastWriteTime.dwLowDateTime=0xf91ebb60, ftLastWriteTime.dwHighDateTime=0x1d8c0a4, nFileSizeHigh=0x0, nFileSizeLow=0x596c, dwReserved0=0x0, dwReserved1=0x0, cFileName="o5MUa-6.wav", cAlternateFileName="")) returned 1 [0181.811] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f62c | out: lpFindFileData=0x4b1f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8877cb70, ftCreationTime.dwHighDateTime=0x1d8b2fa, ftLastAccessTime.dwLowDateTime=0xe2c31410, ftLastAccessTime.dwHighDateTime=0x1d8b703, ftLastWriteTime.dwLowDateTime=0xe2c31410, ftLastWriteTime.dwHighDateTime=0x1d8b703, nFileSizeHigh=0x0, nFileSizeLow=0x12e5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Od i5WMI4-V8Moa.ots", cAlternateFileName="ODI5WM~1.OTS")) returned 1 [0181.811] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f62c | out: lpFindFileData=0x4b1f62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f826dc0, ftCreationTime.dwHighDateTime=0x1d8b935, ftLastAccessTime.dwLowDateTime=0xcc8e6400, ftLastAccessTime.dwHighDateTime=0x1d8beed, ftLastWriteTime.dwLowDateTime=0xcc8e6400, ftLastWriteTime.dwHighDateTime=0x1d8beed, nFileSizeHigh=0x0, nFileSizeLow=0x725a, dwReserved0=0x0, dwReserved1=0x0, cFileName="_QGFEo2A2-pto23JslcT.png", cAlternateFileName="_QGFEO~1.PNG")) returned 1 [0181.811] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f62c | out: lpFindFileData=0x4b1f62c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0181.811] FindClose (in: hFindFile=0x7aac38 | out: hFindFile=0x7aac38) returned 1 [0181.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8b4) returned 1 [0181.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8c0) returned 1 [0181.812] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\4JORAA_2dvLjbNy7.mp3", nBufferLength=0x105, lpBuffer=0x4b1f3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\4JORAA_2dvLjbNy7.mp3", lpFilePart=0x0) returned 0x41 [0181.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8ac) returned 1 [0181.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\4JORAA_2dvLjbNy7.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\4joraa_2dvljbny7.mp3"), fInfoLevelId=0x0, lpFileInformation=0x22fd870 | out: lpFileInformation=0x22fd870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf15daed0, ftCreationTime.dwHighDateTime=0x1d8b876, ftLastAccessTime.dwLowDateTime=0x4e1ae0a0, ftLastAccessTime.dwHighDateTime=0x1d8bed7, ftLastWriteTime.dwLowDateTime=0x4e1ae0a0, ftLastWriteTime.dwHighDateTime=0x1d8bed7, nFileSizeHigh=0x0, nFileSizeLow=0xbd08)) returned 1 [0181.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8a8) returned 1 [0181.813] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\Ek6U.wav", nBufferLength=0x105, lpBuffer=0x4b1f3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\Ek6U.wav", lpFilePart=0x0) returned 0x35 [0181.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8ac) returned 1 [0181.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\Ek6U.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ek6u.wav"), fInfoLevelId=0x0, lpFileInformation=0x22fd97c | out: lpFileInformation=0x22fd97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x861947c0, ftCreationTime.dwHighDateTime=0x1d8bd1b, ftLastAccessTime.dwLowDateTime=0xeb856a0, ftLastAccessTime.dwHighDateTime=0x1d8bd1e, ftLastWriteTime.dwLowDateTime=0xeb856a0, ftLastWriteTime.dwHighDateTime=0x1d8bd1e, nFileSizeHigh=0x0, nFileSizeLow=0x173a9)) returned 1 [0181.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8a8) returned 1 [0181.820] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\gvQ3Hjy8U2-C2P1Q.gif", nBufferLength=0x105, lpBuffer=0x4b1f3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\gvQ3Hjy8U2-C2P1Q.gif", lpFilePart=0x0) returned 0x41 [0181.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8ac) returned 1 [0181.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\gvQ3Hjy8U2-C2P1Q.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\gvq3hjy8u2-c2p1q.gif"), fInfoLevelId=0x0, lpFileInformation=0x22fda58 | out: lpFileInformation=0x22fda58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe60e750, ftCreationTime.dwHighDateTime=0x1d8b163, ftLastAccessTime.dwLowDateTime=0x8ace7090, ftLastAccessTime.dwHighDateTime=0x1d8bf7a, ftLastWriteTime.dwLowDateTime=0x8ace7090, ftLastWriteTime.dwHighDateTime=0x1d8bf7a, nFileSizeHigh=0x0, nFileSizeLow=0x64f1)) returned 1 [0181.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8a8) returned 1 [0181.820] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\o5MUa-6.wav", nBufferLength=0x105, lpBuffer=0x4b1f3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\o5MUa-6.wav", lpFilePart=0x0) returned 0x38 [0181.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8ac) returned 1 [0181.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\o5MUa-6.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\o5mua-6.wav"), fInfoLevelId=0x0, lpFileInformation=0x22fdb64 | out: lpFileInformation=0x22fdb64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf842c10, ftCreationTime.dwHighDateTime=0x1d8c095, ftLastAccessTime.dwLowDateTime=0xf91ebb60, ftLastAccessTime.dwHighDateTime=0x1d8c0a4, ftLastWriteTime.dwLowDateTime=0xf91ebb60, ftLastWriteTime.dwHighDateTime=0x1d8c0a4, nFileSizeHigh=0x0, nFileSizeLow=0x596c)) returned 1 [0181.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8a8) returned 1 [0181.820] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\Od i5WMI4-V8Moa.ots", nBufferLength=0x105, lpBuffer=0x4b1f3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\Od i5WMI4-V8Moa.ots", lpFilePart=0x0) returned 0x40 [0181.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8ac) returned 1 [0181.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\Od i5WMI4-V8Moa.ots" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\od i5wmi4-v8moa.ots"), fInfoLevelId=0x0, lpFileInformation=0x22fdc4c | out: lpFileInformation=0x22fdc4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8877cb70, ftCreationTime.dwHighDateTime=0x1d8b2fa, ftLastAccessTime.dwLowDateTime=0xe2c31410, ftLastAccessTime.dwHighDateTime=0x1d8b703, ftLastWriteTime.dwLowDateTime=0xe2c31410, ftLastWriteTime.dwHighDateTime=0x1d8b703, nFileSizeHigh=0x0, nFileSizeLow=0x12e5a)) returned 1 [0181.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8a8) returned 1 [0181.820] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\_QGFEo2A2-pto23JslcT.png", nBufferLength=0x105, lpBuffer=0x4b1f3b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\_QGFEo2A2-pto23JslcT.png", lpFilePart=0x0) returned 0x45 [0181.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8ac) returned 1 [0181.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\_QGFEo2A2-pto23JslcT.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\_qgfeo2a2-pto23jslct.png"), fInfoLevelId=0x0, lpFileInformation=0x22fdd54 | out: lpFileInformation=0x22fdd54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f826dc0, ftCreationTime.dwHighDateTime=0x1d8b935, ftLastAccessTime.dwLowDateTime=0xcc8e6400, ftLastAccessTime.dwHighDateTime=0x1d8beed, ftLastWriteTime.dwLowDateTime=0xcc8e6400, ftLastWriteTime.dwHighDateTime=0x1d8beed, nFileSizeHigh=0x0, nFileSizeLow=0x725a)) returned 1 [0181.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f8a8) returned 1 [0181.821] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB", nBufferLength=0x105, lpBuffer=0x4b1f3a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB", lpFilePart=0x0) returned 0x32 [0181.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f848) returned 1 [0181.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb"), fInfoLevelId=0x0, lpFileInformation=0x4b1f8c4 | out: lpFileInformation=0x4b1f8c4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0181.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f844) returned 1 [0181.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8c8) returned 1 [0181.821] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB", nBufferLength=0x105, lpBuffer=0x4b1f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB", lpFilePart=0x0) returned 0x32 [0181.821] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\*"), lpFindFileData=0x4b1f5f0 | out: lpFindFileData=0x4b1f5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aac38 [0181.823] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.823] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7baf7c20, ftCreationTime.dwHighDateTime=0x1d8bafd, ftLastAccessTime.dwLowDateTime=0x405496f0, ftLastAccessTime.dwHighDateTime=0x1d8bb21, ftLastWriteTime.dwLowDateTime=0x405496f0, ftLastWriteTime.dwHighDateTime=0x1d8bb21, nFileSizeHigh=0x0, nFileSizeLow=0x1378e, dwReserved0=0x0, dwReserved1=0x0, cFileName="484IJyBLXQXJI6z5aVY.png", cAlternateFileName="484IJY~1.PNG")) returned 1 [0181.823] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401b8f60, ftCreationTime.dwHighDateTime=0x1d8b0ca, ftLastAccessTime.dwLowDateTime=0x1b0b3330, ftLastAccessTime.dwHighDateTime=0x1d8bc3f, ftLastWriteTime.dwLowDateTime=0x1b0b3330, ftLastWriteTime.dwHighDateTime=0x1d8bc3f, nFileSizeHigh=0x0, nFileSizeLow=0x1479a, dwReserved0=0x0, dwReserved1=0x0, cFileName="9muSQLT.avi", cAlternateFileName="")) returned 1 [0181.823] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90828520, ftCreationTime.dwHighDateTime=0x1d8be9f, ftLastAccessTime.dwLowDateTime=0xa73ac3d0, ftLastAccessTime.dwHighDateTime=0x1d8c0cb, ftLastWriteTime.dwLowDateTime=0xa73ac3d0, ftLastWriteTime.dwHighDateTime=0x1d8c0cb, nFileSizeHigh=0x0, nFileSizeLow=0x13dd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar1mtEjehL5qHu.wav", cAlternateFileName="AR1MTE~1.WAV")) returned 1 [0181.823] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a2cc1f0, ftCreationTime.dwHighDateTime=0x1d8b754, ftLastAccessTime.dwLowDateTime=0xde186450, ftLastAccessTime.dwHighDateTime=0x1d8babf, ftLastWriteTime.dwLowDateTime=0xde186450, ftLastWriteTime.dwHighDateTime=0x1d8babf, nFileSizeHigh=0x0, nFileSizeLow=0xd832, dwReserved0=0x0, dwReserved1=0x0, cFileName="gKOrHpH8a3UQ.flv", cAlternateFileName="GKORHP~1.FLV")) returned 1 [0181.824] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9141f280, ftCreationTime.dwHighDateTime=0x1d8b3f4, ftLastAccessTime.dwLowDateTime=0xf7257800, ftLastAccessTime.dwHighDateTime=0x1d8b562, ftLastWriteTime.dwLowDateTime=0xf7257800, ftLastWriteTime.dwHighDateTime=0x1d8b562, nFileSizeHigh=0x0, nFileSizeLow=0xc673, dwReserved0=0x0, dwReserved1=0x0, cFileName="N3sG1qBeI3bDTH.avi", cAlternateFileName="N3SG1Q~1.AVI")) returned 1 [0181.824] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdd04cc0, ftCreationTime.dwHighDateTime=0x1d8be93, ftLastAccessTime.dwLowDateTime=0xbce6da20, ftLastAccessTime.dwHighDateTime=0x1d8c0bc, ftLastWriteTime.dwLowDateTime=0xbce6da20, ftLastWriteTime.dwHighDateTime=0x1d8c0bc, nFileSizeHigh=0x0, nFileSizeLow=0x149c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="P3g7Dv.m4a", cAlternateFileName="")) returned 1 [0181.824] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7bdf1d0, ftCreationTime.dwHighDateTime=0x1d8b788, ftLastAccessTime.dwLowDateTime=0x14b20280, ftLastAccessTime.dwHighDateTime=0x1d8b98c, ftLastWriteTime.dwLowDateTime=0x14b20280, ftLastWriteTime.dwHighDateTime=0x1d8b98c, nFileSizeHigh=0x0, nFileSizeLow=0x86bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="T BZFFxaGrVGg4fy9.swf", cAlternateFileName="TBZFFX~1.SWF")) returned 1 [0181.824] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1aeed0, ftCreationTime.dwHighDateTime=0x1d8b622, ftLastAccessTime.dwLowDateTime=0xb144fd0, ftLastAccessTime.dwHighDateTime=0x1d8b937, ftLastWriteTime.dwLowDateTime=0xb144fd0, ftLastWriteTime.dwHighDateTime=0x1d8b937, nFileSizeHigh=0x0, nFileSizeLow=0x16a8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="UfpnW-.mp3", cAlternateFileName="")) returned 1 [0181.824] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c018d60, ftCreationTime.dwHighDateTime=0x1d8b17f, ftLastAccessTime.dwLowDateTime=0x23689000, ftLastAccessTime.dwHighDateTime=0x1d8b478, ftLastWriteTime.dwLowDateTime=0x23689000, ftLastWriteTime.dwHighDateTime=0x1d8b478, nFileSizeHigh=0x0, nFileSizeLow=0xf80e, dwReserved0=0x0, dwReserved1=0x0, cFileName="z- ZK.avi", cAlternateFileName="Z-ZK~1.AVI")) returned 1 [0181.824] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c018d60, ftCreationTime.dwHighDateTime=0x1d8b17f, ftLastAccessTime.dwLowDateTime=0x23689000, ftLastAccessTime.dwHighDateTime=0x1d8b478, ftLastWriteTime.dwLowDateTime=0x23689000, ftLastWriteTime.dwHighDateTime=0x1d8b478, nFileSizeHigh=0x0, nFileSizeLow=0xf80e, dwReserved0=0x0, dwReserved1=0x0, cFileName="z- ZK.avi", cAlternateFileName="Z-ZK~1.AVI")) returned 0 [0181.824] FindClose (in: hFindFile=0x7aac38 | out: hFindFile=0x7aac38) returned 1 [0181.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f884) returned 1 [0181.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f890) returned 1 [0181.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f8c8) returned 1 [0181.825] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB", nBufferLength=0x105, lpBuffer=0x4b1f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB", lpFilePart=0x0) returned 0x32 [0181.825] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\*"), lpFindFileData=0x4b1f5f0 | out: lpFindFileData=0x4b1f5f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aac38 [0181.827] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe47c9db0, ftCreationTime.dwHighDateTime=0x1d8bd13, ftLastAccessTime.dwLowDateTime=0xcc0e8050, ftLastAccessTime.dwHighDateTime=0x1d8c087, ftLastWriteTime.dwLowDateTime=0xcc0e8050, ftLastWriteTime.dwHighDateTime=0x1d8c087, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.827] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7baf7c20, ftCreationTime.dwHighDateTime=0x1d8bafd, ftLastAccessTime.dwLowDateTime=0x405496f0, ftLastAccessTime.dwHighDateTime=0x1d8bb21, ftLastWriteTime.dwLowDateTime=0x405496f0, ftLastWriteTime.dwHighDateTime=0x1d8bb21, nFileSizeHigh=0x0, nFileSizeLow=0x1378e, dwReserved0=0x0, dwReserved1=0x0, cFileName="484IJyBLXQXJI6z5aVY.png", cAlternateFileName="484IJY~1.PNG")) returned 1 [0181.827] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401b8f60, ftCreationTime.dwHighDateTime=0x1d8b0ca, ftLastAccessTime.dwLowDateTime=0x1b0b3330, ftLastAccessTime.dwHighDateTime=0x1d8bc3f, ftLastWriteTime.dwLowDateTime=0x1b0b3330, ftLastWriteTime.dwHighDateTime=0x1d8bc3f, nFileSizeHigh=0x0, nFileSizeLow=0x1479a, dwReserved0=0x0, dwReserved1=0x0, cFileName="9muSQLT.avi", cAlternateFileName="")) returned 1 [0181.827] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90828520, ftCreationTime.dwHighDateTime=0x1d8be9f, ftLastAccessTime.dwLowDateTime=0xa73ac3d0, ftLastAccessTime.dwHighDateTime=0x1d8c0cb, ftLastWriteTime.dwLowDateTime=0xa73ac3d0, ftLastWriteTime.dwHighDateTime=0x1d8c0cb, nFileSizeHigh=0x0, nFileSizeLow=0x13dd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar1mtEjehL5qHu.wav", cAlternateFileName="AR1MTE~1.WAV")) returned 1 [0181.827] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a2cc1f0, ftCreationTime.dwHighDateTime=0x1d8b754, ftLastAccessTime.dwLowDateTime=0xde186450, ftLastAccessTime.dwHighDateTime=0x1d8babf, ftLastWriteTime.dwLowDateTime=0xde186450, ftLastWriteTime.dwHighDateTime=0x1d8babf, nFileSizeHigh=0x0, nFileSizeLow=0xd832, dwReserved0=0x0, dwReserved1=0x0, cFileName="gKOrHpH8a3UQ.flv", cAlternateFileName="GKORHP~1.FLV")) returned 1 [0181.827] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9141f280, ftCreationTime.dwHighDateTime=0x1d8b3f4, ftLastAccessTime.dwLowDateTime=0xf7257800, ftLastAccessTime.dwHighDateTime=0x1d8b562, ftLastWriteTime.dwLowDateTime=0xf7257800, ftLastWriteTime.dwHighDateTime=0x1d8b562, nFileSizeHigh=0x0, nFileSizeLow=0xc673, dwReserved0=0x0, dwReserved1=0x0, cFileName="N3sG1qBeI3bDTH.avi", cAlternateFileName="N3SG1Q~1.AVI")) returned 1 [0181.828] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdd04cc0, ftCreationTime.dwHighDateTime=0x1d8be93, ftLastAccessTime.dwLowDateTime=0xbce6da20, ftLastAccessTime.dwHighDateTime=0x1d8c0bc, ftLastWriteTime.dwLowDateTime=0xbce6da20, ftLastWriteTime.dwHighDateTime=0x1d8c0bc, nFileSizeHigh=0x0, nFileSizeLow=0x149c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="P3g7Dv.m4a", cAlternateFileName="")) returned 1 [0181.828] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7bdf1d0, ftCreationTime.dwHighDateTime=0x1d8b788, ftLastAccessTime.dwLowDateTime=0x14b20280, ftLastAccessTime.dwHighDateTime=0x1d8b98c, ftLastWriteTime.dwLowDateTime=0x14b20280, ftLastWriteTime.dwHighDateTime=0x1d8b98c, nFileSizeHigh=0x0, nFileSizeLow=0x86bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="T BZFFxaGrVGg4fy9.swf", cAlternateFileName="TBZFFX~1.SWF")) returned 1 [0181.828] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1aeed0, ftCreationTime.dwHighDateTime=0x1d8b622, ftLastAccessTime.dwLowDateTime=0xb144fd0, ftLastAccessTime.dwHighDateTime=0x1d8b937, ftLastWriteTime.dwLowDateTime=0xb144fd0, ftLastWriteTime.dwHighDateTime=0x1d8b937, nFileSizeHigh=0x0, nFileSizeLow=0x16a8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="UfpnW-.mp3", cAlternateFileName="")) returned 1 [0181.828] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c018d60, ftCreationTime.dwHighDateTime=0x1d8b17f, ftLastAccessTime.dwLowDateTime=0x23689000, ftLastAccessTime.dwHighDateTime=0x1d8b478, ftLastWriteTime.dwLowDateTime=0x23689000, ftLastWriteTime.dwHighDateTime=0x1d8b478, nFileSizeHigh=0x0, nFileSizeLow=0xf80e, dwReserved0=0x0, dwReserved1=0x0, cFileName="z- ZK.avi", cAlternateFileName="Z-ZK~1.AVI")) returned 1 [0181.828] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4b1f5fc | out: lpFindFileData=0x4b1f5fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0181.828] FindClose (in: hFindFile=0x7aac38 | out: hFindFile=0x7aac38) returned 1 [0181.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f884) returned 1 [0181.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f890) returned 1 [0181.829] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\484IJyBLXQXJI6z5aVY.png", nBufferLength=0x105, lpBuffer=0x4b1f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\484IJyBLXQXJI6z5aVY.png", lpFilePart=0x0) returned 0x4a [0181.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f87c) returned 1 [0181.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\484IJyBLXQXJI6z5aVY.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\484ijyblxqxji6z5avy.png"), fInfoLevelId=0x0, lpFileInformation=0x2300b24 | out: lpFileInformation=0x2300b24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7baf7c20, ftCreationTime.dwHighDateTime=0x1d8bafd, ftLastAccessTime.dwLowDateTime=0x405496f0, ftLastAccessTime.dwHighDateTime=0x1d8bb21, ftLastWriteTime.dwLowDateTime=0x405496f0, ftLastWriteTime.dwHighDateTime=0x1d8bb21, nFileSizeHigh=0x0, nFileSizeLow=0x1378e)) returned 1 [0181.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f878) returned 1 [0181.831] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\9muSQLT.avi", nBufferLength=0x105, lpBuffer=0x4b1f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\9muSQLT.avi", lpFilePart=0x0) returned 0x3e [0181.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f87c) returned 1 [0181.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\9muSQLT.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\9musqlt.avi"), fInfoLevelId=0x0, lpFileInformation=0x2300c48 | out: lpFileInformation=0x2300c48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401b8f60, ftCreationTime.dwHighDateTime=0x1d8b0ca, ftLastAccessTime.dwLowDateTime=0x1b0b3330, ftLastAccessTime.dwHighDateTime=0x1d8bc3f, ftLastWriteTime.dwLowDateTime=0x1b0b3330, ftLastWriteTime.dwHighDateTime=0x1d8bc3f, nFileSizeHigh=0x0, nFileSizeLow=0x1479a)) returned 1 [0181.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f878) returned 1 [0181.832] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\ar1mtEjehL5qHu.wav", nBufferLength=0x105, lpBuffer=0x4b1f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\ar1mtEjehL5qHu.wav", lpFilePart=0x0) returned 0x45 [0181.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f87c) returned 1 [0181.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\ar1mtEjehL5qHu.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\ar1mtejehl5qhu.wav"), fInfoLevelId=0x0, lpFileInformation=0x2300d3c | out: lpFileInformation=0x2300d3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90828520, ftCreationTime.dwHighDateTime=0x1d8be9f, ftLastAccessTime.dwLowDateTime=0xa73ac3d0, ftLastAccessTime.dwHighDateTime=0x1d8c0cb, ftLastWriteTime.dwLowDateTime=0xa73ac3d0, ftLastWriteTime.dwHighDateTime=0x1d8c0cb, nFileSizeHigh=0x0, nFileSizeLow=0x13dd5)) returned 1 [0181.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f878) returned 1 [0181.833] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\gKOrHpH8a3UQ.flv", nBufferLength=0x105, lpBuffer=0x4b1f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\gKOrHpH8a3UQ.flv", lpFilePart=0x0) returned 0x43 [0181.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f87c) returned 1 [0181.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\gKOrHpH8a3UQ.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\gkorhph8a3uq.flv"), fInfoLevelId=0x0, lpFileInformation=0x2300e4c | out: lpFileInformation=0x2300e4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a2cc1f0, ftCreationTime.dwHighDateTime=0x1d8b754, ftLastAccessTime.dwLowDateTime=0xde186450, ftLastAccessTime.dwHighDateTime=0x1d8babf, ftLastWriteTime.dwLowDateTime=0xde186450, ftLastWriteTime.dwHighDateTime=0x1d8babf, nFileSizeHigh=0x0, nFileSizeLow=0xd832)) returned 1 [0181.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f878) returned 1 [0181.833] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\N3sG1qBeI3bDTH.avi", nBufferLength=0x105, lpBuffer=0x4b1f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\N3sG1qBeI3bDTH.avi", lpFilePart=0x0) returned 0x45 [0181.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f87c) returned 1 [0181.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\N3sG1qBeI3bDTH.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\n3sg1qbei3bdth.avi"), fInfoLevelId=0x0, lpFileInformation=0x2300f54 | out: lpFileInformation=0x2300f54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9141f280, ftCreationTime.dwHighDateTime=0x1d8b3f4, ftLastAccessTime.dwLowDateTime=0xf7257800, ftLastAccessTime.dwHighDateTime=0x1d8b562, ftLastWriteTime.dwLowDateTime=0xf7257800, ftLastWriteTime.dwHighDateTime=0x1d8b562, nFileSizeHigh=0x0, nFileSizeLow=0xc673)) returned 1 [0181.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f878) returned 1 [0181.834] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\P3g7Dv.m4a", nBufferLength=0x105, lpBuffer=0x4b1f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\P3g7Dv.m4a", lpFilePart=0x0) returned 0x3d [0181.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f87c) returned 1 [0181.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\P3g7Dv.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\p3g7dv.m4a"), fInfoLevelId=0x0, lpFileInformation=0x2301064 | out: lpFileInformation=0x2301064*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdd04cc0, ftCreationTime.dwHighDateTime=0x1d8be93, ftLastAccessTime.dwLowDateTime=0xbce6da20, ftLastAccessTime.dwHighDateTime=0x1d8c0bc, ftLastWriteTime.dwLowDateTime=0xbce6da20, ftLastWriteTime.dwHighDateTime=0x1d8c0bc, nFileSizeHigh=0x0, nFileSizeLow=0x149c2)) returned 1 [0181.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f878) returned 1 [0181.834] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\T BZFFxaGrVGg4fy9.swf", nBufferLength=0x105, lpBuffer=0x4b1f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\T BZFFxaGrVGg4fy9.swf", lpFilePart=0x0) returned 0x48 [0181.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f87c) returned 1 [0181.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\T BZFFxaGrVGg4fy9.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\t bzffxagrvgg4fy9.swf"), fInfoLevelId=0x0, lpFileInformation=0x2301154 | out: lpFileInformation=0x2301154*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7bdf1d0, ftCreationTime.dwHighDateTime=0x1d8b788, ftLastAccessTime.dwLowDateTime=0x14b20280, ftLastAccessTime.dwHighDateTime=0x1d8b98c, ftLastWriteTime.dwLowDateTime=0x14b20280, ftLastWriteTime.dwHighDateTime=0x1d8b98c, nFileSizeHigh=0x0, nFileSizeLow=0x86bd)) returned 1 [0181.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f878) returned 1 [0181.834] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\UfpnW-.mp3", nBufferLength=0x105, lpBuffer=0x4b1f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\UfpnW-.mp3", lpFilePart=0x0) returned 0x3d [0181.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f87c) returned 1 [0181.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\UfpnW-.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\ufpnw-.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2301270 | out: lpFileInformation=0x2301270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1aeed0, ftCreationTime.dwHighDateTime=0x1d8b622, ftLastAccessTime.dwLowDateTime=0xb144fd0, ftLastAccessTime.dwHighDateTime=0x1d8b937, ftLastWriteTime.dwLowDateTime=0xb144fd0, ftLastWriteTime.dwHighDateTime=0x1d8b937, nFileSizeHigh=0x0, nFileSizeLow=0x16a8f)) returned 1 [0181.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f878) returned 1 [0181.835] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\z- ZK.avi", nBufferLength=0x105, lpBuffer=0x4b1f388, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\z- ZK.avi", lpFilePart=0x0) returned 0x3c [0181.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f87c) returned 1 [0181.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\hmKLkObpH51ed_\\LJIKB\\z- ZK.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\hmklkobph51ed_\\ljikb\\z- zk.avi"), fInfoLevelId=0x0, lpFileInformation=0x2301360 | out: lpFileInformation=0x2301360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c018d60, ftCreationTime.dwHighDateTime=0x1d8b17f, ftLastAccessTime.dwLowDateTime=0x23689000, ftLastAccessTime.dwHighDateTime=0x1d8b478, ftLastWriteTime.dwLowDateTime=0x23689000, ftLastWriteTime.dwHighDateTime=0x1d8b478, nFileSizeHigh=0x0, nFileSizeLow=0xf80e)) returned 1 [0181.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f878) returned 1 [0181.835] CoUninitialize () Thread: id = 243 os_tid = 0x554 [0181.558] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0181.558] RoInitialize () returned 0x1 [0181.558] RoUninitialize () returned 0x0 [0181.559] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures", nBufferLength=0x105, lpBuffer=0x4c5f384, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures", lpFilePart=0x0) returned 0x1e [0181.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f828) returned 1 [0181.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c5f8a4 | out: lpFileInformation=0x4c5f8a4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6ba29884, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6ba29884, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0181.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f824) returned 1 [0181.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f8a8) returned 1 [0181.559] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures", nBufferLength=0x105, lpBuffer=0x4c5f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures", lpFilePart=0x0) returned 0x1e [0181.559] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\*"), lpFindFileData=0x4c5f5d0 | out: lpFindFileData=0x4c5f5d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6ba29884, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6ba29884, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aabf8 [0181.559] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6ba29884, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6ba29884, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.560] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x662d9cc0, ftCreationTime.dwHighDateTime=0x1d8c033, ftLastAccessTime.dwLowDateTime=0xd09d2660, ftLastAccessTime.dwHighDateTime=0x1d8c11a, ftLastWriteTime.dwLowDateTime=0xd09d2660, ftLastWriteTime.dwHighDateTime=0x1d8c11a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1mei", cAlternateFileName="")) returned 1 [0181.560] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf353dd0, ftCreationTime.dwHighDateTime=0x1d8b8f7, ftLastAccessTime.dwLowDateTime=0x59a54c0, ftLastAccessTime.dwHighDateTime=0x1d8b967, ftLastWriteTime.dwLowDateTime=0x59a54c0, ftLastWriteTime.dwHighDateTime=0x1d8b967, nFileSizeHigh=0x0, nFileSizeLow=0xdc68, dwReserved0=0x0, dwReserved1=0x0, cFileName="aPNSxelItB.gif", cAlternateFileName="APNSXE~1.GIF")) returned 1 [0181.560] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0181.560] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2444a3c0, ftCreationTime.dwHighDateTime=0x1d8b3aa, ftLastAccessTime.dwLowDateTime=0x6cbaf9f0, ftLastAccessTime.dwHighDateTime=0x1d8b7bb, ftLastWriteTime.dwLowDateTime=0x6cbaf9f0, ftLastWriteTime.dwHighDateTime=0x1d8b7bb, nFileSizeHigh=0x0, nFileSizeLow=0x16b25, dwReserved0=0x0, dwReserved1=0x0, cFileName="cTbWykOdR3AhecdSHES.gif", cAlternateFileName="CTBWYK~1.GIF")) returned 1 [0181.560] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0181.560] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917c2d40, ftCreationTime.dwHighDateTime=0x1d8bfe5, ftLastAccessTime.dwLowDateTime=0xd86c8fe0, ftLastAccessTime.dwHighDateTime=0x1d8c0fa, ftLastWriteTime.dwLowDateTime=0xd86c8fe0, ftLastWriteTime.dwHighDateTime=0x1d8c0fa, nFileSizeHigh=0x0, nFileSizeLow=0x1320, dwReserved0=0x0, dwReserved1=0x0, cFileName="EZSCq5D5osPMTO5bb2Q.jpg", cAlternateFileName="EZSCQ5~1.JPG")) returned 1 [0181.561] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15983430, ftCreationTime.dwHighDateTime=0x1d8b5a4, ftLastAccessTime.dwLowDateTime=0xb5f43e10, ftLastAccessTime.dwHighDateTime=0x1d8b973, ftLastWriteTime.dwLowDateTime=0xb5f43e10, ftLastWriteTime.dwHighDateTime=0x1d8b973, nFileSizeHigh=0x0, nFileSizeLow=0x5f7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HGl8z.bmp", cAlternateFileName="")) returned 1 [0181.561] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa331e940, ftCreationTime.dwHighDateTime=0x1d8bcfb, ftLastAccessTime.dwLowDateTime=0x70756b0, ftLastAccessTime.dwHighDateTime=0x1d8c014, ftLastWriteTime.dwLowDateTime=0x70756b0, ftLastWriteTime.dwHighDateTime=0x1d8c014, nFileSizeHigh=0x0, nFileSizeLow=0x69c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inm2.bmp", cAlternateFileName="")) returned 1 [0181.561] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x197bb470, ftCreationTime.dwHighDateTime=0x1d8bb8d, ftLastAccessTime.dwLowDateTime=0x734154c0, ftLastAccessTime.dwHighDateTime=0x1d8bc95, ftLastWriteTime.dwLowDateTime=0x734154c0, ftLastWriteTime.dwHighDateTime=0x1d8bc95, nFileSizeHigh=0x0, nFileSizeLow=0x16171, dwReserved0=0x0, dwReserved1=0x0, cFileName="IWQ3hkvN.jpg", cAlternateFileName="")) returned 1 [0181.561] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff331830, ftCreationTime.dwHighDateTime=0x1d8b0fe, ftLastAccessTime.dwLowDateTime=0x43fc1770, ftLastAccessTime.dwHighDateTime=0x1d8b779, ftLastWriteTime.dwLowDateTime=0x43fc1770, ftLastWriteTime.dwHighDateTime=0x1d8b779, nFileSizeHigh=0x0, nFileSizeLow=0xe454, dwReserved0=0x0, dwReserved1=0x0, cFileName="muKJoXXN3D4JrJW.png", cAlternateFileName="MUKJOX~1.PNG")) returned 1 [0181.561] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd940a00, ftCreationTime.dwHighDateTime=0x1d8b5e7, ftLastAccessTime.dwLowDateTime=0xfa124ca0, ftLastAccessTime.dwHighDateTime=0x1d8ba21, ftLastWriteTime.dwLowDateTime=0xfa124ca0, ftLastWriteTime.dwHighDateTime=0x1d8ba21, nFileSizeHigh=0x0, nFileSizeLow=0x755f, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrRl4u.png", cAlternateFileName="")) returned 1 [0181.561] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadf35750, ftCreationTime.dwHighDateTime=0x1d8ba22, ftLastAccessTime.dwLowDateTime=0xa650c0b0, ftLastAccessTime.dwHighDateTime=0x1d8c0c5, ftLastWriteTime.dwLowDateTime=0xa650c0b0, ftLastWriteTime.dwHighDateTime=0x1d8c0c5, nFileSizeHigh=0x0, nFileSizeLow=0x852b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUjKUzlujX4_kF3gUFgs.bmp", cAlternateFileName="RUJKUZ~1.BMP")) returned 1 [0181.562] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0181.562] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0181.562] FindClose (in: hFindFile=0x7aabf8 | out: hFindFile=0x7aabf8) returned 1 [0181.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f864) returned 1 [0181.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f870) returned 1 [0181.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f8a8) returned 1 [0181.562] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures", nBufferLength=0x105, lpBuffer=0x4c5f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures", lpFilePart=0x0) returned 0x1e [0181.562] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\*"), lpFindFileData=0x4c5f5d0 | out: lpFindFileData=0x4c5f5d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6ba29884, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6ba29884, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aabf8 [0181.562] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6ba29884, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6ba29884, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.563] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x662d9cc0, ftCreationTime.dwHighDateTime=0x1d8c033, ftLastAccessTime.dwLowDateTime=0xd09d2660, ftLastAccessTime.dwHighDateTime=0x1d8c11a, ftLastWriteTime.dwLowDateTime=0xd09d2660, ftLastWriteTime.dwHighDateTime=0x1d8c11a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1mei", cAlternateFileName="")) returned 1 [0181.563] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf353dd0, ftCreationTime.dwHighDateTime=0x1d8b8f7, ftLastAccessTime.dwLowDateTime=0x59a54c0, ftLastAccessTime.dwHighDateTime=0x1d8b967, ftLastWriteTime.dwLowDateTime=0x59a54c0, ftLastWriteTime.dwHighDateTime=0x1d8b967, nFileSizeHigh=0x0, nFileSizeLow=0xdc68, dwReserved0=0x0, dwReserved1=0x0, cFileName="aPNSxelItB.gif", cAlternateFileName="APNSXE~1.GIF")) returned 1 [0181.563] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0181.563] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2444a3c0, ftCreationTime.dwHighDateTime=0x1d8b3aa, ftLastAccessTime.dwLowDateTime=0x6cbaf9f0, ftLastAccessTime.dwHighDateTime=0x1d8b7bb, ftLastWriteTime.dwLowDateTime=0x6cbaf9f0, ftLastWriteTime.dwHighDateTime=0x1d8b7bb, nFileSizeHigh=0x0, nFileSizeLow=0x16b25, dwReserved0=0x0, dwReserved1=0x0, cFileName="cTbWykOdR3AhecdSHES.gif", cAlternateFileName="CTBWYK~1.GIF")) returned 1 [0181.563] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0181.563] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917c2d40, ftCreationTime.dwHighDateTime=0x1d8bfe5, ftLastAccessTime.dwLowDateTime=0xd86c8fe0, ftLastAccessTime.dwHighDateTime=0x1d8c0fa, ftLastWriteTime.dwLowDateTime=0xd86c8fe0, ftLastWriteTime.dwHighDateTime=0x1d8c0fa, nFileSizeHigh=0x0, nFileSizeLow=0x1320, dwReserved0=0x0, dwReserved1=0x0, cFileName="EZSCq5D5osPMTO5bb2Q.jpg", cAlternateFileName="EZSCQ5~1.JPG")) returned 1 [0181.564] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15983430, ftCreationTime.dwHighDateTime=0x1d8b5a4, ftLastAccessTime.dwLowDateTime=0xb5f43e10, ftLastAccessTime.dwHighDateTime=0x1d8b973, ftLastWriteTime.dwLowDateTime=0xb5f43e10, ftLastWriteTime.dwHighDateTime=0x1d8b973, nFileSizeHigh=0x0, nFileSizeLow=0x5f7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HGl8z.bmp", cAlternateFileName="")) returned 1 [0181.564] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa331e940, ftCreationTime.dwHighDateTime=0x1d8bcfb, ftLastAccessTime.dwLowDateTime=0x70756b0, ftLastAccessTime.dwHighDateTime=0x1d8c014, ftLastWriteTime.dwLowDateTime=0x70756b0, ftLastWriteTime.dwHighDateTime=0x1d8c014, nFileSizeHigh=0x0, nFileSizeLow=0x69c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inm2.bmp", cAlternateFileName="")) returned 1 [0181.564] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x197bb470, ftCreationTime.dwHighDateTime=0x1d8bb8d, ftLastAccessTime.dwLowDateTime=0x734154c0, ftLastAccessTime.dwHighDateTime=0x1d8bc95, ftLastWriteTime.dwLowDateTime=0x734154c0, ftLastWriteTime.dwHighDateTime=0x1d8bc95, nFileSizeHigh=0x0, nFileSizeLow=0x16171, dwReserved0=0x0, dwReserved1=0x0, cFileName="IWQ3hkvN.jpg", cAlternateFileName="")) returned 1 [0181.564] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff331830, ftCreationTime.dwHighDateTime=0x1d8b0fe, ftLastAccessTime.dwLowDateTime=0x43fc1770, ftLastAccessTime.dwHighDateTime=0x1d8b779, ftLastWriteTime.dwLowDateTime=0x43fc1770, ftLastWriteTime.dwHighDateTime=0x1d8b779, nFileSizeHigh=0x0, nFileSizeLow=0xe454, dwReserved0=0x0, dwReserved1=0x0, cFileName="muKJoXXN3D4JrJW.png", cAlternateFileName="MUKJOX~1.PNG")) returned 1 [0181.564] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd940a00, ftCreationTime.dwHighDateTime=0x1d8b5e7, ftLastAccessTime.dwLowDateTime=0xfa124ca0, ftLastAccessTime.dwHighDateTime=0x1d8ba21, ftLastWriteTime.dwLowDateTime=0xfa124ca0, ftLastWriteTime.dwHighDateTime=0x1d8ba21, nFileSizeHigh=0x0, nFileSizeLow=0x755f, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrRl4u.png", cAlternateFileName="")) returned 1 [0181.564] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadf35750, ftCreationTime.dwHighDateTime=0x1d8ba22, ftLastAccessTime.dwLowDateTime=0xa650c0b0, ftLastAccessTime.dwHighDateTime=0x1d8c0c5, ftLastWriteTime.dwLowDateTime=0xa650c0b0, ftLastWriteTime.dwHighDateTime=0x1d8c0c5, nFileSizeHigh=0x0, nFileSizeLow=0x852b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RUjKUzlujX4_kF3gUFgs.bmp", cAlternateFileName="RUJKUZ~1.BMP")) returned 1 [0181.564] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0181.565] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4c5f5dc | out: lpFindFileData=0x4c5f5dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 0 [0181.565] FindClose (in: hFindFile=0x7aabf8 | out: hFindFile=0x7aabf8) returned 1 [0181.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f864) returned 1 [0181.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f870) returned 1 [0181.565] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\aPNSxelItB.gif", nBufferLength=0x105, lpBuffer=0x4c5f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\aPNSxelItB.gif", lpFilePart=0x0) returned 0x2d [0181.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f85c) returned 1 [0181.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\aPNSxelItB.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\apnsxelitb.gif"), fInfoLevelId=0x0, lpFileInformation=0x22e3788 | out: lpFileInformation=0x22e3788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf353dd0, ftCreationTime.dwHighDateTime=0x1d8b8f7, ftLastAccessTime.dwLowDateTime=0x59a54c0, ftLastAccessTime.dwHighDateTime=0x1d8b967, ftLastWriteTime.dwLowDateTime=0x59a54c0, ftLastWriteTime.dwHighDateTime=0x1d8b967, nFileSizeHigh=0x0, nFileSizeLow=0xdc68)) returned 1 [0181.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f858) returned 1 [0181.566] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\cTbWykOdR3AhecdSHES.gif", nBufferLength=0x105, lpBuffer=0x4c5f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\cTbWykOdR3AhecdSHES.gif", lpFilePart=0x0) returned 0x36 [0181.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f85c) returned 1 [0181.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\cTbWykOdR3AhecdSHES.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\ctbwykodr3ahecdshes.gif"), fInfoLevelId=0x0, lpFileInformation=0x22e388c | out: lpFileInformation=0x22e388c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2444a3c0, ftCreationTime.dwHighDateTime=0x1d8b3aa, ftLastAccessTime.dwLowDateTime=0x6cbaf9f0, ftLastAccessTime.dwHighDateTime=0x1d8b7bb, ftLastWriteTime.dwLowDateTime=0x6cbaf9f0, ftLastWriteTime.dwHighDateTime=0x1d8b7bb, nFileSizeHigh=0x0, nFileSizeLow=0x16b25)) returned 1 [0181.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f858) returned 1 [0181.567] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4c5f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x2a [0181.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f85c) returned 1 [0181.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22e3988 | out: lpFileInformation=0x22e3988*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0181.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f858) returned 1 [0181.684] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures", nBufferLength=0x105, lpBuffer=0x4c5f364, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures", lpFilePart=0x0) returned 0x8a [0181.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f808) returned 1 [0181.684] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c5f884 | out: lpFileInformation=0x4c5f884*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f804) returned 1 [0181.685] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures", nBufferLength=0x105, lpBuffer=0x4c5f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures", lpFilePart=0x0) returned 0x8a [0181.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f798) returned 1 [0181.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c5f814 | out: lpFileInformation=0x4c5f814*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f794) returned 1 [0181.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f798) returned 1 [0181.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c5f814 | out: lpFileInformation=0x4c5f814*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f794) returned 1 [0181.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f798) returned 1 [0181.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx"), fInfoLevelId=0x0, lpFileInformation=0x4c5f814 | out: lpFileInformation=0x4c5f814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23ad639, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xf23ad639, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xf23ad639, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0181.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f794) returned 1 [0181.685] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures"), lpSecurityAttributes=0x0) returned 1 [0181.686] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4c5f334, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x2a [0181.686] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4c5f334, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x96 [0181.686] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\desktop.ini"), bFailIfExists=0) returned 1 [0181.690] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\EZSCq5D5osPMTO5bb2Q.jpg", nBufferLength=0x105, lpBuffer=0x4c5f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\EZSCq5D5osPMTO5bb2Q.jpg", lpFilePart=0x0) returned 0x36 [0181.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f85c) returned 1 [0181.691] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\EZSCq5D5osPMTO5bb2Q.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\ezscq5d5ospmto5bb2q.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22ef53c | out: lpFileInformation=0x22ef53c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917c2d40, ftCreationTime.dwHighDateTime=0x1d8bfe5, ftLastAccessTime.dwLowDateTime=0xd86c8fe0, ftLastAccessTime.dwHighDateTime=0x1d8c0fa, ftLastWriteTime.dwLowDateTime=0xd86c8fe0, ftLastWriteTime.dwHighDateTime=0x1d8c0fa, nFileSizeHigh=0x0, nFileSizeLow=0x1320)) returned 1 [0181.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f858) returned 1 [0181.692] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures", nBufferLength=0x105, lpBuffer=0x4c5f364, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures", lpFilePart=0x0) returned 0x8a [0181.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f808) returned 1 [0181.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c5f884 | out: lpFileInformation=0x4c5f884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23fa1ba, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xf23fa1ba, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xf23fa1ba, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0181.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f804) returned 1 [0181.692] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\EZSCq5D5osPMTO5bb2Q.jpg", nBufferLength=0x105, lpBuffer=0x4c5f334, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\EZSCq5D5osPMTO5bb2Q.jpg", lpFilePart=0x0) returned 0x36 [0181.692] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\EZSCq5D5osPMTO5bb2Q.jpg", nBufferLength=0x105, lpBuffer=0x4c5f334, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\EZSCq5D5osPMTO5bb2Q.jpg", lpFilePart=0x0) returned 0xa2 [0181.692] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\EZSCq5D5osPMTO5bb2Q.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\ezscq5d5ospmto5bb2q.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\EZSCq5D5osPMTO5bb2Q.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\ezscq5d5ospmto5bb2q.jpg"), bFailIfExists=0) returned 1 [0181.703] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\HGl8z.bmp", nBufferLength=0x105, lpBuffer=0x4c5f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\HGl8z.bmp", lpFilePart=0x0) returned 0x28 [0181.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f85c) returned 1 [0181.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\HGl8z.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\hgl8z.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22efffc | out: lpFileInformation=0x22efffc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15983430, ftCreationTime.dwHighDateTime=0x1d8b5a4, ftLastAccessTime.dwLowDateTime=0xb5f43e10, ftLastAccessTime.dwHighDateTime=0x1d8b973, ftLastWriteTime.dwLowDateTime=0xb5f43e10, ftLastWriteTime.dwHighDateTime=0x1d8b973, nFileSizeHigh=0x0, nFileSizeLow=0x5f7c)) returned 1 [0181.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f858) returned 1 [0181.704] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Inm2.bmp", nBufferLength=0x105, lpBuffer=0x4c5f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Inm2.bmp", lpFilePart=0x0) returned 0x27 [0181.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f85c) returned 1 [0181.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Inm2.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\inm2.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22f00c0 | out: lpFileInformation=0x22f00c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa331e940, ftCreationTime.dwHighDateTime=0x1d8bcfb, ftLastAccessTime.dwLowDateTime=0x70756b0, ftLastAccessTime.dwHighDateTime=0x1d8c014, ftLastWriteTime.dwLowDateTime=0x70756b0, ftLastWriteTime.dwHighDateTime=0x1d8c014, nFileSizeHigh=0x0, nFileSizeLow=0x69c7)) returned 1 [0181.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f858) returned 1 [0181.706] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\IWQ3hkvN.jpg", nBufferLength=0x105, lpBuffer=0x4c5f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\IWQ3hkvN.jpg", lpFilePart=0x0) returned 0x2b [0181.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f85c) returned 1 [0181.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\IWQ3hkvN.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\iwq3hkvn.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22f0180 | out: lpFileInformation=0x22f0180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x197bb470, ftCreationTime.dwHighDateTime=0x1d8bb8d, ftLastAccessTime.dwLowDateTime=0x734154c0, ftLastAccessTime.dwHighDateTime=0x1d8bc95, ftLastWriteTime.dwLowDateTime=0x734154c0, ftLastWriteTime.dwHighDateTime=0x1d8bc95, nFileSizeHigh=0x0, nFileSizeLow=0x16171)) returned 1 [0181.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f858) returned 1 [0181.707] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\muKJoXXN3D4JrJW.png", nBufferLength=0x105, lpBuffer=0x4c5f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\muKJoXXN3D4JrJW.png", lpFilePart=0x0) returned 0x32 [0181.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f85c) returned 1 [0181.707] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\muKJoXXN3D4JrJW.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\mukjoxxn3d4jrjw.png"), fInfoLevelId=0x0, lpFileInformation=0x22f0250 | out: lpFileInformation=0x22f0250*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff331830, ftCreationTime.dwHighDateTime=0x1d8b0fe, ftLastAccessTime.dwLowDateTime=0x43fc1770, ftLastAccessTime.dwHighDateTime=0x1d8b779, ftLastWriteTime.dwLowDateTime=0x43fc1770, ftLastWriteTime.dwHighDateTime=0x1d8b779, nFileSizeHigh=0x0, nFileSizeLow=0xe454)) returned 1 [0181.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f858) returned 1 [0181.709] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\OrRl4u.png", nBufferLength=0x105, lpBuffer=0x4c5f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\OrRl4u.png", lpFilePart=0x0) returned 0x29 [0181.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f85c) returned 1 [0181.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\OrRl4u.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\orrl4u.png"), fInfoLevelId=0x0, lpFileInformation=0x22f033c | out: lpFileInformation=0x22f033c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd940a00, ftCreationTime.dwHighDateTime=0x1d8b5e7, ftLastAccessTime.dwLowDateTime=0xfa124ca0, ftLastAccessTime.dwHighDateTime=0x1d8ba21, ftLastWriteTime.dwLowDateTime=0xfa124ca0, ftLastWriteTime.dwHighDateTime=0x1d8ba21, nFileSizeHigh=0x0, nFileSizeLow=0x755f)) returned 1 [0181.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f858) returned 1 [0181.710] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\RUjKUzlujX4_kF3gUFgs.bmp", nBufferLength=0x105, lpBuffer=0x4c5f368, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\RUjKUzlujX4_kF3gUFgs.bmp", lpFilePart=0x0) returned 0x37 [0181.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f85c) returned 1 [0181.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\RUjKUzlujX4_kF3gUFgs.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\rujkuzlujx4_kf3gufgs.bmp"), fInfoLevelId=0x0, lpFileInformation=0x22f0404 | out: lpFileInformation=0x22f0404*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadf35750, ftCreationTime.dwHighDateTime=0x1d8ba22, ftLastAccessTime.dwLowDateTime=0xa650c0b0, ftLastAccessTime.dwHighDateTime=0x1d8c0c5, ftLastWriteTime.dwLowDateTime=0xa650c0b0, ftLastWriteTime.dwHighDateTime=0x1d8c0c5, nFileSizeHigh=0x0, nFileSizeLow=0x852b)) returned 1 [0181.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f858) returned 1 [0181.711] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei", nBufferLength=0x105, lpBuffer=0x4c5f354, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei", lpFilePart=0x0) returned 0x23 [0181.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f7f8) returned 1 [0181.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei"), fInfoLevelId=0x0, lpFileInformation=0x4c5f874 | out: lpFileInformation=0x4c5f874*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x662d9cc0, ftCreationTime.dwHighDateTime=0x1d8c033, ftLastAccessTime.dwLowDateTime=0xd09d2660, ftLastAccessTime.dwHighDateTime=0x1d8c11a, ftLastWriteTime.dwLowDateTime=0xd09d2660, ftLastWriteTime.dwHighDateTime=0x1d8c11a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0181.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f7f4) returned 1 [0181.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f878) returned 1 [0181.712] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei", lpFilePart=0x0) returned 0x23 [0181.712] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\*"), lpFindFileData=0x4c5f5a0 | out: lpFindFileData=0x4c5f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x662d9cc0, ftCreationTime.dwHighDateTime=0x1d8c033, ftLastAccessTime.dwLowDateTime=0xd09d2660, ftLastAccessTime.dwHighDateTime=0x1d8c11a, ftLastWriteTime.dwLowDateTime=0xd09d2660, ftLastWriteTime.dwHighDateTime=0x1d8c11a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aac38 [0181.714] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x662d9cc0, ftCreationTime.dwHighDateTime=0x1d8c033, ftLastAccessTime.dwLowDateTime=0xd09d2660, ftLastAccessTime.dwHighDateTime=0x1d8c11a, ftLastWriteTime.dwLowDateTime=0xd09d2660, ftLastWriteTime.dwHighDateTime=0x1d8c11a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.715] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90967630, ftCreationTime.dwHighDateTime=0x1d8c0ab, ftLastAccessTime.dwLowDateTime=0x3bc955b0, ftLastAccessTime.dwHighDateTime=0x1d8c104, ftLastWriteTime.dwLowDateTime=0x3bc955b0, ftLastWriteTime.dwHighDateTime=0x1d8c104, nFileSizeHigh=0x0, nFileSizeLow=0x766f, dwReserved0=0x0, dwReserved1=0x0, cFileName="3tWvyF0j4.jpg", cAlternateFileName="3TWVYF~1.JPG")) returned 1 [0181.715] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13649070, ftCreationTime.dwHighDateTime=0x1d8b174, ftLastAccessTime.dwLowDateTime=0xe73d0380, ftLastAccessTime.dwHighDateTime=0x1d8b63f, ftLastWriteTime.dwLowDateTime=0xe73d0380, ftLastWriteTime.dwHighDateTime=0x1d8b63f, nFileSizeHigh=0x0, nFileSizeLow=0xb0b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="4eKVeroY.bmp", cAlternateFileName="")) returned 1 [0181.716] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57ea80d0, ftCreationTime.dwHighDateTime=0x1d8b92e, ftLastAccessTime.dwLowDateTime=0xa5653d90, ftLastAccessTime.dwHighDateTime=0x1d8c028, ftLastWriteTime.dwLowDateTime=0xa5653d90, ftLastWriteTime.dwHighDateTime=0x1d8c028, nFileSizeHigh=0x0, nFileSizeLow=0x16dfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="6dSosDOFHq.png", cAlternateFileName="6DSOSD~1.PNG")) returned 1 [0181.716] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1be9dfd0, ftCreationTime.dwHighDateTime=0x1d8b17d, ftLastAccessTime.dwLowDateTime=0xa1e46a50, ftLastAccessTime.dwHighDateTime=0x1d8bdae, ftLastWriteTime.dwLowDateTime=0xa1e46a50, ftLastWriteTime.dwHighDateTime=0x1d8bdae, nFileSizeHigh=0x0, nFileSizeLow=0x8aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6YkDrl09Fp0nvbn-Fs.bmp", cAlternateFileName="6YKDRL~1.BMP")) returned 1 [0181.716] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc094bc00, ftCreationTime.dwHighDateTime=0x1d8b6ad, ftLastAccessTime.dwLowDateTime=0x5b0a4e10, ftLastAccessTime.dwHighDateTime=0x1d8be76, ftLastWriteTime.dwLowDateTime=0x5b0a4e10, ftLastWriteTime.dwHighDateTime=0x1d8be76, nFileSizeHigh=0x0, nFileSizeLow=0x15f44, dwReserved0=0x0, dwReserved1=0x0, cFileName="7o0XQx_-MIRfC.jpg", cAlternateFileName="7O0XQX~1.JPG")) returned 1 [0181.716] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51a9bc90, ftCreationTime.dwHighDateTime=0x1d8b5eb, ftLastAccessTime.dwLowDateTime=0x83b619d0, ftLastAccessTime.dwHighDateTime=0x1d8be20, ftLastWriteTime.dwLowDateTime=0x83b619d0, ftLastWriteTime.dwHighDateTime=0x1d8be20, nFileSizeHigh=0x0, nFileSizeLow=0x524f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BKYh0FG7N.jpg", cAlternateFileName="BKYH0F~1.JPG")) returned 1 [0181.716] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41512650, ftCreationTime.dwHighDateTime=0x1d8b445, ftLastAccessTime.dwLowDateTime=0xe43735e0, ftLastAccessTime.dwHighDateTime=0x1d8b7a5, ftLastWriteTime.dwLowDateTime=0xe43735e0, ftLastWriteTime.dwHighDateTime=0x1d8b7a5, nFileSizeHigh=0x0, nFileSizeLow=0x368b, dwReserved0=0x0, dwReserved1=0x0, cFileName="buHBhNHnFz1XPN7.jpg", cAlternateFileName="BUHBHN~1.JPG")) returned 1 [0181.717] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7e87ab0, ftCreationTime.dwHighDateTime=0x1d8ba14, ftLastAccessTime.dwLowDateTime=0x2a589400, ftLastAccessTime.dwHighDateTime=0x1d8bbc1, ftLastWriteTime.dwLowDateTime=0x2a589400, ftLastWriteTime.dwHighDateTime=0x1d8bbc1, nFileSizeHigh=0x0, nFileSizeLow=0x931d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HBmc40YnA_vky3ILcu.bmp", cAlternateFileName="HBMC40~1.BMP")) returned 1 [0181.717] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d03420, ftCreationTime.dwHighDateTime=0x1d8b7d0, ftLastAccessTime.dwLowDateTime=0xf7cc8040, ftLastAccessTime.dwHighDateTime=0x1d8baae, ftLastWriteTime.dwLowDateTime=0xf7cc8040, ftLastWriteTime.dwHighDateTime=0x1d8baae, nFileSizeHigh=0x0, nFileSizeLow=0x6db4, dwReserved0=0x0, dwReserved1=0x0, cFileName="I2thuECLh.png", cAlternateFileName="I2THUE~1.PNG")) returned 1 [0181.717] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dc11ef0, ftCreationTime.dwHighDateTime=0x1d8bf12, ftLastAccessTime.dwLowDateTime=0xe7ef540, ftLastAccessTime.dwHighDateTime=0x1d8c08e, ftLastWriteTime.dwLowDateTime=0xe7ef540, ftLastWriteTime.dwHighDateTime=0x1d8c08e, nFileSizeHigh=0x0, nFileSizeLow=0x18710, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0as7WdPy93bp1Jh.jpg", cAlternateFileName="J0AS7W~1.JPG")) returned 1 [0181.717] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53292900, ftCreationTime.dwHighDateTime=0x1d8b68d, ftLastAccessTime.dwLowDateTime=0x5c253b0, ftLastAccessTime.dwHighDateTime=0x1d8b9aa, ftLastWriteTime.dwLowDateTime=0x5c253b0, ftLastWriteTime.dwHighDateTime=0x1d8b9aa, nFileSizeHigh=0x0, nFileSizeLow=0xc8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="jQK_7Zv0rUc8oVDV2l t.jpg", cAlternateFileName="JQK_7Z~1.JPG")) returned 1 [0181.718] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x880cc950, ftCreationTime.dwHighDateTime=0x1d8bc29, ftLastAccessTime.dwLowDateTime=0xa64fdb0, ftLastAccessTime.dwHighDateTime=0x1d8bd00, ftLastWriteTime.dwLowDateTime=0xa64fdb0, ftLastWriteTime.dwHighDateTime=0x1d8bd00, nFileSizeHigh=0x0, nFileSizeLow=0x18abe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jsxb5Tvw6jzAap.jpg", cAlternateFileName="JSXB5T~1.JPG")) returned 1 [0181.718] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0404140, ftCreationTime.dwHighDateTime=0x1d8b7e9, ftLastAccessTime.dwLowDateTime=0x9042ced0, ftLastAccessTime.dwHighDateTime=0x1d8bb43, ftLastWriteTime.dwLowDateTime=0x9042ced0, ftLastWriteTime.dwHighDateTime=0x1d8bb43, nFileSizeHigh=0x0, nFileSizeLow=0xe5c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="kuXF7kwD n.bmp", cAlternateFileName="KUXF7K~1.BMP")) returned 1 [0181.718] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4271bc20, ftCreationTime.dwHighDateTime=0x1d8b864, ftLastAccessTime.dwLowDateTime=0xfdeb430, ftLastAccessTime.dwHighDateTime=0x1d8bcdc, ftLastWriteTime.dwLowDateTime=0xfdeb430, ftLastWriteTime.dwHighDateTime=0x1d8bcdc, nFileSizeHigh=0x0, nFileSizeLow=0x1738c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTR3n.gif", cAlternateFileName="")) returned 1 [0181.718] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f61c950, ftCreationTime.dwHighDateTime=0x1d8c0b6, ftLastAccessTime.dwLowDateTime=0x2c382cd0, ftLastAccessTime.dwHighDateTime=0x1d8c0cc, ftLastWriteTime.dwLowDateTime=0x2c382cd0, ftLastWriteTime.dwHighDateTime=0x1d8c0cc, nFileSizeHigh=0x0, nFileSizeLow=0xf7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="owKcDK.bmp", cAlternateFileName="")) returned 1 [0181.718] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3555000, ftCreationTime.dwHighDateTime=0x1d8b557, ftLastAccessTime.dwLowDateTime=0xd6e23970, ftLastAccessTime.dwHighDateTime=0x1d8c0c5, ftLastWriteTime.dwLowDateTime=0xd6e23970, ftLastWriteTime.dwHighDateTime=0x1d8c0c5, nFileSizeHigh=0x0, nFileSizeLow=0x5560, dwReserved0=0x0, dwReserved1=0x0, cFileName="qF_jebnY.jpg", cAlternateFileName="")) returned 1 [0181.718] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38218db0, ftCreationTime.dwHighDateTime=0x1d8b56f, ftLastAccessTime.dwLowDateTime=0xc85d70, ftLastAccessTime.dwHighDateTime=0x1d8b7be, ftLastWriteTime.dwLowDateTime=0xc85d70, ftLastWriteTime.dwHighDateTime=0x1d8b7be, nFileSizeHigh=0x0, nFileSizeLow=0x69a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QQt-qO4Ia1.gif", cAlternateFileName="QQT-QO~1.GIF")) returned 1 [0181.718] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe25c700, ftCreationTime.dwHighDateTime=0x1d8b93a, ftLastAccessTime.dwLowDateTime=0x72bd6590, ftLastAccessTime.dwHighDateTime=0x1d8bb12, ftLastWriteTime.dwLowDateTime=0x72bd6590, ftLastWriteTime.dwHighDateTime=0x1d8bb12, nFileSizeHigh=0x0, nFileSizeLow=0x2481, dwReserved0=0x0, dwReserved1=0x0, cFileName="s9uDyr.bmp", cAlternateFileName="")) returned 1 [0181.719] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd36dec70, ftCreationTime.dwHighDateTime=0x1d8b54f, ftLastAccessTime.dwLowDateTime=0x374e1370, ftLastAccessTime.dwHighDateTime=0x1d8b5a3, ftLastWriteTime.dwLowDateTime=0x374e1370, ftLastWriteTime.dwHighDateTime=0x1d8b5a3, nFileSizeHigh=0x0, nFileSizeLow=0x1593f, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIDn.gif", cAlternateFileName="")) returned 1 [0181.719] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd88c0d80, ftCreationTime.dwHighDateTime=0x1d8b9a1, ftLastAccessTime.dwLowDateTime=0x816305f0, ftLastAccessTime.dwHighDateTime=0x1d8bf7c, ftLastWriteTime.dwLowDateTime=0x816305f0, ftLastWriteTime.dwHighDateTime=0x1d8bf7c, nFileSizeHigh=0x0, nFileSizeLow=0x152bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="u6LqnbvtT.jpg", cAlternateFileName="U6LQNB~1.JPG")) returned 1 [0181.719] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb234e4c0, ftCreationTime.dwHighDateTime=0x1d8c0c9, ftLastAccessTime.dwLowDateTime=0x39de88c0, ftLastAccessTime.dwHighDateTime=0x1d8c11c, ftLastWriteTime.dwLowDateTime=0x39de88c0, ftLastWriteTime.dwHighDateTime=0x1d8c11c, nFileSizeHigh=0x0, nFileSizeLow=0x13c3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WakBFAv-9jmgDCRsKlr-.gif", cAlternateFileName="WAKBFA~1.GIF")) returned 1 [0181.719] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc70ca9a0, ftCreationTime.dwHighDateTime=0x1d8bb60, ftLastAccessTime.dwLowDateTime=0x6017c110, ftLastAccessTime.dwHighDateTime=0x1d8bf09, ftLastWriteTime.dwLowDateTime=0x6017c110, ftLastWriteTime.dwHighDateTime=0x1d8bf09, nFileSizeHigh=0x0, nFileSizeLow=0x146e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xd90MTkOJWIttsyWn3Cu.gif", cAlternateFileName="XD90MT~1.GIF")) returned 1 [0181.719] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b60cb0, ftCreationTime.dwHighDateTime=0x1d8beb3, ftLastAccessTime.dwLowDateTime=0x324cdcd0, ftLastAccessTime.dwHighDateTime=0x1d8bed1, ftLastWriteTime.dwLowDateTime=0x324cdcd0, ftLastWriteTime.dwHighDateTime=0x1d8bed1, nFileSizeHigh=0x0, nFileSizeLow=0x15c23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y_E0_CTCisi.gif", cAlternateFileName="Y_E0_C~1.GIF")) returned 1 [0181.720] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b60cb0, ftCreationTime.dwHighDateTime=0x1d8beb3, ftLastAccessTime.dwLowDateTime=0x324cdcd0, ftLastAccessTime.dwHighDateTime=0x1d8bed1, ftLastWriteTime.dwLowDateTime=0x324cdcd0, ftLastWriteTime.dwHighDateTime=0x1d8bed1, nFileSizeHigh=0x0, nFileSizeLow=0x15c23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y_E0_CTCisi.gif", cAlternateFileName="Y_E0_C~1.GIF")) returned 0 [0181.720] FindClose (in: hFindFile=0x7aac38 | out: hFindFile=0x7aac38) returned 1 [0181.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f834) returned 1 [0181.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f840) returned 1 [0181.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f878) returned 1 [0181.721] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei", lpFilePart=0x0) returned 0x23 [0181.721] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\*"), lpFindFileData=0x4c5f5a0 | out: lpFindFileData=0x4c5f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x662d9cc0, ftCreationTime.dwHighDateTime=0x1d8c033, ftLastAccessTime.dwLowDateTime=0xd09d2660, ftLastAccessTime.dwHighDateTime=0x1d8c11a, ftLastWriteTime.dwLowDateTime=0xd09d2660, ftLastWriteTime.dwHighDateTime=0x1d8c11a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aac38 [0181.722] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x662d9cc0, ftCreationTime.dwHighDateTime=0x1d8c033, ftLastAccessTime.dwLowDateTime=0xd09d2660, ftLastAccessTime.dwHighDateTime=0x1d8c11a, ftLastWriteTime.dwLowDateTime=0xd09d2660, ftLastWriteTime.dwHighDateTime=0x1d8c11a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.722] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90967630, ftCreationTime.dwHighDateTime=0x1d8c0ab, ftLastAccessTime.dwLowDateTime=0x3bc955b0, ftLastAccessTime.dwHighDateTime=0x1d8c104, ftLastWriteTime.dwLowDateTime=0x3bc955b0, ftLastWriteTime.dwHighDateTime=0x1d8c104, nFileSizeHigh=0x0, nFileSizeLow=0x766f, dwReserved0=0x0, dwReserved1=0x0, cFileName="3tWvyF0j4.jpg", cAlternateFileName="3TWVYF~1.JPG")) returned 1 [0181.722] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13649070, ftCreationTime.dwHighDateTime=0x1d8b174, ftLastAccessTime.dwLowDateTime=0xe73d0380, ftLastAccessTime.dwHighDateTime=0x1d8b63f, ftLastWriteTime.dwLowDateTime=0xe73d0380, ftLastWriteTime.dwHighDateTime=0x1d8b63f, nFileSizeHigh=0x0, nFileSizeLow=0xb0b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="4eKVeroY.bmp", cAlternateFileName="")) returned 1 [0181.723] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57ea80d0, ftCreationTime.dwHighDateTime=0x1d8b92e, ftLastAccessTime.dwLowDateTime=0xa5653d90, ftLastAccessTime.dwHighDateTime=0x1d8c028, ftLastWriteTime.dwLowDateTime=0xa5653d90, ftLastWriteTime.dwHighDateTime=0x1d8c028, nFileSizeHigh=0x0, nFileSizeLow=0x16dfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="6dSosDOFHq.png", cAlternateFileName="6DSOSD~1.PNG")) returned 1 [0181.723] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1be9dfd0, ftCreationTime.dwHighDateTime=0x1d8b17d, ftLastAccessTime.dwLowDateTime=0xa1e46a50, ftLastAccessTime.dwHighDateTime=0x1d8bdae, ftLastWriteTime.dwLowDateTime=0xa1e46a50, ftLastWriteTime.dwHighDateTime=0x1d8bdae, nFileSizeHigh=0x0, nFileSizeLow=0x8aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6YkDrl09Fp0nvbn-Fs.bmp", cAlternateFileName="6YKDRL~1.BMP")) returned 1 [0181.723] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc094bc00, ftCreationTime.dwHighDateTime=0x1d8b6ad, ftLastAccessTime.dwLowDateTime=0x5b0a4e10, ftLastAccessTime.dwHighDateTime=0x1d8be76, ftLastWriteTime.dwLowDateTime=0x5b0a4e10, ftLastWriteTime.dwHighDateTime=0x1d8be76, nFileSizeHigh=0x0, nFileSizeLow=0x15f44, dwReserved0=0x0, dwReserved1=0x0, cFileName="7o0XQx_-MIRfC.jpg", cAlternateFileName="7O0XQX~1.JPG")) returned 1 [0181.723] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51a9bc90, ftCreationTime.dwHighDateTime=0x1d8b5eb, ftLastAccessTime.dwLowDateTime=0x83b619d0, ftLastAccessTime.dwHighDateTime=0x1d8be20, ftLastWriteTime.dwLowDateTime=0x83b619d0, ftLastWriteTime.dwHighDateTime=0x1d8be20, nFileSizeHigh=0x0, nFileSizeLow=0x524f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BKYh0FG7N.jpg", cAlternateFileName="BKYH0F~1.JPG")) returned 1 [0181.723] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41512650, ftCreationTime.dwHighDateTime=0x1d8b445, ftLastAccessTime.dwLowDateTime=0xe43735e0, ftLastAccessTime.dwHighDateTime=0x1d8b7a5, ftLastWriteTime.dwLowDateTime=0xe43735e0, ftLastWriteTime.dwHighDateTime=0x1d8b7a5, nFileSizeHigh=0x0, nFileSizeLow=0x368b, dwReserved0=0x0, dwReserved1=0x0, cFileName="buHBhNHnFz1XPN7.jpg", cAlternateFileName="BUHBHN~1.JPG")) returned 1 [0181.723] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7e87ab0, ftCreationTime.dwHighDateTime=0x1d8ba14, ftLastAccessTime.dwLowDateTime=0x2a589400, ftLastAccessTime.dwHighDateTime=0x1d8bbc1, ftLastWriteTime.dwLowDateTime=0x2a589400, ftLastWriteTime.dwHighDateTime=0x1d8bbc1, nFileSizeHigh=0x0, nFileSizeLow=0x931d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HBmc40YnA_vky3ILcu.bmp", cAlternateFileName="HBMC40~1.BMP")) returned 1 [0181.723] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d03420, ftCreationTime.dwHighDateTime=0x1d8b7d0, ftLastAccessTime.dwLowDateTime=0xf7cc8040, ftLastAccessTime.dwHighDateTime=0x1d8baae, ftLastWriteTime.dwLowDateTime=0xf7cc8040, ftLastWriteTime.dwHighDateTime=0x1d8baae, nFileSizeHigh=0x0, nFileSizeLow=0x6db4, dwReserved0=0x0, dwReserved1=0x0, cFileName="I2thuECLh.png", cAlternateFileName="I2THUE~1.PNG")) returned 1 [0181.724] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dc11ef0, ftCreationTime.dwHighDateTime=0x1d8bf12, ftLastAccessTime.dwLowDateTime=0xe7ef540, ftLastAccessTime.dwHighDateTime=0x1d8c08e, ftLastWriteTime.dwLowDateTime=0xe7ef540, ftLastWriteTime.dwHighDateTime=0x1d8c08e, nFileSizeHigh=0x0, nFileSizeLow=0x18710, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0as7WdPy93bp1Jh.jpg", cAlternateFileName="J0AS7W~1.JPG")) returned 1 [0181.724] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53292900, ftCreationTime.dwHighDateTime=0x1d8b68d, ftLastAccessTime.dwLowDateTime=0x5c253b0, ftLastAccessTime.dwHighDateTime=0x1d8b9aa, ftLastWriteTime.dwLowDateTime=0x5c253b0, ftLastWriteTime.dwHighDateTime=0x1d8b9aa, nFileSizeHigh=0x0, nFileSizeLow=0xc8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="jQK_7Zv0rUc8oVDV2l t.jpg", cAlternateFileName="JQK_7Z~1.JPG")) returned 1 [0181.724] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x880cc950, ftCreationTime.dwHighDateTime=0x1d8bc29, ftLastAccessTime.dwLowDateTime=0xa64fdb0, ftLastAccessTime.dwHighDateTime=0x1d8bd00, ftLastWriteTime.dwLowDateTime=0xa64fdb0, ftLastWriteTime.dwHighDateTime=0x1d8bd00, nFileSizeHigh=0x0, nFileSizeLow=0x18abe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jsxb5Tvw6jzAap.jpg", cAlternateFileName="JSXB5T~1.JPG")) returned 1 [0181.724] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0404140, ftCreationTime.dwHighDateTime=0x1d8b7e9, ftLastAccessTime.dwLowDateTime=0x9042ced0, ftLastAccessTime.dwHighDateTime=0x1d8bb43, ftLastWriteTime.dwLowDateTime=0x9042ced0, ftLastWriteTime.dwHighDateTime=0x1d8bb43, nFileSizeHigh=0x0, nFileSizeLow=0xe5c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="kuXF7kwD n.bmp", cAlternateFileName="KUXF7K~1.BMP")) returned 1 [0181.724] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4271bc20, ftCreationTime.dwHighDateTime=0x1d8b864, ftLastAccessTime.dwLowDateTime=0xfdeb430, ftLastAccessTime.dwHighDateTime=0x1d8bcdc, ftLastWriteTime.dwLowDateTime=0xfdeb430, ftLastWriteTime.dwHighDateTime=0x1d8bcdc, nFileSizeHigh=0x0, nFileSizeLow=0x1738c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTR3n.gif", cAlternateFileName="")) returned 1 [0181.724] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f61c950, ftCreationTime.dwHighDateTime=0x1d8c0b6, ftLastAccessTime.dwLowDateTime=0x2c382cd0, ftLastAccessTime.dwHighDateTime=0x1d8c0cc, ftLastWriteTime.dwLowDateTime=0x2c382cd0, ftLastWriteTime.dwHighDateTime=0x1d8c0cc, nFileSizeHigh=0x0, nFileSizeLow=0xf7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="owKcDK.bmp", cAlternateFileName="")) returned 1 [0181.724] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3555000, ftCreationTime.dwHighDateTime=0x1d8b557, ftLastAccessTime.dwLowDateTime=0xd6e23970, ftLastAccessTime.dwHighDateTime=0x1d8c0c5, ftLastWriteTime.dwLowDateTime=0xd6e23970, ftLastWriteTime.dwHighDateTime=0x1d8c0c5, nFileSizeHigh=0x0, nFileSizeLow=0x5560, dwReserved0=0x0, dwReserved1=0x0, cFileName="qF_jebnY.jpg", cAlternateFileName="")) returned 1 [0181.724] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38218db0, ftCreationTime.dwHighDateTime=0x1d8b56f, ftLastAccessTime.dwLowDateTime=0xc85d70, ftLastAccessTime.dwHighDateTime=0x1d8b7be, ftLastWriteTime.dwLowDateTime=0xc85d70, ftLastWriteTime.dwHighDateTime=0x1d8b7be, nFileSizeHigh=0x0, nFileSizeLow=0x69a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QQt-qO4Ia1.gif", cAlternateFileName="QQT-QO~1.GIF")) returned 1 [0181.725] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe25c700, ftCreationTime.dwHighDateTime=0x1d8b93a, ftLastAccessTime.dwLowDateTime=0x72bd6590, ftLastAccessTime.dwHighDateTime=0x1d8bb12, ftLastWriteTime.dwLowDateTime=0x72bd6590, ftLastWriteTime.dwHighDateTime=0x1d8bb12, nFileSizeHigh=0x0, nFileSizeLow=0x2481, dwReserved0=0x0, dwReserved1=0x0, cFileName="s9uDyr.bmp", cAlternateFileName="")) returned 1 [0181.725] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd36dec70, ftCreationTime.dwHighDateTime=0x1d8b54f, ftLastAccessTime.dwLowDateTime=0x374e1370, ftLastAccessTime.dwHighDateTime=0x1d8b5a3, ftLastWriteTime.dwLowDateTime=0x374e1370, ftLastWriteTime.dwHighDateTime=0x1d8b5a3, nFileSizeHigh=0x0, nFileSizeLow=0x1593f, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIDn.gif", cAlternateFileName="")) returned 1 [0181.725] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd88c0d80, ftCreationTime.dwHighDateTime=0x1d8b9a1, ftLastAccessTime.dwLowDateTime=0x816305f0, ftLastAccessTime.dwHighDateTime=0x1d8bf7c, ftLastWriteTime.dwLowDateTime=0x816305f0, ftLastWriteTime.dwHighDateTime=0x1d8bf7c, nFileSizeHigh=0x0, nFileSizeLow=0x152bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="u6LqnbvtT.jpg", cAlternateFileName="U6LQNB~1.JPG")) returned 1 [0181.725] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb234e4c0, ftCreationTime.dwHighDateTime=0x1d8c0c9, ftLastAccessTime.dwLowDateTime=0x39de88c0, ftLastAccessTime.dwHighDateTime=0x1d8c11c, ftLastWriteTime.dwLowDateTime=0x39de88c0, ftLastWriteTime.dwHighDateTime=0x1d8c11c, nFileSizeHigh=0x0, nFileSizeLow=0x13c3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WakBFAv-9jmgDCRsKlr-.gif", cAlternateFileName="WAKBFA~1.GIF")) returned 1 [0181.725] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc70ca9a0, ftCreationTime.dwHighDateTime=0x1d8bb60, ftLastAccessTime.dwLowDateTime=0x6017c110, ftLastAccessTime.dwHighDateTime=0x1d8bf09, ftLastWriteTime.dwLowDateTime=0x6017c110, ftLastWriteTime.dwHighDateTime=0x1d8bf09, nFileSizeHigh=0x0, nFileSizeLow=0x146e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xd90MTkOJWIttsyWn3Cu.gif", cAlternateFileName="XD90MT~1.GIF")) returned 1 [0181.725] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b60cb0, ftCreationTime.dwHighDateTime=0x1d8beb3, ftLastAccessTime.dwLowDateTime=0x324cdcd0, ftLastAccessTime.dwHighDateTime=0x1d8bed1, ftLastWriteTime.dwLowDateTime=0x324cdcd0, ftLastWriteTime.dwHighDateTime=0x1d8bed1, nFileSizeHigh=0x0, nFileSizeLow=0x15c23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y_E0_CTCisi.gif", cAlternateFileName="Y_E0_C~1.GIF")) returned 1 [0181.725] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0181.725] FindClose (in: hFindFile=0x7aac38 | out: hFindFile=0x7aac38) returned 1 [0181.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f834) returned 1 [0181.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f840) returned 1 [0181.726] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\3tWvyF0j4.jpg", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\3tWvyF0j4.jpg", lpFilePart=0x0) returned 0x31 [0181.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.727] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\3tWvyF0j4.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\3twvyf0j4.jpg"), fInfoLevelId=0x0, lpFileInformation=0x22f53ac | out: lpFileInformation=0x22f53ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90967630, ftCreationTime.dwHighDateTime=0x1d8c0ab, ftLastAccessTime.dwLowDateTime=0x3bc955b0, ftLastAccessTime.dwHighDateTime=0x1d8c104, ftLastWriteTime.dwLowDateTime=0x3bc955b0, ftLastWriteTime.dwHighDateTime=0x1d8c104, nFileSizeHigh=0x0, nFileSizeLow=0x766f)) returned 1 [0181.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.837] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\4eKVeroY.bmp", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\4eKVeroY.bmp", lpFilePart=0x0) returned 0x30 [0181.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\4eKVeroY.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\4ekveroy.bmp"), fInfoLevelId=0x0, lpFileInformation=0x230144c | out: lpFileInformation=0x230144c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13649070, ftCreationTime.dwHighDateTime=0x1d8b174, ftLastAccessTime.dwLowDateTime=0xe73d0380, ftLastAccessTime.dwHighDateTime=0x1d8b63f, ftLastWriteTime.dwLowDateTime=0xe73d0380, ftLastWriteTime.dwHighDateTime=0x1d8b63f, nFileSizeHigh=0x0, nFileSizeLow=0xb0b3)) returned 1 [0181.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.841] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\6dSosDOFHq.png", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\6dSosDOFHq.png", lpFilePart=0x0) returned 0x32 [0181.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\6dSosDOFHq.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\6dsosdofhq.png"), fInfoLevelId=0x0, lpFileInformation=0x2301528 | out: lpFileInformation=0x2301528*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57ea80d0, ftCreationTime.dwHighDateTime=0x1d8b92e, ftLastAccessTime.dwLowDateTime=0xa5653d90, ftLastAccessTime.dwHighDateTime=0x1d8c028, ftLastWriteTime.dwLowDateTime=0xa5653d90, ftLastWriteTime.dwHighDateTime=0x1d8c028, nFileSizeHigh=0x0, nFileSizeLow=0x16dfc)) returned 1 [0181.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.842] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\6YkDrl09Fp0nvbn-Fs.bmp", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\6YkDrl09Fp0nvbn-Fs.bmp", lpFilePart=0x0) returned 0x3a [0181.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\6YkDrl09Fp0nvbn-Fs.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\6ykdrl09fp0nvbn-fs.bmp"), fInfoLevelId=0x0, lpFileInformation=0x230160c | out: lpFileInformation=0x230160c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1be9dfd0, ftCreationTime.dwHighDateTime=0x1d8b17d, ftLastAccessTime.dwLowDateTime=0xa1e46a50, ftLastAccessTime.dwHighDateTime=0x1d8bdae, ftLastWriteTime.dwLowDateTime=0xa1e46a50, ftLastWriteTime.dwHighDateTime=0x1d8bdae, nFileSizeHigh=0x0, nFileSizeLow=0x8aa0)) returned 1 [0181.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.843] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\7o0XQx_-MIRfC.jpg", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\7o0XQx_-MIRfC.jpg", lpFilePart=0x0) returned 0x35 [0181.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\7o0XQx_-MIRfC.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\7o0xqx_-mirfc.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2301710 | out: lpFileInformation=0x2301710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc094bc00, ftCreationTime.dwHighDateTime=0x1d8b6ad, ftLastAccessTime.dwLowDateTime=0x5b0a4e10, ftLastAccessTime.dwHighDateTime=0x1d8be76, ftLastWriteTime.dwLowDateTime=0x5b0a4e10, ftLastWriteTime.dwHighDateTime=0x1d8be76, nFileSizeHigh=0x0, nFileSizeLow=0x15f44)) returned 1 [0181.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.843] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\BKYh0FG7N.jpg", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\BKYh0FG7N.jpg", lpFilePart=0x0) returned 0x31 [0181.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\BKYh0FG7N.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\bkyh0fg7n.jpg"), fInfoLevelId=0x0, lpFileInformation=0x23017fc | out: lpFileInformation=0x23017fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51a9bc90, ftCreationTime.dwHighDateTime=0x1d8b5eb, ftLastAccessTime.dwLowDateTime=0x83b619d0, ftLastAccessTime.dwHighDateTime=0x1d8be20, ftLastWriteTime.dwLowDateTime=0x83b619d0, ftLastWriteTime.dwHighDateTime=0x1d8be20, nFileSizeHigh=0x0, nFileSizeLow=0x524f)) returned 1 [0181.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.843] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\buHBhNHnFz1XPN7.jpg", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\buHBhNHnFz1XPN7.jpg", lpFilePart=0x0) returned 0x37 [0181.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\buHBhNHnFz1XPN7.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\buhbhnhnfz1xpn7.jpg"), fInfoLevelId=0x0, lpFileInformation=0x23018d8 | out: lpFileInformation=0x23018d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41512650, ftCreationTime.dwHighDateTime=0x1d8b445, ftLastAccessTime.dwLowDateTime=0xe43735e0, ftLastAccessTime.dwHighDateTime=0x1d8b7a5, ftLastWriteTime.dwLowDateTime=0xe43735e0, ftLastWriteTime.dwHighDateTime=0x1d8b7a5, nFileSizeHigh=0x0, nFileSizeLow=0x368b)) returned 1 [0181.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.844] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\HBmc40YnA_vky3ILcu.bmp", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\HBmc40YnA_vky3ILcu.bmp", lpFilePart=0x0) returned 0x3a [0181.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\HBmc40YnA_vky3ILcu.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\hbmc40yna_vky3ilcu.bmp"), fInfoLevelId=0x0, lpFileInformation=0x23019cc | out: lpFileInformation=0x23019cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7e87ab0, ftCreationTime.dwHighDateTime=0x1d8ba14, ftLastAccessTime.dwLowDateTime=0x2a589400, ftLastAccessTime.dwHighDateTime=0x1d8bbc1, ftLastWriteTime.dwLowDateTime=0x2a589400, ftLastWriteTime.dwHighDateTime=0x1d8bbc1, nFileSizeHigh=0x0, nFileSizeLow=0x931d)) returned 1 [0181.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.845] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\I2thuECLh.png", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\I2thuECLh.png", lpFilePart=0x0) returned 0x31 [0181.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\I2thuECLh.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\i2thueclh.png"), fInfoLevelId=0x0, lpFileInformation=0x2301ad0 | out: lpFileInformation=0x2301ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d03420, ftCreationTime.dwHighDateTime=0x1d8b7d0, ftLastAccessTime.dwLowDateTime=0xf7cc8040, ftLastAccessTime.dwHighDateTime=0x1d8baae, ftLastWriteTime.dwLowDateTime=0xf7cc8040, ftLastWriteTime.dwHighDateTime=0x1d8baae, nFileSizeHigh=0x0, nFileSizeLow=0x6db4)) returned 1 [0181.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.846] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\J0as7WdPy93bp1Jh.jpg", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\J0as7WdPy93bp1Jh.jpg", lpFilePart=0x0) returned 0x38 [0181.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\J0as7WdPy93bp1Jh.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\j0as7wdpy93bp1jh.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2301bac | out: lpFileInformation=0x2301bac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dc11ef0, ftCreationTime.dwHighDateTime=0x1d8bf12, ftLastAccessTime.dwLowDateTime=0xe7ef540, ftLastAccessTime.dwHighDateTime=0x1d8c08e, ftLastWriteTime.dwLowDateTime=0xe7ef540, ftLastWriteTime.dwHighDateTime=0x1d8c08e, nFileSizeHigh=0x0, nFileSizeLow=0x18710)) returned 1 [0181.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.846] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\jQK_7Zv0rUc8oVDV2l t.jpg", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\jQK_7Zv0rUc8oVDV2l t.jpg", lpFilePart=0x0) returned 0x3c [0181.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\jQK_7Zv0rUc8oVDV2l t.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\jqk_7zv0ruc8ovdv2l t.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2301ca8 | out: lpFileInformation=0x2301ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53292900, ftCreationTime.dwHighDateTime=0x1d8b68d, ftLastAccessTime.dwLowDateTime=0x5c253b0, ftLastAccessTime.dwHighDateTime=0x1d8b9aa, ftLastWriteTime.dwLowDateTime=0x5c253b0, ftLastWriteTime.dwHighDateTime=0x1d8b9aa, nFileSizeHigh=0x0, nFileSizeLow=0xc8db)) returned 1 [0181.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.846] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\Jsxb5Tvw6jzAap.jpg", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\Jsxb5Tvw6jzAap.jpg", lpFilePart=0x0) returned 0x36 [0181.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\Jsxb5Tvw6jzAap.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\jsxb5tvw6jzaap.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2301db4 | out: lpFileInformation=0x2301db4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x880cc950, ftCreationTime.dwHighDateTime=0x1d8bc29, ftLastAccessTime.dwLowDateTime=0xa64fdb0, ftLastAccessTime.dwHighDateTime=0x1d8bd00, ftLastWriteTime.dwLowDateTime=0xa64fdb0, ftLastWriteTime.dwHighDateTime=0x1d8bd00, nFileSizeHigh=0x0, nFileSizeLow=0x18abe)) returned 1 [0181.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.847] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\kuXF7kwD n.bmp", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\kuXF7kwD n.bmp", lpFilePart=0x0) returned 0x32 [0181.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\kuXF7kwD n.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\kuxf7kwd n.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2301ea8 | out: lpFileInformation=0x2301ea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0404140, ftCreationTime.dwHighDateTime=0x1d8b7e9, ftLastAccessTime.dwLowDateTime=0x9042ced0, ftLastAccessTime.dwHighDateTime=0x1d8bb43, ftLastWriteTime.dwLowDateTime=0x9042ced0, ftLastWriteTime.dwHighDateTime=0x1d8bb43, nFileSizeHigh=0x0, nFileSizeLow=0xe5c7)) returned 1 [0181.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.848] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\LTR3n.gif", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\LTR3n.gif", lpFilePart=0x0) returned 0x2d [0181.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\LTR3n.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\ltr3n.gif"), fInfoLevelId=0x0, lpFileInformation=0x2301f8c | out: lpFileInformation=0x2301f8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4271bc20, ftCreationTime.dwHighDateTime=0x1d8b864, ftLastAccessTime.dwLowDateTime=0xfdeb430, ftLastAccessTime.dwHighDateTime=0x1d8bcdc, ftLastWriteTime.dwLowDateTime=0xfdeb430, ftLastWriteTime.dwHighDateTime=0x1d8bcdc, nFileSizeHigh=0x0, nFileSizeLow=0x1738c)) returned 1 [0181.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.849] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\owKcDK.bmp", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\owKcDK.bmp", lpFilePart=0x0) returned 0x2e [0181.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\owKcDK.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\owkcdk.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2302058 | out: lpFileInformation=0x2302058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f61c950, ftCreationTime.dwHighDateTime=0x1d8c0b6, ftLastAccessTime.dwLowDateTime=0x2c382cd0, ftLastAccessTime.dwHighDateTime=0x1d8c0cc, ftLastWriteTime.dwLowDateTime=0x2c382cd0, ftLastWriteTime.dwHighDateTime=0x1d8c0cc, nFileSizeHigh=0x0, nFileSizeLow=0xf7e4)) returned 1 [0181.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.850] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\qF_jebnY.jpg", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\qF_jebnY.jpg", lpFilePart=0x0) returned 0x30 [0181.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\qF_jebnY.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\qf_jebny.jpg"), fInfoLevelId=0x0, lpFileInformation=0x230212c | out: lpFileInformation=0x230212c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3555000, ftCreationTime.dwHighDateTime=0x1d8b557, ftLastAccessTime.dwLowDateTime=0xd6e23970, ftLastAccessTime.dwHighDateTime=0x1d8c0c5, ftLastWriteTime.dwLowDateTime=0xd6e23970, ftLastWriteTime.dwHighDateTime=0x1d8c0c5, nFileSizeHigh=0x0, nFileSizeLow=0x5560)) returned 1 [0181.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.850] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\QQt-qO4Ia1.gif", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\QQt-qO4Ia1.gif", lpFilePart=0x0) returned 0x32 [0181.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\QQt-qO4Ia1.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\qqt-qo4ia1.gif"), fInfoLevelId=0x0, lpFileInformation=0x2302208 | out: lpFileInformation=0x2302208*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38218db0, ftCreationTime.dwHighDateTime=0x1d8b56f, ftLastAccessTime.dwLowDateTime=0xc85d70, ftLastAccessTime.dwHighDateTime=0x1d8b7be, ftLastWriteTime.dwLowDateTime=0xc85d70, ftLastWriteTime.dwHighDateTime=0x1d8b7be, nFileSizeHigh=0x0, nFileSizeLow=0x69a0)) returned 1 [0181.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.851] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\s9uDyr.bmp", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\s9uDyr.bmp", lpFilePart=0x0) returned 0x2e [0181.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\s9uDyr.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\s9udyr.bmp"), fInfoLevelId=0x0, lpFileInformation=0x23022ec | out: lpFileInformation=0x23022ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe25c700, ftCreationTime.dwHighDateTime=0x1d8b93a, ftLastAccessTime.dwLowDateTime=0x72bd6590, ftLastAccessTime.dwHighDateTime=0x1d8bb12, ftLastWriteTime.dwLowDateTime=0x72bd6590, ftLastWriteTime.dwHighDateTime=0x1d8bb12, nFileSizeHigh=0x0, nFileSizeLow=0x2481)) returned 1 [0181.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.851] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\TIDn.gif", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\TIDn.gif", lpFilePart=0x0) returned 0x2c [0181.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\TIDn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\tidn.gif"), fInfoLevelId=0x0, lpFileInformation=0x23023c0 | out: lpFileInformation=0x23023c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd36dec70, ftCreationTime.dwHighDateTime=0x1d8b54f, ftLastAccessTime.dwLowDateTime=0x374e1370, ftLastAccessTime.dwHighDateTime=0x1d8b5a3, ftLastWriteTime.dwLowDateTime=0x374e1370, ftLastWriteTime.dwHighDateTime=0x1d8b5a3, nFileSizeHigh=0x0, nFileSizeLow=0x1593f)) returned 1 [0181.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.851] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\u6LqnbvtT.jpg", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\u6LqnbvtT.jpg", lpFilePart=0x0) returned 0x31 [0181.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\u6LqnbvtT.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\u6lqnbvtt.jpg"), fInfoLevelId=0x0, lpFileInformation=0x230248c | out: lpFileInformation=0x230248c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd88c0d80, ftCreationTime.dwHighDateTime=0x1d8b9a1, ftLastAccessTime.dwLowDateTime=0x816305f0, ftLastAccessTime.dwHighDateTime=0x1d8bf7c, ftLastWriteTime.dwLowDateTime=0x816305f0, ftLastWriteTime.dwHighDateTime=0x1d8bf7c, nFileSizeHigh=0x0, nFileSizeLow=0x152bb)) returned 1 [0181.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.852] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\WakBFAv-9jmgDCRsKlr-.gif", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\WakBFAv-9jmgDCRsKlr-.gif", lpFilePart=0x0) returned 0x3c [0181.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\WakBFAv-9jmgDCRsKlr-.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\wakbfav-9jmgdcrsklr-.gif"), fInfoLevelId=0x0, lpFileInformation=0x2302568 | out: lpFileInformation=0x2302568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb234e4c0, ftCreationTime.dwHighDateTime=0x1d8c0c9, ftLastAccessTime.dwLowDateTime=0x39de88c0, ftLastAccessTime.dwHighDateTime=0x1d8c11c, ftLastWriteTime.dwLowDateTime=0x39de88c0, ftLastWriteTime.dwHighDateTime=0x1d8c11c, nFileSizeHigh=0x0, nFileSizeLow=0x13c3c)) returned 1 [0181.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.853] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\Xd90MTkOJWIttsyWn3Cu.gif", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\Xd90MTkOJWIttsyWn3Cu.gif", lpFilePart=0x0) returned 0x3c [0181.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\Xd90MTkOJWIttsyWn3Cu.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\xd90mtkojwittsywn3cu.gif"), fInfoLevelId=0x0, lpFileInformation=0x2302674 | out: lpFileInformation=0x2302674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc70ca9a0, ftCreationTime.dwHighDateTime=0x1d8bb60, ftLastAccessTime.dwLowDateTime=0x6017c110, ftLastAccessTime.dwHighDateTime=0x1d8bf09, ftLastWriteTime.dwLowDateTime=0x6017c110, ftLastWriteTime.dwHighDateTime=0x1d8bf09, nFileSizeHigh=0x0, nFileSizeLow=0x146e6)) returned 1 [0181.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.853] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\Y_E0_CTCisi.gif", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\Y_E0_CTCisi.gif", lpFilePart=0x0) returned 0x33 [0181.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\1mei\\Y_E0_CTCisi.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1mei\\y_e0_ctcisi.gif"), fInfoLevelId=0x0, lpFileInformation=0x2302780 | out: lpFileInformation=0x2302780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b60cb0, ftCreationTime.dwHighDateTime=0x1d8beb3, ftLastAccessTime.dwLowDateTime=0x324cdcd0, ftLastAccessTime.dwHighDateTime=0x1d8bed1, ftLastWriteTime.dwLowDateTime=0x324cdcd0, ftLastWriteTime.dwHighDateTime=0x1d8bed1, nFileSizeHigh=0x0, nFileSizeLow=0x15c23)) returned 1 [0181.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.853] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x4c5f354, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x2a [0181.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f7f8) returned 1 [0181.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll"), fInfoLevelId=0x0, lpFileInformation=0x4c5f874 | out: lpFileInformation=0x4c5f874*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0181.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f7f4) returned 1 [0181.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f878) returned 1 [0181.855] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x2a [0181.855] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\*"), lpFindFileData=0x4c5f5a0 | out: lpFindFileData=0x4c5f5a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aac38 [0181.855] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.855] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b10dbc5, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0181.855] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b10dbc5, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0181.856] FindClose (in: hFindFile=0x7aac38 | out: hFindFile=0x7aac38) returned 1 [0181.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f834) returned 1 [0181.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f840) returned 1 [0181.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f878) returned 1 [0181.856] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x2a [0181.856] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\*"), lpFindFileData=0x4c5f5a0 | out: lpFindFileData=0x4c5f5a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aac38 [0181.856] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.856] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b10dbc5, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0181.856] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0181.856] FindClose (in: hFindFile=0x7aac38 | out: hFindFile=0x7aac38) returned 1 [0181.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f834) returned 1 [0181.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f840) returned 1 [0181.857] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini", lpFilePart=0x0) returned 0x36 [0181.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2303840 | out: lpFileInformation=0x2303840*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b10dbc5, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1 [0181.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.858] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x4c5f334, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x96 [0181.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f7d8) returned 1 [0181.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\camera roll"), fInfoLevelId=0x0, lpFileInformation=0x4c5f854 | out: lpFileInformation=0x4c5f854*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f7d4) returned 1 [0181.858] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x96 [0181.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f768) returned 1 [0181.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\camera roll"), fInfoLevelId=0x0, lpFileInformation=0x4c5f7e4 | out: lpFileInformation=0x4c5f7e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f764) returned 1 [0181.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f768) returned 1 [0181.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\camera roll"), fInfoLevelId=0x0, lpFileInformation=0x4c5f7e4 | out: lpFileInformation=0x4c5f7e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f764) returned 1 [0181.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f768) returned 1 [0181.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c5f7e4 | out: lpFileInformation=0x4c5f7e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23fa1ba, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xf241fd82, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xf241fd82, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0181.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f764) returned 1 [0181.859] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\camera roll"), lpSecurityAttributes=0x0) returned 1 [0181.859] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4c5f304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini", lpFilePart=0x0) returned 0x36 [0181.859] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4c5f304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini", lpFilePart=0x0) returned 0xa2 [0181.859] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\camera roll\\desktop.ini"), bFailIfExists=0) returned 1 [0181.864] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x4c5f354, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x2d [0181.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f7f8) returned 1 [0181.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c5f874 | out: lpFileInformation=0x4c5f874*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0181.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f7f4) returned 1 [0181.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f878) returned 1 [0181.865] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x2d [0181.865] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\*"), lpFindFileData=0x4c5f5a0 | out: lpFindFileData=0x4c5f5a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aac38 [0181.865] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.866] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0181.866] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0181.866] FindClose (in: hFindFile=0x7aac38 | out: hFindFile=0x7aac38) returned 1 [0181.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f834) returned 1 [0181.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f840) returned 1 [0181.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f878) returned 1 [0181.866] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x2d [0181.866] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\*"), lpFindFileData=0x4c5f5a0 | out: lpFindFileData=0x4c5f5a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aacb8 [0181.866] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.867] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0181.867] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4c5f5ac | out: lpFindFileData=0x4c5f5ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0181.867] FindClose (in: hFindFile=0x7aacb8 | out: hFindFile=0x7aacb8) returned 1 [0181.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f834) returned 1 [0181.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f840) returned 1 [0181.867] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini", lpFilePart=0x0) returned 0x39 [0181.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f82c) returned 1 [0181.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x2305930 | out: lpFileInformation=0x2305930*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1 [0181.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f828) returned 1 [0181.870] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x4c5f334, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x99 [0181.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f7d8) returned 1 [0181.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\saved pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c5f854 | out: lpFileInformation=0x4c5f854*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f7d4) returned 1 [0181.871] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x4c5f338, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x99 [0181.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f768) returned 1 [0181.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\saved pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c5f7e4 | out: lpFileInformation=0x4c5f7e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f764) returned 1 [0181.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f768) returned 1 [0181.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\saved pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c5f7e4 | out: lpFileInformation=0x4c5f7e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f764) returned 1 [0181.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4c5f768) returned 1 [0181.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x4c5f7e4 | out: lpFileInformation=0x4c5f7e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23fa1ba, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xf259d6b0, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xf259d6b0, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0181.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4c5f764) returned 1 [0181.871] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\saved pictures"), lpSecurityAttributes=0x0) returned 1 [0181.873] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4c5f304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini", lpFilePart=0x0) returned 0x39 [0181.873] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4c5f304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini", lpFilePart=0x0) returned 0xa5 [0181.873] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\desktop.ini"), bFailIfExists=0) returned 1 [0181.876] CoUninitialize () Thread: id = 244 os_tid = 0xbdc [0181.617] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0181.617] RoInitialize () returned 0x1 [0181.617] RoUninitialize () returned 0x0 [0181.617] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x4d9f304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f [0181.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7a8) returned 1 [0181.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents" (normalized: "c:\\users\\rdhj0cnfevzx\\documents"), fInfoLevelId=0x0, lpFileInformation=0x4d9f824 | out: lpFileInformation=0x4d9f824*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6bcd843c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6bcd843c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0181.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7a4) returned 1 [0181.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f828) returned 1 [0181.617] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f [0181.617] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\*"), lpFindFileData=0x4d9f550 | out: lpFindFileData=0x4d9f550*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6bcd843c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6bcd843c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aacb8 [0181.618] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6bcd843c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6bcd843c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.619] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8b72010, ftCreationTime.dwHighDateTime=0x1d85a67, ftLastAccessTime.dwLowDateTime=0xc647e150, ftLastAccessTime.dwHighDateTime=0x1d88b00, ftLastWriteTime.dwLowDateTime=0xc647e150, ftLastWriteTime.dwHighDateTime=0x1d88b00, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="-Eqxdl6Kkdh1bOaf.pptx", cAlternateFileName="-EQXDL~1.PPT")) returned 1 [0181.619] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x353f5760, ftCreationTime.dwHighDateTime=0x1d8b706, ftLastAccessTime.dwLowDateTime=0xd2af1040, ftLastAccessTime.dwHighDateTime=0x1d8bc55, ftLastWriteTime.dwLowDateTime=0xd2af1040, ftLastWriteTime.dwHighDateTime=0x1d8bc55, nFileSizeHigh=0x0, nFileSizeLow=0x14ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="1Z5Kv7GS76lwA.pps", cAlternateFileName="1Z5KV7~1.PPS")) returned 1 [0181.619] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ce2b4d0, ftCreationTime.dwHighDateTime=0x1d8b71a, ftLastAccessTime.dwLowDateTime=0xbaac5aa0, ftLastAccessTime.dwHighDateTime=0x1d8c094, ftLastWriteTime.dwLowDateTime=0xbaac5aa0, ftLastWriteTime.dwHighDateTime=0x1d8c094, nFileSizeHigh=0x0, nFileSizeLow=0xf74b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3DSBsa_0s.ods", cAlternateFileName="3DSBSA~1.ODS")) returned 1 [0181.620] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e2d3c80, ftCreationTime.dwHighDateTime=0x1d8bc53, ftLastAccessTime.dwLowDateTime=0xc7a13a50, ftLastAccessTime.dwHighDateTime=0x1d8c0b7, ftLastWriteTime.dwLowDateTime=0xc7a13a50, ftLastWriteTime.dwHighDateTime=0x1d8c0b7, nFileSizeHigh=0x0, nFileSizeLow=0xce57, dwReserved0=0x0, dwReserved1=0x0, cFileName="3oOk7eq0Br.docx", cAlternateFileName="3OOK7E~1.DOC")) returned 1 [0181.620] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf9eaa0, ftCreationTime.dwHighDateTime=0x1d8c0af, ftLastAccessTime.dwLowDateTime=0x586d40f0, ftLastAccessTime.dwHighDateTime=0x1d8c127, ftLastWriteTime.dwLowDateTime=0x586d40f0, ftLastWriteTime.dwHighDateTime=0x1d8c127, nFileSizeHigh=0x0, nFileSizeLow=0x5b7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="4HGl-VGgKrOM2.pdf", cAlternateFileName="4HGL-V~1.PDF")) returned 1 [0181.620] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6e796b0, ftCreationTime.dwHighDateTime=0x1d8ba68, ftLastAccessTime.dwLowDateTime=0x6c472770, ftLastAccessTime.dwHighDateTime=0x1d8bd77, ftLastWriteTime.dwLowDateTime=0x6c472770, ftLastWriteTime.dwHighDateTime=0x1d8bd77, nFileSizeHigh=0x0, nFileSizeLow=0x16f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="4_F6bcRTeu1.pptx", cAlternateFileName="4_F6BC~1.PPT")) returned 1 [0181.620] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd175ca0, ftCreationTime.dwHighDateTime=0x1d8be49, ftLastAccessTime.dwLowDateTime=0x53c2e6d0, ftLastAccessTime.dwHighDateTime=0x1d8be76, ftLastWriteTime.dwLowDateTime=0x53c2e6d0, ftLastWriteTime.dwHighDateTime=0x1d8be76, nFileSizeHigh=0x0, nFileSizeLow=0x17380, dwReserved0=0x0, dwReserved1=0x0, cFileName="5b6aLak.odp", cAlternateFileName="")) returned 1 [0181.620] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cd30f50, ftCreationTime.dwHighDateTime=0x1d8bff2, ftLastAccessTime.dwLowDateTime=0x10680680, ftLastAccessTime.dwHighDateTime=0x1d8c110, ftLastWriteTime.dwLowDateTime=0x10680680, ftLastWriteTime.dwHighDateTime=0x1d8c110, nFileSizeHigh=0x0, nFileSizeLow=0x15d9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9hWT7Qmr0PrXZJ XbtE.pptx", cAlternateFileName="9HWT7Q~1.PPT")) returned 1 [0181.620] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43649a85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43649a85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4372e947, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0181.621] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0d9d810, ftCreationTime.dwHighDateTime=0x1d835ba, ftLastAccessTime.dwLowDateTime=0x9a8fe850, ftLastAccessTime.dwHighDateTime=0x1d867ba, ftLastWriteTime.dwLowDateTime=0x9a8fe850, ftLastWriteTime.dwHighDateTime=0x1d867ba, nFileSizeHigh=0x0, nFileSizeLow=0x1889b, dwReserved0=0x0, dwReserved1=0x0, cFileName="E45Yv1XvuulS8zUq.xlsx", cAlternateFileName="E45YV1~1.XLS")) returned 1 [0181.621] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31f478c0, ftCreationTime.dwHighDateTime=0x1d8b18d, ftLastAccessTime.dwLowDateTime=0x32e2a240, ftLastAccessTime.dwHighDateTime=0x1d8b50f, ftLastWriteTime.dwLowDateTime=0x32e2a240, ftLastWriteTime.dwHighDateTime=0x1d8b50f, nFileSizeHigh=0x0, nFileSizeLow=0x102ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="e71u.ots", cAlternateFileName="")) returned 1 [0181.621] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ed64c0, ftCreationTime.dwHighDateTime=0x1d8ae87, ftLastAccessTime.dwLowDateTime=0x2801bd40, ftLastAccessTime.dwHighDateTime=0x1d8b422, ftLastWriteTime.dwLowDateTime=0x2801bd40, ftLastWriteTime.dwHighDateTime=0x1d8b422, nFileSizeHigh=0x0, nFileSizeLow=0xe134, dwReserved0=0x0, dwReserved1=0x0, cFileName="eJH4f.xlsx", cAlternateFileName="EJH4F~1.XLS")) returned 1 [0181.621] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dbc440, ftCreationTime.dwHighDateTime=0x1d8b653, ftLastAccessTime.dwLowDateTime=0x9aeadce0, ftLastAccessTime.dwHighDateTime=0x1d8b938, ftLastWriteTime.dwLowDateTime=0x9aeadce0, ftLastWriteTime.dwHighDateTime=0x1d8b938, nFileSizeHigh=0x0, nFileSizeLow=0x14c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ev9sDmBTxbKhXxI.odt", cAlternateFileName="EV9SDM~1.ODT")) returned 1 [0181.621] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb978a30, ftCreationTime.dwHighDateTime=0x1d8b5ad, ftLastAccessTime.dwLowDateTime=0x27a6eed0, ftLastAccessTime.dwHighDateTime=0x1d8b75e, ftLastWriteTime.dwLowDateTime=0x27a6eed0, ftLastWriteTime.dwHighDateTime=0x1d8b75e, nFileSizeHigh=0x0, nFileSizeLow=0x16b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fShM8Wh__KF.docx", cAlternateFileName="FSHM8W~1.DOC")) returned 1 [0181.621] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b2300c0, ftCreationTime.dwHighDateTime=0x1d8b58a, ftLastAccessTime.dwLowDateTime=0x2cbcf370, ftLastAccessTime.dwHighDateTime=0x1d8bd7a, ftLastWriteTime.dwLowDateTime=0x2cbcf370, ftLastWriteTime.dwHighDateTime=0x1d8bd7a, nFileSizeHigh=0x0, nFileSizeLow=0xf700, dwReserved0=0x0, dwReserved1=0x0, cFileName="gL-dJ 92wqVX.doc", cAlternateFileName="GL-DJ9~1.DOC")) returned 1 [0181.622] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f2bf40, ftCreationTime.dwHighDateTime=0x1d8b2b7, ftLastAccessTime.dwLowDateTime=0xdb84d650, ftLastAccessTime.dwHighDateTime=0x1d8bc6e, ftLastWriteTime.dwLowDateTime=0xdb84d650, ftLastWriteTime.dwHighDateTime=0x1d8bc6e, nFileSizeHigh=0x0, nFileSizeLow=0x10557, dwReserved0=0x0, dwReserved1=0x0, cFileName="J27 Bdkxk-BB.odt", cAlternateFileName="J27BDK~1.ODT")) returned 1 [0181.622] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fc87880, ftCreationTime.dwHighDateTime=0x1d8bd48, ftLastAccessTime.dwLowDateTime=0x2df80ef0, ftLastAccessTime.dwHighDateTime=0x1d8bf50, ftLastWriteTime.dwLowDateTime=0x2df80ef0, ftLastWriteTime.dwHighDateTime=0x1d8bf50, nFileSizeHigh=0x0, nFileSizeLow=0xec27, dwReserved0=0x0, dwReserved1=0x0, cFileName="JbsnSQgtqNF4.xls", cAlternateFileName="JBSNSQ~1.XLS")) returned 1 [0181.622] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda657a80, ftCreationTime.dwHighDateTime=0x1d8a10d, ftLastAccessTime.dwLowDateTime=0xe31766e0, ftLastAccessTime.dwHighDateTime=0x1d8a381, ftLastWriteTime.dwLowDateTime=0xe31766e0, ftLastWriteTime.dwHighDateTime=0x1d8a381, nFileSizeHigh=0x0, nFileSizeLow=0x9da7, dwReserved0=0x0, dwReserved1=0x0, cFileName="jxmdpfmkp6YGZgXo.docx", cAlternateFileName="JXMDPF~1.DOC")) returned 1 [0181.622] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad655e70, ftCreationTime.dwHighDateTime=0x1d8b7cd, ftLastAccessTime.dwLowDateTime=0x441d94c0, ftLastAccessTime.dwHighDateTime=0x1d8c022, ftLastWriteTime.dwLowDateTime=0x441d94c0, ftLastWriteTime.dwHighDateTime=0x1d8c022, nFileSizeHigh=0x0, nFileSizeLow=0x163cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="kuGxj9cn5.ots", cAlternateFileName="KUGXJ9~1.OTS")) returned 1 [0181.622] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda31e5e0, ftCreationTime.dwHighDateTime=0x1d84a72, ftLastAccessTime.dwLowDateTime=0xe77acf00, ftLastAccessTime.dwHighDateTime=0x1d88a7d, ftLastWriteTime.dwLowDateTime=0xe77acf00, ftLastWriteTime.dwHighDateTime=0x1d88a7d, nFileSizeHigh=0x0, nFileSizeLow=0xebe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="l0Ly1dOzG9b.pptx", cAlternateFileName="L0LY1D~1.PPT")) returned 1 [0181.622] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1698ecb0, ftCreationTime.dwHighDateTime=0x1d8845f, ftLastAccessTime.dwLowDateTime=0x7de8f220, ftLastAccessTime.dwHighDateTime=0x1d88abd, ftLastWriteTime.dwLowDateTime=0x7de8f220, ftLastWriteTime.dwHighDateTime=0x1d88abd, nFileSizeHigh=0x0, nFileSizeLow=0x18442, dwReserved0=0x0, dwReserved1=0x0, cFileName="LlNux.docx", cAlternateFileName="LLNUX~1.DOC")) returned 1 [0181.623] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc6be40, ftCreationTime.dwHighDateTime=0x1d83898, ftLastAccessTime.dwLowDateTime=0xb9014e10, ftLastAccessTime.dwHighDateTime=0x1d87998, ftLastWriteTime.dwLowDateTime=0xb9014e10, ftLastWriteTime.dwHighDateTime=0x1d87998, nFileSizeHigh=0x0, nFileSizeLow=0x46b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="M3k6HPkCjln.docx", cAlternateFileName="M3K6HP~1.DOC")) returned 1 [0181.623] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0181.631] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0181.631] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0181.632] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0181.632] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d246f60, ftCreationTime.dwHighDateTime=0x1d8b733, ftLastAccessTime.dwLowDateTime=0x2856b530, ftLastAccessTime.dwHighDateTime=0x1d8ba2f, ftLastWriteTime.dwLowDateTime=0x2856b530, ftLastWriteTime.dwHighDateTime=0x1d8ba2f, nFileSizeHigh=0x0, nFileSizeLow=0x129e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ptxpBGQ.pdf", cAlternateFileName="")) returned 1 [0181.632] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24a71420, ftCreationTime.dwHighDateTime=0x1d88b9f, ftLastAccessTime.dwLowDateTime=0xd2984010, ftLastAccessTime.dwHighDateTime=0x1d8a821, ftLastWriteTime.dwLowDateTime=0xd2984010, ftLastWriteTime.dwHighDateTime=0x1d8a821, nFileSizeHigh=0x0, nFileSizeLow=0x184cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="R10S_E409.xlsx", cAlternateFileName="R10S_E~1.XLS")) returned 1 [0181.632] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d57e650, ftCreationTime.dwHighDateTime=0x1d8b5f8, ftLastAccessTime.dwLowDateTime=0x41a82910, ftLastAccessTime.dwHighDateTime=0x1d8be8f, ftLastWriteTime.dwLowDateTime=0x41a82910, ftLastWriteTime.dwHighDateTime=0x1d8be8f, nFileSizeHigh=0x0, nFileSizeLow=0x16910, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rdm FvCqzjr4BKW8.ppt", cAlternateFileName="RDMFVC~1.PPT")) returned 1 [0181.632] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe13fb850, ftCreationTime.dwHighDateTime=0x1d8c0db, ftLastAccessTime.dwLowDateTime=0x5ee50380, ftLastAccessTime.dwHighDateTime=0x1d8c124, ftLastWriteTime.dwLowDateTime=0x5ee50380, ftLastWriteTime.dwHighDateTime=0x1d8c124, nFileSizeHigh=0x0, nFileSizeLow=0x507e, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-C55.odt", cAlternateFileName="")) returned 1 [0181.632] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d79c60, ftCreationTime.dwHighDateTime=0x1d88b85, ftLastAccessTime.dwLowDateTime=0x63093ea0, ftLastAccessTime.dwHighDateTime=0x1d8baca, ftLastWriteTime.dwLowDateTime=0x63093ea0, ftLastWriteTime.dwHighDateTime=0x1d8baca, nFileSizeHigh=0x0, nFileSizeLow=0x127e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sAi7.pptx", cAlternateFileName="SAI7~1.PPT")) returned 1 [0181.633] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b929440, ftCreationTime.dwHighDateTime=0x1d8ba0b, ftLastAccessTime.dwLowDateTime=0x66b69e00, ftLastAccessTime.dwHighDateTime=0x1d8bc71, ftLastWriteTime.dwLowDateTime=0x66b69e00, ftLastWriteTime.dwHighDateTime=0x1d8bc71, nFileSizeHigh=0x0, nFileSizeLow=0x5936, dwReserved0=0x0, dwReserved1=0x0, cFileName="SnWjYP8 jUC.ppt", cAlternateFileName="SNWJYP~1.PPT")) returned 1 [0181.633] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed8a4eb0, ftCreationTime.dwHighDateTime=0x1d8aa8b, ftLastAccessTime.dwLowDateTime=0x78385190, ftLastAccessTime.dwHighDateTime=0x1d8b62d, ftLastWriteTime.dwLowDateTime=0x78385190, ftLastWriteTime.dwHighDateTime=0x1d8b62d, nFileSizeHigh=0x0, nFileSizeLow=0x1608f, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2kWqhx.xlsx", cAlternateFileName="T2KWQH~1.XLS")) returned 1 [0181.633] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tH7ZiLMX-lNDz2T4flA", cAlternateFileName="TH7ZIL~1")) returned 1 [0181.633] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9f325e0, ftCreationTime.dwHighDateTime=0x1d8b4e5, ftLastAccessTime.dwLowDateTime=0x96ff5090, ftLastAccessTime.dwHighDateTime=0x1d8be77, ftLastWriteTime.dwLowDateTime=0x96ff5090, ftLastWriteTime.dwHighDateTime=0x1d8be77, nFileSizeHigh=0x0, nFileSizeLow=0x6c8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UxxM9vzrN1plGVva5.ods", cAlternateFileName="UXXM9V~1.ODS")) returned 1 [0181.633] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1257dc0, ftCreationTime.dwHighDateTime=0x1d8aadb, ftLastAccessTime.dwLowDateTime=0xcad8c0e0, ftLastAccessTime.dwHighDateTime=0x1d8b3cd, ftLastWriteTime.dwLowDateTime=0xcad8c0e0, ftLastWriteTime.dwHighDateTime=0x1d8b3cd, nFileSizeHigh=0x0, nFileSizeLow=0xab54, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSFebGAZfWCvODJJqF.xlsx", cAlternateFileName="VSFEBG~1.XLS")) returned 1 [0181.633] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3cc2a0, ftCreationTime.dwHighDateTime=0x1d8ad0a, ftLastAccessTime.dwLowDateTime=0x75320560, ftLastAccessTime.dwHighDateTime=0x1d8b7ac, ftLastWriteTime.dwLowDateTime=0x75320560, ftLastWriteTime.dwHighDateTime=0x1d8b7ac, nFileSizeHigh=0x0, nFileSizeLow=0x16729, dwReserved0=0x0, dwReserved1=0x0, cFileName="X2bCTFNs35VghcjI.docx", cAlternateFileName="X2BCTF~1.DOC")) returned 1 [0181.634] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x327a6aa0, ftCreationTime.dwHighDateTime=0x1d8af69, ftLastAccessTime.dwLowDateTime=0x47383be0, ftLastAccessTime.dwHighDateTime=0x1d8b656, ftLastWriteTime.dwLowDateTime=0x47383be0, ftLastWriteTime.dwHighDateTime=0x1d8b656, nFileSizeHigh=0x0, nFileSizeLow=0xd19b, dwReserved0=0x0, dwReserved1=0x0, cFileName="xYJkClxxh YE11VkYAFc.pptx", cAlternateFileName="XYJKCL~1.PPT")) returned 1 [0181.634] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf401740, ftCreationTime.dwHighDateTime=0x1d8b8cb, ftLastAccessTime.dwLowDateTime=0x3379b560, ftLastAccessTime.dwHighDateTime=0x1d8be13, ftLastWriteTime.dwLowDateTime=0x3379b560, ftLastWriteTime.dwHighDateTime=0x1d8be13, nFileSizeHigh=0x0, nFileSizeLow=0x2f15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z4hDmRU.rtf", cAlternateFileName="")) returned 1 [0181.634] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc18b1d10, ftCreationTime.dwHighDateTime=0x1d86794, ftLastAccessTime.dwLowDateTime=0xeabdc170, ftLastAccessTime.dwHighDateTime=0x1d86a72, ftLastWriteTime.dwLowDateTime=0xeabdc170, ftLastWriteTime.dwHighDateTime=0x1d86a72, nFileSizeHigh=0x0, nFileSizeLow=0x12f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="zuwnbRBCFb l.docx", cAlternateFileName="ZUWNBR~1.DOC")) returned 1 [0181.634] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709ad260, ftCreationTime.dwHighDateTime=0x1d8b79e, ftLastAccessTime.dwLowDateTime=0x4d1307d0, ftLastAccessTime.dwHighDateTime=0x1d8be7a, ftLastWriteTime.dwLowDateTime=0x4d1307d0, ftLastWriteTime.dwHighDateTime=0x1d8be7a, nFileSizeHigh=0x0, nFileSizeLow=0x98fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="_-zO_pPR6V-z.csv", cAlternateFileName="_-ZO_P~1.CSV")) returned 1 [0181.634] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6e5150, ftCreationTime.dwHighDateTime=0x1d8bd40, ftLastAccessTime.dwLowDateTime=0x2e00a1c0, ftLastAccessTime.dwHighDateTime=0x1d8bda0, ftLastWriteTime.dwLowDateTime=0x2e00a1c0, ftLastWriteTime.dwHighDateTime=0x1d8bda0, nFileSizeHigh=0x0, nFileSizeLow=0x2ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_nGPp71.ots", cAlternateFileName="")) returned 1 [0181.634] FindNextFileW (in: hFindFile=0x7aacb8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6e5150, ftCreationTime.dwHighDateTime=0x1d8bd40, ftLastAccessTime.dwLowDateTime=0x2e00a1c0, ftLastAccessTime.dwHighDateTime=0x1d8bda0, ftLastWriteTime.dwLowDateTime=0x2e00a1c0, ftLastWriteTime.dwHighDateTime=0x1d8bda0, nFileSizeHigh=0x0, nFileSizeLow=0x2ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_nGPp71.ots", cAlternateFileName="")) returned 0 [0181.635] FindClose (in: hFindFile=0x7aacb8 | out: hFindFile=0x7aacb8) returned 1 [0181.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7e4) returned 1 [0181.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7f0) returned 1 [0181.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f828) returned 1 [0181.635] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x1f [0181.635] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\*"), lpFindFileData=0x4d9f550 | out: lpFindFileData=0x4d9f550*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6bcd843c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6bcd843c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aabf8 [0181.635] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6bcd843c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6bcd843c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.635] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8b72010, ftCreationTime.dwHighDateTime=0x1d85a67, ftLastAccessTime.dwLowDateTime=0xc647e150, ftLastAccessTime.dwHighDateTime=0x1d88b00, ftLastWriteTime.dwLowDateTime=0xc647e150, ftLastWriteTime.dwHighDateTime=0x1d88b00, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="-Eqxdl6Kkdh1bOaf.pptx", cAlternateFileName="-EQXDL~1.PPT")) returned 1 [0181.635] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x353f5760, ftCreationTime.dwHighDateTime=0x1d8b706, ftLastAccessTime.dwLowDateTime=0xd2af1040, ftLastAccessTime.dwHighDateTime=0x1d8bc55, ftLastWriteTime.dwLowDateTime=0xd2af1040, ftLastWriteTime.dwHighDateTime=0x1d8bc55, nFileSizeHigh=0x0, nFileSizeLow=0x14ce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="1Z5Kv7GS76lwA.pps", cAlternateFileName="1Z5KV7~1.PPS")) returned 1 [0181.636] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ce2b4d0, ftCreationTime.dwHighDateTime=0x1d8b71a, ftLastAccessTime.dwLowDateTime=0xbaac5aa0, ftLastAccessTime.dwHighDateTime=0x1d8c094, ftLastWriteTime.dwLowDateTime=0xbaac5aa0, ftLastWriteTime.dwHighDateTime=0x1d8c094, nFileSizeHigh=0x0, nFileSizeLow=0xf74b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3DSBsa_0s.ods", cAlternateFileName="3DSBSA~1.ODS")) returned 1 [0181.636] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e2d3c80, ftCreationTime.dwHighDateTime=0x1d8bc53, ftLastAccessTime.dwLowDateTime=0xc7a13a50, ftLastAccessTime.dwHighDateTime=0x1d8c0b7, ftLastWriteTime.dwLowDateTime=0xc7a13a50, ftLastWriteTime.dwHighDateTime=0x1d8c0b7, nFileSizeHigh=0x0, nFileSizeLow=0xce57, dwReserved0=0x0, dwReserved1=0x0, cFileName="3oOk7eq0Br.docx", cAlternateFileName="3OOK7E~1.DOC")) returned 1 [0181.636] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf9eaa0, ftCreationTime.dwHighDateTime=0x1d8c0af, ftLastAccessTime.dwLowDateTime=0x586d40f0, ftLastAccessTime.dwHighDateTime=0x1d8c127, ftLastWriteTime.dwLowDateTime=0x586d40f0, ftLastWriteTime.dwHighDateTime=0x1d8c127, nFileSizeHigh=0x0, nFileSizeLow=0x5b7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="4HGl-VGgKrOM2.pdf", cAlternateFileName="4HGL-V~1.PDF")) returned 1 [0181.636] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6e796b0, ftCreationTime.dwHighDateTime=0x1d8ba68, ftLastAccessTime.dwLowDateTime=0x6c472770, ftLastAccessTime.dwHighDateTime=0x1d8bd77, ftLastWriteTime.dwLowDateTime=0x6c472770, ftLastWriteTime.dwHighDateTime=0x1d8bd77, nFileSizeHigh=0x0, nFileSizeLow=0x16f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="4_F6bcRTeu1.pptx", cAlternateFileName="4_F6BC~1.PPT")) returned 1 [0181.636] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd175ca0, ftCreationTime.dwHighDateTime=0x1d8be49, ftLastAccessTime.dwLowDateTime=0x53c2e6d0, ftLastAccessTime.dwHighDateTime=0x1d8be76, ftLastWriteTime.dwLowDateTime=0x53c2e6d0, ftLastWriteTime.dwHighDateTime=0x1d8be76, nFileSizeHigh=0x0, nFileSizeLow=0x17380, dwReserved0=0x0, dwReserved1=0x0, cFileName="5b6aLak.odp", cAlternateFileName="")) returned 1 [0181.636] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cd30f50, ftCreationTime.dwHighDateTime=0x1d8bff2, ftLastAccessTime.dwLowDateTime=0x10680680, ftLastAccessTime.dwHighDateTime=0x1d8c110, ftLastWriteTime.dwLowDateTime=0x10680680, ftLastWriteTime.dwHighDateTime=0x1d8c110, nFileSizeHigh=0x0, nFileSizeLow=0x15d9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9hWT7Qmr0PrXZJ XbtE.pptx", cAlternateFileName="9HWT7Q~1.PPT")) returned 1 [0181.636] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43649a85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43649a85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4372e947, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0181.637] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0d9d810, ftCreationTime.dwHighDateTime=0x1d835ba, ftLastAccessTime.dwLowDateTime=0x9a8fe850, ftLastAccessTime.dwHighDateTime=0x1d867ba, ftLastWriteTime.dwLowDateTime=0x9a8fe850, ftLastWriteTime.dwHighDateTime=0x1d867ba, nFileSizeHigh=0x0, nFileSizeLow=0x1889b, dwReserved0=0x0, dwReserved1=0x0, cFileName="E45Yv1XvuulS8zUq.xlsx", cAlternateFileName="E45YV1~1.XLS")) returned 1 [0181.637] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31f478c0, ftCreationTime.dwHighDateTime=0x1d8b18d, ftLastAccessTime.dwLowDateTime=0x32e2a240, ftLastAccessTime.dwHighDateTime=0x1d8b50f, ftLastWriteTime.dwLowDateTime=0x32e2a240, ftLastWriteTime.dwHighDateTime=0x1d8b50f, nFileSizeHigh=0x0, nFileSizeLow=0x102ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="e71u.ots", cAlternateFileName="")) returned 1 [0181.637] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ed64c0, ftCreationTime.dwHighDateTime=0x1d8ae87, ftLastAccessTime.dwLowDateTime=0x2801bd40, ftLastAccessTime.dwHighDateTime=0x1d8b422, ftLastWriteTime.dwLowDateTime=0x2801bd40, ftLastWriteTime.dwHighDateTime=0x1d8b422, nFileSizeHigh=0x0, nFileSizeLow=0xe134, dwReserved0=0x0, dwReserved1=0x0, cFileName="eJH4f.xlsx", cAlternateFileName="EJH4F~1.XLS")) returned 1 [0181.637] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dbc440, ftCreationTime.dwHighDateTime=0x1d8b653, ftLastAccessTime.dwLowDateTime=0x9aeadce0, ftLastAccessTime.dwHighDateTime=0x1d8b938, ftLastWriteTime.dwLowDateTime=0x9aeadce0, ftLastWriteTime.dwHighDateTime=0x1d8b938, nFileSizeHigh=0x0, nFileSizeLow=0x14c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ev9sDmBTxbKhXxI.odt", cAlternateFileName="EV9SDM~1.ODT")) returned 1 [0181.637] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb978a30, ftCreationTime.dwHighDateTime=0x1d8b5ad, ftLastAccessTime.dwLowDateTime=0x27a6eed0, ftLastAccessTime.dwHighDateTime=0x1d8b75e, ftLastWriteTime.dwLowDateTime=0x27a6eed0, ftLastWriteTime.dwHighDateTime=0x1d8b75e, nFileSizeHigh=0x0, nFileSizeLow=0x16b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="fShM8Wh__KF.docx", cAlternateFileName="FSHM8W~1.DOC")) returned 1 [0181.637] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b2300c0, ftCreationTime.dwHighDateTime=0x1d8b58a, ftLastAccessTime.dwLowDateTime=0x2cbcf370, ftLastAccessTime.dwHighDateTime=0x1d8bd7a, ftLastWriteTime.dwLowDateTime=0x2cbcf370, ftLastWriteTime.dwHighDateTime=0x1d8bd7a, nFileSizeHigh=0x0, nFileSizeLow=0xf700, dwReserved0=0x0, dwReserved1=0x0, cFileName="gL-dJ 92wqVX.doc", cAlternateFileName="GL-DJ9~1.DOC")) returned 1 [0181.637] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f2bf40, ftCreationTime.dwHighDateTime=0x1d8b2b7, ftLastAccessTime.dwLowDateTime=0xdb84d650, ftLastAccessTime.dwHighDateTime=0x1d8bc6e, ftLastWriteTime.dwLowDateTime=0xdb84d650, ftLastWriteTime.dwHighDateTime=0x1d8bc6e, nFileSizeHigh=0x0, nFileSizeLow=0x10557, dwReserved0=0x0, dwReserved1=0x0, cFileName="J27 Bdkxk-BB.odt", cAlternateFileName="J27BDK~1.ODT")) returned 1 [0181.637] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fc87880, ftCreationTime.dwHighDateTime=0x1d8bd48, ftLastAccessTime.dwLowDateTime=0x2df80ef0, ftLastAccessTime.dwHighDateTime=0x1d8bf50, ftLastWriteTime.dwLowDateTime=0x2df80ef0, ftLastWriteTime.dwHighDateTime=0x1d8bf50, nFileSizeHigh=0x0, nFileSizeLow=0xec27, dwReserved0=0x0, dwReserved1=0x0, cFileName="JbsnSQgtqNF4.xls", cAlternateFileName="JBSNSQ~1.XLS")) returned 1 [0181.638] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda657a80, ftCreationTime.dwHighDateTime=0x1d8a10d, ftLastAccessTime.dwLowDateTime=0xe31766e0, ftLastAccessTime.dwHighDateTime=0x1d8a381, ftLastWriteTime.dwLowDateTime=0xe31766e0, ftLastWriteTime.dwHighDateTime=0x1d8a381, nFileSizeHigh=0x0, nFileSizeLow=0x9da7, dwReserved0=0x0, dwReserved1=0x0, cFileName="jxmdpfmkp6YGZgXo.docx", cAlternateFileName="JXMDPF~1.DOC")) returned 1 [0181.638] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad655e70, ftCreationTime.dwHighDateTime=0x1d8b7cd, ftLastAccessTime.dwLowDateTime=0x441d94c0, ftLastAccessTime.dwHighDateTime=0x1d8c022, ftLastWriteTime.dwLowDateTime=0x441d94c0, ftLastWriteTime.dwHighDateTime=0x1d8c022, nFileSizeHigh=0x0, nFileSizeLow=0x163cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="kuGxj9cn5.ots", cAlternateFileName="KUGXJ9~1.OTS")) returned 1 [0181.638] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda31e5e0, ftCreationTime.dwHighDateTime=0x1d84a72, ftLastAccessTime.dwLowDateTime=0xe77acf00, ftLastAccessTime.dwHighDateTime=0x1d88a7d, ftLastWriteTime.dwLowDateTime=0xe77acf00, ftLastWriteTime.dwHighDateTime=0x1d88a7d, nFileSizeHigh=0x0, nFileSizeLow=0xebe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="l0Ly1dOzG9b.pptx", cAlternateFileName="L0LY1D~1.PPT")) returned 1 [0181.638] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1698ecb0, ftCreationTime.dwHighDateTime=0x1d8845f, ftLastAccessTime.dwLowDateTime=0x7de8f220, ftLastAccessTime.dwHighDateTime=0x1d88abd, ftLastWriteTime.dwLowDateTime=0x7de8f220, ftLastWriteTime.dwHighDateTime=0x1d88abd, nFileSizeHigh=0x0, nFileSizeLow=0x18442, dwReserved0=0x0, dwReserved1=0x0, cFileName="LlNux.docx", cAlternateFileName="LLNUX~1.DOC")) returned 1 [0181.638] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc6be40, ftCreationTime.dwHighDateTime=0x1d83898, ftLastAccessTime.dwLowDateTime=0xb9014e10, ftLastAccessTime.dwHighDateTime=0x1d87998, ftLastWriteTime.dwLowDateTime=0xb9014e10, ftLastWriteTime.dwHighDateTime=0x1d87998, nFileSizeHigh=0x0, nFileSizeLow=0x46b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="M3k6HPkCjln.docx", cAlternateFileName="M3K6HP~1.DOC")) returned 1 [0181.638] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0181.639] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0181.639] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0181.639] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0181.639] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d246f60, ftCreationTime.dwHighDateTime=0x1d8b733, ftLastAccessTime.dwLowDateTime=0x2856b530, ftLastAccessTime.dwHighDateTime=0x1d8ba2f, ftLastWriteTime.dwLowDateTime=0x2856b530, ftLastWriteTime.dwHighDateTime=0x1d8ba2f, nFileSizeHigh=0x0, nFileSizeLow=0x129e2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ptxpBGQ.pdf", cAlternateFileName="")) returned 1 [0181.639] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24a71420, ftCreationTime.dwHighDateTime=0x1d88b9f, ftLastAccessTime.dwLowDateTime=0xd2984010, ftLastAccessTime.dwHighDateTime=0x1d8a821, ftLastWriteTime.dwLowDateTime=0xd2984010, ftLastWriteTime.dwHighDateTime=0x1d8a821, nFileSizeHigh=0x0, nFileSizeLow=0x184cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="R10S_E409.xlsx", cAlternateFileName="R10S_E~1.XLS")) returned 1 [0181.639] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d57e650, ftCreationTime.dwHighDateTime=0x1d8b5f8, ftLastAccessTime.dwLowDateTime=0x41a82910, ftLastAccessTime.dwHighDateTime=0x1d8be8f, ftLastWriteTime.dwLowDateTime=0x41a82910, ftLastWriteTime.dwHighDateTime=0x1d8be8f, nFileSizeHigh=0x0, nFileSizeLow=0x16910, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rdm FvCqzjr4BKW8.ppt", cAlternateFileName="RDMFVC~1.PPT")) returned 1 [0181.639] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe13fb850, ftCreationTime.dwHighDateTime=0x1d8c0db, ftLastAccessTime.dwLowDateTime=0x5ee50380, ftLastAccessTime.dwHighDateTime=0x1d8c124, ftLastWriteTime.dwLowDateTime=0x5ee50380, ftLastWriteTime.dwHighDateTime=0x1d8c124, nFileSizeHigh=0x0, nFileSizeLow=0x507e, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-C55.odt", cAlternateFileName="")) returned 1 [0181.640] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d79c60, ftCreationTime.dwHighDateTime=0x1d88b85, ftLastAccessTime.dwLowDateTime=0x63093ea0, ftLastAccessTime.dwHighDateTime=0x1d8baca, ftLastWriteTime.dwLowDateTime=0x63093ea0, ftLastWriteTime.dwHighDateTime=0x1d8baca, nFileSizeHigh=0x0, nFileSizeLow=0x127e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="sAi7.pptx", cAlternateFileName="SAI7~1.PPT")) returned 1 [0181.640] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b929440, ftCreationTime.dwHighDateTime=0x1d8ba0b, ftLastAccessTime.dwLowDateTime=0x66b69e00, ftLastAccessTime.dwHighDateTime=0x1d8bc71, ftLastWriteTime.dwLowDateTime=0x66b69e00, ftLastWriteTime.dwHighDateTime=0x1d8bc71, nFileSizeHigh=0x0, nFileSizeLow=0x5936, dwReserved0=0x0, dwReserved1=0x0, cFileName="SnWjYP8 jUC.ppt", cAlternateFileName="SNWJYP~1.PPT")) returned 1 [0181.640] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed8a4eb0, ftCreationTime.dwHighDateTime=0x1d8aa8b, ftLastAccessTime.dwLowDateTime=0x78385190, ftLastAccessTime.dwHighDateTime=0x1d8b62d, ftLastWriteTime.dwLowDateTime=0x78385190, ftLastWriteTime.dwHighDateTime=0x1d8b62d, nFileSizeHigh=0x0, nFileSizeLow=0x1608f, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2kWqhx.xlsx", cAlternateFileName="T2KWQH~1.XLS")) returned 1 [0181.640] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tH7ZiLMX-lNDz2T4flA", cAlternateFileName="TH7ZIL~1")) returned 1 [0181.640] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9f325e0, ftCreationTime.dwHighDateTime=0x1d8b4e5, ftLastAccessTime.dwLowDateTime=0x96ff5090, ftLastAccessTime.dwHighDateTime=0x1d8be77, ftLastWriteTime.dwLowDateTime=0x96ff5090, ftLastWriteTime.dwHighDateTime=0x1d8be77, nFileSizeHigh=0x0, nFileSizeLow=0x6c8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="UxxM9vzrN1plGVva5.ods", cAlternateFileName="UXXM9V~1.ODS")) returned 1 [0181.640] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1257dc0, ftCreationTime.dwHighDateTime=0x1d8aadb, ftLastAccessTime.dwLowDateTime=0xcad8c0e0, ftLastAccessTime.dwHighDateTime=0x1d8b3cd, ftLastWriteTime.dwLowDateTime=0xcad8c0e0, ftLastWriteTime.dwHighDateTime=0x1d8b3cd, nFileSizeHigh=0x0, nFileSizeLow=0xab54, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSFebGAZfWCvODJJqF.xlsx", cAlternateFileName="VSFEBG~1.XLS")) returned 1 [0181.640] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3cc2a0, ftCreationTime.dwHighDateTime=0x1d8ad0a, ftLastAccessTime.dwLowDateTime=0x75320560, ftLastAccessTime.dwHighDateTime=0x1d8b7ac, ftLastWriteTime.dwLowDateTime=0x75320560, ftLastWriteTime.dwHighDateTime=0x1d8b7ac, nFileSizeHigh=0x0, nFileSizeLow=0x16729, dwReserved0=0x0, dwReserved1=0x0, cFileName="X2bCTFNs35VghcjI.docx", cAlternateFileName="X2BCTF~1.DOC")) returned 1 [0181.641] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x327a6aa0, ftCreationTime.dwHighDateTime=0x1d8af69, ftLastAccessTime.dwLowDateTime=0x47383be0, ftLastAccessTime.dwHighDateTime=0x1d8b656, ftLastWriteTime.dwLowDateTime=0x47383be0, ftLastWriteTime.dwHighDateTime=0x1d8b656, nFileSizeHigh=0x0, nFileSizeLow=0xd19b, dwReserved0=0x0, dwReserved1=0x0, cFileName="xYJkClxxh YE11VkYAFc.pptx", cAlternateFileName="XYJKCL~1.PPT")) returned 1 [0181.641] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf401740, ftCreationTime.dwHighDateTime=0x1d8b8cb, ftLastAccessTime.dwLowDateTime=0x3379b560, ftLastAccessTime.dwHighDateTime=0x1d8be13, ftLastWriteTime.dwLowDateTime=0x3379b560, ftLastWriteTime.dwHighDateTime=0x1d8be13, nFileSizeHigh=0x0, nFileSizeLow=0x2f15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z4hDmRU.rtf", cAlternateFileName="")) returned 1 [0181.641] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc18b1d10, ftCreationTime.dwHighDateTime=0x1d86794, ftLastAccessTime.dwLowDateTime=0xeabdc170, ftLastAccessTime.dwHighDateTime=0x1d86a72, ftLastWriteTime.dwLowDateTime=0xeabdc170, ftLastWriteTime.dwHighDateTime=0x1d86a72, nFileSizeHigh=0x0, nFileSizeLow=0x12f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="zuwnbRBCFb l.docx", cAlternateFileName="ZUWNBR~1.DOC")) returned 1 [0181.641] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709ad260, ftCreationTime.dwHighDateTime=0x1d8b79e, ftLastAccessTime.dwLowDateTime=0x4d1307d0, ftLastAccessTime.dwHighDateTime=0x1d8be7a, ftLastWriteTime.dwLowDateTime=0x4d1307d0, ftLastWriteTime.dwHighDateTime=0x1d8be7a, nFileSizeHigh=0x0, nFileSizeLow=0x98fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="_-zO_pPR6V-z.csv", cAlternateFileName="_-ZO_P~1.CSV")) returned 1 [0181.641] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6e5150, ftCreationTime.dwHighDateTime=0x1d8bd40, ftLastAccessTime.dwLowDateTime=0x2e00a1c0, ftLastAccessTime.dwHighDateTime=0x1d8bda0, ftLastWriteTime.dwLowDateTime=0x2e00a1c0, ftLastWriteTime.dwHighDateTime=0x1d8bda0, nFileSizeHigh=0x0, nFileSizeLow=0x2ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_nGPp71.ots", cAlternateFileName="")) returned 1 [0181.642] FindNextFileW (in: hFindFile=0x7aabf8, lpFindFileData=0x4d9f55c | out: lpFindFileData=0x4d9f55c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0181.642] FindClose (in: hFindFile=0x7aabf8 | out: hFindFile=0x7aabf8) returned 1 [0181.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7e4) returned 1 [0181.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7f0) returned 1 [0181.642] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\-Eqxdl6Kkdh1bOaf.pptx", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\-Eqxdl6Kkdh1bOaf.pptx", lpFilePart=0x0) returned 0x35 [0181.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\-Eqxdl6Kkdh1bOaf.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\-eqxdl6kkdh1boaf.pptx"), fInfoLevelId=0x0, lpFileInformation=0x22eba80 | out: lpFileInformation=0x22eba80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8b72010, ftCreationTime.dwHighDateTime=0x1d85a67, ftLastAccessTime.dwLowDateTime=0xc647e150, ftLastAccessTime.dwHighDateTime=0x1d88b00, ftLastWriteTime.dwLowDateTime=0xc647e150, ftLastWriteTime.dwHighDateTime=0x1d88b00, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3)) returned 1 [0181.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.643] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\1Z5Kv7GS76lwA.pps", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\1Z5Kv7GS76lwA.pps", lpFilePart=0x0) returned 0x31 [0181.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\1Z5Kv7GS76lwA.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\1z5kv7gs76lwa.pps"), fInfoLevelId=0x0, lpFileInformation=0x22ebba0 | out: lpFileInformation=0x22ebba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x353f5760, ftCreationTime.dwHighDateTime=0x1d8b706, ftLastAccessTime.dwLowDateTime=0xd2af1040, ftLastAccessTime.dwHighDateTime=0x1d8bc55, ftLastWriteTime.dwLowDateTime=0xd2af1040, ftLastWriteTime.dwHighDateTime=0x1d8bc55, nFileSizeHigh=0x0, nFileSizeLow=0x14ce8)) returned 1 [0181.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.644] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\3DSBsa_0s.ods", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\3DSBsa_0s.ods", lpFilePart=0x0) returned 0x2d [0181.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\3DSBsa_0s.ods" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\3dsbsa_0s.ods"), fInfoLevelId=0x0, lpFileInformation=0x22ebc84 | out: lpFileInformation=0x22ebc84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ce2b4d0, ftCreationTime.dwHighDateTime=0x1d8b71a, ftLastAccessTime.dwLowDateTime=0xbaac5aa0, ftLastAccessTime.dwHighDateTime=0x1d8c094, ftLastWriteTime.dwLowDateTime=0xbaac5aa0, ftLastWriteTime.dwHighDateTime=0x1d8c094, nFileSizeHigh=0x0, nFileSizeLow=0xf74b)) returned 1 [0181.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.644] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\3oOk7eq0Br.docx", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\3oOk7eq0Br.docx", lpFilePart=0x0) returned 0x2f [0181.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\3oOk7eq0Br.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\3ook7eq0br.docx"), fInfoLevelId=0x0, lpFileInformation=0x22ebd58 | out: lpFileInformation=0x22ebd58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e2d3c80, ftCreationTime.dwHighDateTime=0x1d8bc53, ftLastAccessTime.dwLowDateTime=0xc7a13a50, ftLastAccessTime.dwHighDateTime=0x1d8c0b7, ftLastWriteTime.dwLowDateTime=0xc7a13a50, ftLastWriteTime.dwHighDateTime=0x1d8c0b7, nFileSizeHigh=0x0, nFileSizeLow=0xce57)) returned 1 [0181.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.645] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\4HGl-VGgKrOM2.pdf", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\4HGl-VGgKrOM2.pdf", lpFilePart=0x0) returned 0x31 [0181.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\4HGl-VGgKrOM2.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\4hgl-vggkrom2.pdf"), fInfoLevelId=0x0, lpFileInformation=0x22ebe34 | out: lpFileInformation=0x22ebe34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf9eaa0, ftCreationTime.dwHighDateTime=0x1d8c0af, ftLastAccessTime.dwLowDateTime=0x586d40f0, ftLastAccessTime.dwHighDateTime=0x1d8c127, ftLastWriteTime.dwLowDateTime=0x586d40f0, ftLastWriteTime.dwHighDateTime=0x1d8c127, nFileSizeHigh=0x0, nFileSizeLow=0x5b7c)) returned 1 [0181.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.646] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\4_F6bcRTeu1.pptx", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\4_F6bcRTeu1.pptx", lpFilePart=0x0) returned 0x30 [0181.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\4_F6bcRTeu1.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\4_f6bcrteu1.pptx"), fInfoLevelId=0x0, lpFileInformation=0x22ebf18 | out: lpFileInformation=0x22ebf18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6e796b0, ftCreationTime.dwHighDateTime=0x1d8ba68, ftLastAccessTime.dwLowDateTime=0x6c472770, ftLastAccessTime.dwHighDateTime=0x1d8bd77, ftLastWriteTime.dwLowDateTime=0x6c472770, ftLastWriteTime.dwHighDateTime=0x1d8bd77, nFileSizeHigh=0x0, nFileSizeLow=0x16f18)) returned 1 [0181.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.646] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\5b6aLak.odp", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\5b6aLak.odp", lpFilePart=0x0) returned 0x2b [0181.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\5b6aLak.odp" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\5b6alak.odp"), fInfoLevelId=0x0, lpFileInformation=0x22ebffc | out: lpFileInformation=0x22ebffc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd175ca0, ftCreationTime.dwHighDateTime=0x1d8be49, ftLastAccessTime.dwLowDateTime=0x53c2e6d0, ftLastAccessTime.dwHighDateTime=0x1d8be76, ftLastWriteTime.dwLowDateTime=0x53c2e6d0, ftLastWriteTime.dwHighDateTime=0x1d8be76, nFileSizeHigh=0x0, nFileSizeLow=0x17380)) returned 1 [0181.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.646] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\9hWT7Qmr0PrXZJ XbtE.pptx", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\9hWT7Qmr0PrXZJ XbtE.pptx", lpFilePart=0x0) returned 0x38 [0181.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\9hWT7Qmr0PrXZJ XbtE.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\9hwt7qmr0prxzj xbte.pptx"), fInfoLevelId=0x0, lpFileInformation=0x22ec0c8 | out: lpFileInformation=0x22ec0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cd30f50, ftCreationTime.dwHighDateTime=0x1d8bff2, ftLastAccessTime.dwLowDateTime=0x10680680, ftLastAccessTime.dwHighDateTime=0x1d8c110, ftLastWriteTime.dwLowDateTime=0x10680680, ftLastWriteTime.dwHighDateTime=0x1d8c110, nFileSizeHigh=0x0, nFileSizeLow=0x15d9c)) returned 1 [0181.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.647] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2b [0181.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22ec1cc | out: lpFileInformation=0x22ec1cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43649a85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43649a85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4372e947, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0181.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.729] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x4d9f2e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x8b [0181.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f788) returned 1 [0181.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents"), fInfoLevelId=0x0, lpFileInformation=0x4d9f804 | out: lpFileInformation=0x4d9f804*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f784) returned 1 [0181.729] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x8b [0181.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f718) returned 1 [0181.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents"), fInfoLevelId=0x0, lpFileInformation=0x4d9f794 | out: lpFileInformation=0x4d9f794*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f714) returned 1 [0181.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f718) returned 1 [0181.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents"), fInfoLevelId=0x0, lpFileInformation=0x4d9f794 | out: lpFileInformation=0x4d9f794*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f714) returned 1 [0181.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f718) returned 1 [0181.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx"), fInfoLevelId=0x0, lpFileInformation=0x4d9f794 | out: lpFileInformation=0x4d9f794*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23ad639, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xf23fa1ba, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xf23fa1ba, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0181.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f714) returned 1 [0181.729] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents"), lpSecurityAttributes=0x0) returned 1 [0181.730] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4d9f2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2b [0181.730] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4d9f2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x97 [0181.730] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents\\desktop.ini"), bFailIfExists=0) returned 1 [0181.733] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\E45Yv1XvuulS8zUq.xlsx", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\E45Yv1XvuulS8zUq.xlsx", lpFilePart=0x0) returned 0x35 [0181.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\E45Yv1XvuulS8zUq.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\e45yv1xvuuls8zuq.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x22f6294 | out: lpFileInformation=0x22f6294*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0d9d810, ftCreationTime.dwHighDateTime=0x1d835ba, ftLastAccessTime.dwLowDateTime=0x9a8fe850, ftLastAccessTime.dwHighDateTime=0x1d867ba, ftLastWriteTime.dwLowDateTime=0x9a8fe850, ftLastWriteTime.dwHighDateTime=0x1d867ba, nFileSizeHigh=0x0, nFileSizeLow=0x1889b)) returned 1 [0181.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.734] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\e71u.ots", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\e71u.ots", lpFilePart=0x0) returned 0x28 [0181.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\e71u.ots" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\e71u.ots"), fInfoLevelId=0x0, lpFileInformation=0x22f6388 | out: lpFileInformation=0x22f6388*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31f478c0, ftCreationTime.dwHighDateTime=0x1d8b18d, ftLastAccessTime.dwLowDateTime=0x32e2a240, ftLastAccessTime.dwHighDateTime=0x1d8b50f, ftLastWriteTime.dwLowDateTime=0x32e2a240, ftLastWriteTime.dwHighDateTime=0x1d8b50f, nFileSizeHigh=0x0, nFileSizeLow=0x102ec)) returned 1 [0181.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.735] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\eJH4f.xlsx", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\eJH4f.xlsx", lpFilePart=0x0) returned 0x2a [0181.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\eJH4f.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ejh4f.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x22f644c | out: lpFileInformation=0x22f644c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ed64c0, ftCreationTime.dwHighDateTime=0x1d8ae87, ftLastAccessTime.dwLowDateTime=0x2801bd40, ftLastAccessTime.dwHighDateTime=0x1d8b422, ftLastWriteTime.dwLowDateTime=0x2801bd40, ftLastWriteTime.dwHighDateTime=0x1d8b422, nFileSizeHigh=0x0, nFileSizeLow=0xe134)) returned 1 [0181.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.736] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\ev9sDmBTxbKhXxI.odt", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\ev9sDmBTxbKhXxI.odt", lpFilePart=0x0) returned 0x33 [0181.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\ev9sDmBTxbKhXxI.odt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ev9sdmbtxbkhxxi.odt"), fInfoLevelId=0x0, lpFileInformation=0x22f6518 | out: lpFileInformation=0x22f6518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dbc440, ftCreationTime.dwHighDateTime=0x1d8b653, ftLastAccessTime.dwLowDateTime=0x9aeadce0, ftLastAccessTime.dwHighDateTime=0x1d8b938, ftLastWriteTime.dwLowDateTime=0x9aeadce0, ftLastWriteTime.dwHighDateTime=0x1d8b938, nFileSizeHigh=0x0, nFileSizeLow=0x14c68)) returned 1 [0181.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.737] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\fShM8Wh__KF.docx", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\fShM8Wh__KF.docx", lpFilePart=0x0) returned 0x30 [0181.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\fShM8Wh__KF.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\fshm8wh__kf.docx"), fInfoLevelId=0x0, lpFileInformation=0x22f6604 | out: lpFileInformation=0x22f6604*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb978a30, ftCreationTime.dwHighDateTime=0x1d8b5ad, ftLastAccessTime.dwLowDateTime=0x27a6eed0, ftLastAccessTime.dwHighDateTime=0x1d8b75e, ftLastWriteTime.dwLowDateTime=0x27a6eed0, ftLastWriteTime.dwHighDateTime=0x1d8b75e, nFileSizeHigh=0x0, nFileSizeLow=0x16b8)) returned 1 [0181.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.738] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\gL-dJ 92wqVX.doc", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\gL-dJ 92wqVX.doc", lpFilePart=0x0) returned 0x30 [0181.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\gL-dJ 92wqVX.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\gl-dj 92wqvx.doc"), fInfoLevelId=0x0, lpFileInformation=0x22f66e8 | out: lpFileInformation=0x22f66e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b2300c0, ftCreationTime.dwHighDateTime=0x1d8b58a, ftLastAccessTime.dwLowDateTime=0x2cbcf370, ftLastAccessTime.dwHighDateTime=0x1d8bd7a, ftLastWriteTime.dwLowDateTime=0x2cbcf370, ftLastWriteTime.dwHighDateTime=0x1d8bd7a, nFileSizeHigh=0x0, nFileSizeLow=0xf700)) returned 1 [0181.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.738] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\J27 Bdkxk-BB.odt", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\J27 Bdkxk-BB.odt", lpFilePart=0x0) returned 0x30 [0181.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\J27 Bdkxk-BB.odt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\j27 bdkxk-bb.odt"), fInfoLevelId=0x0, lpFileInformation=0x22f67cc | out: lpFileInformation=0x22f67cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f2bf40, ftCreationTime.dwHighDateTime=0x1d8b2b7, ftLastAccessTime.dwLowDateTime=0xdb84d650, ftLastAccessTime.dwHighDateTime=0x1d8bc6e, ftLastWriteTime.dwLowDateTime=0xdb84d650, ftLastWriteTime.dwHighDateTime=0x1d8bc6e, nFileSizeHigh=0x0, nFileSizeLow=0x10557)) returned 1 [0181.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.738] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\JbsnSQgtqNF4.xls", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\JbsnSQgtqNF4.xls", lpFilePart=0x0) returned 0x30 [0181.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\JbsnSQgtqNF4.xls" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\jbsnsqgtqnf4.xls"), fInfoLevelId=0x0, lpFileInformation=0x22f68b0 | out: lpFileInformation=0x22f68b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fc87880, ftCreationTime.dwHighDateTime=0x1d8bd48, ftLastAccessTime.dwLowDateTime=0x2df80ef0, ftLastAccessTime.dwHighDateTime=0x1d8bf50, ftLastWriteTime.dwLowDateTime=0x2df80ef0, ftLastWriteTime.dwHighDateTime=0x1d8bf50, nFileSizeHigh=0x0, nFileSizeLow=0xec27)) returned 1 [0181.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.739] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\jxmdpfmkp6YGZgXo.docx", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\jxmdpfmkp6YGZgXo.docx", lpFilePart=0x0) returned 0x35 [0181.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\jxmdpfmkp6YGZgXo.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\jxmdpfmkp6ygzgxo.docx"), fInfoLevelId=0x0, lpFileInformation=0x22f6994 | out: lpFileInformation=0x22f6994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda657a80, ftCreationTime.dwHighDateTime=0x1d8a10d, ftLastAccessTime.dwLowDateTime=0xe31766e0, ftLastAccessTime.dwHighDateTime=0x1d8a381, ftLastWriteTime.dwLowDateTime=0xe31766e0, ftLastWriteTime.dwHighDateTime=0x1d8a381, nFileSizeHigh=0x0, nFileSizeLow=0x9da7)) returned 1 [0181.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.740] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\kuGxj9cn5.ots", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\kuGxj9cn5.ots", lpFilePart=0x0) returned 0x2d [0181.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\kuGxj9cn5.ots" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\kugxj9cn5.ots"), fInfoLevelId=0x0, lpFileInformation=0x22f6a88 | out: lpFileInformation=0x22f6a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad655e70, ftCreationTime.dwHighDateTime=0x1d8b7cd, ftLastAccessTime.dwLowDateTime=0x441d94c0, ftLastAccessTime.dwHighDateTime=0x1d8c022, ftLastWriteTime.dwLowDateTime=0x441d94c0, ftLastWriteTime.dwHighDateTime=0x1d8c022, nFileSizeHigh=0x0, nFileSizeLow=0x163cc)) returned 1 [0181.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.740] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\l0Ly1dOzG9b.pptx", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\l0Ly1dOzG9b.pptx", lpFilePart=0x0) returned 0x30 [0181.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\l0Ly1dOzG9b.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\l0ly1dozg9b.pptx"), fInfoLevelId=0x0, lpFileInformation=0x22f6b5c | out: lpFileInformation=0x22f6b5c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda31e5e0, ftCreationTime.dwHighDateTime=0x1d84a72, ftLastAccessTime.dwLowDateTime=0xe77acf00, ftLastAccessTime.dwHighDateTime=0x1d88a7d, ftLastWriteTime.dwLowDateTime=0xe77acf00, ftLastWriteTime.dwHighDateTime=0x1d88a7d, nFileSizeHigh=0x0, nFileSizeLow=0xebe1)) returned 1 [0181.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.740] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\LlNux.docx", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\LlNux.docx", lpFilePart=0x0) returned 0x2a [0181.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\LlNux.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\llnux.docx"), fInfoLevelId=0x0, lpFileInformation=0x22f6c40 | out: lpFileInformation=0x22f6c40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1698ecb0, ftCreationTime.dwHighDateTime=0x1d8845f, ftLastAccessTime.dwLowDateTime=0x7de8f220, ftLastAccessTime.dwHighDateTime=0x1d88abd, ftLastWriteTime.dwLowDateTime=0x7de8f220, ftLastWriteTime.dwHighDateTime=0x1d88abd, nFileSizeHigh=0x0, nFileSizeLow=0x18442)) returned 1 [0181.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.740] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\M3k6HPkCjln.docx", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\M3k6HPkCjln.docx", lpFilePart=0x0) returned 0x30 [0181.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\M3k6HPkCjln.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\m3k6hpkcjln.docx"), fInfoLevelId=0x0, lpFileInformation=0x22f6d0c | out: lpFileInformation=0x22f6d0c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc6be40, ftCreationTime.dwHighDateTime=0x1d83898, ftLastAccessTime.dwLowDateTime=0xb9014e10, ftLastAccessTime.dwHighDateTime=0x1d87998, ftLastWriteTime.dwLowDateTime=0xb9014e10, ftLastWriteTime.dwHighDateTime=0x1d87998, nFileSizeHigh=0x0, nFileSizeLow=0x46b4)) returned 1 [0181.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.741] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\ptxpBGQ.pdf", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\ptxpBGQ.pdf", lpFilePart=0x0) returned 0x2b [0181.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\ptxpBGQ.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ptxpbgq.pdf"), fInfoLevelId=0x0, lpFileInformation=0x22f6df0 | out: lpFileInformation=0x22f6df0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d246f60, ftCreationTime.dwHighDateTime=0x1d8b733, ftLastAccessTime.dwLowDateTime=0x2856b530, ftLastAccessTime.dwHighDateTime=0x1d8ba2f, ftLastWriteTime.dwLowDateTime=0x2856b530, ftLastWriteTime.dwHighDateTime=0x1d8ba2f, nFileSizeHigh=0x0, nFileSizeLow=0x129e2)) returned 1 [0181.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.741] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\R10S_E409.xlsx", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\R10S_E409.xlsx", lpFilePart=0x0) returned 0x2e [0181.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\R10S_E409.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\r10s_e409.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x22f6ebc | out: lpFileInformation=0x22f6ebc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24a71420, ftCreationTime.dwHighDateTime=0x1d88b9f, ftLastAccessTime.dwLowDateTime=0xd2984010, ftLastAccessTime.dwHighDateTime=0x1d8a821, ftLastWriteTime.dwLowDateTime=0xd2984010, ftLastWriteTime.dwHighDateTime=0x1d8a821, nFileSizeHigh=0x0, nFileSizeLow=0x184cd)) returned 1 [0181.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.741] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Rdm FvCqzjr4BKW8.ppt", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Rdm FvCqzjr4BKW8.ppt", lpFilePart=0x0) returned 0x34 [0181.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Rdm FvCqzjr4BKW8.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\rdm fvcqzjr4bkw8.ppt"), fInfoLevelId=0x0, lpFileInformation=0x22f6f98 | out: lpFileInformation=0x22f6f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d57e650, ftCreationTime.dwHighDateTime=0x1d8b5f8, ftLastAccessTime.dwLowDateTime=0x41a82910, ftLastAccessTime.dwHighDateTime=0x1d8be8f, ftLastWriteTime.dwLowDateTime=0x41a82910, ftLastWriteTime.dwHighDateTime=0x1d8be8f, nFileSizeHigh=0x0, nFileSizeLow=0x16910)) returned 1 [0181.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.742] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\S-C55.odt", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\S-C55.odt", lpFilePart=0x0) returned 0x29 [0181.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\S-C55.odt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\s-c55.odt"), fInfoLevelId=0x0, lpFileInformation=0x22f708c | out: lpFileInformation=0x22f708c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe13fb850, ftCreationTime.dwHighDateTime=0x1d8c0db, ftLastAccessTime.dwLowDateTime=0x5ee50380, ftLastAccessTime.dwHighDateTime=0x1d8c124, ftLastWriteTime.dwLowDateTime=0x5ee50380, ftLastWriteTime.dwHighDateTime=0x1d8c124, nFileSizeHigh=0x0, nFileSizeLow=0x507e)) returned 1 [0181.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.742] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\sAi7.pptx", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\sAi7.pptx", lpFilePart=0x0) returned 0x29 [0181.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\sAi7.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\sai7.pptx"), fInfoLevelId=0x0, lpFileInformation=0x22f7150 | out: lpFileInformation=0x22f7150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d79c60, ftCreationTime.dwHighDateTime=0x1d88b85, ftLastAccessTime.dwLowDateTime=0x63093ea0, ftLastAccessTime.dwHighDateTime=0x1d8baca, ftLastWriteTime.dwLowDateTime=0x63093ea0, ftLastWriteTime.dwHighDateTime=0x1d8baca, nFileSizeHigh=0x0, nFileSizeLow=0x127e8)) returned 1 [0181.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.743] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\SnWjYP8 jUC.ppt", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\SnWjYP8 jUC.ppt", lpFilePart=0x0) returned 0x2f [0181.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\SnWjYP8 jUC.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\snwjyp8 juc.ppt"), fInfoLevelId=0x0, lpFileInformation=0x22f7214 | out: lpFileInformation=0x22f7214*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b929440, ftCreationTime.dwHighDateTime=0x1d8ba0b, ftLastAccessTime.dwLowDateTime=0x66b69e00, ftLastAccessTime.dwHighDateTime=0x1d8bc71, ftLastWriteTime.dwLowDateTime=0x66b69e00, ftLastWriteTime.dwHighDateTime=0x1d8bc71, nFileSizeHigh=0x0, nFileSizeLow=0x5936)) returned 1 [0181.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.743] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\t2kWqhx.xlsx", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\t2kWqhx.xlsx", lpFilePart=0x0) returned 0x2c [0181.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\t2kWqhx.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\t2kwqhx.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x22f72f0 | out: lpFileInformation=0x22f72f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed8a4eb0, ftCreationTime.dwHighDateTime=0x1d8aa8b, ftLastAccessTime.dwLowDateTime=0x78385190, ftLastAccessTime.dwHighDateTime=0x1d8b62d, ftLastWriteTime.dwLowDateTime=0x78385190, ftLastWriteTime.dwHighDateTime=0x1d8b62d, nFileSizeHigh=0x0, nFileSizeLow=0x1608f)) returned 1 [0181.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.743] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\UxxM9vzrN1plGVva5.ods", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\UxxM9vzrN1plGVva5.ods", lpFilePart=0x0) returned 0x35 [0181.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\UxxM9vzrN1plGVva5.ods" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\uxxm9vzrn1plgvva5.ods"), fInfoLevelId=0x0, lpFileInformation=0x22f73c4 | out: lpFileInformation=0x22f73c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9f325e0, ftCreationTime.dwHighDateTime=0x1d8b4e5, ftLastAccessTime.dwLowDateTime=0x96ff5090, ftLastAccessTime.dwHighDateTime=0x1d8be77, ftLastWriteTime.dwLowDateTime=0x96ff5090, ftLastWriteTime.dwHighDateTime=0x1d8be77, nFileSizeHigh=0x0, nFileSizeLow=0x6c8e)) returned 1 [0181.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.744] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\VSFebGAZfWCvODJJqF.xlsx", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\VSFebGAZfWCvODJJqF.xlsx", lpFilePart=0x0) returned 0x37 [0181.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\VSFebGAZfWCvODJJqF.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\vsfebgazfwcvodjjqf.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x22f74b8 | out: lpFileInformation=0x22f74b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1257dc0, ftCreationTime.dwHighDateTime=0x1d8aadb, ftLastAccessTime.dwLowDateTime=0xcad8c0e0, ftLastAccessTime.dwHighDateTime=0x1d8b3cd, ftLastWriteTime.dwLowDateTime=0xcad8c0e0, ftLastWriteTime.dwHighDateTime=0x1d8b3cd, nFileSizeHigh=0x0, nFileSizeLow=0xab54)) returned 1 [0181.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.744] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\X2bCTFNs35VghcjI.docx", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\X2bCTFNs35VghcjI.docx", lpFilePart=0x0) returned 0x35 [0181.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\X2bCTFNs35VghcjI.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\x2bctfns35vghcji.docx"), fInfoLevelId=0x0, lpFileInformation=0x22f75b4 | out: lpFileInformation=0x22f75b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3cc2a0, ftCreationTime.dwHighDateTime=0x1d8ad0a, ftLastAccessTime.dwLowDateTime=0x75320560, ftLastAccessTime.dwHighDateTime=0x1d8b7ac, ftLastWriteTime.dwLowDateTime=0x75320560, ftLastWriteTime.dwHighDateTime=0x1d8b7ac, nFileSizeHigh=0x0, nFileSizeLow=0x16729)) returned 1 [0181.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.744] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\xYJkClxxh YE11VkYAFc.pptx", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\xYJkClxxh YE11VkYAFc.pptx", lpFilePart=0x0) returned 0x39 [0181.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\xYJkClxxh YE11VkYAFc.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xyjkclxxh ye11vkyafc.pptx"), fInfoLevelId=0x0, lpFileInformation=0x22f76a8 | out: lpFileInformation=0x22f76a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x327a6aa0, ftCreationTime.dwHighDateTime=0x1d8af69, ftLastAccessTime.dwLowDateTime=0x47383be0, ftLastAccessTime.dwHighDateTime=0x1d8b656, ftLastWriteTime.dwLowDateTime=0x47383be0, ftLastWriteTime.dwHighDateTime=0x1d8b656, nFileSizeHigh=0x0, nFileSizeLow=0xd19b)) returned 1 [0181.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.750] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Z4hDmRU.rtf", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Z4hDmRU.rtf", lpFilePart=0x0) returned 0x2b [0181.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.750] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Z4hDmRU.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\z4hdmru.rtf"), fInfoLevelId=0x0, lpFileInformation=0x22f77ac | out: lpFileInformation=0x22f77ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf401740, ftCreationTime.dwHighDateTime=0x1d8b8cb, ftLastAccessTime.dwLowDateTime=0x3379b560, ftLastAccessTime.dwHighDateTime=0x1d8be13, ftLastWriteTime.dwLowDateTime=0x3379b560, ftLastWriteTime.dwHighDateTime=0x1d8be13, nFileSizeHigh=0x0, nFileSizeLow=0x2f15)) returned 1 [0181.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.750] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\zuwnbRBCFb l.docx", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\zuwnbRBCFb l.docx", lpFilePart=0x0) returned 0x31 [0181.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\zuwnbRBCFb l.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\zuwnbrbcfb l.docx"), fInfoLevelId=0x0, lpFileInformation=0x22f7878 | out: lpFileInformation=0x22f7878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc18b1d10, ftCreationTime.dwHighDateTime=0x1d86794, ftLastAccessTime.dwLowDateTime=0xeabdc170, ftLastAccessTime.dwHighDateTime=0x1d86a72, ftLastWriteTime.dwLowDateTime=0xeabdc170, ftLastWriteTime.dwHighDateTime=0x1d86a72, nFileSizeHigh=0x0, nFileSizeLow=0x12f2)) returned 1 [0181.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.758] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents", nBufferLength=0x105, lpBuffer=0x4d9f2e4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents", lpFilePart=0x0) returned 0x8b [0181.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f788) returned 1 [0181.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents"), fInfoLevelId=0x0, lpFileInformation=0x4d9f804 | out: lpFileInformation=0x4d9f804*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf246c127, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xf246c127, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xf246c127, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0181.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f784) returned 1 [0181.759] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\zuwnbRBCFb l.docx", nBufferLength=0x105, lpBuffer=0x4d9f2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\zuwnbRBCFb l.docx", lpFilePart=0x0) returned 0x31 [0181.759] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\zuwnbRBCFb l.docx", nBufferLength=0x105, lpBuffer=0x4d9f2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\zuwnbRBCFb l.docx", lpFilePart=0x0) returned 0x9d [0181.759] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\zuwnbRBCFb l.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\zuwnbrbcfb l.docx"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\zuwnbRBCFb l.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents\\zuwnbrbcfb l.docx"), bFailIfExists=0) returned 1 [0181.763] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_-zO_pPR6V-z.csv", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\_-zO_pPR6V-z.csv", lpFilePart=0x0) returned 0x30 [0181.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_-zO_pPR6V-z.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_-zo_ppr6v-z.csv"), fInfoLevelId=0x0, lpFileInformation=0x22f82d8 | out: lpFileInformation=0x22f82d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709ad260, ftCreationTime.dwHighDateTime=0x1d8b79e, ftLastAccessTime.dwLowDateTime=0x4d1307d0, ftLastAccessTime.dwHighDateTime=0x1d8be7a, ftLastWriteTime.dwLowDateTime=0x4d1307d0, ftLastWriteTime.dwHighDateTime=0x1d8be7a, nFileSizeHigh=0x0, nFileSizeLow=0x98fb)) returned 1 [0181.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.763] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_nGPp71.ots", nBufferLength=0x105, lpBuffer=0x4d9f2e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\_nGPp71.ots", lpFilePart=0x0) returned 0x2b [0181.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7dc) returned 1 [0181.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_nGPp71.ots" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_ngpp71.ots"), fInfoLevelId=0x0, lpFileInformation=0x22f83bc | out: lpFileInformation=0x22f83bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6e5150, ftCreationTime.dwHighDateTime=0x1d8bd40, ftLastAccessTime.dwLowDateTime=0x2e00a1c0, ftLastAccessTime.dwHighDateTime=0x1d8bda0, ftLastWriteTime.dwLowDateTime=0x2e00a1c0, ftLastWriteTime.dwHighDateTime=0x1d8bda0, nFileSizeHigh=0x0, nFileSizeLow=0x2ae0)) returned 1 [0181.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7d8) returned 1 [0181.764] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x4d9f2d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music", lpFilePart=0x0) returned 0x28 [0181.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f778) returned 1 [0181.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my music"), fInfoLevelId=0x0, lpFileInformation=0x4d9f7f4 | out: lpFileInformation=0x4d9f7f4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0181.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f774) returned 1 [0181.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7f8) returned 1 [0181.764] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music", lpFilePart=0x0) returned 0x28 [0181.764] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my music\\*"), lpFindFileData=0x4d9f520 | out: lpFindFileData=0x4d9f520*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0181.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7bc) returned 1 [0181.775] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x4d9f2d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2b [0181.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f778) returned 1 [0181.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x4d9f7f4 | out: lpFileInformation=0x4d9f7f4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0181.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f774) returned 1 [0181.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7f8) returned 1 [0181.775] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2b [0181.775] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my pictures\\*"), lpFindFileData=0x4d9f520 | out: lpFindFileData=0x4d9f520*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0181.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7bc) returned 1 [0181.777] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x4d9f2d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos", lpFilePart=0x0) returned 0x29 [0181.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f778) returned 1 [0181.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my videos"), fInfoLevelId=0x0, lpFileInformation=0x4d9f7f4 | out: lpFileInformation=0x4d9f7f4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0181.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f774) returned 1 [0181.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7f8) returned 1 [0181.777] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos", lpFilePart=0x0) returned 0x29 [0181.777] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my videos\\*"), lpFindFileData=0x4d9f520 | out: lpFindFileData=0x4d9f520*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0181.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7bc) returned 1 [0181.779] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x4d9f2d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2d [0181.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f778) returned 1 [0181.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x4d9f7f4 | out: lpFileInformation=0x4d9f7f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x886727b4, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0181.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f774) returned 1 [0181.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7f8) returned 1 [0181.884] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2d [0181.884] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\*"), lpFindFileData=0x4d9f520 | out: lpFindFileData=0x4d9f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aac38 [0181.885] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.885] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6397affd, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6397affd, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8866b39a, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="achoo@gdllo.de.pst", cAlternateFileName="ACHOO@~1.PST")) returned 1 [0181.885] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6397affd, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6397affd, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8866b39a, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="achoo@gdllo.de.pst", cAlternateFileName="ACHOO@~1.PST")) returned 0 [0181.885] FindClose (in: hFindFile=0x7aac38 | out: hFindFile=0x7aac38) returned 1 [0181.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7b4) returned 1 [0181.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7c0) returned 1 [0181.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7f8) returned 1 [0181.885] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2d [0181.885] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\*"), lpFindFileData=0x4d9f520 | out: lpFindFileData=0x4d9f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aac38 [0181.886] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.886] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6397affd, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6397affd, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8866b39a, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="achoo@gdllo.de.pst", cAlternateFileName="ACHOO@~1.PST")) returned 1 [0181.886] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0181.886] FindClose (in: hFindFile=0x7aac38 | out: hFindFile=0x7aac38) returned 1 [0181.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7b4) returned 1 [0181.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7c0) returned 1 [0181.886] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\achoo@gdllo.de.pst", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\achoo@gdllo.de.pst", lpFilePart=0x0) returned 0x40 [0181.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7ac) returned 1 [0181.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\achoo@gdllo.de.pst" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\achoo@gdllo.de.pst"), fInfoLevelId=0x0, lpFileInformation=0x2307a7c | out: lpFileInformation=0x2307a7c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6397affd, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6397affd, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8866b39a, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x42400)) returned 1 [0181.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7a8) returned 1 [0181.887] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", nBufferLength=0x105, lpBuffer=0x4d9f2d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", lpFilePart=0x0) returned 0x33 [0181.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f778) returned 1 [0181.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla"), fInfoLevelId=0x0, lpFileInformation=0x4d9f7f4 | out: lpFileInformation=0x4d9f7f4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0181.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f774) returned 1 [0181.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7f8) returned 1 [0181.889] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", lpFilePart=0x0) returned 0x33 [0181.889] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\*"), lpFindFileData=0x4d9f520 | out: lpFindFileData=0x4d9f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aac38 [0181.891] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.891] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1589c160, ftCreationTime.dwHighDateTime=0x1d8bd5c, ftLastAccessTime.dwLowDateTime=0x45393cc0, ftLastAccessTime.dwHighDateTime=0x1d8bd97, ftLastWriteTime.dwLowDateTime=0x45393cc0, ftLastWriteTime.dwHighDateTime=0x1d8bd97, nFileSizeHigh=0x0, nFileSizeLow=0xc9dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="2hsIAD1BQHc7jnWpNx.pdf", cAlternateFileName="2HSIAD~1.PDF")) returned 1 [0181.892] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e2c1470, ftCreationTime.dwHighDateTime=0x1d8b891, ftLastAccessTime.dwLowDateTime=0x8ef4f010, ftLastAccessTime.dwHighDateTime=0x1d8c03b, ftLastWriteTime.dwLowDateTime=0x8ef4f010, ftLastWriteTime.dwHighDateTime=0x1d8c03b, nFileSizeHigh=0x0, nFileSizeLow=0xab9, dwReserved0=0x0, dwReserved1=0x0, cFileName="5-DZJSZ32WSdJ.xls", cAlternateFileName="5-DZJS~1.XLS")) returned 1 [0181.892] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bee7c0, ftCreationTime.dwHighDateTime=0x1d8b889, ftLastAccessTime.dwLowDateTime=0xce3f6db0, ftLastAccessTime.dwHighDateTime=0x1d8c011, ftLastWriteTime.dwLowDateTime=0xce3f6db0, ftLastWriteTime.dwHighDateTime=0x1d8c011, nFileSizeHigh=0x0, nFileSizeLow=0x10253, dwReserved0=0x0, dwReserved1=0x0, cFileName="a-A-qFq AF.csv", cAlternateFileName="A-A-QF~1.CSV")) returned 1 [0181.892] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d48b0, ftCreationTime.dwHighDateTime=0x1d8ba38, ftLastAccessTime.dwLowDateTime=0xaf1b71d0, ftLastAccessTime.dwHighDateTime=0x1d8bb0d, ftLastWriteTime.dwLowDateTime=0xaf1b71d0, ftLastWriteTime.dwHighDateTime=0x1d8bb0d, nFileSizeHigh=0x0, nFileSizeLow=0x1553c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bf2mHVDW3clH.ppt", cAlternateFileName="BF2MHV~1.PPT")) returned 1 [0181.892] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x814fee60, ftCreationTime.dwHighDateTime=0x1d8bf14, ftLastAccessTime.dwLowDateTime=0xabb8e610, ftLastAccessTime.dwHighDateTime=0x1d8c014, ftLastWriteTime.dwLowDateTime=0xabb8e610, ftLastWriteTime.dwHighDateTime=0x1d8c014, nFileSizeHigh=0x0, nFileSizeLow=0xc6eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3Fj0r8hONU.ppt", cAlternateFileName="C3FJ0R~1.PPT")) returned 1 [0181.892] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17178ef0, ftCreationTime.dwHighDateTime=0x1d8b0c7, ftLastAccessTime.dwLowDateTime=0xa82734f0, ftLastAccessTime.dwHighDateTime=0x1d8bc10, ftLastWriteTime.dwLowDateTime=0xa82734f0, ftLastWriteTime.dwHighDateTime=0x1d8bc10, nFileSizeHigh=0x0, nFileSizeLow=0x7692, dwReserved0=0x0, dwReserved1=0x0, cFileName="C8L6OgRoJd6.rtf", cAlternateFileName="C8L6OG~1.RTF")) returned 1 [0181.893] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca47540, ftCreationTime.dwHighDateTime=0x1d8b690, ftLastAccessTime.dwLowDateTime=0x5f1ffb50, ftLastAccessTime.dwHighDateTime=0x1d8bf50, ftLastWriteTime.dwLowDateTime=0x5f1ffb50, ftLastWriteTime.dwHighDateTime=0x1d8bf50, nFileSizeHigh=0x0, nFileSizeLow=0x168b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CfeUIGTcVlbmZqCLP.csv", cAlternateFileName="CFEUIG~1.CSV")) returned 1 [0181.893] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3daa70, ftCreationTime.dwHighDateTime=0x1d8bc44, ftLastAccessTime.dwLowDateTime=0x682cc6c0, ftLastAccessTime.dwHighDateTime=0x1d8bd83, ftLastWriteTime.dwLowDateTime=0x682cc6c0, ftLastWriteTime.dwHighDateTime=0x1d8bd83, nFileSizeHigh=0x0, nFileSizeLow=0x15d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fvw20_rgJzZv8FGp.xls", cAlternateFileName="FVW20_~1.XLS")) returned 1 [0181.893] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21ba9fd0, ftCreationTime.dwHighDateTime=0x1d8b231, ftLastAccessTime.dwLowDateTime=0x809f2bc0, ftLastAccessTime.dwHighDateTime=0x1d8bdf2, ftLastWriteTime.dwLowDateTime=0x809f2bc0, ftLastWriteTime.dwHighDateTime=0x1d8bdf2, nFileSizeHigh=0x0, nFileSizeLow=0x2846, dwReserved0=0x0, dwReserved1=0x0, cFileName="mWQOQh4ldF5U-0k.pps", cAlternateFileName="MWQOQH~1.PPS")) returned 1 [0181.893] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1838b0c0, ftCreationTime.dwHighDateTime=0x1d8bff9, ftLastAccessTime.dwLowDateTime=0x82b5eab0, ftLastAccessTime.dwHighDateTime=0x1d8c04b, ftLastWriteTime.dwLowDateTime=0x82b5eab0, ftLastWriteTime.dwHighDateTime=0x1d8c04b, nFileSizeHigh=0x0, nFileSizeLow=0x1631d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q4ZKn3tp.xls", cAlternateFileName="")) returned 1 [0181.893] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a94d90, ftCreationTime.dwHighDateTime=0x1d8be15, ftLastAccessTime.dwLowDateTime=0x540da90, ftLastAccessTime.dwHighDateTime=0x1d8be7f, ftLastWriteTime.dwLowDateTime=0x540da90, ftLastWriteTime.dwHighDateTime=0x1d8be7f, nFileSizeHigh=0x0, nFileSizeLow=0x5c75, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECojIt nyClc3HiT.doc", cAlternateFileName="RECOJI~1.DOC")) returned 1 [0181.894] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a92b070, ftCreationTime.dwHighDateTime=0x1d8bcca, ftLastAccessTime.dwLowDateTime=0xe7eab850, ftLastAccessTime.dwHighDateTime=0x1d8be45, ftLastWriteTime.dwLowDateTime=0xe7eab850, ftLastWriteTime.dwHighDateTime=0x1d8be45, nFileSizeHigh=0x0, nFileSizeLow=0x13934, dwReserved0=0x0, dwReserved1=0x0, cFileName="T90UZdn2P1f7n3-fQaKi.ods", cAlternateFileName="T90UZD~1.ODS")) returned 1 [0181.894] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da37310, ftCreationTime.dwHighDateTime=0x1d8b1f3, ftLastAccessTime.dwLowDateTime=0x76cd84d0, ftLastAccessTime.dwHighDateTime=0x1d8b239, ftLastWriteTime.dwLowDateTime=0x76cd84d0, ftLastWriteTime.dwHighDateTime=0x1d8b239, nFileSizeHigh=0x0, nFileSizeLow=0xe412, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbduRUTXa.docx", cAlternateFileName="TBDURU~1.DOC")) returned 1 [0181.894] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa94eb7c0, ftCreationTime.dwHighDateTime=0x1d8bacd, ftLastAccessTime.dwLowDateTime=0x946a1970, ftLastAccessTime.dwHighDateTime=0x1d8c069, ftLastWriteTime.dwLowDateTime=0x946a1970, ftLastWriteTime.dwHighDateTime=0x1d8c069, nFileSizeHigh=0x0, nFileSizeLow=0x181c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="UvFd-0OcgfkrbGVtLF6.xlsx", cAlternateFileName="UVFD-0~1.XLS")) returned 1 [0181.894] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359e9570, ftCreationTime.dwHighDateTime=0x1d8bd48, ftLastAccessTime.dwLowDateTime=0xefc320f0, ftLastAccessTime.dwHighDateTime=0x1d8bdc1, ftLastWriteTime.dwLowDateTime=0xefc320f0, ftLastWriteTime.dwHighDateTime=0x1d8bdc1, nFileSizeHigh=0x0, nFileSizeLow=0x9f30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VcH8lOCD8NPvxN-LPks.rtf", cAlternateFileName="VCH8LO~1.RTF")) returned 1 [0181.894] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cde8e0, ftCreationTime.dwHighDateTime=0x1d8bea9, ftLastAccessTime.dwLowDateTime=0xc0d6ff10, ftLastAccessTime.dwHighDateTime=0x1d8c0c7, ftLastWriteTime.dwLowDateTime=0xc0d6ff10, ftLastWriteTime.dwHighDateTime=0x1d8c0c7, nFileSizeHigh=0x0, nFileSizeLow=0xefe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vKgNAjCUO5.pps", cAlternateFileName="VKGNAJ~1.PPS")) returned 1 [0181.895] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc975760, ftCreationTime.dwHighDateTime=0x1d8b790, ftLastAccessTime.dwLowDateTime=0xd37a5a10, ftLastAccessTime.dwHighDateTime=0x1d8b9e5, ftLastWriteTime.dwLowDateTime=0xd37a5a10, ftLastWriteTime.dwHighDateTime=0x1d8b9e5, nFileSizeHigh=0x0, nFileSizeLow=0xf3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wJEu5X2748bM.xlsx", cAlternateFileName="WJEU5X~1.XLS")) returned 1 [0181.895] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f0e030, ftCreationTime.dwHighDateTime=0x1d8bfc4, ftLastAccessTime.dwLowDateTime=0xcba47010, ftLastAccessTime.dwHighDateTime=0x1d8c0d8, ftLastWriteTime.dwLowDateTime=0xcba47010, ftLastWriteTime.dwHighDateTime=0x1d8c0d8, nFileSizeHigh=0x0, nFileSizeLow=0x829f, dwReserved0=0x0, dwReserved1=0x0, cFileName="xb_Tn6.docx", cAlternateFileName="XB_TN6~1.DOC")) returned 1 [0181.895] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f0e030, ftCreationTime.dwHighDateTime=0x1d8bfc4, ftLastAccessTime.dwLowDateTime=0xcba47010, ftLastAccessTime.dwHighDateTime=0x1d8c0d8, ftLastWriteTime.dwLowDateTime=0xcba47010, ftLastWriteTime.dwHighDateTime=0x1d8c0d8, nFileSizeHigh=0x0, nFileSizeLow=0x829f, dwReserved0=0x0, dwReserved1=0x0, cFileName="xb_Tn6.docx", cAlternateFileName="XB_TN6~1.DOC")) returned 0 [0181.895] FindClose (in: hFindFile=0x7aac38 | out: hFindFile=0x7aac38) returned 1 [0181.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7b4) returned 1 [0181.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7c0) returned 1 [0181.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7f8) returned 1 [0181.896] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", lpFilePart=0x0) returned 0x33 [0181.896] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\*"), lpFindFileData=0x4d9f520 | out: lpFindFileData=0x4d9f520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aac38 [0181.897] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387c410, ftCreationTime.dwHighDateTime=0x1d8b467, ftLastAccessTime.dwLowDateTime=0x776f6b90, ftLastAccessTime.dwHighDateTime=0x1d8bb78, ftLastWriteTime.dwLowDateTime=0x776f6b90, ftLastWriteTime.dwHighDateTime=0x1d8bb78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.897] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1589c160, ftCreationTime.dwHighDateTime=0x1d8bd5c, ftLastAccessTime.dwLowDateTime=0x45393cc0, ftLastAccessTime.dwHighDateTime=0x1d8bd97, ftLastWriteTime.dwLowDateTime=0x45393cc0, ftLastWriteTime.dwHighDateTime=0x1d8bd97, nFileSizeHigh=0x0, nFileSizeLow=0xc9dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="2hsIAD1BQHc7jnWpNx.pdf", cAlternateFileName="2HSIAD~1.PDF")) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e2c1470, ftCreationTime.dwHighDateTime=0x1d8b891, ftLastAccessTime.dwLowDateTime=0x8ef4f010, ftLastAccessTime.dwHighDateTime=0x1d8c03b, ftLastWriteTime.dwLowDateTime=0x8ef4f010, ftLastWriteTime.dwHighDateTime=0x1d8c03b, nFileSizeHigh=0x0, nFileSizeLow=0xab9, dwReserved0=0x0, dwReserved1=0x0, cFileName="5-DZJSZ32WSdJ.xls", cAlternateFileName="5-DZJS~1.XLS")) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bee7c0, ftCreationTime.dwHighDateTime=0x1d8b889, ftLastAccessTime.dwLowDateTime=0xce3f6db0, ftLastAccessTime.dwHighDateTime=0x1d8c011, ftLastWriteTime.dwLowDateTime=0xce3f6db0, ftLastWriteTime.dwHighDateTime=0x1d8c011, nFileSizeHigh=0x0, nFileSizeLow=0x10253, dwReserved0=0x0, dwReserved1=0x0, cFileName="a-A-qFq AF.csv", cAlternateFileName="A-A-QF~1.CSV")) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d48b0, ftCreationTime.dwHighDateTime=0x1d8ba38, ftLastAccessTime.dwLowDateTime=0xaf1b71d0, ftLastAccessTime.dwHighDateTime=0x1d8bb0d, ftLastWriteTime.dwLowDateTime=0xaf1b71d0, ftLastWriteTime.dwHighDateTime=0x1d8bb0d, nFileSizeHigh=0x0, nFileSizeLow=0x1553c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bf2mHVDW3clH.ppt", cAlternateFileName="BF2MHV~1.PPT")) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x814fee60, ftCreationTime.dwHighDateTime=0x1d8bf14, ftLastAccessTime.dwLowDateTime=0xabb8e610, ftLastAccessTime.dwHighDateTime=0x1d8c014, ftLastWriteTime.dwLowDateTime=0xabb8e610, ftLastWriteTime.dwHighDateTime=0x1d8c014, nFileSizeHigh=0x0, nFileSizeLow=0xc6eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3Fj0r8hONU.ppt", cAlternateFileName="C3FJ0R~1.PPT")) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17178ef0, ftCreationTime.dwHighDateTime=0x1d8b0c7, ftLastAccessTime.dwLowDateTime=0xa82734f0, ftLastAccessTime.dwHighDateTime=0x1d8bc10, ftLastWriteTime.dwLowDateTime=0xa82734f0, ftLastWriteTime.dwHighDateTime=0x1d8bc10, nFileSizeHigh=0x0, nFileSizeLow=0x7692, dwReserved0=0x0, dwReserved1=0x0, cFileName="C8L6OgRoJd6.rtf", cAlternateFileName="C8L6OG~1.RTF")) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca47540, ftCreationTime.dwHighDateTime=0x1d8b690, ftLastAccessTime.dwLowDateTime=0x5f1ffb50, ftLastAccessTime.dwHighDateTime=0x1d8bf50, ftLastWriteTime.dwLowDateTime=0x5f1ffb50, ftLastWriteTime.dwHighDateTime=0x1d8bf50, nFileSizeHigh=0x0, nFileSizeLow=0x168b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CfeUIGTcVlbmZqCLP.csv", cAlternateFileName="CFEUIG~1.CSV")) returned 1 [0181.898] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3daa70, ftCreationTime.dwHighDateTime=0x1d8bc44, ftLastAccessTime.dwLowDateTime=0x682cc6c0, ftLastAccessTime.dwHighDateTime=0x1d8bd83, ftLastWriteTime.dwLowDateTime=0x682cc6c0, ftLastWriteTime.dwHighDateTime=0x1d8bd83, nFileSizeHigh=0x0, nFileSizeLow=0x15d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fvw20_rgJzZv8FGp.xls", cAlternateFileName="FVW20_~1.XLS")) returned 1 [0181.899] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21ba9fd0, ftCreationTime.dwHighDateTime=0x1d8b231, ftLastAccessTime.dwLowDateTime=0x809f2bc0, ftLastAccessTime.dwHighDateTime=0x1d8bdf2, ftLastWriteTime.dwLowDateTime=0x809f2bc0, ftLastWriteTime.dwHighDateTime=0x1d8bdf2, nFileSizeHigh=0x0, nFileSizeLow=0x2846, dwReserved0=0x0, dwReserved1=0x0, cFileName="mWQOQh4ldF5U-0k.pps", cAlternateFileName="MWQOQH~1.PPS")) returned 1 [0181.899] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1838b0c0, ftCreationTime.dwHighDateTime=0x1d8bff9, ftLastAccessTime.dwLowDateTime=0x82b5eab0, ftLastAccessTime.dwHighDateTime=0x1d8c04b, ftLastWriteTime.dwLowDateTime=0x82b5eab0, ftLastWriteTime.dwHighDateTime=0x1d8c04b, nFileSizeHigh=0x0, nFileSizeLow=0x1631d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q4ZKn3tp.xls", cAlternateFileName="")) returned 1 [0181.899] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a94d90, ftCreationTime.dwHighDateTime=0x1d8be15, ftLastAccessTime.dwLowDateTime=0x540da90, ftLastAccessTime.dwHighDateTime=0x1d8be7f, ftLastWriteTime.dwLowDateTime=0x540da90, ftLastWriteTime.dwHighDateTime=0x1d8be7f, nFileSizeHigh=0x0, nFileSizeLow=0x5c75, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECojIt nyClc3HiT.doc", cAlternateFileName="RECOJI~1.DOC")) returned 1 [0181.899] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a92b070, ftCreationTime.dwHighDateTime=0x1d8bcca, ftLastAccessTime.dwLowDateTime=0xe7eab850, ftLastAccessTime.dwHighDateTime=0x1d8be45, ftLastWriteTime.dwLowDateTime=0xe7eab850, ftLastWriteTime.dwHighDateTime=0x1d8be45, nFileSizeHigh=0x0, nFileSizeLow=0x13934, dwReserved0=0x0, dwReserved1=0x0, cFileName="T90UZdn2P1f7n3-fQaKi.ods", cAlternateFileName="T90UZD~1.ODS")) returned 1 [0181.899] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da37310, ftCreationTime.dwHighDateTime=0x1d8b1f3, ftLastAccessTime.dwLowDateTime=0x76cd84d0, ftLastAccessTime.dwHighDateTime=0x1d8b239, ftLastWriteTime.dwLowDateTime=0x76cd84d0, ftLastWriteTime.dwHighDateTime=0x1d8b239, nFileSizeHigh=0x0, nFileSizeLow=0xe412, dwReserved0=0x0, dwReserved1=0x0, cFileName="TbduRUTXa.docx", cAlternateFileName="TBDURU~1.DOC")) returned 1 [0181.899] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa94eb7c0, ftCreationTime.dwHighDateTime=0x1d8bacd, ftLastAccessTime.dwLowDateTime=0x946a1970, ftLastAccessTime.dwHighDateTime=0x1d8c069, ftLastWriteTime.dwLowDateTime=0x946a1970, ftLastWriteTime.dwHighDateTime=0x1d8c069, nFileSizeHigh=0x0, nFileSizeLow=0x181c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="UvFd-0OcgfkrbGVtLF6.xlsx", cAlternateFileName="UVFD-0~1.XLS")) returned 1 [0181.899] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359e9570, ftCreationTime.dwHighDateTime=0x1d8bd48, ftLastAccessTime.dwLowDateTime=0xefc320f0, ftLastAccessTime.dwHighDateTime=0x1d8bdc1, ftLastWriteTime.dwLowDateTime=0xefc320f0, ftLastWriteTime.dwHighDateTime=0x1d8bdc1, nFileSizeHigh=0x0, nFileSizeLow=0x9f30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VcH8lOCD8NPvxN-LPks.rtf", cAlternateFileName="VCH8LO~1.RTF")) returned 1 [0181.900] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cde8e0, ftCreationTime.dwHighDateTime=0x1d8bea9, ftLastAccessTime.dwLowDateTime=0xc0d6ff10, ftLastAccessTime.dwHighDateTime=0x1d8c0c7, ftLastWriteTime.dwLowDateTime=0xc0d6ff10, ftLastWriteTime.dwHighDateTime=0x1d8c0c7, nFileSizeHigh=0x0, nFileSizeLow=0xefe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vKgNAjCUO5.pps", cAlternateFileName="VKGNAJ~1.PPS")) returned 1 [0181.900] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc975760, ftCreationTime.dwHighDateTime=0x1d8b790, ftLastAccessTime.dwLowDateTime=0xd37a5a10, ftLastAccessTime.dwHighDateTime=0x1d8b9e5, ftLastWriteTime.dwLowDateTime=0xd37a5a10, ftLastWriteTime.dwHighDateTime=0x1d8b9e5, nFileSizeHigh=0x0, nFileSizeLow=0xf3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wJEu5X2748bM.xlsx", cAlternateFileName="WJEU5X~1.XLS")) returned 1 [0181.900] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f0e030, ftCreationTime.dwHighDateTime=0x1d8bfc4, ftLastAccessTime.dwLowDateTime=0xcba47010, ftLastAccessTime.dwHighDateTime=0x1d8c0d8, ftLastWriteTime.dwLowDateTime=0xcba47010, ftLastWriteTime.dwHighDateTime=0x1d8c0d8, nFileSizeHigh=0x0, nFileSizeLow=0x829f, dwReserved0=0x0, dwReserved1=0x0, cFileName="xb_Tn6.docx", cAlternateFileName="XB_TN6~1.DOC")) returned 1 [0181.900] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4d9f52c | out: lpFindFileData=0x4d9f52c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0181.900] FindClose (in: hFindFile=0x7aac38 | out: hFindFile=0x7aac38) returned 1 [0181.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7b4) returned 1 [0181.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7c0) returned 1 [0181.901] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\2hsIAD1BQHc7jnWpNx.pdf", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\2hsIAD1BQHc7jnWpNx.pdf", lpFilePart=0x0) returned 0x4a [0181.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7ac) returned 1 [0181.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\2hsIAD1BQHc7jnWpNx.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\2hsiad1bqhc7jnwpnx.pdf"), fInfoLevelId=0x0, lpFileInformation=0x230caa4 | out: lpFileInformation=0x230caa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1589c160, ftCreationTime.dwHighDateTime=0x1d8bd5c, ftLastAccessTime.dwLowDateTime=0x45393cc0, ftLastAccessTime.dwHighDateTime=0x1d8bd97, ftLastWriteTime.dwLowDateTime=0x45393cc0, ftLastWriteTime.dwHighDateTime=0x1d8bd97, nFileSizeHigh=0x0, nFileSizeLow=0xc9dd)) returned 1 [0181.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7a8) returned 1 [0181.903] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\5-DZJSZ32WSdJ.xls", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\5-DZJSZ32WSdJ.xls", lpFilePart=0x0) returned 0x45 [0181.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7ac) returned 1 [0181.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\5-DZJSZ32WSdJ.xls" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\5-dzjsz32wsdj.xls"), fInfoLevelId=0x0, lpFileInformation=0x230cbc8 | out: lpFileInformation=0x230cbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e2c1470, ftCreationTime.dwHighDateTime=0x1d8b891, ftLastAccessTime.dwLowDateTime=0x8ef4f010, ftLastAccessTime.dwHighDateTime=0x1d8c03b, ftLastWriteTime.dwLowDateTime=0x8ef4f010, ftLastWriteTime.dwHighDateTime=0x1d8c03b, nFileSizeHigh=0x0, nFileSizeLow=0xab9)) returned 1 [0181.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7a8) returned 1 [0181.904] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", nBufferLength=0x105, lpBuffer=0x4d9f2b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", lpFilePart=0x0) returned 0x9f [0181.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f758) returned 1 [0181.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla"), fInfoLevelId=0x0, lpFileInformation=0x4d9f7d4 | out: lpFileInformation=0x4d9f7d4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f754) returned 1 [0181.904] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA", lpFilePart=0x0) returned 0x9f [0181.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f6e8) returned 1 [0181.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla"), fInfoLevelId=0x0, lpFileInformation=0x4d9f764 | out: lpFileInformation=0x4d9f764*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f6e4) returned 1 [0181.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f6e8) returned 1 [0181.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla"), fInfoLevelId=0x0, lpFileInformation=0x4d9f764 | out: lpFileInformation=0x4d9f764*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f6e4) returned 1 [0181.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f6e8) returned 1 [0181.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents"), fInfoLevelId=0x0, lpFileInformation=0x4d9f764 | out: lpFileInformation=0x4d9f764*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf246c127, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xf24b85dd, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xf24b85dd, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0181.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f6e4) returned 1 [0181.904] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla"), lpSecurityAttributes=0x0) returned 1 [0181.905] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\5-DZJSZ32WSdJ.xls", nBufferLength=0x105, lpBuffer=0x4d9f284, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\5-DZJSZ32WSdJ.xls", lpFilePart=0x0) returned 0x45 [0181.905] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\5-DZJSZ32WSdJ.xls", nBufferLength=0x105, lpBuffer=0x4d9f284, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\5-DZJSZ32WSdJ.xls", lpFilePart=0x0) returned 0xb1 [0181.905] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\5-DZJSZ32WSdJ.xls" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\5-dzjsz32wsdj.xls"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\5-DZJSZ32WSdJ.xls" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\5-dzjsz32wsdj.xls"), bFailIfExists=0) returned 1 [0181.912] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\a-A-qFq AF.csv", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\a-A-qFq AF.csv", lpFilePart=0x0) returned 0x42 [0181.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7ac) returned 1 [0181.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\a-A-qFq AF.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\a-a-qfq af.csv"), fInfoLevelId=0x0, lpFileInformation=0x230ddcc | out: lpFileInformation=0x230ddcc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bee7c0, ftCreationTime.dwHighDateTime=0x1d8b889, ftLastAccessTime.dwLowDateTime=0xce3f6db0, ftLastAccessTime.dwHighDateTime=0x1d8c011, ftLastWriteTime.dwLowDateTime=0xce3f6db0, ftLastWriteTime.dwHighDateTime=0x1d8c011, nFileSizeHigh=0x0, nFileSizeLow=0x10253)) returned 1 [0181.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7a8) returned 1 [0181.912] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\Bf2mHVDW3clH.ppt", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\Bf2mHVDW3clH.ppt", lpFilePart=0x0) returned 0x44 [0181.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7ac) returned 1 [0181.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\Bf2mHVDW3clH.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\bf2mhvdw3clh.ppt"), fInfoLevelId=0x0, lpFileInformation=0x230ded0 | out: lpFileInformation=0x230ded0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d48b0, ftCreationTime.dwHighDateTime=0x1d8ba38, ftLastAccessTime.dwLowDateTime=0xaf1b71d0, ftLastAccessTime.dwHighDateTime=0x1d8bb0d, ftLastWriteTime.dwLowDateTime=0xaf1b71d0, ftLastWriteTime.dwHighDateTime=0x1d8bb0d, nFileSizeHigh=0x0, nFileSizeLow=0x1553c)) returned 1 [0181.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7a8) returned 1 [0181.914] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\C3Fj0r8hONU.ppt", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\C3Fj0r8hONU.ppt", lpFilePart=0x0) returned 0x43 [0181.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7ac) returned 1 [0181.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\C3Fj0r8hONU.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\c3fj0r8honu.ppt"), fInfoLevelId=0x0, lpFileInformation=0x230dfdc | out: lpFileInformation=0x230dfdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x814fee60, ftCreationTime.dwHighDateTime=0x1d8bf14, ftLastAccessTime.dwLowDateTime=0xabb8e610, ftLastAccessTime.dwHighDateTime=0x1d8c014, ftLastWriteTime.dwLowDateTime=0xabb8e610, ftLastWriteTime.dwHighDateTime=0x1d8c014, nFileSizeHigh=0x0, nFileSizeLow=0xc6eb)) returned 1 [0181.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7a8) returned 1 [0181.914] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\C8L6OgRoJd6.rtf", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\C8L6OgRoJd6.rtf", lpFilePart=0x0) returned 0x43 [0181.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7ac) returned 1 [0181.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\C8L6OgRoJd6.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\c8l6ogrojd6.rtf"), fInfoLevelId=0x0, lpFileInformation=0x230e0e0 | out: lpFileInformation=0x230e0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17178ef0, ftCreationTime.dwHighDateTime=0x1d8b0c7, ftLastAccessTime.dwLowDateTime=0xa82734f0, ftLastAccessTime.dwHighDateTime=0x1d8bc10, ftLastWriteTime.dwLowDateTime=0xa82734f0, ftLastWriteTime.dwHighDateTime=0x1d8bc10, nFileSizeHigh=0x0, nFileSizeLow=0x7692)) returned 1 [0181.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7a8) returned 1 [0181.915] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\CfeUIGTcVlbmZqCLP.csv", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\CfeUIGTcVlbmZqCLP.csv", lpFilePart=0x0) returned 0x49 [0181.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7ac) returned 1 [0181.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\CfeUIGTcVlbmZqCLP.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\cfeuigtcvlbmzqclp.csv"), fInfoLevelId=0x0, lpFileInformation=0x230e1e4 | out: lpFileInformation=0x230e1e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca47540, ftCreationTime.dwHighDateTime=0x1d8b690, ftLastAccessTime.dwLowDateTime=0x5f1ffb50, ftLastAccessTime.dwHighDateTime=0x1d8bf50, ftLastWriteTime.dwLowDateTime=0x5f1ffb50, ftLastWriteTime.dwHighDateTime=0x1d8bf50, nFileSizeHigh=0x0, nFileSizeLow=0x168b7)) returned 1 [0181.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7a8) returned 1 [0181.915] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\fvw20_rgJzZv8FGp.xls", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\fvw20_rgJzZv8FGp.xls", lpFilePart=0x0) returned 0x48 [0181.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7ac) returned 1 [0181.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\fvw20_rgJzZv8FGp.xls" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\fvw20_rgjzzv8fgp.xls"), fInfoLevelId=0x0, lpFileInformation=0x230e300 | out: lpFileInformation=0x230e300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3daa70, ftCreationTime.dwHighDateTime=0x1d8bc44, ftLastAccessTime.dwLowDateTime=0x682cc6c0, ftLastAccessTime.dwHighDateTime=0x1d8bd83, ftLastWriteTime.dwLowDateTime=0x682cc6c0, ftLastWriteTime.dwHighDateTime=0x1d8bd83, nFileSizeHigh=0x0, nFileSizeLow=0x15d0)) returned 1 [0181.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7a8) returned 1 [0181.915] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\mWQOQh4ldF5U-0k.pps", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\mWQOQh4ldF5U-0k.pps", lpFilePart=0x0) returned 0x47 [0181.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7ac) returned 1 [0181.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\mWQOQh4ldF5U-0k.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\mwqoqh4ldf5u-0k.pps"), fInfoLevelId=0x0, lpFileInformation=0x230e41c | out: lpFileInformation=0x230e41c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21ba9fd0, ftCreationTime.dwHighDateTime=0x1d8b231, ftLastAccessTime.dwLowDateTime=0x809f2bc0, ftLastAccessTime.dwHighDateTime=0x1d8bdf2, ftLastWriteTime.dwLowDateTime=0x809f2bc0, ftLastWriteTime.dwHighDateTime=0x1d8bdf2, nFileSizeHigh=0x0, nFileSizeLow=0x2846)) returned 1 [0181.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7a8) returned 1 [0181.916] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\Q4ZKn3tp.xls", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\Q4ZKn3tp.xls", lpFilePart=0x0) returned 0x40 [0181.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7ac) returned 1 [0181.916] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\Q4ZKn3tp.xls" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\q4zkn3tp.xls"), fInfoLevelId=0x0, lpFileInformation=0x230e530 | out: lpFileInformation=0x230e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1838b0c0, ftCreationTime.dwHighDateTime=0x1d8bff9, ftLastAccessTime.dwLowDateTime=0x82b5eab0, ftLastAccessTime.dwHighDateTime=0x1d8c04b, ftLastWriteTime.dwLowDateTime=0x82b5eab0, ftLastWriteTime.dwHighDateTime=0x1d8c04b, nFileSizeHigh=0x0, nFileSizeLow=0x1631d)) returned 1 [0181.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7a8) returned 1 [0181.916] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\RECojIt nyClc3HiT.doc", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\RECojIt nyClc3HiT.doc", lpFilePart=0x0) returned 0x49 [0181.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7ac) returned 1 [0181.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\RECojIt nyClc3HiT.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\recojit nyclc3hit.doc"), fInfoLevelId=0x0, lpFileInformation=0x230e62c | out: lpFileInformation=0x230e62c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a94d90, ftCreationTime.dwHighDateTime=0x1d8be15, ftLastAccessTime.dwLowDateTime=0x540da90, ftLastAccessTime.dwHighDateTime=0x1d8be7f, ftLastWriteTime.dwLowDateTime=0x540da90, ftLastWriteTime.dwHighDateTime=0x1d8be7f, nFileSizeHigh=0x0, nFileSizeLow=0x5c75)) returned 1 [0181.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7a8) returned 1 [0181.917] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\T90UZdn2P1f7n3-fQaKi.ods", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\T90UZdn2P1f7n3-fQaKi.ods", lpFilePart=0x0) returned 0x4c [0181.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7ac) returned 1 [0181.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\T90UZdn2P1f7n3-fQaKi.ods" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\t90uzdn2p1f7n3-fqaki.ods"), fInfoLevelId=0x0, lpFileInformation=0x230e748 | out: lpFileInformation=0x230e748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a92b070, ftCreationTime.dwHighDateTime=0x1d8bcca, ftLastAccessTime.dwLowDateTime=0xe7eab850, ftLastAccessTime.dwHighDateTime=0x1d8be45, ftLastWriteTime.dwLowDateTime=0xe7eab850, ftLastWriteTime.dwHighDateTime=0x1d8be45, nFileSizeHigh=0x0, nFileSizeLow=0x13934)) returned 1 [0181.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7a8) returned 1 [0181.918] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\TbduRUTXa.docx", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\TbduRUTXa.docx", lpFilePart=0x0) returned 0x42 [0181.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7ac) returned 1 [0181.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\TbduRUTXa.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\tbdurutxa.docx"), fInfoLevelId=0x0, lpFileInformation=0x230e874 | out: lpFileInformation=0x230e874*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da37310, ftCreationTime.dwHighDateTime=0x1d8b1f3, ftLastAccessTime.dwLowDateTime=0x76cd84d0, ftLastAccessTime.dwHighDateTime=0x1d8b239, ftLastWriteTime.dwLowDateTime=0x76cd84d0, ftLastWriteTime.dwHighDateTime=0x1d8b239, nFileSizeHigh=0x0, nFileSizeLow=0xe412)) returned 1 [0181.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7a8) returned 1 [0181.918] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\UvFd-0OcgfkrbGVtLF6.xlsx", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\UvFd-0OcgfkrbGVtLF6.xlsx", lpFilePart=0x0) returned 0x4c [0181.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7ac) returned 1 [0181.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\UvFd-0OcgfkrbGVtLF6.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\uvfd-0ocgfkrbgvtlf6.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x230e978 | out: lpFileInformation=0x230e978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa94eb7c0, ftCreationTime.dwHighDateTime=0x1d8bacd, ftLastAccessTime.dwLowDateTime=0x946a1970, ftLastAccessTime.dwHighDateTime=0x1d8c069, ftLastWriteTime.dwLowDateTime=0x946a1970, ftLastWriteTime.dwHighDateTime=0x1d8c069, nFileSizeHigh=0x0, nFileSizeLow=0x181c7)) returned 1 [0181.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7a8) returned 1 [0181.919] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\VcH8lOCD8NPvxN-LPks.rtf", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\VcH8lOCD8NPvxN-LPks.rtf", lpFilePart=0x0) returned 0x4b [0181.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7ac) returned 1 [0181.919] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\VcH8lOCD8NPvxN-LPks.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\vch8locd8npvxn-lpks.rtf"), fInfoLevelId=0x0, lpFileInformation=0x230eaa4 | out: lpFileInformation=0x230eaa4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359e9570, ftCreationTime.dwHighDateTime=0x1d8bd48, ftLastAccessTime.dwLowDateTime=0xefc320f0, ftLastAccessTime.dwHighDateTime=0x1d8bdc1, ftLastWriteTime.dwLowDateTime=0xefc320f0, ftLastWriteTime.dwHighDateTime=0x1d8bdc1, nFileSizeHigh=0x0, nFileSizeLow=0x9f30)) returned 1 [0181.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7a8) returned 1 [0181.920] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\vKgNAjCUO5.pps", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\vKgNAjCUO5.pps", lpFilePart=0x0) returned 0x42 [0181.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7ac) returned 1 [0181.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\vKgNAjCUO5.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\vkgnajcuo5.pps"), fInfoLevelId=0x0, lpFileInformation=0x230ebc8 | out: lpFileInformation=0x230ebc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71cde8e0, ftCreationTime.dwHighDateTime=0x1d8bea9, ftLastAccessTime.dwLowDateTime=0xc0d6ff10, ftLastAccessTime.dwHighDateTime=0x1d8c0c7, ftLastWriteTime.dwLowDateTime=0xc0d6ff10, ftLastWriteTime.dwHighDateTime=0x1d8c0c7, nFileSizeHigh=0x0, nFileSizeLow=0xefe8)) returned 1 [0181.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7a8) returned 1 [0181.920] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\wJEu5X2748bM.xlsx", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\wJEu5X2748bM.xlsx", lpFilePart=0x0) returned 0x45 [0181.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7ac) returned 1 [0181.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\wJEu5X2748bM.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\wjeu5x2748bm.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x230eccc | out: lpFileInformation=0x230eccc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc975760, ftCreationTime.dwHighDateTime=0x1d8b790, ftLastAccessTime.dwLowDateTime=0xd37a5a10, ftLastAccessTime.dwHighDateTime=0x1d8b9e5, ftLastWriteTime.dwLowDateTime=0xd37a5a10, ftLastWriteTime.dwHighDateTime=0x1d8b9e5, nFileSizeHigh=0x0, nFileSizeLow=0xf3a3)) returned 1 [0181.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7a8) returned 1 [0181.921] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\xb_Tn6.docx", nBufferLength=0x105, lpBuffer=0x4d9f2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\xb_Tn6.docx", lpFilePart=0x0) returned 0x3f [0181.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4d9f7ac) returned 1 [0181.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\tH7ZiLMX-lNDz2T4flA\\xb_Tn6.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\th7zilmx-lndz2t4fla\\xb_tn6.docx"), fInfoLevelId=0x0, lpFileInformation=0x230edd8 | out: lpFileInformation=0x230edd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f0e030, ftCreationTime.dwHighDateTime=0x1d8bfc4, ftLastAccessTime.dwLowDateTime=0xcba47010, ftLastAccessTime.dwHighDateTime=0x1d8c0d8, ftLastWriteTime.dwLowDateTime=0xcba47010, ftLastWriteTime.dwHighDateTime=0x1d8c0d8, nFileSizeHigh=0x0, nFileSizeLow=0x829f)) returned 1 [0181.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4d9f7a8) returned 1 [0181.922] CoUninitialize () Thread: id = 245 os_tid = 0xb84 [0181.782] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0181.782] RoInitialize () returned 0x1 [0181.782] RoUninitialize () returned 0x0 [0181.782] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads", nBufferLength=0x105, lpBuffer=0x4edf284, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Downloads", lpFilePart=0x0) returned 0x1f [0181.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4edf728) returned 1 [0181.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x4edf7a4 | out: lpFileInformation=0x4edf7a4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0181.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4edf724) returned 1 [0181.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4edf7a8) returned 1 [0181.783] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads", nBufferLength=0x105, lpBuffer=0x4edf268, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Downloads", lpFilePart=0x0) returned 0x1f [0181.783] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\*"), lpFindFileData=0x4edf4d0 | out: lpFindFileData=0x4edf4d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aac38 [0181.783] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4edf4dc | out: lpFindFileData=0x4edf4dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.783] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4edf4dc | out: lpFindFileData=0x4edf4dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0181.783] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4edf4dc | out: lpFindFileData=0x4edf4dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0181.784] FindClose (in: hFindFile=0x7aac38 | out: hFindFile=0x7aac38) returned 1 [0181.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4edf764) returned 1 [0181.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4edf770) returned 1 [0181.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4edf7a8) returned 1 [0181.784] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads", nBufferLength=0x105, lpBuffer=0x4edf268, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Downloads", lpFilePart=0x0) returned 0x1f [0181.784] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\*" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\*"), lpFindFileData=0x4edf4d0 | out: lpFindFileData=0x4edf4d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7aac38 [0181.784] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4edf4dc | out: lpFindFileData=0x4edf4dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.784] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4edf4dc | out: lpFindFileData=0x4edf4dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0181.784] FindNextFileW (in: hFindFile=0x7aac38, lpFindFileData=0x4edf4dc | out: lpFindFileData=0x4edf4dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0181.785] FindClose (in: hFindFile=0x7aac38 | out: hFindFile=0x7aac38) returned 1 [0181.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4edf764) returned 1 [0181.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4edf770) returned 1 [0181.785] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4edf268, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini", lpFilePart=0x0) returned 0x2b [0181.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4edf75c) returned 1 [0181.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x22fa9e4 | out: lpFileInformation=0x22fa9e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0181.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4edf758) returned 1 [0181.785] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads", nBufferLength=0x105, lpBuffer=0x4edf264, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads", lpFilePart=0x0) returned 0x8b [0181.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4edf708) returned 1 [0181.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x4edf784 | out: lpFileInformation=0x4edf784*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4edf704) returned 1 [0181.785] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads", nBufferLength=0x105, lpBuffer=0x4edf268, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads", lpFilePart=0x0) returned 0x8b [0181.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4edf698) returned 1 [0181.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x4edf714 | out: lpFileInformation=0x4edf714*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4edf694) returned 1 [0181.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4edf698) returned 1 [0181.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x4edf714 | out: lpFileInformation=0x4edf714*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4edf694) returned 1 [0181.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4edf698) returned 1 [0181.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx"), fInfoLevelId=0x0, lpFileInformation=0x4edf714 | out: lpFileInformation=0x4edf714*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23ad639, ftCreationTime.dwHighDateTime=0x1d92b8e, ftLastAccessTime.dwLowDateTime=0xf246c127, ftLastAccessTime.dwHighDateTime=0x1d92b8e, ftLastWriteTime.dwLowDateTime=0xf246c127, ftLastWriteTime.dwHighDateTime=0x1d92b8e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0181.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4edf694) returned 1 [0181.786] CreateDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\downloads"), lpSecurityAttributes=0x0) returned 1 [0181.788] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4edf234, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini", lpFilePart=0x0) returned 0x2b [0181.788] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini", nBufferLength=0x105, lpBuffer=0x4edf234, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini", lpFilePart=0x0) returned 0x97 [0181.788] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\a064c843e183ccea646badeb280e154a\\RDhJ0CNFevzX@XC64ZB_en-US\\Grabber\\DRIVE-C\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\a064c843e183ccea646badeb280e154a\\rdhj0cnfevzx@xc64zb_en-us\\grabber\\drive-c\\users\\rdhj0cnfevzx\\downloads\\desktop.ini"), bFailIfExists=0) returned 1 [0181.792] CoUninitialize () Thread: id = 246 os_tid = 0xbe0 [0181.925] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0181.925] RoInitialize () returned 0x1 [0181.925] RoUninitialize () returned 0x0 [0181.925] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\DropBox", nBufferLength=0x105, lpBuffer=0x4edf204, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\DropBox", lpFilePart=0x0) returned 0x2d [0181.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4edf6a8) returned 1 [0181.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\DropBox" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\dropbox"), fInfoLevelId=0x0, lpFileInformation=0x4edf724 | out: lpFileInformation=0x4edf724*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4edf6a4) returned 1 [0181.926] CoUninitialize () Thread: id = 247 os_tid = 0xbd8 [0181.931] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0181.931] RoInitialize () returned 0x1 [0181.931] RoUninitialize () returned 0x0 [0181.931] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\OneDrive", nBufferLength=0x105, lpBuffer=0x4b1f184, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\OneDrive", lpFilePart=0x0) returned 0x2e [0181.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4b1f628) returned 1 [0181.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\OneDrive" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\onedrive"), fInfoLevelId=0x0, lpFileInformation=0x4b1f6a4 | out: lpFileInformation=0x4b1f6a4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0181.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4b1f624) returned 1 [0181.932] CoUninitialize () Thread: id = 249 os_tid = 0xbec Thread: id = 251 os_tid = 0xbf8 Thread: id = 295 os_tid = 0xf4 Thread: id = 296 os_tid = 0xac0 [0233.205] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0233.205] RoInitialize () returned 0x1 [0233.205] RoUninitialize () returned 0x0 [0233.206] ResetEvent (hEvent=0x288) returned 1 Thread: id = 301 os_tid = 0xbe0 Thread: id = 302 os_tid = 0xbd8 [0235.605] CoGetContextToken (in: pToken=0x565febc | out: pToken=0x565febc) returned 0x0 [0235.605] IUnknown:QueryInterface (in: This=0x79be80, riid=0x743238a4*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x565fee0 | out: ppvObject=0x565fee0*=0x79be8c) returned 0x0 [0235.605] IComThreadingInfo:GetCurrentThreadType (in: This=0x79be8c, pThreadType=0x565ff0c | out: pThreadType=0x565ff0c*=0) returned 0x0 [0235.605] IUnknown:Release (This=0x79be8c) returned 0x1 [0235.605] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0235.605] RoInitialize () returned 0x1 [0235.606] RoUninitialize () returned 0x0 Thread: id = 303 os_tid = 0x2a4 [0235.661] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0235.663] CoGetContextToken (in: pToken=0x579f9c4 | out: pToken=0x579f9c4) returned 0x0 [0235.663] IUnknown:QueryInterface (in: This=0x79be80, riid=0x743238a4*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x579f9e8 | out: ppvObject=0x579f9e8*=0x79be8c) returned 0x0 [0235.663] IComThreadingInfo:GetCurrentThreadType (in: This=0x79be8c, pThreadType=0x579fa14 | out: pThreadType=0x579fa14*=0) returned 0x0 [0235.663] IUnknown:Release (This=0x79be8c) returned 0x1 [0235.663] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0235.663] CoUninitialize () [0235.663] RoInitialize () returned 0x1 [0235.663] RoUninitialize () returned 0x0 [0235.668] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x748 [0235.668] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x74c [0235.669] GetAddrInfoW (in: pNodeName="api.telegram.org", pServiceName=0x0, pHints=0x579f228*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x579f1d0 | out: ppResult=0x579f1d0*=0x4b6eb60*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="api.telegram.org", ai_addr=0x4b9a990*(sa_family=2, sin_port=0x0, sin_addr="149.154.167.220"), ai_next=0x0)) returned 0 [0235.670] FreeAddrInfoW (pAddrInfo=0x4b6eb60*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="api.telegram.org", ai_addr=0x4b9a990*(sa_family=2, sin_port=0x0, sin_addr="149.154.167.220"), ai_next=0x0)) [0235.674] bind (s=0x748, addr=0x2513480*(sa_family=2, sin_port=0x0, sin_addr="0.0.0.0"), namelen=16) returned 0 [0235.678] CoTaskMemAlloc (cb=0x21c) returned 0x4b3d898 [0235.678] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Threading.OverlappedData_Disabled", lpBuffer=0x4b3d898, nSize=0x10c | out: lpBuffer="") returned 0x0 [0235.678] CoTaskMemFree (pv=0x4b3d898) [0235.678] CoTaskMemAlloc (cb=0x21c) returned 0x4b3d898 [0235.678] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Threading.OverlappedData_MinCount", lpBuffer=0x4b3d898, nSize=0x10c | out: lpBuffer="") returned 0x0 [0235.678] CoTaskMemFree (pv=0x4b3d898) [0235.679] EtwEventRegister (in: ProviderId=0x2514810, EnableCallback=0x2193af6, CallbackContext=0x0, RegHandle=0x25147ec | out: RegHandle=0x25147ec) returned 0x0 [0235.679] EtwEventSetInformation (RegHandle=0x4bc0fe0, InformationClass=0x84, EventInformation=0x2, InformationLength=0x25147b4) returned 0x0 [0235.684] WSAIoctl (in: s=0x748, dwIoControlCode=0xc8000006, lpvInBuffer=0x579f1f8, cbInBuffer=0x10, lpvOutBuffer=0x579f1e4, cbOutBuffer=0x4, lpcbBytesReturned=0x579f1e0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x579f1e4, lpcbBytesReturned=0x579f1e0, lpOverlapped=0x0) returned 0 [0235.699] ConnectEx (in: s=0x748, name=0x25133b8*(sa_family=2, sin_port=0x1bb, sin_addr="149.154.167.220"), namelen=16, lpSendBuffer=0x0, dwSendDataLength=0x0, lpdwBytesSent=0x579f288, lpOverlapped=0x25149f8 | out: lpdwBytesSent=0x579f288*=0x0) returned 0 [0255.990] CoUninitialize () Thread: id = 304 os_tid = 0x6e4 Thread: id = 305 os_tid = 0x6e0 [0235.705] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0235.705] CoGetContextToken (in: pToken=0x595f92c | out: pToken=0x595f92c) returned 0x0 [0235.705] IUnknown:QueryInterface (in: This=0x79be80, riid=0x743238a4*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x595f950 | out: ppvObject=0x595f950*=0x79be8c) returned 0x0 [0235.705] IComThreadingInfo:GetCurrentThreadType (in: This=0x79be8c, pThreadType=0x595f97c | out: pThreadType=0x595f97c*=0) returned 0x0 [0235.705] IUnknown:Release (This=0x79be8c) returned 0x1 [0235.705] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0235.705] CoUninitialize () [0235.705] RoInitialize () returned 0x1 [0235.705] RoUninitialize () returned 0x0 [0235.717] setsockopt (s=0x748, level=65535, optname=28688, optval=0x0, optlen=0) returned 0 [0235.718] closesocket (s=0x74c) returned 0 [0235.719] InitializeSecurityContextW (in: phCredential=0x595f154, phContext=0x0, pTargetName=0x2515364, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x0, Reserved2=0x0, phNewContext=0x2516db8, pOutput=0x2516d50, pfContextAttr=0x2516bec, ptsExpiry=0x595f14c | out: phNewContext=0x2516db8, pOutput=0x2516d50, pfContextAttr=0x2516bec, ptsExpiry=0x595f14c) returned 0x90312 [0235.720] FreeContextBuffer (in: pvContextBuffer=0x4b3d898 | out: pvContextBuffer=0x4b3d898) returned 0x0 [0235.721] WSASend (in: s=0x748, lpBuffers=0x2517040*=((len=0x184, buf=0x2516dcc*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x595f244, dwFlags=0x0, lpOverlapped=0x25149f8, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x595f244*=0x184, lpOverlapped=0x25149f8) returned 0 [0235.723] WSARecv (in: s=0x748, lpBuffers=0x25171d4, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x595f484, lpFlags=0x595f4b4*=0x0, lpOverlapped=0x25149ac, lpCompletionRoutine=0x0 | out: lpBuffers=0x25171d4*=((len=0x5, buf=0x2516dcc*)), lpNumberOfBytesRecvd=0x595f484*=0x0, lpFlags=0x595f4b4*=0x0, lpOverlapped=0x25149ac) returned 0 [0235.744] WSARecv (in: s=0x748, lpBuffers=0x2517874, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x595f45c, lpFlags=0x595f48c*=0x0, lpOverlapped=0x25149ac, lpCompletionRoutine=0x0 | out: lpBuffers=0x2517874*=((len=0x45, buf=0x2516dd1*)), lpNumberOfBytesRecvd=0x595f45c*=0x45, lpFlags=0x595f48c*=0x0, lpOverlapped=0x25149ac) returned 0 [0235.744] InitializeSecurityContextW (in: phCredential=0x595f350, phContext=0x595f3dc, pTargetName=0x2515364, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2517944, Reserved2=0x0, phNewContext=0x2516db8, pOutput=0x2517958, pfContextAttr=0x2516bec, ptsExpiry=0x595f348 | out: phNewContext=0x2516db8, pOutput=0x2517958, pfContextAttr=0x2516bec, ptsExpiry=0x595f348) returned 0x90312 [0235.744] WSARecv (in: s=0x748, lpBuffers=0x2517a4c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x595f3fc, lpFlags=0x595f42c*=0x0, lpOverlapped=0x25149ac, lpCompletionRoutine=0x0 | out: lpBuffers=0x2517a4c*=((len=0x5, buf=0x25179e8*)), lpNumberOfBytesRecvd=0x595f3fc*=0x5, lpFlags=0x595f42c*=0x0, lpOverlapped=0x25149ac) returned 0 [0235.744] WSARecv (in: s=0x748, lpBuffers=0x2518f5c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x595f45c, lpFlags=0x595f48c*=0x0, lpOverlapped=0x25149ac, lpCompletionRoutine=0x0 | out: lpBuffers=0x2518f5c*=((len=0x140b, buf=0x2517af5*)), lpNumberOfBytesRecvd=0x595f45c*=0x140b, lpFlags=0x595f48c*=0x0, lpOverlapped=0x25149ac) returned 0 [0235.745] InitializeSecurityContextW (in: phCredential=0x595f350, phContext=0x595f3dc, pTargetName=0x2515364, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2519064, Reserved2=0x0, phNewContext=0x2516db8, pOutput=0x2519078, pfContextAttr=0x2516bec, ptsExpiry=0x595f348 | out: phNewContext=0x2516db8, pOutput=0x2519078, pfContextAttr=0x2516bec, ptsExpiry=0x595f348) returned 0x90312 [0235.746] WSARecv (in: s=0x748, lpBuffers=0x251916c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x595f3fc, lpFlags=0x595f42c*=0x0, lpOverlapped=0x25149ac, lpCompletionRoutine=0x0 | out: lpBuffers=0x251916c*=((len=0x5, buf=0x2519108*)), lpNumberOfBytesRecvd=0x595f3fc*=0x5, lpFlags=0x595f42c*=0x0, lpOverlapped=0x25149ac) returned 0 [0235.747] WSARecv (in: s=0x748, lpBuffers=0x25193c0, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x595f45c, lpFlags=0x595f48c*=0x0, lpOverlapped=0x25149ac, lpCompletionRoutine=0x0 | out: lpBuffers=0x25193c0*=((len=0x14d, buf=0x2519215*)), lpNumberOfBytesRecvd=0x595f45c*=0x14d, lpFlags=0x595f48c*=0x0, lpOverlapped=0x25149ac) returned 0 [0235.747] InitializeSecurityContextW (in: phCredential=0x595f350, phContext=0x595f3dc, pTargetName=0x2515364, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x25194c8, Reserved2=0x0, phNewContext=0x2516db8, pOutput=0x25194dc, pfContextAttr=0x2516bec, ptsExpiry=0x595f348 | out: phNewContext=0x2516db8, pOutput=0x25194dc, pfContextAttr=0x2516bec, ptsExpiry=0x595f348) returned 0x90312 [0235.747] WSARecv (in: s=0x748, lpBuffers=0x25195d0, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x595f3fc, lpFlags=0x595f42c*=0x0, lpOverlapped=0x25149ac, lpCompletionRoutine=0x0 | out: lpBuffers=0x25195d0*=((len=0x5, buf=0x251956c*)), lpNumberOfBytesRecvd=0x595f3fc*=0x5, lpFlags=0x595f42c*=0x0, lpOverlapped=0x25149ac) returned 0 [0235.747] WSARecv (in: s=0x748, lpBuffers=0x25196dc, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x595f45c, lpFlags=0x595f48c*=0x0, lpOverlapped=0x25149ac, lpCompletionRoutine=0x0 | out: lpBuffers=0x25196dc*=((len=0x4, buf=0x2519679*)), lpNumberOfBytesRecvd=0x595f45c*=0x4, lpFlags=0x595f48c*=0x0, lpOverlapped=0x25149ac) returned 0 [0235.747] InitializeSecurityContextW (in: phCredential=0x595f350, phContext=0x595f3dc, pTargetName=0x2515364, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x25197e4, Reserved2=0x0, phNewContext=0x2516db8, pOutput=0x25197f8, pfContextAttr=0x2516bec, ptsExpiry=0x595f348 | out: phNewContext=0x2516db8, pOutput=0x25197f8, pfContextAttr=0x2516bec, ptsExpiry=0x595f348) returned 0x90312 [0235.751] FreeContextBuffer (in: pvContextBuffer=0x4b688d8 | out: pvContextBuffer=0x4b688d8) returned 0x0 [0235.751] WSASend (in: s=0x748, lpBuffers=0x2519964*=((len=0x7e, buf=0x2519874*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x595f444, dwFlags=0x0, lpOverlapped=0x25149f8, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x595f444*=0x7e, lpOverlapped=0x25149f8) returned 0 [0235.751] WSARecv (in: s=0x748, lpBuffers=0x2519a58, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x595f484, lpFlags=0x595f4b4*=0x0, lpOverlapped=0x25149ac, lpCompletionRoutine=0x0 | out: lpBuffers=0x2519a58*=((len=0x5, buf=0x2519874*)), lpNumberOfBytesRecvd=0x595f484*=0x0, lpFlags=0x595f4b4*=0x0, lpOverlapped=0x25149ac) returned 0 [0235.769] WSARecv (in: s=0x748, lpBuffers=0x2519c38, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x595f45c, lpFlags=0x595f48c*=0x0, lpOverlapped=0x25149ac, lpCompletionRoutine=0x0 | out: lpBuffers=0x2519c38*=((len=0xda, buf=0x2519b01*)), lpNumberOfBytesRecvd=0x595f45c*=0xda, lpFlags=0x595f48c*=0x0, lpOverlapped=0x25149ac) returned 0 [0235.769] InitializeSecurityContextW (in: phCredential=0x595f350, phContext=0x595f3dc, pTargetName=0x2515364, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2519d40, Reserved2=0x0, phNewContext=0x2516db8, pOutput=0x2519d54, pfContextAttr=0x2516bec, ptsExpiry=0x595f348 | out: phNewContext=0x2516db8, pOutput=0x2519d54, pfContextAttr=0x2516bec, ptsExpiry=0x595f348) returned 0x90312 [0235.770] WSARecv (in: s=0x748, lpBuffers=0x2519e48, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x595f3fc, lpFlags=0x595f42c*=0x0, lpOverlapped=0x25149ac, lpCompletionRoutine=0x0 | out: lpBuffers=0x2519e48*=((len=0x5, buf=0x2519de4*)), lpNumberOfBytesRecvd=0x595f3fc*=0x5, lpFlags=0x595f42c*=0x0, lpOverlapped=0x25149ac) returned 0 [0235.770] WSARecv (in: s=0x748, lpBuffers=0x2519f50, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x595f45c, lpFlags=0x595f48c*=0x0, lpOverlapped=0x25149ac, lpCompletionRoutine=0x0 | out: lpBuffers=0x2519f50*=((len=0x1, buf=0x2519ef1*)), lpNumberOfBytesRecvd=0x595f45c*=0x1, lpFlags=0x595f48c*=0x0, lpOverlapped=0x25149ac) returned 0 [0235.770] InitializeSecurityContextW (in: phCredential=0x595f350, phContext=0x595f3dc, pTargetName=0x2515364, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x251a058, Reserved2=0x0, phNewContext=0x2516db8, pOutput=0x251a06c, pfContextAttr=0x2516bec, ptsExpiry=0x595f348 | out: phNewContext=0x2516db8, pOutput=0x251a06c, pfContextAttr=0x2516bec, ptsExpiry=0x595f348) returned 0x90312 [0235.770] WSARecv (in: s=0x748, lpBuffers=0x251a160, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x595f3fc, lpFlags=0x595f42c*=0x0, lpOverlapped=0x25149ac, lpCompletionRoutine=0x0 | out: lpBuffers=0x251a160*=((len=0x5, buf=0x251a0fc*)), lpNumberOfBytesRecvd=0x595f3fc*=0x5, lpFlags=0x595f42c*=0x0, lpOverlapped=0x25149ac) returned 0 [0235.771] WSARecv (in: s=0x748, lpBuffers=0x251a290, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x595f45c, lpFlags=0x595f48c*=0x0, lpOverlapped=0x25149ac, lpCompletionRoutine=0x0 | out: lpBuffers=0x251a290*=((len=0x28, buf=0x251a209*)), lpNumberOfBytesRecvd=0x595f45c*=0x28, lpFlags=0x595f48c*=0x0, lpOverlapped=0x25149ac) returned 0 [0235.771] InitializeSecurityContextW (in: phCredential=0x595f350, phContext=0x595f3dc, pTargetName=0x2515364, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x251a398, Reserved2=0x0, phNewContext=0x2516db8, pOutput=0x251a3ac, pfContextAttr=0x2516bec, ptsExpiry=0x595f348 | out: phNewContext=0x2516db8, pOutput=0x251a3ac, pfContextAttr=0x2516bec, ptsExpiry=0x595f348) returned 0x0 [0235.772] QueryContextAttributesW (in: phContext=0x2516db8, ulAttribute=0x4, pBuffer=0x251a43c | out: pBuffer=0x251a43c) returned 0x0 [0235.772] QueryContextAttributesW (in: phContext=0x2516db8, ulAttribute=0x5a, pBuffer=0x251a478 | out: pBuffer=0x251a478) returned 0x0 [0235.772] QueryContextAttributesW (in: phContext=0x2516db8, ulAttribute=0x53, pBuffer=0x251a4c4 | out: pBuffer=0x251a4c4) returned 0x0 [0235.773] CertDuplicateCertificateContext (pCertContext=0x82a6f8) returned 0x82a6f8 [0235.773] CertDuplicateStore (hCertStore=0x822ac8) returned 0x822ac8 [0235.773] CertEnumCertificatesInStore (hCertStore=0x822ac8, pPrevCertContext=0x0) returned 0x82a158 [0235.773] CertDuplicateCertificateContext (pCertContext=0x82a158) returned 0x82a158 [0235.773] CertEnumCertificatesInStore (hCertStore=0x822ac8, pPrevCertContext=0x82a158) returned 0x82a1a8 [0235.773] CertDuplicateCertificateContext (pCertContext=0x82a1a8) returned 0x82a1a8 [0235.773] CertEnumCertificatesInStore (hCertStore=0x822ac8, pPrevCertContext=0x82a1a8) returned 0x829fc8 [0235.773] CertDuplicateCertificateContext (pCertContext=0x829fc8) returned 0x829fc8 [0235.773] CertEnumCertificatesInStore (hCertStore=0x822ac8, pPrevCertContext=0x829fc8) returned 0x82a6f8 [0235.773] CertDuplicateCertificateContext (pCertContext=0x82a6f8) returned 0x82a6f8 [0235.773] CertEnumCertificatesInStore (hCertStore=0x822ac8, pPrevCertContext=0x82a6f8) returned 0x0 [0235.773] CertCloseStore (hCertStore=0x822ac8, dwFlags=0x0) returned 1 [0235.773] CertFreeCertificateContext (pCertContext=0x82a6f8) returned 1 [0235.773] CertOpenStore (lpszStoreProvider=0x2, dwEncodingType=0x10001, hCryptProv=0x0, dwFlags=0x2204, pvPara=0x0) returned 0x822b40 [0235.774] CertAddCRLLinkToStore (in: hCertStore=0x822b40, pCrlContext=0x82a158, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0235.774] CertAddCRLLinkToStore (in: hCertStore=0x822b40, pCrlContext=0x82a1a8, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0235.774] CertAddCRLLinkToStore (in: hCertStore=0x822b40, pCrlContext=0x829fc8, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0235.774] CertAddCRLLinkToStore (in: hCertStore=0x822b40, pCrlContext=0x82a6f8, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0235.774] CertGetCertificateChain (in: hChainEngine=0x0, pCertContext=0x82a6f8, pTime=0x595f35c, hAdditionalStore=0x822b40, pChainPara=0x595f29c, dwFlags=0x0, pvReserved=0x0, ppChainContext=0x595f290 | out: ppChainContext=0x595f290) returned 1 [0235.774] CertDuplicateCertificateChain (pChainContext=0x4ae7d48) returned 0x4ae7d48 [0235.774] CertDuplicateCertificateContext (pCertContext=0x82a6f8) returned 0x82a6f8 [0235.774] CertDuplicateCertificateContext (pCertContext=0x4b70068) returned 0x4b70068 [0235.774] CertDuplicateCertificateContext (pCertContext=0x4b6f848) returned 0x4b6f848 [0235.774] CertDuplicateCertificateContext (pCertContext=0x4bbe680) returned 0x4bbe680 [0235.774] CertFreeCertificateChain (pChainContext=0x4ae7d48) [0235.774] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x1, pChainContext=0x4ae7d48, pPolicyPara=0x595f43c, pPolicyStatus=0x595f428 | out: pPolicyStatus=0x595f428) returned 1 [0235.774] SetLastError (dwErrCode=0x0) [0235.775] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x4, pChainContext=0x4ae7d48, pPolicyPara=0x595f4a8, pPolicyStatus=0x595f450 | out: pPolicyStatus=0x595f450) returned 1 [0235.775] CertFreeCertificateChain (pChainContext=0x4ae7d48) [0235.775] CertFreeCertificateContext (pCertContext=0x82a6f8) returned 1 [0235.775] EncryptMessage (in: phContext=0x2516db8, fQOP=0x0, pMessage=0x251c0f0, MessageSeqNo=0x0 | out: pMessage=0x251c0f0) returned 0x0 [0235.775] WSASend (in: s=0x748, lpBuffers=0x251c1cc*=((len=0x131, buf=0x2383984*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x595f27c, dwFlags=0x0, lpOverlapped=0x25149f8, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x595f27c*=0x131, lpOverlapped=0x25149f8) returned 0 [0235.776] SetEvent (hEvent=0x288) returned 1 [0235.776] WSARecv (in: s=0x748, lpBuffers=0x251c384, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x595f1d0, lpFlags=0x595f200*=0x0, lpOverlapped=0x25149ac, lpCompletionRoutine=0x0 | out: lpBuffers=0x251c384*=((len=0x5, buf=0x23c1170*)), lpNumberOfBytesRecvd=0x595f1d0*=0x0, lpFlags=0x595f200*=0x0, lpOverlapped=0x25149ac) returned 0 [0235.798] WSARecv (in: s=0x748, lpBuffers=0x251c48c, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x595f44c, lpFlags=0x595f47c*=0x0, lpOverlapped=0x25149ac, lpCompletionRoutine=0x0 | out: lpBuffers=0x251c48c*=((len=0x31, buf=0x23c1175*)), lpNumberOfBytesRecvd=0x595f44c*=0x31, lpFlags=0x595f47c*=0x0, lpOverlapped=0x25149ac) returned 0 [0235.798] DecryptMessage (in: phContext=0x2516db8, pMessage=0x251c580, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x251c580, pfQOP=0x0) returned 0x0 [0235.799] WSARecv (in: s=0x748, lpBuffers=0x251c7a8, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x595f230, lpFlags=0x595f260*=0x0, lpOverlapped=0x25149ac, lpCompletionRoutine=0x0 | out: lpBuffers=0x251c7a8*=((len=0x5, buf=0x23c1170)), lpNumberOfBytesRecvd=0x595f230*=0x0, lpFlags=0x595f260*=0x0, lpOverlapped=0x25149ac) returned 0xffffffff [0235.803] EncryptMessage (in: phContext=0x2516db8, fQOP=0x0, pMessage=0x251cb90, MessageSeqNo=0x0 | out: pMessage=0x251cb90) returned 0x0 [0235.803] WSASend (in: s=0x748, lpBuffers=0x251cc6c*=((len=0x45, buf=0x2383984*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x595ef84, dwFlags=0x0, lpOverlapped=0x25149f8, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x595ef84*=0x45, lpOverlapped=0x25149f8) returned 0 [0235.806] EncryptMessage (in: phContext=0x2516db8, fQOP=0x0, pMessage=0x251ece8, MessageSeqNo=0x0 | out: pMessage=0x251ece8) returned 0x0 [0235.806] WSASend (in: s=0x748, lpBuffers=0x251edc4*=((len=0x142, buf=0x251eb10*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x595ee60, dwFlags=0x0, lpOverlapped=0x25149f8, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x595ee60*=0x142, lpOverlapped=0x25149f8) returned 0 [0235.807] EncryptMessage (in: phContext=0x2516db8, fQOP=0x0, pMessage=0x25230fc, MessageSeqNo=0x0 | out: pMessage=0x25230fc) returned 0x0 [0235.807] WSASend (in: s=0x748, lpBuffers=0x25231d8*=((len=0x4000, buf=0x251f068*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x595ee28, dwFlags=0x0, lpOverlapped=0x25149f8, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x595ee28*=0x4000, lpOverlapped=0x25149f8) returned 0 [0235.808] EncryptMessage (in: phContext=0x2516db8, fQOP=0x0, pMessage=0x25273b0, MessageSeqNo=0x0 | out: pMessage=0x25273b0) returned 0x0 [0235.808] WSASend (in: s=0x748, lpBuffers=0x252748c*=((len=0x4000, buf=0x252331c*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x595f480, dwFlags=0x0, lpOverlapped=0x25149f8, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x595f480*=0x4000, lpOverlapped=0x25149f8) returned 0 [0235.808] EncryptMessage (in: phContext=0x2516db8, fQOP=0x0, pMessage=0x252a750, MessageSeqNo=0x0 | out: pMessage=0x252a750) returned 0x0 [0235.808] WSASend (in: s=0x748, lpBuffers=0x252a82c*=((len=0x318b, buf=0x2527530*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x595f480, dwFlags=0x0, lpOverlapped=0x25149f8, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x595f480*=0x318b, lpOverlapped=0x25149f8) returned 0 [0235.809] EncryptMessage (in: phContext=0x2516db8, fQOP=0x0, pMessage=0x252abdc, MessageSeqNo=0x0 | out: pMessage=0x252abdc) returned 0x0 [0235.809] WSASend (in: s=0x748, lpBuffers=0x252acb8*=((len=0x49, buf=0x252aafc*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x595eb84, dwFlags=0x0, lpOverlapped=0x25149f8, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x595eb84*=0x49, lpOverlapped=0x25149f8) returned 0 [0235.827] WSAGetOverlappedResult (in: s=0x748, lpOverlapped=0x25149ac, lpcbTransfer=0x595f6dc, fWait=0, lpdwFlags=0x595f6d8 | out: lpcbTransfer=0x595f6dc, lpdwFlags=0x595f6d8) returned 0 [0235.827] WSAEventSelect (s=0x748, hEventObject=0x0, lNetworkEvents=0) returned 0 [0235.827] ioctlsocket (in: s=0x748, cmd=-2147195266, argp=0x595f4b8 | out: argp=0x595f4b8) returned 0 [0235.827] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2746, dwLanguageId=0x0, lpBuffer=0x595f298, nSize=0x101, Arguments=0x0 | out: lpBuffer="An existing connection was forcibly closed by the remote host.\r\n") returned 0x40 [0235.833] QueryContextAttributesW (in: phContext=0x2516db8, ulAttribute=0x1a, pBuffer=0x595f35c | out: pBuffer=0x595f35c) returned 0x0 [0235.833] DeleteSecurityContext (phContext=0x2516db8) returned 0x0 [0235.833] shutdown (s=0x748, how=2) returned 0 [0235.833] setsockopt (s=0x748, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0235.833] closesocket (s=0x748) returned 0 Thread: id = 318 os_tid = 0x37c Process: id = "11" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x2d396000" os_pid = "0x360" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "10" os_parent_pid = "0x210" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b264" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 3744 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3745 start_va = 0x20000 end_va = 0x20fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 3746 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3747 start_va = 0x50000 end_va = 0xcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 3748 start_va = 0xd0000 end_va = 0xd3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 3749 start_va = 0xe0000 end_va = 0xe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 3750 start_va = 0xf0000 end_va = 0xf1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 3751 start_va = 0x100000 end_va = 0x1bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3752 start_va = 0x1c0000 end_va = 0x1c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 3753 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 3754 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 3755 start_va = 0x1f0000 end_va = 0x1f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 3756 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 3757 start_va = 0x480000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000480000" filename = "" Region: id = 3758 start_va = 0x540000 end_va = 0x541fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000540000" filename = "" Region: id = 3759 start_va = 0x550000 end_va = 0x550fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000550000" filename = "" Region: id = 3760 start_va = 0x560000 end_va = 0x561fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000560000" filename = "" Region: id = 3761 start_va = 0x570000 end_va = 0x570fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000570000" filename = "" Region: id = 3762 start_va = 0x580000 end_va = 0x586fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 3763 start_va = 0x590000 end_va = 0x59cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\gpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\gpsvc.dll.mui") Region: id = 3764 start_va = 0x5a0000 end_va = 0x5a3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 3765 start_va = 0x5b0000 end_va = 0x5b3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 3766 start_va = 0x5c0000 end_va = 0x5d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 3767 start_va = 0x5e0000 end_va = 0x5e6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3768 start_va = 0x5f0000 end_va = 0x5f1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 3769 start_va = 0x600000 end_va = 0x6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 3770 start_va = 0x700000 end_va = 0x7fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000700000" filename = "" Region: id = 3771 start_va = 0x800000 end_va = 0x987fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000800000" filename = "" Region: id = 3772 start_va = 0x990000 end_va = 0xb10fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000990000" filename = "" Region: id = 3773 start_va = 0xb20000 end_va = 0xb9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b20000" filename = "" Region: id = 3774 start_va = 0xba0000 end_va = 0xbacfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 3775 start_va = 0xbb0000 end_va = 0xbb8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vsstrace.dll.mui" filename = "\\Windows\\System32\\en-US\\vsstrace.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\vsstrace.dll.mui") Region: id = 3776 start_va = 0xbc0000 end_va = 0xbc6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000bc0000" filename = "" Region: id = 3777 start_va = 0xbd0000 end_va = 0xbd1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "activeds.dll.mui" filename = "\\Windows\\System32\\en-US\\activeds.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\activeds.dll.mui") Region: id = 3778 start_va = 0xbe0000 end_va = 0xbe2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mswsock.dll.mui" filename = "\\Windows\\System32\\en-US\\mswsock.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mswsock.dll.mui") Region: id = 3779 start_va = 0xc00000 end_va = 0xcfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c00000" filename = "" Region: id = 3780 start_va = 0xd00000 end_va = 0xd7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d00000" filename = "" Region: id = 3781 start_va = 0xd80000 end_va = 0xdc4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db") Region: id = 3782 start_va = 0xdd0000 end_va = 0xdd6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000dd0000" filename = "" Region: id = 3783 start_va = 0xde0000 end_va = 0xde4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll" filename = "\\Windows\\System32\\winnlsres.dll" (normalized: "c:\\windows\\system32\\winnlsres.dll") Region: id = 3784 start_va = 0xdf0000 end_va = 0xdfffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll.mui" filename = "\\Windows\\System32\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winnlsres.dll.mui") Region: id = 3785 start_va = 0xe00000 end_va = 0xefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 3786 start_va = 0xf00000 end_va = 0xf7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f00000" filename = "" Region: id = 3787 start_va = 0xf80000 end_va = 0xf89fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "crypt32.dll.mui" filename = "\\Windows\\System32\\en-US\\crypt32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\crypt32.dll.mui") Region: id = 3788 start_va = 0xf90000 end_va = 0xf96fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f90000" filename = "" Region: id = 3789 start_va = 0xfa0000 end_va = 0xfb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1256.nls" filename = "\\Windows\\System32\\C_1256.NLS" (normalized: "c:\\windows\\system32\\c_1256.nls") Region: id = 3790 start_va = 0xfc0000 end_va = 0xfc6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fc0000" filename = "" Region: id = 3791 start_va = 0xfd0000 end_va = 0xfe0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1251.nls" filename = "\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\windows\\system32\\c_1251.nls") Region: id = 3792 start_va = 0xff0000 end_va = 0xff0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ff0000" filename = "" Region: id = 3793 start_va = 0x1000000 end_va = 0x10fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001000000" filename = "" Region: id = 3794 start_va = 0x1100000 end_va = 0x1436fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3795 start_va = 0x1440000 end_va = 0x153ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001440000" filename = "" Region: id = 3796 start_va = 0x1540000 end_va = 0x163ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001540000" filename = "" Region: id = 3797 start_va = 0x1640000 end_va = 0x16bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001640000" filename = "" Region: id = 3798 start_va = 0x16c0000 end_va = 0x16d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1254.nls" filename = "\\Windows\\System32\\C_1254.NLS" (normalized: "c:\\windows\\system32\\c_1254.nls") Region: id = 3799 start_va = 0x16e0000 end_va = 0x16f0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1250.nls" filename = "\\Windows\\System32\\C_1250.NLS" (normalized: "c:\\windows\\system32\\c_1250.nls") Region: id = 3800 start_va = 0x1700000 end_va = 0x17fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001700000" filename = "" Region: id = 3801 start_va = 0x1800000 end_va = 0x18fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001800000" filename = "" Region: id = 3802 start_va = 0x1900000 end_va = 0x19fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001900000" filename = "" Region: id = 3803 start_va = 0x1a00000 end_va = 0x1a8dfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 3804 start_va = 0x1a90000 end_va = 0x1aa0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1253.nls" filename = "\\Windows\\System32\\C_1253.NLS" (normalized: "c:\\windows\\system32\\c_1253.nls") Region: id = 3805 start_va = 0x1ab0000 end_va = 0x1ac0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1257.nls" filename = "\\Windows\\System32\\C_1257.NLS" (normalized: "c:\\windows\\system32\\c_1257.nls") Region: id = 3806 start_va = 0x1ad0000 end_va = 0x1ae0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1255.nls" filename = "\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\windows\\system32\\c_1255.nls") Region: id = 3807 start_va = 0x1b00000 end_va = 0x1bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001b00000" filename = "" Region: id = 3808 start_va = 0x1c00000 end_va = 0x1cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001c00000" filename = "" Region: id = 3809 start_va = 0x1d00000 end_va = 0x1dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d00000" filename = "" Region: id = 3810 start_va = 0x1e00000 end_va = 0x1efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e00000" filename = "" Region: id = 3811 start_va = 0x1f00000 end_va = 0x1ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f00000" filename = "" Region: id = 3812 start_va = 0x2000000 end_va = 0x207ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002000000" filename = "" Region: id = 3813 start_va = 0x2080000 end_va = 0x20fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 3814 start_va = 0x2100000 end_va = 0x21fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002100000" filename = "" Region: id = 3815 start_va = 0x2200000 end_va = 0x22fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002200000" filename = "" Region: id = 3816 start_va = 0x2300000 end_va = 0x23fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002300000" filename = "" Region: id = 3817 start_va = 0x2400000 end_va = 0x24fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002400000" filename = "" Region: id = 3818 start_va = 0x2500000 end_va = 0x25fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002500000" filename = "" Region: id = 3819 start_va = 0x2600000 end_va = 0x26fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002600000" filename = "" Region: id = 3820 start_va = 0x2700000 end_va = 0x27fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002700000" filename = "" Region: id = 3821 start_va = 0x2800000 end_va = 0x28dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 3822 start_va = 0x28e0000 end_va = 0x295ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000028e0000" filename = "" Region: id = 3823 start_va = 0x2960000 end_va = 0x29dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002960000" filename = "" Region: id = 3824 start_va = 0x29e0000 end_va = 0x2a5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000029e0000" filename = "" Region: id = 3825 start_va = 0x2a60000 end_va = 0x2adffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a60000" filename = "" Region: id = 3826 start_va = 0x2ae0000 end_va = 0x2b5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ae0000" filename = "" Region: id = 3827 start_va = 0x2b60000 end_va = 0x2c5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b60000" filename = "" Region: id = 3828 start_va = 0x2c60000 end_va = 0x2d5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c60000" filename = "" Region: id = 3829 start_va = 0x2d60000 end_va = 0x2e5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002d60000" filename = "" Region: id = 3830 start_va = 0x2e60000 end_va = 0x2f5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002e60000" filename = "" Region: id = 3831 start_va = 0x2f60000 end_va = 0x2f87fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_932.nls" filename = "\\Windows\\System32\\C_932.NLS" (normalized: "c:\\windows\\system32\\c_932.nls") Region: id = 3832 start_va = 0x2f90000 end_va = 0x2fc0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_949.nls" filename = "\\Windows\\System32\\C_949.NLS" (normalized: "c:\\windows\\system32\\c_949.nls") Region: id = 3833 start_va = 0x2fd0000 end_va = 0x2fe0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_874.nls" filename = "\\Windows\\System32\\C_874.NLS" (normalized: "c:\\windows\\system32\\c_874.nls") Region: id = 3834 start_va = 0x2ff0000 end_va = 0x3000fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1258.nls" filename = "\\Windows\\System32\\C_1258.NLS" (normalized: "c:\\windows\\system32\\c_1258.nls") Region: id = 3835 start_va = 0x3010000 end_va = 0x3040fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_936.nls" filename = "\\Windows\\System32\\C_936.NLS" (normalized: "c:\\windows\\system32\\c_936.nls") Region: id = 3836 start_va = 0x3060000 end_va = 0x315ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003060000" filename = "" Region: id = 3837 start_va = 0x3160000 end_va = 0x325ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003160000" filename = "" Region: id = 3838 start_va = 0x3260000 end_va = 0x32dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003260000" filename = "" Region: id = 3839 start_va = 0x32e0000 end_va = 0x335ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000032e0000" filename = "" Region: id = 3840 start_va = 0x3380000 end_va = 0x3386fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003380000" filename = "" Region: id = 3841 start_va = 0x33b0000 end_va = 0x33b6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000033b0000" filename = "" Region: id = 3842 start_va = 0x33c0000 end_va = 0x343ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000033c0000" filename = "" Region: id = 3843 start_va = 0x3440000 end_va = 0x353ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003440000" filename = "" Region: id = 3844 start_va = 0x3560000 end_va = 0x3566fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003560000" filename = "" Region: id = 3845 start_va = 0x3570000 end_va = 0x35effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003570000" filename = "" Region: id = 3846 start_va = 0x3600000 end_va = 0x36fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003600000" filename = "" Region: id = 3847 start_va = 0x3700000 end_va = 0x37fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003700000" filename = "" Region: id = 3848 start_va = 0x3800000 end_va = 0x387ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003800000" filename = "" Region: id = 3849 start_va = 0x3880000 end_va = 0x38fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003880000" filename = "" Region: id = 3850 start_va = 0x3900000 end_va = 0x397ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003900000" filename = "" Region: id = 3851 start_va = 0x3980000 end_va = 0x39b0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_950.nls" filename = "\\Windows\\System32\\C_950.NLS" (normalized: "c:\\windows\\system32\\c_950.nls") Region: id = 3852 start_va = 0x3a80000 end_va = 0x3b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003a80000" filename = "" Region: id = 3853 start_va = 0x3b80000 end_va = 0x3bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003b80000" filename = "" Region: id = 3854 start_va = 0x3c00000 end_va = 0x3c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003c00000" filename = "" Region: id = 3855 start_va = 0x3c80000 end_va = 0x3d7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003c80000" filename = "" Region: id = 3856 start_va = 0x3d80000 end_va = 0x3e7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003d80000" filename = "" Region: id = 3857 start_va = 0x3f00000 end_va = 0x3ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003f00000" filename = "" Region: id = 3858 start_va = 0x4000000 end_va = 0x40fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004000000" filename = "" Region: id = 3859 start_va = 0x4100000 end_va = 0x41fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004100000" filename = "" Region: id = 3860 start_va = 0x4200000 end_va = 0x42fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004200000" filename = "" Region: id = 3861 start_va = 0x4300000 end_va = 0x43fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004300000" filename = "" Region: id = 3862 start_va = 0x4400000 end_va = 0x44fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004400000" filename = "" Region: id = 3863 start_va = 0x4500000 end_va = 0x45fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004500000" filename = "" Region: id = 3864 start_va = 0x4600000 end_va = 0x46fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004600000" filename = "" Region: id = 3865 start_va = 0x4700000 end_va = 0x47fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004700000" filename = "" Region: id = 3866 start_va = 0x4800000 end_va = 0x48fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004800000" filename = "" Region: id = 3867 start_va = 0x4900000 end_va = 0x49fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004900000" filename = "" Region: id = 3868 start_va = 0x4a00000 end_va = 0x4afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a00000" filename = "" Region: id = 3869 start_va = 0x4b00000 end_va = 0x4bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b00000" filename = "" Region: id = 3870 start_va = 0x4c00000 end_va = 0x4cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004c00000" filename = "" Region: id = 3871 start_va = 0x4d00000 end_va = 0x4dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d00000" filename = "" Region: id = 3872 start_va = 0x4e00000 end_va = 0x4efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004e00000" filename = "" Region: id = 3873 start_va = 0x4f00000 end_va = 0x4ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004f00000" filename = "" Region: id = 3874 start_va = 0x5000000 end_va = 0x50fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005000000" filename = "" Region: id = 3875 start_va = 0x5100000 end_va = 0x51fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005100000" filename = "" Region: id = 3876 start_va = 0x5200000 end_va = 0x52fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005200000" filename = "" Region: id = 3877 start_va = 0x5300000 end_va = 0x53fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005300000" filename = "" Region: id = 3878 start_va = 0x5400000 end_va = 0x54fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005400000" filename = "" Region: id = 3879 start_va = 0x5500000 end_va = 0x55fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005500000" filename = "" Region: id = 3880 start_va = 0x5600000 end_va = 0x56fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005600000" filename = "" Region: id = 3881 start_va = 0x5700000 end_va = 0x57fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005700000" filename = "" Region: id = 3882 start_va = 0x5800000 end_va = 0x58fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005800000" filename = "" Region: id = 3883 start_va = 0x5900000 end_va = 0x59fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005900000" filename = "" Region: id = 3884 start_va = 0x5a00000 end_va = 0x5afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a00000" filename = "" Region: id = 3885 start_va = 0x5b00000 end_va = 0x5bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005b00000" filename = "" Region: id = 3886 start_va = 0x5c00000 end_va = 0x5cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005c00000" filename = "" Region: id = 3887 start_va = 0x5d00000 end_va = 0x5dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 3888 start_va = 0x5e00000 end_va = 0x5efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005e00000" filename = "" Region: id = 3889 start_va = 0x5f00000 end_va = 0x5ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005f00000" filename = "" Region: id = 3890 start_va = 0x6000000 end_va = 0x60fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006000000" filename = "" Region: id = 3891 start_va = 0x6100000 end_va = 0x61fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006100000" filename = "" Region: id = 3892 start_va = 0x6200000 end_va = 0x62fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006200000" filename = "" Region: id = 3893 start_va = 0x6300000 end_va = 0x63fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006300000" filename = "" Region: id = 3894 start_va = 0x6400000 end_va = 0x64fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006400000" filename = "" Region: id = 3895 start_va = 0x6500000 end_va = 0x65fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006500000" filename = "" Region: id = 3896 start_va = 0x6600000 end_va = 0x66fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006600000" filename = "" Region: id = 3897 start_va = 0x6700000 end_va = 0x67fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006700000" filename = "" Region: id = 3898 start_va = 0x6800000 end_va = 0x68fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006800000" filename = "" Region: id = 3899 start_va = 0x6900000 end_va = 0x69fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006900000" filename = "" Region: id = 3900 start_va = 0x6a00000 end_va = 0x6afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006a00000" filename = "" Region: id = 3901 start_va = 0x6b00000 end_va = 0x6bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006b00000" filename = "" Region: id = 3902 start_va = 0x6c00000 end_va = 0x6cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006c00000" filename = "" Region: id = 3903 start_va = 0x6d00000 end_va = 0x6dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006d00000" filename = "" Region: id = 3904 start_va = 0x6e00000 end_va = 0x6efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006e00000" filename = "" Region: id = 3905 start_va = 0x6f00000 end_va = 0x6ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006f00000" filename = "" Region: id = 3906 start_va = 0x7200000 end_va = 0x72fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007200000" filename = "" Region: id = 3907 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3908 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 3909 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 3910 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 3911 start_va = 0x7ff781370000 end_va = 0x7ff78137cfff monitored = 0 entry_point = 0x7ff781373980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 3912 start_va = 0x7ffa4db00000 end_va = 0x7ffa4db10fff monitored = 0 entry_point = 0x7ffa4db07480 region_type = mapped_file name = "tetheringclient.dll" filename = "\\Windows\\System32\\tetheringclient.dll" (normalized: "c:\\windows\\system32\\tetheringclient.dll") Region: id = 3913 start_va = 0x7ffa4db20000 end_va = 0x7ffa4dba3fff monitored = 0 entry_point = 0x7ffa4db38d50 region_type = mapped_file name = "wbemess.dll" filename = "\\Windows\\System32\\wbem\\wbemess.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemess.dll") Region: id = 3914 start_va = 0x7ffa4dc00000 end_va = 0x7ffa4dc15fff monitored = 0 entry_point = 0x7ffa4dc055e0 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 3915 start_va = 0x7ffa4dc20000 end_va = 0x7ffa4dcf5fff monitored = 0 entry_point = 0x7ffa4dc4a800 region_type = mapped_file name = "wmiprvsd.dll" filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprvsd.dll") Region: id = 3916 start_va = 0x7ffa4dd60000 end_va = 0x7ffa4dd73fff monitored = 0 entry_point = 0x7ffa4dd63710 region_type = mapped_file name = "mskeyprotect.dll" filename = "\\Windows\\System32\\mskeyprotect.dll" (normalized: "c:\\windows\\system32\\mskeyprotect.dll") Region: id = 3917 start_va = 0x7ffa4de10000 end_va = 0x7ffa4de2dfff monitored = 0 entry_point = 0x7ffa4de1ef80 region_type = mapped_file name = "ncryptsslp.dll" filename = "\\Windows\\System32\\ncryptsslp.dll" (normalized: "c:\\windows\\system32\\ncryptsslp.dll") Region: id = 3918 start_va = 0x7ffa4de30000 end_va = 0x7ffa4de6efff monitored = 0 entry_point = 0x7ffa4de582d0 region_type = mapped_file name = "tcpipcfg.dll" filename = "\\Windows\\System32\\tcpipcfg.dll" (normalized: "c:\\windows\\system32\\tcpipcfg.dll") Region: id = 3919 start_va = 0x7ffa4de70000 end_va = 0x7ffa4dea5fff monitored = 0 entry_point = 0x7ffa4de727f0 region_type = mapped_file name = "windows.networking.hostname.dll" filename = "\\Windows\\System32\\Windows.Networking.HostName.dll" (normalized: "c:\\windows\\system32\\windows.networking.hostname.dll") Region: id = 3920 start_va = 0x7ffa4dff0000 end_va = 0x7ffa4e005fff monitored = 0 entry_point = 0x7ffa4dff1af0 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 3921 start_va = 0x7ffa4e010000 end_va = 0x7ffa4e029fff monitored = 0 entry_point = 0x7ffa4e012330 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 3922 start_va = 0x7ffa4e060000 end_va = 0x7ffa4e075fff monitored = 0 entry_point = 0x7ffa4e061d50 region_type = mapped_file name = "wwapi.dll" filename = "\\Windows\\System32\\wwapi.dll" (normalized: "c:\\windows\\system32\\wwapi.dll") Region: id = 3923 start_va = 0x7ffa4e330000 end_va = 0x7ffa4e33cfff monitored = 0 entry_point = 0x7ffa4e331420 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 3924 start_va = 0x7ffa4e420000 end_va = 0x7ffa4e483fff monitored = 0 entry_point = 0x7ffa4e43bed0 region_type = mapped_file name = "repdrvfs.dll" filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" (normalized: "c:\\windows\\system32\\wbem\\repdrvfs.dll") Region: id = 3925 start_va = 0x7ffa4e490000 end_va = 0x7ffa4e4b4fff monitored = 0 entry_point = 0x7ffa4e499900 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 3926 start_va = 0x7ffa4e4c0000 end_va = 0x7ffa4e5b5fff monitored = 0 entry_point = 0x7ffa4e4f9590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 3927 start_va = 0x7ffa4e5c0000 end_va = 0x7ffa4e6f6fff monitored = 0 entry_point = 0x7ffa4e600480 region_type = mapped_file name = "wbemcore.dll" filename = "\\Windows\\System32\\wbem\\wbemcore.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemcore.dll") Region: id = 3928 start_va = 0x7ffa4e770000 end_va = 0x7ffa4e77efff monitored = 0 entry_point = 0x7ffa4e774960 region_type = mapped_file name = "nci.dll" filename = "\\Windows\\System32\\nci.dll" (normalized: "c:\\windows\\system32\\nci.dll") Region: id = 3929 start_va = 0x7ffa4e7a0000 end_va = 0x7ffa4e7b0fff monitored = 0 entry_point = 0x7ffa4e7a2fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 3930 start_va = 0x7ffa4e7c0000 end_va = 0x7ffa4e7ddfff monitored = 0 entry_point = 0x7ffa4e7c3a40 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 3931 start_va = 0x7ffa4e7e0000 end_va = 0x7ffa4e861fff monitored = 0 entry_point = 0x7ffa4e7e2a10 region_type = mapped_file name = "hnetcfg.dll" filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll") Region: id = 3932 start_va = 0x7ffa4e870000 end_va = 0x7ffa4e883fff monitored = 0 entry_point = 0x7ffa4e871800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 3933 start_va = 0x7ffa4e890000 end_va = 0x7ffa4e903fff monitored = 0 entry_point = 0x7ffa4e8a5eb0 region_type = mapped_file name = "esscli.dll" filename = "\\Windows\\System32\\wbem\\esscli.dll" (normalized: "c:\\windows\\system32\\wbem\\esscli.dll") Region: id = 3934 start_va = 0x7ffa4e920000 end_va = 0x7ffa4e92bfff monitored = 0 entry_point = 0x7ffa4e9235c0 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 3935 start_va = 0x7ffa4e930000 end_va = 0x7ffa4e975fff monitored = 0 entry_point = 0x7ffa4e9379a0 region_type = mapped_file name = "adsldp.dll" filename = "\\Windows\\System32\\adsldp.dll" (normalized: "c:\\windows\\system32\\adsldp.dll") Region: id = 3936 start_va = 0x7ffa4e980000 end_va = 0x7ffa4e9bffff monitored = 0 entry_point = 0x7ffa4e98cbe0 region_type = mapped_file name = "adsldpc.dll" filename = "\\Windows\\System32\\adsldpc.dll" (normalized: "c:\\windows\\system32\\adsldpc.dll") Region: id = 3937 start_va = 0x7ffa4e9c0000 end_va = 0x7ffa4ea06fff monitored = 0 entry_point = 0x7ffa4e9c1d10 region_type = mapped_file name = "activeds.dll" filename = "\\Windows\\System32\\activeds.dll" (normalized: "c:\\windows\\system32\\activeds.dll") Region: id = 3938 start_va = 0x7ffa4f6c0000 end_va = 0x7ffa4f701fff monitored = 0 entry_point = 0x7ffa4f6c3670 region_type = mapped_file name = "wdscore.dll" filename = "\\Windows\\System32\\wdscore.dll" (normalized: "c:\\windows\\system32\\wdscore.dll") Region: id = 3939 start_va = 0x7ffa4f920000 end_va = 0x7ffa4f93efff monitored = 0 entry_point = 0x7ffa4f9237e0 region_type = mapped_file name = "netsetupapi.dll" filename = "\\Windows\\System32\\NetSetupApi.dll" (normalized: "c:\\windows\\system32\\netsetupapi.dll") Region: id = 3940 start_va = 0x7ffa4f940000 end_va = 0x7ffa4f9b8fff monitored = 0 entry_point = 0x7ffa4f9476a0 region_type = mapped_file name = "netsetupshim.dll" filename = "\\Windows\\System32\\NetSetupShim.dll" (normalized: "c:\\windows\\system32\\netsetupshim.dll") Region: id = 3941 start_va = 0x7ffa4f9c0000 end_va = 0x7ffa4f9d3fff monitored = 0 entry_point = 0x7ffa4f9c5080 region_type = mapped_file name = "windows.staterepositorybroker.dll" filename = "\\Windows\\System32\\Windows.StateRepositoryBroker.dll" (normalized: "c:\\windows\\system32\\windows.staterepositorybroker.dll") Region: id = 3942 start_va = 0x7ffa4f9e0000 end_va = 0x7ffa4f9f7fff monitored = 0 entry_point = 0x7ffa4f9e4e10 region_type = mapped_file name = "adhsvc.dll" filename = "\\Windows\\System32\\adhsvc.dll" (normalized: "c:\\windows\\system32\\adhsvc.dll") Region: id = 3943 start_va = 0x7ffa4fa00000 end_va = 0x7ffa4fa24fff monitored = 0 entry_point = 0x7ffa4fa05ca0 region_type = mapped_file name = "httpprxm.dll" filename = "\\Windows\\System32\\httpprxm.dll" (normalized: "c:\\windows\\system32\\httpprxm.dll") Region: id = 3944 start_va = 0x7ffa4fb40000 end_va = 0x7ffa4fbe2fff monitored = 0 entry_point = 0x7ffa4fb42c10 region_type = mapped_file name = "clusapi.dll" filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll") Region: id = 3945 start_va = 0x7ffa4fbf0000 end_va = 0x7ffa4fc41fff monitored = 0 entry_point = 0x7ffa4fbf5770 region_type = mapped_file name = "resutils.dll" filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll") Region: id = 3946 start_va = 0x7ffa4fc50000 end_va = 0x7ffa4fc7dfff monitored = 1 entry_point = 0x7ffa4fc52300 region_type = mapped_file name = "wmidcom.dll" filename = "\\Windows\\System32\\wmidcom.dll" (normalized: "c:\\windows\\system32\\wmidcom.dll") Region: id = 3947 start_va = 0x7ffa4fc80000 end_va = 0x7ffa4fcddfff monitored = 0 entry_point = 0x7ffa4fc85080 region_type = mapped_file name = "miutils.dll" filename = "\\Windows\\System32\\miutils.dll" (normalized: "c:\\windows\\system32\\miutils.dll") Region: id = 3948 start_va = 0x7ffa4fce0000 end_va = 0x7ffa4fcfffff monitored = 0 entry_point = 0x7ffa4fce1f50 region_type = mapped_file name = "mi.dll" filename = "\\Windows\\System32\\mi.dll" (normalized: "c:\\windows\\system32\\mi.dll") Region: id = 3949 start_va = 0x7ffa4fd00000 end_va = 0x7ffa4fd08fff monitored = 0 entry_point = 0x7ffa4fd018f0 region_type = mapped_file name = "sscoreext.dll" filename = "\\Windows\\System32\\sscoreext.dll" (normalized: "c:\\windows\\system32\\sscoreext.dll") Region: id = 3950 start_va = 0x7ffa4fd10000 end_va = 0x7ffa4fd20fff monitored = 0 entry_point = 0x7ffa4fd11d30 region_type = mapped_file name = "sscore.dll" filename = "\\Windows\\System32\\sscore.dll" (normalized: "c:\\windows\\system32\\sscore.dll") Region: id = 3951 start_va = 0x7ffa4fd80000 end_va = 0x7ffa4fdc0fff monitored = 0 entry_point = 0x7ffa4fd83750 region_type = mapped_file name = "sqmapi.dll" filename = "\\Windows\\System32\\sqmapi.dll" (normalized: "c:\\windows\\system32\\sqmapi.dll") Region: id = 3952 start_va = 0x7ffa4fdd0000 end_va = 0x7ffa4fec2fff monitored = 0 entry_point = 0x7ffa4fdf5d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 3953 start_va = 0x7ffa4ff80000 end_va = 0x7ffa4ffcbfff monitored = 0 entry_point = 0x7ffa4ff95310 region_type = mapped_file name = "srvsvc.dll" filename = "\\Windows\\System32\\srvsvc.dll" (normalized: "c:\\windows\\system32\\srvsvc.dll") Region: id = 3954 start_va = 0x7ffa50560000 end_va = 0x7ffa50577fff monitored = 0 entry_point = 0x7ffa50562000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 3955 start_va = 0x7ffa50580000 end_va = 0x7ffa50701fff monitored = 0 entry_point = 0x7ffa505982a0 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 3956 start_va = 0x7ffa50770000 end_va = 0x7ffa507eefff monitored = 0 entry_point = 0x7ffa50787110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 3957 start_va = 0x7ffa507f0000 end_va = 0x7ffa5082bfff monitored = 0 entry_point = 0x7ffa507f6aa0 region_type = mapped_file name = "wmisvc.dll" filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wmisvc.dll") Region: id = 3958 start_va = 0x7ffa50880000 end_va = 0x7ffa508b4fff monitored = 0 entry_point = 0x7ffa5088a270 region_type = mapped_file name = "fwpolicyiomgr.dll" filename = "\\Windows\\System32\\fwpolicyiomgr.dll" (normalized: "c:\\windows\\system32\\fwpolicyiomgr.dll") Region: id = 3959 start_va = 0x7ffa509a0000 end_va = 0x7ffa509dffff monitored = 0 entry_point = 0x7ffa509b6c60 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 3960 start_va = 0x7ffa509e0000 end_va = 0x7ffa509e8fff monitored = 0 entry_point = 0x7ffa509e21d0 region_type = mapped_file name = "httpprxc.dll" filename = "\\Windows\\System32\\httpprxc.dll" (normalized: "c:\\windows\\system32\\httpprxc.dll") Region: id = 3961 start_va = 0x7ffa51510000 end_va = 0x7ffa515a3fff monitored = 0 entry_point = 0x7ffa51549210 region_type = mapped_file name = "staterepository.core.dll" filename = "\\Windows\\System32\\StateRepository.Core.dll" (normalized: "c:\\windows\\system32\\staterepository.core.dll") Region: id = 3962 start_va = 0x7ffa515b0000 end_va = 0x7ffa51852fff monitored = 0 entry_point = 0x7ffa515d6190 region_type = mapped_file name = "windows.staterepository.dll" filename = "\\Windows\\System32\\Windows.StateRepository.dll" (normalized: "c:\\windows\\system32\\windows.staterepository.dll") Region: id = 3963 start_va = 0x7ffa537a0000 end_va = 0x7ffa537e3fff monitored = 0 entry_point = 0x7ffa537ac010 region_type = mapped_file name = "execmodelclient.dll" filename = "\\Windows\\System32\\ExecModelClient.dll" (normalized: "c:\\windows\\system32\\execmodelclient.dll") Region: id = 3964 start_va = 0x7ffa53cd0000 end_va = 0x7ffa53ce1fff monitored = 0 entry_point = 0x7ffa53cd3580 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 3965 start_va = 0x7ffa53d80000 end_va = 0x7ffa53d90fff monitored = 0 entry_point = 0x7ffa53d828d0 region_type = mapped_file name = "credentialmigrationhandler.dll" filename = "\\Windows\\System32\\CredentialMigrationHandler.dll" (normalized: "c:\\windows\\system32\\credentialmigrationhandler.dll") Region: id = 3966 start_va = 0x7ffa54070000 end_va = 0x7ffa5410afff monitored = 0 entry_point = 0x7ffa54077220 region_type = mapped_file name = "settingsync.dll" filename = "\\Windows\\System32\\SettingSync.dll" (normalized: "c:\\windows\\system32\\settingsync.dll") Region: id = 3967 start_va = 0x7ffa543e0000 end_va = 0x7ffa543e9fff monitored = 0 entry_point = 0x7ffa543e14c0 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 3968 start_va = 0x7ffa544b0000 end_va = 0x7ffa5452ffff monitored = 0 entry_point = 0x7ffa544dd280 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 3969 start_va = 0x7ffa54530000 end_va = 0x7ffa5453dfff monitored = 0 entry_point = 0x7ffa54531460 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 3970 start_va = 0x7ffa54540000 end_va = 0x7ffa54554fff monitored = 0 entry_point = 0x7ffa54542dc0 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll") Region: id = 3971 start_va = 0x7ffa545f0000 end_va = 0x7ffa545fffff monitored = 0 entry_point = 0x7ffa545f1700 region_type = mapped_file name = "proximityservicepal.dll" filename = "\\Windows\\System32\\ProximityServicePal.dll" (normalized: "c:\\windows\\system32\\proximityservicepal.dll") Region: id = 3972 start_va = 0x7ffa54600000 end_va = 0x7ffa54608fff monitored = 0 entry_point = 0x7ffa54601ed0 region_type = mapped_file name = "proximitycommonpal.dll" filename = "\\Windows\\System32\\ProximityCommonPal.dll" (normalized: "c:\\windows\\system32\\proximitycommonpal.dll") Region: id = 3973 start_va = 0x7ffa54610000 end_va = 0x7ffa5463cfff monitored = 0 entry_point = 0x7ffa54612290 region_type = mapped_file name = "proximitycommon.dll" filename = "\\Windows\\System32\\ProximityCommon.dll" (normalized: "c:\\windows\\system32\\proximitycommon.dll") Region: id = 3974 start_va = 0x7ffa54640000 end_va = 0x7ffa54691fff monitored = 0 entry_point = 0x7ffa546438e0 region_type = mapped_file name = "proximityservice.dll" filename = "\\Windows\\System32\\ProximityService.dll" (normalized: "c:\\windows\\system32\\proximityservice.dll") Region: id = 3975 start_va = 0x7ffa546a0000 end_va = 0x7ffa5475ffff monitored = 0 entry_point = 0x7ffa546cfd20 region_type = mapped_file name = "fveapi.dll" filename = "\\Windows\\System32\\fveapi.dll" (normalized: "c:\\windows\\system32\\fveapi.dll") Region: id = 3976 start_va = 0x7ffa54760000 end_va = 0x7ffa547f9fff monitored = 0 entry_point = 0x7ffa5477ada0 region_type = mapped_file name = "shsvcs.dll" filename = "\\Windows\\System32\\shsvcs.dll" (normalized: "c:\\windows\\system32\\shsvcs.dll") Region: id = 3977 start_va = 0x7ffa54900000 end_va = 0x7ffa54966fff monitored = 0 entry_point = 0x7ffa549063e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 3978 start_va = 0x7ffa549c0000 end_va = 0x7ffa549cafff monitored = 0 entry_point = 0x7ffa549c1d30 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 3979 start_va = 0x7ffa54a90000 end_va = 0x7ffa54aa9fff monitored = 0 entry_point = 0x7ffa54a92430 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 3980 start_va = 0x7ffa54ab0000 end_va = 0x7ffa54ac5fff monitored = 0 entry_point = 0x7ffa54ab19f0 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 3981 start_va = 0x7ffa54b10000 end_va = 0x7ffa54b50fff monitored = 0 entry_point = 0x7ffa54b14840 region_type = mapped_file name = "usermgrproxy.dll" filename = "\\Windows\\System32\\UserMgrProxy.dll" (normalized: "c:\\windows\\system32\\usermgrproxy.dll") Region: id = 3982 start_va = 0x7ffa54b60000 end_va = 0x7ffa54b97fff monitored = 0 entry_point = 0x7ffa54b78cc0 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 3983 start_va = 0x7ffa54c50000 end_va = 0x7ffa54cfdfff monitored = 0 entry_point = 0x7ffa54c680c0 region_type = mapped_file name = "windows.networking.connectivity.dll" filename = "\\Windows\\System32\\Windows.Networking.Connectivity.dll" (normalized: "c:\\windows\\system32\\windows.networking.connectivity.dll") Region: id = 3984 start_va = 0x7ffa54d00000 end_va = 0x7ffa54d11fff monitored = 0 entry_point = 0x7ffa54d09260 region_type = mapped_file name = "rilproxy.dll" filename = "\\Windows\\System32\\rilproxy.dll" (normalized: "c:\\windows\\system32\\rilproxy.dll") Region: id = 3985 start_va = 0x7ffa54d20000 end_va = 0x7ffa54dd0fff monitored = 0 entry_point = 0x7ffa54d988b0 region_type = mapped_file name = "cellularapi.dll" filename = "\\Windows\\System32\\CellularAPI.dll" (normalized: "c:\\windows\\system32\\cellularapi.dll") Region: id = 3986 start_va = 0x7ffa54de0000 end_va = 0x7ffa54debfff monitored = 0 entry_point = 0x7ffa54de2830 region_type = mapped_file name = "bi.dll" filename = "\\Windows\\System32\\bi.dll" (normalized: "c:\\windows\\system32\\bi.dll") Region: id = 3987 start_va = 0x7ffa54df0000 end_va = 0x7ffa54e14fff monitored = 0 entry_point = 0x7ffa54e02f20 region_type = mapped_file name = "wificonnapi.dll" filename = "\\Windows\\System32\\wificonnapi.dll" (normalized: "c:\\windows\\system32\\wificonnapi.dll") Region: id = 3988 start_va = 0x7ffa54e20000 end_va = 0x7ffa54e30fff monitored = 0 entry_point = 0x7ffa54e27ea0 region_type = mapped_file name = "dcpapi.dll" filename = "\\Windows\\System32\\dcpapi.dll" (normalized: "c:\\windows\\system32\\dcpapi.dll") Region: id = 3989 start_va = 0x7ffa54f50000 end_va = 0x7ffa54f69fff monitored = 0 entry_point = 0x7ffa54f52cf0 region_type = mapped_file name = "locationpelegacywinlocation.dll" filename = "\\Windows\\System32\\LocationPeLegacyWinLocation.dll" (normalized: "c:\\windows\\system32\\locationpelegacywinlocation.dll") Region: id = 3990 start_va = 0x7ffa54f70000 end_va = 0x7ffa54f7bfff monitored = 0 entry_point = 0x7ffa54f714d0 region_type = mapped_file name = "locationframeworkps.dll" filename = "\\Windows\\System32\\LocationFrameworkPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkps.dll") Region: id = 3991 start_va = 0x7ffa54f80000 end_va = 0x7ffa54fd4fff monitored = 0 entry_point = 0x7ffa54f83fb0 region_type = mapped_file name = "policymanager.dll" filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll") Region: id = 3992 start_va = 0x7ffa54fe0000 end_va = 0x7ffa55016fff monitored = 0 entry_point = 0x7ffa54fe6020 region_type = mapped_file name = "gnssadapter.dll" filename = "\\Windows\\System32\\GnssAdapter.dll" (normalized: "c:\\windows\\system32\\gnssadapter.dll") Region: id = 3993 start_va = 0x7ffa55020000 end_va = 0x7ffa5503ffff monitored = 0 entry_point = 0x7ffa550239a0 region_type = mapped_file name = "locationwinpalmisc.dll" filename = "\\Windows\\System32\\LocationWinPalMisc.dll" (normalized: "c:\\windows\\system32\\locationwinpalmisc.dll") Region: id = 3994 start_va = 0x7ffa55070000 end_va = 0x7ffa55137fff monitored = 0 entry_point = 0x7ffa550b13f0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 3995 start_va = 0x7ffa55140000 end_va = 0x7ffa551a0fff monitored = 0 entry_point = 0x7ffa55144b50 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 3996 start_va = 0x7ffa551b0000 end_va = 0x7ffa5532bfff monitored = 0 entry_point = 0x7ffa55201650 region_type = mapped_file name = "locationframework.dll" filename = "\\Windows\\System32\\LocationFramework.dll" (normalized: "c:\\windows\\system32\\locationframework.dll") Region: id = 3997 start_va = 0x7ffa55330000 end_va = 0x7ffa5533afff monitored = 0 entry_point = 0x7ffa55331770 region_type = mapped_file name = "lfsvc.dll" filename = "\\Windows\\System32\\lfsvc.dll" (normalized: "c:\\windows\\system32\\lfsvc.dll") Region: id = 3998 start_va = 0x7ffa55340000 end_va = 0x7ffa55425fff monitored = 0 entry_point = 0x7ffa5535cf10 region_type = mapped_file name = "usermgr.dll" filename = "\\Windows\\System32\\usermgr.dll" (normalized: "c:\\windows\\system32\\usermgr.dll") Region: id = 3999 start_va = 0x7ffa554a0000 end_va = 0x7ffa554b3fff monitored = 0 entry_point = 0x7ffa554a2d50 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 4000 start_va = 0x7ffa55a10000 end_va = 0x7ffa55a28fff monitored = 0 entry_point = 0x7ffa55a14520 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 4001 start_va = 0x7ffa56190000 end_va = 0x7ffa561a6fff monitored = 0 entry_point = 0x7ffa56195630 region_type = mapped_file name = "sens.dll" filename = "\\Windows\\System32\\Sens.dll" (normalized: "c:\\windows\\system32\\sens.dll") Region: id = 4002 start_va = 0x7ffa561b0000 end_va = 0x7ffa561ddfff monitored = 0 entry_point = 0x7ffa561b7550 region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll") Region: id = 4003 start_va = 0x7ffa562d0000 end_va = 0x7ffa562dcfff monitored = 0 entry_point = 0x7ffa562d2ca0 region_type = mapped_file name = "csystemeventsbrokerclient.dll" filename = "\\Windows\\System32\\CSystemEventsBrokerClient.dll" (normalized: "c:\\windows\\system32\\csystemeventsbrokerclient.dll") Region: id = 4004 start_va = 0x7ffa562e0000 end_va = 0x7ffa5630efff monitored = 0 entry_point = 0x7ffa562e8910 region_type = mapped_file name = "wptaskscheduler.dll" filename = "\\Windows\\System32\\WPTaskScheduler.dll" (normalized: "c:\\windows\\system32\\wptaskscheduler.dll") Region: id = 4005 start_va = 0x7ffa56310000 end_va = 0x7ffa56325fff monitored = 0 entry_point = 0x7ffa56311b60 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 4006 start_va = 0x7ffa56330000 end_va = 0x7ffa56371fff monitored = 0 entry_point = 0x7ffa563327d0 region_type = mapped_file name = "mstask.dll" filename = "\\Windows\\System32\\mstask.dll" (normalized: "c:\\windows\\system32\\mstask.dll") Region: id = 4007 start_va = 0x7ffa563c0000 end_va = 0x7ffa56451fff monitored = 0 entry_point = 0x7ffa5640a780 region_type = mapped_file name = "msvcp110_win.dll" filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll") Region: id = 4008 start_va = 0x7ffa564e0000 end_va = 0x7ffa564effff monitored = 0 entry_point = 0x7ffa564e2c60 region_type = mapped_file name = "usermgrcli.dll" filename = "\\Windows\\System32\\usermgrcli.dll" (normalized: "c:\\windows\\system32\\usermgrcli.dll") Region: id = 4009 start_va = 0x7ffa566b0000 end_va = 0x7ffa56a31fff monitored = 0 entry_point = 0x7ffa56701220 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 4010 start_va = 0x7ffa56a40000 end_va = 0x7ffa56b75fff monitored = 0 entry_point = 0x7ffa56a6f350 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 4011 start_va = 0x7ffa57bc0000 end_va = 0x7ffa57c68fff monitored = 0 entry_point = 0x7ffa57be9010 region_type = mapped_file name = "windows.ui.dll" filename = "\\Windows\\System32\\Windows.UI.dll" (normalized: "c:\\windows\\system32\\windows.ui.dll") Region: id = 4012 start_va = 0x7ffa57c70000 end_va = 0x7ffa57d7dfff monitored = 0 entry_point = 0x7ffa57cbeaa0 region_type = mapped_file name = "mrmcorer.dll" filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll") Region: id = 4013 start_va = 0x7ffa58080000 end_va = 0x7ffa580f9fff monitored = 0 entry_point = 0x7ffa580a7630 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 4014 start_va = 0x7ffa58120000 end_va = 0x7ffa5818dfff monitored = 0 entry_point = 0x7ffa58127f60 region_type = mapped_file name = "taskcomp.dll" filename = "\\Windows\\System32\\taskcomp.dll" (normalized: "c:\\windows\\system32\\taskcomp.dll") Region: id = 4015 start_va = 0x7ffa58190000 end_va = 0x7ffa581a2fff monitored = 0 entry_point = 0x7ffa581957f0 region_type = mapped_file name = "themeservice.dll" filename = "\\Windows\\System32\\themeservice.dll" (normalized: "c:\\windows\\system32\\themeservice.dll") Region: id = 4016 start_va = 0x7ffa581b0000 end_va = 0x7ffa581c0fff monitored = 0 entry_point = 0x7ffa581b3320 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 4017 start_va = 0x7ffa581d0000 end_va = 0x7ffa5820dfff monitored = 0 entry_point = 0x7ffa581da050 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 4018 start_va = 0x7ffa58210000 end_va = 0x7ffa58236fff monitored = 0 entry_point = 0x7ffa58213bf0 region_type = mapped_file name = "profsvcext.dll" filename = "\\Windows\\System32\\profsvcext.dll" (normalized: "c:\\windows\\system32\\profsvcext.dll") Region: id = 4019 start_va = 0x7ffa58240000 end_va = 0x7ffa58280fff monitored = 0 entry_point = 0x7ffa58257eb0 region_type = mapped_file name = "ubpm.dll" filename = "\\Windows\\System32\\ubpm.dll" (normalized: "c:\\windows\\system32\\ubpm.dll") Region: id = 4020 start_va = 0x7ffa58290000 end_va = 0x7ffa5838bfff monitored = 0 entry_point = 0x7ffa582c6df0 region_type = mapped_file name = "schedsvc.dll" filename = "\\Windows\\System32\\schedsvc.dll" (normalized: "c:\\windows\\system32\\schedsvc.dll") Region: id = 4021 start_va = 0x7ffa58390000 end_va = 0x7ffa583e4fff monitored = 0 entry_point = 0x7ffa5839fc00 region_type = mapped_file name = "profsvc.dll" filename = "\\Windows\\System32\\profsvc.dll" (normalized: "c:\\windows\\system32\\profsvc.dll") Region: id = 4022 start_va = 0x7ffa583f0000 end_va = 0x7ffa58453fff monitored = 0 entry_point = 0x7ffa58405ae0 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 4023 start_va = 0x7ffa58460000 end_va = 0x7ffa5851efff monitored = 0 entry_point = 0x7ffa58481c50 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 4024 start_va = 0x7ffa58710000 end_va = 0x7ffa58745fff monitored = 0 entry_point = 0x7ffa58720070 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 4025 start_va = 0x7ffa58fa0000 end_va = 0x7ffa58fa9fff monitored = 0 entry_point = 0x7ffa58fa1660 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 4026 start_va = 0x7ffa58fb0000 end_va = 0x7ffa58fc7fff monitored = 0 entry_point = 0x7ffa58fb5910 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 4027 start_va = 0x7ffa58fd0000 end_va = 0x7ffa5911cfff monitored = 0 entry_point = 0x7ffa59013da0 region_type = mapped_file name = "gpsvc.dll" filename = "\\Windows\\System32\\gpsvc.dll" (normalized: "c:\\windows\\system32\\gpsvc.dll") Region: id = 4028 start_va = 0x7ffa59380000 end_va = 0x7ffa59387fff monitored = 0 entry_point = 0x7ffa593813e0 region_type = mapped_file name = "dabapi.dll" filename = "\\Windows\\System32\\dabapi.dll" (normalized: "c:\\windows\\system32\\dabapi.dll") Region: id = 4029 start_va = 0x7ffa59740000 end_va = 0x7ffa597fdfff monitored = 0 entry_point = 0x7ffa59782d40 region_type = mapped_file name = "coremessaging.dll" filename = "\\Windows\\System32\\CoreMessaging.dll" (normalized: "c:\\windows\\system32\\coremessaging.dll") Region: id = 4030 start_va = 0x7ffa59ca0000 end_va = 0x7ffa59cdffff monitored = 0 entry_point = 0x7ffa59cb1960 region_type = mapped_file name = "brokerlib.dll" filename = "\\Windows\\System32\\BrokerLib.dll" (normalized: "c:\\windows\\system32\\brokerlib.dll") Region: id = 4031 start_va = 0x7ffa59f00000 end_va = 0x7ffa5a392fff monitored = 0 entry_point = 0x7ffa59f0f760 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 4032 start_va = 0x7ffa5a3a0000 end_va = 0x7ffa5a406fff monitored = 0 entry_point = 0x7ffa5a3be710 region_type = mapped_file name = "bcp47langs.dll" filename = "\\Windows\\System32\\BCP47Langs.dll" (normalized: "c:\\windows\\system32\\bcp47langs.dll") Region: id = 4033 start_va = 0x7ffa5a460000 end_va = 0x7ffa5a5e5fff monitored = 0 entry_point = 0x7ffa5a4ad700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 4034 start_va = 0x7ffa5a5f0000 end_va = 0x7ffa5a60bfff monitored = 0 entry_point = 0x7ffa5a5f37a0 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 4035 start_va = 0x7ffa5a610000 end_va = 0x7ffa5a641fff monitored = 0 entry_point = 0x7ffa5a61b0c0 region_type = mapped_file name = "shacct.dll" filename = "\\Windows\\System32\\shacct.dll" (normalized: "c:\\windows\\system32\\shacct.dll") Region: id = 4036 start_va = 0x7ffa5a650000 end_va = 0x7ffa5a662fff monitored = 0 entry_point = 0x7ffa5a652760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 4037 start_va = 0x7ffa5a8a0000 end_va = 0x7ffa5a8c6fff monitored = 0 entry_point = 0x7ffa5a8a7940 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 4038 start_va = 0x7ffa5a8d0000 end_va = 0x7ffa5a979fff monitored = 0 entry_point = 0x7ffa5a8f7910 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 4039 start_va = 0x7ffa5a980000 end_va = 0x7ffa5aa7ffff monitored = 0 entry_point = 0x7ffa5a9c0f80 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 4040 start_va = 0x7ffa5ab10000 end_va = 0x7ffa5ab1bfff monitored = 0 entry_point = 0x7ffa5ab12480 region_type = mapped_file name = "sysntfy.dll" filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll") Region: id = 4041 start_va = 0x7ffa5ace0000 end_va = 0x7ffa5ad11fff monitored = 0 entry_point = 0x7ffa5acf2340 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll") Region: id = 4042 start_va = 0x7ffa5ae50000 end_va = 0x7ffa5ae5bfff monitored = 0 entry_point = 0x7ffa5ae52790 region_type = mapped_file name = "hid.dll" filename = "\\Windows\\System32\\hid.dll" (normalized: "c:\\windows\\system32\\hid.dll") Region: id = 4043 start_va = 0x7ffa5ae60000 end_va = 0x7ffa5ae83fff monitored = 0 entry_point = 0x7ffa5ae63260 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 4044 start_va = 0x7ffa5b000000 end_va = 0x7ffa5b0f3fff monitored = 0 entry_point = 0x7ffa5b00a960 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 4045 start_va = 0x7ffa5b100000 end_va = 0x7ffa5b148fff monitored = 0 entry_point = 0x7ffa5b10a090 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 4046 start_va = 0x7ffa5b270000 end_va = 0x7ffa5b27bfff monitored = 0 entry_point = 0x7ffa5b2727e0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 4047 start_va = 0x7ffa5b350000 end_va = 0x7ffa5b380fff monitored = 0 entry_point = 0x7ffa5b357d10 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 4048 start_va = 0x7ffa5b390000 end_va = 0x7ffa5b3e5fff monitored = 0 entry_point = 0x7ffa5b3a0bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 4049 start_va = 0x7ffa5b410000 end_va = 0x7ffa5b489fff monitored = 0 entry_point = 0x7ffa5b431a50 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 4050 start_va = 0x7ffa5b4d0000 end_va = 0x7ffa5b503fff monitored = 0 entry_point = 0x7ffa5b4eae70 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 4051 start_va = 0x7ffa5b510000 end_va = 0x7ffa5b519fff monitored = 0 entry_point = 0x7ffa5b511830 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll") Region: id = 4052 start_va = 0x7ffa5b620000 end_va = 0x7ffa5b63efff monitored = 0 entry_point = 0x7ffa5b625d30 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 4053 start_va = 0x7ffa5b790000 end_va = 0x7ffa5b7ebfff monitored = 0 entry_point = 0x7ffa5b7a6f70 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 4054 start_va = 0x7ffa5b840000 end_va = 0x7ffa5b856fff monitored = 0 entry_point = 0x7ffa5b8479d0 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 4055 start_va = 0x7ffa5b960000 end_va = 0x7ffa5b96afff monitored = 0 entry_point = 0x7ffa5b9619a0 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 4056 start_va = 0x7ffa5b9a0000 end_va = 0x7ffa5b9c0fff monitored = 0 entry_point = 0x7ffa5b9b0250 region_type = mapped_file name = "joinutil.dll" filename = "\\Windows\\System32\\joinutil.dll" (normalized: "c:\\windows\\system32\\joinutil.dll") Region: id = 4057 start_va = 0x7ffa5b9f0000 end_va = 0x7ffa5ba29fff monitored = 0 entry_point = 0x7ffa5b9f8d20 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll") Region: id = 4058 start_va = 0x7ffa5ba30000 end_va = 0x7ffa5ba56fff monitored = 0 entry_point = 0x7ffa5ba40aa0 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 4059 start_va = 0x7ffa5bb40000 end_va = 0x7ffa5bb6cfff monitored = 0 entry_point = 0x7ffa5bb59d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 4060 start_va = 0x7ffa5bcd0000 end_va = 0x7ffa5bce8fff monitored = 0 entry_point = 0x7ffa5bcd5e10 region_type = mapped_file name = "eventaggregation.dll" filename = "\\Windows\\System32\\EventAggregation.dll" (normalized: "c:\\windows\\system32\\eventaggregation.dll") Region: id = 4061 start_va = 0x7ffa5bcf0000 end_va = 0x7ffa5bd18fff monitored = 0 entry_point = 0x7ffa5bd04530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 4062 start_va = 0x7ffa5bd20000 end_va = 0x7ffa5bdb8fff monitored = 0 entry_point = 0x7ffa5bd4f4e0 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 4063 start_va = 0x7ffa5be60000 end_va = 0x7ffa5beaafff monitored = 0 entry_point = 0x7ffa5be635f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 4064 start_va = 0x7ffa5beb0000 end_va = 0x7ffa5bebefff monitored = 0 entry_point = 0x7ffa5beb3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 4065 start_va = 0x7ffa5bec0000 end_va = 0x7ffa5bed3fff monitored = 0 entry_point = 0x7ffa5bec52e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 4066 start_va = 0x7ffa5bee0000 end_va = 0x7ffa5beeffff monitored = 0 entry_point = 0x7ffa5bee56e0 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 4067 start_va = 0x7ffa5bef0000 end_va = 0x7ffa5bfa4fff monitored = 0 entry_point = 0x7ffa5bf322e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 4068 start_va = 0x7ffa5bfb0000 end_va = 0x7ffa5bff2fff monitored = 0 entry_point = 0x7ffa5bfc4b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 4069 start_va = 0x7ffa5c000000 end_va = 0x7ffa5c1c6fff monitored = 0 entry_point = 0x7ffa5c05db80 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 4070 start_va = 0x7ffa5c1d0000 end_va = 0x7ffa5c255fff monitored = 0 entry_point = 0x7ffa5c1dd8f0 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 4071 start_va = 0x7ffa5c260000 end_va = 0x7ffa5c8a3fff monitored = 0 entry_point = 0x7ffa5c4264b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 4072 start_va = 0x7ffa5c8b0000 end_va = 0x7ffa5c8c6fff monitored = 0 entry_point = 0x7ffa5c8b1390 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 4073 start_va = 0x7ffa5c8d0000 end_va = 0x7ffa5cab7fff monitored = 0 entry_point = 0x7ffa5c8fba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 4074 start_va = 0x7ffa5cac0000 end_va = 0x7ffa5cb14fff monitored = 0 entry_point = 0x7ffa5cad7970 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 4075 start_va = 0x7ffa5cbd0000 end_va = 0x7ffa5cc39fff monitored = 0 entry_point = 0x7ffa5cc06d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 4076 start_va = 0x7ffa5cc40000 end_va = 0x7ffa5cc91fff monitored = 0 entry_point = 0x7ffa5cc4f530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 4077 start_va = 0x7ffa5ccb0000 end_va = 0x7ffa5cdcbfff monitored = 0 entry_point = 0x7ffa5ccf02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 4078 start_va = 0x7ffa5cdd0000 end_va = 0x7ffa5cdd7fff monitored = 0 entry_point = 0x7ffa5cdd1ea0 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 4079 start_va = 0x7ffa5d050000 end_va = 0x7ffa5d1d5fff monitored = 0 entry_point = 0x7ffa5d09ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 4080 start_va = 0x7ffa5d1e0000 end_va = 0x7ffa5d335fff monitored = 0 entry_point = 0x7ffa5d1ea8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 4081 start_va = 0x7ffa5d340000 end_va = 0x7ffa5d768fff monitored = 0 entry_point = 0x7ffa5d368740 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 4082 start_va = 0x7ffa5d770000 end_va = 0x7ffa5d7cbfff monitored = 0 entry_point = 0x7ffa5d78b720 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 4083 start_va = 0x7ffa5d7d0000 end_va = 0x7ffa5d876fff monitored = 0 entry_point = 0x7ffa5d7db4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 4084 start_va = 0x7ffa5d880000 end_va = 0x7ffa5d91cfff monitored = 0 entry_point = 0x7ffa5d8878a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 4085 start_va = 0x7ffa5d920000 end_va = 0x7ffa5d9e0fff monitored = 0 entry_point = 0x7ffa5d940da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 4086 start_va = 0x7ffa5d9f0000 end_va = 0x7ffa5db32fff monitored = 0 entry_point = 0x7ffa5da18210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 4087 start_va = 0x7ffa5db40000 end_va = 0x7ffa5db9afff monitored = 0 entry_point = 0x7ffa5db538b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 4088 start_va = 0x7ffa5dba0000 end_va = 0x7ffa5dc4cfff monitored = 0 entry_point = 0x7ffa5dbb81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 4089 start_va = 0x7ffa5dc50000 end_va = 0x7ffa5deccfff monitored = 0 entry_point = 0x7ffa5dd24970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 4090 start_va = 0x7ffa5df10000 end_va = 0x7ffa5dfb6fff monitored = 0 entry_point = 0x7ffa5df258d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 4091 start_va = 0x7ffa5e040000 end_va = 0x7ffa5e0aafff monitored = 0 entry_point = 0x7ffa5e0590c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 4092 start_va = 0x7ffa5e0b0000 end_va = 0x7ffa5f60efff monitored = 0 entry_point = 0x7ffa5e2111f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 4093 start_va = 0x7ffa5f840000 end_va = 0x7ffa5fa00fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 4095 start_va = 0x7300000 end_va = 0x73fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007300000" filename = "" Region: id = 4096 start_va = 0x7400000 end_va = 0x74fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007400000" filename = "" Region: id = 4097 start_va = 0x7500000 end_va = 0x75fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007500000" filename = "" Region: id = 4098 start_va = 0x7600000 end_va = 0x76fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007600000" filename = "" Region: id = 4463 start_va = 0x7000000 end_va = 0x7109fff monitored = 0 entry_point = 0x7067960 region_type = mapped_file name = "sysmain.dll" filename = "\\Windows\\System32\\sysmain.dll" (normalized: "c:\\windows\\system32\\sysmain.dll") Region: id = 4464 start_va = 0x400000 end_va = 0x405fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.dll.mui" filename = "\\Windows\\System32\\en-US\\sysmain.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\sysmain.dll.mui") Region: id = 4465 start_va = 0x7000000 end_va = 0x7109fff monitored = 0 entry_point = 0x7067960 region_type = mapped_file name = "sysmain.dll" filename = "\\Windows\\System32\\sysmain.dll" (normalized: "c:\\windows\\system32\\sysmain.dll") Region: id = 4466 start_va = 0x400000 end_va = 0x405fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.dll.mui" filename = "\\Windows\\System32\\en-US\\sysmain.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\sysmain.dll.mui") Region: id = 4841 start_va = 0x400000 end_va = 0x405fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4849 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4850 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4852 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4853 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4854 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4855 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4856 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4857 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4858 start_va = 0x7000000 end_va = 0x71fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007000000" filename = "" Region: id = 4859 start_va = 0x7000000 end_va = 0x70fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007000000" filename = "" Region: id = 4860 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4861 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4862 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4863 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4864 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4865 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4866 start_va = 0x7600000 end_va = 0x77fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007600000" filename = "" Region: id = 4867 start_va = 0x7600000 end_va = 0x76fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007600000" filename = "" Region: id = 4868 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4869 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4870 start_va = 0x400000 end_va = 0x403fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4871 start_va = 0x400000 end_va = 0x404fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4872 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4873 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4874 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4875 start_va = 0x7700000 end_va = 0x78fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007700000" filename = "" Region: id = 4876 start_va = 0x7700000 end_va = 0x77fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007700000" filename = "" Region: id = 4877 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4878 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4879 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4880 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4881 start_va = 0x7800000 end_va = 0x79fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007800000" filename = "" Region: id = 4882 start_va = 0x7800000 end_va = 0x78fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007800000" filename = "" Region: id = 4883 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4884 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4885 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4886 start_va = 0x7900000 end_va = 0x79fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007900000" filename = "" Region: id = 4887 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4888 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4889 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4890 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4891 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4892 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4893 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4894 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4895 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4896 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4897 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4898 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4899 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4900 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4901 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4902 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4903 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4904 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4905 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4906 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4907 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4908 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4909 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4910 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4911 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4912 start_va = 0x7900000 end_va = 0x7afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007900000" filename = "" Region: id = 4913 start_va = 0x7900000 end_va = 0x79fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007900000" filename = "" Region: id = 4914 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4915 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4916 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4917 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4918 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4919 start_va = 0x7a00000 end_va = 0x7bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007a00000" filename = "" Region: id = 4920 start_va = 0x7a00000 end_va = 0x7afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007a00000" filename = "" Region: id = 4921 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4922 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4924 start_va = 0x400000 end_va = 0x402fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4925 start_va = 0x400000 end_va = 0x407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4932 start_va = 0x400000 end_va = 0x400fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 4941 start_va = 0x7b00000 end_va = 0x7bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007b00000" filename = "" Region: id = 4942 start_va = 0x7c00000 end_va = 0x7cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c00000" filename = "" Region: id = 4943 start_va = 0x400000 end_va = 0x400fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 4944 start_va = 0x7d00000 end_va = 0x7dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007d00000" filename = "" Region: id = 4949 start_va = 0x7ffa55680000 end_va = 0x7ffa5579cfff monitored = 0 entry_point = 0x7ffa556afe60 region_type = mapped_file name = "qmgr.dll" filename = "\\Windows\\System32\\qmgr.dll" (normalized: "c:\\windows\\system32\\qmgr.dll") Region: id = 4950 start_va = 0x39c0000 end_va = 0x3a3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000039c0000" filename = "" Region: id = 4951 start_va = 0x7ffa59e90000 end_va = 0x7ffa59e9afff monitored = 0 entry_point = 0x7ffa59e91de0 region_type = mapped_file name = "bitsperf.dll" filename = "\\Windows\\System32\\bitsperf.dll" (normalized: "c:\\windows\\system32\\bitsperf.dll") Region: id = 4952 start_va = 0x7100000 end_va = 0x71fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007100000" filename = "" Region: id = 4953 start_va = 0x7e00000 end_va = 0x7efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e00000" filename = "" Region: id = 4954 start_va = 0x7f00000 end_va = 0x7ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007f00000" filename = "" Region: id = 4955 start_va = 0x410000 end_va = 0x466fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000410000" filename = "" Region: id = 4956 start_va = 0x8000000 end_va = 0x81fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008000000" filename = "" Region: id = 4957 start_va = 0x8000000 end_va = 0x80fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008000000" filename = "" Region: id = 4958 start_va = 0x410000 end_va = 0x410fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000410000" filename = "" Region: id = 4959 start_va = 0x460000 end_va = 0x466fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 4961 start_va = 0x7ffa57e50000 end_va = 0x7ffa57e6efff monitored = 0 entry_point = 0x7ffa57e54960 region_type = mapped_file name = "ncprov.dll" filename = "\\Windows\\System32\\wbem\\NCProv.dll" (normalized: "c:\\windows\\system32\\wbem\\ncprov.dll") Region: id = 4962 start_va = 0x8100000 end_va = 0x81fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008100000" filename = "" Region: id = 4963 start_va = 0x8200000 end_va = 0x82fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008200000" filename = "" Region: id = 4964 start_va = 0x8300000 end_va = 0x83fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008300000" filename = "" Region: id = 4965 start_va = 0x7ffa57e30000 end_va = 0x7ffa57e43fff monitored = 0 entry_point = 0x7ffa57e32a00 region_type = mapped_file name = "bitsigd.dll" filename = "\\Windows\\System32\\bitsigd.dll" (normalized: "c:\\windows\\system32\\bitsigd.dll") Region: id = 4966 start_va = 0x8400000 end_va = 0x84fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008400000" filename = "" Region: id = 4967 start_va = 0x7ffa554e0000 end_va = 0x7ffa55546fff monitored = 0 entry_point = 0x7ffa554eb160 region_type = mapped_file name = "upnp.dll" filename = "\\Windows\\System32\\upnp.dll" (normalized: "c:\\windows\\system32\\upnp.dll") Region: id = 4968 start_va = 0x7ffa54800000 end_va = 0x7ffa54814fff monitored = 0 entry_point = 0x7ffa54803460 region_type = mapped_file name = "ssdpapi.dll" filename = "\\Windows\\System32\\ssdpapi.dll" (normalized: "c:\\windows\\system32\\ssdpapi.dll") Region: id = 5000 start_va = 0x420000 end_va = 0x430fff monitored = 0 entry_point = 0x42b160 region_type = mapped_file name = "upnp.dll" filename = "\\Windows\\System32\\upnp.dll" (normalized: "c:\\windows\\system32\\upnp.dll") Region: id = 5001 start_va = 0x440000 end_va = 0x444fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "stdole2.tlb" filename = "\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\windows\\system32\\stdole2.tlb") Region: id = 5002 start_va = 0x420000 end_va = 0x430fff monitored = 0 entry_point = 0x42b160 region_type = mapped_file name = "upnp.dll" filename = "\\Windows\\System32\\upnp.dll" (normalized: "c:\\windows\\system32\\upnp.dll") Region: id = 5003 start_va = 0x3e80000 end_va = 0x3efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e80000" filename = "" Region: id = 5004 start_va = 0x6e00000 end_va = 0x6efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006e00000" filename = "" Region: id = 5007 start_va = 0x6f00000 end_va = 0x6ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006f00000" filename = "" Region: id = 5013 start_va = 0x7ffa54540000 end_va = 0x7ffa54554fff monitored = 0 entry_point = 0x7ffa54542dc0 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll") Region: id = 5015 start_va = 0x7ffa57e10000 end_va = 0x7ffa57e21fff monitored = 0 entry_point = 0x7ffa57e11a80 region_type = mapped_file name = "bitsproxy.dll" filename = "\\Windows\\System32\\BitsProxy.dll" (normalized: "c:\\windows\\system32\\bitsproxy.dll") Region: id = 5031 start_va = 0x420000 end_va = 0x421fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 5032 start_va = 0x430000 end_va = 0x431fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 5036 start_va = 0x430000 end_va = 0x43bfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 5125 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 5678 start_va = 0x7ffa53d60000 end_va = 0x7ffa53d7afff monitored = 0 entry_point = 0x7ffa53d61040 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 5681 start_va = 0x8500000 end_va = 0x85fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008500000" filename = "" Region: id = 5682 start_va = 0x8600000 end_va = 0x86fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008600000" filename = "" Region: id = 5683 start_va = 0x8700000 end_va = 0x87fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008700000" filename = "" Region: id = 5684 start_va = 0x430000 end_va = 0x432fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 5685 start_va = 0x430000 end_va = 0x432fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 5707 start_va = 0x420000 end_va = 0x422fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 5709 start_va = 0x420000 end_va = 0x422fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 5710 start_va = 0x420000 end_va = 0x422fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 5711 start_va = 0x420000 end_va = 0x422fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 5741 start_va = 0x8800000 end_va = 0x88fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008800000" filename = "" Region: id = 5742 start_va = 0x8900000 end_va = 0x89fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008900000" filename = "" Region: id = 5743 start_va = 0x8a00000 end_va = 0x8afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008a00000" filename = "" Region: id = 5744 start_va = 0x8b00000 end_va = 0x8bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008b00000" filename = "" Region: id = 6142 start_va = 0x8c00000 end_va = 0x8cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008c00000" filename = "" Region: id = 6143 start_va = 0x7ffa43f50000 end_va = 0x7ffa4405efff monitored = 0 entry_point = 0x7ffa43f8c010 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 6144 start_va = 0x7ffa557a0000 end_va = 0x7ffa55832fff monitored = 0 entry_point = 0x7ffa557a9680 region_type = mapped_file name = "msvcp_win.dll" filename = "\\Windows\\System32\\msvcp_win.dll" (normalized: "c:\\windows\\system32\\msvcp_win.dll") Region: id = 6145 start_va = 0x7ffa4d840000 end_va = 0x7ffa4d849fff monitored = 0 entry_point = 0x7ffa4d841350 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 6146 start_va = 0x420000 end_va = 0x421fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 6147 start_va = 0x8d00000 end_va = 0x8dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008d00000" filename = "" Region: id = 6148 start_va = 0x8e00000 end_va = 0x8efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008e00000" filename = "" Region: id = 6149 start_va = 0x8f00000 end_va = 0x8ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008f00000" filename = "" Region: id = 6150 start_va = 0x9000000 end_va = 0x90fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009000000" filename = "" Region: id = 6151 start_va = 0x9100000 end_va = 0x91fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009100000" filename = "" Region: id = 6152 start_va = 0x9200000 end_va = 0x92fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009200000" filename = "" Region: id = 6153 start_va = 0x430000 end_va = 0x43bfff monitored = 0 entry_point = 0x432a10 region_type = mapped_file name = "hnetcfg.dll" filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll") Region: id = 6154 start_va = 0x440000 end_va = 0x444fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "stdole2.tlb" filename = "\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\windows\\system32\\stdole2.tlb") Region: id = 6155 start_va = 0x430000 end_va = 0x43bfff monitored = 0 entry_point = 0x432a10 region_type = mapped_file name = "hnetcfg.dll" filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll") Region: id = 6156 start_va = 0x9300000 end_va = 0x93fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009300000" filename = "" Region: id = 6157 start_va = 0x9400000 end_va = 0x94fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009400000" filename = "" Region: id = 6158 start_va = 0x9500000 end_va = 0x95fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009500000" filename = "" Region: id = 6159 start_va = 0x9600000 end_va = 0x96fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009600000" filename = "" Region: id = 6160 start_va = 0x9700000 end_va = 0x97fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009700000" filename = "" Region: id = 6164 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 6167 start_va = 0x9800000 end_va = 0x98fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009800000" filename = "" Region: id = 6168 start_va = 0x430000 end_va = 0x450fff monitored = 0 entry_point = 0x432300 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 6169 start_va = 0x3360000 end_va = 0x3372fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sppc.dll.mui" filename = "\\Windows\\System32\\en-US\\sppc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\sppc.dll.mui") Region: id = 6170 start_va = 0x430000 end_va = 0x450fff monitored = 0 entry_point = 0x432300 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 6171 start_va = 0x3360000 end_va = 0x3372fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sppc.dll.mui" filename = "\\Windows\\System32\\en-US\\sppc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\sppc.dll.mui") Region: id = 6172 start_va = 0x430000 end_va = 0x450fff monitored = 0 entry_point = 0x432300 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 6173 start_va = 0x3360000 end_va = 0x3372fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sppc.dll.mui" filename = "\\Windows\\System32\\en-US\\sppc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\sppc.dll.mui") Region: id = 6174 start_va = 0x430000 end_va = 0x431fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Thread: id = 171 os_tid = 0x94c Thread: id = 172 os_tid = 0x948 Thread: id = 173 os_tid = 0x938 Thread: id = 174 os_tid = 0x930 Thread: id = 175 os_tid = 0x924 Thread: id = 176 os_tid = 0x920 Thread: id = 177 os_tid = 0x90c Thread: id = 178 os_tid = 0x908 Thread: id = 179 os_tid = 0x904 Thread: id = 180 os_tid = 0x900 Thread: id = 181 os_tid = 0x8f0 Thread: id = 182 os_tid = 0x8e8 Thread: id = 183 os_tid = 0x8b4 Thread: id = 184 os_tid = 0x884 Thread: id = 185 os_tid = 0x87c Thread: id = 186 os_tid = 0x86c Thread: id = 187 os_tid = 0x858 Thread: id = 188 os_tid = 0x848 Thread: id = 189 os_tid = 0x838 Thread: id = 190 os_tid = 0x830 Thread: id = 191 os_tid = 0x828 Thread: id = 192 os_tid = 0x824 Thread: id = 193 os_tid = 0x820 Thread: id = 194 os_tid = 0x81c Thread: id = 195 os_tid = 0x810 Thread: id = 196 os_tid = 0x808 Thread: id = 197 os_tid = 0x804 Thread: id = 198 os_tid = 0x5bc Thread: id = 199 os_tid = 0x5c8 Thread: id = 200 os_tid = 0x428 Thread: id = 201 os_tid = 0x5d0 Thread: id = 202 os_tid = 0x4a4 Thread: id = 203 os_tid = 0x7f4 Thread: id = 204 os_tid = 0x5e8 Thread: id = 205 os_tid = 0x664 Thread: id = 206 os_tid = 0x638 Thread: id = 207 os_tid = 0x470 Thread: id = 208 os_tid = 0x530 Thread: id = 209 os_tid = 0x4dc Thread: id = 210 os_tid = 0x4bc Thread: id = 211 os_tid = 0x46c Thread: id = 212 os_tid = 0x450 Thread: id = 213 os_tid = 0x444 Thread: id = 214 os_tid = 0x420 Thread: id = 215 os_tid = 0x300 Thread: id = 216 os_tid = 0x2a8 Thread: id = 217 os_tid = 0x280 Thread: id = 218 os_tid = 0x27c Thread: id = 219 os_tid = 0x18c Thread: id = 220 os_tid = 0x16c Thread: id = 221 os_tid = 0x8 Thread: id = 222 os_tid = 0x158 Thread: id = 223 os_tid = 0x15c Thread: id = 224 os_tid = 0x160 Thread: id = 225 os_tid = 0x144 Thread: id = 226 os_tid = 0x148 Thread: id = 227 os_tid = 0x364 Thread: id = 228 os_tid = 0x950 Thread: id = 229 os_tid = 0x8d8 Thread: id = 230 os_tid = 0x8c0 Thread: id = 231 os_tid = 0x8f8 Thread: id = 248 os_tid = 0xb88 Thread: id = 252 os_tid = 0xb6c Thread: id = 253 os_tid = 0xb70 Thread: id = 254 os_tid = 0x58c Thread: id = 255 os_tid = 0x914 Thread: id = 256 os_tid = 0x994 Thread: id = 257 os_tid = 0xbcc Thread: id = 258 os_tid = 0x910 Thread: id = 259 os_tid = 0x93c Thread: id = 261 os_tid = 0x648 Thread: id = 262 os_tid = 0x6ec Thread: id = 263 os_tid = 0x6fc Thread: id = 264 os_tid = 0xb94 Thread: id = 265 os_tid = 0x1b0 Thread: id = 266 os_tid = 0x940 Thread: id = 292 os_tid = 0x8f8 Thread: id = 293 os_tid = 0x618 Thread: id = 294 os_tid = 0xf0 Thread: id = 297 os_tid = 0xbd4 Thread: id = 298 os_tid = 0x554 Thread: id = 299 os_tid = 0xbdc Thread: id = 300 os_tid = 0xb84 Thread: id = 306 os_tid = 0xb2c Thread: id = 307 os_tid = 0xb30 Thread: id = 308 os_tid = 0xa9c Thread: id = 309 os_tid = 0x9ec Thread: id = 310 os_tid = 0xb18 Thread: id = 311 os_tid = 0xb5c Thread: id = 312 os_tid = 0xb14 Thread: id = 313 os_tid = 0xb64 Thread: id = 314 os_tid = 0x644 Thread: id = 315 os_tid = 0x278 Thread: id = 316 os_tid = 0x334 Thread: id = 317 os_tid = 0x954 Thread: id = 319 os_tid = 0x170 Process: id = "12" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x1d381000" os_pid = "0x874" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "11" os_parent_pid = "0x26c" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:0002f39a" [0xc000000f] Region: id = 4099 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 4100 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 4101 start_va = 0x50000 end_va = 0xcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 4102 start_va = 0xd0000 end_va = 0xd3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 4103 start_va = 0xe0000 end_va = 0xe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 4104 start_va = 0xf0000 end_va = 0xf1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 4105 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 4106 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 4107 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 4108 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 4109 start_va = 0x7ff68d340000 end_va = 0x7ff68d3bffff monitored = 0 entry_point = 0x7ff68d355f50 region_type = mapped_file name = "wmiprvse.exe" filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe") Region: id = 4110 start_va = 0x7ffa5f840000 end_va = 0x7ffa5fa00fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 4111 start_va = 0x550000 end_va = 0x64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 4112 start_va = 0x7ffa5c8d0000 end_va = 0x7ffa5cab7fff monitored = 0 entry_point = 0x7ffa5c8fba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 4113 start_va = 0x7ffa5dba0000 end_va = 0x7ffa5dc4cfff monitored = 0 entry_point = 0x7ffa5dbb81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 4114 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 4115 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 4116 start_va = 0x100000 end_va = 0x1bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 4117 start_va = 0x7ffa5d880000 end_va = 0x7ffa5d91cfff monitored = 0 entry_point = 0x7ffa5d8878a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 4118 start_va = 0x400000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 4119 start_va = 0x7ffa4e4c0000 end_va = 0x7ffa4e5b5fff monitored = 0 entry_point = 0x7ffa4e4f9590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 4120 start_va = 0x7ffa5dc50000 end_va = 0x7ffa5deccfff monitored = 0 entry_point = 0x7ffa5dd24970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 4121 start_va = 0x7ffa5ccb0000 end_va = 0x7ffa5cdcbfff monitored = 0 entry_point = 0x7ffa5ccf02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 4122 start_va = 0x7ffa5cbd0000 end_va = 0x7ffa5cc39fff monitored = 0 entry_point = 0x7ffa5cc06d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 4123 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 4124 start_va = 0x7ffa4dc00000 end_va = 0x7ffa4dc15fff monitored = 0 entry_point = 0x7ffa4dc055e0 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 4125 start_va = 0x7ffa50770000 end_va = 0x7ffa507eefff monitored = 1 entry_point = 0x7ffa50787110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 4126 start_va = 0x7ffa5bcf0000 end_va = 0x7ffa5bd18fff monitored = 0 entry_point = 0x7ffa5bd04530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 4127 start_va = 0x7ffa5db40000 end_va = 0x7ffa5db9afff monitored = 0 entry_point = 0x7ffa5db538b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 4128 start_va = 0x7ffa5e040000 end_va = 0x7ffa5e0aafff monitored = 0 entry_point = 0x7ffa5e0590c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 4129 start_va = 0x1c0000 end_va = 0x1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 4130 start_va = 0x1d0000 end_va = 0x1d6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 4131 start_va = 0x7ffa5df10000 end_va = 0x7ffa5dfb6fff monitored = 0 entry_point = 0x7ffa5df258d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 4132 start_va = 0x650000 end_va = 0x986fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 4133 start_va = 0x7ffa5d1e0000 end_va = 0x7ffa5d335fff monitored = 0 entry_point = 0x7ffa5d1ea8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 4134 start_va = 0x7ffa5d050000 end_va = 0x7ffa5d1d5fff monitored = 0 entry_point = 0x7ffa5d09ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 4135 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 4136 start_va = 0x1f0000 end_va = 0x1f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 4137 start_va = 0x480000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000480000" filename = "" Region: id = 4138 start_va = 0x990000 end_va = 0xb17fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000990000" filename = "" Region: id = 4139 start_va = 0xb20000 end_va = 0xca0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b20000" filename = "" Region: id = 4140 start_va = 0x540000 end_va = 0x544fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 4141 start_va = 0xcb0000 end_va = 0xd8cfff monitored = 0 entry_point = 0xd0e0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 4142 start_va = 0x7ffa5beb0000 end_va = 0x7ffa5bebefff monitored = 0 entry_point = 0x7ffa5beb3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 4143 start_va = 0xcb0000 end_va = 0xcb0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cb0000" filename = "" Region: id = 4144 start_va = 0xcc0000 end_va = 0xd3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000cc0000" filename = "" Region: id = 4145 start_va = 0xd40000 end_va = 0xe3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d40000" filename = "" Region: id = 4146 start_va = 0xe40000 end_va = 0xe40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e40000" filename = "" Region: id = 4147 start_va = 0x7ffa5d7d0000 end_va = 0x7ffa5d876fff monitored = 0 entry_point = 0x7ffa5d7db4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 4148 start_va = 0xe50000 end_va = 0xe50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e50000" filename = "" Region: id = 4149 start_va = 0x7ffa4e7a0000 end_va = 0x7ffa4e7b0fff monitored = 0 entry_point = 0x7ffa4e7a2fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 4150 start_va = 0x7ffa5d920000 end_va = 0x7ffa5d9e0fff monitored = 0 entry_point = 0x7ffa5d940da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 4151 start_va = 0xe60000 end_va = 0xfa2fff monitored = 0 entry_point = 0xe88210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 4152 start_va = 0xe60000 end_va = 0xf3cfff monitored = 0 entry_point = 0xebe0b0 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 4153 start_va = 0xe60000 end_va = 0xedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e60000" filename = "" Region: id = 4154 start_va = 0xee0000 end_va = 0xf5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ee0000" filename = "" Region: id = 4155 start_va = 0xf60000 end_va = 0xfdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f60000" filename = "" Region: id = 4156 start_va = 0x7ffa4e870000 end_va = 0x7ffa4e883fff monitored = 0 entry_point = 0x7ffa4e871800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 4157 start_va = 0xfe0000 end_va = 0x105ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fe0000" filename = "" Region: id = 4158 start_va = 0x1060000 end_va = 0x10dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001060000" filename = "" Region: id = 4159 start_va = 0x7ffa4e490000 end_va = 0x7ffa4e4b4fff monitored = 0 entry_point = 0x7ffa4e499900 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 4160 start_va = 0x7ffa4cbb0000 end_va = 0x7ffa4cd7efff monitored = 1 entry_point = 0x7ffa4cbd7df0 region_type = mapped_file name = "cimwin32.dll" filename = "\\Windows\\System32\\wbem\\cimwin32.dll" (normalized: "c:\\windows\\system32\\wbem\\cimwin32.dll") Region: id = 4161 start_va = 0x7ffa5be60000 end_va = 0x7ffa5beaafff monitored = 0 entry_point = 0x7ffa5be635f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 4162 start_va = 0x7ffa59eb0000 end_va = 0x7ffa59efdfff monitored = 0 entry_point = 0x7ffa59ec1ce0 region_type = mapped_file name = "framedynos.dll" filename = "\\Windows\\System32\\framedynos.dll" (normalized: "c:\\windows\\system32\\framedynos.dll") Region: id = 4163 start_va = 0x7ffa5bb40000 end_va = 0x7ffa5bb6cfff monitored = 0 entry_point = 0x7ffa5bb59d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 4164 start_va = 0x10e0000 end_va = 0x115ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000010e0000" filename = "" Region: id = 4165 start_va = 0x1160000 end_va = 0x1164fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001160000" filename = "" Region: id = 4166 start_va = 0x180000000 end_va = 0x180002fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wmi.dll" filename = "\\Windows\\System32\\wmi.dll" (normalized: "c:\\windows\\system32\\wmi.dll") Region: id = 4167 start_va = 0x7ffa581b0000 end_va = 0x7ffa581c0fff monitored = 0 entry_point = 0x7ffa581b3320 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 4168 start_va = 0x1160000 end_va = 0x11dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001160000" filename = "" Region: id = 4169 start_va = 0x11e0000 end_va = 0x11e2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cimwin32.dll.mui" filename = "\\Windows\\System32\\wbem\\en-US\\cimwin32.dll.mui" (normalized: "c:\\windows\\system32\\wbem\\en-us\\cimwin32.dll.mui") Region: id = 4170 start_va = 0x11f0000 end_va = 0x12effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000011f0000" filename = "" Region: id = 4171 start_va = 0x12f0000 end_va = 0x1305fff monitored = 0 entry_point = 0x1300420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 4172 start_va = 0x1310000 end_va = 0x1312fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 4173 start_va = 0x12f0000 end_va = 0x1305fff monitored = 0 entry_point = 0x1300420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 4174 start_va = 0x1310000 end_va = 0x1312fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 4175 start_va = 0x12f0000 end_va = 0x1305fff monitored = 0 entry_point = 0x1300420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 4176 start_va = 0x1310000 end_va = 0x1312fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 4177 start_va = 0x12f0000 end_va = 0x1305fff monitored = 0 entry_point = 0x1300420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 4178 start_va = 0x1310000 end_va = 0x1312fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 4179 start_va = 0x12f0000 end_va = 0x1309fff monitored = 1 entry_point = 0x12f1190 region_type = mapped_file name = "workflowservicehostperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll") Region: id = 4180 start_va = 0x1310000 end_va = 0x1315fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "workflowservicehostperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui") Region: id = 4181 start_va = 0x12f0000 end_va = 0x1309fff monitored = 1 entry_point = 0x12f1190 region_type = mapped_file name = "workflowservicehostperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll") Region: id = 4182 start_va = 0x1310000 end_va = 0x1315fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "workflowservicehostperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui") Region: id = 4183 start_va = 0x12f0000 end_va = 0x13abfff monitored = 0 entry_point = 0x132c480 region_type = mapped_file name = "lsm.dll" filename = "\\Windows\\System32\\lsm.dll" (normalized: "c:\\windows\\system32\\lsm.dll") Region: id = 4184 start_va = 0x13b0000 end_va = 0x13b2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsm.dll.mui" filename = "\\Windows\\System32\\en-US\\lsm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\lsm.dll.mui") Region: id = 4185 start_va = 0x12f0000 end_va = 0x13abfff monitored = 0 entry_point = 0x132c480 region_type = mapped_file name = "lsm.dll" filename = "\\Windows\\System32\\lsm.dll" (normalized: "c:\\windows\\system32\\lsm.dll") Region: id = 4186 start_va = 0x13b0000 end_va = 0x13b2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsm.dll.mui" filename = "\\Windows\\System32\\en-US\\lsm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\lsm.dll.mui") Region: id = 4187 start_va = 0x12f0000 end_va = 0x131afff monitored = 0 entry_point = 0x130d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 4188 start_va = 0x1320000 end_va = 0x1324fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 4189 start_va = 0x12f0000 end_va = 0x131afff monitored = 0 entry_point = 0x130d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 4190 start_va = 0x1320000 end_va = 0x1324fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 4191 start_va = 0x12f0000 end_va = 0x131afff monitored = 0 entry_point = 0x130d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 4192 start_va = 0x1320000 end_va = 0x1324fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 4193 start_va = 0x12f0000 end_va = 0x131afff monitored = 0 entry_point = 0x130d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 4194 start_va = 0x1320000 end_va = 0x1324fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 4195 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4196 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4197 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4198 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4199 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4200 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4201 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4202 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4203 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4204 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4205 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4206 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4207 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4208 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4209 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4210 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4211 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4212 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4213 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4214 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4215 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4216 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4217 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4218 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4219 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4220 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4221 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4222 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4223 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4224 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4225 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4226 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4227 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4228 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4229 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4230 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4231 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4232 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4233 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4234 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4235 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4236 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4237 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4238 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4239 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4240 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4241 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4242 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4243 start_va = 0x12f0000 end_va = 0x1349fff monitored = 0 entry_point = 0x1335b00 region_type = mapped_file name = "pnrpsvc.dll" filename = "\\Windows\\System32\\pnrpsvc.dll" (normalized: "c:\\windows\\system32\\pnrpsvc.dll") Region: id = 4244 start_va = 0x1350000 end_va = 0x1353fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pnrpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\pnrpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\pnrpsvc.dll.mui") Region: id = 4245 start_va = 0x12f0000 end_va = 0x1349fff monitored = 0 entry_point = 0x1335b00 region_type = mapped_file name = "pnrpsvc.dll" filename = "\\Windows\\System32\\pnrpsvc.dll" (normalized: "c:\\windows\\system32\\pnrpsvc.dll") Region: id = 4246 start_va = 0x1350000 end_va = 0x1353fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pnrpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\pnrpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\pnrpsvc.dll.mui") Region: id = 4247 start_va = 0x12f0000 end_va = 0x13d1fff monitored = 0 entry_point = 0x134d100 region_type = mapped_file name = "azroles.dll" filename = "\\Windows\\System32\\azroles.dll" (normalized: "c:\\windows\\system32\\azroles.dll") Region: id = 4248 start_va = 0x13e0000 end_va = 0x13e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "azroles.dll.mui" filename = "\\Windows\\System32\\en-US\\azroles.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\azroles.dll.mui") Region: id = 4249 start_va = 0x12f0000 end_va = 0x13d1fff monitored = 0 entry_point = 0x134d100 region_type = mapped_file name = "azroles.dll" filename = "\\Windows\\System32\\azroles.dll" (normalized: "c:\\windows\\system32\\azroles.dll") Region: id = 4250 start_va = 0x13e0000 end_va = 0x13e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "azroles.dll.mui" filename = "\\Windows\\System32\\en-US\\azroles.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\azroles.dll.mui") Region: id = 4251 start_va = 0x12f0000 end_va = 0x13d3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll" filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll") Region: id = 4252 start_va = 0x13e0000 end_va = 0x1408fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll.mui" filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui") Region: id = 4253 start_va = 0x12f0000 end_va = 0x13d3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll" filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll") Region: id = 4254 start_va = 0x13e0000 end_va = 0x1408fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll.mui" filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui") Region: id = 4255 start_va = 0x12f0000 end_va = 0x1382fff monitored = 0 entry_point = 0x1369000 region_type = mapped_file name = "afd.sys" filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys") Region: id = 4256 start_va = 0x1390000 end_va = 0x1395fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "afd.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui") Region: id = 4257 start_va = 0x12f0000 end_va = 0x1382fff monitored = 0 entry_point = 0x1369000 region_type = mapped_file name = "afd.sys" filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys") Region: id = 4258 start_va = 0x1390000 end_va = 0x1395fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "afd.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui") Region: id = 4259 start_va = 0x12f0000 end_va = 0x1390fff monitored = 0 entry_point = 0x1383000 region_type = mapped_file name = "fvevol.sys" filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys") Region: id = 4260 start_va = 0x13a0000 end_va = 0x13a5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fvevol.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui") Region: id = 4261 start_va = 0x12f0000 end_va = 0x1390fff monitored = 0 entry_point = 0x1383000 region_type = mapped_file name = "fvevol.sys" filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys") Region: id = 4262 start_va = 0x13a0000 end_va = 0x13a5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fvevol.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui") Region: id = 4263 start_va = 0x12f0000 end_va = 0x1375fff monitored = 0 entry_point = 0x1361000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 4264 start_va = 0x1380000 end_va = 0x138afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 4265 start_va = 0x12f0000 end_va = 0x1375fff monitored = 0 entry_point = 0x1361000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 4266 start_va = 0x1380000 end_va = 0x138afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 4267 start_va = 0x12f0000 end_va = 0x1375fff monitored = 0 entry_point = 0x1361000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 4268 start_va = 0x1380000 end_va = 0x138afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 4269 start_va = 0x12f0000 end_va = 0x1375fff monitored = 0 entry_point = 0x1361000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 4270 start_va = 0x1380000 end_va = 0x138afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 4271 start_va = 0x12f0000 end_va = 0x13a7fff monitored = 0 entry_point = 0x12f1d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 4272 start_va = 0x13b0000 end_va = 0x13b5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 4273 start_va = 0x12f0000 end_va = 0x13a7fff monitored = 0 entry_point = 0x12f1d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 4274 start_va = 0x13b0000 end_va = 0x13b5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 4275 start_va = 0x12f0000 end_va = 0x13a7fff monitored = 0 entry_point = 0x12f1d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 4276 start_va = 0x13b0000 end_va = 0x13b5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 4277 start_va = 0x12f0000 end_va = 0x13a7fff monitored = 0 entry_point = 0x12f1d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 4278 start_va = 0x13b0000 end_va = 0x13b5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 4279 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4280 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4281 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4282 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4283 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4284 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4285 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4286 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4287 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4288 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4289 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4290 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4291 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4292 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4293 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4294 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4295 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4296 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4297 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4298 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4299 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4300 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4301 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4302 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4303 start_va = 0x12f0000 end_va = 0x12fefff monitored = 0 entry_point = 0x12f36e0 region_type = mapped_file name = "dmvsc.sys" filename = "\\Windows\\System32\\drivers\\dmvsc.sys" (normalized: "c:\\windows\\system32\\drivers\\dmvsc.sys") Region: id = 4304 start_va = 0x1300000 end_va = 0x1301fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dmvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\dmvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\dmvsc.sys.mui") Region: id = 4305 start_va = 0x12f0000 end_va = 0x12fefff monitored = 0 entry_point = 0x12f36e0 region_type = mapped_file name = "dmvsc.sys" filename = "\\Windows\\System32\\drivers\\dmvsc.sys" (normalized: "c:\\windows\\system32\\drivers\\dmvsc.sys") Region: id = 4306 start_va = 0x1300000 end_va = 0x1301fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dmvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\dmvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\dmvsc.sys.mui") Region: id = 4307 start_va = 0x12f0000 end_va = 0x130afff monitored = 1 entry_point = 0x12f1190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 4308 start_va = 0x1310000 end_va = 0x131bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 4309 start_va = 0x12f0000 end_va = 0x130afff monitored = 1 entry_point = 0x12f1190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 4310 start_va = 0x1310000 end_va = 0x131bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 4311 start_va = 0x12f0000 end_va = 0x130afff monitored = 1 entry_point = 0x12f1190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 4312 start_va = 0x1310000 end_va = 0x131bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 4313 start_va = 0x12f0000 end_va = 0x130afff monitored = 1 entry_point = 0x12f1190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 4314 start_va = 0x1310000 end_va = 0x131bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 4315 start_va = 0x12f0000 end_va = 0x130afff monitored = 1 entry_point = 0x12f1190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 4316 start_va = 0x1310000 end_va = 0x131bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 4317 start_va = 0x12f0000 end_va = 0x130afff monitored = 1 entry_point = 0x12f1190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 4318 start_va = 0x1310000 end_va = 0x131bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 4319 start_va = 0x12f0000 end_va = 0x13fefff monitored = 0 entry_point = 0x132c010 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 4320 start_va = 0x1400000 end_va = 0x1401fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 4321 start_va = 0x12f0000 end_va = 0x13fefff monitored = 0 entry_point = 0x132c010 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 4322 start_va = 0x1400000 end_va = 0x1401fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 4323 start_va = 0x12f0000 end_va = 0x1305fff monitored = 0 entry_point = 0x12f3630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 4324 start_va = 0x1310000 end_va = 0x1311fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 4325 start_va = 0x12f0000 end_va = 0x1305fff monitored = 0 entry_point = 0x12f3630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 4326 start_va = 0x1310000 end_va = 0x1311fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 4327 start_va = 0x12f0000 end_va = 0x1305fff monitored = 0 entry_point = 0x12f3630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 4328 start_va = 0x1310000 end_va = 0x1311fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 4329 start_va = 0x12f0000 end_va = 0x1305fff monitored = 0 entry_point = 0x12f3630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 4330 start_va = 0x1310000 end_va = 0x1311fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 4331 start_va = 0x12f0000 end_va = 0x1546fff monitored = 0 entry_point = 0x14fce10 region_type = mapped_file name = "tcpip.sys" filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys") Region: id = 4332 start_va = 0x1550000 end_va = 0x1566fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcpip.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui") Region: id = 4333 start_va = 0x12f0000 end_va = 0x1546fff monitored = 0 entry_point = 0x14fce10 region_type = mapped_file name = "tcpip.sys" filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys") Region: id = 4334 start_va = 0x1550000 end_va = 0x1566fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcpip.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui") Region: id = 4335 start_va = 0x12f0000 end_va = 0x1400fff monitored = 0 entry_point = 0x13e1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 4336 start_va = 0x1410000 end_va = 0x1419fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 4337 start_va = 0x12f0000 end_va = 0x1400fff monitored = 0 entry_point = 0x13e1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 4338 start_va = 0x1410000 end_va = 0x1419fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 4339 start_va = 0x12f0000 end_va = 0x1400fff monitored = 0 entry_point = 0x13e1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 4340 start_va = 0x1410000 end_va = 0x1419fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 4341 start_va = 0x12f0000 end_va = 0x1400fff monitored = 0 entry_point = 0x13e1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 4342 start_va = 0x1410000 end_va = 0x1419fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 4343 start_va = 0x12f0000 end_va = 0x1400fff monitored = 0 entry_point = 0x13e1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 4344 start_va = 0x1410000 end_va = 0x1419fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 4345 start_va = 0x12f0000 end_va = 0x1400fff monitored = 0 entry_point = 0x13e1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 4346 start_va = 0x1410000 end_va = 0x1419fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 4347 start_va = 0x12f0000 end_va = 0x12fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll") Region: id = 4348 start_va = 0x1300000 end_va = 0x130dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui") Region: id = 4349 start_va = 0x12f0000 end_va = 0x12fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll") Region: id = 4350 start_va = 0x1300000 end_va = 0x130dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui") Region: id = 4351 start_va = 0x12f0000 end_va = 0x16f7fff monitored = 0 entry_point = 0x13be3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 4352 start_va = 0x1700000 end_va = 0x1706fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 4353 start_va = 0x12f0000 end_va = 0x16f7fff monitored = 0 entry_point = 0x13be3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 4354 start_va = 0x1700000 end_va = 0x1706fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 4355 start_va = 0x12f0000 end_va = 0x16f7fff monitored = 0 entry_point = 0x13be3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 4356 start_va = 0x1700000 end_va = 0x1706fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 4357 start_va = 0x12f0000 end_va = 0x16f7fff monitored = 0 entry_point = 0x13be3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 4358 start_va = 0x1700000 end_va = 0x1706fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 4359 start_va = 0x12f0000 end_va = 0x139efff monitored = 0 entry_point = 0x1367000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 4360 start_va = 0x13a0000 end_va = 0x13b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 4361 start_va = 0x12f0000 end_va = 0x139efff monitored = 0 entry_point = 0x1367000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 4362 start_va = 0x13a0000 end_va = 0x13b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 4363 start_va = 0x12f0000 end_va = 0x139efff monitored = 0 entry_point = 0x1367000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 4364 start_va = 0x13a0000 end_va = 0x13b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 4365 start_va = 0x12f0000 end_va = 0x139efff monitored = 0 entry_point = 0x1367000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 4366 start_va = 0x13a0000 end_va = 0x13b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 4367 start_va = 0x12f0000 end_va = 0x139efff monitored = 0 entry_point = 0x1367000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 4368 start_va = 0x13a0000 end_va = 0x13b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 4369 start_va = 0x12f0000 end_va = 0x139efff monitored = 0 entry_point = 0x1367000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 4370 start_va = 0x13a0000 end_va = 0x13b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 4371 start_va = 0x12f0000 end_va = 0x13c4fff monitored = 0 entry_point = 0x131e0b0 region_type = mapped_file name = "netlogon.dll" filename = "\\Windows\\System32\\netlogon.dll" (normalized: "c:\\windows\\system32\\netlogon.dll") Region: id = 4372 start_va = 0x13d0000 end_va = 0x13d3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netlogon.dll.mui" filename = "\\Windows\\System32\\en-US\\netlogon.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\netlogon.dll.mui") Region: id = 4373 start_va = 0x12f0000 end_va = 0x13c4fff monitored = 0 entry_point = 0x131e0b0 region_type = mapped_file name = "netlogon.dll" filename = "\\Windows\\System32\\netlogon.dll" (normalized: "c:\\windows\\system32\\netlogon.dll") Region: id = 4374 start_va = 0x13d0000 end_va = 0x13d3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netlogon.dll.mui" filename = "\\Windows\\System32\\en-US\\netlogon.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\netlogon.dll.mui") Region: id = 4375 start_va = 0x12f0000 end_va = 0x1350fff monitored = 0 entry_point = 0x1300770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 4376 start_va = 0x1360000 end_va = 0x1363fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 4377 start_va = 0x12f0000 end_va = 0x1350fff monitored = 0 entry_point = 0x1300770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 4378 start_va = 0x1360000 end_va = 0x1363fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 4379 start_va = 0x12f0000 end_va = 0x1350fff monitored = 0 entry_point = 0x1300770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 4380 start_va = 0x1360000 end_va = 0x1363fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 4381 start_va = 0x12f0000 end_va = 0x1350fff monitored = 0 entry_point = 0x1300770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 4382 start_va = 0x1360000 end_va = 0x1363fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 4383 start_va = 0x12f0000 end_va = 0x1350fff monitored = 0 entry_point = 0x1300770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 4384 start_va = 0x1360000 end_va = 0x1363fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 4385 start_va = 0x12f0000 end_va = 0x1350fff monitored = 0 entry_point = 0x1300770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 4386 start_va = 0x1360000 end_va = 0x1363fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 4387 start_va = 0x12f0000 end_va = 0x1337fff monitored = 0 entry_point = 0x132acf0 region_type = mapped_file name = "drt.dll" filename = "\\Windows\\System32\\drt.dll" (normalized: "c:\\windows\\system32\\drt.dll") Region: id = 4388 start_va = 0x1340000 end_va = 0x1342fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "drt.dll.mui" filename = "\\Windows\\System32\\en-US\\drt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\drt.dll.mui") Region: id = 4389 start_va = 0x12f0000 end_va = 0x1337fff monitored = 0 entry_point = 0x132acf0 region_type = mapped_file name = "drt.dll" filename = "\\Windows\\System32\\drt.dll" (normalized: "c:\\windows\\system32\\drt.dll") Region: id = 4390 start_va = 0x1340000 end_va = 0x1342fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "drt.dll.mui" filename = "\\Windows\\System32\\en-US\\drt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\drt.dll.mui") Region: id = 4391 start_va = 0x12f0000 end_va = 0x140ffff monitored = 0 entry_point = 0x13ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4392 start_va = 0x1410000 end_va = 0x1420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4393 start_va = 0x12f0000 end_va = 0x140ffff monitored = 0 entry_point = 0x13ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4394 start_va = 0x1410000 end_va = 0x1420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4395 start_va = 0x12f0000 end_va = 0x140ffff monitored = 0 entry_point = 0x13ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4396 start_va = 0x1410000 end_va = 0x1420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4397 start_va = 0x12f0000 end_va = 0x140ffff monitored = 0 entry_point = 0x13ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4398 start_va = 0x1410000 end_va = 0x1420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4399 start_va = 0x12f0000 end_va = 0x140ffff monitored = 0 entry_point = 0x13ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4400 start_va = 0x1410000 end_va = 0x1420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4401 start_va = 0x12f0000 end_va = 0x140ffff monitored = 0 entry_point = 0x13ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4402 start_va = 0x1410000 end_va = 0x1420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4403 start_va = 0x12f0000 end_va = 0x140ffff monitored = 0 entry_point = 0x13ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4404 start_va = 0x1410000 end_va = 0x1420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4405 start_va = 0x12f0000 end_va = 0x140ffff monitored = 0 entry_point = 0x13ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4406 start_va = 0x1410000 end_va = 0x1420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4407 start_va = 0x12f0000 end_va = 0x140ffff monitored = 0 entry_point = 0x13ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4408 start_va = 0x1410000 end_va = 0x1420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4409 start_va = 0x12f0000 end_va = 0x140ffff monitored = 0 entry_point = 0x13ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4410 start_va = 0x1410000 end_va = 0x1420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4411 start_va = 0x12f0000 end_va = 0x140ffff monitored = 0 entry_point = 0x13ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4412 start_va = 0x1410000 end_va = 0x1420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4413 start_va = 0x12f0000 end_va = 0x140ffff monitored = 0 entry_point = 0x13ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4414 start_va = 0x1410000 end_va = 0x1420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4415 start_va = 0x12f0000 end_va = 0x140ffff monitored = 0 entry_point = 0x13ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4416 start_va = 0x1410000 end_va = 0x1420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4417 start_va = 0x12f0000 end_va = 0x140ffff monitored = 0 entry_point = 0x13ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4418 start_va = 0x1410000 end_va = 0x1420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4419 start_va = 0x12f0000 end_va = 0x140ffff monitored = 0 entry_point = 0x13ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4420 start_va = 0x1410000 end_va = 0x1420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4421 start_va = 0x12f0000 end_va = 0x140ffff monitored = 0 entry_point = 0x13ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4422 start_va = 0x1410000 end_va = 0x1420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4423 start_va = 0x12f0000 end_va = 0x140ffff monitored = 0 entry_point = 0x13ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4424 start_va = 0x1410000 end_va = 0x1420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4425 start_va = 0x12f0000 end_va = 0x140ffff monitored = 0 entry_point = 0x13ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4426 start_va = 0x1410000 end_va = 0x1420fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4427 start_va = 0x12f0000 end_va = 0x12f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4428 start_va = 0x1300000 end_va = 0x1310fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4429 start_va = 0x12f0000 end_va = 0x12f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4430 start_va = 0x1300000 end_va = 0x1310fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4431 start_va = 0x12f0000 end_va = 0x12f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4432 start_va = 0x1300000 end_va = 0x1310fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4433 start_va = 0x12f0000 end_va = 0x12f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4434 start_va = 0x1300000 end_va = 0x1310fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4435 start_va = 0x12f0000 end_va = 0x12f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4436 start_va = 0x1300000 end_va = 0x1310fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4437 start_va = 0x12f0000 end_va = 0x12f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4438 start_va = 0x1300000 end_va = 0x1310fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4439 start_va = 0x12f0000 end_va = 0x12f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4440 start_va = 0x1300000 end_va = 0x1310fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4441 start_va = 0x12f0000 end_va = 0x12f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4442 start_va = 0x1300000 end_va = 0x1310fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4443 start_va = 0x12f0000 end_va = 0x12f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4444 start_va = 0x1300000 end_va = 0x1310fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4445 start_va = 0x12f0000 end_va = 0x12f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4446 start_va = 0x1300000 end_va = 0x1310fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4447 start_va = 0x12f0000 end_va = 0x12f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4448 start_va = 0x1300000 end_va = 0x1310fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4449 start_va = 0x12f0000 end_va = 0x12f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4450 start_va = 0x1300000 end_va = 0x1310fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4451 start_va = 0x12f0000 end_va = 0x12f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4452 start_va = 0x1300000 end_va = 0x1310fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4453 start_va = 0x12f0000 end_va = 0x12f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4454 start_va = 0x1300000 end_va = 0x1310fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4455 start_va = 0x12f0000 end_va = 0x1361fff monitored = 0 entry_point = 0x1347000 region_type = mapped_file name = "mrxsmb.sys" filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys") Region: id = 4456 start_va = 0x1370000 end_va = 0x137ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mrxsmb.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui") Region: id = 4457 start_va = 0x12f0000 end_va = 0x1361fff monitored = 0 entry_point = 0x1347000 region_type = mapped_file name = "mrxsmb.sys" filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys") Region: id = 4458 start_va = 0x1370000 end_va = 0x137ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mrxsmb.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui") Region: id = 4459 start_va = 0x12f0000 end_va = 0x1308fff monitored = 0 entry_point = 0x12fb610 region_type = mapped_file name = "eqossnap.dll" filename = "\\Windows\\System32\\eqossnap.dll" (normalized: "c:\\windows\\system32\\eqossnap.dll") Region: id = 4460 start_va = 0x1310000 end_va = 0x1315fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "eqossnap.dll.mui" filename = "\\Windows\\System32\\en-US\\eqossnap.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\eqossnap.dll.mui") Region: id = 4461 start_va = 0x12f0000 end_va = 0x1308fff monitored = 0 entry_point = 0x12fb610 region_type = mapped_file name = "eqossnap.dll" filename = "\\Windows\\System32\\eqossnap.dll" (normalized: "c:\\windows\\system32\\eqossnap.dll") Region: id = 4462 start_va = 0x1310000 end_va = 0x1315fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "eqossnap.dll.mui" filename = "\\Windows\\System32\\en-US\\eqossnap.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\eqossnap.dll.mui") Region: id = 4467 start_va = 0x12f0000 end_va = 0x14d8fff monitored = 0 entry_point = 0x12f15f0 region_type = mapped_file name = "peerdistsvc.dll" filename = "\\Windows\\System32\\PeerDistSvc.dll" (normalized: "c:\\windows\\system32\\peerdistsvc.dll") Region: id = 4468 start_va = 0x14e0000 end_va = 0x14e7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "peerdistsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\PeerDistSvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\peerdistsvc.dll.mui") Region: id = 4469 start_va = 0x12f0000 end_va = 0x14d8fff monitored = 0 entry_point = 0x12f15f0 region_type = mapped_file name = "peerdistsvc.dll" filename = "\\Windows\\System32\\PeerDistSvc.dll" (normalized: "c:\\windows\\system32\\peerdistsvc.dll") Region: id = 4470 start_va = 0x14e0000 end_va = 0x14e7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "peerdistsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\PeerDistSvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\peerdistsvc.dll.mui") Region: id = 4471 start_va = 0x12f0000 end_va = 0x1300fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll" filename = "\\Windows\\System32\\WsmRes.dll" (normalized: "c:\\windows\\system32\\wsmres.dll") Region: id = 4472 start_va = 0x1310000 end_va = 0x1369fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll.mui" filename = "\\Windows\\System32\\en-US\\WsmRes.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wsmres.dll.mui") Region: id = 4473 start_va = 0x12f0000 end_va = 0x1300fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll" filename = "\\Windows\\System32\\WsmRes.dll" (normalized: "c:\\windows\\system32\\wsmres.dll") Region: id = 4474 start_va = 0x1310000 end_va = 0x1369fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll.mui" filename = "\\Windows\\System32\\en-US\\WsmRes.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wsmres.dll.mui") Region: id = 4475 start_va = 0x12f0000 end_va = 0x13cffff monitored = 0 entry_point = 0x1382eb0 region_type = mapped_file name = "mprddm.dll" filename = "\\Windows\\System32\\mprddm.dll" (normalized: "c:\\windows\\system32\\mprddm.dll") Region: id = 4476 start_va = 0x13d0000 end_va = 0x13d1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mprddm.dll.mui" filename = "\\Windows\\System32\\en-US\\mprddm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mprddm.dll.mui") Region: id = 4477 start_va = 0x12f0000 end_va = 0x13cffff monitored = 0 entry_point = 0x1382eb0 region_type = mapped_file name = "mprddm.dll" filename = "\\Windows\\System32\\mprddm.dll" (normalized: "c:\\windows\\system32\\mprddm.dll") Region: id = 4478 start_va = 0x13d0000 end_va = 0x13d1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mprddm.dll.mui" filename = "\\Windows\\System32\\en-US\\mprddm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mprddm.dll.mui") Region: id = 4479 start_va = 0x12f0000 end_va = 0x1305fff monitored = 0 entry_point = 0x1300420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 4480 start_va = 0x1310000 end_va = 0x1312fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 4481 start_va = 0x12f0000 end_va = 0x1305fff monitored = 0 entry_point = 0x1300420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 4482 start_va = 0x1310000 end_va = 0x1312fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 4483 start_va = 0x12f0000 end_va = 0x1305fff monitored = 0 entry_point = 0x1300420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 4484 start_va = 0x1310000 end_va = 0x1312fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 4485 start_va = 0x12f0000 end_va = 0x1305fff monitored = 0 entry_point = 0x1300420 region_type = mapped_file name = "synth3dvsc.sys" filename = "\\Windows\\System32\\drivers\\Synth3dVsc.sys" (normalized: "c:\\windows\\system32\\drivers\\synth3dvsc.sys") Region: id = 4486 start_va = 0x1310000 end_va = 0x1312fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "synth3dvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\synth3dvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\synth3dvsc.sys.mui") Region: id = 4487 start_va = 0x12f0000 end_va = 0x1309fff monitored = 1 entry_point = 0x12f1190 region_type = mapped_file name = "workflowservicehostperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll") Region: id = 4488 start_va = 0x1310000 end_va = 0x1315fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "workflowservicehostperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui") Region: id = 4489 start_va = 0x12f0000 end_va = 0x1309fff monitored = 1 entry_point = 0x12f1190 region_type = mapped_file name = "workflowservicehostperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\WorkflowServiceHostPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\workflowservicehostperformancecounters.dll") Region: id = 4490 start_va = 0x1310000 end_va = 0x1315fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "workflowservicehostperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\WorkflowServiceHostPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\workflowservicehostperformancecounters.dll.mui") Region: id = 4491 start_va = 0x12f0000 end_va = 0x13abfff monitored = 0 entry_point = 0x132c480 region_type = mapped_file name = "lsm.dll" filename = "\\Windows\\System32\\lsm.dll" (normalized: "c:\\windows\\system32\\lsm.dll") Region: id = 4492 start_va = 0x13b0000 end_va = 0x13b2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsm.dll.mui" filename = "\\Windows\\System32\\en-US\\lsm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\lsm.dll.mui") Region: id = 4493 start_va = 0x12f0000 end_va = 0x13abfff monitored = 0 entry_point = 0x132c480 region_type = mapped_file name = "lsm.dll" filename = "\\Windows\\System32\\lsm.dll" (normalized: "c:\\windows\\system32\\lsm.dll") Region: id = 4494 start_va = 0x13b0000 end_va = 0x13b2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsm.dll.mui" filename = "\\Windows\\System32\\en-US\\lsm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\lsm.dll.mui") Region: id = 4495 start_va = 0x12f0000 end_va = 0x131afff monitored = 0 entry_point = 0x130d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 4496 start_va = 0x1320000 end_va = 0x1324fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 4497 start_va = 0x12f0000 end_va = 0x131afff monitored = 0 entry_point = 0x130d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 4498 start_va = 0x1320000 end_va = 0x1324fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 4499 start_va = 0x12f0000 end_va = 0x131afff monitored = 0 entry_point = 0x130d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 4500 start_va = 0x1320000 end_va = 0x1324fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 4501 start_va = 0x12f0000 end_va = 0x131afff monitored = 0 entry_point = 0x130d000 region_type = mapped_file name = "pacer.sys" filename = "\\Windows\\System32\\drivers\\pacer.sys" (normalized: "c:\\windows\\system32\\drivers\\pacer.sys") Region: id = 4502 start_va = 0x1320000 end_va = 0x1324fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pacer.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\pacer.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\pacer.sys.mui") Region: id = 4503 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4504 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4505 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4506 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4507 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4508 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4509 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4510 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4511 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4512 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4513 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4514 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4515 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4516 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4517 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4518 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4519 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4520 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4521 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4522 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4523 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4524 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4525 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4526 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4527 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4528 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4529 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4530 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4531 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4532 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4533 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4534 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4535 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4536 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4537 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4538 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4539 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4540 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4541 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4542 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4543 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4544 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4545 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4546 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4547 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4548 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4549 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4550 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4551 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4552 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4553 start_va = 0x12f0000 end_va = 0x1356fff monitored = 0 entry_point = 0x12f63e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 4554 start_va = 0x1360000 end_va = 0x137cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwpuclnt.dll.mui" filename = "\\Windows\\System32\\en-US\\fwpuclnt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fwpuclnt.dll.mui") Region: id = 4555 start_va = 0x12f0000 end_va = 0x1349fff monitored = 0 entry_point = 0x1335b00 region_type = mapped_file name = "pnrpsvc.dll" filename = "\\Windows\\System32\\pnrpsvc.dll" (normalized: "c:\\windows\\system32\\pnrpsvc.dll") Region: id = 4556 start_va = 0x1350000 end_va = 0x1353fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pnrpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\pnrpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\pnrpsvc.dll.mui") Region: id = 4557 start_va = 0x12f0000 end_va = 0x1349fff monitored = 0 entry_point = 0x1335b00 region_type = mapped_file name = "pnrpsvc.dll" filename = "\\Windows\\System32\\pnrpsvc.dll" (normalized: "c:\\windows\\system32\\pnrpsvc.dll") Region: id = 4558 start_va = 0x1350000 end_va = 0x1353fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pnrpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\pnrpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\pnrpsvc.dll.mui") Region: id = 4559 start_va = 0x12f0000 end_va = 0x13d1fff monitored = 0 entry_point = 0x134d100 region_type = mapped_file name = "azroles.dll" filename = "\\Windows\\System32\\azroles.dll" (normalized: "c:\\windows\\system32\\azroles.dll") Region: id = 4560 start_va = 0x13e0000 end_va = 0x13e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "azroles.dll.mui" filename = "\\Windows\\System32\\en-US\\azroles.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\azroles.dll.mui") Region: id = 4561 start_va = 0x12f0000 end_va = 0x13d1fff monitored = 0 entry_point = 0x134d100 region_type = mapped_file name = "azroles.dll" filename = "\\Windows\\System32\\azroles.dll" (normalized: "c:\\windows\\system32\\azroles.dll") Region: id = 4562 start_va = 0x13e0000 end_va = 0x13e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "azroles.dll.mui" filename = "\\Windows\\System32\\en-US\\azroles.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\azroles.dll.mui") Region: id = 4563 start_va = 0x12f0000 end_va = 0x13d3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll" filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll") Region: id = 4564 start_va = 0x13e0000 end_va = 0x1408fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll.mui" filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui") Region: id = 4565 start_va = 0x12f0000 end_va = 0x13d3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll" filename = "\\Windows\\System32\\FXSRESM.dll" (normalized: "c:\\windows\\system32\\fxsresm.dll") Region: id = 4566 start_va = 0x13e0000 end_va = 0x1408fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fxsresm.dll.mui" filename = "\\Windows\\System32\\en-US\\FXSRESM.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\fxsresm.dll.mui") Region: id = 4567 start_va = 0x12f0000 end_va = 0x1382fff monitored = 0 entry_point = 0x1369000 region_type = mapped_file name = "afd.sys" filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys") Region: id = 4568 start_va = 0x1390000 end_va = 0x1395fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "afd.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui") Region: id = 4569 start_va = 0x12f0000 end_va = 0x1382fff monitored = 0 entry_point = 0x1369000 region_type = mapped_file name = "afd.sys" filename = "\\Windows\\System32\\drivers\\afd.sys" (normalized: "c:\\windows\\system32\\drivers\\afd.sys") Region: id = 4570 start_va = 0x1390000 end_va = 0x1395fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "afd.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\afd.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\afd.sys.mui") Region: id = 4571 start_va = 0x12f0000 end_va = 0x1390fff monitored = 0 entry_point = 0x1383000 region_type = mapped_file name = "fvevol.sys" filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys") Region: id = 4572 start_va = 0x13a0000 end_va = 0x13a5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fvevol.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui") Region: id = 4573 start_va = 0x12f0000 end_va = 0x1390fff monitored = 0 entry_point = 0x1383000 region_type = mapped_file name = "fvevol.sys" filename = "\\Windows\\System32\\drivers\\fvevol.sys" (normalized: "c:\\windows\\system32\\drivers\\fvevol.sys") Region: id = 4574 start_va = 0x13a0000 end_va = 0x13a5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fvevol.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\fvevol.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\fvevol.sys.mui") Region: id = 4575 start_va = 0x12f0000 end_va = 0x1375fff monitored = 0 entry_point = 0x1361000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 4576 start_va = 0x1380000 end_va = 0x138afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 4577 start_va = 0x12f0000 end_va = 0x1375fff monitored = 0 entry_point = 0x1361000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 4578 start_va = 0x1380000 end_va = 0x138afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 4579 start_va = 0x12f0000 end_va = 0x1375fff monitored = 0 entry_point = 0x1361000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 4580 start_va = 0x1380000 end_va = 0x138afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 4581 start_va = 0x12f0000 end_va = 0x1375fff monitored = 0 entry_point = 0x1361000 region_type = mapped_file name = "spaceport.sys" filename = "\\Windows\\System32\\drivers\\spaceport.sys" (normalized: "c:\\windows\\system32\\drivers\\spaceport.sys") Region: id = 4582 start_va = 0x1380000 end_va = 0x138afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\spaceport.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\spaceport.sys.mui") Region: id = 4583 start_va = 0x12f0000 end_va = 0x13a7fff monitored = 0 entry_point = 0x12f1d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 4584 start_va = 0x13b0000 end_va = 0x13b5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 4585 start_va = 0x12f0000 end_va = 0x13a7fff monitored = 0 entry_point = 0x12f1d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 4586 start_va = 0x13b0000 end_va = 0x13b5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 4587 start_va = 0x12f0000 end_va = 0x13a7fff monitored = 0 entry_point = 0x12f1d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 4588 start_va = 0x13b0000 end_va = 0x13b5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 4589 start_va = 0x12f0000 end_va = 0x13a7fff monitored = 0 entry_point = 0x12f1d30 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 4590 start_va = 0x13b0000 end_va = 0x13b5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cscsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\cscsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\cscsvc.dll.mui") Region: id = 4591 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4592 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4593 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4594 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4595 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4596 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4597 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4598 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4599 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4600 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4601 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4602 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4603 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4604 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4605 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4606 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4607 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4608 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4609 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4610 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4611 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4612 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4613 start_va = 0x12f0000 end_va = 0x13e2fff monitored = 0 entry_point = 0x1315d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4614 start_va = 0x13f0000 end_va = 0x13fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4615 start_va = 0x12f0000 end_va = 0x12fefff monitored = 0 entry_point = 0x12f36e0 region_type = mapped_file name = "dmvsc.sys" filename = "\\Windows\\System32\\drivers\\dmvsc.sys" (normalized: "c:\\windows\\system32\\drivers\\dmvsc.sys") Region: id = 4616 start_va = 0x1300000 end_va = 0x1301fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dmvsc.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\dmvsc.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\dmvsc.sys.mui") Region: id = 4617 start_va = 0x12f0000 end_va = 0x130afff monitored = 1 entry_point = 0x12f1190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 4618 start_va = 0x1310000 end_va = 0x131bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 4619 start_va = 0x12f0000 end_va = 0x130afff monitored = 1 entry_point = 0x12f1190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 4620 start_va = 0x1310000 end_va = 0x131bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 4621 start_va = 0x12f0000 end_va = 0x130afff monitored = 1 entry_point = 0x12f1190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 4622 start_va = 0x1310000 end_va = 0x131bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 4623 start_va = 0x12f0000 end_va = 0x130afff monitored = 1 entry_point = 0x12f1190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 4624 start_va = 0x1310000 end_va = 0x131bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 4625 start_va = 0x12f0000 end_va = 0x130afff monitored = 1 entry_point = 0x12f1190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 4626 start_va = 0x1310000 end_va = 0x131bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 4627 start_va = 0x12f0000 end_va = 0x130afff monitored = 1 entry_point = 0x12f1190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 4628 start_va = 0x1310000 end_va = 0x131bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 4629 start_va = 0x12f0000 end_va = 0x130afff monitored = 1 entry_point = 0x12f1190 region_type = mapped_file name = "servicemodelperformancecounters.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelPerformanceCounters.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\servicemodelperformancecounters.dll") Region: id = 4630 start_va = 0x1310000 end_va = 0x131bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "servicemodelperformancecounters.dll.mui" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\en-US\\ServiceModelPerformanceCounters.dll.mui" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\en-us\\servicemodelperformancecounters.dll.mui") Region: id = 4631 start_va = 0x12f0000 end_va = 0x13fefff monitored = 0 entry_point = 0x132c010 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 4632 start_va = 0x1400000 end_va = 0x1401fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 4633 start_va = 0x12f0000 end_va = 0x13fefff monitored = 0 entry_point = 0x132c010 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 4634 start_va = 0x1400000 end_va = 0x1401fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 4635 start_va = 0x12f0000 end_va = 0x1305fff monitored = 0 entry_point = 0x12f3630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 4636 start_va = 0x1310000 end_va = 0x1311fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 4637 start_va = 0x12f0000 end_va = 0x1305fff monitored = 0 entry_point = 0x12f3630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 4638 start_va = 0x1310000 end_va = 0x1311fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 4639 start_va = 0x12f0000 end_va = 0x1305fff monitored = 0 entry_point = 0x12f3630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 4640 start_va = 0x1310000 end_va = 0x1311fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 4641 start_va = 0x12f0000 end_va = 0x1305fff monitored = 0 entry_point = 0x12f3630 region_type = mapped_file name = "umpoext.dll" filename = "\\Windows\\System32\\umpoext.dll" (normalized: "c:\\windows\\system32\\umpoext.dll") Region: id = 4642 start_va = 0x1310000 end_va = 0x1311fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umpoext.dll.mui" filename = "\\Windows\\System32\\en-US\\umpoext.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\umpoext.dll.mui") Region: id = 4643 start_va = 0x12f0000 end_va = 0x1546fff monitored = 0 entry_point = 0x14fce10 region_type = mapped_file name = "tcpip.sys" filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys") Region: id = 4644 start_va = 0x1550000 end_va = 0x1566fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcpip.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui") Region: id = 4645 start_va = 0x12f0000 end_va = 0x1546fff monitored = 0 entry_point = 0x14fce10 region_type = mapped_file name = "tcpip.sys" filename = "\\Windows\\System32\\drivers\\tcpip.sys" (normalized: "c:\\windows\\system32\\drivers\\tcpip.sys") Region: id = 4646 start_va = 0x1550000 end_va = 0x1566fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcpip.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\tcpip.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\tcpip.sys.mui") Region: id = 4647 start_va = 0x12f0000 end_va = 0x1400fff monitored = 0 entry_point = 0x13e1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 4648 start_va = 0x1410000 end_va = 0x1419fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 4649 start_va = 0x12f0000 end_va = 0x1400fff monitored = 0 entry_point = 0x13e1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 4650 start_va = 0x1410000 end_va = 0x1419fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 4651 start_va = 0x12f0000 end_va = 0x1400fff monitored = 0 entry_point = 0x13e1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 4652 start_va = 0x1410000 end_va = 0x1419fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 4653 start_va = 0x12f0000 end_va = 0x1400fff monitored = 0 entry_point = 0x13e1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 4654 start_va = 0x1410000 end_va = 0x1419fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 4655 start_va = 0x12f0000 end_va = 0x1400fff monitored = 0 entry_point = 0x13e1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 4656 start_va = 0x1410000 end_va = 0x1419fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 4657 start_va = 0x12f0000 end_va = 0x1400fff monitored = 0 entry_point = 0x13e1bf0 region_type = mapped_file name = "http.sys" filename = "\\Windows\\System32\\drivers\\http.sys" (normalized: "c:\\windows\\system32\\drivers\\http.sys") Region: id = 4658 start_va = 0x1410000 end_va = 0x1419fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "http.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\http.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\http.sys.mui") Region: id = 4659 start_va = 0x12f0000 end_va = 0x12fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll") Region: id = 4660 start_va = 0x1300000 end_va = 0x130dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui") Region: id = 4661 start_va = 0x12f0000 end_va = 0x12fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll") Region: id = 4662 start_va = 0x1300000 end_va = 0x130dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui") Region: id = 4663 start_va = 0x12f0000 end_va = 0x12fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\PSEvents.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\psevents.dll") Region: id = 4664 start_va = 0x1300000 end_va = 0x130dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "psevents.dll.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\PSEvents.dll.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\psevents.dll.mui") Region: id = 4665 start_va = 0x12f0000 end_va = 0x16f7fff monitored = 0 entry_point = 0x13be3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 4666 start_va = 0x1700000 end_va = 0x1706fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 4667 start_va = 0x12f0000 end_va = 0x16f7fff monitored = 0 entry_point = 0x13be3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 4668 start_va = 0x1700000 end_va = 0x1706fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 4669 start_va = 0x12f0000 end_va = 0x16f7fff monitored = 0 entry_point = 0x13be3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 4670 start_va = 0x1700000 end_va = 0x1706fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 4671 start_va = 0x12f0000 end_va = 0x16f7fff monitored = 0 entry_point = 0x13be3b0 region_type = mapped_file name = "rdpcorets.dll" filename = "\\Windows\\System32\\rdpcorets.dll" (normalized: "c:\\windows\\system32\\rdpcorets.dll") Region: id = 4672 start_va = 0x1700000 end_va = 0x1706fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpcorets.dll.mui" filename = "\\Windows\\System32\\en-US\\rdpcorets.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\rdpcorets.dll.mui") Region: id = 4673 start_va = 0x12f0000 end_va = 0x139efff monitored = 0 entry_point = 0x1367000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 4674 start_va = 0x13a0000 end_va = 0x13b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 4675 start_va = 0x12f0000 end_va = 0x13effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012f0000" filename = "" Region: id = 4676 start_va = 0x13f0000 end_va = 0x149efff monitored = 0 entry_point = 0x1467000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 4677 start_va = 0x14a0000 end_va = 0x14b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 4678 start_va = 0x13f0000 end_va = 0x149efff monitored = 0 entry_point = 0x1467000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 4679 start_va = 0x14a0000 end_va = 0x14b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 4680 start_va = 0x13f0000 end_va = 0x149efff monitored = 0 entry_point = 0x1467000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 4681 start_va = 0x14a0000 end_va = 0x14b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 4682 start_va = 0x13f0000 end_va = 0x149efff monitored = 0 entry_point = 0x1467000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 4683 start_va = 0x14a0000 end_va = 0x14b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 4684 start_va = 0x13f0000 end_va = 0x149efff monitored = 0 entry_point = 0x1467000 region_type = mapped_file name = "srv2.sys" filename = "\\Windows\\System32\\drivers\\srv2.sys" (normalized: "c:\\windows\\system32\\drivers\\srv2.sys") Region: id = 4685 start_va = 0x14a0000 end_va = 0x14b1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "srv2.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\srv2.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\srv2.sys.mui") Region: id = 4686 start_va = 0x13f0000 end_va = 0x14c4fff monitored = 0 entry_point = 0x141e0b0 region_type = mapped_file name = "netlogon.dll" filename = "\\Windows\\System32\\netlogon.dll" (normalized: "c:\\windows\\system32\\netlogon.dll") Region: id = 4687 start_va = 0x14d0000 end_va = 0x14d3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netlogon.dll.mui" filename = "\\Windows\\System32\\en-US\\netlogon.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\netlogon.dll.mui") Region: id = 4688 start_va = 0x13f0000 end_va = 0x14c4fff monitored = 0 entry_point = 0x141e0b0 region_type = mapped_file name = "netlogon.dll" filename = "\\Windows\\System32\\netlogon.dll" (normalized: "c:\\windows\\system32\\netlogon.dll") Region: id = 4689 start_va = 0x14d0000 end_va = 0x14d3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netlogon.dll.mui" filename = "\\Windows\\System32\\en-US\\netlogon.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\netlogon.dll.mui") Region: id = 4690 start_va = 0x13f0000 end_va = 0x1450fff monitored = 0 entry_point = 0x1400770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 4691 start_va = 0x1460000 end_va = 0x1463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 4692 start_va = 0x13f0000 end_va = 0x1450fff monitored = 0 entry_point = 0x1400770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 4693 start_va = 0x1460000 end_va = 0x1463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 4694 start_va = 0x13f0000 end_va = 0x1450fff monitored = 0 entry_point = 0x1400770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 4695 start_va = 0x1460000 end_va = 0x1463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 4696 start_va = 0x13f0000 end_va = 0x1450fff monitored = 0 entry_point = 0x1400770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 4697 start_va = 0x1460000 end_va = 0x1463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 4698 start_va = 0x13f0000 end_va = 0x1450fff monitored = 0 entry_point = 0x1400770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 4699 start_va = 0x1460000 end_va = 0x1463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 4700 start_va = 0x13f0000 end_va = 0x1450fff monitored = 0 entry_point = 0x1400770 region_type = mapped_file name = "usbxhci.sys" filename = "\\Windows\\System32\\drivers\\USBXHCI.SYS" (normalized: "c:\\windows\\system32\\drivers\\usbxhci.sys") Region: id = 4701 start_va = 0x1460000 end_va = 0x1463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbxhci.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\USBXHCI.SYS.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\usbxhci.sys.mui") Region: id = 4702 start_va = 0x13f0000 end_va = 0x1437fff monitored = 0 entry_point = 0x142acf0 region_type = mapped_file name = "drt.dll" filename = "\\Windows\\System32\\drt.dll" (normalized: "c:\\windows\\system32\\drt.dll") Region: id = 4703 start_va = 0x1440000 end_va = 0x1442fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "drt.dll.mui" filename = "\\Windows\\System32\\en-US\\drt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\drt.dll.mui") Region: id = 4704 start_va = 0x13f0000 end_va = 0x1437fff monitored = 0 entry_point = 0x142acf0 region_type = mapped_file name = "drt.dll" filename = "\\Windows\\System32\\drt.dll" (normalized: "c:\\windows\\system32\\drt.dll") Region: id = 4705 start_va = 0x1440000 end_va = 0x1442fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "drt.dll.mui" filename = "\\Windows\\System32\\en-US\\drt.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\drt.dll.mui") Region: id = 4706 start_va = 0x13f0000 end_va = 0x150ffff monitored = 0 entry_point = 0x14ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4707 start_va = 0x1510000 end_va = 0x1520fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4708 start_va = 0x13f0000 end_va = 0x150ffff monitored = 0 entry_point = 0x14ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4709 start_va = 0x1510000 end_va = 0x1520fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4710 start_va = 0x13f0000 end_va = 0x150ffff monitored = 0 entry_point = 0x14ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4711 start_va = 0x1510000 end_va = 0x1520fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4712 start_va = 0x13f0000 end_va = 0x150ffff monitored = 0 entry_point = 0x14ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4713 start_va = 0x1510000 end_va = 0x1520fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4714 start_va = 0x13f0000 end_va = 0x150ffff monitored = 0 entry_point = 0x14ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4715 start_va = 0x1510000 end_va = 0x1520fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4716 start_va = 0x13f0000 end_va = 0x150ffff monitored = 0 entry_point = 0x14ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4717 start_va = 0x1510000 end_va = 0x1520fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4718 start_va = 0x13f0000 end_va = 0x150ffff monitored = 0 entry_point = 0x14ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4719 start_va = 0x1510000 end_va = 0x1520fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4720 start_va = 0x13f0000 end_va = 0x150ffff monitored = 0 entry_point = 0x14ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4721 start_va = 0x1510000 end_va = 0x1520fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4722 start_va = 0x13f0000 end_va = 0x150ffff monitored = 0 entry_point = 0x14ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4723 start_va = 0x1510000 end_va = 0x1520fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4724 start_va = 0x13f0000 end_va = 0x150ffff monitored = 0 entry_point = 0x14ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4725 start_va = 0x1510000 end_va = 0x1520fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4726 start_va = 0x13f0000 end_va = 0x150ffff monitored = 0 entry_point = 0x14ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4727 start_va = 0x1510000 end_va = 0x1520fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4728 start_va = 0x13f0000 end_va = 0x150ffff monitored = 0 entry_point = 0x14ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4729 start_va = 0x1510000 end_va = 0x1520fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4730 start_va = 0x13f0000 end_va = 0x150ffff monitored = 0 entry_point = 0x14ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4731 start_va = 0x1510000 end_va = 0x1520fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4732 start_va = 0x13f0000 end_va = 0x150ffff monitored = 0 entry_point = 0x14ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4733 start_va = 0x1510000 end_va = 0x1520fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4734 start_va = 0x13f0000 end_va = 0x150ffff monitored = 0 entry_point = 0x14ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4735 start_va = 0x1510000 end_va = 0x1520fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4736 start_va = 0x13f0000 end_va = 0x150ffff monitored = 0 entry_point = 0x14ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4737 start_va = 0x1510000 end_va = 0x1520fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4738 start_va = 0x13f0000 end_va = 0x150ffff monitored = 0 entry_point = 0x14ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4739 start_va = 0x1510000 end_va = 0x1520fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4740 start_va = 0x13f0000 end_va = 0x150ffff monitored = 0 entry_point = 0x14ec040 region_type = mapped_file name = "ndis.sys" filename = "\\Windows\\System32\\drivers\\ndis.sys" (normalized: "c:\\windows\\system32\\drivers\\ndis.sys") Region: id = 4741 start_va = 0x1510000 end_va = 0x1520fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndis.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\ndis.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\ndis.sys.mui") Region: id = 4742 start_va = 0x13f0000 end_va = 0x13f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4743 start_va = 0x1400000 end_va = 0x1410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4744 start_va = 0x13f0000 end_va = 0x13f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4745 start_va = 0x1400000 end_va = 0x1410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4746 start_va = 0x13f0000 end_va = 0x13f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4747 start_va = 0x1400000 end_va = 0x1410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4748 start_va = 0x13f0000 end_va = 0x13f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4749 start_va = 0x1400000 end_va = 0x1410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4750 start_va = 0x13f0000 end_va = 0x13f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4751 start_va = 0x1400000 end_va = 0x1410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4752 start_va = 0x13f0000 end_va = 0x13f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4753 start_va = 0x1400000 end_va = 0x1410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4754 start_va = 0x13f0000 end_va = 0x13f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4755 start_va = 0x1400000 end_va = 0x1410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4756 start_va = 0x13f0000 end_va = 0x13f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4757 start_va = 0x1400000 end_va = 0x1410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4758 start_va = 0x13f0000 end_va = 0x13f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4759 start_va = 0x1400000 end_va = 0x1410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4760 start_va = 0x13f0000 end_va = 0x13f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4761 start_va = 0x1400000 end_va = 0x1410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4762 start_va = 0x13f0000 end_va = 0x13f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4763 start_va = 0x1400000 end_va = 0x1410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4764 start_va = 0x13f0000 end_va = 0x13f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4765 start_va = 0x1400000 end_va = 0x1410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4766 start_va = 0x13f0000 end_va = 0x13f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4767 start_va = 0x1400000 end_va = 0x1410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4768 start_va = 0x13f0000 end_va = 0x13f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4769 start_va = 0x1400000 end_va = 0x1410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4770 start_va = 0x13f0000 end_va = 0x13f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll" filename = "\\Windows\\System32\\advapi32res.dll" (normalized: "c:\\windows\\system32\\advapi32res.dll") Region: id = 4771 start_va = 0x1400000 end_va = 0x1410fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "advapi32res.dll.mui" filename = "\\Windows\\System32\\en-US\\advapi32res.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\advapi32res.dll.mui") Region: id = 4772 start_va = 0x13f0000 end_va = 0x1461fff monitored = 0 entry_point = 0x1447000 region_type = mapped_file name = "mrxsmb.sys" filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys") Region: id = 4773 start_va = 0x1470000 end_va = 0x147ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mrxsmb.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui") Region: id = 4774 start_va = 0x13f0000 end_va = 0x1461fff monitored = 0 entry_point = 0x1447000 region_type = mapped_file name = "mrxsmb.sys" filename = "\\Windows\\System32\\drivers\\mrxsmb.sys" (normalized: "c:\\windows\\system32\\drivers\\mrxsmb.sys") Region: id = 4775 start_va = 0x1470000 end_va = 0x147ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mrxsmb.sys.mui" filename = "\\Windows\\System32\\drivers\\en-US\\mrxsmb.sys.mui" (normalized: "c:\\windows\\system32\\drivers\\en-us\\mrxsmb.sys.mui") Region: id = 4776 start_va = 0x13f0000 end_va = 0x1408fff monitored = 0 entry_point = 0x13fb610 region_type = mapped_file name = "eqossnap.dll" filename = "\\Windows\\System32\\eqossnap.dll" (normalized: "c:\\windows\\system32\\eqossnap.dll") Region: id = 4777 start_va = 0x1410000 end_va = 0x1415fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "eqossnap.dll.mui" filename = "\\Windows\\System32\\en-US\\eqossnap.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\eqossnap.dll.mui") Region: id = 4778 start_va = 0x13f0000 end_va = 0x1408fff monitored = 0 entry_point = 0x13fb610 region_type = mapped_file name = "eqossnap.dll" filename = "\\Windows\\System32\\eqossnap.dll" (normalized: "c:\\windows\\system32\\eqossnap.dll") Region: id = 4779 start_va = 0x1410000 end_va = 0x1415fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "eqossnap.dll.mui" filename = "\\Windows\\System32\\en-US\\eqossnap.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\eqossnap.dll.mui") Region: id = 4780 start_va = 0x13f0000 end_va = 0x15d8fff monitored = 0 entry_point = 0x13f15f0 region_type = mapped_file name = "peerdistsvc.dll" filename = "\\Windows\\System32\\PeerDistSvc.dll" (normalized: "c:\\windows\\system32\\peerdistsvc.dll") Region: id = 4781 start_va = 0x15e0000 end_va = 0x15e7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "peerdistsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\PeerDistSvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\peerdistsvc.dll.mui") Region: id = 4782 start_va = 0x13f0000 end_va = 0x15d8fff monitored = 0 entry_point = 0x13f15f0 region_type = mapped_file name = "peerdistsvc.dll" filename = "\\Windows\\System32\\PeerDistSvc.dll" (normalized: "c:\\windows\\system32\\peerdistsvc.dll") Region: id = 4783 start_va = 0x15e0000 end_va = 0x15e7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "peerdistsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\PeerDistSvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\peerdistsvc.dll.mui") Region: id = 4784 start_va = 0x13f0000 end_va = 0x1400fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll" filename = "\\Windows\\System32\\WsmRes.dll" (normalized: "c:\\windows\\system32\\wsmres.dll") Region: id = 4785 start_va = 0x1410000 end_va = 0x1469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll.mui" filename = "\\Windows\\System32\\en-US\\WsmRes.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wsmres.dll.mui") Region: id = 4786 start_va = 0x13f0000 end_va = 0x1400fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll" filename = "\\Windows\\System32\\WsmRes.dll" (normalized: "c:\\windows\\system32\\wsmres.dll") Region: id = 4787 start_va = 0x1410000 end_va = 0x1469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wsmres.dll.mui" filename = "\\Windows\\System32\\en-US\\WsmRes.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wsmres.dll.mui") Region: id = 4788 start_va = 0x13f0000 end_va = 0x14cffff monitored = 0 entry_point = 0x1482eb0 region_type = mapped_file name = "mprddm.dll" filename = "\\Windows\\System32\\mprddm.dll" (normalized: "c:\\windows\\system32\\mprddm.dll") Region: id = 4789 start_va = 0x14d0000 end_va = 0x14d1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mprddm.dll.mui" filename = "\\Windows\\System32\\en-US\\mprddm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mprddm.dll.mui") Region: id = 4790 start_va = 0x13f0000 end_va = 0x14cffff monitored = 0 entry_point = 0x1482eb0 region_type = mapped_file name = "mprddm.dll" filename = "\\Windows\\System32\\mprddm.dll" (normalized: "c:\\windows\\system32\\mprddm.dll") Region: id = 4791 start_va = 0x14d0000 end_va = 0x14d1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mprddm.dll.mui" filename = "\\Windows\\System32\\en-US\\mprddm.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mprddm.dll.mui") Region: id = 4792 start_va = 0x7ffa5a730000 end_va = 0x7ffa5a73dfff monitored = 0 entry_point = 0x7ffa5a732b10 region_type = mapped_file name = "perfos.dll" filename = "\\Windows\\System32\\perfos.dll" (normalized: "c:\\windows\\system32\\perfos.dll") Region: id = 4798 start_va = 0x13f0000 end_va = 0x13f2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000013f0000" filename = "" Region: id = 4842 start_va = 0x7ffa59ea0000 end_va = 0x7ffa59eadfff monitored = 0 entry_point = 0x7ffa59ea1da0 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\System32\\winbrand.dll" (normalized: "c:\\windows\\system32\\winbrand.dll") Region: id = 4843 start_va = 0x1400000 end_va = 0x14f5fff monitored = 0 entry_point = 0x1401840 region_type = mapped_file name = "basebrd.dll" filename = "\\Windows\\Branding\\Basebrd\\basebrd.dll" (normalized: "c:\\windows\\branding\\basebrd\\basebrd.dll") Region: id = 4844 start_va = 0x1400000 end_va = 0x14f5fff monitored = 0 entry_point = 0x1401840 region_type = mapped_file name = "basebrd.dll" filename = "\\Windows\\Branding\\Basebrd\\basebrd.dll" (normalized: "c:\\windows\\branding\\basebrd\\basebrd.dll") Region: id = 4845 start_va = 0x1500000 end_va = 0x1500fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "basebrd.dll.mui" filename = "\\Windows\\Branding\\Basebrd\\en-US\\basebrd.dll.mui" (normalized: "c:\\windows\\branding\\basebrd\\en-us\\basebrd.dll.mui") Region: id = 4846 start_va = 0x1400000 end_va = 0x14f5fff monitored = 0 entry_point = 0x1401840 region_type = mapped_file name = "basebrd.dll" filename = "\\Windows\\Branding\\Basebrd\\basebrd.dll" (normalized: "c:\\windows\\branding\\basebrd\\basebrd.dll") Region: id = 4847 start_va = 0x1400000 end_va = 0x14f5fff monitored = 0 entry_point = 0x1401840 region_type = mapped_file name = "basebrd.dll" filename = "\\Windows\\Branding\\Basebrd\\basebrd.dll" (normalized: "c:\\windows\\branding\\basebrd\\basebrd.dll") Region: id = 4848 start_va = 0x1500000 end_va = 0x1500fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "basebrd.dll.mui" filename = "\\Windows\\Branding\\Basebrd\\en-US\\basebrd.dll.mui" (normalized: "c:\\windows\\branding\\basebrd\\en-us\\basebrd.dll.mui") Region: id = 4851 start_va = 0x1400000 end_va = 0x1407fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001400000" filename = "" Region: id = 4969 start_va = 0x1410000 end_va = 0x148ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001410000" filename = "" Region: id = 4970 start_va = 0x7ffa5a8a0000 end_va = 0x7ffa5a8c6fff monitored = 0 entry_point = 0x7ffa5a8a7940 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 4971 start_va = 0x7ffa5bfb0000 end_va = 0x7ffa5bff2fff monitored = 0 entry_point = 0x7ffa5bfc4b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 4972 start_va = 0xcc0000 end_va = 0xce2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "input.pnf" filename = "\\Windows\\INF\\input.PNF" (normalized: "c:\\windows\\inf\\input.pnf") Region: id = 4973 start_va = 0xcc0000 end_va = 0xce8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 4974 start_va = 0xcc0000 end_va = 0xce8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 4975 start_va = 0xcc0000 end_va = 0xce8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 4976 start_va = 0xcc0000 end_va = 0xce0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 4977 start_va = 0xcc0000 end_va = 0xcc2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "volmgr.pnf" filename = "\\Windows\\INF\\volmgr.PNF" (normalized: "c:\\windows\\inf\\volmgr.pnf") Region: id = 4978 start_va = 0xcc0000 end_va = 0xce0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 4979 start_va = 0xcc0000 end_va = 0xcdbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "keyboard.pnf" filename = "\\Windows\\INF\\keyboard.PNF" (normalized: "c:\\windows\\inf\\keyboard.pnf") Region: id = 4980 start_va = 0xcc0000 end_va = 0xcc1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "basicdisplay.pnf" filename = "\\Windows\\INF\\basicdisplay.PNF" (normalized: "c:\\windows\\inf\\basicdisplay.pnf") Region: id = 4981 start_va = 0x1490000 end_va = 0x1579fff monitored = 0 entry_point = 0x14b5d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 4982 start_va = 0xcc0000 end_va = 0xcccfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 4983 start_va = 0xcc0000 end_va = 0xce2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "input.pnf" filename = "\\Windows\\INF\\input.PNF" (normalized: "c:\\windows\\inf\\input.pnf") Region: id = 4984 start_va = 0xcc0000 end_va = 0xce2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "input.pnf" filename = "\\Windows\\INF\\input.PNF" (normalized: "c:\\windows\\inf\\input.pnf") Region: id = 4985 start_va = 0xcc0000 end_va = 0xce8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 4986 start_va = 0xcc0000 end_va = 0xcc3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nettun.pnf" filename = "\\Windows\\INF\\nettun.PNF" (normalized: "c:\\windows\\inf\\nettun.pnf") Region: id = 4987 start_va = 0xcc0000 end_va = 0xce8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 4988 start_va = 0xcc0000 end_va = 0xce8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 4989 start_va = 0xcc0000 end_va = 0xcc1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "compositebus.pnf" filename = "\\Windows\\INF\\compositebus.PNF" (normalized: "c:\\windows\\inf\\compositebus.pnf") Region: id = 4990 start_va = 0xcc0000 end_va = 0xce8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 4991 start_va = 0xcc0000 end_va = 0xcc3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nettun.pnf" filename = "\\Windows\\INF\\nettun.PNF" (normalized: "c:\\windows\\inf\\nettun.pnf") Region: id = 4992 start_va = 0xcc0000 end_va = 0xcc1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "spaceport.pnf" filename = "\\Windows\\INF\\spaceport.PNF" (normalized: "c:\\windows\\inf\\spaceport.pnf") Region: id = 4993 start_va = 0x1490000 end_va = 0x15a8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "monitor.pnf" filename = "\\Windows\\INF\\monitor.PNF" (normalized: "c:\\windows\\inf\\monitor.pnf") Region: id = 4994 start_va = 0xcc0000 end_va = 0xce8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 4995 start_va = 0xcc0000 end_va = 0xcc2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kdnic.pnf" filename = "\\Windows\\INF\\kdnic.PNF" (normalized: "c:\\windows\\inf\\kdnic.pnf") Region: id = 4996 start_va = 0xcc0000 end_va = 0xcc1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "volsnap.pnf" filename = "\\Windows\\INF\\volsnap.PNF" (normalized: "c:\\windows\\inf\\volsnap.pnf") Region: id = 4997 start_va = 0xcc0000 end_va = 0xcc2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "hidinterrupt.pnf" filename = "\\Windows\\INF\\hidinterrupt.PNF" (normalized: "c:\\windows\\inf\\hidinterrupt.pnf") Region: id = 4998 start_va = 0xcc0000 end_va = 0xcc1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "audioendpoint.pnf" filename = "\\Windows\\INF\\audioendpoint.PNF" (normalized: "c:\\windows\\inf\\audioendpoint.pnf") Region: id = 4999 start_va = 0xcc0000 end_va = 0xcd6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msmouse.pnf" filename = "\\Windows\\INF\\msmouse.PNF" (normalized: "c:\\windows\\inf\\msmouse.pnf") Region: id = 5005 start_va = 0xcc0000 end_va = 0xcc2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "umbus.pnf" filename = "\\Windows\\INF\\umbus.PNF" (normalized: "c:\\windows\\inf\\umbus.pnf") Region: id = 5006 start_va = 0xcc0000 end_va = 0xcc1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_swdevice.pnf" filename = "\\Windows\\INF\\c_swdevice.PNF" (normalized: "c:\\windows\\inf\\c_swdevice.pnf") Region: id = 5008 start_va = 0xcc0000 end_va = 0xcc4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pci.pnf" filename = "\\Windows\\INF\\pci.PNF" (normalized: "c:\\windows\\inf\\pci.pnf") Region: id = 5009 start_va = 0xcc0000 end_va = 0xce0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 5010 start_va = 0xcc0000 end_va = 0xcc2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "hdaudbus.pnf" filename = "\\Windows\\INF\\hdaudbus.PNF" (normalized: "c:\\windows\\inf\\hdaudbus.pnf") Region: id = 5011 start_va = 0xcc0000 end_va = 0xccffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mshdc.pnf" filename = "\\Windows\\INF\\mshdc.PNF" (normalized: "c:\\windows\\inf\\mshdc.pnf") Region: id = 5012 start_va = 0xcc0000 end_va = 0xccffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mshdc.pnf" filename = "\\Windows\\INF\\mshdc.PNF" (normalized: "c:\\windows\\inf\\mshdc.pnf") Region: id = 5014 start_va = 0xcc0000 end_va = 0xcc2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "acpi.pnf" filename = "\\Windows\\INF\\acpi.PNF" (normalized: "c:\\windows\\inf\\acpi.pnf") Region: id = 5016 start_va = 0xcc0000 end_va = 0xcc1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "basicrender.pnf" filename = "\\Windows\\INF\\basicrender.PNF" (normalized: "c:\\windows\\inf\\basicrender.pnf") Region: id = 5017 start_va = 0xcc0000 end_va = 0xce0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 5018 start_va = 0xcc0000 end_va = 0xce0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 5019 start_va = 0xcc0000 end_va = 0xcdbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "keyboard.pnf" filename = "\\Windows\\INF\\keyboard.PNF" (normalized: "c:\\windows\\inf\\keyboard.pnf") Region: id = 5020 start_va = 0xcc0000 end_va = 0xce8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 5021 start_va = 0xcc0000 end_va = 0xcdafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "net1ic64.pnf" filename = "\\Windows\\INF\\net1ic64.PNF" (normalized: "c:\\windows\\inf\\net1ic64.pnf") Region: id = 5022 start_va = 0xcc0000 end_va = 0xce8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 5023 start_va = 0xcc0000 end_va = 0xce0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 5024 start_va = 0xcc0000 end_va = 0xcc1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "volume.pnf" filename = "\\Windows\\INF\\volume.PNF" (normalized: "c:\\windows\\inf\\volume.pnf") Region: id = 5025 start_va = 0xcc0000 end_va = 0xcc4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "disk.pnf" filename = "\\Windows\\INF\\disk.PNF" (normalized: "c:\\windows\\inf\\disk.pnf") Region: id = 5026 start_va = 0xcc0000 end_va = 0xcc1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_swdevice.pnf" filename = "\\Windows\\INF\\c_swdevice.PNF" (normalized: "c:\\windows\\inf\\c_swdevice.pnf") Region: id = 5027 start_va = 0xcc0000 end_va = 0xcc1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "audioendpoint.pnf" filename = "\\Windows\\INF\\audioendpoint.PNF" (normalized: "c:\\windows\\inf\\audioendpoint.pnf") Region: id = 5028 start_va = 0xcc0000 end_va = 0xcc1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "audioendpoint.pnf" filename = "\\Windows\\INF\\audioendpoint.PNF" (normalized: "c:\\windows\\inf\\audioendpoint.pnf") Region: id = 5029 start_va = 0xcc0000 end_va = 0xcc1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ndisvirtualbus.pnf" filename = "\\Windows\\INF\\ndisvirtualbus.PNF" (normalized: "c:\\windows\\inf\\ndisvirtualbus.pnf") Region: id = 5030 start_va = 0xcc0000 end_va = 0xcd7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "hdaudio.pnf" filename = "\\Windows\\INF\\hdaudio.PNF" (normalized: "c:\\windows\\inf\\hdaudio.pnf") Region: id = 5033 start_va = 0xcc0000 end_va = 0xce8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "machine.pnf" filename = "\\Windows\\INF\\machine.PNF" (normalized: "c:\\windows\\inf\\machine.pnf") Region: id = 5034 start_va = 0xcc0000 end_va = 0xcc1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mssmbios.pnf" filename = "\\Windows\\INF\\mssmbios.PNF" (normalized: "c:\\windows\\inf\\mssmbios.pnf") Region: id = 5035 start_va = 0xcc0000 end_va = 0xcc1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "swenum.pnf" filename = "\\Windows\\INF\\swenum.PNF" (normalized: "c:\\windows\\inf\\swenum.pnf") Region: id = 5037 start_va = 0xcd0000 end_va = 0xce6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msmouse.pnf" filename = "\\Windows\\INF\\msmouse.PNF" (normalized: "c:\\windows\\inf\\msmouse.pnf") Region: id = 5038 start_va = 0xcd0000 end_va = 0xcd1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpbus.pnf" filename = "\\Windows\\INF\\rdpbus.PNF" (normalized: "c:\\windows\\inf\\rdpbus.pnf") Region: id = 5039 start_va = 0xcd0000 end_va = 0xcd1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rdpbus.pnf" filename = "\\Windows\\INF\\rdpbus.PNF" (normalized: "c:\\windows\\inf\\rdpbus.pnf") Region: id = 5040 start_va = 0xcd0000 end_va = 0xcf0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usbport.pnf" filename = "\\Windows\\INF\\usbport.PNF" (normalized: "c:\\windows\\inf\\usbport.pnf") Region: id = 5677 start_va = 0x1490000 end_va = 0x168ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001490000" filename = "" Thread: id = 232 os_tid = 0x8ec [0174.871] malloc (_Size=0x100) returned 0x1c1330 [0174.871] GetProcessHeap () returned 0x550000 [0174.871] __dllonexit () returned 0x7ffa50789c10 [0174.872] GetProcessHeap () returned 0x550000 [0174.872] __dllonexit () returned 0x7ffa50789c20 [0174.872] __dllonexit () returned 0x7ffa50789c30 [0174.872] GetTickCount () returned 0x13236 [0174.872] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0xc4 [0174.872] LoadLibraryExW (lpLibFileName="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", hFile=0x0, dwFlags=0x8) returned 0x7ffa5c8d0000 [0174.872] GetProcAddress (hModule=0x7ffa5c8d0000, lpProcName="RegCreateKeyExW") returned 0x7ffa5c8ebe60 [0174.872] RegCreateKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\WBEM\\CIMOM", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x3, lpSecurityAttributes=0x0, phkResult=0xcf198, lpdwDisposition=0xcf140 | out: phkResult=0xcf198*=0x0, lpdwDisposition=0xcf140*=0x2) returned 0x5 [0174.873] GetSystemDirectoryW (in: lpBuffer=0x7ffa507e43ac, uSize=0x105 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0174.873] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WBEM\\Logs\\" (normalized: "c:\\windows\\system32\\wbem\\logs")) returned 0x10 [0174.874] GetLastError () returned 0x0 [0174.874] RegCreateKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\WBEM\\CIMOM", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0xcf198, lpdwDisposition=0xcf140 | out: phkResult=0xcf198*=0x0, lpdwDisposition=0xcf140*=0x2) returned 0x5 [0174.874] _vsnwprintf (in: _Buffer=0xcf100, _BufferCount=0x1d, _Format="%d", _ArgList=0xcf0e8 | out: _Buffer="1") returned 1 [0174.874] _vsnwprintf (in: _Buffer=0xcf100, _BufferCount=0x1d, _Format="%d", _ArgList=0xcf0e8 | out: _Buffer="65536") returned 5 [0174.874] __dllonexit () returned 0x7ffa50789c40 [0174.875] __dllonexit () returned 0x7ffa50789c50 [0174.875] __dllonexit () returned 0x7ffa50789c60 [0174.875] __dllonexit () returned 0x7ffa50789c70 [0174.876] __dllonexit () returned 0x7ffa50789c80 [0174.876] DisableThreadLibraryCalls (hLibModule=0x7ffa50770000) returned 1 [0174.876] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x30) returned 0x55b940 [0174.876] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x30) returned 0x55b980 [0174.876] GetVersion () returned 0x295a000a [0174.876] GetModuleHandleW (lpModuleName="ntdll.dll") returned 0x7ffa5f840000 [0174.876] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="EtwRegisterTraceGuidsW") returned 0x7ffa5f893ce0 [0174.876] EtwRegisterTraceGuidsW () returned 0x0 [0174.876] EtwRegisterTraceGuidsW () returned 0x0 [0174.951] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578470 [0174.976] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-0.dll", hFile=0x0, dwFlags=0x8) returned 0x7ffa5c8d0000 [0174.977] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-obsolete-l1-1-0.dll", hFile=0x0, dwFlags=0x8) returned 0x7ffa5c8d0000 [0174.977] GetProcAddress (hModule=0x7ffa5c8d0000, lpProcName="GetThreadPreferredUILanguages") returned 0x7ffa5c933720 [0174.977] GetProcAddress (hModule=0x7ffa5c8d0000, lpProcName="SetThreadPreferredUILanguages") returned 0x7ffa5c930a30 [0174.977] GetProcAddress (hModule=0x7ffa5c8d0000, lpProcName="LocaleNameToLCID") returned 0x7ffa5c8de330 [0174.977] GetProcAddress (hModule=0x7ffa5c8d0000, lpProcName="GetLocaleInfoEx") returned 0x7ffa5c8e0710 [0174.977] GetProcAddress (hModule=0x7ffa5c8d0000, lpProcName="LCIDToLocaleName") returned 0x7ffa5c92e2c0 [0174.977] GetProcAddress (hModule=0x7ffa5c8d0000, lpProcName="GetSystemDefaultLocaleName") returned 0x7ffa5c93ef70 [0174.977] RtlRestoreLastWin32Error () returned 0x3e1000 [0174.977] GetThreadPreferredUILanguages (in: dwFlags=0x30, pulNumLanguages=0xcfb1c, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0xcf9a0 | out: pulNumLanguages=0xcfb1c, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0xcf9a0) returned 1 [0174.977] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x18) returned 0x56ce80 [0174.977] RtlRestoreLastWin32Error () returned 0x3e1000 [0174.977] GetThreadPreferredUILanguages (in: dwFlags=0x30, pulNumLanguages=0xcfb1c, pwszLanguagesBuffer=0x56ce80, pcchLanguagesBuffer=0xcf9a0 | out: pulNumLanguages=0xcfb1c, pwszLanguagesBuffer=0x56ce80, pcchLanguagesBuffer=0xcf9a0) returned 1 [0174.977] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x18) returned 0x56cea0 [0174.977] LocaleNameToLCID (lpName="en-US", dwFlags=0x0) returned 0x409 [0174.978] LocaleNameToLCID (lpName="en", dwFlags=0x0) returned 0x409 [0174.978] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x56ce80) returned 1 [0174.990] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0174.991] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x56cea0) returned 1 [0174.997] GetProcAddress (hModule=0x7ffa5c8d0000, lpProcName="RegOpenKeyExW") returned 0x7ffa5c8ef350 [0174.997] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\WBEM\\CIMOM", ulOptions=0x0, samDesired=0x20019, phkResult=0xcec88 | out: phkResult=0xcec88*=0x1ac) returned 0x0 [0174.997] GetProcAddress (hModule=0x7ffa5c8d0000, lpProcName="RegQueryValueExW") returned 0x7ffa5c8ef640 [0174.997] RegQueryValueExW (in: hKey=0x1ac, lpValueName="EnableObjectValidation", lpReserved=0x0, lpType=0xcebf4, lpData=0xcec00, lpcbData=0xcebf0*=0x19 | out: lpType=0xcebf4*=0x0, lpData=0xcec00*=0x88, lpcbData=0xcebf0*=0x19) returned 0x2 [0174.997] GetProcAddress (hModule=0x7ffa5c8d0000, lpProcName="RegCloseKey") returned 0x7ffa5c8f0c00 [0174.997] RegCloseKey (hKey=0x1ac) returned 0x0 [0174.998] ResolveDelayLoadedAPI () returned 0x7ffa5d930ae0 Thread: id = 233 os_tid = 0x8f4 Thread: id = 234 os_tid = 0xbc8 Thread: id = 235 os_tid = 0x878 [0175.179] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 Thread: id = 236 os_tid = 0x870 [0175.046] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0175.047] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596500 [0175.047] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0175.047] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x2c) returned 0x58c6d0 [0175.047] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596500) returned 1 [0175.047] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0xc8) returned 0x572f40 [0175.048] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x572f40) returned 1 [0175.048] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x34) returned 0x58c510 [0175.049] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x58c510) returned 1 [0175.049] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x80) returned 0x5941d0 [0175.049] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x58c6d0) returned 1 [0175.052] memcpy (in: _Dst=0xf5da00, _Src=0x5996a8, _Size=0x4 | out: _Dst=0xf5da00) returned 0xf5da00 [0175.052] memcpy (in: _Dst=0xf5da00, _Src=0x598fb5, _Size=0x4 | out: _Dst=0xf5da00) returned 0xf5da00 [0175.053] memcpy (in: _Dst=0xf5da00, _Src=0x5996b0, _Size=0x2 | out: _Dst=0xf5da00) returned 0xf5da00 [0175.053] memcpy (in: _Dst=0xf5da00, _Src=0x598fbb, _Size=0x2 | out: _Dst=0xf5da00) returned 0xf5da00 [0175.053] memcpy (in: _Dst=0xf5da00, _Src=0x598fbd, _Size=0x2 | out: _Dst=0xf5da00) returned 0xf5da00 [0175.084] memcpy (in: _Dst=0xf5deb0, _Src=0x59b735, _Size=0x2 | out: _Dst=0xf5deb0) returned 0xf5deb0 [0175.084] memcpy (in: _Dst=0xf5deb0, _Src=0x59b737, _Size=0x2 | out: _Dst=0xf5deb0) returned 0xf5deb0 [0175.084] memcpy (in: _Dst=0xf5deb0, _Src=0x59b739, _Size=0x2 | out: _Dst=0xf5deb0) returned 0xf5deb0 [0175.084] memcpy (in: _Dst=0xf5deb0, _Src=0x59b73b, _Size=0x2 | out: _Dst=0xf5deb0) returned 0xf5deb0 [0175.085] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5980f0 [0175.085] SafeArrayGetElemsize (psa=0x58c6e0) returned 0x8 [0175.085] memcpy (in: _Dst=0xf5dc60, _Src=0xf5db98, _Size=0x8 | out: _Dst=0xf5dc60) returned 0xf5dc60 [0175.086] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5980f0) returned 1 [0175.086] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x574220) returned 1 [0175.086] memcpy (in: _Dst=0xf5deb0, _Src=0x59b0fa, _Size=0x4 | out: _Dst=0xf5deb0) returned 0xf5deb0 [0175.108] malloc (_Size=0x100) returned 0xd42330 [0175.108] malloc (_Size=0x30) returned 0x1cd530 [0175.109] __dllonexit () returned 0x7ffa4cbe0410 [0175.109] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x210 [0175.109] __dllonexit () returned 0x7ffa4cbe03f0 [0175.109] malloc (_Size=0x18) returned 0x1cdbb0 [0175.109] __dllonexit () returned 0x7ffa4cbe0400 [0175.110] __dllonexit () returned 0x7ffa4cbe0420 [0175.110] __dllonexit () returned 0x7ffa4cbe0430 [0175.110] __dllonexit () returned 0x7ffa4cbe0440 [0175.110] __dllonexit () returned 0x7ffa4cbe0450 [0175.110] malloc (_Size=0x60) returned 0xd4dcb0 [0175.110] malloc (_Size=0x18) returned 0x1ce840 [0175.110] malloc (_Size=0x18) returned 0x1cd620 [0175.111] __dllonexit () returned 0x7ffa4cbe0460 [0175.111] __dllonexit () returned 0x7ffa4cbe0470 [0175.111] __dllonexit () returned 0x7ffa4cbe0480 [0175.111] __dllonexit () returned 0x7ffa4cbe0490 [0175.111] __dllonexit () returned 0x7ffa4cbe04a0 [0175.111] __dllonexit () returned 0x7ffa4cbe04b0 [0175.112] __dllonexit () returned 0x7ffa4cbe04c0 [0175.112] __dllonexit () returned 0x7ffa4cbe04d0 [0175.112] __dllonexit () returned 0x7ffa4cbe04e0 [0175.112] __dllonexit () returned 0x7ffa4cbe04f0 [0175.112] __dllonexit () returned 0x7ffa4cbe0500 [0175.112] __dllonexit () returned 0x7ffa4cbe0510 [0175.113] __dllonexit () returned 0x7ffa4cbe0520 [0175.113] __dllonexit () returned 0x7ffa4cbe0530 [0175.113] __dllonexit () returned 0x7ffa4cbe0540 [0175.114] VirtualQuery (in: lpAddress=0x7ffa4cd7a000, lpBuffer=0xf5b630, dwLength=0x30 | out: lpBuffer=0xf5b630*(BaseAddress=0x7ffa4cd7a000, AllocationBase=0x7ffa4cbb0000, AllocationProtect=0x80, __alignment1=0xfffff802, RegionSize=0x5000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0xffff8000)) returned 0x30 [0175.114] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x4, lpflOldProtect=0x7ffa4cd67f20 | out: lpflOldProtect=0x7ffa4cd67f20*=0x2) returned 1 [0175.114] LoadLibraryExA (lpLibFileName="api-ms-win-core-com-l1-1-1.dll", hFile=0x0, dwFlags=0x0) returned 0x7ffa5dc50000 [0175.114] GetProcAddress (hModule=0x7ffa5dc50000, lpProcName="StringFromGUID2") returned 0x7ffa5dc924b0 [0175.114] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x2, lpflOldProtect=0xf5b780 | out: lpflOldProtect=0xf5b780*=0x4) returned 1 [0175.114] StringFromGUID2 (in: rguid=0x7ffa4ccc7820*(Data1=0x8ecc055d, Data2=0x47f, Data3=0x11d1, Data4=([0]=0xa5, [1]=0x37, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x75, [6]=0x3e, [7]=0xd1)), lpsz=0xd4eefc, cchMax=128 | out: lpsz="{8ECC055D-047F-11D1-A537-0000F8753ED1}") returned 39 [0175.114] __dllonexit () returned 0x7ffa4cbe0550 [0175.114] __dllonexit () returned 0x7ffa4cbe0560 [0175.115] __dllonexit () returned 0x7ffa4cbe0570 [0175.115] __dllonexit () returned 0x7ffa4cbe0580 [0175.115] __dllonexit () returned 0x7ffa4cbe0590 [0175.115] __dllonexit () returned 0x7ffa4cbe05a0 [0175.115] StringFromGUID2 (in: rguid=0x7ffa4ccc7820*(Data1=0x8ecc055d, Data2=0x47f, Data3=0x11d1, Data4=([0]=0xa5, [1]=0x37, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x75, [6]=0x3e, [7]=0xd1)), lpsz=0xd5096c, cchMax=128 | out: lpsz="{8ECC055D-047F-11D1-A537-0000F8753ED1}") returned 39 [0175.115] __dllonexit () returned 0x7ffa4cbe05b0 [0175.116] __dllonexit () returned 0x7ffa4cbe05c0 [0175.116] __dllonexit () returned 0x7ffa4cbe05d0 [0175.116] malloc (_Size=0x60) returned 0xd50b20 [0175.116] malloc (_Size=0x18) returned 0xd50b90 [0175.116] malloc (_Size=0x18) returned 0xd50bb0 [0175.116] __dllonexit () returned 0x7ffa4cbe05e0 [0175.116] __dllonexit () returned 0x7ffa4cbe05f0 [0175.116] __dllonexit () returned 0x7ffa4cbe0600 [0175.117] __dllonexit () returned 0x7ffa4cbe0610 [0175.117] __dllonexit () returned 0x7ffa4cbe0620 [0175.117] __dllonexit () returned 0x7ffa4cbe0630 [0175.117] __dllonexit () returned 0x7ffa4cbe0640 [0175.118] __dllonexit () returned 0x7ffa4cbe0650 [0175.118] __dllonexit () returned 0x7ffa4cbe0680 [0175.118] __dllonexit () returned 0x7ffa4cbe0690 [0175.118] __dllonexit () returned 0x7ffa4cbe06a0 [0175.119] __dllonexit () returned 0x7ffa4cbe06b0 [0175.119] __dllonexit () returned 0x7ffa4cbe06e0 [0175.119] __dllonexit () returned 0x7ffa4cbe06f0 [0175.119] __dllonexit () returned 0x7ffa4cbe0700 [0175.119] __dllonexit () returned 0x7ffa4cbe0710 [0175.120] __dllonexit () returned 0x7ffa4cbe0720 [0175.120] __dllonexit () returned 0x7ffa4cbe0730 [0175.120] __dllonexit () returned 0x7ffa4cbe0740 [0175.120] __dllonexit () returned 0x7ffa4cbe0750 [0175.120] malloc (_Size=0x28) returned 0xd506b0 [0175.120] __dllonexit () returned 0x7ffa4cbe0770 [0175.121] __dllonexit () returned 0x7ffa4cbe0760 [0175.121] __dllonexit () returned 0x7ffa4cbe0780 [0175.121] __dllonexit () returned 0x7ffa4cbe0790 [0175.121] __dllonexit () returned 0x7ffa4cbe07a0 [0175.121] __dllonexit () returned 0x7ffa4cbe07b0 [0175.122] __dllonexit () returned 0x7ffa4cbe07c0 [0175.122] __dllonexit () returned 0x7ffa4cbe07d0 [0175.122] __dllonexit () returned 0x7ffa4cbe07e0 [0175.122] __dllonexit () returned 0x7ffa4cbe07f0 [0175.122] __dllonexit () returned 0x7ffa4cbe0800 [0175.122] __dllonexit () returned 0x7ffa4cbe0810 [0175.122] __dllonexit () returned 0x7ffa4cbe0820 [0175.122] __dllonexit () returned 0x7ffa4cbe0830 [0175.123] __dllonexit () returned 0x7ffa4cbe0850 [0175.123] __dllonexit () returned 0x7ffa4cbe0840 [0175.123] __dllonexit () returned 0x7ffa4cbe0860 [0175.123] __dllonexit () returned 0x7ffa4cbe0870 [0175.123] __dllonexit () returned 0x7ffa4cbe0880 [0175.123] __dllonexit () returned 0x7ffa4cbe0890 [0175.123] __dllonexit () returned 0x7ffa4cbe08a0 [0175.123] __dllonexit () returned 0x7ffa4cbe08b0 [0175.123] __dllonexit () returned 0x7ffa4cbe08c0 [0175.124] __dllonexit () returned 0x7ffa4cbe08d0 [0175.124] __dllonexit () returned 0x7ffa4cbe08e0 [0175.124] __dllonexit () returned 0x7ffa4cbe08f0 [0175.124] __dllonexit () returned 0x7ffa4cbe0900 [0175.124] __dllonexit () returned 0x7ffa4cbe0910 [0175.124] __dllonexit () returned 0x7ffa4cbe0920 [0175.124] __dllonexit () returned 0x7ffa4cbe0930 [0175.124] __dllonexit () returned 0x7ffa4cbe0940 [0175.124] __dllonexit () returned 0x7ffa4cbe0950 [0175.124] __dllonexit () returned 0x7ffa4cbe0960 [0175.125] __dllonexit () returned 0x7ffa4cbe0970 [0175.125] __dllonexit () returned 0x7ffa4cbe0980 [0175.125] __dllonexit () returned 0x7ffa4cbe0990 [0175.126] __dllonexit () returned 0x7ffa4cbe09a0 [0175.126] __dllonexit () returned 0x7ffa4cbe09b0 [0175.126] __dllonexit () returned 0x7ffa4cbe09c0 [0175.126] __dllonexit () returned 0x7ffa4cbe09d0 [0175.126] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x214 [0175.126] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x218 [0175.126] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x21c [0175.126] __dllonexit () returned 0x7ffa4cbe09e0 [0175.126] __dllonexit () returned 0x7ffa4cbe09f0 [0175.127] __dllonexit () returned 0x7ffa4cbe0a20 [0175.127] __dllonexit () returned 0x7ffa4cbe0a00 [0175.127] __dllonexit () returned 0x7ffa4cbe0a30 [0175.127] __dllonexit () returned 0x7ffa4cbe0a10 [0175.127] __dllonexit () returned 0x7ffa4cbe0b30 [0175.127] __dllonexit () returned 0x7ffa4cbe0a40 [0175.127] __dllonexit () returned 0x7ffa4cbe0b20 [0175.127] __dllonexit () returned 0x7ffa4cbe0a50 [0175.127] __dllonexit () returned 0x7ffa4cbe0af0 [0175.128] __dllonexit () returned 0x7ffa4cbe0b40 [0175.128] __dllonexit () returned 0x7ffa4cbe0ac0 [0175.128] __dllonexit () returned 0x7ffa4cbe0ae0 [0175.128] __dllonexit () returned 0x7ffa4cbe0ad0 [0175.128] __dllonexit () returned 0x7ffa4cbe0b00 [0175.128] __dllonexit () returned 0x7ffa4cbe0a60 [0175.128] __dllonexit () returned 0x7ffa4cbe0b50 [0175.129] __dllonexit () returned 0x7ffa4cbe0b60 [0175.129] __dllonexit () returned 0x7ffa4cbe0a90 [0175.129] __dllonexit () returned 0x7ffa4cbe0aa0 [0175.129] __dllonexit () returned 0x7ffa4cbe0a70 [0175.129] __dllonexit () returned 0x7ffa4cbe0a80 [0175.129] __dllonexit () returned 0x7ffa4cbe0b10 [0175.129] __dllonexit () returned 0x7ffa4cbe0ab0 [0175.130] __dllonexit () returned 0x7ffa4cbe0b80 [0175.130] __dllonexit () returned 0x7ffa4cbe0b70 [0175.130] __dllonexit () returned 0x7ffa4cbe0b90 [0175.130] __dllonexit () returned 0x7ffa4cbe0ba0 [0175.130] __dllonexit () returned 0x7ffa4cbe0bb0 [0175.131] __dllonexit () returned 0x7ffa4cbe0bc0 [0175.131] __dllonexit () returned 0x7ffa4cbe0bd0 [0175.131] __dllonexit () returned 0x7ffa4cbe0be0 [0175.131] malloc (_Size=0x1680) returned 0xd57a60 [0175.131] __dllonexit () returned 0x7ffa4cbe0bf0 [0175.131] __dllonexit () returned 0x7ffa4cbe0c00 [0175.132] __dllonexit () returned 0x7ffa4cbe0c10 [0175.132] __dllonexit () returned 0x7ffa4cbe0c40 [0175.132] __dllonexit () returned 0x7ffa4cbe0c50 [0175.132] __dllonexit () returned 0x7ffa4cbe0c60 [0175.132] __dllonexit () returned 0x7ffa4cbe0c70 [0175.132] __dllonexit () returned 0x7ffa4cbe0c80 [0175.132] __dllonexit () returned 0x7ffa4cbe0c90 [0175.132] __dllonexit () returned 0x7ffa4cbe0ca0 [0175.133] __dllonexit () returned 0x7ffa4cbe0cb0 [0175.133] __dllonexit () returned 0x7ffa4cbe0cc0 [0175.133] __dllonexit () returned 0x7ffa4cbe0cd0 [0175.133] __dllonexit () returned 0x7ffa4cbe0ce0 [0175.133] __dllonexit () returned 0x7ffa4cbe0cf0 [0175.134] __dllonexit () returned 0x7ffa4cbe0d00 [0175.134] __dllonexit () returned 0x7ffa4cbe0d10 [0175.134] __dllonexit () returned 0x7ffa4cbe0d20 [0175.134] __dllonexit () returned 0x7ffa4cbe0d30 [0175.134] __dllonexit () returned 0x7ffa4cbe0d40 [0175.134] __dllonexit () returned 0x7ffa4cbe0d50 [0175.134] __dllonexit () returned 0x7ffa4cbe0d60 [0175.135] StringFromGUID2 (in: rguid=0x7ffa4ccc7820*(Data1=0x8ecc055d, Data2=0x47f, Data3=0x11d1, Data4=([0]=0xa5, [1]=0x37, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x75, [6]=0x3e, [7]=0xd1)), lpsz=0xd5a21c, cchMax=128 | out: lpsz="{8ECC055D-047F-11D1-A537-0000F8753ED1}") returned 39 [0175.135] __dllonexit () returned 0x7ffa4cbe0d70 [0175.135] __dllonexit () returned 0x7ffa4cbe0d80 [0175.135] __dllonexit () returned 0x7ffa4cbe0d90 [0175.135] __dllonexit () returned 0x7ffa4cbe0da0 [0175.135] __dllonexit () returned 0x7ffa4cbe0db0 [0175.136] __dllonexit () returned 0x7ffa4cbe0dc0 [0175.136] StringFromGUID2 (in: rguid=0x7ffa4ccc7820*(Data1=0x8ecc055d, Data2=0x47f, Data3=0x11d1, Data4=([0]=0xa5, [1]=0x37, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x75, [6]=0x3e, [7]=0xd1)), lpsz=0xd5ad2c, cchMax=128 | out: lpsz="{8ECC055D-047F-11D1-A537-0000F8753ED1}") returned 39 [0175.136] __dllonexit () returned 0x7ffa4cbe0dd0 [0175.136] __dllonexit () returned 0x7ffa4cbe0de0 [0175.136] __dllonexit () returned 0x7ffa4cbe0df0 [0175.137] StringFromGUID2 (in: rguid=0x7ffa4ccc7820*(Data1=0x8ecc055d, Data2=0x47f, Data3=0x11d1, Data4=([0]=0xa5, [1]=0x37, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x75, [6]=0x3e, [7]=0xd1)), lpsz=0xd5aefc, cchMax=128 | out: lpsz="{8ECC055D-047F-11D1-A537-0000F8753ED1}") returned 39 [0175.137] __dllonexit () returned 0x7ffa4cbe0e00 [0175.137] __dllonexit () returned 0x7ffa4cbe0e10 [0175.138] StringFromGUID2 (in: rguid=0x7ffa4ccc7820*(Data1=0x8ecc055d, Data2=0x47f, Data3=0x11d1, Data4=([0]=0xa5, [1]=0x37, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x75, [6]=0x3e, [7]=0xd1)), lpsz=0xd5c14c, cchMax=128 | out: lpsz="{8ECC055D-047F-11D1-A537-0000F8753ED1}") returned 39 [0175.138] __dllonexit () returned 0x7ffa4cbe0e20 [0175.138] __dllonexit () returned 0x7ffa4cbe0e50 [0175.138] __dllonexit () returned 0x7ffa4cbe0e60 [0175.138] __dllonexit () returned 0x7ffa4cbe0e70 [0175.139] StringFromGUID2 (in: rguid=0x7ffa4ccc7820*(Data1=0x8ecc055d, Data2=0x47f, Data3=0x11d1, Data4=([0]=0xa5, [1]=0x37, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x75, [6]=0x3e, [7]=0xd1)), lpsz=0xd5c31c, cchMax=128 | out: lpsz="{8ECC055D-047F-11D1-A537-0000F8753ED1}") returned 39 [0175.139] __dllonexit () returned 0x7ffa4cbe0e80 [0175.139] __dllonexit () returned 0x7ffa4cbe0eb0 [0175.139] __dllonexit () returned 0x7ffa4cbe0ef0 [0175.140] __dllonexit () returned 0x7ffa4cbe0ed0 [0175.140] __dllonexit () returned 0x7ffa4cbe0f10 [0175.140] __dllonexit () returned 0x7ffa4cbe0ee0 [0175.144] __dllonexit () returned 0x7ffa4cbe0ec0 [0175.144] __dllonexit () returned 0x7ffa4cbe0f20 [0175.144] __dllonexit () returned 0x7ffa4cbe0f00 [0175.144] __dllonexit () returned 0x7ffa4cbe0f40 [0175.145] __dllonexit () returned 0x7ffa4cbe0f50 [0175.145] __dllonexit () returned 0x7ffa4cbe0fd0 [0175.145] __dllonexit () returned 0x7ffa4cbe1010 [0175.145] __dllonexit () returned 0x7ffa4cbe0f30 [0175.146] __dllonexit () returned 0x7ffa4cbe0fa0 [0175.146] __dllonexit () returned 0x7ffa4cbe0fb0 [0175.146] __dllonexit () returned 0x7ffa4cbe0ff0 [0175.146] __dllonexit () returned 0x7ffa4cbe0fe0 [0175.147] __dllonexit () returned 0x7ffa4cbe0f60 [0175.147] __dllonexit () returned 0x7ffa4cbe0fc0 [0175.147] __dllonexit () returned 0x7ffa4cbe1000 [0175.147] __dllonexit () returned 0x7ffa4cbe0f70 [0175.148] __dllonexit () returned 0x7ffa4cbe0f80 [0175.148] __dllonexit () returned 0x7ffa4cbe0f90 [0175.148] StringFromGUID2 (in: rguid=0x7ffa4ccc7820*(Data1=0x8ecc055d, Data2=0x47f, Data3=0x11d1, Data4=([0]=0xa5, [1]=0x37, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x75, [6]=0x3e, [7]=0xd1)), lpsz=0xd5f9dc, cchMax=128 | out: lpsz="{8ECC055D-047F-11D1-A537-0000F8753ED1}") returned 39 [0175.148] __dllonexit () returned 0x7ffa4cbe1020 [0175.148] __dllonexit () returned 0x7ffa4cbe1030 [0175.149] __dllonexit () returned 0x7ffa4cbe1040 [0175.149] __dllonexit () returned 0x7ffa4cbe1070 [0175.150] __dllonexit () returned 0x7ffa4cbe1080 [0175.150] __dllonexit () returned 0x7ffa4cbe1090 [0175.150] __dllonexit () returned 0x7ffa4cbe10c0 [0175.150] __dllonexit () returned 0x7ffa4cbe10d0 [0175.150] __dllonexit () returned 0x7ffa4cbe10e0 [0175.150] __dllonexit () returned 0x7ffa4cbe10f0 [0175.150] __dllonexit () returned 0x7ffa4cbe1100 [0175.150] __dllonexit () returned 0x7ffa4cbe1110 [0175.150] __dllonexit () returned 0x7ffa4cbe1120 [0175.150] __dllonexit () returned 0x7ffa4cbe1130 [0175.151] __dllonexit () returned 0x7ffa4cbe1140 [0175.151] __dllonexit () returned 0x7ffa4cbe1150 [0175.151] __dllonexit () returned 0x7ffa4cbe1160 [0175.151] malloc (_Size=0x60) returned 0xd5fc50 [0175.151] malloc (_Size=0x18) returned 0xd5e000 [0175.151] malloc (_Size=0x18) returned 0xd5df20 [0175.151] __dllonexit () returned 0x7ffa4cbe1170 [0175.151] __dllonexit () returned 0x7ffa4cbe1180 [0175.151] GetVersionExW (in: lpVersionInformation=0xf5b750*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xf5b750*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0175.151] __dllonexit () returned 0x7ffa4cbe1190 [0175.151] __dllonexit () returned 0x7ffa4cbe11a0 [0175.151] __dllonexit () returned 0x7ffa4cbe11b0 [0175.151] malloc (_Size=0x60) returned 0xd5fcc0 [0175.151] malloc (_Size=0x18) returned 0xd5e040 [0175.152] malloc (_Size=0x18) returned 0xd5dfc0 [0175.152] __dllonexit () returned 0x7ffa4cbe11c0 [0175.152] malloc (_Size=0x60) returned 0xd5fd30 [0175.152] malloc (_Size=0x18) returned 0xd5e020 [0175.152] malloc (_Size=0x18) returned 0xd5de40 [0175.152] __dllonexit () returned 0x7ffa4cbe11d0 [0175.152] malloc (_Size=0x60) returned 0xd5fda0 [0175.152] malloc (_Size=0x18) returned 0xd5dda0 [0175.152] malloc (_Size=0x18) returned 0xd5de80 [0175.152] __dllonexit () returned 0x7ffa4cbe11e0 [0175.152] malloc (_Size=0x60) returned 0xd604f0 [0175.152] malloc (_Size=0x18) returned 0xd5dfe0 [0175.152] malloc (_Size=0x18) returned 0xd5e0c0 [0175.152] __dllonexit () returned 0x7ffa4cbe11f0 [0175.152] malloc (_Size=0x60) returned 0xd5fe60 [0175.152] malloc (_Size=0x18) returned 0xd5ddc0 [0175.152] malloc (_Size=0x18) returned 0xd5df60 [0175.152] __dllonexit () returned 0x7ffa4cbe1200 [0175.152] malloc (_Size=0x60) returned 0xd60560 [0175.152] malloc (_Size=0x18) returned 0xd5e060 [0175.152] malloc (_Size=0x18) returned 0xd5dec0 [0175.153] __dllonexit () returned 0x7ffa4cbe1210 [0175.153] malloc (_Size=0x60) returned 0xd5ff40 [0175.153] malloc (_Size=0x18) returned 0xd5dee0 [0175.153] malloc (_Size=0x18) returned 0xd5dd60 [0175.153] __dllonexit () returned 0x7ffa4cbe1220 [0175.153] malloc (_Size=0x60) returned 0xd5ffb0 [0175.153] malloc (_Size=0x18) returned 0xd5de20 [0175.153] malloc (_Size=0x18) returned 0xd5e080 [0175.153] __dllonexit () returned 0x7ffa4cbe1230 [0175.153] malloc (_Size=0x60) returned 0xd5fed0 [0175.153] malloc (_Size=0x18) returned 0xd5dde0 [0175.153] malloc (_Size=0x18) returned 0xd5e0a0 [0175.153] __dllonexit () returned 0x7ffa4cbe1240 [0175.153] malloc (_Size=0x60) returned 0xd60020 [0175.153] malloc (_Size=0x18) returned 0xd5e0e0 [0175.153] malloc (_Size=0x18) returned 0xd5df00 [0175.153] __dllonexit () returned 0x7ffa4cbe1250 [0175.153] malloc (_Size=0x60) returned 0xd60170 [0175.153] malloc (_Size=0x18) returned 0xd5df40 [0175.154] malloc (_Size=0x18) returned 0xd5de60 [0175.154] __dllonexit () returned 0x7ffa4cbe1260 [0175.154] DisableThreadLibraryCalls (hLibModule=0x7ffa4cbb0000) returned 1 [0175.154] malloc (_Size=0x28) returned 0xd5f450 [0175.154] StringFromGUID2 (in: rguid=0x7ffa4ccc8f10*(Data1=0x3dd82d10, Data2=0xe6f1, Data3=0x11d2, Data4=([0]=0xb1, [1]=0x39, [2]=0x0, [3]=0x10, [4]=0x5a, [5]=0x1f, [6]=0x77, [7]=0xa1)), lpsz=0xf5b740, cchMax=128 | out: lpsz="{3DD82D10-E6F1-11D2-B139-00105A1F77A1}") returned 39 [0175.154] malloc (_Size=0x30) returned 0xd5e5f0 [0175.154] malloc (_Size=0x28) returned 0xd5f5a0 [0175.154] StringFromGUID2 (in: rguid=0x7ffa4ccc8f00*(Data1=0xd31b6a3f, Data2=0x9350, Data3=0x40de, Data4=([0]=0xa3, [1]=0xfc, [2]=0xa7, [3]=0xed, [4]=0xeb, [5]=0x9b, [6]=0x7c, [7]=0x63)), lpsz=0xf5b740, cchMax=128 | out: lpsz="{D31B6A3F-9350-40DE-A3FC-A7EDEB9B7C63}") returned 39 [0175.154] malloc (_Size=0x30) returned 0xd60670 [0175.155] DllGetClassObject (in: rclsid=0x57bcf0*(Data1=0xd63a5850, Data2=0x8f16, Data3=0x11cf, Data4=([0]=0x9f, [1]=0x47, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbf, [6]=0x34, [7]=0x5c)), riid=0xf5d630*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0xf5c820 | out: ppv=0xf5c820*=0xd5df80) returned 0x0 [0175.162] GetModuleHandleW (lpModuleName="ntdll") returned 0x7ffa5f840000 [0175.162] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="EtwEventRegister") returned 0x7ffa5f893e50 [0175.162] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="EtwEventUnregister") returned 0x7ffa5f887a70 [0175.162] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="EtwEventWrite") returned 0x7ffa5f889910 [0175.162] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="EtwEventActivityIdControl") returned 0x7ffa5f8b0d40 [0175.162] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="EtwEventWriteTransfer") returned 0x7ffa5f8898c0 [0175.162] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="EtwEventEnabled") returned 0x7ffa5f88b260 [0175.162] EtwEventRegister () returned 0x0 [0175.162] EtwEventWrite () returned 0x0 [0175.165] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () Thread: id = 237 os_tid = 0x8c8 Thread: id = 238 os_tid = 0xa84 [0280.688] DllCanUnloadNow () returned 0x0 [0280.688] ResetEvent (hEvent=0x210) returned 1 [0280.688] GetExitCodeThread (in: hThread=0x248, lpExitCode=0x105fa30 | out: lpExitCode=0x105fa30) returned 1 [0280.689] SetEvent (hEvent=0x24c) returned 1 [0280.689] WaitForSingleObjectEx (hHandle=0x248, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0280.692] CloseHandle (hObject=0x248) returned 1 [0280.692] CloseHandle (hObject=0x24c) returned 1 [0280.692] SetEvent (hEvent=0x210) returned 1 [0280.692] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x4, lpflOldProtect=0x7ffa4cd67f20 | out: lpflOldProtect=0x7ffa4cd67f20*=0x2) returned 1 [0280.692] GetProcAddress (hModule=0x7ffa5dc50000, lpProcName="StringFromCLSID") returned 0x7ffa5dc91820 [0280.692] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x2, lpflOldProtect=0x105f920 | out: lpflOldProtect=0x105f920*=0x4) returned 1 [0280.693] StringFromCLSID (in: rclsid=0xd4dcd0*(Data1=0x73e9a405, Data2=0xfa4, Data3=0x11d3, Data4=([0]=0x91, [1]=0xc, [2]=0x0, [3]=0x10, [4]=0x5a, [5]=0xa6, [6]=0x30, [7]=0xbe)), lplpsz=0x105f9d8 | out: lplpsz=0x105f9d8*="{73E9A405-0FA4-11D3-910C-00105AA630BE}") returned 0x0 [0280.693] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x4, lpflOldProtect=0x7ffa4cd67f20 | out: lpflOldProtect=0x7ffa4cd67f20*=0x2) returned 1 [0280.693] GetProcAddress (hModule=0x7ffa5dc50000, lpProcName="CoTaskMemFree") returned 0x7ffa5dccd2c0 [0280.693] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x2, lpflOldProtect=0x105f920 | out: lpflOldProtect=0x105f920*=0x4) returned 1 [0280.693] CoTaskMemFree (pv=0x60a7c0) [0280.693] StringFromCLSID (in: rclsid=0xd50b40*(Data1=0xe31a80d2, Data2=0xd12f, Data3=0x11d2, Data4=([0]=0x91, [1]=0x1f, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x1a, [6]=0x46, [7]=0xfd)), lplpsz=0x105f9d8 | out: lplpsz=0x105f9d8*="{E31A80D2-D12F-11D2-911F-0060081A46FD}") returned 0x0 [0280.693] CoTaskMemFree (pv=0x60b0c0) [0280.694] StringFromCLSID (in: rclsid=0xd5fc70*(Data1=0x77609c22, Data2=0xcdaa, Data3=0x11d2, Data4=([0]=0x91, [1]=0x1e, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x1a, [6]=0x46, [7]=0xfd)), lplpsz=0x105f9d8 | out: lplpsz=0x105f9d8*="{77609C22-CDAA-11D2-911E-0060081A46FD}") returned 0x0 [0280.694] CoTaskMemFree (pv=0x60a460) [0280.694] StringFromCLSID (in: rclsid=0xd5fce0*(Data1=0xc2bb0b38, Data2=0x8549, Data3=0x48a6, Data4=([0]=0xa5, [1]=0x8e, [2]=0xe7, [3]=0x4, [4]=0xdf, [5]=0xc1, [6]=0x9d, [7]=0x80)), lplpsz=0x105f9d8 | out: lplpsz=0x105f9d8*="{C2BB0B38-8549-48A6-A58E-E704DFC19D80}") returned 0x0 [0280.694] CoTaskMemFree (pv=0x60aca0) [0280.694] StringFromCLSID (in: rclsid=0xd5fd50*(Data1=0x15e4c152, Data2=0xd051, Data3=0x11d2, Data4=([0]=0x91, [1]=0x1f, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x1a, [6]=0x46, [7]=0xfd)), lplpsz=0x105f9d8 | out: lplpsz=0x105f9d8*="{15E4C152-D051-11D2-911F-0060081A46FD}") returned 0x0 [0280.694] CoTaskMemFree (pv=0x60ab80) [0280.694] StringFromCLSID (in: rclsid=0xd5fdc0*(Data1=0xea6034f1, Data2=0xfad, Data3=0x11d3, Data4=([0]=0x91, [1]=0xc, [2]=0x0, [3]=0x10, [4]=0x5a, [5]=0xa6, [6]=0x30, [7]=0xbe)), lplpsz=0x105f9d8 | out: lplpsz=0x105f9d8*="{EA6034F1-0FAD-11D3-910C-00105AA630BE}") returned 0x0 [0280.694] CoTaskMemFree (pv=0x60ab80) [0280.694] StringFromCLSID (in: rclsid=0xd60510*(Data1=0xddea7e32, Data2=0xcce8, Data3=0x11d2, Data4=([0]=0x91, [1]=0x1e, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x1a, [6]=0x46, [7]=0xfd)), lplpsz=0x105f9d8 | out: lplpsz=0x105f9d8*="{DDEA7E32-CCE8-11D2-911E-0060081A46FD}") returned 0x0 [0280.694] CoTaskMemFree (pv=0x60a5e0) [0280.694] StringFromCLSID (in: rclsid=0xd5fe80*(Data1=0xc9369990, Data2=0xf3a8, Data3=0x4bac, Data4=([0]=0xa3, [1]=0x60, [2]=0x47, [3]=0xba, [4]=0xa0, [5]=0xec, [6]=0x47, [7]=0xa0)), lplpsz=0x105f9d8 | out: lplpsz=0x105f9d8*="{C9369990-F3A8-4BAC-A360-47BAA0EC47A0}") returned 0x0 [0280.694] CoTaskMemFree (pv=0x60aa00) [0280.695] StringFromCLSID (in: rclsid=0xd60580*(Data1=0xd60e9c22, Data2=0xd127, Data3=0x11d2, Data4=([0]=0x91, [1]=0x1f, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x1a, [6]=0x46, [7]=0xfd)), lplpsz=0x105f9d8 | out: lplpsz=0x105f9d8*="{D60E9C22-D127-11D2-911F-0060081A46FD}") returned 0x0 [0280.695] CoTaskMemFree (pv=0x60a9a0) [0280.695] StringFromCLSID (in: rclsid=0xd5ff60*(Data1=0xdd3b4892, Data2=0xcd0f, Data3=0x11d2, Data4=([0]=0x91, [1]=0x1e, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x1a, [6]=0x46, [7]=0xfd)), lplpsz=0x105f9d8 | out: lplpsz=0x105f9d8*="{DD3B4892-CD0F-11D2-911E-0060081A46FD}") returned 0x0 [0280.695] CoTaskMemFree (pv=0x60ad60) [0280.695] StringFromCLSID (in: rclsid=0xd5ffd0*(Data1=0xf54db7bf, Data2=0xfb4, Data3=0x11d3, Data4=([0]=0x91, [1]=0xc, [2]=0x0, [3]=0x10, [4]=0x5a, [5]=0xa6, [6]=0x30, [7]=0xbe)), lplpsz=0x105f9d8 | out: lplpsz=0x105f9d8*="{F54DB7BF-0FB4-11D3-910C-00105AA630BE}") returned 0x0 [0280.695] CoTaskMemFree (pv=0x60a820) [0280.695] StringFromCLSID (in: rclsid=0xd5fef0*(Data1=0x643966a2, Data2=0xd19f, Data3=0x11d2, Data4=([0]=0x91, [1]=0x20, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x1a, [6]=0x46, [7]=0xfd)), lplpsz=0x105f9d8 | out: lplpsz=0x105f9d8*="{643966A2-D19F-11D2-9120-0060081A46FD}") returned 0x0 [0280.695] CoTaskMemFree (pv=0x60b180) [0280.695] StringFromCLSID (in: rclsid=0xd60040*(Data1=0x4d060f17, Data2=0xc791, Data3=0x11d2, Data4=([0]=0xb3, [1]=0x53, [2]=0x0, [3]=0x10, [4]=0x5a, [5]=0x1f, [6]=0x85, [7]=0x69)), lplpsz=0x105f9d8 | out: lplpsz=0x105f9d8*="{4D060F17-C791-11D2-B353-00105A1F8569}") returned 0x0 [0280.695] CoTaskMemFree (pv=0x60a4c0) [0280.695] StringFromCLSID (in: rclsid=0xd60190*(Data1=0xedc5c632, Data2=0xd027, Data3=0x11d2, Data4=([0]=0x91, [1]=0x1f, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0x1a, [6]=0x46, [7]=0xfd)), lplpsz=0x105f9d8 | out: lplpsz=0x105f9d8*="{EDC5C632-D027-11D2-911F-0060081A46FD}") returned 0x0 [0280.695] CoTaskMemFree (pv=0x60a460) Thread: id = 239 os_tid = 0x8cc [0175.031] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0175.032] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 Thread: id = 240 os_tid = 0xb90 [0175.235] RtlRestoreLastWin32Error () returned 0x3f1000 [0175.235] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115e010 | out: pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115e010) returned 1 [0175.235] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783f0 [0175.235] RtlRestoreLastWin32Error () returned 0x3f1000 [0175.235] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x5783f0, pcchLanguagesBuffer=0x115e010 | out: pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x5783f0, pcchLanguagesBuffer=0x115e010) returned 1 [0175.235] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578430 [0175.235] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783f0) returned 1 [0175.235] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x5963e0 [0175.235] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5963e0, pulNumLanguages=0x115e118 | out: pulNumLanguages=0x115e118) returned 1 [0175.235] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5963e0) returned 1 [0175.249] malloc (_Size=0x600) returned 0xd61910 [0175.249] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x115d7f8 | out: Buffer=0x0, ReturnedLength=0x115d7f8) returned 0 [0175.249] GetLastError () returned 0x7a [0175.249] malloc (_Size=0x250) returned 0xd61f20 [0175.249] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0xd61f20, ReturnedLength=0x115d7f8 | out: Buffer=0xd61f20, ReturnedLength=0x115d7f8) returned 1 [0175.250] GetActiveProcessorCount (GroupNumber=0xffff) returned 0x4 [0175.250] GetMaximumProcessorGroupCount () returned 0x1 [0175.250] malloc (_Size=0x40) returned 0xd5c570 [0175.250] malloc (_Size=0x40) returned 0xd5c700 [0175.250] malloc (_Size=0x8) returned 0xd62180 [0175.250] memcpy (in: _Dst=0xd5c570, _Src=0xd61f40, _Size=0x10 | out: _Dst=0xd5c570) returned 0xd5c570 [0175.265] GetActiveProcessorCount (GroupNumber=0x0) returned 0x4 [0175.265] NtPowerInformation (in: InformationLevel=0x2e, InputBuffer=0x115d7f0, InputBufferLength=0x2, OutputBuffer=0xd61910, OutputBufferLength=0x60 | out: OutputBuffer=0xd61910) returned 0x0 [0175.265] _vsnwprintf (in: _Buffer=0x115d690, _BufferCount=0x63, _Format="CPU%d", _ArgList=0x115cf88 | out: _Buffer="CPU0") returned 4 [0175.265] GetCurrentThread () returned 0xfffffffffffffffe [0175.266] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0x115cee0, PreviousGroupAffinity=0x115cef0 | out: PreviousGroupAffinity=0x115cef0) returned 1 [0175.267] GetSystemInfo (in: lpSystemInfo=0x115d020 | out: lpSystemInfo=0x115d020*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0175.267] mbstowcs (in: _Dest=0x115d2a8, _Source="GenuineIntel", _MaxCount=0x28 | out: _Dest="GenuineIntel") returned 0xc [0175.267] malloc (_Size=0xa8) returned 0xd621a0 [0175.267] LoadLibraryExW (lpLibFileName="WMI.DLL", hFile=0x0, dwFlags=0x0) returned 0x180000000 [0175.280] GetProcAddress (hModule=0x180000000, lpProcName="WmiQueryAllDataW") returned 0x7ffa581b3050 [0175.283] GetProcAddress (hModule=0x180000000, lpProcName="WmiQuerySingleInstanceW") returned 0x7ffa581b3690 [0175.283] GetProcAddress (hModule=0x180000000, lpProcName="WmiSetSingleItemW") returned 0x7ffa581b61a0 [0175.283] GetProcAddress (hModule=0x180000000, lpProcName="WmiSetSingleInstanceW") returned 0x7ffa581b5f10 [0175.283] GetProcAddress (hModule=0x180000000, lpProcName="WmiExecuteMethodW") returned 0x7ffa581b4e00 [0175.283] GetProcAddress (hModule=0x180000000, lpProcName="WmiNotificationRegistrationW") returned 0x7ffa581b13e0 [0175.283] GetProcAddress (hModule=0x180000000, lpProcName="WmiMofEnumerateResourcesW") returned 0x7ffa581b1b80 [0175.283] GetProcAddress (hModule=0x180000000, lpProcName="WmiFileHandleToInstanceNameW") returned 0x7ffa581b5390 [0175.284] GetProcAddress (hModule=0x180000000, lpProcName="WmiDevInstToInstanceNameW") returned 0x7ffa581b4a80 [0175.284] GetProcAddress (hModule=0x180000000, lpProcName="WmiQueryGuidInformation") returned 0x7ffa581b11a0 [0175.284] GetProcAddress (hModule=0x180000000, lpProcName="WmiOpenBlock") returned 0x7ffa581b1820 [0175.284] GetProcAddress (hModule=0x180000000, lpProcName="WmiCloseBlock") returned 0x7ffa581b3430 [0175.284] GetProcAddress (hModule=0x180000000, lpProcName="WmiFreeBuffer") returned 0x7ffa581b34a0 [0175.284] GetProcAddress (hModule=0x180000000, lpProcName="WmiEnumerateGuids") returned 0x7ffa581b4b60 [0175.284] malloc (_Size=0x18) returned 0xd5df80 [0175.284] WmiOpenBlock () returned 0x0 [0175.285] malloc (_Size=0x1000) returned 0xd62250 [0175.285] WmiQueryAllDataW () returned 0x0 [0175.285] WmiCloseBlock () returned 0x0 [0175.286] malloc (_Size=0x48) returned 0xd5c750 [0175.286] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x24c [0175.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ffa4cbb7770, lpParameter=0x7ffa4cd67fc0, dwCreationFlags=0x0, lpThreadId=0x7ffa4cd67fc0 | out: lpThreadId=0x7ffa4cd67fc0*=0x6c8) returned 0x248 [0175.286] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cd40 | out: lpSystemTimeAsFileTime=0x115cd40*(dwLowDateTime=0xee70797f, dwHighDateTime=0x1d92b8e)) [0175.286] malloc (_Size=0x40) returned 0xd5c7a0 [0175.286] malloc (_Size=0x10) returned 0xd5dfa0 [0175.286] SetEvent (hEvent=0x24c) returned 1 [0175.286] malloc (_Size=0x850) returned 0xd63260 [0175.286] malloc (_Size=0x390) returned 0xd63ac0 [0175.286] _wcsicmp (_String1="GenuineIntel", _String2="GenuineIntel") returned 0 [0175.288] mbstowcs (in: _Dest=0x115d118, _Source="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", _MaxCount=0x28 | out: _Dest="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x27 [0175.288] GetCurrentThread () returned 0xfffffffffffffffe [0175.288] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0x115cef0, PreviousGroupAffinity=0x0 | out: PreviousGroupAffinity=0x0) returned 1 [0175.292] LoadStringW (in: hInstance=0x7ffa4cbb0000, uID=0x2c, lpBuffer=0x115ccf0, cchBufferMax=256 | out: lpBuffer="CPU %d") returned 0x6 [0177.273] malloc (_Size=0x35140) returned 0xd65400 [0177.288] _wtoi (_String="238") returned 238 [0177.288] _wtoi (_String="6") returned 6 [0177.288] _itow (in: _Dest=0x0, _Radix=18208192 | out: _Dest=0x0) returned="0" [0177.289] _itow (in: _Dest=0xee, _Radix=18206480 | out: _Dest=0xee) returned="238" [0177.289] malloc (_Size=0x4000) returned 0xd9a550 [0177.289] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x0, lpData=0xd9a550, lpcbData=0x115cee4*=0x4000 | out: lpType=0x0, lpData=0xd9a550*=0x50, lpcbData=0x115cee4*=0x600) returned 0x0 [0177.302] free (_Block=0xd9a550) [0177.302] Sleep (dwMilliseconds=0x3e8) [0178.721] _itow (in: _Dest=0xee, _Radix=18206480 | out: _Dest=0xee) returned="238" [0178.721] malloc (_Size=0x4000) returned 0xd9a550 [0178.722] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x0, lpData=0xd9a550, lpcbData=0x115cee4*=0x4000 | out: lpType=0x0, lpData=0xd9a550*=0x50, lpcbData=0x115cee4*=0x600) returned 0x0 [0178.787] free (_Block=0xd9a550) [0178.789] free (_Block=0xd65400) [0178.795] _vsnwprintf (in: _Buffer=0x115d5c0, _BufferCount=0x40, _Format="%04X%04X%04X%04X", _ArgList=0x115cf88 | out: _Buffer="0F8BFBFF00050654") returned 16 [0178.808] lstrlenW (lpString=" 0") returned 2 [0178.809] lstrlenW (lpString="Intel(R) Xeon(R) Gold 6126 CPU @ 2.60GHz") returned 40 [0178.809] lstrlenW (lpString="") returned 0 [0178.810] lstrlenW (lpString="") returned 0 [0178.810] lstrlenW (lpString="") returned 0 [0178.812] IsProcessorFeaturePresent (ProcessorFeature=0x14) returned 1 [0178.814] IsProcessorFeaturePresent (ProcessorFeature=0x15) returned 1 [0178.815] RtlNumberOfSetBitsUlongPtr (Target=0x1) returned 0x1 [0178.815] RtlNumberOfSetBitsUlongPtr (Target=0x2) returned 0x1 [0178.815] RtlNumberOfSetBitsUlongPtr (Target=0x4) returned 0x1 [0178.815] RtlNumberOfSetBitsUlongPtr (Target=0x8) returned 0x1 [0178.815] _vsnwprintf (in: _Buffer=0x115d880, _BufferCount=0x63, _Format="CPU%d", _ArgList=0x115d7c8 | out: _Buffer="CPU0") returned 4 [0178.817] free (_Block=0xd62180) [0178.817] free (_Block=0xd5c700) [0178.817] free (_Block=0xd5c570) [0178.817] free (_Block=0xd61f20) [0178.818] free (_Block=0xd61910) [0178.833] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578390 [0178.833] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578390, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0178.833] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0178.833] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578430) returned 1 [0178.958] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0180.029] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0180.085] RtlRestoreLastWin32Error () returned 0x3f1000 [0180.085] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115e010 | out: pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115e010) returned 1 [0180.085] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0180.085] RtlRestoreLastWin32Error () returned 0x3f1000 [0180.085] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115e010 | out: pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115e010) returned 1 [0180.085] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783c0 [0180.085] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0180.085] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596680 [0180.086] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596680, pulNumLanguages=0x115e118 | out: pulNumLanguages=0x115e118) returned 1 [0180.086] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596680) returned 1 [0180.088] malloc (_Size=0x600) returned 0xd61910 [0180.088] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x115d7f8 | out: Buffer=0x0, ReturnedLength=0x115d7f8) returned 0 [0180.088] GetLastError () returned 0x7a [0180.088] malloc (_Size=0x250) returned 0xd61f20 [0180.088] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0xd61f20, ReturnedLength=0x115d7f8 | out: Buffer=0xd61f20, ReturnedLength=0x115d7f8) returned 1 [0180.088] GetActiveProcessorCount (GroupNumber=0xffff) returned 0x4 [0180.088] GetMaximumProcessorGroupCount () returned 0x1 [0180.088] malloc (_Size=0x40) returned 0xd5c700 [0180.088] malloc (_Size=0x40) returned 0xd5c570 [0180.088] malloc (_Size=0x8) returned 0xd62180 [0180.088] memcpy (in: _Dst=0xd5c700, _Src=0xd61f40, _Size=0x10 | out: _Dst=0xd5c700) returned 0xd5c700 [0180.088] GetActiveProcessorCount (GroupNumber=0x0) returned 0x4 [0180.088] NtPowerInformation (in: InformationLevel=0x2e, InputBuffer=0x115d7f0, InputBufferLength=0x2, OutputBuffer=0xd61910, OutputBufferLength=0x60 | out: OutputBuffer=0xd61910) returned 0x0 [0180.089] _vsnwprintf (in: _Buffer=0x115d690, _BufferCount=0x63, _Format="CPU%d", _ArgList=0x115cf88 | out: _Buffer="CPU0") returned 4 [0180.089] GetCurrentThread () returned 0xfffffffffffffffe [0180.089] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0x115cee0, PreviousGroupAffinity=0x115cef0 | out: PreviousGroupAffinity=0x115cef0) returned 1 [0180.089] GetSystemInfo (in: lpSystemInfo=0x115d020 | out: lpSystemInfo=0x115d020*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0180.089] mbstowcs (in: _Dest=0x115d2a8, _Source="GenuineIntel", _MaxCount=0x28 | out: _Dest="GenuineIntel") returned 0xc [0180.089] _wcsicmp (_String1="GenuineIntel", _String2="GenuineIntel") returned 0 [0180.090] mbstowcs (in: _Dest=0x115d118, _Source="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", _MaxCount=0x28 | out: _Dest="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x27 [0180.090] GetCurrentThread () returned 0xfffffffffffffffe [0180.090] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0x115cef0, PreviousGroupAffinity=0x0 | out: PreviousGroupAffinity=0x0) returned 1 [0180.094] LoadStringW (in: hInstance=0x7ffa4cbb0000, uID=0x2c, lpBuffer=0x115ccf0, cchBufferMax=256 | out: lpBuffer="CPU %d") returned 0x6 [0180.130] malloc (_Size=0x35140) returned 0xd65400 [0180.135] _wtoi (_String="238") returned 238 [0180.135] _wtoi (_String="6") returned 6 [0180.135] _itow (in: _Dest=0x0, _Radix=18208192 | out: _Dest=0x0) returned="0" [0180.135] _itow (in: _Dest=0xee, _Radix=18206480 | out: _Dest=0xee) returned="238" [0180.135] malloc (_Size=0x4000) returned 0xd9a550 [0180.135] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x0, lpData=0xd9a550, lpcbData=0x115cee4*=0x4000 | out: lpType=0x0, lpData=0xd9a550*=0x50, lpcbData=0x115cee4*=0x600) returned 0x0 [0180.136] free (_Block=0xd9a550) [0180.136] Sleep (dwMilliseconds=0x3e8) [0181.143] _itow (in: _Dest=0xee, _Radix=18206480 | out: _Dest=0xee) returned="238" [0181.143] malloc (_Size=0x4000) returned 0xd9a550 [0181.144] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x0, lpData=0xd9a550, lpcbData=0x115cee4*=0x4000 | out: lpType=0x0, lpData=0xd9a550*=0x50, lpcbData=0x115cee4*=0x600) returned 0x0 [0181.145] free (_Block=0xd9a550) [0181.147] free (_Block=0xd65400) [0181.153] _vsnwprintf (in: _Buffer=0x115d5c0, _BufferCount=0x40, _Format="%04X%04X%04X%04X", _ArgList=0x115cf88 | out: _Buffer="0F8BFBFF00050654") returned 16 [0181.154] lstrlenW (lpString=" 0") returned 2 [0181.155] lstrlenW (lpString="Intel(R) Xeon(R) Gold 6126 CPU @ 2.60GHz") returned 40 [0181.155] lstrlenW (lpString="") returned 0 [0181.156] lstrlenW (lpString="") returned 0 [0181.156] lstrlenW (lpString="") returned 0 [0181.158] IsProcessorFeaturePresent (ProcessorFeature=0x14) returned 1 [0181.159] IsProcessorFeaturePresent (ProcessorFeature=0x15) returned 1 [0181.160] RtlNumberOfSetBitsUlongPtr (Target=0x1) returned 0x1 [0181.160] RtlNumberOfSetBitsUlongPtr (Target=0x2) returned 0x1 [0181.160] RtlNumberOfSetBitsUlongPtr (Target=0x4) returned 0x1 [0181.160] RtlNumberOfSetBitsUlongPtr (Target=0x8) returned 0x1 [0181.160] _vsnwprintf (in: _Buffer=0x115d880, _BufferCount=0x63, _Format="CPU%d", _ArgList=0x115d7c8 | out: _Buffer="CPU0") returned 4 [0181.161] free (_Block=0xd62180) [0181.162] free (_Block=0xd5c570) [0181.162] free (_Block=0xd5c700) [0181.162] free (_Block=0xd61f20) [0181.162] free (_Block=0xd61910) [0181.171] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578410 [0181.171] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578410, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0181.171] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578410) returned 1 [0181.171] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0181.262] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0182.687] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0182.776] RtlRestoreLastWin32Error () returned 0x3f1000 [0182.776] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0182.776] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0182.776] RtlRestoreLastWin32Error () returned 0x3f1000 [0182.776] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0) returned 1 [0182.776] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783c0 [0182.776] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0182.776] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596880 [0182.776] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596880, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0182.776] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596880) returned 1 [0182.805] SafeArrayGetElemsize (psa=0x58c260) returned 0x8 [0182.805] SafeArrayPutElement (psa=0x58c260, rgIndices=0x115d898, pv=0x588778) returned 0x0 [0182.806] SafeArrayRedim (in: psa=0x58c260, psaboundNew=0x115d8b0 | out: psa=0x58c260) returned 0x0 [0182.806] SafeArrayCopy (in: psa=0x58c260, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0182.808] malloc (_Size=0xb0) returned 0xd63f00 [0182.808] LoadLibraryExW (lpLibFileName="NTDLL.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5f840000 [0182.809] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="RtlInitUnicodeString") returned 0x7ffa5f85ced0 [0182.809] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="RtlFreeUnicodeString") returned 0x7ffa5f85c680 [0182.809] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtSetSystemEnvironmentValue") returned 0x7ffa5f8e7f10 [0182.809] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQuerySystemEnvironmentValue") returned 0x7ffa5f8e7630 [0182.809] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtCreateFile") returned 0x7ffa5f8e57e0 [0182.809] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQuerySystemInformation") returned 0x7ffa5f8e5400 [0182.809] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQueryDirectoryObject") returned 0x7ffa5f8e72f0 [0182.809] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQueryObject") returned 0x7ffa5f8e4f40 [0182.809] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtOpenDirectoryObject") returned 0x7ffa5f8e5840 [0182.810] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQueryInformationProcess") returned 0x7ffa5f8e5060 [0182.810] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQueryInformationToken") returned 0x7ffa5f8e5160 [0182.810] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtOpenFile") returned 0x7ffa5f8e53a0 [0182.810] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtClose") returned 0x7ffa5f8e4f20 [0182.810] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtFsControlFile") returned 0x7ffa5f8e5460 [0182.810] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQueryVolumeInformationFile") returned 0x7ffa5f8e5660 [0182.810] malloc (_Size=0x18) returned 0xd64bd0 [0182.810] GetCurrentThread () returned 0xfffffffffffffffe [0182.810] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x3ac) returned 1 [0182.810] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x4, lpflOldProtect=0x7ffa4cd67f20 | out: lpflOldProtect=0x7ffa4cd67f20*=0x2) returned 1 [0182.810] LoadLibraryExA (lpLibFileName="api-ms-win-security-lsalookup-l2-1-1.dll", hFile=0x0, dwFlags=0x0) returned 0x7ffa5df10000 [0182.811] GetProcAddress (hModule=0x7ffa5df10000, lpProcName="LookupPrivilegeValueW") returned 0x7ffa5df1e1d0 [0182.811] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x2, lpflOldProtect=0x115d5d0 | out: lpflOldProtect=0x115d5d0*=0x4) returned 1 [0182.811] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0182.814] RtlRestoreLastWin32Error () returned 0x3f1000 [0182.814] AdjustTokenPrivileges (in: TokenHandle=0x3ac, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0182.814] GetLastError () returned 0x514 [0182.814] CloseHandle (hObject=0x3ac) returned 1 [0182.814] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x4, lpflOldProtect=0x7ffa4cd67f20 | out: lpflOldProtect=0x7ffa4cd67f20*=0x2) returned 1 [0182.814] LoadLibraryExA (lpLibFileName="OLEAUT32.dll", hFile=0x0, dwFlags=0x0) returned 0x7ffa5d920000 [0182.815] GetProcAddress (hModule=0x7ffa5d920000, lpProcName=0xf) returned 0x7ffa5d9226b0 [0182.815] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x2, lpflOldProtect=0x115d5d0 | out: lpflOldProtect=0x115d5d0*=0x4) returned 1 [0182.815] malloc (_Size=0x18) returned 0xd64f70 [0182.815] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x4, lpflOldProtect=0x7ffa4cd67f20 | out: lpflOldProtect=0x7ffa4cd67f20*=0x2) returned 1 [0182.815] GetProcAddress (hModule=0x7ffa5d920000, lpProcName=0x2) returned 0x7ffa5d9309f0 [0182.815] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x2, lpflOldProtect=0x115d570 | out: lpflOldProtect=0x115d570*=0x4) returned 1 [0182.818] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x4, lpflOldProtect=0x7ffa4cd67f20 | out: lpflOldProtect=0x7ffa4cd67f20*=0x2) returned 1 [0182.818] GetProcAddress (hModule=0x7ffa5d920000, lpProcName=0x1a) returned 0x7ffa5d931870 [0182.818] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x2, lpflOldProtect=0x115d5d0 | out: lpflOldProtect=0x115d5d0*=0x4) returned 1 [0182.818] SafeArrayPutElement (psa=0x58c260, rgIndices=0x115d660, pv=0x58c1d8) returned 0x0 [0182.818] SafeArrayPutElement (psa=0x593ad0, rgIndices=0x115d660, pv=0x58c1d8) returned 0x0 [0182.818] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x4, lpflOldProtect=0x7ffa4cd67f20 | out: lpflOldProtect=0x7ffa4cd67f20*=0x2) returned 1 [0182.818] GetProcAddress (hModule=0x7ffa5d920000, lpProcName=0x6) returned 0x7ffa5d930ae0 [0182.819] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x2, lpflOldProtect=0x115d5a0 | out: lpflOldProtect=0x115d5a0*=0x4) returned 1 [0182.819] free (_Block=0xd64f70) [0182.819] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x4, lpflOldProtect=0x7ffa4cd67f20 | out: lpflOldProtect=0x7ffa4cd67f20*=0x2) returned 1 [0182.819] GetProcAddress (hModule=0x7ffa5d920000, lpProcName=0x10) returned 0x7ffa5d930e10 [0182.819] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x2, lpflOldProtect=0x115d5d0 | out: lpflOldProtect=0x115d5d0*=0x4) returned 1 [0182.819] malloc (_Size=0x8000) returned 0xd65370 [0182.819] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0182.820] free (_Block=0xd65370) [0182.822] malloc (_Size=0x10000) returned 0xd65370 [0182.822] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0182.824] free (_Block=0xd65370) [0182.824] malloc (_Size=0x18000) returned 0xd65370 [0182.824] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0x0 [0182.824] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0182.828] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0182.837] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.837] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0182.837] ApiSetQueryApiSetPresence () returned 0x0 [0182.838] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x4, lpflOldProtect=0x7ffa4cd67f20 | out: lpflOldProtect=0x7ffa4cd67f20*=0x2) returned 1 [0182.838] LoadLibraryExA (lpLibFileName="ext-ms-win-branding-winbrand-l1-1-0.dll", hFile=0x0, dwFlags=0x0) returned 0x7ffa59ea0000 [0182.849] GetProcAddress (hModule=0x7ffa59ea0000, lpProcName="BrandingLoadString") returned 0x7ffa59ea13d0 [0182.849] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x2, lpflOldProtect=0x115c510 | out: lpflOldProtect=0x115c510*=0x4) returned 1 [0182.849] BrandingLoadString () returned 0x9 [0182.883] BrandingLoadString () returned 0xe [0182.887] GetWindowsDirectoryW (in: lpBuffer=0x115cc30, uSize=0x104 | out: lpBuffer="C:\\Windows") returned 0xa [0182.887] _vsnwprintf (in: _Buffer=0x115c5b0, _BufferCount=0x104, _Format="\\\\.\\%c:", _ArgList=0x115c568 | out: _Buffer="\\\\.\\C:") returned 6 [0182.887] CreateFileW (lpFileName="\\\\.\\C:" (normalized: "c:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0182.887] GetLastError () returned 0x5 [0182.887] CreateFileW (lpFileName="\\\\.\\C:" (normalized: "c:"), dwDesiredAccess=0x0, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b0 [0182.887] DeviceIoControl (in: hDevice=0x3b0, dwIoControlCode=0x2d1080, lpInBuffer=0x0, nInBufferSize=0x0, lpOutBuffer=0x115c598, nOutBufferSize=0xc, lpBytesReturned=0x115c590, lpOverlapped=0x0 | out: lpOutBuffer=0x115c598*, lpBytesReturned=0x115c590*=0xc, lpOverlapped=0x0) returned 1 [0182.888] _vsnwprintf (in: _Buffer=0x115ce40, _BufferCount=0x103, _Format="\\Device\\Harddisk%ld\\Partition%ld", _ArgList=0x115c568 | out: _Buffer="\\Device\\Harddisk0\\Partition1") returned 28 [0182.888] CloseHandle (hObject=0x3b0) returned 1 [0182.905] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0182.905] CloseHandle (hObject=0x0) returned 0 [0182.905] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0182.909] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0182.909] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.909] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0182.921] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0182.921] CloseHandle (hObject=0x0) returned 0 [0182.921] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0182.924] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0182.925] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.925] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0182.936] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0182.936] CloseHandle (hObject=0x0) returned 0 [0182.937] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0182.941] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0182.941] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.941] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0182.953] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0182.953] CloseHandle (hObject=0x0) returned 0 [0182.953] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0182.956] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0182.957] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.957] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0182.969] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0182.969] CloseHandle (hObject=0x0) returned 0 [0182.969] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0182.973] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0182.973] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.973] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0182.984] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0182.984] CloseHandle (hObject=0x0) returned 0 [0182.986] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0182.989] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0182.989] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0182.990] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.003] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0183.003] CloseHandle (hObject=0x0) returned 0 [0183.003] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0183.006] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0183.007] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.007] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.020] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0183.020] CloseHandle (hObject=0x0) returned 0 [0183.021] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0183.024] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0183.025] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.025] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.038] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0183.038] CloseHandle (hObject=0x0) returned 0 [0183.039] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0183.042] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0183.043] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.043] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.054] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0183.054] CloseHandle (hObject=0x0) returned 0 [0183.055] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0183.058] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0183.059] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.059] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.072] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0183.072] CloseHandle (hObject=0x0) returned 0 [0183.073] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0183.076] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0183.076] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.077] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.090] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0183.090] CloseHandle (hObject=0x0) returned 0 [0183.090] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0183.094] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0183.095] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.095] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.106] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0183.106] CloseHandle (hObject=0x0) returned 0 [0183.106] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0183.112] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0183.112] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.112] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.124] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0183.124] CloseHandle (hObject=0x0) returned 0 [0183.124] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0183.128] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0183.128] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.128] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.140] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0183.140] CloseHandle (hObject=0x0) returned 0 [0183.140] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0183.144] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0183.144] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.144] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.156] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0183.156] CloseHandle (hObject=0x0) returned 0 [0183.156] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0183.159] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0183.160] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.160] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.171] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0183.171] CloseHandle (hObject=0x0) returned 0 [0183.172] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0183.176] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0183.177] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.177] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.188] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0183.188] CloseHandle (hObject=0x0) returned 0 [0183.189] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0183.192] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0183.192] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.192] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.204] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0183.204] CloseHandle (hObject=0x0) returned 0 [0183.205] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0183.208] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0183.208] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.209] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.223] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0183.223] CloseHandle (hObject=0x0) returned 0 [0183.223] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0183.226] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0183.227] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.227] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.240] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0183.240] CloseHandle (hObject=0x0) returned 0 [0183.241] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0183.244] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0183.245] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.245] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.263] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x3b0 [0183.263] GetLastError () returned 0x0 [0183.263] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0183.263] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0183.263] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0183.263] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0183.263] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0183.264] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0183.265] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0183.265] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0183.265] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0183.266] malloc (_Size=0x18) returned 0xd64e30 [0183.266] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x431906, lpBuffer=0xd64e30, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64e30*, lpNumberOfBytesRead=0x0) returned 1 [0183.266] free (_Block=0xd64e30) [0183.267] CloseHandle (hObject=0x3b0) returned 1 [0183.267] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0183.270] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0183.271] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.271] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.283] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x3b0 [0183.283] GetLastError () returned 0x0 [0183.283] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0183.283] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0183.283] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0183.283] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0183.283] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0183.284] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0183.284] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0183.285] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0183.285] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0183.285] malloc (_Size=0x32) returned 0xd60c30 [0183.285] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x551918, lpBuffer=0xd60c30, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60c30*, lpNumberOfBytesRead=0x0) returned 1 [0183.285] free (_Block=0xd60c30) [0183.286] CloseHandle (hObject=0x3b0) returned 1 [0183.286] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0183.289] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0183.290] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.290] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.301] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x3b0 [0183.301] GetLastError () returned 0x0 [0183.301] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0183.301] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0183.302] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0183.302] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0183.302] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0183.302] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0183.303] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0183.303] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0183.303] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0183.303] malloc (_Size=0x64) returned 0xd601e0 [0183.303] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x403134, lpBuffer=0xd601e0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd601e0*, lpNumberOfBytesRead=0x0) returned 1 [0183.304] free (_Block=0xd601e0) [0183.304] CloseHandle (hObject=0x3b0) returned 1 [0183.305] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0183.308] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0183.308] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.308] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.321] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0183.321] CloseHandle (hObject=0x0) returned 0 [0183.322] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0183.325] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0183.325] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.325] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.339] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x3b0 [0183.339] GetLastError () returned 0x0 [0183.339] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0183.339] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0183.339] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0183.339] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0183.339] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0183.340] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0183.341] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0183.341] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0183.341] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0183.341] malloc (_Size=0x118) returned 0xd7d4e0 [0183.341] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x603388, lpBuffer=0xd7d4e0, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d4e0*, lpNumberOfBytesRead=0x0) returned 1 [0183.341] free (_Block=0xd7d4e0) [0183.342] CloseHandle (hObject=0x3b0) returned 1 [0183.342] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0183.346] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0183.347] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.347] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.358] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x3b0 [0183.358] GetLastError () returned 0x0 [0183.358] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0183.358] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0183.358] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0183.358] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0183.358] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0183.359] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0183.360] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0183.360] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0183.360] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0183.360] malloc (_Size=0x6c) returned 0xd62120 [0183.360] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x53190c, lpBuffer=0xd62120, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0183.361] free (_Block=0xd62120) [0183.361] CloseHandle (hObject=0x3b0) returned 1 [0183.362] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0183.365] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0183.365] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.365] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.377] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x3b0 [0183.377] GetLastError () returned 0x0 [0183.377] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0183.377] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0183.377] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0183.377] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0183.377] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0183.378] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0183.379] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0183.379] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0183.379] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0183.379] malloc (_Size=0x11a) returned 0xd7d4d0 [0183.379] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x60334a, lpBuffer=0xd7d4d0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d4d0*, lpNumberOfBytesRead=0x0) returned 1 [0183.379] free (_Block=0xd7d4d0) [0183.380] CloseHandle (hObject=0x3b0) returned 1 [0183.380] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0183.383] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0183.384] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.384] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.395] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x3b0 [0183.395] GetLastError () returned 0x0 [0183.395] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0183.395] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0183.395] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0183.395] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0183.395] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0183.396] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0183.397] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0183.397] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0183.397] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0183.397] malloc (_Size=0x48) returned 0xd5c570 [0183.397] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0183.397] free (_Block=0xd5c570) [0183.398] CloseHandle (hObject=0x3b0) returned 1 [0183.398] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0183.401] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0183.402] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.402] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.414] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x3b0 [0183.414] GetLastError () returned 0x0 [0183.414] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0183.415] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0183.415] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0183.415] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0183.415] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0183.416] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0183.416] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0183.416] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0183.417] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0183.417] malloc (_Size=0xda) returned 0xd7d420 [0183.417] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x40330a, lpBuffer=0xd7d420, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0183.417] free (_Block=0xd7d420) [0183.418] CloseHandle (hObject=0x3b0) returned 1 [0183.479] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0183.482] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0183.483] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.483] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.494] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x3b0 [0183.494] GetLastError () returned 0x0 [0183.494] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0183.494] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0183.494] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0183.495] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0183.495] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0183.495] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0183.496] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0183.496] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0183.496] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0183.496] malloc (_Size=0x6e) returned 0xd62120 [0183.496] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x5f195e, lpBuffer=0xd62120, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0183.497] free (_Block=0xd62120) [0183.497] CloseHandle (hObject=0x3b0) returned 1 [0183.498] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0183.501] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0183.502] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.502] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.513] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x3b0 [0183.513] GetLastError () returned 0x0 [0183.514] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0183.514] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0183.514] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0183.514] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0183.514] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0183.515] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0183.515] NtQueryInformationProcess (in: ProcessHandle=0x3b0, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0183.515] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0183.516] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0183.516] malloc (_Size=0x64) returned 0xd60090 [0183.516] ReadProcessMemory (in: hProcess=0x3b0, lpBaseAddress=0x571954, lpBuffer=0xd60090, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60090*, lpNumberOfBytesRead=0x0) returned 1 [0183.516] free (_Block=0xd60090) [0183.535] CloseHandle (hObject=0x3b0) returned 1 [0183.535] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0183.538] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0183.539] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.539] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.552] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0183.552] CloseHandle (hObject=0x0) returned 0 [0183.553] free (_Block=0xd65370) [0183.553] malloc (_Size=0x48) returned 0xd5c570 [0183.553] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xf35db526, dwHighDateTime=0x1d92b8e)) [0183.553] SetEvent (hEvent=0x24c) returned 1 [0183.559] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x5783d0 [0183.559] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5783d0, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0183.559] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783d0) returned 1 [0183.559] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0183.732] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0183.802] RtlRestoreLastWin32Error () returned 0x3f1000 [0183.802] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0183.802] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578470 [0183.802] RtlRestoreLastWin32Error () returned 0x3f1000 [0183.802] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578470, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578470, pcchLanguagesBuffer=0x115dff0) returned 1 [0183.802] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0183.802] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578470) returned 1 [0183.802] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596500 [0183.802] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596500, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0183.802] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596500) returned 1 [0183.803] SafeArrayGetElemsize (psa=0x593510) returned 0x8 [0183.803] SafeArrayPutElement (psa=0x593510, rgIndices=0x115d898, pv=0x598038) returned 0x0 [0183.803] SafeArrayRedim (in: psa=0x593510, psaboundNew=0x115d8b0 | out: psa=0x593510) returned 0x0 [0183.803] SafeArrayCopy (in: psa=0x593510, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0183.804] SetEvent (hEvent=0x24c) returned 1 [0183.805] free (_Block=0xd5c570) [0183.811] GetCurrentThread () returned 0xfffffffffffffffe [0183.811] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0183.811] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0183.812] RtlRestoreLastWin32Error () returned 0x3f1000 [0183.812] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0183.812] GetLastError () returned 0x514 [0183.812] CloseHandle (hObject=0x244) returned 1 [0183.812] malloc (_Size=0x18) returned 0xd64870 [0183.812] SafeArrayPutElement (psa=0x593090, rgIndices=0x115d660, pv=0x592cc8) returned 0x0 [0183.812] SafeArrayPutElement (psa=0x593510, rgIndices=0x115d660, pv=0x592cc8) returned 0x0 [0183.812] free (_Block=0xd64870) [0183.812] malloc (_Size=0x8000) returned 0xd65370 [0183.812] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0183.813] free (_Block=0xd65370) [0183.814] malloc (_Size=0x10000) returned 0xd65370 [0183.815] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0183.816] free (_Block=0xd65370) [0183.816] malloc (_Size=0x18000) returned 0xd65370 [0183.816] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0x0 [0183.817] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0183.820] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0183.821] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.821] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.837] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0183.837] CloseHandle (hObject=0x0) returned 0 [0183.837] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0183.840] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0183.841] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.841] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.853] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0183.853] CloseHandle (hObject=0x0) returned 0 [0183.853] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0183.856] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0183.857] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.857] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.869] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0183.869] CloseHandle (hObject=0x0) returned 0 [0183.869] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0183.872] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0183.873] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.873] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.887] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0183.887] CloseHandle (hObject=0x0) returned 0 [0183.887] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0183.890] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0183.891] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.891] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.903] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0183.903] CloseHandle (hObject=0x0) returned 0 [0183.903] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0183.906] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0183.907] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.907] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.918] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0183.918] CloseHandle (hObject=0x0) returned 0 [0183.919] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0183.922] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0183.924] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.924] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.935] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0183.935] CloseHandle (hObject=0x0) returned 0 [0183.935] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0183.939] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0183.939] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.939] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.951] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0183.951] CloseHandle (hObject=0x0) returned 0 [0183.951] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0183.954] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0183.955] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.955] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.966] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0183.966] CloseHandle (hObject=0x0) returned 0 [0183.967] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0183.971] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0183.972] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.972] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0183.983] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0183.983] CloseHandle (hObject=0x0) returned 0 [0183.983] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0183.988] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0183.989] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0183.989] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.001] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0184.001] CloseHandle (hObject=0x0) returned 0 [0184.001] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0184.004] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0184.005] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.005] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.017] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0184.017] CloseHandle (hObject=0x0) returned 0 [0184.017] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0184.020] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0184.021] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.021] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.032] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0184.032] CloseHandle (hObject=0x0) returned 0 [0184.033] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0184.036] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0184.037] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.037] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.048] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0184.048] CloseHandle (hObject=0x0) returned 0 [0184.049] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0184.052] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0184.053] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.053] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.066] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0184.066] CloseHandle (hObject=0x0) returned 0 [0184.066] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0184.069] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0184.070] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.070] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.082] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0184.082] CloseHandle (hObject=0x0) returned 0 [0184.082] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0184.085] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0184.086] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.086] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.101] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0184.101] CloseHandle (hObject=0x0) returned 0 [0184.101] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0184.104] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0184.105] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.105] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.116] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0184.116] CloseHandle (hObject=0x0) returned 0 [0184.117] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0184.120] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0184.121] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.121] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.133] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0184.133] CloseHandle (hObject=0x0) returned 0 [0184.134] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0184.137] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0184.138] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.138] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.151] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0184.151] CloseHandle (hObject=0x0) returned 0 [0184.152] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0184.155] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0184.156] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.156] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.168] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0184.168] CloseHandle (hObject=0x0) returned 0 [0184.169] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0184.172] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0184.178] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.178] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.189] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0184.189] GetLastError () returned 0x0 [0184.189] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0184.189] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0184.189] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0184.190] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0184.190] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0184.190] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0184.191] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0184.191] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0184.191] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0184.192] malloc (_Size=0x18) returned 0xd64a30 [0184.192] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64a30, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64a30*, lpNumberOfBytesRead=0x0) returned 1 [0184.192] free (_Block=0xd64a30) [0184.192] CloseHandle (hObject=0x244) returned 1 [0184.193] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0184.196] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0184.197] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.197] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.211] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0184.211] GetLastError () returned 0x0 [0184.211] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0184.211] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0184.211] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0184.212] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0184.212] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0184.212] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0184.213] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0184.213] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0184.213] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0184.213] malloc (_Size=0x32) returned 0xd61170 [0184.213] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd61170, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd61170*, lpNumberOfBytesRead=0x0) returned 1 [0184.214] free (_Block=0xd61170) [0184.214] CloseHandle (hObject=0x244) returned 1 [0184.215] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0184.218] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0184.218] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.219] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.230] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0184.230] GetLastError () returned 0x0 [0184.230] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0184.230] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0184.230] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0184.230] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0184.230] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0184.231] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0184.232] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0184.232] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0184.232] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0184.232] malloc (_Size=0x64) returned 0xd60330 [0184.232] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60330, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60330*, lpNumberOfBytesRead=0x0) returned 1 [0184.232] free (_Block=0xd60330) [0184.233] CloseHandle (hObject=0x244) returned 1 [0184.233] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0184.236] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0184.237] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.237] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.249] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0184.249] CloseHandle (hObject=0x0) returned 0 [0184.249] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0184.259] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0184.260] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.260] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.272] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0184.272] GetLastError () returned 0x0 [0184.272] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0184.272] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0184.272] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0184.272] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0184.272] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0184.273] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0184.274] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0184.274] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0184.274] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0184.274] malloc (_Size=0x118) returned 0xd7d420 [0184.274] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd7d420, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0184.275] free (_Block=0xd7d420) [0184.276] CloseHandle (hObject=0x244) returned 1 [0184.276] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0184.279] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0184.280] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.280] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.292] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0184.292] GetLastError () returned 0x0 [0184.292] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0184.292] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0184.292] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0184.292] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0184.292] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0184.293] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0184.294] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0184.294] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0184.294] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0184.294] malloc (_Size=0x6c) returned 0xd65010 [0184.294] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd65010, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd65010*, lpNumberOfBytesRead=0x0) returned 1 [0184.294] free (_Block=0xd65010) [0184.295] CloseHandle (hObject=0x244) returned 1 [0184.295] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0184.300] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0184.301] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.301] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.312] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0184.312] GetLastError () returned 0x0 [0184.312] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0184.312] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0184.312] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0184.312] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0184.312] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0184.315] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0184.316] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0184.316] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0184.316] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0184.317] malloc (_Size=0x11a) returned 0xd7d420 [0184.317] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd7d420, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0184.317] free (_Block=0xd7d420) [0184.318] CloseHandle (hObject=0x244) returned 1 [0184.318] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0184.321] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0184.322] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.322] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.333] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0184.333] GetLastError () returned 0x0 [0184.333] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0184.333] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0184.333] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0184.333] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0184.333] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0184.334] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0184.335] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0184.335] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0184.335] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0184.335] malloc (_Size=0x48) returned 0xd5c570 [0184.335] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0184.336] free (_Block=0xd5c570) [0184.336] CloseHandle (hObject=0x244) returned 1 [0184.336] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0184.339] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0184.340] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.340] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.351] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0184.351] GetLastError () returned 0x0 [0184.352] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0184.352] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0184.352] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0184.352] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0184.352] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0184.352] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0184.353] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0184.353] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0184.353] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0184.354] malloc (_Size=0xda) returned 0xd62120 [0184.354] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd62120, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0184.354] free (_Block=0xd62120) [0184.355] CloseHandle (hObject=0x244) returned 1 [0184.397] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0184.400] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0184.401] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.401] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.412] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0184.412] GetLastError () returned 0x0 [0184.412] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0184.412] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0184.412] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0184.413] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0184.413] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0184.413] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0184.414] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0184.414] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0184.414] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0184.415] malloc (_Size=0x6e) returned 0xd62120 [0184.415] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd62120, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0184.415] free (_Block=0xd62120) [0184.415] CloseHandle (hObject=0x244) returned 1 [0184.416] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0184.419] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0184.420] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.420] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.433] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0184.433] GetLastError () returned 0x0 [0184.433] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0184.433] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0184.433] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0184.434] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0184.434] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0184.434] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0184.435] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0184.435] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0184.435] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0184.435] malloc (_Size=0x64) returned 0xd60330 [0184.435] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd60330, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60330*, lpNumberOfBytesRead=0x0) returned 1 [0184.436] free (_Block=0xd60330) [0184.436] CloseHandle (hObject=0x244) returned 1 [0184.437] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0184.461] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0184.462] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.462] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.474] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0184.474] CloseHandle (hObject=0x0) returned 0 [0184.475] free (_Block=0xd65370) [0184.475] malloc (_Size=0x48) returned 0xd5c570 [0184.475] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xf3ea5fde, dwHighDateTime=0x1d92b8e)) [0184.476] SetEvent (hEvent=0x24c) returned 1 [0184.480] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x5783c0 [0184.480] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5783c0, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0184.480] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0184.480] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0184.613] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0184.676] RtlRestoreLastWin32Error () returned 0x3f1000 [0184.676] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0184.676] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578470 [0184.676] RtlRestoreLastWin32Error () returned 0x3f1000 [0184.676] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578470, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578470, pcchLanguagesBuffer=0x115dff0) returned 1 [0184.676] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0184.676] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578470) returned 1 [0184.676] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596680 [0184.676] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596680, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0184.676] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596680) returned 1 [0184.677] SafeArrayGetElemsize (psa=0x593b10) returned 0x8 [0184.677] SafeArrayPutElement (psa=0x593b10, rgIndices=0x115d898, pv=0x5981e8) returned 0x0 [0184.677] SafeArrayRedim (in: psa=0x593b10, psaboundNew=0x115d8b0 | out: psa=0x593b10) returned 0x0 [0184.678] SafeArrayCopy (in: psa=0x593b10, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0184.678] SetEvent (hEvent=0x24c) returned 1 [0184.679] free (_Block=0xd5c570) [0184.679] GetCurrentThread () returned 0xfffffffffffffffe [0184.679] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0184.679] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0184.680] RtlRestoreLastWin32Error () returned 0x3f1000 [0184.680] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0184.680] GetLastError () returned 0x514 [0184.680] CloseHandle (hObject=0x244) returned 1 [0184.680] malloc (_Size=0x18) returned 0xd648b0 [0184.680] SafeArrayPutElement (psa=0x593450, rgIndices=0x115d660, pv=0x593a88) returned 0x0 [0184.680] SafeArrayPutElement (psa=0x5933d0, rgIndices=0x115d660, pv=0x593a88) returned 0x0 [0184.680] free (_Block=0xd648b0) [0184.680] malloc (_Size=0x8000) returned 0xd65370 [0184.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0184.681] free (_Block=0xd65370) [0184.682] malloc (_Size=0x10000) returned 0xd65370 [0184.683] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0184.684] free (_Block=0xd65370) [0184.684] malloc (_Size=0x18000) returned 0xd65370 [0184.684] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0x0 [0184.685] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0184.688] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0184.689] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.689] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.714] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0184.714] CloseHandle (hObject=0x0) returned 0 [0184.715] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0184.718] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0184.719] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.719] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.730] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0184.730] CloseHandle (hObject=0x0) returned 0 [0184.731] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0184.734] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0184.735] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.735] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.747] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0184.747] CloseHandle (hObject=0x0) returned 0 [0184.747] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0184.761] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0184.762] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.762] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.777] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0184.777] CloseHandle (hObject=0x0) returned 0 [0184.778] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0184.781] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0184.782] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.782] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.793] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0184.793] CloseHandle (hObject=0x0) returned 0 [0184.793] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0184.796] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0184.799] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.799] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.810] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0184.810] CloseHandle (hObject=0x0) returned 0 [0184.810] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0184.814] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0184.815] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.815] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.826] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0184.826] CloseHandle (hObject=0x0) returned 0 [0184.826] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0184.829] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0184.830] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.830] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.842] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0184.842] CloseHandle (hObject=0x0) returned 0 [0184.842] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0184.845] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0184.847] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.847] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.858] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0184.858] CloseHandle (hObject=0x0) returned 0 [0184.859] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0184.864] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0184.865] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.865] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.879] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0184.879] CloseHandle (hObject=0x0) returned 0 [0184.879] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0184.882] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0184.883] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.883] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.895] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0184.895] CloseHandle (hObject=0x0) returned 0 [0184.895] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0184.898] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0184.899] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.899] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.910] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0184.910] CloseHandle (hObject=0x0) returned 0 [0184.911] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0184.914] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0184.914] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.915] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.926] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0184.926] CloseHandle (hObject=0x0) returned 0 [0184.926] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0184.929] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0184.930] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.930] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.943] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0184.943] CloseHandle (hObject=0x0) returned 0 [0184.944] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0184.947] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0184.948] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.948] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.959] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0184.959] CloseHandle (hObject=0x0) returned 0 [0184.959] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0184.962] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0184.963] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.963] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0184.977] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0184.977] CloseHandle (hObject=0x0) returned 0 [0184.978] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0184.981] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0184.981] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.981] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.006] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0185.006] CloseHandle (hObject=0x0) returned 0 [0185.006] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0185.011] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0185.012] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.012] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.025] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0185.025] CloseHandle (hObject=0x0) returned 0 [0185.025] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0185.028] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0185.029] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.029] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.040] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0185.040] CloseHandle (hObject=0x0) returned 0 [0185.041] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0185.044] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0185.045] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.045] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.057] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0185.057] CloseHandle (hObject=0x0) returned 0 [0185.058] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0185.061] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0185.062] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.062] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.073] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0185.073] CloseHandle (hObject=0x0) returned 0 [0185.073] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0185.076] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0185.077] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.077] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.091] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0185.091] GetLastError () returned 0x0 [0185.091] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0185.091] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0185.091] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0185.091] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0185.091] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0185.092] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0185.093] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0185.093] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0185.093] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0185.093] malloc (_Size=0x18) returned 0xd64ef0 [0185.093] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64ef0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64ef0*, lpNumberOfBytesRead=0x0) returned 1 [0185.093] free (_Block=0xd64ef0) [0185.094] CloseHandle (hObject=0x244) returned 1 [0185.095] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0185.098] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0185.099] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.099] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.111] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0185.111] GetLastError () returned 0x0 [0185.111] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0185.111] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0185.111] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0185.111] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0185.111] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0185.112] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0185.113] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0185.113] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0185.113] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0185.113] malloc (_Size=0x32) returned 0xd60d70 [0185.113] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd60d70, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60d70*, lpNumberOfBytesRead=0x0) returned 1 [0185.113] free (_Block=0xd60d70) [0185.114] CloseHandle (hObject=0x244) returned 1 [0185.114] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0185.117] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0185.118] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.118] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0185.129] GetLastError () returned 0x0 [0185.130] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0185.130] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0185.130] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0185.130] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0185.130] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0185.131] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0185.131] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0185.131] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0185.132] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0185.132] malloc (_Size=0x64) returned 0xd60100 [0185.132] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60100, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60100*, lpNumberOfBytesRead=0x0) returned 1 [0185.132] free (_Block=0xd60100) [0185.133] CloseHandle (hObject=0x244) returned 1 [0185.133] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0185.136] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0185.137] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.137] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.148] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0185.148] CloseHandle (hObject=0x0) returned 0 [0185.149] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0185.152] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0185.153] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.153] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.167] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0185.167] GetLastError () returned 0x0 [0185.167] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0185.167] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0185.167] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0185.167] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0185.167] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0185.168] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0185.168] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0185.168] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0185.169] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0185.169] malloc (_Size=0x118) returned 0xd7d420 [0185.169] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd7d420, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0185.170] free (_Block=0xd7d420) [0185.170] CloseHandle (hObject=0x244) returned 1 [0185.171] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0185.174] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0185.175] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.175] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.186] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0185.186] GetLastError () returned 0x0 [0185.186] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0185.186] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0185.186] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0185.187] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0185.187] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0185.187] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0185.192] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0185.192] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0185.192] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0185.193] malloc (_Size=0x6c) returned 0xd65010 [0185.193] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd65010, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd65010*, lpNumberOfBytesRead=0x0) returned 1 [0185.193] free (_Block=0xd65010) [0185.194] CloseHandle (hObject=0x244) returned 1 [0185.194] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0185.197] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0185.198] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.198] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.209] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0185.209] GetLastError () returned 0x0 [0185.209] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0185.209] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0185.209] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0185.209] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0185.210] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0185.210] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0185.211] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0185.211] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0185.211] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0185.211] malloc (_Size=0x11a) returned 0xd7d420 [0185.211] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd7d420, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0185.212] free (_Block=0xd7d420) [0185.212] CloseHandle (hObject=0x244) returned 1 [0185.213] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0185.216] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0185.216] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.216] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.229] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0185.229] GetLastError () returned 0x0 [0185.229] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0185.229] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0185.230] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0185.230] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0185.230] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0185.230] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0185.231] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0185.231] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0185.231] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0185.231] malloc (_Size=0x48) returned 0xd5c570 [0185.231] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0185.232] free (_Block=0xd5c570) [0185.232] CloseHandle (hObject=0x244) returned 1 [0185.233] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0185.236] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0185.237] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.237] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.248] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0185.248] GetLastError () returned 0x0 [0185.248] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0185.248] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0185.248] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0185.248] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0185.248] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0185.249] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0185.250] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0185.250] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0185.260] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0185.260] malloc (_Size=0xda) returned 0xd62120 [0185.260] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd62120, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0185.261] free (_Block=0xd62120) [0185.261] CloseHandle (hObject=0x244) returned 1 [0185.316] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0185.319] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0185.320] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.320] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.331] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0185.331] GetLastError () returned 0x0 [0185.331] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0185.331] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0185.332] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0185.332] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0185.332] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0185.332] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0185.333] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0185.333] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0185.333] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0185.334] malloc (_Size=0x6e) returned 0xd62120 [0185.334] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd62120, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0185.334] free (_Block=0xd62120) [0185.334] CloseHandle (hObject=0x244) returned 1 [0185.335] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0185.338] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0185.339] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.339] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.368] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0185.368] GetLastError () returned 0x0 [0185.368] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0185.368] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0185.368] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0185.368] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0185.368] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0185.369] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0185.370] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0185.370] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0185.370] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0185.370] malloc (_Size=0x64) returned 0xd60100 [0185.370] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd60100, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60100*, lpNumberOfBytesRead=0x0) returned 1 [0185.371] free (_Block=0xd60100) [0185.371] CloseHandle (hObject=0x244) returned 1 [0185.371] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0185.374] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0185.375] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.376] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.387] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0185.387] CloseHandle (hObject=0x0) returned 0 [0185.388] free (_Block=0xd65370) [0185.388] malloc (_Size=0x48) returned 0xd5c570 [0185.388] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xf474aa45, dwHighDateTime=0x1d92b8e)) [0185.388] SetEvent (hEvent=0x24c) returned 1 [0185.400] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578410 [0185.400] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578410, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0185.400] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578410) returned 1 [0185.400] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0185.532] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0185.576] RtlRestoreLastWin32Error () returned 0x3f1000 [0185.576] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0185.576] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578470 [0185.576] RtlRestoreLastWin32Error () returned 0x3f1000 [0185.576] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578470, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578470, pcchLanguagesBuffer=0x115dff0) returned 1 [0185.576] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0185.576] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578470) returned 1 [0185.576] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x5966a0 [0185.576] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5966a0, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0185.576] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5966a0) returned 1 [0185.577] SafeArrayGetElemsize (psa=0x5933d0) returned 0x8 [0185.577] SafeArrayPutElement (psa=0x5933d0, rgIndices=0x115d898, pv=0x5982d8) returned 0x0 [0185.578] SafeArrayRedim (in: psa=0x5933d0, psaboundNew=0x115d8b0 | out: psa=0x5933d0) returned 0x0 [0185.578] SafeArrayCopy (in: psa=0x5933d0, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0185.581] SetEvent (hEvent=0x24c) returned 1 [0185.582] free (_Block=0xd5c570) [0185.582] GetCurrentThread () returned 0xfffffffffffffffe [0185.582] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0185.582] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0185.583] RtlRestoreLastWin32Error () returned 0x3f1000 [0185.583] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0185.583] GetLastError () returned 0x514 [0185.583] CloseHandle (hObject=0x244) returned 1 [0185.583] malloc (_Size=0x18) returned 0xd64a10 [0185.583] SafeArrayPutElement (psa=0x592f90, rgIndices=0x115d660, pv=0x5932c8) returned 0x0 [0185.583] SafeArrayPutElement (psa=0x593b10, rgIndices=0x115d660, pv=0x5932c8) returned 0x0 [0185.583] free (_Block=0xd64a10) [0185.583] malloc (_Size=0x8000) returned 0xd65370 [0185.583] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0185.584] free (_Block=0xd65370) [0185.585] malloc (_Size=0x10000) returned 0xd65370 [0185.586] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0185.587] free (_Block=0xd65370) [0185.587] malloc (_Size=0x18000) returned 0xd65370 [0185.587] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0x0 [0185.588] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0185.591] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0185.591] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.591] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.603] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0185.603] CloseHandle (hObject=0x0) returned 0 [0185.603] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0185.606] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0185.607] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.607] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.620] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0185.620] CloseHandle (hObject=0x0) returned 0 [0185.620] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0185.623] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0185.624] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.624] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.637] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0185.637] CloseHandle (hObject=0x0) returned 0 [0185.638] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0185.641] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0185.642] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.642] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.653] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0185.653] CloseHandle (hObject=0x0) returned 0 [0185.653] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0185.665] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0185.666] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.666] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.678] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0185.678] CloseHandle (hObject=0x0) returned 0 [0185.678] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0185.681] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0185.682] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.682] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.694] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0185.694] CloseHandle (hObject=0x0) returned 0 [0185.694] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0185.697] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0185.698] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.698] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.711] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0185.711] CloseHandle (hObject=0x0) returned 0 [0185.711] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0185.714] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0185.715] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.715] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.746] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0185.746] CloseHandle (hObject=0x0) returned 0 [0185.746] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0185.749] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0185.751] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.751] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.762] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0185.762] CloseHandle (hObject=0x0) returned 0 [0185.763] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0185.765] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0185.772] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.772] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.783] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0185.783] CloseHandle (hObject=0x0) returned 0 [0185.783] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0185.786] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0185.787] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.787] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.799] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0185.799] CloseHandle (hObject=0x0) returned 0 [0185.799] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0185.802] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0185.803] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.803] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.815] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0185.815] CloseHandle (hObject=0x0) returned 0 [0185.815] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0185.818] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0185.819] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.819] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.831] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0185.831] CloseHandle (hObject=0x0) returned 0 [0185.831] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0185.834] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0185.835] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.835] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.849] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0185.849] CloseHandle (hObject=0x0) returned 0 [0185.849] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0185.852] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0185.853] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.853] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.865] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0185.865] CloseHandle (hObject=0x0) returned 0 [0185.865] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0185.868] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0185.869] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.869] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.880] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0185.880] CloseHandle (hObject=0x0) returned 0 [0185.881] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0185.884] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0185.885] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.885] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.896] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0185.896] CloseHandle (hObject=0x0) returned 0 [0185.896] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0185.899] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0185.900] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.900] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.913] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0185.913] CloseHandle (hObject=0x0) returned 0 [0185.914] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0185.917] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0185.918] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.918] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.929] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0185.929] CloseHandle (hObject=0x0) returned 0 [0185.929] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0185.932] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0185.933] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.933] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.945] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0185.945] CloseHandle (hObject=0x0) returned 0 [0185.945] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0185.948] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0185.949] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.949] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.962] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0185.962] CloseHandle (hObject=0x0) returned 0 [0185.963] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0185.966] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0185.967] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.967] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.978] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0185.978] GetLastError () returned 0x0 [0185.978] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0185.978] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0185.978] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0185.978] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0185.978] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0185.979] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0185.980] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0185.980] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0185.980] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0185.980] malloc (_Size=0x18) returned 0xd64db0 [0185.980] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64db0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64db0*, lpNumberOfBytesRead=0x0) returned 1 [0185.980] free (_Block=0xd64db0) [0185.981] CloseHandle (hObject=0x244) returned 1 [0185.981] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0185.984] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0185.985] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0185.985] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0185.997] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0185.997] GetLastError () returned 0x0 [0185.997] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0185.997] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0185.998] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0185.998] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0185.998] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0185.998] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0185.999] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0185.999] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0185.999] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0186.000] malloc (_Size=0x32) returned 0xd606f0 [0186.000] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd606f0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd606f0*, lpNumberOfBytesRead=0x0) returned 1 [0186.000] free (_Block=0xd606f0) [0186.001] CloseHandle (hObject=0x244) returned 1 [0186.001] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0186.005] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0186.006] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0186.006] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0186.050] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0186.050] GetLastError () returned 0x0 [0186.050] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0186.050] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0186.050] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0186.050] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0186.050] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0186.051] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0186.052] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0186.052] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0186.052] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0186.052] malloc (_Size=0x64) returned 0xd603a0 [0186.052] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd603a0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd603a0*, lpNumberOfBytesRead=0x0) returned 1 [0186.053] free (_Block=0xd603a0) [0186.053] CloseHandle (hObject=0x244) returned 1 [0186.054] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0186.057] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0186.057] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0186.057] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0186.071] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0186.071] CloseHandle (hObject=0x0) returned 0 [0186.071] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0186.074] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0186.075] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0186.075] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0186.088] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0186.088] GetLastError () returned 0x0 [0186.088] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0186.088] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0186.088] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0186.088] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0186.088] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0186.089] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0186.090] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0186.090] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0186.090] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0186.090] malloc (_Size=0x118) returned 0xd7d420 [0186.091] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd7d420, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0186.091] free (_Block=0xd7d420) [0186.092] CloseHandle (hObject=0x244) returned 1 [0186.092] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0186.095] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0186.096] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0186.096] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0186.107] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0186.107] GetLastError () returned 0x0 [0186.107] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0186.108] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0186.108] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0186.108] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0186.108] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0186.108] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0186.109] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0186.109] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0186.109] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0186.110] malloc (_Size=0x6c) returned 0xd65010 [0186.110] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd65010, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd65010*, lpNumberOfBytesRead=0x0) returned 1 [0186.110] free (_Block=0xd65010) [0186.111] CloseHandle (hObject=0x244) returned 1 [0186.111] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0186.114] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0186.115] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0186.115] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0186.132] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0186.132] GetLastError () returned 0x0 [0186.132] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0186.132] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0186.132] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0186.133] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0186.133] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0186.133] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0186.134] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0186.134] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0186.134] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0186.134] malloc (_Size=0x11a) returned 0xd7d420 [0186.134] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd7d420, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0186.135] free (_Block=0xd7d420) [0186.135] CloseHandle (hObject=0x244) returned 1 [0186.136] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0186.139] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0186.140] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0186.140] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0186.151] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0186.151] GetLastError () returned 0x0 [0186.151] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0186.151] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0186.151] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0186.151] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0186.151] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0186.152] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0186.153] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0186.153] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0186.153] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0186.153] malloc (_Size=0x48) returned 0xd5c700 [0186.153] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c700, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c700*, lpNumberOfBytesRead=0x0) returned 1 [0186.154] free (_Block=0xd5c700) [0186.154] CloseHandle (hObject=0x244) returned 1 [0186.154] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0186.158] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0186.159] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0186.159] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0186.170] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0186.170] GetLastError () returned 0x0 [0186.170] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0186.171] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0186.171] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0186.171] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0186.171] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0186.171] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0186.175] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0186.175] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0186.175] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0186.175] malloc (_Size=0xda) returned 0xd62120 [0186.175] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd62120, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0186.176] free (_Block=0xd62120) [0186.176] CloseHandle (hObject=0x244) returned 1 [0186.225] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0186.228] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0186.229] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0186.229] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0186.241] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0186.241] GetLastError () returned 0x0 [0186.241] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0186.241] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0186.241] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0186.242] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0186.242] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0186.242] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0186.243] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0186.243] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0186.243] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0186.243] malloc (_Size=0x6e) returned 0xd62120 [0186.243] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd62120, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0186.244] free (_Block=0xd62120) [0186.244] CloseHandle (hObject=0x244) returned 1 [0186.245] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0186.248] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0186.249] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0186.249] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0186.260] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0186.260] GetLastError () returned 0x0 [0186.260] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0186.260] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0186.260] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0186.260] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0186.260] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0186.261] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0186.262] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0186.262] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0186.262] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0186.262] malloc (_Size=0x64) returned 0xd60410 [0186.262] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd60410, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60410*, lpNumberOfBytesRead=0x0) returned 1 [0186.263] free (_Block=0xd60410) [0186.263] CloseHandle (hObject=0x244) returned 1 [0186.263] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0186.299] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0186.300] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0186.300] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0186.311] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0186.311] CloseHandle (hObject=0x0) returned 0 [0186.313] free (_Block=0xd65370) [0186.313] malloc (_Size=0x48) returned 0xd5c570 [0186.313] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xf503b79c, dwHighDateTime=0x1d92b8e)) [0186.313] SetEvent (hEvent=0x24c) returned 1 [0186.317] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578470 [0186.317] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578470, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0186.317] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578470) returned 1 [0186.317] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0186.605] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0186.801] RtlRestoreLastWin32Error () returned 0x3f1000 [0186.801] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0186.801] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0186.801] RtlRestoreLastWin32Error () returned 0x3f1000 [0186.801] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0) returned 1 [0186.801] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783f0 [0186.801] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0186.802] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596880 [0186.802] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596880, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0186.802] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596880) returned 1 [0186.802] SafeArrayGetElemsize (psa=0x5938d0) returned 0x8 [0186.803] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d898, pv=0x598218) returned 0x0 [0186.803] SafeArrayRedim (in: psa=0x5938d0, psaboundNew=0x115d8b0 | out: psa=0x5938d0) returned 0x0 [0186.803] SafeArrayCopy (in: psa=0x5938d0, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0186.806] SetEvent (hEvent=0x24c) returned 1 [0186.807] free (_Block=0xd5c570) [0186.807] GetCurrentThread () returned 0xfffffffffffffffe [0186.807] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0186.807] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0186.808] RtlRestoreLastWin32Error () returned 0x3f1000 [0186.808] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0186.808] GetLastError () returned 0x514 [0186.808] CloseHandle (hObject=0x244) returned 1 [0186.808] malloc (_Size=0x18) returned 0xd648f0 [0186.808] SafeArrayPutElement (psa=0x593690, rgIndices=0x115d660, pv=0x5935c8) returned 0x0 [0186.808] SafeArrayPutElement (psa=0x592e50, rgIndices=0x115d660, pv=0x5935c8) returned 0x0 [0186.808] free (_Block=0xd648f0) [0186.808] malloc (_Size=0x8000) returned 0xd65370 [0186.808] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0186.809] free (_Block=0xd65370) [0186.810] malloc (_Size=0x10000) returned 0xd65370 [0186.811] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0186.812] free (_Block=0xd65370) [0186.812] malloc (_Size=0x18000) returned 0xd65370 [0186.812] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0x0 [0186.813] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0186.816] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0186.817] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0186.817] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0186.890] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0186.890] CloseHandle (hObject=0x0) returned 0 [0186.891] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0186.894] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0186.895] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0186.895] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0186.906] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0186.906] CloseHandle (hObject=0x0) returned 0 [0186.907] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0186.910] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0186.911] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0186.911] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0186.924] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0186.924] CloseHandle (hObject=0x0) returned 0 [0186.925] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0186.928] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0186.928] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0186.929] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0186.942] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0186.942] CloseHandle (hObject=0x0) returned 0 [0186.942] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0186.945] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0186.946] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0186.946] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0186.958] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0186.958] CloseHandle (hObject=0x0) returned 0 [0186.958] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0186.961] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0186.962] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0186.962] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0186.974] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0186.974] CloseHandle (hObject=0x0) returned 0 [0186.975] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0186.978] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0186.979] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0186.979] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0186.991] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0186.991] CloseHandle (hObject=0x0) returned 0 [0186.991] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0186.994] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0186.995] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0186.995] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.010] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0187.010] CloseHandle (hObject=0x0) returned 0 [0187.011] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0187.014] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0187.014] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.014] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.031] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0187.031] CloseHandle (hObject=0x0) returned 0 [0187.035] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0187.038] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0187.039] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.039] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.056] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0187.056] CloseHandle (hObject=0x0) returned 0 [0187.056] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0187.060] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0187.060] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.060] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.149] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0187.149] CloseHandle (hObject=0x0) returned 0 [0187.149] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0187.152] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0187.153] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.153] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.168] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0187.168] CloseHandle (hObject=0x0) returned 0 [0187.168] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0187.171] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0187.174] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.174] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.185] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0187.185] CloseHandle (hObject=0x0) returned 0 [0187.186] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0187.246] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0187.246] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.247] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.259] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0187.259] CloseHandle (hObject=0x0) returned 0 [0187.259] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0187.262] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0187.263] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.263] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.287] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0187.287] CloseHandle (hObject=0x0) returned 0 [0187.288] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0187.291] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0187.292] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.292] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.412] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0187.412] CloseHandle (hObject=0x0) returned 0 [0187.412] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0187.415] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0187.416] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.416] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.432] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0187.432] CloseHandle (hObject=0x0) returned 0 [0187.432] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0187.435] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0187.436] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.436] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.452] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0187.452] CloseHandle (hObject=0x0) returned 0 [0187.452] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0187.462] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0187.463] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.463] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.476] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0187.476] CloseHandle (hObject=0x0) returned 0 [0187.477] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0187.480] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0187.481] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.481] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.496] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0187.496] CloseHandle (hObject=0x0) returned 0 [0187.497] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0187.500] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0187.504] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.504] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.515] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0187.515] CloseHandle (hObject=0x0) returned 0 [0187.515] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0187.521] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0187.522] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.522] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.534] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0187.534] GetLastError () returned 0x0 [0187.534] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0187.534] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0187.534] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0187.534] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0187.534] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0187.535] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0187.536] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0187.536] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0187.536] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0187.536] malloc (_Size=0x18) returned 0xd64ab0 [0187.536] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64ab0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64ab0*, lpNumberOfBytesRead=0x0) returned 1 [0187.536] free (_Block=0xd64ab0) [0187.537] CloseHandle (hObject=0x244) returned 1 [0187.537] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0187.540] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0187.541] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.541] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.553] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0187.553] GetLastError () returned 0x0 [0187.553] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0187.553] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0187.553] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0187.553] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0187.553] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0187.554] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0187.555] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0187.555] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0187.555] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0187.555] malloc (_Size=0x32) returned 0xd614b0 [0187.555] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd614b0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd614b0*, lpNumberOfBytesRead=0x0) returned 1 [0187.556] free (_Block=0xd614b0) [0187.556] CloseHandle (hObject=0x244) returned 1 [0187.556] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0187.559] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0187.560] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.560] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.572] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0187.572] GetLastError () returned 0x0 [0187.572] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0187.572] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0187.572] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0187.572] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0187.573] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0187.573] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0187.574] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0187.574] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0187.574] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0187.574] malloc (_Size=0x64) returned 0xd603a0 [0187.574] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd603a0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd603a0*, lpNumberOfBytesRead=0x0) returned 1 [0187.575] free (_Block=0xd603a0) [0187.575] CloseHandle (hObject=0x244) returned 1 [0187.576] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0187.579] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0187.580] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.580] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.591] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0187.591] CloseHandle (hObject=0x0) returned 0 [0187.591] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0187.598] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0187.599] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.599] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.610] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0187.610] GetLastError () returned 0x0 [0187.610] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0187.611] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0187.611] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0187.611] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0187.611] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0187.611] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0187.612] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0187.612] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0187.612] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0187.613] malloc (_Size=0x118) returned 0xd7d420 [0187.613] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd7d420, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0187.614] free (_Block=0xd7d420) [0187.614] CloseHandle (hObject=0x244) returned 1 [0187.614] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0187.617] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0187.618] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.618] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.631] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0187.631] GetLastError () returned 0x0 [0187.631] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0187.631] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0187.631] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0187.631] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0187.631] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0187.632] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0187.633] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0187.633] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0187.633] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0187.633] malloc (_Size=0x6c) returned 0xd65010 [0187.633] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd65010, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd65010*, lpNumberOfBytesRead=0x0) returned 1 [0187.633] free (_Block=0xd65010) [0187.634] CloseHandle (hObject=0x244) returned 1 [0187.634] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0187.637] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0187.638] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.638] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.651] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0187.651] GetLastError () returned 0x0 [0187.651] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0187.651] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0187.651] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0187.651] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0187.651] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0187.652] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0187.653] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0187.653] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0187.653] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0187.653] malloc (_Size=0x11a) returned 0xd7d420 [0187.653] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd7d420, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0187.654] free (_Block=0xd7d420) [0187.654] CloseHandle (hObject=0x244) returned 1 [0187.655] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0187.659] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0187.659] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.659] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.671] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0187.671] GetLastError () returned 0x0 [0187.671] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0187.671] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0187.671] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0187.671] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0187.671] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0187.672] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0187.673] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0187.673] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0187.673] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0187.673] malloc (_Size=0x48) returned 0xd5c700 [0187.673] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c700, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c700*, lpNumberOfBytesRead=0x0) returned 1 [0187.674] free (_Block=0xd5c700) [0187.674] CloseHandle (hObject=0x244) returned 1 [0187.675] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0187.678] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0187.678] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.678] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.691] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0187.691] GetLastError () returned 0x0 [0187.691] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0187.691] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0187.691] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0187.691] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0187.691] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0187.692] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0187.693] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0187.693] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0187.693] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0187.693] malloc (_Size=0xda) returned 0xd62120 [0187.693] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd62120, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0187.693] free (_Block=0xd62120) [0187.694] CloseHandle (hObject=0x244) returned 1 [0187.741] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0187.744] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0187.745] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.745] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.757] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0187.757] GetLastError () returned 0x0 [0187.757] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0187.757] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0187.757] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0187.757] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0187.757] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0187.758] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0187.759] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0187.759] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0187.759] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0187.759] malloc (_Size=0x6e) returned 0xd62120 [0187.759] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd62120, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0187.759] free (_Block=0xd62120) [0187.760] CloseHandle (hObject=0x244) returned 1 [0187.760] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0187.763] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0187.764] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.764] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.796] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0187.796] GetLastError () returned 0x0 [0187.797] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0187.797] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0187.797] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0187.797] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0187.797] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0187.798] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0187.799] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0187.799] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0187.799] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0187.799] malloc (_Size=0x64) returned 0xd601e0 [0187.799] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd601e0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd601e0*, lpNumberOfBytesRead=0x0) returned 1 [0187.799] free (_Block=0xd601e0) [0187.800] CloseHandle (hObject=0x244) returned 1 [0187.800] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0187.803] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0187.804] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0187.804] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0187.818] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0187.818] CloseHandle (hObject=0x0) returned 0 [0187.819] free (_Block=0xd65370) [0187.819] malloc (_Size=0x48) returned 0xd5c570 [0187.819] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xf5e89959, dwHighDateTime=0x1d92b8e)) [0187.820] SetEvent (hEvent=0x24c) returned 1 [0187.835] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578390 [0187.835] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578390, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0187.835] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0187.835] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783f0) returned 1 [0187.940] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0188.000] RtlRestoreLastWin32Error () returned 0x3f1000 [0188.000] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0188.000] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578420 [0188.000] RtlRestoreLastWin32Error () returned 0x3f1000 [0188.000] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578420, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578420, pcchLanguagesBuffer=0x115dff0) returned 1 [0188.000] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578470 [0188.000] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578420) returned 1 [0188.000] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596580 [0188.000] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596580, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0188.000] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596580) returned 1 [0188.001] SafeArrayGetElemsize (psa=0x593750) returned 0x8 [0188.001] SafeArrayPutElement (psa=0x593750, rgIndices=0x115d898, pv=0x597d08) returned 0x0 [0188.001] SafeArrayRedim (in: psa=0x593750, psaboundNew=0x115d8b0 | out: psa=0x593750) returned 0x0 [0188.001] SafeArrayCopy (in: psa=0x593750, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0188.002] SetEvent (hEvent=0x24c) returned 1 [0188.003] free (_Block=0xd5c570) [0188.003] GetCurrentThread () returned 0xfffffffffffffffe [0188.003] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0188.003] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0188.004] RtlRestoreLastWin32Error () returned 0x3f1000 [0188.004] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0188.004] GetLastError () returned 0x514 [0188.004] CloseHandle (hObject=0x244) returned 1 [0188.004] malloc (_Size=0x18) returned 0xd64c10 [0188.004] SafeArrayPutElement (psa=0x593350, rgIndices=0x115d660, pv=0x5936c8) returned 0x0 [0188.004] SafeArrayPutElement (psa=0x593390, rgIndices=0x115d660, pv=0x5936c8) returned 0x0 [0188.004] free (_Block=0xd64c10) [0188.004] malloc (_Size=0x8000) returned 0xd65370 [0188.004] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0188.005] free (_Block=0xd65370) [0188.006] malloc (_Size=0x10000) returned 0xd65370 [0188.006] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0188.008] free (_Block=0xd65370) [0188.008] malloc (_Size=0x18000) returned 0xd65370 [0188.008] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0x0 [0188.008] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0188.011] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0188.012] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.012] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.024] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0188.024] CloseHandle (hObject=0x0) returned 0 [0188.024] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0188.027] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0188.028] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.028] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.043] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0188.043] CloseHandle (hObject=0x0) returned 0 [0188.043] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0188.047] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0188.049] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.049] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.060] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0188.060] CloseHandle (hObject=0x0) returned 0 [0188.060] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0188.065] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0188.066] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.066] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.078] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0188.078] CloseHandle (hObject=0x0) returned 0 [0188.078] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0188.082] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0188.083] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.083] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.094] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0188.094] CloseHandle (hObject=0x0) returned 0 [0188.095] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0188.098] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0188.099] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.099] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.111] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0188.111] CloseHandle (hObject=0x0) returned 0 [0188.111] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0188.114] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0188.115] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.115] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.127] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0188.127] CloseHandle (hObject=0x0) returned 0 [0188.128] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0188.131] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0188.132] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.132] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.146] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0188.146] CloseHandle (hObject=0x0) returned 0 [0188.147] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0188.150] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0188.151] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.151] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.162] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0188.162] CloseHandle (hObject=0x0) returned 0 [0188.162] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0188.166] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0188.167] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.167] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.180] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0188.180] CloseHandle (hObject=0x0) returned 0 [0188.180] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0188.183] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0188.184] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.184] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.196] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0188.196] CloseHandle (hObject=0x0) returned 0 [0188.196] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0188.199] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0188.200] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.200] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.212] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0188.212] CloseHandle (hObject=0x0) returned 0 [0188.212] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0188.216] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0188.216] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.216] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.228] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0188.228] CloseHandle (hObject=0x0) returned 0 [0188.229] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0188.232] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0188.233] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.233] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.244] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0188.244] CloseHandle (hObject=0x0) returned 0 [0188.245] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0188.248] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0188.249] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.249] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.262] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0188.262] CloseHandle (hObject=0x0) returned 0 [0188.263] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0188.277] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0188.277] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.278] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.291] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0188.291] CloseHandle (hObject=0x0) returned 0 [0188.292] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0188.295] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0188.296] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.296] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.307] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0188.307] CloseHandle (hObject=0x0) returned 0 [0188.307] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0188.311] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0188.311] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.311] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.323] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0188.323] CloseHandle (hObject=0x0) returned 0 [0188.324] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0188.327] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0188.328] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.328] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.339] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0188.339] CloseHandle (hObject=0x0) returned 0 [0188.340] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0188.343] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0188.344] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.344] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.356] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0188.356] CloseHandle (hObject=0x0) returned 0 [0188.357] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0188.363] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0188.363] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.363] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.375] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0188.376] CloseHandle (hObject=0x0) returned 0 [0188.376] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0188.379] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0188.380] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.380] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.397] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0188.397] GetLastError () returned 0x0 [0188.397] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0188.397] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0188.397] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0188.397] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0188.397] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0188.398] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0188.399] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0188.399] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0188.399] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0188.399] malloc (_Size=0x18) returned 0xd64990 [0188.399] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64990, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64990*, lpNumberOfBytesRead=0x0) returned 1 [0188.399] free (_Block=0xd64990) [0188.400] CloseHandle (hObject=0x244) returned 1 [0188.400] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0188.403] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0188.404] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.404] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.417] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0188.417] GetLastError () returned 0x0 [0188.417] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0188.417] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0188.418] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0188.418] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0188.418] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0188.418] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0188.419] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0188.419] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0188.419] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0188.419] malloc (_Size=0x32) returned 0xd614b0 [0188.420] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd614b0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd614b0*, lpNumberOfBytesRead=0x0) returned 1 [0188.420] free (_Block=0xd614b0) [0188.421] CloseHandle (hObject=0x244) returned 1 [0188.421] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0188.425] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0188.426] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.426] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.437] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0188.437] GetLastError () returned 0x0 [0188.437] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0188.437] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0188.438] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0188.438] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0188.438] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0188.439] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0188.439] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0188.439] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0188.439] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0188.440] malloc (_Size=0x64) returned 0xd60100 [0188.440] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60100, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60100*, lpNumberOfBytesRead=0x0) returned 1 [0188.440] free (_Block=0xd60100) [0188.441] CloseHandle (hObject=0x244) returned 1 [0188.441] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0188.444] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0188.445] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.445] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.457] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0188.457] CloseHandle (hObject=0x0) returned 0 [0188.457] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0188.460] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0188.461] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.461] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.475] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0188.475] GetLastError () returned 0x0 [0188.475] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0188.475] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0188.475] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0188.475] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0188.475] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0188.476] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0188.477] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0188.477] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0188.477] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0188.477] malloc (_Size=0x118) returned 0xd7d420 [0188.478] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd7d420, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0188.478] free (_Block=0xd7d420) [0188.478] CloseHandle (hObject=0x244) returned 1 [0188.479] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0188.482] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0188.483] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.483] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.495] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0188.495] GetLastError () returned 0x0 [0188.495] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0188.495] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0188.495] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0188.495] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0188.495] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0188.496] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0188.497] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0188.497] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0188.497] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0188.497] malloc (_Size=0x6c) returned 0xd65010 [0188.497] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd65010, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd65010*, lpNumberOfBytesRead=0x0) returned 1 [0188.498] free (_Block=0xd65010) [0188.498] CloseHandle (hObject=0x244) returned 1 [0188.498] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0188.505] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0188.506] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.506] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.518] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0188.518] GetLastError () returned 0x0 [0188.518] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0188.518] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0188.518] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0188.518] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0188.518] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0188.519] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0188.520] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0188.520] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0188.520] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0188.520] malloc (_Size=0x11a) returned 0xd7d420 [0188.520] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd7d420, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0188.520] free (_Block=0xd7d420) [0188.521] CloseHandle (hObject=0x244) returned 1 [0188.521] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0188.524] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0188.525] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.525] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.537] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0188.537] GetLastError () returned 0x0 [0188.537] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0188.537] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0188.538] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0188.538] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0188.538] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0188.538] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0188.539] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0188.539] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0188.539] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0188.540] malloc (_Size=0x48) returned 0xd5c570 [0188.540] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0188.540] free (_Block=0xd5c570) [0188.540] CloseHandle (hObject=0x244) returned 1 [0188.541] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0188.544] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0188.545] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.545] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.556] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0188.557] GetLastError () returned 0x0 [0188.557] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0188.557] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0188.557] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0188.557] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0188.557] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0188.558] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0188.558] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0188.559] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0188.559] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0188.559] malloc (_Size=0xda) returned 0xd62120 [0188.559] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd62120, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0188.559] free (_Block=0xd62120) [0188.560] CloseHandle (hObject=0x244) returned 1 [0188.601] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0188.604] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0188.605] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.605] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.617] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0188.617] GetLastError () returned 0x0 [0188.617] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0188.617] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0188.617] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0188.617] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0188.617] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0188.618] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0188.619] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0188.619] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0188.619] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0188.619] malloc (_Size=0x6e) returned 0xd62120 [0188.619] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd62120, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0188.620] free (_Block=0xd62120) [0188.620] CloseHandle (hObject=0x244) returned 1 [0188.621] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0188.624] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0188.625] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.625] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.636] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0188.636] GetLastError () returned 0x0 [0188.636] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0188.636] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0188.636] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0188.636] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0188.637] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0188.637] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0188.638] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0188.638] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0188.638] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0188.638] malloc (_Size=0x64) returned 0xd601e0 [0188.638] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd601e0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd601e0*, lpNumberOfBytesRead=0x0) returned 1 [0188.639] free (_Block=0xd601e0) [0188.639] CloseHandle (hObject=0x244) returned 1 [0188.640] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0188.660] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0188.661] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.661] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.672] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0188.672] CloseHandle (hObject=0x0) returned 0 [0188.673] free (_Block=0xd65370) [0188.673] malloc (_Size=0x48) returned 0xd5c570 [0188.673] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xf66bba41, dwHighDateTime=0x1d92b8e)) [0188.674] SetEvent (hEvent=0x24c) returned 1 [0188.678] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578390 [0188.678] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578390, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0188.678] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0188.678] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578470) returned 1 [0188.838] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0188.903] RtlRestoreLastWin32Error () returned 0x3f1000 [0188.903] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0188.903] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578420 [0188.903] RtlRestoreLastWin32Error () returned 0x3f1000 [0188.903] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578420, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578420, pcchLanguagesBuffer=0x115dff0) returned 1 [0188.903] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0188.903] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578420) returned 1 [0188.903] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596580 [0188.903] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596580, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0188.903] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596580) returned 1 [0188.904] SafeArrayGetElemsize (psa=0x593190) returned 0x8 [0188.904] SafeArrayPutElement (psa=0x593190, rgIndices=0x115d898, pv=0x598158) returned 0x0 [0188.904] SafeArrayRedim (in: psa=0x593190, psaboundNew=0x115d8b0 | out: psa=0x593190) returned 0x0 [0188.904] SafeArrayCopy (in: psa=0x593190, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0188.905] SetEvent (hEvent=0x24c) returned 1 [0188.906] free (_Block=0xd5c570) [0188.906] GetCurrentThread () returned 0xfffffffffffffffe [0188.906] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0188.906] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0188.909] RtlRestoreLastWin32Error () returned 0x3f1000 [0188.909] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0188.909] GetLastError () returned 0x514 [0188.909] CloseHandle (hObject=0x244) returned 1 [0188.909] malloc (_Size=0x18) returned 0xd64db0 [0188.909] SafeArrayPutElement (psa=0x593150, rgIndices=0x115d660, pv=0x593788) returned 0x0 [0188.909] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d660, pv=0x593788) returned 0x0 [0188.909] free (_Block=0xd64db0) [0188.909] malloc (_Size=0x8000) returned 0xd65370 [0188.909] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0188.910] free (_Block=0xd65370) [0188.911] malloc (_Size=0x10000) returned 0xd65370 [0188.911] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0188.913] free (_Block=0xd65370) [0188.913] malloc (_Size=0x18000) returned 0xd65370 [0188.913] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0x0 [0188.913] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0188.917] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0188.917] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.917] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.936] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0188.936] CloseHandle (hObject=0x0) returned 0 [0188.936] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0188.939] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0188.940] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.940] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.951] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0188.951] CloseHandle (hObject=0x0) returned 0 [0188.952] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0188.956] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0188.956] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.956] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.968] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0188.968] CloseHandle (hObject=0x0) returned 0 [0188.968] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0188.973] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0188.974] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.974] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0188.985] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0188.985] CloseHandle (hObject=0x0) returned 0 [0188.986] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0188.989] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0188.989] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.990] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.002] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0189.002] CloseHandle (hObject=0x0) returned 0 [0189.002] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0189.005] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0189.006] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.006] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.020] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0189.020] CloseHandle (hObject=0x0) returned 0 [0189.020] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0189.023] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0189.024] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.024] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.036] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0189.036] CloseHandle (hObject=0x0) returned 0 [0189.036] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0189.039] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0189.040] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.040] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.052] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0189.052] CloseHandle (hObject=0x0) returned 0 [0189.052] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0189.055] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0189.056] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.056] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.069] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0189.070] CloseHandle (hObject=0x0) returned 0 [0189.070] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0189.073] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0189.074] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.074] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.085] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0189.086] CloseHandle (hObject=0x0) returned 0 [0189.086] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0189.089] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0189.090] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.090] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.101] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0189.102] CloseHandle (hObject=0x0) returned 0 [0189.102] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0189.105] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0189.106] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.106] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.118] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0189.118] CloseHandle (hObject=0x0) returned 0 [0189.118] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0189.121] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0189.122] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.122] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.136] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0189.136] CloseHandle (hObject=0x0) returned 0 [0189.136] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0189.139] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0189.140] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.140] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.153] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0189.153] CloseHandle (hObject=0x0) returned 0 [0189.153] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0189.156] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0189.157] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.157] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.169] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0189.169] CloseHandle (hObject=0x0) returned 0 [0189.169] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0189.173] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0189.174] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.174] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.185] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0189.185] CloseHandle (hObject=0x0) returned 0 [0189.185] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0189.189] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0189.190] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.190] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.201] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0189.201] CloseHandle (hObject=0x0) returned 0 [0189.202] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0189.205] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0189.206] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.206] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.217] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0189.217] CloseHandle (hObject=0x0) returned 0 [0189.218] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0189.221] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0189.222] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.222] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.233] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0189.233] CloseHandle (hObject=0x0) returned 0 [0189.233] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0189.239] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0189.240] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.240] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.251] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0189.251] CloseHandle (hObject=0x0) returned 0 [0189.252] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0189.255] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0189.256] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.256] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.274] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0189.274] CloseHandle (hObject=0x0) returned 0 [0189.274] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0189.277] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0189.278] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.278] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.291] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0189.291] GetLastError () returned 0x0 [0189.292] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0189.292] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0189.292] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0189.292] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0189.292] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0189.293] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0189.293] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0189.294] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0189.294] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0189.294] malloc (_Size=0x18) returned 0xd64a30 [0189.294] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64a30, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64a30*, lpNumberOfBytesRead=0x0) returned 1 [0189.294] free (_Block=0xd64a30) [0189.294] CloseHandle (hObject=0x244) returned 1 [0189.295] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0189.298] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0189.299] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.299] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.310] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0189.310] GetLastError () returned 0x0 [0189.311] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0189.311] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0189.311] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0189.311] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0189.311] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0189.312] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0189.312] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0189.312] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0189.313] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0189.313] malloc (_Size=0x32) returned 0xd60ef0 [0189.313] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd60ef0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60ef0*, lpNumberOfBytesRead=0x0) returned 1 [0189.313] free (_Block=0xd60ef0) [0189.314] CloseHandle (hObject=0x244) returned 1 [0189.314] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0189.317] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0189.318] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.318] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.330] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0189.330] GetLastError () returned 0x0 [0189.330] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0189.330] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0189.330] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0189.330] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0189.330] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0189.331] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0189.332] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0189.332] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0189.332] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0189.332] malloc (_Size=0x64) returned 0xd60100 [0189.332] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60100, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60100*, lpNumberOfBytesRead=0x0) returned 1 [0189.333] free (_Block=0xd60100) [0189.333] CloseHandle (hObject=0x244) returned 1 [0189.334] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0189.337] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0189.337] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.338] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.351] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0189.351] CloseHandle (hObject=0x0) returned 0 [0189.352] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0189.355] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0189.356] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.356] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.367] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0189.367] GetLastError () returned 0x0 [0189.367] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0189.367] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0189.368] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0189.368] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0189.368] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0189.368] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0189.369] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0189.369] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0189.369] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0189.370] malloc (_Size=0x118) returned 0xd7d420 [0189.370] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd7d420, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0189.371] free (_Block=0xd7d420) [0189.371] CloseHandle (hObject=0x244) returned 1 [0189.371] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0189.375] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0189.377] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.377] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.388] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0189.388] GetLastError () returned 0x0 [0189.388] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0189.388] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0189.388] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0189.388] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0189.389] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0189.389] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0189.390] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0189.390] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0189.390] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0189.390] malloc (_Size=0x6c) returned 0xd65010 [0189.390] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd65010, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd65010*, lpNumberOfBytesRead=0x0) returned 1 [0189.391] free (_Block=0xd65010) [0189.391] CloseHandle (hObject=0x244) returned 1 [0189.392] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0189.395] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0189.396] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.396] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.413] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0189.413] GetLastError () returned 0x0 [0189.414] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0189.414] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0189.414] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0189.414] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0189.414] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0189.415] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0189.415] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0189.415] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0189.416] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0189.416] malloc (_Size=0x11a) returned 0xd7d420 [0189.416] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd7d420, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0189.416] free (_Block=0xd7d420) [0189.417] CloseHandle (hObject=0x244) returned 1 [0189.417] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0189.421] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0189.422] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.422] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.435] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0189.435] GetLastError () returned 0x0 [0189.435] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0189.436] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0189.436] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0189.436] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0189.436] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0189.436] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0189.437] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0189.437] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0189.438] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0189.438] malloc (_Size=0x48) returned 0xd5c570 [0189.438] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0189.438] free (_Block=0xd5c570) [0189.439] CloseHandle (hObject=0x244) returned 1 [0189.439] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0189.442] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0189.443] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.443] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.458] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0189.458] GetLastError () returned 0x0 [0189.458] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0189.459] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0189.459] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0189.459] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0189.459] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0189.459] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0189.460] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0189.460] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0189.460] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0189.461] malloc (_Size=0xda) returned 0xd62120 [0189.461] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd62120, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0189.461] free (_Block=0xd62120) [0189.462] CloseHandle (hObject=0x244) returned 1 [0189.512] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0189.515] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0189.516] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.516] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.528] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0189.528] GetLastError () returned 0x0 [0189.528] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0189.528] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0189.528] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0189.528] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0189.528] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0189.529] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0189.530] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0189.530] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0189.530] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0189.530] malloc (_Size=0x6e) returned 0xd62120 [0189.530] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd62120, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0189.531] free (_Block=0xd62120) [0189.532] CloseHandle (hObject=0x244) returned 1 [0189.532] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0189.535] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0189.536] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.536] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.566] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0189.566] GetLastError () returned 0x0 [0189.566] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0189.566] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0189.566] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0189.566] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0189.566] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0189.567] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0189.568] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0189.568] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0189.568] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0189.568] malloc (_Size=0x64) returned 0xd60100 [0189.568] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd60100, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60100*, lpNumberOfBytesRead=0x0) returned 1 [0189.569] free (_Block=0xd60100) [0189.569] CloseHandle (hObject=0x244) returned 1 [0189.570] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0189.573] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0189.573] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.574] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.585] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0189.585] CloseHandle (hObject=0x0) returned 0 [0189.588] free (_Block=0xd65370) [0189.588] malloc (_Size=0x48) returned 0xd5c570 [0189.588] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xf6f603ba, dwHighDateTime=0x1d92b8e)) [0189.588] SetEvent (hEvent=0x24c) returned 1 [0189.596] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x5783c0 [0189.596] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5783c0, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0189.596] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0189.596] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0189.749] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0189.808] RtlRestoreLastWin32Error () returned 0x3f1000 [0189.808] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0189.808] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578410 [0189.808] RtlRestoreLastWin32Error () returned 0x3f1000 [0189.808] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578410, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578410, pcchLanguagesBuffer=0x115dff0) returned 1 [0189.808] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578420 [0189.808] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578410) returned 1 [0189.808] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596960 [0189.808] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596960, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0189.808] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596960) returned 1 [0189.809] SafeArrayGetElemsize (psa=0x593290) returned 0x8 [0189.809] SafeArrayPutElement (psa=0x593290, rgIndices=0x115d898, pv=0x5981e8) returned 0x0 [0189.809] SafeArrayRedim (in: psa=0x593290, psaboundNew=0x115d8b0 | out: psa=0x593290) returned 0x0 [0189.809] SafeArrayCopy (in: psa=0x593290, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0189.810] SetEvent (hEvent=0x24c) returned 1 [0189.811] free (_Block=0xd5c570) [0189.813] GetCurrentThread () returned 0xfffffffffffffffe [0189.813] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0189.813] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0189.814] RtlRestoreLastWin32Error () returned 0x3f1000 [0189.814] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0189.814] GetLastError () returned 0x514 [0189.814] CloseHandle (hObject=0x244) returned 1 [0189.814] malloc (_Size=0x18) returned 0xd64b30 [0189.814] SafeArrayPutElement (psa=0x593c10, rgIndices=0x115d660, pv=0x5936c8) returned 0x0 [0189.814] SafeArrayPutElement (psa=0x593b50, rgIndices=0x115d660, pv=0x5936c8) returned 0x0 [0189.814] free (_Block=0xd64b30) [0189.814] malloc (_Size=0x8000) returned 0xd65370 [0189.814] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0189.816] free (_Block=0xd65370) [0189.817] malloc (_Size=0x10000) returned 0xd65370 [0189.818] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0189.820] free (_Block=0xd65370) [0189.820] malloc (_Size=0x18000) returned 0xd65370 [0189.820] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0x0 [0189.821] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0189.824] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0189.825] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.825] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.839] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0189.839] CloseHandle (hObject=0x0) returned 0 [0189.839] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0189.842] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0189.843] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.843] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.863] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0189.863] CloseHandle (hObject=0x0) returned 0 [0189.863] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0189.866] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0189.867] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.867] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.880] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0189.880] CloseHandle (hObject=0x0) returned 0 [0189.881] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0189.884] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0189.884] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.884] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.902] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0189.902] CloseHandle (hObject=0x0) returned 0 [0189.902] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0189.905] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0189.906] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.906] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.919] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0189.920] CloseHandle (hObject=0x0) returned 0 [0189.920] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0189.925] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0189.926] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.926] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.937] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0189.937] CloseHandle (hObject=0x0) returned 0 [0189.953] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0189.956] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0189.957] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.957] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.968] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0189.968] CloseHandle (hObject=0x0) returned 0 [0189.969] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0189.974] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0189.975] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.975] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0189.990] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0189.990] CloseHandle (hObject=0x0) returned 0 [0189.990] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0189.993] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0189.994] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.994] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.012] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0190.012] CloseHandle (hObject=0x0) returned 0 [0190.012] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0190.015] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0190.018] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.018] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.030] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0190.030] CloseHandle (hObject=0x0) returned 0 [0190.030] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0190.035] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0190.036] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.036] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.050] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0190.050] CloseHandle (hObject=0x0) returned 0 [0190.050] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0190.053] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0190.054] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.054] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.067] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0190.067] CloseHandle (hObject=0x0) returned 0 [0190.068] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0190.071] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0190.072] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.072] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.086] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0190.086] CloseHandle (hObject=0x0) returned 0 [0190.086] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0190.089] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0190.090] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.090] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.105] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0190.105] CloseHandle (hObject=0x0) returned 0 [0190.105] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0190.108] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0190.109] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.109] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.124] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0190.124] CloseHandle (hObject=0x0) returned 0 [0190.125] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0190.130] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0190.131] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.131] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.145] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0190.145] CloseHandle (hObject=0x0) returned 0 [0190.146] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0190.149] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0190.150] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.150] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.163] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0190.163] CloseHandle (hObject=0x0) returned 0 [0190.163] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0190.167] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0190.167] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.167] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.181] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0190.181] CloseHandle (hObject=0x0) returned 0 [0190.181] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0190.184] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0190.185] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.185] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.199] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0190.199] CloseHandle (hObject=0x0) returned 0 [0190.200] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0190.203] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0190.206] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.206] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.217] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0190.217] CloseHandle (hObject=0x0) returned 0 [0190.218] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0190.225] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0190.225] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.225] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.241] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0190.241] CloseHandle (hObject=0x0) returned 0 [0190.241] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0190.244] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0190.245] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.245] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.259] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0190.259] GetLastError () returned 0x0 [0190.259] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0190.259] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0190.260] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0190.260] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0190.260] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0190.260] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0190.261] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0190.261] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0190.261] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0190.262] malloc (_Size=0x18) returned 0xd64a30 [0190.262] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64a30, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64a30*, lpNumberOfBytesRead=0x0) returned 1 [0190.262] free (_Block=0xd64a30) [0190.262] CloseHandle (hObject=0x244) returned 1 [0190.263] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0190.274] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0190.275] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.275] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.289] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0190.289] GetLastError () returned 0x0 [0190.289] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0190.289] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0190.289] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0190.289] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0190.289] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0190.290] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0190.291] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0190.291] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0190.291] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0190.291] malloc (_Size=0x32) returned 0xd60a30 [0190.291] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd60a30, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60a30*, lpNumberOfBytesRead=0x0) returned 1 [0190.292] free (_Block=0xd60a30) [0190.292] CloseHandle (hObject=0x244) returned 1 [0190.293] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0190.296] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0190.299] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.299] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.310] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0190.311] GetLastError () returned 0x0 [0190.311] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0190.311] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0190.311] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0190.311] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0190.311] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0190.312] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0190.314] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0190.314] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0190.315] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0190.315] malloc (_Size=0x64) returned 0xd60090 [0190.315] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60090, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60090*, lpNumberOfBytesRead=0x0) returned 1 [0190.316] free (_Block=0xd60090) [0190.316] CloseHandle (hObject=0x244) returned 1 [0190.316] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0190.320] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0190.320] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.320] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.337] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0190.337] CloseHandle (hObject=0x0) returned 0 [0190.337] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0190.340] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0190.341] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.341] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.355] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0190.355] GetLastError () returned 0x0 [0190.355] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0190.355] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0190.355] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0190.355] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0190.355] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0190.356] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0190.357] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0190.357] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0190.357] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0190.357] malloc (_Size=0x118) returned 0xd7d420 [0190.358] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd7d420, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0190.358] free (_Block=0xd7d420) [0190.359] CloseHandle (hObject=0x244) returned 1 [0190.359] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0190.364] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0190.365] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.365] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.380] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0190.380] GetLastError () returned 0x0 [0190.380] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0190.380] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0190.380] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0190.380] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0190.380] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0190.381] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0190.382] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0190.382] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0190.382] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0190.382] malloc (_Size=0x6c) returned 0xd65010 [0190.382] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd65010, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd65010*, lpNumberOfBytesRead=0x0) returned 1 [0190.383] free (_Block=0xd65010) [0190.383] CloseHandle (hObject=0x244) returned 1 [0190.384] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0190.387] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0190.388] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.388] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.401] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0190.401] GetLastError () returned 0x0 [0190.401] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0190.402] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0190.402] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0190.402] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0190.402] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0190.402] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0190.403] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0190.403] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0190.403] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0190.404] malloc (_Size=0x11a) returned 0xd7d420 [0190.404] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd7d420, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0190.405] free (_Block=0xd7d420) [0190.405] CloseHandle (hObject=0x244) returned 1 [0190.405] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0190.411] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0190.412] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.412] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.425] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0190.425] GetLastError () returned 0x0 [0190.426] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0190.426] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0190.426] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0190.426] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0190.426] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0190.427] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0190.427] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0190.427] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0190.428] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0190.428] malloc (_Size=0x48) returned 0xd5c7f0 [0190.428] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c7f0, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c7f0*, lpNumberOfBytesRead=0x0) returned 1 [0190.429] free (_Block=0xd5c7f0) [0190.429] CloseHandle (hObject=0x244) returned 1 [0190.429] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0190.432] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0190.433] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.433] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.455] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0190.455] GetLastError () returned 0x0 [0190.455] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0190.455] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0190.455] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0190.455] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0190.455] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0190.456] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0190.457] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0190.457] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0190.457] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0190.457] malloc (_Size=0xda) returned 0xd62120 [0190.457] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd62120, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0190.458] free (_Block=0xd62120) [0190.459] CloseHandle (hObject=0x244) returned 1 [0190.511] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0190.514] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0190.518] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.518] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.530] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0190.530] GetLastError () returned 0x0 [0190.530] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0190.530] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0190.530] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0190.530] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0190.530] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0190.531] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0190.533] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0190.533] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0190.533] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0190.533] malloc (_Size=0x6e) returned 0xd62120 [0190.533] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd62120, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0190.534] free (_Block=0xd62120) [0190.535] CloseHandle (hObject=0x244) returned 1 [0190.535] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0190.538] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0190.539] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.539] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.572] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0190.572] GetLastError () returned 0x0 [0190.572] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0190.573] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0190.573] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0190.573] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0190.573] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0190.573] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0190.574] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0190.574] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0190.574] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0190.575] malloc (_Size=0x64) returned 0xd601e0 [0190.575] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd601e0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd601e0*, lpNumberOfBytesRead=0x0) returned 1 [0190.575] free (_Block=0xd601e0) [0190.576] CloseHandle (hObject=0x244) returned 1 [0190.576] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0190.580] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0190.580] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.580] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.592] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0190.592] CloseHandle (hObject=0x0) returned 0 [0190.594] free (_Block=0xd65370) [0190.594] malloc (_Size=0x48) returned 0xd5c570 [0190.594] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xf791056b, dwHighDateTime=0x1d92b8e)) [0190.594] SetEvent (hEvent=0x24c) returned 1 [0190.605] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578390 [0190.605] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578390, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0190.605] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0190.605] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578420) returned 1 [0190.726] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0190.847] RtlRestoreLastWin32Error () returned 0x3f1000 [0190.847] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0190.847] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0190.847] RtlRestoreLastWin32Error () returned 0x3f1000 [0190.847] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0) returned 1 [0190.847] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578470 [0190.847] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0190.847] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596680 [0190.847] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596680, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0190.847] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596680) returned 1 [0190.848] SafeArrayGetElemsize (psa=0x593610) returned 0x8 [0190.848] SafeArrayPutElement (psa=0x593610, rgIndices=0x115d898, pv=0x597e28) returned 0x0 [0190.848] SafeArrayRedim (in: psa=0x593610, psaboundNew=0x115d8b0 | out: psa=0x593610) returned 0x0 [0190.848] SafeArrayCopy (in: psa=0x593610, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0190.849] SetEvent (hEvent=0x24c) returned 1 [0190.850] free (_Block=0xd5c570) [0190.850] GetCurrentThread () returned 0xfffffffffffffffe [0190.850] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0190.850] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0190.853] RtlRestoreLastWin32Error () returned 0x3f1000 [0190.853] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0190.853] GetLastError () returned 0x514 [0190.853] CloseHandle (hObject=0x244) returned 1 [0190.854] malloc (_Size=0x18) returned 0xd648d0 [0190.854] SafeArrayPutElement (psa=0x593a10, rgIndices=0x115d660, pv=0x593208) returned 0x0 [0190.854] SafeArrayPutElement (psa=0x593990, rgIndices=0x115d660, pv=0x593208) returned 0x0 [0190.854] free (_Block=0xd648d0) [0190.854] malloc (_Size=0x8000) returned 0xd65370 [0190.854] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0190.856] free (_Block=0xd65370) [0190.857] malloc (_Size=0x10000) returned 0xd65370 [0190.858] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0190.859] free (_Block=0xd65370) [0190.860] malloc (_Size=0x18000) returned 0xd65370 [0190.860] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0x0 [0190.861] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0190.866] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0190.867] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.867] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.888] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0190.888] CloseHandle (hObject=0x0) returned 0 [0190.889] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0190.892] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0190.892] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.892] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.904] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0190.904] CloseHandle (hObject=0x0) returned 0 [0190.904] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0190.907] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0190.908] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.908] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.919] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0190.919] CloseHandle (hObject=0x0) returned 0 [0190.920] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0190.926] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0190.927] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.927] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.938] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0190.938] CloseHandle (hObject=0x0) returned 0 [0190.938] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0190.941] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0190.942] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.942] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.953] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0190.953] CloseHandle (hObject=0x0) returned 0 [0190.954] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0190.957] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0190.958] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.958] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.969] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0190.969] CloseHandle (hObject=0x0) returned 0 [0190.970] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0190.973] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0190.974] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.974] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0190.988] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0190.988] CloseHandle (hObject=0x0) returned 0 [0190.988] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0190.991] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0190.992] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.992] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.003] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0191.003] CloseHandle (hObject=0x0) returned 0 [0191.003] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0191.009] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0191.010] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.010] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.021] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0191.022] CloseHandle (hObject=0x0) returned 0 [0191.022] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0191.025] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0191.026] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.026] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.038] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0191.038] CloseHandle (hObject=0x0) returned 0 [0191.038] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0191.041] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0191.042] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.042] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.063] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0191.063] CloseHandle (hObject=0x0) returned 0 [0191.063] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0191.068] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0191.069] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.069] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.080] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0191.080] CloseHandle (hObject=0x0) returned 0 [0191.081] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0191.084] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0191.085] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.085] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.096] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0191.096] CloseHandle (hObject=0x0) returned 0 [0191.096] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0191.111] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0191.112] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.112] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.123] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0191.123] CloseHandle (hObject=0x0) returned 0 [0191.123] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0191.126] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0191.127] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.127] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.138] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0191.138] CloseHandle (hObject=0x0) returned 0 [0191.139] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0191.145] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0191.146] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.146] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.157] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0191.157] CloseHandle (hObject=0x0) returned 0 [0191.158] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0191.161] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0191.162] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.162] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.173] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0191.173] CloseHandle (hObject=0x0) returned 0 [0191.173] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0191.176] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0191.177] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.177] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.191] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0191.191] CloseHandle (hObject=0x0) returned 0 [0191.191] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0191.194] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0191.195] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.195] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.208] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0191.208] CloseHandle (hObject=0x0) returned 0 [0191.209] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0191.212] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0191.212] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.212] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.224] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0191.224] CloseHandle (hObject=0x0) returned 0 [0191.224] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0191.227] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0191.228] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.228] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.247] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0191.247] CloseHandle (hObject=0x0) returned 0 [0191.248] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0191.251] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0191.252] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.252] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.263] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0191.263] GetLastError () returned 0x0 [0191.263] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0191.263] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0191.263] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0191.263] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0191.263] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0191.264] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0191.265] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0191.265] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0191.265] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0191.265] malloc (_Size=0x18) returned 0xd64cd0 [0191.265] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64cd0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64cd0*, lpNumberOfBytesRead=0x0) returned 1 [0191.265] free (_Block=0xd64cd0) [0191.274] CloseHandle (hObject=0x244) returned 1 [0191.274] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0191.277] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0191.278] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.278] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.289] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0191.289] GetLastError () returned 0x0 [0191.289] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0191.289] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0191.289] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0191.290] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0191.290] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0191.290] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0191.291] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0191.291] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0191.291] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0191.291] malloc (_Size=0x32) returned 0xd61530 [0191.291] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd61530, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd61530*, lpNumberOfBytesRead=0x0) returned 1 [0191.292] free (_Block=0xd61530) [0191.293] CloseHandle (hObject=0x244) returned 1 [0191.293] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0191.296] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0191.297] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.297] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.311] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0191.311] GetLastError () returned 0x0 [0191.312] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0191.312] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0191.312] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0191.312] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0191.312] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0191.315] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0191.316] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0191.316] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0191.316] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0191.316] malloc (_Size=0x64) returned 0xd60100 [0191.316] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60100, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60100*, lpNumberOfBytesRead=0x0) returned 1 [0191.317] free (_Block=0xd60100) [0191.317] CloseHandle (hObject=0x244) returned 1 [0191.317] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0191.320] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0191.321] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.321] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.333] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0191.333] CloseHandle (hObject=0x0) returned 0 [0191.333] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0191.336] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0191.337] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.337] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.356] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0191.356] GetLastError () returned 0x0 [0191.356] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0191.356] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0191.356] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0191.356] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0191.356] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0191.357] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0191.358] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0191.358] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0191.358] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0191.358] malloc (_Size=0x118) returned 0xd7d420 [0191.358] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd7d420, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0191.359] free (_Block=0xd7d420) [0191.360] CloseHandle (hObject=0x244) returned 1 [0191.360] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0191.363] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0191.364] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.364] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.375] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0191.376] GetLastError () returned 0x0 [0191.376] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0191.376] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0191.376] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0191.376] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0191.376] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0191.377] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0191.377] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0191.378] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0191.378] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0191.378] malloc (_Size=0x6c) returned 0xd65010 [0191.378] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd65010, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd65010*, lpNumberOfBytesRead=0x0) returned 1 [0191.378] free (_Block=0xd65010) [0191.379] CloseHandle (hObject=0x244) returned 1 [0191.379] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0191.382] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0191.383] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.383] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.395] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0191.395] GetLastError () returned 0x0 [0191.395] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0191.395] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0191.395] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0191.395] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0191.395] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0191.396] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0191.397] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0191.397] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0191.397] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0191.397] malloc (_Size=0x11a) returned 0xd7d420 [0191.397] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd7d420, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0191.397] free (_Block=0xd7d420) [0191.398] CloseHandle (hObject=0x244) returned 1 [0191.398] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0191.401] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0191.402] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.402] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.413] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0191.413] GetLastError () returned 0x0 [0191.413] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0191.413] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0191.413] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0191.414] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0191.414] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0191.414] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0191.415] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0191.415] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0191.415] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0191.415] malloc (_Size=0x48) returned 0xd5c570 [0191.415] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0191.416] free (_Block=0xd5c570) [0191.417] CloseHandle (hObject=0x244) returned 1 [0191.417] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0191.420] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0191.421] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.421] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.434] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0191.434] GetLastError () returned 0x0 [0191.434] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0191.434] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0191.434] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0191.434] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0191.435] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0191.435] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0191.436] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0191.436] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0191.436] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0191.436] malloc (_Size=0xda) returned 0xd62120 [0191.436] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd62120, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0191.437] free (_Block=0xd62120) [0191.437] CloseHandle (hObject=0x244) returned 1 [0191.481] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0191.484] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0191.485] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.485] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.496] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0191.496] GetLastError () returned 0x0 [0191.496] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0191.496] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0191.497] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0191.497] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0191.497] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0191.497] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0191.498] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0191.498] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0191.498] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0191.498] malloc (_Size=0x6e) returned 0xd62120 [0191.498] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd62120, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0191.499] free (_Block=0xd62120) [0191.500] CloseHandle (hObject=0x244) returned 1 [0191.500] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0191.503] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0191.504] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.504] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.515] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0191.515] GetLastError () returned 0x0 [0191.515] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0191.515] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0191.515] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0191.515] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0191.515] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0191.516] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0191.517] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0191.517] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0191.517] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0191.517] malloc (_Size=0x64) returned 0xd60410 [0191.517] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd60410, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60410*, lpNumberOfBytesRead=0x0) returned 1 [0191.518] free (_Block=0xd60410) [0191.540] CloseHandle (hObject=0x244) returned 1 [0191.541] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0191.544] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0191.544] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.544] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.556] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0191.556] CloseHandle (hObject=0x0) returned 0 [0191.559] free (_Block=0xd65370) [0191.559] malloc (_Size=0x48) returned 0xd5c570 [0191.559] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xf8226bb0, dwHighDateTime=0x1d92b8e)) [0191.559] SetEvent (hEvent=0x24c) returned 1 [0191.576] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578390 [0191.576] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578390, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0191.576] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0191.576] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578470) returned 1 [0191.797] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0191.907] RtlRestoreLastWin32Error () returned 0x3f1000 [0191.907] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0191.907] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0191.907] RtlRestoreLastWin32Error () returned 0x3f1000 [0191.907] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0) returned 1 [0191.907] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783c0 [0191.907] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0191.907] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596500 [0191.907] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596500, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0191.907] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596500) returned 1 [0191.908] SafeArrayGetElemsize (psa=0x593810) returned 0x8 [0191.908] SafeArrayPutElement (psa=0x593810, rgIndices=0x115d898, pv=0x5982a8) returned 0x0 [0191.908] SafeArrayRedim (in: psa=0x593810, psaboundNew=0x115d8b0 | out: psa=0x593810) returned 0x0 [0191.908] SafeArrayCopy (in: psa=0x593810, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0191.909] SetEvent (hEvent=0x24c) returned 1 [0191.910] free (_Block=0xd5c570) [0191.910] GetCurrentThread () returned 0xfffffffffffffffe [0191.910] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0191.910] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0191.911] RtlRestoreLastWin32Error () returned 0x3f1000 [0191.911] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0191.911] GetLastError () returned 0x514 [0191.911] CloseHandle (hObject=0x244) returned 1 [0191.911] malloc (_Size=0x18) returned 0xd64bb0 [0191.911] SafeArrayPutElement (psa=0x593a50, rgIndices=0x115d660, pv=0x5936c8) returned 0x0 [0191.911] SafeArrayPutElement (psa=0x5939d0, rgIndices=0x115d660, pv=0x5936c8) returned 0x0 [0191.911] free (_Block=0xd64bb0) [0191.911] malloc (_Size=0x8000) returned 0xd65370 [0191.911] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0191.913] free (_Block=0xd65370) [0191.914] malloc (_Size=0x10000) returned 0xd65370 [0191.914] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0191.917] free (_Block=0xd65370) [0191.917] malloc (_Size=0x18000) returned 0xd65370 [0191.917] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0x0 [0191.917] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0191.921] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0191.921] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.921] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.934] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0191.934] CloseHandle (hObject=0x0) returned 0 [0191.935] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0191.937] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0191.942] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0191.942] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0191.953] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0191.953] CloseHandle (hObject=0x0) returned 0 [0192.013] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0192.017] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0192.017] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.017] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.029] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0192.029] CloseHandle (hObject=0x0) returned 0 [0192.029] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0192.034] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0192.035] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.035] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.046] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0192.046] CloseHandle (hObject=0x0) returned 0 [0192.046] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0192.053] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0192.054] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.054] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.068] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0192.068] CloseHandle (hObject=0x0) returned 0 [0192.068] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0192.071] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0192.072] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.072] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.122] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0192.122] CloseHandle (hObject=0x0) returned 0 [0192.123] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0192.132] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0192.132] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.132] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.146] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0192.146] CloseHandle (hObject=0x0) returned 0 [0192.146] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0192.149] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0192.150] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.150] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.163] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0192.163] CloseHandle (hObject=0x0) returned 0 [0192.164] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0192.167] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0192.167] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.167] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.182] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0192.182] CloseHandle (hObject=0x0) returned 0 [0192.182] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0192.185] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0192.186] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.186] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.199] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0192.199] CloseHandle (hObject=0x0) returned 0 [0192.199] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0192.202] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0192.207] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.207] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.218] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0192.218] CloseHandle (hObject=0x0) returned 0 [0192.220] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0192.225] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0192.225] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.225] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.238] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0192.238] CloseHandle (hObject=0x0) returned 0 [0192.238] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0192.241] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0192.242] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.242] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.255] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0192.255] CloseHandle (hObject=0x0) returned 0 [0192.256] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0192.259] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0192.260] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.260] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.282] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0192.282] CloseHandle (hObject=0x0) returned 0 [0192.282] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0192.287] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0192.288] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.288] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.301] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0192.301] CloseHandle (hObject=0x0) returned 0 [0192.302] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0192.305] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0192.305] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.305] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.320] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0192.320] CloseHandle (hObject=0x0) returned 0 [0192.321] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0192.324] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0192.325] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.325] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.338] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0192.338] CloseHandle (hObject=0x0) returned 0 [0192.338] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0192.341] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0192.342] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.342] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.355] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0192.355] CloseHandle (hObject=0x0) returned 0 [0192.355] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0192.358] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0192.359] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.359] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.373] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0192.373] CloseHandle (hObject=0x0) returned 0 [0192.374] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0192.379] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0192.380] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.380] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.395] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0192.395] CloseHandle (hObject=0x0) returned 0 [0192.396] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0192.399] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0192.399] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.400] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.414] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0192.414] CloseHandle (hObject=0x0) returned 0 [0192.414] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0192.417] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0192.418] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.418] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.433] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0192.433] GetLastError () returned 0x0 [0192.433] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0192.433] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0192.433] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0192.433] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0192.433] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0192.434] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0192.435] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0192.435] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0192.435] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0192.435] malloc (_Size=0x18) returned 0xd64ad0 [0192.435] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64ad0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64ad0*, lpNumberOfBytesRead=0x0) returned 1 [0192.435] free (_Block=0xd64ad0) [0192.436] CloseHandle (hObject=0x244) returned 1 [0192.436] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0192.441] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0192.442] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.442] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.453] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0192.453] GetLastError () returned 0x0 [0192.453] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0192.455] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0192.456] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0192.456] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0192.456] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0192.456] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0192.457] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0192.457] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0192.457] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0192.458] malloc (_Size=0x32) returned 0xd61030 [0192.458] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd61030, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd61030*, lpNumberOfBytesRead=0x0) returned 1 [0192.458] free (_Block=0xd61030) [0192.459] CloseHandle (hObject=0x244) returned 1 [0192.459] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0192.462] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0192.463] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.463] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.476] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0192.476] GetLastError () returned 0x0 [0192.476] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0192.476] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0192.476] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0192.476] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0192.477] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0192.477] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0192.478] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0192.478] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0192.478] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0192.478] malloc (_Size=0x64) returned 0xd601e0 [0192.478] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd601e0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd601e0*, lpNumberOfBytesRead=0x0) returned 1 [0192.479] free (_Block=0xd601e0) [0192.480] CloseHandle (hObject=0x244) returned 1 [0192.480] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0192.483] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0192.484] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.484] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.497] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0192.497] CloseHandle (hObject=0x0) returned 0 [0192.497] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0192.504] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0192.504] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.505] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.518] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0192.518] GetLastError () returned 0x0 [0192.518] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0192.518] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0192.518] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0192.518] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0192.518] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0192.519] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0192.520] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0192.520] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0192.520] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0192.520] malloc (_Size=0x118) returned 0xd7d420 [0192.520] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd7d420, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0192.521] free (_Block=0xd7d420) [0192.522] CloseHandle (hObject=0x244) returned 1 [0192.522] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0192.525] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0192.526] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.526] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.541] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0192.541] GetLastError () returned 0x0 [0192.541] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0192.541] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0192.541] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0192.541] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0192.541] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0192.542] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0192.543] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0192.543] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0192.543] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0192.543] malloc (_Size=0x6c) returned 0xd65010 [0192.543] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd65010, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd65010*, lpNumberOfBytesRead=0x0) returned 1 [0192.544] free (_Block=0xd65010) [0192.544] CloseHandle (hObject=0x244) returned 1 [0192.545] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0192.552] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0192.553] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.553] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.566] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0192.566] GetLastError () returned 0x0 [0192.566] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0192.566] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0192.566] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0192.566] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0192.566] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0192.567] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0192.568] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0192.568] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0192.568] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0192.568] malloc (_Size=0x11a) returned 0xd7d420 [0192.568] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd7d420, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0192.569] free (_Block=0xd7d420) [0192.569] CloseHandle (hObject=0x244) returned 1 [0192.570] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0192.573] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0192.574] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.574] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.587] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0192.587] GetLastError () returned 0x0 [0192.587] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0192.587] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0192.587] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0192.587] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0192.587] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0192.588] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0192.589] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0192.589] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0192.589] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0192.589] malloc (_Size=0x48) returned 0xd5c570 [0192.589] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0192.590] free (_Block=0xd5c570) [0192.590] CloseHandle (hObject=0x244) returned 1 [0192.591] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0192.598] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0192.599] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.599] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.612] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0192.612] GetLastError () returned 0x0 [0192.612] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0192.612] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0192.612] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0192.612] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0192.612] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0192.613] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0192.614] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0192.614] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0192.614] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0192.614] malloc (_Size=0xda) returned 0xd62120 [0192.614] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd62120, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0192.615] free (_Block=0xd62120) [0192.616] CloseHandle (hObject=0x244) returned 1 [0192.647] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0192.650] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0192.651] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.651] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.693] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0192.693] GetLastError () returned 0x0 [0192.693] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0192.693] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0192.693] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0192.693] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0192.694] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0192.694] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0192.695] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0192.695] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0192.695] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0192.695] malloc (_Size=0x6e) returned 0xd62120 [0192.695] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd62120, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0192.696] free (_Block=0xd62120) [0192.697] CloseHandle (hObject=0x244) returned 1 [0192.697] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0192.700] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0192.701] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.701] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.714] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0192.714] GetLastError () returned 0x0 [0192.715] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0192.715] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0192.715] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0192.715] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0192.715] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0192.716] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0192.716] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0192.716] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0192.717] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0192.717] malloc (_Size=0x64) returned 0xd60090 [0192.717] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd60090, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60090*, lpNumberOfBytesRead=0x0) returned 1 [0192.717] free (_Block=0xd60090) [0192.718] CloseHandle (hObject=0x244) returned 1 [0192.718] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0192.723] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0192.724] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0192.724] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0192.758] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0192.758] CloseHandle (hObject=0x0) returned 0 [0192.760] free (_Block=0xd65370) [0192.760] malloc (_Size=0x48) returned 0xd5c570 [0192.761] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xf8d9fcfc, dwHighDateTime=0x1d92b8e)) [0192.761] SetEvent (hEvent=0x24c) returned 1 [0192.767] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578390 [0192.767] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578390, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0192.767] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0192.767] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0192.975] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0193.059] RtlRestoreLastWin32Error () returned 0x3f1000 [0193.059] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0193.059] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0193.059] RtlRestoreLastWin32Error () returned 0x3f1000 [0193.059] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0) returned 1 [0193.059] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578470 [0193.059] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0193.059] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596940 [0193.059] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596940, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0193.059] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596940) returned 1 [0193.060] SafeArrayGetElemsize (psa=0x593110) returned 0x8 [0193.060] SafeArrayPutElement (psa=0x593110, rgIndices=0x115d898, pv=0x598158) returned 0x0 [0193.060] SafeArrayRedim (in: psa=0x593110, psaboundNew=0x115d8b0 | out: psa=0x593110) returned 0x0 [0193.060] SafeArrayCopy (in: psa=0x593110, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0193.061] SetEvent (hEvent=0x24c) returned 1 [0193.062] free (_Block=0xd5c570) [0193.062] GetCurrentThread () returned 0xfffffffffffffffe [0193.062] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0193.062] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0193.063] RtlRestoreLastWin32Error () returned 0x3f1000 [0193.063] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0193.064] GetLastError () returned 0x514 [0193.064] CloseHandle (hObject=0x244) returned 1 [0193.064] malloc (_Size=0x18) returned 0xd64f50 [0193.064] SafeArrayPutElement (psa=0x593950, rgIndices=0x115d660, pv=0x593908) returned 0x0 [0193.064] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d660, pv=0x593908) returned 0x0 [0193.064] free (_Block=0xd64f50) [0193.064] malloc (_Size=0x8000) returned 0xd65370 [0193.064] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0193.065] free (_Block=0xd65370) [0193.066] malloc (_Size=0x10000) returned 0xd65370 [0193.067] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0193.069] free (_Block=0xd65370) [0193.069] malloc (_Size=0x18000) returned 0xd65370 [0193.069] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0x0 [0193.070] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0193.073] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0193.074] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.074] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.087] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0193.087] CloseHandle (hObject=0x0) returned 0 [0193.087] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0193.090] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0193.091] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.091] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.104] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0193.104] CloseHandle (hObject=0x0) returned 0 [0193.105] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0193.108] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0193.109] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.109] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.120] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0193.120] CloseHandle (hObject=0x0) returned 0 [0193.120] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0193.123] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0193.124] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.124] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.137] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0193.137] CloseHandle (hObject=0x0) returned 0 [0193.138] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0193.141] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0193.192] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.192] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.203] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0193.203] CloseHandle (hObject=0x0) returned 0 [0193.205] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0193.208] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0193.209] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.209] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.220] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0193.220] CloseHandle (hObject=0x0) returned 0 [0193.221] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0193.224] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0193.225] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.225] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.238] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0193.238] CloseHandle (hObject=0x0) returned 0 [0193.238] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0193.241] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0193.242] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.242] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.255] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0193.255] CloseHandle (hObject=0x0) returned 0 [0193.255] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0193.258] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0193.259] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.259] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.277] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0193.277] CloseHandle (hObject=0x0) returned 0 [0193.277] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0193.280] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0193.281] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.281] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.294] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0193.294] CloseHandle (hObject=0x0) returned 0 [0193.294] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0193.299] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0193.300] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.300] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.311] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0193.311] CloseHandle (hObject=0x0) returned 0 [0193.311] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0193.315] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0193.315] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.315] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.327] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0193.327] CloseHandle (hObject=0x0) returned 0 [0193.327] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0193.330] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0193.331] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.331] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.342] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0193.342] CloseHandle (hObject=0x0) returned 0 [0193.343] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0193.346] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0193.347] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.347] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.359] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0193.359] CloseHandle (hObject=0x0) returned 0 [0193.359] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0193.362] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0193.363] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.363] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.374] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0193.374] CloseHandle (hObject=0x0) returned 0 [0193.374] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0193.379] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0193.380] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.380] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.391] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0193.391] CloseHandle (hObject=0x0) returned 0 [0193.392] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0193.395] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0193.396] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.396] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.408] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0193.409] CloseHandle (hObject=0x0) returned 0 [0193.409] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0193.412] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0193.413] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.413] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.424] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0193.424] CloseHandle (hObject=0x0) returned 0 [0193.424] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0193.427] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0193.428] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.428] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.440] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0193.440] CloseHandle (hObject=0x0) returned 0 [0193.440] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0193.443] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0193.444] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.444] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.455] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0193.455] CloseHandle (hObject=0x0) returned 0 [0193.455] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0193.458] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0193.459] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.459] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.472] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0193.472] CloseHandle (hObject=0x0) returned 0 [0193.472] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0193.475] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0193.476] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.476] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.488] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0193.488] GetLastError () returned 0x0 [0193.489] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0193.489] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0193.489] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0193.489] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0193.489] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0193.490] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0193.490] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0193.490] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0193.490] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0193.491] malloc (_Size=0x18) returned 0xd649d0 [0193.491] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd649d0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd649d0*, lpNumberOfBytesRead=0x0) returned 1 [0193.491] free (_Block=0xd649d0) [0193.491] CloseHandle (hObject=0x244) returned 1 [0193.492] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0193.495] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0193.495] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.495] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.507] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0193.507] GetLastError () returned 0x0 [0193.507] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0193.507] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0193.507] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0193.507] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0193.507] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0193.508] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0193.509] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0193.509] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0193.509] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0193.509] malloc (_Size=0x32) returned 0xd606b0 [0193.509] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd606b0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd606b0*, lpNumberOfBytesRead=0x0) returned 1 [0193.510] free (_Block=0xd606b0) [0193.510] CloseHandle (hObject=0x244) returned 1 [0193.511] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0193.514] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0193.515] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.515] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.529] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0193.529] GetLastError () returned 0x0 [0193.529] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0193.529] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0193.529] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0193.529] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0193.529] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0193.530] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0193.531] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0193.531] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0193.531] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0193.531] malloc (_Size=0x64) returned 0xd60100 [0193.531] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60100, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60100*, lpNumberOfBytesRead=0x0) returned 1 [0193.532] free (_Block=0xd60100) [0193.532] CloseHandle (hObject=0x244) returned 1 [0193.532] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0193.535] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0193.536] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.536] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.547] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0193.548] CloseHandle (hObject=0x0) returned 0 [0193.548] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0193.551] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0193.552] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.552] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.563] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0193.563] GetLastError () returned 0x0 [0193.563] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0193.563] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0193.563] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0193.564] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0193.564] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0193.564] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0193.565] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0193.565] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0193.565] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0193.565] malloc (_Size=0x118) returned 0xd7d420 [0193.566] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd7d420, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0193.567] free (_Block=0xd7d420) [0193.568] CloseHandle (hObject=0x244) returned 1 [0193.568] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0193.571] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0193.572] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.572] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.583] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0193.583] GetLastError () returned 0x0 [0193.583] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0193.583] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0193.584] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0193.584] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0193.584] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0193.584] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0193.585] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0193.585] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0193.585] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0193.585] malloc (_Size=0x6c) returned 0xd65010 [0193.586] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd65010, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd65010*, lpNumberOfBytesRead=0x0) returned 1 [0193.586] free (_Block=0xd65010) [0193.587] CloseHandle (hObject=0x244) returned 1 [0193.587] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0193.590] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0193.591] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.591] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.603] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0193.603] GetLastError () returned 0x0 [0193.603] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0193.604] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0193.604] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0193.604] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0193.604] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0193.604] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0193.605] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0193.605] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0193.605] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0193.606] malloc (_Size=0x11a) returned 0xd7d420 [0193.606] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd7d420, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0193.606] free (_Block=0xd7d420) [0193.607] CloseHandle (hObject=0x244) returned 1 [0193.607] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0193.612] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0193.613] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.613] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.624] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0193.624] GetLastError () returned 0x0 [0193.624] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0193.624] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0193.624] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0193.624] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0193.624] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0193.627] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0193.628] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0193.628] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0193.628] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0193.628] malloc (_Size=0x48) returned 0xd5c570 [0193.628] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0193.629] free (_Block=0xd5c570) [0193.629] CloseHandle (hObject=0x244) returned 1 [0193.630] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0193.633] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0193.634] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.634] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.645] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0193.645] GetLastError () returned 0x0 [0193.645] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0193.645] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0193.645] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0193.645] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0193.645] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0193.646] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0193.647] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0193.647] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0193.647] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0193.647] malloc (_Size=0xda) returned 0xd62120 [0193.647] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd62120, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0193.648] free (_Block=0xd62120) [0193.648] CloseHandle (hObject=0x244) returned 1 [0193.698] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0193.701] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0193.702] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.702] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.715] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0193.716] GetLastError () returned 0x0 [0193.716] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0193.716] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0193.716] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0193.716] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0193.716] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0193.717] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0193.718] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0193.718] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0193.718] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0193.718] malloc (_Size=0x6e) returned 0xd62120 [0193.718] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd62120, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0193.719] free (_Block=0xd62120) [0193.719] CloseHandle (hObject=0x244) returned 1 [0193.720] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0193.723] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0193.724] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.724] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.763] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0193.764] GetLastError () returned 0x0 [0193.764] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0193.764] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0193.764] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0193.764] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0193.764] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0193.765] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0193.766] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0193.766] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0193.766] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0193.766] malloc (_Size=0x64) returned 0xd601e0 [0193.766] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd601e0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd601e0*, lpNumberOfBytesRead=0x0) returned 1 [0193.767] free (_Block=0xd601e0) [0193.767] CloseHandle (hObject=0x244) returned 1 [0193.768] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0193.771] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0193.772] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0193.772] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0193.794] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0193.794] CloseHandle (hObject=0x0) returned 0 [0193.797] free (_Block=0xd65370) [0193.798] malloc (_Size=0x48) returned 0xd5c570 [0193.798] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xf979be16, dwHighDateTime=0x1d92b8e)) [0193.798] SetEvent (hEvent=0x24c) returned 1 [0193.802] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578390 [0193.803] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578390, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0193.803] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0193.803] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578470) returned 1 [0193.966] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0194.059] RtlRestoreLastWin32Error () returned 0x3f1000 [0194.059] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0194.059] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578410 [0194.059] RtlRestoreLastWin32Error () returned 0x3f1000 [0194.059] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578410, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578410, pcchLanguagesBuffer=0x115dff0) returned 1 [0194.059] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0194.059] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578410) returned 1 [0194.059] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596880 [0194.059] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596880, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0194.059] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596880) returned 1 [0194.060] SafeArrayGetElemsize (psa=0x593750) returned 0x8 [0194.060] SafeArrayPutElement (psa=0x593750, rgIndices=0x115d898, pv=0x598098) returned 0x0 [0194.060] SafeArrayRedim (in: psa=0x593750, psaboundNew=0x115d8b0 | out: psa=0x593750) returned 0x0 [0194.060] SafeArrayCopy (in: psa=0x593750, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0194.061] SetEvent (hEvent=0x24c) returned 1 [0194.062] free (_Block=0xd5c570) [0194.062] GetCurrentThread () returned 0xfffffffffffffffe [0194.062] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0194.062] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0194.065] RtlRestoreLastWin32Error () returned 0x3f1000 [0194.065] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0194.065] GetLastError () returned 0x514 [0194.065] CloseHandle (hObject=0x244) returned 1 [0194.065] malloc (_Size=0x18) returned 0xd64cd0 [0194.065] SafeArrayPutElement (psa=0x593210, rgIndices=0x115d660, pv=0x593708) returned 0x0 [0194.065] SafeArrayPutElement (psa=0x592d50, rgIndices=0x115d660, pv=0x593708) returned 0x0 [0194.065] free (_Block=0xd64cd0) [0194.065] malloc (_Size=0x8000) returned 0xd65370 [0194.065] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0194.067] free (_Block=0xd65370) [0194.068] malloc (_Size=0x10000) returned 0xd65370 [0194.068] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0194.071] free (_Block=0xd65370) [0194.071] malloc (_Size=0x18000) returned 0xd65370 [0194.071] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0x0 [0194.071] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0194.074] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0194.075] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.075] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.086] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0194.086] CloseHandle (hObject=0x0) returned 0 [0194.087] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0194.090] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0194.091] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.091] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.105] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0194.105] CloseHandle (hObject=0x0) returned 0 [0194.105] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0194.108] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0194.109] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.109] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.120] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0194.120] CloseHandle (hObject=0x0) returned 0 [0194.120] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0194.123] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0194.124] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.124] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.135] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0194.135] CloseHandle (hObject=0x0) returned 0 [0194.135] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0194.138] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0194.139] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.139] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.151] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0194.151] CloseHandle (hObject=0x0) returned 0 [0194.151] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0194.154] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0194.155] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.155] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.166] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0194.166] CloseHandle (hObject=0x0) returned 0 [0194.166] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0194.169] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0194.170] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.170] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.183] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0194.183] CloseHandle (hObject=0x0) returned 0 [0194.183] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0194.186] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0194.187] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.187] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.200] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0194.200] CloseHandle (hObject=0x0) returned 0 [0194.200] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0194.203] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0194.204] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.204] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.215] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0194.215] CloseHandle (hObject=0x0) returned 0 [0194.216] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0194.219] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0194.220] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.220] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.231] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0194.231] CloseHandle (hObject=0x0) returned 0 [0194.231] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0194.234] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0194.237] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.237] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.248] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0194.248] CloseHandle (hObject=0x0) returned 0 [0194.249] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0194.252] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0194.252] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.252] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.264] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0194.264] CloseHandle (hObject=0x0) returned 0 [0194.264] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0194.276] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0194.277] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.277] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.290] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0194.290] CloseHandle (hObject=0x0) returned 0 [0194.291] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0194.294] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0194.295] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.295] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.306] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0194.306] CloseHandle (hObject=0x0) returned 0 [0194.306] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0194.309] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0194.310] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.310] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.321] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0194.321] CloseHandle (hObject=0x0) returned 0 [0194.322] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0194.325] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0194.326] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.326] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.338] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0194.338] CloseHandle (hObject=0x0) returned 0 [0194.339] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0194.342] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0194.342] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.342] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.354] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0194.354] CloseHandle (hObject=0x0) returned 0 [0194.354] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0194.357] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0194.358] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.358] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.369] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0194.369] CloseHandle (hObject=0x0) returned 0 [0194.369] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0194.372] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0194.373] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.373] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.385] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0194.385] CloseHandle (hObject=0x0) returned 0 [0194.385] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0194.388] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0194.389] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.389] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.402] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0194.402] CloseHandle (hObject=0x0) returned 0 [0194.402] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0194.405] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0194.406] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.406] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.417] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0194.417] CloseHandle (hObject=0x0) returned 0 [0194.417] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0194.420] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0194.421] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.421] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.433] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0194.433] GetLastError () returned 0x0 [0194.433] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0194.433] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0194.433] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0194.433] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0194.433] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0194.434] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0194.435] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0194.435] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0194.435] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0194.435] malloc (_Size=0x18) returned 0xd64cf0 [0194.435] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64cf0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64cf0*, lpNumberOfBytesRead=0x0) returned 1 [0194.435] free (_Block=0xd64cf0) [0194.436] CloseHandle (hObject=0x244) returned 1 [0194.436] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0194.439] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0194.440] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.440] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.451] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0194.451] GetLastError () returned 0x0 [0194.451] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0194.451] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0194.451] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0194.451] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0194.451] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0194.452] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0194.453] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0194.453] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0194.453] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0194.453] malloc (_Size=0x32) returned 0xd61070 [0194.453] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd61070, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd61070*, lpNumberOfBytesRead=0x0) returned 1 [0194.454] free (_Block=0xd61070) [0194.455] CloseHandle (hObject=0x244) returned 1 [0194.455] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0194.458] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0194.459] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.459] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.471] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0194.471] GetLastError () returned 0x0 [0194.471] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0194.471] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0194.471] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0194.471] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0194.471] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0194.472] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0194.473] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0194.473] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0194.473] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0194.473] malloc (_Size=0x64) returned 0xd60100 [0194.473] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60100, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60100*, lpNumberOfBytesRead=0x0) returned 1 [0194.474] free (_Block=0xd60100) [0194.474] CloseHandle (hObject=0x244) returned 1 [0194.475] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0194.478] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0194.478] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.479] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.490] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0194.490] CloseHandle (hObject=0x0) returned 0 [0194.490] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0194.493] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0194.494] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.494] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.507] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0194.507] GetLastError () returned 0x0 [0194.507] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0194.507] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0194.507] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0194.507] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0194.507] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0194.508] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0194.509] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0194.509] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0194.509] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0194.509] malloc (_Size=0x118) returned 0xd7d420 [0194.509] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd7d420, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0194.510] free (_Block=0xd7d420) [0194.511] CloseHandle (hObject=0x244) returned 1 [0194.511] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0194.514] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0194.515] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.515] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.526] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0194.526] GetLastError () returned 0x0 [0194.526] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0194.527] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0194.527] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0194.527] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0194.527] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0194.527] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0194.528] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0194.528] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0194.528] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0194.529] malloc (_Size=0x6c) returned 0xd65010 [0194.529] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd65010, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd65010*, lpNumberOfBytesRead=0x0) returned 1 [0194.529] free (_Block=0xd65010) [0194.530] CloseHandle (hObject=0x244) returned 1 [0194.530] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0194.533] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0194.534] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.534] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.545] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0194.545] GetLastError () returned 0x0 [0194.545] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0194.545] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0194.545] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0194.545] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0194.545] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0194.546] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0194.547] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0194.547] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0194.547] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0194.547] malloc (_Size=0x11a) returned 0xd7d420 [0194.547] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd7d420, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0194.548] free (_Block=0xd7d420) [0194.548] CloseHandle (hObject=0x244) returned 1 [0194.549] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0194.553] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0194.554] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.554] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.565] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0194.565] GetLastError () returned 0x0 [0194.565] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0194.565] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0194.566] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0194.566] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0194.566] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0194.566] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0194.567] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0194.567] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0194.567] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0194.567] malloc (_Size=0x48) returned 0xd5c570 [0194.567] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0194.568] free (_Block=0xd5c570) [0194.569] CloseHandle (hObject=0x244) returned 1 [0194.569] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0194.572] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0194.573] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.573] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.584] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0194.584] GetLastError () returned 0x0 [0194.584] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0194.584] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0194.584] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0194.584] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0194.584] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0194.585] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0194.586] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0194.586] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0194.586] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0194.586] malloc (_Size=0xda) returned 0xd62120 [0194.586] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd62120, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0194.587] free (_Block=0xd62120) [0194.588] CloseHandle (hObject=0x244) returned 1 [0194.639] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0194.642] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0194.643] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.643] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.654] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0194.654] GetLastError () returned 0x0 [0194.654] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0194.654] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0194.654] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0194.654] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0194.655] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0194.655] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0194.656] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0194.656] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0194.656] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0194.656] malloc (_Size=0x6e) returned 0xd62120 [0194.656] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd62120, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0194.657] free (_Block=0xd62120) [0194.658] CloseHandle (hObject=0x244) returned 1 [0194.658] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0194.661] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0194.662] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.662] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.693] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0194.693] GetLastError () returned 0x0 [0194.693] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0194.693] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0194.693] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0194.693] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0194.693] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0194.694] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0194.695] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0194.695] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0194.695] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0194.695] malloc (_Size=0x64) returned 0xd60100 [0194.695] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd60100, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60100*, lpNumberOfBytesRead=0x0) returned 1 [0194.696] free (_Block=0xd60100) [0194.696] CloseHandle (hObject=0x244) returned 1 [0194.696] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0194.699] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0194.700] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.700] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0194.711] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0194.711] CloseHandle (hObject=0x0) returned 0 [0194.714] free (_Block=0xd65370) [0194.714] malloc (_Size=0x48) returned 0xd5c570 [0194.714] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xfa040631, dwHighDateTime=0x1d92b8e)) [0194.714] SetEvent (hEvent=0x24c) returned 1 [0194.724] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x5783c0 [0194.724] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5783c0, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0194.724] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0194.724] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0194.900] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0194.983] RtlRestoreLastWin32Error () returned 0x3f1000 [0194.983] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0194.983] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0194.984] RtlRestoreLastWin32Error () returned 0x3f1000 [0194.984] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0) returned 1 [0194.984] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578470 [0194.984] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0194.984] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596440 [0194.984] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596440, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0194.984] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596440) returned 1 [0194.985] SafeArrayGetElemsize (psa=0x593690) returned 0x8 [0194.985] SafeArrayPutElement (psa=0x593690, rgIndices=0x115d898, pv=0x597ee8) returned 0x0 [0194.985] SafeArrayRedim (in: psa=0x593690, psaboundNew=0x115d8b0 | out: psa=0x593690) returned 0x0 [0194.985] SafeArrayCopy (in: psa=0x593690, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0194.986] SetEvent (hEvent=0x24c) returned 1 [0194.987] free (_Block=0xd5c570) [0194.987] GetCurrentThread () returned 0xfffffffffffffffe [0194.987] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0194.987] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0194.988] RtlRestoreLastWin32Error () returned 0x3f1000 [0194.988] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0194.988] GetLastError () returned 0x514 [0194.988] CloseHandle (hObject=0x244) returned 1 [0194.988] malloc (_Size=0x18) returned 0xd64b30 [0194.988] SafeArrayPutElement (psa=0x593650, rgIndices=0x115d660, pv=0x5934c8) returned 0x0 [0194.988] SafeArrayPutElement (psa=0x593910, rgIndices=0x115d660, pv=0x5934c8) returned 0x0 [0194.988] free (_Block=0xd64b30) [0194.988] malloc (_Size=0x8000) returned 0xd65370 [0194.988] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0194.990] free (_Block=0xd65370) [0194.991] malloc (_Size=0x10000) returned 0xd65370 [0194.991] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0194.994] free (_Block=0xd65370) [0194.994] malloc (_Size=0x18000) returned 0xd65370 [0194.994] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0x0 [0194.994] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0194.997] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0194.998] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0194.998] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.010] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0195.010] CloseHandle (hObject=0x0) returned 0 [0195.010] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0195.013] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0195.014] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.014] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.027] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0195.027] CloseHandle (hObject=0x0) returned 0 [0195.027] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0195.030] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0195.031] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.031] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.043] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0195.043] CloseHandle (hObject=0x0) returned 0 [0195.043] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0195.046] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0195.049] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.049] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.060] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0195.060] CloseHandle (hObject=0x0) returned 0 [0195.061] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0195.065] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0195.066] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.066] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.077] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0195.077] CloseHandle (hObject=0x0) returned 0 [0195.077] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0195.080] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0195.081] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.081] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.092] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0195.092] CloseHandle (hObject=0x0) returned 0 [0195.092] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0195.095] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0195.096] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.096] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.108] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0195.108] CloseHandle (hObject=0x0) returned 0 [0195.108] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0195.112] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0195.112] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.112] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.123] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0195.123] CloseHandle (hObject=0x0) returned 0 [0195.124] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0195.127] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0195.127] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.127] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.138] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0195.138] CloseHandle (hObject=0x0) returned 0 [0195.139] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0195.143] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0195.144] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.144] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.155] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0195.155] CloseHandle (hObject=0x0) returned 0 [0195.155] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0195.160] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0195.161] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.161] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.172] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0195.172] CloseHandle (hObject=0x0) returned 0 [0195.172] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0195.175] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0195.176] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.176] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.187] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0195.187] CloseHandle (hObject=0x0) returned 0 [0195.188] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0195.191] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0195.192] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.192] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.203] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0195.203] CloseHandle (hObject=0x0) returned 0 [0195.204] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0195.207] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0195.207] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.207] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.218] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0195.218] CloseHandle (hObject=0x0) returned 0 [0195.219] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0195.222] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0195.223] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.223] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.234] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0195.234] CloseHandle (hObject=0x0) returned 0 [0195.234] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0195.239] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0195.239] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.239] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.252] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0195.252] CloseHandle (hObject=0x0) returned 0 [0195.252] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0195.255] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0195.256] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.256] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.280] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0195.280] CloseHandle (hObject=0x0) returned 0 [0195.280] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0195.284] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0195.285] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.285] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.301] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0195.301] CloseHandle (hObject=0x0) returned 0 [0195.301] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0195.304] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0195.305] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.305] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.317] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0195.317] CloseHandle (hObject=0x0) returned 0 [0195.317] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0195.320] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0195.321] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.321] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.333] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0195.333] CloseHandle (hObject=0x0) returned 0 [0195.334] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0195.337] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0195.337] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.337] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.349] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0195.349] CloseHandle (hObject=0x0) returned 0 [0195.349] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0195.352] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0195.353] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.353] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.364] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0195.364] GetLastError () returned 0x0 [0195.365] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0195.365] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0195.365] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0195.365] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0195.365] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0195.365] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0195.366] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0195.366] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0195.366] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0195.367] malloc (_Size=0x18) returned 0xd649f0 [0195.367] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd649f0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd649f0*, lpNumberOfBytesRead=0x0) returned 1 [0195.367] free (_Block=0xd649f0) [0195.367] CloseHandle (hObject=0x244) returned 1 [0195.367] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0195.370] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0195.371] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.371] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.386] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0195.386] GetLastError () returned 0x0 [0195.386] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0195.386] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0195.386] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0195.386] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0195.386] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0195.387] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0195.388] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0195.388] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0195.388] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0195.388] malloc (_Size=0x32) returned 0xd606b0 [0195.388] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd606b0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd606b0*, lpNumberOfBytesRead=0x0) returned 1 [0195.389] free (_Block=0xd606b0) [0195.389] CloseHandle (hObject=0x244) returned 1 [0195.390] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0195.394] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0195.394] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.395] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.405] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0195.406] GetLastError () returned 0x0 [0195.406] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0195.406] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0195.406] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0195.406] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0195.406] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0195.407] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0195.408] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0195.408] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0195.408] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0195.408] malloc (_Size=0x64) returned 0xd60330 [0195.408] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60330, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60330*, lpNumberOfBytesRead=0x0) returned 1 [0195.409] free (_Block=0xd60330) [0195.409] CloseHandle (hObject=0x244) returned 1 [0195.410] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0195.413] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0195.413] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.413] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.425] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0195.425] CloseHandle (hObject=0x0) returned 0 [0195.425] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0195.428] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0195.429] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.429] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.440] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0195.440] GetLastError () returned 0x0 [0195.440] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0195.441] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0195.441] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0195.441] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0195.441] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0195.441] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0195.442] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0195.442] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0195.442] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0195.443] malloc (_Size=0x118) returned 0xd7d420 [0195.443] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd7d420, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0195.444] free (_Block=0xd7d420) [0195.444] CloseHandle (hObject=0x244) returned 1 [0195.445] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0195.448] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0195.448] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.448] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.460] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0195.460] GetLastError () returned 0x0 [0195.460] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0195.460] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0195.460] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0195.460] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0195.460] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0195.461] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0195.462] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0195.462] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0195.462] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0195.462] malloc (_Size=0x6c) returned 0xd65010 [0195.462] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd65010, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd65010*, lpNumberOfBytesRead=0x0) returned 1 [0195.463] free (_Block=0xd65010) [0195.463] CloseHandle (hObject=0x244) returned 1 [0195.463] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0195.466] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0195.467] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.467] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.480] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0195.480] GetLastError () returned 0x0 [0195.480] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0195.480] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0195.480] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0195.480] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0195.481] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0195.481] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0195.482] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0195.482] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0195.482] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0195.482] malloc (_Size=0x11a) returned 0xd7d420 [0195.482] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd7d420, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0195.483] free (_Block=0xd7d420) [0195.484] CloseHandle (hObject=0x244) returned 1 [0195.484] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0195.489] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0195.490] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.490] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.501] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0195.501] GetLastError () returned 0x0 [0195.501] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0195.501] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0195.501] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0195.501] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0195.501] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0195.502] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0195.503] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0195.503] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0195.503] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0195.503] malloc (_Size=0x48) returned 0xd5c570 [0195.503] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0195.504] free (_Block=0xd5c570) [0195.504] CloseHandle (hObject=0x244) returned 1 [0195.505] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0195.508] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0195.509] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.509] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.590] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0195.590] GetLastError () returned 0x0 [0195.591] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0195.591] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0195.591] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0195.591] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0195.591] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0195.592] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0195.592] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0195.592] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0195.593] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0195.593] malloc (_Size=0xda) returned 0xd62120 [0195.593] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd62120, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0195.594] free (_Block=0xd62120) [0195.597] CloseHandle (hObject=0x244) returned 1 [0195.638] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0195.641] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0195.642] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.642] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.654] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0195.654] GetLastError () returned 0x0 [0195.654] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0195.654] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0195.654] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0195.654] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0195.654] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0195.655] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0195.656] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0195.656] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0195.656] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0195.656] malloc (_Size=0x6e) returned 0xd62120 [0195.656] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd62120, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0195.657] free (_Block=0xd62120) [0195.657] CloseHandle (hObject=0x244) returned 1 [0195.657] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0195.660] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0195.661] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.661] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.695] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0195.695] GetLastError () returned 0x0 [0195.696] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0195.696] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0195.696] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0195.696] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0195.696] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0195.696] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0195.697] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0195.697] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0195.698] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0195.698] malloc (_Size=0x64) returned 0xd601e0 [0195.698] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd601e0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd601e0*, lpNumberOfBytesRead=0x0) returned 1 [0195.698] free (_Block=0xd601e0) [0195.699] CloseHandle (hObject=0x244) returned 1 [0195.699] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0195.702] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0195.703] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0195.703] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0195.716] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0195.716] CloseHandle (hObject=0x0) returned 0 [0195.718] free (_Block=0xd65370) [0195.718] malloc (_Size=0x48) returned 0xd5c570 [0195.718] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xfa9c9a0d, dwHighDateTime=0x1d92b8e)) [0195.718] SetEvent (hEvent=0x24c) returned 1 [0195.728] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578390 [0195.728] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578390, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0195.728] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0195.728] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578470) returned 1 [0195.904] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0195.995] RtlRestoreLastWin32Error () returned 0x3f1000 [0195.996] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0195.996] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0195.996] RtlRestoreLastWin32Error () returned 0x3f1000 [0195.996] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0) returned 1 [0195.996] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783c0 [0195.996] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0195.996] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596440 [0195.996] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596440, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0195.996] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596440) returned 1 [0195.997] SafeArrayGetElemsize (psa=0x593150) returned 0x8 [0195.997] SafeArrayPutElement (psa=0x593150, rgIndices=0x115d898, pv=0x598158) returned 0x0 [0195.997] SafeArrayRedim (in: psa=0x593150, psaboundNew=0x115d8b0 | out: psa=0x593150) returned 0x0 [0195.997] SafeArrayCopy (in: psa=0x593150, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0195.998] SetEvent (hEvent=0x24c) returned 1 [0195.999] free (_Block=0xd5c570) [0195.999] GetCurrentThread () returned 0xfffffffffffffffe [0195.999] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0195.999] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0196.000] RtlRestoreLastWin32Error () returned 0x3f1000 [0196.000] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0196.000] GetLastError () returned 0x514 [0196.000] CloseHandle (hObject=0x244) returned 1 [0196.000] malloc (_Size=0x18) returned 0xd64d30 [0196.000] SafeArrayPutElement (psa=0x592f90, rgIndices=0x115d660, pv=0x592f08) returned 0x0 [0196.000] SafeArrayPutElement (psa=0x593490, rgIndices=0x115d660, pv=0x592f08) returned 0x0 [0196.000] free (_Block=0xd64d30) [0196.000] malloc (_Size=0x8000) returned 0xd65370 [0196.000] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0196.002] free (_Block=0xd65370) [0196.003] malloc (_Size=0x10000) returned 0xd65370 [0196.003] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0xc0000004 [0196.006] free (_Block=0xd65370) [0196.006] malloc (_Size=0x18000) returned 0xd65370 [0196.006] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65370, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd65370, ResultLength=0x0) returned 0x0 [0196.006] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0196.009] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0196.010] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.010] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.023] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0196.023] CloseHandle (hObject=0x0) returned 0 [0196.024] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0196.027] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0196.027] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.027] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.040] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0196.041] CloseHandle (hObject=0x0) returned 0 [0196.041] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0196.044] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0196.045] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.045] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.056] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0196.056] CloseHandle (hObject=0x0) returned 0 [0196.056] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0196.059] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0196.060] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.060] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.072] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0196.072] CloseHandle (hObject=0x0) returned 0 [0196.073] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0196.076] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0196.076] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.077] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.088] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0196.088] CloseHandle (hObject=0x0) returned 0 [0196.088] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0196.091] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0196.092] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.092] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.103] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0196.103] CloseHandle (hObject=0x0) returned 0 [0196.104] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0196.107] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0196.107] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.107] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.120] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0196.120] CloseHandle (hObject=0x0) returned 0 [0196.120] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0196.124] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0196.124] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.124] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.135] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0196.135] CloseHandle (hObject=0x0) returned 0 [0196.136] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0196.139] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0196.140] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.140] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.153] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0196.153] CloseHandle (hObject=0x0) returned 0 [0196.153] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0196.156] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0196.157] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.157] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.170] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0196.170] CloseHandle (hObject=0x0) returned 0 [0196.170] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0196.174] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0196.174] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.174] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.186] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0196.186] CloseHandle (hObject=0x0) returned 0 [0196.186] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0196.189] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0196.190] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.190] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.201] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0196.201] CloseHandle (hObject=0x0) returned 0 [0196.202] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0196.206] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0196.207] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.207] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.218] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0196.218] CloseHandle (hObject=0x0) returned 0 [0196.219] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0196.222] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0196.223] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.223] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.234] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0196.235] CloseHandle (hObject=0x0) returned 0 [0196.235] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0196.238] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0196.239] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.239] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.250] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0196.250] CloseHandle (hObject=0x0) returned 0 [0196.253] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0196.256] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0196.257] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.257] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.275] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0196.275] CloseHandle (hObject=0x0) returned 0 [0196.275] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0196.278] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0196.279] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.279] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.291] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0196.291] CloseHandle (hObject=0x0) returned 0 [0196.291] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0196.294] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0196.295] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.295] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.306] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0196.306] CloseHandle (hObject=0x0) returned 0 [0196.306] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0196.309] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0196.310] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.310] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.322] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0196.322] CloseHandle (hObject=0x0) returned 0 [0196.322] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0196.325] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0196.326] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.326] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.339] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0196.339] CloseHandle (hObject=0x0) returned 0 [0196.340] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0196.343] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0196.343] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.344] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.355] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0196.355] CloseHandle (hObject=0x0) returned 0 [0196.355] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0196.358] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0196.359] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.359] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.374] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0196.374] GetLastError () returned 0x0 [0196.374] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0196.374] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0196.374] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0196.374] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0196.374] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0196.375] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0196.376] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0196.376] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0196.376] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0196.376] malloc (_Size=0x18) returned 0xd64890 [0196.376] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64890, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64890*, lpNumberOfBytesRead=0x0) returned 1 [0196.376] free (_Block=0xd64890) [0196.378] CloseHandle (hObject=0x244) returned 1 [0196.378] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0196.381] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0196.382] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.382] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.393] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0196.393] GetLastError () returned 0x0 [0196.393] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0196.393] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0196.393] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0196.393] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0196.393] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0196.394] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0196.395] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0196.395] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0196.395] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0196.395] malloc (_Size=0x32) returned 0xd60d70 [0196.395] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd60d70, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60d70*, lpNumberOfBytesRead=0x0) returned 1 [0196.396] free (_Block=0xd60d70) [0196.396] CloseHandle (hObject=0x244) returned 1 [0196.397] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0196.400] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0196.401] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.401] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.412] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0196.412] GetLastError () returned 0x0 [0196.412] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0196.412] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0196.412] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0196.412] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0196.412] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0196.413] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0196.414] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0196.414] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0196.414] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0196.414] malloc (_Size=0x64) returned 0xd60100 [0196.414] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60100, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60100*, lpNumberOfBytesRead=0x0) returned 1 [0196.415] free (_Block=0xd60100) [0196.415] CloseHandle (hObject=0x244) returned 1 [0196.416] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0196.419] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0196.420] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.420] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.432] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0196.432] CloseHandle (hObject=0x0) returned 0 [0196.432] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0196.435] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0196.436] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.436] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.447] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0196.447] GetLastError () returned 0x0 [0196.448] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0196.448] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0196.448] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0196.448] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0196.448] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0196.448] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0196.449] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0196.449] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0196.449] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0196.450] malloc (_Size=0x118) returned 0xd7d420 [0196.450] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd7d420, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0196.451] free (_Block=0xd7d420) [0196.451] CloseHandle (hObject=0x244) returned 1 [0196.452] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0196.455] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0196.456] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.456] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.467] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0196.467] GetLastError () returned 0x0 [0196.467] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0196.467] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0196.467] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0196.467] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0196.468] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0196.468] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0196.469] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0196.469] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0196.469] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0196.469] malloc (_Size=0x6c) returned 0xd65010 [0196.469] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd65010, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd65010*, lpNumberOfBytesRead=0x0) returned 1 [0196.470] free (_Block=0xd65010) [0196.473] CloseHandle (hObject=0x244) returned 1 [0196.474] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0196.477] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0196.477] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.477] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.489] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0196.489] GetLastError () returned 0x0 [0196.489] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0196.489] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0196.489] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0196.489] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0196.489] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0196.490] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0196.491] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0196.491] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0196.491] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0196.491] malloc (_Size=0x11a) returned 0xd7d420 [0196.491] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd7d420, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd7d420*, lpNumberOfBytesRead=0x0) returned 1 [0196.492] free (_Block=0xd7d420) [0196.492] CloseHandle (hObject=0x244) returned 1 [0196.493] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0196.496] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0196.496] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.496] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.508] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0196.508] GetLastError () returned 0x0 [0196.508] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0196.508] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0196.508] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0196.508] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0196.508] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0196.509] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0196.510] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0196.510] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0196.510] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0196.510] malloc (_Size=0x48) returned 0xd5c570 [0196.510] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0196.511] free (_Block=0xd5c570) [0196.511] CloseHandle (hObject=0x244) returned 1 [0196.512] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0196.515] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0196.515] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.515] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.527] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0196.527] GetLastError () returned 0x0 [0196.527] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0196.527] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0196.527] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0196.527] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0196.527] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0196.528] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0196.529] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0196.529] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0196.529] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0196.529] malloc (_Size=0xda) returned 0xd62120 [0196.529] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd62120, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0196.530] free (_Block=0xd62120) [0196.530] CloseHandle (hObject=0x244) returned 1 [0196.583] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0196.585] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0196.586] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.586] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.598] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0196.598] GetLastError () returned 0x0 [0196.598] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0196.598] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0196.598] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0196.598] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0196.598] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0196.599] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0196.600] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0196.600] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0196.600] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0196.600] malloc (_Size=0x6e) returned 0xd62120 [0196.600] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd62120, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0196.601] free (_Block=0xd62120) [0196.602] CloseHandle (hObject=0x244) returned 1 [0196.602] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0196.605] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0196.606] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.606] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.617] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0196.617] GetLastError () returned 0x0 [0196.617] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0196.617] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0196.617] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0196.617] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0196.617] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0196.618] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0196.619] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0196.619] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0196.619] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0196.619] malloc (_Size=0x64) returned 0xd601e0 [0196.619] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd601e0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd601e0*, lpNumberOfBytesRead=0x0) returned 1 [0196.620] free (_Block=0xd601e0) [0196.620] CloseHandle (hObject=0x244) returned 1 [0196.621] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0196.624] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0196.625] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0196.625] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0196.657] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0196.657] CloseHandle (hObject=0x0) returned 0 [0196.659] free (_Block=0xd65370) [0196.659] malloc (_Size=0x48) returned 0xd5c570 [0196.659] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xfb2e0b40, dwHighDateTime=0x1d92b8e)) [0196.659] SetEvent (hEvent=0x24c) returned 1 [0196.679] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578390 [0196.679] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578390, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0196.679] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0196.679] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0197.021] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0197.110] RtlRestoreLastWin32Error () returned 0x3f1000 [0197.110] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0197.111] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0197.111] RtlRestoreLastWin32Error () returned 0x3f1000 [0197.111] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0) returned 1 [0197.111] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578420 [0197.111] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0197.111] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596500 [0197.111] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596500, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0197.111] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596500) returned 1 [0197.112] SafeArrayGetElemsize (psa=0x592f90) returned 0x8 [0197.112] SafeArrayPutElement (psa=0x592f90, rgIndices=0x115d898, pv=0x598098) returned 0x0 [0197.112] SafeArrayRedim (in: psa=0x592f90, psaboundNew=0x115d8b0 | out: psa=0x592f90) returned 0x0 [0197.112] SafeArrayCopy (in: psa=0x592f90, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0197.113] SetEvent (hEvent=0x24c) returned 1 [0197.114] free (_Block=0xd5c570) [0197.114] GetCurrentThread () returned 0xfffffffffffffffe [0197.114] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0197.114] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0197.115] RtlRestoreLastWin32Error () returned 0x3f1000 [0197.115] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0197.115] GetLastError () returned 0x514 [0197.115] CloseHandle (hObject=0x244) returned 1 [0197.115] malloc (_Size=0x18) returned 0xd64c50 [0197.115] SafeArrayPutElement (psa=0x5935d0, rgIndices=0x115d660, pv=0x593308) returned 0x0 [0197.115] SafeArrayPutElement (psa=0x593950, rgIndices=0x115d660, pv=0x593308) returned 0x0 [0197.115] free (_Block=0xd64c50) [0197.115] malloc (_Size=0x8000) returned 0xd65580 [0197.115] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65580, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd65580, ResultLength=0x0) returned 0xc0000004 [0197.117] free (_Block=0xd65580) [0197.118] malloc (_Size=0x10000) returned 0xd65580 [0197.118] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65580, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65580, ResultLength=0x0) returned 0xc0000004 [0197.120] free (_Block=0xd65580) [0197.120] malloc (_Size=0x18000) returned 0xd7d420 [0197.121] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd7d420, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd7d420, ResultLength=0x0) returned 0x0 [0197.122] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0197.125] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0197.129] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.129] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.141] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0197.147] CloseHandle (hObject=0x0) returned 0 [0197.147] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0197.150] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0197.151] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.151] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.164] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0197.164] CloseHandle (hObject=0x0) returned 0 [0197.164] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0197.167] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0197.168] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.168] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.181] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0197.181] CloseHandle (hObject=0x0) returned 0 [0197.182] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0197.185] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0197.185] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.185] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.199] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0197.199] CloseHandle (hObject=0x0) returned 0 [0197.199] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0197.202] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0197.203] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.205] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.216] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0197.216] CloseHandle (hObject=0x0) returned 0 [0197.216] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0197.221] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0197.222] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.222] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.233] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0197.233] CloseHandle (hObject=0x0) returned 0 [0197.233] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0197.253] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0197.254] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.254] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.265] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0197.265] CloseHandle (hObject=0x0) returned 0 [0197.265] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0197.278] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0197.279] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.279] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.292] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0197.292] CloseHandle (hObject=0x0) returned 0 [0197.292] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0197.295] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0197.296] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.296] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.312] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0197.312] CloseHandle (hObject=0x0) returned 0 [0197.312] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0197.317] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0197.318] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.318] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.344] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0197.344] CloseHandle (hObject=0x0) returned 0 [0197.345] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0197.348] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0197.349] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.349] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.364] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0197.364] CloseHandle (hObject=0x0) returned 0 [0197.365] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0197.368] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0197.368] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.369] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.383] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0197.383] CloseHandle (hObject=0x0) returned 0 [0197.383] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0197.386] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0197.387] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.387] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.400] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0197.401] CloseHandle (hObject=0x0) returned 0 [0197.401] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0197.404] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0197.405] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.405] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.425] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0197.425] CloseHandle (hObject=0x0) returned 0 [0197.425] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0197.428] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0197.429] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.429] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.443] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0197.443] CloseHandle (hObject=0x0) returned 0 [0197.443] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0197.446] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0197.447] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.447] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.475] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0197.475] CloseHandle (hObject=0x0) returned 0 [0197.476] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0197.479] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0197.480] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.480] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.493] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0197.493] CloseHandle (hObject=0x0) returned 0 [0197.493] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0197.496] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0197.497] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.497] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.510] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0197.510] CloseHandle (hObject=0x0) returned 0 [0197.510] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0197.513] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0197.514] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.514] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.529] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0197.529] CloseHandle (hObject=0x0) returned 0 [0197.529] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0197.534] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0197.535] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.535] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.546] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0197.546] CloseHandle (hObject=0x0) returned 0 [0197.547] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0197.551] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0197.552] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.552] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.567] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0197.567] CloseHandle (hObject=0x0) returned 0 [0197.567] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0197.570] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0197.571] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.571] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.583] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0197.583] GetLastError () returned 0x0 [0197.583] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0197.583] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0197.584] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0197.584] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0197.584] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0197.584] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0197.585] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0197.585] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0197.585] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0197.586] malloc (_Size=0x18) returned 0xd649b0 [0197.586] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd649b0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd649b0*, lpNumberOfBytesRead=0x0) returned 1 [0197.586] free (_Block=0xd649b0) [0197.586] CloseHandle (hObject=0x244) returned 1 [0197.586] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0197.589] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0197.590] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.590] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.603] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0197.603] GetLastError () returned 0x0 [0197.603] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0197.603] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0197.603] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0197.603] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0197.603] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0197.604] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0197.605] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0197.605] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0197.605] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0197.605] malloc (_Size=0x32) returned 0xd608f0 [0197.605] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd608f0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd608f0*, lpNumberOfBytesRead=0x0) returned 1 [0197.606] free (_Block=0xd608f0) [0197.606] CloseHandle (hObject=0x244) returned 1 [0197.607] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0197.613] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0197.614] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.614] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.627] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0197.627] GetLastError () returned 0x0 [0197.627] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0197.627] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0197.627] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0197.627] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0197.627] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0197.628] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0197.628] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0197.628] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0197.629] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0197.629] malloc (_Size=0x64) returned 0xd60250 [0197.629] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60250, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60250*, lpNumberOfBytesRead=0x0) returned 1 [0197.630] free (_Block=0xd60250) [0197.630] CloseHandle (hObject=0x244) returned 1 [0197.630] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0197.633] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0197.634] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.634] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.646] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0197.646] CloseHandle (hObject=0x0) returned 0 [0197.647] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0197.650] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0197.651] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.651] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.677] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0197.677] GetLastError () returned 0x0 [0197.677] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0197.677] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0197.677] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0197.677] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0197.677] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0197.678] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0197.679] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0197.679] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0197.679] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0197.679] malloc (_Size=0x118) returned 0xd95830 [0197.679] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd95830, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd95830*, lpNumberOfBytesRead=0x0) returned 1 [0197.680] free (_Block=0xd95830) [0197.681] CloseHandle (hObject=0x244) returned 1 [0197.681] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0197.684] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0197.685] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.685] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.697] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0197.697] GetLastError () returned 0x0 [0197.697] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0197.697] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0197.697] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0197.698] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0197.698] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0197.698] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0197.699] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0197.699] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0197.699] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0197.699] malloc (_Size=0x6c) returned 0xd65010 [0197.699] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd65010, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd65010*, lpNumberOfBytesRead=0x0) returned 1 [0197.700] free (_Block=0xd65010) [0197.701] CloseHandle (hObject=0x244) returned 1 [0197.701] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0197.706] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0197.706] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.707] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.718] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0197.718] GetLastError () returned 0x0 [0197.718] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0197.718] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0197.718] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0197.718] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0197.718] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0197.722] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0197.722] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0197.722] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0197.723] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0197.723] malloc (_Size=0x11a) returned 0xd95830 [0197.723] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd95830, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd95830*, lpNumberOfBytesRead=0x0) returned 1 [0197.724] free (_Block=0xd95830) [0197.724] CloseHandle (hObject=0x244) returned 1 [0197.724] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0197.727] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0197.728] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.728] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.741] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0197.741] GetLastError () returned 0x0 [0197.741] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0197.741] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0197.741] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0197.741] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0197.741] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0197.742] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0197.743] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0197.743] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0197.743] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0197.743] malloc (_Size=0x48) returned 0xd5c570 [0197.743] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0197.744] free (_Block=0xd5c570) [0197.744] CloseHandle (hObject=0x244) returned 1 [0197.744] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0197.747] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0197.748] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.748] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.760] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0197.760] GetLastError () returned 0x0 [0197.760] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0197.761] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0197.761] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0197.761] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0197.761] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0197.761] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0197.762] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0197.762] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0197.762] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0197.763] malloc (_Size=0xda) returned 0xd62120 [0197.763] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd62120, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0197.763] free (_Block=0xd62120) [0197.764] CloseHandle (hObject=0x244) returned 1 [0197.808] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0197.811] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0197.812] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.812] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.824] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0197.824] GetLastError () returned 0x0 [0197.824] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0197.824] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0197.824] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0197.825] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0197.825] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0197.825] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0197.826] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0197.826] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0197.826] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0197.826] malloc (_Size=0x6e) returned 0xd62120 [0197.826] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd62120, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0197.827] free (_Block=0xd62120) [0197.828] CloseHandle (hObject=0x244) returned 1 [0197.828] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0197.832] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0197.833] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.833] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.847] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0197.847] GetLastError () returned 0x0 [0197.847] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0197.847] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0197.848] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0197.848] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0197.848] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0197.848] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0197.849] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0197.849] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0197.849] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0197.849] malloc (_Size=0x64) returned 0xd603a0 [0197.849] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd603a0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd603a0*, lpNumberOfBytesRead=0x0) returned 1 [0197.850] free (_Block=0xd603a0) [0197.851] CloseHandle (hObject=0x244) returned 1 [0197.851] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0197.854] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0197.855] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0197.855] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0197.867] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0197.867] CloseHandle (hObject=0x0) returned 0 [0197.870] free (_Block=0xd7d420) [0197.870] malloc (_Size=0x48) returned 0xd5c570 [0197.870] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xfbe5a516, dwHighDateTime=0x1d92b8e)) [0197.870] SetEvent (hEvent=0x24c) returned 1 [0197.942] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578410 [0197.942] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578410, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0197.942] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578410) returned 1 [0197.942] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578420) returned 1 [0198.239] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0198.332] RtlRestoreLastWin32Error () returned 0x3f1000 [0198.332] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0198.332] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578470 [0198.332] RtlRestoreLastWin32Error () returned 0x3f1000 [0198.332] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578470, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578470, pcchLanguagesBuffer=0x115dff0) returned 1 [0198.332] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0198.332] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578470) returned 1 [0198.333] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596880 [0198.333] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596880, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0198.333] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596880) returned 1 [0198.334] SafeArrayGetElemsize (psa=0x5934d0) returned 0x8 [0198.334] SafeArrayPutElement (psa=0x5934d0, rgIndices=0x115d898, pv=0x597e28) returned 0x0 [0198.334] SafeArrayRedim (in: psa=0x5934d0, psaboundNew=0x115d8b0 | out: psa=0x5934d0) returned 0x0 [0198.334] SafeArrayCopy (in: psa=0x5934d0, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0198.334] SetEvent (hEvent=0x24c) returned 1 [0198.336] free (_Block=0xd5c570) [0198.336] GetCurrentThread () returned 0xfffffffffffffffe [0198.336] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0198.336] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0198.337] RtlRestoreLastWin32Error () returned 0x3f1000 [0198.337] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0198.337] GetLastError () returned 0x514 [0198.337] CloseHandle (hObject=0x244) returned 1 [0198.337] malloc (_Size=0x18) returned 0xd64d90 [0198.337] SafeArrayPutElement (psa=0x592f50, rgIndices=0x115d660, pv=0x5933c8) returned 0x0 [0198.337] SafeArrayPutElement (psa=0x593310, rgIndices=0x115d660, pv=0x5933c8) returned 0x0 [0198.337] free (_Block=0xd64d90) [0198.337] malloc (_Size=0x8000) returned 0xd95830 [0198.339] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd95830, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd95830, ResultLength=0x0) returned 0xc0000004 [0198.340] free (_Block=0xd95830) [0198.342] malloc (_Size=0x10000) returned 0xd65580 [0198.342] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65580, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65580, ResultLength=0x0) returned 0xc0000004 [0198.344] free (_Block=0xd65580) [0198.345] malloc (_Size=0x18000) returned 0xd7d420 [0198.346] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd7d420, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd7d420, ResultLength=0x0) returned 0x0 [0198.347] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0198.350] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0198.351] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.351] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.367] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0198.367] CloseHandle (hObject=0x0) returned 0 [0198.367] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0198.370] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0198.371] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.371] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.384] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0198.384] CloseHandle (hObject=0x0) returned 0 [0198.384] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0198.387] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0198.388] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.388] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.401] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0198.401] CloseHandle (hObject=0x0) returned 0 [0198.401] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0198.404] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0198.405] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.405] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.419] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0198.419] CloseHandle (hObject=0x0) returned 0 [0198.419] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0198.424] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0198.425] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.425] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.436] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0198.436] CloseHandle (hObject=0x0) returned 0 [0198.436] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0198.444] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0198.445] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.445] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.458] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0198.458] CloseHandle (hObject=0x0) returned 0 [0198.459] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0198.462] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0198.462] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.463] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.477] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0198.477] CloseHandle (hObject=0x0) returned 0 [0198.477] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0198.480] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0198.481] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.481] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.494] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0198.494] CloseHandle (hObject=0x0) returned 0 [0198.494] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0198.497] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0198.498] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.498] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.513] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0198.513] CloseHandle (hObject=0x0) returned 0 [0198.513] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0198.518] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0198.519] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.519] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.530] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0198.530] CloseHandle (hObject=0x0) returned 0 [0198.530] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0198.535] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0198.536] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.536] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.552] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0198.552] CloseHandle (hObject=0x0) returned 0 [0198.553] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0198.556] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0198.557] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.557] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.570] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0198.570] CloseHandle (hObject=0x0) returned 0 [0198.570] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0198.573] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0198.574] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.574] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.587] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0198.587] CloseHandle (hObject=0x0) returned 0 [0198.587] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0198.590] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0198.591] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.591] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.604] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0198.604] CloseHandle (hObject=0x0) returned 0 [0198.604] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0198.607] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0198.608] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.608] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.621] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0198.621] CloseHandle (hObject=0x0) returned 0 [0198.621] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0198.624] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0198.625] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.625] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.638] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0198.638] CloseHandle (hObject=0x0) returned 0 [0198.638] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0198.644] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0198.645] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.645] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.656] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0198.656] CloseHandle (hObject=0x0) returned 0 [0198.660] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0198.663] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0198.664] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.664] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.677] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0198.677] CloseHandle (hObject=0x0) returned 0 [0198.677] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0198.680] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0198.681] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.681] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.695] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0198.695] CloseHandle (hObject=0x0) returned 0 [0198.695] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0198.698] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0198.699] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.699] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.713] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0198.713] CloseHandle (hObject=0x0) returned 0 [0198.713] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0198.716] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0198.717] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.717] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.730] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0198.730] CloseHandle (hObject=0x0) returned 0 [0198.730] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0198.733] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0198.734] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.734] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.748] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0198.749] GetLastError () returned 0x0 [0198.749] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0198.749] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0198.749] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0198.749] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0198.749] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0198.750] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0198.752] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0198.752] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0198.753] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0198.753] malloc (_Size=0x18) returned 0xd64a90 [0198.753] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64a90, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64a90*, lpNumberOfBytesRead=0x0) returned 1 [0198.753] free (_Block=0xd64a90) [0198.753] CloseHandle (hObject=0x244) returned 1 [0198.754] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0198.757] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0198.758] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.758] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.773] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0198.773] GetLastError () returned 0x0 [0198.773] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0198.773] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0198.773] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0198.774] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0198.774] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0198.774] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0198.775] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0198.775] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0198.775] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0198.775] malloc (_Size=0x32) returned 0xd611b0 [0198.775] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd611b0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd611b0*, lpNumberOfBytesRead=0x0) returned 1 [0198.776] free (_Block=0xd611b0) [0198.777] CloseHandle (hObject=0x244) returned 1 [0198.777] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0198.780] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0198.781] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.781] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.796] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0198.796] GetLastError () returned 0x0 [0198.796] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0198.796] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0198.797] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0198.797] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0198.797] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0198.799] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0198.800] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0198.800] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0198.800] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0198.800] malloc (_Size=0x64) returned 0xd60090 [0198.800] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60090, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60090*, lpNumberOfBytesRead=0x0) returned 1 [0198.801] free (_Block=0xd60090) [0198.802] CloseHandle (hObject=0x244) returned 1 [0198.802] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0198.805] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0198.806] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.806] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.830] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0198.830] CloseHandle (hObject=0x0) returned 0 [0198.830] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0198.833] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0198.834] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.834] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.848] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0198.848] GetLastError () returned 0x0 [0198.848] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0198.848] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0198.848] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0198.848] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0198.848] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0198.849] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0198.850] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0198.850] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0198.850] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0198.850] malloc (_Size=0x118) returned 0xd95830 [0198.851] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd95830, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd95830*, lpNumberOfBytesRead=0x0) returned 1 [0198.851] free (_Block=0xd95830) [0198.852] CloseHandle (hObject=0x244) returned 1 [0198.852] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0198.855] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0198.856] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.856] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.869] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0198.869] GetLastError () returned 0x0 [0198.870] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0198.870] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0198.870] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0198.870] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0198.870] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0198.871] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0198.871] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0198.872] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0198.872] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0198.872] malloc (_Size=0x6c) returned 0xd65010 [0198.872] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd65010, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd65010*, lpNumberOfBytesRead=0x0) returned 1 [0198.872] free (_Block=0xd65010) [0198.873] CloseHandle (hObject=0x244) returned 1 [0198.873] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0198.880] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0198.881] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.881] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.896] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0198.896] GetLastError () returned 0x0 [0198.896] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0198.896] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0198.896] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0198.896] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0198.896] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0198.897] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0198.898] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0198.898] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0198.898] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0198.898] malloc (_Size=0x11a) returned 0xd95830 [0198.898] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd95830, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd95830*, lpNumberOfBytesRead=0x0) returned 1 [0198.899] free (_Block=0xd95830) [0198.899] CloseHandle (hObject=0x244) returned 1 [0198.899] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0198.902] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0198.903] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.903] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.916] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0198.917] GetLastError () returned 0x0 [0198.917] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0198.917] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0198.917] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0198.917] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0198.917] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0198.918] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0198.918] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0198.918] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0198.919] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0198.919] malloc (_Size=0x48) returned 0xd5c570 [0198.919] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0198.919] free (_Block=0xd5c570) [0198.920] CloseHandle (hObject=0x244) returned 1 [0198.920] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0198.926] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0198.926] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.926] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0198.937] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0198.937] GetLastError () returned 0x0 [0198.940] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0198.940] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0198.940] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0198.940] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0198.940] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0198.941] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0198.941] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0198.942] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0198.942] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0198.942] malloc (_Size=0xda) returned 0xd62120 [0198.942] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd62120, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0198.942] free (_Block=0xd62120) [0198.943] CloseHandle (hObject=0x244) returned 1 [0198.972] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0198.975] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0198.976] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0198.976] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.016] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0199.018] GetLastError () returned 0x0 [0199.018] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0199.018] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0199.018] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0199.018] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0199.018] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0199.019] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0199.020] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0199.020] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0199.020] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0199.020] malloc (_Size=0x6e) returned 0xd62120 [0199.020] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd62120, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0199.021] free (_Block=0xd62120) [0199.021] CloseHandle (hObject=0x244) returned 1 [0199.022] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0199.025] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0199.026] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.026] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.039] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0199.039] GetLastError () returned 0x0 [0199.039] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0199.039] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0199.039] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0199.039] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0199.039] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0199.040] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0199.041] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0199.041] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0199.041] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0199.041] malloc (_Size=0x64) returned 0xd601e0 [0199.041] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd601e0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd601e0*, lpNumberOfBytesRead=0x0) returned 1 [0199.042] free (_Block=0xd601e0) [0199.042] CloseHandle (hObject=0x244) returned 1 [0199.043] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0199.046] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0199.047] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.047] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.060] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0199.060] CloseHandle (hObject=0x0) returned 0 [0199.063] free (_Block=0xd7d420) [0199.083] malloc (_Size=0x48) returned 0xd5c570 [0199.084] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xfc9f966d, dwHighDateTime=0x1d92b8e)) [0199.084] SetEvent (hEvent=0x24c) returned 1 [0199.090] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x5783c0 [0199.090] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5783c0, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0199.090] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0199.090] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0199.274] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0199.370] RtlRestoreLastWin32Error () returned 0x3f1000 [0199.370] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0199.370] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0199.370] RtlRestoreLastWin32Error () returned 0x3f1000 [0199.371] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0) returned 1 [0199.371] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783c0 [0199.371] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0199.371] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596880 [0199.371] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596880, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0199.371] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596880) returned 1 [0199.372] SafeArrayGetElemsize (psa=0x593950) returned 0x8 [0199.372] SafeArrayPutElement (psa=0x593950, rgIndices=0x115d898, pv=0x597d08) returned 0x0 [0199.372] SafeArrayRedim (in: psa=0x593950, psaboundNew=0x115d8b0 | out: psa=0x593950) returned 0x0 [0199.372] SafeArrayCopy (in: psa=0x593950, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0199.372] SetEvent (hEvent=0x24c) returned 1 [0199.374] free (_Block=0xd5c570) [0199.375] GetCurrentThread () returned 0xfffffffffffffffe [0199.375] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0199.376] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0199.376] RtlRestoreLastWin32Error () returned 0x3f1000 [0199.376] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0199.376] GetLastError () returned 0x514 [0199.377] CloseHandle (hObject=0x244) returned 1 [0199.377] malloc (_Size=0x18) returned 0xd64f70 [0199.377] SafeArrayPutElement (psa=0x593110, rgIndices=0x115d660, pv=0x593508) returned 0x0 [0199.377] SafeArrayPutElement (psa=0x5933d0, rgIndices=0x115d660, pv=0x593508) returned 0x0 [0199.377] free (_Block=0xd64f70) [0199.377] malloc (_Size=0x8000) returned 0xd95830 [0199.377] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd95830, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd95830, ResultLength=0x0) returned 0xc0000004 [0199.379] free (_Block=0xd95830) [0199.379] malloc (_Size=0x10000) returned 0xd65580 [0199.380] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65580, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65580, ResultLength=0x0) returned 0xc0000004 [0199.382] free (_Block=0xd65580) [0199.382] malloc (_Size=0x18000) returned 0xd7d420 [0199.383] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd7d420, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd7d420, ResultLength=0x0) returned 0x0 [0199.384] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0199.387] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0199.388] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.388] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.401] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0199.401] CloseHandle (hObject=0x0) returned 0 [0199.401] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0199.404] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0199.405] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.405] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.427] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0199.427] CloseHandle (hObject=0x0) returned 0 [0199.427] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0199.430] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0199.431] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.431] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.444] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0199.444] CloseHandle (hObject=0x0) returned 0 [0199.444] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0199.447] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0199.448] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.448] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.461] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0199.461] CloseHandle (hObject=0x0) returned 0 [0199.461] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0199.464] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0199.465] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.465] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.478] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0199.478] CloseHandle (hObject=0x0) returned 0 [0199.478] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0199.481] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0199.482] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.482] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.495] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0199.495] CloseHandle (hObject=0x0) returned 0 [0199.496] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0199.499] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0199.499] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.499] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.514] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0199.514] CloseHandle (hObject=0x0) returned 0 [0199.515] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0199.520] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0199.521] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.521] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.536] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0199.536] CloseHandle (hObject=0x0) returned 0 [0199.536] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0199.539] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0199.540] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.540] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.555] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0199.555] CloseHandle (hObject=0x0) returned 0 [0199.556] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0199.559] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0199.559] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.559] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.573] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0199.573] CloseHandle (hObject=0x0) returned 0 [0199.573] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0199.576] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0199.577] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.577] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.590] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0199.590] CloseHandle (hObject=0x0) returned 0 [0199.590] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0199.593] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0199.596] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.596] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.607] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0199.607] CloseHandle (hObject=0x0) returned 0 [0199.607] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0199.613] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0199.613] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.613] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.624] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0199.624] CloseHandle (hObject=0x0) returned 0 [0199.625] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0199.629] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0199.630] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.630] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.646] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0199.646] CloseHandle (hObject=0x0) returned 0 [0199.647] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0199.650] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0199.651] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.651] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.663] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0199.663] CloseHandle (hObject=0x0) returned 0 [0199.664] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0199.667] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0199.667] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.667] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.680] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0199.680] CloseHandle (hObject=0x0) returned 0 [0199.681] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0199.684] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0199.684] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.685] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.698] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0199.698] CloseHandle (hObject=0x0) returned 0 [0199.698] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0199.701] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0199.702] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.702] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.715] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0199.715] CloseHandle (hObject=0x0) returned 0 [0199.715] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0199.718] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0199.719] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.721] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.732] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0199.732] CloseHandle (hObject=0x0) returned 0 [0199.732] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0199.739] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0199.740] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.740] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.755] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0199.755] CloseHandle (hObject=0x0) returned 0 [0199.756] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0199.759] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0199.759] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.759] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.773] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0199.773] CloseHandle (hObject=0x0) returned 0 [0199.773] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0199.776] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0199.777] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.777] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.791] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0199.791] GetLastError () returned 0x0 [0199.791] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0199.791] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0199.791] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0199.791] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0199.791] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0199.792] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0199.792] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0199.793] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0199.793] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0199.793] malloc (_Size=0x18) returned 0xd64bb0 [0199.793] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64bb0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64bb0*, lpNumberOfBytesRead=0x0) returned 1 [0199.793] free (_Block=0xd64bb0) [0199.793] CloseHandle (hObject=0x244) returned 1 [0199.794] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0199.797] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0199.800] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.800] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.811] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0199.811] GetLastError () returned 0x0 [0199.811] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0199.811] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0199.811] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0199.811] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0199.811] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0199.812] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0199.818] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0199.818] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0199.818] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0199.818] malloc (_Size=0x32) returned 0xd61330 [0199.818] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd61330, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd61330*, lpNumberOfBytesRead=0x0) returned 1 [0199.819] free (_Block=0xd61330) [0199.820] CloseHandle (hObject=0x244) returned 1 [0199.820] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0199.823] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0199.824] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.824] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.838] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0199.838] GetLastError () returned 0x0 [0199.838] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0199.838] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0199.838] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0199.838] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0199.838] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0199.839] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0199.840] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0199.840] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0199.840] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0199.840] malloc (_Size=0x64) returned 0xd60330 [0199.840] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60330, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60330*, lpNumberOfBytesRead=0x0) returned 1 [0199.841] free (_Block=0xd60330) [0199.841] CloseHandle (hObject=0x244) returned 1 [0199.842] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0199.847] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0199.848] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.848] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.859] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0199.859] CloseHandle (hObject=0x0) returned 0 [0199.859] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0199.864] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0199.865] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.865] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.878] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0199.878] GetLastError () returned 0x0 [0199.878] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0199.878] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0199.878] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0199.878] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0199.878] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0199.879] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0199.880] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0199.880] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0199.880] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0199.880] malloc (_Size=0x118) returned 0xd95830 [0199.880] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd95830, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd95830*, lpNumberOfBytesRead=0x0) returned 1 [0199.881] free (_Block=0xd95830) [0199.882] CloseHandle (hObject=0x244) returned 1 [0199.882] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0199.885] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0199.886] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.886] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.897] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0199.897] GetLastError () returned 0x0 [0199.897] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0199.897] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0199.897] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0199.897] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0199.898] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0199.898] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0199.899] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0199.899] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0199.899] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0199.899] malloc (_Size=0x6c) returned 0xd65010 [0199.899] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd65010, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd65010*, lpNumberOfBytesRead=0x0) returned 1 [0199.900] free (_Block=0xd65010) [0199.900] CloseHandle (hObject=0x244) returned 1 [0199.901] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0199.904] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0199.904] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.904] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.916] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0199.916] GetLastError () returned 0x0 [0199.916] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0199.916] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0199.916] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0199.916] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0199.916] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0199.917] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0199.918] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0199.918] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0199.918] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0199.918] malloc (_Size=0x11a) returned 0xd95830 [0199.918] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd95830, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd95830*, lpNumberOfBytesRead=0x0) returned 1 [0199.919] free (_Block=0xd95830) [0199.919] CloseHandle (hObject=0x244) returned 1 [0199.920] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0199.927] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0199.928] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.928] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.939] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0199.939] GetLastError () returned 0x0 [0199.939] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0199.939] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0199.939] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0199.939] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0199.939] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0199.940] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0199.941] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0199.941] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0199.941] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0199.941] malloc (_Size=0x48) returned 0xd5c570 [0199.941] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0199.942] free (_Block=0xd5c570) [0199.942] CloseHandle (hObject=0x244) returned 1 [0199.943] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0199.946] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0199.946] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.946] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0199.958] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0199.958] GetLastError () returned 0x0 [0199.958] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0199.958] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0199.958] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0199.958] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0199.958] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0199.959] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0199.960] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0199.960] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0199.960] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0199.960] malloc (_Size=0xda) returned 0xd62120 [0199.960] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd62120, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0199.961] free (_Block=0xd62120) [0199.961] CloseHandle (hObject=0x244) returned 1 [0200.020] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0200.023] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0200.023] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.023] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.036] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0200.036] GetLastError () returned 0x0 [0200.036] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0200.036] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0200.036] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0200.037] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0200.037] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0200.037] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0200.038] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0200.038] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0200.038] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0200.038] malloc (_Size=0x6e) returned 0xd62120 [0200.039] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd62120, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0200.039] free (_Block=0xd62120) [0200.040] CloseHandle (hObject=0x244) returned 1 [0200.040] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0200.043] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0200.044] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.044] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.055] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0200.055] GetLastError () returned 0x0 [0200.055] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0200.055] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0200.055] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0200.055] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0200.056] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0200.056] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0200.057] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0200.057] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0200.057] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0200.057] malloc (_Size=0x64) returned 0xd60330 [0200.057] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd60330, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60330*, lpNumberOfBytesRead=0x0) returned 1 [0200.058] free (_Block=0xd60330) [0200.058] CloseHandle (hObject=0x244) returned 1 [0200.059] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0200.062] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0200.063] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.063] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.105] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0200.105] CloseHandle (hObject=0x0) returned 0 [0200.108] free (_Block=0xd7d420) [0200.108] malloc (_Size=0x48) returned 0xd5c570 [0200.108] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xfd3a8f9e, dwHighDateTime=0x1d92b8e)) [0200.108] SetEvent (hEvent=0x24c) returned 1 [0200.118] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578390 [0200.118] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578390, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0200.118] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0200.118] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0200.346] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0200.443] RtlRestoreLastWin32Error () returned 0x3f1000 [0200.443] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0200.444] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0200.444] RtlRestoreLastWin32Error () returned 0x3f1000 [0200.444] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0) returned 1 [0200.444] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783c0 [0200.444] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0200.444] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596680 [0200.444] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596680, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0200.444] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596680) returned 1 [0200.445] SafeArrayGetElemsize (psa=0x5934d0) returned 0x8 [0200.445] SafeArrayPutElement (psa=0x5934d0, rgIndices=0x115d898, pv=0x598218) returned 0x0 [0200.445] SafeArrayRedim (in: psa=0x5934d0, psaboundNew=0x115d8b0 | out: psa=0x5934d0) returned 0x0 [0200.445] SafeArrayCopy (in: psa=0x5934d0, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0200.447] SetEvent (hEvent=0x24c) returned 1 [0200.449] free (_Block=0xd5c570) [0200.449] GetCurrentThread () returned 0xfffffffffffffffe [0200.449] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0200.449] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0200.450] RtlRestoreLastWin32Error () returned 0x3f1000 [0200.450] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0200.450] GetLastError () returned 0x514 [0200.450] CloseHandle (hObject=0x244) returned 1 [0200.450] malloc (_Size=0x18) returned 0xd64e90 [0200.450] SafeArrayPutElement (psa=0x592d10, rgIndices=0x115d660, pv=0x5936c8) returned 0x0 [0200.450] SafeArrayPutElement (psa=0x592d50, rgIndices=0x115d660, pv=0x5936c8) returned 0x0 [0200.450] free (_Block=0xd64e90) [0200.450] malloc (_Size=0x8000) returned 0xd95830 [0200.450] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd95830, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd95830, ResultLength=0x0) returned 0xc0000004 [0200.452] free (_Block=0xd95830) [0200.453] malloc (_Size=0x10000) returned 0xd65580 [0200.453] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65580, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65580, ResultLength=0x0) returned 0xc0000004 [0200.455] free (_Block=0xd65580) [0200.456] malloc (_Size=0x18000) returned 0xd7d420 [0200.456] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd7d420, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd7d420, ResultLength=0x0) returned 0x0 [0200.457] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0200.460] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0200.461] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.461] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.476] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0200.476] CloseHandle (hObject=0x0) returned 0 [0200.476] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0200.479] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0200.480] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.480] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.493] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0200.493] CloseHandle (hObject=0x0) returned 0 [0200.494] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0200.497] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0200.498] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.498] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.511] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0200.511] CloseHandle (hObject=0x0) returned 0 [0200.511] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0200.514] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0200.515] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.515] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.531] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0200.531] CloseHandle (hObject=0x0) returned 0 [0200.531] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0200.536] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0200.537] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.537] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.550] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0200.550] CloseHandle (hObject=0x0) returned 0 [0200.550] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0200.553] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0200.554] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.554] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.568] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0200.568] CloseHandle (hObject=0x0) returned 0 [0200.569] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0200.572] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0200.573] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.573] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.586] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0200.586] CloseHandle (hObject=0x0) returned 0 [0200.587] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0200.590] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0200.591] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.591] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.604] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0200.604] CloseHandle (hObject=0x0) returned 0 [0200.604] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0200.607] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0200.608] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.608] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.624] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0200.624] CloseHandle (hObject=0x0) returned 0 [0200.625] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0200.632] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0200.633] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.633] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.647] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0200.647] CloseHandle (hObject=0x0) returned 0 [0200.647] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0200.650] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0200.651] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.651] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.664] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0200.664] CloseHandle (hObject=0x0) returned 0 [0200.665] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0200.668] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0200.668] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.669] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.682] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0200.682] CloseHandle (hObject=0x0) returned 0 [0200.682] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0200.685] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0200.686] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.686] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.699] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0200.699] CloseHandle (hObject=0x0) returned 0 [0200.699] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0200.702] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0200.703] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.706] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.717] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0200.718] CloseHandle (hObject=0x0) returned 0 [0200.718] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0200.723] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0200.724] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.724] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.739] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0200.739] CloseHandle (hObject=0x0) returned 0 [0200.739] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0200.742] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0200.743] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.743] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.757] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0200.757] CloseHandle (hObject=0x0) returned 0 [0200.757] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0200.760] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0200.761] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.761] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.774] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0200.774] CloseHandle (hObject=0x0) returned 0 [0200.775] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0200.778] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0200.778] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.778] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.792] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0200.792] CloseHandle (hObject=0x0) returned 0 [0200.792] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0200.795] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0200.796] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.796] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.809] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0200.809] CloseHandle (hObject=0x0) returned 0 [0200.809] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0200.812] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0200.827] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.827] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.838] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0200.838] CloseHandle (hObject=0x0) returned 0 [0200.839] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0200.842] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0200.842] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.842] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.861] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0200.861] CloseHandle (hObject=0x0) returned 0 [0200.862] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0200.865] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0200.866] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.866] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.879] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0200.879] GetLastError () returned 0x0 [0200.879] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0200.879] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0200.879] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0200.879] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0200.879] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0200.880] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0200.881] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0200.881] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0200.881] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0200.881] malloc (_Size=0x18) returned 0xd64f90 [0200.881] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64f90, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64f90*, lpNumberOfBytesRead=0x0) returned 1 [0200.881] free (_Block=0xd64f90) [0200.882] CloseHandle (hObject=0x244) returned 1 [0200.882] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0200.885] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0200.886] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.886] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.900] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0200.900] GetLastError () returned 0x0 [0200.900] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0200.900] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0200.900] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0200.900] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0200.900] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0200.901] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0200.902] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0200.902] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0200.902] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0200.902] malloc (_Size=0x32) returned 0xd61070 [0200.902] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd61070, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd61070*, lpNumberOfBytesRead=0x0) returned 1 [0200.903] free (_Block=0xd61070) [0200.903] CloseHandle (hObject=0x244) returned 1 [0200.904] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0200.909] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0200.909] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.909] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.920] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0200.921] GetLastError () returned 0x0 [0200.921] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0200.921] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0200.921] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0200.921] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0200.921] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0200.922] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0200.924] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0200.925] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0200.925] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0200.925] malloc (_Size=0x64) returned 0xd60330 [0200.925] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60330, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60330*, lpNumberOfBytesRead=0x0) returned 1 [0200.926] free (_Block=0xd60330) [0200.926] CloseHandle (hObject=0x244) returned 1 [0200.926] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0200.929] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0200.930] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.930] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.944] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0200.944] CloseHandle (hObject=0x0) returned 0 [0200.945] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0200.948] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0200.949] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.949] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.964] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0200.964] GetLastError () returned 0x0 [0200.964] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0200.964] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0200.964] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0200.964] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0200.964] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0200.965] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0200.966] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0200.966] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0200.966] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0200.966] malloc (_Size=0x118) returned 0xd95830 [0200.966] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd95830, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd95830*, lpNumberOfBytesRead=0x0) returned 1 [0200.967] free (_Block=0xd95830) [0200.968] CloseHandle (hObject=0x244) returned 1 [0200.968] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0200.973] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0200.974] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.974] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0200.987] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0200.987] GetLastError () returned 0x0 [0200.987] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0200.987] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0200.987] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0200.987] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0200.987] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0200.988] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0200.989] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0200.989] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0200.989] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0200.989] malloc (_Size=0x6c) returned 0xd65010 [0200.989] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd65010, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd65010*, lpNumberOfBytesRead=0x0) returned 1 [0200.990] free (_Block=0xd65010) [0200.990] CloseHandle (hObject=0x244) returned 1 [0200.991] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0200.994] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0200.994] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0200.994] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.007] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0201.007] GetLastError () returned 0x0 [0201.007] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0201.007] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0201.007] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0201.007] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0201.007] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0201.008] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0201.009] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0201.009] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0201.009] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0201.009] malloc (_Size=0x11a) returned 0xd95830 [0201.009] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd95830, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd95830*, lpNumberOfBytesRead=0x0) returned 1 [0201.010] free (_Block=0xd95830) [0201.010] CloseHandle (hObject=0x244) returned 1 [0201.011] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0201.014] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0201.015] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.015] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.027] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0201.027] GetLastError () returned 0x0 [0201.027] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0201.027] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0201.027] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0201.027] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0201.027] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0201.028] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0201.029] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0201.029] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0201.029] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0201.029] malloc (_Size=0x48) returned 0xd5c700 [0201.029] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c700, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c700*, lpNumberOfBytesRead=0x0) returned 1 [0201.030] free (_Block=0xd5c700) [0201.030] CloseHandle (hObject=0x244) returned 1 [0201.031] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0201.039] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0201.040] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.040] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.055] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0201.055] GetLastError () returned 0x0 [0201.055] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0201.055] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0201.055] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0201.055] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0201.055] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0201.056] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0201.057] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0201.057] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0201.057] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0201.057] malloc (_Size=0xda) returned 0xd62120 [0201.057] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd62120, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0201.058] free (_Block=0xd62120) [0201.058] CloseHandle (hObject=0x244) returned 1 [0201.102] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0201.105] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0201.106] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.106] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.117] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0201.117] GetLastError () returned 0x0 [0201.117] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0201.118] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0201.118] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0201.118] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0201.118] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0201.118] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0201.119] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0201.119] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0201.119] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0201.120] malloc (_Size=0x6e) returned 0xd62120 [0201.120] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd62120, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0201.121] free (_Block=0xd62120) [0201.121] CloseHandle (hObject=0x244) returned 1 [0201.121] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0201.124] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0201.126] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.126] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.137] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0201.137] GetLastError () returned 0x0 [0201.137] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0201.137] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0201.137] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0201.137] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0201.137] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0201.138] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0201.139] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0201.139] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0201.139] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0201.139] malloc (_Size=0x64) returned 0xd601e0 [0201.139] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd601e0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd601e0*, lpNumberOfBytesRead=0x0) returned 1 [0201.140] free (_Block=0xd601e0) [0201.140] CloseHandle (hObject=0x244) returned 1 [0201.163] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0201.166] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0201.167] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.167] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.180] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0201.180] CloseHandle (hObject=0x0) returned 0 [0201.183] free (_Block=0xd7d420) [0201.183] malloc (_Size=0x48) returned 0xd5c570 [0201.183] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xfddf40c2, dwHighDateTime=0x1d92b8e)) [0201.183] SetEvent (hEvent=0x24c) returned 1 [0201.193] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578430 [0201.193] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578430, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0201.193] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578430) returned 1 [0201.193] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0201.370] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0201.531] RtlRestoreLastWin32Error () returned 0x3f1000 [0201.531] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0201.531] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0201.531] RtlRestoreLastWin32Error () returned 0x3f1000 [0201.531] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0) returned 1 [0201.531] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783c0 [0201.531] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0201.531] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x5962e0 [0201.531] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5962e0, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0201.531] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5962e0) returned 1 [0201.532] SafeArrayGetElemsize (psa=0x5930d0) returned 0x8 [0201.532] SafeArrayPutElement (psa=0x5930d0, rgIndices=0x115d898, pv=0x597d98) returned 0x0 [0201.532] SafeArrayRedim (in: psa=0x5930d0, psaboundNew=0x115d8b0 | out: psa=0x5930d0) returned 0x0 [0201.532] SafeArrayCopy (in: psa=0x5930d0, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0201.533] SetEvent (hEvent=0x24c) returned 1 [0201.534] free (_Block=0xd5c570) [0201.534] GetCurrentThread () returned 0xfffffffffffffffe [0201.534] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0201.534] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0201.539] RtlRestoreLastWin32Error () returned 0x3f1000 [0201.539] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0201.539] GetLastError () returned 0x514 [0201.539] CloseHandle (hObject=0x244) returned 1 [0201.539] malloc (_Size=0x18) returned 0xd64cd0 [0201.539] SafeArrayPutElement (psa=0x593750, rgIndices=0x115d660, pv=0x593848) returned 0x0 [0201.539] SafeArrayPutElement (psa=0x592dd0, rgIndices=0x115d660, pv=0x593848) returned 0x0 [0201.539] free (_Block=0xd64cd0) [0201.539] malloc (_Size=0x8000) returned 0xd95830 [0201.539] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd95830, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd95830, ResultLength=0x0) returned 0xc0000004 [0201.541] free (_Block=0xd95830) [0201.542] malloc (_Size=0x10000) returned 0xd65580 [0201.542] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65580, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65580, ResultLength=0x0) returned 0xc0000004 [0201.544] free (_Block=0xd65580) [0201.545] malloc (_Size=0x18000) returned 0xd7d420 [0201.545] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd7d420, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd7d420, ResultLength=0x0) returned 0x0 [0201.546] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0201.549] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0201.550] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.550] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.562] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0201.562] CloseHandle (hObject=0x0) returned 0 [0201.562] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0201.591] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0201.592] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.592] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.604] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0201.604] CloseHandle (hObject=0x0) returned 0 [0201.604] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0201.607] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0201.608] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.608] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.621] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0201.621] CloseHandle (hObject=0x0) returned 0 [0201.622] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0201.625] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0201.625] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.625] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.638] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0201.638] CloseHandle (hObject=0x0) returned 0 [0201.638] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0201.641] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0201.642] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.642] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.653] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0201.653] CloseHandle (hObject=0x0) returned 0 [0201.654] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0201.662] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0201.665] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.665] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.680] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0201.680] CloseHandle (hObject=0x0) returned 0 [0201.680] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0201.683] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0201.684] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.684] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.697] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0201.697] CloseHandle (hObject=0x0) returned 0 [0201.698] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0201.700] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0201.701] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.701] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.712] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0201.712] CloseHandle (hObject=0x0) returned 0 [0201.713] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0201.716] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0201.717] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.717] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.741] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0201.741] CloseHandle (hObject=0x0) returned 0 [0201.741] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0201.744] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0201.745] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.745] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.756] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0201.756] CloseHandle (hObject=0x0) returned 0 [0201.757] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0201.760] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0201.761] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.761] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.773] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0201.773] CloseHandle (hObject=0x0) returned 0 [0201.773] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0201.776] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0201.777] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.777] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.789] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0201.789] CloseHandle (hObject=0x0) returned 0 [0201.789] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0201.792] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0201.793] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.793] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.805] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0201.805] CloseHandle (hObject=0x0) returned 0 [0201.806] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0201.809] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0201.810] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.810] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.824] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0201.824] CloseHandle (hObject=0x0) returned 0 [0201.824] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0201.827] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0201.828] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.828] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.841] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0201.841] CloseHandle (hObject=0x0) returned 0 [0201.841] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0201.845] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0201.846] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.846] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.857] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0201.858] CloseHandle (hObject=0x0) returned 0 [0201.858] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0201.861] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0201.862] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.862] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.873] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0201.873] CloseHandle (hObject=0x0) returned 0 [0201.873] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0201.876] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0201.877] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.877] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.888] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0201.889] CloseHandle (hObject=0x0) returned 0 [0201.889] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0201.893] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0201.893] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.893] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.904] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0201.904] CloseHandle (hObject=0x0) returned 0 [0201.905] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0201.908] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0201.909] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.909] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.920] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0201.920] CloseHandle (hObject=0x0) returned 0 [0201.920] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0201.923] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0201.924] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.924] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.935] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0201.935] CloseHandle (hObject=0x0) returned 0 [0201.935] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0201.942] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0201.942] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.942] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.954] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0201.954] GetLastError () returned 0x0 [0201.954] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0201.954] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0201.954] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0201.954] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0201.954] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0201.955] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0201.956] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0201.956] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0201.956] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0201.956] malloc (_Size=0x18) returned 0xd64df0 [0201.956] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64df0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64df0*, lpNumberOfBytesRead=0x0) returned 1 [0201.956] free (_Block=0xd64df0) [0201.957] CloseHandle (hObject=0x244) returned 1 [0201.957] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0201.960] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0201.961] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.961] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.972] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0201.972] GetLastError () returned 0x0 [0201.972] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0201.972] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0201.972] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0201.972] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0201.972] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0201.973] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0201.974] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0201.974] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0201.974] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0201.974] malloc (_Size=0x32) returned 0xd60ff0 [0201.974] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd60ff0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60ff0*, lpNumberOfBytesRead=0x0) returned 1 [0201.975] free (_Block=0xd60ff0) [0201.975] CloseHandle (hObject=0x244) returned 1 [0201.976] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0201.979] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0201.980] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0201.980] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0201.996] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0201.996] GetLastError () returned 0x0 [0201.996] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0201.996] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0201.996] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0201.996] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0201.996] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0201.997] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0201.998] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0201.998] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0201.998] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0201.998] malloc (_Size=0x64) returned 0xd60100 [0201.998] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60100, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60100*, lpNumberOfBytesRead=0x0) returned 1 [0201.999] free (_Block=0xd60100) [0201.999] CloseHandle (hObject=0x244) returned 1 [0202.000] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0202.003] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0202.004] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.004] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.015] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0202.015] CloseHandle (hObject=0x0) returned 0 [0202.016] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0202.019] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0202.020] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.020] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.031] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0202.031] GetLastError () returned 0x0 [0202.031] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0202.031] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0202.031] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0202.031] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0202.031] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0202.034] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0202.035] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0202.035] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0202.035] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0202.036] malloc (_Size=0x118) returned 0xd95830 [0202.036] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd95830, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd95830*, lpNumberOfBytesRead=0x0) returned 1 [0202.037] free (_Block=0xd95830) [0202.038] CloseHandle (hObject=0x244) returned 1 [0202.038] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0202.041] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0202.042] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.042] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.055] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0202.055] GetLastError () returned 0x0 [0202.055] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0202.055] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0202.055] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0202.055] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0202.056] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0202.056] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0202.057] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0202.057] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0202.057] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0202.057] malloc (_Size=0x6c) returned 0xd65010 [0202.057] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd65010, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd65010*, lpNumberOfBytesRead=0x0) returned 1 [0202.058] free (_Block=0xd65010) [0202.058] CloseHandle (hObject=0x244) returned 1 [0202.058] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0202.062] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0202.062] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.062] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.074] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0202.074] GetLastError () returned 0x0 [0202.074] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0202.074] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0202.074] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0202.074] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0202.074] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0202.075] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0202.076] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0202.076] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0202.076] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0202.076] malloc (_Size=0x11a) returned 0xd95830 [0202.076] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd95830, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd95830*, lpNumberOfBytesRead=0x0) returned 1 [0202.076] free (_Block=0xd95830) [0202.077] CloseHandle (hObject=0x244) returned 1 [0202.077] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0202.080] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0202.081] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.081] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.094] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0202.094] GetLastError () returned 0x0 [0202.094] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0202.094] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0202.094] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0202.095] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0202.095] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0202.095] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0202.096] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0202.096] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0202.096] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0202.096] malloc (_Size=0x48) returned 0xd5c570 [0202.096] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0202.097] free (_Block=0xd5c570) [0202.098] CloseHandle (hObject=0x244) returned 1 [0202.098] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0202.101] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0202.102] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.102] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.113] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0202.113] GetLastError () returned 0x0 [0202.113] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0202.113] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0202.113] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0202.113] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0202.114] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0202.114] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0202.115] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0202.115] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0202.115] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0202.115] malloc (_Size=0xda) returned 0xd62120 [0202.115] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd62120, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0202.116] free (_Block=0xd62120) [0202.117] CloseHandle (hObject=0x244) returned 1 [0202.179] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0202.182] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0202.183] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.183] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.194] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0202.194] GetLastError () returned 0x0 [0202.194] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0202.194] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0202.194] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0202.194] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0202.195] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0202.195] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0202.196] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0202.196] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0202.196] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0202.196] malloc (_Size=0x6e) returned 0xd62120 [0202.196] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd62120, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0202.197] free (_Block=0xd62120) [0202.198] CloseHandle (hObject=0x244) returned 1 [0202.198] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0202.201] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0202.202] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.202] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.215] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0202.215] GetLastError () returned 0x0 [0202.215] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0202.215] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0202.215] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0202.215] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0202.215] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0202.216] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0202.217] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0202.217] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0202.217] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0202.217] malloc (_Size=0x64) returned 0xd60100 [0202.217] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd60100, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60100*, lpNumberOfBytesRead=0x0) returned 1 [0202.218] free (_Block=0xd60100) [0202.218] CloseHandle (hObject=0x244) returned 1 [0202.219] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0202.222] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0202.246] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.246] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.257] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0202.258] CloseHandle (hObject=0x0) returned 0 [0202.260] free (_Block=0xd7d420) [0202.260] malloc (_Size=0x48) returned 0xd5c570 [0202.260] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xfe839650, dwHighDateTime=0x1d92b8e)) [0202.260] SetEvent (hEvent=0x24c) returned 1 [0202.264] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578390 [0202.264] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578390, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0202.264] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0202.264] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0202.474] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0202.582] RtlRestoreLastWin32Error () returned 0x3f1000 [0202.582] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0202.582] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783d0 [0202.582] RtlRestoreLastWin32Error () returned 0x3f1000 [0202.582] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x5783d0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x5783d0, pcchLanguagesBuffer=0x115dff0) returned 1 [0202.582] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578410 [0202.582] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783d0) returned 1 [0202.582] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x5962e0 [0202.582] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5962e0, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0202.582] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5962e0) returned 1 [0202.583] SafeArrayGetElemsize (psa=0x593310) returned 0x8 [0202.583] SafeArrayPutElement (psa=0x593310, rgIndices=0x115d898, pv=0x5982a8) returned 0x0 [0202.583] SafeArrayRedim (in: psa=0x593310, psaboundNew=0x115d8b0 | out: psa=0x593310) returned 0x0 [0202.583] SafeArrayCopy (in: psa=0x593310, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0202.584] SetEvent (hEvent=0x24c) returned 1 [0202.585] free (_Block=0xd5c570) [0202.585] GetCurrentThread () returned 0xfffffffffffffffe [0202.585] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0202.585] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0202.588] RtlRestoreLastWin32Error () returned 0x3f1000 [0202.588] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0202.588] GetLastError () returned 0x514 [0202.588] CloseHandle (hObject=0x244) returned 1 [0202.588] malloc (_Size=0x18) returned 0xd64930 [0202.588] SafeArrayPutElement (psa=0x5935d0, rgIndices=0x115d660, pv=0x593948) returned 0x0 [0202.588] SafeArrayPutElement (psa=0x592ed0, rgIndices=0x115d660, pv=0x593948) returned 0x0 [0202.588] free (_Block=0xd64930) [0202.588] malloc (_Size=0x8000) returned 0xd95830 [0202.588] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd95830, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd95830, ResultLength=0x0) returned 0xc0000004 [0202.591] free (_Block=0xd95830) [0202.592] malloc (_Size=0x10000) returned 0xd65580 [0202.592] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65580, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65580, ResultLength=0x0) returned 0xc0000004 [0202.594] free (_Block=0xd65580) [0202.595] malloc (_Size=0x18000) returned 0xd7d420 [0202.595] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd7d420, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd7d420, ResultLength=0x0) returned 0x0 [0202.596] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0202.599] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0202.600] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.600] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.618] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0202.618] CloseHandle (hObject=0x0) returned 0 [0202.619] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0202.622] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0202.622] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.622] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.636] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0202.636] CloseHandle (hObject=0x0) returned 0 [0202.636] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0202.639] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0202.640] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.640] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.680] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0202.680] CloseHandle (hObject=0x0) returned 0 [0202.680] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0202.683] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0202.684] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.684] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.698] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0202.698] CloseHandle (hObject=0x0) returned 0 [0202.698] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0202.701] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0202.702] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.702] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.716] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0202.716] CloseHandle (hObject=0x0) returned 0 [0202.716] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0202.723] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0202.724] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.724] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.742] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0202.742] CloseHandle (hObject=0x0) returned 0 [0202.742] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0202.745] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0202.746] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.746] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.760] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0202.760] CloseHandle (hObject=0x0) returned 0 [0202.760] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0202.763] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0202.764] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.764] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.778] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0202.778] CloseHandle (hObject=0x0) returned 0 [0202.778] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0202.781] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0202.784] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.784] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.796] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0202.796] CloseHandle (hObject=0x0) returned 0 [0202.796] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0202.801] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0202.802] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.802] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.815] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0202.815] CloseHandle (hObject=0x0) returned 0 [0202.815] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0202.818] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0202.819] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.819] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.845] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0202.845] CloseHandle (hObject=0x0) returned 0 [0202.845] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0202.848] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0202.849] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.849] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.862] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0202.862] CloseHandle (hObject=0x0) returned 0 [0202.862] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0202.865] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0202.866] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.866] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.879] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0202.879] CloseHandle (hObject=0x0) returned 0 [0202.879] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0202.882] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0202.883] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.883] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.897] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0202.897] CloseHandle (hObject=0x0) returned 0 [0202.897] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0202.900] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0202.901] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.901] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.914] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0202.914] CloseHandle (hObject=0x0) returned 0 [0202.914] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0202.917] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0202.918] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.918] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.931] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0202.931] CloseHandle (hObject=0x0) returned 0 [0202.931] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0202.934] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0202.935] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.935] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.949] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0202.950] CloseHandle (hObject=0x0) returned 0 [0202.950] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0202.953] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0202.954] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.954] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.966] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0202.966] CloseHandle (hObject=0x0) returned 0 [0202.967] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0202.971] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0202.972] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.972] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0202.983] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0202.983] CloseHandle (hObject=0x0) returned 0 [0202.984] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0202.990] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0202.991] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0202.991] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.004] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0203.004] CloseHandle (hObject=0x0) returned 0 [0203.004] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0203.007] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0203.008] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.008] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.020] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0203.020] CloseHandle (hObject=0x0) returned 0 [0203.020] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0203.023] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0203.024] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.024] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.038] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0203.038] GetLastError () returned 0x0 [0203.038] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0203.038] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0203.038] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0203.039] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0203.039] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0203.039] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0203.040] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0203.040] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0203.040] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0203.040] malloc (_Size=0x18) returned 0xd64db0 [0203.040] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64db0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64db0*, lpNumberOfBytesRead=0x0) returned 1 [0203.041] free (_Block=0xd64db0) [0203.041] CloseHandle (hObject=0x244) returned 1 [0203.041] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0203.044] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0203.045] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.045] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.060] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0203.060] GetLastError () returned 0x0 [0203.060] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0203.060] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0203.060] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0203.060] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0203.061] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0203.061] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0203.062] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0203.062] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0203.062] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0203.062] malloc (_Size=0x32) returned 0xd61230 [0203.062] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd61230, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd61230*, lpNumberOfBytesRead=0x0) returned 1 [0203.065] free (_Block=0xd61230) [0203.065] CloseHandle (hObject=0x244) returned 1 [0203.066] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0203.069] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0203.070] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.070] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.082] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0203.082] GetLastError () returned 0x0 [0203.082] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0203.082] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0203.083] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0203.083] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0203.083] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0203.083] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0203.084] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0203.084] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0203.084] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0203.084] malloc (_Size=0x64) returned 0xd601e0 [0203.084] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd601e0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd601e0*, lpNumberOfBytesRead=0x0) returned 1 [0203.085] free (_Block=0xd601e0) [0203.086] CloseHandle (hObject=0x244) returned 1 [0203.086] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0203.089] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0203.090] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.090] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.103] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0203.103] CloseHandle (hObject=0x0) returned 0 [0203.103] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0203.106] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0203.107] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.107] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.119] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0203.119] GetLastError () returned 0x0 [0203.120] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0203.120] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0203.120] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0203.120] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0203.120] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0203.121] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0203.121] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0203.121] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0203.122] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0203.122] malloc (_Size=0x118) returned 0xd95830 [0203.122] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd95830, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd95830*, lpNumberOfBytesRead=0x0) returned 1 [0203.123] free (_Block=0xd95830) [0203.123] CloseHandle (hObject=0x244) returned 1 [0203.124] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0203.130] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0203.130] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.130] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.143] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0203.143] GetLastError () returned 0x0 [0203.143] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0203.143] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0203.143] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0203.143] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0203.143] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0203.144] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0203.145] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0203.145] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0203.145] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0203.145] malloc (_Size=0x6c) returned 0xd65010 [0203.145] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd65010, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd65010*, lpNumberOfBytesRead=0x0) returned 1 [0203.146] free (_Block=0xd65010) [0203.146] CloseHandle (hObject=0x244) returned 1 [0203.147] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0203.150] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0203.150] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.150] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.165] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0203.165] GetLastError () returned 0x0 [0203.165] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0203.165] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0203.165] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0203.166] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0203.166] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0203.166] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0203.167] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0203.167] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0203.167] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0203.167] malloc (_Size=0x11a) returned 0xd95830 [0203.167] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd95830, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd95830*, lpNumberOfBytesRead=0x0) returned 1 [0203.168] free (_Block=0xd95830) [0203.169] CloseHandle (hObject=0x244) returned 1 [0203.169] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0203.172] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0203.175] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.175] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.186] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0203.186] GetLastError () returned 0x0 [0203.186] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0203.186] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0203.186] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0203.186] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0203.186] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0203.187] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0203.187] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0203.189] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0203.189] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0203.190] malloc (_Size=0x48) returned 0xd5c570 [0203.190] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0203.190] free (_Block=0xd5c570) [0203.191] CloseHandle (hObject=0x244) returned 1 [0203.191] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0203.194] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0203.195] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.195] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.207] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0203.208] GetLastError () returned 0x0 [0203.208] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0203.208] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0203.208] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0203.208] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0203.208] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0203.209] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0203.209] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0203.209] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0203.210] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0203.210] malloc (_Size=0xda) returned 0xd62120 [0203.210] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd62120, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0203.210] free (_Block=0xd62120) [0203.211] CloseHandle (hObject=0x244) returned 1 [0203.270] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0203.284] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0203.285] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.285] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.296] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0203.296] GetLastError () returned 0x0 [0203.296] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0203.296] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0203.296] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0203.296] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0203.297] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0203.299] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0203.300] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0203.300] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0203.300] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0203.300] malloc (_Size=0x6e) returned 0xd62120 [0203.300] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd62120, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd62120*, lpNumberOfBytesRead=0x0) returned 1 [0203.301] free (_Block=0xd62120) [0203.301] CloseHandle (hObject=0x244) returned 1 [0203.302] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0203.304] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0203.305] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.305] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.337] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0203.337] GetLastError () returned 0x0 [0203.337] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0203.337] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0203.337] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0203.337] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0203.337] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0203.338] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0203.339] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0203.339] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0203.339] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0203.339] malloc (_Size=0x64) returned 0xd601e0 [0203.339] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd601e0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd601e0*, lpNumberOfBytesRead=0x0) returned 1 [0203.340] free (_Block=0xd601e0) [0203.340] CloseHandle (hObject=0x244) returned 1 [0203.341] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0203.344] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0203.344] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.344] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.357] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0203.357] CloseHandle (hObject=0x0) returned 0 [0203.359] free (_Block=0xd7d420) [0203.359] malloc (_Size=0x48) returned 0xd5c570 [0203.359] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xff2a77d1, dwHighDateTime=0x1d92b8e)) [0203.362] SetEvent (hEvent=0x24c) returned 1 [0203.369] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x5783e0 [0203.369] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5783e0, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0203.369] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783e0) returned 1 [0203.369] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578410) returned 1 [0203.559] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0203.644] RtlRestoreLastWin32Error () returned 0x3f1000 [0203.644] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0203.644] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578470 [0203.644] RtlRestoreLastWin32Error () returned 0x3f1000 [0203.644] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578470, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578470, pcchLanguagesBuffer=0x115dff0) returned 1 [0203.644] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0203.644] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578470) returned 1 [0203.644] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596940 [0203.644] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596940, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0203.644] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596940) returned 1 [0203.645] SafeArrayGetElemsize (psa=0x593110) returned 0x8 [0203.645] SafeArrayPutElement (psa=0x593110, rgIndices=0x115d898, pv=0x598158) returned 0x0 [0203.645] SafeArrayRedim (in: psa=0x593110, psaboundNew=0x115d8b0 | out: psa=0x593110) returned 0x0 [0203.646] SafeArrayCopy (in: psa=0x593110, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0203.646] malloc (_Size=0xb0) returned 0xd64670 [0203.646] LoadLibraryExW (lpLibFileName="NTDLL.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5f840000 [0203.646] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="RtlInitUnicodeString") returned 0x7ffa5f85ced0 [0203.647] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="RtlFreeUnicodeString") returned 0x7ffa5f85c680 [0203.647] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtSetSystemEnvironmentValue") returned 0x7ffa5f8e7f10 [0203.647] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQuerySystemEnvironmentValue") returned 0x7ffa5f8e7630 [0203.647] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtCreateFile") returned 0x7ffa5f8e57e0 [0203.647] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQuerySystemInformation") returned 0x7ffa5f8e5400 [0203.647] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQueryDirectoryObject") returned 0x7ffa5f8e72f0 [0203.647] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQueryObject") returned 0x7ffa5f8e4f40 [0203.647] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtOpenDirectoryObject") returned 0x7ffa5f8e5840 [0203.648] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQueryInformationProcess") returned 0x7ffa5f8e5060 [0203.648] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQueryInformationToken") returned 0x7ffa5f8e5160 [0203.648] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtOpenFile") returned 0x7ffa5f8e53a0 [0203.648] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtClose") returned 0x7ffa5f8e4f20 [0203.648] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtFsControlFile") returned 0x7ffa5f8e5460 [0203.648] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQueryVolumeInformationFile") returned 0x7ffa5f8e5660 [0203.648] malloc (_Size=0x18) returned 0xd643f0 [0203.648] GetCurrentThread () returned 0xfffffffffffffffe [0203.648] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0203.648] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0203.649] RtlRestoreLastWin32Error () returned 0x3f1000 [0203.649] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0203.649] GetLastError () returned 0x514 [0203.649] CloseHandle (hObject=0x244) returned 1 [0203.649] malloc (_Size=0x18) returned 0xd645f0 [0203.649] SafeArrayPutElement (psa=0x592dd0, rgIndices=0x115d660, pv=0x593808) returned 0x0 [0203.649] SafeArrayPutElement (psa=0x5931d0, rgIndices=0x115d660, pv=0x593808) returned 0x0 [0203.649] free (_Block=0xd645f0) [0203.650] malloc (_Size=0x8000) returned 0xd95830 [0203.650] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd95830, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd95830, ResultLength=0x0) returned 0xc0000004 [0203.651] free (_Block=0xd95830) [0203.652] malloc (_Size=0x10000) returned 0xd65580 [0203.653] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65580, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65580, ResultLength=0x0) returned 0xc0000004 [0203.655] free (_Block=0xd65580) [0203.655] malloc (_Size=0x18000) returned 0xd7d420 [0203.656] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd7d420, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd7d420, ResultLength=0x0) returned 0x0 [0203.657] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0203.662] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0203.663] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.663] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.678] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0203.678] CloseHandle (hObject=0x0) returned 0 [0203.678] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0203.681] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0203.682] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.682] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.695] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0203.695] CloseHandle (hObject=0x0) returned 0 [0203.695] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0203.698] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0203.699] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.699] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.714] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0203.714] CloseHandle (hObject=0x0) returned 0 [0203.714] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0203.717] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0203.718] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.718] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.731] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0203.732] CloseHandle (hObject=0x0) returned 0 [0203.732] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0203.735] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0203.737] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.737] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.748] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0203.748] CloseHandle (hObject=0x0) returned 0 [0203.749] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0203.754] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0203.755] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.755] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.768] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0203.768] CloseHandle (hObject=0x0) returned 0 [0203.769] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0203.772] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0203.772] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.773] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.786] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0203.786] CloseHandle (hObject=0x0) returned 0 [0203.787] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0203.790] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0203.791] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.791] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.804] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0203.804] CloseHandle (hObject=0x0) returned 0 [0203.804] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0203.807] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0203.808] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.808] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.826] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0203.826] CloseHandle (hObject=0x0) returned 0 [0203.827] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0203.834] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0203.835] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.835] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.849] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0203.849] CloseHandle (hObject=0x0) returned 0 [0203.849] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0203.852] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0203.853] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.853] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.866] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0203.866] CloseHandle (hObject=0x0) returned 0 [0203.866] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0203.870] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0203.870] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.870] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.884] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0203.884] CloseHandle (hObject=0x0) returned 0 [0203.884] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0203.887] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0203.888] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.888] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.901] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0203.901] CloseHandle (hObject=0x0) returned 0 [0203.901] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0203.904] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0203.905] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.905] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.919] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0203.920] CloseHandle (hObject=0x0) returned 0 [0203.920] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0203.927] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0203.928] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.928] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.941] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0203.941] CloseHandle (hObject=0x0) returned 0 [0203.941] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0203.944] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0203.945] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.945] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.960] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0203.960] CloseHandle (hObject=0x0) returned 0 [0203.960] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0203.963] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0203.964] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.964] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.977] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0203.977] CloseHandle (hObject=0x0) returned 0 [0203.977] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0203.980] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0203.981] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.981] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0203.994] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0203.994] CloseHandle (hObject=0x0) returned 0 [0203.994] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0203.998] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0203.998] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0203.998] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.012] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0204.012] CloseHandle (hObject=0x0) returned 0 [0204.012] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0204.016] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0204.018] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.018] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.030] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0204.030] CloseHandle (hObject=0x0) returned 0 [0204.030] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0204.037] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0204.038] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.038] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.052] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0204.052] CloseHandle (hObject=0x0) returned 0 [0204.053] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0204.056] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0204.057] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.057] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.070] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0204.070] GetLastError () returned 0x0 [0204.070] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0204.070] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0204.070] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0204.070] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0204.071] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0204.072] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0204.072] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0204.072] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0204.073] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0204.073] malloc (_Size=0x18) returned 0xd64570 [0204.073] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64570, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64570*, lpNumberOfBytesRead=0x0) returned 1 [0204.073] free (_Block=0xd64570) [0204.073] CloseHandle (hObject=0x244) returned 1 [0204.074] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0204.077] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0204.078] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.078] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.091] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0204.091] GetLastError () returned 0x0 [0204.091] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0204.091] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0204.091] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0204.091] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0204.091] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0204.092] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0204.093] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0204.093] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0204.093] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0204.093] malloc (_Size=0x32) returned 0xd60a30 [0204.093] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd60a30, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60a30*, lpNumberOfBytesRead=0x0) returned 1 [0204.094] free (_Block=0xd60a30) [0204.095] CloseHandle (hObject=0x244) returned 1 [0204.095] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0204.100] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0204.100] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.100] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.113] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0204.113] GetLastError () returned 0x0 [0204.114] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0204.114] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0204.114] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0204.114] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0204.114] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0204.114] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0204.115] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0204.115] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0204.115] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0204.116] malloc (_Size=0x64) returned 0xd60090 [0204.116] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60090, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60090*, lpNumberOfBytesRead=0x0) returned 1 [0204.116] free (_Block=0xd60090) [0204.117] CloseHandle (hObject=0x244) returned 1 [0204.117] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0204.120] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0204.121] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.121] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.134] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0204.134] CloseHandle (hObject=0x0) returned 0 [0204.135] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0204.138] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0204.138] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.138] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.154] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0204.155] GetLastError () returned 0x0 [0204.155] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0204.155] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0204.155] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0204.155] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0204.155] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0204.156] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0204.159] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0204.159] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0204.159] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0204.160] malloc (_Size=0x118) returned 0xd647f0 [0204.160] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd647f0, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647f0*, lpNumberOfBytesRead=0x0) returned 1 [0204.160] free (_Block=0xd647f0) [0204.161] CloseHandle (hObject=0x244) returned 1 [0204.161] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0204.164] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0204.165] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.165] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.180] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0204.180] GetLastError () returned 0x0 [0204.180] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0204.180] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0204.180] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0204.180] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0204.180] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0204.181] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0204.182] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0204.182] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0204.182] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0204.182] malloc (_Size=0x6c) returned 0xd621c0 [0204.182] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd621c0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd621c0*, lpNumberOfBytesRead=0x0) returned 1 [0204.183] free (_Block=0xd621c0) [0204.183] CloseHandle (hObject=0x244) returned 1 [0204.184] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0204.187] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0204.191] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.191] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.202] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0204.202] GetLastError () returned 0x0 [0204.202] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0204.202] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0204.202] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0204.202] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0204.202] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0204.203] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0204.206] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0204.206] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0204.206] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0204.207] malloc (_Size=0x11a) returned 0xd647e0 [0204.207] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd647e0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647e0*, lpNumberOfBytesRead=0x0) returned 1 [0204.207] free (_Block=0xd647e0) [0204.208] CloseHandle (hObject=0x244) returned 1 [0204.208] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0204.211] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0204.212] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.212] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.225] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0204.225] GetLastError () returned 0x0 [0204.225] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0204.225] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0204.226] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0204.226] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0204.226] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0204.226] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0204.227] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0204.227] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0204.227] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0204.228] malloc (_Size=0x48) returned 0xd5c7f0 [0204.228] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c7f0, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c7f0*, lpNumberOfBytesRead=0x0) returned 1 [0204.228] free (_Block=0xd5c7f0) [0204.229] CloseHandle (hObject=0x244) returned 1 [0204.229] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0204.232] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0204.233] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.233] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.247] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0204.247] GetLastError () returned 0x0 [0204.247] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0204.247] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0204.247] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0204.247] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0204.247] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0204.248] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0204.249] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0204.249] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0204.249] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0204.249] malloc (_Size=0xda) returned 0xd64730 [0204.249] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd64730, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64730*, lpNumberOfBytesRead=0x0) returned 1 [0204.250] free (_Block=0xd64730) [0204.253] CloseHandle (hObject=0x244) returned 1 [0204.295] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0204.298] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0204.299] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.299] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.310] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0204.310] GetLastError () returned 0x0 [0204.311] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0204.311] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0204.311] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0204.311] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0204.311] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0204.312] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0204.312] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0204.312] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0204.313] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0204.313] malloc (_Size=0x6e) returned 0xd64730 [0204.313] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd64730, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64730*, lpNumberOfBytesRead=0x0) returned 1 [0204.314] free (_Block=0xd64730) [0204.315] CloseHandle (hObject=0x244) returned 1 [0204.315] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0204.318] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0204.319] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.319] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.349] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0204.349] GetLastError () returned 0x0 [0204.349] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0204.349] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0204.349] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0204.349] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0204.350] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0204.350] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0204.351] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0204.351] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0204.351] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0204.351] malloc (_Size=0x64) returned 0xd60250 [0204.351] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd60250, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60250*, lpNumberOfBytesRead=0x0) returned 1 [0204.352] free (_Block=0xd60250) [0204.353] CloseHandle (hObject=0x244) returned 1 [0204.353] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0204.356] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0204.357] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.357] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.371] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0204.371] CloseHandle (hObject=0x0) returned 0 [0204.373] free (_Block=0xd7d420) [0204.373] malloc (_Size=0x48) returned 0xd5c570 [0204.373] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xffc57251, dwHighDateTime=0x1d92b8e)) [0204.373] SetEvent (hEvent=0x24c) returned 1 [0204.379] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x5783c0 [0204.379] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5783c0, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0204.379] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0204.380] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0204.558] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0204.648] RtlRestoreLastWin32Error () returned 0x3f1000 [0204.648] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0204.648] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0204.648] RtlRestoreLastWin32Error () returned 0x3f1000 [0204.648] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0) returned 1 [0204.648] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783c0 [0204.648] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0204.648] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596880 [0204.648] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596880, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0204.648] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596880) returned 1 [0204.649] SafeArrayGetElemsize (psa=0x592e90) returned 0x8 [0204.649] SafeArrayPutElement (psa=0x592e90, rgIndices=0x115d898, pv=0x597d98) returned 0x0 [0204.649] SafeArrayRedim (in: psa=0x592e90, psaboundNew=0x115d8b0 | out: psa=0x592e90) returned 0x0 [0204.649] SafeArrayCopy (in: psa=0x592e90, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0204.650] SetEvent (hEvent=0x24c) returned 1 [0204.651] free (_Block=0xd5c570) [0204.651] GetCurrentThread () returned 0xfffffffffffffffe [0204.651] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0204.651] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0204.655] RtlRestoreLastWin32Error () returned 0x3f1000 [0204.655] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0204.655] GetLastError () returned 0x514 [0204.655] CloseHandle (hObject=0x244) returned 1 [0204.655] malloc (_Size=0x18) returned 0xd64430 [0204.655] SafeArrayPutElement (psa=0x593950, rgIndices=0x115d660, pv=0x593048) returned 0x0 [0204.656] SafeArrayPutElement (psa=0x593510, rgIndices=0x115d660, pv=0x593048) returned 0x0 [0204.656] free (_Block=0xd64430) [0204.656] malloc (_Size=0x8000) returned 0xd96840 [0204.656] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd96840, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd96840, ResultLength=0x0) returned 0xc0000004 [0204.658] free (_Block=0xd96840) [0204.658] malloc (_Size=0x10000) returned 0xd65580 [0204.659] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65580, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65580, ResultLength=0x0) returned 0xc0000004 [0204.661] free (_Block=0xd65580) [0204.662] malloc (_Size=0x18000) returned 0xd7d420 [0204.662] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd7d420, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd7d420, ResultLength=0x0) returned 0x0 [0204.663] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0204.667] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0204.668] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.668] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.682] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0204.683] CloseHandle (hObject=0x0) returned 0 [0204.683] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0204.686] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0204.687] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.687] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.700] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0204.700] CloseHandle (hObject=0x0) returned 0 [0204.700] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0204.703] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0204.704] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.704] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.715] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0204.715] CloseHandle (hObject=0x0) returned 0 [0204.715] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0204.718] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0204.728] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.728] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.739] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0204.739] CloseHandle (hObject=0x0) returned 0 [0204.739] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0204.742] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0204.743] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.743] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.754] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0204.754] CloseHandle (hObject=0x0) returned 0 [0204.755] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0204.758] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0204.758] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.759] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.771] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0204.771] CloseHandle (hObject=0x0) returned 0 [0204.772] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0204.775] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0204.775] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.776] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.787] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0204.787] CloseHandle (hObject=0x0) returned 0 [0204.787] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0204.790] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0204.791] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.791] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.805] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0204.805] CloseHandle (hObject=0x0) returned 0 [0204.805] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0204.809] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0204.809] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.809] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.821] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0204.821] CloseHandle (hObject=0x0) returned 0 [0204.821] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0204.824] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0204.825] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.825] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.840] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0204.840] CloseHandle (hObject=0x0) returned 0 [0204.841] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0204.844] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0204.845] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.845] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.856] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0204.856] CloseHandle (hObject=0x0) returned 0 [0204.857] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0204.861] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0204.862] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.862] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.873] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0204.873] CloseHandle (hObject=0x0) returned 0 [0204.873] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0204.878] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0204.879] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.879] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.890] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0204.890] CloseHandle (hObject=0x0) returned 0 [0204.890] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0204.894] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0204.895] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.895] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.906] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0204.906] CloseHandle (hObject=0x0) returned 0 [0204.910] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0204.913] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0204.913] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.914] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.925] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0204.925] CloseHandle (hObject=0x0) returned 0 [0204.925] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0204.928] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0204.929] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.929] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.941] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0204.941] CloseHandle (hObject=0x0) returned 0 [0204.941] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0204.944] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0204.945] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.945] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.957] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0204.957] CloseHandle (hObject=0x0) returned 0 [0204.957] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0204.960] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0204.961] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.961] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.973] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0204.973] CloseHandle (hObject=0x0) returned 0 [0204.973] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0204.976] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0204.977] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.977] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0204.988] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0204.988] CloseHandle (hObject=0x0) returned 0 [0204.989] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0204.992] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0204.993] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0204.993] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.005] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0205.005] CloseHandle (hObject=0x0) returned 0 [0205.006] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0205.009] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0205.010] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.010] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.070] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0205.070] CloseHandle (hObject=0x0) returned 0 [0205.070] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0205.073] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0205.074] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.074] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.086] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0205.086] GetLastError () returned 0x0 [0205.086] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0205.086] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0205.086] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0205.086] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0205.086] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0205.087] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0205.088] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0205.088] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0205.088] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0205.088] malloc (_Size=0x18) returned 0xd64570 [0205.088] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64570, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64570*, lpNumberOfBytesRead=0x0) returned 1 [0205.088] free (_Block=0xd64570) [0205.088] CloseHandle (hObject=0x244) returned 1 [0205.089] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0205.092] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0205.093] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.093] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.106] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0205.106] GetLastError () returned 0x0 [0205.106] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0205.106] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0205.106] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0205.106] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0205.106] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0205.107] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0205.108] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0205.108] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0205.108] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0205.108] malloc (_Size=0x32) returned 0xd61530 [0205.108] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd61530, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd61530*, lpNumberOfBytesRead=0x0) returned 1 [0205.109] free (_Block=0xd61530) [0205.110] CloseHandle (hObject=0x244) returned 1 [0205.110] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0205.113] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0205.114] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.114] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.133] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0205.133] GetLastError () returned 0x0 [0205.133] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0205.133] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0205.133] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0205.133] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0205.133] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0205.134] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0205.135] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0205.135] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0205.135] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0205.135] malloc (_Size=0x64) returned 0xd601e0 [0205.135] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd601e0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd601e0*, lpNumberOfBytesRead=0x0) returned 1 [0205.136] free (_Block=0xd601e0) [0205.136] CloseHandle (hObject=0x244) returned 1 [0205.136] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0205.139] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0205.140] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.140] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.154] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0205.154] CloseHandle (hObject=0x0) returned 0 [0205.154] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0205.157] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0205.158] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.158] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.171] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0205.171] GetLastError () returned 0x0 [0205.171] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0205.171] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0205.171] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0205.171] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0205.171] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0205.172] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0205.173] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0205.173] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0205.173] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0205.173] malloc (_Size=0x118) returned 0xd647f0 [0205.173] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd647f0, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647f0*, lpNumberOfBytesRead=0x0) returned 1 [0205.174] free (_Block=0xd647f0) [0205.175] CloseHandle (hObject=0x244) returned 1 [0205.176] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0205.179] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0205.180] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.180] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.193] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0205.193] GetLastError () returned 0x0 [0205.194] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0205.194] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0205.194] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0205.194] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0205.194] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0205.195] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0205.195] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0205.195] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0205.196] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0205.196] malloc (_Size=0x6c) returned 0xd621c0 [0205.196] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd621c0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd621c0*, lpNumberOfBytesRead=0x0) returned 1 [0205.196] free (_Block=0xd621c0) [0205.197] CloseHandle (hObject=0x244) returned 1 [0205.197] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0205.200] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0205.201] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.201] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.213] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0205.213] GetLastError () returned 0x0 [0205.213] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0205.213] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0205.213] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0205.213] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0205.213] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0205.214] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0205.215] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0205.215] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0205.215] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0205.215] malloc (_Size=0x11a) returned 0xd647e0 [0205.215] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd647e0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647e0*, lpNumberOfBytesRead=0x0) returned 1 [0205.216] free (_Block=0xd647e0) [0205.216] CloseHandle (hObject=0x244) returned 1 [0205.217] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0205.221] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0205.222] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.222] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.234] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0205.234] GetLastError () returned 0x0 [0205.234] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0205.234] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0205.234] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0205.234] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0205.234] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0205.237] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0205.238] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0205.238] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0205.238] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0205.238] malloc (_Size=0x48) returned 0xd5c570 [0205.238] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0205.239] free (_Block=0xd5c570) [0205.239] CloseHandle (hObject=0x244) returned 1 [0205.239] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0205.242] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0205.243] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.243] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.255] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0205.255] GetLastError () returned 0x0 [0205.255] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0205.255] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0205.255] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0205.255] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0205.255] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0205.256] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0205.256] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0205.256] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0205.257] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0205.257] malloc (_Size=0xda) returned 0xd64730 [0205.257] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd64730, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64730*, lpNumberOfBytesRead=0x0) returned 1 [0205.257] free (_Block=0xd64730) [0205.258] CloseHandle (hObject=0x244) returned 1 [0205.315] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0205.319] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0205.319] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.320] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.331] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0205.331] GetLastError () returned 0x0 [0205.331] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0205.331] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0205.332] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0205.332] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0205.332] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0205.332] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0205.333] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0205.333] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0205.333] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0205.334] malloc (_Size=0x6e) returned 0xd64730 [0205.334] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd64730, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64730*, lpNumberOfBytesRead=0x0) returned 1 [0205.334] free (_Block=0xd64730) [0205.335] CloseHandle (hObject=0x244) returned 1 [0205.335] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0205.338] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0205.339] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.339] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.392] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0205.392] GetLastError () returned 0x0 [0205.392] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0205.392] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0205.392] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0205.392] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0205.392] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0205.393] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0205.394] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0205.394] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0205.394] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0205.394] malloc (_Size=0x64) returned 0xd60100 [0205.394] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd60100, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60100*, lpNumberOfBytesRead=0x0) returned 1 [0205.395] free (_Block=0xd60100) [0205.395] CloseHandle (hObject=0x244) returned 1 [0205.395] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0205.399] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0205.399] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.399] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.412] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0205.412] CloseHandle (hObject=0x0) returned 0 [0205.415] free (_Block=0xd7d420) [0205.415] malloc (_Size=0x48) returned 0xd5c570 [0205.415] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0x653339, dwHighDateTime=0x1d92b8f)) [0205.415] SetEvent (hEvent=0x24c) returned 1 [0205.421] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578430 [0205.421] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578430, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0205.421] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578430) returned 1 [0205.421] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0205.579] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0205.667] RtlRestoreLastWin32Error () returned 0x3f1000 [0205.667] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0205.667] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578430 [0205.667] RtlRestoreLastWin32Error () returned 0x3f1000 [0205.667] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578430, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578430, pcchLanguagesBuffer=0x115dff0) returned 1 [0205.667] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0205.668] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578430) returned 1 [0205.668] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x5963a0 [0205.668] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5963a0, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0205.668] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5963a0) returned 1 [0205.668] SafeArrayGetElemsize (psa=0x593210) returned 0x8 [0205.669] SafeArrayPutElement (psa=0x593210, rgIndices=0x115d898, pv=0x597d08) returned 0x0 [0205.669] SafeArrayRedim (in: psa=0x593210, psaboundNew=0x115d8b0 | out: psa=0x593210) returned 0x0 [0205.669] SafeArrayCopy (in: psa=0x593210, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0205.669] SetEvent (hEvent=0x24c) returned 1 [0205.670] free (_Block=0xd5c570) [0205.671] GetCurrentThread () returned 0xfffffffffffffffe [0205.671] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0205.671] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0205.671] RtlRestoreLastWin32Error () returned 0x3f1000 [0205.671] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0205.671] GetLastError () returned 0x514 [0205.671] CloseHandle (hObject=0x244) returned 1 [0205.672] malloc (_Size=0x18) returned 0xd644f0 [0205.672] SafeArrayPutElement (psa=0x5937d0, rgIndices=0x115d660, pv=0x593bc8) returned 0x0 [0205.672] SafeArrayPutElement (psa=0x593810, rgIndices=0x115d660, pv=0x593bc8) returned 0x0 [0205.672] free (_Block=0xd644f0) [0205.672] malloc (_Size=0x8000) returned 0xd96840 [0205.674] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd96840, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd96840, ResultLength=0x0) returned 0xc0000004 [0205.676] free (_Block=0xd96840) [0205.676] malloc (_Size=0x10000) returned 0xd65580 [0205.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65580, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65580, ResultLength=0x0) returned 0xc0000004 [0205.679] free (_Block=0xd65580) [0205.679] malloc (_Size=0x18000) returned 0xd7d420 [0205.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd7d420, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd7d420, ResultLength=0x0) returned 0x0 [0205.681] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0205.684] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0205.685] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.685] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.696] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0205.696] CloseHandle (hObject=0x0) returned 0 [0205.696] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0205.699] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0205.700] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.700] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.718] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0205.718] CloseHandle (hObject=0x0) returned 0 [0205.718] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0205.722] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0205.722] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.722] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.734] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0205.734] CloseHandle (hObject=0x0) returned 0 [0205.734] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0205.737] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0205.738] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.738] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.749] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0205.749] CloseHandle (hObject=0x0) returned 0 [0205.749] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0205.761] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0205.762] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.762] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.774] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0205.774] CloseHandle (hObject=0x0) returned 0 [0205.774] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0205.777] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0205.778] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.778] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.791] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0205.791] CloseHandle (hObject=0x0) returned 0 [0205.792] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0205.795] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0205.796] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.796] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.811] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0205.811] CloseHandle (hObject=0x0) returned 0 [0205.811] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0205.814] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0205.815] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.815] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.826] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0205.826] CloseHandle (hObject=0x0) returned 0 [0205.827] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0205.835] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0205.836] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.836] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.847] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0205.848] CloseHandle (hObject=0x0) returned 0 [0205.848] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0205.851] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0205.852] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.852] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.863] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0205.863] CloseHandle (hObject=0x0) returned 0 [0205.863] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0205.867] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0205.867] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.867] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.879] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0205.879] CloseHandle (hObject=0x0) returned 0 [0205.879] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0205.882] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0205.883] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.883] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.898] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0205.898] CloseHandle (hObject=0x0) returned 0 [0205.898] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0205.902] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0205.902] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.902] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.914] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0205.914] CloseHandle (hObject=0x0) returned 0 [0205.914] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0205.917] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0205.918] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.918] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.930] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0205.930] CloseHandle (hObject=0x0) returned 0 [0205.930] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0205.933] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0205.934] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.934] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.947] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0205.947] CloseHandle (hObject=0x0) returned 0 [0205.947] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0205.950] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0205.951] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.951] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.964] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0205.964] CloseHandle (hObject=0x0) returned 0 [0205.964] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0205.968] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0205.968] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.968] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.981] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0205.981] CloseHandle (hObject=0x0) returned 0 [0205.981] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0205.984] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0205.985] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0205.985] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0205.996] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0205.997] CloseHandle (hObject=0x0) returned 0 [0205.997] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0206.000] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0206.003] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.003] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.015] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0206.015] CloseHandle (hObject=0x0) returned 0 [0206.015] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0206.018] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0206.019] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.019] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.031] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0206.031] CloseHandle (hObject=0x0) returned 0 [0206.031] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0206.036] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0206.037] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.037] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.048] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0206.048] CloseHandle (hObject=0x0) returned 0 [0206.049] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0206.052] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0206.052] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.053] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.064] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0206.064] GetLastError () returned 0x0 [0206.064] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0206.064] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0206.064] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0206.064] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0206.064] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0206.065] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0206.066] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0206.066] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0206.066] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0206.066] malloc (_Size=0x18) returned 0xd63ef0 [0206.066] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd63ef0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd63ef0*, lpNumberOfBytesRead=0x0) returned 1 [0206.066] free (_Block=0xd63ef0) [0206.067] CloseHandle (hObject=0x244) returned 1 [0206.067] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0206.070] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0206.071] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.071] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.087] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0206.087] GetLastError () returned 0x0 [0206.087] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0206.087] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0206.087] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0206.088] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0206.088] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0206.088] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0206.089] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0206.089] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0206.089] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0206.089] malloc (_Size=0x32) returned 0xd60cf0 [0206.089] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd60cf0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60cf0*, lpNumberOfBytesRead=0x0) returned 1 [0206.090] free (_Block=0xd60cf0) [0206.091] CloseHandle (hObject=0x244) returned 1 [0206.091] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0206.095] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0206.095] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.095] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.108] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0206.108] GetLastError () returned 0x0 [0206.108] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0206.108] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0206.108] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0206.108] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0206.108] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0206.109] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0206.112] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0206.112] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0206.112] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0206.113] malloc (_Size=0x64) returned 0xd60410 [0206.113] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60410, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60410*, lpNumberOfBytesRead=0x0) returned 1 [0206.114] free (_Block=0xd60410) [0206.114] CloseHandle (hObject=0x244) returned 1 [0206.115] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0206.118] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0206.119] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.119] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.131] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0206.131] CloseHandle (hObject=0x0) returned 0 [0206.131] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0206.134] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0206.135] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.135] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.147] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0206.147] GetLastError () returned 0x0 [0206.147] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0206.147] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0206.147] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0206.147] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0206.147] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0206.148] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0206.149] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0206.149] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0206.149] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0206.149] malloc (_Size=0x118) returned 0xd647f0 [0206.149] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd647f0, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647f0*, lpNumberOfBytesRead=0x0) returned 1 [0206.150] free (_Block=0xd647f0) [0206.150] CloseHandle (hObject=0x244) returned 1 [0206.151] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0206.154] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0206.155] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.155] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.166] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0206.166] GetLastError () returned 0x0 [0206.166] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0206.166] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0206.166] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0206.167] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0206.167] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0206.167] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0206.168] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0206.168] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0206.168] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0206.168] malloc (_Size=0x6c) returned 0xd621c0 [0206.168] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd621c0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd621c0*, lpNumberOfBytesRead=0x0) returned 1 [0206.169] free (_Block=0xd621c0) [0206.170] CloseHandle (hObject=0x244) returned 1 [0206.170] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0206.174] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0206.175] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.175] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.186] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0206.186] GetLastError () returned 0x0 [0206.186] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0206.186] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0206.186] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0206.186] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0206.187] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0206.187] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0206.188] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0206.188] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0206.188] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0206.189] malloc (_Size=0x11a) returned 0xd647e0 [0206.189] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd647e0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647e0*, lpNumberOfBytesRead=0x0) returned 1 [0206.189] free (_Block=0xd647e0) [0206.190] CloseHandle (hObject=0x244) returned 1 [0206.190] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0206.193] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0206.194] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.194] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.205] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0206.205] GetLastError () returned 0x0 [0206.205] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0206.205] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0206.205] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0206.205] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0206.205] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0206.206] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0206.207] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0206.207] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0206.207] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0206.207] malloc (_Size=0x48) returned 0xd5c570 [0206.207] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0206.208] free (_Block=0xd5c570) [0206.208] CloseHandle (hObject=0x244) returned 1 [0206.209] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0206.212] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0206.212] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.212] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.226] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0206.226] GetLastError () returned 0x0 [0206.226] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0206.226] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0206.227] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0206.227] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0206.227] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0206.227] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0206.228] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0206.228] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0206.228] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0206.229] malloc (_Size=0xda) returned 0xd64730 [0206.229] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd64730, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64730*, lpNumberOfBytesRead=0x0) returned 1 [0206.229] free (_Block=0xd64730) [0206.230] CloseHandle (hObject=0x244) returned 1 [0206.274] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0206.277] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0206.277] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.277] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.295] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0206.296] GetLastError () returned 0x0 [0206.296] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0206.296] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0206.296] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0206.296] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0206.296] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0206.297] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0206.298] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0206.298] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0206.298] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0206.298] malloc (_Size=0x6e) returned 0xd64730 [0206.298] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd64730, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64730*, lpNumberOfBytesRead=0x0) returned 1 [0206.299] free (_Block=0xd64730) [0206.299] CloseHandle (hObject=0x244) returned 1 [0206.300] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0206.303] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0206.304] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.304] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.342] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0206.342] GetLastError () returned 0x0 [0206.342] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0206.342] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0206.342] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0206.342] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0206.343] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0206.343] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0206.344] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0206.344] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0206.344] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0206.344] malloc (_Size=0x64) returned 0xd60090 [0206.344] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd60090, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60090*, lpNumberOfBytesRead=0x0) returned 1 [0206.345] free (_Block=0xd60090) [0206.346] CloseHandle (hObject=0x244) returned 1 [0206.346] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0206.349] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0206.350] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.350] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.362] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0206.362] CloseHandle (hObject=0x0) returned 0 [0206.364] free (_Block=0xd7d420) [0206.364] malloc (_Size=0x48) returned 0xd5c570 [0206.364] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0xf69ee8, dwHighDateTime=0x1d92b8f)) [0206.364] SetEvent (hEvent=0x24c) returned 1 [0206.378] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x5783c0 [0206.378] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5783c0, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0206.378] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0206.378] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0206.587] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0206.693] RtlRestoreLastWin32Error () returned 0x3f1000 [0206.693] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0206.693] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783c0 [0206.693] RtlRestoreLastWin32Error () returned 0x3f1000 [0206.693] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x5783c0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x5783c0, pcchLanguagesBuffer=0x115dff0) returned 1 [0206.693] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578410 [0206.693] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0206.693] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596280 [0206.693] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596280, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0206.693] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596280) returned 1 [0206.694] SafeArrayGetElemsize (psa=0x592f90) returned 0x8 [0206.694] SafeArrayPutElement (psa=0x592f90, rgIndices=0x115d898, pv=0x5981e8) returned 0x0 [0206.694] SafeArrayRedim (in: psa=0x592f90, psaboundNew=0x115d8b0 | out: psa=0x592f90) returned 0x0 [0206.694] SafeArrayCopy (in: psa=0x592f90, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0206.695] SetEvent (hEvent=0x24c) returned 1 [0206.696] free (_Block=0xd5c570) [0206.696] GetCurrentThread () returned 0xfffffffffffffffe [0206.696] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0206.696] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0206.697] RtlRestoreLastWin32Error () returned 0x3f1000 [0206.697] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0206.697] GetLastError () returned 0x514 [0206.697] CloseHandle (hObject=0x244) returned 1 [0206.697] malloc (_Size=0x18) returned 0xd64330 [0206.697] SafeArrayPutElement (psa=0x593310, rgIndices=0x115d660, pv=0x592dc8) returned 0x0 [0206.697] SafeArrayPutElement (psa=0x5932d0, rgIndices=0x115d660, pv=0x592dc8) returned 0x0 [0206.697] free (_Block=0xd64330) [0206.697] malloc (_Size=0x8000) returned 0xd96840 [0206.698] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd96840, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd96840, ResultLength=0x0) returned 0xc0000004 [0206.699] free (_Block=0xd96840) [0206.700] malloc (_Size=0x10000) returned 0xd65580 [0206.701] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65580, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65580, ResultLength=0x0) returned 0xc0000004 [0206.703] free (_Block=0xd65580) [0206.705] malloc (_Size=0x18000) returned 0xd7d420 [0206.705] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd7d420, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd7d420, ResultLength=0x0) returned 0x0 [0206.706] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0206.710] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0206.710] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.711] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.725] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0206.725] CloseHandle (hObject=0x0) returned 0 [0206.726] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0206.729] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0206.730] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.730] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.743] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0206.743] CloseHandle (hObject=0x0) returned 0 [0206.743] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0206.747] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0206.747] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.747] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.761] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0206.761] CloseHandle (hObject=0x0) returned 0 [0206.761] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0206.764] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0206.765] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.765] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.785] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0206.785] CloseHandle (hObject=0x0) returned 0 [0206.785] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0206.788] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0206.789] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.789] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.802] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0206.802] CloseHandle (hObject=0x0) returned 0 [0206.802] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0206.805] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0206.806] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.806] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.820] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0206.821] CloseHandle (hObject=0x0) returned 0 [0206.821] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0206.824] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0206.825] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.825] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.853] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0206.853] CloseHandle (hObject=0x0) returned 0 [0206.853] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0206.856] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0206.857] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.857] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.870] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0206.870] CloseHandle (hObject=0x0) returned 0 [0206.870] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0206.873] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0206.874] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.874] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.896] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0206.896] CloseHandle (hObject=0x0) returned 0 [0206.896] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0206.899] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0206.900] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.900] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.913] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0206.913] CloseHandle (hObject=0x0) returned 0 [0206.914] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0206.917] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0206.918] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.918] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.932] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0206.932] CloseHandle (hObject=0x0) returned 0 [0206.932] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0206.935] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0206.936] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.936] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.949] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0206.949] CloseHandle (hObject=0x0) returned 0 [0206.949] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0206.952] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0206.953] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.953] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.967] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0206.967] CloseHandle (hObject=0x0) returned 0 [0206.968] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0206.975] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0206.976] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.976] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0206.991] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0206.991] CloseHandle (hObject=0x0) returned 0 [0206.992] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0206.995] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0206.996] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0206.996] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.010] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0207.010] CloseHandle (hObject=0x0) returned 0 [0207.011] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0207.014] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0207.015] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.015] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.029] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0207.029] CloseHandle (hObject=0x0) returned 0 [0207.030] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0207.035] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0207.036] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.036] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.049] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0207.049] CloseHandle (hObject=0x0) returned 0 [0207.049] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0207.052] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0207.053] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.053] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.066] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0207.066] CloseHandle (hObject=0x0) returned 0 [0207.067] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0207.070] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0207.070] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.070] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.084] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0207.084] CloseHandle (hObject=0x0) returned 0 [0207.084] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0207.087] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0207.088] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.088] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.103] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0207.103] CloseHandle (hObject=0x0) returned 0 [0207.103] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0207.107] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0207.107] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.107] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.122] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0207.122] CloseHandle (hObject=0x0) returned 0 [0207.122] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0207.125] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0207.128] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.128] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.139] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0207.139] GetLastError () returned 0x0 [0207.139] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0207.139] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0207.139] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0207.139] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0207.139] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0207.140] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0207.143] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0207.143] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0207.143] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0207.143] malloc (_Size=0x18) returned 0xd64290 [0207.143] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64290, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64290*, lpNumberOfBytesRead=0x0) returned 1 [0207.143] free (_Block=0xd64290) [0207.144] CloseHandle (hObject=0x244) returned 1 [0207.144] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0207.147] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0207.148] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.148] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.162] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0207.162] GetLastError () returned 0x0 [0207.162] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0207.162] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0207.162] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0207.162] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0207.162] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0207.163] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0207.164] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0207.164] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0207.164] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0207.164] malloc (_Size=0x32) returned 0xd60b70 [0207.164] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd60b70, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60b70*, lpNumberOfBytesRead=0x0) returned 1 [0207.165] free (_Block=0xd60b70) [0207.165] CloseHandle (hObject=0x244) returned 1 [0207.166] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0207.169] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0207.170] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.170] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.183] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0207.183] GetLastError () returned 0x0 [0207.183] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0207.183] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0207.183] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0207.183] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0207.183] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0207.184] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0207.185] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0207.185] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0207.185] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0207.185] malloc (_Size=0x64) returned 0xd60250 [0207.185] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60250, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60250*, lpNumberOfBytesRead=0x0) returned 1 [0207.186] free (_Block=0xd60250) [0207.186] CloseHandle (hObject=0x244) returned 1 [0207.187] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0207.192] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0207.192] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.192] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.208] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0207.208] CloseHandle (hObject=0x0) returned 0 [0207.208] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0207.211] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0207.212] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.212] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.225] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0207.225] GetLastError () returned 0x0 [0207.225] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0207.225] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0207.225] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0207.225] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0207.225] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0207.226] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0207.227] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0207.227] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0207.227] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0207.227] malloc (_Size=0x118) returned 0xd647f0 [0207.227] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd647f0, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647f0*, lpNumberOfBytesRead=0x0) returned 1 [0207.228] free (_Block=0xd647f0) [0207.228] CloseHandle (hObject=0x244) returned 1 [0207.229] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0207.232] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0207.232] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.233] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.245] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0207.245] GetLastError () returned 0x0 [0207.246] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0207.246] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0207.246] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0207.246] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0207.246] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0207.247] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0207.247] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0207.247] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0207.247] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0207.248] malloc (_Size=0x6c) returned 0xd621c0 [0207.248] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd621c0, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd621c0*, lpNumberOfBytesRead=0x0) returned 1 [0207.248] free (_Block=0xd621c0) [0207.249] CloseHandle (hObject=0x244) returned 1 [0207.249] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0207.255] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0207.256] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.256] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.269] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0207.269] GetLastError () returned 0x0 [0207.269] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0207.269] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0207.269] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0207.269] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0207.269] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0207.270] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0207.271] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0207.271] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0207.271] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0207.271] malloc (_Size=0x11a) returned 0xd647e0 [0207.271] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd647e0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647e0*, lpNumberOfBytesRead=0x0) returned 1 [0207.272] free (_Block=0xd647e0) [0207.272] CloseHandle (hObject=0x244) returned 1 [0207.273] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0207.276] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0207.276] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.276] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.296] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0207.297] GetLastError () returned 0x0 [0207.297] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0207.297] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0207.297] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0207.299] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0207.299] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0207.300] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0207.301] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0207.301] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0207.301] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0207.301] malloc (_Size=0x48) returned 0xd5c570 [0207.301] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0207.302] free (_Block=0xd5c570) [0207.302] CloseHandle (hObject=0x244) returned 1 [0207.303] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0207.306] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0207.307] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.307] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.321] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0207.322] GetLastError () returned 0x0 [0207.322] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0207.322] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0207.322] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0207.322] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0207.322] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0207.323] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0207.323] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0207.324] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0207.324] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0207.324] malloc (_Size=0xda) returned 0xd64730 [0207.324] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd64730, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64730*, lpNumberOfBytesRead=0x0) returned 1 [0207.325] free (_Block=0xd64730) [0207.325] CloseHandle (hObject=0x244) returned 1 [0207.374] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0207.377] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0207.378] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.378] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.389] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0207.389] GetLastError () returned 0x0 [0207.389] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0207.389] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0207.389] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0207.390] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0207.390] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0207.390] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0207.549] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0207.549] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0207.549] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0207.549] malloc (_Size=0x6e) returned 0xd64730 [0207.550] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd64730, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64730*, lpNumberOfBytesRead=0x0) returned 1 [0207.550] free (_Block=0xd64730) [0207.551] CloseHandle (hObject=0x244) returned 1 [0207.553] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0207.556] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0207.556] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.557] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.594] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0207.594] GetLastError () returned 0x0 [0207.595] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0207.595] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0207.595] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0207.595] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0207.595] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0207.595] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0207.596] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0207.596] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0207.596] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0207.597] malloc (_Size=0x64) returned 0xd601e0 [0207.597] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd601e0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd601e0*, lpNumberOfBytesRead=0x0) returned 1 [0207.598] free (_Block=0xd601e0) [0207.598] CloseHandle (hObject=0x244) returned 1 [0207.598] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0207.601] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0207.602] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.602] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.617] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0207.617] CloseHandle (hObject=0x0) returned 0 [0207.619] free (_Block=0xd7d420) [0207.619] malloc (_Size=0x48) returned 0xd5c570 [0207.619] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0x1b55a03, dwHighDateTime=0x1d92b8f)) [0207.619] SetEvent (hEvent=0x24c) returned 1 [0207.629] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x5783c0 [0207.629] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5783c0, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0207.629] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0207.629] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578410) returned 1 [0207.796] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0207.906] RtlRestoreLastWin32Error () returned 0x3f1000 [0207.906] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0207.906] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0207.906] RtlRestoreLastWin32Error () returned 0x3f1000 [0207.906] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0) returned 1 [0207.906] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783c0 [0207.906] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0207.906] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596500 [0207.906] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596500, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0207.906] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596500) returned 1 [0207.907] SafeArrayGetElemsize (psa=0x593950) returned 0x8 [0207.907] SafeArrayPutElement (psa=0x593950, rgIndices=0x115d898, pv=0x597e28) returned 0x0 [0207.907] SafeArrayRedim (in: psa=0x593950, psaboundNew=0x115d8b0 | out: psa=0x593950) returned 0x0 [0207.908] SafeArrayCopy (in: psa=0x593950, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0207.908] SetEvent (hEvent=0x24c) returned 1 [0207.909] free (_Block=0xd5c570) [0207.909] GetCurrentThread () returned 0xfffffffffffffffe [0207.909] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0207.909] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0207.911] RtlRestoreLastWin32Error () returned 0x3f1000 [0207.911] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0207.911] GetLastError () returned 0x514 [0207.911] CloseHandle (hObject=0x244) returned 1 [0207.911] malloc (_Size=0x18) returned 0xd643b0 [0207.911] SafeArrayPutElement (psa=0x593910, rgIndices=0x115d660, pv=0x592d48) returned 0x0 [0207.911] SafeArrayPutElement (psa=0x5932d0, rgIndices=0x115d660, pv=0x592d48) returned 0x0 [0207.911] free (_Block=0xd643b0) [0207.911] malloc (_Size=0x8000) returned 0xd96840 [0207.911] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd96840, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd96840, ResultLength=0x0) returned 0xc0000004 [0207.914] free (_Block=0xd96840) [0207.915] malloc (_Size=0x10000) returned 0xd65580 [0207.915] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65580, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65580, ResultLength=0x0) returned 0xc0000004 [0207.918] free (_Block=0xd65580) [0207.918] malloc (_Size=0x18000) returned 0xd7d420 [0207.918] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd7d420, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd7d420, ResultLength=0x0) returned 0x0 [0207.919] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0207.925] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0207.925] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.925] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.937] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0207.937] CloseHandle (hObject=0x0) returned 0 [0207.937] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0207.945] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0207.946] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.946] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.958] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0207.959] CloseHandle (hObject=0x0) returned 0 [0207.959] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0207.962] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0207.963] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.963] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.978] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0207.978] CloseHandle (hObject=0x0) returned 0 [0207.978] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0207.981] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0207.982] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0207.982] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0207.996] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0207.996] CloseHandle (hObject=0x0) returned 0 [0207.996] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0207.999] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0208.000] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.000] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.013] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0208.013] CloseHandle (hObject=0x0) returned 0 [0208.014] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0208.019] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0208.020] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.020] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.032] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0208.032] CloseHandle (hObject=0x0) returned 0 [0208.032] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0208.037] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0208.038] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.038] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.052] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0208.052] CloseHandle (hObject=0x0) returned 0 [0208.052] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0208.055] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0208.056] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.056] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.069] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0208.069] CloseHandle (hObject=0x0) returned 0 [0208.069] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0208.072] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0208.073] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.073] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.091] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0208.091] CloseHandle (hObject=0x0) returned 0 [0208.092] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0208.097] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0208.098] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.098] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.110] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0208.110] CloseHandle (hObject=0x0) returned 0 [0208.110] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0208.115] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0208.116] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.116] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0208.129] CloseHandle (hObject=0x0) returned 0 [0208.129] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0208.132] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0208.133] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.133] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.147] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0208.147] CloseHandle (hObject=0x0) returned 0 [0208.147] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0208.150] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0208.151] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.151] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.164] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0208.164] CloseHandle (hObject=0x0) returned 0 [0208.164] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0208.167] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0208.168] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.168] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.182] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0208.182] CloseHandle (hObject=0x0) returned 0 [0208.183] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0208.186] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0208.187] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.187] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.202] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0208.202] CloseHandle (hObject=0x0) returned 0 [0208.202] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0208.207] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0208.208] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.208] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.222] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0208.222] CloseHandle (hObject=0x0) returned 0 [0208.222] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0208.225] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0208.226] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.226] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.240] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0208.240] CloseHandle (hObject=0x0) returned 0 [0208.240] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0208.243] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0208.244] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.244] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.257] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0208.257] CloseHandle (hObject=0x0) returned 0 [0208.258] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0208.261] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0208.262] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.262] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.275] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0208.275] CloseHandle (hObject=0x0) returned 0 [0208.275] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0208.278] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0208.279] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.279] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.303] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0208.303] CloseHandle (hObject=0x0) returned 0 [0208.303] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0208.306] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0208.307] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.307] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.322] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0208.322] CloseHandle (hObject=0x0) returned 0 [0208.322] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0208.325] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0208.326] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.326] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.339] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0208.339] GetLastError () returned 0x0 [0208.339] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0208.339] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0208.340] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0208.340] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0208.340] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0208.341] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0208.341] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0208.342] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0208.342] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0208.342] malloc (_Size=0x18) returned 0xd64430 [0208.342] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64430, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64430*, lpNumberOfBytesRead=0x0) returned 1 [0208.342] free (_Block=0xd64430) [0208.342] CloseHandle (hObject=0x244) returned 1 [0208.343] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0208.348] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0208.348] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.348] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.362] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0208.362] GetLastError () returned 0x0 [0208.362] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0208.362] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0208.362] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0208.362] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0208.362] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0208.363] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0208.364] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0208.364] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0208.364] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0208.364] malloc (_Size=0x32) returned 0xd61070 [0208.364] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd61070, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd61070*, lpNumberOfBytesRead=0x0) returned 1 [0208.365] free (_Block=0xd61070) [0208.366] CloseHandle (hObject=0x244) returned 1 [0208.366] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0208.369] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0208.370] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.370] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.383] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0208.383] GetLastError () returned 0x0 [0208.383] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0208.383] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0208.383] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0208.383] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0208.383] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0208.384] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0208.385] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0208.385] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0208.385] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0208.385] malloc (_Size=0x64) returned 0xd60100 [0208.385] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60100, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60100*, lpNumberOfBytesRead=0x0) returned 1 [0208.386] free (_Block=0xd60100) [0208.386] CloseHandle (hObject=0x244) returned 1 [0208.386] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0208.390] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0208.390] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.390] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.403] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0208.403] CloseHandle (hObject=0x0) returned 0 [0208.404] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0208.412] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0208.412] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.413] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.425] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0208.425] GetLastError () returned 0x0 [0208.425] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0208.426] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0208.426] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0208.426] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0208.426] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0208.426] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0208.427] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0208.427] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0208.427] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0208.428] malloc (_Size=0x118) returned 0xd647f0 [0208.428] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd647f0, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647f0*, lpNumberOfBytesRead=0x0) returned 1 [0208.429] free (_Block=0xd647f0) [0208.429] CloseHandle (hObject=0x244) returned 1 [0208.429] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0208.432] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0208.433] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.433] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.446] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0208.446] GetLastError () returned 0x0 [0208.446] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0208.447] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0208.447] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0208.447] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0208.447] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0208.447] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0208.448] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0208.448] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0208.448] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0208.449] malloc (_Size=0x6c) returned 0xd95a80 [0208.449] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd95a80, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd95a80*, lpNumberOfBytesRead=0x0) returned 1 [0208.449] free (_Block=0xd95a80) [0208.450] CloseHandle (hObject=0x244) returned 1 [0208.450] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0208.453] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0208.457] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.457] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.468] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0208.468] GetLastError () returned 0x0 [0208.468] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0208.468] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0208.468] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0208.468] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0208.468] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0208.471] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0208.472] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0208.472] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0208.472] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0208.472] malloc (_Size=0x11a) returned 0xd647e0 [0208.472] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd647e0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647e0*, lpNumberOfBytesRead=0x0) returned 1 [0208.473] free (_Block=0xd647e0) [0208.473] CloseHandle (hObject=0x244) returned 1 [0208.474] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0208.477] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0208.477] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.477] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.491] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0208.491] GetLastError () returned 0x0 [0208.491] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0208.491] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0208.491] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0208.491] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0208.491] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0208.492] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0208.492] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0208.492] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0208.493] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0208.493] malloc (_Size=0x48) returned 0xd5c700 [0208.493] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c700, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c700*, lpNumberOfBytesRead=0x0) returned 1 [0208.493] free (_Block=0xd5c700) [0208.494] CloseHandle (hObject=0x244) returned 1 [0208.494] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0208.497] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0208.498] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.498] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.511] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0208.511] GetLastError () returned 0x0 [0208.511] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0208.511] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0208.511] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0208.512] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0208.512] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0208.512] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0208.513] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0208.513] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0208.513] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0208.513] malloc (_Size=0xda) returned 0xd64730 [0208.513] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd64730, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64730*, lpNumberOfBytesRead=0x0) returned 1 [0208.514] free (_Block=0xd64730) [0208.515] CloseHandle (hObject=0x244) returned 1 [0208.572] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0208.575] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0208.576] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.576] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.589] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0208.589] GetLastError () returned 0x0 [0208.589] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0208.589] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0208.590] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0208.590] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0208.590] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0208.590] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0208.591] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0208.591] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0208.591] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0208.592] malloc (_Size=0x6e) returned 0xd96780 [0208.592] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd96780, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd96780*, lpNumberOfBytesRead=0x0) returned 1 [0208.592] free (_Block=0xd96780) [0208.593] CloseHandle (hObject=0x244) returned 1 [0208.593] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0208.600] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0208.600] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.601] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.635] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0208.635] GetLastError () returned 0x0 [0208.635] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0208.635] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0208.635] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0208.635] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0208.635] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0208.636] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0208.637] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0208.637] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0208.637] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0208.637] malloc (_Size=0x64) returned 0xd601e0 [0208.637] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd601e0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd601e0*, lpNumberOfBytesRead=0x0) returned 1 [0208.638] free (_Block=0xd601e0) [0208.638] CloseHandle (hObject=0x244) returned 1 [0208.638] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0208.642] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0208.643] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.643] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.654] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0208.654] CloseHandle (hObject=0x0) returned 0 [0208.656] free (_Block=0xd7d420) [0208.658] malloc (_Size=0x48) returned 0xd5c570 [0208.658] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0x25517a5, dwHighDateTime=0x1d92b8f)) [0208.658] SetEvent (hEvent=0x24c) returned 1 [0208.664] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578420 [0208.664] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578420, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0208.664] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578420) returned 1 [0208.664] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0208.795] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0208.891] RtlRestoreLastWin32Error () returned 0x3f1000 [0208.891] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0208.891] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578410 [0208.891] RtlRestoreLastWin32Error () returned 0x3f1000 [0208.891] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578410, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578410, pcchLanguagesBuffer=0x115dff0) returned 1 [0208.891] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783d0 [0208.891] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578410) returned 1 [0208.891] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596440 [0208.891] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596440, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0208.891] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596440) returned 1 [0208.892] SafeArrayGetElemsize (psa=0x592fd0) returned 0x8 [0208.892] SafeArrayPutElement (psa=0x592fd0, rgIndices=0x115d898, pv=0x598098) returned 0x0 [0208.892] SafeArrayRedim (in: psa=0x592fd0, psaboundNew=0x115d8b0 | out: psa=0x592fd0) returned 0x0 [0208.892] SafeArrayCopy (in: psa=0x592fd0, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0208.893] SetEvent (hEvent=0x24c) returned 1 [0208.894] free (_Block=0xd5c570) [0208.894] GetCurrentThread () returned 0xfffffffffffffffe [0208.894] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0208.894] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0208.895] RtlRestoreLastWin32Error () returned 0x3f1000 [0208.895] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0208.895] GetLastError () returned 0x514 [0208.895] CloseHandle (hObject=0x244) returned 1 [0208.895] malloc (_Size=0x18) returned 0xd64610 [0208.895] SafeArrayPutElement (psa=0x593450, rgIndices=0x115d660, pv=0x593b08) returned 0x0 [0208.895] SafeArrayPutElement (psa=0x5934d0, rgIndices=0x115d660, pv=0x593b08) returned 0x0 [0208.895] free (_Block=0xd64610) [0208.895] malloc (_Size=0x8000) returned 0xd97850 [0208.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd97850, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd97850, ResultLength=0x0) returned 0xc0000004 [0208.897] free (_Block=0xd97850) [0208.898] malloc (_Size=0x10000) returned 0xd65580 [0208.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65580, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65580, ResultLength=0x0) returned 0xc0000004 [0208.901] free (_Block=0xd65580) [0208.901] malloc (_Size=0x18000) returned 0xd7d420 [0208.902] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd7d420, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd7d420, ResultLength=0x0) returned 0x0 [0208.903] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0208.906] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0208.910] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.910] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.921] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0208.921] CloseHandle (hObject=0x0) returned 0 [0208.922] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0208.931] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0208.932] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.932] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.945] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0208.945] CloseHandle (hObject=0x0) returned 0 [0208.946] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0208.949] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0208.950] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.950] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.964] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0208.964] CloseHandle (hObject=0x0) returned 0 [0208.965] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0208.968] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0208.969] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.969] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.982] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0208.982] CloseHandle (hObject=0x0) returned 0 [0208.982] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0208.985] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0208.988] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0208.988] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0208.999] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0208.999] CloseHandle (hObject=0x0) returned 0 [0208.999] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0209.004] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0209.005] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.005] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.019] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0209.019] CloseHandle (hObject=0x0) returned 0 [0209.019] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0209.022] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0209.023] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.023] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.036] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0209.036] CloseHandle (hObject=0x0) returned 0 [0209.037] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0209.040] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0209.041] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.041] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.054] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0209.054] CloseHandle (hObject=0x0) returned 0 [0209.054] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0209.057] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0209.058] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.058] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.074] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0209.074] CloseHandle (hObject=0x0) returned 0 [0209.074] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0209.077] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0209.078] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.078] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.091] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0209.091] CloseHandle (hObject=0x0) returned 0 [0209.092] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0209.097] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0209.098] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.098] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.109] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0209.109] CloseHandle (hObject=0x0) returned 0 [0209.110] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0209.114] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0209.115] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.115] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.130] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0209.130] CloseHandle (hObject=0x0) returned 0 [0209.131] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0209.134] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0209.134] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.135] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.148] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0209.148] CloseHandle (hObject=0x0) returned 0 [0209.148] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0209.151] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0209.152] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.152] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.166] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0209.167] CloseHandle (hObject=0x0) returned 0 [0209.167] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0209.170] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0209.171] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.171] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.186] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0209.186] CloseHandle (hObject=0x0) returned 0 [0209.186] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0209.191] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0209.192] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.192] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.203] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0209.203] CloseHandle (hObject=0x0) returned 0 [0209.206] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0209.209] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0209.210] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.210] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.222] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0209.222] CloseHandle (hObject=0x0) returned 0 [0209.223] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0209.226] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0209.226] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.226] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.240] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0209.240] CloseHandle (hObject=0x0) returned 0 [0209.240] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0209.243] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0209.244] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.244] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.258] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0209.258] CloseHandle (hObject=0x0) returned 0 [0209.258] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0209.261] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0209.262] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.262] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.275] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0209.275] CloseHandle (hObject=0x0) returned 0 [0209.275] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0209.278] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0209.279] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.279] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.303] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0209.303] CloseHandle (hObject=0x0) returned 0 [0209.304] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0209.307] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0209.308] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.308] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.323] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0209.323] GetLastError () returned 0x0 [0209.323] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0209.323] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0209.323] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0209.323] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0209.323] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0209.324] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0209.325] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0209.325] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0209.325] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0209.325] malloc (_Size=0x18) returned 0xd645d0 [0209.325] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd645d0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd645d0*, lpNumberOfBytesRead=0x0) returned 1 [0209.325] free (_Block=0xd645d0) [0209.326] CloseHandle (hObject=0x244) returned 1 [0209.326] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0209.331] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0209.332] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.332] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.343] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0209.343] GetLastError () returned 0x0 [0209.343] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0209.343] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0209.343] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0209.344] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0209.344] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0209.346] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0209.347] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0209.347] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0209.347] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0209.347] malloc (_Size=0x32) returned 0xd61270 [0209.347] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd61270, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd61270*, lpNumberOfBytesRead=0x0) returned 1 [0209.348] free (_Block=0xd61270) [0209.348] CloseHandle (hObject=0x244) returned 1 [0209.349] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0209.352] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0209.353] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.353] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.366] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0209.366] GetLastError () returned 0x0 [0209.366] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0209.366] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0209.366] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0209.366] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0209.366] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0209.367] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0209.367] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0209.368] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0209.368] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0209.368] malloc (_Size=0x64) returned 0xd60100 [0209.368] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60100, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60100*, lpNumberOfBytesRead=0x0) returned 1 [0209.369] free (_Block=0xd60100) [0209.369] CloseHandle (hObject=0x244) returned 1 [0209.369] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0209.372] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0209.373] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.373] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.386] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0209.386] CloseHandle (hObject=0x0) returned 0 [0209.387] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0209.390] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0209.390] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.390] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.405] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0209.405] GetLastError () returned 0x0 [0209.405] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0209.406] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0209.406] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0209.406] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0209.406] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0209.409] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0209.410] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0209.410] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0209.410] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0209.411] malloc (_Size=0x118) returned 0xd647f0 [0209.411] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd647f0, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647f0*, lpNumberOfBytesRead=0x0) returned 1 [0209.412] free (_Block=0xd647f0) [0209.412] CloseHandle (hObject=0x244) returned 1 [0209.412] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0209.415] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0209.416] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.416] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.429] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0209.429] GetLastError () returned 0x0 [0209.429] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0209.429] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0209.430] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0209.430] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0209.430] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0209.430] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0209.431] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0209.431] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0209.431] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0209.432] malloc (_Size=0x6c) returned 0xd96300 [0209.432] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd96300, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd96300*, lpNumberOfBytesRead=0x0) returned 1 [0209.432] free (_Block=0xd96300) [0209.433] CloseHandle (hObject=0x244) returned 1 [0209.433] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0209.436] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0209.437] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.437] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.450] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0209.450] GetLastError () returned 0x0 [0209.450] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0209.450] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0209.450] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0209.450] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0209.451] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0209.451] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0209.452] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0209.452] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0209.452] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0209.452] malloc (_Size=0x11a) returned 0xd647e0 [0209.452] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd647e0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647e0*, lpNumberOfBytesRead=0x0) returned 1 [0209.453] free (_Block=0xd647e0) [0209.457] CloseHandle (hObject=0x244) returned 1 [0209.457] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0209.460] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0209.461] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.461] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.474] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0209.474] GetLastError () returned 0x0 [0209.474] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0209.474] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0209.474] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0209.474] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0209.475] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0209.475] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0209.476] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0209.476] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0209.476] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0209.476] malloc (_Size=0x48) returned 0xd5c570 [0209.476] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0209.477] free (_Block=0xd5c570) [0209.477] CloseHandle (hObject=0x244) returned 1 [0209.478] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0209.481] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0209.482] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.482] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.495] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0209.495] GetLastError () returned 0x0 [0209.495] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0209.495] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0209.495] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0209.495] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0209.495] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0209.496] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0209.497] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0209.497] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0209.497] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0209.497] malloc (_Size=0xda) returned 0xd64730 [0209.497] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd64730, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64730*, lpNumberOfBytesRead=0x0) returned 1 [0209.498] free (_Block=0xd64730) [0209.498] CloseHandle (hObject=0x244) returned 1 [0209.557] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0209.560] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0209.561] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.561] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.574] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0209.574] GetLastError () returned 0x0 [0209.574] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0209.574] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0209.574] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0209.574] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0209.575] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0209.575] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0209.576] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0209.576] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0209.576] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0209.576] malloc (_Size=0x6e) returned 0xd96380 [0209.576] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd96380, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd96380*, lpNumberOfBytesRead=0x0) returned 1 [0209.577] free (_Block=0xd96380) [0209.578] CloseHandle (hObject=0x244) returned 1 [0209.578] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0209.583] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0209.584] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.584] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.620] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0209.620] GetLastError () returned 0x0 [0209.620] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0209.620] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0209.620] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0209.621] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0209.621] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0209.621] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0209.622] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0209.622] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0209.622] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0209.622] malloc (_Size=0x64) returned 0xd60410 [0209.622] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd60410, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60410*, lpNumberOfBytesRead=0x0) returned 1 [0209.623] free (_Block=0xd60410) [0209.624] CloseHandle (hObject=0x244) returned 1 [0209.624] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0209.628] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0209.628] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.628] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.640] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0209.640] CloseHandle (hObject=0x0) returned 0 [0209.642] free (_Block=0xd7d420) [0209.644] malloc (_Size=0x48) returned 0xd5c570 [0209.644] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0x2eb82d1, dwHighDateTime=0x1d92b8f)) [0209.644] SetEvent (hEvent=0x24c) returned 1 [0209.657] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x5783e0 [0209.657] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5783e0, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0209.657] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783e0) returned 1 [0209.657] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783d0) returned 1 [0209.824] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0209.913] RtlRestoreLastWin32Error () returned 0x3f1000 [0209.913] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0209.913] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0209.913] RtlRestoreLastWin32Error () returned 0x3f1000 [0209.913] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0) returned 1 [0209.913] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783c0 [0209.913] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0209.913] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596580 [0209.913] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596580, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0209.913] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596580) returned 1 [0209.914] SafeArrayGetElemsize (psa=0x5935d0) returned 0x8 [0209.914] SafeArrayPutElement (psa=0x5935d0, rgIndices=0x115d898, pv=0x597d08) returned 0x0 [0209.914] SafeArrayRedim (in: psa=0x5935d0, psaboundNew=0x115d8b0 | out: psa=0x5935d0) returned 0x0 [0209.914] SafeArrayCopy (in: psa=0x5935d0, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0209.915] SetEvent (hEvent=0x24c) returned 1 [0209.916] free (_Block=0xd5c570) [0209.916] GetCurrentThread () returned 0xfffffffffffffffe [0209.916] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0209.916] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0209.919] RtlRestoreLastWin32Error () returned 0x3f1000 [0209.919] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0209.919] GetLastError () returned 0x514 [0209.919] CloseHandle (hObject=0x244) returned 1 [0209.919] malloc (_Size=0x18) returned 0xd64270 [0209.919] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d660, pv=0x5934c8) returned 0x0 [0209.919] SafeArrayPutElement (psa=0x593210, rgIndices=0x115d660, pv=0x5934c8) returned 0x0 [0209.919] free (_Block=0xd64270) [0209.919] malloc (_Size=0x8000) returned 0xd97850 [0209.919] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd97850, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd97850, ResultLength=0x0) returned 0xc0000004 [0209.921] free (_Block=0xd97850) [0209.923] malloc (_Size=0x10000) returned 0xd65580 [0209.923] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65580, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65580, ResultLength=0x0) returned 0xc0000004 [0209.926] free (_Block=0xd65580) [0209.926] malloc (_Size=0x18000) returned 0xd7d420 [0209.926] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd7d420, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd7d420, ResultLength=0x0) returned 0x0 [0209.927] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0209.931] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0209.931] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.931] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.950] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0209.950] CloseHandle (hObject=0x0) returned 0 [0209.951] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0209.956] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0209.957] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.957] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.968] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0209.968] CloseHandle (hObject=0x0) returned 0 [0209.968] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0209.972] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0209.972] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.973] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0209.983] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0209.983] CloseHandle (hObject=0x0) returned 0 [0209.984] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0209.988] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0209.989] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0209.989] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.000] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0210.000] CloseHandle (hObject=0x0) returned 0 [0210.000] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0210.003] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0210.004] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.004] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.015] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0210.015] CloseHandle (hObject=0x0) returned 0 [0210.015] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0210.019] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0210.019] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.020] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.031] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0210.031] CloseHandle (hObject=0x0) returned 0 [0210.031] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0210.035] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0210.036] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.036] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.047] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0210.047] CloseHandle (hObject=0x0) returned 0 [0210.047] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0210.050] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0210.051] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.051] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.062] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0210.062] CloseHandle (hObject=0x0) returned 0 [0210.067] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0210.070] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0210.071] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.071] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.084] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0210.084] CloseHandle (hObject=0x0) returned 0 [0210.084] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0210.087] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0210.088] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.088] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.099] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0210.099] CloseHandle (hObject=0x0) returned 0 [0210.100] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0210.103] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0210.104] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.104] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.115] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0210.115] CloseHandle (hObject=0x0) returned 0 [0210.115] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0210.118] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0210.119] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.119] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.130] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0210.130] CloseHandle (hObject=0x0) returned 0 [0210.130] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0210.133] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0210.134] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.134] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.146] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0210.146] CloseHandle (hObject=0x0) returned 0 [0210.147] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0210.150] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0210.151] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.151] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.164] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0210.164] CloseHandle (hObject=0x0) returned 0 [0210.164] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0210.167] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0210.168] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.168] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.182] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0210.182] CloseHandle (hObject=0x0) returned 0 [0210.182] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0210.185] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0210.186] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.186] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.199] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0210.199] CloseHandle (hObject=0x0) returned 0 [0210.200] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0210.203] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0210.203] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.203] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.215] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0210.215] CloseHandle (hObject=0x0) returned 0 [0210.215] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0210.218] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0210.220] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.220] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.232] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0210.232] CloseHandle (hObject=0x0) returned 0 [0210.232] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0210.235] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0210.236] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.236] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.247] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0210.247] CloseHandle (hObject=0x0) returned 0 [0210.248] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0210.251] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0210.252] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.252] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.263] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0210.263] CloseHandle (hObject=0x0) returned 0 [0210.263] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0210.267] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0210.268] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.268] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.279] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0210.279] CloseHandle (hObject=0x0) returned 0 [0210.279] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0210.291] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0210.292] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.292] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.303] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0210.304] GetLastError () returned 0x0 [0210.304] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0210.304] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0210.304] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0210.304] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0210.304] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0210.305] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0210.306] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0210.306] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0210.306] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0210.306] malloc (_Size=0x18) returned 0xd64290 [0210.306] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64290, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64290*, lpNumberOfBytesRead=0x0) returned 1 [0210.306] free (_Block=0xd64290) [0210.306] CloseHandle (hObject=0x244) returned 1 [0210.307] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0210.310] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0210.310] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.311] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.323] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0210.323] GetLastError () returned 0x0 [0210.323] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0210.323] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0210.324] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0210.324] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0210.324] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0210.324] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0210.325] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0210.325] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0210.325] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0210.326] malloc (_Size=0x32) returned 0xd613f0 [0210.326] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd613f0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd613f0*, lpNumberOfBytesRead=0x0) returned 1 [0210.326] free (_Block=0xd613f0) [0210.327] CloseHandle (hObject=0x244) returned 1 [0210.327] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0210.330] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0210.331] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.331] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.342] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0210.342] GetLastError () returned 0x0 [0210.343] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0210.343] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0210.343] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0210.343] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0210.343] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0210.343] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0210.345] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0210.345] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0210.345] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0210.345] malloc (_Size=0x64) returned 0xd60100 [0210.345] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60100, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60100*, lpNumberOfBytesRead=0x0) returned 1 [0210.346] free (_Block=0xd60100) [0210.347] CloseHandle (hObject=0x244) returned 1 [0210.347] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0210.350] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0210.351] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.351] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.362] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0210.362] CloseHandle (hObject=0x0) returned 0 [0210.363] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0210.366] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0210.367] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.367] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.378] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0210.378] GetLastError () returned 0x0 [0210.378] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0210.378] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0210.378] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0210.379] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0210.379] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0210.379] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0210.380] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0210.380] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0210.380] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0210.380] malloc (_Size=0x118) returned 0xd647f0 [0210.380] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd647f0, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647f0*, lpNumberOfBytesRead=0x0) returned 1 [0210.381] free (_Block=0xd647f0) [0210.382] CloseHandle (hObject=0x244) returned 1 [0210.382] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0210.385] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0210.386] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.386] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.400] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0210.400] GetLastError () returned 0x0 [0210.400] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0210.400] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0210.400] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0210.401] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0210.401] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0210.401] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0210.402] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0210.402] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0210.402] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0210.402] malloc (_Size=0x6c) returned 0xd95d80 [0210.402] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd95d80, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd95d80*, lpNumberOfBytesRead=0x0) returned 1 [0210.403] free (_Block=0xd95d80) [0210.404] CloseHandle (hObject=0x244) returned 1 [0210.404] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0210.413] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0210.414] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.414] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.429] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0210.429] GetLastError () returned 0x0 [0210.429] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0210.429] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0210.429] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0210.429] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0210.429] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0210.430] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0210.431] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0210.431] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0210.431] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0210.431] malloc (_Size=0x11a) returned 0xd647e0 [0210.431] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd647e0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647e0*, lpNumberOfBytesRead=0x0) returned 1 [0210.432] free (_Block=0xd647e0) [0210.432] CloseHandle (hObject=0x244) returned 1 [0210.432] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0210.435] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0210.436] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.436] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.449] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0210.450] GetLastError () returned 0x0 [0210.450] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0210.450] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0210.450] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0210.450] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0210.450] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0210.451] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0210.451] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0210.451] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0210.452] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0210.452] malloc (_Size=0x48) returned 0xd5c570 [0210.452] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0210.452] free (_Block=0xd5c570) [0210.453] CloseHandle (hObject=0x244) returned 1 [0210.454] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0210.457] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0210.458] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.458] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.470] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0210.470] GetLastError () returned 0x0 [0210.470] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0210.470] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0210.470] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0210.470] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0210.470] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0210.471] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0210.472] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0210.472] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0210.472] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0210.472] malloc (_Size=0xda) returned 0xd64730 [0210.472] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd64730, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64730*, lpNumberOfBytesRead=0x0) returned 1 [0210.473] free (_Block=0xd64730) [0210.473] CloseHandle (hObject=0x244) returned 1 [0210.504] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0210.507] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0210.508] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.508] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.536] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0210.536] GetLastError () returned 0x0 [0210.536] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0210.536] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0210.536] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0210.536] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0210.537] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0210.537] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0210.538] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0210.538] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0210.538] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0210.538] malloc (_Size=0x6e) returned 0xd95c00 [0210.538] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd95c00, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd95c00*, lpNumberOfBytesRead=0x0) returned 1 [0210.539] free (_Block=0xd95c00) [0210.540] CloseHandle (hObject=0x244) returned 1 [0210.540] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0210.543] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0210.544] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.544] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.555] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0210.555] GetLastError () returned 0x0 [0210.555] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0210.555] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0210.555] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0210.555] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0210.556] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0210.556] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0210.557] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0210.557] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0210.557] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0210.557] malloc (_Size=0x64) returned 0xd601e0 [0210.557] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd601e0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd601e0*, lpNumberOfBytesRead=0x0) returned 1 [0210.558] free (_Block=0xd601e0) [0210.559] CloseHandle (hObject=0x244) returned 1 [0210.559] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0210.562] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0210.563] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.563] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.574] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0210.574] CloseHandle (hObject=0x0) returned 0 [0210.576] free (_Block=0xd7d420) [0210.576] malloc (_Size=0x48) returned 0xd5c570 [0210.576] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0x377f6df, dwHighDateTime=0x1d92b8f)) [0210.577] SetEvent (hEvent=0x24c) returned 1 [0210.615] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578390 [0210.615] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578390, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0210.615] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0210.615] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0210.755] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0210.828] RtlRestoreLastWin32Error () returned 0x3f1000 [0210.828] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0210.828] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578410 [0210.828] RtlRestoreLastWin32Error () returned 0x3f1000 [0210.828] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578410, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578410, pcchLanguagesBuffer=0x115dff0) returned 1 [0210.828] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578430 [0210.828] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578410) returned 1 [0210.828] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596440 [0210.828] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596440, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0210.828] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596440) returned 1 [0210.835] SafeArrayGetElemsize (psa=0x593390) returned 0x8 [0210.835] SafeArrayPutElement (psa=0x593390, rgIndices=0x115d898, pv=0x598218) returned 0x0 [0210.835] SafeArrayRedim (in: psa=0x593390, psaboundNew=0x115d8b0 | out: psa=0x593390) returned 0x0 [0210.835] SafeArrayCopy (in: psa=0x593390, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0210.836] malloc (_Size=0xb0) returned 0xd64670 [0210.836] LoadLibraryExW (lpLibFileName="NTDLL.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5f840000 [0210.836] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="RtlInitUnicodeString") returned 0x7ffa5f85ced0 [0210.836] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="RtlFreeUnicodeString") returned 0x7ffa5f85c680 [0210.836] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtSetSystemEnvironmentValue") returned 0x7ffa5f8e7f10 [0210.837] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQuerySystemEnvironmentValue") returned 0x7ffa5f8e7630 [0210.837] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtCreateFile") returned 0x7ffa5f8e57e0 [0210.837] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQuerySystemInformation") returned 0x7ffa5f8e5400 [0210.837] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQueryDirectoryObject") returned 0x7ffa5f8e72f0 [0210.837] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQueryObject") returned 0x7ffa5f8e4f40 [0210.837] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtOpenDirectoryObject") returned 0x7ffa5f8e5840 [0210.837] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQueryInformationProcess") returned 0x7ffa5f8e5060 [0210.837] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQueryInformationToken") returned 0x7ffa5f8e5160 [0210.837] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtOpenFile") returned 0x7ffa5f8e53a0 [0210.837] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtClose") returned 0x7ffa5f8e4f20 [0210.838] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtFsControlFile") returned 0x7ffa5f8e5460 [0210.838] GetProcAddress (hModule=0x7ffa5f840000, lpProcName="NtQueryVolumeInformationFile") returned 0x7ffa5f8e5660 [0210.838] malloc (_Size=0x18) returned 0xd644d0 [0210.838] GetCurrentThread () returned 0xfffffffffffffffe [0210.838] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0210.838] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0210.839] RtlRestoreLastWin32Error () returned 0x3f1000 [0210.839] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0210.839] GetLastError () returned 0x514 [0210.839] CloseHandle (hObject=0x244) returned 1 [0210.839] malloc (_Size=0x18) returned 0xd63ff0 [0210.839] SafeArrayPutElement (psa=0x593250, rgIndices=0x115d660, pv=0x592e88) returned 0x0 [0210.839] SafeArrayPutElement (psa=0x592e50, rgIndices=0x115d660, pv=0x592e88) returned 0x0 [0210.839] free (_Block=0xd63ff0) [0210.839] malloc (_Size=0x8000) returned 0xd97850 [0210.839] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd97850, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd97850, ResultLength=0x0) returned 0xc0000004 [0210.841] free (_Block=0xd97850) [0210.842] malloc (_Size=0x10000) returned 0xd65580 [0210.842] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65580, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65580, ResultLength=0x0) returned 0xc0000004 [0210.845] free (_Block=0xd65580) [0210.849] malloc (_Size=0x18000) returned 0xd7d420 [0210.849] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd7d420, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd7d420, ResultLength=0x0) returned 0x0 [0210.850] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0210.853] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0210.854] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.854] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.865] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0210.865] CloseHandle (hObject=0x0) returned 0 [0210.866] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0210.869] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0210.870] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.870] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.881] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0210.881] CloseHandle (hObject=0x0) returned 0 [0210.881] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0210.884] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0210.885] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.885] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.898] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0210.898] CloseHandle (hObject=0x0) returned 0 [0210.898] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0210.901] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0210.902] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.902] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.914] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0210.914] CloseHandle (hObject=0x0) returned 0 [0210.914] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0210.917] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0210.918] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.918] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.929] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0210.930] CloseHandle (hObject=0x0) returned 0 [0210.930] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0210.933] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0210.934] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.934] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.949] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0210.949] CloseHandle (hObject=0x0) returned 0 [0210.950] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0210.953] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0210.954] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.954] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.965] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0210.965] CloseHandle (hObject=0x0) returned 0 [0210.965] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0210.968] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0210.969] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.969] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.981] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0210.981] CloseHandle (hObject=0x0) returned 0 [0210.981] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0210.984] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0210.986] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0210.986] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0210.998] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0210.998] CloseHandle (hObject=0x0) returned 0 [0210.998] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0211.001] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0211.002] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.002] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.013] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0211.013] CloseHandle (hObject=0x0) returned 0 [0211.013] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0211.016] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0211.017] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.017] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.028] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0211.028] CloseHandle (hObject=0x0) returned 0 [0211.029] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0211.036] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0211.037] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.037] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.051] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0211.051] CloseHandle (hObject=0x0) returned 0 [0211.051] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0211.054] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0211.055] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.055] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.066] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0211.066] CloseHandle (hObject=0x0) returned 0 [0211.067] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0211.070] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0211.070] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.070] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.083] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0211.083] CloseHandle (hObject=0x0) returned 0 [0211.083] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0211.086] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0211.087] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.087] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.098] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0211.098] CloseHandle (hObject=0x0) returned 0 [0211.098] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0211.101] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0211.102] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.102] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.113] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0211.113] CloseHandle (hObject=0x0) returned 0 [0211.113] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0211.117] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0211.117] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.117] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0211.130] CloseHandle (hObject=0x0) returned 0 [0211.130] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0211.133] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0211.134] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.134] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.145] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0211.145] CloseHandle (hObject=0x0) returned 0 [0211.145] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0211.148] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0211.149] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.149] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.163] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0211.163] CloseHandle (hObject=0x0) returned 0 [0211.163] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0211.166] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0211.167] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.167] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.178] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0211.178] CloseHandle (hObject=0x0) returned 0 [0211.179] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0211.182] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0211.183] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.183] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.194] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0211.194] CloseHandle (hObject=0x0) returned 0 [0211.194] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0211.197] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0211.198] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.198] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.215] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0211.215] GetLastError () returned 0x0 [0211.215] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0211.215] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0211.215] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0211.215] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0211.215] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0211.216] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0211.217] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0211.217] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0211.217] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0211.217] malloc (_Size=0x18) returned 0xd64330 [0211.217] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd64330, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64330*, lpNumberOfBytesRead=0x0) returned 1 [0211.218] free (_Block=0xd64330) [0211.218] CloseHandle (hObject=0x244) returned 1 [0211.218] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0211.224] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0211.225] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.225] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.236] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0211.236] GetLastError () returned 0x0 [0211.236] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0211.236] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0211.236] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0211.236] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0211.236] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0211.237] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0211.238] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0211.238] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0211.238] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0211.238] malloc (_Size=0x32) returned 0xd60f30 [0211.238] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd60f30, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60f30*, lpNumberOfBytesRead=0x0) returned 1 [0211.239] free (_Block=0xd60f30) [0211.240] CloseHandle (hObject=0x244) returned 1 [0211.240] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0211.243] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0211.244] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.244] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.257] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0211.257] GetLastError () returned 0x0 [0211.257] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0211.257] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0211.257] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0211.257] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0211.257] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0211.258] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0211.259] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0211.259] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0211.259] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0211.259] malloc (_Size=0x64) returned 0xd60090 [0211.259] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60090, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60090*, lpNumberOfBytesRead=0x0) returned 1 [0211.260] free (_Block=0xd60090) [0211.260] CloseHandle (hObject=0x244) returned 1 [0211.261] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0211.264] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0211.265] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.265] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.278] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0211.278] CloseHandle (hObject=0x0) returned 0 [0211.278] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0211.282] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0211.283] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.283] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.294] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0211.294] GetLastError () returned 0x0 [0211.294] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0211.294] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0211.294] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0211.294] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0211.294] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0211.295] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0211.296] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0211.296] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0211.296] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0211.296] malloc (_Size=0x118) returned 0xd647f0 [0211.296] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd647f0, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647f0*, lpNumberOfBytesRead=0x0) returned 1 [0211.297] free (_Block=0xd647f0) [0211.304] CloseHandle (hObject=0x244) returned 1 [0211.304] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0211.307] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0211.308] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.308] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.321] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0211.321] GetLastError () returned 0x0 [0211.321] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0211.321] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0211.321] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0211.321] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0211.321] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0211.322] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0211.323] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0211.323] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0211.323] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0211.323] malloc (_Size=0x6c) returned 0xd96300 [0211.323] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd96300, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd96300*, lpNumberOfBytesRead=0x0) returned 1 [0211.324] free (_Block=0xd96300) [0211.324] CloseHandle (hObject=0x244) returned 1 [0211.325] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0211.328] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0211.328] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.328] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.340] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0211.340] GetLastError () returned 0x0 [0211.340] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0211.340] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0211.340] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0211.340] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0211.340] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0211.341] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0211.342] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0211.342] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0211.342] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0211.342] malloc (_Size=0x11a) returned 0xd647e0 [0211.342] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd647e0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647e0*, lpNumberOfBytesRead=0x0) returned 1 [0211.343] free (_Block=0xd647e0) [0211.343] CloseHandle (hObject=0x244) returned 1 [0211.343] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0211.347] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0211.347] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.347] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.358] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0211.358] GetLastError () returned 0x0 [0211.358] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0211.358] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0211.359] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0211.359] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0211.359] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0211.359] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0211.361] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0211.361] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0211.361] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0211.362] malloc (_Size=0x48) returned 0xd5c570 [0211.362] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0211.362] free (_Block=0xd5c570) [0211.363] CloseHandle (hObject=0x244) returned 1 [0211.363] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0211.366] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0211.367] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.367] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.380] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0211.380] GetLastError () returned 0x0 [0211.380] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0211.380] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0211.380] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0211.381] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0211.381] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0211.381] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0211.382] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0211.382] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0211.382] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0211.382] malloc (_Size=0xda) returned 0xd64730 [0211.383] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd64730, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64730*, lpNumberOfBytesRead=0x0) returned 1 [0211.383] free (_Block=0xd64730) [0211.384] CloseHandle (hObject=0x244) returned 1 [0211.435] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0211.438] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0211.439] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.439] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.450] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0211.450] GetLastError () returned 0x0 [0211.450] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0211.450] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0211.450] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0211.450] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0211.450] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0211.451] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0211.452] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0211.452] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0211.452] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0211.452] malloc (_Size=0x6e) returned 0xd95980 [0211.452] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd95980, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd95980*, lpNumberOfBytesRead=0x0) returned 1 [0211.453] free (_Block=0xd95980) [0211.454] CloseHandle (hObject=0x244) returned 1 [0211.454] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0211.457] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0211.458] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.458] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.493] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0211.493] GetLastError () returned 0x0 [0211.493] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0211.494] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0211.494] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0211.494] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0211.494] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0211.494] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0211.495] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0211.495] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0211.495] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0211.496] malloc (_Size=0x64) returned 0xd60100 [0211.496] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd60100, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60100*, lpNumberOfBytesRead=0x0) returned 1 [0211.496] free (_Block=0xd60100) [0211.497] CloseHandle (hObject=0x244) returned 1 [0211.497] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0211.500] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0211.501] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.501] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.512] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0211.512] CloseHandle (hObject=0x0) returned 0 [0211.514] free (_Block=0xd7d420) [0211.515] malloc (_Size=0x48) returned 0xd5c570 [0211.515] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0x40706d9, dwHighDateTime=0x1d92b8f)) [0211.515] SetEvent (hEvent=0x24c) returned 1 [0211.525] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x5783c0 [0211.525] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5783c0, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0211.525] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0211.525] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578430) returned 1 [0211.677] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0211.788] RtlRestoreLastWin32Error () returned 0x3f1000 [0211.788] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0211.788] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578470 [0211.788] RtlRestoreLastWin32Error () returned 0x3f1000 [0211.788] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578470, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578470, pcchLanguagesBuffer=0x115dff0) returned 1 [0211.788] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578410 [0211.788] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578470) returned 1 [0211.788] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596880 [0211.788] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596880, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0211.788] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596880) returned 1 [0211.789] SafeArrayGetElemsize (psa=0x5938d0) returned 0x8 [0211.789] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d898, pv=0x597ca8) returned 0x0 [0211.789] SafeArrayRedim (in: psa=0x5938d0, psaboundNew=0x115d8b0 | out: psa=0x5938d0) returned 0x0 [0211.789] SafeArrayCopy (in: psa=0x5938d0, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0211.790] SetEvent (hEvent=0x24c) returned 1 [0211.791] free (_Block=0xd5c570) [0211.791] GetCurrentThread () returned 0xfffffffffffffffe [0211.791] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0211.791] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0211.794] RtlRestoreLastWin32Error () returned 0x3f1000 [0211.794] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0211.794] GetLastError () returned 0x514 [0211.794] CloseHandle (hObject=0x244) returned 1 [0211.794] malloc (_Size=0x18) returned 0xd64310 [0211.794] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d660, pv=0x593648) returned 0x0 [0211.794] SafeArrayPutElement (psa=0x593950, rgIndices=0x115d660, pv=0x593648) returned 0x0 [0211.794] free (_Block=0xd64310) [0211.794] malloc (_Size=0x8000) returned 0xd97850 [0211.794] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd97850, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd97850, ResultLength=0x0) returned 0xc0000004 [0211.796] free (_Block=0xd97850) [0211.797] malloc (_Size=0x10000) returned 0xd65580 [0211.799] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65580, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65580, ResultLength=0x0) returned 0xc0000004 [0211.801] free (_Block=0xd65580) [0211.802] malloc (_Size=0x18000) returned 0xd7d420 [0211.802] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd7d420, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd7d420, ResultLength=0x0) returned 0x0 [0211.803] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0211.806] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0211.807] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.807] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.823] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0211.823] CloseHandle (hObject=0x0) returned 0 [0211.823] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0211.826] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0211.827] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.827] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.849] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0211.849] CloseHandle (hObject=0x0) returned 0 [0211.850] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0211.853] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0211.854] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.854] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.867] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0211.867] CloseHandle (hObject=0x0) returned 0 [0211.867] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0211.870] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0211.871] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.871] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.885] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0211.885] CloseHandle (hObject=0x0) returned 0 [0211.886] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0211.889] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0211.890] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.890] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.903] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0211.903] CloseHandle (hObject=0x0) returned 0 [0211.904] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0211.909] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0211.910] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.910] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.921] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0211.921] CloseHandle (hObject=0x0) returned 0 [0211.921] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0211.928] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0211.929] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.929] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.942] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0211.942] CloseHandle (hObject=0x0) returned 0 [0211.942] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0211.945] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0211.946] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.946] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.959] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0211.959] CloseHandle (hObject=0x0) returned 0 [0211.960] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0211.963] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0211.964] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.964] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.979] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0211.979] CloseHandle (hObject=0x0) returned 0 [0211.979] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0211.982] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0211.983] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0211.983] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0211.996] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0211.996] CloseHandle (hObject=0x0) returned 0 [0211.997] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0212.000] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0212.003] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.003] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.014] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0212.014] CloseHandle (hObject=0x0) returned 0 [0212.015] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0212.020] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0212.021] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.021] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.036] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0212.036] CloseHandle (hObject=0x0) returned 0 [0212.036] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0212.039] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0212.040] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.040] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.053] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0212.053] CloseHandle (hObject=0x0) returned 0 [0212.054] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0212.057] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0212.058] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.058] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.072] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0212.072] CloseHandle (hObject=0x0) returned 0 [0212.072] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0212.075] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0212.076] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.076] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.090] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0212.090] CloseHandle (hObject=0x0) returned 0 [0212.090] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0212.093] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0212.096] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.096] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.107] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0212.107] CloseHandle (hObject=0x0) returned 0 [0212.108] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0212.114] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0212.115] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.115] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.128] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0212.128] CloseHandle (hObject=0x0) returned 0 [0212.129] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0212.132] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0212.133] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.133] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.149] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0212.149] CloseHandle (hObject=0x0) returned 0 [0212.149] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0212.152] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0212.153] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.153] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.167] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0212.167] CloseHandle (hObject=0x0) returned 0 [0212.167] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0212.170] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0212.171] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.171] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.184] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0212.184] CloseHandle (hObject=0x0) returned 0 [0212.185] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0212.189] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0212.190] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.190] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.202] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0212.202] CloseHandle (hObject=0x0) returned 0 [0212.202] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0212.208] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0212.209] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.209] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.223] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0212.223] GetLastError () returned 0x0 [0212.223] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0212.223] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0212.223] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0212.223] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0212.223] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0212.224] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0212.225] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0212.225] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0212.225] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0212.225] malloc (_Size=0x18) returned 0xd644f0 [0212.225] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd644f0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd644f0*, lpNumberOfBytesRead=0x0) returned 1 [0212.225] free (_Block=0xd644f0) [0212.225] CloseHandle (hObject=0x244) returned 1 [0212.226] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0212.229] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0212.230] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.230] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.243] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0212.243] GetLastError () returned 0x0 [0212.243] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0212.243] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0212.243] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0212.243] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0212.243] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0212.244] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0212.244] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0212.245] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0212.245] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0212.245] malloc (_Size=0x32) returned 0xd609b0 [0212.245] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd609b0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd609b0*, lpNumberOfBytesRead=0x0) returned 1 [0212.246] free (_Block=0xd609b0) [0212.246] CloseHandle (hObject=0x244) returned 1 [0212.246] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0212.249] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0212.254] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.254] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.265] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0212.265] GetLastError () returned 0x0 [0212.265] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0212.265] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0212.265] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0212.266] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0212.268] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0212.269] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0212.270] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0212.270] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0212.270] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0212.270] malloc (_Size=0x64) returned 0xd60100 [0212.270] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60100, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60100*, lpNumberOfBytesRead=0x0) returned 1 [0212.271] free (_Block=0xd60100) [0212.272] CloseHandle (hObject=0x244) returned 1 [0212.272] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0212.275] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0212.276] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.276] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.289] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0212.289] CloseHandle (hObject=0x0) returned 0 [0212.289] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0212.292] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0212.293] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.293] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.317] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0212.317] GetLastError () returned 0x0 [0212.318] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0212.318] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0212.318] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0212.318] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0212.318] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0212.319] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0212.319] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0212.319] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0212.320] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0212.320] malloc (_Size=0x118) returned 0xd647f0 [0212.320] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd647f0, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647f0*, lpNumberOfBytesRead=0x0) returned 1 [0212.321] free (_Block=0xd647f0) [0212.321] CloseHandle (hObject=0x244) returned 1 [0212.321] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0212.324] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0212.325] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.325] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.337] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0212.338] GetLastError () returned 0x0 [0212.338] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0212.338] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0212.338] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0212.338] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0212.338] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0212.339] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0212.339] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0212.339] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0212.340] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0212.340] malloc (_Size=0x6c) returned 0xd96000 [0212.340] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd96000, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd96000*, lpNumberOfBytesRead=0x0) returned 1 [0212.340] free (_Block=0xd96000) [0212.341] CloseHandle (hObject=0x244) returned 1 [0212.341] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0212.346] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0212.346] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.346] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.357] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0212.357] GetLastError () returned 0x0 [0212.357] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0212.358] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0212.358] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0212.358] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0212.358] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0212.358] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0212.359] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0212.359] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0212.362] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0212.362] malloc (_Size=0x11a) returned 0xd647e0 [0212.362] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd647e0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647e0*, lpNumberOfBytesRead=0x0) returned 1 [0212.363] free (_Block=0xd647e0) [0212.363] CloseHandle (hObject=0x244) returned 1 [0212.363] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0212.366] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0212.367] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.367] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.378] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0212.378] GetLastError () returned 0x0 [0212.379] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0212.379] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0212.379] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0212.379] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0212.379] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0212.380] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0212.380] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0212.380] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0212.380] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0212.381] malloc (_Size=0x48) returned 0xd5c570 [0212.381] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0212.381] free (_Block=0xd5c570) [0212.382] CloseHandle (hObject=0x244) returned 1 [0212.382] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0212.385] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0212.386] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.386] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.397] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0212.397] GetLastError () returned 0x0 [0212.398] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0212.398] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0212.398] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0212.398] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0212.398] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0212.398] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0212.399] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0212.399] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0212.399] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0212.400] malloc (_Size=0xda) returned 0xd64730 [0212.400] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd64730, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64730*, lpNumberOfBytesRead=0x0) returned 1 [0212.400] free (_Block=0xd64730) [0212.401] CloseHandle (hObject=0x244) returned 1 [0212.460] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0212.462] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0212.463] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.463] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.478] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0212.479] GetLastError () returned 0x0 [0212.479] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0212.479] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0212.479] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0212.479] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0212.479] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0212.480] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0212.480] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0212.480] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0212.481] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0212.481] malloc (_Size=0x6e) returned 0xd95980 [0212.481] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd95980, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd95980*, lpNumberOfBytesRead=0x0) returned 1 [0212.482] free (_Block=0xd95980) [0212.482] CloseHandle (hObject=0x244) returned 1 [0212.482] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0212.485] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0212.488] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.488] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.499] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0212.499] GetLastError () returned 0x0 [0212.499] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0212.499] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0212.499] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0212.500] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0212.500] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0212.521] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0212.522] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0212.522] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0212.522] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0212.523] malloc (_Size=0x64) returned 0xd60250 [0212.523] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd60250, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60250*, lpNumberOfBytesRead=0x0) returned 1 [0212.523] free (_Block=0xd60250) [0212.524] CloseHandle (hObject=0x244) returned 1 [0212.524] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0212.527] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0212.528] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.528] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.542] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0212.542] CloseHandle (hObject=0x0) returned 0 [0212.544] free (_Block=0xd7d420) [0212.544] malloc (_Size=0x48) returned 0xd5c570 [0212.544] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0x4a45eed, dwHighDateTime=0x1d92b8f)) [0212.544] SetEvent (hEvent=0x24c) returned 1 [0212.552] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578420 [0212.553] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578420, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0212.553] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578420) returned 1 [0212.553] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578410) returned 1 [0212.674] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0212.770] RtlRestoreLastWin32Error () returned 0x3f1000 [0212.770] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0212.770] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578410 [0212.770] RtlRestoreLastWin32Error () returned 0x3f1000 [0212.770] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578410, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578410, pcchLanguagesBuffer=0x115dff0) returned 1 [0212.770] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578420 [0212.770] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578410) returned 1 [0212.770] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596580 [0212.770] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596580, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0212.770] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596580) returned 1 [0212.771] SafeArrayGetElemsize (psa=0x592f90) returned 0x8 [0212.771] SafeArrayPutElement (psa=0x592f90, rgIndices=0x115d898, pv=0x598158) returned 0x0 [0212.771] SafeArrayRedim (in: psa=0x592f90, psaboundNew=0x115d8b0 | out: psa=0x592f90) returned 0x0 [0212.771] SafeArrayCopy (in: psa=0x592f90, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0212.772] SetEvent (hEvent=0x24c) returned 1 [0212.774] free (_Block=0xd5c570) [0212.774] GetCurrentThread () returned 0xfffffffffffffffe [0212.774] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0212.774] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0212.775] RtlRestoreLastWin32Error () returned 0x3f1000 [0212.775] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0212.775] GetLastError () returned 0x514 [0212.775] CloseHandle (hObject=0x244) returned 1 [0212.775] malloc (_Size=0x18) returned 0xd63eb0 [0212.775] SafeArrayPutElement (psa=0x593610, rgIndices=0x115d660, pv=0x593a08) returned 0x0 [0212.775] SafeArrayPutElement (psa=0x593350, rgIndices=0x115d660, pv=0x593a08) returned 0x0 [0212.775] free (_Block=0xd63eb0) [0212.775] malloc (_Size=0x8000) returned 0xd97850 [0212.775] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd97850, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd97850, ResultLength=0x0) returned 0xc0000004 [0212.777] free (_Block=0xd97850) [0212.778] malloc (_Size=0x10000) returned 0xd65580 [0212.778] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65580, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65580, ResultLength=0x0) returned 0xc0000004 [0212.781] free (_Block=0xd65580) [0212.781] malloc (_Size=0x18000) returned 0xd7d420 [0212.781] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd7d420, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd7d420, ResultLength=0x0) returned 0x0 [0212.782] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0212.787] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0212.788] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.788] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.808] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0212.808] CloseHandle (hObject=0x0) returned 0 [0212.808] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0212.811] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0212.812] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.812] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.825] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0212.825] CloseHandle (hObject=0x0) returned 0 [0212.825] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0212.834] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0212.835] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.835] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.849] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0212.849] CloseHandle (hObject=0x0) returned 0 [0212.850] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0212.853] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0212.853] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.853] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.868] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0212.869] CloseHandle (hObject=0x0) returned 0 [0212.869] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0212.872] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0212.873] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.873] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.885] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0212.885] CloseHandle (hObject=0x0) returned 0 [0212.886] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0212.889] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0212.889] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.890] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.902] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0212.902] CloseHandle (hObject=0x0) returned 0 [0212.903] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0212.906] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0212.911] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.911] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.923] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0212.923] CloseHandle (hObject=0x0) returned 0 [0212.923] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0212.928] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0212.928] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.928] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.941] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0212.941] CloseHandle (hObject=0x0) returned 0 [0212.941] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0212.944] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0212.945] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.945] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.958] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0212.958] CloseHandle (hObject=0x0) returned 0 [0212.959] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0212.962] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0212.963] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.963] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.976] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0212.976] CloseHandle (hObject=0x0) returned 0 [0212.976] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0212.979] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0212.980] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.980] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0212.993] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0212.993] CloseHandle (hObject=0x0) returned 0 [0212.993] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0212.996] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0212.997] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0212.997] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.011] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0213.011] CloseHandle (hObject=0x0) returned 0 [0213.012] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0213.015] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0213.015] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.015] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.030] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0213.030] CloseHandle (hObject=0x0) returned 0 [0213.030] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0213.035] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0213.036] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.036] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.049] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0213.049] CloseHandle (hObject=0x0) returned 0 [0213.050] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0213.052] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0213.053] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.053] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.066] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0213.066] CloseHandle (hObject=0x0) returned 0 [0213.067] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0213.070] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0213.070] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.070] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.084] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0213.084] CloseHandle (hObject=0x0) returned 0 [0213.084] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0213.087] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0213.088] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.088] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.102] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0213.102] CloseHandle (hObject=0x0) returned 0 [0213.102] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0213.105] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0213.106] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.106] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.119] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0213.119] CloseHandle (hObject=0x0) returned 0 [0213.119] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0213.122] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0213.123] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.123] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.138] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0213.138] CloseHandle (hObject=0x0) returned 0 [0213.138] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0213.144] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0213.145] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.145] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.156] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0213.156] CloseHandle (hObject=0x0) returned 0 [0213.158] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0213.161] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0213.162] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.162] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.176] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0213.176] CloseHandle (hObject=0x0) returned 0 [0213.176] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0213.179] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0213.180] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.180] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.194] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0213.194] GetLastError () returned 0x0 [0213.194] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0213.194] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0213.194] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0213.194] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0213.194] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0213.195] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0213.196] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0213.196] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0213.196] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0213.196] malloc (_Size=0x18) returned 0xd643f0 [0213.196] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd643f0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd643f0*, lpNumberOfBytesRead=0x0) returned 1 [0213.196] free (_Block=0xd643f0) [0213.196] CloseHandle (hObject=0x244) returned 1 [0213.197] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0213.200] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0213.201] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.201] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.214] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0213.214] GetLastError () returned 0x0 [0213.214] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0213.215] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0213.215] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0213.215] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0213.215] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0213.215] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0213.216] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0213.216] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0213.216] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0213.217] malloc (_Size=0x32) returned 0xd60ff0 [0213.217] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd60ff0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60ff0*, lpNumberOfBytesRead=0x0) returned 1 [0213.217] free (_Block=0xd60ff0) [0213.218] CloseHandle (hObject=0x244) returned 1 [0213.218] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0213.223] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0213.224] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.224] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.241] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0213.241] GetLastError () returned 0x0 [0213.241] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0213.241] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0213.241] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0213.241] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0213.241] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0213.242] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0213.243] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0213.243] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0213.243] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0213.243] malloc (_Size=0x64) returned 0xd60100 [0213.243] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60100, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60100*, lpNumberOfBytesRead=0x0) returned 1 [0213.244] free (_Block=0xd60100) [0213.244] CloseHandle (hObject=0x244) returned 1 [0213.245] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0213.248] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0213.248] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.248] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.262] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0213.262] CloseHandle (hObject=0x0) returned 0 [0213.262] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0213.265] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0213.266] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.266] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.277] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0213.278] GetLastError () returned 0x0 [0213.278] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0213.278] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0213.278] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0213.278] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0213.278] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0213.279] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0213.279] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0213.279] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0213.280] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0213.280] malloc (_Size=0x118) returned 0xd647f0 [0213.280] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd647f0, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647f0*, lpNumberOfBytesRead=0x0) returned 1 [0213.281] free (_Block=0xd647f0) [0213.281] CloseHandle (hObject=0x244) returned 1 [0213.282] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0213.285] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0213.286] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.286] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.304] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0213.304] GetLastError () returned 0x0 [0213.304] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0213.304] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0213.304] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0213.304] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0213.304] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0213.305] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0213.306] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0213.306] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0213.306] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0213.306] malloc (_Size=0x6c) returned 0xd96000 [0213.306] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd96000, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd96000*, lpNumberOfBytesRead=0x0) returned 1 [0213.307] free (_Block=0xd96000) [0213.307] CloseHandle (hObject=0x244) returned 1 [0213.308] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0213.311] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0213.312] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.312] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.323] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0213.323] GetLastError () returned 0x0 [0213.323] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0213.323] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0213.323] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0213.323] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0213.323] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0213.324] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0213.325] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0213.325] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0213.325] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0213.325] malloc (_Size=0x11a) returned 0xd647e0 [0213.325] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd647e0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647e0*, lpNumberOfBytesRead=0x0) returned 1 [0213.326] free (_Block=0xd647e0) [0213.326] CloseHandle (hObject=0x244) returned 1 [0213.327] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0213.452] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0213.452] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.452] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.467] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0213.467] GetLastError () returned 0x0 [0213.467] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0213.467] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0213.467] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0213.467] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0213.467] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0213.468] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0213.470] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0213.470] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0213.470] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0213.470] malloc (_Size=0x48) returned 0xd5c570 [0213.470] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0213.471] free (_Block=0xd5c570) [0213.472] CloseHandle (hObject=0x244) returned 1 [0213.472] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0213.475] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0213.476] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.476] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.487] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0213.487] GetLastError () returned 0x0 [0213.487] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0213.487] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0213.487] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0213.488] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0213.488] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0213.488] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0213.489] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0213.489] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0213.489] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0213.489] malloc (_Size=0xda) returned 0xd64730 [0213.489] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd64730, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64730*, lpNumberOfBytesRead=0x0) returned 1 [0213.490] free (_Block=0xd64730) [0213.490] CloseHandle (hObject=0x244) returned 1 [0213.546] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0213.549] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0213.550] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.550] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.561] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0213.561] GetLastError () returned 0x0 [0213.561] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0213.561] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0213.561] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0213.561] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0213.561] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0213.562] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0213.565] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0213.565] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0213.565] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0213.565] malloc (_Size=0x6e) returned 0xd95c80 [0213.565] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd95c80, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd95c80*, lpNumberOfBytesRead=0x0) returned 1 [0213.566] free (_Block=0xd95c80) [0213.566] CloseHandle (hObject=0x244) returned 1 [0213.567] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0213.570] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0213.571] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.571] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.602] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0213.602] GetLastError () returned 0x0 [0213.602] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0213.602] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0213.603] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0213.603] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0213.603] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0213.603] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0213.604] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0213.604] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0213.604] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0213.604] malloc (_Size=0x64) returned 0xd60330 [0213.604] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd60330, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60330*, lpNumberOfBytesRead=0x0) returned 1 [0213.605] free (_Block=0xd60330) [0213.606] CloseHandle (hObject=0x244) returned 1 [0213.606] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0213.609] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0213.610] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.610] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.621] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0213.621] CloseHandle (hObject=0x0) returned 0 [0213.623] free (_Block=0xd7d420) [0213.623] malloc (_Size=0x48) returned 0xd5c570 [0213.623] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0x548e239, dwHighDateTime=0x1d92b8f)) [0213.624] SetEvent (hEvent=0x24c) returned 1 [0213.633] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578390 [0213.633] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578390, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0213.633] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0213.633] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578420) returned 1 [0213.794] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0213.886] RtlRestoreLastWin32Error () returned 0x3f1000 [0213.886] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0213.886] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783c0 [0213.886] RtlRestoreLastWin32Error () returned 0x3f1000 [0213.886] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x5783c0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x5783c0, pcchLanguagesBuffer=0x115dff0) returned 1 [0213.886] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578410 [0213.886] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0213.886] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596280 [0213.886] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596280, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0213.886] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596280) returned 1 [0213.887] SafeArrayGetElemsize (psa=0x593810) returned 0x8 [0213.887] SafeArrayPutElement (psa=0x593810, rgIndices=0x115d898, pv=0x597c18) returned 0x0 [0213.887] SafeArrayRedim (in: psa=0x593810, psaboundNew=0x115d8b0 | out: psa=0x593810) returned 0x0 [0213.887] SafeArrayCopy (in: psa=0x593810, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0213.888] SetEvent (hEvent=0x24c) returned 1 [0213.889] free (_Block=0xd5c570) [0213.889] GetCurrentThread () returned 0xfffffffffffffffe [0213.889] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0213.889] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0213.890] RtlRestoreLastWin32Error () returned 0x3f1000 [0213.890] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0213.890] GetLastError () returned 0x514 [0213.890] CloseHandle (hObject=0x244) returned 1 [0213.890] malloc (_Size=0x18) returned 0xd644b0 [0213.890] SafeArrayPutElement (psa=0x593b10, rgIndices=0x115d660, pv=0x5935c8) returned 0x0 [0213.890] SafeArrayPutElement (psa=0x593750, rgIndices=0x115d660, pv=0x5935c8) returned 0x0 [0213.890] free (_Block=0xd644b0) [0213.890] malloc (_Size=0x8000) returned 0xd97850 [0213.891] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd97850, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd97850, ResultLength=0x0) returned 0xc0000004 [0213.896] free (_Block=0xd97850) [0213.897] malloc (_Size=0x10000) returned 0xd65580 [0213.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65580, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65580, ResultLength=0x0) returned 0xc0000004 [0213.899] free (_Block=0xd65580) [0213.900] malloc (_Size=0x18000) returned 0xd7d420 [0213.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd7d420, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd7d420, ResultLength=0x0) returned 0x0 [0213.901] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0213.905] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0213.905] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.905] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.917] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0213.917] CloseHandle (hObject=0x0) returned 0 [0213.918] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0213.921] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0213.921] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.921] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.935] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0213.935] CloseHandle (hObject=0x0) returned 0 [0213.936] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0213.939] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0213.940] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.940] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.951] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0213.951] CloseHandle (hObject=0x0) returned 0 [0213.952] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0213.955] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0213.956] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.956] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.967] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0213.967] CloseHandle (hObject=0x0) returned 0 [0213.967] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0213.972] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0213.973] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.973] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0213.984] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0213.984] CloseHandle (hObject=0x0) returned 0 [0213.984] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0213.988] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0213.989] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0213.989] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.003] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0214.003] CloseHandle (hObject=0x0) returned 0 [0214.003] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0214.006] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0214.007] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.007] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.019] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0214.019] CloseHandle (hObject=0x0) returned 0 [0214.019] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0214.022] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0214.023] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.023] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.034] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0214.034] CloseHandle (hObject=0x0) returned 0 [0214.034] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0214.038] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0214.038] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.038] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.050] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0214.050] CloseHandle (hObject=0x0) returned 0 [0214.051] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0214.054] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0214.055] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.055] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.066] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0214.066] CloseHandle (hObject=0x0) returned 0 [0214.067] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0214.070] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0214.071] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.071] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.082] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0214.082] CloseHandle (hObject=0x0) returned 0 [0214.083] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0214.086] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0214.086] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.087] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.098] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0214.098] CloseHandle (hObject=0x0) returned 0 [0214.098] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0214.101] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0214.102] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.102] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.117] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0214.117] CloseHandle (hObject=0x0) returned 0 [0214.117] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0214.120] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0214.121] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.121] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.132] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0214.132] CloseHandle (hObject=0x0) returned 0 [0214.132] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0214.135] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0214.136] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.136] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.148] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0214.148] CloseHandle (hObject=0x0) returned 0 [0214.148] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0214.151] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0214.152] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.152] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.163] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0214.163] CloseHandle (hObject=0x0) returned 0 [0214.164] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0214.167] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0214.167] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.168] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.179] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0214.179] CloseHandle (hObject=0x0) returned 0 [0214.179] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0214.182] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0214.183] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.183] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.194] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0214.194] CloseHandle (hObject=0x0) returned 0 [0214.195] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0214.198] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0214.198] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.198] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.211] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0214.211] CloseHandle (hObject=0x0) returned 0 [0214.211] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0214.214] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0214.215] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.215] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.228] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0214.228] CloseHandle (hObject=0x0) returned 0 [0214.229] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0214.232] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0214.233] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.233] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.244] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0214.244] CloseHandle (hObject=0x0) returned 0 [0214.244] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0214.247] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0214.248] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.248] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.262] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0214.262] GetLastError () returned 0x0 [0214.262] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0214.262] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0214.262] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0214.262] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0214.262] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0214.263] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0214.264] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0214.264] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0214.264] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0214.264] malloc (_Size=0x18) returned 0xd643b0 [0214.264] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd643b0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd643b0*, lpNumberOfBytesRead=0x0) returned 1 [0214.264] free (_Block=0xd643b0) [0214.265] CloseHandle (hObject=0x244) returned 1 [0214.265] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0214.268] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0214.269] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.269] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.280] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0214.280] GetLastError () returned 0x0 [0214.281] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0214.281] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0214.281] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0214.281] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0214.281] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0214.282] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0214.282] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0214.282] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0214.283] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0214.283] malloc (_Size=0x32) returned 0xd615b0 [0214.283] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd615b0, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd615b0*, lpNumberOfBytesRead=0x0) returned 1 [0214.284] free (_Block=0xd615b0) [0214.285] CloseHandle (hObject=0x244) returned 1 [0214.285] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0214.288] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0214.289] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.289] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.308] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0214.308] GetLastError () returned 0x0 [0214.308] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0214.308] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0214.308] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0214.308] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0214.309] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0214.309] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0214.310] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0214.310] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0214.310] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0214.310] malloc (_Size=0x64) returned 0xd60410 [0214.310] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60410, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60410*, lpNumberOfBytesRead=0x0) returned 1 [0214.311] free (_Block=0xd60410) [0214.312] CloseHandle (hObject=0x244) returned 1 [0214.312] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0214.315] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0214.316] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.316] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.327] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0214.327] CloseHandle (hObject=0x0) returned 0 [0214.328] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0214.333] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0214.334] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.334] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.346] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0214.346] GetLastError () returned 0x0 [0214.346] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0214.347] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0214.347] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0214.347] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0214.347] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0214.347] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0214.348] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0214.348] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0214.348] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0214.349] malloc (_Size=0x118) returned 0xd647f0 [0214.349] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd647f0, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647f0*, lpNumberOfBytesRead=0x0) returned 1 [0214.349] free (_Block=0xd647f0) [0214.350] CloseHandle (hObject=0x244) returned 1 [0214.350] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0214.353] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0214.354] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.354] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.366] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0214.366] GetLastError () returned 0x0 [0214.366] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0214.366] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0214.366] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0214.366] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0214.366] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0214.367] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0214.367] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0214.368] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0214.368] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0214.368] malloc (_Size=0x6c) returned 0xd95880 [0214.368] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd95880, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd95880*, lpNumberOfBytesRead=0x0) returned 1 [0214.369] free (_Block=0xd95880) [0214.369] CloseHandle (hObject=0x244) returned 1 [0214.369] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0214.372] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0214.373] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.373] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.384] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0214.384] GetLastError () returned 0x0 [0214.385] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0214.385] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0214.385] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0214.385] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0214.385] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0214.386] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0214.386] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0214.386] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0214.387] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0214.387] malloc (_Size=0x11a) returned 0xd647e0 [0214.387] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd647e0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647e0*, lpNumberOfBytesRead=0x0) returned 1 [0214.388] free (_Block=0xd647e0) [0214.388] CloseHandle (hObject=0x244) returned 1 [0214.388] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0214.393] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0214.393] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.393] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.405] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0214.405] GetLastError () returned 0x0 [0214.405] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0214.405] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0214.405] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0214.405] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0214.405] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0214.406] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0214.408] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0214.408] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0214.408] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0214.408] malloc (_Size=0x48) returned 0xd5c570 [0214.408] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0214.409] free (_Block=0xd5c570) [0214.409] CloseHandle (hObject=0x244) returned 1 [0214.410] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0214.413] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0214.413] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.413] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.425] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0214.425] GetLastError () returned 0x0 [0214.425] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0214.425] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0214.426] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0214.426] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0214.426] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0214.426] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0214.427] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0214.427] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0214.427] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0214.428] malloc (_Size=0xda) returned 0xd64730 [0214.428] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd64730, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64730*, lpNumberOfBytesRead=0x0) returned 1 [0214.428] free (_Block=0xd64730) [0214.429] CloseHandle (hObject=0x244) returned 1 [0214.481] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0214.484] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0214.485] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.485] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.496] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0214.496] GetLastError () returned 0x0 [0214.496] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0214.496] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0214.497] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0214.497] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0214.497] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0214.497] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0214.498] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0214.498] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0214.498] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0214.499] malloc (_Size=0x6e) returned 0xd96280 [0214.499] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd96280, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd96280*, lpNumberOfBytesRead=0x0) returned 1 [0214.499] free (_Block=0xd96280) [0214.500] CloseHandle (hObject=0x244) returned 1 [0214.501] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0214.504] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0214.504] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.504] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.592] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0214.592] GetLastError () returned 0x0 [0214.592] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0214.592] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0214.593] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0214.593] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0214.593] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0214.593] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0214.594] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0214.594] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0214.595] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0214.595] malloc (_Size=0x64) returned 0xd601e0 [0214.595] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd601e0, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd601e0*, lpNumberOfBytesRead=0x0) returned 1 [0214.596] free (_Block=0xd601e0) [0214.596] CloseHandle (hObject=0x244) returned 1 [0214.597] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0214.600] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0214.601] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0214.601] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0214.613] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0214.613] CloseHandle (hObject=0x0) returned 0 [0214.615] free (_Block=0xd7d420) [0214.616] malloc (_Size=0x48) returned 0xd5c570 [0214.616] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0x5e17839, dwHighDateTime=0x1d92b8f)) [0214.616] SetEvent (hEvent=0x24c) returned 1 [0214.620] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x5783c0 [0214.620] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5783c0, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0214.620] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0214.621] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578410) returned 1 [0214.978] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0215.069] RtlRestoreLastWin32Error () returned 0x3f1000 [0215.069] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0215.069] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783f0 [0215.069] RtlRestoreLastWin32Error () returned 0x3f1000 [0215.069] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x5783f0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x5783f0, pcchLanguagesBuffer=0x115dff0) returned 1 [0215.069] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578470 [0215.069] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783f0) returned 1 [0215.070] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596500 [0215.070] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596500, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0215.070] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596500) returned 1 [0215.071] SafeArrayGetElemsize (psa=0x593650) returned 0x8 [0215.071] SafeArrayPutElement (psa=0x593650, rgIndices=0x115d898, pv=0x597d68) returned 0x0 [0215.071] SafeArrayRedim (in: psa=0x593650, psaboundNew=0x115d8b0 | out: psa=0x593650) returned 0x0 [0215.071] SafeArrayCopy (in: psa=0x593650, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0215.071] SetEvent (hEvent=0x24c) returned 1 [0215.072] free (_Block=0xd5c570) [0215.072] GetCurrentThread () returned 0xfffffffffffffffe [0215.072] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=1, TokenHandle=0x115d660 | out: TokenHandle=0x115d660*=0x244) returned 1 [0215.072] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x115d69c | out: lpLuid=0x115d69c*(LowPart=0x14, HighPart=0)) returned 1 [0215.073] RtlRestoreLastWin32Error () returned 0x3f1000 [0215.073] AdjustTokenPrivileges (in: TokenHandle=0x244, DisableAllPrivileges=0, NewState=0x115d698*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0215.073] GetLastError () returned 0x514 [0215.073] CloseHandle (hObject=0x244) returned 1 [0215.073] malloc (_Size=0x18) returned 0xd64270 [0215.073] SafeArrayPutElement (psa=0x593c10, rgIndices=0x115d660, pv=0x5930c8) returned 0x0 [0215.073] SafeArrayPutElement (psa=0x593bd0, rgIndices=0x115d660, pv=0x5930c8) returned 0x0 [0215.074] free (_Block=0xd64270) [0215.074] malloc (_Size=0x8000) returned 0xd96840 [0215.074] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd96840, Length=0x8000, ResultLength=0x0 | out: SystemInformation=0xd96840, ResultLength=0x0) returned 0xc0000004 [0215.075] free (_Block=0xd96840) [0215.076] malloc (_Size=0x10000) returned 0xd65580 [0215.076] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd65580, Length=0x10000, ResultLength=0x0 | out: SystemInformation=0xd65580, ResultLength=0x0) returned 0xc0000004 [0215.077] free (_Block=0xd65580) [0215.078] malloc (_Size=0x18000) returned 0xd7d420 [0215.079] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xd7d420, Length=0x18000, ResultLength=0x0 | out: SystemInformation=0xd7d420, ResultLength=0x0) returned 0x0 [0215.080] _ui64tow_s (in: _Value=0x0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="0") returned 0x0 [0215.083] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="0") returned 1 [0215.083] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5f862958, dwBuildNumber=0x7ffa, dwPlatformId=0x6, szCSDVersion="\n") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.083] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.098] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0215.098] CloseHandle (hObject=0x0) returned 0 [0215.098] _ui64tow_s (in: _Value=0x4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="4") returned 0x0 [0215.101] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="4") returned 1 [0215.102] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.102] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.114] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0215.114] CloseHandle (hObject=0x0) returned 0 [0215.114] _ui64tow_s (in: _Value=0x134, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="308") returned 0x0 [0215.117] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="308") returned 3 [0215.118] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.118] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.129] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x134) returned 0x0 [0215.129] CloseHandle (hObject=0x0) returned 0 [0215.129] _ui64tow_s (in: _Value=0x17c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="380") returned 0x0 [0215.132] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="380") returned 3 [0215.133] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.133] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.146] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0215.146] CloseHandle (hObject=0x0) returned 0 [0215.146] _ui64tow_s (in: _Value=0x1b8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="440") returned 0x0 [0215.149] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="440") returned 3 [0215.150] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.150] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.162] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b8) returned 0x0 [0215.162] CloseHandle (hObject=0x0) returned 0 [0215.162] _ui64tow_s (in: _Value=0x1c4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="452") returned 0x0 [0215.165] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="452") returned 3 [0215.166] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.166] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.177] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c4) returned 0x0 [0215.177] CloseHandle (hObject=0x0) returned 0 [0215.177] _ui64tow_s (in: _Value=0x1f8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="504") returned 0x0 [0215.180] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="504") returned 3 [0215.181] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.181] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.195] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0 [0215.195] CloseHandle (hObject=0x0) returned 0 [0215.195] _ui64tow_s (in: _Value=0x210, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="528") returned 0x0 [0215.198] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="528") returned 3 [0215.199] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.199] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.212] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x0 [0215.212] CloseHandle (hObject=0x0) returned 0 [0215.213] _ui64tow_s (in: _Value=0x218, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="536") returned 0x0 [0215.216] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="536") returned 3 [0215.217] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.217] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.228] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x0 [0215.228] CloseHandle (hObject=0x0) returned 0 [0215.228] _ui64tow_s (in: _Value=0x26c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="620") returned 0x0 [0215.231] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="620") returned 3 [0215.232] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.232] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.246] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x26c) returned 0x0 [0215.246] CloseHandle (hObject=0x0) returned 0 [0215.246] _ui64tow_s (in: _Value=0x298, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="664") returned 0x0 [0215.249] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="664") returned 3 [0215.250] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.250] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.261] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0215.261] CloseHandle (hObject=0x0) returned 0 [0215.262] _ui64tow_s (in: _Value=0x320, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="800") returned 0x0 [0215.265] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="800") returned 3 [0215.265] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.265] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.277] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x0 [0215.277] CloseHandle (hObject=0x0) returned 0 [0215.277] _ui64tow_s (in: _Value=0x360, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="864") returned 0x0 [0215.280] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="864") returned 3 [0215.281] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.281] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.316] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x0 [0215.316] CloseHandle (hObject=0x0) returned 0 [0215.316] _ui64tow_s (in: _Value=0x374, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="884") returned 0x0 [0215.319] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="884") returned 3 [0215.320] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.320] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.331] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0215.331] CloseHandle (hObject=0x0) returned 0 [0215.332] _ui64tow_s (in: _Value=0x38c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="908") returned 0x0 [0215.335] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="908") returned 3 [0215.335] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.335] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.348] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x38c) returned 0x0 [0215.348] CloseHandle (hObject=0x0) returned 0 [0215.348] _ui64tow_s (in: _Value=0x39c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="924") returned 0x0 [0215.351] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="924") returned 3 [0215.352] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.352] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.363] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x39c) returned 0x0 [0215.364] CloseHandle (hObject=0x0) returned 0 [0215.364] _ui64tow_s (in: _Value=0x3ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1004") returned 0x0 [0215.367] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1004") returned 4 [0215.368] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.368] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.379] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3ec) returned 0x0 [0215.379] CloseHandle (hObject=0x0) returned 0 [0215.379] _ui64tow_s (in: _Value=0x60, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="96") returned 0x0 [0215.382] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="96") returned 2 [0215.383] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.383] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.396] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x60) returned 0x0 [0215.396] CloseHandle (hObject=0x0) returned 0 [0215.396] _ui64tow_s (in: _Value=0x47c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1148") returned 0x0 [0215.399] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1148") returned 4 [0215.400] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.400] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.411] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0215.411] CloseHandle (hObject=0x0) returned 0 [0215.412] _ui64tow_s (in: _Value=0x4f0, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1264") returned 0x0 [0215.415] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1264") returned 4 [0215.416] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.416] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.429] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4f0) returned 0x0 [0215.429] CloseHandle (hObject=0x0) returned 0 [0215.429] _ui64tow_s (in: _Value=0x580, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1408") returned 0x0 [0215.432] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1408") returned 4 [0215.433] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.433] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.445] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x580) returned 0x0 [0215.445] CloseHandle (hObject=0x0) returned 0 [0215.445] _ui64tow_s (in: _Value=0x5ec, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1516") returned 0x0 [0215.448] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1516") returned 4 [0215.449] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.449] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.461] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5ec) returned 0x244 [0215.461] GetLastError () returned 0x0 [0215.461] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0215.461] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0215.461] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0215.461] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431bf0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0215.462] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4318c8, lpBuffer=0x115c580, nSize=0x3e, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0215.462] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0215.463] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0215.463] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x363020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0215.463] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0215.464] malloc (_Size=0x18) returned 0xd640d0 [0215.464] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x431906, lpBuffer=0xd640d0, nSize=0x16, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd640d0*, lpNumberOfBytesRead=0x0) returned 1 [0215.464] free (_Block=0xd640d0) [0215.464] CloseHandle (hObject=0x244) returned 1 [0215.465] _ui64tow_s (in: _Value=0x64c, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1612") returned 0x0 [0215.468] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1612") returned 4 [0215.468] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.468] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.480] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x64c) returned 0x244 [0215.480] GetLastError () returned 0x0 [0215.480] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0215.480] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0215.480] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0215.480] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551c50, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0215.480] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5518e8, lpBuffer=0x115c580, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0215.481] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0215.482] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0215.482] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x2db020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0215.482] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5512d0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0215.482] malloc (_Size=0x32) returned 0xd60f70 [0215.482] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x551918, lpBuffer=0xd60f70, nSize=0x30, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60f70*, lpNumberOfBytesRead=0x0) returned 1 [0215.483] free (_Block=0xd60f70) [0215.483] CloseHandle (hObject=0x244) returned 1 [0215.484] _ui64tow_s (in: _Value=0x694, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1684") returned 0x0 [0215.489] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1684") returned 4 [0215.490] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.490] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.501] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x694) returned 0x244 [0215.501] GetLastError () returned 0x0 [0215.501] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0215.501] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0215.502] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0215.502] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4034a0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0215.502] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4030e8, lpBuffer=0x115c580, nSize=0x4c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0215.502] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0215.503] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0215.503] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x280020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0215.503] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402ad0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0215.504] malloc (_Size=0x64) returned 0xd60100 [0215.504] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403134, lpBuffer=0xd60100, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60100*, lpNumberOfBytesRead=0x0) returned 1 [0215.504] free (_Block=0xd60100) [0215.505] CloseHandle (hObject=0x244) returned 1 [0215.505] _ui64tow_s (in: _Value=0x6cc, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1740") returned 0x0 [0215.508] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1740") returned 4 [0215.509] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.509] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.530] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6cc) returned 0x0 [0215.530] CloseHandle (hObject=0x0) returned 0 [0215.531] _ui64tow_s (in: _Value=0x5f4, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1524") returned 0x0 [0215.540] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1524") returned 4 [0215.541] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.541] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.555] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x244 [0215.555] GetLastError () returned 0x0 [0215.555] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0215.555] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0215.555] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0215.555] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603780, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0215.555] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032e8, lpBuffer=0x115c580, nSize=0xa0, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0215.556] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0215.557] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0215.557] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x343020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0215.557] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c60, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0215.557] malloc (_Size=0x118) returned 0xd647f0 [0215.557] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603388, lpBuffer=0xd647f0, nSize=0x116, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647f0*, lpNumberOfBytesRead=0x0) returned 1 [0215.558] free (_Block=0xd647f0) [0215.558] CloseHandle (hObject=0x244) returned 1 [0215.559] _ui64tow_s (in: _Value=0x860, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2144") returned 0x0 [0215.562] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2144") returned 4 [0215.564] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.564] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.575] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x860) returned 0x244 [0215.576] GetLastError () returned 0x0 [0215.576] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0215.576] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0215.576] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0215.576] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x531c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0215.576] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5318c8, lpBuffer=0x115c580, nSize=0x44, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0215.577] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0215.577] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0215.577] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3f6020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0215.578] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5312b0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0215.578] malloc (_Size=0x6c) returned 0xd95e00 [0215.578] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x53190c, lpBuffer=0xd95e00, nSize=0x6a, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd95e00*, lpNumberOfBytesRead=0x0) returned 1 [0215.579] free (_Block=0xd95e00) [0215.581] CloseHandle (hObject=0x244) returned 1 [0215.581] _ui64tow_s (in: _Value=0x974, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2420") returned 0x0 [0215.584] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2420") returned 4 [0215.585] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.585] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.596] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x974) returned 0x244 [0215.596] GetLastError () returned 0x0 [0215.596] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0215.596] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0215.596] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0215.597] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x603730, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0215.597] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6032b4, lpBuffer=0x115c580, nSize=0x96, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0215.597] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0215.598] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0215.598] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x22d020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0215.598] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x602c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0215.598] malloc (_Size=0x11a) returned 0xd647e0 [0215.598] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x60334a, lpBuffer=0xd647e0, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd647e0*, lpNumberOfBytesRead=0x0) returned 1 [0215.599] free (_Block=0xd647e0) [0215.600] CloseHandle (hObject=0x244) returned 1 [0215.600] _ui64tow_s (in: _Value=0x898, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2200") returned 0x0 [0215.603] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2200") returned 4 [0215.604] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.604] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.615] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x244 [0215.615] GetLastError () returned 0x0 [0215.615] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0215.615] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0215.615] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0215.615] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601c70, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0215.616] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6018f8, lpBuffer=0x115c580, nSize=0x40, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0215.616] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0215.617] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0215.617] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3b7020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0215.617] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x6012e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0215.617] malloc (_Size=0x48) returned 0xd5c570 [0215.617] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x601938, lpBuffer=0xd5c570, nSize=0x46, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd5c570*, lpNumberOfBytesRead=0x0) returned 1 [0215.618] free (_Block=0xd5c570) [0215.618] CloseHandle (hObject=0x244) returned 1 [0215.619] _ui64tow_s (in: _Value=0x750, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1872") returned 0x0 [0215.622] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1872") returned 4 [0215.623] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.623] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.636] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x750) returned 0x244 [0215.636] GetLastError () returned 0x0 [0215.636] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0215.636] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0215.636] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0215.636] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x403670, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0215.636] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x4032b4, lpBuffer=0x115c580, nSize=0x56, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0215.637] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0215.638] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0215.638] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x3bd020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0215.638] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x402c20, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0215.638] malloc (_Size=0xda) returned 0xd64730 [0215.638] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x40330a, lpBuffer=0xd64730, nSize=0xd8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd64730*, lpNumberOfBytesRead=0x0) returned 1 [0215.639] free (_Block=0xd64730) [0215.639] CloseHandle (hObject=0x244) returned 1 [0215.666] _ui64tow_s (in: _Value=0x9a8, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2472") returned 0x0 [0215.669] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2472") returned 4 [0215.670] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x5dcdec4f, dwBuildNumber=0x7ffa, dwPlatformId=0x115cb30, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.670] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.682] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9a8) returned 0x244 [0215.682] GetLastError () returned 0x0 [0215.682] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0215.682] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0215.682] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0215.682] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f1ce0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0215.682] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f18f8, lpBuffer=0x115c580, nSize=0x66, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0215.683] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0215.684] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0215.684] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x360020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0215.684] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f12e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0215.684] malloc (_Size=0x6e) returned 0xd96000 [0215.684] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5f195e, lpBuffer=0xd96000, nSize=0x6c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd96000*, lpNumberOfBytesRead=0x0) returned 1 [0215.685] free (_Block=0xd96000) [0215.685] CloseHandle (hObject=0x244) returned 1 [0215.686] _ui64tow_s (in: _Value=0x410, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="1040") returned 0x0 [0215.710] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="1040") returned 4 [0215.711] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.711] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.723] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x410) returned 0x244 [0215.723] GetLastError () returned 0x0 [0215.723] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c850, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c850, ReturnLength=0x0) returned 0x0 [0215.723] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379018, lpBuffer=0x115c820, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c820*, lpNumberOfBytesRead=0x0) returned 1 [0215.723] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x7ffa5f985220, lpBuffer=0x115c810, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c810*, lpNumberOfBytesRead=0x0) returned 1 [0215.723] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571cc0, lpBuffer=0x115cc30, nSize=0x118, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115cc30*, lpNumberOfBytesRead=0x0) returned 1 [0215.723] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5718f8, lpBuffer=0x115c580, nSize=0x5c, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c580*, lpNumberOfBytesRead=0x0) returned 1 [0215.724] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x1, ProcessInformation=0x115c880, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c880, ReturnLength=0x0) returned 0x0 [0215.725] NtQueryInformationProcess (in: ProcessHandle=0x244, ProcessInformationClass=0x0, ProcessInformation=0x115c358, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x115c358, ReturnLength=0x0) returned 0x0 [0215.725] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x379020, lpBuffer=0x115c340, nSize=0x8, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c340*, lpNumberOfBytesRead=0x0) returned 1 [0215.725] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x5712e0, lpBuffer=0x115c390, nSize=0x410, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x115c390*, lpNumberOfBytesRead=0x0) returned 1 [0215.725] malloc (_Size=0x64) returned 0xd60090 [0215.725] ReadProcessMemory (in: hProcess=0x244, lpBaseAddress=0x571954, lpBuffer=0xd60090, nSize=0x62, lpNumberOfBytesRead=0x0 | out: lpBuffer=0xd60090*, lpNumberOfBytesRead=0x0) returned 1 [0215.726] free (_Block=0xd60090) [0215.726] CloseHandle (hObject=0x244) returned 1 [0215.727] _ui64tow_s (in: _Value=0x874, _Buffer=0x115d750, _BufferCount=0x104, _Radix=10 | out: _Buffer="2164") returned 0x0 [0215.730] _vsnwprintf (in: _Buffer=0x115d470, _BufferCount=0x103, _Format="%lu", _ArgList=0x115c7f8 | out: _Buffer="2164") returned 4 [0215.730] GetVersionExW (in: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="") | out: lpVersionInformation=0x115c8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0215.730] _vsnwprintf (in: _Buffer=0x115d260, _BufferCount=0x103, _Format="%d.%d.%hu", _ArgList=0x115c7f8 | out: _Buffer="10.0.10586") returned 10 [0215.741] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x874) returned 0x0 [0215.742] CloseHandle (hObject=0x0) returned 0 [0215.744] free (_Block=0xd7d420) [0215.744] malloc (_Size=0x48) returned 0xd5c570 [0215.744] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6d0 | out: lpSystemTimeAsFileTime=0x115d6d0*(dwLowDateTime=0x68d20d7, dwHighDateTime=0x1d92b8f)) [0215.744] SetEvent (hEvent=0x24c) returned 1 [0215.784] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578390 [0215.784] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578390, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0215.784] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0215.784] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578470) returned 1 [0217.924] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0218.043] RtlRestoreLastWin32Error () returned 0x3f1000 [0218.043] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0218.043] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578390 [0218.043] RtlRestoreLastWin32Error () returned 0x3f1000 [0218.043] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578390, pcchLanguagesBuffer=0x115dff0) returned 1 [0218.043] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783c0 [0218.043] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578390) returned 1 [0218.043] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x5962c0 [0218.043] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5962c0, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0218.043] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5962c0) returned 1 [0218.052] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x4, lpflOldProtect=0x7ffa4cd67f20 | out: lpflOldProtect=0x7ffa4cd67f20*=0x2) returned 1 [0218.052] GetProcAddress (hModule=0x7ffa5d920000, lpProcName=0x8) returned 0x7ffa5d9acbc0 [0218.052] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x2, lpflOldProtect=0x115d7d0 | out: lpflOldProtect=0x115d7d0*=0x4) returned 1 [0218.053] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x4, lpflOldProtect=0x7ffa4cd67f20 | out: lpflOldProtect=0x7ffa4cd67f20*=0x2) returned 1 [0218.053] GetProcAddress (hModule=0x7ffa5d920000, lpProcName=0x9) returned 0x7ffa5d9ac230 [0218.053] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x2, lpflOldProtect=0x115d7d0 | out: lpflOldProtect=0x115d7d0*=0x4) returned 1 [0218.054] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x4, lpflOldProtect=0x7ffa4cd67f20 | out: lpflOldProtect=0x7ffa4cd67f20*=0x2) returned 1 [0218.054] LoadLibraryExA (lpLibFileName="DEVOBJ.dll", hFile=0x0, dwFlags=0x0) returned 0x7ffa5a8a0000 [0218.061] GetProcAddress (hModule=0x7ffa5a8a0000, lpProcName="DevObjCreateDeviceInfoList") returned 0x7ffa5a8a6740 [0218.061] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x2, lpflOldProtect=0x115d6e0 | out: lpflOldProtect=0x115d6e0*=0x4) returned 1 [0218.061] DevObjCreateDeviceInfoList () returned 0x59b6d0 [0218.061] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x4, lpflOldProtect=0x7ffa4cd67f20 | out: lpflOldProtect=0x7ffa4cd67f20*=0x2) returned 1 [0218.062] GetProcAddress (hModule=0x7ffa5a8a0000, lpProcName="DevObjGetClassDevs") returned 0x7ffa5a8a2ab0 [0218.062] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x2, lpflOldProtect=0x115d6e0 | out: lpflOldProtect=0x115d6e0*=0x4) returned 1 [0218.062] DevObjGetClassDevs () returned 0x1 [0218.065] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x4, lpflOldProtect=0x7ffa4cd67f20 | out: lpflOldProtect=0x7ffa4cd67f20*=0x2) returned 1 [0218.065] GetProcAddress (hModule=0x7ffa5a8a0000, lpProcName="DevObjEnumDeviceInfo") returned 0x7ffa5a8a5620 [0218.065] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x2, lpflOldProtect=0x115d6e0 | out: lpflOldProtect=0x115d6e0*=0x4) returned 1 [0218.065] DevObjEnumDeviceInfo () returned 0x1 [0218.066] malloc (_Size=0x58) returned 0xd972b0 [0218.066] DevObjEnumDeviceInfo () returned 0x1 [0218.066] malloc (_Size=0x58) returned 0xd97790 [0218.066] DevObjEnumDeviceInfo () returned 0x1 [0218.066] malloc (_Size=0x58) returned 0xd96d10 [0218.066] DevObjEnumDeviceInfo () returned 0x1 [0218.066] malloc (_Size=0x58) returned 0xd96890 [0218.066] DevObjEnumDeviceInfo () returned 0x1 [0218.066] malloc (_Size=0x58) returned 0xd97310 [0218.066] DevObjEnumDeviceInfo () returned 0x1 [0218.066] malloc (_Size=0x58) returned 0xd968f0 [0218.066] DevObjEnumDeviceInfo () returned 0x1 [0218.066] malloc (_Size=0x58) returned 0xd97070 [0218.067] DevObjEnumDeviceInfo () returned 0x1 [0218.067] malloc (_Size=0x58) returned 0xd96d70 [0218.067] DevObjEnumDeviceInfo () returned 0x1 [0218.067] malloc (_Size=0x58) returned 0xd976d0 [0218.067] DevObjEnumDeviceInfo () returned 0x1 [0218.067] malloc (_Size=0x58) returned 0xd96a10 [0218.067] DevObjEnumDeviceInfo () returned 0x1 [0218.067] malloc (_Size=0x58) returned 0xd96950 [0218.067] DevObjEnumDeviceInfo () returned 0x1 [0218.067] malloc (_Size=0x58) returned 0xd96dd0 [0218.067] DevObjEnumDeviceInfo () returned 0x1 [0218.067] malloc (_Size=0x58) returned 0xd969b0 [0218.067] DevObjEnumDeviceInfo () returned 0x1 [0218.067] malloc (_Size=0x58) returned 0xd96b90 [0218.068] DevObjEnumDeviceInfo () returned 0x1 [0218.068] malloc (_Size=0x58) returned 0xd96e30 [0218.068] DevObjEnumDeviceInfo () returned 0x1 [0218.068] malloc (_Size=0x58) returned 0xd96a70 [0218.068] DevObjEnumDeviceInfo () returned 0x1 [0218.068] malloc (_Size=0x58) returned 0xd97730 [0218.068] DevObjEnumDeviceInfo () returned 0x1 [0218.068] malloc (_Size=0x58) returned 0xd96ad0 [0218.068] DevObjEnumDeviceInfo () returned 0x1 [0218.068] malloc (_Size=0x58) returned 0xd96b30 [0218.068] DevObjEnumDeviceInfo () returned 0x1 [0218.068] malloc (_Size=0x58) returned 0xd96e90 [0218.068] DevObjEnumDeviceInfo () returned 0x1 [0218.068] malloc (_Size=0x58) returned 0xd970d0 [0218.069] DevObjEnumDeviceInfo () returned 0x1 [0218.069] malloc (_Size=0x58) returned 0xd96bf0 [0218.069] DevObjEnumDeviceInfo () returned 0x1 [0218.069] malloc (_Size=0x58) returned 0xd96c50 [0218.069] DevObjEnumDeviceInfo () returned 0x1 [0218.069] malloc (_Size=0x58) returned 0xd97430 [0218.069] DevObjEnumDeviceInfo () returned 0x1 [0218.069] malloc (_Size=0x58) returned 0xd96ef0 [0218.069] DevObjEnumDeviceInfo () returned 0x1 [0218.069] malloc (_Size=0x58) returned 0xd96f50 [0218.069] DevObjEnumDeviceInfo () returned 0x1 [0218.069] malloc (_Size=0x58) returned 0xd96cb0 [0218.070] DevObjEnumDeviceInfo () returned 0x1 [0218.070] malloc (_Size=0x58) returned 0xd96fb0 [0218.070] DevObjEnumDeviceInfo () returned 0x1 [0218.070] malloc (_Size=0x58) returned 0xd97010 [0218.070] DevObjEnumDeviceInfo () returned 0x1 [0218.070] malloc (_Size=0x58) returned 0xd97130 [0218.070] DevObjEnumDeviceInfo () returned 0x1 [0218.070] malloc (_Size=0x58) returned 0xd97550 [0218.070] DevObjEnumDeviceInfo () returned 0x1 [0218.070] malloc (_Size=0x58) returned 0xd97190 [0218.070] DevObjEnumDeviceInfo () returned 0x1 [0218.070] malloc (_Size=0x58) returned 0xd971f0 [0218.070] DevObjEnumDeviceInfo () returned 0x1 [0218.070] malloc (_Size=0x58) returned 0xd97250 [0218.071] DevObjEnumDeviceInfo () returned 0x1 [0218.071] malloc (_Size=0x58) returned 0xd97370 [0218.071] DevObjEnumDeviceInfo () returned 0x1 [0218.071] malloc (_Size=0x58) returned 0xd973d0 [0218.071] DevObjEnumDeviceInfo () returned 0x1 [0218.071] malloc (_Size=0x58) returned 0xd97490 [0218.071] DevObjEnumDeviceInfo () returned 0x1 [0218.071] malloc (_Size=0x58) returned 0xd974f0 [0218.071] DevObjEnumDeviceInfo () returned 0x1 [0218.071] malloc (_Size=0x58) returned 0xd975b0 [0218.071] DevObjEnumDeviceInfo () returned 0x1 [0218.071] malloc (_Size=0x58) returned 0xd97610 [0218.071] DevObjEnumDeviceInfo () returned 0x1 [0218.071] malloc (_Size=0x58) returned 0xd97670 [0218.072] DevObjEnumDeviceInfo () returned 0x1 [0218.072] malloc (_Size=0x58) returned 0xd643f0 [0218.072] DevObjEnumDeviceInfo () returned 0x1 [0218.072] malloc (_Size=0x58) returned 0xd64210 [0218.072] DevObjEnumDeviceInfo () returned 0x1 [0218.072] malloc (_Size=0x58) returned 0xd64450 [0218.072] DevObjEnumDeviceInfo () returned 0x1 [0218.072] malloc (_Size=0x58) returned 0xd64510 [0218.072] DevObjEnumDeviceInfo () returned 0x1 [0218.072] malloc (_Size=0x58) returned 0xd64090 [0218.072] DevObjEnumDeviceInfo () returned 0x1 [0218.072] malloc (_Size=0x58) returned 0xd640f0 [0218.072] DevObjEnumDeviceInfo () returned 0x1 [0218.073] malloc (_Size=0x58) returned 0xd64150 [0218.073] DevObjEnumDeviceInfo () returned 0x1 [0218.073] malloc (_Size=0x58) returned 0xd645d0 [0218.073] DevObjEnumDeviceInfo () returned 0x1 [0218.073] malloc (_Size=0x58) returned 0xd64270 [0218.073] DevObjEnumDeviceInfo () returned 0x1 [0218.073] malloc (_Size=0x58) returned 0xd641b0 [0218.073] DevObjEnumDeviceInfo () returned 0x1 [0218.073] malloc (_Size=0x58) returned 0xd642d0 [0218.073] DevObjEnumDeviceInfo () returned 0x1 [0218.073] malloc (_Size=0x58) returned 0xd64030 [0218.073] DevObjEnumDeviceInfo () returned 0x1 [0218.073] malloc (_Size=0x58) returned 0xd64390 [0218.073] DevObjEnumDeviceInfo () returned 0x1 [0218.074] malloc (_Size=0x58) returned 0xd64330 [0218.074] DevObjEnumDeviceInfo () returned 0x1 [0218.074] malloc (_Size=0x58) returned 0xd63eb0 [0218.074] DevObjEnumDeviceInfo () returned 0x1 [0218.074] malloc (_Size=0x58) returned 0xd644b0 [0218.074] DevObjEnumDeviceInfo () returned 0x0 [0218.074] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x4, lpflOldProtect=0x7ffa4cd67f20 | out: lpflOldProtect=0x7ffa4cd67f20*=0x2) returned 1 [0218.074] GetProcAddress (hModule=0x7ffa5a8a0000, lpProcName="DevObjDestroyDeviceInfoList") returned 0x7ffa5a8a2750 [0218.074] VirtualProtect (in: lpAddress=0x7ffa4cd7a000, dwSize=0x4f0, flNewProtect=0x2, lpflOldProtect=0x115d6e0 | out: lpflOldProtect=0x115d6e0*=0x4) returned 1 [0218.075] DevObjDestroyDeviceInfoList () returned 0x1 [0218.075] malloc (_Size=0xd8) returned 0xd64670 [0218.075] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0218.075] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0218.075] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0218.076] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0218.076] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0218.076] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0218.076] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0218.076] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0218.076] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0218.076] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0218.076] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0218.076] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0218.076] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0218.077] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0218.077] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0218.077] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0218.077] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0218.077] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0218.077] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0218.077] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0218.077] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0218.077] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0218.077] malloc (_Size=0x18) returned 0xd979e0 [0218.078] malloc (_Size=0x48) returned 0xd5c570 [0218.078] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x7f06587, dwHighDateTime=0x1d92b8f)) [0218.078] SetEvent (hEvent=0x24c) returned 1 [0218.094] SetEvent (hEvent=0x24c) returned 1 [0218.095] free (_Block=0xd5c570) [0218.095] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.095] malloc (_Size=0x6c) returned 0xd95d00 [0218.095] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd95d00, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd95d00, pulLength=0x115d7d8) returned 0x0 [0218.096] free (_Block=0xd95d00) [0218.096] malloc (_Size=0x48) returned 0xd5c570 [0218.096] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x7f524b3, dwHighDateTime=0x1d92b8f)) [0218.096] SetEvent (hEvent=0x24c) returned 1 [0218.096] malloc (_Size=0x18) returned 0xd97c40 [0218.096] SafeArrayPutElement (psa=0x593710, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0218.096] free (_Block=0xd97c40) [0218.096] malloc (_Size=0x18) returned 0xd97b40 [0218.097] SafeArrayPutElement (psa=0x593710, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.097] free (_Block=0xd97b40) [0218.097] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2580 [0218.097] SafeArrayGetDim (psa=0x593710) returned 0x1 [0218.097] SafeArrayGetLBound (in: psa=0x593710, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.097] SafeArrayGetUBound (in: psa=0x593710, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.097] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afe80 [0218.097] SafeArrayGetDim (psa=0x593710) returned 0x1 [0218.097] SafeArrayGetUBound (in: psa=0x593710, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.097] SafeArrayGetElemsize (psa=0x593710) returned 0x8 [0218.097] SafeArrayGetElement (in: psa=0x593710, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.097] memcpy (in: _Dst=0x115d438, _Src=0x5962c0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.098] memcpy (in: _Dst=0x115d438, _Src=0x5962c8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.098] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afe80) returned 1 [0218.099] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2580) returned 1 [0218.139] SetEvent (hEvent=0x24c) returned 1 [0218.140] free (_Block=0xd5c570) [0218.140] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.140] malloc (_Size=0x90) returned 0xd64750 [0218.140] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd64750, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd64750, pulLength=0x115d7d8) returned 0x0 [0218.140] free (_Block=0xd64750) [0218.140] malloc (_Size=0x48) returned 0xd5c750 [0218.141] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x7f9e84a, dwHighDateTime=0x1d92b8f)) [0218.141] SetEvent (hEvent=0x24c) returned 1 [0218.143] malloc (_Size=0x18) returned 0xd98020 [0218.143] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0218.143] free (_Block=0xd98020) [0218.143] malloc (_Size=0x18) returned 0xd97c20 [0218.143] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.143] free (_Block=0xd97c20) [0218.143] malloc (_Size=0x18) returned 0xd97ec0 [0218.143] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x592d88) returned 0x0 [0218.143] free (_Block=0xd97ec0) [0218.143] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1f80 [0218.143] SafeArrayGetDim (psa=0x593410) returned 0x1 [0218.143] SafeArrayGetLBound (in: psa=0x593410, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.143] SafeArrayGetUBound (in: psa=0x593410, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.143] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afeb0 [0218.143] SafeArrayGetDim (psa=0x593410) returned 0x1 [0218.143] SafeArrayGetUBound (in: psa=0x593410, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.144] SafeArrayGetElemsize (psa=0x593410) returned 0x8 [0218.144] SafeArrayGetElement (in: psa=0x593410, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.144] memcpy (in: _Dst=0x115d438, _Src=0x5962c0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.144] memcpy (in: _Dst=0x115d438, _Src=0x5962c8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.144] memcpy (in: _Dst=0x115d438, _Src=0x5962d0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.145] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afeb0) returned 1 [0218.145] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1f80) returned 1 [0218.145] malloc (_Size=0xd8) returned 0xd64670 [0218.145] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0218.146] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0218.146] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0218.146] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0218.146] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0218.146] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0218.146] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0218.146] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0218.146] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0218.146] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0218.146] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0218.147] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0218.147] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0218.147] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0218.147] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0218.147] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0218.147] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0218.147] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0218.147] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0218.147] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0218.147] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0218.147] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0218.148] malloc (_Size=0x18) returned 0xd97f00 [0218.148] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.169] malloc (_Size=0x48) returned 0xd5c570 [0218.169] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x7fecc80, dwHighDateTime=0x1d92b8f)) [0218.169] SetEvent (hEvent=0x24c) returned 1 [0218.170] SetEvent (hEvent=0x24c) returned 1 [0218.171] free (_Block=0xd5c570) [0218.171] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.171] malloc (_Size=0x48) returned 0xd5c570 [0218.171] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x7fecc80, dwHighDateTime=0x1d92b8f)) [0218.171] SetEvent (hEvent=0x24c) returned 1 [0218.173] SetEvent (hEvent=0x24c) returned 1 [0218.173] free (_Block=0xd5c570) [0218.173] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.173] malloc (_Size=0x48) returned 0xd5c750 [0218.174] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x801111d, dwHighDateTime=0x1d92b8f)) [0218.174] SetEvent (hEvent=0x24c) returned 1 [0218.174] SetEvent (hEvent=0x24c) returned 1 [0218.175] free (_Block=0xd5c750) [0218.175] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.175] malloc (_Size=0x48) returned 0xd5c750 [0218.175] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x801111d, dwHighDateTime=0x1d92b8f)) [0218.175] SetEvent (hEvent=0x24c) returned 1 [0218.177] SetEvent (hEvent=0x24c) returned 1 [0218.177] free (_Block=0xd5c750) [0218.177] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.182] malloc (_Size=0x48) returned 0xd5c570 [0218.182] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x801111d, dwHighDateTime=0x1d92b8f)) [0218.182] SetEvent (hEvent=0x24c) returned 1 [0218.183] SetEvent (hEvent=0x24c) returned 1 [0218.183] free (_Block=0xd5c570) [0218.183] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x1, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0218.184] malloc (_Size=0x48) returned 0xd5c570 [0218.184] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x801111d, dwHighDateTime=0x1d92b8f)) [0218.184] SetEvent (hEvent=0x24c) returned 1 [0218.185] SetEvent (hEvent=0x24c) returned 1 [0218.186] free (_Block=0xd5c570) [0218.186] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x1, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0218.186] malloc (_Size=0x48) returned 0xd5c570 [0218.186] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x801111d, dwHighDateTime=0x1d92b8f)) [0218.186] SetEvent (hEvent=0x24c) returned 1 [0218.186] SetEvent (hEvent=0x24c) returned 1 [0218.187] free (_Block=0xd5c570) [0218.187] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.187] malloc (_Size=0x48) returned 0xd5c570 [0218.196] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x80371e3, dwHighDateTime=0x1d92b8f)) [0218.200] SetEvent (hEvent=0x24c) returned 1 [0218.213] SetEvent (hEvent=0x24c) returned 1 [0218.214] free (_Block=0xd5c570) [0218.214] CM_Get_Device_IDA (in: dnDevInst=0x2, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0A06\\CPU_HOTPLUG_RESOURCES") returned 0x0 [0218.214] malloc (_Size=0x48) returned 0xd5c570 [0218.214] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x805d4e7, dwHighDateTime=0x1d92b8f)) [0218.214] SetEvent (hEvent=0x24c) returned 1 [0218.215] SetEvent (hEvent=0x24c) returned 1 [0218.216] free (_Block=0xd5c570) [0218.216] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.216] malloc (_Size=0x5a) returned 0xd60100 [0218.216] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd60100, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd60100, pulLength=0x115d7d8) returned 0x0 [0218.216] free (_Block=0xd60100) [0218.216] malloc (_Size=0x48) returned 0xd5c570 [0218.216] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x805d4e7, dwHighDateTime=0x1d92b8f)) [0218.216] SetEvent (hEvent=0x24c) returned 1 [0218.217] malloc (_Size=0x18) returned 0xd97b20 [0218.217] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.217] free (_Block=0xd97b20) [0218.217] malloc (_Size=0x18) returned 0xd97900 [0218.217] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x592d88) returned 0x0 [0218.217] free (_Block=0xd97900) [0218.217] malloc (_Size=0x18) returned 0xd97e20 [0218.217] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0218.217] free (_Block=0xd97e20) [0218.217] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1980 [0218.217] SafeArrayGetDim (psa=0x593410) returned 0x1 [0218.217] SafeArrayGetLBound (in: psa=0x593410, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.218] SafeArrayGetUBound (in: psa=0x593410, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.218] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afeb0 [0218.218] SafeArrayGetDim (psa=0x593410) returned 0x1 [0218.218] SafeArrayGetUBound (in: psa=0x593410, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.218] SafeArrayGetElemsize (psa=0x593410) returned 0x8 [0218.218] SafeArrayGetElement (in: psa=0x593410, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.218] memcpy (in: _Dst=0x115d438, _Src=0x596580, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.218] memcpy (in: _Dst=0x115d438, _Src=0x596588, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.218] memcpy (in: _Dst=0x115d438, _Src=0x596590, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.219] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afeb0) returned 1 [0218.220] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1980) returned 1 [0218.221] SetEvent (hEvent=0x24c) returned 1 [0218.221] free (_Block=0xd5c570) [0218.221] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0218.222] malloc (_Size=0x48) returned 0xd5c570 [0218.222] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8083ddd, dwHighDateTime=0x1d92b8f)) [0218.222] SetEvent (hEvent=0x24c) returned 1 [0218.222] SetEvent (hEvent=0x24c) returned 1 [0218.223] free (_Block=0xd5c570) [0218.223] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.229] malloc (_Size=0x48) returned 0xd5c7f0 [0218.229] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8083ddd, dwHighDateTime=0x1d92b8f)) [0218.229] SetEvent (hEvent=0x24c) returned 1 [0218.230] SetEvent (hEvent=0x24c) returned 1 [0218.230] free (_Block=0xd5c7f0) [0218.231] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.231] malloc (_Size=0x48) returned 0xd5c570 [0218.231] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8083ddd, dwHighDateTime=0x1d92b8f)) [0218.231] SetEvent (hEvent=0x24c) returned 1 [0218.231] SetEvent (hEvent=0x24c) returned 1 [0218.232] free (_Block=0xd5c570) [0218.232] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.232] malloc (_Size=0x48) returned 0xd5c570 [0218.232] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8083ddd, dwHighDateTime=0x1d92b8f)) [0218.232] SetEvent (hEvent=0x24c) returned 1 [0218.233] SetEvent (hEvent=0x24c) returned 1 [0218.234] free (_Block=0xd5c570) [0218.234] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.234] malloc (_Size=0x48) returned 0xd5c570 [0218.234] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8083ddd, dwHighDateTime=0x1d92b8f)) [0218.234] SetEvent (hEvent=0x24c) returned 1 [0218.236] SetEvent (hEvent=0x24c) returned 1 [0218.237] free (_Block=0xd5c570) [0218.237] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.239] malloc (_Size=0x48) returned 0xd5c570 [0218.239] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x80a9a3c, dwHighDateTime=0x1d92b8f)) [0218.239] SetEvent (hEvent=0x24c) returned 1 [0218.239] SetEvent (hEvent=0x24c) returned 1 [0218.240] free (_Block=0xd5c570) [0218.240] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x2, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0218.240] malloc (_Size=0x48) returned 0xd5c570 [0218.240] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x80a9a3c, dwHighDateTime=0x1d92b8f)) [0218.240] SetEvent (hEvent=0x24c) returned 1 [0218.242] SetEvent (hEvent=0x24c) returned 1 [0218.242] free (_Block=0xd5c570) [0218.242] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x2, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0218.243] malloc (_Size=0x48) returned 0xd5c570 [0218.243] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x80a9a3c, dwHighDateTime=0x1d92b8f)) [0218.243] SetEvent (hEvent=0x24c) returned 1 [0218.243] SetEvent (hEvent=0x24c) returned 1 [0218.244] free (_Block=0xd5c570) [0218.244] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.244] malloc (_Size=0x48) returned 0xd5c570 [0218.244] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x80a9a3c, dwHighDateTime=0x1d92b8f)) [0218.244] SetEvent (hEvent=0x24c) returned 1 [0218.246] SetEvent (hEvent=0x24c) returned 1 [0218.246] free (_Block=0xd5c570) [0218.246] CM_Get_Device_IDA (in: dnDevInst=0x3, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0B00\\4&22F5829E&0") returned 0x0 [0218.246] malloc (_Size=0x48) returned 0xd5c700 [0218.246] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x80a9a3c, dwHighDateTime=0x1d92b8f)) [0218.246] SetEvent (hEvent=0x24c) returned 1 [0218.247] SetEvent (hEvent=0x24c) returned 1 [0218.247] free (_Block=0xd5c700) [0218.248] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.248] malloc (_Size=0x5a) returned 0xd60100 [0218.248] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd60100, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd60100, pulLength=0x115d7d8) returned 0x0 [0218.248] free (_Block=0xd60100) [0218.248] malloc (_Size=0x48) returned 0xd5c700 [0218.248] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x80a9a3c, dwHighDateTime=0x1d92b8f)) [0218.248] SetEvent (hEvent=0x24c) returned 1 [0218.249] malloc (_Size=0x18) returned 0xd98000 [0218.249] SafeArrayPutElement (psa=0x593490, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0218.249] free (_Block=0xd98000) [0218.249] malloc (_Size=0x18) returned 0xd97c60 [0218.249] SafeArrayPutElement (psa=0x593490, rgIndices=0x115d8a8, pv=0x592d88) returned 0x0 [0218.249] free (_Block=0xd97c60) [0218.249] malloc (_Size=0x18) returned 0xd978e0 [0218.249] SafeArrayPutElement (psa=0x593490, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0218.249] free (_Block=0xd978e0) [0218.249] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1100 [0218.249] SafeArrayGetDim (psa=0x593490) returned 0x1 [0218.249] SafeArrayGetLBound (in: psa=0x593490, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.249] SafeArrayGetUBound (in: psa=0x593490, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.249] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0360 [0218.249] SafeArrayGetDim (psa=0x593490) returned 0x1 [0218.249] SafeArrayGetUBound (in: psa=0x593490, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.249] SafeArrayGetElemsize (psa=0x593490) returned 0x8 [0218.249] SafeArrayGetElement (in: psa=0x593490, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.250] memcpy (in: _Dst=0x115d438, _Src=0x596940, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.250] memcpy (in: _Dst=0x115d438, _Src=0x596948, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.253] memcpy (in: _Dst=0x115d438, _Src=0x596950, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.254] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0360) returned 1 [0218.254] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1100) returned 1 [0218.255] malloc (_Size=0xd8) returned 0xd64670 [0218.255] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0218.255] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0218.255] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0218.255] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0218.255] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0218.255] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0218.255] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0218.255] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0218.256] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0218.256] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0218.256] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0218.256] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0218.256] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0218.256] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0218.256] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0218.256] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0218.256] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0218.256] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0218.257] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0218.257] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0218.257] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0218.257] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0218.257] malloc (_Size=0x18) returned 0xd97b20 [0218.257] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0218.257] malloc (_Size=0x48) returned 0xd5c700 [0218.257] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x80cfb83, dwHighDateTime=0x1d92b8f)) [0218.257] SetEvent (hEvent=0x24c) returned 1 [0218.258] SetEvent (hEvent=0x24c) returned 1 [0218.259] free (_Block=0xd5c700) [0218.259] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.261] malloc (_Size=0x48) returned 0xd5c750 [0218.261] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x80cfb83, dwHighDateTime=0x1d92b8f)) [0218.261] SetEvent (hEvent=0x24c) returned 1 [0218.262] SetEvent (hEvent=0x24c) returned 1 [0218.263] free (_Block=0xd5c750) [0218.263] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.263] malloc (_Size=0x48) returned 0xd5c700 [0218.263] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x80cfb83, dwHighDateTime=0x1d92b8f)) [0218.263] SetEvent (hEvent=0x24c) returned 1 [0218.264] SetEvent (hEvent=0x24c) returned 1 [0218.265] free (_Block=0xd5c700) [0218.265] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.266] malloc (_Size=0x48) returned 0xd5c750 [0218.266] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x80cfb83, dwHighDateTime=0x1d92b8f)) [0218.268] SetEvent (hEvent=0x24c) returned 1 [0218.270] malloc (_Size=0xd8) returned 0xd64670 [0218.270] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0218.270] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0218.270] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0218.271] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0218.271] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0218.271] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0218.271] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0218.271] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0218.271] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0218.271] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0218.271] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0218.271] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0218.271] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0218.272] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0218.272] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0218.272] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0218.272] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0218.272] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0218.272] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0218.272] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0218.272] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0218.272] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0218.272] malloc (_Size=0x18) returned 0xd98000 [0218.272] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.273] malloc (_Size=0x48) returned 0xd5c700 [0218.273] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x80f5daa, dwHighDateTime=0x1d92b8f)) [0218.273] SetEvent (hEvent=0x24c) returned 1 [0218.275] SetEvent (hEvent=0x24c) returned 1 [0218.276] free (_Block=0xd5c700) [0218.276] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.278] malloc (_Size=0x48) returned 0xd5c750 [0218.278] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x80f5daa, dwHighDateTime=0x1d92b8f)) [0218.278] SetEvent (hEvent=0x24c) returned 1 [0218.279] SetEvent (hEvent=0x24c) returned 1 [0218.280] free (_Block=0xd5c750) [0218.280] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x3, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0218.281] malloc (_Size=0x48) returned 0xd5c750 [0218.281] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x80f5daa, dwHighDateTime=0x1d92b8f)) [0218.281] SetEvent (hEvent=0x24c) returned 1 [0218.299] SetEvent (hEvent=0x24c) returned 1 [0218.300] free (_Block=0xd5c750) [0218.300] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x3, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0218.300] malloc (_Size=0x48) returned 0xd5c750 [0218.300] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x8142334, dwHighDateTime=0x1d92b8f)) [0218.300] SetEvent (hEvent=0x24c) returned 1 [0218.301] SetEvent (hEvent=0x24c) returned 1 [0218.302] free (_Block=0xd5c750) [0218.302] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x3, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.302] malloc (_Size=0x48) returned 0xd5c750 [0218.302] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8142334, dwHighDateTime=0x1d92b8f)) [0218.302] SetEvent (hEvent=0x24c) returned 1 [0218.304] SetEvent (hEvent=0x24c) returned 1 [0218.305] free (_Block=0xd5c750) [0218.305] CM_Get_Device_IDA (in: dnDevInst=0x4, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="USB\\ROOT_HUB20\\4&13A29EA8&0") returned 0x0 [0218.305] malloc (_Size=0x48) returned 0xd5c570 [0218.305] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x8142334, dwHighDateTime=0x1d92b8f)) [0218.305] SetEvent (hEvent=0x24c) returned 1 [0218.307] SetEvent (hEvent=0x24c) returned 1 [0218.307] free (_Block=0xd5c570) [0218.307] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.307] malloc (_Size=0xac) returned 0xd64750 [0218.308] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd64750, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd64750, pulLength=0x115d7d8) returned 0x0 [0218.308] free (_Block=0xd64750) [0218.308] malloc (_Size=0x48) returned 0xd5c570 [0218.308] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8142334, dwHighDateTime=0x1d92b8f)) [0218.308] SetEvent (hEvent=0x24c) returned 1 [0218.309] malloc (_Size=0x18) returned 0xd978a0 [0218.309] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0218.309] free (_Block=0xd978a0) [0218.309] malloc (_Size=0x18) returned 0xd97f00 [0218.309] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0218.309] free (_Block=0xd97f00) [0218.309] malloc (_Size=0x18) returned 0xd97d00 [0218.309] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x1312c98) returned 0x0 [0218.309] free (_Block=0xd97d00) [0218.309] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2500 [0218.309] SafeArrayGetDim (psa=0x593010) returned 0x1 [0218.310] SafeArrayGetLBound (in: psa=0x593010, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.310] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.310] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afc70 [0218.310] SafeArrayGetDim (psa=0x593010) returned 0x1 [0218.310] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.310] SafeArrayGetElemsize (psa=0x593010) returned 0x8 [0218.310] SafeArrayGetElement (in: psa=0x593010, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.310] memcpy (in: _Dst=0x115d438, _Src=0x5968c0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.310] memcpy (in: _Dst=0x115d438, _Src=0x5968c8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.310] memcpy (in: _Dst=0x115d438, _Src=0x5968d0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.311] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afc70) returned 1 [0218.312] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2500) returned 1 [0218.312] SetEvent (hEvent=0x24c) returned 1 [0218.320] free (_Block=0xd5c570) [0218.320] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0218.321] malloc (_Size=0x48) returned 0xd5c570 [0218.321] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x81685a3, dwHighDateTime=0x1d92b8f)) [0218.321] SetEvent (hEvent=0x24c) returned 1 [0218.321] SetEvent (hEvent=0x24c) returned 1 [0218.322] free (_Block=0xd5c570) [0218.322] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.330] malloc (_Size=0x48) returned 0xd5c570 [0218.330] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x818e75f, dwHighDateTime=0x1d92b8f)) [0218.330] SetEvent (hEvent=0x24c) returned 1 [0218.331] SetEvent (hEvent=0x24c) returned 1 [0218.331] free (_Block=0xd5c570) [0218.331] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.331] malloc (_Size=0x48) returned 0xd5c570 [0218.332] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x818e75f, dwHighDateTime=0x1d92b8f)) [0218.332] SetEvent (hEvent=0x24c) returned 1 [0218.332] SetEvent (hEvent=0x24c) returned 1 [0218.333] free (_Block=0xd5c570) [0218.333] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.333] malloc (_Size=0x48) returned 0xd5c570 [0218.333] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x818e75f, dwHighDateTime=0x1d92b8f)) [0218.333] SetEvent (hEvent=0x24c) returned 1 [0218.334] SetEvent (hEvent=0x24c) returned 1 [0218.335] free (_Block=0xd5c570) [0218.335] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.335] malloc (_Size=0x48) returned 0xd5c570 [0218.335] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x818e75f, dwHighDateTime=0x1d92b8f)) [0218.335] SetEvent (hEvent=0x24c) returned 1 [0218.337] SetEvent (hEvent=0x24c) returned 1 [0218.338] free (_Block=0xd5c570) [0218.338] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.340] malloc (_Size=0x48) returned 0xd5c570 [0218.340] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x818e75f, dwHighDateTime=0x1d92b8f)) [0218.340] SetEvent (hEvent=0x24c) returned 1 [0218.341] SetEvent (hEvent=0x24c) returned 1 [0218.341] free (_Block=0xd5c570) [0218.342] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x4, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0218.342] malloc (_Size=0x48) returned 0xd5c570 [0218.342] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x818e75f, dwHighDateTime=0x1d92b8f)) [0218.342] SetEvent (hEvent=0x24c) returned 1 [0218.343] SetEvent (hEvent=0x24c) returned 1 [0218.344] free (_Block=0xd5c570) [0218.344] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x4, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0218.344] malloc (_Size=0x48) returned 0xd5c570 [0218.344] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x81b4cd4, dwHighDateTime=0x1d92b8f)) [0218.344] SetEvent (hEvent=0x24c) returned 1 [0218.345] SetEvent (hEvent=0x24c) returned 1 [0218.346] free (_Block=0xd5c570) [0218.346] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x4, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.346] malloc (_Size=0x48) returned 0xd5c570 [0218.346] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x81b4cd4, dwHighDateTime=0x1d92b8f)) [0218.346] SetEvent (hEvent=0x24c) returned 1 [0218.347] SetEvent (hEvent=0x24c) returned 1 [0218.348] free (_Block=0xd5c570) [0218.348] CM_Get_Device_IDA (in: dnDevInst=0x5, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\VOLMGR\\0000") returned 0x0 [0218.348] malloc (_Size=0x48) returned 0xd5c570 [0218.348] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x81b4cd4, dwHighDateTime=0x1d92b8f)) [0218.348] SetEvent (hEvent=0x24c) returned 1 [0218.351] SetEvent (hEvent=0x24c) returned 1 [0218.352] free (_Block=0xd5c570) [0218.352] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.352] malloc (_Size=0x1a) returned 0xd5f480 [0218.352] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd5f480, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd5f480, pulLength=0x115d7d8) returned 0x0 [0218.352] free (_Block=0xd5f480) [0218.352] malloc (_Size=0x48) returned 0xd5c570 [0218.352] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x81b4cd4, dwHighDateTime=0x1d92b8f)) [0218.352] SetEvent (hEvent=0x24c) returned 1 [0218.352] malloc (_Size=0x18) returned 0xd97e60 [0218.352] SafeArrayPutElement (psa=0x593310, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0218.352] free (_Block=0xd97e60) [0218.352] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1b00 [0218.353] SafeArrayGetDim (psa=0x593310) returned 0x1 [0218.353] SafeArrayGetLBound (in: psa=0x593310, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.353] SafeArrayGetUBound (in: psa=0x593310, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.353] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b00f0 [0218.353] SafeArrayGetDim (psa=0x593310) returned 0x1 [0218.353] SafeArrayGetUBound (in: psa=0x593310, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.353] SafeArrayGetElemsize (psa=0x593310) returned 0x8 [0218.353] SafeArrayGetElement (in: psa=0x593310, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.353] memcpy (in: _Dst=0x115d438, _Src=0x5783d0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.354] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b00f0) returned 1 [0218.354] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1b00) returned 1 [0218.354] SetEvent (hEvent=0x24c) returned 1 [0218.355] free (_Block=0xd5c570) [0218.355] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.355] malloc (_Size=0x52) returned 0xd64570 [0218.355] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd64570, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd64570, pulLength=0x115d7d8) returned 0x0 [0218.355] free (_Block=0xd64570) [0218.356] malloc (_Size=0x48) returned 0xd5c700 [0218.356] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x81b4cd4, dwHighDateTime=0x1d92b8f)) [0218.356] SetEvent (hEvent=0x24c) returned 1 [0218.356] malloc (_Size=0x18) returned 0xd97ae0 [0218.356] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x1312c98) returned 0x0 [0218.356] free (_Block=0xd97ae0) [0218.356] malloc (_Size=0x18) returned 0xd97cc0 [0218.356] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x592d88) returned 0x0 [0218.356] free (_Block=0xd97cc0) [0218.356] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1500 [0218.356] SafeArrayGetDim (psa=0x593410) returned 0x1 [0218.356] SafeArrayGetLBound (in: psa=0x593410, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.356] SafeArrayGetUBound (in: psa=0x593410, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.356] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5affa0 [0218.356] SafeArrayGetDim (psa=0x593410) returned 0x1 [0218.356] SafeArrayGetUBound (in: psa=0x593410, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.356] SafeArrayGetElemsize (psa=0x593410) returned 0x8 [0218.357] SafeArrayGetElement (in: psa=0x593410, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.357] memcpy (in: _Dst=0x115d438, _Src=0x5968c0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.357] memcpy (in: _Dst=0x115d438, _Src=0x5968c8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.358] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5affa0) returned 1 [0218.358] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1500) returned 1 [0218.358] SetEvent (hEvent=0x24c) returned 1 [0218.359] free (_Block=0xd5c700) [0218.359] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.365] malloc (_Size=0x48) returned 0xd5c570 [0218.365] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x81daafd, dwHighDateTime=0x1d92b8f)) [0218.365] SetEvent (hEvent=0x24c) returned 1 [0218.366] SetEvent (hEvent=0x24c) returned 1 [0218.366] free (_Block=0xd5c570) [0218.366] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.366] malloc (_Size=0x48) returned 0xd5c700 [0218.366] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x81daafd, dwHighDateTime=0x1d92b8f)) [0218.367] SetEvent (hEvent=0x24c) returned 1 [0218.367] SetEvent (hEvent=0x24c) returned 1 [0218.368] free (_Block=0xd5c700) [0218.368] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.368] malloc (_Size=0x48) returned 0xd5c570 [0218.368] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x81daafd, dwHighDateTime=0x1d92b8f)) [0218.368] SetEvent (hEvent=0x24c) returned 1 [0218.369] SetEvent (hEvent=0x24c) returned 1 [0218.369] free (_Block=0xd5c570) [0218.369] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.370] malloc (_Size=0x48) returned 0xd5c570 [0218.370] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x81daafd, dwHighDateTime=0x1d92b8f)) [0218.370] SetEvent (hEvent=0x24c) returned 1 [0218.372] SetEvent (hEvent=0x24c) returned 1 [0218.372] free (_Block=0xd5c570) [0218.372] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.374] malloc (_Size=0x48) returned 0xd5c570 [0218.374] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x81daafd, dwHighDateTime=0x1d92b8f)) [0218.374] SetEvent (hEvent=0x24c) returned 1 [0218.375] SetEvent (hEvent=0x24c) returned 1 [0218.375] free (_Block=0xd5c570) [0218.377] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x5, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0218.377] malloc (_Size=0x48) returned 0xd5c7f0 [0218.377] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x82010ba, dwHighDateTime=0x1d92b8f)) [0218.377] SetEvent (hEvent=0x24c) returned 1 [0218.379] SetEvent (hEvent=0x24c) returned 1 [0218.380] free (_Block=0xd5c7f0) [0218.380] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x5, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0218.380] malloc (_Size=0x48) returned 0xd5c570 [0218.380] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x82010ba, dwHighDateTime=0x1d92b8f)) [0218.380] SetEvent (hEvent=0x24c) returned 1 [0218.381] SetEvent (hEvent=0x24c) returned 1 [0218.381] free (_Block=0xd5c570) [0218.381] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x5, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.381] malloc (_Size=0x48) returned 0xd5c570 [0218.381] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x82010ba, dwHighDateTime=0x1d92b8f)) [0218.381] SetEvent (hEvent=0x24c) returned 1 [0218.383] SetEvent (hEvent=0x24c) returned 1 [0218.384] free (_Block=0xd5c570) [0218.384] CM_Get_Device_IDA (in: dnDevInst=0x6, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="USB\\ROOT_HUB\\4&B24102A&0") returned 0x0 [0218.384] malloc (_Size=0x48) returned 0xd5c700 [0218.384] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x82010ba, dwHighDateTime=0x1d92b8f)) [0218.384] SetEvent (hEvent=0x24c) returned 1 [0218.384] SetEvent (hEvent=0x24c) returned 1 [0218.386] free (_Block=0xd5c700) [0218.386] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.386] malloc (_Size=0xa0) returned 0xd64750 [0218.386] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd64750, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd64750, pulLength=0x115d7d8) returned 0x0 [0218.386] free (_Block=0xd64750) [0218.386] malloc (_Size=0x48) returned 0xd5c700 [0218.386] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x82010ba, dwHighDateTime=0x1d92b8f)) [0218.387] SetEvent (hEvent=0x24c) returned 1 [0218.387] malloc (_Size=0x18) returned 0xd97940 [0218.387] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0218.387] free (_Block=0xd97940) [0218.387] malloc (_Size=0x18) returned 0xd97a00 [0218.387] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0218.387] free (_Block=0xd97a00) [0218.387] malloc (_Size=0x18) returned 0xd98020 [0218.387] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0218.387] free (_Block=0xd98020) [0218.387] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2700 [0218.387] SafeArrayGetDim (psa=0x593410) returned 0x1 [0218.387] SafeArrayGetLBound (in: psa=0x593410, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.387] SafeArrayGetUBound (in: psa=0x593410, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.387] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0270 [0218.387] SafeArrayGetDim (psa=0x593410) returned 0x1 [0218.387] SafeArrayGetUBound (in: psa=0x593410, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.387] SafeArrayGetElemsize (psa=0x593410) returned 0x8 [0218.388] SafeArrayGetElement (in: psa=0x593410, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.388] memcpy (in: _Dst=0x115d438, _Src=0x5962c0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.388] memcpy (in: _Dst=0x115d438, _Src=0x5962c8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.388] memcpy (in: _Dst=0x115d438, _Src=0x5962d0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.389] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0270) returned 1 [0218.389] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2700) returned 1 [0218.390] SetEvent (hEvent=0x24c) returned 1 [0218.390] free (_Block=0xd5c700) [0218.390] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0218.390] malloc (_Size=0x48) returned 0xd5c700 [0218.390] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x82010ba, dwHighDateTime=0x1d92b8f)) [0218.390] SetEvent (hEvent=0x24c) returned 1 [0218.390] SetEvent (hEvent=0x24c) returned 1 [0218.391] free (_Block=0xd5c700) [0218.391] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.394] malloc (_Size=0x48) returned 0xd5c700 [0218.394] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8227b51, dwHighDateTime=0x1d92b8f)) [0218.394] SetEvent (hEvent=0x24c) returned 1 [0218.395] SetEvent (hEvent=0x24c) returned 1 [0218.396] free (_Block=0xd5c700) [0218.396] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.396] malloc (_Size=0x48) returned 0xd5c700 [0218.396] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8227b51, dwHighDateTime=0x1d92b8f)) [0218.396] SetEvent (hEvent=0x24c) returned 1 [0218.397] SetEvent (hEvent=0x24c) returned 1 [0218.397] free (_Block=0xd5c700) [0218.398] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.398] malloc (_Size=0x48) returned 0xd5c700 [0218.398] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8227b51, dwHighDateTime=0x1d92b8f)) [0218.398] SetEvent (hEvent=0x24c) returned 1 [0218.399] SetEvent (hEvent=0x24c) returned 1 [0218.399] free (_Block=0xd5c700) [0218.399] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.400] malloc (_Size=0x48) returned 0xd5c700 [0218.400] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8227b51, dwHighDateTime=0x1d92b8f)) [0218.400] SetEvent (hEvent=0x24c) returned 1 [0218.402] SetEvent (hEvent=0x24c) returned 1 [0218.403] free (_Block=0xd5c700) [0218.403] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.405] malloc (_Size=0x48) returned 0xd5c700 [0218.405] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8227b51, dwHighDateTime=0x1d92b8f)) [0218.405] SetEvent (hEvent=0x24c) returned 1 [0218.405] SetEvent (hEvent=0x24c) returned 1 [0218.406] free (_Block=0xd5c700) [0218.406] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x6, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0218.409] malloc (_Size=0x48) returned 0xd5c7f0 [0218.409] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x824d3c6, dwHighDateTime=0x1d92b8f)) [0218.410] SetEvent (hEvent=0x24c) returned 1 [0218.411] SetEvent (hEvent=0x24c) returned 1 [0218.412] free (_Block=0xd5c7f0) [0218.412] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x6, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0218.413] malloc (_Size=0x48) returned 0xd5c700 [0218.413] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x824d3c6, dwHighDateTime=0x1d92b8f)) [0218.413] SetEvent (hEvent=0x24c) returned 1 [0218.414] SetEvent (hEvent=0x24c) returned 1 [0218.415] free (_Block=0xd5c700) [0218.415] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x6, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.415] malloc (_Size=0x48) returned 0xd5c700 [0218.415] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x824d3c6, dwHighDateTime=0x1d92b8f)) [0218.415] SetEvent (hEvent=0x24c) returned 1 [0218.417] SetEvent (hEvent=0x24c) returned 1 [0218.418] free (_Block=0xd5c700) [0218.418] CM_Get_Device_IDA (in: dnDevInst=0x7, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0303\\4&22F5829E&0") returned 0x0 [0218.418] malloc (_Size=0x48) returned 0xd5c700 [0218.418] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x824d3c6, dwHighDateTime=0x1d92b8f)) [0218.418] SetEvent (hEvent=0x24c) returned 1 [0218.419] SetEvent (hEvent=0x24c) returned 1 [0218.420] free (_Block=0xd5c700) [0218.420] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.420] malloc (_Size=0x5a) returned 0xd60100 [0218.420] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd60100, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd60100, pulLength=0x115d7d8) returned 0x0 [0218.421] free (_Block=0xd60100) [0218.421] malloc (_Size=0x48) returned 0xd5c700 [0218.421] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x824d3c6, dwHighDateTime=0x1d92b8f)) [0218.421] SetEvent (hEvent=0x24c) returned 1 [0218.421] malloc (_Size=0x18) returned 0xd97a80 [0218.421] SafeArrayPutElement (psa=0x593990, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.421] free (_Block=0xd97a80) [0218.421] malloc (_Size=0x18) returned 0xd97fc0 [0218.422] SafeArrayPutElement (psa=0x593990, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.422] free (_Block=0xd97fc0) [0218.422] malloc (_Size=0x18) returned 0xd978c0 [0218.422] SafeArrayPutElement (psa=0x593990, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0218.422] free (_Block=0xd978c0) [0218.422] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e0d80 [0218.422] SafeArrayGetDim (psa=0x593990) returned 0x1 [0218.422] SafeArrayGetLBound (in: psa=0x593990, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.422] SafeArrayGetUBound (in: psa=0x593990, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.422] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5affa0 [0218.422] SafeArrayGetDim (psa=0x593990) returned 0x1 [0218.422] SafeArrayGetUBound (in: psa=0x593990, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.422] SafeArrayGetElemsize (psa=0x593990) returned 0x8 [0218.422] SafeArrayGetElement (in: psa=0x593990, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.423] memcpy (in: _Dst=0x115d438, _Src=0x5963a0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.423] memcpy (in: _Dst=0x115d438, _Src=0x5963a8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.423] memcpy (in: _Dst=0x115d438, _Src=0x5963b0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.424] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5affa0) returned 1 [0218.424] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e0d80) returned 1 [0218.424] SetEvent (hEvent=0x24c) returned 1 [0218.425] free (_Block=0xd5c700) [0218.425] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0218.425] malloc (_Size=0x48) returned 0xd5c700 [0218.425] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x82735e4, dwHighDateTime=0x1d92b8f)) [0218.425] SetEvent (hEvent=0x24c) returned 1 [0218.426] SetEvent (hEvent=0x24c) returned 1 [0218.427] free (_Block=0xd5c700) [0218.427] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.433] malloc (_Size=0x48) returned 0xd5c700 [0218.433] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x82735e4, dwHighDateTime=0x1d92b8f)) [0218.433] SetEvent (hEvent=0x24c) returned 1 [0218.433] SetEvent (hEvent=0x24c) returned 1 [0218.434] free (_Block=0xd5c700) [0218.434] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.434] malloc (_Size=0x48) returned 0xd5c700 [0218.434] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x82735e4, dwHighDateTime=0x1d92b8f)) [0218.435] SetEvent (hEvent=0x24c) returned 1 [0218.435] SetEvent (hEvent=0x24c) returned 1 [0218.436] free (_Block=0xd5c700) [0218.436] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.436] malloc (_Size=0x48) returned 0xd5c700 [0218.436] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x82735e4, dwHighDateTime=0x1d92b8f)) [0218.436] SetEvent (hEvent=0x24c) returned 1 [0218.437] SetEvent (hEvent=0x24c) returned 1 [0218.437] free (_Block=0xd5c700) [0218.437] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.438] malloc (_Size=0x48) returned 0xd5c700 [0218.438] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x829977a, dwHighDateTime=0x1d92b8f)) [0218.438] SetEvent (hEvent=0x24c) returned 1 [0218.440] SetEvent (hEvent=0x24c) returned 1 [0218.441] free (_Block=0xd5c700) [0218.441] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.443] malloc (_Size=0x48) returned 0xd5c750 [0218.443] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x829977a, dwHighDateTime=0x1d92b8f)) [0218.443] SetEvent (hEvent=0x24c) returned 1 [0218.444] SetEvent (hEvent=0x24c) returned 1 [0218.445] free (_Block=0xd5c750) [0218.445] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x7, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0218.445] malloc (_Size=0x48) returned 0xd5c7f0 [0218.445] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x829977a, dwHighDateTime=0x1d92b8f)) [0218.445] SetEvent (hEvent=0x24c) returned 1 [0218.447] SetEvent (hEvent=0x24c) returned 1 [0218.447] free (_Block=0xd5c7f0) [0218.447] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x7, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0218.447] malloc (_Size=0x48) returned 0xd5c750 [0218.447] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x829977a, dwHighDateTime=0x1d92b8f)) [0218.448] SetEvent (hEvent=0x24c) returned 1 [0218.448] SetEvent (hEvent=0x24c) returned 1 [0218.449] free (_Block=0xd5c750) [0218.449] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x7, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.449] malloc (_Size=0x48) returned 0xd5c750 [0218.449] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x829977a, dwHighDateTime=0x1d92b8f)) [0218.449] SetEvent (hEvent=0x24c) returned 1 [0218.451] SetEvent (hEvent=0x24c) returned 1 [0218.452] free (_Block=0xd5c750) [0218.452] CM_Get_Device_IDA (in: dnDevInst=0x8, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\BASICDISPLAY\\0000") returned 0x0 [0218.452] malloc (_Size=0x48) returned 0xd5c700 [0218.452] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x829977a, dwHighDateTime=0x1d92b8f)) [0218.452] SetEvent (hEvent=0x24c) returned 1 [0218.452] SetEvent (hEvent=0x24c) returned 1 [0218.453] free (_Block=0xd5c700) [0218.453] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.454] malloc (_Size=0x26) returned 0xd5f4e0 [0218.454] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd5f4e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd5f4e0, pulLength=0x115d7d8) returned 0x0 [0218.454] free (_Block=0xd5f4e0) [0218.455] malloc (_Size=0x48) returned 0xd5c700 [0218.455] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x82bf99e, dwHighDateTime=0x1d92b8f)) [0218.455] SetEvent (hEvent=0x24c) returned 1 [0218.455] malloc (_Size=0x18) returned 0xd97a60 [0218.455] SafeArrayPutElement (psa=0x593ad0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.455] free (_Block=0xd97a60) [0218.455] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1780 [0218.455] SafeArrayGetDim (psa=0x593ad0) returned 0x1 [0218.456] SafeArrayGetLBound (in: psa=0x593ad0, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.456] SafeArrayGetUBound (in: psa=0x593ad0, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.456] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afc70 [0218.456] SafeArrayGetDim (psa=0x593ad0) returned 0x1 [0218.456] SafeArrayGetUBound (in: psa=0x593ad0, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.456] SafeArrayGetElemsize (psa=0x593ad0) returned 0x8 [0218.456] SafeArrayGetElement (in: psa=0x593ad0, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.456] memcpy (in: _Dst=0x115d438, _Src=0x5783d0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.457] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afc70) returned 1 [0218.457] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1780) returned 1 [0218.458] SetEvent (hEvent=0x24c) returned 1 [0218.458] free (_Block=0xd5c700) [0218.458] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0218.458] malloc (_Size=0x48) returned 0xd5c700 [0218.459] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x82bf99e, dwHighDateTime=0x1d92b8f)) [0218.459] SetEvent (hEvent=0x24c) returned 1 [0218.459] SetEvent (hEvent=0x24c) returned 1 [0218.460] free (_Block=0xd5c700) [0218.460] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.465] malloc (_Size=0x48) returned 0xd5c750 [0218.465] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x82bf99e, dwHighDateTime=0x1d92b8f)) [0218.465] SetEvent (hEvent=0x24c) returned 1 [0218.466] SetEvent (hEvent=0x24c) returned 1 [0218.466] free (_Block=0xd5c750) [0218.466] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.466] malloc (_Size=0x48) returned 0xd5c700 [0218.466] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x82bf99e, dwHighDateTime=0x1d92b8f)) [0218.467] SetEvent (hEvent=0x24c) returned 1 [0218.467] SetEvent (hEvent=0x24c) returned 1 [0218.468] free (_Block=0xd5c700) [0218.468] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.468] malloc (_Size=0x48) returned 0xd5c700 [0218.468] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x82bf99e, dwHighDateTime=0x1d92b8f)) [0218.468] SetEvent (hEvent=0x24c) returned 1 [0218.469] SetEvent (hEvent=0x24c) returned 1 [0218.469] free (_Block=0xd5c700) [0218.469] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.470] malloc (_Size=0x48) returned 0xd5c700 [0218.470] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x82e5d13, dwHighDateTime=0x1d92b8f)) [0218.470] SetEvent (hEvent=0x24c) returned 1 [0218.472] SetEvent (hEvent=0x24c) returned 1 [0218.472] free (_Block=0xd5c700) [0218.472] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.474] malloc (_Size=0x48) returned 0xd5c700 [0218.474] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x82e5d13, dwHighDateTime=0x1d92b8f)) [0218.474] SetEvent (hEvent=0x24c) returned 1 [0218.475] SetEvent (hEvent=0x24c) returned 1 [0218.475] free (_Block=0xd5c700) [0218.475] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x8, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0218.475] malloc (_Size=0x48) returned 0xd5c700 [0218.476] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x82e5d13, dwHighDateTime=0x1d92b8f)) [0218.476] SetEvent (hEvent=0x24c) returned 1 [0218.477] SetEvent (hEvent=0x24c) returned 1 [0218.478] free (_Block=0xd5c700) [0218.478] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x8, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0218.478] malloc (_Size=0x48) returned 0xd5c700 [0218.478] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x82e5d13, dwHighDateTime=0x1d92b8f)) [0218.478] SetEvent (hEvent=0x24c) returned 1 [0218.479] SetEvent (hEvent=0x24c) returned 1 [0218.479] free (_Block=0xd5c700) [0218.479] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x8, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.479] malloc (_Size=0x48) returned 0xd5c700 [0218.479] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x82e5d13, dwHighDateTime=0x1d92b8f)) [0218.479] SetEvent (hEvent=0x24c) returned 1 [0218.481] SetEvent (hEvent=0x24c) returned 1 [0218.481] free (_Block=0xd5c700) [0218.482] CM_Get_Device_IDA (in: dnDevInst=0x9, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\IP_TUNNEL_VBUS\\IP_TUNNEL_DEVICE_ROOT") returned 0x0 [0218.482] malloc (_Size=0x48) returned 0xd5c570 [0218.482] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x82e5d13, dwHighDateTime=0x1d92b8f)) [0218.482] SetEvent (hEvent=0x24c) returned 1 [0218.482] SetEvent (hEvent=0x24c) returned 1 [0218.483] free (_Block=0xd5c570) [0218.483] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.483] malloc (_Size=0x10) returned 0xd97a60 [0218.483] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd97a60, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd97a60, pulLength=0x115d7d8) returned 0x0 [0218.483] free (_Block=0xd97a60) [0218.483] malloc (_Size=0x48) returned 0xd5c750 [0218.483] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x82e5d13, dwHighDateTime=0x1d92b8f)) [0218.483] SetEvent (hEvent=0x24c) returned 1 [0218.484] malloc (_Size=0x18) returned 0xd97f20 [0218.484] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0218.484] free (_Block=0xd97f20) [0218.484] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2500 [0218.484] SafeArrayGetDim (psa=0x593010) returned 0x1 [0218.484] SafeArrayGetLBound (in: psa=0x593010, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.484] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.484] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0000 [0218.484] SafeArrayGetDim (psa=0x593010) returned 0x1 [0218.484] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.484] SafeArrayGetElemsize (psa=0x593010) returned 0x8 [0218.484] SafeArrayGetElement (in: psa=0x593010, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.487] memcpy (in: _Dst=0x115d438, _Src=0x5783d0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.488] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0000) returned 1 [0218.488] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2500) returned 1 [0218.488] SetEvent (hEvent=0x24c) returned 1 [0218.489] free (_Block=0xd5c750) [0218.489] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.489] malloc (_Size=0x38) returned 0xd60a30 [0218.489] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd60a30, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd60a30, pulLength=0x115d7d8) returned 0x0 [0218.490] free (_Block=0xd60a30) [0218.490] malloc (_Size=0x48) returned 0xd5c570 [0218.490] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x830c1db, dwHighDateTime=0x1d92b8f)) [0218.490] SetEvent (hEvent=0x24c) returned 1 [0218.490] malloc (_Size=0x18) returned 0xd97dc0 [0218.490] SafeArrayPutElement (psa=0x593490, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0218.490] free (_Block=0xd97dc0) [0218.490] malloc (_Size=0x18) returned 0xd97fe0 [0218.490] SafeArrayPutElement (psa=0x593490, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0218.490] free (_Block=0xd97fe0) [0218.490] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1f80 [0218.490] SafeArrayGetDim (psa=0x593490) returned 0x1 [0218.490] SafeArrayGetLBound (in: psa=0x593490, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.490] SafeArrayGetUBound (in: psa=0x593490, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.490] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0000 [0218.490] SafeArrayGetDim (psa=0x593490) returned 0x1 [0218.490] SafeArrayGetUBound (in: psa=0x593490, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.490] SafeArrayGetElemsize (psa=0x593490) returned 0x8 [0218.491] SafeArrayGetElement (in: psa=0x593490, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.491] memcpy (in: _Dst=0x115d438, _Src=0x5962c0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.491] memcpy (in: _Dst=0x115d438, _Src=0x5962c8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.492] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0000) returned 1 [0218.492] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1f80) returned 1 [0218.492] SetEvent (hEvent=0x24c) returned 1 [0218.493] free (_Block=0xd5c570) [0218.493] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.499] malloc (_Size=0x48) returned 0xd5c570 [0218.499] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x830c1db, dwHighDateTime=0x1d92b8f)) [0218.499] SetEvent (hEvent=0x24c) returned 1 [0218.500] SetEvent (hEvent=0x24c) returned 1 [0218.501] free (_Block=0xd5c570) [0218.501] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.501] malloc (_Size=0x48) returned 0xd5c570 [0218.501] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x830c1db, dwHighDateTime=0x1d92b8f)) [0218.501] SetEvent (hEvent=0x24c) returned 1 [0218.502] SetEvent (hEvent=0x24c) returned 1 [0218.502] free (_Block=0xd5c570) [0218.502] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.502] malloc (_Size=0x48) returned 0xd5c570 [0218.502] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x833436b, dwHighDateTime=0x1d92b8f)) [0218.503] SetEvent (hEvent=0x24c) returned 1 [0218.503] SetEvent (hEvent=0x24c) returned 1 [0218.504] free (_Block=0xd5c570) [0218.504] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.504] malloc (_Size=0x48) returned 0xd5c570 [0218.504] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x833436b, dwHighDateTime=0x1d92b8f)) [0218.504] SetEvent (hEvent=0x24c) returned 1 [0218.506] SetEvent (hEvent=0x24c) returned 1 [0218.507] free (_Block=0xd5c570) [0218.507] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.508] malloc (_Size=0x48) returned 0xd5c570 [0218.508] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x833436b, dwHighDateTime=0x1d92b8f)) [0218.508] SetEvent (hEvent=0x24c) returned 1 [0218.509] SetEvent (hEvent=0x24c) returned 1 [0218.509] free (_Block=0xd5c570) [0218.509] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x9, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0218.510] malloc (_Size=0x48) returned 0xd5c570 [0218.510] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x833436b, dwHighDateTime=0x1d92b8f)) [0218.510] SetEvent (hEvent=0x24c) returned 1 [0218.511] SetEvent (hEvent=0x24c) returned 1 [0218.512] free (_Block=0xd5c570) [0218.512] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x9, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0218.512] malloc (_Size=0x48) returned 0xd5c570 [0218.512] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x833436b, dwHighDateTime=0x1d92b8f)) [0218.512] SetEvent (hEvent=0x24c) returned 1 [0218.513] SetEvent (hEvent=0x24c) returned 1 [0218.513] free (_Block=0xd5c570) [0218.513] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x9, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.525] malloc (_Size=0x48) returned 0xd5c570 [0218.525] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x83582ea, dwHighDateTime=0x1d92b8f)) [0218.525] SetEvent (hEvent=0x24c) returned 1 [0218.527] SetEvent (hEvent=0x24c) returned 1 [0218.527] free (_Block=0xd5c570) [0218.527] CM_Get_Device_IDA (in: dnDevInst=0xa, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="USB\\VID_0A81&PID_0203\\28754") returned 0x0 [0218.527] malloc (_Size=0x48) returned 0xd5c700 [0218.527] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x83582ea, dwHighDateTime=0x1d92b8f)) [0218.527] SetEvent (hEvent=0x24c) returned 1 [0218.528] SetEvent (hEvent=0x24c) returned 1 [0218.529] free (_Block=0xd5c700) [0218.529] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.529] malloc (_Size=0x6c) returned 0xd95f80 [0218.529] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd95f80, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd95f80, pulLength=0x115d7d8) returned 0x0 [0218.529] free (_Block=0xd95f80) [0218.529] malloc (_Size=0x48) returned 0xd5c700 [0218.529] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x83582ea, dwHighDateTime=0x1d92b8f)) [0218.530] SetEvent (hEvent=0x24c) returned 1 [0218.530] malloc (_Size=0x18) returned 0xd97ac0 [0218.530] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0218.530] free (_Block=0xd97ac0) [0218.530] malloc (_Size=0x18) returned 0xd97d40 [0218.530] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.530] free (_Block=0xd97d40) [0218.530] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1000 [0218.530] SafeArrayGetDim (psa=0x593010) returned 0x1 [0218.530] SafeArrayGetLBound (in: psa=0x593010, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.530] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.530] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afe50 [0218.530] SafeArrayGetDim (psa=0x593010) returned 0x1 [0218.530] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.530] SafeArrayGetElemsize (psa=0x593010) returned 0x8 [0218.530] SafeArrayGetElement (in: psa=0x593010, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.531] memcpy (in: _Dst=0x115d438, _Src=0x5966a0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.531] memcpy (in: _Dst=0x115d438, _Src=0x5966a8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.532] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afe50) returned 1 [0218.532] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1000) returned 1 [0218.533] SetEvent (hEvent=0x24c) returned 1 [0218.533] free (_Block=0xd5c700) [0218.533] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.533] malloc (_Size=0x90) returned 0xd64750 [0218.533] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd64750, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd64750, pulLength=0x115d7d8) returned 0x0 [0218.534] free (_Block=0xd64750) [0218.534] malloc (_Size=0x48) returned 0xd5c750 [0218.534] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x837f695, dwHighDateTime=0x1d92b8f)) [0218.534] SetEvent (hEvent=0x24c) returned 1 [0218.534] malloc (_Size=0x18) returned 0xd97d00 [0218.534] SafeArrayPutElement (psa=0x593b90, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0218.534] free (_Block=0xd97d00) [0218.534] malloc (_Size=0x18) returned 0xd98020 [0218.535] SafeArrayPutElement (psa=0x593b90, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.535] free (_Block=0xd98020) [0218.535] malloc (_Size=0x18) returned 0xd97dc0 [0218.535] SafeArrayPutElement (psa=0x593b90, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.535] free (_Block=0xd97dc0) [0218.535] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e0d80 [0218.535] SafeArrayGetDim (psa=0x593b90) returned 0x1 [0218.535] SafeArrayGetLBound (in: psa=0x593b90, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.535] SafeArrayGetUBound (in: psa=0x593b90, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.535] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b02d0 [0218.535] SafeArrayGetDim (psa=0x593b90) returned 0x1 [0218.535] SafeArrayGetUBound (in: psa=0x593b90, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.535] SafeArrayGetElemsize (psa=0x593b90) returned 0x8 [0218.535] SafeArrayGetElement (in: psa=0x593b90, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.535] memcpy (in: _Dst=0x115d438, _Src=0x596940, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.536] memcpy (in: _Dst=0x115d438, _Src=0x596948, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.536] memcpy (in: _Dst=0x115d438, _Src=0x596950, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.536] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b02d0) returned 1 [0218.537] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e0d80) returned 1 [0218.537] SetEvent (hEvent=0x24c) returned 1 [0218.538] free (_Block=0xd5c750) [0218.538] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.540] malloc (_Size=0x48) returned 0xd5c750 [0218.540] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x837f695, dwHighDateTime=0x1d92b8f)) [0218.541] SetEvent (hEvent=0x24c) returned 1 [0218.541] SetEvent (hEvent=0x24c) returned 1 [0218.542] free (_Block=0xd5c750) [0218.542] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.542] malloc (_Size=0x48) returned 0xd5c700 [0218.542] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x837f695, dwHighDateTime=0x1d92b8f)) [0218.542] SetEvent (hEvent=0x24c) returned 1 [0218.543] SetEvent (hEvent=0x24c) returned 1 [0218.543] free (_Block=0xd5c700) [0218.543] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.544] malloc (_Size=0x48) returned 0xd5c700 [0218.544] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x837f695, dwHighDateTime=0x1d92b8f)) [0218.544] SetEvent (hEvent=0x24c) returned 1 [0218.544] SetEvent (hEvent=0x24c) returned 1 [0218.545] free (_Block=0xd5c700) [0218.545] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.545] malloc (_Size=0x48) returned 0xd5c700 [0218.545] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x837f695, dwHighDateTime=0x1d92b8f)) [0218.545] SetEvent (hEvent=0x24c) returned 1 [0218.569] malloc (_Size=0xd8) returned 0xd64670 [0218.569] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0218.569] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0218.570] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0218.570] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0218.570] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0218.570] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0218.570] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0218.570] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0218.570] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0218.570] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0218.570] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0218.570] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0218.571] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0218.571] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0218.571] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0218.571] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0218.571] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0218.571] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0218.571] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0218.571] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0218.571] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0218.571] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0218.571] malloc (_Size=0x18) returned 0xd97f00 [0218.572] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.574] malloc (_Size=0x48) returned 0xd5c700 [0218.574] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x83cab58, dwHighDateTime=0x1d92b8f)) [0218.575] SetEvent (hEvent=0x24c) returned 1 [0218.576] SetEvent (hEvent=0x24c) returned 1 [0218.577] free (_Block=0xd5c700) [0218.577] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0xa, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0218.577] malloc (_Size=0x48) returned 0xd5c700 [0218.577] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x83cab58, dwHighDateTime=0x1d92b8f)) [0218.577] SetEvent (hEvent=0x24c) returned 1 [0218.579] SetEvent (hEvent=0x24c) returned 1 [0218.580] free (_Block=0xd5c700) [0218.580] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0xa, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0218.580] malloc (_Size=0x48) returned 0xd5c700 [0218.580] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x83f0d74, dwHighDateTime=0x1d92b8f)) [0218.580] SetEvent (hEvent=0x24c) returned 1 [0218.581] SetEvent (hEvent=0x24c) returned 1 [0218.582] free (_Block=0xd5c700) [0218.582] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xa, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.582] malloc (_Size=0x48) returned 0xd5c700 [0218.582] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x83f0d74, dwHighDateTime=0x1d92b8f)) [0218.582] SetEvent (hEvent=0x24c) returned 1 [0218.584] SetEvent (hEvent=0x24c) returned 1 [0218.585] free (_Block=0xd5c700) [0218.585] CM_Get_Device_IDA (in: dnDevInst=0xb, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0C01\\2&DABA3FF&0") returned 0x0 [0218.585] malloc (_Size=0x48) returned 0xd5c700 [0218.585] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x83f0d74, dwHighDateTime=0x1d92b8f)) [0218.585] SetEvent (hEvent=0x24c) returned 1 [0218.586] SetEvent (hEvent=0x24c) returned 1 [0218.587] free (_Block=0xd5c700) [0218.587] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.587] malloc (_Size=0x5a) returned 0xd60330 [0218.587] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd60330, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd60330, pulLength=0x115d7d8) returned 0x0 [0218.588] free (_Block=0xd60330) [0218.588] malloc (_Size=0x48) returned 0xd5c700 [0218.588] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x83f0d74, dwHighDateTime=0x1d92b8f)) [0218.588] SetEvent (hEvent=0x24c) returned 1 [0218.589] malloc (_Size=0x18) returned 0xd97c60 [0218.589] SafeArrayPutElement (psa=0x593690, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.589] free (_Block=0xd97c60) [0218.589] malloc (_Size=0x18) returned 0xd97bc0 [0218.589] SafeArrayPutElement (psa=0x593690, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.589] free (_Block=0xd97bc0) [0218.589] malloc (_Size=0x18) returned 0xd97e20 [0218.589] SafeArrayPutElement (psa=0x593690, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0218.589] free (_Block=0xd97e20) [0218.589] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e0d80 [0218.589] SafeArrayGetDim (psa=0x593690) returned 0x1 [0218.590] SafeArrayGetLBound (in: psa=0x593690, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.590] SafeArrayGetUBound (in: psa=0x593690, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.590] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b02d0 [0218.590] SafeArrayGetDim (psa=0x593690) returned 0x1 [0218.590] SafeArrayGetUBound (in: psa=0x593690, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.590] SafeArrayGetElemsize (psa=0x593690) returned 0x8 [0218.590] SafeArrayGetElement (in: psa=0x593690, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.590] memcpy (in: _Dst=0x115d438, _Src=0x5968c0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.590] memcpy (in: _Dst=0x115d438, _Src=0x5968c8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.590] memcpy (in: _Dst=0x115d438, _Src=0x5968d0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.591] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b02d0) returned 1 [0218.592] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e0d80) returned 1 [0218.592] SetEvent (hEvent=0x24c) returned 1 [0218.593] free (_Block=0xd5c700) [0218.593] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0218.593] malloc (_Size=0x48) returned 0xd5c700 [0218.593] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x83f0d74, dwHighDateTime=0x1d92b8f)) [0218.593] SetEvent (hEvent=0x24c) returned 1 [0218.599] SetEvent (hEvent=0x24c) returned 1 [0218.600] free (_Block=0xd5c700) [0218.600] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.603] malloc (_Size=0x48) returned 0xd5c750 [0218.603] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x841706d, dwHighDateTime=0x1d92b8f)) [0218.603] SetEvent (hEvent=0x24c) returned 1 [0218.604] SetEvent (hEvent=0x24c) returned 1 [0218.605] free (_Block=0xd5c750) [0218.605] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.605] malloc (_Size=0x48) returned 0xd5c700 [0218.605] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x841706d, dwHighDateTime=0x1d92b8f)) [0218.605] SetEvent (hEvent=0x24c) returned 1 [0218.606] SetEvent (hEvent=0x24c) returned 1 [0218.607] free (_Block=0xd5c700) [0218.607] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.607] malloc (_Size=0x48) returned 0xd5c700 [0218.607] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x841706d, dwHighDateTime=0x1d92b8f)) [0218.608] SetEvent (hEvent=0x24c) returned 1 [0218.609] SetEvent (hEvent=0x24c) returned 1 [0218.609] free (_Block=0xd5c700) [0218.610] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.610] malloc (_Size=0x48) returned 0xd5c700 [0218.610] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x843d0e2, dwHighDateTime=0x1d92b8f)) [0218.610] SetEvent (hEvent=0x24c) returned 1 [0218.612] SetEvent (hEvent=0x24c) returned 1 [0218.623] free (_Block=0xd5c700) [0218.623] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.626] malloc (_Size=0x48) returned 0xd5c700 [0218.626] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.626] SetEvent (hEvent=0x24c) returned 1 [0218.627] SetEvent (hEvent=0x24c) returned 1 [0218.628] free (_Block=0xd5c700) [0218.628] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0xb, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0218.628] malloc (_Size=0x48) returned 0xd5c700 [0218.628] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.628] SetEvent (hEvent=0x24c) returned 1 [0218.630] SetEvent (hEvent=0x24c) returned 1 [0218.631] free (_Block=0xd5c700) [0218.631] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0xb, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0218.631] malloc (_Size=0x48) returned 0xd5c700 [0218.631] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.631] SetEvent (hEvent=0x24c) returned 1 [0218.632] SetEvent (hEvent=0x24c) returned 1 [0218.633] free (_Block=0xd5c700) [0218.633] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xb, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.633] malloc (_Size=0x48) returned 0xd5c700 [0218.633] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.633] SetEvent (hEvent=0x24c) returned 1 [0218.635] SetEvent (hEvent=0x24c) returned 1 [0218.636] free (_Block=0xd5c700) [0218.636] CM_Get_Device_IDA (in: dnDevInst=0xc, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\IP_TUNNEL_VBUS\\TEREDO_TUNNEL_DEVICE") returned 0x0 [0218.636] malloc (_Size=0x48) returned 0xd5c570 [0218.636] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.637] SetEvent (hEvent=0x24c) returned 1 [0218.638] SetEvent (hEvent=0x24c) returned 1 [0218.638] free (_Block=0xd5c570) [0218.639] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.639] malloc (_Size=0x12) returned 0xd98020 [0218.639] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd98020, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd98020, pulLength=0x115d7d8) returned 0x0 [0218.639] free (_Block=0xd98020) [0218.639] malloc (_Size=0x48) returned 0xd5c570 [0218.639] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.639] SetEvent (hEvent=0x24c) returned 1 [0218.640] malloc (_Size=0x18) returned 0xd97900 [0218.640] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0218.640] free (_Block=0xd97900) [0218.640] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1b00 [0218.640] SafeArrayGetDim (psa=0x593410) returned 0x1 [0218.640] SafeArrayGetLBound (in: psa=0x593410, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.640] SafeArrayGetUBound (in: psa=0x593410, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.640] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0390 [0218.640] SafeArrayGetDim (psa=0x593410) returned 0x1 [0218.640] SafeArrayGetUBound (in: psa=0x593410, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.640] SafeArrayGetElemsize (psa=0x593410) returned 0x8 [0218.640] SafeArrayGetElement (in: psa=0x593410, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.640] memcpy (in: _Dst=0x115d438, _Src=0x5783d0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.642] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0390) returned 1 [0218.643] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1b00) returned 1 [0218.643] SetEvent (hEvent=0x24c) returned 1 [0218.644] free (_Block=0xd5c570) [0218.644] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.644] malloc (_Size=0x38) returned 0xd615b0 [0218.644] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd615b0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd615b0, pulLength=0x115d7d8) returned 0x0 [0218.645] free (_Block=0xd615b0) [0218.645] malloc (_Size=0x48) returned 0xd5c570 [0218.645] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x848977d, dwHighDateTime=0x1d92b8f)) [0218.645] SetEvent (hEvent=0x24c) returned 1 [0218.645] malloc (_Size=0x18) returned 0xd97ec0 [0218.646] SafeArrayPutElement (psa=0x593150, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0218.646] free (_Block=0xd97ec0) [0218.646] malloc (_Size=0x18) returned 0xd98000 [0218.646] SafeArrayPutElement (psa=0x593150, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0218.646] free (_Block=0xd98000) [0218.646] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1600 [0218.646] SafeArrayGetDim (psa=0x593150) returned 0x1 [0218.646] SafeArrayGetLBound (in: psa=0x593150, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.646] SafeArrayGetUBound (in: psa=0x593150, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.646] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5aff10 [0218.646] SafeArrayGetDim (psa=0x593150) returned 0x1 [0218.646] SafeArrayGetUBound (in: psa=0x593150, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.646] SafeArrayGetElemsize (psa=0x593150) returned 0x8 [0218.646] SafeArrayGetElement (in: psa=0x593150, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.647] memcpy (in: _Dst=0x115d438, _Src=0x596520, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.647] memcpy (in: _Dst=0x115d438, _Src=0x596528, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.647] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5aff10) returned 1 [0218.648] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1600) returned 1 [0218.648] SetEvent (hEvent=0x24c) returned 1 [0218.649] free (_Block=0xd5c570) [0218.649] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.654] malloc (_Size=0x48) returned 0xd5c570 [0218.655] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x848977d, dwHighDateTime=0x1d92b8f)) [0218.655] SetEvent (hEvent=0x24c) returned 1 [0218.655] SetEvent (hEvent=0x24c) returned 1 [0218.656] free (_Block=0xd5c570) [0218.656] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.656] malloc (_Size=0x48) returned 0xd5c570 [0218.656] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x848977d, dwHighDateTime=0x1d92b8f)) [0218.656] SetEvent (hEvent=0x24c) returned 1 [0218.657] SetEvent (hEvent=0x24c) returned 1 [0218.657] free (_Block=0xd5c570) [0218.657] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.657] malloc (_Size=0x48) returned 0xd5c570 [0218.658] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x84af860, dwHighDateTime=0x1d92b8f)) [0218.658] SetEvent (hEvent=0x24c) returned 1 [0218.658] SetEvent (hEvent=0x24c) returned 1 [0218.659] free (_Block=0xd5c570) [0218.659] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.659] malloc (_Size=0x48) returned 0xd5c570 [0218.659] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x84af860, dwHighDateTime=0x1d92b8f)) [0218.659] SetEvent (hEvent=0x24c) returned 1 [0218.661] SetEvent (hEvent=0x24c) returned 1 [0218.662] free (_Block=0xd5c570) [0218.662] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.663] malloc (_Size=0x48) returned 0xd5c570 [0218.663] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x84af860, dwHighDateTime=0x1d92b8f)) [0218.663] SetEvent (hEvent=0x24c) returned 1 [0218.664] SetEvent (hEvent=0x24c) returned 1 [0218.665] free (_Block=0xd5c570) [0218.665] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0xc, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0218.665] malloc (_Size=0x48) returned 0xd5c570 [0218.665] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x84af860, dwHighDateTime=0x1d92b8f)) [0218.665] SetEvent (hEvent=0x24c) returned 1 [0218.666] SetEvent (hEvent=0x24c) returned 1 [0218.667] free (_Block=0xd5c570) [0218.667] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0xc, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0218.667] malloc (_Size=0x48) returned 0xd5c570 [0218.667] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x84af860, dwHighDateTime=0x1d92b8f)) [0218.667] SetEvent (hEvent=0x24c) returned 1 [0218.668] SetEvent (hEvent=0x24c) returned 1 [0218.669] free (_Block=0xd5c570) [0218.669] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xc, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.669] malloc (_Size=0x48) returned 0xd5c570 [0218.669] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x84af860, dwHighDateTime=0x1d92b8f)) [0218.670] SetEvent (hEvent=0x24c) returned 1 [0218.671] SetEvent (hEvent=0x24c) returned 1 [0218.672] free (_Block=0xd5c570) [0218.672] CM_Get_Device_IDA (in: dnDevInst=0xd, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\THERMALZONE\\TZ00") returned 0x0 [0218.672] malloc (_Size=0x48) returned 0xd5c570 [0218.677] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x84d5b12, dwHighDateTime=0x1d92b8f)) [0218.677] SetEvent (hEvent=0x24c) returned 1 [0218.678] SetEvent (hEvent=0x24c) returned 1 [0218.679] free (_Block=0xd5c570) [0218.679] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.679] malloc (_Size=0x3e) returned 0xd5c570 [0218.679] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd5c570, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd5c570, pulLength=0x115d7d8) returned 0x0 [0218.680] free (_Block=0xd5c570) [0218.680] malloc (_Size=0x48) returned 0xd5c570 [0218.680] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x84d5b12, dwHighDateTime=0x1d92b8f)) [0218.680] SetEvent (hEvent=0x24c) returned 1 [0218.681] malloc (_Size=0x18) returned 0xd97ba0 [0218.681] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.681] free (_Block=0xd97ba0) [0218.681] malloc (_Size=0x18) returned 0xd979a0 [0218.681] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.681] free (_Block=0xd979a0) [0218.681] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2500 [0218.681] SafeArrayGetDim (psa=0x593010) returned 0x1 [0218.681] SafeArrayGetLBound (in: psa=0x593010, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.681] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.681] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b02d0 [0218.681] SafeArrayGetDim (psa=0x593010) returned 0x1 [0218.681] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.681] SafeArrayGetElemsize (psa=0x593010) returned 0x8 [0218.681] SafeArrayGetElement (in: psa=0x593010, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.682] memcpy (in: _Dst=0x115d438, _Src=0x596580, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.682] memcpy (in: _Dst=0x115d438, _Src=0x596588, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.683] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b02d0) returned 1 [0218.683] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2500) returned 1 [0218.683] SetEvent (hEvent=0x24c) returned 1 [0218.684] free (_Block=0xd5c570) [0218.684] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0218.684] malloc (_Size=0x48) returned 0xd5c570 [0218.684] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x84d5b12, dwHighDateTime=0x1d92b8f)) [0218.684] SetEvent (hEvent=0x24c) returned 1 [0218.685] SetEvent (hEvent=0x24c) returned 1 [0218.686] free (_Block=0xd5c570) [0218.686] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.688] malloc (_Size=0x48) returned 0xd5c700 [0218.688] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.688] SetEvent (hEvent=0x24c) returned 1 [0218.689] SetEvent (hEvent=0x24c) returned 1 [0218.690] free (_Block=0xd5c700) [0218.690] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.690] malloc (_Size=0x48) returned 0xd5c570 [0218.690] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.690] SetEvent (hEvent=0x24c) returned 1 [0218.691] SetEvent (hEvent=0x24c) returned 1 [0218.692] free (_Block=0xd5c570) [0218.692] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.693] malloc (_Size=0x48) returned 0xd5c570 [0218.693] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.693] SetEvent (hEvent=0x24c) returned 1 [0218.694] SetEvent (hEvent=0x24c) returned 1 [0218.695] free (_Block=0xd5c570) [0218.695] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.695] malloc (_Size=0x48) returned 0xd5c570 [0218.695] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.695] SetEvent (hEvent=0x24c) returned 1 [0218.697] SetEvent (hEvent=0x24c) returned 1 [0218.698] free (_Block=0xd5c570) [0218.698] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.700] malloc (_Size=0x48) returned 0xd5c570 [0218.700] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.700] SetEvent (hEvent=0x24c) returned 1 [0218.701] SetEvent (hEvent=0x24c) returned 1 [0218.702] free (_Block=0xd5c570) [0218.702] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0xd, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0218.702] malloc (_Size=0x48) returned 0xd5c570 [0218.702] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.702] SetEvent (hEvent=0x24c) returned 1 [0218.709] SetEvent (hEvent=0x24c) returned 1 [0218.710] free (_Block=0xd5c570) [0218.710] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0xd, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0218.710] malloc (_Size=0x48) returned 0xd5c570 [0218.710] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x8522024, dwHighDateTime=0x1d92b8f)) [0218.710] SetEvent (hEvent=0x24c) returned 1 [0218.711] SetEvent (hEvent=0x24c) returned 1 [0218.712] free (_Block=0xd5c570) [0218.712] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xd, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.712] malloc (_Size=0x48) returned 0xd5c570 [0218.712] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8522024, dwHighDateTime=0x1d92b8f)) [0218.712] SetEvent (hEvent=0x24c) returned 1 [0218.715] SetEvent (hEvent=0x24c) returned 1 [0218.716] free (_Block=0xd5c570) [0218.716] CM_Get_Device_IDA (in: dnDevInst=0xe, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0103\\0") returned 0x0 [0218.716] malloc (_Size=0x48) returned 0xd5c570 [0218.716] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x8522024, dwHighDateTime=0x1d92b8f)) [0218.716] SetEvent (hEvent=0x24c) returned 1 [0218.717] SetEvent (hEvent=0x24c) returned 1 [0218.718] free (_Block=0xd5c570) [0218.718] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.718] malloc (_Size=0x5a) returned 0xd60100 [0218.718] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd60100, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd60100, pulLength=0x115d7d8) returned 0x0 [0218.718] free (_Block=0xd60100) [0218.719] malloc (_Size=0x48) returned 0xd5c570 [0218.719] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8522024, dwHighDateTime=0x1d92b8f)) [0218.719] SetEvent (hEvent=0x24c) returned 1 [0218.720] malloc (_Size=0x18) returned 0xd97ee0 [0218.720] SafeArrayPutElement (psa=0x593050, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.720] free (_Block=0xd97ee0) [0218.720] malloc (_Size=0x18) returned 0xd97a60 [0218.720] SafeArrayPutElement (psa=0x593050, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.720] free (_Block=0xd97a60) [0218.720] malloc (_Size=0x18) returned 0xd979c0 [0218.720] SafeArrayPutElement (psa=0x593050, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0218.720] free (_Block=0xd979c0) [0218.721] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2480 [0218.721] SafeArrayGetDim (psa=0x593050) returned 0x1 [0218.721] SafeArrayGetLBound (in: psa=0x593050, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.721] SafeArrayGetUBound (in: psa=0x593050, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.721] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0270 [0218.721] SafeArrayGetDim (psa=0x593050) returned 0x1 [0218.721] SafeArrayGetUBound (in: psa=0x593050, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.721] SafeArrayGetElemsize (psa=0x593050) returned 0x8 [0218.721] SafeArrayGetElement (in: psa=0x593050, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.721] memcpy (in: _Dst=0x115d438, _Src=0x596680, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.721] memcpy (in: _Dst=0x115d438, _Src=0x596688, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.722] memcpy (in: _Dst=0x115d438, _Src=0x596690, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.722] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0270) returned 1 [0218.723] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2480) returned 1 [0218.723] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0218.723] malloc (_Size=0x48) returned 0xd5c700 [0218.723] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x85482ef, dwHighDateTime=0x1d92b8f)) [0218.723] SetEvent (hEvent=0x24c) returned 1 [0218.724] SetEvent (hEvent=0x24c) returned 1 [0218.724] free (_Block=0xd5c700) [0218.724] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.726] malloc (_Size=0x48) returned 0xd5c750 [0218.726] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x85482ef, dwHighDateTime=0x1d92b8f)) [0218.727] SetEvent (hEvent=0x24c) returned 1 [0218.727] SetEvent (hEvent=0x24c) returned 1 [0218.728] free (_Block=0xd5c750) [0218.728] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.728] malloc (_Size=0x48) returned 0xd5c700 [0218.728] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x85482ef, dwHighDateTime=0x1d92b8f)) [0218.728] SetEvent (hEvent=0x24c) returned 1 [0218.729] SetEvent (hEvent=0x24c) returned 1 [0218.729] free (_Block=0xd5c700) [0218.729] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.730] malloc (_Size=0x48) returned 0xd5c700 [0218.730] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x85482ef, dwHighDateTime=0x1d92b8f)) [0218.730] SetEvent (hEvent=0x24c) returned 1 [0218.730] SetEvent (hEvent=0x24c) returned 1 [0218.731] free (_Block=0xd5c700) [0218.731] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.731] malloc (_Size=0x48) returned 0xd5c700 [0218.731] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x85482ef, dwHighDateTime=0x1d92b8f)) [0218.731] SetEvent (hEvent=0x24c) returned 1 [0218.733] SetEvent (hEvent=0x24c) returned 1 [0218.734] free (_Block=0xd5c700) [0218.734] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.738] malloc (_Size=0x48) returned 0xd5c700 [0218.738] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x856e527, dwHighDateTime=0x1d92b8f)) [0218.739] SetEvent (hEvent=0x24c) returned 1 [0218.740] SetEvent (hEvent=0x24c) returned 1 [0218.740] free (_Block=0xd5c700) [0218.740] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0xe, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0218.740] malloc (_Size=0x48) returned 0xd5c700 [0218.741] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x856e527, dwHighDateTime=0x1d92b8f)) [0218.741] SetEvent (hEvent=0x24c) returned 1 [0218.743] SetEvent (hEvent=0x24c) returned 1 [0218.743] free (_Block=0xd5c700) [0218.743] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0xe, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0218.744] malloc (_Size=0x48) returned 0xd5c700 [0218.744] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x856e527, dwHighDateTime=0x1d92b8f)) [0218.744] SetEvent (hEvent=0x24c) returned 1 [0218.745] SetEvent (hEvent=0x24c) returned 1 [0218.745] free (_Block=0xd5c700) [0218.746] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xe, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.746] malloc (_Size=0x48) returned 0xd5c700 [0218.746] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x856e527, dwHighDateTime=0x1d92b8f)) [0218.746] SetEvent (hEvent=0x24c) returned 1 [0218.748] SetEvent (hEvent=0x24c) returned 1 [0218.749] free (_Block=0xd5c700) [0218.749] CM_Get_Device_IDA (in: dnDevInst=0xf, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\COMPOSITEBUS\\0000") returned 0x0 [0218.749] malloc (_Size=0x48) returned 0xd5c700 [0218.749] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x856e527, dwHighDateTime=0x1d92b8f)) [0218.749] SetEvent (hEvent=0x24c) returned 1 [0218.750] SetEvent (hEvent=0x24c) returned 1 [0218.751] free (_Block=0xd5c700) [0218.751] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.751] malloc (_Size=0x26) returned 0xd5f480 [0218.751] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd5f480, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd5f480, pulLength=0x115d7d8) returned 0x0 [0218.752] free (_Block=0xd5f480) [0218.752] malloc (_Size=0x48) returned 0xd5c700 [0218.752] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8594754, dwHighDateTime=0x1d92b8f)) [0218.752] SetEvent (hEvent=0x24c) returned 1 [0218.753] malloc (_Size=0x18) returned 0xd97f20 [0218.753] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.753] free (_Block=0xd97f20) [0218.753] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2700 [0218.753] SafeArrayGetDim (psa=0x593010) returned 0x1 [0218.753] SafeArrayGetLBound (in: psa=0x593010, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.753] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.753] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afeb0 [0218.753] SafeArrayGetDim (psa=0x593010) returned 0x1 [0218.753] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.753] SafeArrayGetElemsize (psa=0x593010) returned 0x8 [0218.753] SafeArrayGetElement (in: psa=0x593010, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.753] memcpy (in: _Dst=0x115d438, _Src=0x5783d0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.754] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afeb0) returned 1 [0218.754] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2700) returned 1 [0218.755] SetEvent (hEvent=0x24c) returned 1 [0218.755] free (_Block=0xd5c700) [0218.755] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0218.755] malloc (_Size=0x48) returned 0xd5c700 [0218.756] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8594754, dwHighDateTime=0x1d92b8f)) [0218.756] SetEvent (hEvent=0x24c) returned 1 [0218.756] SetEvent (hEvent=0x24c) returned 1 [0218.757] free (_Block=0xd5c700) [0218.757] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.762] malloc (_Size=0x48) returned 0xd5c700 [0218.762] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8594754, dwHighDateTime=0x1d92b8f)) [0218.763] SetEvent (hEvent=0x24c) returned 1 [0218.763] SetEvent (hEvent=0x24c) returned 1 [0218.764] free (_Block=0xd5c700) [0218.764] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.764] malloc (_Size=0x48) returned 0xd5c700 [0218.764] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8594754, dwHighDateTime=0x1d92b8f)) [0218.764] SetEvent (hEvent=0x24c) returned 1 [0218.765] SetEvent (hEvent=0x24c) returned 1 [0218.765] free (_Block=0xd5c700) [0218.765] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.766] malloc (_Size=0x48) returned 0xd5c700 [0218.766] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8594754, dwHighDateTime=0x1d92b8f)) [0218.766] SetEvent (hEvent=0x24c) returned 1 [0218.767] SetEvent (hEvent=0x24c) returned 1 [0218.767] free (_Block=0xd5c700) [0218.767] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.767] malloc (_Size=0x48) returned 0xd5c700 [0218.767] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x85ba98f, dwHighDateTime=0x1d92b8f)) [0218.768] SetEvent (hEvent=0x24c) returned 1 [0218.770] SetEvent (hEvent=0x24c) returned 1 [0218.770] free (_Block=0xd5c700) [0218.770] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.772] malloc (_Size=0x48) returned 0xd5c750 [0218.772] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x85ba98f, dwHighDateTime=0x1d92b8f)) [0218.772] SetEvent (hEvent=0x24c) returned 1 [0218.772] SetEvent (hEvent=0x24c) returned 1 [0218.773] free (_Block=0xd5c750) [0218.773] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0xf, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0218.773] malloc (_Size=0x48) returned 0xd5c750 [0218.773] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x85ba98f, dwHighDateTime=0x1d92b8f)) [0218.773] SetEvent (hEvent=0x24c) returned 1 [0218.775] SetEvent (hEvent=0x24c) returned 1 [0218.775] free (_Block=0xd5c750) [0218.775] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0xf, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0218.776] malloc (_Size=0x48) returned 0xd5c750 [0218.776] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x85ba98f, dwHighDateTime=0x1d92b8f)) [0218.776] SetEvent (hEvent=0x24c) returned 1 [0218.776] SetEvent (hEvent=0x24c) returned 1 [0218.777] free (_Block=0xd5c750) [0218.777] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0xf, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.777] malloc (_Size=0x48) returned 0xd5c750 [0218.777] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x85ba98f, dwHighDateTime=0x1d92b8f)) [0218.777] SetEvent (hEvent=0x24c) returned 1 [0218.779] SetEvent (hEvent=0x24c) returned 1 [0218.779] free (_Block=0xd5c750) [0218.780] CM_Get_Device_IDA (in: dnDevInst=0x10, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\VDRVROOT\\0000") returned 0x0 [0218.780] malloc (_Size=0x48) returned 0xd5c700 [0218.780] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x85ba98f, dwHighDateTime=0x1d92b8f)) [0218.780] SetEvent (hEvent=0x24c) returned 1 [0218.780] SetEvent (hEvent=0x24c) returned 1 [0218.781] free (_Block=0xd5c700) [0218.781] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.781] malloc (_Size=0x1e) returned 0xd5f480 [0218.781] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd5f480, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd5f480, pulLength=0x115d7d8) returned 0x0 [0218.802] free (_Block=0xd5f480) [0218.802] malloc (_Size=0x48) returned 0xd5c700 [0218.802] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8606da9, dwHighDateTime=0x1d92b8f)) [0218.802] SetEvent (hEvent=0x24c) returned 1 [0218.803] malloc (_Size=0x18) returned 0xd97ac0 [0218.803] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.803] free (_Block=0xd97ac0) [0218.803] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2480 [0218.803] SafeArrayGetDim (psa=0x593010) returned 0x1 [0218.803] SafeArrayGetLBound (in: psa=0x593010, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.803] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.803] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afdf0 [0218.803] SafeArrayGetDim (psa=0x593010) returned 0x1 [0218.803] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.803] SafeArrayGetElemsize (psa=0x593010) returned 0x8 [0218.803] SafeArrayGetElement (in: psa=0x593010, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.804] memcpy (in: _Dst=0x115d438, _Src=0x5783d0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.805] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afdf0) returned 1 [0218.805] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2480) returned 1 [0218.805] SetEvent (hEvent=0x24c) returned 1 [0218.806] free (_Block=0xd5c700) [0218.806] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0218.806] malloc (_Size=0x48) returned 0xd5c570 [0218.806] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8606da9, dwHighDateTime=0x1d92b8f)) [0218.806] SetEvent (hEvent=0x24c) returned 1 [0218.807] SetEvent (hEvent=0x24c) returned 1 [0218.808] free (_Block=0xd5c570) [0218.808] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.812] malloc (_Size=0x48) returned 0xd5c570 [0218.812] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8606da9, dwHighDateTime=0x1d92b8f)) [0218.812] SetEvent (hEvent=0x24c) returned 1 [0218.815] SetEvent (hEvent=0x24c) returned 1 [0218.816] free (_Block=0xd5c570) [0218.816] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.816] malloc (_Size=0x48) returned 0xd5c570 [0218.816] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x862cf5f, dwHighDateTime=0x1d92b8f)) [0218.816] SetEvent (hEvent=0x24c) returned 1 [0218.817] SetEvent (hEvent=0x24c) returned 1 [0218.817] free (_Block=0xd5c570) [0218.817] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.817] malloc (_Size=0x48) returned 0xd5c570 [0218.817] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x862cf5f, dwHighDateTime=0x1d92b8f)) [0218.817] SetEvent (hEvent=0x24c) returned 1 [0218.818] SetEvent (hEvent=0x24c) returned 1 [0218.818] free (_Block=0xd5c570) [0218.818] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.819] malloc (_Size=0x48) returned 0xd5c570 [0218.819] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x862cf5f, dwHighDateTime=0x1d92b8f)) [0218.819] SetEvent (hEvent=0x24c) returned 1 [0218.821] SetEvent (hEvent=0x24c) returned 1 [0218.822] free (_Block=0xd5c570) [0218.822] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.823] malloc (_Size=0x48) returned 0xd5c570 [0218.824] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x862cf5f, dwHighDateTime=0x1d92b8f)) [0218.824] SetEvent (hEvent=0x24c) returned 1 [0218.824] SetEvent (hEvent=0x24c) returned 1 [0218.825] free (_Block=0xd5c570) [0218.825] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x10, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0218.825] malloc (_Size=0x48) returned 0xd5c570 [0218.825] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x862cf5f, dwHighDateTime=0x1d92b8f)) [0218.825] SetEvent (hEvent=0x24c) returned 1 [0218.827] SetEvent (hEvent=0x24c) returned 1 [0218.827] free (_Block=0xd5c570) [0218.827] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x10, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0218.827] malloc (_Size=0x48) returned 0xd5c700 [0218.827] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x862cf5f, dwHighDateTime=0x1d92b8f)) [0218.827] SetEvent (hEvent=0x24c) returned 1 [0218.828] SetEvent (hEvent=0x24c) returned 1 [0218.828] free (_Block=0xd5c700) [0218.834] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x10, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.834] malloc (_Size=0x48) returned 0xd5c570 [0218.834] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x86541dc, dwHighDateTime=0x1d92b8f)) [0218.834] SetEvent (hEvent=0x24c) returned 1 [0218.835] SetEvent (hEvent=0x24c) returned 1 [0218.836] free (_Block=0xd5c570) [0218.836] CM_Get_Device_IDA (in: dnDevInst=0x11, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0A06\\GPE0_RESOURCES") returned 0x0 [0218.836] malloc (_Size=0x48) returned 0xd5c700 [0218.836] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x86541dc, dwHighDateTime=0x1d92b8f)) [0218.836] SetEvent (hEvent=0x24c) returned 1 [0218.837] SetEvent (hEvent=0x24c) returned 1 [0218.837] free (_Block=0xd5c700) [0218.837] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.838] malloc (_Size=0x5a) returned 0xd60100 [0218.838] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd60100, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd60100, pulLength=0x115d7d8) returned 0x0 [0218.838] free (_Block=0xd60100) [0218.838] malloc (_Size=0x48) returned 0xd5c700 [0218.838] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x86541dc, dwHighDateTime=0x1d92b8f)) [0218.838] SetEvent (hEvent=0x24c) returned 1 [0218.839] malloc (_Size=0x18) returned 0xd978c0 [0218.839] SafeArrayPutElement (psa=0x5936d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.839] free (_Block=0xd978c0) [0218.839] malloc (_Size=0x18) returned 0xd97940 [0218.839] SafeArrayPutElement (psa=0x5936d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.839] free (_Block=0xd97940) [0218.839] malloc (_Size=0x18) returned 0xd97b60 [0218.839] SafeArrayPutElement (psa=0x5936d0, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0218.839] free (_Block=0xd97b60) [0218.839] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1180 [0218.839] SafeArrayGetDim (psa=0x5936d0) returned 0x1 [0218.839] SafeArrayGetLBound (in: psa=0x5936d0, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.839] SafeArrayGetUBound (in: psa=0x5936d0, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.839] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5aff10 [0218.839] SafeArrayGetDim (psa=0x5936d0) returned 0x1 [0218.839] SafeArrayGetUBound (in: psa=0x5936d0, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.839] SafeArrayGetElemsize (psa=0x5936d0) returned 0x8 [0218.840] SafeArrayGetElement (in: psa=0x5936d0, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.840] memcpy (in: _Dst=0x115d438, _Src=0x5968c0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.840] memcpy (in: _Dst=0x115d438, _Src=0x5968c8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.840] memcpy (in: _Dst=0x115d438, _Src=0x5968d0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.841] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5aff10) returned 1 [0218.841] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1180) returned 1 [0218.842] SetEvent (hEvent=0x24c) returned 1 [0218.842] free (_Block=0xd5c700) [0218.842] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0218.842] malloc (_Size=0x48) returned 0xd5c700 [0218.842] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x86541dc, dwHighDateTime=0x1d92b8f)) [0218.842] SetEvent (hEvent=0x24c) returned 1 [0218.843] SetEvent (hEvent=0x24c) returned 1 [0218.843] free (_Block=0xd5c700) [0218.843] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.850] malloc (_Size=0x48) returned 0xd5c750 [0218.850] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x86794eb, dwHighDateTime=0x1d92b8f)) [0218.850] SetEvent (hEvent=0x24c) returned 1 [0218.851] SetEvent (hEvent=0x24c) returned 1 [0218.852] free (_Block=0xd5c750) [0218.852] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.852] malloc (_Size=0x48) returned 0xd5c700 [0218.852] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x86794eb, dwHighDateTime=0x1d92b8f)) [0218.852] SetEvent (hEvent=0x24c) returned 1 [0218.853] SetEvent (hEvent=0x24c) returned 1 [0218.853] free (_Block=0xd5c700) [0218.853] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.854] malloc (_Size=0x48) returned 0xd5c700 [0218.854] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x86794eb, dwHighDateTime=0x1d92b8f)) [0218.854] SetEvent (hEvent=0x24c) returned 1 [0218.855] SetEvent (hEvent=0x24c) returned 1 [0218.856] free (_Block=0xd5c700) [0218.856] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.856] malloc (_Size=0x48) returned 0xd5c700 [0218.856] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x86794eb, dwHighDateTime=0x1d92b8f)) [0218.856] SetEvent (hEvent=0x24c) returned 1 [0218.858] SetEvent (hEvent=0x24c) returned 1 [0218.859] free (_Block=0xd5c700) [0218.859] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.861] malloc (_Size=0x48) returned 0xd5c700 [0218.861] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.861] SetEvent (hEvent=0x24c) returned 1 [0218.862] SetEvent (hEvent=0x24c) returned 1 [0218.863] free (_Block=0xd5c700) [0218.863] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x11, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0218.863] malloc (_Size=0x48) returned 0xd5c700 [0218.863] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.863] SetEvent (hEvent=0x24c) returned 1 [0218.865] SetEvent (hEvent=0x24c) returned 1 [0218.865] free (_Block=0xd5c700) [0218.865] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x11, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0218.866] malloc (_Size=0x48) returned 0xd5c700 [0218.866] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.866] SetEvent (hEvent=0x24c) returned 1 [0218.867] SetEvent (hEvent=0x24c) returned 1 [0218.867] free (_Block=0xd5c700) [0218.868] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x11, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.868] malloc (_Size=0x48) returned 0xd5c700 [0218.868] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.868] SetEvent (hEvent=0x24c) returned 1 [0218.870] SetEvent (hEvent=0x24c) returned 1 [0218.870] free (_Block=0xd5c700) [0218.870] CM_Get_Device_IDA (in: dnDevInst=0x12, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\IP_TUNNEL_VBUS\\ISATAP_0") returned 0x0 [0218.871] malloc (_Size=0x48) returned 0xd5c700 [0218.871] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.871] SetEvent (hEvent=0x24c) returned 1 [0218.872] SetEvent (hEvent=0x24c) returned 1 [0218.872] free (_Block=0xd5c700) [0218.872] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.872] malloc (_Size=0x12) returned 0xd97900 [0218.872] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd97900, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd97900, pulLength=0x115d7d8) returned 0x0 [0218.873] free (_Block=0xd97900) [0218.873] malloc (_Size=0x48) returned 0xd5c700 [0218.873] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.873] SetEvent (hEvent=0x24c) returned 1 [0218.873] malloc (_Size=0x18) returned 0xd97c80 [0218.873] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0218.873] free (_Block=0xd97c80) [0218.873] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2a80 [0218.873] SafeArrayGetDim (psa=0x593010) returned 0x1 [0218.873] SafeArrayGetLBound (in: psa=0x593010, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.874] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.874] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afc70 [0218.874] SafeArrayGetDim (psa=0x593010) returned 0x1 [0218.874] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.874] SafeArrayGetElemsize (psa=0x593010) returned 0x8 [0218.874] SafeArrayGetElement (in: psa=0x593010, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.874] memcpy (in: _Dst=0x115d438, _Src=0x5783e0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.875] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afc70) returned 1 [0218.876] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2a80) returned 1 [0218.876] SetEvent (hEvent=0x24c) returned 1 [0218.877] free (_Block=0xd5c700) [0218.877] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.877] malloc (_Size=0x38) returned 0xd612f0 [0218.877] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd612f0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd612f0, pulLength=0x115d7d8) returned 0x0 [0218.878] free (_Block=0xd612f0) [0218.878] malloc (_Size=0x48) returned 0xd5c700 [0218.878] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x86c70a9, dwHighDateTime=0x1d92b8f)) [0218.878] SetEvent (hEvent=0x24c) returned 1 [0218.878] malloc (_Size=0x18) returned 0xd97ee0 [0218.878] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.878] free (_Block=0xd97ee0) [0218.878] malloc (_Size=0x18) returned 0xd97ce0 [0218.879] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0218.879] free (_Block=0xd97ce0) [0218.879] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2880 [0218.879] SafeArrayGetDim (psa=0x593010) returned 0x1 [0218.879] SafeArrayGetLBound (in: psa=0x593010, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.879] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.879] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0210 [0218.879] SafeArrayGetDim (psa=0x593010) returned 0x1 [0218.879] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.879] SafeArrayGetElemsize (psa=0x593010) returned 0x8 [0218.879] SafeArrayGetElement (in: psa=0x593010, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.879] memcpy (in: _Dst=0x115d438, _Src=0x5963a0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.879] memcpy (in: _Dst=0x115d438, _Src=0x5963a8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.880] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0210) returned 1 [0218.881] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2880) returned 1 [0218.881] SetEvent (hEvent=0x24c) returned 1 [0218.882] free (_Block=0xd5c700) [0218.882] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.883] malloc (_Size=0x48) returned 0xd5c700 [0218.884] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x86c70a9, dwHighDateTime=0x1d92b8f)) [0218.884] SetEvent (hEvent=0x24c) returned 1 [0218.885] SetEvent (hEvent=0x24c) returned 1 [0218.885] free (_Block=0xd5c700) [0218.885] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.886] malloc (_Size=0x48) returned 0xd5c700 [0218.886] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x86c70a9, dwHighDateTime=0x1d92b8f)) [0218.886] SetEvent (hEvent=0x24c) returned 1 [0218.889] SetEvent (hEvent=0x24c) returned 1 [0218.890] free (_Block=0xd5c700) [0218.890] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.890] malloc (_Size=0x48) returned 0xd5c700 [0218.890] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x86c70a9, dwHighDateTime=0x1d92b8f)) [0218.890] SetEvent (hEvent=0x24c) returned 1 [0218.891] SetEvent (hEvent=0x24c) returned 1 [0218.892] free (_Block=0xd5c700) [0218.892] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.892] malloc (_Size=0x48) returned 0xd5c700 [0218.892] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x86ebc87, dwHighDateTime=0x1d92b8f)) [0218.892] SetEvent (hEvent=0x24c) returned 1 [0218.895] SetEvent (hEvent=0x24c) returned 1 [0218.896] free (_Block=0xd5c700) [0218.896] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.897] malloc (_Size=0x48) returned 0xd5c750 [0218.897] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x86ebc87, dwHighDateTime=0x1d92b8f)) [0218.897] SetEvent (hEvent=0x24c) returned 1 [0218.898] SetEvent (hEvent=0x24c) returned 1 [0218.899] free (_Block=0xd5c750) [0218.899] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x12, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0218.899] malloc (_Size=0x48) returned 0xd5c750 [0218.899] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x86ebc87, dwHighDateTime=0x1d92b8f)) [0218.899] SetEvent (hEvent=0x24c) returned 1 [0218.901] SetEvent (hEvent=0x24c) returned 1 [0218.902] free (_Block=0xd5c750) [0218.902] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x12, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0218.902] malloc (_Size=0x48) returned 0xd5c750 [0218.902] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x86ebc87, dwHighDateTime=0x1d92b8f)) [0218.902] SetEvent (hEvent=0x24c) returned 1 [0218.903] SetEvent (hEvent=0x24c) returned 1 [0218.904] free (_Block=0xd5c750) [0218.904] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x12, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.904] malloc (_Size=0x48) returned 0xd5c750 [0218.904] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x86ebc87, dwHighDateTime=0x1d92b8f)) [0218.904] SetEvent (hEvent=0x24c) returned 1 [0218.907] SetEvent (hEvent=0x24c) returned 1 [0218.907] free (_Block=0xd5c750) [0218.907] CM_Get_Device_IDA (in: dnDevInst=0x13, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\SPACEPORT\\0000") returned 0x0 [0218.908] malloc (_Size=0x48) returned 0xd5c570 [0218.908] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x8711ea1, dwHighDateTime=0x1d92b8f)) [0218.908] SetEvent (hEvent=0x24c) returned 1 [0218.909] SetEvent (hEvent=0x24c) returned 1 [0218.909] free (_Block=0xd5c570) [0218.909] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.909] malloc (_Size=0x20) returned 0xd5f270 [0218.910] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd5f270, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd5f270, pulLength=0x115d7d8) returned 0x0 [0218.910] free (_Block=0xd5f270) [0218.910] malloc (_Size=0x48) returned 0xd5c700 [0218.910] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8711ea1, dwHighDateTime=0x1d92b8f)) [0218.910] SetEvent (hEvent=0x24c) returned 1 [0218.911] malloc (_Size=0x18) returned 0xd98000 [0218.911] SafeArrayPutElement (psa=0x593850, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0218.911] free (_Block=0xd98000) [0218.911] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2480 [0218.911] SafeArrayGetDim (psa=0x593850) returned 0x1 [0218.911] SafeArrayGetLBound (in: psa=0x593850, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.911] SafeArrayGetUBound (in: psa=0x593850, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.911] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5aff10 [0218.911] SafeArrayGetDim (psa=0x593850) returned 0x1 [0218.911] SafeArrayGetUBound (in: psa=0x593850, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.911] SafeArrayGetElemsize (psa=0x593850) returned 0x8 [0218.911] SafeArrayGetElement (in: psa=0x593850, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.912] memcpy (in: _Dst=0x115d438, _Src=0x5783d0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.912] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5aff10) returned 1 [0218.913] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2480) returned 1 [0218.913] SetEvent (hEvent=0x24c) returned 1 [0218.914] free (_Block=0xd5c700) [0218.914] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.914] malloc (_Size=0x5e) returned 0xd601e0 [0218.914] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd601e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd601e0, pulLength=0x115d7d8) returned 0x0 [0218.915] free (_Block=0xd601e0) [0218.915] malloc (_Size=0x48) returned 0xd5c7f0 [0218.915] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8711ea1, dwHighDateTime=0x1d92b8f)) [0218.915] SetEvent (hEvent=0x24c) returned 1 [0218.915] malloc (_Size=0x18) returned 0xd97ac0 [0218.915] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0218.915] free (_Block=0xd97ac0) [0218.915] malloc (_Size=0x18) returned 0xd97dc0 [0218.915] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0218.916] free (_Block=0xd97dc0) [0218.916] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1400 [0218.916] SafeArrayGetDim (psa=0x593010) returned 0x1 [0218.916] SafeArrayGetLBound (in: psa=0x593010, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.916] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.916] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5affd0 [0218.916] SafeArrayGetDim (psa=0x593010) returned 0x1 [0218.916] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.916] SafeArrayGetElemsize (psa=0x593010) returned 0x8 [0218.916] SafeArrayGetElement (in: psa=0x593010, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.916] memcpy (in: _Dst=0x115d438, _Src=0x5968c0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.916] memcpy (in: _Dst=0x115d438, _Src=0x5968c8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.917] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5affd0) returned 1 [0218.918] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1400) returned 1 [0218.918] SetEvent (hEvent=0x24c) returned 1 [0218.918] free (_Block=0xd5c7f0) [0218.919] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.925] malloc (_Size=0x48) returned 0xd5c570 [0218.926] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x87389f9, dwHighDateTime=0x1d92b8f)) [0218.926] SetEvent (hEvent=0x24c) returned 1 [0218.926] SetEvent (hEvent=0x24c) returned 1 [0218.927] free (_Block=0xd5c570) [0218.927] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.927] malloc (_Size=0x48) returned 0xd5c570 [0218.927] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x87389f9, dwHighDateTime=0x1d92b8f)) [0218.927] SetEvent (hEvent=0x24c) returned 1 [0218.928] SetEvent (hEvent=0x24c) returned 1 [0218.928] free (_Block=0xd5c570) [0218.928] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.928] malloc (_Size=0x48) returned 0xd5c570 [0218.928] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x87389f9, dwHighDateTime=0x1d92b8f)) [0218.928] SetEvent (hEvent=0x24c) returned 1 [0218.929] SetEvent (hEvent=0x24c) returned 1 [0218.929] free (_Block=0xd5c570) [0218.930] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.930] malloc (_Size=0x48) returned 0xd5c570 [0218.930] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x87389f9, dwHighDateTime=0x1d92b8f)) [0218.930] SetEvent (hEvent=0x24c) returned 1 [0218.932] SetEvent (hEvent=0x24c) returned 1 [0218.933] free (_Block=0xd5c570) [0218.933] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.934] malloc (_Size=0x48) returned 0xd5c570 [0218.934] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x87389f9, dwHighDateTime=0x1d92b8f)) [0218.934] SetEvent (hEvent=0x24c) returned 1 [0218.935] SetEvent (hEvent=0x24c) returned 1 [0218.936] free (_Block=0xd5c570) [0218.936] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x13, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0218.936] malloc (_Size=0x48) returned 0xd5c570 [0218.936] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x87389f9, dwHighDateTime=0x1d92b8f)) [0218.936] SetEvent (hEvent=0x24c) returned 1 [0218.937] SetEvent (hEvent=0x24c) returned 1 [0218.938] free (_Block=0xd5c570) [0218.940] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x13, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0218.940] malloc (_Size=0x48) returned 0xd5c570 [0218.940] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x875eeaa, dwHighDateTime=0x1d92b8f)) [0218.940] SetEvent (hEvent=0x24c) returned 1 [0218.941] SetEvent (hEvent=0x24c) returned 1 [0218.942] free (_Block=0xd5c570) [0218.942] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x13, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0218.942] malloc (_Size=0x48) returned 0xd5c700 [0218.942] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x875eeaa, dwHighDateTime=0x1d92b8f)) [0218.942] SetEvent (hEvent=0x24c) returned 1 [0218.944] SetEvent (hEvent=0x24c) returned 1 [0218.945] free (_Block=0xd5c700) [0218.945] CM_Get_Device_IDA (in: dnDevInst=0x14, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="DISPLAY\\DELA007\\4&27B1E55B&0&UID0") returned 0x0 [0218.945] malloc (_Size=0x48) returned 0xd5c570 [0218.945] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x875eeaa, dwHighDateTime=0x1d92b8f)) [0218.945] SetEvent (hEvent=0x24c) returned 1 [0218.946] SetEvent (hEvent=0x24c) returned 1 [0218.948] free (_Block=0xd5c570) [0218.948] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.948] malloc (_Size=0x22) returned 0xd5f270 [0218.948] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd5f270, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd5f270, pulLength=0x115d7d8) returned 0x0 [0218.948] free (_Block=0xd5f270) [0218.948] malloc (_Size=0x48) returned 0xd5c7f0 [0218.948] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x875eeaa, dwHighDateTime=0x1d92b8f)) [0218.948] SetEvent (hEvent=0x24c) returned 1 [0218.949] malloc (_Size=0x18) returned 0xd97b60 [0218.949] SafeArrayPutElement (psa=0x593990, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0218.949] free (_Block=0xd97b60) [0218.949] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2c00 [0218.949] SafeArrayGetDim (psa=0x593990) returned 0x1 [0218.949] SafeArrayGetLBound (in: psa=0x593990, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.949] SafeArrayGetUBound (in: psa=0x593990, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.949] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5affd0 [0218.949] SafeArrayGetDim (psa=0x593990) returned 0x1 [0218.949] SafeArrayGetUBound (in: psa=0x593990, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.949] SafeArrayGetElemsize (psa=0x593990) returned 0x8 [0218.950] SafeArrayGetElement (in: psa=0x593990, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.950] memcpy (in: _Dst=0x115d438, _Src=0x5783e0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.951] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5affd0) returned 1 [0218.951] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2c00) returned 1 [0218.951] SetEvent (hEvent=0x24c) returned 1 [0218.952] free (_Block=0xd5c7f0) [0218.952] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0218.952] malloc (_Size=0x14) returned 0xd978c0 [0218.952] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd978c0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd978c0, pulLength=0x115d7d8) returned 0x0 [0218.952] free (_Block=0xd978c0) [0218.952] malloc (_Size=0x48) returned 0xd5c570 [0218.952] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x875eeaa, dwHighDateTime=0x1d92b8f)) [0218.952] SetEvent (hEvent=0x24c) returned 1 [0218.953] malloc (_Size=0x18) returned 0xd97d60 [0218.953] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0218.953] free (_Block=0xd97d60) [0218.953] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1b00 [0218.953] SafeArrayGetDim (psa=0x593010) returned 0x1 [0218.953] SafeArrayGetLBound (in: psa=0x593010, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0218.953] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0218.953] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afc70 [0218.953] SafeArrayGetDim (psa=0x593010) returned 0x1 [0218.953] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0218.953] SafeArrayGetElemsize (psa=0x593010) returned 0x8 [0218.953] SafeArrayGetElement (in: psa=0x593010, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0218.954] memcpy (in: _Dst=0x115d438, _Src=0x5783d0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0218.954] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afc70) returned 1 [0218.955] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1b00) returned 1 [0218.955] SetEvent (hEvent=0x24c) returned 1 [0218.956] free (_Block=0xd5c570) [0218.956] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.968] malloc (_Size=0x48) returned 0xd5c700 [0218.968] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x87845a8, dwHighDateTime=0x1d92b8f)) [0218.968] SetEvent (hEvent=0x24c) returned 1 [0218.968] SetEvent (hEvent=0x24c) returned 1 [0218.969] free (_Block=0xd5c700) [0218.970] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.971] malloc (_Size=0x48) returned 0xd5c570 [0218.971] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x87ab735, dwHighDateTime=0x1d92b8f)) [0218.971] SetEvent (hEvent=0x24c) returned 1 [0218.971] SetEvent (hEvent=0x24c) returned 1 [0218.972] free (_Block=0xd5c570) [0218.972] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.972] malloc (_Size=0x48) returned 0xd5c570 [0218.972] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x87ab735, dwHighDateTime=0x1d92b8f)) [0218.972] SetEvent (hEvent=0x24c) returned 1 [0218.973] SetEvent (hEvent=0x24c) returned 1 [0218.973] free (_Block=0xd5c570) [0218.974] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.974] malloc (_Size=0x48) returned 0xd5c570 [0218.974] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x87ab735, dwHighDateTime=0x1d92b8f)) [0218.974] SetEvent (hEvent=0x24c) returned 1 [0218.976] SetEvent (hEvent=0x24c) returned 1 [0218.976] free (_Block=0xd5c570) [0218.977] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0218.981] malloc (_Size=0x48) returned 0xd5c700 [0218.981] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x87ab735, dwHighDateTime=0x1d92b8f)) [0218.981] SetEvent (hEvent=0x24c) returned 1 [0218.982] SetEvent (hEvent=0x24c) returned 1 [0218.982] free (_Block=0xd5c700) [0218.982] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x14, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0218.983] malloc (_Size=0x48) returned 0xd5c570 [0218.983] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x87ab735, dwHighDateTime=0x1d92b8f)) [0218.983] SetEvent (hEvent=0x24c) returned 1 [0218.984] SetEvent (hEvent=0x24c) returned 1 [0218.985] free (_Block=0xd5c570) [0219.026] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x14, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0219.026] malloc (_Size=0x48) returned 0xd5c570 [0219.026] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x881ceaf, dwHighDateTime=0x1d92b8f)) [0219.026] SetEvent (hEvent=0x24c) returned 1 [0219.027] SetEvent (hEvent=0x24c) returned 1 [0219.028] free (_Block=0xd5c570) [0219.028] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x14, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.028] malloc (_Size=0x48) returned 0xd5c570 [0219.028] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x881ceaf, dwHighDateTime=0x1d92b8f)) [0219.028] SetEvent (hEvent=0x24c) returned 1 [0219.030] SetEvent (hEvent=0x24c) returned 1 [0219.031] free (_Block=0xd5c570) [0219.031] CM_Get_Device_IDA (in: dnDevInst=0x15, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0A06\\PCI_HOTPLUG_RESOURCES") returned 0x0 [0219.031] malloc (_Size=0x48) returned 0xd5c700 [0219.031] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x881ceaf, dwHighDateTime=0x1d92b8f)) [0219.031] SetEvent (hEvent=0x24c) returned 1 [0219.036] malloc (_Size=0xd8) returned 0xd64670 [0219.036] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0219.036] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0219.036] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0219.036] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0219.036] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0219.036] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0219.036] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0219.036] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0219.037] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0219.037] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0219.037] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0219.037] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0219.037] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0219.037] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0219.037] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0219.037] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0219.037] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0219.037] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0219.038] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0219.038] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0219.038] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0219.038] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0219.038] malloc (_Size=0x18) returned 0xd97ae0 [0219.038] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.038] malloc (_Size=0x5a) returned 0xd603a0 [0219.038] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd603a0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd603a0, pulLength=0x115d7d8) returned 0x0 [0219.039] free (_Block=0xd603a0) [0219.039] malloc (_Size=0x48) returned 0xd5c570 [0219.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x88430d6, dwHighDateTime=0x1d92b8f)) [0219.039] SetEvent (hEvent=0x24c) returned 1 [0219.040] malloc (_Size=0x18) returned 0xd97a60 [0219.040] SafeArrayPutElement (psa=0x5935d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.040] free (_Block=0xd97a60) [0219.040] malloc (_Size=0x18) returned 0xd97c80 [0219.040] SafeArrayPutElement (psa=0x5935d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.040] free (_Block=0xd97c80) [0219.040] malloc (_Size=0x18) returned 0xd97c60 [0219.040] SafeArrayPutElement (psa=0x5935d0, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0219.040] free (_Block=0xd97c60) [0219.040] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2c80 [0219.040] SafeArrayGetDim (psa=0x5935d0) returned 0x1 [0219.040] SafeArrayGetLBound (in: psa=0x5935d0, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.040] SafeArrayGetUBound (in: psa=0x5935d0, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.040] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afd60 [0219.040] SafeArrayGetDim (psa=0x5935d0) returned 0x1 [0219.040] SafeArrayGetUBound (in: psa=0x5935d0, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.040] SafeArrayGetElemsize (psa=0x5935d0) returned 0x8 [0219.041] SafeArrayGetElement (in: psa=0x5935d0, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.041] memcpy (in: _Dst=0x115d438, _Src=0x5968c0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.041] memcpy (in: _Dst=0x115d438, _Src=0x5968c8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.041] memcpy (in: _Dst=0x115d438, _Src=0x5968d0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.042] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afd60) returned 1 [0219.043] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2c80) returned 1 [0219.043] SetEvent (hEvent=0x24c) returned 1 [0219.044] free (_Block=0xd5c570) [0219.044] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0219.044] malloc (_Size=0x48) returned 0xd5c570 [0219.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x88430d6, dwHighDateTime=0x1d92b8f)) [0219.044] SetEvent (hEvent=0x24c) returned 1 [0219.045] SetEvent (hEvent=0x24c) returned 1 [0219.045] free (_Block=0xd5c570) [0219.046] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.048] malloc (_Size=0x48) returned 0xd5c700 [0219.048] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.048] SetEvent (hEvent=0x24c) returned 1 [0219.049] SetEvent (hEvent=0x24c) returned 1 [0219.050] free (_Block=0xd5c700) [0219.050] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.050] malloc (_Size=0x48) returned 0xd5c570 [0219.050] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.050] SetEvent (hEvent=0x24c) returned 1 [0219.051] SetEvent (hEvent=0x24c) returned 1 [0219.052] free (_Block=0xd5c570) [0219.052] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.053] malloc (_Size=0x48) returned 0xd5c570 [0219.053] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.053] SetEvent (hEvent=0x24c) returned 1 [0219.054] SetEvent (hEvent=0x24c) returned 1 [0219.054] free (_Block=0xd5c570) [0219.055] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.055] malloc (_Size=0x48) returned 0xd5c570 [0219.055] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.055] SetEvent (hEvent=0x24c) returned 1 [0219.057] SetEvent (hEvent=0x24c) returned 1 [0219.058] free (_Block=0xd5c570) [0219.058] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.060] malloc (_Size=0x48) returned 0xd5c570 [0219.060] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.060] SetEvent (hEvent=0x24c) returned 1 [0219.061] SetEvent (hEvent=0x24c) returned 1 [0219.062] free (_Block=0xd5c570) [0219.062] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x15, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0219.062] malloc (_Size=0x48) returned 0xd5c570 [0219.062] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.062] SetEvent (hEvent=0x24c) returned 1 [0219.066] malloc (_Size=0xd8) returned 0xd64670 [0219.066] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0219.066] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0219.066] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0219.066] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0219.066] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0219.066] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0219.067] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0219.067] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0219.067] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0219.067] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0219.067] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0219.067] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0219.067] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0219.067] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0219.067] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0219.067] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0219.067] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0219.068] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0219.068] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0219.068] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0219.068] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0219.068] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0219.068] malloc (_Size=0x18) returned 0xd97d60 [0219.068] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x15, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0219.068] malloc (_Size=0x48) returned 0xd5c570 [0219.068] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x888f592, dwHighDateTime=0x1d92b8f)) [0219.069] SetEvent (hEvent=0x24c) returned 1 [0219.071] SetEvent (hEvent=0x24c) returned 1 [0219.072] free (_Block=0xd5c570) [0219.072] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x15, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.072] malloc (_Size=0x48) returned 0xd5c570 [0219.072] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x888f592, dwHighDateTime=0x1d92b8f)) [0219.072] SetEvent (hEvent=0x24c) returned 1 [0219.074] SetEvent (hEvent=0x24c) returned 1 [0219.075] free (_Block=0xd5c570) [0219.075] CM_Get_Device_IDA (in: dnDevInst=0x16, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\KDNIC\\0000") returned 0x0 [0219.075] malloc (_Size=0x48) returned 0xd5c570 [0219.075] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x888f592, dwHighDateTime=0x1d92b8f)) [0219.076] SetEvent (hEvent=0x24c) returned 1 [0219.077] SetEvent (hEvent=0x24c) returned 1 [0219.078] free (_Block=0xd5c570) [0219.078] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.078] malloc (_Size=0x18) returned 0xd97960 [0219.078] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd97960, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd97960, pulLength=0x115d7d8) returned 0x0 [0219.078] free (_Block=0xd97960) [0219.078] malloc (_Size=0x48) returned 0xd5c570 [0219.078] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x888f592, dwHighDateTime=0x1d92b8f)) [0219.078] SetEvent (hEvent=0x24c) returned 1 [0219.080] malloc (_Size=0x18) returned 0xd97d20 [0219.080] SafeArrayPutElement (psa=0x5934d0, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0219.080] free (_Block=0xd97d20) [0219.080] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1a00 [0219.080] SafeArrayGetDim (psa=0x5934d0) returned 0x1 [0219.080] SafeArrayGetLBound (in: psa=0x5934d0, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.081] SafeArrayGetUBound (in: psa=0x5934d0, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.081] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5affa0 [0219.081] SafeArrayGetDim (psa=0x5934d0) returned 0x1 [0219.081] SafeArrayGetUBound (in: psa=0x5934d0, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.081] SafeArrayGetElemsize (psa=0x5934d0) returned 0x8 [0219.081] SafeArrayGetElement (in: psa=0x5934d0, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.081] memcpy (in: _Dst=0x115d438, _Src=0x578410, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.082] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5affa0) returned 1 [0219.082] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1a00) returned 1 [0219.082] malloc (_Size=0xd8) returned 0xd64670 [0219.082] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0219.083] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0219.083] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0219.083] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0219.083] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0219.083] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0219.083] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0219.083] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0219.083] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0219.084] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0219.084] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0219.084] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0219.084] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0219.084] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0219.084] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0219.084] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0219.084] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0219.084] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0219.084] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0219.084] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0219.085] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0219.085] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0219.085] malloc (_Size=0x18) returned 0xd97b20 [0219.085] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0219.085] malloc (_Size=0x48) returned 0xd5c570 [0219.085] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x88b5df5, dwHighDateTime=0x1d92b8f)) [0219.085] SetEvent (hEvent=0x24c) returned 1 [0219.086] SetEvent (hEvent=0x24c) returned 1 [0219.087] free (_Block=0xd5c570) [0219.087] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.093] malloc (_Size=0x48) returned 0xd5c750 [0219.093] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x88b5df5, dwHighDateTime=0x1d92b8f)) [0219.093] SetEvent (hEvent=0x24c) returned 1 [0219.096] SetEvent (hEvent=0x24c) returned 1 [0219.097] free (_Block=0xd5c750) [0219.097] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.097] malloc (_Size=0x48) returned 0xd5c570 [0219.098] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x88dbe47, dwHighDateTime=0x1d92b8f)) [0219.098] SetEvent (hEvent=0x24c) returned 1 [0219.100] SetEvent (hEvent=0x24c) returned 1 [0219.100] free (_Block=0xd5c570) [0219.100] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.101] malloc (_Size=0x48) returned 0xd5c570 [0219.101] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x88dbe47, dwHighDateTime=0x1d92b8f)) [0219.101] SetEvent (hEvent=0x24c) returned 1 [0219.101] SetEvent (hEvent=0x24c) returned 1 [0219.102] free (_Block=0xd5c570) [0219.102] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.102] malloc (_Size=0x48) returned 0xd5c570 [0219.102] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x88dbe47, dwHighDateTime=0x1d92b8f)) [0219.102] SetEvent (hEvent=0x24c) returned 1 [0219.104] SetEvent (hEvent=0x24c) returned 1 [0219.105] free (_Block=0xd5c570) [0219.105] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.106] malloc (_Size=0x48) returned 0xd5c570 [0219.106] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x88dbe47, dwHighDateTime=0x1d92b8f)) [0219.107] SetEvent (hEvent=0x24c) returned 1 [0219.107] SetEvent (hEvent=0x24c) returned 1 [0219.108] free (_Block=0xd5c570) [0219.108] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x16, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0219.108] malloc (_Size=0x48) returned 0xd5c570 [0219.108] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x88dbe47, dwHighDateTime=0x1d92b8f)) [0219.108] SetEvent (hEvent=0x24c) returned 1 [0219.112] malloc (_Size=0xd8) returned 0xd64670 [0219.112] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0219.112] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0219.112] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0219.113] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0219.113] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0219.113] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0219.113] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0219.113] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0219.113] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0219.113] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0219.113] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0219.113] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0219.113] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0219.114] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0219.114] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0219.114] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0219.114] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0219.114] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0219.114] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0219.114] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0219.114] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0219.114] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0219.114] malloc (_Size=0x18) returned 0xd98020 [0219.114] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x16, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0219.115] malloc (_Size=0x48) returned 0xd5c570 [0219.115] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x8901ca6, dwHighDateTime=0x1d92b8f)) [0219.115] SetEvent (hEvent=0x24c) returned 1 [0219.116] SetEvent (hEvent=0x24c) returned 1 [0219.117] free (_Block=0xd5c570) [0219.117] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x16, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.117] malloc (_Size=0x48) returned 0xd5c570 [0219.117] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8901ca6, dwHighDateTime=0x1d92b8f)) [0219.117] SetEvent (hEvent=0x24c) returned 1 [0219.119] SetEvent (hEvent=0x24c) returned 1 [0219.119] free (_Block=0xd5c570) [0219.119] CM_Get_Device_IDA (in: dnDevInst=0x17, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="STORAGE\\VOLUMESNAPSHOT\\HARDDISKVOLUMESNAPSHOT1") returned 0x0 [0219.120] malloc (_Size=0x48) returned 0xd5c570 [0219.120] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x8901ca6, dwHighDateTime=0x1d92b8f)) [0219.120] SetEvent (hEvent=0x24c) returned 1 [0219.121] SetEvent (hEvent=0x24c) returned 1 [0219.121] free (_Block=0xd5c570) [0219.121] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.121] malloc (_Size=0x30) returned 0xd60f70 [0219.121] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd60f70, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd60f70, pulLength=0x115d7d8) returned 0x0 [0219.122] free (_Block=0xd60f70) [0219.122] malloc (_Size=0x48) returned 0xd5c570 [0219.122] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8901ca6, dwHighDateTime=0x1d92b8f)) [0219.122] SetEvent (hEvent=0x24c) returned 1 [0219.122] malloc (_Size=0x18) returned 0xd97fe0 [0219.122] SafeArrayPutElement (psa=0x593090, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.123] free (_Block=0xd97fe0) [0219.123] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1c00 [0219.123] SafeArrayGetDim (psa=0x593090) returned 0x1 [0219.123] SafeArrayGetLBound (in: psa=0x593090, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.123] SafeArrayGetUBound (in: psa=0x593090, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.123] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b00f0 [0219.123] SafeArrayGetDim (psa=0x593090) returned 0x1 [0219.123] SafeArrayGetUBound (in: psa=0x593090, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.123] SafeArrayGetElemsize (psa=0x593090) returned 0x8 [0219.123] SafeArrayGetElement (in: psa=0x593090, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.123] memcpy (in: _Dst=0x115d438, _Src=0x578470, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.124] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b00f0) returned 1 [0219.124] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1c00) returned 1 [0219.124] SetEvent (hEvent=0x24c) returned 1 [0219.125] free (_Block=0xd5c570) [0219.125] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0219.125] malloc (_Size=0x48) returned 0xd5c700 [0219.125] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8901ca6, dwHighDateTime=0x1d92b8f)) [0219.125] SetEvent (hEvent=0x24c) returned 1 [0219.127] malloc (_Size=0xd8) returned 0xd64670 [0219.127] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0219.127] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0219.127] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0219.127] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0219.127] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0219.128] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0219.128] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0219.128] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0219.128] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0219.128] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0219.128] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0219.128] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0219.128] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0219.128] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0219.128] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0219.129] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0219.129] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0219.129] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0219.129] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0219.129] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0219.129] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0219.129] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0219.129] malloc (_Size=0x18) returned 0xd97e20 [0219.129] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.132] malloc (_Size=0x48) returned 0xd5c570 [0219.132] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8927ec8, dwHighDateTime=0x1d92b8f)) [0219.133] SetEvent (hEvent=0x24c) returned 1 [0219.133] SetEvent (hEvent=0x24c) returned 1 [0219.133] free (_Block=0xd5c570) [0219.134] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.134] malloc (_Size=0x48) returned 0xd5c570 [0219.134] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8927ec8, dwHighDateTime=0x1d92b8f)) [0219.134] SetEvent (hEvent=0x24c) returned 1 [0219.134] SetEvent (hEvent=0x24c) returned 1 [0219.135] free (_Block=0xd5c570) [0219.135] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.135] malloc (_Size=0x48) returned 0xd5c570 [0219.135] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8927ec8, dwHighDateTime=0x1d92b8f)) [0219.135] SetEvent (hEvent=0x24c) returned 1 [0219.136] SetEvent (hEvent=0x24c) returned 1 [0219.136] free (_Block=0xd5c570) [0219.136] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.136] malloc (_Size=0x48) returned 0xd5c570 [0219.137] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8927ec8, dwHighDateTime=0x1d92b8f)) [0219.137] SetEvent (hEvent=0x24c) returned 1 [0219.138] SetEvent (hEvent=0x24c) returned 1 [0219.139] free (_Block=0xd5c570) [0219.139] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.140] malloc (_Size=0x48) returned 0xd5c700 [0219.140] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8927ec8, dwHighDateTime=0x1d92b8f)) [0219.140] SetEvent (hEvent=0x24c) returned 1 [0219.143] SetEvent (hEvent=0x24c) returned 1 [0219.143] free (_Block=0xd5c700) [0219.143] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x17, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0219.143] malloc (_Size=0x48) returned 0xd5c700 [0219.143] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x894e2d6, dwHighDateTime=0x1d92b8f)) [0219.143] SetEvent (hEvent=0x24c) returned 1 [0219.145] SetEvent (hEvent=0x24c) returned 1 [0219.145] free (_Block=0xd5c700) [0219.145] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x17, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0219.145] malloc (_Size=0x48) returned 0xd5c700 [0219.145] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x894e2d6, dwHighDateTime=0x1d92b8f)) [0219.146] SetEvent (hEvent=0x24c) returned 1 [0219.146] SetEvent (hEvent=0x24c) returned 1 [0219.147] free (_Block=0xd5c700) [0219.147] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x17, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.147] malloc (_Size=0x48) returned 0xd5c700 [0219.147] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x894e2d6, dwHighDateTime=0x1d92b8f)) [0219.147] SetEvent (hEvent=0x24c) returned 1 [0219.149] SetEvent (hEvent=0x24c) returned 1 [0219.149] free (_Block=0xd5c700) [0219.149] CM_Get_Device_IDA (in: dnDevInst=0x18, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\ACPI0010\\2&DABA3FF&0") returned 0x0 [0219.149] malloc (_Size=0x48) returned 0xd5c700 [0219.149] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x894e2d6, dwHighDateTime=0x1d92b8f)) [0219.149] SetEvent (hEvent=0x24c) returned 1 [0219.150] SetEvent (hEvent=0x24c) returned 1 [0219.150] free (_Block=0xd5c700) [0219.150] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.150] malloc (_Size=0x60) returned 0xd60100 [0219.151] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd60100, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd60100, pulLength=0x115d7d8) returned 0x0 [0219.151] free (_Block=0xd60100) [0219.151] malloc (_Size=0x48) returned 0xd5c750 [0219.151] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x894e2d6, dwHighDateTime=0x1d92b8f)) [0219.151] SetEvent (hEvent=0x24c) returned 1 [0219.151] malloc (_Size=0x18) returned 0xd97a20 [0219.151] SafeArrayPutElement (psa=0x5935d0, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0219.151] free (_Block=0xd97a20) [0219.152] malloc (_Size=0x18) returned 0xd97f60 [0219.152] SafeArrayPutElement (psa=0x5935d0, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0219.152] free (_Block=0xd97f60) [0219.152] malloc (_Size=0x18) returned 0xd98020 [0219.152] SafeArrayPutElement (psa=0x5935d0, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0219.152] free (_Block=0xd98020) [0219.152] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2700 [0219.152] SafeArrayGetDim (psa=0x5935d0) returned 0x1 [0219.152] SafeArrayGetLBound (in: psa=0x5935d0, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.152] SafeArrayGetUBound (in: psa=0x5935d0, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.152] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0270 [0219.152] SafeArrayGetDim (psa=0x5935d0) returned 0x1 [0219.152] SafeArrayGetUBound (in: psa=0x5935d0, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.152] SafeArrayGetElemsize (psa=0x5935d0) returned 0x8 [0219.152] SafeArrayGetElement (in: psa=0x5935d0, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.153] memcpy (in: _Dst=0x115d438, _Src=0x5963a0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.153] memcpy (in: _Dst=0x115d438, _Src=0x5963a8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.153] memcpy (in: _Dst=0x115d438, _Src=0x5963b0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.153] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0270) returned 1 [0219.154] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2700) returned 1 [0219.154] SetEvent (hEvent=0x24c) returned 1 [0219.154] free (_Block=0xd5c750) [0219.154] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.154] malloc (_Size=0x14) returned 0xd97b80 [0219.155] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd97b80, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd97b80, pulLength=0x115d7d8) returned 0x0 [0219.155] free (_Block=0xd97b80) [0219.155] malloc (_Size=0x48) returned 0xd5c700 [0219.155] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x894e2d6, dwHighDateTime=0x1d92b8f)) [0219.155] SetEvent (hEvent=0x24c) returned 1 [0219.155] malloc (_Size=0x18) returned 0xd97c60 [0219.155] SafeArrayPutElement (psa=0x593310, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0219.155] free (_Block=0xd97c60) [0219.155] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1800 [0219.155] SafeArrayGetDim (psa=0x593310) returned 0x1 [0219.155] SafeArrayGetLBound (in: psa=0x593310, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.155] SafeArrayGetUBound (in: psa=0x593310, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.155] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afc70 [0219.155] SafeArrayGetDim (psa=0x593310) returned 0x1 [0219.155] SafeArrayGetUBound (in: psa=0x593310, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.155] SafeArrayGetElemsize (psa=0x593310) returned 0x8 [0219.156] SafeArrayGetElement (in: psa=0x593310, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.156] memcpy (in: _Dst=0x115d438, _Src=0x5783d0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.156] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afc70) returned 1 [0219.164] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1800) returned 1 [0219.164] malloc (_Size=0xd8) returned 0xd64670 [0219.164] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0219.164] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0219.164] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0219.164] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0219.164] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0219.164] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0219.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0219.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0219.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0219.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0219.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0219.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0219.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0219.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0219.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0219.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0219.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0219.166] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0219.166] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0219.166] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0219.166] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0219.166] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0219.166] malloc (_Size=0x18) returned 0xd97ba0 [0219.166] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.171] malloc (_Size=0x48) returned 0xd5c700 [0219.171] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x89749fc, dwHighDateTime=0x1d92b8f)) [0219.171] SetEvent (hEvent=0x24c) returned 1 [0219.172] SetEvent (hEvent=0x24c) returned 1 [0219.172] free (_Block=0xd5c700) [0219.173] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.173] malloc (_Size=0x48) returned 0xd5c700 [0219.173] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x899b7b7, dwHighDateTime=0x1d92b8f)) [0219.174] SetEvent (hEvent=0x24c) returned 1 [0219.174] SetEvent (hEvent=0x24c) returned 1 [0219.175] free (_Block=0xd5c700) [0219.175] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.175] malloc (_Size=0x48) returned 0xd5c700 [0219.175] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x899b7b7, dwHighDateTime=0x1d92b8f)) [0219.175] SetEvent (hEvent=0x24c) returned 1 [0219.176] SetEvent (hEvent=0x24c) returned 1 [0219.176] free (_Block=0xd5c700) [0219.176] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.177] malloc (_Size=0x48) returned 0xd5c700 [0219.177] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x899b7b7, dwHighDateTime=0x1d92b8f)) [0219.177] SetEvent (hEvent=0x24c) returned 1 [0219.179] SetEvent (hEvent=0x24c) returned 1 [0219.179] free (_Block=0xd5c700) [0219.179] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.181] malloc (_Size=0x48) returned 0xd5c700 [0219.181] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x899b7b7, dwHighDateTime=0x1d92b8f)) [0219.181] SetEvent (hEvent=0x24c) returned 1 [0219.182] SetEvent (hEvent=0x24c) returned 1 [0219.182] free (_Block=0xd5c700) [0219.182] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x18, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0219.182] malloc (_Size=0x48) returned 0xd5c700 [0219.182] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x899b7b7, dwHighDateTime=0x1d92b8f)) [0219.182] SetEvent (hEvent=0x24c) returned 1 [0219.184] SetEvent (hEvent=0x24c) returned 1 [0219.184] free (_Block=0xd5c700) [0219.184] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x18, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0219.185] malloc (_Size=0x48) returned 0xd5c700 [0219.185] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x899b7b7, dwHighDateTime=0x1d92b8f)) [0219.185] SetEvent (hEvent=0x24c) returned 1 [0219.185] SetEvent (hEvent=0x24c) returned 1 [0219.186] free (_Block=0xd5c700) [0219.186] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x18, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.186] malloc (_Size=0x48) returned 0xd5c700 [0219.186] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x899b7b7, dwHighDateTime=0x1d92b8f)) [0219.186] SetEvent (hEvent=0x24c) returned 1 [0219.188] SetEvent (hEvent=0x24c) returned 1 [0219.188] free (_Block=0xd5c700) [0219.189] CM_Get_Device_IDA (in: dnDevInst=0x19, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\MMDEVAPI\\{0.0.1.00000000}.{A057BBB1-BD0A-493A-99E1-CA6410C7F4E2}") returned 0x0 [0219.189] malloc (_Size=0x48) returned 0xd5c570 [0219.189] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x89c0b50, dwHighDateTime=0x1d92b8f)) [0219.189] SetEvent (hEvent=0x24c) returned 1 [0219.189] SetEvent (hEvent=0x24c) returned 1 [0219.190] free (_Block=0xd5c570) [0219.190] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.190] malloc (_Size=0x32) returned 0xd60830 [0219.190] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd60830, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd60830, pulLength=0x115d7d8) returned 0x0 [0219.191] free (_Block=0xd60830) [0219.191] malloc (_Size=0x48) returned 0xd5c700 [0219.191] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x89c0b50, dwHighDateTime=0x1d92b8f)) [0219.191] SetEvent (hEvent=0x24c) returned 1 [0219.191] malloc (_Size=0x18) returned 0xd97c80 [0219.191] SafeArrayPutElement (psa=0x5931d0, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0219.191] free (_Block=0xd97c80) [0219.191] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e0e80 [0219.191] SafeArrayGetDim (psa=0x5931d0) returned 0x1 [0219.191] SafeArrayGetLBound (in: psa=0x5931d0, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.191] SafeArrayGetUBound (in: psa=0x5931d0, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.191] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b00f0 [0219.191] SafeArrayGetDim (psa=0x5931d0) returned 0x1 [0219.191] SafeArrayGetUBound (in: psa=0x5931d0, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.191] SafeArrayGetElemsize (psa=0x5931d0) returned 0x8 [0219.192] SafeArrayGetElement (in: psa=0x5931d0, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.192] memcpy (in: _Dst=0x115d438, _Src=0x578470, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.192] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b00f0) returned 1 [0219.193] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e0e80) returned 1 [0219.193] SetEvent (hEvent=0x24c) returned 1 [0219.194] free (_Block=0xd5c700) [0219.194] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.194] malloc (_Size=0x62) returned 0xd603a0 [0219.194] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd603a0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd603a0, pulLength=0x115d7d8) returned 0x0 [0219.194] free (_Block=0xd603a0) [0219.194] malloc (_Size=0x48) returned 0xd5c570 [0219.194] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x89c0b50, dwHighDateTime=0x1d92b8f)) [0219.194] SetEvent (hEvent=0x24c) returned 1 [0219.195] malloc (_Size=0x18) returned 0xd97c40 [0219.195] SafeArrayPutElement (psa=0x593850, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0219.195] free (_Block=0xd97c40) [0219.195] malloc (_Size=0x18) returned 0xd97b40 [0219.195] SafeArrayPutElement (psa=0x593850, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0219.195] free (_Block=0xd97b40) [0219.195] malloc (_Size=0x18) returned 0xd97e80 [0219.195] SafeArrayPutElement (psa=0x593850, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0219.195] free (_Block=0xd97e80) [0219.195] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1600 [0219.195] SafeArrayGetDim (psa=0x593850) returned 0x1 [0219.195] SafeArrayGetLBound (in: psa=0x593850, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.195] SafeArrayGetUBound (in: psa=0x593850, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.195] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b00f0 [0219.195] SafeArrayGetDim (psa=0x593850) returned 0x1 [0219.195] SafeArrayGetUBound (in: psa=0x593850, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.195] SafeArrayGetElemsize (psa=0x593850) returned 0x8 [0219.195] SafeArrayGetElement (in: psa=0x593850, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.196] memcpy (in: _Dst=0x115d438, _Src=0x5963a0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.196] memcpy (in: _Dst=0x115d438, _Src=0x5963a8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.196] memcpy (in: _Dst=0x115d438, _Src=0x5963b0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.197] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b00f0) returned 1 [0219.197] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1600) returned 1 [0219.197] SetEvent (hEvent=0x24c) returned 1 [0219.198] free (_Block=0xd5c570) [0219.198] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.210] malloc (_Size=0x48) returned 0xd5c570 [0219.210] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x89e6d3b, dwHighDateTime=0x1d92b8f)) [0219.211] SetEvent (hEvent=0x24c) returned 1 [0219.211] SetEvent (hEvent=0x24c) returned 1 [0219.212] free (_Block=0xd5c570) [0219.212] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.212] malloc (_Size=0x48) returned 0xd5c570 [0219.212] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x89e6d3b, dwHighDateTime=0x1d92b8f)) [0219.212] SetEvent (hEvent=0x24c) returned 1 [0219.213] SetEvent (hEvent=0x24c) returned 1 [0219.213] free (_Block=0xd5c570) [0219.213] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.214] malloc (_Size=0x48) returned 0xd5c570 [0219.214] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x89e6d3b, dwHighDateTime=0x1d92b8f)) [0219.214] SetEvent (hEvent=0x24c) returned 1 [0219.214] SetEvent (hEvent=0x24c) returned 1 [0219.215] free (_Block=0xd5c570) [0219.215] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.215] malloc (_Size=0x48) returned 0xd5c570 [0219.215] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x89e6d3b, dwHighDateTime=0x1d92b8f)) [0219.215] SetEvent (hEvent=0x24c) returned 1 [0219.217] SetEvent (hEvent=0x24c) returned 1 [0219.217] free (_Block=0xd5c570) [0219.218] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.219] malloc (_Size=0x48) returned 0xd5c570 [0219.219] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8a0cdfd, dwHighDateTime=0x1d92b8f)) [0219.219] SetEvent (hEvent=0x24c) returned 1 [0219.220] SetEvent (hEvent=0x24c) returned 1 [0219.220] free (_Block=0xd5c570) [0219.220] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x19, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0219.220] malloc (_Size=0x48) returned 0xd5c570 [0219.220] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x8a0cdfd, dwHighDateTime=0x1d92b8f)) [0219.221] SetEvent (hEvent=0x24c) returned 1 [0219.222] SetEvent (hEvent=0x24c) returned 1 [0219.222] free (_Block=0xd5c570) [0219.223] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x19, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0219.223] malloc (_Size=0x48) returned 0xd5c570 [0219.223] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x8a0cdfd, dwHighDateTime=0x1d92b8f)) [0219.223] SetEvent (hEvent=0x24c) returned 1 [0219.223] SetEvent (hEvent=0x24c) returned 1 [0219.224] free (_Block=0xd5c570) [0219.224] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x19, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.224] malloc (_Size=0x48) returned 0xd5c570 [0219.224] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8a0cdfd, dwHighDateTime=0x1d92b8f)) [0219.224] SetEvent (hEvent=0x24c) returned 1 [0219.226] SetEvent (hEvent=0x24c) returned 1 [0219.226] free (_Block=0xd5c570) [0219.226] CM_Get_Device_IDA (in: dnDevInst=0x1a, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="HID\\VID_0A81&PID_0203\\6&7C90793&0&0000") returned 0x0 [0219.227] malloc (_Size=0x48) returned 0xd5c570 [0219.227] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x8a0cdfd, dwHighDateTime=0x1d92b8f)) [0219.227] SetEvent (hEvent=0x24c) returned 1 [0219.227] SetEvent (hEvent=0x24c) returned 1 [0219.228] free (_Block=0xd5c570) [0219.228] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.228] malloc (_Size=0x11e) returned 0xd649e0 [0219.228] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0219.229] free (_Block=0xd649e0) [0219.229] malloc (_Size=0x48) returned 0xd984c0 [0219.229] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8a0cdfd, dwHighDateTime=0x1d92b8f)) [0219.229] SetEvent (hEvent=0x24c) returned 1 [0219.229] malloc (_Size=0x18) returned 0xd97de0 [0219.229] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0219.229] free (_Block=0xd97de0) [0219.229] malloc (_Size=0x18) returned 0xd97fc0 [0219.229] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0219.229] free (_Block=0xd97fc0) [0219.229] malloc (_Size=0x18) returned 0xd97d00 [0219.229] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0219.230] free (_Block=0xd97d00) [0219.230] malloc (_Size=0x18) returned 0xd97b80 [0219.230] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0219.230] free (_Block=0xd97b80) [0219.230] malloc (_Size=0x18) returned 0xd97da0 [0219.230] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0219.230] free (_Block=0xd97da0) [0219.230] malloc (_Size=0x18) returned 0xd97a60 [0219.230] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0219.230] free (_Block=0xd97a60) [0219.230] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1780 [0219.230] SafeArrayGetDim (psa=0x593010) returned 0x1 [0219.230] SafeArrayGetLBound (in: psa=0x593010, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.230] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.230] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afc70 [0219.230] SafeArrayGetDim (psa=0x593010) returned 0x1 [0219.230] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.230] SafeArrayGetElemsize (psa=0x593010) returned 0x8 [0219.230] SafeArrayGetElement (in: psa=0x593010, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.231] memcpy (in: _Dst=0x115d438, _Src=0x593040, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.231] memcpy (in: _Dst=0x115d438, _Src=0x593048, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.231] memcpy (in: _Dst=0x115d438, _Src=0x593050, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.231] memcpy (in: _Dst=0x115d438, _Src=0x593058, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.231] memcpy (in: _Dst=0x115d438, _Src=0x593060, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.232] memcpy (in: _Dst=0x115d438, _Src=0x593068, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.232] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afc70) returned 1 [0219.233] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1780) returned 1 [0219.233] SetEvent (hEvent=0x24c) returned 1 [0219.233] free (_Block=0xd984c0) [0219.233] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.234] malloc (_Size=0x4) returned 0xd65530 [0219.234] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd65530, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd65530, pulLength=0x115d7d8) returned 0x0 [0219.234] free (_Block=0xd65530) [0219.234] malloc (_Size=0x48) returned 0xd5c700 [0219.234] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8a0cdfd, dwHighDateTime=0x1d92b8f)) [0219.234] SetEvent (hEvent=0x24c) returned 1 [0219.234] SetEvent (hEvent=0x24c) returned 1 [0219.234] free (_Block=0xd5c700) [0219.236] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.407] malloc (_Size=0x48) returned 0xd5c570 [0219.407] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8bd6c25, dwHighDateTime=0x1d92b8f)) [0219.407] SetEvent (hEvent=0x24c) returned 1 [0219.408] SetEvent (hEvent=0x24c) returned 1 [0219.409] free (_Block=0xd5c570) [0219.409] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.410] malloc (_Size=0x48) returned 0xd5c570 [0219.410] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8bd6c25, dwHighDateTime=0x1d92b8f)) [0219.410] SetEvent (hEvent=0x24c) returned 1 [0219.411] SetEvent (hEvent=0x24c) returned 1 [0219.412] free (_Block=0xd5c570) [0219.412] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.412] malloc (_Size=0x48) returned 0xd5c570 [0219.412] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8bd6c25, dwHighDateTime=0x1d92b8f)) [0219.412] SetEvent (hEvent=0x24c) returned 1 [0219.413] SetEvent (hEvent=0x24c) returned 1 [0219.414] free (_Block=0xd5c570) [0219.414] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.414] malloc (_Size=0x48) returned 0xd5c570 [0219.414] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8bd6c25, dwHighDateTime=0x1d92b8f)) [0219.415] SetEvent (hEvent=0x24c) returned 1 [0219.417] SetEvent (hEvent=0x24c) returned 1 [0219.418] free (_Block=0xd5c570) [0219.418] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.421] malloc (_Size=0x48) returned 0xd5c700 [0219.421] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8bd6c25, dwHighDateTime=0x1d92b8f)) [0219.421] SetEvent (hEvent=0x24c) returned 1 [0219.421] SetEvent (hEvent=0x24c) returned 1 [0219.422] free (_Block=0xd5c700) [0219.422] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x1a, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0219.422] malloc (_Size=0x48) returned 0xd5c570 [0219.422] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x8bfcc06, dwHighDateTime=0x1d92b8f)) [0219.422] SetEvent (hEvent=0x24c) returned 1 [0219.424] SetEvent (hEvent=0x24c) returned 1 [0219.424] free (_Block=0xd5c570) [0219.424] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x1a, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0219.424] malloc (_Size=0x48) returned 0xd5c570 [0219.424] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x8bfcc06, dwHighDateTime=0x1d92b8f)) [0219.424] SetEvent (hEvent=0x24c) returned 1 [0219.425] SetEvent (hEvent=0x24c) returned 1 [0219.425] free (_Block=0xd5c570) [0219.425] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1a, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.425] malloc (_Size=0x48) returned 0xd5c570 [0219.426] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8bfcc06, dwHighDateTime=0x1d92b8f)) [0219.426] SetEvent (hEvent=0x24c) returned 1 [0219.427] SetEvent (hEvent=0x24c) returned 1 [0219.427] free (_Block=0xd5c570) [0219.427] CM_Get_Device_IDA (in: dnDevInst=0x1b, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\UMBUS\\0000") returned 0x0 [0219.428] malloc (_Size=0x48) returned 0xd5c570 [0219.428] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x8bfcc06, dwHighDateTime=0x1d92b8f)) [0219.428] SetEvent (hEvent=0x24c) returned 1 [0219.428] SetEvent (hEvent=0x24c) returned 1 [0219.429] free (_Block=0xd5c570) [0219.429] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.429] malloc (_Size=0x18) returned 0xd97e40 [0219.429] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd97e40, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd97e40, pulLength=0x115d7d8) returned 0x0 [0219.429] free (_Block=0xd97e40) [0219.429] malloc (_Size=0x48) returned 0xd5c570 [0219.429] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8bfcc06, dwHighDateTime=0x1d92b8f)) [0219.429] SetEvent (hEvent=0x24c) returned 1 [0219.429] malloc (_Size=0x18) returned 0xd97f00 [0219.429] SafeArrayPutElement (psa=0x593550, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0219.429] free (_Block=0xd97f00) [0219.430] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1d00 [0219.430] SafeArrayGetDim (psa=0x593550) returned 0x1 [0219.430] SafeArrayGetLBound (in: psa=0x593550, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.430] SafeArrayGetUBound (in: psa=0x593550, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.430] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0360 [0219.430] SafeArrayGetDim (psa=0x593550) returned 0x1 [0219.430] SafeArrayGetUBound (in: psa=0x593550, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.430] SafeArrayGetElemsize (psa=0x593550) returned 0x8 [0219.430] SafeArrayGetElement (in: psa=0x593550, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.430] memcpy (in: _Dst=0x115d438, _Src=0x578470, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.431] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0360) returned 1 [0219.431] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1d00) returned 1 [0219.431] SetEvent (hEvent=0x24c) returned 1 [0219.431] free (_Block=0xd5c570) [0219.432] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0219.432] malloc (_Size=0x48) returned 0xd5c570 [0219.432] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8bfcc06, dwHighDateTime=0x1d92b8f)) [0219.432] SetEvent (hEvent=0x24c) returned 1 [0219.432] SetEvent (hEvent=0x24c) returned 1 [0219.432] free (_Block=0xd5c570) [0219.432] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.437] malloc (_Size=0x48) returned 0xd5c570 [0219.437] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8bfcc06, dwHighDateTime=0x1d92b8f)) [0219.437] SetEvent (hEvent=0x24c) returned 1 [0219.438] SetEvent (hEvent=0x24c) returned 1 [0219.438] free (_Block=0xd5c570) [0219.439] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.439] malloc (_Size=0x48) returned 0xd5c570 [0219.439] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8c22e82, dwHighDateTime=0x1d92b8f)) [0219.439] SetEvent (hEvent=0x24c) returned 1 [0219.439] SetEvent (hEvent=0x24c) returned 1 [0219.440] free (_Block=0xd5c570) [0219.440] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.440] malloc (_Size=0x48) returned 0xd5c570 [0219.440] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8c22e82, dwHighDateTime=0x1d92b8f)) [0219.440] SetEvent (hEvent=0x24c) returned 1 [0219.441] SetEvent (hEvent=0x24c) returned 1 [0219.441] free (_Block=0xd5c570) [0219.441] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.441] malloc (_Size=0x48) returned 0xd5c570 [0219.441] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8c22e82, dwHighDateTime=0x1d92b8f)) [0219.441] SetEvent (hEvent=0x24c) returned 1 [0219.444] SetEvent (hEvent=0x24c) returned 1 [0219.444] free (_Block=0xd5c570) [0219.444] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.445] malloc (_Size=0x48) returned 0xd5c700 [0219.445] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8c22e82, dwHighDateTime=0x1d92b8f)) [0219.445] SetEvent (hEvent=0x24c) returned 1 [0219.446] SetEvent (hEvent=0x24c) returned 1 [0219.446] free (_Block=0xd5c700) [0219.446] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x1b, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0219.446] malloc (_Size=0x48) returned 0xd5c700 [0219.447] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x8c22e82, dwHighDateTime=0x1d92b8f)) [0219.447] SetEvent (hEvent=0x24c) returned 1 [0219.448] SetEvent (hEvent=0x24c) returned 1 [0219.448] free (_Block=0xd5c700) [0219.448] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x1b, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0219.448] malloc (_Size=0x48) returned 0xd5c700 [0219.449] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x8c22e82, dwHighDateTime=0x1d92b8f)) [0219.449] SetEvent (hEvent=0x24c) returned 1 [0219.449] SetEvent (hEvent=0x24c) returned 1 [0219.450] free (_Block=0xd5c700) [0219.450] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1b, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.450] malloc (_Size=0x48) returned 0xd5c700 [0219.450] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8c22e82, dwHighDateTime=0x1d92b8f)) [0219.450] SetEvent (hEvent=0x24c) returned 1 [0219.452] SetEvent (hEvent=0x24c) returned 1 [0219.452] free (_Block=0xd5c700) [0219.452] CM_Get_Device_IDA (in: dnDevInst=0x1c, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\RADIO\\{3DB5895D-CC28-44B3-AD3D-6F01A782B8D2}") returned 0x0 [0219.452] malloc (_Size=0x48) returned 0xd5c570 [0219.452] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x8c22e82, dwHighDateTime=0x1d92b8f)) [0219.452] SetEvent (hEvent=0x24c) returned 1 [0219.453] SetEvent (hEvent=0x24c) returned 1 [0219.453] free (_Block=0xd5c570) [0219.453] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0219.453] malloc (_Size=0x48) returned 0xd5c570 [0219.453] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8c22e82, dwHighDateTime=0x1d92b8f)) [0219.454] SetEvent (hEvent=0x24c) returned 1 [0219.454] SetEvent (hEvent=0x24c) returned 1 [0219.454] free (_Block=0xd5c570) [0219.454] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.454] malloc (_Size=0x38) returned 0xd615b0 [0219.454] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd615b0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd615b0, pulLength=0x115d7d8) returned 0x0 [0219.455] free (_Block=0xd615b0) [0219.455] malloc (_Size=0x48) returned 0xd5c570 [0219.455] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8c22e82, dwHighDateTime=0x1d92b8f)) [0219.455] SetEvent (hEvent=0x24c) returned 1 [0219.455] malloc (_Size=0x18) returned 0xd97e20 [0219.455] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0219.455] free (_Block=0xd97e20) [0219.455] malloc (_Size=0x18) returned 0xd97ea0 [0219.455] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0219.455] free (_Block=0xd97ea0) [0219.455] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1800 [0219.455] SafeArrayGetDim (psa=0x593410) returned 0x1 [0219.455] SafeArrayGetLBound (in: psa=0x593410, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.455] SafeArrayGetUBound (in: psa=0x593410, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.455] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afdf0 [0219.455] SafeArrayGetDim (psa=0x593410) returned 0x1 [0219.455] SafeArrayGetUBound (in: psa=0x593410, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.456] SafeArrayGetElemsize (psa=0x593410) returned 0x8 [0219.456] SafeArrayGetElement (in: psa=0x593410, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.456] memcpy (in: _Dst=0x115d438, _Src=0x596580, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.456] memcpy (in: _Dst=0x115d438, _Src=0x596588, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.476] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afdf0) returned 1 [0219.477] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1800) returned 1 [0219.477] malloc (_Size=0xd8) returned 0xd64670 [0219.477] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0219.477] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0219.477] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0219.477] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0219.477] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0219.477] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0219.478] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0219.478] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0219.478] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0219.478] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0219.478] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0219.478] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0219.478] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0219.478] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0219.478] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0219.478] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0219.479] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0219.479] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0219.479] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0219.479] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0219.479] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0219.479] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0219.479] malloc (_Size=0x18) returned 0xd97ec0 [0219.479] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.481] malloc (_Size=0x48) returned 0xd5c570 [0219.481] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8c6f314, dwHighDateTime=0x1d92b8f)) [0219.481] SetEvent (hEvent=0x24c) returned 1 [0219.482] SetEvent (hEvent=0x24c) returned 1 [0219.483] free (_Block=0xd5c570) [0219.483] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.483] malloc (_Size=0x48) returned 0xd5c570 [0219.483] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8c6f314, dwHighDateTime=0x1d92b8f)) [0219.483] SetEvent (hEvent=0x24c) returned 1 [0219.484] SetEvent (hEvent=0x24c) returned 1 [0219.485] free (_Block=0xd5c570) [0219.485] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.485] malloc (_Size=0x48) returned 0xd5c570 [0219.485] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.485] SetEvent (hEvent=0x24c) returned 1 [0219.486] SetEvent (hEvent=0x24c) returned 1 [0219.487] free (_Block=0xd5c570) [0219.487] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.487] malloc (_Size=0x48) returned 0xd5c570 [0219.487] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.487] SetEvent (hEvent=0x24c) returned 1 [0219.490] SetEvent (hEvent=0x24c) returned 1 [0219.490] free (_Block=0xd5c570) [0219.490] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.491] malloc (_Size=0x48) returned 0xd5c700 [0219.491] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.492] SetEvent (hEvent=0x24c) returned 1 [0219.493] SetEvent (hEvent=0x24c) returned 1 [0219.493] free (_Block=0xd5c700) [0219.493] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x1c, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0219.493] malloc (_Size=0x48) returned 0xd5c700 [0219.493] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.493] SetEvent (hEvent=0x24c) returned 1 [0219.495] SetEvent (hEvent=0x24c) returned 1 [0219.496] free (_Block=0xd5c700) [0219.496] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x1c, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0219.496] malloc (_Size=0x48) returned 0xd5c700 [0219.496] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.496] SetEvent (hEvent=0x24c) returned 1 [0219.497] SetEvent (hEvent=0x24c) returned 1 [0219.498] free (_Block=0xd5c700) [0219.498] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1c, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.498] malloc (_Size=0x48) returned 0xd5c700 [0219.498] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.498] SetEvent (hEvent=0x24c) returned 1 [0219.500] SetEvent (hEvent=0x24c) returned 1 [0219.501] free (_Block=0xd5c700) [0219.501] CM_Get_Device_IDA (in: dnDevInst=0x1d, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\ACPI_HAL\\0000") returned 0x0 [0219.501] malloc (_Size=0x48) returned 0xd5c570 [0219.501] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x8cbb846, dwHighDateTime=0x1d92b8f)) [0219.501] SetEvent (hEvent=0x24c) returned 1 [0219.502] SetEvent (hEvent=0x24c) returned 1 [0219.503] free (_Block=0xd5c570) [0219.503] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.503] malloc (_Size=0x14) returned 0xd97ee0 [0219.503] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd97ee0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd97ee0, pulLength=0x115d7d8) returned 0x0 [0219.503] free (_Block=0xd97ee0) [0219.503] malloc (_Size=0x48) returned 0xd5c7f0 [0219.503] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8cbb846, dwHighDateTime=0x1d92b8f)) [0219.503] SetEvent (hEvent=0x24c) returned 1 [0219.504] malloc (_Size=0x18) returned 0xd97b60 [0219.504] SafeArrayPutElement (psa=0x593690, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0219.504] free (_Block=0xd97b60) [0219.504] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2c00 [0219.504] SafeArrayGetDim (psa=0x593690) returned 0x1 [0219.504] SafeArrayGetLBound (in: psa=0x593690, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.504] SafeArrayGetUBound (in: psa=0x593690, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.504] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5affd0 [0219.504] SafeArrayGetDim (psa=0x593690) returned 0x1 [0219.504] SafeArrayGetUBound (in: psa=0x593690, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.504] SafeArrayGetElemsize (psa=0x593690) returned 0x8 [0219.504] SafeArrayGetElement (in: psa=0x593690, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.504] memcpy (in: _Dst=0x115d438, _Src=0x5783e0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.505] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5affd0) returned 1 [0219.505] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2c00) returned 1 [0219.505] SetEvent (hEvent=0x24c) returned 1 [0219.506] free (_Block=0xd5c7f0) [0219.506] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.506] malloc (_Size=0x5a) returned 0xd60100 [0219.506] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd60100, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd60100, pulLength=0x115d7d8) returned 0x0 [0219.507] free (_Block=0xd60100) [0219.507] malloc (_Size=0x48) returned 0xd5c700 [0219.507] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8cbb846, dwHighDateTime=0x1d92b8f)) [0219.507] SetEvent (hEvent=0x24c) returned 1 [0219.507] malloc (_Size=0x18) returned 0xd98000 [0219.507] SafeArrayPutElement (psa=0x593190, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.507] free (_Block=0xd98000) [0219.507] malloc (_Size=0x18) returned 0xd97de0 [0219.507] SafeArrayPutElement (psa=0x593190, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.508] free (_Block=0xd97de0) [0219.508] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2b00 [0219.508] SafeArrayGetDim (psa=0x593190) returned 0x1 [0219.508] SafeArrayGetLBound (in: psa=0x593190, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.508] SafeArrayGetUBound (in: psa=0x593190, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.508] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b00f0 [0219.508] SafeArrayGetDim (psa=0x593190) returned 0x1 [0219.508] SafeArrayGetUBound (in: psa=0x593190, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.508] SafeArrayGetElemsize (psa=0x593190) returned 0x8 [0219.508] SafeArrayGetElement (in: psa=0x593190, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.508] memcpy (in: _Dst=0x115d438, _Src=0x596940, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.508] memcpy (in: _Dst=0x115d438, _Src=0x596948, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.509] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b00f0) returned 1 [0219.509] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2b00) returned 1 [0219.509] SetEvent (hEvent=0x24c) returned 1 [0219.510] free (_Block=0xd5c700) [0219.510] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.516] malloc (_Size=0x48) returned 0xd5c570 [0219.516] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8ce19a5, dwHighDateTime=0x1d92b8f)) [0219.516] SetEvent (hEvent=0x24c) returned 1 [0219.517] SetEvent (hEvent=0x24c) returned 1 [0219.517] free (_Block=0xd5c570) [0219.517] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.518] malloc (_Size=0x48) returned 0xd5c750 [0219.518] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8ce19a5, dwHighDateTime=0x1d92b8f)) [0219.518] SetEvent (hEvent=0x24c) returned 1 [0219.518] SetEvent (hEvent=0x24c) returned 1 [0219.519] free (_Block=0xd5c750) [0219.519] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.519] malloc (_Size=0x48) returned 0xd5c570 [0219.519] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8ce19a5, dwHighDateTime=0x1d92b8f)) [0219.519] SetEvent (hEvent=0x24c) returned 1 [0219.520] SetEvent (hEvent=0x24c) returned 1 [0219.520] free (_Block=0xd5c570) [0219.520] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.520] malloc (_Size=0x48) returned 0xd5c570 [0219.520] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8ce19a5, dwHighDateTime=0x1d92b8f)) [0219.520] SetEvent (hEvent=0x24c) returned 1 [0219.522] SetEvent (hEvent=0x24c) returned 1 [0219.523] free (_Block=0xd5c570) [0219.523] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.524] malloc (_Size=0x48) returned 0xd5c570 [0219.524] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8ce19a5, dwHighDateTime=0x1d92b8f)) [0219.524] SetEvent (hEvent=0x24c) returned 1 [0219.525] SetEvent (hEvent=0x24c) returned 1 [0219.525] free (_Block=0xd5c570) [0219.525] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x1d, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0219.526] malloc (_Size=0x48) returned 0xd5c570 [0219.526] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x8ce19a5, dwHighDateTime=0x1d92b8f)) [0219.526] SetEvent (hEvent=0x24c) returned 1 [0219.527] SetEvent (hEvent=0x24c) returned 1 [0219.528] free (_Block=0xd5c570) [0219.528] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x1d, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0219.528] malloc (_Size=0x48) returned 0xd5c570 [0219.528] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x8ce19a5, dwHighDateTime=0x1d92b8f)) [0219.528] SetEvent (hEvent=0x24c) returned 1 [0219.529] SetEvent (hEvent=0x24c) returned 1 [0219.529] free (_Block=0xd5c570) [0219.529] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1d, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.529] malloc (_Size=0x48) returned 0xd5c570 [0219.529] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8ce19a5, dwHighDateTime=0x1d92b8f)) [0219.529] SetEvent (hEvent=0x24c) returned 1 [0219.531] SetEvent (hEvent=0x24c) returned 1 [0219.531] free (_Block=0xd5c570) [0219.536] CM_Get_Device_IDA (in: dnDevInst=0x1e, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0A08\\0") returned 0x0 [0219.536] malloc (_Size=0x48) returned 0xd5c7f0 [0219.536] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x8d084fd, dwHighDateTime=0x1d92b8f)) [0219.536] SetEvent (hEvent=0x24c) returned 1 [0219.537] SetEvent (hEvent=0x24c) returned 1 [0219.538] free (_Block=0xd5c7f0) [0219.538] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.538] malloc (_Size=0x5a) returned 0xd601e0 [0219.538] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd601e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd601e0, pulLength=0x115d7d8) returned 0x0 [0219.539] free (_Block=0xd601e0) [0219.539] malloc (_Size=0x48) returned 0xd5c570 [0219.539] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8d084fd, dwHighDateTime=0x1d92b8f)) [0219.539] SetEvent (hEvent=0x24c) returned 1 [0219.539] malloc (_Size=0x18) returned 0xd978a0 [0219.539] SafeArrayPutElement (psa=0x593710, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0219.539] free (_Block=0xd978a0) [0219.540] malloc (_Size=0x18) returned 0xd97e40 [0219.540] SafeArrayPutElement (psa=0x593710, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0219.540] free (_Block=0xd97e40) [0219.540] malloc (_Size=0x18) returned 0xd97ce0 [0219.540] SafeArrayPutElement (psa=0x593710, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0219.540] free (_Block=0xd97ce0) [0219.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2c00 [0219.540] SafeArrayGetDim (psa=0x593710) returned 0x1 [0219.540] SafeArrayGetLBound (in: psa=0x593710, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.540] SafeArrayGetUBound (in: psa=0x593710, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.540] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afdf0 [0219.540] SafeArrayGetDim (psa=0x593710) returned 0x1 [0219.540] SafeArrayGetUBound (in: psa=0x593710, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.540] SafeArrayGetElemsize (psa=0x593710) returned 0x8 [0219.540] SafeArrayGetElement (in: psa=0x593710, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.541] memcpy (in: _Dst=0x115d438, _Src=0x596520, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.541] memcpy (in: _Dst=0x115d438, _Src=0x596528, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.541] memcpy (in: _Dst=0x115d438, _Src=0x596530, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.542] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afdf0) returned 1 [0219.542] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2c00) returned 1 [0219.542] SetEvent (hEvent=0x24c) returned 1 [0219.543] free (_Block=0xd5c570) [0219.543] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.543] malloc (_Size=0x14) returned 0xd97c60 [0219.543] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd97c60, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd97c60, pulLength=0x115d7d8) returned 0x0 [0219.543] free (_Block=0xd97c60) [0219.543] malloc (_Size=0x48) returned 0xd5c570 [0219.543] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8d084fd, dwHighDateTime=0x1d92b8f)) [0219.543] SetEvent (hEvent=0x24c) returned 1 [0219.544] malloc (_Size=0x18) returned 0xd97ee0 [0219.544] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0219.544] free (_Block=0xd97ee0) [0219.544] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2880 [0219.544] SafeArrayGetDim (psa=0x593410) returned 0x1 [0219.544] SafeArrayGetLBound (in: psa=0x593410, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.544] SafeArrayGetUBound (in: psa=0x593410, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.544] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0270 [0219.544] SafeArrayGetDim (psa=0x593410) returned 0x1 [0219.544] SafeArrayGetUBound (in: psa=0x593410, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.544] SafeArrayGetElemsize (psa=0x593410) returned 0x8 [0219.544] SafeArrayGetElement (in: psa=0x593410, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.545] memcpy (in: _Dst=0x115d438, _Src=0x578420, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.545] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0270) returned 1 [0219.545] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2880) returned 1 [0219.546] SetEvent (hEvent=0x24c) returned 1 [0219.546] free (_Block=0xd5c570) [0219.546] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.554] malloc (_Size=0x48) returned 0xd5c700 [0219.554] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8d2dda5, dwHighDateTime=0x1d92b8f)) [0219.554] SetEvent (hEvent=0x24c) returned 1 [0219.555] SetEvent (hEvent=0x24c) returned 1 [0219.555] free (_Block=0xd5c700) [0219.555] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.556] malloc (_Size=0x48) returned 0xd5c570 [0219.556] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8d2dda5, dwHighDateTime=0x1d92b8f)) [0219.556] SetEvent (hEvent=0x24c) returned 1 [0219.556] SetEvent (hEvent=0x24c) returned 1 [0219.557] free (_Block=0xd5c570) [0219.557] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.557] malloc (_Size=0x48) returned 0xd5c570 [0219.557] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8d2dda5, dwHighDateTime=0x1d92b8f)) [0219.557] SetEvent (hEvent=0x24c) returned 1 [0219.558] SetEvent (hEvent=0x24c) returned 1 [0219.558] free (_Block=0xd5c570) [0219.558] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.559] malloc (_Size=0x48) returned 0xd5c570 [0219.559] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8d2dda5, dwHighDateTime=0x1d92b8f)) [0219.559] SetEvent (hEvent=0x24c) returned 1 [0219.561] SetEvent (hEvent=0x24c) returned 1 [0219.561] free (_Block=0xd5c570) [0219.561] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.563] malloc (_Size=0x48) returned 0xd5c700 [0219.563] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8d543ca, dwHighDateTime=0x1d92b8f)) [0219.563] SetEvent (hEvent=0x24c) returned 1 [0219.564] SetEvent (hEvent=0x24c) returned 1 [0219.565] free (_Block=0xd5c700) [0219.565] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x1e, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0219.565] malloc (_Size=0x48) returned 0xd5c700 [0219.565] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x8d543ca, dwHighDateTime=0x1d92b8f)) [0219.565] SetEvent (hEvent=0x24c) returned 1 [0219.566] SetEvent (hEvent=0x24c) returned 1 [0219.567] free (_Block=0xd5c700) [0219.567] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x1e, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0219.567] malloc (_Size=0x48) returned 0xd5c700 [0219.567] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x8d543ca, dwHighDateTime=0x1d92b8f)) [0219.567] SetEvent (hEvent=0x24c) returned 1 [0219.568] SetEvent (hEvent=0x24c) returned 1 [0219.569] free (_Block=0xd5c700) [0219.569] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1e, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.569] malloc (_Size=0x48) returned 0xd5c700 [0219.569] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8d543ca, dwHighDateTime=0x1d92b8f)) [0219.569] SetEvent (hEvent=0x24c) returned 1 [0219.571] SetEvent (hEvent=0x24c) returned 1 [0219.571] free (_Block=0xd5c700) [0219.571] CM_Get_Device_IDA (in: dnDevInst=0x1f, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_2934&SUBSYS_11001AF4&REV_03\\3&11583659&0&20") returned 0x0 [0219.571] malloc (_Size=0x48) returned 0xd5c570 [0219.571] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x8d543ca, dwHighDateTime=0x1d92b8f)) [0219.571] SetEvent (hEvent=0x24c) returned 1 [0219.572] SetEvent (hEvent=0x24c) returned 1 [0219.572] free (_Block=0xd5c570) [0219.572] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.573] malloc (_Size=0x124) returned 0xd649e0 [0219.573] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0219.573] free (_Block=0xd649e0) [0219.573] malloc (_Size=0x48) returned 0xd5c700 [0219.573] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8d543ca, dwHighDateTime=0x1d92b8f)) [0219.573] SetEvent (hEvent=0x24c) returned 1 [0219.574] malloc (_Size=0x18) returned 0xd979c0 [0219.574] SafeArrayPutElement (psa=0x593210, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0219.574] free (_Block=0xd979c0) [0219.574] malloc (_Size=0x18) returned 0xd97b60 [0219.574] SafeArrayPutElement (psa=0x593210, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0219.574] free (_Block=0xd97b60) [0219.574] malloc (_Size=0x18) returned 0xd97ee0 [0219.574] SafeArrayPutElement (psa=0x593210, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0219.574] free (_Block=0xd97ee0) [0219.574] malloc (_Size=0x18) returned 0xd97a20 [0219.574] SafeArrayPutElement (psa=0x593210, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0219.574] free (_Block=0xd97a20) [0219.574] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1c80 [0219.574] SafeArrayGetDim (psa=0x593210) returned 0x1 [0219.574] SafeArrayGetLBound (in: psa=0x593210, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.574] SafeArrayGetUBound (in: psa=0x593210, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.574] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5aff10 [0219.574] SafeArrayGetDim (psa=0x593210) returned 0x1 [0219.574] SafeArrayGetUBound (in: psa=0x593210, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.574] SafeArrayGetElemsize (psa=0x593210) returned 0x8 [0219.575] SafeArrayGetElement (in: psa=0x593210, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.575] memcpy (in: _Dst=0x115d438, _Src=0x5affa0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.575] memcpy (in: _Dst=0x115d438, _Src=0x5affa8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.575] memcpy (in: _Dst=0x115d438, _Src=0x5affb0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.575] memcpy (in: _Dst=0x115d438, _Src=0x5affb8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.576] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5aff10) returned 1 [0219.576] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1c80) returned 1 [0219.577] SetEvent (hEvent=0x24c) returned 1 [0219.577] free (_Block=0xd5c700) [0219.577] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.577] malloc (_Size=0x10e) returned 0xd649e0 [0219.577] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0219.578] free (_Block=0xd649e0) [0219.578] malloc (_Size=0x48) returned 0xd5c7f0 [0219.578] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8d543ca, dwHighDateTime=0x1d92b8f)) [0219.578] SetEvent (hEvent=0x24c) returned 1 [0219.578] malloc (_Size=0x18) returned 0xd97be0 [0219.578] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0219.578] free (_Block=0xd97be0) [0219.578] malloc (_Size=0x18) returned 0xd97f20 [0219.578] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.578] free (_Block=0xd97f20) [0219.579] malloc (_Size=0x18) returned 0xd97b20 [0219.579] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.579] free (_Block=0xd97b20) [0219.579] malloc (_Size=0x18) returned 0xd97ba0 [0219.579] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.579] free (_Block=0xd97ba0) [0219.579] malloc (_Size=0x18) returned 0xd979a0 [0219.579] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.579] free (_Block=0xd979a0) [0219.640] malloc (_Size=0x18) returned 0xd97900 [0219.640] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.640] free (_Block=0xd97900) [0219.640] malloc (_Size=0x18) returned 0xd97a00 [0219.640] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0219.640] free (_Block=0xd97a00) [0219.640] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2b00 [0219.640] SafeArrayGetDim (psa=0x593010) returned 0x1 [0219.641] SafeArrayGetLBound (in: psa=0x593010, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.641] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.641] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afcd0 [0219.641] SafeArrayGetDim (psa=0x593010) returned 0x1 [0219.641] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.641] SafeArrayGetElemsize (psa=0x593010) returned 0x8 [0219.641] SafeArrayGetElement (in: psa=0x593010, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.641] memcpy (in: _Dst=0x115d438, _Src=0x592d80, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.641] memcpy (in: _Dst=0x115d438, _Src=0x592d88, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.642] memcpy (in: _Dst=0x115d438, _Src=0x592d90, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.642] memcpy (in: _Dst=0x115d438, _Src=0x592d98, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.642] memcpy (in: _Dst=0x115d438, _Src=0x592da0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.642] memcpy (in: _Dst=0x115d438, _Src=0x592da8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.642] memcpy (in: _Dst=0x115d438, _Src=0x592db0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.643] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afcd0) returned 1 [0219.644] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2b00) returned 1 [0219.644] malloc (_Size=0xd8) returned 0xd64670 [0219.644] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0219.644] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0219.644] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0219.644] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0219.644] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0219.645] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0219.645] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0219.645] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0219.645] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0219.645] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0219.645] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0219.645] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0219.645] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0219.645] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0219.645] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0219.646] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0219.646] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0219.646] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0219.646] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0219.646] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0219.646] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0219.646] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0219.646] malloc (_Size=0x18) returned 0xd979c0 [0219.646] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.649] malloc (_Size=0x48) returned 0xd5c570 [0219.649] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8e13184, dwHighDateTime=0x1d92b8f)) [0219.650] SetEvent (hEvent=0x24c) returned 1 [0219.650] SetEvent (hEvent=0x24c) returned 1 [0219.651] free (_Block=0xd5c570) [0219.651] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.651] malloc (_Size=0x48) returned 0xd5c570 [0219.651] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8e13184, dwHighDateTime=0x1d92b8f)) [0219.651] SetEvent (hEvent=0x24c) returned 1 [0219.652] SetEvent (hEvent=0x24c) returned 1 [0219.652] free (_Block=0xd5c570) [0219.652] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.653] malloc (_Size=0x48) returned 0xd5c570 [0219.653] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8e13184, dwHighDateTime=0x1d92b8f)) [0219.653] SetEvent (hEvent=0x24c) returned 1 [0219.653] SetEvent (hEvent=0x24c) returned 1 [0219.654] free (_Block=0xd5c570) [0219.654] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.654] malloc (_Size=0x48) returned 0xd5c570 [0219.654] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8e13184, dwHighDateTime=0x1d92b8f)) [0219.654] SetEvent (hEvent=0x24c) returned 1 [0219.657] SetEvent (hEvent=0x24c) returned 1 [0219.657] free (_Block=0xd5c570) [0219.657] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.659] malloc (_Size=0x48) returned 0xd5c570 [0219.659] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8e38f75, dwHighDateTime=0x1d92b8f)) [0219.659] SetEvent (hEvent=0x24c) returned 1 [0219.660] SetEvent (hEvent=0x24c) returned 1 [0219.661] free (_Block=0xd5c570) [0219.661] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x1f, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0219.661] malloc (_Size=0x48) returned 0xd5c570 [0219.661] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x8e38f75, dwHighDateTime=0x1d92b8f)) [0219.661] SetEvent (hEvent=0x24c) returned 1 [0219.662] SetEvent (hEvent=0x24c) returned 1 [0219.663] free (_Block=0xd5c570) [0219.663] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x1f, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0219.663] malloc (_Size=0x48) returned 0xd5c570 [0219.663] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x8e38f75, dwHighDateTime=0x1d92b8f)) [0219.663] SetEvent (hEvent=0x24c) returned 1 [0219.664] SetEvent (hEvent=0x24c) returned 1 [0219.665] free (_Block=0xd5c570) [0219.665] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x1f, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.665] malloc (_Size=0x48) returned 0xd5c570 [0219.665] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8e38f75, dwHighDateTime=0x1d92b8f)) [0219.665] SetEvent (hEvent=0x24c) returned 1 [0219.666] SetEvent (hEvent=0x24c) returned 1 [0219.667] free (_Block=0xd5c570) [0219.667] CM_Get_Device_IDA (in: dnDevInst=0x20, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_2668&SUBSYS_11001AF4&REV_01\\3&11583659&0&38") returned 0x0 [0219.667] malloc (_Size=0x48) returned 0xd5c570 [0219.667] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x8e38f75, dwHighDateTime=0x1d92b8f)) [0219.667] SetEvent (hEvent=0x24c) returned 1 [0219.668] SetEvent (hEvent=0x24c) returned 1 [0219.668] free (_Block=0xd5c570) [0219.668] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.668] malloc (_Size=0x124) returned 0xd649e0 [0219.668] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0219.669] free (_Block=0xd649e0) [0219.669] malloc (_Size=0x48) returned 0xd5c570 [0219.669] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8e38f75, dwHighDateTime=0x1d92b8f)) [0219.669] SetEvent (hEvent=0x24c) returned 1 [0219.669] malloc (_Size=0x18) returned 0xd97d40 [0219.669] SafeArrayPutElement (psa=0x593990, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0219.669] free (_Block=0xd97d40) [0219.669] malloc (_Size=0x18) returned 0xd97c60 [0219.670] SafeArrayPutElement (psa=0x593990, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0219.670] free (_Block=0xd97c60) [0219.670] malloc (_Size=0x18) returned 0xd97bc0 [0219.670] SafeArrayPutElement (psa=0x593990, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0219.670] free (_Block=0xd97bc0) [0219.670] malloc (_Size=0x18) returned 0xd97e20 [0219.670] SafeArrayPutElement (psa=0x593990, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0219.670] free (_Block=0xd97e20) [0219.670] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e0d80 [0219.670] SafeArrayGetDim (psa=0x593990) returned 0x1 [0219.670] SafeArrayGetLBound (in: psa=0x593990, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.670] SafeArrayGetUBound (in: psa=0x593990, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.670] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b02d0 [0219.670] SafeArrayGetDim (psa=0x593990) returned 0x1 [0219.670] SafeArrayGetUBound (in: psa=0x593990, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.670] SafeArrayGetElemsize (psa=0x593990) returned 0x8 [0219.670] SafeArrayGetElement (in: psa=0x593990, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.671] memcpy (in: _Dst=0x115d438, _Src=0x5affa0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.671] memcpy (in: _Dst=0x115d438, _Src=0x5affa8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.671] memcpy (in: _Dst=0x115d438, _Src=0x5affb0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.671] memcpy (in: _Dst=0x115d438, _Src=0x5affb8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.672] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b02d0) returned 1 [0219.672] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e0d80) returned 1 [0219.682] malloc (_Size=0xd8) returned 0xd64670 [0219.682] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0219.683] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0219.683] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0219.684] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0219.684] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0219.684] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0219.684] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0219.685] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0219.685] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0219.685] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0219.685] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0219.686] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0219.686] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0219.686] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0219.686] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0219.687] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0219.687] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0219.687] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0219.687] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0219.688] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0219.691] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0219.691] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0219.691] malloc (_Size=0x18) returned 0xd979a0 [0219.691] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.691] malloc (_Size=0x10e) returned 0xd649e0 [0219.691] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0219.692] free (_Block=0xd649e0) [0219.692] malloc (_Size=0x48) returned 0xd5c7f0 [0219.692] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8e85a91, dwHighDateTime=0x1d92b8f)) [0219.692] SetEvent (hEvent=0x24c) returned 1 [0219.693] malloc (_Size=0x18) returned 0xd97d20 [0219.693] SafeArrayPutElement (psa=0x593b10, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0219.693] free (_Block=0xd97d20) [0219.693] malloc (_Size=0x18) returned 0xd97d40 [0219.693] SafeArrayPutElement (psa=0x593b10, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.693] free (_Block=0xd97d40) [0219.693] malloc (_Size=0x18) returned 0xd97ea0 [0219.693] SafeArrayPutElement (psa=0x593b10, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.693] free (_Block=0xd97ea0) [0219.693] malloc (_Size=0x18) returned 0xd97fe0 [0219.693] SafeArrayPutElement (psa=0x593b10, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.693] free (_Block=0xd97fe0) [0219.694] malloc (_Size=0x18) returned 0xd97c20 [0219.694] SafeArrayPutElement (psa=0x593b10, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.694] free (_Block=0xd97c20) [0219.694] malloc (_Size=0x18) returned 0xd97ec0 [0219.694] SafeArrayPutElement (psa=0x593b10, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.694] free (_Block=0xd97ec0) [0219.694] malloc (_Size=0x18) returned 0xd97aa0 [0219.694] SafeArrayPutElement (psa=0x593b10, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0219.694] free (_Block=0xd97aa0) [0219.694] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1f00 [0219.694] SafeArrayGetDim (psa=0x593b10) returned 0x1 [0219.694] SafeArrayGetLBound (in: psa=0x593b10, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.694] SafeArrayGetUBound (in: psa=0x593b10, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.694] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afd30 [0219.694] SafeArrayGetDim (psa=0x593b10) returned 0x1 [0219.694] SafeArrayGetUBound (in: psa=0x593b10, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.694] SafeArrayGetElemsize (psa=0x593b10) returned 0x8 [0219.695] SafeArrayGetElement (in: psa=0x593b10, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.695] memcpy (in: _Dst=0x115d438, _Src=0x592d80, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.695] memcpy (in: _Dst=0x115d438, _Src=0x592d88, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.695] memcpy (in: _Dst=0x115d438, _Src=0x592d90, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.695] memcpy (in: _Dst=0x115d438, _Src=0x592d98, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.696] memcpy (in: _Dst=0x115d438, _Src=0x592da0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.696] memcpy (in: _Dst=0x115d438, _Src=0x592da8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.696] memcpy (in: _Dst=0x115d438, _Src=0x592db0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.696] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afd30) returned 1 [0219.697] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1f00) returned 1 [0219.697] SetEvent (hEvent=0x24c) returned 1 [0219.698] free (_Block=0xd5c7f0) [0219.698] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.702] malloc (_Size=0x48) returned 0xd5c570 [0219.702] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8e85a91, dwHighDateTime=0x1d92b8f)) [0219.702] SetEvent (hEvent=0x24c) returned 1 [0219.703] SetEvent (hEvent=0x24c) returned 1 [0219.703] free (_Block=0xd5c570) [0219.704] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.704] malloc (_Size=0x48) returned 0xd5c570 [0219.704] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8eabde9, dwHighDateTime=0x1d92b8f)) [0219.704] SetEvent (hEvent=0x24c) returned 1 [0219.705] SetEvent (hEvent=0x24c) returned 1 [0219.705] free (_Block=0xd5c570) [0219.706] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.706] malloc (_Size=0x48) returned 0xd5c570 [0219.706] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8eabde9, dwHighDateTime=0x1d92b8f)) [0219.706] SetEvent (hEvent=0x24c) returned 1 [0219.706] SetEvent (hEvent=0x24c) returned 1 [0219.707] free (_Block=0xd5c570) [0219.707] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.707] malloc (_Size=0x48) returned 0xd5c7f0 [0219.707] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8eabde9, dwHighDateTime=0x1d92b8f)) [0219.707] SetEvent (hEvent=0x24c) returned 1 [0219.709] SetEvent (hEvent=0x24c) returned 1 [0219.710] free (_Block=0xd5c7f0) [0219.710] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.711] malloc (_Size=0x48) returned 0xd5c570 [0219.711] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8eabde9, dwHighDateTime=0x1d92b8f)) [0219.711] SetEvent (hEvent=0x24c) returned 1 [0219.712] SetEvent (hEvent=0x24c) returned 1 [0219.712] free (_Block=0xd5c570) [0219.712] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x20, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0219.712] malloc (_Size=0x48) returned 0xd5c700 [0219.712] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x8eabde9, dwHighDateTime=0x1d92b8f)) [0219.713] SetEvent (hEvent=0x24c) returned 1 [0219.714] SetEvent (hEvent=0x24c) returned 1 [0219.715] free (_Block=0xd5c700) [0219.715] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x20, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0219.715] malloc (_Size=0x48) returned 0xd5c570 [0219.715] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x8eabde9, dwHighDateTime=0x1d92b8f)) [0219.715] SetEvent (hEvent=0x24c) returned 1 [0219.716] SetEvent (hEvent=0x24c) returned 1 [0219.716] free (_Block=0xd5c570) [0219.716] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x20, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.716] malloc (_Size=0x48) returned 0xd5c570 [0219.716] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8eabde9, dwHighDateTime=0x1d92b8f)) [0219.716] SetEvent (hEvent=0x24c) returned 1 [0219.718] SetEvent (hEvent=0x24c) returned 1 [0219.719] free (_Block=0xd5c570) [0219.719] CM_Get_Device_IDA (in: dnDevInst=0x21, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_2922&SUBSYS_11001AF4&REV_02\\3&11583659&0&28") returned 0x0 [0219.719] malloc (_Size=0x48) returned 0xd5c570 [0219.728] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x8ed1a72, dwHighDateTime=0x1d92b8f)) [0219.728] SetEvent (hEvent=0x24c) returned 1 [0219.730] SetEvent (hEvent=0x24c) returned 1 [0219.730] free (_Block=0xd5c570) [0219.731] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.731] malloc (_Size=0x124) returned 0xd649e0 [0219.731] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0219.731] free (_Block=0xd649e0) [0219.731] malloc (_Size=0x48) returned 0xd5c700 [0219.731] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8ed1a72, dwHighDateTime=0x1d92b8f)) [0219.731] SetEvent (hEvent=0x24c) returned 1 [0219.732] malloc (_Size=0x18) returned 0xd97e20 [0219.733] SafeArrayPutElement (psa=0x593190, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0219.733] free (_Block=0xd97e20) [0219.733] malloc (_Size=0x18) returned 0xd97fe0 [0219.733] SafeArrayPutElement (psa=0x593190, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0219.733] free (_Block=0xd97fe0) [0219.733] malloc (_Size=0x18) returned 0xd97d20 [0219.733] SafeArrayPutElement (psa=0x593190, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0219.733] free (_Block=0xd97d20) [0219.733] malloc (_Size=0x18) returned 0xd97b20 [0219.733] SafeArrayPutElement (psa=0x593190, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0219.733] free (_Block=0xd97b20) [0219.733] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1700 [0219.733] SafeArrayGetDim (psa=0x593190) returned 0x1 [0219.733] SafeArrayGetLBound (in: psa=0x593190, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.733] SafeArrayGetUBound (in: psa=0x593190, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.733] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5affa0 [0219.733] SafeArrayGetDim (psa=0x593190) returned 0x1 [0219.733] SafeArrayGetUBound (in: psa=0x593190, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.733] SafeArrayGetElemsize (psa=0x593190) returned 0x8 [0219.734] SafeArrayGetElement (in: psa=0x593190, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.734] memcpy (in: _Dst=0x115d438, _Src=0x5afe50, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.734] memcpy (in: _Dst=0x115d438, _Src=0x5afe58, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.734] memcpy (in: _Dst=0x115d438, _Src=0x5afe60, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.734] memcpy (in: _Dst=0x115d438, _Src=0x5afe68, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.736] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5affa0) returned 1 [0219.736] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1700) returned 1 [0219.737] SetEvent (hEvent=0x24c) returned 1 [0219.738] free (_Block=0xd5c700) [0219.738] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.738] malloc (_Size=0x10e) returned 0xd649e0 [0219.738] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0219.738] free (_Block=0xd649e0) [0219.738] malloc (_Size=0x48) returned 0xd5c7f0 [0219.738] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8efab4c, dwHighDateTime=0x1d92b8f)) [0219.739] SetEvent (hEvent=0x24c) returned 1 [0219.739] malloc (_Size=0x18) returned 0xd979e0 [0219.739] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0219.739] free (_Block=0xd979e0) [0219.739] malloc (_Size=0x18) returned 0xd97ea0 [0219.739] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.739] free (_Block=0xd97ea0) [0219.739] malloc (_Size=0x18) returned 0xd97a00 [0219.740] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.740] free (_Block=0xd97a00) [0219.740] malloc (_Size=0x18) returned 0xd97fc0 [0219.740] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.740] free (_Block=0xd97fc0) [0219.740] malloc (_Size=0x18) returned 0xd97b20 [0219.740] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.740] free (_Block=0xd97b20) [0219.740] malloc (_Size=0x18) returned 0xd97b60 [0219.740] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.740] free (_Block=0xd97b60) [0219.740] malloc (_Size=0x18) returned 0xd97c40 [0219.740] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0219.740] free (_Block=0xd97c40) [0219.740] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1d00 [0219.740] SafeArrayGetDim (psa=0x593410) returned 0x1 [0219.740] SafeArrayGetLBound (in: psa=0x593410, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.740] SafeArrayGetUBound (in: psa=0x593410, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.740] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0300 [0219.740] SafeArrayGetDim (psa=0x593410) returned 0x1 [0219.740] SafeArrayGetUBound (in: psa=0x593410, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.740] SafeArrayGetElemsize (psa=0x593410) returned 0x8 [0219.741] SafeArrayGetElement (in: psa=0x593410, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.741] memcpy (in: _Dst=0x115d438, _Src=0x593ac0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.741] memcpy (in: _Dst=0x115d438, _Src=0x593ac8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.741] memcpy (in: _Dst=0x115d438, _Src=0x593ad0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.741] memcpy (in: _Dst=0x115d438, _Src=0x593ad8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.742] memcpy (in: _Dst=0x115d438, _Src=0x593ae0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.742] memcpy (in: _Dst=0x115d438, _Src=0x593ae8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.742] memcpy (in: _Dst=0x115d438, _Src=0x593af0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.743] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0300) returned 1 [0219.743] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1d00) returned 1 [0219.743] SetEvent (hEvent=0x24c) returned 1 [0219.744] free (_Block=0xd5c7f0) [0219.744] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.749] malloc (_Size=0x48) returned 0xd5c700 [0219.749] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8efab4c, dwHighDateTime=0x1d92b8f)) [0219.749] SetEvent (hEvent=0x24c) returned 1 [0219.749] SetEvent (hEvent=0x24c) returned 1 [0219.750] free (_Block=0xd5c700) [0219.757] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.757] malloc (_Size=0x48) returned 0xd5c570 [0219.757] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8f29c79, dwHighDateTime=0x1d92b8f)) [0219.757] SetEvent (hEvent=0x24c) returned 1 [0219.758] SetEvent (hEvent=0x24c) returned 1 [0219.758] free (_Block=0xd5c570) [0219.758] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.759] malloc (_Size=0x48) returned 0xd5c570 [0219.759] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8f29c79, dwHighDateTime=0x1d92b8f)) [0219.759] SetEvent (hEvent=0x24c) returned 1 [0219.760] SetEvent (hEvent=0x24c) returned 1 [0219.760] free (_Block=0xd5c570) [0219.760] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.761] malloc (_Size=0x48) returned 0xd5c570 [0219.761] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8f29c79, dwHighDateTime=0x1d92b8f)) [0219.761] SetEvent (hEvent=0x24c) returned 1 [0219.764] SetEvent (hEvent=0x24c) returned 1 [0219.764] free (_Block=0xd5c570) [0219.764] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.767] malloc (_Size=0x48) returned 0xd5c700 [0219.767] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8f440c8, dwHighDateTime=0x1d92b8f)) [0219.767] SetEvent (hEvent=0x24c) returned 1 [0219.768] SetEvent (hEvent=0x24c) returned 1 [0219.768] free (_Block=0xd5c700) [0219.769] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x21, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0219.769] malloc (_Size=0x48) returned 0xd5c750 [0219.769] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x8f440c8, dwHighDateTime=0x1d92b8f)) [0219.769] SetEvent (hEvent=0x24c) returned 1 [0219.770] SetEvent (hEvent=0x24c) returned 1 [0219.771] free (_Block=0xd5c750) [0219.771] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x21, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0219.771] malloc (_Size=0x48) returned 0xd5c570 [0219.771] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x8f440c8, dwHighDateTime=0x1d92b8f)) [0219.771] SetEvent (hEvent=0x24c) returned 1 [0219.772] SetEvent (hEvent=0x24c) returned 1 [0219.773] free (_Block=0xd5c570) [0219.773] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x21, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.773] malloc (_Size=0x48) returned 0xd5c570 [0219.773] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8f440c8, dwHighDateTime=0x1d92b8f)) [0219.773] SetEvent (hEvent=0x24c) returned 1 [0219.775] SetEvent (hEvent=0x24c) returned 1 [0219.776] free (_Block=0xd5c570) [0219.776] CM_Get_Device_IDA (in: dnDevInst=0x22, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_2922&SUBSYS_11001AF4&REV_02\\3&11583659&0&FA") returned 0x0 [0219.776] malloc (_Size=0x48) returned 0xd5c570 [0219.776] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x8f440c8, dwHighDateTime=0x1d92b8f)) [0219.776] SetEvent (hEvent=0x24c) returned 1 [0219.777] SetEvent (hEvent=0x24c) returned 1 [0219.777] free (_Block=0xd5c570) [0219.777] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.777] malloc (_Size=0x124) returned 0xd649e0 [0219.777] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0219.778] free (_Block=0xd649e0) [0219.778] malloc (_Size=0x48) returned 0xd5c700 [0219.778] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8f440c8, dwHighDateTime=0x1d92b8f)) [0219.778] SetEvent (hEvent=0x24c) returned 1 [0219.778] malloc (_Size=0x18) returned 0xd97c00 [0219.779] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0219.779] free (_Block=0xd97c00) [0219.779] malloc (_Size=0x18) returned 0xd97ce0 [0219.779] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0219.779] free (_Block=0xd97ce0) [0219.779] malloc (_Size=0x18) returned 0xd978a0 [0219.779] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0219.779] free (_Block=0xd978a0) [0219.779] malloc (_Size=0x18) returned 0xd97aa0 [0219.779] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0219.779] free (_Block=0xd97aa0) [0219.779] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2880 [0219.779] SafeArrayGetDim (psa=0x5938d0) returned 0x1 [0219.779] SafeArrayGetLBound (in: psa=0x5938d0, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.779] SafeArrayGetUBound (in: psa=0x5938d0, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.779] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afca0 [0219.779] SafeArrayGetDim (psa=0x5938d0) returned 0x1 [0219.779] SafeArrayGetUBound (in: psa=0x5938d0, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.779] SafeArrayGetElemsize (psa=0x5938d0) returned 0x8 [0219.779] SafeArrayGetElement (in: psa=0x5938d0, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.780] memcpy (in: _Dst=0x115d438, _Src=0x5afc70, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.780] memcpy (in: _Dst=0x115d438, _Src=0x5afc78, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.780] memcpy (in: _Dst=0x115d438, _Src=0x5afc80, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.780] memcpy (in: _Dst=0x115d438, _Src=0x5afc88, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.781] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afca0) returned 1 [0219.781] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2880) returned 1 [0219.807] malloc (_Size=0xd8) returned 0xd64670 [0219.807] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0219.807] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0219.807] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0219.807] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0219.807] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0219.807] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0219.807] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0219.808] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0219.808] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0219.808] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0219.808] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0219.808] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0219.808] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0219.808] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0219.808] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0219.808] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0219.808] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0219.808] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0219.809] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0219.809] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0219.809] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0219.809] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0219.809] malloc (_Size=0x18) returned 0xd97b20 [0219.809] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.809] malloc (_Size=0x10e) returned 0xd649e0 [0219.809] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0219.810] free (_Block=0xd649e0) [0219.810] malloc (_Size=0x48) returned 0xd5c750 [0219.810] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x8f90543, dwHighDateTime=0x1d92b8f)) [0219.810] SetEvent (hEvent=0x24c) returned 1 [0219.811] malloc (_Size=0x18) returned 0xd97b60 [0219.811] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0219.811] free (_Block=0xd97b60) [0219.811] malloc (_Size=0x18) returned 0xd97e40 [0219.811] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.811] free (_Block=0xd97e40) [0219.811] malloc (_Size=0x18) returned 0xd97aa0 [0219.811] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.811] free (_Block=0xd97aa0) [0219.811] malloc (_Size=0x18) returned 0xd97ee0 [0219.811] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.811] free (_Block=0xd97ee0) [0219.811] malloc (_Size=0x18) returned 0xd98000 [0219.811] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.811] free (_Block=0xd98000) [0219.812] malloc (_Size=0x18) returned 0xd97de0 [0219.812] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0219.812] free (_Block=0xd97de0) [0219.812] malloc (_Size=0x18) returned 0xd97fc0 [0219.812] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0219.812] free (_Block=0xd97fc0) [0219.812] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1f80 [0219.812] SafeArrayGetDim (psa=0x5938d0) returned 0x1 [0219.812] SafeArrayGetLBound (in: psa=0x5938d0, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.812] SafeArrayGetUBound (in: psa=0x5938d0, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.812] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5affa0 [0219.812] SafeArrayGetDim (psa=0x5938d0) returned 0x1 [0219.812] SafeArrayGetUBound (in: psa=0x5938d0, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.812] SafeArrayGetElemsize (psa=0x5938d0) returned 0x8 [0219.812] SafeArrayGetElement (in: psa=0x5938d0, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.813] memcpy (in: _Dst=0x115d438, _Src=0x593980, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.813] memcpy (in: _Dst=0x115d438, _Src=0x593988, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.813] memcpy (in: _Dst=0x115d438, _Src=0x593990, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.813] memcpy (in: _Dst=0x115d438, _Src=0x593998, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.813] memcpy (in: _Dst=0x115d438, _Src=0x5939a0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.814] memcpy (in: _Dst=0x115d438, _Src=0x5939a8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.814] memcpy (in: _Dst=0x115d438, _Src=0x5939b0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.814] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5affa0) returned 1 [0219.815] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1f80) returned 1 [0219.815] SetEvent (hEvent=0x24c) returned 1 [0219.816] free (_Block=0xd5c750) [0219.816] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.818] malloc (_Size=0x48) returned 0xd5c700 [0219.818] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8fb682b, dwHighDateTime=0x1d92b8f)) [0219.818] SetEvent (hEvent=0x24c) returned 1 [0219.819] SetEvent (hEvent=0x24c) returned 1 [0219.820] free (_Block=0xd5c700) [0219.820] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.820] malloc (_Size=0x48) returned 0xd5c570 [0219.820] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8fb682b, dwHighDateTime=0x1d92b8f)) [0219.821] SetEvent (hEvent=0x24c) returned 1 [0219.822] SetEvent (hEvent=0x24c) returned 1 [0219.822] free (_Block=0xd5c570) [0219.822] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.823] malloc (_Size=0x48) returned 0xd5c570 [0219.823] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8fb682b, dwHighDateTime=0x1d92b8f)) [0219.823] SetEvent (hEvent=0x24c) returned 1 [0219.824] SetEvent (hEvent=0x24c) returned 1 [0219.824] free (_Block=0xd5c570) [0219.825] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.825] malloc (_Size=0x48) returned 0xd5c570 [0219.825] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8fb682b, dwHighDateTime=0x1d92b8f)) [0219.825] SetEvent (hEvent=0x24c) returned 1 [0219.827] SetEvent (hEvent=0x24c) returned 1 [0219.828] free (_Block=0xd5c570) [0219.828] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.830] malloc (_Size=0x48) returned 0xd5c700 [0219.830] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8fb682b, dwHighDateTime=0x1d92b8f)) [0219.830] SetEvent (hEvent=0x24c) returned 1 [0219.831] SetEvent (hEvent=0x24c) returned 1 [0219.836] free (_Block=0xd5c700) [0219.836] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x22, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0219.836] malloc (_Size=0x48) returned 0xd5c700 [0219.836] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x8fe60cc, dwHighDateTime=0x1d92b8f)) [0219.836] SetEvent (hEvent=0x24c) returned 1 [0219.838] SetEvent (hEvent=0x24c) returned 1 [0219.839] free (_Block=0xd5c700) [0219.839] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x22, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0219.839] malloc (_Size=0x48) returned 0xd5c700 [0219.839] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x8fe60cc, dwHighDateTime=0x1d92b8f)) [0219.839] SetEvent (hEvent=0x24c) returned 1 [0219.841] SetEvent (hEvent=0x24c) returned 1 [0219.841] free (_Block=0xd5c700) [0219.842] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x22, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.842] malloc (_Size=0x48) returned 0xd5c700 [0219.842] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x8fe60cc, dwHighDateTime=0x1d92b8f)) [0219.842] SetEvent (hEvent=0x24c) returned 1 [0219.844] SetEvent (hEvent=0x24c) returned 1 [0219.845] free (_Block=0xd5c700) [0219.845] CM_Get_Device_IDA (in: dnDevInst=0x23, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI_HAL\\PNP0C08\\0") returned 0x0 [0219.845] malloc (_Size=0x48) returned 0xd5c570 [0219.845] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x9002c0f, dwHighDateTime=0x1d92b8f)) [0219.845] SetEvent (hEvent=0x24c) returned 1 [0219.846] SetEvent (hEvent=0x24c) returned 1 [0219.847] free (_Block=0xd5c570) [0219.847] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.847] malloc (_Size=0x36) returned 0xd606b0 [0219.847] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd606b0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd606b0, pulLength=0x115d7d8) returned 0x0 [0219.848] free (_Block=0xd606b0) [0219.848] malloc (_Size=0x48) returned 0xd5c570 [0219.848] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9002c0f, dwHighDateTime=0x1d92b8f)) [0219.848] SetEvent (hEvent=0x24c) returned 1 [0219.873] malloc (_Size=0x18) returned 0xd978e0 [0219.873] SafeArrayPutElement (psa=0x592d90, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0219.873] free (_Block=0xd978e0) [0219.875] malloc (_Size=0x18) returned 0xd97a80 [0219.875] SafeArrayPutElement (psa=0x592d90, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0219.875] free (_Block=0xd97a80) [0219.875] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2880 [0219.875] SafeArrayGetDim (psa=0x592d90) returned 0x1 [0219.875] SafeArrayGetLBound (in: psa=0x592d90, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.875] SafeArrayGetUBound (in: psa=0x592d90, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.875] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0090 [0219.875] SafeArrayGetDim (psa=0x592d90) returned 0x1 [0219.875] SafeArrayGetUBound (in: psa=0x592d90, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.875] SafeArrayGetElemsize (psa=0x592d90) returned 0x8 [0219.875] SafeArrayGetElement (in: psa=0x592d90, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.876] memcpy (in: _Dst=0x115d438, _Src=0x5968c0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.876] memcpy (in: _Dst=0x115d438, _Src=0x5968c8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.877] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0090) returned 1 [0219.877] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2880) returned 1 [0219.877] malloc (_Size=0xd8) returned 0xd64670 [0219.877] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0219.878] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0219.878] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0219.878] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0219.878] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0219.878] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0219.878] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0219.878] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0219.878] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0219.878] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0219.879] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0219.879] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0219.879] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0219.879] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0219.879] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0219.879] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0219.879] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0219.879] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0219.879] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0219.879] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0219.880] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0219.880] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0219.880] malloc (_Size=0x18) returned 0xd97bc0 [0219.880] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0219.880] malloc (_Size=0x48) returned 0xd5c570 [0219.880] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x904efd1, dwHighDateTime=0x1d92b8f)) [0219.880] SetEvent (hEvent=0x24c) returned 1 [0219.881] SetEvent (hEvent=0x24c) returned 1 [0219.881] free (_Block=0xd5c570) [0219.882] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.886] malloc (_Size=0x48) returned 0xd5c570 [0219.886] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x904efd1, dwHighDateTime=0x1d92b8f)) [0219.886] SetEvent (hEvent=0x24c) returned 1 [0219.886] SetEvent (hEvent=0x24c) returned 1 [0219.887] free (_Block=0xd5c570) [0219.887] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.887] malloc (_Size=0x48) returned 0xd5c570 [0219.887] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x904efd1, dwHighDateTime=0x1d92b8f)) [0219.887] SetEvent (hEvent=0x24c) returned 1 [0219.888] SetEvent (hEvent=0x24c) returned 1 [0219.889] free (_Block=0xd5c570) [0219.889] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.889] malloc (_Size=0x48) returned 0xd5c570 [0219.889] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x904efd1, dwHighDateTime=0x1d92b8f)) [0219.889] SetEvent (hEvent=0x24c) returned 1 [0219.889] SetEvent (hEvent=0x24c) returned 1 [0219.890] free (_Block=0xd5c570) [0219.890] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.890] malloc (_Size=0x48) returned 0xd5c570 [0219.890] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x904efd1, dwHighDateTime=0x1d92b8f)) [0219.890] SetEvent (hEvent=0x24c) returned 1 [0219.893] SetEvent (hEvent=0x24c) returned 1 [0219.893] free (_Block=0xd5c570) [0219.893] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.895] malloc (_Size=0x48) returned 0xd5c570 [0219.895] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x907549b, dwHighDateTime=0x1d92b8f)) [0219.895] SetEvent (hEvent=0x24c) returned 1 [0219.895] SetEvent (hEvent=0x24c) returned 1 [0219.896] free (_Block=0xd5c570) [0219.896] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x23, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0219.896] malloc (_Size=0x48) returned 0xd5c7f0 [0219.896] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x907549b, dwHighDateTime=0x1d92b8f)) [0219.896] SetEvent (hEvent=0x24c) returned 1 [0219.898] SetEvent (hEvent=0x24c) returned 1 [0219.898] free (_Block=0xd5c7f0) [0219.898] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x23, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0219.899] malloc (_Size=0x48) returned 0xd5c570 [0219.899] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x907549b, dwHighDateTime=0x1d92b8f)) [0219.899] SetEvent (hEvent=0x24c) returned 1 [0219.900] SetEvent (hEvent=0x24c) returned 1 [0219.900] free (_Block=0xd5c570) [0219.900] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x23, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.900] malloc (_Size=0x48) returned 0xd5c570 [0219.900] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x907549b, dwHighDateTime=0x1d92b8f)) [0219.900] SetEvent (hEvent=0x24c) returned 1 [0219.902] SetEvent (hEvent=0x24c) returned 1 [0219.903] free (_Block=0xd5c570) [0219.903] CM_Get_Device_IDA (in: dnDevInst=0x24, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="HTREE\\ROOT\\0") returned 0x0 [0219.903] malloc (_Size=0x48) returned 0xd5c570 [0219.903] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x907549b, dwHighDateTime=0x1d92b8f)) [0219.903] SetEvent (hEvent=0x24c) returned 1 [0219.903] SetEvent (hEvent=0x24c) returned 1 [0219.904] free (_Block=0xd5c570) [0219.904] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0219.904] malloc (_Size=0x48) returned 0xd5c570 [0219.904] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x907549b, dwHighDateTime=0x1d92b8f)) [0219.904] SetEvent (hEvent=0x24c) returned 1 [0219.905] SetEvent (hEvent=0x24c) returned 1 [0219.905] free (_Block=0xd5c570) [0219.905] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0219.905] malloc (_Size=0x48) returned 0xd5c570 [0219.905] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x907549b, dwHighDateTime=0x1d92b8f)) [0219.905] SetEvent (hEvent=0x24c) returned 1 [0219.906] SetEvent (hEvent=0x24c) returned 1 [0219.906] free (_Block=0xd5c570) [0219.906] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.913] malloc (_Size=0x48) returned 0xd5c570 [0219.913] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x909b636, dwHighDateTime=0x1d92b8f)) [0219.913] SetEvent (hEvent=0x24c) returned 1 [0219.913] SetEvent (hEvent=0x24c) returned 1 [0219.914] free (_Block=0xd5c570) [0219.914] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.914] malloc (_Size=0x48) returned 0xd5c700 [0219.914] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x909b636, dwHighDateTime=0x1d92b8f)) [0219.914] SetEvent (hEvent=0x24c) returned 1 [0219.914] SetEvent (hEvent=0x24c) returned 1 [0219.915] free (_Block=0xd5c700) [0219.916] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.916] malloc (_Size=0x48) returned 0xd5c570 [0219.916] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x909b636, dwHighDateTime=0x1d92b8f)) [0219.916] SetEvent (hEvent=0x24c) returned 1 [0219.916] SetEvent (hEvent=0x24c) returned 1 [0219.917] free (_Block=0xd5c570) [0219.917] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.917] malloc (_Size=0x48) returned 0xd5c570 [0219.917] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x909b636, dwHighDateTime=0x1d92b8f)) [0219.917] SetEvent (hEvent=0x24c) returned 1 [0219.919] SetEvent (hEvent=0x24c) returned 1 [0219.920] free (_Block=0xd5c570) [0219.920] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.920] malloc (_Size=0x48) returned 0xd5c570 [0219.920] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x909b636, dwHighDateTime=0x1d92b8f)) [0219.920] SetEvent (hEvent=0x24c) returned 1 [0219.921] SetEvent (hEvent=0x24c) returned 1 [0219.921] free (_Block=0xd5c570) [0219.921] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x24, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0219.922] malloc (_Size=0x48) returned 0xd5c570 [0219.922] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x909b636, dwHighDateTime=0x1d92b8f)) [0219.922] SetEvent (hEvent=0x24c) returned 1 [0219.950] malloc (_Size=0xd8) returned 0xd64670 [0219.950] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0219.951] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0219.951] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0219.951] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0219.951] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0219.951] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0219.951] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0219.951] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0219.951] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0219.951] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0219.951] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0219.952] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0219.952] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0219.952] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0219.952] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0219.952] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0219.952] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0219.952] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0219.952] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0219.952] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0219.952] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0219.952] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0219.953] malloc (_Size=0x18) returned 0xd979e0 [0219.953] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x24, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0219.953] malloc (_Size=0x48) returned 0xd5c570 [0219.953] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x90e791a, dwHighDateTime=0x1d92b8f)) [0219.953] SetEvent (hEvent=0x24c) returned 1 [0219.954] SetEvent (hEvent=0x24c) returned 1 [0219.955] free (_Block=0xd5c570) [0219.955] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x24, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.955] malloc (_Size=0x48) returned 0xd5c570 [0219.955] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x90e791a, dwHighDateTime=0x1d92b8f)) [0219.956] SetEvent (hEvent=0x24c) returned 1 [0219.959] malloc (_Size=0xd8) returned 0xd64670 [0219.959] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0219.959] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0219.959] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0219.959] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0219.960] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0219.960] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0219.960] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0219.960] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0219.960] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0219.960] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0219.960] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0219.960] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0219.960] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0219.960] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0219.960] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0219.961] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0219.961] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0219.961] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0219.961] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0219.961] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0219.961] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0219.961] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0219.961] malloc (_Size=0x18) returned 0xd97ba0 [0219.961] CM_Get_Device_IDA (in: dnDevInst=0x25, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\BASICRENDER\\0000") returned 0x0 [0219.961] malloc (_Size=0x48) returned 0xd5c570 [0219.961] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x9114425, dwHighDateTime=0x1d92b8f)) [0219.961] SetEvent (hEvent=0x24c) returned 1 [0219.963] SetEvent (hEvent=0x24c) returned 1 [0219.963] free (_Block=0xd5c570) [0219.964] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.964] malloc (_Size=0x24) returned 0xd5f810 [0219.964] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd5f810, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd5f810, pulLength=0x115d7d8) returned 0x0 [0219.964] free (_Block=0xd5f810) [0219.964] malloc (_Size=0x48) returned 0xd5c570 [0219.964] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9114425, dwHighDateTime=0x1d92b8f)) [0219.964] SetEvent (hEvent=0x24c) returned 1 [0219.965] malloc (_Size=0x18) returned 0xd97f20 [0219.965] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0219.965] free (_Block=0xd97f20) [0219.965] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1380 [0219.965] SafeArrayGetDim (psa=0x593010) returned 0x1 [0219.965] SafeArrayGetLBound (in: psa=0x593010, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.965] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.965] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0090 [0219.965] SafeArrayGetDim (psa=0x593010) returned 0x1 [0219.965] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.965] SafeArrayGetElemsize (psa=0x593010) returned 0x8 [0219.966] SafeArrayGetElement (in: psa=0x593010, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.966] memcpy (in: _Dst=0x115d438, _Src=0x5783d0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.967] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0090) returned 1 [0219.967] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1380) returned 1 [0219.967] SetEvent (hEvent=0x24c) returned 1 [0219.968] free (_Block=0xd5c570) [0219.968] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0219.968] malloc (_Size=0x48) returned 0xd5c570 [0219.968] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9114425, dwHighDateTime=0x1d92b8f)) [0219.968] SetEvent (hEvent=0x24c) returned 1 [0219.969] SetEvent (hEvent=0x24c) returned 1 [0219.970] free (_Block=0xd5c570) [0219.970] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.974] malloc (_Size=0x48) returned 0xd5c570 [0219.974] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9133f17, dwHighDateTime=0x1d92b8f)) [0219.974] SetEvent (hEvent=0x24c) returned 1 [0219.974] SetEvent (hEvent=0x24c) returned 1 [0219.975] free (_Block=0xd5c570) [0219.975] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.975] malloc (_Size=0x48) returned 0xd5c570 [0219.975] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9133f17, dwHighDateTime=0x1d92b8f)) [0219.975] SetEvent (hEvent=0x24c) returned 1 [0219.976] SetEvent (hEvent=0x24c) returned 1 [0219.976] free (_Block=0xd5c570) [0219.977] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.977] malloc (_Size=0x48) returned 0xd5c700 [0219.977] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9133f17, dwHighDateTime=0x1d92b8f)) [0219.977] SetEvent (hEvent=0x24c) returned 1 [0219.977] SetEvent (hEvent=0x24c) returned 1 [0219.978] free (_Block=0xd5c700) [0219.978] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.978] malloc (_Size=0x48) returned 0xd5c570 [0219.978] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9133f17, dwHighDateTime=0x1d92b8f)) [0219.978] SetEvent (hEvent=0x24c) returned 1 [0219.980] SetEvent (hEvent=0x24c) returned 1 [0219.981] free (_Block=0xd5c570) [0219.981] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0219.982] malloc (_Size=0x48) returned 0xd5c700 [0219.982] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9133f17, dwHighDateTime=0x1d92b8f)) [0219.983] SetEvent (hEvent=0x24c) returned 1 [0219.983] SetEvent (hEvent=0x24c) returned 1 [0219.984] free (_Block=0xd5c700) [0219.984] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x25, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0219.984] malloc (_Size=0x48) returned 0xd5c700 [0219.984] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x9133f17, dwHighDateTime=0x1d92b8f)) [0219.984] SetEvent (hEvent=0x24c) returned 1 [0219.986] SetEvent (hEvent=0x24c) returned 1 [0219.986] free (_Block=0xd5c700) [0219.986] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x25, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0219.987] malloc (_Size=0x48) returned 0xd5c700 [0219.987] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x915a25b, dwHighDateTime=0x1d92b8f)) [0219.987] SetEvent (hEvent=0x24c) returned 1 [0219.987] SetEvent (hEvent=0x24c) returned 1 [0219.988] free (_Block=0xd5c700) [0219.988] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x25, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0219.988] malloc (_Size=0x48) returned 0xd5c700 [0219.988] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x915a25b, dwHighDateTime=0x1d92b8f)) [0219.988] SetEvent (hEvent=0x24c) returned 1 [0219.990] SetEvent (hEvent=0x24c) returned 1 [0219.990] free (_Block=0xd5c700) [0219.990] CM_Get_Device_IDA (in: dnDevInst=0x26, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="USB\\ROOT_HUB20\\4&9C1D5B7&0") returned 0x0 [0219.990] malloc (_Size=0x48) returned 0xd5c700 [0219.990] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x915a25b, dwHighDateTime=0x1d92b8f)) [0219.990] SetEvent (hEvent=0x24c) returned 1 [0219.991] SetEvent (hEvent=0x24c) returned 1 [0219.992] free (_Block=0xd5c700) [0219.992] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0219.992] malloc (_Size=0xac) returned 0xd64750 [0219.992] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd64750, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd64750, pulLength=0x115d7d8) returned 0x0 [0219.992] free (_Block=0xd64750) [0219.992] malloc (_Size=0x48) returned 0xd5c700 [0219.992] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x915a25b, dwHighDateTime=0x1d92b8f)) [0219.992] SetEvent (hEvent=0x24c) returned 1 [0219.993] malloc (_Size=0x18) returned 0xd97b00 [0219.993] SafeArrayPutElement (psa=0x593310, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0219.993] free (_Block=0xd97b00) [0219.993] malloc (_Size=0x18) returned 0xd97f20 [0219.993] SafeArrayPutElement (psa=0x593310, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0219.993] free (_Block=0xd97f20) [0219.993] malloc (_Size=0x18) returned 0xd97a80 [0219.993] SafeArrayPutElement (psa=0x593310, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0219.993] free (_Block=0xd97a80) [0219.993] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e0e00 [0219.993] SafeArrayGetDim (psa=0x593310) returned 0x1 [0219.993] SafeArrayGetLBound (in: psa=0x593310, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0219.993] SafeArrayGetUBound (in: psa=0x593310, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0219.993] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0090 [0219.993] SafeArrayGetDim (psa=0x593310) returned 0x1 [0219.993] SafeArrayGetUBound (in: psa=0x593310, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0219.993] SafeArrayGetElemsize (psa=0x593310) returned 0x8 [0219.994] SafeArrayGetElement (in: psa=0x593310, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0219.994] memcpy (in: _Dst=0x115d438, _Src=0x5962c0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.994] memcpy (in: _Dst=0x115d438, _Src=0x5962c8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.994] memcpy (in: _Dst=0x115d438, _Src=0x5962d0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0219.995] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0090) returned 1 [0219.996] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e0e00) returned 1 [0219.996] SetEvent (hEvent=0x24c) returned 1 [0219.996] free (_Block=0xd5c700) [0219.996] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0219.996] malloc (_Size=0x48) returned 0xd5c700 [0219.997] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x915a25b, dwHighDateTime=0x1d92b8f)) [0219.997] SetEvent (hEvent=0x24c) returned 1 [0219.997] SetEvent (hEvent=0x24c) returned 1 [0219.997] free (_Block=0xd5c700) [0219.997] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.000] malloc (_Size=0x48) returned 0xd5c700 [0220.000] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x915a25b, dwHighDateTime=0x1d92b8f)) [0220.001] SetEvent (hEvent=0x24c) returned 1 [0220.004] malloc (_Size=0xd8) returned 0xd64670 [0220.004] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0220.004] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0220.004] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0220.004] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0220.004] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0220.004] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0220.004] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0220.004] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0220.005] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0220.005] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0220.005] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0220.005] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0220.005] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0220.005] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0220.005] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0220.005] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0220.005] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0220.005] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0220.006] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0220.006] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0220.006] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0220.006] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0220.006] malloc (_Size=0x18) returned 0xd97da0 [0220.006] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.006] malloc (_Size=0x48) returned 0xd5c700 [0220.006] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9180375, dwHighDateTime=0x1d92b8f)) [0220.006] SetEvent (hEvent=0x24c) returned 1 [0220.007] SetEvent (hEvent=0x24c) returned 1 [0220.008] free (_Block=0xd5c700) [0220.008] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.008] malloc (_Size=0x48) returned 0xd5c700 [0220.008] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9180375, dwHighDateTime=0x1d92b8f)) [0220.008] SetEvent (hEvent=0x24c) returned 1 [0220.009] SetEvent (hEvent=0x24c) returned 1 [0220.010] free (_Block=0xd5c700) [0220.010] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.011] malloc (_Size=0x48) returned 0xd5c700 [0220.011] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9180375, dwHighDateTime=0x1d92b8f)) [0220.011] SetEvent (hEvent=0x24c) returned 1 [0220.013] SetEvent (hEvent=0x24c) returned 1 [0220.014] free (_Block=0xd5c700) [0220.014] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.018] malloc (_Size=0x48) returned 0xd5c700 [0220.018] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x91a6594, dwHighDateTime=0x1d92b8f)) [0220.018] SetEvent (hEvent=0x24c) returned 1 [0220.019] SetEvent (hEvent=0x24c) returned 1 [0220.020] free (_Block=0xd5c700) [0220.020] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x26, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0220.021] malloc (_Size=0x48) returned 0xd5c700 [0220.021] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x91a6594, dwHighDateTime=0x1d92b8f)) [0220.021] SetEvent (hEvent=0x24c) returned 1 [0220.022] SetEvent (hEvent=0x24c) returned 1 [0220.023] free (_Block=0xd5c700) [0220.023] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x26, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0220.024] malloc (_Size=0x48) returned 0xd5c700 [0220.024] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x91a6594, dwHighDateTime=0x1d92b8f)) [0220.024] SetEvent (hEvent=0x24c) returned 1 [0220.025] SetEvent (hEvent=0x24c) returned 1 [0220.026] free (_Block=0xd5c700) [0220.026] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x26, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0220.026] malloc (_Size=0x48) returned 0xd5c700 [0220.026] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x91a6594, dwHighDateTime=0x1d92b8f)) [0220.026] SetEvent (hEvent=0x24c) returned 1 [0220.028] SetEvent (hEvent=0x24c) returned 1 [0220.029] free (_Block=0xd5c700) [0220.029] CM_Get_Device_IDA (in: dnDevInst=0x27, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="HID\\VID_1532&PID_0102\\6&377ACEB1&0&0000") returned 0x0 [0220.029] malloc (_Size=0x48) returned 0xd5c570 [0220.029] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x91a6594, dwHighDateTime=0x1d92b8f)) [0220.029] SetEvent (hEvent=0x24c) returned 1 [0220.030] SetEvent (hEvent=0x24c) returned 1 [0220.031] free (_Block=0xd5c570) [0220.031] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.031] malloc (_Size=0x124) returned 0xd649e0 [0220.032] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0220.033] free (_Block=0xd649e0) [0220.033] malloc (_Size=0x48) returned 0xd99750 [0220.033] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x91cc897, dwHighDateTime=0x1d92b8f)) [0220.033] SetEvent (hEvent=0x24c) returned 1 [0220.033] malloc (_Size=0x18) returned 0xd97e60 [0220.033] SafeArrayPutElement (psa=0x593310, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.034] free (_Block=0xd97e60) [0220.034] malloc (_Size=0x18) returned 0xd97b60 [0220.034] SafeArrayPutElement (psa=0x593310, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.034] free (_Block=0xd97b60) [0220.034] malloc (_Size=0x18) returned 0xd97ce0 [0220.034] SafeArrayPutElement (psa=0x593310, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.034] free (_Block=0xd97ce0) [0220.034] malloc (_Size=0x18) returned 0xd97c80 [0220.034] SafeArrayPutElement (psa=0x593310, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.034] free (_Block=0xd97c80) [0220.034] malloc (_Size=0x18) returned 0xd97f60 [0220.034] SafeArrayPutElement (psa=0x593310, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.034] free (_Block=0xd97f60) [0220.034] malloc (_Size=0x18) returned 0xd97900 [0220.034] SafeArrayPutElement (psa=0x593310, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0220.034] free (_Block=0xd97900) [0220.034] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1b00 [0220.034] SafeArrayGetDim (psa=0x593310) returned 0x1 [0220.034] SafeArrayGetLBound (in: psa=0x593310, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.034] SafeArrayGetUBound (in: psa=0x593310, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.035] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0390 [0220.035] SafeArrayGetDim (psa=0x593310) returned 0x1 [0220.035] SafeArrayGetUBound (in: psa=0x593310, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.035] SafeArrayGetElemsize (psa=0x593310) returned 0x8 [0220.035] SafeArrayGetElement (in: psa=0x593310, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.035] memcpy (in: _Dst=0x115d438, _Src=0x593980, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.035] memcpy (in: _Dst=0x115d438, _Src=0x593988, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.035] memcpy (in: _Dst=0x115d438, _Src=0x593990, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.035] memcpy (in: _Dst=0x115d438, _Src=0x593998, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.036] memcpy (in: _Dst=0x115d438, _Src=0x5939a0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.036] memcpy (in: _Dst=0x115d438, _Src=0x5939a8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.037] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0390) returned 1 [0220.037] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1b00) returned 1 [0220.037] SetEvent (hEvent=0x24c) returned 1 [0220.038] free (_Block=0xd99750) [0220.038] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.038] malloc (_Size=0x4) returned 0xd65560 [0220.038] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd65560, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd65560, pulLength=0x115d7d8) returned 0x0 [0220.038] free (_Block=0xd65560) [0220.038] malloc (_Size=0x48) returned 0xd5c570 [0220.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x91cc897, dwHighDateTime=0x1d92b8f)) [0220.039] SetEvent (hEvent=0x24c) returned 1 [0220.039] SetEvent (hEvent=0x24c) returned 1 [0220.040] free (_Block=0xd5c570) [0220.040] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.045] malloc (_Size=0x48) returned 0xd5c570 [0220.045] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x91cc897, dwHighDateTime=0x1d92b8f)) [0220.045] SetEvent (hEvent=0x24c) returned 1 [0220.047] SetEvent (hEvent=0x24c) returned 1 [0220.048] free (_Block=0xd5c570) [0220.048] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.049] malloc (_Size=0x48) returned 0xd5c570 [0220.049] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x91f2a26, dwHighDateTime=0x1d92b8f)) [0220.049] SetEvent (hEvent=0x24c) returned 1 [0220.050] SetEvent (hEvent=0x24c) returned 1 [0220.051] free (_Block=0xd5c570) [0220.051] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.051] malloc (_Size=0x48) returned 0xd5c700 [0220.051] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x91f2a26, dwHighDateTime=0x1d92b8f)) [0220.051] SetEvent (hEvent=0x24c) returned 1 [0220.052] SetEvent (hEvent=0x24c) returned 1 [0220.053] free (_Block=0xd5c700) [0220.053] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.053] malloc (_Size=0x48) returned 0xd5c570 [0220.053] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x91f2a26, dwHighDateTime=0x1d92b8f)) [0220.053] SetEvent (hEvent=0x24c) returned 1 [0220.056] SetEvent (hEvent=0x24c) returned 1 [0220.057] free (_Block=0xd5c570) [0220.057] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.060] malloc (_Size=0x48) returned 0xd5c570 [0220.060] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x91f2a26, dwHighDateTime=0x1d92b8f)) [0220.060] SetEvent (hEvent=0x24c) returned 1 [0220.061] SetEvent (hEvent=0x24c) returned 1 [0220.062] free (_Block=0xd5c570) [0220.062] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x27, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0220.062] malloc (_Size=0x48) returned 0xd5c570 [0220.062] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x91f2a26, dwHighDateTime=0x1d92b8f)) [0220.062] SetEvent (hEvent=0x24c) returned 1 [0220.064] SetEvent (hEvent=0x24c) returned 1 [0220.065] free (_Block=0xd5c570) [0220.065] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x27, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0220.065] malloc (_Size=0x48) returned 0xd5c570 [0220.066] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x9218ee7, dwHighDateTime=0x1d92b8f)) [0220.066] SetEvent (hEvent=0x24c) returned 1 [0220.066] SetEvent (hEvent=0x24c) returned 1 [0220.067] free (_Block=0xd5c570) [0220.067] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x27, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0220.067] malloc (_Size=0x48) returned 0xd5c700 [0220.067] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9218ee7, dwHighDateTime=0x1d92b8f)) [0220.067] SetEvent (hEvent=0x24c) returned 1 [0220.069] SetEvent (hEvent=0x24c) returned 1 [0220.070] free (_Block=0xd5c700) [0220.070] CM_Get_Device_IDA (in: dnDevInst=0x28, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\FIXEDBUTTON\\2&DABA3FF&0") returned 0x0 [0220.070] malloc (_Size=0x48) returned 0xd5c700 [0220.070] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x9218ee7, dwHighDateTime=0x1d92b8f)) [0220.070] SetEvent (hEvent=0x24c) returned 1 [0220.071] SetEvent (hEvent=0x24c) returned 1 [0220.072] free (_Block=0xd5c700) [0220.072] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.072] malloc (_Size=0x3e) returned 0xd5c700 [0220.072] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd5c700, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd5c700, pulLength=0x115d7d8) returned 0x0 [0220.072] free (_Block=0xd5c700) [0220.072] malloc (_Size=0x48) returned 0xd5c700 [0220.073] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9218ee7, dwHighDateTime=0x1d92b8f)) [0220.073] SetEvent (hEvent=0x24c) returned 1 [0220.073] malloc (_Size=0x18) returned 0xd97c80 [0220.073] SafeArrayPutElement (psa=0x593ad0, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.073] free (_Block=0xd97c80) [0220.073] malloc (_Size=0x18) returned 0xd97ac0 [0220.073] SafeArrayPutElement (psa=0x593ad0, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.073] free (_Block=0xd97ac0) [0220.073] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2080 [0220.073] SafeArrayGetDim (psa=0x593ad0) returned 0x1 [0220.073] SafeArrayGetLBound (in: psa=0x593ad0, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.073] SafeArrayGetUBound (in: psa=0x593ad0, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.073] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afcd0 [0220.073] SafeArrayGetDim (psa=0x593ad0) returned 0x1 [0220.073] SafeArrayGetUBound (in: psa=0x593ad0, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.073] SafeArrayGetElemsize (psa=0x593ad0) returned 0x8 [0220.074] SafeArrayGetElement (in: psa=0x593ad0, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.074] memcpy (in: _Dst=0x115d438, _Src=0x5968c0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.074] memcpy (in: _Dst=0x115d438, _Src=0x5968c8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.075] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afcd0) returned 1 [0220.075] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2080) returned 1 [0220.076] SetEvent (hEvent=0x24c) returned 1 [0220.076] free (_Block=0xd5c700) [0220.076] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0220.076] malloc (_Size=0x48) returned 0xd5c700 [0220.076] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9218ee7, dwHighDateTime=0x1d92b8f)) [0220.076] SetEvent (hEvent=0x24c) returned 1 [0220.077] SetEvent (hEvent=0x24c) returned 1 [0220.077] free (_Block=0xd5c700) [0220.077] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.080] malloc (_Size=0x48) returned 0xd5c750 [0220.080] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x923fa3f, dwHighDateTime=0x1d92b8f)) [0220.080] SetEvent (hEvent=0x24c) returned 1 [0220.081] SetEvent (hEvent=0x24c) returned 1 [0220.081] free (_Block=0xd5c750) [0220.082] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.082] malloc (_Size=0x48) returned 0xd5c700 [0220.082] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x923fa3f, dwHighDateTime=0x1d92b8f)) [0220.082] SetEvent (hEvent=0x24c) returned 1 [0220.082] SetEvent (hEvent=0x24c) returned 1 [0220.083] free (_Block=0xd5c700) [0220.083] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.083] malloc (_Size=0x48) returned 0xd5c7f0 [0220.083] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x923fa3f, dwHighDateTime=0x1d92b8f)) [0220.083] SetEvent (hEvent=0x24c) returned 1 [0220.084] SetEvent (hEvent=0x24c) returned 1 [0220.084] free (_Block=0xd5c7f0) [0220.084] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0220.085] malloc (_Size=0x48) returned 0xd5c700 [0220.085] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x923fa3f, dwHighDateTime=0x1d92b8f)) [0220.085] SetEvent (hEvent=0x24c) returned 1 [0220.087] SetEvent (hEvent=0x24c) returned 1 [0220.087] free (_Block=0xd5c700) [0220.087] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.089] malloc (_Size=0x48) returned 0xd5c750 [0220.089] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x923fa3f, dwHighDateTime=0x1d92b8f)) [0220.089] SetEvent (hEvent=0x24c) returned 1 [0220.090] SetEvent (hEvent=0x24c) returned 1 [0220.090] free (_Block=0xd5c750) [0220.090] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x28, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0220.091] malloc (_Size=0x48) returned 0xd5c7f0 [0220.091] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x923fa3f, dwHighDateTime=0x1d92b8f)) [0220.091] SetEvent (hEvent=0x24c) returned 1 [0220.092] SetEvent (hEvent=0x24c) returned 1 [0220.092] free (_Block=0xd5c7f0) [0220.093] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x28, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0220.093] malloc (_Size=0x48) returned 0xd5c750 [0220.093] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x923fa3f, dwHighDateTime=0x1d92b8f)) [0220.093] SetEvent (hEvent=0x24c) returned 1 [0220.093] SetEvent (hEvent=0x24c) returned 1 [0220.094] free (_Block=0xd5c750) [0220.096] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x28, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0220.096] malloc (_Size=0x48) returned 0xd5c750 [0220.096] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x92657be, dwHighDateTime=0x1d92b8f)) [0220.096] SetEvent (hEvent=0x24c) returned 1 [0220.098] SetEvent (hEvent=0x24c) returned 1 [0220.099] free (_Block=0xd5c750) [0220.099] CM_Get_Device_IDA (in: dnDevInst=0x29, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_10D3&SUBSYS_00008086&REV_00\\3&11583659&0&30") returned 0x0 [0220.099] malloc (_Size=0x48) returned 0xd5c570 [0220.099] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x92657be, dwHighDateTime=0x1d92b8f)) [0220.099] SetEvent (hEvent=0x24c) returned 1 [0220.100] SetEvent (hEvent=0x24c) returned 1 [0220.101] free (_Block=0xd5c570) [0220.101] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.101] malloc (_Size=0x124) returned 0xd649e0 [0220.101] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0220.102] free (_Block=0xd649e0) [0220.102] malloc (_Size=0x48) returned 0xd5c700 [0220.102] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x92657be, dwHighDateTime=0x1d92b8f)) [0220.102] SetEvent (hEvent=0x24c) returned 1 [0220.103] malloc (_Size=0x18) returned 0xd97e80 [0220.103] SafeArrayPutElement (psa=0x593690, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.103] free (_Block=0xd97e80) [0220.103] malloc (_Size=0x18) returned 0xd97dc0 [0220.103] SafeArrayPutElement (psa=0x593690, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.103] free (_Block=0xd97dc0) [0220.103] malloc (_Size=0x18) returned 0xd97e20 [0220.103] SafeArrayPutElement (psa=0x593690, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.103] free (_Block=0xd97e20) [0220.103] malloc (_Size=0x18) returned 0xd97a60 [0220.103] SafeArrayPutElement (psa=0x593690, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.103] free (_Block=0xd97a60) [0220.103] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1780 [0220.103] SafeArrayGetDim (psa=0x593690) returned 0x1 [0220.104] SafeArrayGetLBound (in: psa=0x593690, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.104] SafeArrayGetUBound (in: psa=0x593690, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.104] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afc70 [0220.104] SafeArrayGetDim (psa=0x593690) returned 0x1 [0220.104] SafeArrayGetUBound (in: psa=0x593690, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.104] SafeArrayGetElemsize (psa=0x593690) returned 0x8 [0220.104] SafeArrayGetElement (in: psa=0x593690, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.104] memcpy (in: _Dst=0x115d438, _Src=0x5affa0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.104] memcpy (in: _Dst=0x115d438, _Src=0x5affa8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.104] memcpy (in: _Dst=0x115d438, _Src=0x5affb0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.105] memcpy (in: _Dst=0x115d438, _Src=0x5affb8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.105] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afc70) returned 1 [0220.106] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1780) returned 1 [0220.106] SetEvent (hEvent=0x24c) returned 1 [0220.107] free (_Block=0xd5c700) [0220.107] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.107] malloc (_Size=0x10e) returned 0xd649e0 [0220.107] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0220.108] free (_Block=0xd649e0) [0220.108] malloc (_Size=0x48) returned 0xd5c7f0 [0220.108] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x92657be, dwHighDateTime=0x1d92b8f)) [0220.108] SetEvent (hEvent=0x24c) returned 1 [0220.108] malloc (_Size=0x18) returned 0xd97e20 [0220.108] SafeArrayPutElement (psa=0x593550, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.109] free (_Block=0xd97e20) [0220.109] malloc (_Size=0x18) returned 0xd978a0 [0220.109] SafeArrayPutElement (psa=0x593550, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.109] free (_Block=0xd978a0) [0220.109] malloc (_Size=0x18) returned 0xd97f00 [0220.109] SafeArrayPutElement (psa=0x593550, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.109] free (_Block=0xd97f00) [0220.109] malloc (_Size=0x18) returned 0xd97dc0 [0220.109] SafeArrayPutElement (psa=0x593550, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.109] free (_Block=0xd97dc0) [0220.109] malloc (_Size=0x18) returned 0xd97a80 [0220.109] SafeArrayPutElement (psa=0x593550, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.109] free (_Block=0xd97a80) [0220.109] malloc (_Size=0x18) returned 0xd979a0 [0220.109] SafeArrayPutElement (psa=0x593550, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.110] free (_Block=0xd979a0) [0220.110] malloc (_Size=0x18) returned 0xd97b60 [0220.110] SafeArrayPutElement (psa=0x593550, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0220.110] free (_Block=0xd97b60) [0220.110] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2c00 [0220.110] SafeArrayGetDim (psa=0x593550) returned 0x1 [0220.110] SafeArrayGetLBound (in: psa=0x593550, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.110] SafeArrayGetUBound (in: psa=0x593550, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.110] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5affa0 [0220.110] SafeArrayGetDim (psa=0x593550) returned 0x1 [0220.110] SafeArrayGetUBound (in: psa=0x593550, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.110] SafeArrayGetElemsize (psa=0x593550) returned 0x8 [0220.110] SafeArrayGetElement (in: psa=0x593550, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.110] memcpy (in: _Dst=0x115d438, _Src=0x593400, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.111] memcpy (in: _Dst=0x115d438, _Src=0x593408, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.111] memcpy (in: _Dst=0x115d438, _Src=0x593410, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.111] memcpy (in: _Dst=0x115d438, _Src=0x593418, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.111] memcpy (in: _Dst=0x115d438, _Src=0x593420, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.111] memcpy (in: _Dst=0x115d438, _Src=0x593428, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.111] memcpy (in: _Dst=0x115d438, _Src=0x593430, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.112] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5affa0) returned 1 [0220.113] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2c00) returned 1 [0220.113] SetEvent (hEvent=0x24c) returned 1 [0220.114] free (_Block=0xd5c7f0) [0220.114] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.127] malloc (_Size=0x48) returned 0xd5c570 [0220.127] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x92b154c, dwHighDateTime=0x1d92b8f)) [0220.128] SetEvent (hEvent=0x24c) returned 1 [0220.128] SetEvent (hEvent=0x24c) returned 1 [0220.129] free (_Block=0xd5c570) [0220.129] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.129] malloc (_Size=0x48) returned 0xd5c570 [0220.129] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x92b154c, dwHighDateTime=0x1d92b8f)) [0220.129] SetEvent (hEvent=0x24c) returned 1 [0220.130] SetEvent (hEvent=0x24c) returned 1 [0220.131] free (_Block=0xd5c570) [0220.131] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.131] malloc (_Size=0x48) returned 0xd5c570 [0220.131] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x92b154c, dwHighDateTime=0x1d92b8f)) [0220.131] SetEvent (hEvent=0x24c) returned 1 [0220.132] SetEvent (hEvent=0x24c) returned 1 [0220.133] free (_Block=0xd5c570) [0220.133] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.133] malloc (_Size=0x48) returned 0xd5c570 [0220.133] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x92b154c, dwHighDateTime=0x1d92b8f)) [0220.133] SetEvent (hEvent=0x24c) returned 1 [0220.135] SetEvent (hEvent=0x24c) returned 1 [0220.136] free (_Block=0xd5c570) [0220.136] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.138] malloc (_Size=0x48) returned 0xd5c570 [0220.138] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x92b154c, dwHighDateTime=0x1d92b8f)) [0220.139] SetEvent (hEvent=0x24c) returned 1 [0220.139] SetEvent (hEvent=0x24c) returned 1 [0220.140] free (_Block=0xd5c570) [0220.140] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x29, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0220.140] malloc (_Size=0x48) returned 0xd5c570 [0220.140] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x92b154c, dwHighDateTime=0x1d92b8f)) [0220.140] SetEvent (hEvent=0x24c) returned 1 [0220.164] malloc (_Size=0xd8) returned 0xd64670 [0220.164] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0220.164] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0220.164] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0220.164] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0220.164] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0220.164] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0220.164] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0220.164] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0220.164] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0220.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0220.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0220.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0220.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0220.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0220.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0220.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0220.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0220.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0220.165] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0220.166] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0220.166] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0220.166] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0220.166] malloc (_Size=0x18) returned 0xd97a80 [0220.166] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x29, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0220.166] malloc (_Size=0x48) returned 0xd5c570 [0220.166] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x92fe673, dwHighDateTime=0x1d92b8f)) [0220.166] SetEvent (hEvent=0x24c) returned 1 [0220.167] SetEvent (hEvent=0x24c) returned 1 [0220.168] free (_Block=0xd5c570) [0220.168] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x29, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.169] malloc (_Size=0x48) returned 0xd5c570 [0220.169] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x92fe673, dwHighDateTime=0x1d92b8f)) [0220.169] SetEvent (hEvent=0x24c) returned 1 [0220.171] SetEvent (hEvent=0x24c) returned 1 [0220.172] free (_Block=0xd5c570) [0220.172] CM_Get_Device_IDA (in: dnDevInst=0x2a, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_29C0&SUBSYS_11001AF4&REV_00\\3&11583659&0&00") returned 0x0 [0220.172] malloc (_Size=0x48) returned 0xd5c570 [0220.172] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x92fe673, dwHighDateTime=0x1d92b8f)) [0220.172] SetEvent (hEvent=0x24c) returned 1 [0220.174] malloc (_Size=0xd8) returned 0xd64670 [0220.174] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0220.175] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0220.175] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0220.175] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0220.175] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0220.175] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0220.175] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0220.175] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0220.175] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0220.175] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0220.175] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0220.176] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0220.176] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0220.176] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0220.176] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0220.176] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0220.176] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0220.176] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0220.176] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0220.176] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0220.176] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0220.176] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0220.177] malloc (_Size=0x18) returned 0xd97920 [0220.177] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.177] malloc (_Size=0x124) returned 0xd649e0 [0220.177] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0220.177] free (_Block=0xd649e0) [0220.178] malloc (_Size=0x48) returned 0xd5c700 [0220.178] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9323f60, dwHighDateTime=0x1d92b8f)) [0220.178] SetEvent (hEvent=0x24c) returned 1 [0220.179] malloc (_Size=0x18) returned 0xd97940 [0220.179] SafeArrayPutElement (psa=0x593990, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.179] free (_Block=0xd97940) [0220.180] malloc (_Size=0x18) returned 0xd97ae0 [0220.180] SafeArrayPutElement (psa=0x593990, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.180] free (_Block=0xd97ae0) [0220.180] malloc (_Size=0x18) returned 0xd97ec0 [0220.180] SafeArrayPutElement (psa=0x593990, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.180] free (_Block=0xd97ec0) [0220.180] malloc (_Size=0x18) returned 0xd98000 [0220.180] SafeArrayPutElement (psa=0x593990, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.180] free (_Block=0xd98000) [0220.181] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1600 [0220.181] SafeArrayGetDim (psa=0x593990) returned 0x1 [0220.181] SafeArrayGetLBound (in: psa=0x593990, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.181] SafeArrayGetUBound (in: psa=0x593990, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.181] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5aff10 [0220.181] SafeArrayGetDim (psa=0x593990) returned 0x1 [0220.181] SafeArrayGetUBound (in: psa=0x593990, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.181] SafeArrayGetElemsize (psa=0x593990) returned 0x8 [0220.181] SafeArrayGetElement (in: psa=0x593990, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.182] memcpy (in: _Dst=0x115d438, _Src=0x5b02d0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.182] memcpy (in: _Dst=0x115d438, _Src=0x5b02d8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.182] memcpy (in: _Dst=0x115d438, _Src=0x5b02e0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.183] memcpy (in: _Dst=0x115d438, _Src=0x5b02e8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.184] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5aff10) returned 1 [0220.184] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1600) returned 1 [0220.185] SetEvent (hEvent=0x24c) returned 1 [0220.186] free (_Block=0xd5c700) [0220.186] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.186] malloc (_Size=0x10e) returned 0xd649e0 [0220.186] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0220.187] free (_Block=0xd649e0) [0220.187] malloc (_Size=0x48) returned 0xd5c7f0 [0220.187] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9323f60, dwHighDateTime=0x1d92b8f)) [0220.187] SetEvent (hEvent=0x24c) returned 1 [0220.196] malloc (_Size=0x18) returned 0xd979a0 [0220.196] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.197] free (_Block=0xd979a0) [0220.197] malloc (_Size=0x18) returned 0xd97b80 [0220.197] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0220.197] free (_Block=0xd97b80) [0220.197] malloc (_Size=0x18) returned 0xd97fa0 [0220.197] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0220.197] free (_Block=0xd97fa0) [0220.197] malloc (_Size=0x18) returned 0xd97f40 [0220.197] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0220.197] free (_Block=0xd97f40) [0220.197] malloc (_Size=0x18) returned 0xd97c80 [0220.197] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0220.197] free (_Block=0xd97c80) [0220.197] malloc (_Size=0x18) returned 0xd97c80 [0220.197] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0220.197] free (_Block=0xd97c80) [0220.197] malloc (_Size=0x18) returned 0xd978a0 [0220.197] SafeArrayPutElement (psa=0x593410, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0220.198] free (_Block=0xd978a0) [0220.198] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1600 [0220.198] SafeArrayGetDim (psa=0x593410) returned 0x1 [0220.198] SafeArrayGetLBound (in: psa=0x593410, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.198] SafeArrayGetUBound (in: psa=0x593410, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.198] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b01e0 [0220.198] SafeArrayGetDim (psa=0x593410) returned 0x1 [0220.198] SafeArrayGetUBound (in: psa=0x593410, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.198] SafeArrayGetElemsize (psa=0x593410) returned 0x8 [0220.198] SafeArrayGetElement (in: psa=0x593410, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.198] memcpy (in: _Dst=0x115d438, _Src=0x593ac0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.198] memcpy (in: _Dst=0x115d438, _Src=0x593ac8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.199] memcpy (in: _Dst=0x115d438, _Src=0x593ad0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.199] memcpy (in: _Dst=0x115d438, _Src=0x593ad8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.199] memcpy (in: _Dst=0x115d438, _Src=0x593ae0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.199] memcpy (in: _Dst=0x115d438, _Src=0x593ae8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.199] memcpy (in: _Dst=0x115d438, _Src=0x593af0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.200] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b01e0) returned 1 [0220.200] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1600) returned 1 [0220.200] malloc (_Size=0xd8) returned 0xd64670 [0220.201] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0220.201] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0220.201] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0220.201] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0220.201] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0220.201] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0220.202] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0220.202] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0220.202] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0220.202] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0220.202] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0220.202] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0220.202] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0220.202] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0220.202] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0220.202] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0220.202] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0220.203] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0220.203] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0220.203] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0220.203] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0220.203] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0220.203] malloc (_Size=0x18) returned 0xd97c60 [0220.203] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.208] malloc (_Size=0x48) returned 0xd5c570 [0220.208] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x93701cd, dwHighDateTime=0x1d92b8f)) [0220.208] SetEvent (hEvent=0x24c) returned 1 [0220.209] SetEvent (hEvent=0x24c) returned 1 [0220.210] free (_Block=0xd5c570) [0220.210] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.210] malloc (_Size=0x48) returned 0xd5c570 [0220.210] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x93701cd, dwHighDateTime=0x1d92b8f)) [0220.210] SetEvent (hEvent=0x24c) returned 1 [0220.212] SetEvent (hEvent=0x24c) returned 1 [0220.212] free (_Block=0xd5c570) [0220.213] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.213] malloc (_Size=0x48) returned 0xd5c570 [0220.213] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x93701cd, dwHighDateTime=0x1d92b8f)) [0220.213] SetEvent (hEvent=0x24c) returned 1 [0220.214] SetEvent (hEvent=0x24c) returned 1 [0220.215] free (_Block=0xd5c570) [0220.215] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0220.215] malloc (_Size=0x48) returned 0xd5c700 [0220.215] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x93701cd, dwHighDateTime=0x1d92b8f)) [0220.215] SetEvent (hEvent=0x24c) returned 1 [0220.217] SetEvent (hEvent=0x24c) returned 1 [0220.218] free (_Block=0xd5c700) [0220.218] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.222] malloc (_Size=0x48) returned 0xd5c570 [0220.223] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x939640a, dwHighDateTime=0x1d92b8f)) [0220.223] SetEvent (hEvent=0x24c) returned 1 [0220.224] SetEvent (hEvent=0x24c) returned 1 [0220.225] free (_Block=0xd5c570) [0220.225] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x2a, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0220.225] malloc (_Size=0x48) returned 0xd5c570 [0220.225] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x939640a, dwHighDateTime=0x1d92b8f)) [0220.225] SetEvent (hEvent=0x24c) returned 1 [0220.227] SetEvent (hEvent=0x24c) returned 1 [0220.228] free (_Block=0xd5c570) [0220.228] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x2a, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0220.228] malloc (_Size=0x48) returned 0xd5c700 [0220.228] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x939640a, dwHighDateTime=0x1d92b8f)) [0220.228] SetEvent (hEvent=0x24c) returned 1 [0220.229] SetEvent (hEvent=0x24c) returned 1 [0220.230] free (_Block=0xd5c700) [0220.230] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2a, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0220.230] malloc (_Size=0x48) returned 0xd5c570 [0220.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x939640a, dwHighDateTime=0x1d92b8f)) [0220.230] SetEvent (hEvent=0x24c) returned 1 [0220.232] SetEvent (hEvent=0x24c) returned 1 [0220.233] free (_Block=0xd5c570) [0220.233] CM_Get_Device_IDA (in: dnDevInst=0x2b, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_2930&SUBSYS_11001AF4&REV_02\\3&11583659&0&FB") returned 0x0 [0220.233] malloc (_Size=0x48) returned 0xd5c570 [0220.234] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x939640a, dwHighDateTime=0x1d92b8f)) [0220.234] SetEvent (hEvent=0x24c) returned 1 [0220.241] SetEvent (hEvent=0x24c) returned 1 [0220.242] free (_Block=0xd5c570) [0220.242] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.242] malloc (_Size=0x124) returned 0xd649e0 [0220.242] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0220.243] free (_Block=0xd649e0) [0220.243] malloc (_Size=0x48) returned 0xd5c7f0 [0220.243] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x93bc5e1, dwHighDateTime=0x1d92b8f)) [0220.244] SetEvent (hEvent=0x24c) returned 1 [0220.244] malloc (_Size=0x18) returned 0xd978a0 [0220.244] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0220.244] free (_Block=0xd978a0) [0220.244] malloc (_Size=0x18) returned 0xd97d80 [0220.244] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0220.244] free (_Block=0xd97d80) [0220.244] malloc (_Size=0x18) returned 0xd97b20 [0220.245] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0220.245] free (_Block=0xd97b20) [0220.245] malloc (_Size=0x18) returned 0xd97960 [0220.245] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0220.245] free (_Block=0xd97960) [0220.245] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1000 [0220.245] SafeArrayGetDim (psa=0x593010) returned 0x1 [0220.245] SafeArrayGetLBound (in: psa=0x593010, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.245] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.245] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afdf0 [0220.245] SafeArrayGetDim (psa=0x593010) returned 0x1 [0220.245] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.245] SafeArrayGetElemsize (psa=0x593010) returned 0x8 [0220.245] SafeArrayGetElement (in: psa=0x593010, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.245] memcpy (in: _Dst=0x115d438, _Src=0x5b01e0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.246] memcpy (in: _Dst=0x115d438, _Src=0x5b01e8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.246] memcpy (in: _Dst=0x115d438, _Src=0x5b01f0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.246] memcpy (in: _Dst=0x115d438, _Src=0x5b01f8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.247] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afdf0) returned 1 [0220.247] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1000) returned 1 [0220.247] SetEvent (hEvent=0x24c) returned 1 [0220.248] free (_Block=0xd5c7f0) [0220.248] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.248] malloc (_Size=0x10e) returned 0xd649e0 [0220.248] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0220.249] free (_Block=0xd649e0) [0220.249] malloc (_Size=0x48) returned 0xd5c7f0 [0220.249] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x93bc5e1, dwHighDateTime=0x1d92b8f)) [0220.249] SetEvent (hEvent=0x24c) returned 1 [0220.250] malloc (_Size=0x18) returned 0xd97ee0 [0220.250] SafeArrayPutElement (psa=0x593990, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0220.250] free (_Block=0xd97ee0) [0220.250] malloc (_Size=0x18) returned 0xd98000 [0220.250] SafeArrayPutElement (psa=0x593990, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.250] free (_Block=0xd98000) [0220.252] malloc (_Size=0x18) returned 0xd97de0 [0220.252] SafeArrayPutElement (psa=0x593990, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.252] free (_Block=0xd97de0) [0220.252] malloc (_Size=0x18) returned 0xd97fc0 [0220.252] SafeArrayPutElement (psa=0x593990, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.252] free (_Block=0xd97fc0) [0220.252] malloc (_Size=0x18) returned 0xd97d00 [0220.253] SafeArrayPutElement (psa=0x593990, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.253] free (_Block=0xd97d00) [0220.253] malloc (_Size=0x18) returned 0xd97b80 [0220.253] SafeArrayPutElement (psa=0x593990, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.253] free (_Block=0xd97b80) [0220.253] malloc (_Size=0x18) returned 0xd97e80 [0220.253] SafeArrayPutElement (psa=0x593990, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0220.253] free (_Block=0xd97e80) [0220.253] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2200 [0220.253] SafeArrayGetDim (psa=0x593990) returned 0x1 [0220.253] SafeArrayGetLBound (in: psa=0x593990, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.253] SafeArrayGetUBound (in: psa=0x593990, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.253] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0210 [0220.253] SafeArrayGetDim (psa=0x593990) returned 0x1 [0220.253] SafeArrayGetUBound (in: psa=0x593990, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.253] SafeArrayGetElemsize (psa=0x593990) returned 0x8 [0220.253] SafeArrayGetElement (in: psa=0x593990, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.254] memcpy (in: _Dst=0x115d438, _Src=0x593180, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.254] memcpy (in: _Dst=0x115d438, _Src=0x593188, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.254] memcpy (in: _Dst=0x115d438, _Src=0x593190, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.254] memcpy (in: _Dst=0x115d438, _Src=0x593198, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.254] memcpy (in: _Dst=0x115d438, _Src=0x5931a0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.254] memcpy (in: _Dst=0x115d438, _Src=0x5931a8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.255] memcpy (in: _Dst=0x115d438, _Src=0x5931b0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.255] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0210) returned 1 [0220.256] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2200) returned 1 [0220.256] SetEvent (hEvent=0x24c) returned 1 [0220.257] free (_Block=0xd5c7f0) [0220.257] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.259] malloc (_Size=0x48) returned 0xd5c570 [0220.259] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x93e283c, dwHighDateTime=0x1d92b8f)) [0220.259] SetEvent (hEvent=0x24c) returned 1 [0220.260] SetEvent (hEvent=0x24c) returned 1 [0220.261] free (_Block=0xd5c570) [0220.261] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.261] malloc (_Size=0x48) returned 0xd5c570 [0220.261] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x93e283c, dwHighDateTime=0x1d92b8f)) [0220.262] SetEvent (hEvent=0x24c) returned 1 [0220.263] SetEvent (hEvent=0x24c) returned 1 [0220.263] free (_Block=0xd5c570) [0220.264] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.264] malloc (_Size=0x48) returned 0xd5c570 [0220.264] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x93e283c, dwHighDateTime=0x1d92b8f)) [0220.264] SetEvent (hEvent=0x24c) returned 1 [0220.265] SetEvent (hEvent=0x24c) returned 1 [0220.266] free (_Block=0xd5c570) [0220.269] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0220.270] malloc (_Size=0x48) returned 0xd5c570 [0220.270] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x940932f, dwHighDateTime=0x1d92b8f)) [0220.270] SetEvent (hEvent=0x24c) returned 1 [0220.272] SetEvent (hEvent=0x24c) returned 1 [0220.273] free (_Block=0xd5c570) [0220.273] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.275] malloc (_Size=0x48) returned 0xd5c570 [0220.275] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x940932f, dwHighDateTime=0x1d92b8f)) [0220.275] SetEvent (hEvent=0x24c) returned 1 [0220.276] SetEvent (hEvent=0x24c) returned 1 [0220.277] free (_Block=0xd5c570) [0220.277] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x2b, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0220.277] malloc (_Size=0x48) returned 0xd5c570 [0220.277] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x940932f, dwHighDateTime=0x1d92b8f)) [0220.277] SetEvent (hEvent=0x24c) returned 1 [0220.279] SetEvent (hEvent=0x24c) returned 1 [0220.280] free (_Block=0xd5c570) [0220.280] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x2b, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0220.280] malloc (_Size=0x48) returned 0xd5c700 [0220.280] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x940932f, dwHighDateTime=0x1d92b8f)) [0220.281] SetEvent (hEvent=0x24c) returned 1 [0220.282] SetEvent (hEvent=0x24c) returned 1 [0220.283] free (_Block=0xd5c700) [0220.364] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2b, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0220.364] malloc (_Size=0x48) returned 0xd5c570 [0220.364] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x94ed8eb, dwHighDateTime=0x1d92b8f)) [0220.364] SetEvent (hEvent=0x24c) returned 1 [0220.366] SetEvent (hEvent=0x24c) returned 1 [0220.367] free (_Block=0xd5c570) [0220.367] CM_Get_Device_IDA (in: dnDevInst=0x2c, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_293A&SUBSYS_11001AF4&REV_03\\3&11583659&0&10") returned 0x0 [0220.367] malloc (_Size=0x48) returned 0xd5c570 [0220.367] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x94ed8eb, dwHighDateTime=0x1d92b8f)) [0220.367] SetEvent (hEvent=0x24c) returned 1 [0220.368] SetEvent (hEvent=0x24c) returned 1 [0220.369] free (_Block=0xd5c570) [0220.369] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.369] malloc (_Size=0x124) returned 0xd649e0 [0220.369] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0220.370] free (_Block=0xd649e0) [0220.370] malloc (_Size=0x48) returned 0xd5c700 [0220.370] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x94ed8eb, dwHighDateTime=0x1d92b8f)) [0220.371] SetEvent (hEvent=0x24c) returned 1 [0220.371] malloc (_Size=0x18) returned 0xd97bc0 [0220.371] SafeArrayPutElement (psa=0x593ad0, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.371] free (_Block=0xd97bc0) [0220.371] malloc (_Size=0x18) returned 0xd97d20 [0220.371] SafeArrayPutElement (psa=0x593ad0, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.371] free (_Block=0xd97d20) [0220.371] malloc (_Size=0x18) returned 0xd97ba0 [0220.372] SafeArrayPutElement (psa=0x593ad0, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.372] free (_Block=0xd97ba0) [0220.372] malloc (_Size=0x18) returned 0xd97a80 [0220.372] SafeArrayPutElement (psa=0x593ad0, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.372] free (_Block=0xd97a80) [0220.372] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2200 [0220.372] SafeArrayGetDim (psa=0x593ad0) returned 0x1 [0220.372] SafeArrayGetLBound (in: psa=0x593ad0, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.372] SafeArrayGetUBound (in: psa=0x593ad0, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.372] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b00f0 [0220.372] SafeArrayGetDim (psa=0x593ad0) returned 0x1 [0220.372] SafeArrayGetUBound (in: psa=0x593ad0, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.372] SafeArrayGetElemsize (psa=0x593ad0) returned 0x8 [0220.372] SafeArrayGetElement (in: psa=0x593ad0, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.372] memcpy (in: _Dst=0x115d438, _Src=0x5afdf0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.373] memcpy (in: _Dst=0x115d438, _Src=0x5afdf8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.373] memcpy (in: _Dst=0x115d438, _Src=0x5afe00, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.373] memcpy (in: _Dst=0x115d438, _Src=0x5afe08, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.374] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b00f0) returned 1 [0220.374] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2200) returned 1 [0220.374] SetEvent (hEvent=0x24c) returned 1 [0220.375] free (_Block=0xd5c700) [0220.376] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.376] malloc (_Size=0x10e) returned 0xd649e0 [0220.376] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0220.376] free (_Block=0xd649e0) [0220.376] malloc (_Size=0x48) returned 0xd5c7f0 [0220.377] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x95147d7, dwHighDateTime=0x1d92b8f)) [0220.377] SetEvent (hEvent=0x24c) returned 1 [0220.377] malloc (_Size=0x18) returned 0xd97cc0 [0220.377] SafeArrayPutElement (psa=0x593690, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.377] free (_Block=0xd97cc0) [0220.377] malloc (_Size=0x18) returned 0xd97920 [0220.377] SafeArrayPutElement (psa=0x593690, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0220.378] free (_Block=0xd97920) [0220.378] malloc (_Size=0x18) returned 0xd97d40 [0220.378] SafeArrayPutElement (psa=0x593690, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0220.378] free (_Block=0xd97d40) [0220.378] malloc (_Size=0x18) returned 0xd97c20 [0220.378] SafeArrayPutElement (psa=0x593690, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0220.378] free (_Block=0xd97c20) [0220.378] malloc (_Size=0x18) returned 0xd97ce0 [0220.378] SafeArrayPutElement (psa=0x593690, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0220.378] free (_Block=0xd97ce0) [0220.378] malloc (_Size=0x18) returned 0xd97ce0 [0220.378] SafeArrayPutElement (psa=0x593690, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0220.378] free (_Block=0xd97ce0) [0220.378] malloc (_Size=0x18) returned 0xd97d40 [0220.378] SafeArrayPutElement (psa=0x593690, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0220.378] free (_Block=0xd97d40) [0220.378] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2a80 [0220.378] SafeArrayGetDim (psa=0x593690) returned 0x1 [0220.378] SafeArrayGetLBound (in: psa=0x593690, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.379] SafeArrayGetUBound (in: psa=0x593690, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.379] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afc70 [0220.379] SafeArrayGetDim (psa=0x593690) returned 0x1 [0220.379] SafeArrayGetUBound (in: psa=0x593690, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.379] SafeArrayGetElemsize (psa=0x593690) returned 0x8 [0220.379] SafeArrayGetElement (in: psa=0x593690, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.379] memcpy (in: _Dst=0x115d438, _Src=0x593540, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.379] memcpy (in: _Dst=0x115d438, _Src=0x593548, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.379] memcpy (in: _Dst=0x115d438, _Src=0x593550, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.380] memcpy (in: _Dst=0x115d438, _Src=0x593558, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.380] memcpy (in: _Dst=0x115d438, _Src=0x593560, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.380] memcpy (in: _Dst=0x115d438, _Src=0x593568, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.380] memcpy (in: _Dst=0x115d438, _Src=0x593570, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.381] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afc70) returned 1 [0220.381] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2a80) returned 1 [0220.382] SetEvent (hEvent=0x24c) returned 1 [0220.424] free (_Block=0xd5c7f0) [0220.424] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.427] malloc (_Size=0x48) returned 0xd5c570 [0220.427] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x95861ee, dwHighDateTime=0x1d92b8f)) [0220.427] SetEvent (hEvent=0x24c) returned 1 [0220.428] SetEvent (hEvent=0x24c) returned 1 [0220.429] free (_Block=0xd5c570) [0220.429] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.429] malloc (_Size=0x48) returned 0xd5c570 [0220.429] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x95861ee, dwHighDateTime=0x1d92b8f)) [0220.429] SetEvent (hEvent=0x24c) returned 1 [0220.430] SetEvent (hEvent=0x24c) returned 1 [0220.431] free (_Block=0xd5c570) [0220.431] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.431] malloc (_Size=0x48) returned 0xd5c700 [0220.431] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x95861ee, dwHighDateTime=0x1d92b8f)) [0220.431] SetEvent (hEvent=0x24c) returned 1 [0220.432] SetEvent (hEvent=0x24c) returned 1 [0220.433] free (_Block=0xd5c700) [0220.433] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.434] malloc (_Size=0x48) returned 0xd5c570 [0220.434] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x95861ee, dwHighDateTime=0x1d92b8f)) [0220.434] SetEvent (hEvent=0x24c) returned 1 [0220.436] SetEvent (hEvent=0x24c) returned 1 [0220.437] free (_Block=0xd5c570) [0220.437] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.440] malloc (_Size=0x48) returned 0xd5c570 [0220.440] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x95ac49a, dwHighDateTime=0x1d92b8f)) [0220.440] SetEvent (hEvent=0x24c) returned 1 [0220.442] SetEvent (hEvent=0x24c) returned 1 [0220.442] free (_Block=0xd5c570) [0220.443] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x2c, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0220.443] malloc (_Size=0x48) returned 0xd5c570 [0220.443] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x95ac49a, dwHighDateTime=0x1d92b8f)) [0220.443] SetEvent (hEvent=0x24c) returned 1 [0220.445] SetEvent (hEvent=0x24c) returned 1 [0220.446] free (_Block=0xd5c570) [0220.446] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x2c, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0220.446] malloc (_Size=0x48) returned 0xd5c700 [0220.446] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x95ac49a, dwHighDateTime=0x1d92b8f)) [0220.446] SetEvent (hEvent=0x24c) returned 1 [0220.447] SetEvent (hEvent=0x24c) returned 1 [0220.448] free (_Block=0xd5c700) [0220.448] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2c, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0220.448] malloc (_Size=0x48) returned 0xd5c570 [0220.448] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x95ac49a, dwHighDateTime=0x1d92b8f)) [0220.448] SetEvent (hEvent=0x24c) returned 1 [0220.450] SetEvent (hEvent=0x24c) returned 1 [0220.451] free (_Block=0xd5c570) [0220.451] CM_Get_Device_IDA (in: dnDevInst=0x2d, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="STORAGE\\VOLUME\\{EBD0D398-C546-11EC-B0BF-806E6F6E6963}#0000000000100000") returned 0x0 [0220.451] malloc (_Size=0x48) returned 0xd5c7f0 [0220.451] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x95ac49a, dwHighDateTime=0x1d92b8f)) [0220.451] SetEvent (hEvent=0x24c) returned 1 [0220.453] SetEvent (hEvent=0x24c) returned 1 [0220.453] free (_Block=0xd5c7f0) [0220.456] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.456] malloc (_Size=0x20) returned 0xd5f270 [0220.456] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd5f270, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd5f270, pulLength=0x115d7d8) returned 0x0 [0220.457] free (_Block=0xd5f270) [0220.457] malloc (_Size=0x48) returned 0xd5c570 [0220.457] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x95d3326, dwHighDateTime=0x1d92b8f)) [0220.457] SetEvent (hEvent=0x24c) returned 1 [0220.458] malloc (_Size=0x18) returned 0xd97f20 [0220.458] SafeArrayPutElement (psa=0x593050, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0220.458] free (_Block=0xd97f20) [0220.458] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2600 [0220.458] SafeArrayGetDim (psa=0x593050) returned 0x1 [0220.458] SafeArrayGetLBound (in: psa=0x593050, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.458] SafeArrayGetUBound (in: psa=0x593050, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.458] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0090 [0220.458] SafeArrayGetDim (psa=0x593050) returned 0x1 [0220.458] SafeArrayGetUBound (in: psa=0x593050, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.458] SafeArrayGetElemsize (psa=0x593050) returned 0x8 [0220.458] SafeArrayGetElement (in: psa=0x593050, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.459] memcpy (in: _Dst=0x115d438, _Src=0x578470, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.460] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0090) returned 1 [0220.460] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2600) returned 1 [0220.460] SetEvent (hEvent=0x24c) returned 1 [0220.461] free (_Block=0xd5c570) [0220.462] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0220.462] malloc (_Size=0x48) returned 0xd5c570 [0220.462] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x95d3326, dwHighDateTime=0x1d92b8f)) [0220.462] SetEvent (hEvent=0x24c) returned 1 [0220.464] SetEvent (hEvent=0x24c) returned 1 [0220.466] free (_Block=0xd5c570) [0220.466] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.554] malloc (_Size=0x48) returned 0xd5c700 [0220.554] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x96b754a, dwHighDateTime=0x1d92b8f)) [0220.554] SetEvent (hEvent=0x24c) returned 1 [0220.555] SetEvent (hEvent=0x24c) returned 1 [0220.556] free (_Block=0xd5c700) [0220.556] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.556] malloc (_Size=0x48) returned 0xd5c570 [0220.556] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x96b754a, dwHighDateTime=0x1d92b8f)) [0220.556] SetEvent (hEvent=0x24c) returned 1 [0220.557] SetEvent (hEvent=0x24c) returned 1 [0220.557] free (_Block=0xd5c570) [0220.557] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.558] malloc (_Size=0x48) returned 0xd5c570 [0220.558] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x96b754a, dwHighDateTime=0x1d92b8f)) [0220.558] SetEvent (hEvent=0x24c) returned 1 [0220.558] SetEvent (hEvent=0x24c) returned 1 [0220.559] free (_Block=0xd5c570) [0220.559] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.559] malloc (_Size=0x48) returned 0xd5c570 [0220.559] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x96b754a, dwHighDateTime=0x1d92b8f)) [0220.559] SetEvent (hEvent=0x24c) returned 1 [0220.561] SetEvent (hEvent=0x24c) returned 1 [0220.562] free (_Block=0xd5c570) [0220.562] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.570] malloc (_Size=0x48) returned 0xd5c570 [0220.570] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x96dd71d, dwHighDateTime=0x1d92b8f)) [0220.570] SetEvent (hEvent=0x24c) returned 1 [0220.571] SetEvent (hEvent=0x24c) returned 1 [0220.571] free (_Block=0xd5c570) [0220.571] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x2d, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0220.571] malloc (_Size=0x48) returned 0xd5c700 [0220.572] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x96dd71d, dwHighDateTime=0x1d92b8f)) [0220.572] SetEvent (hEvent=0x24c) returned 1 [0220.573] SetEvent (hEvent=0x24c) returned 1 [0220.574] free (_Block=0xd5c700) [0220.574] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x2d, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0220.574] malloc (_Size=0x48) returned 0xd5c7f0 [0220.574] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x96dd71d, dwHighDateTime=0x1d92b8f)) [0220.574] SetEvent (hEvent=0x24c) returned 1 [0220.575] SetEvent (hEvent=0x24c) returned 1 [0220.575] free (_Block=0xd5c7f0) [0220.576] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2d, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0220.577] malloc (_Size=0x48) returned 0xd5c570 [0220.577] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x96dd71d, dwHighDateTime=0x1d92b8f)) [0220.577] SetEvent (hEvent=0x24c) returned 1 [0220.580] SetEvent (hEvent=0x24c) returned 1 [0220.581] free (_Block=0xd5c570) [0220.581] CM_Get_Device_IDA (in: dnDevInst=0x2e, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_1234&DEV_1111&SUBSYS_11001AF4&REV_02\\3&11583659&0&08") returned 0x0 [0220.581] malloc (_Size=0x48) returned 0xd5c570 [0220.581] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x97039d1, dwHighDateTime=0x1d92b8f)) [0220.581] SetEvent (hEvent=0x24c) returned 1 [0220.582] SetEvent (hEvent=0x24c) returned 1 [0220.583] free (_Block=0xd5c570) [0220.584] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.584] malloc (_Size=0x124) returned 0xd649e0 [0220.584] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0220.585] free (_Block=0xd649e0) [0220.585] malloc (_Size=0x48) returned 0xd5c700 [0220.585] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x97039d1, dwHighDateTime=0x1d92b8f)) [0220.585] SetEvent (hEvent=0x24c) returned 1 [0220.586] malloc (_Size=0x18) returned 0xd97de0 [0220.586] SafeArrayPutElement (psa=0x593ad0, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0220.586] free (_Block=0xd97de0) [0220.586] malloc (_Size=0x18) returned 0xd97fc0 [0220.586] SafeArrayPutElement (psa=0x593ad0, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0220.586] free (_Block=0xd97fc0) [0220.586] malloc (_Size=0x18) returned 0xd97d00 [0220.586] SafeArrayPutElement (psa=0x593ad0, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0220.586] free (_Block=0xd97d00) [0220.586] malloc (_Size=0x18) returned 0xd97b80 [0220.586] SafeArrayPutElement (psa=0x593ad0, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0220.586] free (_Block=0xd97b80) [0220.586] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2580 [0220.586] SafeArrayGetDim (psa=0x593ad0) returned 0x1 [0220.586] SafeArrayGetLBound (in: psa=0x593ad0, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.586] SafeArrayGetUBound (in: psa=0x593ad0, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.586] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b01e0 [0220.586] SafeArrayGetDim (psa=0x593ad0) returned 0x1 [0220.586] SafeArrayGetUBound (in: psa=0x593ad0, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.586] SafeArrayGetElemsize (psa=0x593ad0) returned 0x8 [0220.587] SafeArrayGetElement (in: psa=0x593ad0, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.587] memcpy (in: _Dst=0x115d438, _Src=0x5afc70, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.587] memcpy (in: _Dst=0x115d438, _Src=0x5afc78, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.587] memcpy (in: _Dst=0x115d438, _Src=0x5afc80, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.587] memcpy (in: _Dst=0x115d438, _Src=0x5afc88, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.588] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b01e0) returned 1 [0220.589] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2580) returned 1 [0220.589] SetEvent (hEvent=0x24c) returned 1 [0220.589] free (_Block=0xd5c700) [0220.589] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.590] malloc (_Size=0x10e) returned 0xd649e0 [0220.590] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0220.591] free (_Block=0xd649e0) [0220.591] malloc (_Size=0x48) returned 0xd5c7f0 [0220.591] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x97039d1, dwHighDateTime=0x1d92b8f)) [0220.591] SetEvent (hEvent=0x24c) returned 1 [0220.591] malloc (_Size=0x18) returned 0xd97be0 [0220.591] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0220.591] free (_Block=0xd97be0) [0220.591] malloc (_Size=0x18) returned 0xd97d40 [0220.591] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.591] free (_Block=0xd97d40) [0220.592] malloc (_Size=0x18) returned 0xd97c80 [0220.592] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.592] free (_Block=0xd97c80) [0220.592] malloc (_Size=0x18) returned 0xd97bc0 [0220.592] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.592] free (_Block=0xd97bc0) [0220.592] malloc (_Size=0x18) returned 0xd97e20 [0220.592] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.592] free (_Block=0xd97e20) [0220.592] malloc (_Size=0x18) returned 0xd978a0 [0220.592] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.592] free (_Block=0xd978a0) [0220.592] malloc (_Size=0x18) returned 0xd97f00 [0220.592] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0220.592] free (_Block=0xd97f00) [0220.592] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2480 [0220.592] SafeArrayGetDim (psa=0x5938d0) returned 0x1 [0220.592] SafeArrayGetLBound (in: psa=0x5938d0, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.592] SafeArrayGetUBound (in: psa=0x5938d0, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.592] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afe50 [0220.592] SafeArrayGetDim (psa=0x5938d0) returned 0x1 [0220.592] SafeArrayGetUBound (in: psa=0x5938d0, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.592] SafeArrayGetElemsize (psa=0x5938d0) returned 0x8 [0220.593] SafeArrayGetElement (in: psa=0x5938d0, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.593] memcpy (in: _Dst=0x115d438, _Src=0x593980, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.593] memcpy (in: _Dst=0x115d438, _Src=0x593988, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.593] memcpy (in: _Dst=0x115d438, _Src=0x593990, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.593] memcpy (in: _Dst=0x115d438, _Src=0x593998, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.594] memcpy (in: _Dst=0x115d438, _Src=0x5939a0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.594] memcpy (in: _Dst=0x115d438, _Src=0x5939a8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.594] memcpy (in: _Dst=0x115d438, _Src=0x5939b0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.595] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afe50) returned 1 [0220.597] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2480) returned 1 [0220.597] SetEvent (hEvent=0x24c) returned 1 [0220.598] free (_Block=0xd5c7f0) [0220.598] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.629] malloc (_Size=0x48) returned 0xd5c570 [0220.629] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9776060, dwHighDateTime=0x1d92b8f)) [0220.629] SetEvent (hEvent=0x24c) returned 1 [0220.630] SetEvent (hEvent=0x24c) returned 1 [0220.631] free (_Block=0xd5c570) [0220.631] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.631] malloc (_Size=0x48) returned 0xd5c570 [0220.631] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9776060, dwHighDateTime=0x1d92b8f)) [0220.631] SetEvent (hEvent=0x24c) returned 1 [0220.632] SetEvent (hEvent=0x24c) returned 1 [0220.632] free (_Block=0xd5c570) [0220.632] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.632] malloc (_Size=0x48) returned 0xd5c570 [0220.632] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9776060, dwHighDateTime=0x1d92b8f)) [0220.632] SetEvent (hEvent=0x24c) returned 1 [0220.633] SetEvent (hEvent=0x24c) returned 1 [0220.634] free (_Block=0xd5c570) [0220.634] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.634] malloc (_Size=0x48) returned 0xd5c570 [0220.634] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9776060, dwHighDateTime=0x1d92b8f)) [0220.634] SetEvent (hEvent=0x24c) returned 1 [0220.636] SetEvent (hEvent=0x24c) returned 1 [0220.637] free (_Block=0xd5c570) [0220.637] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.638] malloc (_Size=0x48) returned 0xd5c570 [0220.638] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9776060, dwHighDateTime=0x1d92b8f)) [0220.638] SetEvent (hEvent=0x24c) returned 1 [0220.639] SetEvent (hEvent=0x24c) returned 1 [0220.639] free (_Block=0xd5c570) [0220.639] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x2e, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0220.640] malloc (_Size=0x48) returned 0xd5c570 [0220.640] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x9776060, dwHighDateTime=0x1d92b8f)) [0220.640] SetEvent (hEvent=0x24c) returned 1 [0220.642] SetEvent (hEvent=0x24c) returned 1 [0220.642] free (_Block=0xd5c570) [0220.642] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x2e, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0220.642] malloc (_Size=0x48) returned 0xd5c570 [0220.642] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x979c358, dwHighDateTime=0x1d92b8f)) [0220.642] SetEvent (hEvent=0x24c) returned 1 [0220.643] SetEvent (hEvent=0x24c) returned 1 [0220.644] free (_Block=0xd5c570) [0220.644] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2e, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0220.644] malloc (_Size=0x48) returned 0xd5c570 [0220.644] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x979c358, dwHighDateTime=0x1d92b8f)) [0220.644] SetEvent (hEvent=0x24c) returned 1 [0220.646] SetEvent (hEvent=0x24c) returned 1 [0220.646] free (_Block=0xd5c570) [0220.646] CM_Get_Device_IDA (in: dnDevInst=0x2f, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SCSI\\DISK&VEN_&PROD_ST3160215AS\\4&305DAB9F&0&000000") returned 0x0 [0220.646] malloc (_Size=0x48) returned 0xd5c570 [0220.646] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x979c358, dwHighDateTime=0x1d92b8f)) [0220.646] SetEvent (hEvent=0x24c) returned 1 [0220.647] SetEvent (hEvent=0x24c) returned 1 [0220.647] free (_Block=0xd5c570) [0220.647] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.648] malloc (_Size=0x138) returned 0xd649e0 [0220.648] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0220.648] free (_Block=0xd649e0) [0220.648] malloc (_Size=0x48) returned 0xd5c750 [0220.648] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x979c358, dwHighDateTime=0x1d92b8f)) [0220.648] SetEvent (hEvent=0x24c) returned 1 [0220.649] malloc (_Size=0x18) returned 0xd97ce0 [0220.649] SafeArrayPutElement (psa=0x593490, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0220.649] free (_Block=0xd97ce0) [0220.649] malloc (_Size=0x18) returned 0xd97d40 [0220.649] SafeArrayPutElement (psa=0x593490, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0220.649] free (_Block=0xd97d40) [0220.649] malloc (_Size=0x18) returned 0xd97f80 [0220.649] SafeArrayPutElement (psa=0x593490, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.649] free (_Block=0xd97f80) [0220.649] malloc (_Size=0x18) returned 0xd98000 [0220.649] SafeArrayPutElement (psa=0x593490, rgIndices=0x115d8a8, pv=0x13124c8) returned 0x0 [0220.649] free (_Block=0xd98000) [0220.649] malloc (_Size=0x18) returned 0xd97ec0 [0220.649] SafeArrayPutElement (psa=0x593490, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.649] free (_Block=0xd97ec0) [0220.649] malloc (_Size=0x18) returned 0xd97ea0 [0220.650] SafeArrayPutElement (psa=0x593490, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0220.650] free (_Block=0xd97ea0) [0220.650] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2780 [0220.650] SafeArrayGetDim (psa=0x593490) returned 0x1 [0220.650] SafeArrayGetLBound (in: psa=0x593490, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.650] SafeArrayGetUBound (in: psa=0x593490, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.650] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afd30 [0220.650] SafeArrayGetDim (psa=0x593490) returned 0x1 [0220.650] SafeArrayGetUBound (in: psa=0x593490, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.650] SafeArrayGetElemsize (psa=0x593490) returned 0x8 [0220.650] SafeArrayGetElement (in: psa=0x593490, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.650] memcpy (in: _Dst=0x115d438, _Src=0x593680, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.650] memcpy (in: _Dst=0x115d438, _Src=0x593688, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.651] memcpy (in: _Dst=0x115d438, _Src=0x593690, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.651] memcpy (in: _Dst=0x115d438, _Src=0x593698, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.651] memcpy (in: _Dst=0x115d438, _Src=0x5936a0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.651] memcpy (in: _Dst=0x115d438, _Src=0x5936a8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.652] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afd30) returned 1 [0220.652] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2780) returned 1 [0220.653] SetEvent (hEvent=0x24c) returned 1 [0220.653] free (_Block=0xd5c750) [0220.653] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.653] malloc (_Size=0x28) returned 0xd5f270 [0220.653] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd5f270, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd5f270, pulLength=0x115d7d8) returned 0x0 [0220.654] free (_Block=0xd5f270) [0220.654] malloc (_Size=0x48) returned 0xd5c570 [0220.654] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x979c358, dwHighDateTime=0x1d92b8f)) [0220.654] SetEvent (hEvent=0x24c) returned 1 [0220.654] malloc (_Size=0x18) returned 0xd97aa0 [0220.654] SafeArrayPutElement (psa=0x593850, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0220.654] free (_Block=0xd97aa0) [0220.654] malloc (_Size=0x18) returned 0xd97aa0 [0220.655] SafeArrayPutElement (psa=0x593850, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0220.655] free (_Block=0xd97aa0) [0220.655] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2480 [0220.655] SafeArrayGetDim (psa=0x593850) returned 0x1 [0220.655] SafeArrayGetLBound (in: psa=0x593850, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.655] SafeArrayGetUBound (in: psa=0x593850, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.655] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afc70 [0220.655] SafeArrayGetDim (psa=0x593850) returned 0x1 [0220.655] SafeArrayGetUBound (in: psa=0x593850, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.655] SafeArrayGetElemsize (psa=0x593850) returned 0x8 [0220.655] SafeArrayGetElement (in: psa=0x593850, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.655] memcpy (in: _Dst=0x115d438, _Src=0x596580, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.655] memcpy (in: _Dst=0x115d438, _Src=0x596588, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.656] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afc70) returned 1 [0220.658] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2480) returned 1 [0220.658] SetEvent (hEvent=0x24c) returned 1 [0220.658] free (_Block=0xd5c570) [0220.658] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.668] malloc (_Size=0x48) returned 0xd5c700 [0220.668] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x97c29d8, dwHighDateTime=0x1d92b8f)) [0220.668] SetEvent (hEvent=0x24c) returned 1 [0220.669] SetEvent (hEvent=0x24c) returned 1 [0220.670] free (_Block=0xd5c700) [0220.670] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.670] malloc (_Size=0x48) returned 0xd5c570 [0220.670] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x97c29d8, dwHighDateTime=0x1d92b8f)) [0220.670] SetEvent (hEvent=0x24c) returned 1 [0220.671] SetEvent (hEvent=0x24c) returned 1 [0220.672] free (_Block=0xd5c570) [0220.675] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.675] malloc (_Size=0x48) returned 0xd5c570 [0220.675] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x97e8e53, dwHighDateTime=0x1d92b8f)) [0220.675] SetEvent (hEvent=0x24c) returned 1 [0220.676] SetEvent (hEvent=0x24c) returned 1 [0220.677] free (_Block=0xd5c570) [0220.677] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.677] malloc (_Size=0x48) returned 0xd5c570 [0220.677] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x97e8e53, dwHighDateTime=0x1d92b8f)) [0220.677] SetEvent (hEvent=0x24c) returned 1 [0220.680] SetEvent (hEvent=0x24c) returned 1 [0220.680] free (_Block=0xd5c570) [0220.680] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.682] malloc (_Size=0x48) returned 0xd5c570 [0220.682] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x97e8e53, dwHighDateTime=0x1d92b8f)) [0220.682] SetEvent (hEvent=0x24c) returned 1 [0220.683] SetEvent (hEvent=0x24c) returned 1 [0220.684] free (_Block=0xd5c570) [0220.684] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x2f, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0220.684] malloc (_Size=0x48) returned 0xd5c570 [0220.684] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x97e8e53, dwHighDateTime=0x1d92b8f)) [0220.685] SetEvent (hEvent=0x24c) returned 1 [0220.687] SetEvent (hEvent=0x24c) returned 1 [0220.688] free (_Block=0xd5c570) [0220.688] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x2f, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0220.688] malloc (_Size=0x48) returned 0xd5c700 [0220.688] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x980fbe9, dwHighDateTime=0x1d92b8f)) [0220.688] SetEvent (hEvent=0x24c) returned 1 [0220.690] SetEvent (hEvent=0x24c) returned 1 [0220.690] free (_Block=0xd5c700) [0220.690] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x2f, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.691] malloc (_Size=0x48) returned 0xd5c570 [0220.691] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x980fbe9, dwHighDateTime=0x1d92b8f)) [0220.691] SetEvent (hEvent=0x24c) returned 1 [0220.694] SetEvent (hEvent=0x24c) returned 1 [0220.694] free (_Block=0xd5c570) [0220.695] CM_Get_Device_IDA (in: dnDevInst=0x30, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\MMDEVAPI\\MICROSOFTGSWAVETABLESYNTH") returned 0x0 [0220.695] malloc (_Size=0x48) returned 0xd5c570 [0220.695] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x980fbe9, dwHighDateTime=0x1d92b8f)) [0220.695] SetEvent (hEvent=0x24c) returned 1 [0220.696] SetEvent (hEvent=0x24c) returned 1 [0220.697] free (_Block=0xd5c570) [0220.697] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0220.697] malloc (_Size=0x48) returned 0xd5c750 [0220.697] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x980fbe9, dwHighDateTime=0x1d92b8f)) [0220.697] SetEvent (hEvent=0x24c) returned 1 [0220.698] SetEvent (hEvent=0x24c) returned 1 [0220.699] free (_Block=0xd5c750) [0220.699] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.699] malloc (_Size=0x38) returned 0xd611f0 [0220.700] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd611f0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd611f0, pulLength=0x115d7d8) returned 0x0 [0220.700] free (_Block=0xd611f0) [0220.700] malloc (_Size=0x48) returned 0xd5c570 [0220.700] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x980fbe9, dwHighDateTime=0x1d92b8f)) [0220.701] SetEvent (hEvent=0x24c) returned 1 [0220.701] malloc (_Size=0x18) returned 0xd978c0 [0220.701] SafeArrayPutElement (psa=0x593210, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0220.701] free (_Block=0xd978c0) [0220.702] malloc (_Size=0x18) returned 0xd979c0 [0220.702] SafeArrayPutElement (psa=0x593210, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0220.702] free (_Block=0xd979c0) [0220.702] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1e80 [0220.702] SafeArrayGetDim (psa=0x593210) returned 0x1 [0220.702] SafeArrayGetLBound (in: psa=0x593210, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.702] SafeArrayGetUBound (in: psa=0x593210, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.702] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0300 [0220.702] SafeArrayGetDim (psa=0x593210) returned 0x1 [0220.702] SafeArrayGetUBound (in: psa=0x593210, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.702] SafeArrayGetElemsize (psa=0x593210) returned 0x8 [0220.702] SafeArrayGetElement (in: psa=0x593210, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.703] memcpy (in: _Dst=0x115d438, _Src=0x5968c0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.703] memcpy (in: _Dst=0x115d438, _Src=0x5968c8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.704] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0300) returned 1 [0220.704] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1e80) returned 1 [0220.705] SetEvent (hEvent=0x24c) returned 1 [0220.706] free (_Block=0xd5c570) [0220.706] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.708] malloc (_Size=0x48) returned 0xd5c700 [0220.708] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x98373af, dwHighDateTime=0x1d92b8f)) [0220.708] SetEvent (hEvent=0x24c) returned 1 [0220.711] SetEvent (hEvent=0x24c) returned 1 [0220.712] free (_Block=0xd5c700) [0220.712] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.712] malloc (_Size=0x48) returned 0xd5c570 [0220.712] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x98373af, dwHighDateTime=0x1d92b8f)) [0220.712] SetEvent (hEvent=0x24c) returned 1 [0220.713] SetEvent (hEvent=0x24c) returned 1 [0220.714] free (_Block=0xd5c570) [0220.714] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.714] malloc (_Size=0x48) returned 0xd5c570 [0220.714] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x98373af, dwHighDateTime=0x1d92b8f)) [0220.715] SetEvent (hEvent=0x24c) returned 1 [0220.716] SetEvent (hEvent=0x24c) returned 1 [0220.716] free (_Block=0xd5c570) [0220.717] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0220.717] malloc (_Size=0x48) returned 0xd5c570 [0220.717] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x98373af, dwHighDateTime=0x1d92b8f)) [0220.717] SetEvent (hEvent=0x24c) returned 1 [0220.720] SetEvent (hEvent=0x24c) returned 1 [0220.720] free (_Block=0xd5c570) [0220.720] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.722] malloc (_Size=0x48) returned 0xd5c700 [0220.722] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x985b148, dwHighDateTime=0x1d92b8f)) [0220.722] SetEvent (hEvent=0x24c) returned 1 [0220.723] SetEvent (hEvent=0x24c) returned 1 [0220.724] free (_Block=0xd5c700) [0220.724] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x30, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0220.725] malloc (_Size=0x48) returned 0xd5c700 [0220.725] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x985b148, dwHighDateTime=0x1d92b8f)) [0220.725] SetEvent (hEvent=0x24c) returned 1 [0220.727] SetEvent (hEvent=0x24c) returned 1 [0220.728] free (_Block=0xd5c700) [0220.728] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x30, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0220.728] malloc (_Size=0x48) returned 0xd5c700 [0220.728] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x985b148, dwHighDateTime=0x1d92b8f)) [0220.728] SetEvent (hEvent=0x24c) returned 1 [0220.729] SetEvent (hEvent=0x24c) returned 1 [0220.730] free (_Block=0xd5c700) [0220.730] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x30, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.731] malloc (_Size=0x48) returned 0xd5c700 [0220.731] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x985b148, dwHighDateTime=0x1d92b8f)) [0220.731] SetEvent (hEvent=0x24c) returned 1 [0220.734] SetEvent (hEvent=0x24c) returned 1 [0220.735] free (_Block=0xd5c700) [0220.735] CM_Get_Device_IDA (in: dnDevInst=0x31, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="SWD\\MMDEVAPI\\{0.0.0.00000000}.{8E130672-61AD-4A4A-946A-D1F6397B4DB3}") returned 0x0 [0220.735] malloc (_Size=0x48) returned 0xd5c570 [0220.735] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x988234f, dwHighDateTime=0x1d92b8f)) [0220.735] SetEvent (hEvent=0x24c) returned 1 [0220.736] SetEvent (hEvent=0x24c) returned 1 [0220.739] free (_Block=0xd5c570) [0220.739] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.739] malloc (_Size=0x32) returned 0xd608f0 [0220.739] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd608f0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd608f0, pulLength=0x115d7d8) returned 0x0 [0220.740] free (_Block=0xd608f0) [0220.740] malloc (_Size=0x48) returned 0xd5c700 [0220.740] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x988234f, dwHighDateTime=0x1d92b8f)) [0220.740] SetEvent (hEvent=0x24c) returned 1 [0220.741] malloc (_Size=0x18) returned 0xd97e20 [0220.741] SafeArrayPutElement (psa=0x593550, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0220.741] free (_Block=0xd97e20) [0220.741] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e0d80 [0220.741] SafeArrayGetDim (psa=0x593550) returned 0x1 [0220.741] SafeArrayGetLBound (in: psa=0x593550, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.741] SafeArrayGetUBound (in: psa=0x593550, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.742] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b02d0 [0220.742] SafeArrayGetDim (psa=0x593550) returned 0x1 [0220.742] SafeArrayGetUBound (in: psa=0x593550, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.742] SafeArrayGetElemsize (psa=0x593550) returned 0x8 [0220.742] SafeArrayGetElement (in: psa=0x593550, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.742] memcpy (in: _Dst=0x115d438, _Src=0x5783d0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.743] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b02d0) returned 1 [0220.743] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e0d80) returned 1 [0220.744] SetEvent (hEvent=0x24c) returned 1 [0220.744] free (_Block=0xd5c700) [0220.744] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.744] malloc (_Size=0x62) returned 0xd60330 [0220.744] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd60330, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd60330, pulLength=0x115d7d8) returned 0x0 [0220.745] free (_Block=0xd60330) [0220.745] malloc (_Size=0x48) returned 0xd5c570 [0220.745] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x988234f, dwHighDateTime=0x1d92b8f)) [0220.745] SetEvent (hEvent=0x24c) returned 1 [0220.746] malloc (_Size=0x18) returned 0xd97f00 [0220.746] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0220.746] free (_Block=0xd97f00) [0220.746] malloc (_Size=0x18) returned 0xd97ea0 [0220.746] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0220.746] free (_Block=0xd97ea0) [0220.746] malloc (_Size=0x18) returned 0xd97dc0 [0220.746] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0220.746] free (_Block=0xd97dc0) [0220.746] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2700 [0220.746] SafeArrayGetDim (psa=0x5938d0) returned 0x1 [0220.747] SafeArrayGetLBound (in: psa=0x5938d0, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.747] SafeArrayGetUBound (in: psa=0x5938d0, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.747] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b02d0 [0220.747] SafeArrayGetDim (psa=0x5938d0) returned 0x1 [0220.747] SafeArrayGetUBound (in: psa=0x5938d0, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.747] SafeArrayGetElemsize (psa=0x5938d0) returned 0x8 [0220.747] SafeArrayGetElement (in: psa=0x5938d0, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.747] memcpy (in: _Dst=0x115d438, _Src=0x5963a0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.747] memcpy (in: _Dst=0x115d438, _Src=0x5963a8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.748] memcpy (in: _Dst=0x115d438, _Src=0x5963b0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.748] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b02d0) returned 1 [0220.749] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2700) returned 1 [0220.749] SetEvent (hEvent=0x24c) returned 1 [0220.757] free (_Block=0xd5c570) [0220.757] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.759] malloc (_Size=0x48) returned 0xd5c570 [0220.759] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x98a99ba, dwHighDateTime=0x1d92b8f)) [0220.759] SetEvent (hEvent=0x24c) returned 1 [0220.761] SetEvent (hEvent=0x24c) returned 1 [0220.762] free (_Block=0xd5c570) [0220.763] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.763] malloc (_Size=0x48) returned 0xd5c570 [0220.763] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x98a99ba, dwHighDateTime=0x1d92b8f)) [0220.763] SetEvent (hEvent=0x24c) returned 1 [0220.764] SetEvent (hEvent=0x24c) returned 1 [0220.765] free (_Block=0xd5c570) [0220.765] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.765] malloc (_Size=0x48) returned 0xd5c570 [0220.765] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x98a99ba, dwHighDateTime=0x1d92b8f)) [0220.765] SetEvent (hEvent=0x24c) returned 1 [0220.770] malloc (_Size=0xd8) returned 0xd64670 [0220.770] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0220.770] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0220.770] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0220.770] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0220.770] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0220.771] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0220.771] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0220.771] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0220.771] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0220.771] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0220.771] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0220.771] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0220.771] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0220.772] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0220.772] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0220.772] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0220.772] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0220.772] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0220.772] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0220.772] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0220.772] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0220.773] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0220.773] malloc (_Size=0x18) returned 0xd97ba0 [0220.773] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0220.773] malloc (_Size=0x48) returned 0xd5c570 [0220.773] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x98cd63b, dwHighDateTime=0x1d92b8f)) [0220.773] SetEvent (hEvent=0x24c) returned 1 [0220.776] SetEvent (hEvent=0x24c) returned 1 [0220.777] free (_Block=0xd5c570) [0220.777] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.779] malloc (_Size=0x48) returned 0xd5c570 [0220.779] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x98cd63b, dwHighDateTime=0x1d92b8f)) [0220.779] SetEvent (hEvent=0x24c) returned 1 [0220.780] SetEvent (hEvent=0x24c) returned 1 [0220.781] free (_Block=0xd5c570) [0220.781] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x31, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0220.781] malloc (_Size=0x48) returned 0xd5c570 [0220.781] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x98cd63b, dwHighDateTime=0x1d92b8f)) [0220.781] SetEvent (hEvent=0x24c) returned 1 [0220.786] malloc (_Size=0xd8) returned 0xd64670 [0220.786] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0220.786] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0220.786] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0220.786] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0220.787] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0220.787] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0220.787] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0220.787] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0220.787] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0220.787] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0220.787] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0220.788] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0220.788] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0220.788] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0220.788] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0220.788] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0220.788] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0220.788] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0220.788] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0220.789] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0220.789] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0220.789] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0220.789] malloc (_Size=0x18) returned 0xd97fc0 [0220.789] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x31, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0220.789] malloc (_Size=0x48) returned 0xd5c700 [0220.789] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x98f3870, dwHighDateTime=0x1d92b8f)) [0220.789] SetEvent (hEvent=0x24c) returned 1 [0220.791] SetEvent (hEvent=0x24c) returned 1 [0220.791] free (_Block=0xd5c700) [0220.791] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x31, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.792] malloc (_Size=0x48) returned 0xd5c570 [0220.792] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x98f3870, dwHighDateTime=0x1d92b8f)) [0220.792] SetEvent (hEvent=0x24c) returned 1 [0220.794] SetEvent (hEvent=0x24c) returned 1 [0220.795] free (_Block=0xd5c570) [0220.795] CM_Get_Device_IDA (in: dnDevInst=0x32, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\NDISVIRTUALBUS\\0000") returned 0x0 [0220.795] malloc (_Size=0x48) returned 0xd5c700 [0220.795] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x98f3870, dwHighDateTime=0x1d92b8f)) [0220.795] SetEvent (hEvent=0x24c) returned 1 [0220.797] SetEvent (hEvent=0x24c) returned 1 [0220.800] free (_Block=0xd5c700) [0220.800] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.800] malloc (_Size=0x2a) returned 0xd612f0 [0220.800] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd612f0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd612f0, pulLength=0x115d7d8) returned 0x0 [0220.801] free (_Block=0xd612f0) [0220.801] malloc (_Size=0x48) returned 0xd5c700 [0220.801] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9919b67, dwHighDateTime=0x1d92b8f)) [0220.801] SetEvent (hEvent=0x24c) returned 1 [0220.802] malloc (_Size=0x18) returned 0xd97de0 [0220.802] SafeArrayPutElement (psa=0x593b10, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.802] free (_Block=0xd97de0) [0220.802] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1800 [0220.802] SafeArrayGetDim (psa=0x593b10) returned 0x1 [0220.802] SafeArrayGetLBound (in: psa=0x593b10, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.802] SafeArrayGetUBound (in: psa=0x593b10, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.802] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afe80 [0220.802] SafeArrayGetDim (psa=0x593b10) returned 0x1 [0220.802] SafeArrayGetUBound (in: psa=0x593b10, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.802] SafeArrayGetElemsize (psa=0x593b10) returned 0x8 [0220.802] SafeArrayGetElement (in: psa=0x593b10, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.803] memcpy (in: _Dst=0x115d438, _Src=0x578470, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.803] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afe80) returned 1 [0220.803] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1800) returned 1 [0220.804] SetEvent (hEvent=0x24c) returned 1 [0220.816] free (_Block=0xd5c700) [0220.816] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0220.816] malloc (_Size=0x48) returned 0xd5c700 [0220.816] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9940f56, dwHighDateTime=0x1d92b8f)) [0220.816] SetEvent (hEvent=0x24c) returned 1 [0220.817] SetEvent (hEvent=0x24c) returned 1 [0220.818] free (_Block=0xd5c700) [0220.818] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.822] malloc (_Size=0x48) returned 0xd5c700 [0220.822] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9940f56, dwHighDateTime=0x1d92b8f)) [0220.823] SetEvent (hEvent=0x24c) returned 1 [0220.823] SetEvent (hEvent=0x24c) returned 1 [0220.824] free (_Block=0xd5c700) [0220.824] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.825] malloc (_Size=0x48) returned 0xd5c700 [0220.825] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9940f56, dwHighDateTime=0x1d92b8f)) [0220.825] SetEvent (hEvent=0x24c) returned 1 [0220.826] SetEvent (hEvent=0x24c) returned 1 [0220.826] free (_Block=0xd5c700) [0220.826] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.826] malloc (_Size=0x48) returned 0xd5c700 [0220.826] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9940f56, dwHighDateTime=0x1d92b8f)) [0220.827] SetEvent (hEvent=0x24c) returned 1 [0220.827] SetEvent (hEvent=0x24c) returned 1 [0220.828] free (_Block=0xd5c700) [0220.828] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.828] malloc (_Size=0x48) returned 0xd5c700 [0220.834] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9966134, dwHighDateTime=0x1d92b8f)) [0220.834] SetEvent (hEvent=0x24c) returned 1 [0220.836] SetEvent (hEvent=0x24c) returned 1 [0220.837] free (_Block=0xd5c700) [0220.837] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.838] malloc (_Size=0x48) returned 0xd5c700 [0220.838] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9966134, dwHighDateTime=0x1d92b8f)) [0220.838] SetEvent (hEvent=0x24c) returned 1 [0220.839] SetEvent (hEvent=0x24c) returned 1 [0220.839] free (_Block=0xd5c700) [0220.840] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x32, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0220.840] malloc (_Size=0x48) returned 0xd5c700 [0220.840] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x9966134, dwHighDateTime=0x1d92b8f)) [0220.840] SetEvent (hEvent=0x24c) returned 1 [0220.842] SetEvent (hEvent=0x24c) returned 1 [0220.842] free (_Block=0xd5c700) [0220.842] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x32, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0220.842] malloc (_Size=0x48) returned 0xd5c700 [0220.842] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x9966134, dwHighDateTime=0x1d92b8f)) [0220.842] SetEvent (hEvent=0x24c) returned 1 [0220.843] SetEvent (hEvent=0x24c) returned 1 [0220.844] free (_Block=0xd5c700) [0220.844] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x32, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0220.844] malloc (_Size=0x48) returned 0xd5c700 [0220.845] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x998c78f, dwHighDateTime=0x1d92b8f)) [0220.845] SetEvent (hEvent=0x24c) returned 1 [0220.847] SetEvent (hEvent=0x24c) returned 1 [0220.847] free (_Block=0xd5c700) [0220.847] CM_Get_Device_IDA (in: dnDevInst=0x33, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="HDAUDIO\\FUNC_01&VEN_1AF4&DEV_0022&SUBSYS_1AF40022&REV_1001\\4&3ADB15C9&0&0001") returned 0x0 [0220.848] malloc (_Size=0x48) returned 0xd5c700 [0220.848] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x998c78f, dwHighDateTime=0x1d92b8f)) [0220.848] SetEvent (hEvent=0x24c) returned 1 [0220.849] SetEvent (hEvent=0x24c) returned 1 [0220.849] free (_Block=0xd5c700) [0220.849] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.849] malloc (_Size=0xdc) returned 0xd649e0 [0220.849] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0220.850] free (_Block=0xd649e0) [0220.850] malloc (_Size=0x48) returned 0xd5c570 [0220.850] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x998c78f, dwHighDateTime=0x1d92b8f)) [0220.850] SetEvent (hEvent=0x24c) returned 1 [0220.850] malloc (_Size=0x18) returned 0xd97900 [0220.850] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.850] free (_Block=0xd97900) [0220.850] malloc (_Size=0x18) returned 0xd97d00 [0220.851] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.851] free (_Block=0xd97d00) [0220.851] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1700 [0220.851] SafeArrayGetDim (psa=0x593010) returned 0x1 [0220.851] SafeArrayGetLBound (in: psa=0x593010, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.851] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.851] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0090 [0220.851] SafeArrayGetDim (psa=0x593010) returned 0x1 [0220.851] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.851] SafeArrayGetElemsize (psa=0x593010) returned 0x8 [0220.851] SafeArrayGetElement (in: psa=0x593010, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.852] memcpy (in: _Dst=0x115d438, _Src=0x5968c0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.852] memcpy (in: _Dst=0x115d438, _Src=0x5968c8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.852] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0090) returned 1 [0220.853] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1700) returned 1 [0220.853] SetEvent (hEvent=0x24c) returned 1 [0220.853] free (_Block=0xd5c570) [0220.853] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.854] malloc (_Size=0x492) returned 0xd649e0 [0220.854] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0220.854] free (_Block=0xd649e0) [0220.854] malloc (_Size=0x48) returned 0xd5c750 [0220.855] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x998c78f, dwHighDateTime=0x1d92b8f)) [0220.855] SetEvent (hEvent=0x24c) returned 1 [0220.855] malloc (_Size=0x18) returned 0xd97e60 [0220.855] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.855] free (_Block=0xd97e60) [0220.855] malloc (_Size=0x18) returned 0xd97c60 [0220.855] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.855] free (_Block=0xd97c60) [0220.855] malloc (_Size=0x18) returned 0xd97e00 [0220.855] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.855] free (_Block=0xd97e00) [0220.856] malloc (_Size=0x18) returned 0xd98020 [0220.856] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.856] free (_Block=0xd98020) [0220.856] malloc (_Size=0x18) returned 0xd979c0 [0220.856] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.856] free (_Block=0xd979c0) [0220.856] malloc (_Size=0x18) returned 0xd97c80 [0220.856] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.856] free (_Block=0xd97c80) [0220.856] malloc (_Size=0x18) returned 0xd97920 [0220.856] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.856] free (_Block=0xd97920) [0220.856] malloc (_Size=0x18) returned 0xd97da0 [0220.856] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.856] free (_Block=0xd97da0) [0220.857] malloc (_Size=0x18) returned 0xd97d80 [0220.857] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.857] free (_Block=0xd97d80) [0220.857] malloc (_Size=0x18) returned 0xd97b20 [0220.857] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.857] free (_Block=0xd97b20) [0220.857] malloc (_Size=0x18) returned 0xd97920 [0220.857] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.857] free (_Block=0xd97920) [0220.857] malloc (_Size=0x18) returned 0xd979e0 [0220.857] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.857] free (_Block=0xd979e0) [0220.857] malloc (_Size=0x18) returned 0xd978e0 [0220.857] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13126f8) returned 0x0 [0220.857] free (_Block=0xd978e0) [0220.858] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1900 [0220.858] SafeArrayGetDim (psa=0x593010) returned 0x1 [0220.858] SafeArrayGetLBound (in: psa=0x593010, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.858] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.858] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afc70 [0220.858] SafeArrayGetDim (psa=0x593010) returned 0x1 [0220.858] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.858] SafeArrayGetElemsize (psa=0x593010) returned 0x8 [0220.858] SafeArrayGetElement (in: psa=0x593010, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.858] memcpy (in: _Dst=0x115d438, _Src=0x582e70, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.859] memcpy (in: _Dst=0x115d438, _Src=0x582e78, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.859] memcpy (in: _Dst=0x115d438, _Src=0x582e80, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.859] memcpy (in: _Dst=0x115d438, _Src=0x582e88, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.859] memcpy (in: _Dst=0x115d438, _Src=0x582e90, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.875] memcpy (in: _Dst=0x115d438, _Src=0x582e98, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.875] memcpy (in: _Dst=0x115d438, _Src=0x582ea0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.875] memcpy (in: _Dst=0x115d438, _Src=0x582ea8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.875] memcpy (in: _Dst=0x115d438, _Src=0x582eb0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.875] memcpy (in: _Dst=0x115d438, _Src=0x582eb8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.876] memcpy (in: _Dst=0x115d438, _Src=0x582ec0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.876] memcpy (in: _Dst=0x115d438, _Src=0x582ec8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.876] memcpy (in: _Dst=0x115d438, _Src=0x582ed0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.877] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afc70) returned 1 [0220.877] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1900) returned 1 [0220.878] malloc (_Size=0xd8) returned 0xd64670 [0220.878] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0220.878] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0220.878] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0220.878] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0220.878] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0220.878] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0220.879] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0220.879] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0220.879] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0220.879] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0220.879] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0220.879] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0220.879] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0220.879] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0220.880] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0220.880] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0220.880] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0220.880] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0220.880] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0220.880] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0220.880] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0220.880] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0220.881] malloc (_Size=0x18) returned 0xd97ee0 [0220.881] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.888] malloc (_Size=0x48) returned 0xd5c570 [0220.889] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x99d86e4, dwHighDateTime=0x1d92b8f)) [0220.889] SetEvent (hEvent=0x24c) returned 1 [0220.889] SetEvent (hEvent=0x24c) returned 1 [0220.890] free (_Block=0xd5c570) [0220.890] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.890] malloc (_Size=0x48) returned 0xd5c7f0 [0220.890] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x99d86e4, dwHighDateTime=0x1d92b8f)) [0220.891] SetEvent (hEvent=0x24c) returned 1 [0220.891] SetEvent (hEvent=0x24c) returned 1 [0220.892] free (_Block=0xd5c7f0) [0220.892] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.896] malloc (_Size=0x48) returned 0xd5c570 [0220.896] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9a03312, dwHighDateTime=0x1d92b8f)) [0220.896] SetEvent (hEvent=0x24c) returned 1 [0220.897] SetEvent (hEvent=0x24c) returned 1 [0220.898] free (_Block=0xd5c570) [0220.898] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.898] malloc (_Size=0x48) returned 0xd5c570 [0220.898] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9a03312, dwHighDateTime=0x1d92b8f)) [0220.898] SetEvent (hEvent=0x24c) returned 1 [0220.901] SetEvent (hEvent=0x24c) returned 1 [0220.901] free (_Block=0xd5c570) [0220.902] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.904] malloc (_Size=0x48) returned 0xd5c700 [0220.905] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9a03312, dwHighDateTime=0x1d92b8f)) [0220.905] SetEvent (hEvent=0x24c) returned 1 [0220.905] SetEvent (hEvent=0x24c) returned 1 [0220.906] free (_Block=0xd5c700) [0220.906] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x33, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0220.906] malloc (_Size=0x48) returned 0xd5c700 [0220.907] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x9a24dd8, dwHighDateTime=0x1d92b8f)) [0220.907] SetEvent (hEvent=0x24c) returned 1 [0220.909] SetEvent (hEvent=0x24c) returned 1 [0220.909] free (_Block=0xd5c700) [0220.909] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x33, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0220.909] malloc (_Size=0x48) returned 0xd5c700 [0220.909] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x9a24dd8, dwHighDateTime=0x1d92b8f)) [0220.910] SetEvent (hEvent=0x24c) returned 1 [0220.910] SetEvent (hEvent=0x24c) returned 1 [0220.911] free (_Block=0xd5c700) [0220.911] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x33, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0220.911] malloc (_Size=0x48) returned 0xd5c700 [0220.912] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9a24dd8, dwHighDateTime=0x1d92b8f)) [0220.912] SetEvent (hEvent=0x24c) returned 1 [0220.914] SetEvent (hEvent=0x24c) returned 1 [0220.915] free (_Block=0xd5c700) [0220.915] CM_Get_Device_IDA (in: dnDevInst=0x34, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_2918&SUBSYS_11001AF4&REV_02\\3&11583659&0&F8") returned 0x0 [0220.915] malloc (_Size=0x48) returned 0xd5c570 [0220.915] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x9a24dd8, dwHighDateTime=0x1d92b8f)) [0220.915] SetEvent (hEvent=0x24c) returned 1 [0220.916] SetEvent (hEvent=0x24c) returned 1 [0220.917] free (_Block=0xd5c570) [0220.917] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.917] malloc (_Size=0x124) returned 0xd649e0 [0220.917] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0220.918] free (_Block=0xd649e0) [0220.918] malloc (_Size=0x48) returned 0xd5c700 [0220.918] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9a24dd8, dwHighDateTime=0x1d92b8f)) [0220.918] SetEvent (hEvent=0x24c) returned 1 [0220.918] malloc (_Size=0x18) returned 0xd97fa0 [0220.918] SafeArrayPutElement (psa=0x593ad0, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.918] free (_Block=0xd97fa0) [0220.918] malloc (_Size=0x18) returned 0xd97940 [0220.918] SafeArrayPutElement (psa=0x593ad0, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.918] free (_Block=0xd97940) [0220.919] malloc (_Size=0x18) returned 0xd979e0 [0220.919] SafeArrayPutElement (psa=0x593ad0, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.919] free (_Block=0xd979e0) [0220.919] malloc (_Size=0x18) returned 0xd97dc0 [0220.919] SafeArrayPutElement (psa=0x593ad0, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.919] free (_Block=0xd97dc0) [0220.919] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2700 [0220.919] SafeArrayGetDim (psa=0x593ad0) returned 0x1 [0220.919] SafeArrayGetLBound (in: psa=0x593ad0, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.919] SafeArrayGetUBound (in: psa=0x593ad0, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.919] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5affa0 [0220.919] SafeArrayGetDim (psa=0x593ad0) returned 0x1 [0220.919] SafeArrayGetUBound (in: psa=0x593ad0, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.919] SafeArrayGetElemsize (psa=0x593ad0) returned 0x8 [0220.919] SafeArrayGetElement (in: psa=0x593ad0, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.920] memcpy (in: _Dst=0x115d438, _Src=0x5afca0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.920] memcpy (in: _Dst=0x115d438, _Src=0x5afca8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.920] memcpy (in: _Dst=0x115d438, _Src=0x5afcb0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.920] memcpy (in: _Dst=0x115d438, _Src=0x5afcb8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.921] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5affa0) returned 1 [0220.922] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2700) returned 1 [0220.944] malloc (_Size=0xd8) returned 0xd64670 [0220.944] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0220.944] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0220.945] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0220.945] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0220.945] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0220.945] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0220.945] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0220.945] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0220.945] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0220.946] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0220.946] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0220.946] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0220.946] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0220.946] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0220.946] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0220.946] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0220.946] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0220.947] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0220.947] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0220.947] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0220.947] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0220.947] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0220.947] malloc (_Size=0x18) returned 0xd97e80 [0220.947] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0220.947] malloc (_Size=0x10e) returned 0xd649e0 [0220.947] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0220.948] free (_Block=0xd649e0) [0220.948] malloc (_Size=0x48) returned 0xd5c7f0 [0220.949] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9a71f13, dwHighDateTime=0x1d92b8f)) [0220.949] SetEvent (hEvent=0x24c) returned 1 [0220.949] malloc (_Size=0x18) returned 0xd97b00 [0220.950] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0220.950] free (_Block=0xd97b00) [0220.950] malloc (_Size=0x18) returned 0xd97b60 [0220.950] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0220.950] free (_Block=0xd97b60) [0220.962] malloc (_Size=0x18) returned 0xd97a80 [0220.962] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0220.962] free (_Block=0xd97a80) [0220.962] malloc (_Size=0x18) returned 0xd97f40 [0220.962] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0220.962] free (_Block=0xd97f40) [0220.963] malloc (_Size=0x18) returned 0xd97aa0 [0220.963] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0220.963] free (_Block=0xd97aa0) [0220.963] malloc (_Size=0x18) returned 0xd97be0 [0220.963] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0220.963] free (_Block=0xd97be0) [0220.963] malloc (_Size=0x18) returned 0xd97b40 [0220.963] SafeArrayPutElement (psa=0x5938d0, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0220.963] free (_Block=0xd97b40) [0220.963] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2580 [0220.963] SafeArrayGetDim (psa=0x5938d0) returned 0x1 [0220.963] SafeArrayGetLBound (in: psa=0x5938d0, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0220.963] SafeArrayGetUBound (in: psa=0x5938d0, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0220.963] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0270 [0220.963] SafeArrayGetDim (psa=0x5938d0) returned 0x1 [0220.963] SafeArrayGetUBound (in: psa=0x5938d0, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0220.963] SafeArrayGetElemsize (psa=0x5938d0) returned 0x8 [0220.963] SafeArrayGetElement (in: psa=0x5938d0, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0220.964] memcpy (in: _Dst=0x115d438, _Src=0x592d80, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.964] memcpy (in: _Dst=0x115d438, _Src=0x592d88, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.964] memcpy (in: _Dst=0x115d438, _Src=0x592d90, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.964] memcpy (in: _Dst=0x115d438, _Src=0x592d98, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.964] memcpy (in: _Dst=0x115d438, _Src=0x592da0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.964] memcpy (in: _Dst=0x115d438, _Src=0x592da8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.965] memcpy (in: _Dst=0x115d438, _Src=0x592db0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0220.965] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0270) returned 1 [0220.966] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2580) returned 1 [0220.966] SetEvent (hEvent=0x24c) returned 1 [0220.967] free (_Block=0xd5c7f0) [0220.967] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.970] malloc (_Size=0x48) returned 0xd5c570 [0220.970] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.970] SetEvent (hEvent=0x24c) returned 1 [0220.971] SetEvent (hEvent=0x24c) returned 1 [0220.972] free (_Block=0xd5c570) [0220.973] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.973] malloc (_Size=0x48) returned 0xd5c570 [0220.973] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.973] SetEvent (hEvent=0x24c) returned 1 [0220.974] SetEvent (hEvent=0x24c) returned 1 [0220.975] free (_Block=0xd5c570) [0220.975] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.975] malloc (_Size=0x48) returned 0xd5c570 [0220.975] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.975] SetEvent (hEvent=0x24c) returned 1 [0220.976] SetEvent (hEvent=0x24c) returned 1 [0220.977] free (_Block=0xd5c570) [0220.977] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.977] malloc (_Size=0x48) returned 0xd5c570 [0220.977] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.977] SetEvent (hEvent=0x24c) returned 1 [0220.980] SetEvent (hEvent=0x24c) returned 1 [0220.981] free (_Block=0xd5c570) [0220.981] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0220.983] malloc (_Size=0x48) returned 0xd5c570 [0220.983] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.983] SetEvent (hEvent=0x24c) returned 1 [0220.984] SetEvent (hEvent=0x24c) returned 1 [0220.985] free (_Block=0xd5c570) [0220.985] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x34, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0220.985] malloc (_Size=0x48) returned 0xd5c570 [0220.985] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.985] SetEvent (hEvent=0x24c) returned 1 [0220.987] SetEvent (hEvent=0x24c) returned 1 [0220.988] free (_Block=0xd5c570) [0220.988] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x34, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0220.989] malloc (_Size=0x48) returned 0xd5c570 [0220.989] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x9aea2ed, dwHighDateTime=0x1d92b8f)) [0220.989] SetEvent (hEvent=0x24c) returned 1 [0220.992] SetEvent (hEvent=0x24c) returned 1 [0220.992] free (_Block=0xd5c570) [0220.993] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x34, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0220.993] malloc (_Size=0x48) returned 0xd5c570 [0220.993] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9aea2ed, dwHighDateTime=0x1d92b8f)) [0220.994] SetEvent (hEvent=0x24c) returned 1 [0220.999] SetEvent (hEvent=0x24c) returned 1 [0220.999] free (_Block=0xd5c570) [0220.999] CM_Get_Device_IDA (in: dnDevInst=0x35, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\MSSMBIOS\\0000") returned 0x0 [0221.000] malloc (_Size=0x48) returned 0xd5c570 [0221.000] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x9aea2ed, dwHighDateTime=0x1d92b8f)) [0221.000] SetEvent (hEvent=0x24c) returned 1 [0221.013] malloc (_Size=0xd8) returned 0xd64670 [0221.013] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0221.013] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0221.013] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0221.013] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0221.014] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0221.014] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0221.014] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0221.014] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0221.014] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0221.014] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0221.014] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0221.014] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0221.014] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0221.014] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0221.015] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0221.015] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0221.015] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0221.015] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0221.015] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0221.015] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0221.015] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0221.015] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0221.016] malloc (_Size=0x18) returned 0xd97aa0 [0221.016] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0221.016] malloc (_Size=0x1e) returned 0xd5f270 [0221.016] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd5f270, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd5f270, pulLength=0x115d7d8) returned 0x0 [0221.016] free (_Block=0xd5f270) [0221.016] malloc (_Size=0x48) returned 0xd5c570 [0221.016] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9b2fa50, dwHighDateTime=0x1d92b8f)) [0221.017] SetEvent (hEvent=0x24c) returned 1 [0221.017] malloc (_Size=0x18) returned 0xd97f20 [0221.017] SafeArrayPutElement (psa=0x593050, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0221.017] free (_Block=0xd97f20) [0221.017] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1700 [0221.017] SafeArrayGetDim (psa=0x593050) returned 0x1 [0221.017] SafeArrayGetLBound (in: psa=0x593050, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0221.017] SafeArrayGetUBound (in: psa=0x593050, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0221.017] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0210 [0221.017] SafeArrayGetDim (psa=0x593050) returned 0x1 [0221.018] SafeArrayGetUBound (in: psa=0x593050, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0221.018] SafeArrayGetElemsize (psa=0x593050) returned 0x8 [0221.018] SafeArrayGetElement (in: psa=0x593050, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0221.018] memcpy (in: _Dst=0x115d438, _Src=0x578470, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0221.019] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0210) returned 1 [0221.020] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1700) returned 1 [0221.020] SetEvent (hEvent=0x24c) returned 1 [0221.021] free (_Block=0xd5c570) [0221.021] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0221.021] malloc (_Size=0x48) returned 0xd5c570 [0221.021] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9b2fa50, dwHighDateTime=0x1d92b8f)) [0221.021] SetEvent (hEvent=0x24c) returned 1 [0221.022] SetEvent (hEvent=0x24c) returned 1 [0221.023] free (_Block=0xd5c570) [0221.023] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.025] malloc (_Size=0x48) returned 0xd5c700 [0221.025] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9b2fa50, dwHighDateTime=0x1d92b8f)) [0221.025] SetEvent (hEvent=0x24c) returned 1 [0221.026] SetEvent (hEvent=0x24c) returned 1 [0221.027] free (_Block=0xd5c700) [0221.027] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.027] malloc (_Size=0x48) returned 0xd5c700 [0221.027] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9b2fa50, dwHighDateTime=0x1d92b8f)) [0221.027] SetEvent (hEvent=0x24c) returned 1 [0221.028] SetEvent (hEvent=0x24c) returned 1 [0221.028] free (_Block=0xd5c700) [0221.028] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.029] malloc (_Size=0x48) returned 0xd5c7f0 [0221.029] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9b2fa50, dwHighDateTime=0x1d92b8f)) [0221.029] SetEvent (hEvent=0x24c) returned 1 [0221.030] SetEvent (hEvent=0x24c) returned 1 [0221.030] free (_Block=0xd5c7f0) [0221.031] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.031] malloc (_Size=0x48) returned 0xd5c570 [0221.031] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9b2fa50, dwHighDateTime=0x1d92b8f)) [0221.031] SetEvent (hEvent=0x24c) returned 1 [0221.033] SetEvent (hEvent=0x24c) returned 1 [0221.034] free (_Block=0xd5c570) [0221.034] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.035] malloc (_Size=0x48) returned 0xd5c570 [0221.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9b560fd, dwHighDateTime=0x1d92b8f)) [0221.035] SetEvent (hEvent=0x24c) returned 1 [0221.036] SetEvent (hEvent=0x24c) returned 1 [0221.037] free (_Block=0xd5c570) [0221.037] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x35, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0221.037] malloc (_Size=0x48) returned 0xd5c700 [0221.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x9b560fd, dwHighDateTime=0x1d92b8f)) [0221.037] SetEvent (hEvent=0x24c) returned 1 [0221.038] SetEvent (hEvent=0x24c) returned 1 [0221.039] free (_Block=0xd5c700) [0221.039] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x35, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0221.039] malloc (_Size=0x48) returned 0xd5c570 [0221.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x9b560fd, dwHighDateTime=0x1d92b8f)) [0221.039] SetEvent (hEvent=0x24c) returned 1 [0221.040] SetEvent (hEvent=0x24c) returned 1 [0221.041] free (_Block=0xd5c570) [0221.041] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x35, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0221.041] malloc (_Size=0x48) returned 0xd5c570 [0221.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9b560fd, dwHighDateTime=0x1d92b8f)) [0221.041] SetEvent (hEvent=0x24c) returned 1 [0221.042] SetEvent (hEvent=0x24c) returned 1 [0221.043] free (_Block=0xd5c570) [0221.043] CM_Get_Device_IDA (in: dnDevInst=0x36, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\SYSTEM\\0000") returned 0x0 [0221.043] malloc (_Size=0x48) returned 0xd5c7f0 [0221.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x9b560fd, dwHighDateTime=0x1d92b8f)) [0221.043] SetEvent (hEvent=0x24c) returned 1 [0221.044] SetEvent (hEvent=0x24c) returned 1 [0221.045] free (_Block=0xd5c7f0) [0221.045] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0221.045] malloc (_Size=0x1a) returned 0xd5f4e0 [0221.045] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd5f4e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd5f4e0, pulLength=0x115d7d8) returned 0x0 [0221.045] free (_Block=0xd5f4e0) [0221.045] malloc (_Size=0x48) returned 0xd5c570 [0221.045] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9b560fd, dwHighDateTime=0x1d92b8f)) [0221.045] SetEvent (hEvent=0x24c) returned 1 [0221.045] malloc (_Size=0x18) returned 0xd97c00 [0221.045] SafeArrayPutElement (psa=0x593ad0, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0221.045] free (_Block=0xd97c00) [0221.046] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1700 [0221.046] SafeArrayGetDim (psa=0x593ad0) returned 0x1 [0221.046] SafeArrayGetLBound (in: psa=0x593ad0, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0221.046] SafeArrayGetUBound (in: psa=0x593ad0, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0221.046] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5aff10 [0221.046] SafeArrayGetDim (psa=0x593ad0) returned 0x1 [0221.046] SafeArrayGetUBound (in: psa=0x593ad0, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0221.046] SafeArrayGetElemsize (psa=0x593ad0) returned 0x8 [0221.046] SafeArrayGetElement (in: psa=0x593ad0, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0221.046] memcpy (in: _Dst=0x115d438, _Src=0x5783d0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0221.047] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5aff10) returned 1 [0221.050] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1700) returned 1 [0221.050] malloc (_Size=0xd8) returned 0xd64670 [0221.050] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0221.050] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0221.050] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0221.051] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0221.051] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0221.051] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0221.051] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0221.051] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0221.051] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0221.051] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0221.051] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0221.051] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0221.051] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0221.051] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0221.052] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0221.052] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0221.052] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0221.052] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0221.052] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0221.052] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0221.052] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0221.052] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0221.052] malloc (_Size=0x18) returned 0xd97b60 [0221.052] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0221.052] malloc (_Size=0x48) returned 0xd5c570 [0221.052] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9b7c3fd, dwHighDateTime=0x1d92b8f)) [0221.053] SetEvent (hEvent=0x24c) returned 1 [0221.053] SetEvent (hEvent=0x24c) returned 1 [0221.054] free (_Block=0xd5c570) [0221.054] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.058] malloc (_Size=0x48) returned 0xd5c700 [0221.058] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9b7c3fd, dwHighDateTime=0x1d92b8f)) [0221.058] SetEvent (hEvent=0x24c) returned 1 [0221.058] SetEvent (hEvent=0x24c) returned 1 [0221.059] free (_Block=0xd5c700) [0221.059] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.059] malloc (_Size=0x48) returned 0xd5c570 [0221.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9b7c3fd, dwHighDateTime=0x1d92b8f)) [0221.059] SetEvent (hEvent=0x24c) returned 1 [0221.060] SetEvent (hEvent=0x24c) returned 1 [0221.061] free (_Block=0xd5c570) [0221.061] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.061] malloc (_Size=0x48) returned 0xd5c570 [0221.061] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9b7c3fd, dwHighDateTime=0x1d92b8f)) [0221.061] SetEvent (hEvent=0x24c) returned 1 [0221.062] SetEvent (hEvent=0x24c) returned 1 [0221.062] free (_Block=0xd5c570) [0221.062] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.063] malloc (_Size=0x48) returned 0xd5c570 [0221.063] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9ba23e2, dwHighDateTime=0x1d92b8f)) [0221.063] SetEvent (hEvent=0x24c) returned 1 [0221.065] SetEvent (hEvent=0x24c) returned 1 [0221.066] free (_Block=0xd5c570) [0221.066] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.067] malloc (_Size=0x48) returned 0xd5c700 [0221.067] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9ba23e2, dwHighDateTime=0x1d92b8f)) [0221.067] SetEvent (hEvent=0x24c) returned 1 [0221.068] SetEvent (hEvent=0x24c) returned 1 [0221.068] free (_Block=0xd5c700) [0221.068] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x36, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0221.069] malloc (_Size=0x48) returned 0xd5c570 [0221.069] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x9ba23e2, dwHighDateTime=0x1d92b8f)) [0221.069] SetEvent (hEvent=0x24c) returned 1 [0221.070] SetEvent (hEvent=0x24c) returned 1 [0221.071] free (_Block=0xd5c570) [0221.071] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x36, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0221.071] malloc (_Size=0x48) returned 0xd5c570 [0221.071] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x9ba23e2, dwHighDateTime=0x1d92b8f)) [0221.071] SetEvent (hEvent=0x24c) returned 1 [0221.072] SetEvent (hEvent=0x24c) returned 1 [0221.072] free (_Block=0xd5c570) [0221.072] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x36, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0221.072] malloc (_Size=0x48) returned 0xd5c570 [0221.072] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9ba23e2, dwHighDateTime=0x1d92b8f)) [0221.072] SetEvent (hEvent=0x24c) returned 1 [0221.118] malloc (_Size=0xd8) returned 0xd64670 [0221.118] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0221.118] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0221.118] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0221.118] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0221.119] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0221.119] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0221.119] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0221.119] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0221.119] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0221.119] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0221.119] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0221.119] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0221.119] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0221.119] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0221.119] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0221.120] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0221.120] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0221.120] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0221.120] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0221.120] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0221.120] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0221.120] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0221.120] malloc (_Size=0x18) returned 0xd97cc0 [0221.120] CM_Get_Device_IDA (in: dnDevInst=0x37, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ACPI\\PNP0F13\\4&22F5829E&0") returned 0x0 [0221.120] malloc (_Size=0x48) returned 0xd5c7f0 [0221.120] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x9c14b05, dwHighDateTime=0x1d92b8f)) [0221.121] SetEvent (hEvent=0x24c) returned 1 [0221.121] SetEvent (hEvent=0x24c) returned 1 [0221.122] free (_Block=0xd5c7f0) [0221.122] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0221.122] malloc (_Size=0x5a) returned 0xd60330 [0221.122] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd60330, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd60330, pulLength=0x115d7d8) returned 0x0 [0221.123] free (_Block=0xd60330) [0221.123] malloc (_Size=0x48) returned 0xd5c700 [0221.123] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9c14b05, dwHighDateTime=0x1d92b8f)) [0221.123] SetEvent (hEvent=0x24c) returned 1 [0221.123] malloc (_Size=0x18) returned 0xd97bc0 [0221.123] SafeArrayPutElement (psa=0x593ad0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0221.123] free (_Block=0xd97bc0) [0221.123] malloc (_Size=0x18) returned 0xd97d20 [0221.123] SafeArrayPutElement (psa=0x593ad0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0221.123] free (_Block=0xd97d20) [0221.123] malloc (_Size=0x18) returned 0xd97ba0 [0221.123] SafeArrayPutElement (psa=0x593ad0, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0221.123] free (_Block=0xd97ba0) [0221.124] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1600 [0221.124] SafeArrayGetDim (psa=0x593ad0) returned 0x1 [0221.124] SafeArrayGetLBound (in: psa=0x593ad0, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0221.124] SafeArrayGetUBound (in: psa=0x593ad0, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0221.124] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b01e0 [0221.124] SafeArrayGetDim (psa=0x593ad0) returned 0x1 [0221.124] SafeArrayGetUBound (in: psa=0x593ad0, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0221.124] SafeArrayGetElemsize (psa=0x593ad0) returned 0x8 [0221.124] SafeArrayGetElement (in: psa=0x593ad0, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0221.124] memcpy (in: _Dst=0x115d438, _Src=0x596520, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0221.124] memcpy (in: _Dst=0x115d438, _Src=0x596528, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0221.125] memcpy (in: _Dst=0x115d438, _Src=0x596530, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0221.125] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b01e0) returned 1 [0221.126] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1600) returned 1 [0221.126] SetEvent (hEvent=0x24c) returned 1 [0221.127] free (_Block=0xd5c700) [0221.127] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0221.127] malloc (_Size=0x48) returned 0xd5c700 [0221.127] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9c14b05, dwHighDateTime=0x1d92b8f)) [0221.127] SetEvent (hEvent=0x24c) returned 1 [0221.127] SetEvent (hEvent=0x24c) returned 1 [0221.128] free (_Block=0xd5c700) [0221.128] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.131] malloc (_Size=0x48) returned 0xd5c700 [0221.131] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9c426e3, dwHighDateTime=0x1d92b8f)) [0221.131] SetEvent (hEvent=0x24c) returned 1 [0221.132] SetEvent (hEvent=0x24c) returned 1 [0221.133] free (_Block=0xd5c700) [0221.133] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.133] malloc (_Size=0x48) returned 0xd5c700 [0221.133] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9c426e3, dwHighDateTime=0x1d92b8f)) [0221.133] SetEvent (hEvent=0x24c) returned 1 [0221.134] SetEvent (hEvent=0x24c) returned 1 [0221.134] free (_Block=0xd5c700) [0221.135] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.135] malloc (_Size=0x48) returned 0xd5c700 [0221.135] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9c426e3, dwHighDateTime=0x1d92b8f)) [0221.135] SetEvent (hEvent=0x24c) returned 1 [0221.136] SetEvent (hEvent=0x24c) returned 1 [0221.137] free (_Block=0xd5c700) [0221.137] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.137] malloc (_Size=0x48) returned 0xd5c700 [0221.137] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9c426e3, dwHighDateTime=0x1d92b8f)) [0221.137] SetEvent (hEvent=0x24c) returned 1 [0221.140] SetEvent (hEvent=0x24c) returned 1 [0221.140] free (_Block=0xd5c700) [0221.141] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.143] malloc (_Size=0x48) returned 0xd5c700 [0221.143] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.144] SetEvent (hEvent=0x24c) returned 1 [0221.145] SetEvent (hEvent=0x24c) returned 1 [0221.145] free (_Block=0xd5c700) [0221.146] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x37, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0221.146] malloc (_Size=0x48) returned 0xd5c700 [0221.146] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.146] SetEvent (hEvent=0x24c) returned 1 [0221.148] SetEvent (hEvent=0x24c) returned 1 [0221.148] free (_Block=0xd5c700) [0221.149] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x37, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0221.149] malloc (_Size=0x48) returned 0xd5c700 [0221.149] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.149] SetEvent (hEvent=0x24c) returned 1 [0221.150] SetEvent (hEvent=0x24c) returned 1 [0221.151] free (_Block=0xd5c700) [0221.151] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x37, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0221.151] malloc (_Size=0x48) returned 0xd5c700 [0221.151] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.151] SetEvent (hEvent=0x24c) returned 1 [0221.153] SetEvent (hEvent=0x24c) returned 1 [0221.154] free (_Block=0xd5c700) [0221.154] CM_Get_Device_IDA (in: dnDevInst=0x38, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="ROOT\\RDPBUS\\0000") returned 0x0 [0221.154] malloc (_Size=0x48) returned 0xd5c700 [0221.154] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.154] SetEvent (hEvent=0x24c) returned 1 [0221.155] SetEvent (hEvent=0x24c) returned 1 [0221.156] free (_Block=0xd5c700) [0221.156] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0221.156] malloc (_Size=0x1a) returned 0xd5f480 [0221.156] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd5f480, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd5f480, pulLength=0x115d7d8) returned 0x0 [0221.156] free (_Block=0xd5f480) [0221.157] malloc (_Size=0x48) returned 0xd5c570 [0221.157] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.157] SetEvent (hEvent=0x24c) returned 1 [0221.157] malloc (_Size=0x18) returned 0xd978c0 [0221.157] SafeArrayPutElement (psa=0x593610, rgIndices=0x115d8a8, pv=0x597d98) returned 0x0 [0221.157] free (_Block=0xd978c0) [0221.157] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1200 [0221.157] SafeArrayGetDim (psa=0x593610) returned 0x1 [0221.157] SafeArrayGetLBound (in: psa=0x593610, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0221.158] SafeArrayGetUBound (in: psa=0x593610, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0221.158] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5affd0 [0221.158] SafeArrayGetDim (psa=0x593610) returned 0x1 [0221.158] SafeArrayGetUBound (in: psa=0x593610, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0221.158] SafeArrayGetElemsize (psa=0x593610) returned 0x8 [0221.158] SafeArrayGetElement (in: psa=0x593610, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0221.158] memcpy (in: _Dst=0x115d438, _Src=0x578470, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0221.159] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5affd0) returned 1 [0221.160] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1200) returned 1 [0221.161] SetEvent (hEvent=0x24c) returned 1 [0221.161] free (_Block=0xd5c570) [0221.161] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x25 [0221.161] malloc (_Size=0x48) returned 0xd5c700 [0221.161] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9c8f207, dwHighDateTime=0x1d92b8f)) [0221.162] SetEvent (hEvent=0x24c) returned 1 [0221.162] SetEvent (hEvent=0x24c) returned 1 [0221.163] free (_Block=0xd5c700) [0221.163] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.167] malloc (_Size=0x48) returned 0xd5c700 [0221.167] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9c8f207, dwHighDateTime=0x1d92b8f)) [0221.167] SetEvent (hEvent=0x24c) returned 1 [0221.168] SetEvent (hEvent=0x24c) returned 1 [0221.168] free (_Block=0xd5c700) [0221.168] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.169] malloc (_Size=0x48) returned 0xd5c570 [0221.169] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9c8f207, dwHighDateTime=0x1d92b8f)) [0221.169] SetEvent (hEvent=0x24c) returned 1 [0221.169] SetEvent (hEvent=0x24c) returned 1 [0221.170] free (_Block=0xd5c570) [0221.170] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.170] malloc (_Size=0x48) returned 0xd5c700 [0221.170] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9c8f207, dwHighDateTime=0x1d92b8f)) [0221.170] SetEvent (hEvent=0x24c) returned 1 [0221.171] SetEvent (hEvent=0x24c) returned 1 [0221.171] free (_Block=0xd5c700) [0221.171] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.172] malloc (_Size=0x48) returned 0xd5c570 [0221.172] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9c8f207, dwHighDateTime=0x1d92b8f)) [0221.172] SetEvent (hEvent=0x24c) returned 1 [0221.177] malloc (_Size=0xd8) returned 0xd64670 [0221.177] LoadLibraryExW (lpLibFileName="CFGMGR32.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffa5bfb0000 [0221.177] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Connect_MachineA") returned 0x7ffa5bfcd2c0 [0221.177] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disconnect_Machine") returned 0x7ffa5bfcd3b0 [0221.177] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Locate_DevNodeW") returned 0x7ffa5bfb9760 [0221.177] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Enable_DevNode") returned 0x7ffa5bfce9f0 [0221.177] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Disable_DevNode") returned 0x7ffa5bfce8a0 [0221.177] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Registry_PropertyW") returned 0x7ffa5bfba490 [0221.177] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_PropertyW") returned 0x7ffa5bfbacf0 [0221.178] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Property_Keys") returned 0x7ffa5bfd5260 [0221.178] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Child") returned 0x7ffa5bfbe670 [0221.178] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Sibling") returned 0x7ffa5bfc1650 [0221.178] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_DevNode_Status") returned 0x7ffa5bfb91c0 [0221.178] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_First_Log_Conf") returned 0x7ffa5bfbd410 [0221.178] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Next_Res_Des") returned 0x7ffa5bfc2180 [0221.178] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data") returned 0x7ffa5bfd14b0 [0221.178] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Res_Des_Data_Size") returned 0x7ffa5bfd16a0 [0221.178] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Log_Conf_Handle") returned 0x7ffa5bfcdfb0 [0221.178] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Free_Res_Des_Handle") returned 0x7ffa5bfd1400 [0221.178] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_IDA") returned 0x7ffa5bfbcd50 [0221.179] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Device_ID_Size") returned 0x7ffa5bfd46e0 [0221.179] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_Get_Parent") returned 0x7ffa5bfbd000 [0221.179] GetProcAddress (hModule=0x7ffa5bfb0000, lpProcName="CM_MapCrToSpErr") returned 0x7ffa5bfb2570 [0221.179] malloc (_Size=0x18) returned 0xd97d80 [0221.179] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.180] malloc (_Size=0x48) returned 0xd5c570 [0221.180] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9cad35f, dwHighDateTime=0x1d92b8f)) [0221.180] SetEvent (hEvent=0x24c) returned 1 [0221.181] SetEvent (hEvent=0x24c) returned 1 [0221.182] free (_Block=0xd5c570) [0221.182] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x38, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0221.182] malloc (_Size=0x48) returned 0xd5c570 [0221.182] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x9cad35f, dwHighDateTime=0x1d92b8f)) [0221.183] SetEvent (hEvent=0x24c) returned 1 [0221.184] SetEvent (hEvent=0x24c) returned 1 [0221.185] free (_Block=0xd5c570) [0221.185] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x38, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0221.185] malloc (_Size=0x48) returned 0xd5c570 [0221.185] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x9cad35f, dwHighDateTime=0x1d92b8f)) [0221.186] SetEvent (hEvent=0x24c) returned 1 [0221.187] SetEvent (hEvent=0x24c) returned 1 [0221.188] free (_Block=0xd5c570) [0221.188] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x38, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0221.188] malloc (_Size=0x48) returned 0xd5c570 [0221.188] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9cad35f, dwHighDateTime=0x1d92b8f)) [0221.188] SetEvent (hEvent=0x24c) returned 1 [0221.190] SetEvent (hEvent=0x24c) returned 1 [0221.191] free (_Block=0xd5c570) [0221.192] CM_Get_Device_IDA (in: dnDevInst=0x39, Buffer=0x115d6c0, BufferLen=0xc9, ulFlags=0x0 | out: Buffer="PCI\\VEN_8086&DEV_293C&SUBSYS_11001AF4&REV_03\\3&11583659&0&18") returned 0x0 [0221.192] malloc (_Size=0x48) returned 0xd5c7f0 [0221.192] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d630 | out: lpSystemTimeAsFileTime=0x115d630*(dwLowDateTime=0x9cdcabd, dwHighDateTime=0x1d92b8f)) [0221.192] SetEvent (hEvent=0x24c) returned 1 [0221.193] SetEvent (hEvent=0x24c) returned 1 [0221.194] free (_Block=0xd5c7f0) [0221.194] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0221.194] malloc (_Size=0x124) returned 0xd649e0 [0221.194] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x2, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0221.194] free (_Block=0xd649e0) [0221.195] malloc (_Size=0x48) returned 0xd5c700 [0221.195] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9cdcabd, dwHighDateTime=0x1d92b8f)) [0221.195] SetEvent (hEvent=0x24c) returned 1 [0221.195] malloc (_Size=0x18) returned 0xd97d00 [0221.195] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0221.195] free (_Block=0xd97d00) [0221.195] malloc (_Size=0x18) returned 0xd978e0 [0221.195] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0221.195] free (_Block=0xd978e0) [0221.196] malloc (_Size=0x18) returned 0xd97b60 [0221.196] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0221.196] free (_Block=0xd97b60) [0221.196] malloc (_Size=0x18) returned 0xd97fe0 [0221.196] SafeArrayPutElement (psa=0x593010, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0221.196] free (_Block=0xd97fe0) [0221.196] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e1c00 [0221.196] SafeArrayGetDim (psa=0x593010) returned 0x1 [0221.196] SafeArrayGetLBound (in: psa=0x593010, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0221.196] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0221.196] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5afc70 [0221.196] SafeArrayGetDim (psa=0x593010) returned 0x1 [0221.196] SafeArrayGetUBound (in: psa=0x593010, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0221.196] SafeArrayGetElemsize (psa=0x593010) returned 0x8 [0221.196] SafeArrayGetElement (in: psa=0x593010, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0221.197] memcpy (in: _Dst=0x115d438, _Src=0x5afdf0, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0221.197] memcpy (in: _Dst=0x115d438, _Src=0x5afdf8, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0221.197] memcpy (in: _Dst=0x115d438, _Src=0x5afe00, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0221.197] memcpy (in: _Dst=0x115d438, _Src=0x5afe08, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0221.198] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5afc70) returned 1 [0221.198] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e1c00) returned 1 [0221.199] SetEvent (hEvent=0x24c) returned 1 [0221.199] free (_Block=0xd5c700) [0221.199] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0x0, pulLength=0x115d7d8) returned 0x1a [0221.199] malloc (_Size=0x10e) returned 0xd649e0 [0221.200] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x3, pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8, ulFlags=0x0 | out: pulRegDataType=0x115d740, Buffer=0xd649e0, pulLength=0x115d7d8) returned 0x0 [0221.200] free (_Block=0xd649e0) [0221.200] malloc (_Size=0x48) returned 0xd5c750 [0221.200] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d6a0 | out: lpSystemTimeAsFileTime=0x115d6a0*(dwLowDateTime=0x9cdcabd, dwHighDateTime=0x1d92b8f)) [0221.200] SetEvent (hEvent=0x24c) returned 1 [0221.201] malloc (_Size=0x18) returned 0xd97e00 [0221.201] SafeArrayPutElement (psa=0x5930d0, rgIndices=0x115d8a8, pv=0x13123d8) returned 0x0 [0221.201] free (_Block=0xd97e00) [0221.201] malloc (_Size=0x18) returned 0xd97b20 [0221.201] SafeArrayPutElement (psa=0x5930d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0221.201] free (_Block=0xd97b20) [0221.201] malloc (_Size=0x18) returned 0xd979e0 [0221.201] SafeArrayPutElement (psa=0x5930d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0221.201] free (_Block=0xd979e0) [0221.201] malloc (_Size=0x18) returned 0xd97e60 [0221.202] SafeArrayPutElement (psa=0x5930d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0221.202] free (_Block=0xd97e60) [0221.202] malloc (_Size=0x18) returned 0xd97940 [0221.202] SafeArrayPutElement (psa=0x5930d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0221.202] free (_Block=0xd97940) [0221.202] malloc (_Size=0x18) returned 0xd97a20 [0221.202] SafeArrayPutElement (psa=0x5930d0, rgIndices=0x115d8a8, pv=0x1313508) returned 0x0 [0221.202] free (_Block=0xd97a20) [0221.202] malloc (_Size=0x18) returned 0xd97a20 [0221.202] SafeArrayPutElement (psa=0x5930d0, rgIndices=0x115d8a8, pv=0x588778) returned 0x0 [0221.202] free (_Block=0xd97a20) [0221.202] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x78) returned 0x5e2b00 [0221.202] SafeArrayGetDim (psa=0x5930d0) returned 0x1 [0221.202] SafeArrayGetLBound (in: psa=0x5930d0, nDim=0x1, plLbound=0x115d570 | out: plLbound=0x115d570) returned 0x0 [0221.202] SafeArrayGetUBound (in: psa=0x5930d0, nDim=0x1, plUbound=0x115d590 | out: plUbound=0x115d590) returned 0x0 [0221.202] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x28) returned 0x5b0210 [0221.202] SafeArrayGetDim (psa=0x5930d0) returned 0x1 [0221.202] SafeArrayGetUBound (in: psa=0x5930d0, nDim=0x1, plUbound=0x115d538 | out: plUbound=0x115d538) returned 0x0 [0221.202] SafeArrayGetElemsize (psa=0x5930d0) returned 0x8 [0221.202] SafeArrayGetElement (in: psa=0x5930d0, rgIndices=0x115d428, pv=0x115d430 | out: pv=0x115d430) returned 0x0 [0221.203] memcpy (in: _Dst=0x115d438, _Src=0x593140, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0221.203] memcpy (in: _Dst=0x115d438, _Src=0x593148, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0221.203] memcpy (in: _Dst=0x115d438, _Src=0x593150, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0221.203] memcpy (in: _Dst=0x115d438, _Src=0x593158, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0221.203] memcpy (in: _Dst=0x115d438, _Src=0x593160, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0221.203] memcpy (in: _Dst=0x115d438, _Src=0x593168, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0221.204] memcpy (in: _Dst=0x115d438, _Src=0x593170, _Size=0x8 | out: _Dst=0x115d438) returned 0x115d438 [0221.204] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5b0210) returned 1 [0221.205] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5e2b00) returned 1 [0221.205] SetEvent (hEvent=0x24c) returned 1 [0221.206] free (_Block=0xd5c750) [0221.206] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0xc, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.208] malloc (_Size=0x48) returned 0xd5c700 [0221.208] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9cf99c0, dwHighDateTime=0x1d92b8f)) [0221.209] SetEvent (hEvent=0x24c) returned 1 [0221.210] SetEvent (hEvent=0x24c) returned 1 [0221.211] free (_Block=0xd5c700) [0221.211] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x9, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.211] malloc (_Size=0x48) returned 0xd5c570 [0221.211] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9cf99c0, dwHighDateTime=0x1d92b8f)) [0221.211] SetEvent (hEvent=0x24c) returned 1 [0221.212] SetEvent (hEvent=0x24c) returned 1 [0221.213] free (_Block=0xd5c570) [0221.213] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x8, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.213] malloc (_Size=0x48) returned 0xd5c570 [0221.213] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9cf99c0, dwHighDateTime=0x1d92b8f)) [0221.213] SetEvent (hEvent=0x24c) returned 1 [0221.214] SetEvent (hEvent=0x24c) returned 1 [0221.215] free (_Block=0xd5c570) [0221.215] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x5, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.215] malloc (_Size=0x48) returned 0xd5c570 [0221.215] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9cf99c0, dwHighDateTime=0x1d92b8f)) [0221.215] SetEvent (hEvent=0x24c) returned 1 [0221.218] SetEvent (hEvent=0x24c) returned 1 [0221.219] free (_Block=0xd5c570) [0221.225] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0x1, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x0 [0221.227] malloc (_Size=0x48) returned 0xd5c570 [0221.228] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9d1fcf5, dwHighDateTime=0x1d92b8f)) [0221.228] SetEvent (hEvent=0x24c) returned 1 [0221.228] SetEvent (hEvent=0x24c) returned 1 [0221.229] free (_Block=0xd5c570) [0221.229] CM_Get_DevNode_Status (in: pulStatus=0x115d7d8, pulProblemNumber=0x115d780, dnDevInst=0x39, ulFlags=0x0 | out: pulStatus=0x115d7d8, pulProblemNumber=0x115d780) returned 0x0 [0221.229] malloc (_Size=0x48) returned 0xd5c570 [0221.229] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d700 | out: lpSystemTimeAsFileTime=0x115d700*(dwLowDateTime=0x9d1fcf5, dwHighDateTime=0x1d92b8f)) [0221.229] SetEvent (hEvent=0x24c) returned 1 [0221.231] SetEvent (hEvent=0x24c) returned 1 [0221.232] free (_Block=0xd5c570) [0221.232] CM_Get_First_Log_Conf (in: plcLogConf=0x115d7c8, dnDevInst=0x39, ulFlags=0x4 | out: plcLogConf=0x115d7c8) returned 0xe [0221.232] malloc (_Size=0x48) returned 0xd5c570 [0221.232] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115d720 | out: lpSystemTimeAsFileTime=0x115d720*(dwLowDateTime=0x9d1fcf5, dwHighDateTime=0x1d92b8f)) [0221.232] SetEvent (hEvent=0x24c) returned 1 [0221.233] SetEvent (hEvent=0x24c) returned 1 [0221.234] free (_Block=0xd5c570) [0221.234] CM_Get_DevNode_Registry_PropertyW (in: dnDevInst=0x39, ulProperty=0xd, pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54, ulFlags=0x0 | out: pulRegDataType=0x115cf50, Buffer=0x115cf60, pulLength=0x115cf54) returned 0x25 [0221.234] malloc (_Size=0x48) returned 0xd5c700 [0221.234] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x115cf10 | out: lpSystemTimeAsFileTime=0x115cf10*(dwLowDateTime=0x9d1fcf5, dwHighDateTime=0x1d92b8f)) [0221.234] SetEvent (hEvent=0x24c) returned 1 [0221.236] free (_Block=0xd972b0) [0221.237] free (_Block=0xd97790) [0221.238] free (_Block=0xd96d10) [0221.239] free (_Block=0xd96890) [0221.239] free (_Block=0xd97310) [0221.240] free (_Block=0xd968f0) [0221.241] free (_Block=0xd97070) [0221.241] free (_Block=0xd96d70) [0221.242] free (_Block=0xd976d0) [0221.243] free (_Block=0xd96a10) [0221.243] free (_Block=0xd96950) [0221.244] free (_Block=0xd96dd0) [0221.245] free (_Block=0xd969b0) [0221.245] free (_Block=0xd96b90) [0221.246] free (_Block=0xd96e30) [0221.247] free (_Block=0xd96a70) [0221.247] free (_Block=0xd97730) [0221.248] free (_Block=0xd96ad0) [0221.248] free (_Block=0xd96b30) [0221.249] free (_Block=0xd96e90) [0221.249] free (_Block=0xd970d0) [0221.249] free (_Block=0xd96bf0) [0221.249] free (_Block=0xd96c50) [0221.250] free (_Block=0xd97430) [0221.251] free (_Block=0xd96ef0) [0221.251] free (_Block=0xd96f50) [0221.251] free (_Block=0xd96cb0) [0221.252] free (_Block=0xd96fb0) [0221.252] free (_Block=0xd97010) [0221.253] free (_Block=0xd97130) [0221.253] free (_Block=0xd97550) [0221.254] free (_Block=0xd97190) [0221.254] free (_Block=0xd971f0) [0221.255] free (_Block=0xd97250) [0221.255] free (_Block=0xd97370) [0221.256] free (_Block=0xd973d0) [0221.256] free (_Block=0xd97490) [0221.256] free (_Block=0xd974f0) [0221.257] free (_Block=0xd975b0) [0221.257] free (_Block=0xd97610) [0221.258] free (_Block=0xd97670) [0221.259] free (_Block=0xd643f0) [0221.259] free (_Block=0xd64210) [0221.260] free (_Block=0xd64450) [0221.260] free (_Block=0xd64510) [0221.261] free (_Block=0xd64090) [0221.261] free (_Block=0xd640f0) [0221.262] free (_Block=0xd64150) [0221.262] free (_Block=0xd645d0) [0221.263] free (_Block=0xd64270) [0221.263] free (_Block=0xd641b0) [0221.264] free (_Block=0xd642d0) [0221.264] free (_Block=0xd64030) [0221.265] free (_Block=0xd64390) [0221.265] free (_Block=0xd64330) [0221.266] free (_Block=0xd63eb0) [0221.269] free (_Block=0xd644b0) [0221.275] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578420 [0221.275] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578420, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0221.275] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578420) returned 1 [0221.275] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0226.142] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0226.225] RtlRestoreLastWin32Error () returned 0x3f1000 [0226.225] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115e010 | out: pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115e010) returned 1 [0226.226] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578430 [0226.226] RtlRestoreLastWin32Error () returned 0x3f1000 [0226.226] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x578430, pcchLanguagesBuffer=0x115e010 | out: pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x578430, pcchLanguagesBuffer=0x115e010) returned 1 [0226.226] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578470 [0226.226] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578430) returned 1 [0226.226] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596520 [0226.226] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596520, pulNumLanguages=0x115e118 | out: pulNumLanguages=0x115e118) returned 1 [0226.226] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596520) returned 1 [0226.228] malloc (_Size=0x600) returned 0xd61910 [0226.228] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x115d7f8 | out: Buffer=0x0, ReturnedLength=0x115d7f8) returned 0 [0226.228] GetLastError () returned 0x7a [0226.228] malloc (_Size=0x250) returned 0xd61f20 [0226.228] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0xd61f20, ReturnedLength=0x115d7f8 | out: Buffer=0xd61f20, ReturnedLength=0x115d7f8) returned 1 [0226.228] GetActiveProcessorCount (GroupNumber=0xffff) returned 0x4 [0226.228] GetMaximumProcessorGroupCount () returned 0x1 [0226.228] malloc (_Size=0x40) returned 0xd5c570 [0226.228] malloc (_Size=0x40) returned 0xd5c700 [0226.228] malloc (_Size=0x8) returned 0xd654d0 [0226.228] memcpy (in: _Dst=0xd5c570, _Src=0xd61f40, _Size=0x10 | out: _Dst=0xd5c570) returned 0xd5c570 [0226.228] GetActiveProcessorCount (GroupNumber=0x0) returned 0x4 [0226.228] NtPowerInformation (in: InformationLevel=0x2e, InputBuffer=0x115d7f0, InputBufferLength=0x2, OutputBuffer=0xd61910, OutputBufferLength=0x60 | out: OutputBuffer=0xd61910) returned 0x0 [0226.228] _vsnwprintf (in: _Buffer=0x115d690, _BufferCount=0x63, _Format="CPU%d", _ArgList=0x115cf88 | out: _Buffer="CPU0") returned 4 [0226.229] GetCurrentThread () returned 0xfffffffffffffffe [0226.229] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0x115cee0, PreviousGroupAffinity=0x115cef0 | out: PreviousGroupAffinity=0x115cef0) returned 1 [0226.229] GetSystemInfo (in: lpSystemInfo=0x115d020 | out: lpSystemInfo=0x115d020*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0226.229] mbstowcs (in: _Dest=0x115d2a8, _Source="GenuineIntel", _MaxCount=0x28 | out: _Dest="GenuineIntel") returned 0xc [0226.229] _wcsicmp (_String1="GenuineIntel", _String2="GenuineIntel") returned 0 [0226.230] mbstowcs (in: _Dest=0x115d118, _Source="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", _MaxCount=0x28 | out: _Dest="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x27 [0226.230] GetCurrentThread () returned 0xfffffffffffffffe [0226.230] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0x115cef0, PreviousGroupAffinity=0x0 | out: PreviousGroupAffinity=0x0) returned 1 [0226.234] LoadStringW (in: hInstance=0x7ffa4cbb0000, uID=0x2c, lpBuffer=0x115ccf0, cchBufferMax=256 | out: lpBuffer="CPU %d") returned 0x6 [0226.268] malloc (_Size=0x35140) returned 0xd98860 [0226.274] _wtoi (_String="238") returned 238 [0226.275] _wtoi (_String="6") returned 6 [0226.275] _itow (in: _Dest=0x0, _Radix=18208192 | out: _Dest=0x0) returned="0" [0226.275] _itow (in: _Dest=0xee, _Radix=18206480 | out: _Dest=0xee) returned="238" [0226.275] malloc (_Size=0x4000) returned 0xdcd9b0 [0226.275] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x0, lpData=0xdcd9b0, lpcbData=0x115cee4*=0x4000 | out: lpType=0x0, lpData=0xdcd9b0*=0x50, lpcbData=0x115cee4*=0x600) returned 0x0 [0226.276] free (_Block=0xdcd9b0) [0226.276] Sleep (dwMilliseconds=0x3e8) [0227.288] _itow (in: _Dest=0xee, _Radix=18206480 | out: _Dest=0xee) returned="238" [0227.288] malloc (_Size=0x4000) returned 0xdcd9b0 [0227.288] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x0, lpData=0xdcd9b0, lpcbData=0x115cee4*=0x4000 | out: lpType=0x0, lpData=0xdcd9b0*=0x50, lpcbData=0x115cee4*=0x600) returned 0x0 [0227.289] free (_Block=0xdcd9b0) [0227.293] free (_Block=0xd98860) [0227.300] _vsnwprintf (in: _Buffer=0x115d5c0, _BufferCount=0x40, _Format="%04X%04X%04X%04X", _ArgList=0x115cf88 | out: _Buffer="0F8BFBFF00050654") returned 16 [0227.302] lstrlenW (lpString=" 0") returned 2 [0227.302] lstrlenW (lpString="Intel(R) Xeon(R) Gold 6126 CPU @ 2.60GHz") returned 40 [0227.303] lstrlenW (lpString="") returned 0 [0227.303] lstrlenW (lpString="") returned 0 [0227.304] lstrlenW (lpString="") returned 0 [0227.307] IsProcessorFeaturePresent (ProcessorFeature=0x14) returned 1 [0227.308] IsProcessorFeaturePresent (ProcessorFeature=0x15) returned 1 [0227.308] RtlNumberOfSetBitsUlongPtr (Target=0x1) returned 0x1 [0227.309] RtlNumberOfSetBitsUlongPtr (Target=0x2) returned 0x1 [0227.309] RtlNumberOfSetBitsUlongPtr (Target=0x4) returned 0x1 [0227.309] RtlNumberOfSetBitsUlongPtr (Target=0x8) returned 0x1 [0227.309] _vsnwprintf (in: _Buffer=0x115d880, _BufferCount=0x63, _Format="CPU%d", _ArgList=0x115d7c8 | out: _Buffer="CPU0") returned 4 [0227.310] free (_Block=0xd654d0) [0227.311] free (_Block=0xd5c700) [0227.311] free (_Block=0xd5c570) [0227.312] free (_Block=0xd61f20) [0227.312] free (_Block=0xd61910) [0227.330] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x578420 [0227.330] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x578420, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0227.330] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578420) returned 1 [0227.330] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578470) returned 1 [0227.421] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0227.639] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0227.731] RtlRestoreLastWin32Error () returned 0x3f1000 [0227.732] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115e010 | out: pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115e010) returned 1 [0227.732] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578470 [0227.732] RtlRestoreLastWin32Error () returned 0x3f1000 [0227.732] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x578470, pcchLanguagesBuffer=0x115e010 | out: pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x578470, pcchLanguagesBuffer=0x115e010) returned 1 [0227.732] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783c0 [0227.732] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578470) returned 1 [0227.732] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x5968c0 [0227.732] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5968c0, pulNumLanguages=0x115e118 | out: pulNumLanguages=0x115e118) returned 1 [0227.732] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5968c0) returned 1 [0227.734] malloc (_Size=0x600) returned 0xd61910 [0227.734] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x115d7f8 | out: Buffer=0x0, ReturnedLength=0x115d7f8) returned 0 [0227.734] GetLastError () returned 0x7a [0227.734] malloc (_Size=0x250) returned 0xd61f20 [0227.734] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0xd61f20, ReturnedLength=0x115d7f8 | out: Buffer=0xd61f20, ReturnedLength=0x115d7f8) returned 1 [0227.734] GetActiveProcessorCount (GroupNumber=0xffff) returned 0x4 [0227.734] GetMaximumProcessorGroupCount () returned 0x1 [0227.734] malloc (_Size=0x40) returned 0xd5c570 [0227.734] malloc (_Size=0x40) returned 0xd5c700 [0227.734] malloc (_Size=0x8) returned 0xd65430 [0227.734] memcpy (in: _Dst=0xd5c570, _Src=0xd61f40, _Size=0x10 | out: _Dst=0xd5c570) returned 0xd5c570 [0227.734] GetActiveProcessorCount (GroupNumber=0x0) returned 0x4 [0227.734] NtPowerInformation (in: InformationLevel=0x2e, InputBuffer=0x115d7f0, InputBufferLength=0x2, OutputBuffer=0xd61910, OutputBufferLength=0x60 | out: OutputBuffer=0xd61910) returned 0x0 [0227.734] _vsnwprintf (in: _Buffer=0x115d690, _BufferCount=0x63, _Format="CPU%d", _ArgList=0x115cf88 | out: _Buffer="CPU0") returned 4 [0227.735] GetCurrentThread () returned 0xfffffffffffffffe [0227.735] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0x115cee0, PreviousGroupAffinity=0x115cef0 | out: PreviousGroupAffinity=0x115cef0) returned 1 [0227.735] GetSystemInfo (in: lpSystemInfo=0x115d020 | out: lpSystemInfo=0x115d020*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0227.735] mbstowcs (in: _Dest=0x115d2a8, _Source="GenuineIntel", _MaxCount=0x28 | out: _Dest="GenuineIntel") returned 0xc [0227.736] _wcsicmp (_String1="GenuineIntel", _String2="GenuineIntel") returned 0 [0227.736] mbstowcs (in: _Dest=0x115d118, _Source="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", _MaxCount=0x28 | out: _Dest="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x27 [0227.736] GetCurrentThread () returned 0xfffffffffffffffe [0227.736] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0x115cef0, PreviousGroupAffinity=0x0 | out: PreviousGroupAffinity=0x0) returned 1 [0227.740] LoadStringW (in: hInstance=0x7ffa4cbb0000, uID=0x2c, lpBuffer=0x115ccf0, cchBufferMax=256 | out: lpBuffer="CPU %d") returned 0x6 [0227.765] malloc (_Size=0x35140) returned 0xd98860 [0227.772] _wtoi (_String="238") returned 238 [0227.772] _wtoi (_String="6") returned 6 [0227.772] _itow (in: _Dest=0x0, _Radix=18208192 | out: _Dest=0x0) returned="0" [0227.772] _itow (in: _Dest=0xee, _Radix=18206480 | out: _Dest=0xee) returned="238" [0227.772] malloc (_Size=0x4000) returned 0xdcd9b0 [0227.773] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x0, lpData=0xdcd9b0, lpcbData=0x115cee4*=0x4000 | out: lpType=0x0, lpData=0xdcd9b0*=0x50, lpcbData=0x115cee4*=0x600) returned 0x0 [0227.774] free (_Block=0xdcd9b0) [0227.774] Sleep (dwMilliseconds=0x3e8) [0228.785] _itow (in: _Dest=0xee, _Radix=18206480 | out: _Dest=0xee) returned="238" [0228.785] malloc (_Size=0x4000) returned 0xdcd9b0 [0228.785] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x0, lpData=0xdcd9b0, lpcbData=0x115cee4*=0x4000 | out: lpType=0x0, lpData=0xdcd9b0*=0x50, lpcbData=0x115cee4*=0x600) returned 0x0 [0228.786] free (_Block=0xdcd9b0) [0228.791] free (_Block=0xd98860) [0228.796] _vsnwprintf (in: _Buffer=0x115d5c0, _BufferCount=0x40, _Format="%04X%04X%04X%04X", _ArgList=0x115cf88 | out: _Buffer="0F8BFBFF00050654") returned 16 [0228.797] lstrlenW (lpString=" 0") returned 2 [0228.797] lstrlenW (lpString="Intel(R) Xeon(R) Gold 6126 CPU @ 2.60GHz") returned 40 [0228.798] lstrlenW (lpString="") returned 0 [0228.798] lstrlenW (lpString="") returned 0 [0228.799] lstrlenW (lpString="") returned 0 [0228.801] IsProcessorFeaturePresent (ProcessorFeature=0x14) returned 1 [0228.801] IsProcessorFeaturePresent (ProcessorFeature=0x15) returned 1 [0228.802] RtlNumberOfSetBitsUlongPtr (Target=0x1) returned 0x1 [0228.802] RtlNumberOfSetBitsUlongPtr (Target=0x2) returned 0x1 [0228.802] RtlNumberOfSetBitsUlongPtr (Target=0x4) returned 0x1 [0228.802] RtlNumberOfSetBitsUlongPtr (Target=0x8) returned 0x1 [0228.802] _vsnwprintf (in: _Buffer=0x115d880, _BufferCount=0x63, _Format="CPU%d", _ArgList=0x115d7c8 | out: _Buffer="CPU0") returned 4 [0228.804] free (_Block=0xd65430) [0228.804] free (_Block=0xd5c700) [0228.804] free (_Block=0xd5c570) [0228.805] free (_Block=0xd61f20) [0228.805] free (_Block=0xd61910) [0228.812] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x5783d0 [0228.812] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5783d0, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0228.812] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783d0) returned 1 [0228.812] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0228.919] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0229.054] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0229.139] RtlRestoreLastWin32Error () returned 0x3f1000 [0229.139] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115e010 | out: pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115e010) returned 1 [0229.139] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783c0 [0229.139] RtlRestoreLastWin32Error () returned 0x3f1000 [0229.139] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x5783c0, pcchLanguagesBuffer=0x115e010 | out: pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x5783c0, pcchLanguagesBuffer=0x115e010) returned 1 [0229.139] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783d0 [0229.139] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0229.139] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596520 [0229.139] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596520, pulNumLanguages=0x115e118 | out: pulNumLanguages=0x115e118) returned 1 [0229.139] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596520) returned 1 [0229.141] malloc (_Size=0x600) returned 0xd61910 [0229.141] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x115d7f8 | out: Buffer=0x0, ReturnedLength=0x115d7f8) returned 0 [0229.141] GetLastError () returned 0x7a [0229.141] malloc (_Size=0x250) returned 0xd61f20 [0229.141] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0xd61f20, ReturnedLength=0x115d7f8 | out: Buffer=0xd61f20, ReturnedLength=0x115d7f8) returned 1 [0229.141] GetActiveProcessorCount (GroupNumber=0xffff) returned 0x4 [0229.141] GetMaximumProcessorGroupCount () returned 0x1 [0229.141] malloc (_Size=0x40) returned 0xd5c570 [0229.141] malloc (_Size=0x40) returned 0xd5c700 [0229.141] malloc (_Size=0x8) returned 0xd65410 [0229.141] memcpy (in: _Dst=0xd5c570, _Src=0xd61f40, _Size=0x10 | out: _Dst=0xd5c570) returned 0xd5c570 [0229.142] GetActiveProcessorCount (GroupNumber=0x0) returned 0x4 [0229.142] NtPowerInformation (in: InformationLevel=0x2e, InputBuffer=0x115d7f0, InputBufferLength=0x2, OutputBuffer=0xd61910, OutputBufferLength=0x60 | out: OutputBuffer=0xd61910) returned 0x0 [0229.142] _vsnwprintf (in: _Buffer=0x115d690, _BufferCount=0x63, _Format="CPU%d", _ArgList=0x115cf88 | out: _Buffer="CPU0") returned 4 [0229.142] GetCurrentThread () returned 0xfffffffffffffffe [0229.142] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0x115cee0, PreviousGroupAffinity=0x115cef0 | out: PreviousGroupAffinity=0x115cef0) returned 1 [0229.142] GetSystemInfo (in: lpSystemInfo=0x115d020 | out: lpSystemInfo=0x115d020*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0229.142] mbstowcs (in: _Dest=0x115d2a8, _Source="GenuineIntel", _MaxCount=0x28 | out: _Dest="GenuineIntel") returned 0xc [0229.142] _wcsicmp (_String1="GenuineIntel", _String2="GenuineIntel") returned 0 [0229.143] mbstowcs (in: _Dest=0x115d118, _Source="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", _MaxCount=0x28 | out: _Dest="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x27 [0229.143] GetCurrentThread () returned 0xfffffffffffffffe [0229.143] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0x115cef0, PreviousGroupAffinity=0x0 | out: PreviousGroupAffinity=0x0) returned 1 [0229.147] LoadStringW (in: hInstance=0x7ffa4cbb0000, uID=0x2c, lpBuffer=0x115ccf0, cchBufferMax=256 | out: lpBuffer="CPU %d") returned 0x6 [0229.174] malloc (_Size=0x35140) returned 0xd98860 [0229.179] _wtoi (_String="238") returned 238 [0229.179] _wtoi (_String="6") returned 6 [0229.179] _itow (in: _Dest=0x0, _Radix=18208192 | out: _Dest=0x0) returned="0" [0229.179] _itow (in: _Dest=0xee, _Radix=18206480 | out: _Dest=0xee) returned="238" [0229.179] malloc (_Size=0x4000) returned 0xdcd9b0 [0229.179] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x0, lpData=0xdcd9b0, lpcbData=0x115cee4*=0x4000 | out: lpType=0x0, lpData=0xdcd9b0*=0x50, lpcbData=0x115cee4*=0x600) returned 0x0 [0229.181] free (_Block=0xdcd9b0) [0229.181] Sleep (dwMilliseconds=0x3e8) [0230.192] _itow (in: _Dest=0xee, _Radix=18206480 | out: _Dest=0xee) returned="238" [0230.192] malloc (_Size=0x4000) returned 0xdcd9b0 [0230.192] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x0, lpData=0xdcd9b0, lpcbData=0x115cee4*=0x4000 | out: lpType=0x0, lpData=0xdcd9b0*=0x50, lpcbData=0x115cee4*=0x600) returned 0x0 [0230.194] free (_Block=0xdcd9b0) [0230.197] free (_Block=0xd98860) [0230.218] _vsnwprintf (in: _Buffer=0x115d5c0, _BufferCount=0x40, _Format="%04X%04X%04X%04X", _ArgList=0x115cf88 | out: _Buffer="0F8BFBFF00050654") returned 16 [0230.220] lstrlenW (lpString=" 0") returned 2 [0230.221] lstrlenW (lpString="Intel(R) Xeon(R) Gold 6126 CPU @ 2.60GHz") returned 40 [0230.222] lstrlenW (lpString="") returned 0 [0230.223] lstrlenW (lpString="") returned 0 [0230.227] lstrlenW (lpString="") returned 0 [0230.234] IsProcessorFeaturePresent (ProcessorFeature=0x14) returned 1 [0230.236] IsProcessorFeaturePresent (ProcessorFeature=0x15) returned 1 [0230.238] RtlNumberOfSetBitsUlongPtr (Target=0x1) returned 0x1 [0230.238] RtlNumberOfSetBitsUlongPtr (Target=0x2) returned 0x1 [0230.239] RtlNumberOfSetBitsUlongPtr (Target=0x4) returned 0x1 [0230.242] RtlNumberOfSetBitsUlongPtr (Target=0x8) returned 0x1 [0230.242] _vsnwprintf (in: _Buffer=0x115d880, _BufferCount=0x63, _Format="CPU%d", _ArgList=0x115d7c8 | out: _Buffer="CPU0") returned 4 [0230.246] free (_Block=0xd65410) [0230.247] free (_Block=0xd5c700) [0230.247] free (_Block=0xd5c570) [0230.248] free (_Block=0xd61f20) [0230.249] free (_Block=0xd61910) [0230.267] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x5783c0 [0230.267] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5783c0, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0230.267] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0230.267] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783d0) returned 1 [0230.375] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0230.599] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0230.917] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0230.999] RtlRestoreLastWin32Error () returned 0x3f1000 [0230.999] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115e010 | out: pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115e010) returned 1 [0230.999] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x5783c0 [0230.999] RtlRestoreLastWin32Error () returned 0x3f1000 [0230.999] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x5783c0, pcchLanguagesBuffer=0x115e010 | out: pulNumLanguages=0x115e118, pwszLanguagesBuffer=0x5783c0, pcchLanguagesBuffer=0x115e010) returned 1 [0230.999] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578410 [0230.999] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0231.000] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596580 [0231.000] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596580, pulNumLanguages=0x115e118 | out: pulNumLanguages=0x115e118) returned 1 [0231.000] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596580) returned 1 [0231.002] malloc (_Size=0x600) returned 0xd61910 [0231.002] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x115d7f8 | out: Buffer=0x0, ReturnedLength=0x115d7f8) returned 0 [0231.002] GetLastError () returned 0x7a [0231.002] malloc (_Size=0x250) returned 0xd61f20 [0231.002] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0xd61f20, ReturnedLength=0x115d7f8 | out: Buffer=0xd61f20, ReturnedLength=0x115d7f8) returned 1 [0231.002] GetActiveProcessorCount (GroupNumber=0xffff) returned 0x4 [0231.002] GetMaximumProcessorGroupCount () returned 0x1 [0231.002] malloc (_Size=0x40) returned 0xd5c570 [0231.002] malloc (_Size=0x40) returned 0xd5c700 [0231.002] malloc (_Size=0x8) returned 0xd654e0 [0231.002] memcpy (in: _Dst=0xd5c570, _Src=0xd61f40, _Size=0x10 | out: _Dst=0xd5c570) returned 0xd5c570 [0231.002] GetActiveProcessorCount (GroupNumber=0x0) returned 0x4 [0231.002] NtPowerInformation (in: InformationLevel=0x2e, InputBuffer=0x115d7f0, InputBufferLength=0x2, OutputBuffer=0xd61910, OutputBufferLength=0x60 | out: OutputBuffer=0xd61910) returned 0x0 [0231.002] _vsnwprintf (in: _Buffer=0x115d690, _BufferCount=0x63, _Format="CPU%d", _ArgList=0x115cf88 | out: _Buffer="CPU0") returned 4 [0231.003] GetCurrentThread () returned 0xfffffffffffffffe [0231.003] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0x115cee0, PreviousGroupAffinity=0x115cef0 | out: PreviousGroupAffinity=0x115cef0) returned 1 [0231.003] GetSystemInfo (in: lpSystemInfo=0x115d020 | out: lpSystemInfo=0x115d020*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0231.003] mbstowcs (in: _Dest=0x115d2a8, _Source="GenuineIntel", _MaxCount=0x28 | out: _Dest="GenuineIntel") returned 0xc [0231.003] _wcsicmp (_String1="GenuineIntel", _String2="GenuineIntel") returned 0 [0231.004] mbstowcs (in: _Dest=0x115d118, _Source="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", _MaxCount=0x28 | out: _Dest="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x27 [0231.004] GetCurrentThread () returned 0xfffffffffffffffe [0231.004] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0x115cef0, PreviousGroupAffinity=0x0 | out: PreviousGroupAffinity=0x0) returned 1 [0231.008] LoadStringW (in: hInstance=0x7ffa4cbb0000, uID=0x2c, lpBuffer=0x115ccf0, cchBufferMax=256 | out: lpBuffer="CPU %d") returned 0x6 [0231.029] malloc (_Size=0x35140) returned 0xd98860 [0231.035] _wtoi (_String="238") returned 238 [0231.035] _wtoi (_String="6") returned 6 [0231.035] _itow (in: _Dest=0x0, _Radix=18208192 | out: _Dest=0x0) returned="0" [0231.035] _itow (in: _Dest=0xee, _Radix=18206480 | out: _Dest=0xee) returned="238" [0231.035] malloc (_Size=0x4000) returned 0xdcd9b0 [0231.035] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x0, lpData=0xdcd9b0, lpcbData=0x115cee4*=0x4000 | out: lpType=0x0, lpData=0xdcd9b0*=0x50, lpcbData=0x115cee4*=0x600) returned 0x0 [0231.036] free (_Block=0xdcd9b0) [0231.036] Sleep (dwMilliseconds=0x3e8) [0232.048] _itow (in: _Dest=0xee, _Radix=18206480 | out: _Dest=0xee) returned="238" [0232.049] malloc (_Size=0x4000) returned 0xdcd9b0 [0232.049] RegQueryValueExW (in: hKey=0xffffffff80000004, lpValueName="238", lpReserved=0x0, lpType=0x0, lpData=0xdcd9b0, lpcbData=0x115cee4*=0x4000 | out: lpType=0x0, lpData=0xdcd9b0*=0x50, lpcbData=0x115cee4*=0x600) returned 0x0 [0232.050] free (_Block=0xdcd9b0) [0232.054] free (_Block=0xd98860) [0232.060] _vsnwprintf (in: _Buffer=0x115d5c0, _BufferCount=0x40, _Format="%04X%04X%04X%04X", _ArgList=0x115cf88 | out: _Buffer="0F8BFBFF00050654") returned 16 [0232.061] lstrlenW (lpString=" 0") returned 2 [0232.061] lstrlenW (lpString="Intel(R) Xeon(R) Gold 6126 CPU @ 2.60GHz") returned 40 [0232.062] lstrlenW (lpString="") returned 0 [0232.062] lstrlenW (lpString="") returned 0 [0232.065] lstrlenW (lpString="") returned 0 [0232.067] IsProcessorFeaturePresent (ProcessorFeature=0x14) returned 1 [0232.067] IsProcessorFeaturePresent (ProcessorFeature=0x15) returned 1 [0232.068] RtlNumberOfSetBitsUlongPtr (Target=0x1) returned 0x1 [0232.068] RtlNumberOfSetBitsUlongPtr (Target=0x2) returned 0x1 [0232.068] RtlNumberOfSetBitsUlongPtr (Target=0x4) returned 0x1 [0232.068] RtlNumberOfSetBitsUlongPtr (Target=0x8) returned 0x1 [0232.068] _vsnwprintf (in: _Buffer=0x115d880, _BufferCount=0x63, _Format="CPU%d", _ArgList=0x115d7c8 | out: _Buffer="CPU0") returned 4 [0232.070] free (_Block=0xd654e0) [0232.070] free (_Block=0xd5c700) [0232.070] free (_Block=0xd5c570) [0232.070] free (_Block=0xd61f20) [0232.070] free (_Block=0xd61910) [0232.083] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x5783c0 [0232.083] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5783c0, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0232.083] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0232.083] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578410) returned 1 [0232.177] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0232.320] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0232.452] ?AddRef@?$CImpl@UIWbemObjectTextSrc@@VCWmiObjectTextSrc@@@@UEAAKXZ () returned 0x2 [0232.544] RtlRestoreLastWin32Error () returned 0x3f1000 [0232.544] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x115dff0) returned 1 [0232.544] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578410 [0232.544] RtlRestoreLastWin32Error () returned 0x3f1000 [0232.544] GetThreadPreferredUILanguages (in: dwFlags=0x40, pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578410, pcchLanguagesBuffer=0x115dff0 | out: pulNumLanguages=0x115e0f8, pwszLanguagesBuffer=0x578410, pcchLanguagesBuffer=0x115dff0) returned 1 [0232.544] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x8) returned 0x578420 [0232.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578410) returned 1 [0232.544] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x14) returned 0x596440 [0232.544] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x596440, pulNumLanguages=0x115e0f8 | out: pulNumLanguages=0x115e0f8) returned 1 [0232.544] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x596440) returned 1 [0232.545] SafeArrayGetElemsize (psa=0x593590) returned 0x8 [0232.545] SafeArrayPutElement (psa=0x593590, rgIndices=0x115d898, pv=0x5b0128) returned 0x0 [0232.545] SafeArrayRedim (in: psa=0x593590, psaboundNew=0x115d8b0 | out: psa=0x593590) returned 0x0 [0232.545] SafeArrayCopy (in: psa=0x593590, ppsaOut=0x115d800 | out: ppsaOut=0x115d800) returned 0x0 [0232.546] malloc (_Size=0x600) returned 0xd64670 [0232.546] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0x0, ReturnedLength=0x115d7f8 | out: Buffer=0x0, ReturnedLength=0x115d7f8) returned 0 [0232.546] GetLastError () returned 0x7a [0232.546] malloc (_Size=0x250) returned 0xd64c80 [0232.546] GetLogicalProcessorInformationEx (in: RelationshipType=0xffff, Buffer=0xd64c80, ReturnedLength=0x115d7f8 | out: Buffer=0xd64c80, ReturnedLength=0x115d7f8) returned 1 [0232.546] GetActiveProcessorCount (GroupNumber=0xffff) returned 0x4 [0232.546] GetMaximumProcessorGroupCount () returned 0x1 [0232.546] malloc (_Size=0x40) returned 0xd5c570 [0232.546] malloc (_Size=0x40) returned 0xd5c700 [0232.546] malloc (_Size=0x8) returned 0xd654c0 [0232.546] memcpy (in: _Dst=0xd5c570, _Src=0xd64ca0, _Size=0x10 | out: _Dst=0xd5c570) returned 0xd5c570 [0232.547] GetActiveProcessorCount (GroupNumber=0x0) returned 0x4 [0232.547] NtPowerInformation (in: InformationLevel=0x2e, InputBuffer=0x115d7f0, InputBufferLength=0x2, OutputBuffer=0xd64670, OutputBufferLength=0x60 | out: OutputBuffer=0xd64670) returned 0x0 [0232.547] _vsnwprintf (in: _Buffer=0x115d690, _BufferCount=0x63, _Format="CPU%d", _ArgList=0x115cf88 | out: _Buffer="CPU0") returned 4 [0232.547] GetCurrentThread () returned 0xfffffffffffffffe [0232.547] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0x115cee0, PreviousGroupAffinity=0x115cef0 | out: PreviousGroupAffinity=0x115cef0) returned 1 [0232.547] GetSystemInfo (in: lpSystemInfo=0x115d020 | out: lpSystemInfo=0x115d020*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0232.548] mbstowcs (in: _Dest=0x115d2a8, _Source="GenuineIntel", _MaxCount=0x28 | out: _Dest="GenuineIntel") returned 0xc [0232.548] _wcsicmp (_String1="GenuineIntel", _String2="GenuineIntel") returned 0 [0232.550] mbstowcs (in: _Dest=0x115d118, _Source="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", _MaxCount=0x28 | out: _Dest="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x27 [0232.551] GetCurrentThread () returned 0xfffffffffffffffe [0232.551] SetThreadGroupAffinity (in: hThread=0xfffffffffffffffe, GroupAffinity=0x115cef0, PreviousGroupAffinity=0x0 | out: PreviousGroupAffinity=0x0) returned 1 [0232.555] LoadStringW (in: hInstance=0x7ffa4cbb0000, uID=0x2c, lpBuffer=0x115ccf0, cchBufferMax=256 | out: lpBuffer="CPU %d") returned 0x6 [0232.566] _vsnwprintf (in: _Buffer=0x115d5c0, _BufferCount=0x40, _Format="%04X%04X%04X%04X", _ArgList=0x115cf88 | out: _Buffer="0F8BFBFF00050654") returned 16 [0232.568] lstrlenW (lpString=" 0") returned 2 [0232.568] lstrlenW (lpString="Intel(R) Xeon(R) Gold 6126 CPU @ 2.60GHz") returned 40 [0232.569] lstrlenW (lpString="") returned 0 [0232.569] lstrlenW (lpString="") returned 0 [0232.569] lstrlenW (lpString="") returned 0 [0232.571] IsProcessorFeaturePresent (ProcessorFeature=0x14) returned 1 [0232.572] IsProcessorFeaturePresent (ProcessorFeature=0x15) returned 1 [0232.572] RtlNumberOfSetBitsUlongPtr (Target=0x1) returned 0x1 [0232.572] RtlNumberOfSetBitsUlongPtr (Target=0x2) returned 0x1 [0232.572] RtlNumberOfSetBitsUlongPtr (Target=0x4) returned 0x1 [0232.572] RtlNumberOfSetBitsUlongPtr (Target=0x8) returned 0x1 [0232.572] _vsnwprintf (in: _Buffer=0x115d880, _BufferCount=0x63, _Format="CPU%d", _ArgList=0x115d7c8 | out: _Buffer="CPU0") returned 4 [0232.574] free (_Block=0xd654c0) [0232.574] free (_Block=0xd5c700) [0232.575] free (_Block=0xd5c570) [0232.575] free (_Block=0xd64c80) [0232.576] free (_Block=0xd64670) [0232.588] RtlAllocateHeap (HeapHandle=0x550000, Flags=0x0, Size=0x4) returned 0x5783c0 [0232.588] SetThreadPreferredUILanguages (in: dwFlags=0x8, pwszLanguagesBuffer=0x5783c0, pulNumLanguages=0x115e1c0 | out: pulNumLanguages=0x115e1c0) returned 1 [0232.588] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x5783c0) returned 1 [0232.588] RtlFreeHeap (HeapHandle=0x550000, Flags=0x0, BaseAddress=0x578420) returned 1 Thread: id = 241 os_tid = 0x6c8 [0175.311] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xee72db00, dwHighDateTime=0x1d92b8e)) [0175.311] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xee72db00, dwHighDateTime=0x1d92b8e)) [0175.311] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xee72db00, dwHighDateTime=0x1d92b8e)) [0175.311] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x493d0, bAlertable=0) returned 0x0 [0175.311] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xee72db00, dwHighDateTime=0x1d92b8e)) [0175.311] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xee72db00, dwHighDateTime=0x1d92b8e)) [0175.311] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xee72db00, dwHighDateTime=0x1d92b8e)) [0175.311] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x2710, bAlertable=0) returned 0x0 [0183.554] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xf35db526, dwHighDateTime=0x1d92b8e)) [0183.554] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xf35db526, dwHighDateTime=0x1d92b8e)) [0183.554] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xf35db526, dwHighDateTime=0x1d92b8e)) [0183.554] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x6d6, bAlertable=0) returned 0x0 [0183.804] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xf383dad8, dwHighDateTime=0x1d92b8e)) [0183.808] free (_Block=0xd5df80) [0183.808] FreeLibrary (hLibModule=0x180000000) returned 1 [0183.810] free (_Block=0xd621a0) [0183.811] free (_Block=0xd5c750) [0183.811] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0184.476] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xf3ea5fde, dwHighDateTime=0x1d92b8e)) [0184.476] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xf3ea5fde, dwHighDateTime=0x1d92b8e)) [0184.476] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xf3ea5fde, dwHighDateTime=0x1d92b8e)) [0184.476] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x204b, bAlertable=0) returned 0x0 [0184.679] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0185.389] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xf474aa45, dwHighDateTime=0x1d92b8e)) [0185.389] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xf474aa45, dwHighDateTime=0x1d92b8e)) [0185.389] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xf474aa45, dwHighDateTime=0x1d92b8e)) [0185.389] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0185.582] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0186.314] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xf503b79c, dwHighDateTime=0x1d92b8e)) [0186.314] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xf503b79c, dwHighDateTime=0x1d92b8e)) [0186.314] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xf503b79c, dwHighDateTime=0x1d92b8e)) [0186.314] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0186.806] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0187.820] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xf5e89959, dwHighDateTime=0x1d92b8e)) [0187.820] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xf5e89959, dwHighDateTime=0x1d92b8e)) [0187.820] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xf5e89959, dwHighDateTime=0x1d92b8e)) [0187.820] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0188.002] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0188.674] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xf66bba41, dwHighDateTime=0x1d92b8e)) [0188.674] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xf66bba41, dwHighDateTime=0x1d92b8e)) [0188.674] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xf66bba41, dwHighDateTime=0x1d92b8e)) [0188.674] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0188.905] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0189.588] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xf6f603ba, dwHighDateTime=0x1d92b8e)) [0189.588] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xf6f603ba, dwHighDateTime=0x1d92b8e)) [0189.588] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xf6f603ba, dwHighDateTime=0x1d92b8e)) [0189.589] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0189.810] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0190.595] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xf791056b, dwHighDateTime=0x1d92b8e)) [0190.595] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xf791056b, dwHighDateTime=0x1d92b8e)) [0190.595] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xf791056b, dwHighDateTime=0x1d92b8e)) [0190.595] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0190.850] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0191.562] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xf8226bb0, dwHighDateTime=0x1d92b8e)) [0191.562] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xf8226bb0, dwHighDateTime=0x1d92b8e)) [0191.562] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xf8226bb0, dwHighDateTime=0x1d92b8e)) [0191.562] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0191.909] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0192.763] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xf8d9fcfc, dwHighDateTime=0x1d92b8e)) [0192.763] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xf8d9fcfc, dwHighDateTime=0x1d92b8e)) [0192.763] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xf8d9fcfc, dwHighDateTime=0x1d92b8e)) [0192.763] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0193.061] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0193.798] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xf979be16, dwHighDateTime=0x1d92b8e)) [0193.798] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xf979be16, dwHighDateTime=0x1d92b8e)) [0193.798] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xf979be16, dwHighDateTime=0x1d92b8e)) [0193.798] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0194.061] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0194.715] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xfa040631, dwHighDateTime=0x1d92b8e)) [0194.715] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xfa040631, dwHighDateTime=0x1d92b8e)) [0194.715] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xfa040631, dwHighDateTime=0x1d92b8e)) [0194.715] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0194.986] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0195.718] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xfa9c9a0d, dwHighDateTime=0x1d92b8e)) [0195.719] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xfa9c9a0d, dwHighDateTime=0x1d92b8e)) [0195.719] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xfa9c9a0d, dwHighDateTime=0x1d92b8e)) [0195.719] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0195.998] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0196.660] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xfb2e0b40, dwHighDateTime=0x1d92b8e)) [0196.660] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xfb2e0b40, dwHighDateTime=0x1d92b8e)) [0196.660] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xfb2e0b40, dwHighDateTime=0x1d92b8e)) [0196.660] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0197.113] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0197.871] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xfbe5a516, dwHighDateTime=0x1d92b8e)) [0197.871] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xfbe5a516, dwHighDateTime=0x1d92b8e)) [0197.871] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xfbe5a516, dwHighDateTime=0x1d92b8e)) [0197.871] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0198.335] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0199.084] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xfc9f966d, dwHighDateTime=0x1d92b8e)) [0199.084] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xfc9f966d, dwHighDateTime=0x1d92b8e)) [0199.084] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xfc9f966d, dwHighDateTime=0x1d92b8e)) [0199.084] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0199.373] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0200.108] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xfd3a8f9e, dwHighDateTime=0x1d92b8e)) [0200.108] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xfd3a8f9e, dwHighDateTime=0x1d92b8e)) [0200.108] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xfd3a8f9e, dwHighDateTime=0x1d92b8e)) [0200.108] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0200.448] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0201.183] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xfddf40c2, dwHighDateTime=0x1d92b8e)) [0201.184] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xfddf40c2, dwHighDateTime=0x1d92b8e)) [0201.184] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xfddf40c2, dwHighDateTime=0x1d92b8e)) [0201.184] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0201.534] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0202.260] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xfe839650, dwHighDateTime=0x1d92b8e)) [0202.260] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xfe839650, dwHighDateTime=0x1d92b8e)) [0202.261] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xfe839650, dwHighDateTime=0x1d92b8e)) [0202.261] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0202.584] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0203.362] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xff2cda8e, dwHighDateTime=0x1d92b8e)) [0203.362] free (_Block=0xd64bd0) [0203.362] FreeLibrary (hLibModule=0x7ffa5f840000) returned 1 [0203.363] free (_Block=0xd63f00) [0203.364] free (_Block=0xd5c570) [0203.364] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0204.374] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xffc57251, dwHighDateTime=0x1d92b8e)) [0204.374] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xffc57251, dwHighDateTime=0x1d92b8e)) [0204.374] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xffc57251, dwHighDateTime=0x1d92b8e)) [0204.374] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0204.650] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0205.415] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x653339, dwHighDateTime=0x1d92b8f)) [0205.415] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x653339, dwHighDateTime=0x1d92b8f)) [0205.416] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x653339, dwHighDateTime=0x1d92b8f)) [0205.416] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0205.670] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0206.369] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0xf69ee8, dwHighDateTime=0x1d92b8f)) [0206.369] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0xf69ee8, dwHighDateTime=0x1d92b8f)) [0206.369] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0xf69ee8, dwHighDateTime=0x1d92b8f)) [0206.369] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0206.695] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0207.622] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x1b55a03, dwHighDateTime=0x1d92b8f)) [0207.622] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x1b55a03, dwHighDateTime=0x1d92b8f)) [0207.622] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x1b55a03, dwHighDateTime=0x1d92b8f)) [0207.622] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0207.909] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0208.659] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x25517a5, dwHighDateTime=0x1d92b8f)) [0208.659] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x25517a5, dwHighDateTime=0x1d92b8f)) [0208.659] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x25517a5, dwHighDateTime=0x1d92b8f)) [0208.659] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0208.893] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0209.645] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x2eb82d1, dwHighDateTime=0x1d92b8f)) [0209.645] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x2eb82d1, dwHighDateTime=0x1d92b8f)) [0209.645] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x2eb82d1, dwHighDateTime=0x1d92b8f)) [0209.645] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0209.917] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0210.599] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x37ce7bf, dwHighDateTime=0x1d92b8f)) [0210.599] free (_Block=0xd643f0) [0210.599] FreeLibrary (hLibModule=0x7ffa5f840000) returned 1 [0210.600] free (_Block=0xd64670) [0210.601] free (_Block=0xd5c570) [0210.601] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0211.515] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x40706d9, dwHighDateTime=0x1d92b8f)) [0211.515] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x40706d9, dwHighDateTime=0x1d92b8f)) [0211.515] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x40706d9, dwHighDateTime=0x1d92b8f)) [0211.515] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0211.790] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0212.545] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x4a45eed, dwHighDateTime=0x1d92b8f)) [0212.545] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x4a45eed, dwHighDateTime=0x1d92b8f)) [0212.545] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x4a45eed, dwHighDateTime=0x1d92b8f)) [0212.545] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0212.772] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0213.624] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x548e239, dwHighDateTime=0x1d92b8f)) [0213.624] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x548e239, dwHighDateTime=0x1d92b8f)) [0213.624] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x548e239, dwHighDateTime=0x1d92b8f)) [0213.624] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0213.888] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0214.616] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x5e17839, dwHighDateTime=0x1d92b8f)) [0214.616] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x5e17839, dwHighDateTime=0x1d92b8f)) [0214.616] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x5e17839, dwHighDateTime=0x1d92b8f)) [0214.616] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0215.072] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0215.769] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x691e61e, dwHighDateTime=0x1d92b8f)) [0215.769] free (_Block=0xd644d0) [0215.769] FreeLibrary (hLibModule=0x7ffa5f840000) returned 1 [0215.770] free (_Block=0xd64670) [0215.770] free (_Block=0xd5c570) [0215.770] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.100] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x7f524b3, dwHighDateTime=0x1d92b8f)) [0218.100] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x7f524b3, dwHighDateTime=0x1d92b8f)) [0218.100] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x7f524b3, dwHighDateTime=0x1d92b8f)) [0218.100] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.100] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x7f524b3, dwHighDateTime=0x1d92b8f)) [0218.100] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x7f524b3, dwHighDateTime=0x1d92b8f)) [0218.100] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x7f524b3, dwHighDateTime=0x1d92b8f)) [0218.100] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.139] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.141] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x7fc4bf4, dwHighDateTime=0x1d92b8f)) [0218.142] free (_Block=0xd979e0) [0218.142] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0218.142] free (_Block=0xd64670) [0218.143] free (_Block=0xd5c750) [0218.143] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.181] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.181] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.190] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.190] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.201] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x80371e3, dwHighDateTime=0x1d92b8f)) [0218.201] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x80371e3, dwHighDateTime=0x1d92b8f)) [0218.201] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x80371e3, dwHighDateTime=0x1d92b8f)) [0218.201] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.213] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.214] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x805d4e7, dwHighDateTime=0x1d92b8f)) [0218.214] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x805d4e7, dwHighDateTime=0x1d92b8f)) [0218.214] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x805d4e7, dwHighDateTime=0x1d92b8f)) [0218.214] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.215] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.217] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x805d4e7, dwHighDateTime=0x1d92b8f)) [0218.217] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x805d4e7, dwHighDateTime=0x1d92b8f)) [0218.217] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x805d4e7, dwHighDateTime=0x1d92b8f)) [0218.217] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.221] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.222] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8083ddd, dwHighDateTime=0x1d92b8f)) [0218.222] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8083ddd, dwHighDateTime=0x1d92b8f)) [0218.222] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8083ddd, dwHighDateTime=0x1d92b8f)) [0218.222] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.223] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.250] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x80cfb83, dwHighDateTime=0x1d92b8f)) [0218.251] free (_Block=0xd97f00) [0218.251] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0218.251] free (_Block=0xd64670) [0218.252] free (_Block=0xd5c700) [0218.252] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.252] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.257] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x80cfb83, dwHighDateTime=0x1d92b8f)) [0218.258] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x80cfb83, dwHighDateTime=0x1d92b8f)) [0218.258] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x80cfb83, dwHighDateTime=0x1d92b8f)) [0218.258] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.258] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.261] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x80cfb83, dwHighDateTime=0x1d92b8f)) [0218.261] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x80cfb83, dwHighDateTime=0x1d92b8f)) [0218.261] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x80cfb83, dwHighDateTime=0x1d92b8f)) [0218.261] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.262] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.264] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x80cfb83, dwHighDateTime=0x1d92b8f)) [0218.264] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x80cfb83, dwHighDateTime=0x1d92b8f)) [0218.264] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x80cfb83, dwHighDateTime=0x1d92b8f)) [0218.264] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.265] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.268] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x80f5daa, dwHighDateTime=0x1d92b8f)) [0218.268] free (_Block=0xd97b20) [0218.268] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0218.269] free (_Block=0xd64670) [0218.269] free (_Block=0xd5c750) [0218.270] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.273] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x80f5daa, dwHighDateTime=0x1d92b8f)) [0218.273] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x80f5daa, dwHighDateTime=0x1d92b8f)) [0218.273] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x80f5daa, dwHighDateTime=0x1d92b8f)) [0218.273] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.275] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.278] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x80f5daa, dwHighDateTime=0x1d92b8f)) [0218.278] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x80f5daa, dwHighDateTime=0x1d92b8f)) [0218.278] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x80f5daa, dwHighDateTime=0x1d92b8f)) [0218.279] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.280] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.281] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x80f5daa, dwHighDateTime=0x1d92b8f)) [0218.281] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x80f5daa, dwHighDateTime=0x1d92b8f)) [0218.281] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x80f5daa, dwHighDateTime=0x1d92b8f)) [0218.281] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.299] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.300] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8142334, dwHighDateTime=0x1d92b8f)) [0218.300] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8142334, dwHighDateTime=0x1d92b8f)) [0218.300] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8142334, dwHighDateTime=0x1d92b8f)) [0218.300] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.301] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.303] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8142334, dwHighDateTime=0x1d92b8f)) [0218.303] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8142334, dwHighDateTime=0x1d92b8f)) [0218.303] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8142334, dwHighDateTime=0x1d92b8f)) [0218.303] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.304] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.306] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8142334, dwHighDateTime=0x1d92b8f)) [0218.306] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8142334, dwHighDateTime=0x1d92b8f)) [0218.306] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8142334, dwHighDateTime=0x1d92b8f)) [0218.306] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.307] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.309] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8142334, dwHighDateTime=0x1d92b8f)) [0218.309] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8142334, dwHighDateTime=0x1d92b8f)) [0218.309] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8142334, dwHighDateTime=0x1d92b8f)) [0218.309] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.312] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.321] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x81685a3, dwHighDateTime=0x1d92b8f)) [0218.321] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x81685a3, dwHighDateTime=0x1d92b8f)) [0218.321] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x81685a3, dwHighDateTime=0x1d92b8f)) [0218.321] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.322] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.360] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.360] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.408] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.408] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.410] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x824d3c6, dwHighDateTime=0x1d92b8f)) [0218.410] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x824d3c6, dwHighDateTime=0x1d92b8f)) [0218.410] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x824d3c6, dwHighDateTime=0x1d92b8f)) [0218.410] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.412] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.413] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x824d3c6, dwHighDateTime=0x1d92b8f)) [0218.413] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x824d3c6, dwHighDateTime=0x1d92b8f)) [0218.413] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x824d3c6, dwHighDateTime=0x1d92b8f)) [0218.413] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.414] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.415] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x824d3c6, dwHighDateTime=0x1d92b8f)) [0218.415] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x824d3c6, dwHighDateTime=0x1d92b8f)) [0218.415] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x824d3c6, dwHighDateTime=0x1d92b8f)) [0218.415] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.417] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.418] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x824d3c6, dwHighDateTime=0x1d92b8f)) [0218.418] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x824d3c6, dwHighDateTime=0x1d92b8f)) [0218.418] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x824d3c6, dwHighDateTime=0x1d92b8f)) [0218.418] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.419] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.421] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x824d3c6, dwHighDateTime=0x1d92b8f)) [0218.421] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x824d3c6, dwHighDateTime=0x1d92b8f)) [0218.421] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x824d3c6, dwHighDateTime=0x1d92b8f)) [0218.421] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.425] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.426] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x82735e4, dwHighDateTime=0x1d92b8f)) [0218.426] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x82735e4, dwHighDateTime=0x1d92b8f)) [0218.426] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x82735e4, dwHighDateTime=0x1d92b8f)) [0218.426] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.426] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.453] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.454] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.455] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x82bf99e, dwHighDateTime=0x1d92b8f)) [0218.455] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x82bf99e, dwHighDateTime=0x1d92b8f)) [0218.455] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x82bf99e, dwHighDateTime=0x1d92b8f)) [0218.455] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.458] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.459] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x82bf99e, dwHighDateTime=0x1d92b8f)) [0218.459] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x82bf99e, dwHighDateTime=0x1d92b8f)) [0218.459] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x82bf99e, dwHighDateTime=0x1d92b8f)) [0218.459] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.459] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.494] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.494] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.515] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.515] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.547] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x83a4857, dwHighDateTime=0x1d92b8f)) [0218.547] free (_Block=0xd98000) [0218.547] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0218.548] free (_Block=0xd64670) [0218.549] free (_Block=0xd5c700) [0218.550] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.550] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.575] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x83cab58, dwHighDateTime=0x1d92b8f)) [0218.575] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x83cab58, dwHighDateTime=0x1d92b8f)) [0218.575] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x83cab58, dwHighDateTime=0x1d92b8f)) [0218.575] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.576] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.577] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x83cab58, dwHighDateTime=0x1d92b8f)) [0218.577] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x83cab58, dwHighDateTime=0x1d92b8f)) [0218.577] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x83cab58, dwHighDateTime=0x1d92b8f)) [0218.577] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.579] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.580] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x83f0d74, dwHighDateTime=0x1d92b8f)) [0218.580] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x83f0d74, dwHighDateTime=0x1d92b8f)) [0218.580] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x83f0d74, dwHighDateTime=0x1d92b8f)) [0218.581] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.581] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.583] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x83f0d74, dwHighDateTime=0x1d92b8f)) [0218.583] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x83f0d74, dwHighDateTime=0x1d92b8f)) [0218.583] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x83f0d74, dwHighDateTime=0x1d92b8f)) [0218.583] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.584] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.586] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x83f0d74, dwHighDateTime=0x1d92b8f)) [0218.586] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x83f0d74, dwHighDateTime=0x1d92b8f)) [0218.586] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x83f0d74, dwHighDateTime=0x1d92b8f)) [0218.586] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.587] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.589] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x83f0d74, dwHighDateTime=0x1d92b8f)) [0218.589] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x83f0d74, dwHighDateTime=0x1d92b8f)) [0218.589] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x83f0d74, dwHighDateTime=0x1d92b8f)) [0218.589] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.592] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.594] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x83f0d74, dwHighDateTime=0x1d92b8f)) [0218.594] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x83f0d74, dwHighDateTime=0x1d92b8f)) [0218.594] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x83f0d74, dwHighDateTime=0x1d92b8f)) [0218.594] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.599] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.603] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x841706d, dwHighDateTime=0x1d92b8f)) [0218.603] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x841706d, dwHighDateTime=0x1d92b8f)) [0218.603] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x841706d, dwHighDateTime=0x1d92b8f)) [0218.603] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.604] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.605] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x841706d, dwHighDateTime=0x1d92b8f)) [0218.606] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x841706d, dwHighDateTime=0x1d92b8f)) [0218.606] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x841706d, dwHighDateTime=0x1d92b8f)) [0218.606] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.607] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.608] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x841706d, dwHighDateTime=0x1d92b8f)) [0218.608] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x841706d, dwHighDateTime=0x1d92b8f)) [0218.608] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x841706d, dwHighDateTime=0x1d92b8f)) [0218.608] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.609] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.610] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x843d0e2, dwHighDateTime=0x1d92b8f)) [0218.610] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x843d0e2, dwHighDateTime=0x1d92b8f)) [0218.610] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x843d0e2, dwHighDateTime=0x1d92b8f)) [0218.610] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.612] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.626] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.626] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.626] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.626] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.627] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.628] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.628] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.628] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.628] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.630] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.631] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.631] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.631] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.632] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.632] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.634] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.634] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.634] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.634] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.636] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.637] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.637] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.637] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.637] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.638] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.639] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.639] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.639] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x84633c1, dwHighDateTime=0x1d92b8f)) [0218.639] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.643] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.645] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x848977d, dwHighDateTime=0x1d92b8f)) [0218.645] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x848977d, dwHighDateTime=0x1d92b8f)) [0218.645] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x848977d, dwHighDateTime=0x1d92b8f)) [0218.645] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.648] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.673] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.673] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.677] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x84d5b12, dwHighDateTime=0x1d92b8f)) [0218.677] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x84d5b12, dwHighDateTime=0x1d92b8f)) [0218.677] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x84d5b12, dwHighDateTime=0x1d92b8f)) [0218.678] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.678] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.680] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x84d5b12, dwHighDateTime=0x1d92b8f)) [0218.680] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x84d5b12, dwHighDateTime=0x1d92b8f)) [0218.680] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x84d5b12, dwHighDateTime=0x1d92b8f)) [0218.680] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.684] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.685] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x84d5b12, dwHighDateTime=0x1d92b8f)) [0218.685] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x84d5b12, dwHighDateTime=0x1d92b8f)) [0218.685] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x84d5b12, dwHighDateTime=0x1d92b8f)) [0218.685] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.685] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.689] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.689] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.689] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.689] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.690] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.691] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.691] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.691] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.691] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.692] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.693] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.693] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.693] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.693] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.694] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.695] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.695] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.695] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.696] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.698] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.701] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.701] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.701] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.701] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.701] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.703] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.703] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.703] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x84fbd36, dwHighDateTime=0x1d92b8f)) [0218.703] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.709] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.711] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8522024, dwHighDateTime=0x1d92b8f)) [0218.711] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8522024, dwHighDateTime=0x1d92b8f)) [0218.711] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8522024, dwHighDateTime=0x1d92b8f)) [0218.711] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.712] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.713] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8522024, dwHighDateTime=0x1d92b8f)) [0218.713] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8522024, dwHighDateTime=0x1d92b8f)) [0218.713] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8522024, dwHighDateTime=0x1d92b8f)) [0218.713] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.715] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.716] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8522024, dwHighDateTime=0x1d92b8f)) [0218.716] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8522024, dwHighDateTime=0x1d92b8f)) [0218.716] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8522024, dwHighDateTime=0x1d92b8f)) [0218.716] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.717] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.720] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x85482ef, dwHighDateTime=0x1d92b8f)) [0218.737] free (_Block=0xd5c570) [0218.737] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.737] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x856e527, dwHighDateTime=0x1d92b8f)) [0218.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x856e527, dwHighDateTime=0x1d92b8f)) [0218.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x856e527, dwHighDateTime=0x1d92b8f)) [0218.739] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.740] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.741] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x856e527, dwHighDateTime=0x1d92b8f)) [0218.741] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x856e527, dwHighDateTime=0x1d92b8f)) [0218.741] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x856e527, dwHighDateTime=0x1d92b8f)) [0218.741] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.743] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.744] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x856e527, dwHighDateTime=0x1d92b8f)) [0218.744] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x856e527, dwHighDateTime=0x1d92b8f)) [0218.744] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x856e527, dwHighDateTime=0x1d92b8f)) [0218.744] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.745] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.746] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x856e527, dwHighDateTime=0x1d92b8f)) [0218.746] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x856e527, dwHighDateTime=0x1d92b8f)) [0218.746] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x856e527, dwHighDateTime=0x1d92b8f)) [0218.746] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.748] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.749] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x856e527, dwHighDateTime=0x1d92b8f)) [0218.749] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x856e527, dwHighDateTime=0x1d92b8f)) [0218.749] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x856e527, dwHighDateTime=0x1d92b8f)) [0218.749] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.750] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.752] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8594754, dwHighDateTime=0x1d92b8f)) [0218.752] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8594754, dwHighDateTime=0x1d92b8f)) [0218.752] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8594754, dwHighDateTime=0x1d92b8f)) [0218.752] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.755] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.756] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8594754, dwHighDateTime=0x1d92b8f)) [0218.756] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8594754, dwHighDateTime=0x1d92b8f)) [0218.756] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8594754, dwHighDateTime=0x1d92b8f)) [0218.756] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.756] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.782] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.782] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.802] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8606da9, dwHighDateTime=0x1d92b8f)) [0218.802] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8606da9, dwHighDateTime=0x1d92b8f)) [0218.802] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8606da9, dwHighDateTime=0x1d92b8f)) [0218.802] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.805] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.807] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8606da9, dwHighDateTime=0x1d92b8f)) [0218.807] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8606da9, dwHighDateTime=0x1d92b8f)) [0218.807] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8606da9, dwHighDateTime=0x1d92b8f)) [0218.807] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.807] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.844] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.844] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.850] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x86794eb, dwHighDateTime=0x1d92b8f)) [0218.850] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x86794eb, dwHighDateTime=0x1d92b8f)) [0218.850] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x86794eb, dwHighDateTime=0x1d92b8f)) [0218.850] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.851] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.852] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x86794eb, dwHighDateTime=0x1d92b8f)) [0218.852] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x86794eb, dwHighDateTime=0x1d92b8f)) [0218.852] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x86794eb, dwHighDateTime=0x1d92b8f)) [0218.852] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.853] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.854] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x86794eb, dwHighDateTime=0x1d92b8f)) [0218.854] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x86794eb, dwHighDateTime=0x1d92b8f)) [0218.854] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x86794eb, dwHighDateTime=0x1d92b8f)) [0218.854] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.855] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.856] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x86794eb, dwHighDateTime=0x1d92b8f)) [0218.856] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x86794eb, dwHighDateTime=0x1d92b8f)) [0218.856] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x86794eb, dwHighDateTime=0x1d92b8f)) [0218.856] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.858] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.861] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.861] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.861] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.861] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.862] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.863] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.863] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.863] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.863] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.865] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.866] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.866] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.866] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.866] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.867] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.868] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.868] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.868] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.868] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.870] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.871] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.871] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.871] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.871] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.872] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.873] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.873] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.873] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x869f6f9, dwHighDateTime=0x1d92b8f)) [0218.873] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.876] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.878] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x86c70a9, dwHighDateTime=0x1d92b8f)) [0218.878] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x86c70a9, dwHighDateTime=0x1d92b8f)) [0218.878] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x86c70a9, dwHighDateTime=0x1d92b8f)) [0218.878] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.881] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.884] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x86c70a9, dwHighDateTime=0x1d92b8f)) [0218.884] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x86c70a9, dwHighDateTime=0x1d92b8f)) [0218.884] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x86c70a9, dwHighDateTime=0x1d92b8f)) [0218.884] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.885] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.888] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x86c70a9, dwHighDateTime=0x1d92b8f)) [0218.888] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x86c70a9, dwHighDateTime=0x1d92b8f)) [0218.888] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x86c70a9, dwHighDateTime=0x1d92b8f)) [0218.888] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.889] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.890] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x86c70a9, dwHighDateTime=0x1d92b8f)) [0218.890] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x86c70a9, dwHighDateTime=0x1d92b8f)) [0218.890] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x86c70a9, dwHighDateTime=0x1d92b8f)) [0218.890] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.891] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.892] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x86ebc87, dwHighDateTime=0x1d92b8f)) [0218.892] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x86ebc87, dwHighDateTime=0x1d92b8f)) [0218.892] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x86ebc87, dwHighDateTime=0x1d92b8f)) [0218.892] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.895] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.898] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x86ebc87, dwHighDateTime=0x1d92b8f)) [0218.898] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x86ebc87, dwHighDateTime=0x1d92b8f)) [0218.898] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x86ebc87, dwHighDateTime=0x1d92b8f)) [0218.898] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.898] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.900] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x86ebc87, dwHighDateTime=0x1d92b8f)) [0218.900] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x86ebc87, dwHighDateTime=0x1d92b8f)) [0218.900] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x86ebc87, dwHighDateTime=0x1d92b8f)) [0218.900] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.901] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.902] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x86ebc87, dwHighDateTime=0x1d92b8f)) [0218.902] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x86ebc87, dwHighDateTime=0x1d92b8f)) [0218.903] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x86ebc87, dwHighDateTime=0x1d92b8f)) [0218.903] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.903] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.905] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x86ebc87, dwHighDateTime=0x1d92b8f)) [0218.905] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x86ebc87, dwHighDateTime=0x1d92b8f)) [0218.905] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x86ebc87, dwHighDateTime=0x1d92b8f)) [0218.905] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.907] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.908] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8711ea1, dwHighDateTime=0x1d92b8f)) [0218.908] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8711ea1, dwHighDateTime=0x1d92b8f)) [0218.908] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8711ea1, dwHighDateTime=0x1d92b8f)) [0218.908] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.909] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.910] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8711ea1, dwHighDateTime=0x1d92b8f)) [0218.911] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8711ea1, dwHighDateTime=0x1d92b8f)) [0218.911] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8711ea1, dwHighDateTime=0x1d92b8f)) [0218.911] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.913] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.915] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8711ea1, dwHighDateTime=0x1d92b8f)) [0218.915] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8711ea1, dwHighDateTime=0x1d92b8f)) [0218.915] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8711ea1, dwHighDateTime=0x1d92b8f)) [0218.915] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.918] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.939] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.939] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.940] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x875eeaa, dwHighDateTime=0x1d92b8f)) [0218.940] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x875eeaa, dwHighDateTime=0x1d92b8f)) [0218.941] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x875eeaa, dwHighDateTime=0x1d92b8f)) [0218.941] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.941] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.943] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x875eeaa, dwHighDateTime=0x1d92b8f)) [0218.943] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x875eeaa, dwHighDateTime=0x1d92b8f)) [0218.943] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x875eeaa, dwHighDateTime=0x1d92b8f)) [0218.943] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.944] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.946] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x875eeaa, dwHighDateTime=0x1d92b8f)) [0218.946] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x875eeaa, dwHighDateTime=0x1d92b8f)) [0218.946] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x875eeaa, dwHighDateTime=0x1d92b8f)) [0218.946] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.946] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.949] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x875eeaa, dwHighDateTime=0x1d92b8f)) [0218.949] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x875eeaa, dwHighDateTime=0x1d92b8f)) [0218.949] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x875eeaa, dwHighDateTime=0x1d92b8f)) [0218.949] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.951] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.952] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x875eeaa, dwHighDateTime=0x1d92b8f)) [0218.953] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x875eeaa, dwHighDateTime=0x1d92b8f)) [0218.953] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x875eeaa, dwHighDateTime=0x1d92b8f)) [0218.953] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0218.955] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.978] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.979] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.985] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0218.985] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.026] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x881ceaf, dwHighDateTime=0x1d92b8f)) [0219.026] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x881ceaf, dwHighDateTime=0x1d92b8f)) [0219.026] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x881ceaf, dwHighDateTime=0x1d92b8f)) [0219.026] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.027] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.028] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x881ceaf, dwHighDateTime=0x1d92b8f)) [0219.028] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x881ceaf, dwHighDateTime=0x1d92b8f)) [0219.028] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x881ceaf, dwHighDateTime=0x1d92b8f)) [0219.028] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.030] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.033] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x88430d6, dwHighDateTime=0x1d92b8f)) [0219.034] free (_Block=0xd97f00) [0219.034] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0219.034] free (_Block=0xd64670) [0219.035] free (_Block=0xd5c700) [0219.035] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x88430d6, dwHighDateTime=0x1d92b8f)) [0219.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x88430d6, dwHighDateTime=0x1d92b8f)) [0219.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x88430d6, dwHighDateTime=0x1d92b8f)) [0219.040] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.043] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x88430d6, dwHighDateTime=0x1d92b8f)) [0219.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x88430d6, dwHighDateTime=0x1d92b8f)) [0219.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x88430d6, dwHighDateTime=0x1d92b8f)) [0219.044] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.045] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.048] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.048] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.048] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.049] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.049] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.051] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.051] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.051] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.051] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.052] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.053] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.053] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.053] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.053] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.054] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.055] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.055] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.055] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.055] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.057] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.060] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.061] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.061] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x88692b8, dwHighDateTime=0x1d92b8f)) [0219.061] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.061] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.063] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x888f592, dwHighDateTime=0x1d92b8f)) [0219.063] free (_Block=0xd97ae0) [0219.063] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0219.064] free (_Block=0xd64670) [0219.064] free (_Block=0xd5c570) [0219.064] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.070] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x888f592, dwHighDateTime=0x1d92b8f)) [0219.070] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x888f592, dwHighDateTime=0x1d92b8f)) [0219.070] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x888f592, dwHighDateTime=0x1d92b8f)) [0219.070] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.071] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.073] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x888f592, dwHighDateTime=0x1d92b8f)) [0219.073] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x888f592, dwHighDateTime=0x1d92b8f)) [0219.073] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x888f592, dwHighDateTime=0x1d92b8f)) [0219.073] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.075] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.076] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x888f592, dwHighDateTime=0x1d92b8f)) [0219.076] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x888f592, dwHighDateTime=0x1d92b8f)) [0219.076] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x888f592, dwHighDateTime=0x1d92b8f)) [0219.076] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.077] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.078] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x88b5df5, dwHighDateTime=0x1d92b8f)) [0219.079] free (_Block=0xd97d60) [0219.079] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0219.079] free (_Block=0xd64670) [0219.080] free (_Block=0xd5c570) [0219.080] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.085] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x88b5df5, dwHighDateTime=0x1d92b8f)) [0219.085] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x88b5df5, dwHighDateTime=0x1d92b8f)) [0219.085] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x88b5df5, dwHighDateTime=0x1d92b8f)) [0219.085] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.086] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.110] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8901ca6, dwHighDateTime=0x1d92b8f)) [0219.110] free (_Block=0xd97b20) [0219.110] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0219.111] free (_Block=0xd64670) [0219.111] free (_Block=0xd5c570) [0219.111] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.112] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.115] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8901ca6, dwHighDateTime=0x1d92b8f)) [0219.115] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8901ca6, dwHighDateTime=0x1d92b8f)) [0219.115] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8901ca6, dwHighDateTime=0x1d92b8f)) [0219.115] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.116] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.117] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8901ca6, dwHighDateTime=0x1d92b8f)) [0219.117] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8901ca6, dwHighDateTime=0x1d92b8f)) [0219.117] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8901ca6, dwHighDateTime=0x1d92b8f)) [0219.117] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.119] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.120] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8901ca6, dwHighDateTime=0x1d92b8f)) [0219.120] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8901ca6, dwHighDateTime=0x1d92b8f)) [0219.120] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8901ca6, dwHighDateTime=0x1d92b8f)) [0219.120] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.121] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.122] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8901ca6, dwHighDateTime=0x1d92b8f)) [0219.122] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8901ca6, dwHighDateTime=0x1d92b8f)) [0219.122] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8901ca6, dwHighDateTime=0x1d92b8f)) [0219.122] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.124] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.125] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8927ec8, dwHighDateTime=0x1d92b8f)) [0219.126] free (_Block=0xd98020) [0219.126] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0219.126] free (_Block=0xd64670) [0219.127] free (_Block=0xd5c700) [0219.127] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.157] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x89749fc, dwHighDateTime=0x1d92b8f)) [0219.157] free (_Block=0xd97e20) [0219.157] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0219.157] free (_Block=0xd64670) [0219.158] free (_Block=0xd5c700) [0219.158] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.158] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.199] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.199] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.237] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.237] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.407] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8bd6c25, dwHighDateTime=0x1d92b8f)) [0219.407] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8bd6c25, dwHighDateTime=0x1d92b8f)) [0219.407] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8bd6c25, dwHighDateTime=0x1d92b8f)) [0219.408] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.408] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.410] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8bd6c25, dwHighDateTime=0x1d92b8f)) [0219.410] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8bd6c25, dwHighDateTime=0x1d92b8f)) [0219.410] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8bd6c25, dwHighDateTime=0x1d92b8f)) [0219.410] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.411] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.412] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8bd6c25, dwHighDateTime=0x1d92b8f)) [0219.412] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8bd6c25, dwHighDateTime=0x1d92b8f)) [0219.412] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8bd6c25, dwHighDateTime=0x1d92b8f)) [0219.413] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.413] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.415] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8bd6c25, dwHighDateTime=0x1d92b8f)) [0219.415] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8bd6c25, dwHighDateTime=0x1d92b8f)) [0219.415] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8bd6c25, dwHighDateTime=0x1d92b8f)) [0219.415] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.417] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.433] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.434] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.457] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8c50b5d, dwHighDateTime=0x1d92b8f)) [0219.457] free (_Block=0xd97ba0) [0219.457] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0219.457] free (_Block=0xd64670) [0219.457] free (_Block=0xd5c570) [0219.458] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.458] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.482] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8c6f314, dwHighDateTime=0x1d92b8f)) [0219.482] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8c6f314, dwHighDateTime=0x1d92b8f)) [0219.482] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8c6f314, dwHighDateTime=0x1d92b8f)) [0219.482] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.483] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.483] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8c6f314, dwHighDateTime=0x1d92b8f)) [0219.484] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8c6f314, dwHighDateTime=0x1d92b8f)) [0219.484] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8c6f314, dwHighDateTime=0x1d92b8f)) [0219.484] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.484] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.486] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.486] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.486] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.486] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.487] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.488] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.488] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.488] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.488] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.490] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.492] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.492] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.492] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.492] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.493] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.494] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.494] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.494] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.494] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.495] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.496] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.496] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.496] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.496] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.497] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.498] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.498] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.498] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8c96dbf, dwHighDateTime=0x1d92b8f)) [0219.499] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.500] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.501] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8cbb846, dwHighDateTime=0x1d92b8f)) [0219.501] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8cbb846, dwHighDateTime=0x1d92b8f)) [0219.501] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8cbb846, dwHighDateTime=0x1d92b8f)) [0219.501] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.502] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.503] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8cbb846, dwHighDateTime=0x1d92b8f)) [0219.503] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8cbb846, dwHighDateTime=0x1d92b8f)) [0219.503] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8cbb846, dwHighDateTime=0x1d92b8f)) [0219.503] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.506] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.507] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8cbb846, dwHighDateTime=0x1d92b8f)) [0219.507] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8cbb846, dwHighDateTime=0x1d92b8f)) [0219.507] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8cbb846, dwHighDateTime=0x1d92b8f)) [0219.507] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.510] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.532] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.532] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.537] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8d084fd, dwHighDateTime=0x1d92b8f)) [0219.537] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8d084fd, dwHighDateTime=0x1d92b8f)) [0219.537] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8d084fd, dwHighDateTime=0x1d92b8f)) [0219.537] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.538] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.539] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8d084fd, dwHighDateTime=0x1d92b8f)) [0219.539] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8d084fd, dwHighDateTime=0x1d92b8f)) [0219.539] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8d084fd, dwHighDateTime=0x1d92b8f)) [0219.539] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.542] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.543] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8d084fd, dwHighDateTime=0x1d92b8f)) [0219.543] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8d084fd, dwHighDateTime=0x1d92b8f)) [0219.543] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8d084fd, dwHighDateTime=0x1d92b8f)) [0219.544] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.546] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.581] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8d7c87f, dwHighDateTime=0x1d92b8f)) [0219.581] free (_Block=0xd97ec0) [0219.581] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0219.582] free (_Block=0xd64670) [0219.582] free (_Block=0xd5c7f0) [0219.582] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.583] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.672] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8e5fb92, dwHighDateTime=0x1d92b8f)) [0219.672] free (_Block=0xd979c0) [0219.673] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0219.673] free (_Block=0xd64670) [0219.674] free (_Block=0xd5c570) [0219.674] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.674] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.692] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8e85a91, dwHighDateTime=0x1d92b8f)) [0219.692] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8e85a91, dwHighDateTime=0x1d92b8f)) [0219.692] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8e85a91, dwHighDateTime=0x1d92b8f)) [0219.692] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.697] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.719] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.719] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.729] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8ed1a72, dwHighDateTime=0x1d92b8f)) [0219.729] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8ed1a72, dwHighDateTime=0x1d92b8f)) [0219.729] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8ed1a72, dwHighDateTime=0x1d92b8f)) [0219.729] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.730] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.732] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8ed1a72, dwHighDateTime=0x1d92b8f)) [0219.732] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8ed1a72, dwHighDateTime=0x1d92b8f)) [0219.732] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8ed1a72, dwHighDateTime=0x1d92b8f)) [0219.732] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.737] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8efab4c, dwHighDateTime=0x1d92b8f)) [0219.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8efab4c, dwHighDateTime=0x1d92b8f)) [0219.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8efab4c, dwHighDateTime=0x1d92b8f)) [0219.739] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.743] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.782] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8f6a682, dwHighDateTime=0x1d92b8f)) [0219.783] free (_Block=0xd979a0) [0219.783] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0219.783] free (_Block=0xd64670) [0219.783] free (_Block=0xd5c700) [0219.784] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.784] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.810] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8f90543, dwHighDateTime=0x1d92b8f)) [0219.810] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8f90543, dwHighDateTime=0x1d92b8f)) [0219.810] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8f90543, dwHighDateTime=0x1d92b8f)) [0219.811] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.815] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.819] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8fb682b, dwHighDateTime=0x1d92b8f)) [0219.819] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8fb682b, dwHighDateTime=0x1d92b8f)) [0219.819] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8fb682b, dwHighDateTime=0x1d92b8f)) [0219.819] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.819] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.821] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8fb682b, dwHighDateTime=0x1d92b8f)) [0219.821] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8fb682b, dwHighDateTime=0x1d92b8f)) [0219.821] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8fb682b, dwHighDateTime=0x1d92b8f)) [0219.821] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.822] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.823] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8fb682b, dwHighDateTime=0x1d92b8f)) [0219.823] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8fb682b, dwHighDateTime=0x1d92b8f)) [0219.823] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8fb682b, dwHighDateTime=0x1d92b8f)) [0219.823] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.824] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.825] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8fb682b, dwHighDateTime=0x1d92b8f)) [0219.825] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8fb682b, dwHighDateTime=0x1d92b8f)) [0219.825] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8fb682b, dwHighDateTime=0x1d92b8f)) [0219.825] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.828] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.831] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8fb682b, dwHighDateTime=0x1d92b8f)) [0219.831] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8fb682b, dwHighDateTime=0x1d92b8f)) [0219.831] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8fb682b, dwHighDateTime=0x1d92b8f)) [0219.831] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.832] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.837] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8fe60cc, dwHighDateTime=0x1d92b8f)) [0219.837] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8fe60cc, dwHighDateTime=0x1d92b8f)) [0219.837] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8fe60cc, dwHighDateTime=0x1d92b8f)) [0219.837] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.838] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.840] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8fe60cc, dwHighDateTime=0x1d92b8f)) [0219.840] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8fe60cc, dwHighDateTime=0x1d92b8f)) [0219.840] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8fe60cc, dwHighDateTime=0x1d92b8f)) [0219.840] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.841] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.842] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x8fe60cc, dwHighDateTime=0x1d92b8f)) [0219.842] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x8fe60cc, dwHighDateTime=0x1d92b8f)) [0219.842] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x8fe60cc, dwHighDateTime=0x1d92b8f)) [0219.842] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.845] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.846] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9002c0f, dwHighDateTime=0x1d92b8f)) [0219.846] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9002c0f, dwHighDateTime=0x1d92b8f)) [0219.846] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9002c0f, dwHighDateTime=0x1d92b8f)) [0219.846] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.847] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.860] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9028cc8, dwHighDateTime=0x1d92b8f)) [0219.861] free (_Block=0xd97b20) [0219.861] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0219.862] free (_Block=0xd64670) [0219.862] free (_Block=0xd5c570) [0219.862] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.880] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x904efd1, dwHighDateTime=0x1d92b8f)) [0219.880] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x904efd1, dwHighDateTime=0x1d92b8f)) [0219.880] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x904efd1, dwHighDateTime=0x1d92b8f)) [0219.880] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.881] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.922] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x90c182f, dwHighDateTime=0x1d92b8f)) [0219.922] free (_Block=0xd97bc0) [0219.923] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0219.923] free (_Block=0xd64670) [0219.924] free (_Block=0xd5c570) [0219.924] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.924] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.953] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x90e791a, dwHighDateTime=0x1d92b8f)) [0219.953] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x90e791a, dwHighDateTime=0x1d92b8f)) [0219.953] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x90e791a, dwHighDateTime=0x1d92b8f)) [0219.953] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.954] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.957] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9114425, dwHighDateTime=0x1d92b8f)) [0219.957] free (_Block=0xd979e0) [0219.957] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0219.958] free (_Block=0xd64670) [0219.958] free (_Block=0xd5c570) [0219.958] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.962] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9114425, dwHighDateTime=0x1d92b8f)) [0219.962] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9114425, dwHighDateTime=0x1d92b8f)) [0219.962] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9114425, dwHighDateTime=0x1d92b8f)) [0219.962] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.963] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.965] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9114425, dwHighDateTime=0x1d92b8f)) [0219.965] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9114425, dwHighDateTime=0x1d92b8f)) [0219.965] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9114425, dwHighDateTime=0x1d92b8f)) [0219.965] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.967] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0219.968] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9114425, dwHighDateTime=0x1d92b8f)) [0219.969] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9114425, dwHighDateTime=0x1d92b8f)) [0219.969] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9114425, dwHighDateTime=0x1d92b8f)) [0219.969] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0219.969] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.001] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9180375, dwHighDateTime=0x1d92b8f)) [0220.002] free (_Block=0xd97ba0) [0220.002] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0220.002] free (_Block=0xd64670) [0220.003] free (_Block=0xd5c700) [0220.003] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.003] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.006] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9180375, dwHighDateTime=0x1d92b8f)) [0220.007] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9180375, dwHighDateTime=0x1d92b8f)) [0220.007] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9180375, dwHighDateTime=0x1d92b8f)) [0220.007] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.007] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.009] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9180375, dwHighDateTime=0x1d92b8f)) [0220.009] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9180375, dwHighDateTime=0x1d92b8f)) [0220.009] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9180375, dwHighDateTime=0x1d92b8f)) [0220.009] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.010] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.011] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9180375, dwHighDateTime=0x1d92b8f)) [0220.011] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9180375, dwHighDateTime=0x1d92b8f)) [0220.011] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9180375, dwHighDateTime=0x1d92b8f)) [0220.011] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.013] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.019] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x91a6594, dwHighDateTime=0x1d92b8f)) [0220.019] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x91a6594, dwHighDateTime=0x1d92b8f)) [0220.019] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x91a6594, dwHighDateTime=0x1d92b8f)) [0220.019] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.020] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.021] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x91a6594, dwHighDateTime=0x1d92b8f)) [0220.021] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x91a6594, dwHighDateTime=0x1d92b8f)) [0220.021] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x91a6594, dwHighDateTime=0x1d92b8f)) [0220.021] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.023] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.024] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x91a6594, dwHighDateTime=0x1d92b8f)) [0220.024] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x91a6594, dwHighDateTime=0x1d92b8f)) [0220.024] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x91a6594, dwHighDateTime=0x1d92b8f)) [0220.024] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.025] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.026] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x91a6594, dwHighDateTime=0x1d92b8f)) [0220.026] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x91a6594, dwHighDateTime=0x1d92b8f)) [0220.026] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x91a6594, dwHighDateTime=0x1d92b8f)) [0220.026] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.028] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.029] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x91a6594, dwHighDateTime=0x1d92b8f)) [0220.029] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x91a6594, dwHighDateTime=0x1d92b8f)) [0220.029] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x91a6594, dwHighDateTime=0x1d92b8f)) [0220.029] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.030] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.033] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x91cc897, dwHighDateTime=0x1d92b8f)) [0220.033] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x91cc897, dwHighDateTime=0x1d92b8f)) [0220.033] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x91cc897, dwHighDateTime=0x1d92b8f)) [0220.033] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.038] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x91cc897, dwHighDateTime=0x1d92b8f)) [0220.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x91cc897, dwHighDateTime=0x1d92b8f)) [0220.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x91cc897, dwHighDateTime=0x1d92b8f)) [0220.039] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.039] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.046] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x91cc897, dwHighDateTime=0x1d92b8f)) [0220.046] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x91cc897, dwHighDateTime=0x1d92b8f)) [0220.046] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x91cc897, dwHighDateTime=0x1d92b8f)) [0220.047] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.048] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.049] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x91f2a26, dwHighDateTime=0x1d92b8f)) [0220.049] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x91f2a26, dwHighDateTime=0x1d92b8f)) [0220.049] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x91f2a26, dwHighDateTime=0x1d92b8f)) [0220.049] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.050] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.051] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x91f2a26, dwHighDateTime=0x1d92b8f)) [0220.051] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x91f2a26, dwHighDateTime=0x1d92b8f)) [0220.051] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x91f2a26, dwHighDateTime=0x1d92b8f)) [0220.051] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.052] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.054] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x91f2a26, dwHighDateTime=0x1d92b8f)) [0220.054] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x91f2a26, dwHighDateTime=0x1d92b8f)) [0220.054] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x91f2a26, dwHighDateTime=0x1d92b8f)) [0220.054] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.056] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.060] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x91f2a26, dwHighDateTime=0x1d92b8f)) [0220.060] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x91f2a26, dwHighDateTime=0x1d92b8f)) [0220.060] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x91f2a26, dwHighDateTime=0x1d92b8f)) [0220.060] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.061] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.062] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x91f2a26, dwHighDateTime=0x1d92b8f)) [0220.062] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x91f2a26, dwHighDateTime=0x1d92b8f)) [0220.062] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x91f2a26, dwHighDateTime=0x1d92b8f)) [0220.062] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.065] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.095] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.096] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.096] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x92657be, dwHighDateTime=0x1d92b8f)) [0220.096] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x92657be, dwHighDateTime=0x1d92b8f)) [0220.096] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x92657be, dwHighDateTime=0x1d92b8f)) [0220.096] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.098] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.099] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x92657be, dwHighDateTime=0x1d92b8f)) [0220.099] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x92657be, dwHighDateTime=0x1d92b8f)) [0220.099] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x92657be, dwHighDateTime=0x1d92b8f)) [0220.100] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.100] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.102] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x92657be, dwHighDateTime=0x1d92b8f)) [0220.103] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x92657be, dwHighDateTime=0x1d92b8f)) [0220.103] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x92657be, dwHighDateTime=0x1d92b8f)) [0220.103] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.106] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.108] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x92657be, dwHighDateTime=0x1d92b8f)) [0220.108] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x92657be, dwHighDateTime=0x1d92b8f)) [0220.108] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x92657be, dwHighDateTime=0x1d92b8f)) [0220.108] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.113] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.142] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x92d7a95, dwHighDateTime=0x1d92b8f)) [0220.142] free (_Block=0xd97da0) [0220.142] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0220.142] free (_Block=0xd64670) [0220.143] free (_Block=0xd5c570) [0220.143] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.143] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.167] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x92fe673, dwHighDateTime=0x1d92b8f)) [0220.167] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x92fe673, dwHighDateTime=0x1d92b8f)) [0220.167] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x92fe673, dwHighDateTime=0x1d92b8f)) [0220.167] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.168] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.169] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x92fe673, dwHighDateTime=0x1d92b8f)) [0220.169] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x92fe673, dwHighDateTime=0x1d92b8f)) [0220.169] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x92fe673, dwHighDateTime=0x1d92b8f)) [0220.169] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.171] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.172] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9323f60, dwHighDateTime=0x1d92b8f)) [0220.173] free (_Block=0xd97a80) [0220.173] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0220.173] free (_Block=0xd64670) [0220.174] free (_Block=0xd5c570) [0220.174] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.178] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9323f60, dwHighDateTime=0x1d92b8f)) [0220.179] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9323f60, dwHighDateTime=0x1d92b8f)) [0220.179] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9323f60, dwHighDateTime=0x1d92b8f)) [0220.179] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.185] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.194] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x934a1c2, dwHighDateTime=0x1d92b8f)) [0220.195] free (_Block=0xd97920) [0220.195] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0220.196] free (_Block=0xd64670) [0220.196] free (_Block=0xd5c7f0) [0220.196] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.208] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x93701cd, dwHighDateTime=0x1d92b8f)) [0220.208] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x93701cd, dwHighDateTime=0x1d92b8f)) [0220.208] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x93701cd, dwHighDateTime=0x1d92b8f)) [0220.208] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.209] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.211] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x93701cd, dwHighDateTime=0x1d92b8f)) [0220.211] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x93701cd, dwHighDateTime=0x1d92b8f)) [0220.211] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x93701cd, dwHighDateTime=0x1d92b8f)) [0220.211] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.212] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.213] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x93701cd, dwHighDateTime=0x1d92b8f)) [0220.213] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x93701cd, dwHighDateTime=0x1d92b8f)) [0220.213] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x93701cd, dwHighDateTime=0x1d92b8f)) [0220.213] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.214] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.215] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x93701cd, dwHighDateTime=0x1d92b8f)) [0220.215] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x93701cd, dwHighDateTime=0x1d92b8f)) [0220.215] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x93701cd, dwHighDateTime=0x1d92b8f)) [0220.216] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.217] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.223] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x939640a, dwHighDateTime=0x1d92b8f)) [0220.223] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x939640a, dwHighDateTime=0x1d92b8f)) [0220.223] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x939640a, dwHighDateTime=0x1d92b8f)) [0220.223] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.224] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.225] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x939640a, dwHighDateTime=0x1d92b8f)) [0220.225] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x939640a, dwHighDateTime=0x1d92b8f)) [0220.225] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x939640a, dwHighDateTime=0x1d92b8f)) [0220.225] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.227] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.228] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x939640a, dwHighDateTime=0x1d92b8f)) [0220.228] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x939640a, dwHighDateTime=0x1d92b8f)) [0220.228] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x939640a, dwHighDateTime=0x1d92b8f)) [0220.228] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.229] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.230] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x939640a, dwHighDateTime=0x1d92b8f)) [0220.231] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x939640a, dwHighDateTime=0x1d92b8f)) [0220.231] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x939640a, dwHighDateTime=0x1d92b8f)) [0220.231] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.232] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.234] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x939640a, dwHighDateTime=0x1d92b8f)) [0220.234] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x939640a, dwHighDateTime=0x1d92b8f)) [0220.234] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x939640a, dwHighDateTime=0x1d92b8f)) [0220.234] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.241] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.244] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x93bc5e1, dwHighDateTime=0x1d92b8f)) [0220.244] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x93bc5e1, dwHighDateTime=0x1d92b8f)) [0220.244] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x93bc5e1, dwHighDateTime=0x1d92b8f)) [0220.244] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.248] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.249] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x93bc5e1, dwHighDateTime=0x1d92b8f)) [0220.249] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x93bc5e1, dwHighDateTime=0x1d92b8f)) [0220.249] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x93bc5e1, dwHighDateTime=0x1d92b8f)) [0220.249] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.256] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.260] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x93e283c, dwHighDateTime=0x1d92b8f)) [0220.260] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x93e283c, dwHighDateTime=0x1d92b8f)) [0220.260] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x93e283c, dwHighDateTime=0x1d92b8f)) [0220.260] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.261] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.262] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x93e283c, dwHighDateTime=0x1d92b8f)) [0220.262] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x93e283c, dwHighDateTime=0x1d92b8f)) [0220.262] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x93e283c, dwHighDateTime=0x1d92b8f)) [0220.262] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.263] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.264] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x93e283c, dwHighDateTime=0x1d92b8f)) [0220.264] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x93e283c, dwHighDateTime=0x1d92b8f)) [0220.264] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x93e283c, dwHighDateTime=0x1d92b8f)) [0220.264] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.265] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.270] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x940932f, dwHighDateTime=0x1d92b8f)) [0220.270] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x940932f, dwHighDateTime=0x1d92b8f)) [0220.270] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x940932f, dwHighDateTime=0x1d92b8f)) [0220.270] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.272] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.275] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x940932f, dwHighDateTime=0x1d92b8f)) [0220.275] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x940932f, dwHighDateTime=0x1d92b8f)) [0220.276] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x940932f, dwHighDateTime=0x1d92b8f)) [0220.276] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.276] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.278] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x940932f, dwHighDateTime=0x1d92b8f)) [0220.278] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x940932f, dwHighDateTime=0x1d92b8f)) [0220.278] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x940932f, dwHighDateTime=0x1d92b8f)) [0220.278] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.280] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.281] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x940932f, dwHighDateTime=0x1d92b8f)) [0220.281] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x940932f, dwHighDateTime=0x1d92b8f)) [0220.281] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x940932f, dwHighDateTime=0x1d92b8f)) [0220.281] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.282] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.364] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x94ed8eb, dwHighDateTime=0x1d92b8f)) [0220.364] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x94ed8eb, dwHighDateTime=0x1d92b8f)) [0220.364] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x94ed8eb, dwHighDateTime=0x1d92b8f)) [0220.364] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.366] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.368] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x94ed8eb, dwHighDateTime=0x1d92b8f)) [0220.368] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x94ed8eb, dwHighDateTime=0x1d92b8f)) [0220.368] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x94ed8eb, dwHighDateTime=0x1d92b8f)) [0220.368] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.369] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.371] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x94ed8eb, dwHighDateTime=0x1d92b8f)) [0220.371] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x94ed8eb, dwHighDateTime=0x1d92b8f)) [0220.371] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x94ed8eb, dwHighDateTime=0x1d92b8f)) [0220.371] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.375] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.377] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x95147d7, dwHighDateTime=0x1d92b8f)) [0220.377] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x95147d7, dwHighDateTime=0x1d92b8f)) [0220.377] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x95147d7, dwHighDateTime=0x1d92b8f)) [0220.377] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.382] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.427] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x95861ee, dwHighDateTime=0x1d92b8f)) [0220.427] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x95861ee, dwHighDateTime=0x1d92b8f)) [0220.427] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x95861ee, dwHighDateTime=0x1d92b8f)) [0220.427] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.428] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.429] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x95861ee, dwHighDateTime=0x1d92b8f)) [0220.429] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x95861ee, dwHighDateTime=0x1d92b8f)) [0220.429] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x95861ee, dwHighDateTime=0x1d92b8f)) [0220.429] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.430] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.432] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x95861ee, dwHighDateTime=0x1d92b8f)) [0220.432] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x95861ee, dwHighDateTime=0x1d92b8f)) [0220.432] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x95861ee, dwHighDateTime=0x1d92b8f)) [0220.432] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.433] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.434] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x95861ee, dwHighDateTime=0x1d92b8f)) [0220.434] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x95861ee, dwHighDateTime=0x1d92b8f)) [0220.434] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x95861ee, dwHighDateTime=0x1d92b8f)) [0220.434] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.436] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.440] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x95ac49a, dwHighDateTime=0x1d92b8f)) [0220.441] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x95ac49a, dwHighDateTime=0x1d92b8f)) [0220.441] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x95ac49a, dwHighDateTime=0x1d92b8f)) [0220.441] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.442] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.443] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x95ac49a, dwHighDateTime=0x1d92b8f)) [0220.443] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x95ac49a, dwHighDateTime=0x1d92b8f)) [0220.443] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x95ac49a, dwHighDateTime=0x1d92b8f)) [0220.443] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.445] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.446] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x95ac49a, dwHighDateTime=0x1d92b8f)) [0220.446] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x95ac49a, dwHighDateTime=0x1d92b8f)) [0220.446] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x95ac49a, dwHighDateTime=0x1d92b8f)) [0220.446] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.447] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.448] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x95ac49a, dwHighDateTime=0x1d92b8f)) [0220.449] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x95ac49a, dwHighDateTime=0x1d92b8f)) [0220.449] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x95ac49a, dwHighDateTime=0x1d92b8f)) [0220.449] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.450] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.452] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x95ac49a, dwHighDateTime=0x1d92b8f)) [0220.452] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x95ac49a, dwHighDateTime=0x1d92b8f)) [0220.452] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x95ac49a, dwHighDateTime=0x1d92b8f)) [0220.452] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.453] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.458] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x95d3326, dwHighDateTime=0x1d92b8f)) [0220.458] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x95d3326, dwHighDateTime=0x1d92b8f)) [0220.458] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x95d3326, dwHighDateTime=0x1d92b8f)) [0220.458] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.461] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.463] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x95d3326, dwHighDateTime=0x1d92b8f)) [0220.463] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x95d3326, dwHighDateTime=0x1d92b8f)) [0220.463] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x95d3326, dwHighDateTime=0x1d92b8f)) [0220.464] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.465] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.599] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.599] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.660] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.661] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.668] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x97c29d8, dwHighDateTime=0x1d92b8f)) [0220.668] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x97c29d8, dwHighDateTime=0x1d92b8f)) [0220.668] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x97c29d8, dwHighDateTime=0x1d92b8f)) [0220.668] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.669] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.670] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x97c29d8, dwHighDateTime=0x1d92b8f)) [0220.671] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x97c29d8, dwHighDateTime=0x1d92b8f)) [0220.671] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x97c29d8, dwHighDateTime=0x1d92b8f)) [0220.671] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.671] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.675] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x97e8e53, dwHighDateTime=0x1d92b8f)) [0220.675] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x97e8e53, dwHighDateTime=0x1d92b8f)) [0220.675] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x97e8e53, dwHighDateTime=0x1d92b8f)) [0220.675] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.676] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.677] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x97e8e53, dwHighDateTime=0x1d92b8f)) [0220.677] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x97e8e53, dwHighDateTime=0x1d92b8f)) [0220.677] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x97e8e53, dwHighDateTime=0x1d92b8f)) [0220.677] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.680] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.682] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x97e8e53, dwHighDateTime=0x1d92b8f)) [0220.682] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x97e8e53, dwHighDateTime=0x1d92b8f)) [0220.682] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x97e8e53, dwHighDateTime=0x1d92b8f)) [0220.682] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.683] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.685] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x97e8e53, dwHighDateTime=0x1d92b8f)) [0220.685] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x97e8e53, dwHighDateTime=0x1d92b8f)) [0220.685] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x97e8e53, dwHighDateTime=0x1d92b8f)) [0220.685] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.687] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.689] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x980fbe9, dwHighDateTime=0x1d92b8f)) [0220.689] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x980fbe9, dwHighDateTime=0x1d92b8f)) [0220.689] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x980fbe9, dwHighDateTime=0x1d92b8f)) [0220.689] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.690] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.691] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x980fbe9, dwHighDateTime=0x1d92b8f)) [0220.691] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x980fbe9, dwHighDateTime=0x1d92b8f)) [0220.691] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x980fbe9, dwHighDateTime=0x1d92b8f)) [0220.691] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.694] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.695] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x980fbe9, dwHighDateTime=0x1d92b8f)) [0220.695] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x980fbe9, dwHighDateTime=0x1d92b8f)) [0220.695] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x980fbe9, dwHighDateTime=0x1d92b8f)) [0220.695] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.696] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.698] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x980fbe9, dwHighDateTime=0x1d92b8f)) [0220.698] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x980fbe9, dwHighDateTime=0x1d92b8f)) [0220.698] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x980fbe9, dwHighDateTime=0x1d92b8f)) [0220.698] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.698] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.701] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x980fbe9, dwHighDateTime=0x1d92b8f)) [0220.701] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x980fbe9, dwHighDateTime=0x1d92b8f)) [0220.701] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x980fbe9, dwHighDateTime=0x1d92b8f)) [0220.701] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.705] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.710] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x98373af, dwHighDateTime=0x1d92b8f)) [0220.710] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x98373af, dwHighDateTime=0x1d92b8f)) [0220.710] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x98373af, dwHighDateTime=0x1d92b8f)) [0220.710] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.711] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.712] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x98373af, dwHighDateTime=0x1d92b8f)) [0220.713] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x98373af, dwHighDateTime=0x1d92b8f)) [0220.713] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x98373af, dwHighDateTime=0x1d92b8f)) [0220.713] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.714] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.715] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x98373af, dwHighDateTime=0x1d92b8f)) [0220.715] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x98373af, dwHighDateTime=0x1d92b8f)) [0220.715] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x98373af, dwHighDateTime=0x1d92b8f)) [0220.715] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.716] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.717] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x98373af, dwHighDateTime=0x1d92b8f)) [0220.717] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x98373af, dwHighDateTime=0x1d92b8f)) [0220.717] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x98373af, dwHighDateTime=0x1d92b8f)) [0220.717] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.720] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.723] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x985b148, dwHighDateTime=0x1d92b8f)) [0220.723] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x985b148, dwHighDateTime=0x1d92b8f)) [0220.723] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x985b148, dwHighDateTime=0x1d92b8f)) [0220.723] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.724] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.725] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x985b148, dwHighDateTime=0x1d92b8f)) [0220.725] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x985b148, dwHighDateTime=0x1d92b8f)) [0220.725] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x985b148, dwHighDateTime=0x1d92b8f)) [0220.725] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.727] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.728] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x985b148, dwHighDateTime=0x1d92b8f)) [0220.728] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x985b148, dwHighDateTime=0x1d92b8f)) [0220.729] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x985b148, dwHighDateTime=0x1d92b8f)) [0220.729] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.730] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.731] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x985b148, dwHighDateTime=0x1d92b8f)) [0220.731] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x985b148, dwHighDateTime=0x1d92b8f)) [0220.731] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x985b148, dwHighDateTime=0x1d92b8f)) [0220.731] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.734] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.736] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x988234f, dwHighDateTime=0x1d92b8f)) [0220.736] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x988234f, dwHighDateTime=0x1d92b8f)) [0220.736] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x988234f, dwHighDateTime=0x1d92b8f)) [0220.736] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.736] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.741] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x988234f, dwHighDateTime=0x1d92b8f)) [0220.741] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x988234f, dwHighDateTime=0x1d92b8f)) [0220.741] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x988234f, dwHighDateTime=0x1d92b8f)) [0220.741] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.744] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.745] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x988234f, dwHighDateTime=0x1d92b8f)) [0220.745] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x988234f, dwHighDateTime=0x1d92b8f)) [0220.745] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x988234f, dwHighDateTime=0x1d92b8f)) [0220.746] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.749] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.760] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x98a99ba, dwHighDateTime=0x1d92b8f)) [0220.760] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x98a99ba, dwHighDateTime=0x1d92b8f)) [0220.760] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x98a99ba, dwHighDateTime=0x1d92b8f)) [0220.760] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.761] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.763] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x98a99ba, dwHighDateTime=0x1d92b8f)) [0220.763] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x98a99ba, dwHighDateTime=0x1d92b8f)) [0220.763] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x98a99ba, dwHighDateTime=0x1d92b8f)) [0220.763] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.764] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.767] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x98cd63b, dwHighDateTime=0x1d92b8f)) [0220.768] free (_Block=0xd97c60) [0220.768] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0220.768] free (_Block=0xd64670) [0220.769] free (_Block=0xd5c570) [0220.769] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.773] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x98cd63b, dwHighDateTime=0x1d92b8f)) [0220.774] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x98cd63b, dwHighDateTime=0x1d92b8f)) [0220.774] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x98cd63b, dwHighDateTime=0x1d92b8f)) [0220.774] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.776] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.779] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x98cd63b, dwHighDateTime=0x1d92b8f)) [0220.779] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x98cd63b, dwHighDateTime=0x1d92b8f)) [0220.779] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x98cd63b, dwHighDateTime=0x1d92b8f)) [0220.779] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.780] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.783] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x98f3870, dwHighDateTime=0x1d92b8f)) [0220.784] free (_Block=0xd97ba0) [0220.784] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0220.784] free (_Block=0xd64670) [0220.785] free (_Block=0xd5c570) [0220.785] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.790] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x98f3870, dwHighDateTime=0x1d92b8f)) [0220.790] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x98f3870, dwHighDateTime=0x1d92b8f)) [0220.790] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x98f3870, dwHighDateTime=0x1d92b8f)) [0220.790] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.791] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.792] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x98f3870, dwHighDateTime=0x1d92b8f)) [0220.792] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x98f3870, dwHighDateTime=0x1d92b8f)) [0220.792] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x98f3870, dwHighDateTime=0x1d92b8f)) [0220.792] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.795] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.796] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x98f3870, dwHighDateTime=0x1d92b8f)) [0220.796] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x98f3870, dwHighDateTime=0x1d92b8f)) [0220.796] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x98f3870, dwHighDateTime=0x1d92b8f)) [0220.796] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.799] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.801] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9919b67, dwHighDateTime=0x1d92b8f)) [0220.801] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9919b67, dwHighDateTime=0x1d92b8f)) [0220.801] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9919b67, dwHighDateTime=0x1d92b8f)) [0220.801] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.804] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.817] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9940f56, dwHighDateTime=0x1d92b8f)) [0220.817] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9940f56, dwHighDateTime=0x1d92b8f)) [0220.817] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9940f56, dwHighDateTime=0x1d92b8f)) [0220.817] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.817] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.860] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x99b272c, dwHighDateTime=0x1d92b8f)) [0220.861] free (_Block=0xd97fc0) [0220.861] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0220.861] free (_Block=0xd64670) [0220.862] free (_Block=0xd5c750) [0220.862] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.862] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.923] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9a4aedb, dwHighDateTime=0x1d92b8f)) [0220.923] free (_Block=0xd97ee0) [0220.923] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0220.923] free (_Block=0xd64670) [0220.924] free (_Block=0xd5c700) [0220.924] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.924] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.949] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9a71f13, dwHighDateTime=0x1d92b8f)) [0220.949] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9a71f13, dwHighDateTime=0x1d92b8f)) [0220.949] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9a71f13, dwHighDateTime=0x1d92b8f)) [0220.949] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.966] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.970] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.970] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.970] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.970] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.971] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.973] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.973] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.973] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.973] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.974] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.975] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.975] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.975] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.976] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.976] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.978] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.978] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.978] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.978] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.980] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.983] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.983] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.983] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.983] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.984] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0220.985] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.985] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.985] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9abd464, dwHighDateTime=0x1d92b8f)) [0220.985] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0220.987] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.008] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9b09ba3, dwHighDateTime=0x1d92b8f)) [0221.008] free (_Block=0xd97e80) [0221.008] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0221.009] free (_Block=0xd64670) [0221.009] free (_Block=0xd5c570) [0221.009] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.010] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.017] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9b2fa50, dwHighDateTime=0x1d92b8f)) [0221.017] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9b2fa50, dwHighDateTime=0x1d92b8f)) [0221.017] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9b2fa50, dwHighDateTime=0x1d92b8f)) [0221.017] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.020] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.021] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9b2fa50, dwHighDateTime=0x1d92b8f)) [0221.021] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9b2fa50, dwHighDateTime=0x1d92b8f)) [0221.021] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9b2fa50, dwHighDateTime=0x1d92b8f)) [0221.021] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.022] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.047] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9b7c3fd, dwHighDateTime=0x1d92b8f)) [0221.048] free (_Block=0xd97aa0) [0221.048] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0221.048] free (_Block=0xd64670) [0221.049] free (_Block=0xd5c570) [0221.049] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.049] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.053] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9b7c3fd, dwHighDateTime=0x1d92b8f)) [0221.053] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9b7c3fd, dwHighDateTime=0x1d92b8f)) [0221.053] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9b7c3fd, dwHighDateTime=0x1d92b8f)) [0221.053] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.053] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.080] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9bc85d1, dwHighDateTime=0x1d92b8f)) [0221.080] free (_Block=0xd97b60) [0221.080] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0221.081] free (_Block=0xd64670) [0221.081] free (_Block=0xd5c570) [0221.081] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.081] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.128] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.129] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.131] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9c426e3, dwHighDateTime=0x1d92b8f)) [0221.131] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9c426e3, dwHighDateTime=0x1d92b8f)) [0221.131] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9c426e3, dwHighDateTime=0x1d92b8f)) [0221.131] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.132] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.133] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9c426e3, dwHighDateTime=0x1d92b8f)) [0221.133] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9c426e3, dwHighDateTime=0x1d92b8f)) [0221.133] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9c426e3, dwHighDateTime=0x1d92b8f)) [0221.133] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.134] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.135] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9c426e3, dwHighDateTime=0x1d92b8f)) [0221.135] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9c426e3, dwHighDateTime=0x1d92b8f)) [0221.135] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9c426e3, dwHighDateTime=0x1d92b8f)) [0221.135] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.136] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.137] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9c426e3, dwHighDateTime=0x1d92b8f)) [0221.137] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9c426e3, dwHighDateTime=0x1d92b8f)) [0221.137] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9c426e3, dwHighDateTime=0x1d92b8f)) [0221.137] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.140] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.144] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.144] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.144] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.144] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.145] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.146] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.146] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.146] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.146] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.148] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.149] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.149] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.149] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.149] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.150] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.151] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.151] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.151] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.152] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.153] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.154] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.155] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.155] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.155] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.156] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.157] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.157] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.157] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9c60ee9, dwHighDateTime=0x1d92b8f)) [0221.157] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.161] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.162] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9c8f207, dwHighDateTime=0x1d92b8f)) [0221.162] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9c8f207, dwHighDateTime=0x1d92b8f)) [0221.162] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9c8f207, dwHighDateTime=0x1d92b8f)) [0221.162] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.162] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.172] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9cad35f, dwHighDateTime=0x1d92b8f)) [0221.173] free (_Block=0xd97cc0) [0221.173] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0221.173] free (_Block=0xd64670) [0221.174] free (_Block=0xd5c570) [0221.174] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.174] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.181] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9cad35f, dwHighDateTime=0x1d92b8f)) [0221.181] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9cad35f, dwHighDateTime=0x1d92b8f)) [0221.181] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9cad35f, dwHighDateTime=0x1d92b8f)) [0221.181] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.182] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.183] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9cad35f, dwHighDateTime=0x1d92b8f)) [0221.183] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9cad35f, dwHighDateTime=0x1d92b8f)) [0221.183] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9cad35f, dwHighDateTime=0x1d92b8f)) [0221.183] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.185] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.186] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9cad35f, dwHighDateTime=0x1d92b8f)) [0221.186] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9cad35f, dwHighDateTime=0x1d92b8f)) [0221.186] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9cad35f, dwHighDateTime=0x1d92b8f)) [0221.186] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.187] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.189] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9cad35f, dwHighDateTime=0x1d92b8f)) [0221.189] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9cad35f, dwHighDateTime=0x1d92b8f)) [0221.189] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9cad35f, dwHighDateTime=0x1d92b8f)) [0221.189] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.190] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.192] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9cdcabd, dwHighDateTime=0x1d92b8f)) [0221.192] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9cdcabd, dwHighDateTime=0x1d92b8f)) [0221.192] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9cdcabd, dwHighDateTime=0x1d92b8f)) [0221.192] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.193] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.195] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9cdcabd, dwHighDateTime=0x1d92b8f)) [0221.195] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9cdcabd, dwHighDateTime=0x1d92b8f)) [0221.195] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9cdcabd, dwHighDateTime=0x1d92b8f)) [0221.195] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.199] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.201] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9cdcabd, dwHighDateTime=0x1d92b8f)) [0221.201] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9cdcabd, dwHighDateTime=0x1d92b8f)) [0221.201] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9cdcabd, dwHighDateTime=0x1d92b8f)) [0221.201] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.205] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.209] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9cf99c0, dwHighDateTime=0x1d92b8f)) [0221.209] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9cf99c0, dwHighDateTime=0x1d92b8f)) [0221.209] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9cf99c0, dwHighDateTime=0x1d92b8f)) [0221.209] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.210] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.211] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9cf99c0, dwHighDateTime=0x1d92b8f)) [0221.211] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9cf99c0, dwHighDateTime=0x1d92b8f)) [0221.211] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9cf99c0, dwHighDateTime=0x1d92b8f)) [0221.211] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.212] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.213] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9cf99c0, dwHighDateTime=0x1d92b8f)) [0221.213] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9cf99c0, dwHighDateTime=0x1d92b8f)) [0221.213] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9cf99c0, dwHighDateTime=0x1d92b8f)) [0221.214] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.214] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.216] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9cf99c0, dwHighDateTime=0x1d92b8f)) [0221.216] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff68 | out: lpSystemTimeAsFileTime=0x11dff68*(dwLowDateTime=0x9cf99c0, dwHighDateTime=0x1d92b8f)) [0221.216] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff70 | out: lpSystemTimeAsFileTime=0x11dff70*(dwLowDateTime=0x9cf99c0, dwHighDateTime=0x1d92b8f)) [0221.216] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0x1, bAlertable=0) returned 0x0 [0221.218] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.266] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x11dff60 | out: lpSystemTimeAsFileTime=0x11dff60*(dwLowDateTime=0x9d92291, dwHighDateTime=0x1d92b8f)) [0221.266] free (_Block=0xd97d80) [0221.266] FreeLibrary (hLibModule=0x7ffa5bfb0000) returned 1 [0221.266] free (_Block=0xd64670) [0221.267] free (_Block=0xd5c700) [0221.267] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 [0221.267] WaitForSingleObjectEx (hHandle=0x24c, dwMilliseconds=0xffffffff, bAlertable=0) returned 0x0 Thread: id = 260 os_tid = 0x640 Process: id = "13" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x48253000" os_pid = "0x184" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x410" cmd_line = "\"cmd.exe\" /C chcp 65001 && netsh wlan show profile | findstr All" cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000126d6" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 5041 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 5042 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 5043 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 5044 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 5045 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 5046 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 5047 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 5048 start_va = 0x1c0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 5049 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 5050 start_va = 0xf90000 end_va = 0xfe1fff monitored = 1 entry_point = 0xfa4fd0 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe") Region: id = 5051 start_va = 0xff0000 end_va = 0x4feffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ff0000" filename = "" Region: id = 5052 start_va = 0x77d80000 end_va = 0x77efafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 5053 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 5054 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 5055 start_va = 0x7fff0000 end_va = 0x7dfa5f83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 5056 start_va = 0x7dfa5f840000 end_va = 0x7ffa5f83ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007dfa5f840000" filename = "" Region: id = 5057 start_va = 0x7ffa5f840000 end_va = 0x7ffa5fa00fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 5058 start_va = 0x7ffa5fa01000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffa5fa01000" filename = "" Region: id = 5060 start_va = 0x400000 end_va = 0x51ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 5061 start_va = 0x65700000 end_va = 0x6574ffff monitored = 0 entry_point = 0x65718180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 5062 start_va = 0x65750000 end_va = 0x657c9fff monitored = 0 entry_point = 0x65763290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 5063 start_va = 0x76950000 end_va = 0x76a2ffff monitored = 0 entry_point = 0x76963980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 5064 start_va = 0x656f0000 end_va = 0x656f7fff monitored = 0 entry_point = 0x656f17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 5065 start_va = 0x520000 end_va = 0x7cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 5066 start_va = 0x76950000 end_va = 0x76a2ffff monitored = 0 entry_point = 0x76963980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 5067 start_va = 0x74cc0000 end_va = 0x74e3dfff monitored = 0 entry_point = 0x74d71b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 5068 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 5069 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 5135 start_va = 0x400000 end_va = 0x4bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 5136 start_va = 0x510000 end_va = 0x51ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 5137 start_va = 0x77610000 end_va = 0x776cdfff monitored = 0 entry_point = 0x77645630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 5138 start_va = 0x4c0000 end_va = 0x4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 5139 start_va = 0x520000 end_va = 0x61ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 5140 start_va = 0x6d0000 end_va = 0x7cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 5141 start_va = 0x7d0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007d0000" filename = "" Region: id = 5142 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 5143 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 5144 start_va = 0x8c0000 end_va = 0xbf6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Thread: id = 267 os_tid = 0x1cc [0221.773] GetModuleHandleA (lpModuleName=0x0) returned 0xf90000 [0221.773] __set_app_type (_Type=0x1) [0221.773] __p__fmode () returned 0x776c4d6c [0221.773] __p__commode () returned 0x776c5b1c [0221.773] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xfa5200) returned 0x0 [0221.773] __getmainargs (in: _Argc=0xfb60e8, _Argv=0xfb60ec, _Env=0xfb60f0, _DoWildCard=0, _StartInfo=0xfb60fc | out: _Argc=0xfb60e8, _Argv=0xfb60ec, _Env=0xfb60f0) returned 0 [0221.774] GetCurrentThreadId () returned 0x1cc [0221.774] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x1cc) returned 0x7c [0221.774] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76950000 [0221.774] GetProcAddress (hModule=0x76950000, lpProcName="SetThreadUILanguage") returned 0x76992510 [0221.774] SetThreadUILanguage (LangId=0x0) returned 0x409 [0221.779] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0221.779] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ff18 | out: phkResult=0x19ff18*=0x0) returned 0x2 [0221.779] VirtualQuery (in: lpAddress=0x19ff1f, lpBuffer=0x19fed0, dwLength=0x1c | out: lpBuffer=0x19fed0*(BaseAddress=0x19f000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0221.779] VirtualQuery (in: lpAddress=0xa0000, lpBuffer=0x19fed0, dwLength=0x1c | out: lpBuffer=0x19fed0*(BaseAddress=0xa0000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0221.779] VirtualQuery (in: lpAddress=0xa1000, lpBuffer=0x19fed0, dwLength=0x1c | out: lpBuffer=0x19fed0*(BaseAddress=0xa1000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0221.779] VirtualQuery (in: lpAddress=0xa3000, lpBuffer=0x19fed0, dwLength=0x1c | out: lpBuffer=0x19fed0*(BaseAddress=0xa3000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0221.779] VirtualQuery (in: lpAddress=0x1a0000, lpBuffer=0x19fed0, dwLength=0x1c | out: lpBuffer=0x19fed0*(BaseAddress=0x1a0000, AllocationBase=0x1a0000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0221.779] GetConsoleOutputCP () returned 0x1b5 [0221.779] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xfbf460 | out: lpCPInfo=0xfbf460) returned 1 [0221.780] SetConsoleCtrlHandler (HandlerRoutine=0xfb0e40, Add=1) returned 1 [0221.780] _get_osfhandle (_FileHandle=1) returned 0x428 [0221.780] SetConsoleMode (hConsoleHandle=0x428, dwMode=0x0) returned 0 [0221.780] _get_osfhandle (_FileHandle=1) returned 0x428 [0221.780] GetConsoleMode (in: hConsoleHandle=0x428, lpMode=0xfbf40c | out: lpMode=0xfbf40c) returned 0 [0221.780] _get_osfhandle (_FileHandle=0) returned 0x38 [0221.780] GetConsoleMode (in: hConsoleHandle=0x38, lpMode=0xfbf408 | out: lpMode=0xfbf408) returned 1 [0221.780] _get_osfhandle (_FileHandle=0) returned 0x38 [0221.780] SetConsoleMode (hConsoleHandle=0x38, dwMode=0x1a7) returned 1 [0221.780] GetEnvironmentStringsW () returned 0x6d7e58* [0221.781] GetProcessHeap () returned 0x6d0000 [0221.781] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xac4) returned 0x6d8928 [0221.781] memcpy (in: _Dst=0x6d8928, _Src=0x6d7e58, _Size=0xac4 | out: _Dst=0x6d8928) returned 0x6d8928 [0221.781] FreeEnvironmentStringsA (penv="=") returned 1 [0221.781] GetProcessHeap () returned 0x6d0000 [0221.781] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x4) returned 0x6d0550 [0221.781] GetEnvironmentStringsW () returned 0x6d7e58* [0221.781] GetProcessHeap () returned 0x6d0000 [0221.781] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xac4) returned 0x6d93f8 [0221.781] memcpy (in: _Dst=0x6d93f8, _Src=0x6d7e58, _Size=0xac4 | out: _Dst=0x6d93f8) returned 0x6d93f8 [0221.781] FreeEnvironmentStringsA (penv="=") returned 1 [0221.781] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x19ee7c | out: phkResult=0x19ee7c*=0x8c) returned 0x0 [0221.781] RegQueryValueExW (in: hKey=0x8c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x0, lpData=0x19ee88*=0x49, lpcbData=0x19ee80*=0x1000) returned 0x2 [0221.781] RegQueryValueExW (in: hKey=0x8c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x1, lpcbData=0x19ee80*=0x4) returned 0x0 [0221.781] RegQueryValueExW (in: hKey=0x8c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x0, lpData=0x19ee88*=0x1, lpcbData=0x19ee80*=0x1000) returned 0x2 [0221.781] RegQueryValueExW (in: hKey=0x8c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x0, lpcbData=0x19ee80*=0x4) returned 0x0 [0221.781] RegQueryValueExW (in: hKey=0x8c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x40, lpcbData=0x19ee80*=0x4) returned 0x0 [0221.782] RegQueryValueExW (in: hKey=0x8c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x40, lpcbData=0x19ee80*=0x4) returned 0x0 [0221.782] RegQueryValueExW (in: hKey=0x8c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x0, lpData=0x19ee88*=0x40, lpcbData=0x19ee80*=0x1000) returned 0x2 [0221.782] RegCloseKey (hKey=0x8c) returned 0x0 [0221.782] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x19ee7c | out: phkResult=0x19ee7c*=0x8c) returned 0x0 [0221.782] RegQueryValueExW (in: hKey=0x8c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x0, lpData=0x19ee88*=0x40, lpcbData=0x19ee80*=0x1000) returned 0x2 [0221.782] RegQueryValueExW (in: hKey=0x8c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x1, lpcbData=0x19ee80*=0x4) returned 0x0 [0221.782] RegQueryValueExW (in: hKey=0x8c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x0, lpData=0x19ee88*=0x1, lpcbData=0x19ee80*=0x1000) returned 0x2 [0221.782] RegQueryValueExW (in: hKey=0x8c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x0, lpcbData=0x19ee80*=0x4) returned 0x0 [0221.782] RegQueryValueExW (in: hKey=0x8c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x9, lpcbData=0x19ee80*=0x4) returned 0x0 [0221.782] RegQueryValueExW (in: hKey=0x8c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x9, lpcbData=0x19ee80*=0x4) returned 0x0 [0221.782] RegQueryValueExW (in: hKey=0x8c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x0, lpData=0x19ee88*=0x9, lpcbData=0x19ee80*=0x1000) returned 0x2 [0221.782] RegCloseKey (hKey=0x8c) returned 0x0 [0221.782] time (in: timer=0x0 | out: timer=0x0) returned 0x63c87755 [0221.782] srand (_Seed=0x63c87755) [0221.782] GetCommandLineW () returned="\"cmd.exe\" /C chcp 65001 && netsh wlan show profile | findstr All" [0221.782] GetCommandLineW () returned="\"cmd.exe\" /C chcp 65001 && netsh wlan show profile | findstr All" [0221.782] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0xfc7720 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0221.783] GetProcessHeap () returned 0x6d0000 [0221.783] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x210) returned 0x6d7e58 [0221.783] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6d7e60, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0221.783] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x9c [0221.783] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0221.783] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0221.783] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0221.783] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0221.783] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0221.783] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0221.783] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0221.783] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0221.783] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0221.783] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0221.783] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0221.783] GetProcessHeap () returned 0x6d0000 [0221.784] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6d8928) returned 1 [0221.784] GetEnvironmentStringsW () returned 0x6d8070* [0221.784] GetProcessHeap () returned 0x6d0000 [0221.784] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xadc) returned 0x6da9b0 [0221.784] memcpy (in: _Dst=0x6da9b0, _Src=0x6d8070, _Size=0xadc | out: _Dst=0x6da9b0) returned 0x6da9b0 [0221.784] FreeEnvironmentStringsA (penv="=") returned 1 [0221.784] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x1b [0221.784] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0221.784] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0221.784] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0221.784] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0221.784] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0221.784] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0221.784] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0221.784] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0221.784] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0221.784] GetProcessHeap () returned 0x6d0000 [0221.784] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x30) returned 0x6d05c8 [0221.784] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x19fc54 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0221.785] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0x19fc54, lpFilePart=0x19fc4c | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x19fc4c*="system32") returned 0x13 [0221.785] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0221.785] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x19f9d0 | out: lpFindFileData=0x19f9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x7543cb2b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7543cb2b, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x6d0600 [0221.785] FindClose (in: hFindFile=0x6d0600 | out: hFindFile=0x6d0600) returned 1 [0221.785] memcpy (in: _Dst=0x19fc5a, _Src=0x19f9fc, _Size=0xe | out: _Dst=0x19fc5a) returned 0x19fc5a [0221.785] FindFirstFileW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), lpFindFileData=0x19f9d0 | out: lpFindFileData=0x19f9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xad951269, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad951269, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System32", cAlternateFileName="")) returned 0x6d0600 [0221.785] FindClose (in: hFindFile=0x6d0600 | out: hFindFile=0x6d0600) returned 1 [0221.785] memcpy (in: _Dst=0x19fc6a, _Src=0x19f9fc, _Size=0x10 | out: _Dst=0x19fc6a) returned 0x19fc6a [0221.785] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0221.785] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0221.785] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0221.785] GetProcessHeap () returned 0x6d0000 [0221.786] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6da9b0) returned 1 [0221.786] GetEnvironmentStringsW () returned 0x6d8070* [0221.786] GetProcessHeap () returned 0x6d0000 [0221.786] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xb0c) returned 0x6d9ec8 [0221.786] memcpy (in: _Dst=0x6d9ec8, _Src=0x6d8070, _Size=0xb0c | out: _Dst=0x6d9ec8) returned 0x6d9ec8 [0221.786] FreeEnvironmentStringsA (penv="=") returned 1 [0221.786] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0xfc7720 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0221.786] GetProcessHeap () returned 0x6d0000 [0221.786] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6d05c8) returned 1 [0221.786] GetProcessHeap () returned 0x6d0000 [0221.786] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x400e) returned 0x6dbfb0 [0221.786] GetProcessHeap () returned 0x6d0000 [0221.787] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x74) returned 0x6da9e0 [0221.787] GetProcessHeap () returned 0x6d0000 [0221.787] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6dbfb0) returned 1 [0221.787] GetConsoleOutputCP () returned 0x1b5 [0221.787] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xfbf460 | out: lpCPInfo=0xfbf460) returned 1 [0221.787] GetUserDefaultLCID () returned 0x409 [0221.788] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0xfc34a0, cchData=8 | out: lpLCData=":") returned 2 [0221.788] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x19fd84, cchData=128 | out: lpLCData="0") returned 2 [0221.788] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x19fd84, cchData=128 | out: lpLCData="0") returned 2 [0221.788] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x19fd84, cchData=128 | out: lpLCData="1") returned 2 [0221.788] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0xfc34b0, cchData=8 | out: lpLCData="/") returned 2 [0221.788] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0xfc3500, cchData=32 | out: lpLCData="Mon") returned 4 [0221.788] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0xfc3540, cchData=32 | out: lpLCData="Tue") returned 4 [0221.788] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0xfc3580, cchData=32 | out: lpLCData="Wed") returned 4 [0221.788] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0xfc35c0, cchData=32 | out: lpLCData="Thu") returned 4 [0221.788] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0xfc3600, cchData=32 | out: lpLCData="Fri") returned 4 [0221.788] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0xfc3640, cchData=32 | out: lpLCData="Sat") returned 4 [0221.788] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0xfc3680, cchData=32 | out: lpLCData="Sun") returned 4 [0221.788] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0xfc34c0, cchData=8 | out: lpLCData=".") returned 2 [0221.788] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0xfc34e0, cchData=8 | out: lpLCData=",") returned 2 [0221.788] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0221.789] GetProcessHeap () returned 0x6d0000 [0221.789] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x0, Size=0x20c) returned 0x6daaa8 [0221.789] GetConsoleTitleW (in: lpConsoleTitle=0x6daaa8, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0221.790] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76950000 [0221.790] GetProcAddress (hModule=0x76950000, lpProcName="CopyFileExW") returned 0x7696ffc0 [0221.790] GetProcAddress (hModule=0x76950000, lpProcName="IsDebuggerPresent") returned 0x7696b0b0 [0221.790] GetProcAddress (hModule=0x76950000, lpProcName="SetConsoleInputExeNameW") returned 0x74ddb440 [0221.790] GetProcessHeap () returned 0x6d0000 [0221.790] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x400a) returned 0x6dbfb0 [0221.790] GetProcessHeap () returned 0x6d0000 [0221.790] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6dbfb0) returned 1 [0221.791] _wcsicmp (_String1="chcp", _String2=")") returned 58 [0221.791] _wcsicmp (_String1="FOR", _String2="chcp") returned 3 [0221.791] _wcsicmp (_String1="FOR/?", _String2="chcp") returned 3 [0221.791] _wcsicmp (_String1="IF", _String2="chcp") returned 6 [0221.791] _wcsicmp (_String1="IF/?", _String2="chcp") returned 6 [0221.791] _wcsicmp (_String1="REM", _String2="chcp") returned 15 [0221.791] _wcsicmp (_String1="REM/?", _String2="chcp") returned 15 [0221.791] GetProcessHeap () returned 0x6d0000 [0221.791] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x58) returned 0x6dacc0 [0221.791] GetProcessHeap () returned 0x6d0000 [0221.791] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x12) returned 0x6d76e0 [0221.791] GetProcessHeap () returned 0x6d0000 [0221.791] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x18) returned 0x6d7660 [0221.792] GetProcessHeap () returned 0x6d0000 [0221.792] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x58) returned 0x6dad20 [0221.792] _wcsicmp (_String1="FOR", _String2="netsh") returned -8 [0221.792] _wcsicmp (_String1="FOR/?", _String2="netsh") returned -8 [0221.792] _wcsicmp (_String1="IF", _String2="netsh") returned -5 [0221.792] _wcsicmp (_String1="IF/?", _String2="netsh") returned -5 [0221.792] _wcsicmp (_String1="REM", _String2="netsh") returned 4 [0221.792] _wcsicmp (_String1="REM/?", _String2="netsh") returned 4 [0221.792] GetProcessHeap () returned 0x6d0000 [0221.792] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x58) returned 0x6dad80 [0221.792] GetProcessHeap () returned 0x6d0000 [0221.792] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x14) returned 0x6d7860 [0221.793] GetProcessHeap () returned 0x6d0000 [0221.793] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x30) returned 0x6dade0 [0221.793] GetProcessHeap () returned 0x6d0000 [0221.793] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x58) returned 0x6dae18 [0221.794] _wcsicmp (_String1="FOR", _String2="findstr") returned 6 [0221.794] _wcsicmp (_String1="FOR/?", _String2="findstr") returned 6 [0221.794] _wcsicmp (_String1="IF", _String2="findstr") returned 3 [0221.794] _wcsicmp (_String1="IF/?", _String2="findstr") returned 3 [0221.794] _wcsicmp (_String1="REM", _String2="findstr") returned 12 [0221.794] _wcsicmp (_String1="REM/?", _String2="findstr") returned 12 [0221.794] GetProcessHeap () returned 0x6d0000 [0221.794] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x58) returned 0x6dae78 [0221.794] GetProcessHeap () returned 0x6d0000 [0221.794] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x18) returned 0x6d7880 [0221.794] GetProcessHeap () returned 0x6d0000 [0221.794] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x12) returned 0x6d7920 [0221.795] GetConsoleTitleW (in: lpConsoleTitle=0x19fa10, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0221.795] _wcsicmp (_String1="chcp", _String2="DIR") returned -1 [0221.795] _wcsicmp (_String1="chcp", _String2="ERASE") returned -2 [0221.795] _wcsicmp (_String1="chcp", _String2="DEL") returned -1 [0221.795] _wcsicmp (_String1="chcp", _String2="TYPE") returned -17 [0221.795] _wcsicmp (_String1="chcp", _String2="COPY") returned -7 [0221.795] _wcsicmp (_String1="chcp", _String2="CD") returned 4 [0221.795] _wcsicmp (_String1="chcp", _String2="CHDIR") returned -1 [0221.795] _wcsicmp (_String1="chcp", _String2="RENAME") returned -15 [0221.795] _wcsicmp (_String1="chcp", _String2="REN") returned -15 [0221.795] _wcsicmp (_String1="chcp", _String2="ECHO") returned -2 [0221.795] _wcsicmp (_String1="chcp", _String2="SET") returned -16 [0221.796] _wcsicmp (_String1="chcp", _String2="PAUSE") returned -13 [0221.796] _wcsicmp (_String1="chcp", _String2="DATE") returned -1 [0221.796] _wcsicmp (_String1="chcp", _String2="TIME") returned -17 [0221.796] _wcsicmp (_String1="chcp", _String2="PROMPT") returned -13 [0221.796] _wcsicmp (_String1="chcp", _String2="MD") returned -10 [0221.796] _wcsicmp (_String1="chcp", _String2="MKDIR") returned -10 [0221.796] _wcsicmp (_String1="chcp", _String2="RD") returned -15 [0221.796] _wcsicmp (_String1="chcp", _String2="RMDIR") returned -15 [0221.796] _wcsicmp (_String1="chcp", _String2="PATH") returned -13 [0221.796] _wcsicmp (_String1="chcp", _String2="GOTO") returned -4 [0221.796] _wcsicmp (_String1="chcp", _String2="SHIFT") returned -16 [0221.796] _wcsicmp (_String1="chcp", _String2="CLS") returned -4 [0221.796] _wcsicmp (_String1="chcp", _String2="CALL") returned 7 [0221.796] _wcsicmp (_String1="chcp", _String2="VERIFY") returned -19 [0221.796] _wcsicmp (_String1="chcp", _String2="VER") returned -19 [0221.796] _wcsicmp (_String1="chcp", _String2="VOL") returned -19 [0221.796] _wcsicmp (_String1="chcp", _String2="EXIT") returned -2 [0221.796] _wcsicmp (_String1="chcp", _String2="SETLOCAL") returned -16 [0221.796] _wcsicmp (_String1="chcp", _String2="ENDLOCAL") returned -2 [0221.796] _wcsicmp (_String1="chcp", _String2="TITLE") returned -17 [0221.796] _wcsicmp (_String1="chcp", _String2="START") returned -16 [0221.796] _wcsicmp (_String1="chcp", _String2="DPATH") returned -1 [0221.796] _wcsicmp (_String1="chcp", _String2="KEYS") returned -8 [0221.796] _wcsicmp (_String1="chcp", _String2="MOVE") returned -10 [0221.796] _wcsicmp (_String1="chcp", _String2="PUSHD") returned -13 [0221.796] _wcsicmp (_String1="chcp", _String2="POPD") returned -13 [0221.796] _wcsicmp (_String1="chcp", _String2="ASSOC") returned 2 [0221.796] _wcsicmp (_String1="chcp", _String2="FTYPE") returned -3 [0221.796] _wcsicmp (_String1="chcp", _String2="BREAK") returned 1 [0221.796] _wcsicmp (_String1="chcp", _String2="COLOR") returned -7 [0221.796] _wcsicmp (_String1="chcp", _String2="MKLINK") returned -10 [0221.796] _wcsicmp (_String1="chcp", _String2="DIR") returned -1 [0221.796] _wcsicmp (_String1="chcp", _String2="ERASE") returned -2 [0221.796] _wcsicmp (_String1="chcp", _String2="DEL") returned -1 [0221.796] _wcsicmp (_String1="chcp", _String2="TYPE") returned -17 [0221.796] _wcsicmp (_String1="chcp", _String2="COPY") returned -7 [0221.796] _wcsicmp (_String1="chcp", _String2="CD") returned 4 [0221.797] _wcsicmp (_String1="chcp", _String2="CHDIR") returned -1 [0221.797] _wcsicmp (_String1="chcp", _String2="RENAME") returned -15 [0221.797] _wcsicmp (_String1="chcp", _String2="REN") returned -15 [0221.797] _wcsicmp (_String1="chcp", _String2="ECHO") returned -2 [0221.797] _wcsicmp (_String1="chcp", _String2="SET") returned -16 [0221.797] _wcsicmp (_String1="chcp", _String2="PAUSE") returned -13 [0221.797] _wcsicmp (_String1="chcp", _String2="DATE") returned -1 [0221.797] _wcsicmp (_String1="chcp", _String2="TIME") returned -17 [0221.797] _wcsicmp (_String1="chcp", _String2="PROMPT") returned -13 [0221.797] _wcsicmp (_String1="chcp", _String2="MD") returned -10 [0221.797] _wcsicmp (_String1="chcp", _String2="MKDIR") returned -10 [0221.797] _wcsicmp (_String1="chcp", _String2="RD") returned -15 [0221.797] _wcsicmp (_String1="chcp", _String2="RMDIR") returned -15 [0221.797] _wcsicmp (_String1="chcp", _String2="PATH") returned -13 [0221.797] _wcsicmp (_String1="chcp", _String2="GOTO") returned -4 [0221.797] _wcsicmp (_String1="chcp", _String2="SHIFT") returned -16 [0221.797] _wcsicmp (_String1="chcp", _String2="CLS") returned -4 [0221.797] _wcsicmp (_String1="chcp", _String2="CALL") returned 7 [0221.797] _wcsicmp (_String1="chcp", _String2="VERIFY") returned -19 [0221.797] _wcsicmp (_String1="chcp", _String2="VER") returned -19 [0221.797] _wcsicmp (_String1="chcp", _String2="VOL") returned -19 [0221.797] _wcsicmp (_String1="chcp", _String2="EXIT") returned -2 [0221.797] _wcsicmp (_String1="chcp", _String2="SETLOCAL") returned -16 [0221.797] _wcsicmp (_String1="chcp", _String2="ENDLOCAL") returned -2 [0221.797] _wcsicmp (_String1="chcp", _String2="TITLE") returned -17 [0221.797] _wcsicmp (_String1="chcp", _String2="START") returned -16 [0221.798] _wcsicmp (_String1="chcp", _String2="DPATH") returned -1 [0221.798] _wcsicmp (_String1="chcp", _String2="KEYS") returned -8 [0221.798] _wcsicmp (_String1="chcp", _String2="MOVE") returned -10 [0221.798] _wcsicmp (_String1="chcp", _String2="PUSHD") returned -13 [0221.798] _wcsicmp (_String1="chcp", _String2="POPD") returned -13 [0221.798] _wcsicmp (_String1="chcp", _String2="ASSOC") returned 2 [0221.798] _wcsicmp (_String1="chcp", _String2="FTYPE") returned -3 [0221.798] _wcsicmp (_String1="chcp", _String2="BREAK") returned 1 [0221.798] _wcsicmp (_String1="chcp", _String2="COLOR") returned -7 [0221.798] _wcsicmp (_String1="chcp", _String2="MKLINK") returned -10 [0221.798] _wcsicmp (_String1="chcp", _String2="FOR") returned -3 [0221.798] _wcsicmp (_String1="chcp", _String2="IF") returned -6 [0221.798] _wcsicmp (_String1="chcp", _String2="REM") returned -15 [0221.798] GetProcessHeap () returned 0x6d0000 [0221.798] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x210) returned 0x6daed8 [0221.798] GetProcessHeap () returned 0x6d0000 [0221.798] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x22) returned 0x6d0578 [0221.798] _wcsnicmp (_String1="chcp", _String2="cmd ", _MaxCount=0x4) returned -5 [0221.798] GetProcessHeap () returned 0x6d0000 [0221.798] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x418) returned 0x6d05c8 [0221.798] SetErrorMode (uMode=0x0) returned 0x0 [0221.799] SetErrorMode (uMode=0x1) returned 0x0 [0221.799] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x6d05d0, lpFilePart=0x19f51c | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x19f51c*="system32") returned 0x13 [0221.799] SetErrorMode (uMode=0x0) returned 0x1 [0221.799] GetProcessHeap () returned 0x6d0000 [0221.799] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6d05c8, Size=0x3a) returned 0x6d05c8 [0221.799] GetProcessHeap () returned 0x6d0000 [0221.799] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6d05c8) returned 0x3a [0221.799] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x9c [0221.799] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0221.799] GetProcessHeap () returned 0x6d0000 [0221.799] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x16e) returned 0x6db0f0 [0221.799] GetProcessHeap () returned 0x6d0000 [0221.799] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x2d4) returned 0x6d0610 [0221.807] GetProcessHeap () returned 0x6d0000 [0221.807] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6d0610, Size=0x170) returned 0x6d0610 [0221.807] GetProcessHeap () returned 0x6d0000 [0221.807] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6d0610) returned 0x170 [0221.807] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0221.807] GetProcessHeap () returned 0x6d0000 [0221.807] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xe0) returned 0x6db268 [0221.809] GetProcessHeap () returned 0x6d0000 [0221.809] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6db268, Size=0x76) returned 0x6db268 [0221.809] GetProcessHeap () returned 0x6d0000 [0221.809] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6db268) returned 0x76 [0221.809] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0221.810] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\chcp.*" (normalized: "c:\\windows\\syswow64\\chcp.*"), fInfoLevelId=0x1, lpFindFileData=0x19f2a8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f2a8) returned 0x6db2e8 [0221.810] GetProcessHeap () returned 0x6d0000 [0221.810] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x0, Size=0x14) returned 0x6d77e0 [0221.810] FindClose (in: hFindFile=0x6db2e8 | out: hFindFile=0x6db2e8) returned 1 [0221.810] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\chcp.COM" (normalized: "c:\\windows\\syswow64\\chcp.com"), fInfoLevelId=0x1, lpFindFileData=0x19f2a8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f2a8) returned 0x6db2e8 [0221.810] GetProcessHeap () returned 0x6d0000 [0221.810] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6d77e0, Size=0x4) returned 0x6db328 [0221.810] FindClose (in: hFindFile=0x6db2e8 | out: hFindFile=0x6db2e8) returned 1 [0221.810] _wcsicmp (_String1=".COM", _String2=".BAT") returned 1 [0221.810] _wcsicmp (_String1=".COM", _String2=".CMD") returned 2 [0221.810] GetConsoleTitleW (in: lpConsoleTitle=0x19f79c, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0221.811] InitializeProcThreadAttributeList (in: lpAttributeList=0x19f6c8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x19f6ac | out: lpAttributeList=0x19f6c8, lpSize=0x19f6ac) returned 1 [0221.811] UpdateProcThreadAttribute (in: lpAttributeList=0x19f6c8, dwFlags=0x0, Attribute=0x60001, lpValue=0x19f6b4, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x19f6c8, lpPreviousValue=0x0) returned 1 [0221.811] GetStartupInfoW (in: lpStartupInfo=0x19f700 | out: lpStartupInfo=0x19f700*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x38, hStdOutput=0x428, hStdError=0x41c)) [0221.811] GetProcessHeap () returned 0x6d0000 [0221.811] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x18) returned 0x6d78e0 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="=::=::\\", _MaxCount=0x7) returned 38 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0221.811] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0221.812] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0221.812] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0221.812] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0221.812] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0221.812] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0221.812] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0221.812] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0221.812] _wcsnicmp (_String1="COPYCMD", _String2="SESSION", _MaxCount=0x7) returned -16 [0221.812] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0221.812] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0221.812] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0221.812] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0221.812] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0221.812] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0221.812] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0221.812] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0221.812] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0221.812] GetProcessHeap () returned 0x6d0000 [0221.812] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6d78e0) returned 1 [0221.812] GetProcessHeap () returned 0x6d0000 [0221.812] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xa) returned 0x6db2e8 [0221.812] lstrcmpW (lpString1="\\chcp.com", lpString2="\\XCOPY.EXE") returned -1 [0221.814] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\chcp.com", lpCommandLine="chcp 65001 ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x19f650*(cb=0x48, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="chcp 65001 ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x19f69c | out: lpCommandLine="chcp 65001 ", lpProcessInformation=0x19f69c*(hProcess=0xa0, hThread=0x9c, dwProcessId=0x230, dwThreadId=0x278)) returned 1 [0221.827] CloseHandle (hObject=0x9c) returned 1 [0221.827] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0221.827] GetProcessHeap () returned 0x6d0000 [0221.827] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6d9ec8) returned 1 [0221.828] GetEnvironmentStringsW () returned 0x6d9ec8* [0221.828] GetProcessHeap () returned 0x6d0000 [0221.828] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xb0c) returned 0x6dbfb0 [0221.828] memcpy (in: _Dst=0x6dbfb0, _Src=0x6d9ec8, _Size=0xb0c | out: _Dst=0x6dbfb0) returned 0x6dbfb0 [0221.828] FreeEnvironmentStringsA (penv="=") returned 1 [0221.828] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0221.978] GetExitCodeProcess (in: hProcess=0xa0, lpExitCode=0x19f634 | out: lpExitCode=0x19f634*=0x0) returned 1 [0221.979] CloseHandle (hObject=0xa0) returned 1 [0221.979] _vsnwprintf (in: _Buffer=0x19f71c, _BufferCount=0x13, _Format="%08X", _ArgList=0x19f63c | out: _Buffer="00000000") returned 8 [0221.979] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0221.979] GetProcessHeap () returned 0x6d0000 [0221.979] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6dbfb0) returned 1 [0221.979] GetEnvironmentStringsW () returned 0x6db468* [0221.979] GetProcessHeap () returned 0x6d0000 [0221.979] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xb32) returned 0x6dd608 [0221.979] memcpy (in: _Dst=0x6dd608, _Src=0x6db468, _Size=0xb32 | out: _Dst=0x6dd608) returned 0x6dd608 [0221.979] FreeEnvironmentStringsA (penv="=") returned 1 [0221.980] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0221.980] GetProcessHeap () returned 0x6d0000 [0221.980] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6dd608) returned 1 [0221.980] GetEnvironmentStringsW () returned 0x6db468* [0221.980] GetProcessHeap () returned 0x6d0000 [0221.980] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xb32) returned 0x6dd608 [0221.980] memcpy (in: _Dst=0x6dd608, _Src=0x6db468, _Size=0xb32 | out: _Dst=0x6dd608) returned 0x6dd608 [0221.980] FreeEnvironmentStringsA (penv="=") returned 1 [0221.980] GetProcessHeap () returned 0x6d0000 [0221.980] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6db2e8) returned 1 [0221.980] DeleteProcThreadAttributeList (in: lpAttributeList=0x19f6c8 | out: lpAttributeList=0x19f6c8) [0221.980] GetProcessHeap () returned 0x6d0000 [0221.980] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x30) returned 0x6d0788 [0221.980] _pipe (in: _PtHandles=0x6d0790, _PipeSize=0x0, _TextMode=32768 | out: _PtHandles=0x6d0790) returned 0 [0221.981] _dup (_FileHandle=1) returned 5 [0221.981] _dup2 (_FileHandleSrc=4, _FileHandleDst=1) returned 0 [0221.981] _close (_FileHandle=4) returned 0 [0221.981] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0221.981] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0221.981] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0221.981] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0221.981] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0221.981] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0221.981] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0221.981] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0221.982] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0221.982] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0221.982] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0221.982] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0221.982] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0221.982] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0221.982] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0221.982] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0221.982] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0221.982] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0221.982] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0221.982] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0221.982] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0221.982] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0221.982] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0221.982] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0221.982] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0221.982] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0221.982] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0221.982] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0221.982] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0221.982] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0221.982] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0221.982] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0221.982] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0221.982] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0221.982] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0221.982] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0221.982] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0221.982] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0221.982] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0221.982] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0221.982] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0221.982] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0221.983] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0221.983] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0221.983] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0221.983] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0221.983] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0221.983] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0221.983] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0221.983] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0221.983] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0221.983] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0221.983] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0221.983] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0221.983] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0221.983] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0221.983] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0221.983] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0221.983] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0221.983] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0221.983] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0221.983] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0221.983] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0221.983] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0221.983] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0221.983] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0221.983] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0221.983] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0221.983] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0221.983] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0221.983] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0221.983] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0221.983] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0221.983] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0221.983] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0221.983] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0221.983] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0221.984] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0221.984] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0221.984] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0221.984] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0221.984] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0221.984] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0221.984] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0221.984] _wcsicmp (_String1="netsh", _String2="FOR") returned 8 [0221.984] _wcsicmp (_String1="netsh", _String2="IF") returned 5 [0221.984] _wcsicmp (_String1="netsh", _String2="REM") returned -4 [0221.984] GetProcessHeap () returned 0x6d0000 [0221.984] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x4008) returned 0x6de148 [0221.984] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0221.984] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0221.984] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0221.984] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0221.984] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0221.984] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0221.984] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0221.984] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0221.984] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0221.984] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0221.984] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0221.987] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0221.987] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0221.987] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0221.987] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0221.987] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0221.987] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0221.987] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0221.987] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0221.987] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0221.987] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0221.987] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0221.987] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0221.987] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0221.987] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0221.987] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0221.987] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0221.987] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0221.987] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0221.987] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0221.987] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0221.987] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0221.987] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0221.987] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0221.987] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0221.987] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0221.987] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0221.987] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0221.987] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0221.987] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0221.987] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0221.987] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0221.988] _wcsnicmp (_String1="nets", _String2="cmd ", _MaxCount=0x4) returned 11 [0221.988] GetProcessHeap () returned 0x6d0000 [0221.988] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x418) returned 0x6d0b48 [0221.988] SetErrorMode (uMode=0x0) returned 0x0 [0221.988] SetErrorMode (uMode=0x1) returned 0x0 [0221.988] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x6d0b50, lpFilePart=0x19fb7c | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x19fb7c*="system32") returned 0x13 [0221.988] SetErrorMode (uMode=0x0) returned 0x1 [0221.988] GetProcessHeap () returned 0x6d0000 [0221.988] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6d0b48, Size=0x3c) returned 0x6d0b48 [0221.988] GetProcessHeap () returned 0x6d0000 [0221.988] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6d0b48) returned 0x3c [0221.988] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x9c [0221.988] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0221.988] GetProcessHeap () returned 0x6d0000 [0221.988] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x16e) returned 0x6d07c0 [0221.988] GetProcessHeap () returned 0x6d0000 [0221.988] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x2d4) returned 0x6d9078 [0221.988] GetProcessHeap () returned 0x6d0000 [0221.988] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6d9078, Size=0x170) returned 0x6d9078 [0221.988] GetProcessHeap () returned 0x6d0000 [0221.988] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6d9078) returned 0x170 [0221.988] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0221.988] GetProcessHeap () returned 0x6d0000 [0221.988] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xe0) returned 0x6d91f0 [0221.988] GetProcessHeap () returned 0x6d0000 [0221.988] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6d91f0, Size=0x76) returned 0x6d91f0 [0221.988] GetProcessHeap () returned 0x6d0000 [0221.988] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6d91f0) returned 0x76 [0221.988] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0221.989] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\netsh.*" (normalized: "c:\\windows\\syswow64\\netsh.*"), fInfoLevelId=0x1, lpFindFileData=0x19f908, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f908) returned 0x6d0938 [0221.989] FindClose (in: hFindFile=0x6d0938 | out: hFindFile=0x6d0938) returned 1 [0221.989] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\netsh.COM" (normalized: "c:\\windows\\syswow64\\netsh.com"), fInfoLevelId=0x1, lpFindFileData=0x19f908, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f908) returned 0xffffffff [0221.989] GetLastError () returned 0x2 [0221.989] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\netsh.EXE" (normalized: "c:\\windows\\syswow64\\netsh.exe"), fInfoLevelId=0x1, lpFindFileData=0x19f908, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f908) returned 0x6d0938 [0221.989] FindClose (in: hFindFile=0x6d0938 | out: hFindFile=0x6d0938) returned 1 [0221.989] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0221.990] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0221.990] GetProcessHeap () returned 0x6d0000 [0221.990] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x18) returned 0x6d7780 [0221.990] GetProcessHeap () returned 0x6d0000 [0221.990] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x210) returned 0x6d0b90 [0221.990] GetProcessHeap () returned 0x6d0000 [0221.990] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x3c) returned 0x6d0938 [0221.990] _wcsnicmp (_String1="nets", _String2="cmd ", _MaxCount=0x4) returned 11 [0221.990] GetProcessHeap () returned 0x6d0000 [0221.990] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x418) returned 0x6d9ec8 [0221.990] SetErrorMode (uMode=0x0) returned 0x0 [0221.990] SetErrorMode (uMode=0x1) returned 0x0 [0221.990] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x6d9ed0, lpFilePart=0x19f924 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x19f924*="system32") returned 0x13 [0221.990] SetErrorMode (uMode=0x0) returned 0x1 [0221.990] GetProcessHeap () returned 0x6d0000 [0221.990] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6d9ec8, Size=0x3c) returned 0x6d9ec8 [0221.990] GetProcessHeap () returned 0x6d0000 [0221.990] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6d9ec8) returned 0x3c [0221.990] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x9c [0221.990] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0221.990] GetProcessHeap () returned 0x6d0000 [0221.990] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x16e) returned 0x6d9270 [0221.990] GetProcessHeap () returned 0x6d0000 [0221.990] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x2d4) returned 0x6d0da8 [0221.990] GetProcessHeap () returned 0x6d0000 [0221.990] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6d0da8, Size=0x170) returned 0x6d0da8 [0221.990] GetProcessHeap () returned 0x6d0000 [0221.990] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6d0da8) returned 0x170 [0221.990] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0221.990] GetProcessHeap () returned 0x6d0000 [0221.990] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xe0) returned 0x6d0f20 [0221.991] GetProcessHeap () returned 0x6d0000 [0221.991] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6d0f20, Size=0x76) returned 0x6d0f20 [0221.991] GetProcessHeap () returned 0x6d0000 [0221.991] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6d0f20) returned 0x76 [0221.991] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0221.991] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\netsh.*" (normalized: "c:\\windows\\syswow64\\netsh.*"), fInfoLevelId=0x1, lpFindFileData=0x19f6b0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f6b0) returned 0x6d0980 [0221.991] FindClose (in: hFindFile=0x6d0980 | out: hFindFile=0x6d0980) returned 1 [0221.991] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\netsh.COM" (normalized: "c:\\windows\\syswow64\\netsh.com"), fInfoLevelId=0x1, lpFindFileData=0x19f6b0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f6b0) returned 0xffffffff [0221.991] GetLastError () returned 0x2 [0221.991] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\netsh.EXE" (normalized: "c:\\windows\\syswow64\\netsh.exe"), fInfoLevelId=0x1, lpFindFileData=0x19f6b0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f6b0) returned 0x6d0980 [0221.991] FindClose (in: hFindFile=0x6d0980 | out: hFindFile=0x6d0980) returned 1 [0221.991] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0221.992] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0221.992] GetConsoleTitleW (in: lpConsoleTitle=0x19fba4, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0221.992] InitializeProcThreadAttributeList (in: lpAttributeList=0x19fad0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x19fab4 | out: lpAttributeList=0x19fad0, lpSize=0x19fab4) returned 1 [0221.992] UpdateProcThreadAttribute (in: lpAttributeList=0x19fad0, dwFlags=0x0, Attribute=0x60001, lpValue=0x19fabc, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x19fad0, lpPreviousValue=0x0) returned 1 [0221.992] GetStartupInfoW (in: lpStartupInfo=0x19fb08 | out: lpStartupInfo=0x19fb08*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x38, hStdOutput=0x428, hStdError=0x41c)) [0221.992] GetProcessHeap () returned 0x6d0000 [0221.992] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x18) returned 0x6d7800 [0221.992] _wcsnicmp (_String1="COPYCMD", _String2="=::=::\\", _MaxCount=0x7) returned 38 [0221.992] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0221.992] _wcsnicmp (_String1="COPYCMD", _String2="=ExitCo", _MaxCount=0x7) returned 38 [0221.992] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0221.992] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0221.992] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0221.992] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0221.992] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0221.992] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="SESSION", _MaxCount=0x7) returned -16 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0221.993] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0221.993] GetProcessHeap () returned 0x6d0000 [0221.993] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6d7800) returned 1 [0221.993] GetProcessHeap () returned 0x6d0000 [0221.994] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xa) returned 0x6db2e8 [0221.994] lstrcmpW (lpString1="\\netsh.exe", lpString2="\\XCOPY.EXE") returned -1 [0221.994] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\netsh.exe", lpCommandLine="netsh wlan show profile ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x19fa58*(cb=0x48, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="netsh wlan show profile ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x19faa4 | out: lpCommandLine="netsh wlan show profile ", lpProcessInformation=0x19faa4*(hProcess=0xb4, hThread=0xa8, dwProcessId=0x36c, dwThreadId=0x37c)) returned 1 [0222.017] CloseHandle (hObject=0xa8) returned 1 [0222.017] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0222.017] GetProcessHeap () returned 0x6d0000 [0222.018] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6dd608) returned 1 [0222.018] GetEnvironmentStringsW () returned 0x6dd608* [0222.018] GetProcessHeap () returned 0x6d0000 [0222.018] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xb32) returned 0x6db468 [0222.018] memcpy (in: _Dst=0x6db468, _Src=0x6dd608, _Size=0xb32 | out: _Dst=0x6db468) returned 0x6db468 [0222.018] FreeEnvironmentStringsA (penv="=") returned 1 [0222.018] GetProcessHeap () returned 0x6d0000 [0222.018] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6db2e8) returned 1 [0222.018] DeleteProcThreadAttributeList (in: lpAttributeList=0x19fad0 | out: lpAttributeList=0x19fad0) [0222.018] _get_osfhandle (_FileHandle=3) returned 0x9c [0222.018] DuplicateHandle (in: hSourceProcessHandle=0xb4, hSourceHandle=0x9c, hTargetProcessHandle=0x0, lpTargetHandle=0x0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x1 | out: lpTargetHandle=0x0) returned 1 [0222.018] _dup2 (_FileHandleSrc=5, _FileHandleDst=1) returned 0 [0222.018] _close (_FileHandle=5) returned 0 [0222.018] _dup (_FileHandle=0) returned 4 [0222.018] _dup2 (_FileHandleSrc=3, _FileHandleDst=0) returned 0 [0222.018] _close (_FileHandle=3) returned 0 [0222.018] _wcsicmp (_String1="findstr", _String2="DIR") returned 2 [0222.018] _wcsicmp (_String1="findstr", _String2="ERASE") returned 1 [0222.018] _wcsicmp (_String1="findstr", _String2="DEL") returned 2 [0222.018] _wcsicmp (_String1="findstr", _String2="TYPE") returned -14 [0222.018] _wcsicmp (_String1="findstr", _String2="COPY") returned 3 [0222.018] _wcsicmp (_String1="findstr", _String2="CD") returned 3 [0222.018] _wcsicmp (_String1="findstr", _String2="CHDIR") returned 3 [0222.019] _wcsicmp (_String1="findstr", _String2="RENAME") returned -12 [0222.019] _wcsicmp (_String1="findstr", _String2="REN") returned -12 [0222.019] _wcsicmp (_String1="findstr", _String2="ECHO") returned 1 [0222.019] _wcsicmp (_String1="findstr", _String2="SET") returned -13 [0222.019] _wcsicmp (_String1="findstr", _String2="PAUSE") returned -10 [0222.019] _wcsicmp (_String1="findstr", _String2="DATE") returned 2 [0222.019] _wcsicmp (_String1="findstr", _String2="TIME") returned -14 [0222.019] _wcsicmp (_String1="findstr", _String2="PROMPT") returned -10 [0222.019] _wcsicmp (_String1="findstr", _String2="MD") returned -7 [0222.019] _wcsicmp (_String1="findstr", _String2="MKDIR") returned -7 [0222.019] _wcsicmp (_String1="findstr", _String2="RD") returned -12 [0222.019] _wcsicmp (_String1="findstr", _String2="RMDIR") returned -12 [0222.019] _wcsicmp (_String1="findstr", _String2="PATH") returned -10 [0222.019] _wcsicmp (_String1="findstr", _String2="GOTO") returned -1 [0222.019] _wcsicmp (_String1="findstr", _String2="SHIFT") returned -13 [0222.019] _wcsicmp (_String1="findstr", _String2="CLS") returned 3 [0222.019] _wcsicmp (_String1="findstr", _String2="CALL") returned 3 [0222.019] _wcsicmp (_String1="findstr", _String2="VERIFY") returned -16 [0222.019] _wcsicmp (_String1="findstr", _String2="VER") returned -16 [0222.019] _wcsicmp (_String1="findstr", _String2="VOL") returned -16 [0222.019] _wcsicmp (_String1="findstr", _String2="EXIT") returned 1 [0222.019] _wcsicmp (_String1="findstr", _String2="SETLOCAL") returned -13 [0222.019] _wcsicmp (_String1="findstr", _String2="ENDLOCAL") returned 1 [0222.019] _wcsicmp (_String1="findstr", _String2="TITLE") returned -14 [0222.019] _wcsicmp (_String1="findstr", _String2="START") returned -13 [0222.019] _wcsicmp (_String1="findstr", _String2="DPATH") returned 2 [0222.019] _wcsicmp (_String1="findstr", _String2="KEYS") returned -5 [0222.019] _wcsicmp (_String1="findstr", _String2="MOVE") returned -7 [0222.019] _wcsicmp (_String1="findstr", _String2="PUSHD") returned -10 [0222.019] _wcsicmp (_String1="findstr", _String2="POPD") returned -10 [0222.019] _wcsicmp (_String1="findstr", _String2="ASSOC") returned 5 [0222.019] _wcsicmp (_String1="findstr", _String2="FTYPE") returned -11 [0222.019] _wcsicmp (_String1="findstr", _String2="BREAK") returned 4 [0222.019] _wcsicmp (_String1="findstr", _String2="COLOR") returned 3 [0222.019] _wcsicmp (_String1="findstr", _String2="MKLINK") returned -7 [0222.020] _wcsicmp (_String1="findstr", _String2="DIR") returned 2 [0222.020] _wcsicmp (_String1="findstr", _String2="ERASE") returned 1 [0222.020] _wcsicmp (_String1="findstr", _String2="DEL") returned 2 [0222.020] _wcsicmp (_String1="findstr", _String2="TYPE") returned -14 [0222.020] _wcsicmp (_String1="findstr", _String2="COPY") returned 3 [0222.020] _wcsicmp (_String1="findstr", _String2="CD") returned 3 [0222.020] _wcsicmp (_String1="findstr", _String2="CHDIR") returned 3 [0222.020] _wcsicmp (_String1="findstr", _String2="RENAME") returned -12 [0222.020] _wcsicmp (_String1="findstr", _String2="REN") returned -12 [0222.020] _wcsicmp (_String1="findstr", _String2="ECHO") returned 1 [0222.020] _wcsicmp (_String1="findstr", _String2="SET") returned -13 [0222.020] _wcsicmp (_String1="findstr", _String2="PAUSE") returned -10 [0222.020] _wcsicmp (_String1="findstr", _String2="DATE") returned 2 [0222.020] _wcsicmp (_String1="findstr", _String2="TIME") returned -14 [0222.020] _wcsicmp (_String1="findstr", _String2="PROMPT") returned -10 [0222.020] _wcsicmp (_String1="findstr", _String2="MD") returned -7 [0222.020] _wcsicmp (_String1="findstr", _String2="MKDIR") returned -7 [0222.020] _wcsicmp (_String1="findstr", _String2="RD") returned -12 [0222.020] _wcsicmp (_String1="findstr", _String2="RMDIR") returned -12 [0222.020] _wcsicmp (_String1="findstr", _String2="PATH") returned -10 [0222.020] _wcsicmp (_String1="findstr", _String2="GOTO") returned -1 [0222.020] _wcsicmp (_String1="findstr", _String2="SHIFT") returned -13 [0222.020] _wcsicmp (_String1="findstr", _String2="CLS") returned 3 [0222.020] _wcsicmp (_String1="findstr", _String2="CALL") returned 3 [0222.020] _wcsicmp (_String1="findstr", _String2="VERIFY") returned -16 [0222.020] _wcsicmp (_String1="findstr", _String2="VER") returned -16 [0222.020] _wcsicmp (_String1="findstr", _String2="VOL") returned -16 [0222.020] _wcsicmp (_String1="findstr", _String2="EXIT") returned 1 [0222.020] _wcsicmp (_String1="findstr", _String2="SETLOCAL") returned -13 [0222.020] _wcsicmp (_String1="findstr", _String2="ENDLOCAL") returned 1 [0222.020] _wcsicmp (_String1="findstr", _String2="TITLE") returned -14 [0222.020] _wcsicmp (_String1="findstr", _String2="START") returned -13 [0222.020] _wcsicmp (_String1="findstr", _String2="DPATH") returned 2 [0222.020] _wcsicmp (_String1="findstr", _String2="KEYS") returned -5 [0222.020] _wcsicmp (_String1="findstr", _String2="MOVE") returned -7 [0222.021] _wcsicmp (_String1="findstr", _String2="PUSHD") returned -10 [0222.021] _wcsicmp (_String1="findstr", _String2="POPD") returned -10 [0222.021] _wcsicmp (_String1="findstr", _String2="ASSOC") returned 5 [0222.021] _wcsicmp (_String1="findstr", _String2="FTYPE") returned -11 [0222.021] _wcsicmp (_String1="findstr", _String2="BREAK") returned 4 [0222.021] _wcsicmp (_String1="findstr", _String2="COLOR") returned 3 [0222.021] _wcsicmp (_String1="findstr", _String2="MKLINK") returned -7 [0222.021] _wcsicmp (_String1="findstr", _String2="FOR") returned -6 [0222.021] _wcsicmp (_String1="findstr", _String2="IF") returned -3 [0222.021] _wcsicmp (_String1="findstr", _String2="REM") returned -12 [0222.021] GetProcessHeap () returned 0x6d0000 [0222.021] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x4008) returned 0x6e2158 [0222.021] _wcsicmp (_String1="findstr", _String2="DIR") returned 2 [0222.021] _wcsicmp (_String1="findstr", _String2="ERASE") returned 1 [0222.021] _wcsicmp (_String1="findstr", _String2="DEL") returned 2 [0222.021] _wcsicmp (_String1="findstr", _String2="TYPE") returned -14 [0222.021] _wcsicmp (_String1="findstr", _String2="COPY") returned 3 [0222.021] _wcsicmp (_String1="findstr", _String2="CD") returned 3 [0222.021] _wcsicmp (_String1="findstr", _String2="CHDIR") returned 3 [0222.021] _wcsicmp (_String1="findstr", _String2="RENAME") returned -12 [0222.021] _wcsicmp (_String1="findstr", _String2="REN") returned -12 [0222.021] _wcsicmp (_String1="findstr", _String2="ECHO") returned 1 [0222.021] _wcsicmp (_String1="findstr", _String2="SET") returned -13 [0222.021] _wcsicmp (_String1="findstr", _String2="PAUSE") returned -10 [0222.021] _wcsicmp (_String1="findstr", _String2="DATE") returned 2 [0222.022] _wcsicmp (_String1="findstr", _String2="TIME") returned -14 [0222.022] _wcsicmp (_String1="findstr", _String2="PROMPT") returned -10 [0222.022] _wcsicmp (_String1="findstr", _String2="MD") returned -7 [0222.022] _wcsicmp (_String1="findstr", _String2="MKDIR") returned -7 [0222.022] _wcsicmp (_String1="findstr", _String2="RD") returned -12 [0222.022] _wcsicmp (_String1="findstr", _String2="RMDIR") returned -12 [0222.022] _wcsicmp (_String1="findstr", _String2="PATH") returned -10 [0222.022] _wcsicmp (_String1="findstr", _String2="GOTO") returned -1 [0222.022] _wcsicmp (_String1="findstr", _String2="SHIFT") returned -13 [0222.022] _wcsicmp (_String1="findstr", _String2="CLS") returned 3 [0222.022] _wcsicmp (_String1="findstr", _String2="CALL") returned 3 [0222.022] _wcsicmp (_String1="findstr", _String2="VERIFY") returned -16 [0222.022] _wcsicmp (_String1="findstr", _String2="VER") returned -16 [0222.022] _wcsicmp (_String1="findstr", _String2="VOL") returned -16 [0222.022] _wcsicmp (_String1="findstr", _String2="EXIT") returned 1 [0222.022] _wcsicmp (_String1="findstr", _String2="SETLOCAL") returned -13 [0222.022] _wcsicmp (_String1="findstr", _String2="ENDLOCAL") returned 1 [0222.022] _wcsicmp (_String1="findstr", _String2="TITLE") returned -14 [0222.022] _wcsicmp (_String1="findstr", _String2="START") returned -13 [0222.022] _wcsicmp (_String1="findstr", _String2="DPATH") returned 2 [0222.022] _wcsicmp (_String1="findstr", _String2="KEYS") returned -5 [0222.022] _wcsicmp (_String1="findstr", _String2="MOVE") returned -7 [0222.022] _wcsicmp (_String1="findstr", _String2="PUSHD") returned -10 [0222.022] _wcsicmp (_String1="findstr", _String2="POPD") returned -10 [0222.022] _wcsicmp (_String1="findstr", _String2="ASSOC") returned 5 [0222.022] _wcsicmp (_String1="findstr", _String2="FTYPE") returned -11 [0222.022] _wcsicmp (_String1="findstr", _String2="BREAK") returned 4 [0222.022] _wcsicmp (_String1="findstr", _String2="COLOR") returned 3 [0222.022] _wcsicmp (_String1="findstr", _String2="MKLINK") returned -7 [0222.022] _wcsnicmp (_String1="find", _String2="cmd ", _MaxCount=0x4) returned 3 [0222.022] GetProcessHeap () returned 0x6d0000 [0222.023] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x418) returned 0x6d9f10 [0222.023] SetErrorMode (uMode=0x0) returned 0x0 [0222.023] SetErrorMode (uMode=0x1) returned 0x0 [0222.023] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x6d9f18, lpFilePart=0x19fb7c | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x19fb7c*="system32") returned 0x13 [0222.023] SetErrorMode (uMode=0x0) returned 0x1 [0222.023] GetProcessHeap () returned 0x6d0000 [0222.023] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6d9f10, Size=0x40) returned 0x6d9f10 [0222.023] GetProcessHeap () returned 0x6d0000 [0222.023] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6d9f10) returned 0x40 [0222.023] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x9c [0222.023] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0222.023] GetProcessHeap () returned 0x6d0000 [0222.023] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x16e) returned 0x6d9f58 [0222.023] GetProcessHeap () returned 0x6d0000 [0222.023] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x2d4) returned 0x6da0d0 [0222.023] GetProcessHeap () returned 0x6d0000 [0222.023] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6da0d0, Size=0x170) returned 0x6da0d0 [0222.023] GetProcessHeap () returned 0x6d0000 [0222.023] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6da0d0) returned 0x170 [0222.023] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0222.023] GetProcessHeap () returned 0x6d0000 [0222.023] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xe0) returned 0x6d0fa0 [0222.023] GetProcessHeap () returned 0x6d0000 [0222.023] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6d0fa0, Size=0x76) returned 0x6d0fa0 [0222.023] GetProcessHeap () returned 0x6d0000 [0222.023] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6d0fa0) returned 0x76 [0222.023] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0222.023] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\findstr.*" (normalized: "c:\\windows\\syswow64\\findstr.*"), fInfoLevelId=0x1, lpFindFileData=0x19f908, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f908) returned 0x6d0980 [0222.024] FindClose (in: hFindFile=0x6d0980 | out: hFindFile=0x6d0980) returned 1 [0222.024] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\findstr.COM" (normalized: "c:\\windows\\syswow64\\findstr.com"), fInfoLevelId=0x1, lpFindFileData=0x19f908, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f908) returned 0xffffffff [0222.024] GetLastError () returned 0x2 [0222.024] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\findstr.EXE" (normalized: "c:\\windows\\syswow64\\findstr.exe"), fInfoLevelId=0x1, lpFindFileData=0x19f908, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f908) returned 0x6d0980 [0222.024] FindClose (in: hFindFile=0x6d0980 | out: hFindFile=0x6d0980) returned 1 [0222.024] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0222.024] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0222.024] GetProcessHeap () returned 0x6d0000 [0222.024] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x18) returned 0x6d7700 [0222.024] GetProcessHeap () returned 0x6d0000 [0222.024] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x210) returned 0x6da248 [0222.024] GetProcessHeap () returned 0x6d0000 [0222.024] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x22) returned 0x6d0980 [0222.024] _wcsnicmp (_String1="find", _String2="cmd ", _MaxCount=0x4) returned 3 [0222.024] GetProcessHeap () returned 0x6d0000 [0222.024] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x418) returned 0x6da460 [0222.025] SetErrorMode (uMode=0x0) returned 0x0 [0222.025] SetErrorMode (uMode=0x1) returned 0x0 [0222.025] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x6da468, lpFilePart=0x19f924 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x19f924*="system32") returned 0x13 [0222.025] SetErrorMode (uMode=0x0) returned 0x1 [0222.025] GetProcessHeap () returned 0x6d0000 [0222.025] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6da460, Size=0x40) returned 0x6da460 [0222.025] GetProcessHeap () returned 0x6d0000 [0222.025] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6da460) returned 0x40 [0222.025] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x9c [0222.025] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0222.025] GetProcessHeap () returned 0x6d0000 [0222.025] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x16e) returned 0x6da4a8 [0222.025] GetProcessHeap () returned 0x6d0000 [0222.025] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x2d4) returned 0x6da620 [0222.025] GetProcessHeap () returned 0x6d0000 [0222.025] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6da620, Size=0x170) returned 0x6da620 [0222.025] GetProcessHeap () returned 0x6d0000 [0222.025] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6da620) returned 0x170 [0222.025] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0222.025] GetProcessHeap () returned 0x6d0000 [0222.025] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xe0) returned 0x6da798 [0222.025] GetProcessHeap () returned 0x6d0000 [0222.025] RtlReAllocateHeap (Heap=0x6d0000, Flags=0x0, Ptr=0x6da798, Size=0x76) returned 0x6da798 [0222.025] GetProcessHeap () returned 0x6d0000 [0222.025] RtlSizeHeap (HeapHandle=0x6d0000, Flags=0x0, MemoryPointer=0x6da798) returned 0x76 [0222.025] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0222.025] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\findstr.*" (normalized: "c:\\windows\\syswow64\\findstr.*"), fInfoLevelId=0x1, lpFindFileData=0x19f6b0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f6b0) returned 0x6d1020 [0222.026] FindClose (in: hFindFile=0x6d1020 | out: hFindFile=0x6d1020) returned 1 [0222.026] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\findstr.COM" (normalized: "c:\\windows\\syswow64\\findstr.com"), fInfoLevelId=0x1, lpFindFileData=0x19f6b0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f6b0) returned 0xffffffff [0222.026] GetLastError () returned 0x2 [0222.026] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\findstr.EXE" (normalized: "c:\\windows\\syswow64\\findstr.exe"), fInfoLevelId=0x1, lpFindFileData=0x19f6b0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f6b0) returned 0x6d1020 [0222.026] FindClose (in: hFindFile=0x6d1020 | out: hFindFile=0x6d1020) returned 1 [0222.026] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0222.026] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0222.026] GetConsoleTitleW (in: lpConsoleTitle=0x19fba4, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0222.076] InitializeProcThreadAttributeList (in: lpAttributeList=0x19fad0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x19fab4 | out: lpAttributeList=0x19fad0, lpSize=0x19fab4) returned 1 [0222.076] UpdateProcThreadAttribute (in: lpAttributeList=0x19fad0, dwFlags=0x0, Attribute=0x60001, lpValue=0x19fabc, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x19fad0, lpPreviousValue=0x0) returned 1 [0222.076] GetStartupInfoW (in: lpStartupInfo=0x19fb08 | out: lpStartupInfo=0x19fb08*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x38, hStdOutput=0x428, hStdError=0x41c)) [0222.076] GetProcessHeap () returned 0x6d0000 [0222.076] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0x18) returned 0x6d7620 [0222.076] _wcsnicmp (_String1="COPYCMD", _String2="=::=::\\", _MaxCount=0x7) returned 38 [0222.076] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0222.076] _wcsnicmp (_String1="COPYCMD", _String2="=ExitCo", _MaxCount=0x7) returned 38 [0222.076] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0222.076] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0222.076] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0222.076] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0222.076] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0222.076] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0222.076] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0222.076] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0222.076] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0222.076] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="SESSION", _MaxCount=0x7) returned -16 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0222.077] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0222.077] GetProcessHeap () returned 0x6d0000 [0222.077] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6d7620) returned 1 [0222.077] GetProcessHeap () returned 0x6d0000 [0222.078] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xa) returned 0x6db2e8 [0222.078] lstrcmpW (lpString1="\\findstr.exe", lpString2="\\XCOPY.EXE") returned -1 [0222.078] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\findstr.exe", lpCommandLine="findstr All", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x19fa58*(cb=0x48, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="findstr All", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x19faa4 | out: lpCommandLine="findstr All", lpProcessInformation=0x19faa4*(hProcess=0xa8, hThread=0x9c, dwProcessId=0x3a4, dwThreadId=0x678)) returned 1 [0222.119] CloseHandle (hObject=0x9c) returned 1 [0222.119] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0222.119] GetProcessHeap () returned 0x6d0000 [0222.120] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6db468) returned 1 [0222.120] GetEnvironmentStringsW () returned 0x6dd608* [0222.120] GetProcessHeap () returned 0x6d0000 [0222.120] RtlAllocateHeap (HeapHandle=0x6d0000, Flags=0x8, Size=0xb32) returned 0x6db468 [0222.120] memcpy (in: _Dst=0x6db468, _Src=0x6dd608, _Size=0xb32 | out: _Dst=0x6db468) returned 0x6db468 [0222.120] FreeEnvironmentStringsA (penv="=") returned 1 [0222.120] GetProcessHeap () returned 0x6d0000 [0222.120] RtlFreeHeap (HeapHandle=0x6d0000, Flags=0x0, BaseAddress=0x6db2e8) returned 1 [0222.120] DeleteProcThreadAttributeList (in: lpAttributeList=0x19fad0 | out: lpAttributeList=0x19fad0) [0222.120] _dup2 (_FileHandleSrc=4, _FileHandleDst=0) returned 0 [0222.121] _close (_FileHandle=4) returned 0 [0222.121] WaitForSingleObject (hHandle=0xb4, dwMilliseconds=0xffffffff) returned 0x0 [0224.518] GetExitCodeProcess (in: hProcess=0xb4, lpExitCode=0x19fe20 | out: lpExitCode=0x19fe20*=0x1) returned 1 [0224.518] CloseHandle (hObject=0xb4) returned 1 [0224.518] WaitForSingleObject (hHandle=0xa8, dwMilliseconds=0xffffffff) returned 0x0 [0224.525] GetExitCodeProcess (in: hProcess=0xa8, lpExitCode=0x19fe20 | out: lpExitCode=0x19fe20*=0x1) returned 1 [0224.525] CloseHandle (hObject=0xa8) returned 1 [0224.525] _get_osfhandle (_FileHandle=1) returned 0x428 [0224.525] SetConsoleMode (hConsoleHandle=0x428, dwMode=0x0) returned 0 [0224.525] _get_osfhandle (_FileHandle=1) returned 0x428 [0224.525] GetConsoleMode (in: hConsoleHandle=0x428, lpMode=0xfbf40c | out: lpMode=0xfbf40c) returned 0 [0224.525] _get_osfhandle (_FileHandle=0) returned 0x38 [0224.525] GetConsoleMode (in: hConsoleHandle=0x38, lpMode=0xfbf408 | out: lpMode=0xfbf408) returned 1 [0224.525] SetConsoleInputExeNameW () returned 0x1 [0224.526] GetConsoleOutputCP () returned 0xfde9 [0224.526] GetCPInfo (in: CodePage=0xfde9, lpCPInfo=0xfbf460 | out: lpCPInfo=0xfbf460) returned 1 [0224.527] SetThreadUILanguage (LangId=0x0) returned 0x409 [0224.527] exit (_Code=1) Thread: id = 271 os_tid = 0x22c Process: id = "14" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x46f79000" os_pid = "0x1dc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x184" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\Windows" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000126d6" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 5071 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 5072 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 5073 start_va = 0x50000 end_va = 0x8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 5074 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 5075 start_va = 0x400000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 5076 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 5077 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 5078 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 5079 start_va = 0x7ff731a70000 end_va = 0x7ff731a80fff monitored = 0 entry_point = 0x7ff731a716b0 region_type = mapped_file name = "conhost.exe" filename = "\\Windows\\System32\\conhost.exe" (normalized: "c:\\windows\\system32\\conhost.exe") Region: id = 5080 start_va = 0x7ffa5f840000 end_va = 0x7ffa5fa00fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 5081 start_va = 0x600000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 5082 start_va = 0x7ffa5dba0000 end_va = 0x7ffa5dc4cfff monitored = 0 entry_point = 0x7ffa5dbb81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 5083 start_va = 0x7ffa5c8d0000 end_va = 0x7ffa5cab7fff monitored = 0 entry_point = 0x7ffa5c8fba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 5084 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 5085 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 5086 start_va = 0x90000 end_va = 0x14dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 5087 start_va = 0x7ffa5d880000 end_va = 0x7ffa5d91cfff monitored = 0 entry_point = 0x7ffa5d8878a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 5088 start_va = 0x150000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 5089 start_va = 0x600000 end_va = 0x70ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 5090 start_va = 0x780000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000780000" filename = "" Region: id = 5091 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 5092 start_va = 0x7ffa493f0000 end_va = 0x7ffa49448fff monitored = 0 entry_point = 0x7ffa493ffbf0 region_type = mapped_file name = "conhostv2.dll" filename = "\\Windows\\System32\\ConhostV2.dll" (normalized: "c:\\windows\\system32\\conhostv2.dll") Region: id = 5093 start_va = 0x190000 end_va = 0x190fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 5094 start_va = 0x7ffa5dc50000 end_va = 0x7ffa5deccfff monitored = 0 entry_point = 0x7ffa5dd24970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 5095 start_va = 0x7ffa5ccb0000 end_va = 0x7ffa5cdcbfff monitored = 0 entry_point = 0x7ffa5ccf02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 5096 start_va = 0x7ffa5cbd0000 end_va = 0x7ffa5cc39fff monitored = 0 entry_point = 0x7ffa5cc06d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 5097 start_va = 0x7ffa5d1e0000 end_va = 0x7ffa5d335fff monitored = 0 entry_point = 0x7ffa5d1ea8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 5098 start_va = 0x7ffa5d050000 end_va = 0x7ffa5d1d5fff monitored = 0 entry_point = 0x7ffa5d09ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 5099 start_va = 0x1a0000 end_va = 0x1a6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 5100 start_va = 0x7ffa5d9f0000 end_va = 0x7ffa5db32fff monitored = 0 entry_point = 0x7ffa5da18210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 5101 start_va = 0x7ffa5db40000 end_va = 0x7ffa5db9afff monitored = 0 entry_point = 0x7ffa5db538b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 5102 start_va = 0x7ffa5ded0000 end_va = 0x7ffa5df0afff monitored = 0 entry_point = 0x7ffa5ded12f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 5103 start_va = 0x7ffa5d920000 end_va = 0x7ffa5d9e0fff monitored = 0 entry_point = 0x7ffa5d940da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 5104 start_va = 0x7ffa5a460000 end_va = 0x7ffa5a5e5fff monitored = 0 entry_point = 0x7ffa5a4ad700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 5105 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 5106 start_va = 0x1c0000 end_va = 0x1c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 5107 start_va = 0x880000 end_va = 0xa07fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000880000" filename = "" Region: id = 5108 start_va = 0xa10000 end_va = 0xb90fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a10000" filename = "" Region: id = 5109 start_va = 0xba0000 end_va = 0x1f9ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ba0000" filename = "" Region: id = 5110 start_va = 0x1fa0000 end_va = 0x217ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fa0000" filename = "" Region: id = 5111 start_va = 0x600000 end_va = 0x63ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 5112 start_va = 0x700000 end_va = 0x70ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000700000" filename = "" Region: id = 5113 start_va = 0x7ffa5e0b0000 end_va = 0x7ffa5f60efff monitored = 0 entry_point = 0x7ffa5e2111f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 5114 start_va = 0x7ffa5bfb0000 end_va = 0x7ffa5bff2fff monitored = 0 entry_point = 0x7ffa5bfc4b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 5115 start_va = 0x7ffa5c260000 end_va = 0x7ffa5c8a3fff monitored = 0 entry_point = 0x7ffa5c4264b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 5116 start_va = 0x7ffa5df10000 end_va = 0x7ffa5dfb6fff monitored = 0 entry_point = 0x7ffa5df258d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 5117 start_va = 0x7ffa5cc40000 end_va = 0x7ffa5cc91fff monitored = 0 entry_point = 0x7ffa5cc4f530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 5118 start_va = 0x7ffa5beb0000 end_va = 0x7ffa5bebefff monitored = 0 entry_point = 0x7ffa5beb3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 5119 start_va = 0x7ffa5bef0000 end_va = 0x7ffa5bfa4fff monitored = 0 entry_point = 0x7ffa5bf322e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 5120 start_va = 0x7ffa5be60000 end_va = 0x7ffa5beaafff monitored = 0 entry_point = 0x7ffa5be635f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 5121 start_va = 0x7ffa5bec0000 end_va = 0x7ffa5bed3fff monitored = 0 entry_point = 0x7ffa5bec52e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 5122 start_va = 0x7ffa5a7e0000 end_va = 0x7ffa5a875fff monitored = 0 entry_point = 0x7ffa5a805570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 5123 start_va = 0x1fa0000 end_va = 0x20dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fa0000" filename = "" Region: id = 5124 start_va = 0x2170000 end_va = 0x217ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002170000" filename = "" Region: id = 5126 start_va = 0x2180000 end_va = 0x24b6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 5127 start_va = 0x50000 end_va = 0x70fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cmd.exe.mui" filename = "\\Windows\\System32\\en-US\\cmd.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\cmd.exe.mui") Region: id = 5128 start_va = 0x640000 end_va = 0x699fff monitored = 1 entry_point = 0x6553f0 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe") Region: id = 5129 start_va = 0x24c0000 end_va = 0x26d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000024c0000" filename = "" Region: id = 5130 start_va = 0x26e0000 end_va = 0x28fefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000026e0000" filename = "" Region: id = 5131 start_va = 0x1fa0000 end_va = 0x20b7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fa0000" filename = "" Region: id = 5132 start_va = 0x20d0000 end_va = 0x20dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020d0000" filename = "" Region: id = 5133 start_va = 0x2900000 end_va = 0x2b1efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002900000" filename = "" Region: id = 5134 start_va = 0x2b20000 end_va = 0x2c28fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b20000" filename = "" Thread: id = 268 os_tid = 0x644 Thread: id = 269 os_tid = 0xabc Thread: id = 270 os_tid = 0x220 Process: id = "15" image_name = "chcp.com" filename = "c:\\windows\\syswow64\\chcp.com" page_root = "0x43db9000" os_pid = "0x230" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x184" cmd_line = "chcp 65001 " cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000126d6" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 5145 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 5146 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 5147 start_va = 0x40000 end_va = 0x46fff monitored = 0 entry_point = 0x41c90 region_type = mapped_file name = "chcp.com" filename = "\\Windows\\SysWOW64\\chcp.com" (normalized: "c:\\windows\\syswow64\\chcp.com") Region: id = 5148 start_va = 0x50000 end_va = 0x404ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 5149 start_va = 0x4050000 end_va = 0x4064fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004050000" filename = "" Region: id = 5150 start_va = 0x4070000 end_va = 0x40affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004070000" filename = "" Region: id = 5151 start_va = 0x40b0000 end_va = 0x40effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000040b0000" filename = "" Region: id = 5152 start_va = 0x40f0000 end_va = 0x40f3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000040f0000" filename = "" Region: id = 5153 start_va = 0x4100000 end_va = 0x4100fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004100000" filename = "" Region: id = 5154 start_va = 0x4110000 end_va = 0x4111fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004110000" filename = "" Region: id = 5155 start_va = 0x4200000 end_va = 0x43fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004200000" filename = "" Region: id = 5156 start_va = 0x77d80000 end_va = 0x77efafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 5157 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 5158 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 5159 start_va = 0x7fff0000 end_va = 0x7dfa5f83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 5160 start_va = 0x7dfa5f840000 end_va = 0x7ffa5f83ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007dfa5f840000" filename = "" Region: id = 5161 start_va = 0x7ffa5f840000 end_va = 0x7ffa5fa00fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 5162 start_va = 0x7ffa5fa01000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffa5fa01000" filename = "" Region: id = 5163 start_va = 0x4120000 end_va = 0x418ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004120000" filename = "" Region: id = 5164 start_va = 0x65700000 end_va = 0x6574ffff monitored = 0 entry_point = 0x65718180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 5165 start_va = 0x65750000 end_va = 0x657c9fff monitored = 0 entry_point = 0x65763290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 5166 start_va = 0x76950000 end_va = 0x76a2ffff monitored = 0 entry_point = 0x76963980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 5167 start_va = 0x656f0000 end_va = 0x656f7fff monitored = 0 entry_point = 0x656f17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 5168 start_va = 0x4400000 end_va = 0x469ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004400000" filename = "" Region: id = 5169 start_va = 0x76950000 end_va = 0x76a2ffff monitored = 0 entry_point = 0x76963980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 5170 start_va = 0x74cc0000 end_va = 0x74e3dfff monitored = 0 entry_point = 0x74d71b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 5171 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 5172 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 5173 start_va = 0x4400000 end_va = 0x44bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 5174 start_va = 0x45a0000 end_va = 0x469ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000045a0000" filename = "" Region: id = 5175 start_va = 0x77610000 end_va = 0x776cdfff monitored = 0 entry_point = 0x77645630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 5176 start_va = 0x4120000 end_va = 0x415ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004120000" filename = "" Region: id = 5177 start_va = 0x4180000 end_va = 0x418ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004180000" filename = "" Region: id = 5178 start_va = 0x4190000 end_va = 0x41cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004190000" filename = "" Region: id = 5179 start_va = 0x6f600000 end_va = 0x6f626fff monitored = 0 entry_point = 0x6f60a850 region_type = mapped_file name = "ulib.dll" filename = "\\Windows\\SysWOW64\\ulib.dll" (normalized: "c:\\windows\\syswow64\\ulib.dll") Region: id = 5180 start_va = 0x46a0000 end_va = 0x481ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000046a0000" filename = "" Region: id = 5181 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 5182 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 5183 start_va = 0x6f5f0000 end_va = 0x6f5fafff monitored = 0 entry_point = 0x6f5f46c0 region_type = mapped_file name = "fsutilext.dll" filename = "\\Windows\\SysWOW64\\fsutilext.dll" (normalized: "c:\\windows\\syswow64\\fsutilext.dll") Region: id = 5184 start_va = 0x44c0000 end_va = 0x4502fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ulib.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\ulib.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\ulib.dll.mui") Thread: id = 272 os_tid = 0x278 Thread: id = 273 os_tid = 0x334 Process: id = "16" image_name = "netsh.exe" filename = "c:\\windows\\syswow64\\netsh.exe" page_root = "0x4aad5000" os_pid = "0x36c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x184" cmd_line = "netsh wlan show profile " cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000126d6" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 5185 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 5186 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 5187 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 5188 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 5189 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 5190 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 5191 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 5192 start_va = 0x1c0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 5193 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 5194 start_va = 0x910000 end_va = 0x92dfff monitored = 1 entry_point = 0x919980 region_type = mapped_file name = "netsh.exe" filename = "\\Windows\\SysWOW64\\netsh.exe" (normalized: "c:\\windows\\syswow64\\netsh.exe") Region: id = 5195 start_va = 0x930000 end_va = 0x492ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000930000" filename = "" Region: id = 5196 start_va = 0x77d80000 end_va = 0x77efafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 5197 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 5198 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 5199 start_va = 0x7fff0000 end_va = 0x7dfa5f83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 5200 start_va = 0x7dfa5f840000 end_va = 0x7ffa5f83ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007dfa5f840000" filename = "" Region: id = 5201 start_va = 0x7ffa5f840000 end_va = 0x7ffa5fa00fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 5202 start_va = 0x7ffa5fa01000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffa5fa01000" filename = "" Region: id = 5203 start_va = 0x400000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 5204 start_va = 0x65700000 end_va = 0x6574ffff monitored = 0 entry_point = 0x65718180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 5205 start_va = 0x65750000 end_va = 0x657c9fff monitored = 0 entry_point = 0x65763290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 5206 start_va = 0x76950000 end_va = 0x76a2ffff monitored = 0 entry_point = 0x76963980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 5207 start_va = 0x656f0000 end_va = 0x656f7fff monitored = 0 entry_point = 0x656f17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 5208 start_va = 0x460000 end_va = 0x6affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 5209 start_va = 0x76950000 end_va = 0x76a2ffff monitored = 0 entry_point = 0x76963980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 5210 start_va = 0x74cc0000 end_va = 0x74e3dfff monitored = 0 entry_point = 0x74d71b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 5211 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 5212 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 5213 start_va = 0x460000 end_va = 0x51dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 5214 start_va = 0x5b0000 end_va = 0x6affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 5215 start_va = 0x77610000 end_va = 0x776cdfff monitored = 0 entry_point = 0x77645630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 5216 start_va = 0x400000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 5217 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 5218 start_va = 0x6b0000 end_va = 0x7affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 5219 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 5220 start_va = 0x76a30000 end_va = 0x76ac1fff monitored = 0 entry_point = 0x76a68cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 5221 start_va = 0x76f20000 end_va = 0x770dcfff monitored = 0 entry_point = 0x77002a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 5222 start_va = 0x75240000 end_va = 0x752ecfff monitored = 0 entry_point = 0x75254f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 5223 start_va = 0x74ab0000 end_va = 0x74acdfff monitored = 0 entry_point = 0x74abb640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 5224 start_va = 0x74aa0000 end_va = 0x74aa9fff monitored = 0 entry_point = 0x74aa2a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 5225 start_va = 0x77d20000 end_va = 0x77d77fff monitored = 0 entry_point = 0x77d625c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 5244 start_va = 0x77580000 end_va = 0x775c3fff monitored = 0 entry_point = 0x77599d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 5245 start_va = 0x4930000 end_va = 0x4b0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004930000" filename = "" Region: id = 5246 start_va = 0x7b0000 end_va = 0x899fff monitored = 0 entry_point = 0x7ed650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 5247 start_va = 0x77160000 end_va = 0x7716bfff monitored = 0 entry_point = 0x77163930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 5254 start_va = 0x6f620000 end_va = 0x6f62afff monitored = 0 entry_point = 0x6f624150 region_type = mapped_file name = "ifmon.dll" filename = "\\Windows\\SysWOW64\\ifmon.dll" (normalized: "c:\\windows\\syswow64\\ifmon.dll") Region: id = 5255 start_va = 0x75080000 end_va = 0x750defff monitored = 0 entry_point = 0x75084af0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 5256 start_va = 0x775d0000 end_va = 0x77606fff monitored = 0 entry_point = 0x775d3b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 5257 start_va = 0x6f5f0000 end_va = 0x6f61efff monitored = 0 entry_point = 0x6f5fbb70 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 5262 start_va = 0x6f5a0000 end_va = 0x6f5effff monitored = 0 entry_point = 0x6f5e13b0 region_type = mapped_file name = "rasmontr.dll" filename = "\\Windows\\SysWOW64\\rasmontr.dll" (normalized: "c:\\windows\\syswow64\\rasmontr.dll") Region: id = 5273 start_va = 0x770e0000 end_va = 0x7715afff monitored = 0 entry_point = 0x770fe970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 5274 start_va = 0x77bd0000 end_va = 0x77d16fff monitored = 0 entry_point = 0x77be1cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 5275 start_va = 0x74f30000 end_va = 0x7507efff monitored = 0 entry_point = 0x74fe6820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 5279 start_va = 0x6f4f0000 end_va = 0x6f594fff monitored = 0 entry_point = 0x6f50ac50 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\SysWOW64\\rasapi32.dll" (normalized: "c:\\windows\\syswow64\\rasapi32.dll") Region: id = 5280 start_va = 0x6f470000 end_va = 0x6f4e5fff monitored = 0 entry_point = 0x6f4d36a0 region_type = mapped_file name = "mprapi.dll" filename = "\\Windows\\SysWOW64\\mprapi.dll" (normalized: "c:\\windows\\syswow64\\mprapi.dll") Region: id = 5281 start_va = 0x6f3f0000 end_va = 0x6f412fff monitored = 0 entry_point = 0x6f3f5570 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\SysWOW64\\rasman.dll" (normalized: "c:\\windows\\syswow64\\rasman.dll") Region: id = 5282 start_va = 0x6f420000 end_va = 0x6f466fff monitored = 0 entry_point = 0x6f4358d0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll") Region: id = 5287 start_va = 0x520000 end_va = 0x55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 5288 start_va = 0x7b0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007b0000" filename = "" Region: id = 5289 start_va = 0x6fb80000 end_va = 0x6fb9afff monitored = 0 entry_point = 0x6fb89050 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 5290 start_va = 0x6f2b0000 end_va = 0x6f3e1fff monitored = 1 entry_point = 0x6f2ec0e0 region_type = mapped_file name = "mfc42u.dll" filename = "\\Windows\\SysWOW64\\mfc42u.dll" (normalized: "c:\\windows\\syswow64\\mfc42u.dll") Region: id = 5291 start_va = 0x75140000 end_va = 0x7522afff monitored = 0 entry_point = 0x7517d650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 5292 start_va = 0x6f210000 end_va = 0x6f2a8fff monitored = 0 entry_point = 0x6f248470 region_type = mapped_file name = "odbc32.dll" filename = "\\Windows\\SysWOW64\\odbc32.dll" (normalized: "c:\\windows\\syswow64\\odbc32.dll") Region: id = 5293 start_va = 0x6f200000 end_va = 0x6f207fff monitored = 0 entry_point = 0x6f201d70 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\SysWOW64\\dpapi.dll" (normalized: "c:\\windows\\syswow64\\dpapi.dll") Region: id = 5294 start_va = 0x1d0000 end_va = 0x1f9fff monitored = 0 entry_point = 0x1d5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 5295 start_va = 0x4930000 end_va = 0x4ab7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004930000" filename = "" Region: id = 5296 start_va = 0x4b00000 end_va = 0x4b0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b00000" filename = "" Region: id = 5297 start_va = 0x76b30000 end_va = 0x76b5afff monitored = 0 entry_point = 0x76b35680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 5298 start_va = 0x4b10000 end_va = 0x4c90fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004b10000" filename = "" Region: id = 5299 start_va = 0x4ca0000 end_va = 0x609ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004ca0000" filename = "" Region: id = 5300 start_va = 0x30000 end_va = 0x34fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netsh.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\netsh.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\netsh.exe.mui") Region: id = 5301 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 5302 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 5303 start_va = 0x60a0000 end_va = 0x611ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000060a0000" filename = "" Region: id = 5304 start_va = 0x1f0000 end_va = 0x1f7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mfc42u.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\MFC42u.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\mfc42u.dll.mui") Region: id = 5305 start_va = 0x6f1a0000 end_va = 0x6f1fbfff monitored = 0 entry_point = 0x6f1e86c0 region_type = mapped_file name = "authfwcfg.dll" filename = "\\Windows\\SysWOW64\\authfwcfg.dll" (normalized: "c:\\windows\\syswow64\\authfwcfg.dll") Region: id = 5306 start_va = 0x74ed0000 end_va = 0x74f2dfff monitored = 0 entry_point = 0x74ee7470 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\SysWOW64\\FirewallAPI.dll" (normalized: "c:\\windows\\syswow64\\firewallapi.dll") Region: id = 5307 start_va = 0x6f170000 end_va = 0x6f19cfff monitored = 0 entry_point = 0x6f17c010 region_type = mapped_file name = "fwpolicyiomgr.dll" filename = "\\Windows\\SysWOW64\\fwpolicyiomgr.dll" (normalized: "c:\\windows\\syswow64\\fwpolicyiomgr.dll") Region: id = 5308 start_va = 0x6f140000 end_va = 0x6f16bfff monitored = 0 entry_point = 0x6f155ee0 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\SysWOW64\\fwbase.dll" (normalized: "c:\\windows\\syswow64\\fwbase.dll") Region: id = 5309 start_va = 0x6f130000 end_va = 0x6f136fff monitored = 0 entry_point = 0x6f132060 region_type = mapped_file name = "dhcpcmonitor.dll" filename = "\\Windows\\SysWOW64\\dhcpcmonitor.dll" (normalized: "c:\\windows\\syswow64\\dhcpcmonitor.dll") Region: id = 5310 start_va = 0x6f110000 end_va = 0x6f122fff monitored = 0 entry_point = 0x6f1125d0 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc6.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc6.dll") Region: id = 5311 start_va = 0x6f0f0000 end_va = 0x6f103fff monitored = 0 entry_point = 0x6f0f3c10 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc.dll") Region: id = 5312 start_va = 0x750e0000 end_va = 0x750e6fff monitored = 0 entry_point = 0x750e1e10 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 5313 start_va = 0x6f0d0000 end_va = 0x6f0e1fff monitored = 0 entry_point = 0x6f0dc8d0 region_type = mapped_file name = "dot3cfg.dll" filename = "\\Windows\\SysWOW64\\dot3cfg.dll" (normalized: "c:\\windows\\syswow64\\dot3cfg.dll") Region: id = 5314 start_va = 0x6f070000 end_va = 0x6f0a9fff monitored = 0 entry_point = 0x6f098740 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\SysWOW64\\onex.dll" (normalized: "c:\\windows\\syswow64\\onex.dll") Region: id = 5315 start_va = 0x6f050000 end_va = 0x6f060fff monitored = 0 entry_point = 0x6f05a1f0 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\SysWOW64\\eappprxy.dll" (normalized: "c:\\windows\\syswow64\\eappprxy.dll") Region: id = 5316 start_va = 0x6f000000 end_va = 0x6f049fff monitored = 0 entry_point = 0x6f00a280 region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\SysWOW64\\eappcfg.dll" (normalized: "c:\\windows\\syswow64\\eappcfg.dll") Region: id = 5317 start_va = 0x6f0b0000 end_va = 0x6f0c8fff monitored = 0 entry_point = 0x6f0c0530 region_type = mapped_file name = "dot3api.dll" filename = "\\Windows\\SysWOW64\\dot3api.dll" (normalized: "c:\\windows\\syswow64\\dot3api.dll") Region: id = 5318 start_va = 0x6efe0000 end_va = 0x6eff7fff monitored = 0 entry_point = 0x6efe4820 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\SysWOW64\\atl.dll" (normalized: "c:\\windows\\syswow64\\atl.dll") Region: id = 5319 start_va = 0x440000 end_va = 0x443fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 5320 start_va = 0x6efd0000 end_va = 0x6efdefff monitored = 0 entry_point = 0x6efd92a0 region_type = mapped_file name = "fwcfg.dll" filename = "\\Windows\\SysWOW64\\fwcfg.dll" (normalized: "c:\\windows\\syswow64\\fwcfg.dll") Region: id = 5321 start_va = 0x6efc0000 end_va = 0x6efc7fff monitored = 0 entry_point = 0x6efc28a0 region_type = mapped_file name = "hnetmon.dll" filename = "\\Windows\\SysWOW64\\hnetmon.dll" (normalized: "c:\\windows\\syswow64\\hnetmon.dll") Region: id = 5322 start_va = 0x6ed20000 end_va = 0x6efb1fff monitored = 0 entry_point = 0x6ed2e710 region_type = mapped_file name = "netshell.dll" filename = "\\Windows\\SysWOW64\\netshell.dll" (normalized: "c:\\windows\\syswow64\\netshell.dll") Region: id = 5323 start_va = 0x750f0000 end_va = 0x75134fff monitored = 0 entry_point = 0x7510de90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 5324 start_va = 0x754d0000 end_va = 0x768cefff monitored = 0 entry_point = 0x7568b990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 5325 start_va = 0x776d0000 end_va = 0x77bc8fff monitored = 0 entry_point = 0x778d7610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 5326 start_va = 0x74e40000 end_va = 0x74eccfff monitored = 0 entry_point = 0x74e89b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 5327 start_va = 0x76bc0000 end_va = 0x76c03fff monitored = 0 entry_point = 0x76bc7410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 5328 start_va = 0x76940000 end_va = 0x7694efff monitored = 0 entry_point = 0x76942e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 5329 start_va = 0x6ed00000 end_va = 0x6ed13fff monitored = 0 entry_point = 0x6ed05a40 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\SysWOW64\\nlaapi.dll" (normalized: "c:\\windows\\syswow64\\nlaapi.dll") Region: id = 5330 start_va = 0x6ecd0000 end_va = 0x6ecfefff monitored = 0 entry_point = 0x6ecf3330 region_type = mapped_file name = "netiohlp.dll" filename = "\\Windows\\SysWOW64\\netiohlp.dll" (normalized: "c:\\windows\\syswow64\\netiohlp.dll") Region: id = 5331 start_va = 0x6ec40000 end_va = 0x6ecc3fff monitored = 0 entry_point = 0x6ec66530 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 5332 start_va = 0x6ec30000 end_va = 0x6ec37fff monitored = 0 entry_point = 0x6ec31fc0 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 5333 start_va = 0x6ec20000 end_va = 0x6ec2afff monitored = 0 entry_point = 0x6ec26010 region_type = mapped_file name = "nshhttp.dll" filename = "\\Windows\\SysWOW64\\nshhttp.dll" (normalized: "c:\\windows\\syswow64\\nshhttp.dll") Region: id = 5334 start_va = 0x6ec10000 end_va = 0x6ec1afff monitored = 0 entry_point = 0x6ec11b60 region_type = mapped_file name = "httpapi.dll" filename = "\\Windows\\SysWOW64\\httpapi.dll" (normalized: "c:\\windows\\syswow64\\httpapi.dll") Region: id = 5335 start_va = 0x6eba0000 end_va = 0x6ec02fff monitored = 0 entry_point = 0x6ebf6c70 region_type = mapped_file name = "nshipsec.dll" filename = "\\Windows\\SysWOW64\\nshipsec.dll" (normalized: "c:\\windows\\syswow64\\nshipsec.dll") Region: id = 5336 start_va = 0x74b40000 end_va = 0x74cb7fff monitored = 0 entry_point = 0x74b98a90 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 5337 start_va = 0x76ca0000 end_va = 0x76cadfff monitored = 0 entry_point = 0x76ca5410 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 5338 start_va = 0x76ad0000 end_va = 0x76b22fff monitored = 0 entry_point = 0x76af0a10 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 5339 start_va = 0x6eb80000 end_va = 0x6eb98fff monitored = 0 entry_point = 0x6eb847e0 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll") Region: id = 5340 start_va = 0x6eb40000 end_va = 0x6eb7afff monitored = 0 entry_point = 0x6eb47e00 region_type = mapped_file name = "activeds.dll" filename = "\\Windows\\SysWOW64\\activeds.dll" (normalized: "c:\\windows\\syswow64\\activeds.dll") Region: id = 5341 start_va = 0x6eb20000 end_va = 0x6eb33fff monitored = 0 entry_point = 0x6eb2e400 region_type = mapped_file name = "winipsec.dll" filename = "\\Windows\\SysWOW64\\winipsec.dll" (normalized: "c:\\windows\\syswow64\\winipsec.dll") Region: id = 5342 start_va = 0x6eae0000 end_va = 0x6eb17fff monitored = 0 entry_point = 0x6eafd280 region_type = mapped_file name = "adsldpc.dll" filename = "\\Windows\\SysWOW64\\adsldpc.dll" (normalized: "c:\\windows\\syswow64\\adsldpc.dll") Region: id = 5343 start_va = 0x6ea90000 end_va = 0x6eadafff monitored = 0 entry_point = 0x6eacfa00 region_type = mapped_file name = "polstore.dll" filename = "\\Windows\\SysWOW64\\polstore.dll" (normalized: "c:\\windows\\syswow64\\polstore.dll") Region: id = 5344 start_va = 0x560000 end_va = 0x560fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000560000" filename = "" Region: id = 5345 start_va = 0x6e9f0000 end_va = 0x6ea80fff monitored = 0 entry_point = 0x6ea620a0 region_type = mapped_file name = "nshwfp.dll" filename = "\\Windows\\SysWOW64\\nshwfp.dll" (normalized: "c:\\windows\\syswow64\\nshwfp.dll") Region: id = 5346 start_va = 0x6e9c0000 end_va = 0x6e9e0fff monitored = 0 entry_point = 0x6e9cbdb0 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\SysWOW64\\cabinet.dll" (normalized: "c:\\windows\\syswow64\\cabinet.dll") Region: id = 5347 start_va = 0x6120000 end_va = 0x627ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006120000" filename = "" Region: id = 5348 start_va = 0x6e980000 end_va = 0x6e9b0fff monitored = 0 entry_point = 0x6e9a7170 region_type = mapped_file name = "p2pnetsh.dll" filename = "\\Windows\\SysWOW64\\p2pnetsh.dll" (normalized: "c:\\windows\\syswow64\\p2pnetsh.dll") Region: id = 5349 start_va = 0x6e950000 end_va = 0x6e97ffff monitored = 0 entry_point = 0x6e974320 region_type = mapped_file name = "p2p.dll" filename = "\\Windows\\SysWOW64\\P2P.dll" (normalized: "c:\\windows\\syswow64\\p2p.dll") Region: id = 5350 start_va = 0x570000 end_va = 0x571fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000570000" filename = "" Region: id = 5351 start_va = 0x6e940000 end_va = 0x6e94afff monitored = 0 entry_point = 0x6e945490 region_type = mapped_file name = "rpcnsh.dll" filename = "\\Windows\\SysWOW64\\rpcnsh.dll" (normalized: "c:\\windows\\syswow64\\rpcnsh.dll") Region: id = 5352 start_va = 0x6e930000 end_va = 0x6e936fff monitored = 0 entry_point = 0x6e931e10 region_type = mapped_file name = "whhelper.dll" filename = "\\Windows\\SysWOW64\\whhelper.dll" (normalized: "c:\\windows\\syswow64\\whhelper.dll") Region: id = 5353 start_va = 0x6e890000 end_va = 0x6e92afff monitored = 0 entry_point = 0x6e8cf7e0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\SysWOW64\\winhttp.dll" (normalized: "c:\\windows\\syswow64\\winhttp.dll") Region: id = 5354 start_va = 0x6e850000 end_va = 0x6e88cfff monitored = 0 entry_point = 0x6e8804f0 region_type = mapped_file name = "wlancfg.dll" filename = "\\Windows\\SysWOW64\\wlancfg.dll" (normalized: "c:\\windows\\syswow64\\wlancfg.dll") Region: id = 5355 start_va = 0x6fbd0000 end_va = 0x6fbe2fff monitored = 0 entry_point = 0x6fbd9950 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 5356 start_va = 0x6e800000 end_va = 0x6e84cfff monitored = 0 entry_point = 0x6e80d930 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\SysWOW64\\wlanapi.dll" (normalized: "c:\\windows\\syswow64\\wlanapi.dll") Region: id = 5357 start_va = 0x6e7d0000 end_va = 0x6e7f9fff monitored = 0 entry_point = 0x6e7eee70 region_type = mapped_file name = "wifidisplay.dll" filename = "\\Windows\\SysWOW64\\WiFiDisplay.dll" (normalized: "c:\\windows\\syswow64\\wifidisplay.dll") Region: id = 5358 start_va = 0x6e7a0000 end_va = 0x6e7c1fff monitored = 0 entry_point = 0x6e7a91f0 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 5359 start_va = 0x6e790000 end_va = 0x6e797fff monitored = 0 entry_point = 0x6e792d80 region_type = mapped_file name = "wshelper.dll" filename = "\\Windows\\SysWOW64\\wshelper.dll" (normalized: "c:\\windows\\syswow64\\wshelper.dll") Region: id = 5360 start_va = 0x6e740000 end_va = 0x6e78efff monitored = 0 entry_point = 0x6e74d850 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 5361 start_va = 0x6e6f0000 end_va = 0x6e73cfff monitored = 0 entry_point = 0x6e706930 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\SysWOW64\\wevtapi.dll" (normalized: "c:\\windows\\syswow64\\wevtapi.dll") Region: id = 5362 start_va = 0x6e690000 end_va = 0x6e6eafff monitored = 0 entry_point = 0x6e6ddbe0 region_type = mapped_file name = "peerdistsh.dll" filename = "\\Windows\\SysWOW64\\PeerDistSh.dll" (normalized: "c:\\windows\\syswow64\\peerdistsh.dll") Region: id = 5363 start_va = 0x6e680000 end_va = 0x6e688fff monitored = 0 entry_point = 0x6e681310 region_type = mapped_file name = "ktmw32.dll" filename = "\\Windows\\SysWOW64\\ktmw32.dll" (normalized: "c:\\windows\\syswow64\\ktmw32.dll") Region: id = 5364 start_va = 0x72de0000 end_va = 0x72e54fff monitored = 0 entry_point = 0x72e19a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 5365 start_va = 0x6280000 end_va = 0x63effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006280000" filename = "" Region: id = 5366 start_va = 0x580000 end_va = 0x590fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwcfg.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\fwcfg.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\fwcfg.dll.mui") Region: id = 5367 start_va = 0x5a0000 end_va = 0x5a9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "p2pnetsh.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\p2pnetsh.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\p2pnetsh.dll.mui") Region: id = 5368 start_va = 0x6e660000 end_va = 0x6e67afff monitored = 0 entry_point = 0x6e665020 region_type = mapped_file name = "wcmapi.dll" filename = "\\Windows\\SysWOW64\\wcmapi.dll" (normalized: "c:\\windows\\syswow64\\wcmapi.dll") Region: id = 5369 start_va = 0x6e640000 end_va = 0x6e65efff monitored = 0 entry_point = 0x6e64c120 region_type = mapped_file name = "rmclient.dll" filename = "\\Windows\\SysWOW64\\rmclient.dll" (normalized: "c:\\windows\\syswow64\\rmclient.dll") Region: id = 5370 start_va = 0x8b0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 5371 start_va = 0x6120000 end_va = 0x621ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006120000" filename = "" Region: id = 5372 start_va = 0x6270000 end_va = 0x627ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006270000" filename = "" Region: id = 5373 start_va = 0x6e620000 end_va = 0x6e63efff monitored = 0 entry_point = 0x6e628a90 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\SysWOW64\\gpapi.dll" (normalized: "c:\\windows\\syswow64\\gpapi.dll") Region: id = 5374 start_va = 0x6280000 end_va = 0x637ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006280000" filename = "" Region: id = 5375 start_va = 0x63e0000 end_va = 0x63effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000063e0000" filename = "" Region: id = 5376 start_va = 0x63f0000 end_va = 0x6726fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 5377 start_va = 0x4ac0000 end_va = 0x4aedfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wlancfg.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\wlancfg.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\wlancfg.dll.mui") Region: id = 5378 start_va = 0x6220000 end_va = 0x625ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006220000" filename = "" Region: id = 5379 start_va = 0x6730000 end_va = 0x682ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006730000" filename = "" Thread: id = 274 os_tid = 0x37c [0222.135] GetModuleHandleA (lpModuleName=0x0) returned 0x910000 [0222.135] __set_app_type (_Type=0x1) [0222.135] __p__fmode () returned 0x776c4d6c [0222.135] __p__commode () returned 0x776c5b1c [0222.135] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x919bb0) returned 0x0 [0222.135] __wgetmainargs (in: _Argc=0x9233e8, _Argv=0x9233ec, _Env=0x9233f0, _DoWildCard=0, _StartInfo=0x9233fc | out: _Argc=0x9233e8, _Argv=0x9233ec, _Env=0x9233f0) returned 0 [0222.136] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0222.136] GetModuleHandleW (lpModuleName=0x0) returned 0x910000 [0222.136] _vsnwprintf (in: _Buffer=0x924ae0, _BufferCount=0x1fff, _Format="%s>", _ArgList=0x197af0 | out: _Buffer="netsh>") returned 6 [0222.136] GetProcessHeap () returned 0x5b0000 [0222.136] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b0598 [0222.136] GetProcessHeap () returned 0x5b0000 [0222.136] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b6c98 [0222.136] GetProcessHeap () returned 0x5b0000 [0222.136] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b72f8 [0222.136] GetProcessHeap () returned 0x5b0000 [0222.136] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b6f30 [0222.137] GetProcessHeap () returned 0x5b0000 [0222.137] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b6f40 [0222.137] GetProcessHeap () returned 0x5b0000 [0222.137] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b6cf8 [0222.137] GetProcessHeap () returned 0x5b0000 [0222.137] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b6d08 [0222.137] GetProcessHeap () returned 0x5b0000 [0222.137] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b6d18 [0222.137] GetProcessHeap () returned 0x5b0000 [0222.137] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b6d28 [0222.137] GetProcessHeap () returned 0x5b0000 [0222.137] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b6d38 [0222.137] GetProcessHeap () returned 0x5b0000 [0222.137] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b6d48 [0222.137] GetProcessHeap () returned 0x5b0000 [0222.137] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b6d58 [0222.137] GetProcessHeap () returned 0x5b0000 [0222.137] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b6928 [0222.137] GetProcessHeap () returned 0x5b0000 [0222.137] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b6938 [0222.137] GetProcessHeap () returned 0x5b0000 [0222.137] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b6948 [0222.137] GetProcessHeap () returned 0x5b0000 [0222.137] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8f88 [0222.137] GetProcessHeap () returned 0x5b0000 [0222.137] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8fb8 [0222.137] GetProcessHeap () returned 0x5b0000 [0222.137] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8f98 [0222.137] GetProcessHeap () returned 0x5b0000 [0222.137] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8ef8 [0222.137] GetProcessHeap () returned 0x5b0000 [0222.137] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8e78 [0222.137] GetProcessHeap () returned 0x5b0000 [0222.137] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8e48 [0222.137] GetProcessHeap () returned 0x5b0000 [0222.137] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8f08 [0222.137] GetProcessHeap () returned 0x5b0000 [0222.137] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8f68 [0222.137] GetProcessHeap () returned 0x5b0000 [0222.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8f58 [0222.138] GetProcessHeap () returned 0x5b0000 [0222.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8e68 [0222.138] GetProcessHeap () returned 0x5b0000 [0222.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8f18 [0222.138] GetProcessHeap () returned 0x5b0000 [0222.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8f28 [0222.138] GetProcessHeap () returned 0x5b0000 [0222.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8e28 [0222.138] GetProcessHeap () returned 0x5b0000 [0222.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8ed8 [0222.138] GetProcessHeap () returned 0x5b0000 [0222.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8fa8 [0222.138] GetProcessHeap () returned 0x5b0000 [0222.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8e18 [0222.138] GetProcessHeap () returned 0x5b0000 [0222.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8e08 [0222.138] GetProcessHeap () returned 0x5b0000 [0222.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8f38 [0222.138] GetProcessHeap () returned 0x5b0000 [0222.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8df8 [0222.138] GetProcessHeap () returned 0x5b0000 [0222.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8e58 [0222.138] GetProcessHeap () returned 0x5b0000 [0222.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8e38 [0222.138] GetProcessHeap () returned 0x5b0000 [0222.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8e88 [0222.138] GetProcessHeap () returned 0x5b0000 [0222.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8f48 [0222.138] GetProcessHeap () returned 0x5b0000 [0222.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8f78 [0222.138] GetProcessHeap () returned 0x5b0000 [0222.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8e98 [0222.138] GetProcessHeap () returned 0x5b0000 [0222.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8ea8 [0222.138] GetProcessHeap () returned 0x5b0000 [0222.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8ec8 [0222.138] GetProcessHeap () returned 0x5b0000 [0222.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8de8 [0222.139] GetProcessHeap () returned 0x5b0000 [0222.139] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8ee8 [0222.139] GetProcessHeap () returned 0x5b0000 [0222.139] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8eb8 [0222.139] GetProcessHeap () returned 0x5b0000 [0222.139] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9168 [0222.139] GetProcessHeap () returned 0x5b0000 [0222.139] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b90a8 [0222.139] GetProcessHeap () returned 0x5b0000 [0222.139] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b91a8 [0222.139] GetProcessHeap () returned 0x5b0000 [0222.139] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9198 [0222.139] GetProcessHeap () returned 0x5b0000 [0222.139] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b91e8 [0222.139] GetProcessHeap () returned 0x5b0000 [0222.139] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9008 [0222.139] GetProcessHeap () returned 0x5b0000 [0222.139] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9138 [0222.139] GetProcessHeap () returned 0x5b0000 [0222.139] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9148 [0222.139] GetProcessHeap () returned 0x5b0000 [0222.139] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b90d8 [0222.139] GetProcessHeap () returned 0x5b0000 [0222.139] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9158 [0222.139] GetProcessHeap () returned 0x5b0000 [0222.139] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b91b8 [0222.139] GetProcessHeap () returned 0x5b0000 [0222.139] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b91c8 [0222.139] GetProcessHeap () returned 0x5b0000 [0222.139] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b91d8 [0222.139] GetProcessHeap () returned 0x5b0000 [0222.139] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b90e8 [0222.139] GetProcessHeap () returned 0x5b0000 [0222.139] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9108 [0222.139] GetProcessHeap () returned 0x5b0000 [0222.139] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9178 [0222.139] GetProcessHeap () returned 0x5b0000 [0222.139] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9078 [0222.139] GetProcessHeap () returned 0x5b0000 [0222.140] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9038 [0222.140] GetProcessHeap () returned 0x5b0000 [0222.140] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b90b8 [0222.140] GetProcessHeap () returned 0x5b0000 [0222.140] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b8ff8 [0222.140] GetProcessHeap () returned 0x5b0000 [0222.140] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9018 [0222.140] GetProcessHeap () returned 0x5b0000 [0222.140] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9048 [0222.140] GetProcessHeap () returned 0x5b0000 [0222.140] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9188 [0222.140] GetProcessHeap () returned 0x5b0000 [0222.140] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9098 [0222.140] GetProcessHeap () returned 0x5b0000 [0222.140] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9028 [0222.140] GetProcessHeap () returned 0x5b0000 [0222.140] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9058 [0222.140] GetProcessHeap () returned 0x5b0000 [0222.140] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b90f8 [0222.140] GetProcessHeap () returned 0x5b0000 [0222.140] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b90c8 [0222.140] GetProcessHeap () returned 0x5b0000 [0222.140] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9118 [0222.140] GetProcessHeap () returned 0x5b0000 [0222.140] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9128 [0222.140] GetProcessHeap () returned 0x5b0000 [0222.140] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9068 [0222.140] GetProcessHeap () returned 0x5b0000 [0222.140] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9088 [0222.140] GetProcessHeap () returned 0x5b0000 [0222.140] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9218 [0222.140] GetProcessHeap () returned 0x5b0000 [0222.140] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b92e8 [0222.140] GetProcessHeap () returned 0x5b0000 [0222.140] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9238 [0222.140] GetProcessHeap () returned 0x5b0000 [0222.140] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b93b8 [0222.140] GetProcessHeap () returned 0x5b0000 [0222.140] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b91f8 [0222.140] GetProcessHeap () returned 0x5b0000 [0222.141] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9288 [0222.141] GetProcessHeap () returned 0x5b0000 [0222.141] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9258 [0222.141] GetProcessHeap () returned 0x5b0000 [0222.141] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9328 [0222.141] GetProcessHeap () returned 0x5b0000 [0222.141] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9268 [0222.141] GetProcessHeap () returned 0x5b0000 [0222.141] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b92f8 [0222.141] GetProcessHeap () returned 0x5b0000 [0222.141] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b92a8 [0222.141] GetProcessHeap () returned 0x5b0000 [0222.141] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b92b8 [0222.141] GetProcessHeap () returned 0x5b0000 [0222.141] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b93a8 [0222.141] GetProcessHeap () returned 0x5b0000 [0222.141] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9208 [0222.141] GetProcessHeap () returned 0x5b0000 [0222.141] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9338 [0222.141] GetProcessHeap () returned 0x5b0000 [0222.141] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9298 [0222.141] GetProcessHeap () returned 0x5b0000 [0222.141] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9388 [0222.141] GetProcessHeap () returned 0x5b0000 [0222.141] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9398 [0222.141] GetProcessHeap () returned 0x5b0000 [0222.141] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b92c8 [0222.141] GetProcessHeap () returned 0x5b0000 [0222.142] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9228 [0222.142] GetProcessHeap () returned 0x5b0000 [0222.142] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9308 [0222.142] GetProcessHeap () returned 0x5b0000 [0222.142] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9248 [0222.142] GetProcessHeap () returned 0x5b0000 [0222.142] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9278 [0222.142] GetProcessHeap () returned 0x5b0000 [0222.142] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b92d8 [0222.142] GetProcessHeap () returned 0x5b0000 [0222.142] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9318 [0222.142] GetProcessHeap () returned 0x5b0000 [0222.142] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9348 [0222.142] GetProcessHeap () returned 0x5b0000 [0222.142] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9358 [0222.142] GetProcessHeap () returned 0x5b0000 [0222.142] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9368 [0222.142] GetProcessHeap () returned 0x5b0000 [0222.142] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9378 [0222.142] GetProcessHeap () returned 0x5b0000 [0222.142] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9610 [0222.142] GetProcessHeap () returned 0x5b0000 [0222.142] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b97a0 [0222.142] GetProcessHeap () returned 0x5b0000 [0222.142] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9730 [0222.142] GetProcessHeap () returned 0x5b0000 [0222.142] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b97b0 [0222.142] GetProcessHeap () returned 0x5b0000 [0222.142] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9630 [0222.142] GetProcessHeap () returned 0x5b0000 [0222.142] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9760 [0222.142] GetProcessHeap () returned 0x5b0000 [0222.142] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9650 [0222.142] GetProcessHeap () returned 0x5b0000 [0222.142] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9770 [0222.142] GetProcessHeap () returned 0x5b0000 [0222.142] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b97c0 [0222.142] GetProcessHeap () returned 0x5b0000 [0222.142] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9750 [0222.142] GetProcessHeap () returned 0x5b0000 [0222.143] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b96d0 [0222.143] GetProcessHeap () returned 0x5b0000 [0222.143] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b96e0 [0222.143] GetProcessHeap () returned 0x5b0000 [0222.143] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9620 [0222.143] GetProcessHeap () returned 0x5b0000 [0222.143] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b96f0 [0222.143] GetProcessHeap () returned 0x5b0000 [0222.143] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9640 [0222.143] GetProcessHeap () returned 0x5b0000 [0222.143] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9780 [0222.143] GetProcessHeap () returned 0x5b0000 [0222.143] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9600 [0222.143] GetProcessHeap () returned 0x5b0000 [0222.143] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9740 [0222.143] GetProcessHeap () returned 0x5b0000 [0222.143] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9700 [0222.143] GetProcessHeap () returned 0x5b0000 [0222.143] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9710 [0222.143] GetProcessHeap () returned 0x5b0000 [0222.143] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9660 [0222.143] GetProcessHeap () returned 0x5b0000 [0222.143] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9790 [0222.143] GetProcessHeap () returned 0x5b0000 [0222.143] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9720 [0222.143] GetProcessHeap () returned 0x5b0000 [0222.143] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9670 [0222.143] GetProcessHeap () returned 0x5b0000 [0222.143] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9680 [0222.143] GetProcessHeap () returned 0x5b0000 [0222.143] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9690 [0222.143] GetProcessHeap () returned 0x5b0000 [0222.143] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b96a0 [0222.143] GetProcessHeap () returned 0x5b0000 [0222.143] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b96b0 [0222.143] GetProcessHeap () returned 0x5b0000 [0222.143] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b96c0 [0222.143] GetProcessHeap () returned 0x5b0000 [0222.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9560 [0222.144] GetProcessHeap () returned 0x5b0000 [0222.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9440 [0222.144] GetProcessHeap () returned 0x5b0000 [0222.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9500 [0222.144] GetProcessHeap () returned 0x5b0000 [0222.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9420 [0222.144] GetProcessHeap () returned 0x5b0000 [0222.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9570 [0222.144] GetProcessHeap () returned 0x5b0000 [0222.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9470 [0222.144] GetProcessHeap () returned 0x5b0000 [0222.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9590 [0222.144] GetProcessHeap () returned 0x5b0000 [0222.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9550 [0222.144] GetProcessHeap () returned 0x5b0000 [0222.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9480 [0222.144] GetProcessHeap () returned 0x5b0000 [0222.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9430 [0222.144] GetProcessHeap () returned 0x5b0000 [0222.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9540 [0222.144] GetProcessHeap () returned 0x5b0000 [0222.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b95a0 [0222.144] GetProcessHeap () returned 0x5b0000 [0222.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9520 [0222.144] GetProcessHeap () returned 0x5b0000 [0222.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b95b0 [0222.144] GetProcessHeap () returned 0x5b0000 [0222.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9490 [0222.144] GetProcessHeap () returned 0x5b0000 [0222.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b95f0 [0222.144] GetProcessHeap () returned 0x5b0000 [0222.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9450 [0222.144] GetProcessHeap () returned 0x5b0000 [0222.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9580 [0222.144] GetProcessHeap () returned 0x5b0000 [0222.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b95c0 [0222.144] GetProcessHeap () returned 0x5b0000 [0222.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b95d0 [0222.145] GetProcessHeap () returned 0x5b0000 [0222.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b94a0 [0222.145] GetProcessHeap () returned 0x5b0000 [0222.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9460 [0222.145] GetProcessHeap () returned 0x5b0000 [0222.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b95e0 [0222.145] GetProcessHeap () returned 0x5b0000 [0222.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b94b0 [0222.145] GetProcessHeap () returned 0x5b0000 [0222.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9400 [0222.145] GetProcessHeap () returned 0x5b0000 [0222.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9410 [0222.145] GetProcessHeap () returned 0x5b0000 [0222.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b94c0 [0222.145] GetProcessHeap () returned 0x5b0000 [0222.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b94d0 [0222.145] GetProcessHeap () returned 0x5b0000 [0222.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9530 [0222.145] GetProcessHeap () returned 0x5b0000 [0222.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b94e0 [0222.145] GetProcessHeap () returned 0x5b0000 [0222.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b94f0 [0222.145] GetProcessHeap () returned 0x5b0000 [0222.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9510 [0222.145] GetProcessHeap () returned 0x5b0000 [0222.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9b08 [0222.145] GetProcessHeap () returned 0x5b0000 [0222.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9b48 [0222.145] GetProcessHeap () returned 0x5b0000 [0222.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9a58 [0222.145] GetProcessHeap () returned 0x5b0000 [0222.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9a98 [0222.145] GetProcessHeap () returned 0x5b0000 [0222.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9a38 [0222.145] GetProcessHeap () returned 0x5b0000 [0222.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9b28 [0222.145] GetProcessHeap () returned 0x5b0000 [0222.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9a88 [0222.146] GetProcessHeap () returned 0x5b0000 [0222.146] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9ae8 [0222.146] GetProcessHeap () returned 0x5b0000 [0222.146] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9bc8 [0222.146] GetProcessHeap () returned 0x5b0000 [0222.146] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9aa8 [0222.146] GetProcessHeap () returned 0x5b0000 [0222.146] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9a08 [0222.146] GetProcessHeap () returned 0x5b0000 [0222.146] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9a68 [0222.146] GetProcessHeap () returned 0x5b0000 [0222.146] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9a18 [0222.146] GetProcessHeap () returned 0x5b0000 [0222.146] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9b38 [0222.146] GetProcessHeap () returned 0x5b0000 [0222.146] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9b58 [0222.146] GetProcessHeap () returned 0x5b0000 [0222.146] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9b18 [0222.146] GetProcessHeap () returned 0x5b0000 [0222.146] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9bb8 [0222.146] GetProcessHeap () returned 0x5b0000 [0222.146] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9ab8 [0222.146] GetProcessHeap () returned 0x5b0000 [0222.146] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9b68 [0222.146] GetProcessHeap () returned 0x5b0000 [0222.146] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9a28 [0222.146] GetProcessHeap () returned 0x5b0000 [0222.146] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9a48 [0222.146] GetProcessHeap () returned 0x5b0000 [0222.146] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9b78 [0222.146] GetProcessHeap () returned 0x5b0000 [0222.146] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9b88 [0222.146] GetProcessHeap () returned 0x5b0000 [0222.146] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9b98 [0222.146] GetProcessHeap () returned 0x5b0000 [0222.146] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9a78 [0222.146] GetProcessHeap () returned 0x5b0000 [0222.146] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9ac8 [0222.146] GetProcessHeap () returned 0x5b0000 [0222.147] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9ba8 [0222.147] GetProcessHeap () returned 0x5b0000 [0222.147] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9ad8 [0222.147] GetProcessHeap () returned 0x5b0000 [0222.147] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9af8 [0222.147] GetProcessHeap () returned 0x5b0000 [0222.147] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9968 [0222.147] GetProcessHeap () returned 0x5b0000 [0222.147] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9858 [0222.147] GetProcessHeap () returned 0x5b0000 [0222.147] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b98f8 [0222.147] GetProcessHeap () returned 0x5b0000 [0222.147] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9838 [0222.147] GetProcessHeap () returned 0x5b0000 [0222.147] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9848 [0222.147] GetProcessHeap () returned 0x5b0000 [0222.147] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9878 [0222.147] GetProcessHeap () returned 0x5b0000 [0222.147] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9808 [0222.147] GetProcessHeap () returned 0x5b0000 [0222.147] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b99f8 [0222.147] GetProcessHeap () returned 0x5b0000 [0222.147] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9978 [0222.147] GetProcessHeap () returned 0x5b0000 [0222.147] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9948 [0222.147] GetProcessHeap () returned 0x5b0000 [0222.147] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9908 [0222.147] GetProcessHeap () returned 0x5b0000 [0222.147] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9898 [0222.147] GetProcessHeap () returned 0x5b0000 [0222.147] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9998 [0222.147] GetProcessHeap () returned 0x5b0000 [0222.147] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b9958 [0222.147] GetProcessHeap () returned 0x5b0000 [0222.147] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5b99a8 [0222.148] _wcsicmp (_String1="netsh.exe", _String2="ipxmontr.dll") returned 5 [0222.148] _wcsicmp (_String1="netsh.exe", _String2="ipxpromn.dll") returned 5 [0222.148] GetProcessHeap () returned 0x5b0000 [0222.148] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x14) returned 0x5b6958 [0222.148] memcpy (in: _Dst=0x5b6958, _Src=0x0, _Size=0x0 | out: _Dst=0x5b6958) returned 0x5b6958 [0222.148] GetProcessHeap () returned 0x5b0000 [0222.148] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x2) returned 0x5b9988 [0222.148] GetProcessHeap () returned 0x5b0000 [0222.148] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x14) returned 0x5b6978 [0222.148] _wcsupr (in: _String="netsh.exe" | out: _String="NETSH.EXE") returned="NETSH.EXE" [0222.148] GetProcessHeap () returned 0x5b0000 [0222.148] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x0) returned 1 [0222.148] GetProcessHeap () returned 0x5b0000 [0222.148] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x48) returned 0x5b66c0 [0222.148] memcpy (in: _Dst=0x5b66c0, _Src=0x0, _Size=0x0 | out: _Dst=0x5b66c0) returned 0x5b66c0 [0222.148] GetProcessHeap () returned 0x5b0000 [0222.148] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x0) returned 1 [0222.148] GetProcessHeap () returned 0x5b0000 [0222.148] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x5b6860 [0222.148] memcpy (in: _Dst=0x5b6860, _Src=0x5b66c0, _Size=0x48 | out: _Dst=0x5b6860) returned 0x5b6860 [0222.148] GetProcessHeap () returned 0x5b0000 [0222.149] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b66c0) returned 1 [0222.149] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-0.dll", hFile=0x0, dwFlags=0x8) returned 0x77160000 [0222.150] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\NetSh", ulOptions=0x0, samDesired=0x20019, phkResult=0x197ae8 | out: phkResult=0x197ae8*=0xc8) returned 0x0 [0222.151] RegQueryInfoKeyW (in: hKey=0xc8, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x197ae4, lpcbMaxValueNameLen=0x197adc, lpcbMaxValueLen=0x197ae0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x197ae4*=0x11, lpcbMaxValueNameLen=0x197adc, lpcbMaxValueLen=0x197ae0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0222.151] GetProcessHeap () returned 0x5b0000 [0222.151] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x16) returned 0x5b6718 [0222.151] GetProcessHeap () returned 0x5b0000 [0222.151] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x23) returned 0x5b28d0 [0222.151] RegEnumValueW (in: hKey=0xc8, dwIndex=0x0, lpValueName=0x5b6718, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8 | out: lpValueName="2", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8) returned 0x0 [0222.151] _wcsicmp (_String1="ifmon.dll", _String2="ipxmontr.dll") returned -10 [0222.151] _wcsicmp (_String1="ifmon.dll", _String2="ipxpromn.dll") returned -10 [0222.151] GetProcessHeap () returned 0x5b0000 [0222.151] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x28) returned 0x5b2900 [0222.151] memcpy (in: _Dst=0x5b2900, _Src=0x5b6958, _Size=0x14 | out: _Dst=0x5b2900) returned 0x5b2900 [0222.151] GetProcessHeap () returned 0x5b0000 [0222.151] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x4) returned 0x5b9828 [0222.151] GetProcessHeap () returned 0x5b0000 [0222.151] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x14) returned 0x5b6d80 [0222.151] _wcsupr (in: _String="ifmon.dll" | out: _String="IFMON.DLL") returned="IFMON.DLL" [0222.151] GetProcessHeap () returned 0x5b0000 [0222.151] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b6958) returned 1 [0222.151] LoadLibraryExW (lpLibFileName="IFMON.DLL", hFile=0x0, dwFlags=0x0) returned 0x6f620000 [0222.219] GetProcAddress (hModule=0x6f620000, lpProcName="InitHelperDll") returned 0x6f621ab0 [0222.219] InitHelperDll () returned 0x0 [0222.247] RegisterHelper () returned 0x0 [0222.247] GetProcessHeap () returned 0x5b0000 [0222.247] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xd8) returned 0x5c1448 [0222.247] memcpy (in: _Dst=0x5c1448, _Src=0x5b6860, _Size=0x90 | out: _Dst=0x5c1448) returned 0x5c1448 [0222.247] GetProcessHeap () returned 0x5b0000 [0222.248] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b6860) returned 1 [0222.248] RegEnumValueW (in: hKey=0xc8, dwIndex=0x1, lpValueName=0x5b6718, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8 | out: lpValueName="4", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8) returned 0x0 [0222.248] _wcsicmp (_String1="rasmontr.dll", _String2="ipxmontr.dll") returned 9 [0222.248] _wcsicmp (_String1="rasmontr.dll", _String2="ipxpromn.dll") returned 9 [0222.248] GetProcessHeap () returned 0x5b0000 [0222.248] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x3c) returned 0x5b6860 [0222.248] memcpy (in: _Dst=0x5b6860, _Src=0x5b2900, _Size=0x28 | out: _Dst=0x5b6860) returned 0x5b6860 [0222.248] GetProcessHeap () returned 0x5b0000 [0222.248] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x4) returned 0x5b99c8 [0222.248] GetProcessHeap () returned 0x5b0000 [0222.248] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1a) returned 0x5c03d8 [0222.248] _wcsupr (in: _String="rasmontr.dll" | out: _String="RASMONTR.DLL") returned="RASMONTR.DLL" [0222.248] GetProcessHeap () returned 0x5b0000 [0222.248] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b2900) returned 1 [0222.249] LoadLibraryExW (lpLibFileName="RASMONTR.DLL", hFile=0x0, dwFlags=0x0) returned 0x6f5a0000 [0222.597] LoadLibraryExA (lpLibFileName="MSVCRT.DLL", hFile=0x0, dwFlags=0x800) returned 0x77610000 [0222.597] GetVersion () returned 0x295a000a [0222.597] SetErrorMode (uMode=0x0) returned 0x0 [0222.597] SetErrorMode (uMode=0x8001) returned 0x0 [0222.597] LocalAlloc (uFlags=0x0, uBytes=0x2000) returned 0x5c5378 [0222.598] LocalFree (hMem=0x5c5378) returned 0x0 [0222.600] GetVersion () returned 0x295a000a [0222.602] GlobalLock (hMem=0x60a0004) returned 0x5c5378 [0222.602] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x5c5488 [0222.602] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x5c1bf0 [0222.602] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x5b9818 [0222.602] malloc (_Size=0x80) returned 0x4b03b00 [0222.717] __dllonexit () returned 0x6f2f6fa0 [0222.717] __dllonexit () returned 0x6f2f6f40 [0222.717] __dllonexit () returned 0x6f2f6f60 [0222.717] __dllonexit () returned 0x6f2f6f80 [0222.718] __dllonexit () returned 0x6f2d1650 [0222.718] __dllonexit () returned 0x6f2d1640 [0222.718] __dllonexit () returned 0x6f2d1680 [0222.718] __dllonexit () returned 0x6f2d16d0 [0222.718] __dllonexit () returned 0x6f2d17b0 [0222.718] __dllonexit () returned 0x6f2d17d0 [0222.718] __dllonexit () returned 0x6f2d1830 [0222.718] __dllonexit () returned 0x6f2d18f0 [0222.718] __dllonexit () returned 0x6f2d1700 [0222.718] __dllonexit () returned 0x6f2f7000 [0222.718] __dllonexit () returned 0x6f2d1720 [0222.719] __dllonexit () returned 0x6f2d18a0 [0222.719] __dllonexit () returned 0x6f2d18c0 [0222.719] __dllonexit () returned 0x6f2d1910 [0222.719] __dllonexit () returned 0x6f2d1950 [0222.719] __dllonexit () returned 0x6f2d1940 [0222.719] __dllonexit () returned 0x6f2d1970 [0222.719] __dllonexit () returned 0x6f2d1990 [0222.720] __dllonexit () returned 0x6f2d19c0 [0222.720] __dllonexit () returned 0x6f2d1a40 [0222.720] __dllonexit () returned 0x6f2d1560 [0222.720] __dllonexit () returned 0x6f2d1570 [0222.720] __dllonexit () returned 0x6f2d1550 [0222.721] RegisterClipboardFormatW (lpszFormat="commctrl_DragListMsg") returned 0xc161 [0222.722] __dllonexit () returned 0x6f2f6fe0 [0222.722] __dllonexit () returned 0x6f2f6fc0 [0222.722] __dllonexit () returned 0x6f2f6ff0 [0222.722] __dllonexit () returned 0x6f2f6fd0 [0222.722] GetVersion () returned 0x295a000a [0222.722] GetVersion () returned 0x295a000a [0222.722] GetVersion () returned 0x295a000a [0222.722] __dllonexit () returned 0x6f2ea5a0 [0222.722] __dllonexit () returned 0x6f2ea5c0 [0222.722] __dllonexit () returned 0x6f2d1740 [0222.722] __dllonexit () returned 0x6f2d17f0 [0222.723] __dllonexit () returned 0x6f2d1800 [0222.723] __dllonexit () returned 0x6f2ea3b0 [0222.723] GetVersion () returned 0x295a000a [0222.723] GetProcessVersion (ProcessId=0x0) returned 0xa0000 [0222.723] GetSystemMetrics (nIndex=11) returned 32 [0222.723] GetSystemMetrics (nIndex=12) returned 32 [0222.723] GetSystemMetrics (nIndex=2) returned 17 [0222.723] GetSystemMetrics (nIndex=3) returned 17 [0222.723] GetDC (hWnd=0x0) returned 0xffffffffd001053c [0222.723] GetDeviceCaps (hdc=0xd001053c, index=88) returned 96 [0222.723] GetDeviceCaps (hdc=0xd001053c, index=90) returned 96 [0222.723] ReleaseDC (hWnd=0x0, hDC=0xd001053c) returned 1 [0222.723] GetSysColor (nIndex=15) returned 0xf0f0f0 [0222.723] GetSysColor (nIndex=16) returned 0xa0a0a0 [0222.723] GetSysColor (nIndex=20) returned 0xffffff [0222.723] GetSysColor (nIndex=18) returned 0x0 [0222.723] GetSysColor (nIndex=6) returned 0x646464 [0222.723] GetSysColorBrush (nIndex=15) returned 0x1100074 [0222.723] GetSysColorBrush (nIndex=6) returned 0x110007c [0222.724] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0222.724] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0222.724] __dllonexit () returned 0x6f2d1870 [0222.724] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc162 [0222.724] __dllonexit () returned 0x6f2ea3a0 [0222.724] RegisterClipboardFormatW (lpszFormat="Native") returned 0xc004 [0222.764] RegisterClipboardFormatW (lpszFormat="OwnerLink") returned 0xc003 [0222.764] RegisterClipboardFormatW (lpszFormat="ObjectLink") returned 0xc002 [0222.764] RegisterClipboardFormatW (lpszFormat="Embedded Object") returned 0xc00a [0222.764] RegisterClipboardFormatW (lpszFormat="Embed Source") returned 0xc00b [0222.764] RegisterClipboardFormatW (lpszFormat="Link Source") returned 0xc00d [0222.764] RegisterClipboardFormatW (lpszFormat="Object Descriptor") returned 0xc00e [0222.764] RegisterClipboardFormatW (lpszFormat="Link Source Descriptor") returned 0xc00f [0222.764] RegisterClipboardFormatW (lpszFormat="FileName") returned 0xc006 [0222.765] RegisterClipboardFormatW (lpszFormat="FileNameW") returned 0xc007 [0222.765] RegisterClipboardFormatW (lpszFormat="Rich Text Format") returned 0xc0de [0222.765] RegisterClipboardFormatW (lpszFormat="RichEdit Text and Objects") returned 0xc0e7 [0222.765] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc162 [0222.765] __dllonexit () returned 0x6f2f7010 [0222.765] __dllonexit () returned 0x6f2f7030 [0222.765] __dllonexit () returned 0x6f2f7040 [0222.765] __dllonexit () returned 0x6f2f7050 [0222.766] __dllonexit () returned 0x6f2f7060 [0222.766] GetCursorPos (in: lpPoint=0x6f3b8298 | out: lpPoint=0x6f3b8298*(x=240, y=310)) returned 1 [0222.766] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x5c5608 [0222.766] LocalReAlloc (hMem=0x5b9818, uBytes=0xc, uFlags=0x2) returned 0x5b26f8 [0222.766] GetCurrentThread () returned 0xfffffffe [0222.766] GetCurrentThreadId () returned 0x37c [0222.767] __dllonexit () returned 0x6f2d1a50 [0222.806] SetErrorMode (uMode=0x0) returned 0x8001 [0222.806] SetErrorMode (uMode=0x8001) returned 0x0 [0222.806] GetModuleFileNameW (in: hModule=0x6f2b0000, lpFilename=0x1972e0, nSize=0x104 | out: lpFilename="C:\\Windows\\SYSTEM32\\MFC42u.dll" (normalized: "c:\\windows\\syswow64\\mfc42u.dll")) returned 0x1e [0222.806] wcscpy_s (in: _Destination=0x1970d8, _SizeInWords=0x104, _Source="MFC42u" | out: _Destination="MFC42u") returned 0x0 [0222.806] FindResourceW (hModule=0x6f2b0000, lpName=0xe01, lpType=0x6) returned 0x1f0db0 [0222.813] LoadStringW (in: hInstance=0x6f2b0000, uID=0xe000, lpBuffer=0x196ed8, cchBufferMax=256 | out: lpBuffer="") returned 0x0 [0222.813] wcscpy_s (in: _Destination=0x197314, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0 [0222.855] wcscat_s (in: _Destination="MFC42u", _SizeInWords=0x104, _Source=".INI" | out: _Destination="MFC42u.INI") returned 0x0 [0222.855] malloc (_Size=0x40) returned 0x4b03ca0 [0222.856] LocalAlloc (uFlags=0x40, uBytes=0x2090) returned 0x5c5698 [0222.856] GetSystemDirectoryA (in: lpBuffer=0x19752c, uSize=0x112 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0222.856] strcat_s (in: _Destination="C:\\Windows\\system32", _SizeInBytes=0x112, _Source="\\MFC42" | out: _Destination="C:\\Windows\\system32\\MFC42") returned 0x0 [0222.856] strcat_s (in: _Destination="C:\\Windows\\system32\\MFC42", _SizeInBytes=0x112, _Source="LOC" | out: _Destination="C:\\Windows\\system32\\MFC42LOC") returned 0x0 [0222.856] strcat_s (in: _Destination="C:\\Windows\\system32\\MFC42LOC", _SizeInBytes=0x112, _Source=".DLL" | out: _Destination="C:\\Windows\\system32\\MFC42LOC.DLL") returned 0x0 [0222.856] LoadLibraryExA (lpLibFileName="C:\\Windows\\system32\\MFC42LOC.DLL", hFile=0x0, dwFlags=0x2) returned 0x0 [0222.859] GetProcAddress (hModule=0x6f5a0000, lpProcName="InitHelperDll") returned 0x6f5c45a0 [0222.859] InitHelperDll () returned 0x0 [0222.862] RegisterHelper () returned 0x0 [0222.862] GetProcessHeap () returned 0x5b0000 [0222.862] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x120) returned 0x5c1878 [0222.862] memcpy (in: _Dst=0x5c1878, _Src=0x5c1448, _Size=0xd8 | out: _Dst=0x5c1878) returned 0x5c1878 [0222.862] GetProcessHeap () returned 0x5b0000 [0222.863] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c1448) returned 1 [0222.863] RegisterHelper () returned 0x0 [0222.863] GetProcessHeap () returned 0x5b0000 [0222.863] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x168) returned 0x5c2d48 [0222.863] memcpy (in: _Dst=0x5c2d48, _Src=0x5c1878, _Size=0x120 | out: _Dst=0x5c2d48) returned 0x5c2d48 [0222.863] GetProcessHeap () returned 0x5b0000 [0222.864] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c1878) returned 1 [0222.870] RegisterHelper () returned 0x0 [0222.871] GetProcessHeap () returned 0x5b0000 [0222.871] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1b0) returned 0x5c7f38 [0222.871] memcpy (in: _Dst=0x5c7f38, _Src=0x5c2d48, _Size=0x168 | out: _Dst=0x5c7f38) returned 0x5c7f38 [0222.871] GetProcessHeap () returned 0x5b0000 [0222.871] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c2d48) returned 1 [0222.872] RegisterHelper () returned 0x0 [0222.872] GetProcessHeap () returned 0x5b0000 [0222.872] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1f8) returned 0x5c2d48 [0222.872] memcpy (in: _Dst=0x5c2d48, _Src=0x5c7f38, _Size=0x1b0 | out: _Dst=0x5c2d48) returned 0x5c2d48 [0222.872] GetProcessHeap () returned 0x5b0000 [0222.872] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c7f38) returned 1 [0222.873] RegisterHelper () returned 0x0 [0222.873] GetProcessHeap () returned 0x5b0000 [0222.873] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x240) returned 0x5c7f38 [0222.873] memcpy (in: _Dst=0x5c7f38, _Src=0x5c2d48, _Size=0x1f8 | out: _Dst=0x5c7f38) returned 0x5c7f38 [0222.873] GetProcessHeap () returned 0x5b0000 [0222.873] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c2d48) returned 1 [0222.874] RegEnumValueW (in: hKey=0xc8, dwIndex=0x2, lpValueName=0x5b6718, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8 | out: lpValueName="authfwcfg", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8) returned 0x0 [0222.874] _wcsicmp (_String1="authfwcfg.dll", _String2="ipxmontr.dll") returned -8 [0222.874] _wcsicmp (_String1="authfwcfg.dll", _String2="ipxpromn.dll") returned -8 [0222.874] GetProcessHeap () returned 0x5b0000 [0222.874] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x5c2188 [0222.874] memcpy (in: _Dst=0x5c2188, _Src=0x5b6860, _Size=0x3c | out: _Dst=0x5c2188) returned 0x5c2188 [0222.874] GetProcessHeap () returned 0x5b0000 [0222.874] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x14) returned 0x5b2900 [0222.874] GetProcessHeap () returned 0x5b0000 [0222.874] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1c) returned 0x5c0658 [0222.874] _wcsupr (in: _String="authfwcfg.dll" | out: _String="AUTHFWCFG.DLL") returned="AUTHFWCFG.DLL" [0222.875] GetProcessHeap () returned 0x5b0000 [0222.875] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b6860) returned 1 [0222.876] LoadLibraryExW (lpLibFileName="AUTHFWCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x6f1a0000 [0222.987] GetProcAddress (hModule=0x6f1a0000, lpProcName="InitHelperDll") returned 0x6f1a3c40 [0222.987] InitHelperDll () returned 0x0 [0222.991] RegisterHelper () returned 0x0 [0222.991] GetProcessHeap () returned 0x5b0000 [0222.991] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x288) returned 0x5c8d98 [0222.991] memcpy (in: _Dst=0x5c8d98, _Src=0x5c7f38, _Size=0x240 | out: _Dst=0x5c8d98) returned 0x5c8d98 [0222.991] GetProcessHeap () returned 0x5b0000 [0222.992] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c7f38) returned 1 [0222.992] RegisterHelper () returned 0x0 [0222.992] GetProcessHeap () returned 0x5b0000 [0222.992] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x2d0) returned 0x5c9028 [0222.992] memcpy (in: _Dst=0x5c9028, _Src=0x5c8d98, _Size=0x288 | out: _Dst=0x5c9028) returned 0x5c9028 [0222.992] GetProcessHeap () returned 0x5b0000 [0222.992] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c8d98) returned 1 [0222.992] RegisterHelper () returned 0x0 [0222.992] GetProcessHeap () returned 0x5b0000 [0222.992] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x318) returned 0x5c9300 [0222.992] memcpy (in: _Dst=0x5c9300, _Src=0x5c9028, _Size=0x2d0 | out: _Dst=0x5c9300) returned 0x5c9300 [0222.992] GetProcessHeap () returned 0x5b0000 [0222.993] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c9028) returned 1 [0222.993] RegisterHelper () returned 0x0 [0222.993] GetProcessHeap () returned 0x5b0000 [0222.993] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x360) returned 0x5c8d98 [0222.993] memcpy (in: _Dst=0x5c8d98, _Src=0x5c9300, _Size=0x318 | out: _Dst=0x5c8d98) returned 0x5c8d98 [0222.993] GetProcessHeap () returned 0x5b0000 [0222.993] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c9300) returned 1 [0222.993] RegisterHelper () returned 0x0 [0222.993] GetProcessHeap () returned 0x5b0000 [0222.993] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x3a8) returned 0x5c9100 [0222.993] memcpy (in: _Dst=0x5c9100, _Src=0x5c8d98, _Size=0x360 | out: _Dst=0x5c9100) returned 0x5c9100 [0222.993] GetProcessHeap () returned 0x5b0000 [0222.994] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c8d98) returned 1 [0222.994] RegEnumValueW (in: hKey=0xc8, dwIndex=0x3, lpValueName=0x5b6718, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8 | out: lpValueName="dhcpclient", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8) returned 0x0 [0222.994] _wcsicmp (_String1="dhcpcmonitor.dll", _String2="ipxmontr.dll") returned -5 [0222.994] _wcsicmp (_String1="dhcpcmonitor.dll", _String2="ipxpromn.dll") returned -5 [0222.994] GetProcessHeap () returned 0x5b0000 [0222.994] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x64) returned 0x5c14a0 [0222.994] memcpy (in: _Dst=0x5c14a0, _Src=0x5c2188, _Size=0x50 | out: _Dst=0x5c14a0) returned 0x5c14a0 [0222.994] GetProcessHeap () returned 0x5b0000 [0222.994] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x16) returned 0x5c8d18 [0222.994] GetProcessHeap () returned 0x5b0000 [0222.994] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x22) returned 0x5c06f8 [0222.994] _wcsupr (in: _String="dhcpcmonitor.dll" | out: _String="DHCPCMONITOR.DLL") returned="DHCPCMONITOR.DLL" [0222.994] GetProcessHeap () returned 0x5b0000 [0222.995] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c2188) returned 1 [0222.995] LoadLibraryExW (lpLibFileName="DHCPCMONITOR.DLL", hFile=0x0, dwFlags=0x0) returned 0x6f130000 [0223.029] GetProcAddress (hModule=0x6f130000, lpProcName="InitHelperDll") returned 0x6f131a10 [0223.029] InitHelperDll () returned 0x0 [0223.029] RegisterHelper () returned 0x0 [0223.029] GetProcessHeap () returned 0x5b0000 [0223.029] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x3f0) returned 0x5c9cb8 [0223.030] memcpy (in: _Dst=0x5c9cb8, _Src=0x5c9100, _Size=0x3a8 | out: _Dst=0x5c9cb8) returned 0x5c9cb8 [0223.030] GetProcessHeap () returned 0x5b0000 [0223.030] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c9100) returned 1 [0223.030] RegEnumValueW (in: hKey=0xc8, dwIndex=0x4, lpValueName=0x5b6718, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8 | out: lpValueName="dot3cfg", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8) returned 0x0 [0223.030] _wcsicmp (_String1="dot3cfg.dll", _String2="ipxmontr.dll") returned -5 [0223.030] _wcsicmp (_String1="dot3cfg.dll", _String2="ipxpromn.dll") returned -5 [0223.030] GetProcessHeap () returned 0x5b0000 [0223.030] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x78) returned 0x5baab8 [0223.030] memcpy (in: _Dst=0x5baab8, _Src=0x5c14a0, _Size=0x64 | out: _Dst=0x5baab8) returned 0x5baab8 [0223.030] GetProcessHeap () returned 0x5b0000 [0223.030] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x10) returned 0x5c8378 [0223.030] GetProcessHeap () returned 0x5b0000 [0223.030] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x18) returned 0x5c8a38 [0223.030] _wcsupr (in: _String="dot3cfg.dll" | out: _String="DOT3CFG.DLL") returned="DOT3CFG.DLL" [0223.031] GetProcessHeap () returned 0x5b0000 [0223.031] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c14a0) returned 1 [0223.031] LoadLibraryExW (lpLibFileName="DOT3CFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x6f0d0000 [0223.115] GetProcAddress (hModule=0x6f0d0000, lpProcName="InitHelperDll") returned 0x6f0d3aa0 [0223.115] InitHelperDll () returned 0x0 [0223.115] RegisterHelper () returned 0x0 [0223.115] GetProcessHeap () returned 0x5b0000 [0223.116] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x438) returned 0x5c9020 [0223.116] memcpy (in: _Dst=0x5c9020, _Src=0x5c9cb8, _Size=0x3f0 | out: _Dst=0x5c9020) returned 0x5c9020 [0223.116] GetProcessHeap () returned 0x5b0000 [0223.116] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c9cb8) returned 1 [0223.116] RegEnumValueW (in: hKey=0xc8, dwIndex=0x5, lpValueName=0x5b6718, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8 | out: lpValueName="fwcfg", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8) returned 0x0 [0223.117] _wcsicmp (_String1="fwcfg.dll", _String2="ipxmontr.dll") returned -3 [0223.117] _wcsicmp (_String1="fwcfg.dll", _String2="ipxpromn.dll") returned -3 [0223.117] GetProcessHeap () returned 0x5b0000 [0223.117] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8c) returned 0x5c1ab0 [0223.117] memcpy (in: _Dst=0x5c1ab0, _Src=0x5baab8, _Size=0x78 | out: _Dst=0x5c1ab0) returned 0x5c1ab0 [0223.117] GetProcessHeap () returned 0x5b0000 [0223.117] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5c81b0 [0223.117] GetProcessHeap () returned 0x5b0000 [0223.117] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x14) returned 0x5c8a78 [0223.117] _wcsupr (in: _String="fwcfg.dll" | out: _String="FWCFG.DLL") returned="FWCFG.DLL" [0223.117] GetProcessHeap () returned 0x5b0000 [0223.117] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5baab8) returned 1 [0223.117] LoadLibraryExW (lpLibFileName="FWCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x6efd0000 [0223.128] GetProcAddress (hModule=0x6efd0000, lpProcName="InitHelperDll") returned 0x6efd2290 [0223.128] InitHelperDll () returned 0x0 [0223.128] RegisterHelper () returned 0x0 [0223.128] GetProcessHeap () returned 0x5b0000 [0223.128] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x480) returned 0x5ce8c8 [0223.128] memcpy (in: _Dst=0x5ce8c8, _Src=0x5c9020, _Size=0x438 | out: _Dst=0x5ce8c8) returned 0x5ce8c8 [0223.128] GetProcessHeap () returned 0x5b0000 [0223.128] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c9020) returned 1 [0223.128] RegEnumValueW (in: hKey=0xc8, dwIndex=0x6, lpValueName=0x5b6718, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8 | out: lpValueName="hnetmon", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8) returned 0x0 [0223.129] _wcsicmp (_String1="hnetmon.dll", _String2="ipxmontr.dll") returned -1 [0223.129] _wcsicmp (_String1="hnetmon.dll", _String2="ipxpromn.dll") returned -1 [0223.129] GetProcessHeap () returned 0x5b0000 [0223.129] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa0) returned 0x5cb148 [0223.129] memcpy (in: _Dst=0x5cb148, _Src=0x5c1ab0, _Size=0x8c | out: _Dst=0x5cb148) returned 0x5cb148 [0223.129] GetProcessHeap () returned 0x5b0000 [0223.129] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x10) returned 0x5c8210 [0223.129] GetProcessHeap () returned 0x5b0000 [0223.129] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x18) returned 0x5c8ad8 [0223.129] _wcsupr (in: _String="hnetmon.dll" | out: _String="HNETMON.DLL") returned="HNETMON.DLL" [0223.129] GetProcessHeap () returned 0x5b0000 [0223.129] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c1ab0) returned 1 [0223.129] LoadLibraryExW (lpLibFileName="HNETMON.DLL", hFile=0x0, dwFlags=0x0) returned 0x6efc0000 [0223.262] GetProcAddress (hModule=0x6efc0000, lpProcName="InitHelperDll") returned 0x6efc24b0 [0223.262] InitHelperDll () returned 0x0 [0223.262] RegisterHelper () returned 0x0 [0223.262] GetProcessHeap () returned 0x5b0000 [0223.262] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x4c8) returned 0x5ced50 [0223.262] memcpy (in: _Dst=0x5ced50, _Src=0x5ce8c8, _Size=0x480 | out: _Dst=0x5ced50) returned 0x5ced50 [0223.262] GetProcessHeap () returned 0x5b0000 [0223.262] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5ce8c8) returned 1 [0223.262] RegEnumValueW (in: hKey=0xc8, dwIndex=0x7, lpValueName=0x5b6718, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8 | out: lpValueName="netiohlp", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8) returned 0x0 [0223.262] _wcsicmp (_String1="netiohlp.dll", _String2="ipxmontr.dll") returned 5 [0223.262] _wcsicmp (_String1="netiohlp.dll", _String2="ipxpromn.dll") returned 5 [0223.262] GetProcessHeap () returned 0x5b0000 [0223.262] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xb4) returned 0x5c1910 [0223.262] memcpy (in: _Dst=0x5c1910, _Src=0x5cb148, _Size=0xa0 | out: _Dst=0x5c1910) returned 0x5c1910 [0223.263] GetProcessHeap () returned 0x5b0000 [0223.263] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x12) returned 0x5c8bd8 [0223.263] GetProcessHeap () returned 0x5b0000 [0223.263] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1a) returned 0x5c05e0 [0223.263] _wcsupr (in: _String="netiohlp.dll" | out: _String="NETIOHLP.DLL") returned="NETIOHLP.DLL" [0223.263] GetProcessHeap () returned 0x5b0000 [0223.263] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5cb148) returned 1 [0223.263] LoadLibraryExW (lpLibFileName="NETIOHLP.DLL", hFile=0x0, dwFlags=0x0) returned 0x6ecd0000 [0223.340] GetProcAddress (hModule=0x6ecd0000, lpProcName="InitHelperDll") returned 0x6ece69d0 [0223.340] InitHelperDll () returned 0x0 [0223.340] RegisterHelper () returned 0x0 [0223.340] GetProcessHeap () returned 0x5b0000 [0223.340] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x510) returned 0x5cf220 [0223.340] memcpy (in: _Dst=0x5cf220, _Src=0x5ced50, _Size=0x4c8 | out: _Dst=0x5cf220) returned 0x5cf220 [0223.340] GetProcessHeap () returned 0x5b0000 [0223.341] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5ced50) returned 1 [0223.341] RegisterHelper () returned 0x0 [0223.341] GetProcessHeap () returned 0x5b0000 [0223.341] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x558) returned 0x5ce8c8 [0223.341] memcpy (in: _Dst=0x5ce8c8, _Src=0x5cf220, _Size=0x510 | out: _Dst=0x5ce8c8) returned 0x5ce8c8 [0223.341] GetProcessHeap () returned 0x5b0000 [0223.342] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5cf220) returned 1 [0223.342] RegisterHelper () returned 0x0 [0223.342] GetProcessHeap () returned 0x5b0000 [0223.342] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x5a0) returned 0x5cee28 [0223.342] memcpy (in: _Dst=0x5cee28, _Src=0x5ce8c8, _Size=0x558 | out: _Dst=0x5cee28) returned 0x5cee28 [0223.342] GetProcessHeap () returned 0x5b0000 [0223.343] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5ce8c8) returned 1 [0223.343] RegisterHelper () returned 0x0 [0223.343] GetProcessHeap () returned 0x5b0000 [0223.343] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x5e8) returned 0x5cf3d0 [0223.344] memcpy (in: _Dst=0x5cf3d0, _Src=0x5cee28, _Size=0x5a0 | out: _Dst=0x5cf3d0) returned 0x5cf3d0 [0223.344] GetProcessHeap () returned 0x5b0000 [0223.346] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5cee28) returned 1 [0223.346] RegisterHelper () returned 0x0 [0223.346] GetProcessHeap () returned 0x5b0000 [0223.346] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x630) returned 0x5ce8c8 [0223.346] memcpy (in: _Dst=0x5ce8c8, _Src=0x5cf3d0, _Size=0x5e8 | out: _Dst=0x5ce8c8) returned 0x5ce8c8 [0223.346] GetProcessHeap () returned 0x5b0000 [0223.347] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5cf3d0) returned 1 [0223.347] RegisterHelper () returned 0x0 [0223.347] GetProcessHeap () returned 0x5b0000 [0223.347] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x678) returned 0x5cef00 [0223.347] memcpy (in: _Dst=0x5cef00, _Src=0x5ce8c8, _Size=0x630 | out: _Dst=0x5cef00) returned 0x5cef00 [0223.347] GetProcessHeap () returned 0x5b0000 [0223.347] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5ce8c8) returned 1 [0223.347] RegisterHelper () returned 0x0 [0223.347] GetProcessHeap () returned 0x5b0000 [0223.347] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x6c0) returned 0x5cf580 [0223.347] memcpy (in: _Dst=0x5cf580, _Src=0x5cef00, _Size=0x678 | out: _Dst=0x5cf580) returned 0x5cf580 [0223.348] GetProcessHeap () returned 0x5b0000 [0223.348] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5cef00) returned 1 [0223.348] RegisterHelper () returned 0x0 [0223.348] GetProcessHeap () returned 0x5b0000 [0223.348] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x708) returned 0x5ce8c8 [0223.348] memcpy (in: _Dst=0x5ce8c8, _Src=0x5cf580, _Size=0x6c0 | out: _Dst=0x5ce8c8) returned 0x5ce8c8 [0223.348] GetProcessHeap () returned 0x5b0000 [0223.348] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5cf580) returned 1 [0223.348] RegisterHelper () returned 0x0 [0223.349] GetProcessHeap () returned 0x5b0000 [0223.349] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x750) returned 0x5cefd8 [0223.349] memcpy (in: _Dst=0x5cefd8, _Src=0x5ce8c8, _Size=0x708 | out: _Dst=0x5cefd8) returned 0x5cefd8 [0223.349] GetProcessHeap () returned 0x5b0000 [0223.349] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5ce8c8) returned 1 [0223.349] RegEnumValueW (in: hKey=0xc8, dwIndex=0x8, lpValueName=0x5b6718, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8 | out: lpValueName="nshhttp", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8) returned 0x0 [0223.349] _wcsicmp (_String1="nshhttp.dll", _String2="ipxmontr.dll") returned 5 [0223.349] _wcsicmp (_String1="nshhttp.dll", _String2="ipxpromn.dll") returned 5 [0223.349] GetProcessHeap () returned 0x5b0000 [0223.350] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc8) returned 0x5ce7d0 [0223.350] memcpy (in: _Dst=0x5ce7d0, _Src=0x5c1910, _Size=0xb4 | out: _Dst=0x5ce7d0) returned 0x5ce7d0 [0223.350] GetProcessHeap () returned 0x5b0000 [0223.350] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x10) returned 0x5c9140 [0223.350] GetProcessHeap () returned 0x5b0000 [0223.350] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x18) returned 0x5c8c38 [0223.350] _wcsupr (in: _String="nshhttp.dll" | out: _String="NSHHTTP.DLL") returned="NSHHTTP.DLL" [0223.350] GetProcessHeap () returned 0x5b0000 [0223.350] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c1910) returned 1 [0223.350] LoadLibraryExW (lpLibFileName="NSHHTTP.DLL", hFile=0x0, dwFlags=0x0) returned 0x6ec20000 [0223.382] GetProcAddress (hModule=0x6ec20000, lpProcName="InitHelperDll") returned 0x6ec21b90 [0223.382] InitHelperDll () returned 0x0 [0223.382] RegisterHelper () returned 0x0 [0223.382] GetProcessHeap () returned 0x5b0000 [0223.382] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x798) returned 0x5cf730 [0223.382] memcpy (in: _Dst=0x5cf730, _Src=0x5cefd8, _Size=0x750 | out: _Dst=0x5cf730) returned 0x5cf730 [0223.382] GetProcessHeap () returned 0x5b0000 [0223.383] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5cefd8) returned 1 [0223.383] RegEnumValueW (in: hKey=0xc8, dwIndex=0x9, lpValueName=0x5b6718, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8 | out: lpValueName="nshipsec", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8) returned 0x0 [0223.383] _wcsicmp (_String1="nshipsec.dll", _String2="ipxmontr.dll") returned 5 [0223.383] _wcsicmp (_String1="nshipsec.dll", _String2="ipxpromn.dll") returned 5 [0223.383] GetProcessHeap () returned 0x5b0000 [0223.383] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xdc) returned 0x5c7f38 [0223.383] memcpy (in: _Dst=0x5c7f38, _Src=0x5ce7d0, _Size=0xc8 | out: _Dst=0x5c7f38) returned 0x5c7f38 [0223.383] GetProcessHeap () returned 0x5b0000 [0223.383] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x12) returned 0x5c89b8 [0223.383] GetProcessHeap () returned 0x5b0000 [0223.383] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1a) returned 0x5c0608 [0223.383] _wcsupr (in: _String="nshipsec.dll" | out: _String="NSHIPSEC.DLL") returned="NSHIPSEC.DLL" [0223.384] GetProcessHeap () returned 0x5b0000 [0223.384] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5ce7d0) returned 1 [0223.384] LoadLibraryExW (lpLibFileName="NSHIPSEC.DLL", hFile=0x0, dwFlags=0x0) returned 0x6eba0000 [0223.542] GetProcAddress (hModule=0x6eba0000, lpProcName="InitHelperDll") returned 0x6eba3910 [0223.542] InitHelperDll () returned 0x0 [0223.542] RegisterHelper () returned 0x0 [0223.542] GetProcessHeap () returned 0x5b0000 [0223.542] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x7e0) returned 0x5d3ee8 [0223.543] memcpy (in: _Dst=0x5d3ee8, _Src=0x5cf730, _Size=0x798 | out: _Dst=0x5d3ee8) returned 0x5d3ee8 [0223.543] GetProcessHeap () returned 0x5b0000 [0223.543] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5cf730) returned 1 [0223.543] RegisterHelper () returned 0x0 [0223.543] GetProcessHeap () returned 0x5b0000 [0223.543] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x828) returned 0x5d46d0 [0223.543] memcpy (in: _Dst=0x5d46d0, _Src=0x5d3ee8, _Size=0x7e0 | out: _Dst=0x5d46d0) returned 0x5d46d0 [0223.543] GetProcessHeap () returned 0x5b0000 [0223.544] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d3ee8) returned 1 [0223.544] RegisterHelper () returned 0x0 [0223.544] GetProcessHeap () returned 0x5b0000 [0223.544] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x870) returned 0x5cf4d0 [0223.544] memcpy (in: _Dst=0x5cf4d0, _Src=0x5d46d0, _Size=0x828 | out: _Dst=0x5cf4d0) returned 0x5cf4d0 [0223.544] GetProcessHeap () returned 0x5b0000 [0223.544] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d46d0) returned 1 [0223.555] RegEnumValueW (in: hKey=0xc8, dwIndex=0xa, lpValueName=0x5b6718, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8 | out: lpValueName="nshwfp", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8) returned 0x0 [0223.555] _wcsicmp (_String1="nshwfp.dll", _String2="ipxmontr.dll") returned 5 [0223.556] _wcsicmp (_String1="nshwfp.dll", _String2="ipxpromn.dll") returned 5 [0223.556] GetProcessHeap () returned 0x5b0000 [0223.556] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xf0) returned 0x5d4ca8 [0223.556] memcpy (in: _Dst=0x5d4ca8, _Src=0x5c7f38, _Size=0xdc | out: _Dst=0x5d4ca8) returned 0x5d4ca8 [0223.556] GetProcessHeap () returned 0x5b0000 [0223.556] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xe) returned 0x5d4900 [0223.556] GetProcessHeap () returned 0x5b0000 [0223.556] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x16) returned 0x5c8cf8 [0223.556] _wcsupr (in: _String="nshwfp.dll" | out: _String="NSHWFP.DLL") returned="NSHWFP.DLL" [0223.556] GetProcessHeap () returned 0x5b0000 [0223.556] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c7f38) returned 1 [0223.556] LoadLibraryExW (lpLibFileName="NSHWFP.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e9f0000 [0223.609] GetProcAddress (hModule=0x6e9f0000, lpProcName="InitHelperDll") returned 0x6ea43bb0 [0223.609] InitHelperDll () returned 0x0 [0223.609] RegisterHelper () returned 0x0 [0223.609] GetProcessHeap () returned 0x5b0000 [0223.609] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8b8) returned 0x5d61b8 [0223.609] memcpy (in: _Dst=0x5d61b8, _Src=0x5cf4d0, _Size=0x870 | out: _Dst=0x5d61b8) returned 0x5d61b8 [0223.610] GetProcessHeap () returned 0x5b0000 [0223.611] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5cf4d0) returned 1 [0223.611] RegEnumValueW (in: hKey=0xc8, dwIndex=0xb, lpValueName=0x5b6718, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8 | out: lpValueName="p2pnetsh", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8) returned 0x0 [0223.611] _wcsicmp (_String1="p2pnetsh.dll", _String2="ipxmontr.dll") returned 7 [0223.611] _wcsicmp (_String1="p2pnetsh.dll", _String2="ipxpromn.dll") returned 7 [0223.611] GetProcessHeap () returned 0x5b0000 [0223.611] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x104) returned 0x5c7f38 [0223.611] memcpy (in: _Dst=0x5c7f38, _Src=0x5d4ca8, _Size=0xf0 | out: _Dst=0x5c7f38) returned 0x5c7f38 [0223.611] GetProcessHeap () returned 0x5b0000 [0223.611] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x12) returned 0x5c8a18 [0223.611] GetProcessHeap () returned 0x5b0000 [0223.611] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1a) returned 0x5cf478 [0223.611] _wcsupr (in: _String="p2pnetsh.dll" | out: _String="P2PNETSH.DLL") returned="P2PNETSH.DLL" [0223.611] GetProcessHeap () returned 0x5b0000 [0223.612] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d4ca8) returned 1 [0223.612] LoadLibraryExW (lpLibFileName="P2PNETSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e980000 [0223.691] GetProcAddress (hModule=0x6e980000, lpProcName="InitHelperDll") returned 0x6e9858d0 [0223.691] InitHelperDll () returned 0x0 [0223.691] RegisterHelper () returned 0x0 [0223.691] GetProcessHeap () returned 0x5b0000 [0223.691] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x900) returned 0x5d6a78 [0223.691] memcpy (in: _Dst=0x5d6a78, _Src=0x5d61b8, _Size=0x8b8 | out: _Dst=0x5d6a78) returned 0x5d6a78 [0223.691] GetProcessHeap () returned 0x5b0000 [0223.692] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d61b8) returned 1 [0223.692] RegisterHelper () returned 0x0 [0223.692] GetProcessHeap () returned 0x5b0000 [0223.692] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x948) returned 0x5d7380 [0223.692] memcpy (in: _Dst=0x5d7380, _Src=0x5d6a78, _Size=0x900 | out: _Dst=0x5d7380) returned 0x5d7380 [0223.692] GetProcessHeap () returned 0x5b0000 [0223.692] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d6a78) returned 1 [0223.692] RegisterHelper () returned 0x0 [0223.692] GetProcessHeap () returned 0x5b0000 [0223.692] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x990) returned 0x5d61b8 [0223.692] memcpy (in: _Dst=0x5d61b8, _Src=0x5d7380, _Size=0x948 | out: _Dst=0x5d61b8) returned 0x5d61b8 [0223.692] GetProcessHeap () returned 0x5b0000 [0223.693] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d7380) returned 1 [0223.693] RegisterHelper () returned 0x0 [0223.693] GetProcessHeap () returned 0x5b0000 [0223.693] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x9d8) returned 0x5d6b50 [0223.693] memcpy (in: _Dst=0x5d6b50, _Src=0x5d61b8, _Size=0x990 | out: _Dst=0x5d6b50) returned 0x5d6b50 [0223.693] GetProcessHeap () returned 0x5b0000 [0223.694] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d61b8) returned 1 [0223.696] RegisterHelper () returned 0x0 [0223.696] GetProcessHeap () returned 0x5b0000 [0223.696] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa20) returned 0x5d7530 [0223.696] memcpy (in: _Dst=0x5d7530, _Src=0x5d6b50, _Size=0x9d8 | out: _Dst=0x5d7530) returned 0x5d7530 [0223.696] GetProcessHeap () returned 0x5b0000 [0223.697] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d6b50) returned 1 [0223.697] RegisterHelper () returned 0x0 [0223.697] GetProcessHeap () returned 0x5b0000 [0223.697] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa68) returned 0x5d61b8 [0223.697] memcpy (in: _Dst=0x5d61b8, _Src=0x5d7530, _Size=0xa20 | out: _Dst=0x5d61b8) returned 0x5d61b8 [0223.697] GetProcessHeap () returned 0x5b0000 [0223.698] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d7530) returned 1 [0223.698] RegisterHelper () returned 0x0 [0223.698] GetProcessHeap () returned 0x5b0000 [0223.698] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xab0) returned 0x5d6c28 [0223.698] memcpy (in: _Dst=0x5d6c28, _Src=0x5d61b8, _Size=0xa68 | out: _Dst=0x5d6c28) returned 0x5d6c28 [0223.698] GetProcessHeap () returned 0x5b0000 [0223.698] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d61b8) returned 1 [0223.699] RegisterHelper () returned 0x0 [0223.699] GetProcessHeap () returned 0x5b0000 [0223.699] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xaf8) returned 0x5d76e0 [0223.699] memcpy (in: _Dst=0x5d76e0, _Src=0x5d6c28, _Size=0xab0 | out: _Dst=0x5d76e0) returned 0x5d76e0 [0223.699] GetProcessHeap () returned 0x5b0000 [0223.699] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d6c28) returned 1 [0223.699] RegEnumValueW (in: hKey=0xc8, dwIndex=0xc, lpValueName=0x5b6718, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8 | out: lpValueName="rpc", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8) returned 0x0 [0223.699] _wcsicmp (_String1="rpcnsh.dll", _String2="ipxmontr.dll") returned 9 [0223.699] _wcsicmp (_String1="rpcnsh.dll", _String2="ipxpromn.dll") returned 9 [0223.699] GetProcessHeap () returned 0x5b0000 [0223.700] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x118) returned 0x5d4de0 [0223.700] memcpy (in: _Dst=0x5d4de0, _Src=0x5c7f38, _Size=0x104 | out: _Dst=0x5d4de0) returned 0x5d4de0 [0223.700] GetProcessHeap () returned 0x5b0000 [0223.700] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8) returned 0x5c8848 [0223.700] GetProcessHeap () returned 0x5b0000 [0223.700] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x16) returned 0x5c8c18 [0223.700] _wcsupr (in: _String="rpcnsh.dll" | out: _String="RPCNSH.DLL") returned="RPCNSH.DLL" [0223.700] GetProcessHeap () returned 0x5b0000 [0223.700] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c7f38) returned 1 [0223.700] LoadLibraryExW (lpLibFileName="RPCNSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e940000 [0223.713] GetProcAddress (hModule=0x6e940000, lpProcName="InitHelperDll") returned 0x6e942a80 [0223.713] InitHelperDll () returned 0x0 [0223.713] RegisterHelper () returned 0x0 [0223.713] GetProcessHeap () returned 0x5b0000 [0223.713] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xb40) returned 0x5d81e0 [0223.713] memcpy (in: _Dst=0x5d81e0, _Src=0x5d76e0, _Size=0xaf8 | out: _Dst=0x5d81e0) returned 0x5d81e0 [0223.713] GetProcessHeap () returned 0x5b0000 [0223.713] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d76e0) returned 1 [0223.713] RegisterHelper () returned 0x0 [0223.714] GetProcessHeap () returned 0x5b0000 [0223.714] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xb88) returned 0x5d61b8 [0223.714] memcpy (in: _Dst=0x5d61b8, _Src=0x5d81e0, _Size=0xb40 | out: _Dst=0x5d61b8) returned 0x5d61b8 [0223.714] GetProcessHeap () returned 0x5b0000 [0223.714] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d81e0) returned 1 [0223.714] RegEnumValueW (in: hKey=0xc8, dwIndex=0xd, lpValueName=0x5b6718, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8 | out: lpValueName="whhelper", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8) returned 0x0 [0223.714] _wcsicmp (_String1="whhelper.dll", _String2="ipxmontr.dll") returned 14 [0223.714] _wcsicmp (_String1="whhelper.dll", _String2="ipxpromn.dll") returned 14 [0223.714] GetProcessHeap () returned 0x5b0000 [0223.714] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x12c) returned 0x5c7f38 [0223.714] memcpy (in: _Dst=0x5c7f38, _Src=0x5d4de0, _Size=0x118 | out: _Dst=0x5c7f38) returned 0x5c7f38 [0223.714] GetProcessHeap () returned 0x5b0000 [0223.715] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x12) returned 0x5c8cb8 [0223.715] GetProcessHeap () returned 0x5b0000 [0223.715] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1a) returned 0x5cf428 [0223.715] _wcsupr (in: _String="whhelper.dll" | out: _String="WHHELPER.DLL") returned="WHHELPER.DLL" [0223.715] GetProcessHeap () returned 0x5b0000 [0223.715] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d4de0) returned 1 [0223.715] LoadLibraryExW (lpLibFileName="WHHELPER.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e930000 [0223.763] GetProcAddress (hModule=0x6e930000, lpProcName="InitHelperDll") returned 0x6e9317b0 [0223.763] InitHelperDll () returned 0x0 [0223.764] RegisterHelper () returned 0x0 [0223.764] GetProcessHeap () returned 0x5b0000 [0223.764] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xbd0) returned 0x5d6d48 [0223.764] memcpy (in: _Dst=0x5d6d48, _Src=0x5d61b8, _Size=0xb88 | out: _Dst=0x5d6d48) returned 0x5d6d48 [0223.764] GetProcessHeap () returned 0x5b0000 [0223.764] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d61b8) returned 1 [0223.764] RegEnumValueW (in: hKey=0xc8, dwIndex=0xe, lpValueName=0x5b6718, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8 | out: lpValueName="wlancfg", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8) returned 0x0 [0223.764] _wcsicmp (_String1="wlancfg.dll", _String2="ipxmontr.dll") returned 14 [0223.764] _wcsicmp (_String1="wlancfg.dll", _String2="ipxpromn.dll") returned 14 [0223.764] GetProcessHeap () returned 0x5b0000 [0223.764] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x140) returned 0x5d4de0 [0223.765] memcpy (in: _Dst=0x5d4de0, _Src=0x5c7f38, _Size=0x12c | out: _Dst=0x5d4de0) returned 0x5d4de0 [0223.765] GetProcessHeap () returned 0x5b0000 [0223.765] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x10) returned 0x5d49c0 [0223.765] GetProcessHeap () returned 0x5b0000 [0223.765] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x18) returned 0x5c8b78 [0223.765] _wcsupr (in: _String="wlancfg.dll" | out: _String="WLANCFG.DLL") returned="WLANCFG.DLL" [0223.765] GetProcessHeap () returned 0x5b0000 [0223.765] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c7f38) returned 1 [0223.765] LoadLibraryExW (lpLibFileName="WLANCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e850000 [0223.873] GetProcAddress (hModule=0x6e850000, lpProcName="InitHelperDll") returned 0x6e859fb0 [0223.873] InitHelperDll () returned 0x0 [0223.873] RegisterHelper () returned 0x0 [0223.873] GetProcessHeap () returned 0x5b0000 [0223.873] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc18) returned 0x5d7920 [0223.873] memcpy (in: _Dst=0x5d7920, _Src=0x5d6d48, _Size=0xbd0 | out: _Dst=0x5d7920) returned 0x5d7920 [0223.873] GetProcessHeap () returned 0x5b0000 [0223.874] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d6d48) returned 1 [0223.874] RegEnumValueW (in: hKey=0xc8, dwIndex=0xf, lpValueName=0x5b6718, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8 | out: lpValueName="wshelper", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8) returned 0x0 [0223.874] _wcsicmp (_String1="wshelper.dll", _String2="ipxmontr.dll") returned 14 [0223.874] _wcsicmp (_String1="wshelper.dll", _String2="ipxpromn.dll") returned 14 [0223.874] GetProcessHeap () returned 0x5b0000 [0223.874] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x154) returned 0x5cf758 [0223.874] memcpy (in: _Dst=0x5cf758, _Src=0x5d4de0, _Size=0x140 | out: _Dst=0x5cf758) returned 0x5cf758 [0223.874] GetProcessHeap () returned 0x5b0000 [0223.874] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x12) returned 0x5c8c58 [0223.874] GetProcessHeap () returned 0x5b0000 [0223.874] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1a) returned 0x5cf1f8 [0223.874] _wcsupr (in: _String="wshelper.dll" | out: _String="WSHELPER.DLL") returned="WSHELPER.DLL" [0223.874] GetProcessHeap () returned 0x5b0000 [0223.875] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d4de0) returned 1 [0223.875] LoadLibraryExW (lpLibFileName="WSHELPER.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e790000 [0223.933] GetProcAddress (hModule=0x6e790000, lpProcName="InitHelperDll") returned 0x6e7916c0 [0223.933] InitHelperDll () returned 0x0 [0223.933] RegisterHelper () returned 0x0 [0223.933] GetProcessHeap () returned 0x5b0000 [0223.933] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc60) returned 0x5d9550 [0223.934] memcpy (in: _Dst=0x5d9550, _Src=0x5d7920, _Size=0xc18 | out: _Dst=0x5d9550) returned 0x5d9550 [0223.934] GetProcessHeap () returned 0x5b0000 [0223.934] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d7920) returned 1 [0223.934] RegEnumValueW (in: hKey=0xc8, dwIndex=0x10, lpValueName=0x5b6718, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8 | out: lpValueName="peerdistsh", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x5b28d0, lpcbData=0x197ad8) returned 0x0 [0223.934] _wcsicmp (_String1="peerdistsh.dll", _String2="ipxmontr.dll") returned 7 [0223.935] _wcsicmp (_String1="peerdistsh.dll", _String2="ipxpromn.dll") returned 7 [0223.935] GetProcessHeap () returned 0x5b0000 [0223.935] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x168) returned 0x5d4de0 [0223.935] memcpy (in: _Dst=0x5d4de0, _Src=0x5cf758, _Size=0x154 | out: _Dst=0x5d4de0) returned 0x5d4de0 [0223.935] GetProcessHeap () returned 0x5b0000 [0223.935] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x16) returned 0x5d89b0 [0223.935] GetProcessHeap () returned 0x5b0000 [0223.935] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1e) returned 0x5cf3d8 [0223.935] _wcsupr (in: _String="peerdistsh.dll" | out: _String="PEERDISTSH.DLL") returned="PEERDISTSH.DLL" [0223.935] GetProcessHeap () returned 0x5b0000 [0223.935] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5cf758) returned 1 [0223.935] LoadLibraryExW (lpLibFileName="PEERDISTSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e690000 [0223.972] GetProcAddress (hModule=0x6e690000, lpProcName="InitHelperDll") returned 0x6e6ae4d0 [0223.972] InitHelperDll () returned 0x0 [0223.972] RegisterHelper () returned 0x0 [0223.972] GetProcessHeap () returned 0x5b0000 [0223.972] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xca8) returned 0x5d71c8 [0223.972] memcpy (in: _Dst=0x5d71c8, _Src=0x5d9550, _Size=0xc60 | out: _Dst=0x5d71c8) returned 0x5d71c8 [0223.972] GetProcessHeap () returned 0x5b0000 [0223.973] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d9550) returned 1 [0223.973] RegisterHelper () returned 0x0 [0223.973] GetProcessHeap () returned 0x5b0000 [0223.973] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xcf0) returned 0x5dc5c8 [0223.973] memcpy (in: _Dst=0x5dc5c8, _Src=0x5d71c8, _Size=0xca8 | out: _Dst=0x5dc5c8) returned 0x5dc5c8 [0223.973] GetProcessHeap () returned 0x5b0000 [0223.974] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d71c8) returned 1 [0223.974] RegCloseKey (hKey=0xc8) returned 0x0 [0223.974] GetProcessHeap () returned 0x5b0000 [0223.974] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b6718) returned 1 [0223.974] GetProcessHeap () returned 0x5b0000 [0223.975] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b28d0) returned 1 [0223.976] GetProcessHeap () returned 0x5b0000 [0223.976] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x48) returned 0x5c7c58 [0223.976] memcpy (in: _Dst=0x5c7c58, _Src=0x197a50, _Size=0x48 | out: _Dst=0x5c7c58) returned 0x5c7c58 [0223.976] GetProcessHeap () returned 0x5b0000 [0223.976] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x0) returned 1 [0223.976] RegisterContext () returned 0x0 [0223.976] GetProcessHeap () returned 0x5b0000 [0223.976] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x48) returned 0x5c7ca8 [0223.976] memcpy (in: _Dst=0x5c7ca8, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5c7ca8) returned 0x5c7ca8 [0223.976] GetProcessHeap () returned 0x5b0000 [0223.976] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x0) returned 1 [0223.976] RegisterContext () returned 0x0 [0223.978] _wcsicmp (_String1="ras", _String2="interface") returned 9 [0223.978] _wcsicmp (_String1="ras", _String2="interface") returned 9 [0223.978] GetProcessHeap () returned 0x5b0000 [0223.978] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x5d4f50 [0223.978] memcpy (in: _Dst=0x5d4f50, _Src=0x5c7ca8, _Size=0x48 | out: _Dst=0x5d4f50) returned 0x5d4f50 [0223.978] memcpy (in: _Dst=0x5d4f98, _Src=0x197a50, _Size=0x48 | out: _Dst=0x5d4f98) returned 0x5d4f98 [0223.978] GetProcessHeap () returned 0x5b0000 [0223.979] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c7ca8) returned 1 [0223.996] RegisterContext () returned 0x0 [0223.997] GetProcessHeap () returned 0x5b0000 [0223.997] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x48) returned 0x5c7ca8 [0223.997] memcpy (in: _Dst=0x5c7ca8, _Src=0x197a50, _Size=0x48 | out: _Dst=0x5c7ca8) returned 0x5c7ca8 [0223.997] GetProcessHeap () returned 0x5b0000 [0223.997] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x0) returned 1 [0223.997] RegisterContext () returned 0x0 [0223.997] _wcsicmp (_String1="ipv6", _String2="ip") returned 118 [0223.997] _wcsicmp (_String1="ipv6", _String2="ip") returned 118 [0223.997] GetProcessHeap () returned 0x5b0000 [0223.997] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x5c1910 [0223.997] memcpy (in: _Dst=0x5c1910, _Src=0x5c7ca8, _Size=0x48 | out: _Dst=0x5c1910) returned 0x5c1910 [0223.997] memcpy (in: _Dst=0x5c1958, _Src=0x197a50, _Size=0x48 | out: _Dst=0x5c1958) returned 0x5c1958 [0223.997] GetProcessHeap () returned 0x5b0000 [0223.998] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c7ca8) returned 1 [0223.998] RegisterContext () returned 0x0 [0223.999] _wcsicmp (_String1="aaaa", _String2="ip") returned -8 [0223.999] _wcsicmp (_String1="aaaa", _String2="ipv6") returned -8 [0223.999] _wcsicmp (_String1="aaaa", _String2="ip") returned -8 [0223.999] GetProcessHeap () returned 0x5b0000 [0223.999] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xd8) returned 0x5d9af0 [0223.999] memcpy (in: _Dst=0x5d9af0, _Src=0x197a50, _Size=0x48 | out: _Dst=0x5d9af0) returned 0x5d9af0 [0223.999] memcpy (in: _Dst=0x5d9b38, _Src=0x5c1910, _Size=0x90 | out: _Dst=0x5d9b38) returned 0x5d9b38 [0223.999] GetProcessHeap () returned 0x5b0000 [0224.000] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c1910) returned 1 [0224.000] RegisterContext () returned 0x0 [0224.001] _wcsicmp (_String1="diagnostics", _String2="aaaa") returned 3 [0224.001] _wcsicmp (_String1="diagnostics", _String2="ip") returned -5 [0224.001] _wcsicmp (_String1="diagnostics", _String2="ipv6") returned -5 [0224.001] _wcsicmp (_String1="diagnostics", _String2="aaaa") returned 3 [0224.001] _wcsicmp (_String1="diagnostics", _String2="ip") returned -5 [0224.001] GetProcessHeap () returned 0x5b0000 [0224.001] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x120) returned 0x5d9bd0 [0224.001] memcpy (in: _Dst=0x5d9bd0, _Src=0x5d9af0, _Size=0x48 | out: _Dst=0x5d9bd0) returned 0x5d9bd0 [0224.001] memcpy (in: _Dst=0x5d9c18, _Src=0x197a50, _Size=0x48 | out: _Dst=0x5d9c18) returned 0x5d9c18 [0224.001] memcpy (in: _Dst=0x5d9c60, _Src=0x5d9b38, _Size=0x90 | out: _Dst=0x5d9c60) returned 0x5d9c60 [0224.001] GetProcessHeap () returned 0x5b0000 [0224.001] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d9af0) returned 1 [0224.002] RegisterContext () returned 0x0 [0224.002] _wcsicmp (_String1="advfirewall", _String2="interface") returned -8 [0224.002] _wcsicmp (_String1="advfirewall", _String2="ras") returned -17 [0224.002] _wcsicmp (_String1="advfirewall", _String2="interface") returned -8 [0224.002] GetProcessHeap () returned 0x5b0000 [0224.002] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xd8) returned 0x5d9af0 [0224.002] memcpy (in: _Dst=0x5d9af0, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5d9af0) returned 0x5d9af0 [0224.002] memcpy (in: _Dst=0x5d9b38, _Src=0x5d4f50, _Size=0x90 | out: _Dst=0x5d9b38) returned 0x5d9b38 [0224.002] GetProcessHeap () returned 0x5b0000 [0224.002] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d4f50) returned 1 [0224.002] RegisterContext () returned 0x0 [0224.002] GetProcessHeap () returned 0x5b0000 [0224.002] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x48) returned 0x5c7e88 [0224.002] memcpy (in: _Dst=0x5c7e88, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5c7e88) returned 0x5c7e88 [0224.002] GetProcessHeap () returned 0x5b0000 [0224.003] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x0) returned 1 [0224.003] RegisterContext () returned 0x0 [0224.003] _wcsicmp (_String1="firewall", _String2="consec") returned 3 [0224.003] _wcsicmp (_String1="firewall", _String2="consec") returned 3 [0224.003] GetProcessHeap () returned 0x5b0000 [0224.003] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x5d4f50 [0224.003] memcpy (in: _Dst=0x5d4f50, _Src=0x5c7e88, _Size=0x48 | out: _Dst=0x5d4f50) returned 0x5d4f50 [0224.003] memcpy (in: _Dst=0x5d4f98, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5d4f98) returned 0x5d4f98 [0224.003] GetProcessHeap () returned 0x5b0000 [0224.004] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c7e88) returned 1 [0224.004] RegisterContext () returned 0x0 [0224.004] _wcsicmp (_String1="monitor", _String2="consec") returned 10 [0224.004] _wcsicmp (_String1="monitor", _String2="firewall") returned 7 [0224.004] _wcsicmp (_String1="monitor", _String2="consec") returned 10 [0224.004] _wcsicmp (_String1="monitor", _String2="firewall") returned 7 [0224.004] GetProcessHeap () returned 0x5b0000 [0224.004] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xd8) returned 0x5d9cf8 [0224.004] memcpy (in: _Dst=0x5d9cf8, _Src=0x5d4f50, _Size=0x90 | out: _Dst=0x5d9cf8) returned 0x5d9cf8 [0224.004] memcpy (in: _Dst=0x5d9d88, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5d9d88) returned 0x5d9d88 [0224.004] GetProcessHeap () returned 0x5b0000 [0224.004] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d4f50) returned 1 [0224.004] RegisterContext () returned 0x0 [0224.004] _wcsicmp (_String1="mainmode", _String2="consec") returned 10 [0224.005] _wcsicmp (_String1="mainmode", _String2="firewall") returned 7 [0224.005] _wcsicmp (_String1="mainmode", _String2="monitor") returned -14 [0224.005] _wcsicmp (_String1="mainmode", _String2="consec") returned 10 [0224.005] _wcsicmp (_String1="mainmode", _String2="firewall") returned 7 [0224.005] _wcsicmp (_String1="mainmode", _String2="monitor") returned -14 [0224.005] GetProcessHeap () returned 0x5b0000 [0224.005] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x120) returned 0x5d9dd8 [0224.005] memcpy (in: _Dst=0x5d9dd8, _Src=0x5d9cf8, _Size=0x90 | out: _Dst=0x5d9dd8) returned 0x5d9dd8 [0224.005] memcpy (in: _Dst=0x5d9e68, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5d9e68) returned 0x5d9e68 [0224.005] memcpy (in: _Dst=0x5d9eb0, _Src=0x5d9d88, _Size=0x48 | out: _Dst=0x5d9eb0) returned 0x5d9eb0 [0224.005] GetProcessHeap () returned 0x5b0000 [0224.005] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d9cf8) returned 1 [0224.005] RegisterContext () returned 0x0 [0224.005] _wcsicmp (_String1="dhcpclient", _String2="advfirewall") returned 3 [0224.005] _wcsicmp (_String1="dhcpclient", _String2="interface") returned -5 [0224.005] _wcsicmp (_String1="dhcpclient", _String2="ras") returned -14 [0224.006] _wcsicmp (_String1="dhcpclient", _String2="advfirewall") returned 3 [0224.006] _wcsicmp (_String1="dhcpclient", _String2="interface") returned -5 [0224.006] GetProcessHeap () returned 0x5b0000 [0224.006] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x120) returned 0x5d9f00 [0224.006] memcpy (in: _Dst=0x5d9f00, _Src=0x5d9af0, _Size=0x48 | out: _Dst=0x5d9f00) returned 0x5d9f00 [0224.006] memcpy (in: _Dst=0x5d9f48, _Src=0x197a50, _Size=0x48 | out: _Dst=0x5d9f48) returned 0x5d9f48 [0224.006] memcpy (in: _Dst=0x5d9f90, _Src=0x5d9b38, _Size=0x90 | out: _Dst=0x5d9f90) returned 0x5d9f90 [0224.006] GetProcessHeap () returned 0x5b0000 [0224.006] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d9af0) returned 1 [0224.006] RegisterContext () returned 0x0 [0224.006] _wcsicmp (_String1="lan", _String2="advfirewall") returned 11 [0224.006] _wcsicmp (_String1="lan", _String2="dhcpclient") returned 8 [0224.006] _wcsicmp (_String1="lan", _String2="interface") returned 3 [0224.006] _wcsicmp (_String1="lan", _String2="ras") returned -6 [0224.006] _wcsicmp (_String1="lan", _String2="advfirewall") returned 11 [0224.006] _wcsicmp (_String1="lan", _String2="dhcpclient") returned 8 [0224.006] _wcsicmp (_String1="lan", _String2="interface") returned 3 [0224.006] _wcsicmp (_String1="lan", _String2="ras") returned -6 [0224.007] GetProcessHeap () returned 0x5b0000 [0224.007] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x168) returned 0x5da028 [0224.007] memcpy (in: _Dst=0x5da028, _Src=0x5d9f00, _Size=0xd8 | out: _Dst=0x5da028) returned 0x5da028 [0224.007] memcpy (in: _Dst=0x5da100, _Src=0x197a50, _Size=0x48 | out: _Dst=0x5da100) returned 0x5da100 [0224.007] memcpy (in: _Dst=0x5da148, _Src=0x5d9fd8, _Size=0x48 | out: _Dst=0x5da148) returned 0x5da148 [0224.007] GetProcessHeap () returned 0x5b0000 [0224.007] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d9f00) returned 1 [0224.013] RegisterContext () returned 0x0 [0224.013] _wcsicmp (_String1="firewall", _String2="advfirewall") returned 5 [0224.013] _wcsicmp (_String1="firewall", _String2="dhcpclient") returned 2 [0224.013] _wcsicmp (_String1="firewall", _String2="interface") returned -3 [0224.013] _wcsicmp (_String1="firewall", _String2="lan") returned -6 [0224.013] _wcsicmp (_String1="firewall", _String2="ras") returned -12 [0224.013] _wcsicmp (_String1="firewall", _String2="advfirewall") returned 5 [0224.013] _wcsicmp (_String1="firewall", _String2="dhcpclient") returned 2 [0224.013] _wcsicmp (_String1="firewall", _String2="interface") returned -3 [0224.013] GetProcessHeap () returned 0x5b0000 [0224.013] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1b0) returned 0x5d71c8 [0224.013] memcpy (in: _Dst=0x5d71c8, _Src=0x5da028, _Size=0x90 | out: _Dst=0x5d71c8) returned 0x5d71c8 [0224.014] memcpy (in: _Dst=0x5d7258, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5d7258) returned 0x5d7258 [0224.014] memcpy (in: _Dst=0x5d72a0, _Src=0x5da0b8, _Size=0xd8 | out: _Dst=0x5d72a0) returned 0x5d72a0 [0224.014] GetProcessHeap () returned 0x5b0000 [0224.014] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5da028) returned 1 [0224.014] RegisterContext () returned 0x0 [0224.014] _wcsicmp (_String1="bridge", _String2="advfirewall") returned 1 [0224.014] _wcsicmp (_String1="bridge", _String2="dhcpclient") returned -2 [0224.014] _wcsicmp (_String1="bridge", _String2="firewall") returned -4 [0224.014] _wcsicmp (_String1="bridge", _String2="interface") returned -7 [0224.014] _wcsicmp (_String1="bridge", _String2="lan") returned -10 [0224.014] _wcsicmp (_String1="bridge", _String2="ras") returned -16 [0224.014] _wcsicmp (_String1="bridge", _String2="advfirewall") returned 1 [0224.014] _wcsicmp (_String1="bridge", _String2="dhcpclient") returned -2 [0224.014] GetProcessHeap () returned 0x5b0000 [0224.014] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1f8) returned 0x5d9f00 [0224.015] memcpy (in: _Dst=0x5d9f00, _Src=0x5d71c8, _Size=0x48 | out: _Dst=0x5d9f00) returned 0x5d9f00 [0224.015] memcpy (in: _Dst=0x5d9f48, _Src=0x197a50, _Size=0x48 | out: _Dst=0x5d9f48) returned 0x5d9f48 [0224.015] memcpy (in: _Dst=0x5d9f90, _Src=0x5d7210, _Size=0x168 | out: _Dst=0x5d9f90) returned 0x5d9f90 [0224.015] GetProcessHeap () returned 0x5b0000 [0224.015] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d71c8) returned 1 [0224.015] RegisterContext () returned 0x0 [0224.015] _wcsicmp (_String1="netio", _String2="advfirewall") returned 13 [0224.015] _wcsicmp (_String1="netio", _String2="bridge") returned 12 [0224.015] _wcsicmp (_String1="netio", _String2="dhcpclient") returned 10 [0224.015] _wcsicmp (_String1="netio", _String2="firewall") returned 8 [0224.015] _wcsicmp (_String1="netio", _String2="interface") returned 5 [0224.015] _wcsicmp (_String1="netio", _String2="lan") returned 2 [0224.015] _wcsicmp (_String1="netio", _String2="ras") returned -4 [0224.015] _wcsicmp (_String1="netio", _String2="advfirewall") returned 13 [0224.015] _wcsicmp (_String1="netio", _String2="bridge") returned 12 [0224.015] _wcsicmp (_String1="netio", _String2="dhcpclient") returned 10 [0224.015] _wcsicmp (_String1="netio", _String2="firewall") returned 8 [0224.015] _wcsicmp (_String1="netio", _String2="interface") returned 5 [0224.016] _wcsicmp (_String1="netio", _String2="lan") returned 2 [0224.016] _wcsicmp (_String1="netio", _String2="ras") returned -4 [0224.016] GetProcessHeap () returned 0x5b0000 [0224.016] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x240) returned 0x5d71c8 [0224.016] memcpy (in: _Dst=0x5d71c8, _Src=0x5d9f00, _Size=0x1b0 | out: _Dst=0x5d71c8) returned 0x5d71c8 [0224.016] memcpy (in: _Dst=0x5d7378, _Src=0x197a4c, _Size=0x48 | out: _Dst=0x5d7378) returned 0x5d7378 [0224.114] memcpy (in: _Dst=0x5d73c0, _Src=0x5da0b0, _Size=0x48 | out: _Dst=0x5d73c0) returned 0x5d73c0 [0224.114] GetProcessHeap () returned 0x5b0000 [0224.115] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d9f00) returned 1 [0224.115] RegisterContext () returned 0x0 [0224.115] _wcsicmp (_String1="dnsclient", _String2="advfirewall") returned 3 [0224.115] _wcsicmp (_String1="dnsclient", _String2="bridge") returned 2 [0224.115] _wcsicmp (_String1="dnsclient", _String2="dhcpclient") returned 6 [0224.115] _wcsicmp (_String1="dnsclient", _String2="firewall") returned -2 [0224.115] _wcsicmp (_String1="dnsclient", _String2="interface") returned -5 [0224.115] _wcsicmp (_String1="dnsclient", _String2="lan") returned -8 [0224.115] _wcsicmp (_String1="dnsclient", _String2="netio") returned -10 [0224.115] _wcsicmp (_String1="dnsclient", _String2="ras") returned -14 [0224.115] _wcsicmp (_String1="dnsclient", _String2="advfirewall") returned 3 [0224.115] _wcsicmp (_String1="dnsclient", _String2="bridge") returned 2 [0224.115] _wcsicmp (_String1="dnsclient", _String2="dhcpclient") returned 6 [0224.115] _wcsicmp (_String1="dnsclient", _String2="firewall") returned -2 [0224.115] GetProcessHeap () returned 0x5b0000 [0224.115] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x288) returned 0x5d9f00 [0224.115] memcpy (in: _Dst=0x5d9f00, _Src=0x5d71c8, _Size=0xd8 | out: _Dst=0x5d9f00) returned 0x5d9f00 [0224.115] memcpy (in: _Dst=0x5d9fd8, _Src=0x197a4c, _Size=0x48 | out: _Dst=0x5d9fd8) returned 0x5d9fd8 [0224.115] memcpy (in: _Dst=0x5da020, _Src=0x5d72a0, _Size=0x168 | out: _Dst=0x5da020) returned 0x5da020 [0224.115] GetProcessHeap () returned 0x5b0000 [0224.116] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d71c8) returned 1 [0224.116] RegisterContext () returned 0x0 [0224.116] _wcsicmp (_String1="namespace", _String2="advfirewall") returned 13 [0224.116] _wcsicmp (_String1="namespace", _String2="bridge") returned 12 [0224.116] _wcsicmp (_String1="namespace", _String2="dhcpclient") returned 10 [0224.116] _wcsicmp (_String1="namespace", _String2="dnsclient") returned 10 [0224.116] _wcsicmp (_String1="namespace", _String2="firewall") returned 8 [0224.116] _wcsicmp (_String1="namespace", _String2="interface") returned 5 [0224.116] _wcsicmp (_String1="namespace", _String2="lan") returned 2 [0224.116] _wcsicmp (_String1="namespace", _String2="netio") returned -4 [0224.116] _wcsicmp (_String1="namespace", _String2="ras") returned -4 [0224.116] _wcsicmp (_String1="namespace", _String2="advfirewall") returned 13 [0224.116] _wcsicmp (_String1="namespace", _String2="bridge") returned 12 [0224.116] _wcsicmp (_String1="namespace", _String2="dhcpclient") returned 10 [0224.116] _wcsicmp (_String1="namespace", _String2="dnsclient") returned 10 [0224.117] _wcsicmp (_String1="namespace", _String2="firewall") returned 8 [0224.117] _wcsicmp (_String1="namespace", _String2="interface") returned 5 [0224.117] _wcsicmp (_String1="namespace", _String2="lan") returned 2 [0224.117] _wcsicmp (_String1="namespace", _String2="netio") returned -4 [0224.117] GetProcessHeap () returned 0x5b0000 [0224.117] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x2d0) returned 0x5d71c8 [0224.117] memcpy (in: _Dst=0x5d71c8, _Src=0x5d9f00, _Size=0x1f8 | out: _Dst=0x5d71c8) returned 0x5d71c8 [0224.117] memcpy (in: _Dst=0x5d73c0, _Src=0x197a4c, _Size=0x48 | out: _Dst=0x5d73c0) returned 0x5d73c0 [0224.117] memcpy (in: _Dst=0x5d7408, _Src=0x5da0f8, _Size=0x90 | out: _Dst=0x5d7408) returned 0x5d7408 [0224.117] GetProcessHeap () returned 0x5b0000 [0224.117] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d9f00) returned 1 [0224.117] RegisterContext () returned 0x0 [0224.117] GetProcessHeap () returned 0x5b0000 [0224.117] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x48) returned 0x5c7ca8 [0224.117] memcpy (in: _Dst=0x5c7ca8, _Src=0x197a4c, _Size=0x48 | out: _Dst=0x5c7ca8) returned 0x5c7ca8 [0224.117] GetProcessHeap () returned 0x5b0000 [0224.118] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x0) returned 1 [0224.118] RegisterContext () returned 0x0 [0224.118] _wcsicmp (_String1="ipv6", _String2="ipv4") returned 2 [0224.118] _wcsicmp (_String1="ipv6", _String2="ipv4") returned 2 [0224.118] GetProcessHeap () returned 0x5b0000 [0224.118] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x5d4f50 [0224.118] memcpy (in: _Dst=0x5d4f50, _Src=0x5c7ca8, _Size=0x48 | out: _Dst=0x5d4f50) returned 0x5d4f50 [0224.118] memcpy (in: _Dst=0x5d4f98, _Src=0x197a4c, _Size=0x48 | out: _Dst=0x5d4f98) returned 0x5d4f98 [0224.118] GetProcessHeap () returned 0x5b0000 [0224.118] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c7ca8) returned 1 [0224.118] RegisterContext () returned 0x0 [0224.118] _wcsicmp (_String1="6to4", _String2="ipv4") returned -51 [0224.118] _wcsicmp (_String1="6to4", _String2="ipv6") returned -51 [0224.119] _wcsicmp (_String1="6to4", _String2="ipv4") returned -51 [0224.119] GetProcessHeap () returned 0x5b0000 [0224.119] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xd8) returned 0x5d9af0 [0224.119] memcpy (in: _Dst=0x5d9af0, _Src=0x197a20, _Size=0x48 | out: _Dst=0x5d9af0) returned 0x5d9af0 [0224.119] memcpy (in: _Dst=0x5d9b38, _Src=0x5d4f50, _Size=0x90 | out: _Dst=0x5d9b38) returned 0x5d9b38 [0224.119] GetProcessHeap () returned 0x5b0000 [0224.119] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d4f50) returned 1 [0224.119] RegisterContext () returned 0x0 [0224.119] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0224.119] _wcsicmp (_String1="isatap", _String2="ipv4") returned 3 [0224.119] _wcsicmp (_String1="isatap", _String2="ipv6") returned 3 [0224.119] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0224.119] _wcsicmp (_String1="isatap", _String2="ipv4") returned 3 [0224.119] _wcsicmp (_String1="isatap", _String2="ipv6") returned 3 [0224.119] GetProcessHeap () returned 0x5b0000 [0224.119] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x120) returned 0x5d9f00 [0224.120] memcpy (in: _Dst=0x5d9f00, _Src=0x5d9af0, _Size=0xd8 | out: _Dst=0x5d9f00) returned 0x5d9f00 [0224.120] memcpy (in: _Dst=0x5d9fd8, _Src=0x197a20, _Size=0x48 | out: _Dst=0x5d9fd8) returned 0x5d9fd8 [0224.120] GetProcessHeap () returned 0x5b0000 [0224.120] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d9af0) returned 1 [0224.120] RegisterContext () returned 0x0 [0224.120] _wcsicmp (_String1="teredo", _String2="6to4") returned 62 [0224.120] _wcsicmp (_String1="teredo", _String2="ipv4") returned 11 [0224.120] _wcsicmp (_String1="teredo", _String2="ipv6") returned 11 [0224.120] _wcsicmp (_String1="teredo", _String2="isatap") returned 11 [0224.120] _wcsicmp (_String1="teredo", _String2="6to4") returned 62 [0224.120] _wcsicmp (_String1="teredo", _String2="ipv4") returned 11 [0224.120] _wcsicmp (_String1="teredo", _String2="ipv6") returned 11 [0224.120] _wcsicmp (_String1="teredo", _String2="isatap") returned 11 [0224.120] GetProcessHeap () returned 0x5b0000 [0224.120] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x168) returned 0x5da028 [0224.121] memcpy (in: _Dst=0x5da028, _Src=0x5d9f00, _Size=0x120 | out: _Dst=0x5da028) returned 0x5da028 [0224.121] memcpy (in: _Dst=0x5da148, _Src=0x197a30, _Size=0x48 | out: _Dst=0x5da148) returned 0x5da148 [0224.121] GetProcessHeap () returned 0x5b0000 [0224.121] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d9f00) returned 1 [0224.121] RegisterContext () returned 0x0 [0224.121] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0224.121] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0224.121] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0224.121] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0224.121] _wcsicmp (_String1="portproxy", _String2="teredo") returned -4 [0224.121] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0224.121] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0224.121] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0224.121] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0224.121] _wcsicmp (_String1="portproxy", _String2="teredo") returned -4 [0224.122] GetProcessHeap () returned 0x5b0000 [0224.122] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1b0) returned 0x5d74a0 [0224.122] memcpy (in: _Dst=0x5d74a0, _Src=0x5da028, _Size=0x120 | out: _Dst=0x5d74a0) returned 0x5d74a0 [0224.122] memcpy (in: _Dst=0x5d75c0, _Src=0x197a20, _Size=0x48 | out: _Dst=0x5d75c0) returned 0x5d75c0 [0224.122] memcpy (in: _Dst=0x5d7608, _Src=0x5da148, _Size=0x48 | out: _Dst=0x5d7608) returned 0x5d7608 [0224.122] GetProcessHeap () returned 0x5b0000 [0224.122] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5da028) returned 1 [0224.122] RegisterContext () returned 0x0 [0224.122] GetProcessHeap () returned 0x5b0000 [0224.122] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x48) returned 0x5c7ca8 [0224.122] memcpy (in: _Dst=0x5c7ca8, _Src=0x197a20, _Size=0x48 | out: _Dst=0x5c7ca8) returned 0x5c7ca8 [0224.122] GetProcessHeap () returned 0x5b0000 [0224.122] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x0) returned 1 [0224.122] RegisterContext () returned 0x0 [0224.122] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0224.122] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0224.122] GetProcessHeap () returned 0x5b0000 [0224.122] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x5d4f50 [0224.122] memcpy (in: _Dst=0x5d4f50, _Src=0x5c7ca8, _Size=0x48 | out: _Dst=0x5d4f50) returned 0x5d4f50 [0224.122] memcpy (in: _Dst=0x5d4f98, _Src=0x197a20, _Size=0x48 | out: _Dst=0x5d4f98) returned 0x5d4f98 [0224.122] GetProcessHeap () returned 0x5b0000 [0224.123] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c7ca8) returned 1 [0224.123] RegisterContext () returned 0x0 [0224.123] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0224.123] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0224.123] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0224.123] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0224.123] _wcsicmp (_String1="portproxy", _String2="portproxy") returned 0 [0224.123] memcpy (in: _Dst=0x5d75c0, _Src=0x197a20, _Size=0x48 | out: _Dst=0x5d75c0) returned 0x5d75c0 [0224.123] RegisterContext () returned 0x0 [0224.123] _wcsicmp (_String1="httpstunnel", _String2="6to4") returned 50 [0224.123] _wcsicmp (_String1="httpstunnel", _String2="ipv4") returned -1 [0224.123] _wcsicmp (_String1="httpstunnel", _String2="ipv6") returned -1 [0224.123] _wcsicmp (_String1="httpstunnel", _String2="isatap") returned -1 [0224.123] _wcsicmp (_String1="httpstunnel", _String2="portproxy") returned -8 [0224.123] _wcsicmp (_String1="httpstunnel", _String2="teredo") returned -12 [0224.123] _wcsicmp (_String1="httpstunnel", _String2="6to4") returned 50 [0224.123] _wcsicmp (_String1="httpstunnel", _String2="ipv4") returned -1 [0224.123] GetProcessHeap () returned 0x5b0000 [0224.123] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1f8) returned 0x5d9f00 [0224.123] memcpy (in: _Dst=0x5d9f00, _Src=0x5d74a0, _Size=0x48 | out: _Dst=0x5d9f00) returned 0x5d9f00 [0224.123] memcpy (in: _Dst=0x5d9f48, _Src=0x197a4c, _Size=0x48 | out: _Dst=0x5d9f48) returned 0x5d9f48 [0224.123] memcpy (in: _Dst=0x5d9f90, _Src=0x5d74e8, _Size=0x168 | out: _Dst=0x5d9f90) returned 0x5d9f90 [0224.123] GetProcessHeap () returned 0x5b0000 [0224.124] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d74a0) returned 1 [0224.124] RegisterContext () returned 0x0 [0224.124] _wcsicmp (_String1="tcp", _String2="6to4") returned 62 [0224.124] _wcsicmp (_String1="tcp", _String2="httpstunnel") returned 12 [0224.124] _wcsicmp (_String1="tcp", _String2="ipv4") returned 11 [0224.124] _wcsicmp (_String1="tcp", _String2="ipv6") returned 11 [0224.124] _wcsicmp (_String1="tcp", _String2="isatap") returned 11 [0224.124] _wcsicmp (_String1="tcp", _String2="portproxy") returned 4 [0224.124] _wcsicmp (_String1="tcp", _String2="teredo") returned -2 [0224.124] _wcsicmp (_String1="tcp", _String2="6to4") returned 62 [0224.124] _wcsicmp (_String1="tcp", _String2="httpstunnel") returned 12 [0224.124] _wcsicmp (_String1="tcp", _String2="ipv4") returned 11 [0224.124] _wcsicmp (_String1="tcp", _String2="ipv6") returned 11 [0224.124] _wcsicmp (_String1="tcp", _String2="isatap") returned 11 [0224.124] _wcsicmp (_String1="tcp", _String2="portproxy") returned 4 [0224.124] _wcsicmp (_String1="tcp", _String2="teredo") returned -2 [0224.124] GetProcessHeap () returned 0x5b0000 [0224.124] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x240) returned 0x5d74a0 [0224.124] memcpy (in: _Dst=0x5d74a0, _Src=0x5d9f00, _Size=0x1b0 | out: _Dst=0x5d74a0) returned 0x5d74a0 [0224.124] memcpy (in: _Dst=0x5d7650, _Src=0x197a4c, _Size=0x48 | out: _Dst=0x5d7650) returned 0x5d7650 [0224.124] memcpy (in: _Dst=0x5d7698, _Src=0x5da0b0, _Size=0x48 | out: _Dst=0x5d7698) returned 0x5d7698 [0224.124] GetProcessHeap () returned 0x5b0000 [0224.125] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d9f00) returned 1 [0224.125] RegisterContext () returned 0x0 [0224.125] _wcsicmp (_String1="http", _String2="advfirewall") returned 7 [0224.125] _wcsicmp (_String1="http", _String2="bridge") returned 6 [0224.126] _wcsicmp (_String1="http", _String2="dhcpclient") returned 4 [0224.126] _wcsicmp (_String1="http", _String2="dnsclient") returned 4 [0224.126] _wcsicmp (_String1="http", _String2="firewall") returned 2 [0224.126] _wcsicmp (_String1="http", _String2="interface") returned -1 [0224.126] _wcsicmp (_String1="http", _String2="lan") returned -4 [0224.126] _wcsicmp (_String1="http", _String2="namespace") returned -6 [0224.126] _wcsicmp (_String1="http", _String2="netio") returned -6 [0224.127] _wcsicmp (_String1="http", _String2="ras") returned -10 [0224.127] _wcsicmp (_String1="http", _String2="advfirewall") returned 7 [0224.127] _wcsicmp (_String1="http", _String2="bridge") returned 6 [0224.127] _wcsicmp (_String1="http", _String2="dhcpclient") returned 4 [0224.127] _wcsicmp (_String1="http", _String2="dnsclient") returned 4 [0224.127] _wcsicmp (_String1="http", _String2="firewall") returned 2 [0224.127] _wcsicmp (_String1="http", _String2="interface") returned -1 [0224.127] GetProcessHeap () returned 0x5b0000 [0224.127] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x318) returned 0x5d76e8 [0224.127] memcpy (in: _Dst=0x5d76e8, _Src=0x5d71c8, _Size=0x168 | out: _Dst=0x5d76e8) returned 0x5d76e8 [0224.127] memcpy (in: _Dst=0x5d7850, _Src=0x197a4c, _Size=0x48 | out: _Dst=0x5d7850) returned 0x5d7850 [0224.127] memcpy (in: _Dst=0x5d7898, _Src=0x5d7330, _Size=0x168 | out: _Dst=0x5d7898) returned 0x5d7898 [0224.127] GetProcessHeap () returned 0x5b0000 [0224.127] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d71c8) returned 1 [0224.128] RegisterContext () returned 0x0 [0224.128] _wcsicmp (_String1="ipsec", _String2="advfirewall") returned 8 [0224.128] _wcsicmp (_String1="ipsec", _String2="bridge") returned 7 [0224.128] _wcsicmp (_String1="ipsec", _String2="dhcpclient") returned 5 [0224.128] _wcsicmp (_String1="ipsec", _String2="dnsclient") returned 5 [0224.128] _wcsicmp (_String1="ipsec", _String2="firewall") returned 3 [0224.128] _wcsicmp (_String1="ipsec", _String2="http") returned 1 [0224.128] _wcsicmp (_String1="ipsec", _String2="interface") returned 2 [0224.128] _wcsicmp (_String1="ipsec", _String2="lan") returned -3 [0224.128] _wcsicmp (_String1="ipsec", _String2="namespace") returned -5 [0224.128] _wcsicmp (_String1="ipsec", _String2="netio") returned -5 [0224.128] _wcsicmp (_String1="ipsec", _String2="ras") returned -9 [0224.128] _wcsicmp (_String1="ipsec", _String2="advfirewall") returned 8 [0224.128] _wcsicmp (_String1="ipsec", _String2="bridge") returned 7 [0224.128] _wcsicmp (_String1="ipsec", _String2="dhcpclient") returned 5 [0224.128] _wcsicmp (_String1="ipsec", _String2="dnsclient") returned 5 [0224.128] _wcsicmp (_String1="ipsec", _String2="firewall") returned 3 [0224.128] _wcsicmp (_String1="ipsec", _String2="http") returned 1 [0224.128] _wcsicmp (_String1="ipsec", _String2="interface") returned 2 [0224.128] _wcsicmp (_String1="ipsec", _String2="lan") returned -3 [0224.128] GetProcessHeap () returned 0x5b0000 [0224.128] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x360) returned 0x5d7a08 [0224.128] memcpy (in: _Dst=0x5d7a08, _Src=0x5d76e8, _Size=0x1f8 | out: _Dst=0x5d7a08) returned 0x5d7a08 [0224.128] memcpy (in: _Dst=0x5d7c00, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5d7c00) returned 0x5d7c00 [0224.128] memcpy (in: _Dst=0x5d7c48, _Src=0x5d78e0, _Size=0x120 | out: _Dst=0x5d7c48) returned 0x5d7c48 [0224.128] GetProcessHeap () returned 0x5b0000 [0224.129] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d76e8) returned 1 [0224.129] RegisterContext () returned 0x0 [0224.129] GetProcessHeap () returned 0x5b0000 [0224.129] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x48) returned 0x5c7d48 [0224.129] memcpy (in: _Dst=0x5c7d48, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5c7d48) returned 0x5c7d48 [0224.129] GetProcessHeap () returned 0x5b0000 [0224.129] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x0) returned 1 [0224.129] RegisterContext () returned 0x0 [0224.129] _wcsicmp (_String1="dynamic", _String2="static") returned -15 [0224.129] _wcsicmp (_String1="dynamic", _String2="static") returned -15 [0224.129] GetProcessHeap () returned 0x5b0000 [0224.129] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x5c1910 [0224.129] memcpy (in: _Dst=0x5c1910, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5c1910) returned 0x5c1910 [0224.129] memcpy (in: _Dst=0x5c1958, _Src=0x5c7d48, _Size=0x48 | out: _Dst=0x5c1958) returned 0x5c1958 [0224.129] GetProcessHeap () returned 0x5b0000 [0224.129] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c7d48) returned 1 [0224.129] RegisterContext () returned 0x0 [0224.129] _wcsicmp (_String1="static", _String2="dynamic") returned 15 [0224.129] _wcsicmp (_String1="static", _String2="static") returned 0 [0224.129] memcpy (in: _Dst=0x5c1958, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5c1958) returned 0x5c1958 [0224.130] RegisterContext () returned 0x0 [0224.130] _wcsicmp (_String1="dynamic", _String2="dynamic") returned 0 [0224.130] memcpy (in: _Dst=0x5c1910, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5c1910) returned 0x5c1910 [0224.130] RegisterContext () returned 0x0 [0224.130] _wcsicmp (_String1="wfp", _String2="advfirewall") returned 22 [0224.130] _wcsicmp (_String1="wfp", _String2="bridge") returned 21 [0224.130] _wcsicmp (_String1="wfp", _String2="dhcpclient") returned 19 [0224.130] _wcsicmp (_String1="wfp", _String2="dnsclient") returned 19 [0224.130] _wcsicmp (_String1="wfp", _String2="firewall") returned 17 [0224.130] _wcsicmp (_String1="wfp", _String2="http") returned 15 [0224.130] _wcsicmp (_String1="wfp", _String2="interface") returned 14 [0224.130] _wcsicmp (_String1="wfp", _String2="ipsec") returned 14 [0224.130] _wcsicmp (_String1="wfp", _String2="lan") returned 11 [0224.130] _wcsicmp (_String1="wfp", _String2="namespace") returned 9 [0224.130] _wcsicmp (_String1="wfp", _String2="netio") returned 9 [0224.130] _wcsicmp (_String1="wfp", _String2="ras") returned 5 [0224.130] _wcsicmp (_String1="wfp", _String2="advfirewall") returned 22 [0224.130] _wcsicmp (_String1="wfp", _String2="bridge") returned 21 [0224.130] _wcsicmp (_String1="wfp", _String2="dhcpclient") returned 19 [0224.130] _wcsicmp (_String1="wfp", _String2="dnsclient") returned 19 [0224.130] _wcsicmp (_String1="wfp", _String2="firewall") returned 17 [0224.130] _wcsicmp (_String1="wfp", _String2="http") returned 15 [0224.130] _wcsicmp (_String1="wfp", _String2="interface") returned 14 [0224.130] _wcsicmp (_String1="wfp", _String2="ipsec") returned 14 [0224.130] _wcsicmp (_String1="wfp", _String2="lan") returned 11 [0224.130] _wcsicmp (_String1="wfp", _String2="namespace") returned 9 [0224.130] _wcsicmp (_String1="wfp", _String2="netio") returned 9 [0224.130] _wcsicmp (_String1="wfp", _String2="ras") returned 5 [0224.130] GetProcessHeap () returned 0x5b0000 [0224.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x3a8) returned 0x5d7d70 [0224.130] memcpy (in: _Dst=0x5d7d70, _Src=0x5d7a08, _Size=0x360 | out: _Dst=0x5d7d70) returned 0x5d7d70 [0224.131] memcpy (in: _Dst=0x5d80d0, _Src=0x197a38, _Size=0x48 | out: _Dst=0x5d80d0) returned 0x5d80d0 [0224.131] GetProcessHeap () returned 0x5b0000 [0224.131] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d7a08) returned 1 [0224.134] RegisterContext () returned 0x0 [0224.134] _wcsicmp (_String1="p2p", _String2="advfirewall") returned 15 [0224.134] _wcsicmp (_String1="p2p", _String2="bridge") returned 14 [0224.134] _wcsicmp (_String1="p2p", _String2="dhcpclient") returned 12 [0224.134] _wcsicmp (_String1="p2p", _String2="dnsclient") returned 12 [0224.134] _wcsicmp (_String1="p2p", _String2="firewall") returned 10 [0224.134] _wcsicmp (_String1="p2p", _String2="http") returned 8 [0224.134] _wcsicmp (_String1="p2p", _String2="interface") returned 7 [0224.134] _wcsicmp (_String1="p2p", _String2="ipsec") returned 7 [0224.134] _wcsicmp (_String1="p2p", _String2="lan") returned 4 [0224.134] _wcsicmp (_String1="p2p", _String2="namespace") returned 2 [0224.134] _wcsicmp (_String1="p2p", _String2="netio") returned 2 [0224.134] _wcsicmp (_String1="p2p", _String2="ras") returned -2 [0224.134] _wcsicmp (_String1="p2p", _String2="wfp") returned -7 [0224.134] _wcsicmp (_String1="p2p", _String2="advfirewall") returned 15 [0224.134] _wcsicmp (_String1="p2p", _String2="bridge") returned 14 [0224.134] _wcsicmp (_String1="p2p", _String2="dhcpclient") returned 12 [0224.134] _wcsicmp (_String1="p2p", _String2="dnsclient") returned 12 [0224.134] _wcsicmp (_String1="p2p", _String2="firewall") returned 10 [0224.134] _wcsicmp (_String1="p2p", _String2="http") returned 8 [0224.134] _wcsicmp (_String1="p2p", _String2="interface") returned 7 [0224.134] _wcsicmp (_String1="p2p", _String2="ipsec") returned 7 [0224.134] _wcsicmp (_String1="p2p", _String2="lan") returned 4 [0224.134] _wcsicmp (_String1="p2p", _String2="namespace") returned 2 [0224.135] _wcsicmp (_String1="p2p", _String2="netio") returned 2 [0224.135] _wcsicmp (_String1="p2p", _String2="ras") returned -2 [0224.135] GetProcessHeap () returned 0x5b0000 [0224.135] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x3f0) returned 0x5d8120 [0224.135] memcpy (in: _Dst=0x5d8120, _Src=0x5d7d70, _Size=0x318 | out: _Dst=0x5d8120) returned 0x5d8120 [0224.135] memcpy (in: _Dst=0x5d8438, _Src=0x1978b8, _Size=0x48 | out: _Dst=0x5d8438) returned 0x5d8438 [0224.135] memcpy (in: _Dst=0x5d8480, _Src=0x5d8088, _Size=0x90 | out: _Dst=0x5d8480) returned 0x5d8480 [0224.135] GetProcessHeap () returned 0x5b0000 [0224.135] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d7d70) returned 1 [0224.135] RegisterContext () returned 0x0 [0224.135] GetProcessHeap () returned 0x5b0000 [0224.135] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x48) returned 0x5c7e88 [0224.135] memcpy (in: _Dst=0x5c7e88, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5c7e88) returned 0x5c7e88 [0224.135] GetProcessHeap () returned 0x5b0000 [0224.135] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x0) returned 1 [0224.141] RegisterContext () returned 0x0 [0224.141] _wcsicmp (_String1="group", _String2="pnrp") returned -9 [0224.141] _wcsicmp (_String1="group", _String2="pnrp") returned -9 [0224.141] GetProcessHeap () returned 0x5b0000 [0224.141] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x5d4af8 [0224.141] memcpy (in: _Dst=0x5d4af8, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5d4af8) returned 0x5d4af8 [0224.141] memcpy (in: _Dst=0x5d4b40, _Src=0x5c7e88, _Size=0x48 | out: _Dst=0x5d4b40) returned 0x5d4b40 [0224.141] GetProcessHeap () returned 0x5b0000 [0224.142] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c7e88) returned 1 [0224.143] RegisterContext () returned 0x0 [0224.143] _wcsicmp (_String1="idmgr", _String2="group") returned 2 [0224.143] _wcsicmp (_String1="idmgr", _String2="pnrp") returned -7 [0224.143] _wcsicmp (_String1="idmgr", _String2="group") returned 2 [0224.143] _wcsicmp (_String1="idmgr", _String2="pnrp") returned -7 [0224.143] GetProcessHeap () returned 0x5b0000 [0224.143] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xd8) returned 0x5d9af0 [0224.143] memcpy (in: _Dst=0x5d9af0, _Src=0x5d4af8, _Size=0x48 | out: _Dst=0x5d9af0) returned 0x5d9af0 [0224.143] memcpy (in: _Dst=0x5d9b38, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5d9b38) returned 0x5d9b38 [0224.143] memcpy (in: _Dst=0x5d9b80, _Src=0x5d4b40, _Size=0x48 | out: _Dst=0x5d9b80) returned 0x5d9b80 [0224.143] GetProcessHeap () returned 0x5b0000 [0224.144] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d4af8) returned 1 [0224.144] RegisterContext () returned 0x0 [0224.144] GetProcessHeap () returned 0x5b0000 [0224.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x48) returned 0x5c7d48 [0224.144] memcpy (in: _Dst=0x5c7d48, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5c7d48) returned 0x5c7d48 [0224.144] GetProcessHeap () returned 0x5b0000 [0224.144] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x0) returned 1 [0224.144] RegisterContext () returned 0x0 [0224.144] _wcsicmp (_String1="diagnostics", _String2="cloud") returned 1 [0224.144] _wcsicmp (_String1="diagnostics", _String2="cloud") returned 1 [0224.144] GetProcessHeap () returned 0x5b0000 [0224.144] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x5d4af8 [0224.144] memcpy (in: _Dst=0x5d4af8, _Src=0x5c7d48, _Size=0x48 | out: _Dst=0x5d4af8) returned 0x5d4af8 [0224.144] memcpy (in: _Dst=0x5d4b40, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5d4b40) returned 0x5d4b40 [0224.144] GetProcessHeap () returned 0x5b0000 [0224.144] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c7d48) returned 1 [0224.144] RegisterContext () returned 0x0 [0224.144] _wcsicmp (_String1="peer", _String2="cloud") returned 13 [0224.145] _wcsicmp (_String1="peer", _String2="diagnostics") returned 12 [0224.145] _wcsicmp (_String1="peer", _String2="cloud") returned 13 [0224.145] _wcsicmp (_String1="peer", _String2="diagnostics") returned 12 [0224.145] GetProcessHeap () returned 0x5b0000 [0224.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xd8) returned 0x5d9cf8 [0224.145] memcpy (in: _Dst=0x5d9cf8, _Src=0x5d4af8, _Size=0x90 | out: _Dst=0x5d9cf8) returned 0x5d9cf8 [0224.145] memcpy (in: _Dst=0x5d9d88, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5d9d88) returned 0x5d9d88 [0224.145] GetProcessHeap () returned 0x5b0000 [0224.145] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d4af8) returned 1 [0224.145] RegisterContext () returned 0x0 [0224.145] GetProcessHeap () returned 0x5b0000 [0224.145] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x48) returned 0x5c7e88 [0224.145] memcpy (in: _Dst=0x5c7e88, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5c7e88) returned 0x5c7e88 [0224.145] GetProcessHeap () returned 0x5b0000 [0224.145] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x0) returned 1 [0224.145] RegisterContext () returned 0x0 [0224.145] _wcsicmp (_String1="rpc", _String2="advfirewall") returned 17 [0224.145] _wcsicmp (_String1="rpc", _String2="bridge") returned 16 [0224.145] _wcsicmp (_String1="rpc", _String2="dhcpclient") returned 14 [0224.145] _wcsicmp (_String1="rpc", _String2="dnsclient") returned 14 [0224.146] _wcsicmp (_String1="rpc", _String2="firewall") returned 12 [0224.146] _wcsicmp (_String1="rpc", _String2="http") returned 10 [0224.146] _wcsicmp (_String1="rpc", _String2="interface") returned 9 [0224.146] _wcsicmp (_String1="rpc", _String2="ipsec") returned 9 [0224.146] _wcsicmp (_String1="rpc", _String2="lan") returned 6 [0224.146] _wcsicmp (_String1="rpc", _String2="namespace") returned 4 [0224.146] _wcsicmp (_String1="rpc", _String2="netio") returned 4 [0224.146] _wcsicmp (_String1="rpc", _String2="p2p") returned 2 [0224.146] _wcsicmp (_String1="rpc", _String2="ras") returned 15 [0224.146] _wcsicmp (_String1="rpc", _String2="wfp") returned -5 [0224.146] _wcsicmp (_String1="rpc", _String2="advfirewall") returned 17 [0224.146] _wcsicmp (_String1="rpc", _String2="bridge") returned 16 [0224.146] _wcsicmp (_String1="rpc", _String2="dhcpclient") returned 14 [0224.146] _wcsicmp (_String1="rpc", _String2="dnsclient") returned 14 [0224.146] _wcsicmp (_String1="rpc", _String2="firewall") returned 12 [0224.146] _wcsicmp (_String1="rpc", _String2="http") returned 10 [0224.146] _wcsicmp (_String1="rpc", _String2="interface") returned 9 [0224.146] _wcsicmp (_String1="rpc", _String2="ipsec") returned 9 [0224.146] _wcsicmp (_String1="rpc", _String2="lan") returned 6 [0224.146] _wcsicmp (_String1="rpc", _String2="namespace") returned 4 [0224.146] _wcsicmp (_String1="rpc", _String2="netio") returned 4 [0224.146] _wcsicmp (_String1="rpc", _String2="p2p") returned 2 [0224.146] _wcsicmp (_String1="rpc", _String2="ras") returned 15 [0224.146] _wcsicmp (_String1="rpc", _String2="wfp") returned -5 [0224.146] GetProcessHeap () returned 0x5b0000 [0224.146] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x438) returned 0x5d76e8 [0224.146] memcpy (in: _Dst=0x5d76e8, _Src=0x5d8120, _Size=0x3a8 | out: _Dst=0x5d76e8) returned 0x5d76e8 [0224.146] memcpy (in: _Dst=0x5d7a90, _Src=0x197a50, _Size=0x48 | out: _Dst=0x5d7a90) returned 0x5d7a90 [0224.146] memcpy (in: _Dst=0x5d7ad8, _Src=0x5d84c8, _Size=0x48 | out: _Dst=0x5d7ad8) returned 0x5d7ad8 [0224.146] GetProcessHeap () returned 0x5b0000 [0224.147] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d8120) returned 1 [0224.147] RegisterContext () returned 0x0 [0224.147] GetProcessHeap () returned 0x5b0000 [0224.147] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x48) returned 0x5c7ca8 [0224.147] memcpy (in: _Dst=0x5c7ca8, _Src=0x197a50, _Size=0x48 | out: _Dst=0x5c7ca8) returned 0x5c7ca8 [0224.147] GetProcessHeap () returned 0x5b0000 [0224.147] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x0) returned 1 [0224.147] RegisterContext () returned 0x0 [0224.147] _wcsicmp (_String1="winhttp", _String2="advfirewall") returned 22 [0224.147] _wcsicmp (_String1="winhttp", _String2="bridge") returned 21 [0224.147] _wcsicmp (_String1="winhttp", _String2="dhcpclient") returned 19 [0224.147] _wcsicmp (_String1="winhttp", _String2="dnsclient") returned 19 [0224.147] _wcsicmp (_String1="winhttp", _String2="firewall") returned 17 [0224.147] _wcsicmp (_String1="winhttp", _String2="http") returned 15 [0224.147] _wcsicmp (_String1="winhttp", _String2="interface") returned 14 [0224.147] _wcsicmp (_String1="winhttp", _String2="ipsec") returned 14 [0224.147] _wcsicmp (_String1="winhttp", _String2="lan") returned 11 [0224.147] _wcsicmp (_String1="winhttp", _String2="namespace") returned 9 [0224.148] _wcsicmp (_String1="winhttp", _String2="netio") returned 9 [0224.148] _wcsicmp (_String1="winhttp", _String2="p2p") returned 7 [0224.148] _wcsicmp (_String1="winhttp", _String2="ras") returned 5 [0224.148] _wcsicmp (_String1="winhttp", _String2="rpc") returned 5 [0224.148] _wcsicmp (_String1="winhttp", _String2="wfp") returned 3 [0224.148] _wcsicmp (_String1="winhttp", _String2="advfirewall") returned 22 [0224.148] _wcsicmp (_String1="winhttp", _String2="bridge") returned 21 [0224.148] _wcsicmp (_String1="winhttp", _String2="dhcpclient") returned 19 [0224.148] _wcsicmp (_String1="winhttp", _String2="dnsclient") returned 19 [0224.148] _wcsicmp (_String1="winhttp", _String2="firewall") returned 17 [0224.148] _wcsicmp (_String1="winhttp", _String2="http") returned 15 [0224.148] _wcsicmp (_String1="winhttp", _String2="interface") returned 14 [0224.148] _wcsicmp (_String1="winhttp", _String2="ipsec") returned 14 [0224.148] _wcsicmp (_String1="winhttp", _String2="lan") returned 11 [0224.148] _wcsicmp (_String1="winhttp", _String2="namespace") returned 9 [0224.148] _wcsicmp (_String1="winhttp", _String2="netio") returned 9 [0224.148] _wcsicmp (_String1="winhttp", _String2="p2p") returned 7 [0224.148] _wcsicmp (_String1="winhttp", _String2="ras") returned 5 [0224.148] _wcsicmp (_String1="winhttp", _String2="rpc") returned 5 [0224.148] _wcsicmp (_String1="winhttp", _String2="wfp") returned 3 [0224.148] GetProcessHeap () returned 0x5b0000 [0224.148] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x480) returned 0x5d7b28 [0224.148] memcpy (in: _Dst=0x5d7b28, _Src=0x5d76e8, _Size=0x438 | out: _Dst=0x5d7b28) returned 0x5d7b28 [0224.148] memcpy (in: _Dst=0x5d7f60, _Src=0x197a50, _Size=0x48 | out: _Dst=0x5d7f60) returned 0x5d7f60 [0224.148] GetProcessHeap () returned 0x5b0000 [0224.149] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d76e8) returned 1 [0224.184] RegisterContext () returned 0x0 [0224.184] _wcsicmp (_String1="wlan", _String2="advfirewall") returned 22 [0224.184] _wcsicmp (_String1="wlan", _String2="bridge") returned 21 [0224.184] _wcsicmp (_String1="wlan", _String2="dhcpclient") returned 19 [0224.184] _wcsicmp (_String1="wlan", _String2="dnsclient") returned 19 [0224.184] _wcsicmp (_String1="wlan", _String2="firewall") returned 17 [0224.184] _wcsicmp (_String1="wlan", _String2="http") returned 15 [0224.184] _wcsicmp (_String1="wlan", _String2="interface") returned 14 [0224.184] _wcsicmp (_String1="wlan", _String2="ipsec") returned 14 [0224.184] _wcsicmp (_String1="wlan", _String2="lan") returned 11 [0224.184] _wcsicmp (_String1="wlan", _String2="namespace") returned 9 [0224.185] _wcsicmp (_String1="wlan", _String2="netio") returned 9 [0224.185] _wcsicmp (_String1="wlan", _String2="p2p") returned 7 [0224.185] _wcsicmp (_String1="wlan", _String2="ras") returned 5 [0224.185] _wcsicmp (_String1="wlan", _String2="rpc") returned 5 [0224.185] _wcsicmp (_String1="wlan", _String2="wfp") returned 6 [0224.185] _wcsicmp (_String1="wlan", _String2="winhttp") returned 3 [0224.185] _wcsicmp (_String1="wlan", _String2="advfirewall") returned 22 [0224.185] _wcsicmp (_String1="wlan", _String2="bridge") returned 21 [0224.185] _wcsicmp (_String1="wlan", _String2="dhcpclient") returned 19 [0224.185] _wcsicmp (_String1="wlan", _String2="dnsclient") returned 19 [0224.185] _wcsicmp (_String1="wlan", _String2="firewall") returned 17 [0224.185] _wcsicmp (_String1="wlan", _String2="http") returned 15 [0224.185] _wcsicmp (_String1="wlan", _String2="interface") returned 14 [0224.185] _wcsicmp (_String1="wlan", _String2="ipsec") returned 14 [0224.185] _wcsicmp (_String1="wlan", _String2="lan") returned 11 [0224.185] _wcsicmp (_String1="wlan", _String2="namespace") returned 9 [0224.185] _wcsicmp (_String1="wlan", _String2="netio") returned 9 [0224.185] _wcsicmp (_String1="wlan", _String2="p2p") returned 7 [0224.185] _wcsicmp (_String1="wlan", _String2="ras") returned 5 [0224.185] _wcsicmp (_String1="wlan", _String2="rpc") returned 5 [0224.185] _wcsicmp (_String1="wlan", _String2="wfp") returned 6 [0224.185] _wcsicmp (_String1="wlan", _String2="winhttp") returned 3 [0224.185] GetProcessHeap () returned 0x5b0000 [0224.185] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x4c8) returned 0x5d7fb0 [0224.185] memcpy (in: _Dst=0x5d7fb0, _Src=0x5d7b28, _Size=0x480 | out: _Dst=0x5d7fb0) returned 0x5d7fb0 [0224.186] memcpy (in: _Dst=0x5d8430, _Src=0x197a50, _Size=0x48 | out: _Dst=0x5d8430) returned 0x5d8430 [0224.186] GetProcessHeap () returned 0x5b0000 [0224.186] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d7b28) returned 1 [0224.186] RegisterContext () returned 0x0 [0224.186] _wcsicmp (_String1="winsock", _String2="advfirewall") returned 22 [0224.186] _wcsicmp (_String1="winsock", _String2="bridge") returned 21 [0224.187] _wcsicmp (_String1="winsock", _String2="dhcpclient") returned 19 [0224.187] _wcsicmp (_String1="winsock", _String2="dnsclient") returned 19 [0224.187] _wcsicmp (_String1="winsock", _String2="firewall") returned 17 [0224.187] _wcsicmp (_String1="winsock", _String2="http") returned 15 [0224.187] _wcsicmp (_String1="winsock", _String2="interface") returned 14 [0224.187] _wcsicmp (_String1="winsock", _String2="ipsec") returned 14 [0224.187] _wcsicmp (_String1="winsock", _String2="lan") returned 11 [0224.187] _wcsicmp (_String1="winsock", _String2="namespace") returned 9 [0224.187] _wcsicmp (_String1="winsock", _String2="netio") returned 9 [0224.187] _wcsicmp (_String1="winsock", _String2="p2p") returned 7 [0224.187] _wcsicmp (_String1="winsock", _String2="ras") returned 5 [0224.187] _wcsicmp (_String1="winsock", _String2="rpc") returned 5 [0224.187] _wcsicmp (_String1="winsock", _String2="wfp") returned 3 [0224.187] _wcsicmp (_String1="winsock", _String2="winhttp") returned 11 [0224.187] _wcsicmp (_String1="winsock", _String2="wlan") returned -3 [0224.187] _wcsicmp (_String1="winsock", _String2="advfirewall") returned 22 [0224.187] _wcsicmp (_String1="winsock", _String2="bridge") returned 21 [0224.187] _wcsicmp (_String1="winsock", _String2="dhcpclient") returned 19 [0224.187] _wcsicmp (_String1="winsock", _String2="dnsclient") returned 19 [0224.187] _wcsicmp (_String1="winsock", _String2="firewall") returned 17 [0224.187] _wcsicmp (_String1="winsock", _String2="http") returned 15 [0224.187] _wcsicmp (_String1="winsock", _String2="interface") returned 14 [0224.187] _wcsicmp (_String1="winsock", _String2="ipsec") returned 14 [0224.187] _wcsicmp (_String1="winsock", _String2="lan") returned 11 [0224.187] _wcsicmp (_String1="winsock", _String2="namespace") returned 9 [0224.187] _wcsicmp (_String1="winsock", _String2="netio") returned 9 [0224.188] _wcsicmp (_String1="winsock", _String2="p2p") returned 7 [0224.188] _wcsicmp (_String1="winsock", _String2="ras") returned 5 [0224.188] _wcsicmp (_String1="winsock", _String2="rpc") returned 5 [0224.188] _wcsicmp (_String1="winsock", _String2="wfp") returned 3 [0224.188] _wcsicmp (_String1="winsock", _String2="winhttp") returned 11 [0224.188] _wcsicmp (_String1="winsock", _String2="wlan") returned -3 [0224.188] GetProcessHeap () returned 0x5b0000 [0224.188] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x510) returned 0x5d76e8 [0224.188] memcpy (in: _Dst=0x5d76e8, _Src=0x5d7fb0, _Size=0x480 | out: _Dst=0x5d76e8) returned 0x5d76e8 [0224.188] memcpy (in: _Dst=0x5d7b68, _Src=0x197a4c, _Size=0x48 | out: _Dst=0x5d7b68) returned 0x5d7b68 [0224.188] memcpy (in: _Dst=0x5d7bb0, _Src=0x5d8430, _Size=0x48 | out: _Dst=0x5d7bb0) returned 0x5d7bb0 [0224.188] GetProcessHeap () returned 0x5b0000 [0224.189] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d7fb0) returned 1 [0224.249] RegisterContext () returned 0x0 [0224.249] _wcsicmp (_String1="branchcache", _String2="advfirewall") returned 1 [0224.249] _wcsicmp (_String1="branchcache", _String2="bridge") returned -8 [0224.249] _wcsicmp (_String1="branchcache", _String2="dhcpclient") returned -2 [0224.249] _wcsicmp (_String1="branchcache", _String2="dnsclient") returned -2 [0224.249] _wcsicmp (_String1="branchcache", _String2="firewall") returned -4 [0224.250] _wcsicmp (_String1="branchcache", _String2="http") returned -6 [0224.250] _wcsicmp (_String1="branchcache", _String2="interface") returned -7 [0224.250] _wcsicmp (_String1="branchcache", _String2="ipsec") returned -7 [0224.250] _wcsicmp (_String1="branchcache", _String2="lan") returned -10 [0224.250] _wcsicmp (_String1="branchcache", _String2="namespace") returned -12 [0224.250] _wcsicmp (_String1="branchcache", _String2="netio") returned -12 [0224.250] _wcsicmp (_String1="branchcache", _String2="p2p") returned -14 [0224.250] _wcsicmp (_String1="branchcache", _String2="ras") returned -16 [0224.250] _wcsicmp (_String1="branchcache", _String2="rpc") returned -16 [0224.250] _wcsicmp (_String1="branchcache", _String2="wfp") returned -21 [0224.250] _wcsicmp (_String1="branchcache", _String2="winhttp") returned -21 [0224.250] _wcsicmp (_String1="branchcache", _String2="winsock") returned -21 [0224.250] _wcsicmp (_String1="branchcache", _String2="wlan") returned -21 [0224.250] _wcsicmp (_String1="branchcache", _String2="advfirewall") returned 1 [0224.250] _wcsicmp (_String1="branchcache", _String2="bridge") returned -8 [0224.250] GetProcessHeap () returned 0x5b0000 [0224.250] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x558) returned 0x5e2c50 [0224.250] memcpy (in: _Dst=0x5e2c50, _Src=0x5d76e8, _Size=0x48 | out: _Dst=0x5e2c50) returned 0x5e2c50 [0224.250] memcpy (in: _Dst=0x5e2c98, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5e2c98) returned 0x5e2c98 [0224.250] memcpy (in: _Dst=0x5e2ce0, _Src=0x5d7730, _Size=0x4c8 | out: _Dst=0x5e2ce0) returned 0x5e2ce0 [0224.250] GetProcessHeap () returned 0x5b0000 [0224.251] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d76e8) returned 1 [0224.251] RegisterContext () returned 0x0 [0224.251] GetProcessHeap () returned 0x5b0000 [0224.251] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x48) returned 0x5c7d48 [0224.251] memcpy (in: _Dst=0x5c7d48, _Src=0x197a48, _Size=0x48 | out: _Dst=0x5c7d48) returned 0x5c7d48 [0224.251] GetProcessHeap () returned 0x5b0000 [0224.251] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x0) returned 1 [0224.252] SetConsoleCtrlHandler (HandlerRoutine=0x9182a0, Add=1) returned 1 [0224.252] SetThreadUILanguage (LangId=0x0) returned 0x409 [0224.253] _wcsicmp (_String1="wlan", _String2="-?") returned 74 [0224.253] _wcsicmp (_String1="wlan", _String2="-h") returned 74 [0224.253] _wcsicmp (_String1="wlan", _String2="?") returned 56 [0224.253] _wcsicmp (_String1="wlan", _String2="/?") returned 72 [0224.253] _wcsicmp (_String1="wlan", _String2="-v") returned 74 [0224.253] _wcsicmp (_String1="wlan", _String2="-a") returned 74 [0224.253] _wcsicmp (_String1="wlan", _String2="-c") returned 74 [0224.253] _wcsicmp (_String1="wlan", _String2="-f") returned 74 [0224.253] _wcsicmp (_String1="wlan", _String2="-r") returned 74 [0224.253] _wcsicmp (_String1="wlan", _String2="-u") returned 74 [0224.253] _wcsicmp (_String1="wlan", _String2="-p") returned 74 [0224.253] GetVersionExW (in: lpVersionInformation=0x1979c4*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1979c4*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0224.253] _vsnwprintf (in: _Buffer=0x923780, _BufferCount=0x103, _Format="%d.%d.%d", _ArgList=0x1979b0 | out: _Buffer="10.0.10586") returned 10 [0224.253] _vsnwprintf (in: _Buffer=0x923990, _BufferCount=0x103, _Format="%d", _ArgList=0x1979a0 | out: _Buffer="10586") returned 5 [0224.253] _vsnwprintf (in: _Buffer=0x923ba0, _BufferCount=0x103, _Format="%d", _ArgList=0x197990 | out: _Buffer="0") returned 1 [0224.253] _vsnwprintf (in: _Buffer=0x923db0, _BufferCount=0x103, _Format="%d", _ArgList=0x197980 | out: _Buffer="0") returned 1 [0224.254] GetProcessHeap () returned 0x5b0000 [0224.254] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5da1e8 [0224.254] GetProcessHeap () returned 0x5b0000 [0224.254] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5da230 [0224.254] GetProcessHeap () returned 0x5b0000 [0224.254] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5da578 [0224.254] GetProcessHeap () returned 0x5b0000 [0224.254] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5da4e8 [0224.254] GetProcessHeap () returned 0x5b0000 [0224.254] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5da590 [0224.254] wcscpy_s (in: _Destination=0x5da590, _SizeInWords=0x6, _Source="netsh" | out: _Destination="netsh") returned 0x0 [0224.254] GetProcessHeap () returned 0x5b0000 [0224.254] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5da578) returned 1 [0224.254] GetProcessHeap () returned 0x5b0000 [0224.254] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5da230) returned 1 [0224.254] GetProcessHeap () returned 0x5b0000 [0224.254] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5da230 [0224.254] GetProcessHeap () returned 0x5b0000 [0224.254] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5da500 [0224.254] GetProcessHeap () returned 0x5b0000 [0224.254] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x24) returned 0x5d6cc0 [0224.254] GetProcessHeap () returned 0x5b0000 [0224.254] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5da578 [0224.254] GetProcessHeap () returned 0x5b0000 [0224.254] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa) returned 0x5da518 [0224.254] wcscpy_s (in: _Destination=0x5da518, _SizeInWords=0x5, _Source="wlan" | out: _Destination="wlan") returned 0x0 [0224.254] GetProcessHeap () returned 0x5b0000 [0224.254] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5da5a8 [0224.254] GetProcessHeap () returned 0x5b0000 [0224.254] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa) returned 0x5da530 [0224.254] wcscpy_s (in: _Destination=0x5da530, _SizeInWords=0x5, _Source="show" | out: _Destination="show") returned 0x0 [0224.255] GetProcessHeap () returned 0x5b0000 [0224.255] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5da548 [0224.255] GetProcessHeap () returned 0x5b0000 [0224.255] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x10) returned 0x5da560 [0224.255] wcscpy_s (in: _Destination=0x5da560, _SizeInWords=0x8, _Source="profile" | out: _Destination="profile") returned 0x0 [0224.255] GetProcessHeap () returned 0x5b0000 [0224.255] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d6cc0) returned 1 [0224.255] GetProcessHeap () returned 0x5b0000 [0224.255] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5da500) returned 1 [0224.255] GetProcessHeap () returned 0x5b0000 [0224.255] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5da500 [0224.255] GetProcessHeap () returned 0x5b0000 [0224.255] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa) returned 0x5d78e0 [0224.256] wcscpy_s (in: _Destination=0x5d78e0, _SizeInWords=0x5, _Source="wlan" | out: _Destination="wlan") returned 0x0 [0224.256] GetProcessHeap () returned 0x5b0000 [0224.256] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5da518) returned 1 [0224.256] GetProcessHeap () returned 0x5b0000 [0224.256] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5da578) returned 1 [0224.256] GetProcessHeap () returned 0x5b0000 [0224.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5d7820 [0224.256] GetProcessHeap () returned 0x5b0000 [0224.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa) returned 0x5d7748 [0224.256] wcscpy_s (in: _Destination=0x5d7748, _SizeInWords=0x5, _Source="wlan" | out: _Destination="wlan") returned 0x0 [0224.256] GetProcessHeap () returned 0x5b0000 [0224.256] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d78e0) returned 1 [0224.256] GetProcessHeap () returned 0x5b0000 [0224.256] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5da500) returned 1 [0224.256] GetProcessHeap () returned 0x5b0000 [0224.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5d77d8 [0224.256] GetProcessHeap () returned 0x5b0000 [0224.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa) returned 0x5d7a00 [0224.256] wcscpy_s (in: _Destination=0x5d7a00, _SizeInWords=0x5, _Source="show" | out: _Destination="show") returned 0x0 [0224.256] GetProcessHeap () returned 0x5b0000 [0224.256] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5da530) returned 1 [0224.256] GetProcessHeap () returned 0x5b0000 [0224.256] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5da5a8) returned 1 [0224.256] GetProcessHeap () returned 0x5b0000 [0224.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5d7958 [0224.256] GetProcessHeap () returned 0x5b0000 [0224.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x10) returned 0x5d78b0 [0224.256] wcscpy_s (in: _Destination=0x5d78b0, _SizeInWords=0x8, _Source="profile" | out: _Destination="profile") returned 0x0 [0224.256] GetProcessHeap () returned 0x5b0000 [0224.256] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5da560) returned 1 [0224.256] GetProcessHeap () returned 0x5b0000 [0224.256] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5da548) returned 1 [0224.256] GetProcessHeap () returned 0x5b0000 [0224.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x10) returned 0x5d7808 [0224.256] GetProcessHeap () returned 0x5b0000 [0224.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5d7718 [0224.257] GetProcessHeap () returned 0x5b0000 [0224.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa) returned 0x5d77f0 [0224.257] GetProcessHeap () returned 0x5b0000 [0224.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa) returned 0x5d7730 [0224.257] GetProcessHeap () returned 0x5b0000 [0224.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x10) returned 0x5d77a8 [0224.257] GetProcessHeap () returned 0x5b0000 [0224.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5d7760 [0224.257] GetProcessHeap () returned 0x5b0000 [0224.257] RtlReAllocateHeap (Heap=0x5b0000, Flags=0x0, Ptr=0x5d7760, Size=0xe) returned 0x5d78e0 [0224.257] GetProcessHeap () returned 0x5b0000 [0224.257] RtlReAllocateHeap (Heap=0x5b0000, Flags=0x0, Ptr=0x5d78e0, Size=0x16) returned 0x5d8810 [0224.257] GetProcessHeap () returned 0x5b0000 [0224.257] RtlReAllocateHeap (Heap=0x5b0000, Flags=0x0, Ptr=0x5d8810, Size=0x18) returned 0x5d8770 [0224.257] GetProcessHeap () returned 0x5b0000 [0224.257] RtlReAllocateHeap (Heap=0x5b0000, Flags=0x0, Ptr=0x5d8770, Size=0x20) returned 0x5cf130 [0224.257] GetProcessHeap () returned 0x5b0000 [0224.257] RtlReAllocateHeap (Heap=0x5b0000, Flags=0x0, Ptr=0x5cf130, Size=0x22) returned 0x5d6b40 [0224.257] GetProcessHeap () returned 0x5b0000 [0224.257] RtlReAllocateHeap (Heap=0x5b0000, Flags=0x0, Ptr=0x5d6b40, Size=0x30) returned 0x5d9280 [0224.257] GetProcessHeap () returned 0x5b0000 [0224.258] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d9280) returned 1 [0224.258] lstrcmpiW (lpString1="netsh", lpString2="namespace") returned 1 [0224.258] lstrcmpiW (lpString1="netsh", lpString2="branchcache") returned 1 [0224.258] lstrcmpiW (lpString1="netsh", lpString2="advfirewall") returned 1 [0224.258] lstrcmpiW (lpString1="netsh", lpString2="firewall") returned 1 [0224.258] lstrcmpiW (lpString1="netsh", lpString2="interface") returned 1 [0224.258] lstrcmpiW (lpString1="netsh", lpString2="dhcp") returned 1 [0224.258] lstrcmpiW (lpString1="netsh", lpString2="dnsclient") returned 1 [0224.258] lstrcmpiW (lpString1="netsh", lpString2="routing") returned -1 [0224.258] lstrcmpiW (lpString1="netsh", lpString2="ip") returned 1 [0224.258] lstrcmpiW (lpString1="netsh", lpString2="ipv6") returned 1 [0224.258] lstrcmpiW (lpString1="netsh", lpString2="aaaa") returned 1 [0224.258] lstrcmpiW (lpString1="netsh", lpString2="ras") returned -1 [0224.258] _wcsnicmp (_String1="wlan", _String2="dump", _MaxCount=0x4) returned 19 [0224.258] _wcsnicmp (_String1="wlan", _String2="help", _MaxCount=0x4) returned 15 [0224.259] _wcsnicmp (_String1="wlan", _String2="?", _MaxCount=0x4) returned 56 [0224.259] _wcsnicmp (_String1="wlan", _String2="exec", _MaxCount=0x4) returned 18 [0224.259] _wcsnicmp (_String1="wlan", _String2="advf", _MaxCount=0x4) returned 22 [0224.259] _wcsnicmp (_String1="wlan", _String2="bran", _MaxCount=0x4) returned 21 [0224.259] _wcsnicmp (_String1="wlan", _String2="brid", _MaxCount=0x4) returned 21 [0224.259] _wcsnicmp (_String1="wlan", _String2="dhcp", _MaxCount=0x4) returned 19 [0224.259] _wcsnicmp (_String1="wlan", _String2="dnsc", _MaxCount=0x4) returned 19 [0224.259] _wcsnicmp (_String1="wlan", _String2="fire", _MaxCount=0x4) returned 17 [0224.259] _wcsnicmp (_String1="wlan", _String2="http", _MaxCount=0x4) returned 15 [0224.259] _wcsnicmp (_String1="wlan", _String2="inte", _MaxCount=0x4) returned 14 [0224.259] _wcsnicmp (_String1="wlan", _String2="ipse", _MaxCount=0x4) returned 14 [0224.259] _wcsnicmp (_String1="wlan", _String2="lan", _MaxCount=0x4) returned 11 [0224.259] _wcsnicmp (_String1="wlan", _String2="name", _MaxCount=0x4) returned 9 [0224.259] _wcsnicmp (_String1="wlan", _String2="neti", _MaxCount=0x4) returned 9 [0224.259] _wcsnicmp (_String1="wlan", _String2="p2p", _MaxCount=0x4) returned 7 [0224.259] _wcsnicmp (_String1="wlan", _String2="ras", _MaxCount=0x4) returned 5 [0224.259] _wcsnicmp (_String1="wlan", _String2="rpc", _MaxCount=0x4) returned 5 [0224.259] _wcsnicmp (_String1="wlan", _String2="wfp", _MaxCount=0x4) returned 6 [0224.259] _wcsnicmp (_String1="wlan", _String2="winh", _MaxCount=0x4) returned 3 [0224.259] _wcsnicmp (_String1="wlan", _String2="wins", _MaxCount=0x4) returned 3 [0224.259] _wcsnicmp (_String1="wlan", _String2="wlan", _MaxCount=0x4) returned 0 [0224.259] lstrcmpiW (lpString1="wlan", lpString2="namespace") returned 1 [0224.259] lstrcmpiW (lpString1="wlan", lpString2="branchcache") returned 1 [0224.259] lstrcmpiW (lpString1="wlan", lpString2="advfirewall") returned 1 [0224.259] lstrcmpiW (lpString1="wlan", lpString2="firewall") returned 1 [0224.259] lstrcmpiW (lpString1="wlan", lpString2="interface") returned 1 [0224.259] lstrcmpiW (lpString1="wlan", lpString2="dhcp") returned 1 [0224.259] lstrcmpiW (lpString1="wlan", lpString2="dnsclient") returned 1 [0224.259] GetProcessHeap () returned 0x5b0000 [0224.259] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5d79b8 [0224.259] GetProcessHeap () returned 0x5b0000 [0224.259] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5d7838 [0224.260] GetProcessHeap () returned 0x5b0000 [0224.260] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x5d90f8 [0224.260] GetProcessHeap () returned 0x5b0000 [0224.260] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5d7868 [0224.260] GetProcessHeap () returned 0x5b0000 [0224.260] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5d79d0 [0224.260] wcscpy_s (in: _Destination=0x5d79d0, _SizeInWords=0x6, _Source="netsh" | out: _Destination="netsh") returned 0x0 [0224.260] GetProcessHeap () returned 0x5b0000 [0224.260] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5d7988 [0224.260] GetProcessHeap () returned 0x5b0000 [0224.260] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa) returned 0x5d7850 [0224.260] wcscpy_s (in: _Destination=0x5d7850, _SizeInWords=0x5, _Source="wlan" | out: _Destination="wlan") returned 0x0 [0224.260] GetProcessHeap () returned 0x5b0000 [0224.260] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5d79a0 [0224.260] GetProcessHeap () returned 0x5b0000 [0224.260] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa) returned 0x5d7880 [0224.260] wcscpy_s (in: _Destination=0x5d7880, _SizeInWords=0x5, _Source="show" | out: _Destination="show") returned 0x0 [0224.260] GetProcessHeap () returned 0x5b0000 [0224.260] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc) returned 0x5d7928 [0224.260] GetProcessHeap () returned 0x5b0000 [0224.260] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x10) returned 0x5d7790 [0224.260] wcscpy_s (in: _Destination=0x5d7790, _SizeInWords=0x8, _Source="profile" | out: _Destination="profile") returned 0x0 [0224.260] GetProcessHeap () returned 0x5b0000 [0224.261] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d90f8) returned 1 [0224.261] GetProcessHeap () returned 0x5b0000 [0224.261] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d7838) returned 1 [0224.261] GetProcessHeap () returned 0x5b0000 [0224.261] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d7850) returned 1 [0224.261] GetProcessHeap () returned 0x5b0000 [0224.261] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa) returned 0x5d7898 [0224.261] lstrcmpiW (lpString1="wlan", lpString2="namespace") returned 1 [0224.261] lstrcmpiW (lpString1="wlan", lpString2="branchcache") returned 1 [0224.261] lstrcmpiW (lpString1="wlan", lpString2="advfirewall") returned 1 [0224.261] lstrcmpiW (lpString1="wlan", lpString2="firewall") returned 1 [0224.261] lstrcmpiW (lpString1="wlan", lpString2="interface") returned 1 [0224.261] lstrcmpiW (lpString1="wlan", lpString2="dhcp") returned 1 [0224.261] lstrcmpiW (lpString1="wlan", lpString2="dnsclient") returned 1 [0224.261] lstrcmpiW (lpString1="wlan", lpString2="routing") returned 1 [0224.261] lstrcmpiW (lpString1="wlan", lpString2="ip") returned 1 [0224.261] lstrcmpiW (lpString1="wlan", lpString2="ipv6") returned 1 [0224.261] lstrcmpiW (lpString1="wlan", lpString2="aaaa") returned 1 [0224.261] lstrcmpiW (lpString1="wlan", lpString2="ras") returned 1 [0224.261] _wcsnicmp (_String1="show", _String2="dump", _MaxCount=0x4) returned 15 [0224.261] _wcsnicmp (_String1="show", _String2="help", _MaxCount=0x4) returned 11 [0224.261] _wcsnicmp (_String1="show", _String2="?", _MaxCount=0x4) returned 52 [0224.261] _wcsnicmp (_String1="show", _String2="conn", _MaxCount=0x4) returned 16 [0224.261] _wcsnicmp (_String1="show", _String2="disc", _MaxCount=0x4) returned 15 [0224.261] _wcsnicmp (_String1="show", _String2="repo", _MaxCount=0x4) returned 1 [0224.262] _wcsnicmp (_String1="show", _String2="add", _MaxCount=0x4) returned 18 [0224.262] _wcsnicmp (_String1="show", _String2="dele", _MaxCount=0x4) returned 15 [0224.262] _wcsnicmp (_String1="show", _String2="set", _MaxCount=0x4) returned 3 [0224.262] _wcsnicmp (_String1="show", _String2="show", _MaxCount=0x4) returned 0 [0224.262] _wcsnicmp (_String1="profile", _String2="help", _MaxCount=0x7) returned 8 [0224.262] _wcsnicmp (_String1="profile", _String2="?", _MaxCount=0x7) returned 49 [0224.262] wcstok (in: _String="settings", _Delimiter=" ", _Context=0x5e3160 | out: _String="settings", _Context=0x5e3160) returned="settings" [0224.262] _wcsnicmp (_String1="profile", _String2="setting", _MaxCount=0x7) returned -3 [0224.262] wcstok (in: _String="interfaces", _Delimiter=" ", _Context=0x5e3160 | out: _String="interfaces", _Context=0x5e3160) returned="interfaces" [0224.262] _wcsnicmp (_String1="profile", _String2="interfa", _MaxCount=0x7) returned 7 [0224.262] wcstok (in: _String="networks", _Delimiter=" ", _Context=0x5e3160 | out: _String="networks", _Context=0x5e3160) returned="networks" [0224.262] _wcsnicmp (_String1="profile", _String2="network", _MaxCount=0x7) returned 2 [0224.262] wcstok (in: _String="profiles", _Delimiter=" ", _Context=0x5e3160 | out: _String="profiles", _Context=0x5e3160) returned="profiles" [0224.262] _wcsnicmp (_String1="profile", _String2="profile", _MaxCount=0x7) returned 0 [0224.262] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x5e3160 | out: _String=0x0, _Context=0x5e3160) returned 0x0 [0224.262] lstrcmpiW (lpString1="wlan", lpString2="netsh") returned 1 [0224.265] PrintMessageFromModule () returned 0x39 [0224.266] LoadStringW (in: hInstance=0x6e850000, uID=0xe870, lpBuffer=0x18f3f0, cchBufferMax=16384 | out: lpBuffer="The Wireless AutoConfig Service (wlansvc) is not running.") returned 0x39 [0224.271] FormatMessageW (in: dwFlags=0x500, lpSource=0x18f3f0, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0x18f3d4, nSize=0x0, Arguments=0x18f3ec | out: lpBuffer="ㆰ^珸\x19腣\x91砌]") returned 0x39 [0224.271] GetStdHandle (nStdHandle=0xfffffff5) returned 0x428 [0224.271] GetConsoleOutputCP () returned 0xfde9 [0224.271] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="The Wireless AutoConfig Service (wlansvc) is not running.", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 58 [0224.271] GetProcessHeap () returned 0x5b0000 [0224.271] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x3a) returned 0x5d0b18 [0224.271] GetConsoleOutputCP () returned 0xfde9 [0224.272] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="The Wireless AutoConfig Service (wlansvc) is not running.", cchWideChar=-1, lpMultiByteStr=0x5d0b18, cbMultiByte=58, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="The Wireless AutoConfig Service (wlansvc) is not running.", lpUsedDefaultChar=0x0) returned 58 [0224.272] WriteFile (in: hFile=0x428, lpBuffer=0x5d0b18*, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0x18f3c0, lpOverlapped=0x0 | out: lpBuffer=0x5d0b18*, lpNumberOfBytesWritten=0x18f3c0*=0x39, lpOverlapped=0x0) returned 1 [0224.272] GetProcessHeap () returned 0x5b0000 [0224.272] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d0b18) returned 1 [0224.272] LocalFree (hMem=0x5e31b0) returned 0x0 [0224.275] FormatMessageW (in: dwFlags=0x500, lpSource=0x911244, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0x197988, nSize=0x0, Arguments=0x197994 | out: lpBuffer="砸]禘\x19胐\x91禤\x19禼\x19寯\x91ቄ\x91ㅠ^\x03") returned 0x2 [0224.275] GetStdHandle (nStdHandle=0xfffffff5) returned 0x428 [0224.275] GetConsoleOutputCP () returned 0xfde9 [0224.275] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0224.275] GetProcessHeap () returned 0x5b0000 [0224.275] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x3) returned 0x5c8968 [0224.275] GetConsoleOutputCP () returned 0xfde9 [0224.275] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x5c8968, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0224.275] WriteFile (in: hFile=0x428, lpBuffer=0x5c8968*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x197974, lpOverlapped=0x0 | out: lpBuffer=0x5c8968*, lpNumberOfBytesWritten=0x197974*=0x2, lpOverlapped=0x0) returned 1 [0224.275] GetProcessHeap () returned 0x5b0000 [0224.275] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5c8968) returned 1 [0224.275] LocalFree (hMem=0x5d7838) returned 0x0 [0224.275] GetProcessHeap () returned 0x5b0000 [0224.275] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d7718) returned 1 [0224.276] GetProcessHeap () returned 0x5b0000 [0224.276] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d77f0) returned 1 [0224.276] GetProcessHeap () returned 0x5b0000 [0224.276] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d7730) returned 1 [0224.276] GetProcessHeap () returned 0x5b0000 [0224.276] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d77a8) returned 1 [0224.276] GetProcessHeap () returned 0x5b0000 [0224.276] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d7808) returned 1 [0224.276] GetProcessHeap () returned 0x5b0000 [0224.276] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d7748) returned 1 [0224.276] GetProcessHeap () returned 0x5b0000 [0224.276] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d7820) returned 1 [0224.276] GetProcessHeap () returned 0x5b0000 [0224.276] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d7a00) returned 1 [0224.276] GetProcessHeap () returned 0x5b0000 [0224.276] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d77d8) returned 1 [0224.276] GetProcessHeap () returned 0x5b0000 [0224.276] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d78b0) returned 1 [0224.276] GetProcessHeap () returned 0x5b0000 [0224.276] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d7958) returned 1 [0224.276] GetProcessHeap () returned 0x5b0000 [0224.276] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5da230) returned 1 [0224.276] GetProcessHeap () returned 0x5b0000 [0224.276] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5da590) returned 1 [0224.276] GetProcessHeap () returned 0x5b0000 [0224.276] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5da4e8) returned 1 [0224.276] GetProcessHeap () returned 0x5b0000 [0224.276] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5da1e8) returned 1 [0224.305] GetProcessHeap () returned 0x5b0000 [0224.305] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5dc5c8) returned 1 [0224.305] FreeLibrary (hLibModule=0x910000) returned 1 [0224.305] FreeLibrary (hLibModule=0x6f620000) returned 1 [0224.306] FreeLibrary (hLibModule=0x6f5a0000) returned 1 [0224.326] free (_Block=0x4b03ca0) [0224.327] LocalFree (hMem=0x5c5488) returned 0x0 [0224.328] LocalFree (hMem=0x5c5608) returned 0x0 [0224.328] LocalFree (hMem=0x5b26f8) returned 0x0 [0224.328] LocalFree (hMem=0x5c1bf0) returned 0x0 [0224.328] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x5d9698 [0224.328] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x5d7838 [0224.328] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x5d7970 [0224.328] free (_Block=0x4b03c20) [0224.329] free (_Block=0x0) [0224.329] free (_Block=0x4b03c08) [0224.329] free (_Block=0x4b03c38) [0224.329] free (_Block=0x4b03c80) [0224.329] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x5b35c8 [0224.334] LocalFree (hMem=0x5b35c8) returned 0x0 [0224.334] LocalFree (hMem=0x5c5698) returned 0x0 [0224.335] LocalFree (hMem=0x5d9698) returned 0x0 [0224.336] free (_Block=0x4b03b00) [0224.336] GetModuleHandleA (lpModuleName="MSVCRT.DLL") returned 0x77610000 [0224.336] FreeLibrary (hLibModule=0x77610000) returned 1 [0224.336] LocalFree (hMem=0x5d7970) returned 0x0 [0224.336] LocalFree (hMem=0x5d7838) returned 0x0 [0224.336] GlobalHandle (pMem=0x5c5378) returned 0x60a0004 [0224.336] GlobalUnlock (hMem=0x60a0004) returned 0 [0224.344] FreeLibrary (hLibModule=0x6f1a0000) returned 1 [0224.348] FreeLibrary (hLibModule=0x6f130000) returned 1 [0224.349] FreeLibrary (hLibModule=0x6f0d0000) returned 1 [0224.355] FreeLibrary (hLibModule=0x6efd0000) returned 1 [0224.356] FreeLibrary (hLibModule=0x6efc0000) returned 1 [0224.390] FreeLibrary (hLibModule=0x6ecd0000) returned 1 [0224.392] FreeLibrary (hLibModule=0x6ec20000) returned 1 [0224.395] FreeLibrary (hLibModule=0x6eba0000) returned 1 [0224.407] FreeLibrary (hLibModule=0x6e9f0000) returned 1 [0224.410] FreeLibrary (hLibModule=0x6e980000) returned 1 [0224.415] FreeLibrary (hLibModule=0x6e940000) returned 1 [0224.417] FreeLibrary (hLibModule=0x6e930000) returned 1 [0224.420] FreeLibrary (hLibModule=0x6e850000) returned 1 [0224.432] FreeLibrary (hLibModule=0x6e790000) returned 1 [0224.436] FreeLibrary (hLibModule=0x6e690000) returned 1 [0224.455] GetProcessHeap () returned 0x5b0000 [0224.456] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5d4de0) returned 1 [0224.456] GetProcessHeap () returned 0x5b0000 [0224.456] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b0598) returned 1 [0224.456] GetProcessHeap () returned 0x5b0000 [0224.456] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b6c98) returned 1 [0224.456] GetProcessHeap () returned 0x5b0000 [0224.456] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b72f8) returned 1 [0224.456] GetProcessHeap () returned 0x5b0000 [0224.456] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b6f30) returned 1 [0224.456] GetProcessHeap () returned 0x5b0000 [0224.456] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b6f40) returned 1 [0224.456] GetProcessHeap () returned 0x5b0000 [0224.456] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b6cf8) returned 1 [0224.456] GetProcessHeap () returned 0x5b0000 [0224.456] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b6d08) returned 1 [0224.456] GetProcessHeap () returned 0x5b0000 [0224.456] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b6d18) returned 1 [0224.456] GetProcessHeap () returned 0x5b0000 [0224.456] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b6d28) returned 1 [0224.457] GetProcessHeap () returned 0x5b0000 [0224.457] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b6d38) returned 1 [0224.457] GetProcessHeap () returned 0x5b0000 [0224.457] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b6d48) returned 1 [0224.457] GetProcessHeap () returned 0x5b0000 [0224.457] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b6d58) returned 1 [0224.457] GetProcessHeap () returned 0x5b0000 [0224.457] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b6928) returned 1 [0224.457] GetProcessHeap () returned 0x5b0000 [0224.457] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b6938) returned 1 [0224.457] GetProcessHeap () returned 0x5b0000 [0224.457] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b6948) returned 1 [0224.457] GetProcessHeap () returned 0x5b0000 [0224.457] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8f88) returned 1 [0224.457] GetProcessHeap () returned 0x5b0000 [0224.457] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8fb8) returned 1 [0224.457] GetProcessHeap () returned 0x5b0000 [0224.457] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8f98) returned 1 [0224.457] GetProcessHeap () returned 0x5b0000 [0224.457] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8ef8) returned 1 [0224.457] GetProcessHeap () returned 0x5b0000 [0224.457] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8e78) returned 1 [0224.457] GetProcessHeap () returned 0x5b0000 [0224.457] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8e48) returned 1 [0224.457] GetProcessHeap () returned 0x5b0000 [0224.457] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8f08) returned 1 [0224.457] GetProcessHeap () returned 0x5b0000 [0224.457] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8f68) returned 1 [0224.457] GetProcessHeap () returned 0x5b0000 [0224.457] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8f58) returned 1 [0224.457] GetProcessHeap () returned 0x5b0000 [0224.457] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8e68) returned 1 [0224.457] GetProcessHeap () returned 0x5b0000 [0224.457] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8f18) returned 1 [0224.457] GetProcessHeap () returned 0x5b0000 [0224.457] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8f28) returned 1 [0224.458] GetProcessHeap () returned 0x5b0000 [0224.458] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8e28) returned 1 [0224.458] GetProcessHeap () returned 0x5b0000 [0224.458] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8ed8) returned 1 [0224.458] GetProcessHeap () returned 0x5b0000 [0224.458] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8fa8) returned 1 [0224.458] GetProcessHeap () returned 0x5b0000 [0224.458] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8e18) returned 1 [0224.458] GetProcessHeap () returned 0x5b0000 [0224.458] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8e08) returned 1 [0224.458] GetProcessHeap () returned 0x5b0000 [0224.458] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8f38) returned 1 [0224.458] GetProcessHeap () returned 0x5b0000 [0224.458] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8df8) returned 1 [0224.458] GetProcessHeap () returned 0x5b0000 [0224.458] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8e58) returned 1 [0224.458] GetProcessHeap () returned 0x5b0000 [0224.458] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8e38) returned 1 [0224.458] GetProcessHeap () returned 0x5b0000 [0224.458] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8e88) returned 1 [0224.458] GetProcessHeap () returned 0x5b0000 [0224.458] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8f48) returned 1 [0224.458] GetProcessHeap () returned 0x5b0000 [0224.458] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8f78) returned 1 [0224.458] GetProcessHeap () returned 0x5b0000 [0224.458] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8e98) returned 1 [0224.458] GetProcessHeap () returned 0x5b0000 [0224.458] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8ea8) returned 1 [0224.458] GetProcessHeap () returned 0x5b0000 [0224.458] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8ec8) returned 1 [0224.458] GetProcessHeap () returned 0x5b0000 [0224.458] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8de8) returned 1 [0224.458] GetProcessHeap () returned 0x5b0000 [0224.458] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8ee8) returned 1 [0224.458] GetProcessHeap () returned 0x5b0000 [0224.459] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8eb8) returned 1 [0224.459] GetProcessHeap () returned 0x5b0000 [0224.459] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9168) returned 1 [0224.459] GetProcessHeap () returned 0x5b0000 [0224.459] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b90a8) returned 1 [0224.459] GetProcessHeap () returned 0x5b0000 [0224.459] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b91a8) returned 1 [0224.459] GetProcessHeap () returned 0x5b0000 [0224.459] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9198) returned 1 [0224.459] GetProcessHeap () returned 0x5b0000 [0224.459] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b91e8) returned 1 [0224.459] GetProcessHeap () returned 0x5b0000 [0224.459] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9008) returned 1 [0224.459] GetProcessHeap () returned 0x5b0000 [0224.459] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9138) returned 1 [0224.459] GetProcessHeap () returned 0x5b0000 [0224.459] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9148) returned 1 [0224.459] GetProcessHeap () returned 0x5b0000 [0224.459] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b90d8) returned 1 [0224.459] GetProcessHeap () returned 0x5b0000 [0224.459] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9158) returned 1 [0224.459] GetProcessHeap () returned 0x5b0000 [0224.459] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b91b8) returned 1 [0224.459] GetProcessHeap () returned 0x5b0000 [0224.459] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b91c8) returned 1 [0224.459] GetProcessHeap () returned 0x5b0000 [0224.459] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b91d8) returned 1 [0224.459] GetProcessHeap () returned 0x5b0000 [0224.459] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b90e8) returned 1 [0224.459] GetProcessHeap () returned 0x5b0000 [0224.459] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9108) returned 1 [0224.459] GetProcessHeap () returned 0x5b0000 [0224.459] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9178) returned 1 [0224.459] GetProcessHeap () returned 0x5b0000 [0224.459] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9078) returned 1 [0224.459] GetProcessHeap () returned 0x5b0000 [0224.460] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9038) returned 1 [0224.460] GetProcessHeap () returned 0x5b0000 [0224.460] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b90b8) returned 1 [0224.460] GetProcessHeap () returned 0x5b0000 [0224.460] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b8ff8) returned 1 [0224.460] GetProcessHeap () returned 0x5b0000 [0224.460] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9018) returned 1 [0224.460] GetProcessHeap () returned 0x5b0000 [0224.460] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9048) returned 1 [0224.460] GetProcessHeap () returned 0x5b0000 [0224.460] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9188) returned 1 [0224.460] GetProcessHeap () returned 0x5b0000 [0224.460] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9098) returned 1 [0224.460] GetProcessHeap () returned 0x5b0000 [0224.460] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9028) returned 1 [0224.460] GetProcessHeap () returned 0x5b0000 [0224.460] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9058) returned 1 [0224.460] GetProcessHeap () returned 0x5b0000 [0224.460] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b90f8) returned 1 [0224.460] GetProcessHeap () returned 0x5b0000 [0224.460] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b90c8) returned 1 [0224.460] GetProcessHeap () returned 0x5b0000 [0224.460] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9118) returned 1 [0224.460] GetProcessHeap () returned 0x5b0000 [0224.460] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9128) returned 1 [0224.460] GetProcessHeap () returned 0x5b0000 [0224.460] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9068) returned 1 [0224.460] GetProcessHeap () returned 0x5b0000 [0224.460] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9088) returned 1 [0224.460] GetProcessHeap () returned 0x5b0000 [0224.460] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9218) returned 1 [0224.460] GetProcessHeap () returned 0x5b0000 [0224.460] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b92e8) returned 1 [0224.460] GetProcessHeap () returned 0x5b0000 [0224.460] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9238) returned 1 [0224.460] GetProcessHeap () returned 0x5b0000 [0224.460] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b93b8) returned 1 [0224.461] GetProcessHeap () returned 0x5b0000 [0224.461] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b91f8) returned 1 [0224.461] GetProcessHeap () returned 0x5b0000 [0224.461] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9288) returned 1 [0224.461] GetProcessHeap () returned 0x5b0000 [0224.461] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9258) returned 1 [0224.461] GetProcessHeap () returned 0x5b0000 [0224.461] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9328) returned 1 [0224.461] GetProcessHeap () returned 0x5b0000 [0224.461] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9268) returned 1 [0224.461] GetProcessHeap () returned 0x5b0000 [0224.461] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b92f8) returned 1 [0224.461] GetProcessHeap () returned 0x5b0000 [0224.461] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b92a8) returned 1 [0224.461] GetProcessHeap () returned 0x5b0000 [0224.461] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b92b8) returned 1 [0224.461] GetProcessHeap () returned 0x5b0000 [0224.461] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b93a8) returned 1 [0224.461] GetProcessHeap () returned 0x5b0000 [0224.461] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9208) returned 1 [0224.461] GetProcessHeap () returned 0x5b0000 [0224.461] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9338) returned 1 [0224.461] GetProcessHeap () returned 0x5b0000 [0224.461] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9298) returned 1 [0224.461] GetProcessHeap () returned 0x5b0000 [0224.461] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9388) returned 1 [0224.461] GetProcessHeap () returned 0x5b0000 [0224.461] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9398) returned 1 [0224.461] GetProcessHeap () returned 0x5b0000 [0224.461] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b92c8) returned 1 [0224.461] GetProcessHeap () returned 0x5b0000 [0224.461] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9228) returned 1 [0224.461] GetProcessHeap () returned 0x5b0000 [0224.461] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9308) returned 1 [0224.461] GetProcessHeap () returned 0x5b0000 [0224.461] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9248) returned 1 [0224.462] GetProcessHeap () returned 0x5b0000 [0224.462] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9278) returned 1 [0224.462] GetProcessHeap () returned 0x5b0000 [0224.462] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b92d8) returned 1 [0224.462] GetProcessHeap () returned 0x5b0000 [0224.462] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9318) returned 1 [0224.462] GetProcessHeap () returned 0x5b0000 [0224.462] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9348) returned 1 [0224.462] GetProcessHeap () returned 0x5b0000 [0224.462] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9358) returned 1 [0224.462] GetProcessHeap () returned 0x5b0000 [0224.462] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9368) returned 1 [0224.462] GetProcessHeap () returned 0x5b0000 [0224.462] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9378) returned 1 [0224.462] GetProcessHeap () returned 0x5b0000 [0224.462] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9610) returned 1 [0224.462] GetProcessHeap () returned 0x5b0000 [0224.462] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b97a0) returned 1 [0224.462] GetProcessHeap () returned 0x5b0000 [0224.462] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9730) returned 1 [0224.462] GetProcessHeap () returned 0x5b0000 [0224.462] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b97b0) returned 1 [0224.462] GetProcessHeap () returned 0x5b0000 [0224.462] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9630) returned 1 [0224.462] GetProcessHeap () returned 0x5b0000 [0224.462] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9760) returned 1 [0224.462] GetProcessHeap () returned 0x5b0000 [0224.462] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9650) returned 1 [0224.462] GetProcessHeap () returned 0x5b0000 [0224.462] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9770) returned 1 [0224.462] GetProcessHeap () returned 0x5b0000 [0224.462] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b97c0) returned 1 [0224.462] GetProcessHeap () returned 0x5b0000 [0224.462] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9750) returned 1 [0224.462] GetProcessHeap () returned 0x5b0000 [0224.462] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b96d0) returned 1 [0224.462] GetProcessHeap () returned 0x5b0000 [0224.462] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b96e0) returned 1 [0224.463] GetProcessHeap () returned 0x5b0000 [0224.463] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9620) returned 1 [0224.463] GetProcessHeap () returned 0x5b0000 [0224.463] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b96f0) returned 1 [0224.463] GetProcessHeap () returned 0x5b0000 [0224.463] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9640) returned 1 [0224.463] GetProcessHeap () returned 0x5b0000 [0224.463] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9780) returned 1 [0224.463] GetProcessHeap () returned 0x5b0000 [0224.463] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9600) returned 1 [0224.463] GetProcessHeap () returned 0x5b0000 [0224.463] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9740) returned 1 [0224.463] GetProcessHeap () returned 0x5b0000 [0224.463] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9700) returned 1 [0224.463] GetProcessHeap () returned 0x5b0000 [0224.463] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9710) returned 1 [0224.463] GetProcessHeap () returned 0x5b0000 [0224.463] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9660) returned 1 [0224.463] GetProcessHeap () returned 0x5b0000 [0224.463] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9790) returned 1 [0224.463] GetProcessHeap () returned 0x5b0000 [0224.463] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9720) returned 1 [0224.463] GetProcessHeap () returned 0x5b0000 [0224.463] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9670) returned 1 [0224.463] GetProcessHeap () returned 0x5b0000 [0224.463] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9680) returned 1 [0224.463] GetProcessHeap () returned 0x5b0000 [0224.463] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9690) returned 1 [0224.463] GetProcessHeap () returned 0x5b0000 [0224.463] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b96a0) returned 1 [0224.463] GetProcessHeap () returned 0x5b0000 [0224.463] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b96b0) returned 1 [0224.463] GetProcessHeap () returned 0x5b0000 [0224.463] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b96c0) returned 1 [0224.463] GetProcessHeap () returned 0x5b0000 [0224.463] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9560) returned 1 [0224.463] GetProcessHeap () returned 0x5b0000 [0224.463] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9440) returned 1 [0224.463] GetProcessHeap () returned 0x5b0000 [0224.464] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9500) returned 1 [0224.464] GetProcessHeap () returned 0x5b0000 [0224.464] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9420) returned 1 [0224.464] GetProcessHeap () returned 0x5b0000 [0224.464] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9570) returned 1 [0224.464] GetProcessHeap () returned 0x5b0000 [0224.464] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9470) returned 1 [0224.464] GetProcessHeap () returned 0x5b0000 [0224.464] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9590) returned 1 [0224.464] GetProcessHeap () returned 0x5b0000 [0224.464] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9550) returned 1 [0224.464] GetProcessHeap () returned 0x5b0000 [0224.464] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9480) returned 1 [0224.464] GetProcessHeap () returned 0x5b0000 [0224.464] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9430) returned 1 [0224.464] GetProcessHeap () returned 0x5b0000 [0224.464] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9540) returned 1 [0224.464] GetProcessHeap () returned 0x5b0000 [0224.464] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b95a0) returned 1 [0224.464] GetProcessHeap () returned 0x5b0000 [0224.464] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9520) returned 1 [0224.464] GetProcessHeap () returned 0x5b0000 [0224.464] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b95b0) returned 1 [0224.464] GetProcessHeap () returned 0x5b0000 [0224.464] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9490) returned 1 [0224.464] GetProcessHeap () returned 0x5b0000 [0224.464] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b95f0) returned 1 [0224.464] GetProcessHeap () returned 0x5b0000 [0224.464] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9450) returned 1 [0224.464] GetProcessHeap () returned 0x5b0000 [0224.464] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9580) returned 1 [0224.464] GetProcessHeap () returned 0x5b0000 [0224.464] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b95c0) returned 1 [0224.464] GetProcessHeap () returned 0x5b0000 [0224.464] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b95d0) returned 1 [0224.464] GetProcessHeap () returned 0x5b0000 [0224.464] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b94a0) returned 1 [0224.464] GetProcessHeap () returned 0x5b0000 [0224.464] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9460) returned 1 [0224.464] GetProcessHeap () returned 0x5b0000 [0224.465] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b95e0) returned 1 [0224.465] GetProcessHeap () returned 0x5b0000 [0224.465] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b94b0) returned 1 [0224.465] GetProcessHeap () returned 0x5b0000 [0224.465] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9400) returned 1 [0224.465] GetProcessHeap () returned 0x5b0000 [0224.465] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9410) returned 1 [0224.465] GetProcessHeap () returned 0x5b0000 [0224.465] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b94c0) returned 1 [0224.465] GetProcessHeap () returned 0x5b0000 [0224.465] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b94d0) returned 1 [0224.465] GetProcessHeap () returned 0x5b0000 [0224.465] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9530) returned 1 [0224.465] GetProcessHeap () returned 0x5b0000 [0224.465] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b94e0) returned 1 [0224.465] GetProcessHeap () returned 0x5b0000 [0224.465] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b94f0) returned 1 [0224.465] GetProcessHeap () returned 0x5b0000 [0224.465] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9510) returned 1 [0224.465] GetProcessHeap () returned 0x5b0000 [0224.465] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9b08) returned 1 [0224.465] GetProcessHeap () returned 0x5b0000 [0224.465] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9b48) returned 1 [0224.465] GetProcessHeap () returned 0x5b0000 [0224.465] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9a58) returned 1 [0224.465] GetProcessHeap () returned 0x5b0000 [0224.465] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9a98) returned 1 [0224.465] GetProcessHeap () returned 0x5b0000 [0224.465] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9a38) returned 1 [0224.465] GetProcessHeap () returned 0x5b0000 [0224.465] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9b28) returned 1 [0224.465] GetProcessHeap () returned 0x5b0000 [0224.465] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9a88) returned 1 [0224.465] GetProcessHeap () returned 0x5b0000 [0224.465] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9ae8) returned 1 [0224.465] GetProcessHeap () returned 0x5b0000 [0224.465] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9bc8) returned 1 [0224.465] GetProcessHeap () returned 0x5b0000 [0224.465] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9aa8) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.466] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9a08) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.466] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9a68) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.466] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9a18) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.466] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9b38) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.466] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9b58) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.466] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9b18) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.466] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9bb8) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.466] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9ab8) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.466] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9b68) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.466] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9a28) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.466] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9a48) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.466] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9b78) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.466] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9b88) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.466] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9b98) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.466] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9a78) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.466] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9ac8) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.466] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9ba8) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.466] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9ad8) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.466] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9af8) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.466] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9968) returned 1 [0224.466] GetProcessHeap () returned 0x5b0000 [0224.467] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9858) returned 1 [0224.467] GetProcessHeap () returned 0x5b0000 [0224.467] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b98f8) returned 1 [0224.467] GetProcessHeap () returned 0x5b0000 [0224.467] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9838) returned 1 [0224.467] GetProcessHeap () returned 0x5b0000 [0224.467] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9848) returned 1 [0224.467] GetProcessHeap () returned 0x5b0000 [0224.467] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9878) returned 1 [0224.467] GetProcessHeap () returned 0x5b0000 [0224.467] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9808) returned 1 [0224.467] GetProcessHeap () returned 0x5b0000 [0224.467] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b99f8) returned 1 [0224.467] GetProcessHeap () returned 0x5b0000 [0224.467] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9978) returned 1 [0224.467] GetProcessHeap () returned 0x5b0000 [0224.467] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9948) returned 1 [0224.467] GetProcessHeap () returned 0x5b0000 [0224.467] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9908) returned 1 [0224.467] GetProcessHeap () returned 0x5b0000 [0224.467] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9898) returned 1 [0224.467] GetProcessHeap () returned 0x5b0000 [0224.467] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9998) returned 1 [0224.467] GetProcessHeap () returned 0x5b0000 [0224.467] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b9958) returned 1 [0224.467] GetProcessHeap () returned 0x5b0000 [0224.467] RtlFreeHeap (HeapHandle=0x5b0000, Flags=0x0, BaseAddress=0x5b99a8) returned 1 [0224.467] exit (_Code=1) Thread: id = 275 os_tid = 0x394 Thread: id = 278 os_tid = 0x758 Thread: id = 279 os_tid = 0x954 [0224.300] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x5d9698 [0224.300] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x5d7850 [0224.300] LocalAlloc (uFlags=0x0, uBytes=0xc) returned 0x5d7a00 [0224.300] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x5da108 [0224.300] LocalReAlloc (hMem=0x5d7a00, uBytes=0x10, uFlags=0x2) returned 0x5d8528 [0224.302] LocalFree (hMem=0x5d9698) returned 0x0 [0224.302] LocalFree (hMem=0x5da108) returned 0x0 [0224.302] LocalFree (hMem=0x5d8528) returned 0x0 [0224.302] LocalFree (hMem=0x5d7850) returned 0x0 Thread: id = 280 os_tid = 0x854 Process: id = "17" image_name = "findstr.exe" filename = "c:\\windows\\syswow64\\findstr.exe" page_root = "0x56ae6000" os_pid = "0x3a4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x184" cmd_line = "findstr All" cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000126d6" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 5226 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 5227 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 5228 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 5229 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 5230 start_va = 0xa0000 end_va = 0xdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 5231 start_va = 0xe0000 end_va = 0xe3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 5232 start_va = 0xf0000 end_va = 0xf0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 5233 start_va = 0x100000 end_va = 0x101fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 5234 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 5235 start_va = 0x1170000 end_va = 0x1182fff monitored = 0 entry_point = 0x11751e0 region_type = mapped_file name = "findstr.exe" filename = "\\Windows\\SysWOW64\\findstr.exe" (normalized: "c:\\windows\\syswow64\\findstr.exe") Region: id = 5236 start_va = 0x1190000 end_va = 0x518ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001190000" filename = "" Region: id = 5237 start_va = 0x77d80000 end_va = 0x77efafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 5238 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 5239 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 5240 start_va = 0x7fff0000 end_va = 0x7dfa5f83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 5241 start_va = 0x7dfa5f840000 end_va = 0x7ffa5f83ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007dfa5f840000" filename = "" Region: id = 5242 start_va = 0x7ffa5f840000 end_va = 0x7ffa5fa00fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 5243 start_va = 0x7ffa5fa01000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffa5fa01000" filename = "" Region: id = 5248 start_va = 0x110000 end_va = 0x15ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 5249 start_va = 0x65700000 end_va = 0x6574ffff monitored = 0 entry_point = 0x65718180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 5250 start_va = 0x65750000 end_va = 0x657c9fff monitored = 0 entry_point = 0x65763290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 5251 start_va = 0x76950000 end_va = 0x76a2ffff monitored = 0 entry_point = 0x76963980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 5252 start_va = 0x656f0000 end_va = 0x656f7fff monitored = 0 entry_point = 0x656f17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 5253 start_va = 0x400000 end_va = 0x5affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 5258 start_va = 0x76950000 end_va = 0x76a2ffff monitored = 0 entry_point = 0x76963980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 5259 start_va = 0x74cc0000 end_va = 0x74e3dfff monitored = 0 entry_point = 0x74d71b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 5260 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 5261 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 5263 start_va = 0x5b0000 end_va = 0x66dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 5264 start_va = 0x77610000 end_va = 0x776cdfff monitored = 0 entry_point = 0x77645630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 5265 start_va = 0x110000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 5266 start_va = 0x150000 end_va = 0x15ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 5267 start_va = 0x160000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 5268 start_va = 0x670000 end_va = 0x7effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 5269 start_va = 0x77bd0000 end_va = 0x77d16fff monitored = 0 entry_point = 0x77be1cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 5270 start_va = 0x74f30000 end_va = 0x7507efff monitored = 0 entry_point = 0x74fe6820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 5271 start_va = 0x1a0000 end_va = 0x1c9fff monitored = 0 entry_point = 0x1a5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 5272 start_va = 0x7f0000 end_va = 0x977fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007f0000" filename = "" Region: id = 5276 start_va = 0x76b30000 end_va = 0x76b5afff monitored = 0 entry_point = 0x76b35680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 5277 start_va = 0x980000 end_va = 0xb00fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000980000" filename = "" Region: id = 5278 start_va = 0x5190000 end_va = 0x658ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005190000" filename = "" Region: id = 5283 start_va = 0x20000 end_va = 0x22fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "findstr.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\findstr.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\findstr.exe.mui") Region: id = 5284 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 5285 start_va = 0x1a0000 end_va = 0x1a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 5286 start_va = 0x1b0000 end_va = 0x1b3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Thread: id = 276 os_tid = 0x678 Thread: id = 277 os_tid = 0x128 Process: id = "18" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x4a376000" os_pid = "0x484" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x410" cmd_line = "\"cmd.exe\" /C chcp 65001 && netsh wlan show networks mode=bssid" cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000126d6" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 5380 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 5381 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 5382 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 5383 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 5384 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 5385 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 5386 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 5387 start_va = 0x1c0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 5388 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 5389 start_va = 0xf90000 end_va = 0xfe1fff monitored = 1 entry_point = 0xfa4fd0 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe") Region: id = 5390 start_va = 0xff0000 end_va = 0x4feffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ff0000" filename = "" Region: id = 5391 start_va = 0x77d80000 end_va = 0x77efafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 5392 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 5393 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 5394 start_va = 0x7fff0000 end_va = 0x7dfa5f83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 5395 start_va = 0x7dfa5f840000 end_va = 0x7ffa5f83ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007dfa5f840000" filename = "" Region: id = 5396 start_va = 0x7ffa5f840000 end_va = 0x7ffa5fa00fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 5397 start_va = 0x7ffa5fa01000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffa5fa01000" filename = "" Region: id = 5398 start_va = 0x400000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 5399 start_va = 0x65700000 end_va = 0x6574ffff monitored = 0 entry_point = 0x65718180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 5400 start_va = 0x65750000 end_va = 0x657c9fff monitored = 0 entry_point = 0x65763290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 5401 start_va = 0x76950000 end_va = 0x76a2ffff monitored = 0 entry_point = 0x76963980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 5402 start_va = 0x656f0000 end_va = 0x656f7fff monitored = 0 entry_point = 0x656f17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 5403 start_va = 0x470000 end_va = 0x73ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 5404 start_va = 0x76950000 end_va = 0x76a2ffff monitored = 0 entry_point = 0x76963980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 5405 start_va = 0x74cc0000 end_va = 0x74e3dfff monitored = 0 entry_point = 0x74d71b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 5406 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 5407 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 5471 start_va = 0x470000 end_va = 0x52dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 5472 start_va = 0x640000 end_va = 0x73ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000640000" filename = "" Region: id = 5473 start_va = 0x77610000 end_va = 0x776cdfff monitored = 0 entry_point = 0x77645630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 5474 start_va = 0x400000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 5475 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 5476 start_va = 0x530000 end_va = 0x62ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 5477 start_va = 0x740000 end_va = 0x7affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000740000" filename = "" Region: id = 5478 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 5479 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 5480 start_va = 0x7b0000 end_va = 0xae6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Thread: id = 281 os_tid = 0x674 [0224.913] GetModuleHandleA (lpModuleName=0x0) returned 0xf90000 [0224.914] __set_app_type (_Type=0x1) [0224.914] __p__fmode () returned 0x776c4d6c [0224.914] __p__commode () returned 0x776c5b1c [0224.914] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xfa5200) returned 0x0 [0224.914] __getmainargs (in: _Argc=0xfb60e8, _Argv=0xfb60ec, _Env=0xfb60f0, _DoWildCard=0, _StartInfo=0xfb60fc | out: _Argc=0xfb60e8, _Argv=0xfb60ec, _Env=0xfb60f0) returned 0 [0224.914] GetCurrentThreadId () returned 0x674 [0224.914] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x674) returned 0x7c [0224.914] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76950000 [0224.914] GetProcAddress (hModule=0x76950000, lpProcName="SetThreadUILanguage") returned 0x76992510 [0224.914] SetThreadUILanguage (LangId=0x0) returned 0x409 [0224.918] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0224.918] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ff18 | out: phkResult=0x19ff18*=0x0) returned 0x2 [0224.918] VirtualQuery (in: lpAddress=0x19ff1f, lpBuffer=0x19fed0, dwLength=0x1c | out: lpBuffer=0x19fed0*(BaseAddress=0x19f000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0224.918] VirtualQuery (in: lpAddress=0xa0000, lpBuffer=0x19fed0, dwLength=0x1c | out: lpBuffer=0x19fed0*(BaseAddress=0xa0000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0224.918] VirtualQuery (in: lpAddress=0xa1000, lpBuffer=0x19fed0, dwLength=0x1c | out: lpBuffer=0x19fed0*(BaseAddress=0xa1000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0224.918] VirtualQuery (in: lpAddress=0xa3000, lpBuffer=0x19fed0, dwLength=0x1c | out: lpBuffer=0x19fed0*(BaseAddress=0xa3000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0224.918] VirtualQuery (in: lpAddress=0x1a0000, lpBuffer=0x19fed0, dwLength=0x1c | out: lpBuffer=0x19fed0*(BaseAddress=0x1a0000, AllocationBase=0x1a0000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0224.918] GetConsoleOutputCP () returned 0x1b5 [0224.919] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xfbf460 | out: lpCPInfo=0xfbf460) returned 1 [0224.919] SetConsoleCtrlHandler (HandlerRoutine=0xfb0e40, Add=1) returned 1 [0224.919] _get_osfhandle (_FileHandle=1) returned 0x31c [0224.919] SetConsoleMode (hConsoleHandle=0x31c, dwMode=0x0) returned 0 [0224.919] _get_osfhandle (_FileHandle=1) returned 0x31c [0224.919] GetConsoleMode (in: hConsoleHandle=0x31c, lpMode=0xfbf40c | out: lpMode=0xfbf40c) returned 0 [0224.919] _get_osfhandle (_FileHandle=0) returned 0x38 [0224.919] GetConsoleMode (in: hConsoleHandle=0x38, lpMode=0xfbf408 | out: lpMode=0xfbf408) returned 1 [0224.919] _get_osfhandle (_FileHandle=0) returned 0x38 [0224.919] SetConsoleMode (hConsoleHandle=0x38, dwMode=0x1a7) returned 1 [0224.920] GetEnvironmentStringsW () returned 0x647e48* [0224.920] GetProcessHeap () returned 0x640000 [0224.920] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xac4) returned 0x648918 [0224.920] memcpy (in: _Dst=0x648918, _Src=0x647e48, _Size=0xac4 | out: _Dst=0x648918) returned 0x648918 [0224.920] FreeEnvironmentStringsA (penv="=") returned 1 [0224.920] GetProcessHeap () returned 0x640000 [0224.920] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x4) returned 0x640550 [0224.920] GetEnvironmentStringsW () returned 0x647e48* [0224.920] GetProcessHeap () returned 0x640000 [0224.920] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xac4) returned 0x6493e8 [0224.920] memcpy (in: _Dst=0x6493e8, _Src=0x647e48, _Size=0xac4 | out: _Dst=0x6493e8) returned 0x6493e8 [0224.920] FreeEnvironmentStringsA (penv="=") returned 1 [0224.920] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x19ee7c | out: phkResult=0x19ee7c*=0x8c) returned 0x0 [0224.920] RegQueryValueExW (in: hKey=0x8c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x0, lpData=0x19ee88*=0x49, lpcbData=0x19ee80*=0x1000) returned 0x2 [0224.921] RegQueryValueExW (in: hKey=0x8c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x1, lpcbData=0x19ee80*=0x4) returned 0x0 [0224.921] RegQueryValueExW (in: hKey=0x8c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x0, lpData=0x19ee88*=0x1, lpcbData=0x19ee80*=0x1000) returned 0x2 [0224.921] RegQueryValueExW (in: hKey=0x8c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x0, lpcbData=0x19ee80*=0x4) returned 0x0 [0224.921] RegQueryValueExW (in: hKey=0x8c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x40, lpcbData=0x19ee80*=0x4) returned 0x0 [0224.921] RegQueryValueExW (in: hKey=0x8c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x40, lpcbData=0x19ee80*=0x4) returned 0x0 [0224.921] RegQueryValueExW (in: hKey=0x8c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x0, lpData=0x19ee88*=0x40, lpcbData=0x19ee80*=0x1000) returned 0x2 [0224.921] RegCloseKey (hKey=0x8c) returned 0x0 [0224.921] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x19ee7c | out: phkResult=0x19ee7c*=0x8c) returned 0x0 [0224.921] RegQueryValueExW (in: hKey=0x8c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x0, lpData=0x19ee88*=0x40, lpcbData=0x19ee80*=0x1000) returned 0x2 [0224.921] RegQueryValueExW (in: hKey=0x8c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x1, lpcbData=0x19ee80*=0x4) returned 0x0 [0224.921] RegQueryValueExW (in: hKey=0x8c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x0, lpData=0x19ee88*=0x1, lpcbData=0x19ee80*=0x1000) returned 0x2 [0224.921] RegQueryValueExW (in: hKey=0x8c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x0, lpcbData=0x19ee80*=0x4) returned 0x0 [0224.921] RegQueryValueExW (in: hKey=0x8c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x9, lpcbData=0x19ee80*=0x4) returned 0x0 [0224.921] RegQueryValueExW (in: hKey=0x8c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x9, lpcbData=0x19ee80*=0x4) returned 0x0 [0224.921] RegQueryValueExW (in: hKey=0x8c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x0, lpData=0x19ee88*=0x9, lpcbData=0x19ee80*=0x1000) returned 0x2 [0224.921] RegCloseKey (hKey=0x8c) returned 0x0 [0224.921] time (in: timer=0x0 | out: timer=0x0) returned 0x63c87758 [0224.921] srand (_Seed=0x63c87758) [0224.921] GetCommandLineW () returned="\"cmd.exe\" /C chcp 65001 && netsh wlan show networks mode=bssid" [0224.922] GetCommandLineW () returned="\"cmd.exe\" /C chcp 65001 && netsh wlan show networks mode=bssid" [0224.922] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0xfc7720 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0224.922] GetProcessHeap () returned 0x640000 [0224.922] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x210) returned 0x647e48 [0224.922] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x647e50, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0224.922] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x9c [0224.922] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0224.922] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0224.922] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0224.922] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0224.922] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0224.922] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0224.922] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0224.922] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0224.922] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0224.922] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0224.922] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0224.923] GetProcessHeap () returned 0x640000 [0224.923] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648918) returned 1 [0224.923] GetEnvironmentStringsW () returned 0x648060* [0224.923] GetProcessHeap () returned 0x640000 [0224.923] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xadc) returned 0x64a9a0 [0224.924] memcpy (in: _Dst=0x64a9a0, _Src=0x648060, _Size=0xadc | out: _Dst=0x64a9a0) returned 0x64a9a0 [0224.924] FreeEnvironmentStringsA (penv="=") returned 1 [0224.924] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x1b [0224.924] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0224.924] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0224.924] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0224.924] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0224.924] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0224.924] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0224.924] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0224.924] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0224.924] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0224.924] GetProcessHeap () returned 0x640000 [0224.924] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x30) returned 0x6405c8 [0224.924] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x19fc54 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0224.924] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0x19fc54, lpFilePart=0x19fc4c | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x19fc4c*="system32") returned 0x13 [0224.924] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0224.924] FindFirstFileW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), lpFindFileData=0x19f9d0 | out: lpFindFileData=0x19f9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x7543cb2b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7543cb2b, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x640600 [0224.924] FindClose (in: hFindFile=0x640600 | out: hFindFile=0x640600) returned 1 [0224.924] memcpy (in: _Dst=0x19fc5a, _Src=0x19f9fc, _Size=0xe | out: _Dst=0x19fc5a) returned 0x19fc5a [0224.925] FindFirstFileW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), lpFindFileData=0x19f9d0 | out: lpFindFileData=0x19f9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xad951269, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad951269, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System32", cAlternateFileName="")) returned 0x640600 [0224.925] FindClose (in: hFindFile=0x640600 | out: hFindFile=0x640600) returned 1 [0224.925] memcpy (in: _Dst=0x19fc6a, _Src=0x19f9fc, _Size=0x10 | out: _Dst=0x19fc6a) returned 0x19fc6a [0224.925] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0224.925] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0224.925] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0224.925] GetProcessHeap () returned 0x640000 [0224.926] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x64a9a0) returned 1 [0224.926] GetEnvironmentStringsW () returned 0x648060* [0224.926] GetProcessHeap () returned 0x640000 [0224.926] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xb0c) returned 0x649eb8 [0224.926] memcpy (in: _Dst=0x649eb8, _Src=0x648060, _Size=0xb0c | out: _Dst=0x649eb8) returned 0x649eb8 [0224.926] FreeEnvironmentStringsA (penv="=") returned 1 [0224.926] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0xfc7720 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0224.926] GetProcessHeap () returned 0x640000 [0224.926] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6405c8) returned 1 [0224.926] GetProcessHeap () returned 0x640000 [0224.926] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x400e) returned 0x64bfa0 [0224.927] GetProcessHeap () returned 0x640000 [0224.927] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x70) returned 0x64a9d0 [0224.927] GetProcessHeap () returned 0x640000 [0224.927] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x64bfa0) returned 1 [0224.927] GetConsoleOutputCP () returned 0x1b5 [0224.928] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xfbf460 | out: lpCPInfo=0xfbf460) returned 1 [0224.928] GetUserDefaultLCID () returned 0x409 [0224.929] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0xfc34a0, cchData=8 | out: lpLCData=":") returned 2 [0224.929] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x19fd84, cchData=128 | out: lpLCData="0") returned 2 [0224.929] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x19fd84, cchData=128 | out: lpLCData="0") returned 2 [0224.929] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x19fd84, cchData=128 | out: lpLCData="1") returned 2 [0224.929] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0xfc34b0, cchData=8 | out: lpLCData="/") returned 2 [0224.929] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0xfc3500, cchData=32 | out: lpLCData="Mon") returned 4 [0224.929] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0xfc3540, cchData=32 | out: lpLCData="Tue") returned 4 [0224.929] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0xfc3580, cchData=32 | out: lpLCData="Wed") returned 4 [0224.929] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0xfc35c0, cchData=32 | out: lpLCData="Thu") returned 4 [0224.929] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0xfc3600, cchData=32 | out: lpLCData="Fri") returned 4 [0224.929] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0xfc3640, cchData=32 | out: lpLCData="Sat") returned 4 [0224.929] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0xfc3680, cchData=32 | out: lpLCData="Sun") returned 4 [0224.929] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0xfc34c0, cchData=8 | out: lpLCData=".") returned 2 [0224.929] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0xfc34e0, cchData=8 | out: lpLCData=",") returned 2 [0224.929] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0224.930] GetProcessHeap () returned 0x640000 [0224.930] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x20c) returned 0x64aa90 [0224.930] GetConsoleTitleW (in: lpConsoleTitle=0x64aa90, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0224.931] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76950000 [0224.931] GetProcAddress (hModule=0x76950000, lpProcName="CopyFileExW") returned 0x7696ffc0 [0224.931] GetProcAddress (hModule=0x76950000, lpProcName="IsDebuggerPresent") returned 0x7696b0b0 [0224.931] GetProcAddress (hModule=0x76950000, lpProcName="SetConsoleInputExeNameW") returned 0x74ddb440 [0224.931] GetProcessHeap () returned 0x640000 [0224.931] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x400a) returned 0x64bfa0 [0224.931] GetProcessHeap () returned 0x640000 [0224.932] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x64bfa0) returned 1 [0224.932] _wcsicmp (_String1="chcp", _String2=")") returned 58 [0224.932] _wcsicmp (_String1="FOR", _String2="chcp") returned 3 [0224.932] _wcsicmp (_String1="FOR/?", _String2="chcp") returned 3 [0224.932] _wcsicmp (_String1="IF", _String2="chcp") returned 6 [0224.932] _wcsicmp (_String1="IF/?", _String2="chcp") returned 6 [0224.933] _wcsicmp (_String1="REM", _String2="chcp") returned 15 [0224.933] _wcsicmp (_String1="REM/?", _String2="chcp") returned 15 [0224.933] GetProcessHeap () returned 0x640000 [0224.933] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x58) returned 0x64aca8 [0224.933] GetProcessHeap () returned 0x640000 [0224.933] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x12) returned 0x6476d0 [0224.933] GetProcessHeap () returned 0x640000 [0224.933] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x18) returned 0x6477d0 [0224.933] GetProcessHeap () returned 0x640000 [0224.933] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x58) returned 0x64ad08 [0224.934] _wcsicmp (_String1="FOR", _String2="netsh") returned -8 [0224.934] _wcsicmp (_String1="FOR/?", _String2="netsh") returned -8 [0224.934] _wcsicmp (_String1="IF", _String2="netsh") returned -5 [0224.934] _wcsicmp (_String1="IF/?", _String2="netsh") returned -5 [0224.934] _wcsicmp (_String1="REM", _String2="netsh") returned 4 [0224.934] _wcsicmp (_String1="REM/?", _String2="netsh") returned 4 [0224.934] GetProcessHeap () returned 0x640000 [0224.934] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x58) returned 0x64ad68 [0224.934] GetProcessHeap () returned 0x640000 [0224.934] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x14) returned 0x647950 [0224.935] GetProcessHeap () returned 0x640000 [0224.935] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x46) returned 0x64adc8 [0224.935] GetConsoleTitleW (in: lpConsoleTitle=0x19fa10, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0224.936] _wcsicmp (_String1="chcp", _String2="DIR") returned -1 [0224.936] _wcsicmp (_String1="chcp", _String2="ERASE") returned -2 [0224.936] _wcsicmp (_String1="chcp", _String2="DEL") returned -1 [0224.936] _wcsicmp (_String1="chcp", _String2="TYPE") returned -17 [0224.936] _wcsicmp (_String1="chcp", _String2="COPY") returned -7 [0224.936] _wcsicmp (_String1="chcp", _String2="CD") returned 4 [0224.936] _wcsicmp (_String1="chcp", _String2="CHDIR") returned -1 [0224.936] _wcsicmp (_String1="chcp", _String2="RENAME") returned -15 [0224.936] _wcsicmp (_String1="chcp", _String2="REN") returned -15 [0224.936] _wcsicmp (_String1="chcp", _String2="ECHO") returned -2 [0224.936] _wcsicmp (_String1="chcp", _String2="SET") returned -16 [0224.936] _wcsicmp (_String1="chcp", _String2="PAUSE") returned -13 [0224.936] _wcsicmp (_String1="chcp", _String2="DATE") returned -1 [0224.936] _wcsicmp (_String1="chcp", _String2="TIME") returned -17 [0224.936] _wcsicmp (_String1="chcp", _String2="PROMPT") returned -13 [0224.936] _wcsicmp (_String1="chcp", _String2="MD") returned -10 [0224.936] _wcsicmp (_String1="chcp", _String2="MKDIR") returned -10 [0224.936] _wcsicmp (_String1="chcp", _String2="RD") returned -15 [0224.936] _wcsicmp (_String1="chcp", _String2="RMDIR") returned -15 [0224.936] _wcsicmp (_String1="chcp", _String2="PATH") returned -13 [0224.936] _wcsicmp (_String1="chcp", _String2="GOTO") returned -4 [0224.936] _wcsicmp (_String1="chcp", _String2="SHIFT") returned -16 [0224.936] _wcsicmp (_String1="chcp", _String2="CLS") returned -4 [0224.937] _wcsicmp (_String1="chcp", _String2="CALL") returned 7 [0224.937] _wcsicmp (_String1="chcp", _String2="VERIFY") returned -19 [0224.937] _wcsicmp (_String1="chcp", _String2="VER") returned -19 [0224.937] _wcsicmp (_String1="chcp", _String2="VOL") returned -19 [0224.937] _wcsicmp (_String1="chcp", _String2="EXIT") returned -2 [0224.937] _wcsicmp (_String1="chcp", _String2="SETLOCAL") returned -16 [0224.937] _wcsicmp (_String1="chcp", _String2="ENDLOCAL") returned -2 [0224.937] _wcsicmp (_String1="chcp", _String2="TITLE") returned -17 [0224.937] _wcsicmp (_String1="chcp", _String2="START") returned -16 [0224.937] _wcsicmp (_String1="chcp", _String2="DPATH") returned -1 [0224.937] _wcsicmp (_String1="chcp", _String2="KEYS") returned -8 [0224.937] _wcsicmp (_String1="chcp", _String2="MOVE") returned -10 [0224.937] _wcsicmp (_String1="chcp", _String2="PUSHD") returned -13 [0224.937] _wcsicmp (_String1="chcp", _String2="POPD") returned -13 [0224.937] _wcsicmp (_String1="chcp", _String2="ASSOC") returned 2 [0224.937] _wcsicmp (_String1="chcp", _String2="FTYPE") returned -3 [0224.937] _wcsicmp (_String1="chcp", _String2="BREAK") returned 1 [0224.937] _wcsicmp (_String1="chcp", _String2="COLOR") returned -7 [0224.937] _wcsicmp (_String1="chcp", _String2="MKLINK") returned -10 [0224.937] _wcsicmp (_String1="chcp", _String2="DIR") returned -1 [0224.937] _wcsicmp (_String1="chcp", _String2="ERASE") returned -2 [0224.937] _wcsicmp (_String1="chcp", _String2="DEL") returned -1 [0224.937] _wcsicmp (_String1="chcp", _String2="TYPE") returned -17 [0224.937] _wcsicmp (_String1="chcp", _String2="COPY") returned -7 [0224.937] _wcsicmp (_String1="chcp", _String2="CD") returned 4 [0224.937] _wcsicmp (_String1="chcp", _String2="CHDIR") returned -1 [0224.937] _wcsicmp (_String1="chcp", _String2="RENAME") returned -15 [0224.937] _wcsicmp (_String1="chcp", _String2="REN") returned -15 [0224.937] _wcsicmp (_String1="chcp", _String2="ECHO") returned -2 [0224.937] _wcsicmp (_String1="chcp", _String2="SET") returned -16 [0224.937] _wcsicmp (_String1="chcp", _String2="PAUSE") returned -13 [0224.937] _wcsicmp (_String1="chcp", _String2="DATE") returned -1 [0224.938] _wcsicmp (_String1="chcp", _String2="TIME") returned -17 [0224.938] _wcsicmp (_String1="chcp", _String2="PROMPT") returned -13 [0224.938] _wcsicmp (_String1="chcp", _String2="MD") returned -10 [0224.938] _wcsicmp (_String1="chcp", _String2="MKDIR") returned -10 [0224.938] _wcsicmp (_String1="chcp", _String2="RD") returned -15 [0224.938] _wcsicmp (_String1="chcp", _String2="RMDIR") returned -15 [0224.938] _wcsicmp (_String1="chcp", _String2="PATH") returned -13 [0224.938] _wcsicmp (_String1="chcp", _String2="GOTO") returned -4 [0224.938] _wcsicmp (_String1="chcp", _String2="SHIFT") returned -16 [0224.938] _wcsicmp (_String1="chcp", _String2="CLS") returned -4 [0224.938] _wcsicmp (_String1="chcp", _String2="CALL") returned 7 [0224.938] _wcsicmp (_String1="chcp", _String2="VERIFY") returned -19 [0224.938] _wcsicmp (_String1="chcp", _String2="VER") returned -19 [0224.938] _wcsicmp (_String1="chcp", _String2="VOL") returned -19 [0224.938] _wcsicmp (_String1="chcp", _String2="EXIT") returned -2 [0224.938] _wcsicmp (_String1="chcp", _String2="SETLOCAL") returned -16 [0224.938] _wcsicmp (_String1="chcp", _String2="ENDLOCAL") returned -2 [0224.938] _wcsicmp (_String1="chcp", _String2="TITLE") returned -17 [0224.938] _wcsicmp (_String1="chcp", _String2="START") returned -16 [0224.938] _wcsicmp (_String1="chcp", _String2="DPATH") returned -1 [0224.938] _wcsicmp (_String1="chcp", _String2="KEYS") returned -8 [0224.938] _wcsicmp (_String1="chcp", _String2="MOVE") returned -10 [0224.938] _wcsicmp (_String1="chcp", _String2="PUSHD") returned -13 [0224.938] _wcsicmp (_String1="chcp", _String2="POPD") returned -13 [0224.938] _wcsicmp (_String1="chcp", _String2="ASSOC") returned 2 [0224.938] _wcsicmp (_String1="chcp", _String2="FTYPE") returned -3 [0224.938] _wcsicmp (_String1="chcp", _String2="BREAK") returned 1 [0224.938] _wcsicmp (_String1="chcp", _String2="COLOR") returned -7 [0224.938] _wcsicmp (_String1="chcp", _String2="MKLINK") returned -10 [0224.938] _wcsicmp (_String1="chcp", _String2="FOR") returned -3 [0224.938] _wcsicmp (_String1="chcp", _String2="IF") returned -6 [0224.938] _wcsicmp (_String1="chcp", _String2="REM") returned -15 [0224.939] GetProcessHeap () returned 0x640000 [0224.939] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x210) returned 0x64ae18 [0224.939] GetProcessHeap () returned 0x640000 [0224.939] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x22) returned 0x640578 [0224.939] _wcsnicmp (_String1="chcp", _String2="cmd ", _MaxCount=0x4) returned -5 [0224.939] GetProcessHeap () returned 0x640000 [0224.939] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x418) returned 0x64b030 [0224.939] SetErrorMode (uMode=0x0) returned 0x0 [0224.939] SetErrorMode (uMode=0x1) returned 0x0 [0224.939] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x64b038, lpFilePart=0x19f51c | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x19f51c*="system32") returned 0x13 [0224.939] SetErrorMode (uMode=0x0) returned 0x1 [0224.939] GetProcessHeap () returned 0x640000 [0224.939] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x64b030, Size=0x3a) returned 0x64b030 [0224.939] GetProcessHeap () returned 0x640000 [0224.939] RtlSizeHeap (HeapHandle=0x640000, Flags=0x0, MemoryPointer=0x64b030) returned 0x3a [0224.939] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x9c [0224.939] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0224.940] GetProcessHeap () returned 0x640000 [0224.942] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x16e) returned 0x64b078 [0224.942] GetProcessHeap () returned 0x640000 [0224.942] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x2d4) returned 0x6405c8 [0224.948] GetProcessHeap () returned 0x640000 [0224.948] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x6405c8, Size=0x170) returned 0x6405c8 [0224.948] GetProcessHeap () returned 0x640000 [0224.948] RtlSizeHeap (HeapHandle=0x640000, Flags=0x0, MemoryPointer=0x6405c8) returned 0x170 [0224.948] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0224.948] GetProcessHeap () returned 0x640000 [0224.948] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xe0) returned 0x64b1f0 [0224.948] GetProcessHeap () returned 0x640000 [0224.948] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x64b1f0, Size=0x76) returned 0x64b1f0 [0224.948] GetProcessHeap () returned 0x640000 [0224.948] RtlSizeHeap (HeapHandle=0x640000, Flags=0x0, MemoryPointer=0x64b1f0) returned 0x76 [0224.948] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0224.949] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\chcp.*" (normalized: "c:\\windows\\syswow64\\chcp.*"), fInfoLevelId=0x1, lpFindFileData=0x19f2a8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f2a8) returned 0x64b270 [0224.949] GetProcessHeap () returned 0x640000 [0224.949] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x14) returned 0x647610 [0224.949] FindClose (in: hFindFile=0x64b270 | out: hFindFile=0x64b270) returned 1 [0224.949] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\chcp.COM" (normalized: "c:\\windows\\syswow64\\chcp.com"), fInfoLevelId=0x1, lpFindFileData=0x19f2a8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f2a8) returned 0x64b270 [0224.949] GetProcessHeap () returned 0x640000 [0224.949] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x647610, Size=0x4) returned 0x64b2b0 [0224.949] FindClose (in: hFindFile=0x64b270 | out: hFindFile=0x64b270) returned 1 [0224.949] _wcsicmp (_String1=".COM", _String2=".BAT") returned 1 [0224.949] _wcsicmp (_String1=".COM", _String2=".CMD") returned 2 [0224.949] GetConsoleTitleW (in: lpConsoleTitle=0x19f79c, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0224.950] InitializeProcThreadAttributeList (in: lpAttributeList=0x19f6c8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x19f6ac | out: lpAttributeList=0x19f6c8, lpSize=0x19f6ac) returned 1 [0224.950] UpdateProcThreadAttribute (in: lpAttributeList=0x19f6c8, dwFlags=0x0, Attribute=0x60001, lpValue=0x19f6b4, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x19f6c8, lpPreviousValue=0x0) returned 1 [0224.950] GetStartupInfoW (in: lpStartupInfo=0x19f700 | out: lpStartupInfo=0x19f700*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x38, hStdOutput=0x31c, hStdError=0x420)) [0224.950] GetProcessHeap () returned 0x640000 [0224.950] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x18) returned 0x6476f0 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="=::=::\\", _MaxCount=0x7) returned 38 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0224.950] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0224.951] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0224.951] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0224.951] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0224.951] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0224.951] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0224.951] _wcsnicmp (_String1="COPYCMD", _String2="SESSION", _MaxCount=0x7) returned -16 [0224.951] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0224.951] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0224.951] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0224.951] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0224.951] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0224.951] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0224.951] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0224.951] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0224.951] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0224.951] GetProcessHeap () returned 0x640000 [0224.951] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6476f0) returned 1 [0224.951] GetProcessHeap () returned 0x640000 [0224.951] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xa) returned 0x64b270 [0224.951] lstrcmpW (lpString1="\\chcp.com", lpString2="\\XCOPY.EXE") returned -1 [0224.953] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\chcp.com", lpCommandLine="chcp 65001 ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x19f650*(cb=0x48, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="chcp 65001 ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x19f69c | out: lpCommandLine="chcp 65001 ", lpProcessInformation=0x19f69c*(hProcess=0xa0, hThread=0x9c, dwProcessId=0x4a8, dwThreadId=0x52c)) returned 1 [0224.963] CloseHandle (hObject=0x9c) returned 1 [0224.963] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0224.963] GetProcessHeap () returned 0x640000 [0224.964] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649eb8) returned 1 [0224.964] GetEnvironmentStringsW () returned 0x649eb8* [0224.964] GetProcessHeap () returned 0x640000 [0224.964] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xb0c) returned 0x648060 [0224.964] memcpy (in: _Dst=0x648060, _Src=0x649eb8, _Size=0xb0c | out: _Dst=0x648060) returned 0x648060 [0224.964] FreeEnvironmentStringsA (penv="=") returned 1 [0224.964] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xffffffff) returned 0x0 [0225.046] GetExitCodeProcess (in: hProcess=0xa0, lpExitCode=0x19f634 | out: lpExitCode=0x19f634*=0x0) returned 1 [0225.046] CloseHandle (hObject=0xa0) returned 1 [0225.046] _vsnwprintf (in: _Buffer=0x19f71c, _BufferCount=0x13, _Format="%08X", _ArgList=0x19f63c | out: _Buffer="00000000") returned 8 [0225.047] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0225.047] GetProcessHeap () returned 0x640000 [0225.047] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648060) returned 1 [0225.050] GetEnvironmentStringsW () returned 0x64b3f0* [0225.050] GetProcessHeap () returned 0x640000 [0225.050] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xb32) returned 0x648060 [0225.050] memcpy (in: _Dst=0x648060, _Src=0x64b3f0, _Size=0xb32 | out: _Dst=0x648060) returned 0x648060 [0225.050] FreeEnvironmentStringsA (penv="=") returned 1 [0225.050] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0225.050] GetProcessHeap () returned 0x640000 [0225.051] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648060) returned 1 [0225.051] GetEnvironmentStringsW () returned 0x64b3f0* [0225.051] GetProcessHeap () returned 0x640000 [0225.051] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xb32) returned 0x648060 [0225.051] memcpy (in: _Dst=0x648060, _Src=0x64b3f0, _Size=0xb32 | out: _Dst=0x648060) returned 0x648060 [0225.051] FreeEnvironmentStringsA (penv="=") returned 1 [0225.051] GetProcessHeap () returned 0x640000 [0225.051] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x64b270) returned 1 [0225.051] DeleteProcThreadAttributeList (in: lpAttributeList=0x19f6c8 | out: lpAttributeList=0x19f6c8) [0225.051] GetConsoleTitleW (in: lpConsoleTitle=0x19fa10, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0225.052] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0225.052] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0225.052] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0225.052] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0225.052] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0225.052] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0225.052] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0225.052] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0225.052] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0225.052] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0225.053] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0225.053] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0225.053] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0225.053] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0225.053] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0225.053] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0225.053] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0225.053] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0225.053] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0225.053] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0225.053] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0225.053] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0225.053] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0225.053] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0225.053] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0225.053] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0225.053] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0225.053] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0225.053] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0225.053] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0225.053] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0225.053] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0225.053] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0225.053] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0225.053] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0225.053] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0225.053] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0225.053] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0225.053] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0225.053] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0225.053] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0225.053] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0225.053] _wcsicmp (_String1="netsh", _String2="DIR") returned 10 [0225.053] _wcsicmp (_String1="netsh", _String2="ERASE") returned 9 [0225.053] _wcsicmp (_String1="netsh", _String2="DEL") returned 10 [0225.053] _wcsicmp (_String1="netsh", _String2="TYPE") returned -6 [0225.054] _wcsicmp (_String1="netsh", _String2="COPY") returned 11 [0225.054] _wcsicmp (_String1="netsh", _String2="CD") returned 11 [0225.054] _wcsicmp (_String1="netsh", _String2="CHDIR") returned 11 [0225.054] _wcsicmp (_String1="netsh", _String2="RENAME") returned -4 [0225.054] _wcsicmp (_String1="netsh", _String2="REN") returned -4 [0225.054] _wcsicmp (_String1="netsh", _String2="ECHO") returned 9 [0225.054] _wcsicmp (_String1="netsh", _String2="SET") returned -5 [0225.054] _wcsicmp (_String1="netsh", _String2="PAUSE") returned -2 [0225.054] _wcsicmp (_String1="netsh", _String2="DATE") returned 10 [0225.054] _wcsicmp (_String1="netsh", _String2="TIME") returned -6 [0225.054] _wcsicmp (_String1="netsh", _String2="PROMPT") returned -2 [0225.054] _wcsicmp (_String1="netsh", _String2="MD") returned 1 [0225.054] _wcsicmp (_String1="netsh", _String2="MKDIR") returned 1 [0225.054] _wcsicmp (_String1="netsh", _String2="RD") returned -4 [0225.054] _wcsicmp (_String1="netsh", _String2="RMDIR") returned -4 [0225.054] _wcsicmp (_String1="netsh", _String2="PATH") returned -2 [0225.054] _wcsicmp (_String1="netsh", _String2="GOTO") returned 7 [0225.054] _wcsicmp (_String1="netsh", _String2="SHIFT") returned -5 [0225.054] _wcsicmp (_String1="netsh", _String2="CLS") returned 11 [0225.054] _wcsicmp (_String1="netsh", _String2="CALL") returned 11 [0225.054] _wcsicmp (_String1="netsh", _String2="VERIFY") returned -8 [0225.054] _wcsicmp (_String1="netsh", _String2="VER") returned -8 [0225.054] _wcsicmp (_String1="netsh", _String2="VOL") returned -8 [0225.054] _wcsicmp (_String1="netsh", _String2="EXIT") returned 9 [0225.054] _wcsicmp (_String1="netsh", _String2="SETLOCAL") returned -5 [0225.054] _wcsicmp (_String1="netsh", _String2="ENDLOCAL") returned 9 [0225.054] _wcsicmp (_String1="netsh", _String2="TITLE") returned -6 [0225.054] _wcsicmp (_String1="netsh", _String2="START") returned -5 [0225.054] _wcsicmp (_String1="netsh", _String2="DPATH") returned 10 [0225.054] _wcsicmp (_String1="netsh", _String2="KEYS") returned 3 [0225.054] _wcsicmp (_String1="netsh", _String2="MOVE") returned 1 [0225.054] _wcsicmp (_String1="netsh", _String2="PUSHD") returned -2 [0225.054] _wcsicmp (_String1="netsh", _String2="POPD") returned -2 [0225.054] _wcsicmp (_String1="netsh", _String2="ASSOC") returned 13 [0225.054] _wcsicmp (_String1="netsh", _String2="FTYPE") returned 8 [0225.054] _wcsicmp (_String1="netsh", _String2="BREAK") returned 12 [0225.055] _wcsicmp (_String1="netsh", _String2="COLOR") returned 11 [0225.055] _wcsicmp (_String1="netsh", _String2="MKLINK") returned 1 [0225.055] _wcsicmp (_String1="netsh", _String2="FOR") returned 8 [0225.055] _wcsicmp (_String1="netsh", _String2="IF") returned 5 [0225.055] _wcsicmp (_String1="netsh", _String2="REM") returned -4 [0225.055] GetProcessHeap () returned 0x640000 [0225.055] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x210) returned 0x640ab0 [0225.055] GetProcessHeap () returned 0x640000 [0225.055] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x52) returned 0x640740 [0225.055] _wcsnicmp (_String1="nets", _String2="cmd ", _MaxCount=0x4) returned 11 [0225.055] GetProcessHeap () returned 0x640000 [0225.055] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x418) returned 0x648ba0 [0225.055] SetErrorMode (uMode=0x0) returned 0x0 [0225.055] SetErrorMode (uMode=0x1) returned 0x0 [0225.055] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x648ba8, lpFilePart=0x19f51c | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x19f51c*="system32") returned 0x13 [0225.055] SetErrorMode (uMode=0x0) returned 0x1 [0225.055] GetProcessHeap () returned 0x640000 [0225.055] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x648ba0, Size=0x3c) returned 0x648ba0 [0225.055] GetProcessHeap () returned 0x640000 [0225.055] RtlSizeHeap (HeapHandle=0x640000, Flags=0x0, MemoryPointer=0x648ba0) returned 0x3c [0225.055] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x9c [0225.055] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0225.055] GetProcessHeap () returned 0x640000 [0225.055] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x16e) returned 0x6407a0 [0225.055] GetProcessHeap () returned 0x640000 [0225.055] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x2d4) returned 0x640cc8 [0225.055] GetProcessHeap () returned 0x640000 [0225.055] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x640cc8, Size=0x170) returned 0x640cc8 [0225.055] GetProcessHeap () returned 0x640000 [0225.055] RtlSizeHeap (HeapHandle=0x640000, Flags=0x0, MemoryPointer=0x640cc8) returned 0x170 [0225.056] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xfbf4a0, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0225.056] GetProcessHeap () returned 0x640000 [0225.056] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xe0) returned 0x640e40 [0225.056] GetProcessHeap () returned 0x640000 [0225.056] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x640e40, Size=0x76) returned 0x640e40 [0225.056] GetProcessHeap () returned 0x640000 [0225.056] RtlSizeHeap (HeapHandle=0x640000, Flags=0x0, MemoryPointer=0x640e40) returned 0x76 [0225.056] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0225.056] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\netsh.*" (normalized: "c:\\windows\\syswow64\\netsh.*"), fInfoLevelId=0x1, lpFindFileData=0x19f2a8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f2a8) returned 0x640ec0 [0225.056] FindClose (in: hFindFile=0x640ec0 | out: hFindFile=0x640ec0) returned 1 [0225.056] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\netsh.COM" (normalized: "c:\\windows\\syswow64\\netsh.com"), fInfoLevelId=0x1, lpFindFileData=0x19f2a8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f2a8) returned 0xffffffff [0225.056] GetLastError () returned 0x2 [0225.056] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\netsh.EXE" (normalized: "c:\\windows\\syswow64\\netsh.exe"), fInfoLevelId=0x1, lpFindFileData=0x19f2a8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f2a8) returned 0x640ec0 [0225.056] FindClose (in: hFindFile=0x640ec0 | out: hFindFile=0x640ec0) returned 1 [0225.057] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0225.057] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0225.057] GetConsoleTitleW (in: lpConsoleTitle=0x19f79c, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0225.057] InitializeProcThreadAttributeList (in: lpAttributeList=0x19f6c8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x19f6ac | out: lpAttributeList=0x19f6c8, lpSize=0x19f6ac) returned 1 [0225.057] UpdateProcThreadAttribute (in: lpAttributeList=0x19f6c8, dwFlags=0x0, Attribute=0x60001, lpValue=0x19f6b4, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x19f6c8, lpPreviousValue=0x0) returned 1 [0225.057] GetStartupInfoW (in: lpStartupInfo=0x19f700 | out: lpStartupInfo=0x19f700*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x38, hStdOutput=0x31c, hStdError=0x420)) [0225.057] GetProcessHeap () returned 0x640000 [0225.057] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x18) returned 0x647850 [0225.057] _wcsnicmp (_String1="COPYCMD", _String2="=::=::\\", _MaxCount=0x7) returned 38 [0225.057] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0225.057] _wcsnicmp (_String1="COPYCMD", _String2="=ExitCo", _MaxCount=0x7) returned 38 [0225.057] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0225.057] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0225.057] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0225.057] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0225.057] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0225.057] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0225.057] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="SESSION", _MaxCount=0x7) returned -16 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0225.058] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0225.058] GetProcessHeap () returned 0x640000 [0225.058] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x647850) returned 1 [0225.058] GetProcessHeap () returned 0x640000 [0225.058] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xa) returned 0x64b270 [0225.058] lstrcmpW (lpString1="\\netsh.exe", lpString2="\\XCOPY.EXE") returned -1 [0225.059] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\netsh.exe", lpCommandLine="netsh wlan show networks mode=bssid", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x19f650*(cb=0x48, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="netsh wlan show networks mode=bssid", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x19f69c | out: lpCommandLine="netsh wlan show networks mode=bssid", lpProcessInformation=0x19f69c*(hProcess=0x9c, hThread=0xa0, dwProcessId=0x588, dwThreadId=0x5f8)) returned 1 [0225.073] CloseHandle (hObject=0xa0) returned 1 [0225.073] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0225.073] GetProcessHeap () returned 0x640000 [0225.074] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648060) returned 1 [0225.074] GetEnvironmentStringsW () returned 0x648060* [0225.074] GetProcessHeap () returned 0x640000 [0225.074] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xb32) returned 0x64b3f0 [0225.074] memcpy (in: _Dst=0x64b3f0, _Src=0x648060, _Size=0xb32 | out: _Dst=0x64b3f0) returned 0x64b3f0 [0225.074] FreeEnvironmentStringsA (penv="=") returned 1 [0225.074] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0xffffffff) returned 0x0 [0225.919] GetExitCodeProcess (in: hProcess=0x9c, lpExitCode=0x19f634 | out: lpExitCode=0x19f634*=0x1) returned 1 [0225.919] CloseHandle (hObject=0x9c) returned 1 [0225.919] _vsnwprintf (in: _Buffer=0x19f71c, _BufferCount=0x13, _Format="%08X", _ArgList=0x19f63c | out: _Buffer="00000001") returned 8 [0225.919] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000001") returned 1 [0225.919] GetProcessHeap () returned 0x640000 [0225.920] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x64b3f0) returned 1 [0225.920] GetEnvironmentStringsW () returned 0x648060* [0225.920] GetProcessHeap () returned 0x640000 [0225.920] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xb32) returned 0x64b3f0 [0225.920] memcpy (in: _Dst=0x64b3f0, _Src=0x648060, _Size=0xb32 | out: _Dst=0x64b3f0) returned 0x64b3f0 [0225.920] FreeEnvironmentStringsA (penv="=") returned 1 [0225.920] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0225.920] GetProcessHeap () returned 0x640000 [0225.920] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x64b3f0) returned 1 [0225.920] GetEnvironmentStringsW () returned 0x648060* [0225.920] GetProcessHeap () returned 0x640000 [0225.920] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0xb32) returned 0x64b3f0 [0225.920] memcpy (in: _Dst=0x64b3f0, _Src=0x648060, _Size=0xb32 | out: _Dst=0x64b3f0) returned 0x64b3f0 [0225.920] FreeEnvironmentStringsA (penv="=") returned 1 [0225.920] GetProcessHeap () returned 0x640000 [0225.920] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x64b270) returned 1 [0225.920] DeleteProcThreadAttributeList (in: lpAttributeList=0x19f6c8 | out: lpAttributeList=0x19f6c8) [0225.920] _get_osfhandle (_FileHandle=1) returned 0x31c [0225.920] SetConsoleMode (hConsoleHandle=0x31c, dwMode=0x0) returned 0 [0225.921] _get_osfhandle (_FileHandle=1) returned 0x31c [0225.921] GetConsoleMode (in: hConsoleHandle=0x31c, lpMode=0xfbf40c | out: lpMode=0xfbf40c) returned 0 [0225.921] _get_osfhandle (_FileHandle=0) returned 0x38 [0225.921] GetConsoleMode (in: hConsoleHandle=0x38, lpMode=0xfbf408 | out: lpMode=0xfbf408) returned 1 [0225.921] SetConsoleInputExeNameW () returned 0x1 [0225.921] GetConsoleOutputCP () returned 0xfde9 [0225.921] GetCPInfo (in: CodePage=0xfde9, lpCPInfo=0xfbf460 | out: lpCPInfo=0xfbf460) returned 1 [0225.921] SetThreadUILanguage (LangId=0x0) returned 0x409 [0225.921] exit (_Code=1) Thread: id = 285 os_tid = 0x2f4 Process: id = "19" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x4742d000" os_pid = "0x4fc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "18" os_parent_pid = "0x484" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\Windows" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000126d6" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 5408 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 5409 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 5410 start_va = 0x50000 end_va = 0x8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 5411 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 5412 start_va = 0x400000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 5413 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 5414 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 5415 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 5416 start_va = 0x7ff731a70000 end_va = 0x7ff731a80fff monitored = 0 entry_point = 0x7ff731a716b0 region_type = mapped_file name = "conhost.exe" filename = "\\Windows\\System32\\conhost.exe" (normalized: "c:\\windows\\system32\\conhost.exe") Region: id = 5417 start_va = 0x7ffa5f840000 end_va = 0x7ffa5fa00fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 5418 start_va = 0x600000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 5419 start_va = 0x7ffa5dba0000 end_va = 0x7ffa5dc4cfff monitored = 0 entry_point = 0x7ffa5dbb81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 5420 start_va = 0x7ffa5c8d0000 end_va = 0x7ffa5cab7fff monitored = 0 entry_point = 0x7ffa5c8fba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 5421 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 5422 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 5423 start_va = 0x90000 end_va = 0x14dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 5424 start_va = 0x7ffa5d880000 end_va = 0x7ffa5d91cfff monitored = 0 entry_point = 0x7ffa5d8878a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 5425 start_va = 0x150000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 5426 start_va = 0x190000 end_va = 0x1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 5427 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 5428 start_va = 0x7ffa493f0000 end_va = 0x7ffa49448fff monitored = 0 entry_point = 0x7ffa493ffbf0 region_type = mapped_file name = "conhostv2.dll" filename = "\\Windows\\System32\\ConhostV2.dll" (normalized: "c:\\windows\\system32\\conhostv2.dll") Region: id = 5429 start_va = 0x190000 end_va = 0x190fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 5430 start_va = 0x1c0000 end_va = 0x1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 5431 start_va = 0x7ffa5dc50000 end_va = 0x7ffa5deccfff monitored = 0 entry_point = 0x7ffa5dd24970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 5432 start_va = 0x7ffa5ccb0000 end_va = 0x7ffa5cdcbfff monitored = 0 entry_point = 0x7ffa5ccf02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 5433 start_va = 0x7ffa5cbd0000 end_va = 0x7ffa5cc39fff monitored = 0 entry_point = 0x7ffa5cc06d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 5434 start_va = 0x7ffa5d1e0000 end_va = 0x7ffa5d335fff monitored = 0 entry_point = 0x7ffa5d1ea8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 5435 start_va = 0x7ffa5d050000 end_va = 0x7ffa5d1d5fff monitored = 0 entry_point = 0x7ffa5d09ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 5436 start_va = 0x1a0000 end_va = 0x1a6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 5437 start_va = 0x7ffa5d9f0000 end_va = 0x7ffa5db32fff monitored = 0 entry_point = 0x7ffa5da18210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 5438 start_va = 0x7ffa5db40000 end_va = 0x7ffa5db9afff monitored = 0 entry_point = 0x7ffa5db538b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 5439 start_va = 0x7ffa5ded0000 end_va = 0x7ffa5df0afff monitored = 0 entry_point = 0x7ffa5ded12f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 5440 start_va = 0x7ffa5d920000 end_va = 0x7ffa5d9e0fff monitored = 0 entry_point = 0x7ffa5d940da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 5441 start_va = 0x7ffa5a460000 end_va = 0x7ffa5a5e5fff monitored = 0 entry_point = 0x7ffa5a4ad700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 5442 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 5443 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 5444 start_va = 0x600000 end_va = 0x787fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000600000" filename = "" Region: id = 5445 start_va = 0x7a0000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007a0000" filename = "" Region: id = 5446 start_va = 0x8a0000 end_va = 0xa20fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008a0000" filename = "" Region: id = 5447 start_va = 0xa30000 end_va = 0x1e2ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a30000" filename = "" Region: id = 5448 start_va = 0x1e30000 end_va = 0x1f5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e30000" filename = "" Region: id = 5449 start_va = 0x1e30000 end_va = 0x1e6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e30000" filename = "" Region: id = 5450 start_va = 0x1f50000 end_va = 0x1f5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 5451 start_va = 0x7ffa5e0b0000 end_va = 0x7ffa5f60efff monitored = 0 entry_point = 0x7ffa5e2111f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 5452 start_va = 0x7ffa5bfb0000 end_va = 0x7ffa5bff2fff monitored = 0 entry_point = 0x7ffa5bfc4b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 5453 start_va = 0x7ffa5c260000 end_va = 0x7ffa5c8a3fff monitored = 0 entry_point = 0x7ffa5c4264b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 5454 start_va = 0x7ffa5df10000 end_va = 0x7ffa5dfb6fff monitored = 0 entry_point = 0x7ffa5df258d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 5455 start_va = 0x7ffa5cc40000 end_va = 0x7ffa5cc91fff monitored = 0 entry_point = 0x7ffa5cc4f530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 5456 start_va = 0x7ffa5beb0000 end_va = 0x7ffa5bebefff monitored = 0 entry_point = 0x7ffa5beb3210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 5457 start_va = 0x7ffa5bef0000 end_va = 0x7ffa5bfa4fff monitored = 0 entry_point = 0x7ffa5bf322e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 5458 start_va = 0x7ffa5be60000 end_va = 0x7ffa5beaafff monitored = 0 entry_point = 0x7ffa5be635f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 5459 start_va = 0x7ffa5bec0000 end_va = 0x7ffa5bed3fff monitored = 0 entry_point = 0x7ffa5bec52e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 5460 start_va = 0x7ffa5a7e0000 end_va = 0x7ffa5a875fff monitored = 0 entry_point = 0x7ffa5a805570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 5461 start_va = 0x1f60000 end_va = 0x20bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f60000" filename = "" Region: id = 5462 start_va = 0x20c0000 end_va = 0x23f6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 5463 start_va = 0x50000 end_va = 0x70fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cmd.exe.mui" filename = "\\Windows\\System32\\en-US\\cmd.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\cmd.exe.mui") Region: id = 5464 start_va = 0x1e70000 end_va = 0x1ec9fff monitored = 1 entry_point = 0x1e853f0 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe") Region: id = 5465 start_va = 0x2400000 end_va = 0x261efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002400000" filename = "" Region: id = 5466 start_va = 0x2620000 end_va = 0x2834fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002620000" filename = "" Region: id = 5467 start_va = 0x1f60000 end_va = 0x2068fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f60000" filename = "" Region: id = 5468 start_va = 0x20b0000 end_va = 0x20bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020b0000" filename = "" Region: id = 5469 start_va = 0x2840000 end_va = 0x2a50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002840000" filename = "" Region: id = 5470 start_va = 0x2a60000 end_va = 0x2b69fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a60000" filename = "" Thread: id = 282 os_tid = 0x95c Thread: id = 283 os_tid = 0xbf0 Thread: id = 284 os_tid = 0x170 Process: id = "20" image_name = "chcp.com" filename = "c:\\windows\\syswow64\\chcp.com" page_root = "0x53168000" os_pid = "0x4a8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "18" os_parent_pid = "0x484" cmd_line = "chcp 65001 " cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000126d6" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 5481 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 5482 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 5483 start_va = 0x40000 end_va = 0x46fff monitored = 0 entry_point = 0x41c90 region_type = mapped_file name = "chcp.com" filename = "\\Windows\\SysWOW64\\chcp.com" (normalized: "c:\\windows\\syswow64\\chcp.com") Region: id = 5484 start_va = 0x50000 end_va = 0x404ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 5485 start_va = 0x4050000 end_va = 0x4064fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004050000" filename = "" Region: id = 5486 start_va = 0x4070000 end_va = 0x40affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004070000" filename = "" Region: id = 5487 start_va = 0x40b0000 end_va = 0x40effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000040b0000" filename = "" Region: id = 5488 start_va = 0x40f0000 end_va = 0x40f3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000040f0000" filename = "" Region: id = 5489 start_va = 0x4100000 end_va = 0x4100fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004100000" filename = "" Region: id = 5490 start_va = 0x4110000 end_va = 0x4111fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004110000" filename = "" Region: id = 5491 start_va = 0x4200000 end_va = 0x43fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004200000" filename = "" Region: id = 5492 start_va = 0x77d80000 end_va = 0x77efafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 5493 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 5494 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 5495 start_va = 0x7fff0000 end_va = 0x7dfa5f83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 5496 start_va = 0x7dfa5f840000 end_va = 0x7ffa5f83ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007dfa5f840000" filename = "" Region: id = 5497 start_va = 0x7ffa5f840000 end_va = 0x7ffa5fa00fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 5498 start_va = 0x7ffa5fa01000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffa5fa01000" filename = "" Region: id = 5499 start_va = 0x4400000 end_va = 0x44fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004400000" filename = "" Region: id = 5500 start_va = 0x65700000 end_va = 0x6574ffff monitored = 0 entry_point = 0x65718180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 5501 start_va = 0x65750000 end_va = 0x657c9fff monitored = 0 entry_point = 0x65763290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 5502 start_va = 0x76950000 end_va = 0x76a2ffff monitored = 0 entry_point = 0x76963980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 5503 start_va = 0x656f0000 end_va = 0x656f7fff monitored = 0 entry_point = 0x656f17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 5504 start_va = 0x4500000 end_va = 0x479ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004500000" filename = "" Region: id = 5505 start_va = 0x76950000 end_va = 0x76a2ffff monitored = 0 entry_point = 0x76963980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 5506 start_va = 0x74cc0000 end_va = 0x74e3dfff monitored = 0 entry_point = 0x74d71b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 5507 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 5508 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 5509 start_va = 0x4120000 end_va = 0x41ddfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 5510 start_va = 0x77610000 end_va = 0x776cdfff monitored = 0 entry_point = 0x77645630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 5511 start_va = 0x4400000 end_va = 0x443ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004400000" filename = "" Region: id = 5512 start_va = 0x4440000 end_va = 0x447ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004440000" filename = "" Region: id = 5513 start_va = 0x44f0000 end_va = 0x44fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000044f0000" filename = "" Region: id = 5514 start_va = 0x6f600000 end_va = 0x6f626fff monitored = 0 entry_point = 0x6f60a850 region_type = mapped_file name = "ulib.dll" filename = "\\Windows\\SysWOW64\\ulib.dll" (normalized: "c:\\windows\\syswow64\\ulib.dll") Region: id = 5515 start_va = 0x4500000 end_va = 0x45fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004500000" filename = "" Region: id = 5516 start_va = 0x46a0000 end_va = 0x479ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000046a0000" filename = "" Region: id = 5517 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 5518 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 5519 start_va = 0x6f5f0000 end_va = 0x6f5fafff monitored = 0 entry_point = 0x6f5f46c0 region_type = mapped_file name = "fsutilext.dll" filename = "\\Windows\\SysWOW64\\fsutilext.dll" (normalized: "c:\\windows\\syswow64\\fsutilext.dll") Region: id = 5520 start_va = 0x4480000 end_va = 0x44c2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ulib.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\ulib.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\ulib.dll.mui") Thread: id = 286 os_tid = 0x52c Thread: id = 287 os_tid = 0xbfc Process: id = "21" image_name = "netsh.exe" filename = "c:\\windows\\syswow64\\netsh.exe" page_root = "0x4816d000" os_pid = "0x588" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "18" os_parent_pid = "0x484" cmd_line = "netsh wlan show networks mode=bssid" cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000126d6" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 5521 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 5522 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 5523 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 5524 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 5525 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 5526 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 5527 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 5528 start_va = 0x1c0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 5529 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 5530 start_va = 0x910000 end_va = 0x92dfff monitored = 1 entry_point = 0x919980 region_type = mapped_file name = "netsh.exe" filename = "\\Windows\\SysWOW64\\netsh.exe" (normalized: "c:\\windows\\syswow64\\netsh.exe") Region: id = 5531 start_va = 0x930000 end_va = 0x492ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000930000" filename = "" Region: id = 5532 start_va = 0x77d80000 end_va = 0x77efafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 5533 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 5534 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 5535 start_va = 0x7fff0000 end_va = 0x7dfa5f83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 5536 start_va = 0x7dfa5f840000 end_va = 0x7ffa5f83ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007dfa5f840000" filename = "" Region: id = 5537 start_va = 0x7ffa5f840000 end_va = 0x7ffa5fa00fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 5538 start_va = 0x7ffa5fa01000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffa5fa01000" filename = "" Region: id = 5539 start_va = 0x400000 end_va = 0x50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 5540 start_va = 0x65700000 end_va = 0x6574ffff monitored = 0 entry_point = 0x65718180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 5541 start_va = 0x65750000 end_va = 0x657c9fff monitored = 0 entry_point = 0x65763290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 5542 start_va = 0x76950000 end_va = 0x76a2ffff monitored = 0 entry_point = 0x76963980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 5543 start_va = 0x656f0000 end_va = 0x656f7fff monitored = 0 entry_point = 0x656f17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 5544 start_va = 0x510000 end_va = 0x73ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 5545 start_va = 0x76950000 end_va = 0x76a2ffff monitored = 0 entry_point = 0x76963980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 5546 start_va = 0x74cc0000 end_va = 0x74e3dfff monitored = 0 entry_point = 0x74d71b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 5547 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 5548 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 5549 start_va = 0x400000 end_va = 0x4bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 5550 start_va = 0x500000 end_va = 0x50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 5551 start_va = 0x77610000 end_va = 0x776cdfff monitored = 0 entry_point = 0x77645630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 5552 start_va = 0x4c0000 end_va = 0x4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 5553 start_va = 0x510000 end_va = 0x60ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 5554 start_va = 0x640000 end_va = 0x73ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000640000" filename = "" Region: id = 5555 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 5556 start_va = 0x76a30000 end_va = 0x76ac1fff monitored = 0 entry_point = 0x76a68cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 5557 start_va = 0x76f20000 end_va = 0x770dcfff monitored = 0 entry_point = 0x77002a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 5558 start_va = 0x75240000 end_va = 0x752ecfff monitored = 0 entry_point = 0x75254f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 5559 start_va = 0x74ab0000 end_va = 0x74acdfff monitored = 0 entry_point = 0x74abb640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 5560 start_va = 0x74aa0000 end_va = 0x74aa9fff monitored = 0 entry_point = 0x74aa2a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 5561 start_va = 0x77d20000 end_va = 0x77d77fff monitored = 0 entry_point = 0x77d625c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 5562 start_va = 0x77580000 end_va = 0x775c3fff monitored = 0 entry_point = 0x77599d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 5563 start_va = 0x740000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000740000" filename = "" Region: id = 5564 start_va = 0x740000 end_va = 0x829fff monitored = 0 entry_point = 0x77d650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 5565 start_va = 0x830000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 5566 start_va = 0x77160000 end_va = 0x7716bfff monitored = 0 entry_point = 0x77163930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 5567 start_va = 0x6f620000 end_va = 0x6f62afff monitored = 0 entry_point = 0x6f624150 region_type = mapped_file name = "ifmon.dll" filename = "\\Windows\\SysWOW64\\ifmon.dll" (normalized: "c:\\windows\\syswow64\\ifmon.dll") Region: id = 5568 start_va = 0x75080000 end_va = 0x750defff monitored = 0 entry_point = 0x75084af0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 5569 start_va = 0x775d0000 end_va = 0x77606fff monitored = 0 entry_point = 0x775d3b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 5570 start_va = 0x6f5f0000 end_va = 0x6f61efff monitored = 0 entry_point = 0x6f5fbb70 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 5571 start_va = 0x6f5a0000 end_va = 0x6f5effff monitored = 0 entry_point = 0x6f5e13b0 region_type = mapped_file name = "rasmontr.dll" filename = "\\Windows\\SysWOW64\\rasmontr.dll" (normalized: "c:\\windows\\syswow64\\rasmontr.dll") Region: id = 5572 start_va = 0x770e0000 end_va = 0x7715afff monitored = 0 entry_point = 0x770fe970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 5573 start_va = 0x77bd0000 end_va = 0x77d16fff monitored = 0 entry_point = 0x77be1cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 5574 start_va = 0x74f30000 end_va = 0x7507efff monitored = 0 entry_point = 0x74fe6820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 5575 start_va = 0x6f520000 end_va = 0x6f595fff monitored = 0 entry_point = 0x6f5836a0 region_type = mapped_file name = "mprapi.dll" filename = "\\Windows\\SysWOW64\\mprapi.dll" (normalized: "c:\\windows\\syswow64\\mprapi.dll") Region: id = 5576 start_va = 0x6f470000 end_va = 0x6f514fff monitored = 0 entry_point = 0x6f48ac50 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\SysWOW64\\rasapi32.dll" (normalized: "c:\\windows\\syswow64\\rasapi32.dll") Region: id = 5577 start_va = 0x6f420000 end_va = 0x6f466fff monitored = 0 entry_point = 0x6f4358d0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll") Region: id = 5578 start_va = 0x6f3f0000 end_va = 0x6f412fff monitored = 0 entry_point = 0x6f3f5570 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\SysWOW64\\rasman.dll" (normalized: "c:\\windows\\syswow64\\rasman.dll") Region: id = 5579 start_va = 0x6f2b0000 end_va = 0x6f3e1fff monitored = 1 entry_point = 0x6f2ec0e0 region_type = mapped_file name = "mfc42u.dll" filename = "\\Windows\\SysWOW64\\mfc42u.dll" (normalized: "c:\\windows\\syswow64\\mfc42u.dll") Region: id = 5580 start_va = 0x6fb80000 end_va = 0x6fb9afff monitored = 0 entry_point = 0x6fb89050 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 5581 start_va = 0x75140000 end_va = 0x7522afff monitored = 0 entry_point = 0x7517d650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 5582 start_va = 0x6f210000 end_va = 0x6f2a8fff monitored = 0 entry_point = 0x6f248470 region_type = mapped_file name = "odbc32.dll" filename = "\\Windows\\SysWOW64\\odbc32.dll" (normalized: "c:\\windows\\syswow64\\odbc32.dll") Region: id = 5583 start_va = 0x6f200000 end_va = 0x6f207fff monitored = 0 entry_point = 0x6f201d70 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\SysWOW64\\dpapi.dll" (normalized: "c:\\windows\\syswow64\\dpapi.dll") Region: id = 5584 start_va = 0x1d0000 end_va = 0x1f9fff monitored = 0 entry_point = 0x1d5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 5585 start_va = 0x4930000 end_va = 0x4ab7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004930000" filename = "" Region: id = 5586 start_va = 0x76b30000 end_va = 0x76b5afff monitored = 0 entry_point = 0x76b35680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 5587 start_va = 0x4ac0000 end_va = 0x4c40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004ac0000" filename = "" Region: id = 5588 start_va = 0x4c50000 end_va = 0x604ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004c50000" filename = "" Region: id = 5589 start_va = 0x30000 end_va = 0x34fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netsh.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\netsh.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\netsh.exe.mui") Region: id = 5590 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 5591 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 5592 start_va = 0x740000 end_va = 0x7bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000740000" filename = "" Region: id = 5593 start_va = 0x1f0000 end_va = 0x1f7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mfc42u.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\MFC42u.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\mfc42u.dll.mui") Region: id = 5594 start_va = 0x6f1a0000 end_va = 0x6f1fbfff monitored = 0 entry_point = 0x6f1e86c0 region_type = mapped_file name = "authfwcfg.dll" filename = "\\Windows\\SysWOW64\\authfwcfg.dll" (normalized: "c:\\windows\\syswow64\\authfwcfg.dll") Region: id = 5595 start_va = 0x74ed0000 end_va = 0x74f2dfff monitored = 0 entry_point = 0x74ee7470 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\SysWOW64\\FirewallAPI.dll" (normalized: "c:\\windows\\syswow64\\firewallapi.dll") Region: id = 5596 start_va = 0x6f170000 end_va = 0x6f19cfff monitored = 0 entry_point = 0x6f17c010 region_type = mapped_file name = "fwpolicyiomgr.dll" filename = "\\Windows\\SysWOW64\\fwpolicyiomgr.dll" (normalized: "c:\\windows\\syswow64\\fwpolicyiomgr.dll") Region: id = 5597 start_va = 0x6f140000 end_va = 0x6f16bfff monitored = 0 entry_point = 0x6f155ee0 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\SysWOW64\\fwbase.dll" (normalized: "c:\\windows\\syswow64\\fwbase.dll") Region: id = 5598 start_va = 0x6f130000 end_va = 0x6f136fff monitored = 0 entry_point = 0x6f132060 region_type = mapped_file name = "dhcpcmonitor.dll" filename = "\\Windows\\SysWOW64\\dhcpcmonitor.dll" (normalized: "c:\\windows\\syswow64\\dhcpcmonitor.dll") Region: id = 5599 start_va = 0x6f110000 end_va = 0x6f123fff monitored = 0 entry_point = 0x6f113c10 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc.dll") Region: id = 5600 start_va = 0x750e0000 end_va = 0x750e6fff monitored = 0 entry_point = 0x750e1e10 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 5601 start_va = 0x6f0f0000 end_va = 0x6f102fff monitored = 0 entry_point = 0x6f0f25d0 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc6.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc6.dll") Region: id = 5602 start_va = 0x6f0d0000 end_va = 0x6f0e1fff monitored = 0 entry_point = 0x6f0dc8d0 region_type = mapped_file name = "dot3cfg.dll" filename = "\\Windows\\SysWOW64\\dot3cfg.dll" (normalized: "c:\\windows\\syswow64\\dot3cfg.dll") Region: id = 5603 start_va = 0x6f0b0000 end_va = 0x6f0c8fff monitored = 0 entry_point = 0x6f0c0530 region_type = mapped_file name = "dot3api.dll" filename = "\\Windows\\SysWOW64\\dot3api.dll" (normalized: "c:\\windows\\syswow64\\dot3api.dll") Region: id = 5604 start_va = 0x6f070000 end_va = 0x6f0a9fff monitored = 0 entry_point = 0x6f098740 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\SysWOW64\\onex.dll" (normalized: "c:\\windows\\syswow64\\onex.dll") Region: id = 5605 start_va = 0x6f020000 end_va = 0x6f069fff monitored = 0 entry_point = 0x6f02a280 region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\SysWOW64\\eappcfg.dll" (normalized: "c:\\windows\\syswow64\\eappcfg.dll") Region: id = 5606 start_va = 0x6f000000 end_va = 0x6f017fff monitored = 0 entry_point = 0x6f004820 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\SysWOW64\\atl.dll" (normalized: "c:\\windows\\syswow64\\atl.dll") Region: id = 5607 start_va = 0x6efe0000 end_va = 0x6eff0fff monitored = 0 entry_point = 0x6efea1f0 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\SysWOW64\\eappprxy.dll" (normalized: "c:\\windows\\syswow64\\eappprxy.dll") Region: id = 5608 start_va = 0x610000 end_va = 0x613fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 5609 start_va = 0x6efd0000 end_va = 0x6efdefff monitored = 0 entry_point = 0x6efd92a0 region_type = mapped_file name = "fwcfg.dll" filename = "\\Windows\\SysWOW64\\fwcfg.dll" (normalized: "c:\\windows\\syswow64\\fwcfg.dll") Region: id = 5610 start_va = 0x6efc0000 end_va = 0x6efc7fff monitored = 0 entry_point = 0x6efc28a0 region_type = mapped_file name = "hnetmon.dll" filename = "\\Windows\\SysWOW64\\hnetmon.dll" (normalized: "c:\\windows\\syswow64\\hnetmon.dll") Region: id = 5611 start_va = 0x6ed20000 end_va = 0x6efb1fff monitored = 0 entry_point = 0x6ed2e710 region_type = mapped_file name = "netshell.dll" filename = "\\Windows\\SysWOW64\\netshell.dll" (normalized: "c:\\windows\\syswow64\\netshell.dll") Region: id = 5612 start_va = 0x750f0000 end_va = 0x75134fff monitored = 0 entry_point = 0x7510de90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 5613 start_va = 0x754d0000 end_va = 0x768cefff monitored = 0 entry_point = 0x7568b990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 5614 start_va = 0x776d0000 end_va = 0x77bc8fff monitored = 0 entry_point = 0x778d7610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 5615 start_va = 0x74e40000 end_va = 0x74eccfff monitored = 0 entry_point = 0x74e89b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 5616 start_va = 0x76bc0000 end_va = 0x76c03fff monitored = 0 entry_point = 0x76bc7410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 5617 start_va = 0x76940000 end_va = 0x7694efff monitored = 0 entry_point = 0x76942e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 5618 start_va = 0x6ed00000 end_va = 0x6ed13fff monitored = 0 entry_point = 0x6ed05a40 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\SysWOW64\\nlaapi.dll" (normalized: "c:\\windows\\syswow64\\nlaapi.dll") Region: id = 5619 start_va = 0x6ecd0000 end_va = 0x6ecfefff monitored = 0 entry_point = 0x6ecf3330 region_type = mapped_file name = "netiohlp.dll" filename = "\\Windows\\SysWOW64\\netiohlp.dll" (normalized: "c:\\windows\\syswow64\\netiohlp.dll") Region: id = 5620 start_va = 0x6ec40000 end_va = 0x6ecc3fff monitored = 0 entry_point = 0x6ec66530 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 5621 start_va = 0x6ec30000 end_va = 0x6ec37fff monitored = 0 entry_point = 0x6ec31fc0 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 5622 start_va = 0x6ec20000 end_va = 0x6ec2afff monitored = 0 entry_point = 0x6ec26010 region_type = mapped_file name = "nshhttp.dll" filename = "\\Windows\\SysWOW64\\nshhttp.dll" (normalized: "c:\\windows\\syswow64\\nshhttp.dll") Region: id = 5623 start_va = 0x6ec10000 end_va = 0x6ec1afff monitored = 0 entry_point = 0x6ec11b60 region_type = mapped_file name = "httpapi.dll" filename = "\\Windows\\SysWOW64\\httpapi.dll" (normalized: "c:\\windows\\syswow64\\httpapi.dll") Region: id = 5624 start_va = 0x6eba0000 end_va = 0x6ec02fff monitored = 0 entry_point = 0x6ebf6c70 region_type = mapped_file name = "nshipsec.dll" filename = "\\Windows\\SysWOW64\\nshipsec.dll" (normalized: "c:\\windows\\syswow64\\nshipsec.dll") Region: id = 5625 start_va = 0x74b40000 end_va = 0x74cb7fff monitored = 0 entry_point = 0x74b98a90 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 5626 start_va = 0x76ca0000 end_va = 0x76cadfff monitored = 0 entry_point = 0x76ca5410 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 5627 start_va = 0x76ad0000 end_va = 0x76b22fff monitored = 0 entry_point = 0x76af0a10 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 5628 start_va = 0x6eb80000 end_va = 0x6eb98fff monitored = 0 entry_point = 0x6eb847e0 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll") Region: id = 5629 start_va = 0x6eb40000 end_va = 0x6eb7afff monitored = 0 entry_point = 0x6eb47e00 region_type = mapped_file name = "activeds.dll" filename = "\\Windows\\SysWOW64\\activeds.dll" (normalized: "c:\\windows\\syswow64\\activeds.dll") Region: id = 5630 start_va = 0x6eaf0000 end_va = 0x6eb3afff monitored = 0 entry_point = 0x6eb2fa00 region_type = mapped_file name = "polstore.dll" filename = "\\Windows\\SysWOW64\\polstore.dll" (normalized: "c:\\windows\\syswow64\\polstore.dll") Region: id = 5631 start_va = 0x620000 end_va = 0x620fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000620000" filename = "" Region: id = 5632 start_va = 0x6ead0000 end_va = 0x6eae3fff monitored = 0 entry_point = 0x6eade400 region_type = mapped_file name = "winipsec.dll" filename = "\\Windows\\SysWOW64\\winipsec.dll" (normalized: "c:\\windows\\syswow64\\winipsec.dll") Region: id = 5633 start_va = 0x6ea90000 end_va = 0x6eac7fff monitored = 0 entry_point = 0x6eaad280 region_type = mapped_file name = "adsldpc.dll" filename = "\\Windows\\SysWOW64\\adsldpc.dll" (normalized: "c:\\windows\\syswow64\\adsldpc.dll") Region: id = 5634 start_va = 0x6e9f0000 end_va = 0x6ea80fff monitored = 0 entry_point = 0x6ea620a0 region_type = mapped_file name = "nshwfp.dll" filename = "\\Windows\\SysWOW64\\nshwfp.dll" (normalized: "c:\\windows\\syswow64\\nshwfp.dll") Region: id = 5635 start_va = 0x6e9c0000 end_va = 0x6e9e0fff monitored = 0 entry_point = 0x6e9cbdb0 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\SysWOW64\\cabinet.dll" (normalized: "c:\\windows\\syswow64\\cabinet.dll") Region: id = 5636 start_va = 0x6050000 end_va = 0x61dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006050000" filename = "" Region: id = 5637 start_va = 0x6e980000 end_va = 0x6e9b0fff monitored = 0 entry_point = 0x6e9a7170 region_type = mapped_file name = "p2pnetsh.dll" filename = "\\Windows\\SysWOW64\\p2pnetsh.dll" (normalized: "c:\\windows\\syswow64\\p2pnetsh.dll") Region: id = 5638 start_va = 0x6e950000 end_va = 0x6e97ffff monitored = 0 entry_point = 0x6e974320 region_type = mapped_file name = "p2p.dll" filename = "\\Windows\\SysWOW64\\P2P.dll" (normalized: "c:\\windows\\syswow64\\p2p.dll") Region: id = 5639 start_va = 0x630000 end_va = 0x631fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000630000" filename = "" Region: id = 5640 start_va = 0x6e940000 end_va = 0x6e94afff monitored = 0 entry_point = 0x6e945490 region_type = mapped_file name = "rpcnsh.dll" filename = "\\Windows\\SysWOW64\\rpcnsh.dll" (normalized: "c:\\windows\\syswow64\\rpcnsh.dll") Region: id = 5641 start_va = 0x6e930000 end_va = 0x6e936fff monitored = 0 entry_point = 0x6e931e10 region_type = mapped_file name = "whhelper.dll" filename = "\\Windows\\SysWOW64\\whhelper.dll" (normalized: "c:\\windows\\syswow64\\whhelper.dll") Region: id = 5642 start_va = 0x6e890000 end_va = 0x6e92afff monitored = 0 entry_point = 0x6e8cf7e0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\SysWOW64\\winhttp.dll" (normalized: "c:\\windows\\syswow64\\winhttp.dll") Region: id = 5643 start_va = 0x6e850000 end_va = 0x6e88cfff monitored = 0 entry_point = 0x6e8804f0 region_type = mapped_file name = "wlancfg.dll" filename = "\\Windows\\SysWOW64\\wlancfg.dll" (normalized: "c:\\windows\\syswow64\\wlancfg.dll") Region: id = 5644 start_va = 0x6fbd0000 end_va = 0x6fbe2fff monitored = 0 entry_point = 0x6fbd9950 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 5645 start_va = 0x6e7d0000 end_va = 0x6e7f9fff monitored = 0 entry_point = 0x6e7eee70 region_type = mapped_file name = "wifidisplay.dll" filename = "\\Windows\\SysWOW64\\WiFiDisplay.dll" (normalized: "c:\\windows\\syswow64\\wifidisplay.dll") Region: id = 5646 start_va = 0x6e800000 end_va = 0x6e84cfff monitored = 0 entry_point = 0x6e80d930 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\SysWOW64\\wlanapi.dll" (normalized: "c:\\windows\\syswow64\\wlanapi.dll") Region: id = 5647 start_va = 0x6e7a0000 end_va = 0x6e7c1fff monitored = 0 entry_point = 0x6e7a91f0 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 5648 start_va = 0x6e790000 end_va = 0x6e797fff monitored = 0 entry_point = 0x6e792d80 region_type = mapped_file name = "wshelper.dll" filename = "\\Windows\\SysWOW64\\wshelper.dll" (normalized: "c:\\windows\\syswow64\\wshelper.dll") Region: id = 5649 start_va = 0x6e740000 end_va = 0x6e78efff monitored = 0 entry_point = 0x6e74d850 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 5650 start_va = 0x6e6f0000 end_va = 0x6e73cfff monitored = 0 entry_point = 0x6e706930 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\SysWOW64\\wevtapi.dll" (normalized: "c:\\windows\\syswow64\\wevtapi.dll") Region: id = 5651 start_va = 0x6e690000 end_va = 0x6e6eafff monitored = 0 entry_point = 0x6e6ddbe0 region_type = mapped_file name = "peerdistsh.dll" filename = "\\Windows\\SysWOW64\\PeerDistSh.dll" (normalized: "c:\\windows\\syswow64\\peerdistsh.dll") Region: id = 5652 start_va = 0x6e680000 end_va = 0x6e688fff monitored = 0 entry_point = 0x6e681310 region_type = mapped_file name = "ktmw32.dll" filename = "\\Windows\\SysWOW64\\ktmw32.dll" (normalized: "c:\\windows\\syswow64\\ktmw32.dll") Region: id = 5653 start_va = 0x72de0000 end_va = 0x72e54fff monitored = 0 entry_point = 0x72e19a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 5654 start_va = 0x840000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 5658 start_va = 0x7c0000 end_va = 0x7d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwcfg.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\fwcfg.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\fwcfg.dll.mui") Region: id = 5659 start_va = 0x7e0000 end_va = 0x7e9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "p2pnetsh.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\p2pnetsh.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\p2pnetsh.dll.mui") Region: id = 5660 start_va = 0x6e660000 end_va = 0x6e67afff monitored = 0 entry_point = 0x6e665020 region_type = mapped_file name = "wcmapi.dll" filename = "\\Windows\\SysWOW64\\wcmapi.dll" (normalized: "c:\\windows\\syswow64\\wcmapi.dll") Region: id = 5661 start_va = 0x6e640000 end_va = 0x6e65efff monitored = 0 entry_point = 0x6e64c120 region_type = mapped_file name = "rmclient.dll" filename = "\\Windows\\SysWOW64\\rmclient.dll" (normalized: "c:\\windows\\syswow64\\rmclient.dll") Region: id = 5662 start_va = 0x7f0000 end_va = 0x82ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007f0000" filename = "" Region: id = 5663 start_va = 0x6050000 end_va = 0x614ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006050000" filename = "" Region: id = 5664 start_va = 0x61d0000 end_va = 0x61dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000061d0000" filename = "" Region: id = 5665 start_va = 0x6e620000 end_va = 0x6e63efff monitored = 0 entry_point = 0x6e628a90 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\SysWOW64\\gpapi.dll" (normalized: "c:\\windows\\syswow64\\gpapi.dll") Region: id = 5666 start_va = 0x61e0000 end_va = 0x62dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000061e0000" filename = "" Region: id = 5667 start_va = 0x62e0000 end_va = 0x6616fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 5668 start_va = 0x840000 end_va = 0x86dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wlancfg.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\wlancfg.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\wlancfg.dll.mui") Region: id = 5669 start_va = 0x8d0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 5670 start_va = 0x870000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 5671 start_va = 0x6620000 end_va = 0x671ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006620000" filename = "" Thread: id = 288 os_tid = 0x5f8 [0225.160] GetModuleHandleA (lpModuleName=0x0) returned 0x910000 [0225.160] __set_app_type (_Type=0x1) [0225.160] __p__fmode () returned 0x776c4d6c [0225.160] __p__commode () returned 0x776c5b1c [0225.161] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x919bb0) returned 0x0 [0225.161] __wgetmainargs (in: _Argc=0x9233e8, _Argv=0x9233ec, _Env=0x9233f0, _DoWildCard=0, _StartInfo=0x9233fc | out: _Argc=0x9233e8, _Argv=0x9233ec, _Env=0x9233f0) returned 0 [0225.161] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0225.161] GetModuleHandleW (lpModuleName=0x0) returned 0x910000 [0225.162] _vsnwprintf (in: _Buffer=0x924ae0, _BufferCount=0x1fff, _Format="%s>", _ArgList=0x197af0 | out: _Buffer="netsh>") returned 6 [0225.162] GetProcessHeap () returned 0x640000 [0225.162] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x640598 [0225.162] GetProcessHeap () returned 0x640000 [0225.162] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x646cc8 [0225.162] GetProcessHeap () returned 0x640000 [0225.162] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x647328 [0225.162] GetProcessHeap () returned 0x640000 [0225.162] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x646f60 [0225.162] GetProcessHeap () returned 0x640000 [0225.162] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x646f70 [0225.162] GetProcessHeap () returned 0x640000 [0225.162] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648748 [0225.162] GetProcessHeap () returned 0x640000 [0225.162] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648758 [0225.162] GetProcessHeap () returned 0x640000 [0225.162] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648768 [0225.162] GetProcessHeap () returned 0x640000 [0225.162] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648778 [0225.162] GetProcessHeap () returned 0x640000 [0225.162] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x646d28 [0225.162] GetProcessHeap () returned 0x640000 [0225.162] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x646d38 [0225.162] GetProcessHeap () returned 0x640000 [0225.162] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x646d48 [0225.162] GetProcessHeap () returned 0x640000 [0225.162] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x646d58 [0225.162] GetProcessHeap () returned 0x640000 [0225.162] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x646d68 [0225.162] GetProcessHeap () returned 0x640000 [0225.163] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x646d78 [0225.163] GetProcessHeap () returned 0x640000 [0225.163] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648f80 [0225.163] GetProcessHeap () returned 0x640000 [0225.163] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648f70 [0225.163] GetProcessHeap () returned 0x640000 [0225.163] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649020 [0225.163] GetProcessHeap () returned 0x640000 [0225.163] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648fa0 [0225.163] GetProcessHeap () returned 0x640000 [0225.163] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649030 [0225.163] GetProcessHeap () returned 0x640000 [0225.163] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648fd0 [0225.163] GetProcessHeap () returned 0x640000 [0225.163] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648f40 [0225.163] GetProcessHeap () returned 0x640000 [0225.163] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648e60 [0225.163] GetProcessHeap () returned 0x640000 [0225.163] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648f10 [0225.163] GetProcessHeap () returned 0x640000 [0225.163] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648eb0 [0225.163] GetProcessHeap () returned 0x640000 [0225.163] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648fe0 [0225.163] GetProcessHeap () returned 0x640000 [0225.163] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648f90 [0225.163] GetProcessHeap () returned 0x640000 [0225.163] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648e80 [0225.163] GetProcessHeap () returned 0x640000 [0225.163] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648fb0 [0225.163] GetProcessHeap () returned 0x640000 [0225.163] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648fc0 [0225.163] GetProcessHeap () returned 0x640000 [0225.163] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648e70 [0225.163] GetProcessHeap () returned 0x640000 [0225.163] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648f30 [0225.163] GetProcessHeap () returned 0x640000 [0225.163] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648ff0 [0225.163] GetProcessHeap () returned 0x640000 [0225.163] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648ee0 [0225.163] GetProcessHeap () returned 0x640000 [0225.164] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649000 [0225.164] GetProcessHeap () returned 0x640000 [0225.164] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648e90 [0225.164] GetProcessHeap () returned 0x640000 [0225.164] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648ea0 [0225.164] GetProcessHeap () returned 0x640000 [0225.164] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648ed0 [0225.164] GetProcessHeap () returned 0x640000 [0225.164] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648ef0 [0225.164] GetProcessHeap () returned 0x640000 [0225.164] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649010 [0225.164] GetProcessHeap () returned 0x640000 [0225.164] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648ec0 [0225.164] GetProcessHeap () returned 0x640000 [0225.164] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648f00 [0225.164] GetProcessHeap () returned 0x640000 [0225.164] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648f20 [0225.164] GetProcessHeap () returned 0x640000 [0225.164] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648f50 [0225.164] GetProcessHeap () returned 0x640000 [0225.164] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x648f60 [0225.164] GetProcessHeap () returned 0x640000 [0225.164] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6493c0 [0225.164] GetProcessHeap () returned 0x640000 [0225.164] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649350 [0225.164] GetProcessHeap () returned 0x640000 [0225.164] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6493e0 [0225.164] GetProcessHeap () returned 0x640000 [0225.164] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6493f0 [0225.164] GetProcessHeap () returned 0x640000 [0225.164] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649380 [0225.164] GetProcessHeap () returned 0x640000 [0225.164] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6493a0 [0225.164] GetProcessHeap () returned 0x640000 [0225.164] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6492e0 [0225.164] GetProcessHeap () returned 0x640000 [0225.164] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649400 [0225.164] GetProcessHeap () returned 0x640000 [0225.164] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649410 [0225.164] GetProcessHeap () returned 0x640000 [0225.165] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6492d0 [0225.165] GetProcessHeap () returned 0x640000 [0225.165] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6493b0 [0225.165] GetProcessHeap () returned 0x640000 [0225.165] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6493d0 [0225.165] GetProcessHeap () returned 0x640000 [0225.165] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649420 [0225.165] GetProcessHeap () returned 0x640000 [0225.165] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649330 [0225.165] GetProcessHeap () returned 0x640000 [0225.165] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649430 [0225.165] GetProcessHeap () returned 0x640000 [0225.165] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6492b0 [0225.165] GetProcessHeap () returned 0x640000 [0225.165] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649270 [0225.165] GetProcessHeap () returned 0x640000 [0225.165] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649280 [0225.165] GetProcessHeap () returned 0x640000 [0225.165] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6492c0 [0225.165] GetProcessHeap () returned 0x640000 [0225.165] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649290 [0225.165] GetProcessHeap () returned 0x640000 [0225.165] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6492a0 [0225.165] GetProcessHeap () returned 0x640000 [0225.165] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6492f0 [0225.165] GetProcessHeap () returned 0x640000 [0225.165] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649300 [0225.165] GetProcessHeap () returned 0x640000 [0225.165] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649310 [0225.165] GetProcessHeap () returned 0x640000 [0225.165] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649390 [0225.165] GetProcessHeap () returned 0x640000 [0225.165] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649360 [0225.165] GetProcessHeap () returned 0x640000 [0225.165] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649320 [0225.165] GetProcessHeap () returned 0x640000 [0225.165] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649340 [0225.165] GetProcessHeap () returned 0x640000 [0225.165] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649370 [0225.166] GetProcessHeap () returned 0x640000 [0225.166] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649170 [0225.166] GetProcessHeap () returned 0x640000 [0225.166] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649130 [0225.166] GetProcessHeap () returned 0x640000 [0225.166] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649180 [0225.166] GetProcessHeap () returned 0x640000 [0225.166] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6491d0 [0225.166] GetProcessHeap () returned 0x640000 [0225.166] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6490e0 [0225.166] GetProcessHeap () returned 0x640000 [0225.166] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6490f0 [0225.166] GetProcessHeap () returned 0x640000 [0225.166] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649100 [0225.166] GetProcessHeap () returned 0x640000 [0225.166] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6491c0 [0225.166] GetProcessHeap () returned 0x640000 [0225.166] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649190 [0225.166] GetProcessHeap () returned 0x640000 [0225.166] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649140 [0225.166] GetProcessHeap () returned 0x640000 [0225.166] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649120 [0225.166] GetProcessHeap () returned 0x640000 [0225.166] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649110 [0225.166] GetProcessHeap () returned 0x640000 [0225.166] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649150 [0225.166] GetProcessHeap () returned 0x640000 [0225.166] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649070 [0225.166] GetProcessHeap () returned 0x640000 [0225.166] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6491a0 [0225.166] GetProcessHeap () returned 0x640000 [0225.166] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649080 [0225.166] GetProcessHeap () returned 0x640000 [0225.166] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649160 [0225.166] GetProcessHeap () returned 0x640000 [0225.166] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6491b0 [0225.166] GetProcessHeap () returned 0x640000 [0225.166] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6491e0 [0225.166] GetProcessHeap () returned 0x640000 [0225.166] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6491f0 [0225.167] GetProcessHeap () returned 0x640000 [0225.167] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649240 [0225.167] GetProcessHeap () returned 0x640000 [0225.167] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649200 [0225.167] GetProcessHeap () returned 0x640000 [0225.167] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649210 [0225.167] GetProcessHeap () returned 0x640000 [0225.167] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649220 [0225.167] GetProcessHeap () returned 0x640000 [0225.167] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6490b0 [0225.167] GetProcessHeap () returned 0x640000 [0225.167] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649230 [0225.167] GetProcessHeap () returned 0x640000 [0225.167] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6490c0 [0225.167] GetProcessHeap () returned 0x640000 [0225.167] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649090 [0225.167] GetProcessHeap () returned 0x640000 [0225.167] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649250 [0225.167] GetProcessHeap () returned 0x640000 [0225.167] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649260 [0225.167] GetProcessHeap () returned 0x640000 [0225.167] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6490a0 [0225.167] GetProcessHeap () returned 0x640000 [0225.167] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6490d0 [0225.167] GetProcessHeap () returned 0x640000 [0225.167] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6497d8 [0225.167] GetProcessHeap () returned 0x640000 [0225.167] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649748 [0225.167] GetProcessHeap () returned 0x640000 [0225.167] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649798 [0225.167] GetProcessHeap () returned 0x640000 [0225.167] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6496a8 [0225.167] GetProcessHeap () returned 0x640000 [0225.167] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649778 [0225.167] GetProcessHeap () returned 0x640000 [0225.167] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649708 [0225.167] GetProcessHeap () returned 0x640000 [0225.167] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649768 [0225.167] GetProcessHeap () returned 0x640000 [0225.167] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6497f8 [0225.168] GetProcessHeap () returned 0x640000 [0225.168] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649718 [0225.168] GetProcessHeap () returned 0x640000 [0225.168] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649788 [0225.168] GetProcessHeap () returned 0x640000 [0225.168] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6497a8 [0225.168] GetProcessHeap () returned 0x640000 [0225.168] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649758 [0225.168] GetProcessHeap () returned 0x640000 [0225.168] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6496e8 [0225.168] GetProcessHeap () returned 0x640000 [0225.168] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649818 [0225.168] GetProcessHeap () returned 0x640000 [0225.168] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6497b8 [0225.168] GetProcessHeap () returned 0x640000 [0225.168] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6497c8 [0225.168] GetProcessHeap () returned 0x640000 [0225.168] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649728 [0225.168] GetProcessHeap () returned 0x640000 [0225.168] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6497e8 [0225.168] GetProcessHeap () returned 0x640000 [0225.168] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6496f8 [0225.168] GetProcessHeap () returned 0x640000 [0225.168] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649738 [0225.168] GetProcessHeap () returned 0x640000 [0225.168] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649808 [0225.168] GetProcessHeap () returned 0x640000 [0225.168] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649828 [0225.168] GetProcessHeap () returned 0x640000 [0225.168] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6496b8 [0225.168] GetProcessHeap () returned 0x640000 [0225.168] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649838 [0225.168] GetProcessHeap () returned 0x640000 [0225.168] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6496c8 [0225.168] GetProcessHeap () returned 0x640000 [0225.168] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649678 [0225.168] GetProcessHeap () returned 0x640000 [0225.168] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649688 [0225.169] GetProcessHeap () returned 0x640000 [0225.169] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6496d8 [0225.169] GetProcessHeap () returned 0x640000 [0225.169] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649698 [0225.169] GetProcessHeap () returned 0x640000 [0225.169] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649638 [0225.169] GetProcessHeap () returned 0x640000 [0225.169] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649558 [0225.169] GetProcessHeap () returned 0x640000 [0225.169] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6495c8 [0225.169] GetProcessHeap () returned 0x640000 [0225.169] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649668 [0225.169] GetProcessHeap () returned 0x640000 [0225.169] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649508 [0225.169] GetProcessHeap () returned 0x640000 [0225.169] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6495e8 [0225.169] GetProcessHeap () returned 0x640000 [0225.169] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649648 [0225.169] GetProcessHeap () returned 0x640000 [0225.169] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649478 [0225.169] GetProcessHeap () returned 0x640000 [0225.169] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649608 [0225.169] GetProcessHeap () returned 0x640000 [0225.169] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649488 [0225.169] GetProcessHeap () returned 0x640000 [0225.169] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6494c8 [0225.169] GetProcessHeap () returned 0x640000 [0225.169] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649618 [0225.169] GetProcessHeap () returned 0x640000 [0225.169] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6495b8 [0225.169] GetProcessHeap () returned 0x640000 [0225.169] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6495a8 [0225.169] GetProcessHeap () returned 0x640000 [0225.169] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649578 [0225.169] GetProcessHeap () returned 0x640000 [0225.169] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649498 [0225.169] GetProcessHeap () returned 0x640000 [0225.169] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6494d8 [0225.169] GetProcessHeap () returned 0x640000 [0225.169] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649628 [0225.170] GetProcessHeap () returned 0x640000 [0225.170] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6494b8 [0225.170] GetProcessHeap () returned 0x640000 [0225.170] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649588 [0225.170] GetProcessHeap () returned 0x640000 [0225.170] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6495d8 [0225.170] GetProcessHeap () returned 0x640000 [0225.170] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649518 [0225.170] GetProcessHeap () returned 0x640000 [0225.170] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649528 [0225.170] GetProcessHeap () returned 0x640000 [0225.170] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649598 [0225.170] GetProcessHeap () returned 0x640000 [0225.170] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6495f8 [0225.170] GetProcessHeap () returned 0x640000 [0225.170] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649658 [0225.170] GetProcessHeap () returned 0x640000 [0225.170] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6494a8 [0225.170] GetProcessHeap () returned 0x640000 [0225.170] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649538 [0225.170] GetProcessHeap () returned 0x640000 [0225.170] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6494e8 [0225.170] GetProcessHeap () returned 0x640000 [0225.170] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649548 [0225.170] GetProcessHeap () returned 0x640000 [0225.170] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6494f8 [0225.170] GetProcessHeap () returned 0x640000 [0225.170] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649568 [0225.170] GetProcessHeap () returned 0x640000 [0225.170] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649c40 [0225.170] GetProcessHeap () returned 0x640000 [0225.170] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649aa0 [0225.170] GetProcessHeap () returned 0x640000 [0225.170] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649b60 [0225.170] GetProcessHeap () returned 0x640000 [0225.170] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649a80 [0225.170] GetProcessHeap () returned 0x640000 [0225.171] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649a90 [0225.171] GetProcessHeap () returned 0x640000 [0225.171] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649b90 [0225.171] GetProcessHeap () returned 0x640000 [0225.171] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649bf0 [0225.171] GetProcessHeap () returned 0x640000 [0225.171] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649be0 [0225.171] GetProcessHeap () returned 0x640000 [0225.171] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649c00 [0225.171] GetProcessHeap () returned 0x640000 [0225.171] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649ba0 [0225.171] GetProcessHeap () returned 0x640000 [0225.171] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649b20 [0225.171] GetProcessHeap () returned 0x640000 [0225.171] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649ab0 [0225.171] GetProcessHeap () returned 0x640000 [0225.171] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649af0 [0225.171] GetProcessHeap () returned 0x640000 [0225.171] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649ad0 [0225.171] GetProcessHeap () returned 0x640000 [0225.171] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649c10 [0225.171] GetProcessHeap () returned 0x640000 [0225.171] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649ac0 [0225.171] GetProcessHeap () returned 0x640000 [0225.171] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649b70 [0225.171] GetProcessHeap () returned 0x640000 [0225.171] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649b30 [0225.171] GetProcessHeap () returned 0x640000 [0225.171] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649c20 [0225.171] GetProcessHeap () returned 0x640000 [0225.171] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649bc0 [0225.171] GetProcessHeap () returned 0x640000 [0225.171] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649b80 [0225.171] GetProcessHeap () returned 0x640000 [0225.171] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649ae0 [0225.171] GetProcessHeap () returned 0x640000 [0225.171] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649c30 [0225.171] GetProcessHeap () returned 0x640000 [0225.171] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649b00 [0225.172] GetProcessHeap () returned 0x640000 [0225.172] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649bd0 [0225.172] GetProcessHeap () returned 0x640000 [0225.172] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649b10 [0225.172] GetProcessHeap () returned 0x640000 [0225.172] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649b40 [0225.172] GetProcessHeap () returned 0x640000 [0225.172] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649b50 [0225.172] GetProcessHeap () returned 0x640000 [0225.172] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649bb0 [0225.172] GetProcessHeap () returned 0x640000 [0225.172] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649900 [0225.172] GetProcessHeap () returned 0x640000 [0225.172] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649940 [0225.172] GetProcessHeap () returned 0x640000 [0225.172] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649960 [0225.172] GetProcessHeap () returned 0x640000 [0225.172] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649910 [0225.172] GetProcessHeap () returned 0x640000 [0225.172] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649920 [0225.172] GetProcessHeap () returned 0x640000 [0225.172] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649930 [0225.172] GetProcessHeap () returned 0x640000 [0225.172] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649a50 [0225.172] GetProcessHeap () returned 0x640000 [0225.172] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649950 [0225.172] GetProcessHeap () returned 0x640000 [0225.172] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649970 [0225.172] GetProcessHeap () returned 0x640000 [0225.172] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6498a0 [0225.172] GetProcessHeap () returned 0x640000 [0225.172] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6499d0 [0225.173] GetProcessHeap () returned 0x640000 [0225.173] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6499c0 [0225.173] GetProcessHeap () returned 0x640000 [0225.173] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6498b0 [0225.173] GetProcessHeap () returned 0x640000 [0225.173] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x6498c0 [0225.173] GetProcessHeap () returned 0x640000 [0225.173] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x649a00 [0225.173] _wcsicmp (_String1="netsh.exe", _String2="ipxmontr.dll") returned 5 [0225.173] _wcsicmp (_String1="netsh.exe", _String2="ipxpromn.dll") returned 5 [0225.173] GetProcessHeap () returned 0x640000 [0225.173] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x14) returned 0x646958 [0225.173] memcpy (in: _Dst=0x646958, _Src=0x0, _Size=0x0 | out: _Dst=0x646958) returned 0x646958 [0225.173] GetProcessHeap () returned 0x640000 [0225.173] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x2) returned 0x649980 [0225.173] GetProcessHeap () returned 0x640000 [0225.173] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x14) returned 0x646978 [0225.173] _wcsupr (in: _String="netsh.exe" | out: _String="NETSH.EXE") returned="NETSH.EXE" [0225.173] GetProcessHeap () returned 0x640000 [0225.173] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x0) returned 1 [0225.173] GetProcessHeap () returned 0x640000 [0225.173] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x48) returned 0x6466f0 [0225.173] memcpy (in: _Dst=0x6466f0, _Src=0x0, _Size=0x0 | out: _Dst=0x6466f0) returned 0x6466f0 [0225.173] GetProcessHeap () returned 0x640000 [0225.173] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x0) returned 1 [0225.173] GetProcessHeap () returned 0x640000 [0225.173] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x90) returned 0x646890 [0225.173] memcpy (in: _Dst=0x646890, _Src=0x6466f0, _Size=0x48 | out: _Dst=0x646890) returned 0x646890 [0225.173] GetProcessHeap () returned 0x640000 [0225.174] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6466f0) returned 1 [0225.174] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-0.dll", hFile=0x0, dwFlags=0x8) returned 0x77160000 [0225.176] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\NetSh", ulOptions=0x0, samDesired=0x20019, phkResult=0x197ae8 | out: phkResult=0x197ae8*=0xc4) returned 0x0 [0225.176] RegQueryInfoKeyW (in: hKey=0xc4, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x197ae4, lpcbMaxValueNameLen=0x197adc, lpcbMaxValueLen=0x197ae0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x197ae4*=0x11, lpcbMaxValueNameLen=0x197adc, lpcbMaxValueLen=0x197ae0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0225.176] GetProcessHeap () returned 0x640000 [0225.176] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x16) returned 0x646748 [0225.176] GetProcessHeap () returned 0x640000 [0225.176] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x8, Size=0x23) returned 0x647218 [0225.176] RegEnumValueW (in: hKey=0xc4, dwIndex=0x0, lpValueName=0x646748, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8 | out: lpValueName="2", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8) returned 0x0 [0225.176] _wcsicmp (_String1="ifmon.dll", _String2="ipxmontr.dll") returned -10 [0225.176] _wcsicmp (_String1="ifmon.dll", _String2="ipxpromn.dll") returned -10 [0225.176] GetProcessHeap () returned 0x640000 [0225.177] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x28) returned 0x6428f8 [0225.177] memcpy (in: _Dst=0x6428f8, _Src=0x646958, _Size=0x14 | out: _Dst=0x6428f8) returned 0x6428f8 [0225.177] GetProcessHeap () returned 0x640000 [0225.177] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x4) returned 0x649990 [0225.177] GetProcessHeap () returned 0x640000 [0225.177] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x14) returned 0x642928 [0225.177] _wcsupr (in: _String="ifmon.dll" | out: _String="IFMON.DLL") returned="IFMON.DLL" [0225.177] GetProcessHeap () returned 0x640000 [0225.177] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x646958) returned 1 [0225.177] LoadLibraryExW (lpLibFileName="IFMON.DLL", hFile=0x0, dwFlags=0x0) returned 0x6f620000 [0225.187] GetProcAddress (hModule=0x6f620000, lpProcName="InitHelperDll") returned 0x6f621ab0 [0225.187] InitHelperDll () returned 0x0 [0225.192] RegisterHelper () returned 0x0 [0225.192] GetProcessHeap () returned 0x640000 [0225.192] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xd8) returned 0x6514f0 [0225.192] memcpy (in: _Dst=0x6514f0, _Src=0x646890, _Size=0x90 | out: _Dst=0x6514f0) returned 0x6514f0 [0225.192] GetProcessHeap () returned 0x640000 [0225.193] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x646890) returned 1 [0225.193] RegEnumValueW (in: hKey=0xc4, dwIndex=0x1, lpValueName=0x646748, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8 | out: lpValueName="4", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8) returned 0x0 [0225.193] _wcsicmp (_String1="rasmontr.dll", _String2="ipxmontr.dll") returned 9 [0225.193] _wcsicmp (_String1="rasmontr.dll", _String2="ipxpromn.dll") returned 9 [0225.193] GetProcessHeap () returned 0x640000 [0225.193] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x3c) returned 0x649cb8 [0225.193] memcpy (in: _Dst=0x649cb8, _Src=0x6428f8, _Size=0x28 | out: _Dst=0x649cb8) returned 0x649cb8 [0225.193] GetProcessHeap () returned 0x640000 [0225.193] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x4) returned 0x649a20 [0225.193] GetProcessHeap () returned 0x640000 [0225.193] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x1a) returned 0x650450 [0225.193] _wcsupr (in: _String="rasmontr.dll" | out: _String="RASMONTR.DLL") returned="RASMONTR.DLL" [0225.193] GetProcessHeap () returned 0x640000 [0225.194] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6428f8) returned 1 [0225.194] LoadLibraryExW (lpLibFileName="RASMONTR.DLL", hFile=0x0, dwFlags=0x0) returned 0x6f5a0000 [0225.272] LoadLibraryExA (lpLibFileName="MSVCRT.DLL", hFile=0x0, dwFlags=0x800) returned 0x77610000 [0225.272] GetVersion () returned 0x295a000a [0225.273] SetErrorMode (uMode=0x0) returned 0x0 [0225.273] SetErrorMode (uMode=0x8001) returned 0x0 [0225.273] LocalAlloc (uFlags=0x0, uBytes=0x2000) returned 0x655280 [0225.274] LocalFree (hMem=0x655280) returned 0x0 [0225.274] GetVersion () returned 0x295a000a [0225.274] GlobalLock (hMem=0x740004) returned 0x655280 [0225.275] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x655390 [0225.275] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x651e08 [0225.275] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x649a30 [0225.275] malloc (_Size=0x80) returned 0x833b88 [0225.275] __dllonexit () returned 0x6f2f6fa0 [0225.275] __dllonexit () returned 0x6f2f6f40 [0225.275] __dllonexit () returned 0x6f2f6f60 [0225.275] __dllonexit () returned 0x6f2f6f80 [0225.275] __dllonexit () returned 0x6f2d1650 [0225.275] __dllonexit () returned 0x6f2d1640 [0225.276] __dllonexit () returned 0x6f2d1680 [0225.276] __dllonexit () returned 0x6f2d16d0 [0225.276] __dllonexit () returned 0x6f2d17b0 [0225.276] __dllonexit () returned 0x6f2d17d0 [0225.276] __dllonexit () returned 0x6f2d1830 [0225.276] __dllonexit () returned 0x6f2d18f0 [0225.276] __dllonexit () returned 0x6f2d1700 [0225.276] __dllonexit () returned 0x6f2f7000 [0225.276] __dllonexit () returned 0x6f2d1720 [0225.276] __dllonexit () returned 0x6f2d18a0 [0225.276] __dllonexit () returned 0x6f2d18c0 [0225.276] __dllonexit () returned 0x6f2d1910 [0225.277] __dllonexit () returned 0x6f2d1950 [0225.277] __dllonexit () returned 0x6f2d1940 [0225.277] __dllonexit () returned 0x6f2d1970 [0225.277] __dllonexit () returned 0x6f2d1990 [0225.277] __dllonexit () returned 0x6f2d19c0 [0225.277] __dllonexit () returned 0x6f2d1a40 [0225.277] __dllonexit () returned 0x6f2d1560 [0225.277] __dllonexit () returned 0x6f2d1570 [0225.277] __dllonexit () returned 0x6f2d1550 [0225.279] RegisterClipboardFormatW (lpszFormat="commctrl_DragListMsg") returned 0xc161 [0225.279] __dllonexit () returned 0x6f2f6fe0 [0225.279] __dllonexit () returned 0x6f2f6fc0 [0225.279] __dllonexit () returned 0x6f2f6ff0 [0225.279] __dllonexit () returned 0x6f2f6fd0 [0225.279] GetVersion () returned 0x295a000a [0225.279] GetVersion () returned 0x295a000a [0225.279] GetVersion () returned 0x295a000a [0225.279] __dllonexit () returned 0x6f2ea5a0 [0225.280] __dllonexit () returned 0x6f2ea5c0 [0225.280] __dllonexit () returned 0x6f2d1740 [0225.280] __dllonexit () returned 0x6f2d17f0 [0225.280] __dllonexit () returned 0x6f2d1800 [0225.280] __dllonexit () returned 0x6f2ea3b0 [0225.280] GetVersion () returned 0x295a000a [0225.280] GetProcessVersion (ProcessId=0x0) returned 0xa0000 [0225.280] GetSystemMetrics (nIndex=11) returned 32 [0225.280] GetSystemMetrics (nIndex=12) returned 32 [0225.280] GetSystemMetrics (nIndex=2) returned 17 [0225.280] GetSystemMetrics (nIndex=3) returned 17 [0225.280] GetDC (hWnd=0x0) returned 0xffffffffd001053c [0225.280] GetDeviceCaps (hdc=0xd001053c, index=88) returned 96 [0225.280] GetDeviceCaps (hdc=0xd001053c, index=90) returned 96 [0225.280] ReleaseDC (hWnd=0x0, hDC=0xd001053c) returned 1 [0225.280] GetSysColor (nIndex=15) returned 0xf0f0f0 [0225.281] GetSysColor (nIndex=16) returned 0xa0a0a0 [0225.281] GetSysColor (nIndex=20) returned 0xffffff [0225.281] GetSysColor (nIndex=18) returned 0x0 [0225.281] GetSysColor (nIndex=6) returned 0x646464 [0225.281] GetSysColorBrush (nIndex=15) returned 0x1100074 [0225.281] GetSysColorBrush (nIndex=6) returned 0x110007c [0225.281] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0225.281] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0225.281] __dllonexit () returned 0x6f2d1870 [0225.281] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc162 [0225.281] __dllonexit () returned 0x6f2ea3a0 [0225.281] RegisterClipboardFormatW (lpszFormat="Native") returned 0xc004 [0225.281] RegisterClipboardFormatW (lpszFormat="OwnerLink") returned 0xc003 [0225.281] RegisterClipboardFormatW (lpszFormat="ObjectLink") returned 0xc002 [0225.281] RegisterClipboardFormatW (lpszFormat="Embedded Object") returned 0xc00a [0225.281] RegisterClipboardFormatW (lpszFormat="Embed Source") returned 0xc00b [0225.282] RegisterClipboardFormatW (lpszFormat="Link Source") returned 0xc00d [0225.282] RegisterClipboardFormatW (lpszFormat="Object Descriptor") returned 0xc00e [0225.282] RegisterClipboardFormatW (lpszFormat="Link Source Descriptor") returned 0xc00f [0225.282] RegisterClipboardFormatW (lpszFormat="FileName") returned 0xc006 [0225.282] RegisterClipboardFormatW (lpszFormat="FileNameW") returned 0xc007 [0225.282] RegisterClipboardFormatW (lpszFormat="Rich Text Format") returned 0xc0de [0225.282] RegisterClipboardFormatW (lpszFormat="RichEdit Text and Objects") returned 0xc0e7 [0225.282] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc162 [0225.282] __dllonexit () returned 0x6f2f7010 [0225.282] __dllonexit () returned 0x6f2f7030 [0225.282] __dllonexit () returned 0x6f2f7040 [0225.283] __dllonexit () returned 0x6f2f7050 [0225.283] __dllonexit () returned 0x6f2f7060 [0225.283] GetCursorPos (in: lpPoint=0x6f3b8298 | out: lpPoint=0x6f3b8298*(x=385, y=310)) returned 1 [0225.283] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x655510 [0225.283] LocalReAlloc (hMem=0x649a30, uBytes=0xc, uFlags=0x2) returned 0x652628 [0225.283] GetCurrentThread () returned 0xfffffffe [0225.283] GetCurrentThreadId () returned 0x5f8 [0225.283] __dllonexit () returned 0x6f2d1a50 [0225.284] SetErrorMode (uMode=0x0) returned 0x8001 [0225.284] SetErrorMode (uMode=0x8001) returned 0x0 [0225.284] GetModuleFileNameW (in: hModule=0x6f2b0000, lpFilename=0x1972e0, nSize=0x104 | out: lpFilename="C:\\Windows\\SYSTEM32\\MFC42u.dll" (normalized: "c:\\windows\\syswow64\\mfc42u.dll")) returned 0x1e [0225.284] wcscpy_s (in: _Destination=0x1970d8, _SizeInWords=0x104, _Source="MFC42u" | out: _Destination="MFC42u") returned 0x0 [0225.284] FindResourceW (hModule=0x6f2b0000, lpName=0xe01, lpType=0x6) returned 0x1f0db0 [0225.285] LoadStringW (in: hInstance=0x6f2b0000, uID=0xe000, lpBuffer=0x196ed8, cchBufferMax=256 | out: lpBuffer="") returned 0x0 [0225.285] wcscpy_s (in: _Destination=0x197314, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0 [0225.285] wcscat_s (in: _Destination="MFC42u", _SizeInWords=0x104, _Source=".INI" | out: _Destination="MFC42u.INI") returned 0x0 [0225.286] malloc (_Size=0x40) returned 0x833cb0 [0225.286] LocalAlloc (uFlags=0x40, uBytes=0x2090) returned 0x6555a0 [0225.287] GetSystemDirectoryA (in: lpBuffer=0x19752c, uSize=0x112 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0225.287] strcat_s (in: _Destination="C:\\Windows\\system32", _SizeInBytes=0x112, _Source="\\MFC42" | out: _Destination="C:\\Windows\\system32\\MFC42") returned 0x0 [0225.287] strcat_s (in: _Destination="C:\\Windows\\system32\\MFC42", _SizeInBytes=0x112, _Source="LOC" | out: _Destination="C:\\Windows\\system32\\MFC42LOC") returned 0x0 [0225.287] strcat_s (in: _Destination="C:\\Windows\\system32\\MFC42LOC", _SizeInBytes=0x112, _Source=".DLL" | out: _Destination="C:\\Windows\\system32\\MFC42LOC.DLL") returned 0x0 [0225.287] LoadLibraryExA (lpLibFileName="C:\\Windows\\system32\\MFC42LOC.DLL", hFile=0x0, dwFlags=0x2) returned 0x0 [0225.287] GetProcAddress (hModule=0x6f5a0000, lpProcName="InitHelperDll") returned 0x6f5c45a0 [0225.287] InitHelperDll () returned 0x0 [0225.288] RegisterHelper () returned 0x0 [0225.288] GetProcessHeap () returned 0x640000 [0225.288] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x120) returned 0x651620 [0225.288] memcpy (in: _Dst=0x651620, _Src=0x6514f0, _Size=0xd8 | out: _Dst=0x651620) returned 0x651620 [0225.288] GetProcessHeap () returned 0x640000 [0225.288] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6514f0) returned 1 [0225.288] RegisterHelper () returned 0x0 [0225.288] GetProcessHeap () returned 0x640000 [0225.288] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x168) returned 0x651920 [0225.288] memcpy (in: _Dst=0x651920, _Src=0x651620, _Size=0x120 | out: _Dst=0x651920) returned 0x651920 [0225.288] GetProcessHeap () returned 0x640000 [0225.289] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x651620) returned 1 [0225.289] RegisterHelper () returned 0x0 [0225.289] GetProcessHeap () returned 0x640000 [0225.289] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x1b0) returned 0x652460 [0225.289] memcpy (in: _Dst=0x652460, _Src=0x651920, _Size=0x168 | out: _Dst=0x652460) returned 0x652460 [0225.289] GetProcessHeap () returned 0x640000 [0225.290] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x651920) returned 1 [0225.290] RegisterHelper () returned 0x0 [0225.290] GetProcessHeap () returned 0x640000 [0225.290] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x1f8) returned 0x657e40 [0225.290] memcpy (in: _Dst=0x657e40, _Src=0x652460, _Size=0x1b0 | out: _Dst=0x657e40) returned 0x657e40 [0225.290] GetProcessHeap () returned 0x640000 [0225.290] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x652460) returned 1 [0225.290] RegisterHelper () returned 0x0 [0225.290] GetProcessHeap () returned 0x640000 [0225.290] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x240) returned 0x658040 [0225.290] memcpy (in: _Dst=0x658040, _Src=0x657e40, _Size=0x1f8 | out: _Dst=0x658040) returned 0x658040 [0225.290] GetProcessHeap () returned 0x640000 [0225.291] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x657e40) returned 1 [0225.291] RegEnumValueW (in: hKey=0xc4, dwIndex=0x2, lpValueName=0x646748, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8 | out: lpValueName="authfwcfg", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8) returned 0x0 [0225.291] _wcsicmp (_String1="authfwcfg.dll", _String2="ipxmontr.dll") returned -8 [0225.291] _wcsicmp (_String1="authfwcfg.dll", _String2="ipxpromn.dll") returned -8 [0225.291] GetProcessHeap () returned 0x640000 [0225.291] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x50) returned 0x6522f8 [0225.291] memcpy (in: _Dst=0x6522f8, _Src=0x649cb8, _Size=0x3c | out: _Dst=0x6522f8) returned 0x6522f8 [0225.291] GetProcessHeap () returned 0x640000 [0225.291] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x14) returned 0x647000 [0225.291] GetProcessHeap () returned 0x640000 [0225.291] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x1c) returned 0x650400 [0225.291] _wcsupr (in: _String="authfwcfg.dll" | out: _String="AUTHFWCFG.DLL") returned="AUTHFWCFG.DLL" [0225.291] GetProcessHeap () returned 0x640000 [0225.292] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649cb8) returned 1 [0225.292] LoadLibraryExW (lpLibFileName="AUTHFWCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x6f1a0000 [0225.307] GetProcAddress (hModule=0x6f1a0000, lpProcName="InitHelperDll") returned 0x6f1a3c40 [0225.307] InitHelperDll () returned 0x0 [0225.308] RegisterHelper () returned 0x0 [0225.308] GetProcessHeap () returned 0x640000 [0225.308] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x288) returned 0x658ea0 [0225.308] memcpy (in: _Dst=0x658ea0, _Src=0x658040, _Size=0x240 | out: _Dst=0x658ea0) returned 0x658ea0 [0225.308] GetProcessHeap () returned 0x640000 [0225.309] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x658040) returned 1 [0225.309] RegisterHelper () returned 0x0 [0225.309] GetProcessHeap () returned 0x640000 [0225.309] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x2d0) returned 0x657e40 [0225.309] memcpy (in: _Dst=0x657e40, _Src=0x658ea0, _Size=0x288 | out: _Dst=0x657e40) returned 0x657e40 [0225.309] GetProcessHeap () returned 0x640000 [0225.309] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x658ea0) returned 1 [0225.309] RegisterHelper () returned 0x0 [0225.309] GetProcessHeap () returned 0x640000 [0225.309] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x318) returned 0x658ea0 [0225.309] memcpy (in: _Dst=0x658ea0, _Src=0x657e40, _Size=0x2d0 | out: _Dst=0x658ea0) returned 0x658ea0 [0225.309] GetProcessHeap () returned 0x640000 [0225.310] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x657e40) returned 1 [0225.310] RegisterHelper () returned 0x0 [0225.310] GetProcessHeap () returned 0x640000 [0225.310] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x360) returned 0x657e40 [0225.310] memcpy (in: _Dst=0x657e40, _Src=0x658ea0, _Size=0x318 | out: _Dst=0x657e40) returned 0x657e40 [0225.310] GetProcessHeap () returned 0x640000 [0225.311] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x658ea0) returned 1 [0225.311] RegisterHelper () returned 0x0 [0225.311] GetProcessHeap () returned 0x640000 [0225.311] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x3a8) returned 0x658ea0 [0225.311] memcpy (in: _Dst=0x658ea0, _Src=0x657e40, _Size=0x360 | out: _Dst=0x658ea0) returned 0x658ea0 [0225.311] GetProcessHeap () returned 0x640000 [0225.311] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x657e40) returned 1 [0225.311] RegEnumValueW (in: hKey=0xc4, dwIndex=0x3, lpValueName=0x646748, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8 | out: lpValueName="dhcpclient", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8) returned 0x0 [0225.311] _wcsicmp (_String1="dhcpcmonitor.dll", _String2="ipxmontr.dll") returned -5 [0225.311] _wcsicmp (_String1="dhcpcmonitor.dll", _String2="ipxpromn.dll") returned -5 [0225.312] GetProcessHeap () returned 0x640000 [0225.312] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x64) returned 0x651b58 [0225.312] memcpy (in: _Dst=0x651b58, _Src=0x6522f8, _Size=0x50 | out: _Dst=0x651b58) returned 0x651b58 [0225.312] GetProcessHeap () returned 0x640000 [0225.312] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x16) returned 0x658b20 [0225.312] GetProcessHeap () returned 0x640000 [0225.312] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x22) returned 0x650a80 [0225.312] _wcsupr (in: _String="dhcpcmonitor.dll" | out: _String="DHCPCMONITOR.DLL") returned="DHCPCMONITOR.DLL" [0225.312] GetProcessHeap () returned 0x640000 [0225.312] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6522f8) returned 1 [0225.312] LoadLibraryExW (lpLibFileName="DHCPCMONITOR.DLL", hFile=0x0, dwFlags=0x0) returned 0x6f130000 [0225.336] GetProcAddress (hModule=0x6f130000, lpProcName="InitHelperDll") returned 0x6f131a10 [0225.336] InitHelperDll () returned 0x0 [0225.336] RegisterHelper () returned 0x0 [0225.336] GetProcessHeap () returned 0x640000 [0225.336] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x3f0) returned 0x657e40 [0225.336] memcpy (in: _Dst=0x657e40, _Src=0x658ea0, _Size=0x3a8 | out: _Dst=0x657e40) returned 0x657e40 [0225.336] GetProcessHeap () returned 0x640000 [0225.337] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x658ea0) returned 1 [0225.337] RegEnumValueW (in: hKey=0xc4, dwIndex=0x4, lpValueName=0x646748, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8 | out: lpValueName="dot3cfg", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8) returned 0x0 [0225.337] _wcsicmp (_String1="dot3cfg.dll", _String2="ipxmontr.dll") returned -5 [0225.337] _wcsicmp (_String1="dot3cfg.dll", _String2="ipxpromn.dll") returned -5 [0225.337] GetProcessHeap () returned 0x640000 [0225.337] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x78) returned 0x64a6f8 [0225.337] memcpy (in: _Dst=0x64a6f8, _Src=0x651b58, _Size=0x64 | out: _Dst=0x64a6f8) returned 0x64a6f8 [0225.337] GetProcessHeap () returned 0x640000 [0225.337] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x10) returned 0x658480 [0225.337] GetProcessHeap () returned 0x640000 [0225.337] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x18) returned 0x658da0 [0225.337] _wcsupr (in: _String="dot3cfg.dll" | out: _String="DOT3CFG.DLL") returned="DOT3CFG.DLL" [0225.337] GetProcessHeap () returned 0x640000 [0225.338] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x651b58) returned 1 [0225.338] LoadLibraryExW (lpLibFileName="DOT3CFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x6f0d0000 [0225.367] GetProcAddress (hModule=0x6f0d0000, lpProcName="InitHelperDll") returned 0x6f0d3aa0 [0225.367] InitHelperDll () returned 0x0 [0225.367] RegisterHelper () returned 0x0 [0225.367] GetProcessHeap () returned 0x640000 [0225.367] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x438) returned 0x65e270 [0225.367] memcpy (in: _Dst=0x65e270, _Src=0x657e40, _Size=0x3f0 | out: _Dst=0x65e270) returned 0x65e270 [0225.367] GetProcessHeap () returned 0x640000 [0225.368] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x657e40) returned 1 [0225.368] RegEnumValueW (in: hKey=0xc4, dwIndex=0x5, lpValueName=0x646748, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8 | out: lpValueName="fwcfg", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8) returned 0x0 [0225.368] _wcsicmp (_String1="fwcfg.dll", _String2="ipxmontr.dll") returned -3 [0225.368] _wcsicmp (_String1="fwcfg.dll", _String2="ipxpromn.dll") returned -3 [0225.368] GetProcessHeap () returned 0x640000 [0225.368] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8c) returned 0x651b58 [0225.368] memcpy (in: _Dst=0x651b58, _Src=0x64a6f8, _Size=0x78 | out: _Dst=0x651b58) returned 0x651b58 [0225.368] GetProcessHeap () returned 0x640000 [0225.368] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x658558 [0225.368] GetProcessHeap () returned 0x640000 [0225.368] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x14) returned 0x658c00 [0225.368] _wcsupr (in: _String="fwcfg.dll" | out: _String="FWCFG.DLL") returned="FWCFG.DLL" [0225.368] GetProcessHeap () returned 0x640000 [0225.369] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x64a6f8) returned 1 [0225.369] LoadLibraryExW (lpLibFileName="FWCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x6efd0000 [0225.373] GetProcAddress (hModule=0x6efd0000, lpProcName="InitHelperDll") returned 0x6efd2290 [0225.373] InitHelperDll () returned 0x0 [0225.373] RegisterHelper () returned 0x0 [0225.373] GetProcessHeap () returned 0x640000 [0225.373] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x480) returned 0x65e6b0 [0225.373] memcpy (in: _Dst=0x65e6b0, _Src=0x65e270, _Size=0x438 | out: _Dst=0x65e6b0) returned 0x65e6b0 [0225.373] GetProcessHeap () returned 0x640000 [0225.374] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x65e270) returned 1 [0225.374] RegEnumValueW (in: hKey=0xc4, dwIndex=0x6, lpValueName=0x646748, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8 | out: lpValueName="hnetmon", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8) returned 0x0 [0225.374] _wcsicmp (_String1="hnetmon.dll", _String2="ipxmontr.dll") returned -1 [0225.374] _wcsicmp (_String1="hnetmon.dll", _String2="ipxpromn.dll") returned -1 [0225.374] GetProcessHeap () returned 0x640000 [0225.374] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xa0) returned 0x65a070 [0225.374] memcpy (in: _Dst=0x65a070, _Src=0x651b58, _Size=0x8c | out: _Dst=0x65a070) returned 0x65a070 [0225.374] GetProcessHeap () returned 0x640000 [0225.374] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x10) returned 0x658408 [0225.374] GetProcessHeap () returned 0x640000 [0225.374] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x18) returned 0x658de0 [0225.374] _wcsupr (in: _String="hnetmon.dll" | out: _String="HNETMON.DLL") returned="HNETMON.DLL" [0225.374] GetProcessHeap () returned 0x640000 [0225.375] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x651b58) returned 1 [0225.375] LoadLibraryExW (lpLibFileName="HNETMON.DLL", hFile=0x0, dwFlags=0x0) returned 0x6efc0000 [0225.432] GetProcAddress (hModule=0x6efc0000, lpProcName="InitHelperDll") returned 0x6efc24b0 [0225.432] InitHelperDll () returned 0x0 [0225.432] RegisterHelper () returned 0x0 [0225.432] GetProcessHeap () returned 0x640000 [0225.432] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x4c8) returned 0x65eb38 [0225.432] memcpy (in: _Dst=0x65eb38, _Src=0x65e6b0, _Size=0x480 | out: _Dst=0x65eb38) returned 0x65eb38 [0225.433] GetProcessHeap () returned 0x640000 [0225.433] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x65e6b0) returned 1 [0225.433] RegEnumValueW (in: hKey=0xc4, dwIndex=0x7, lpValueName=0x646748, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8 | out: lpValueName="netiohlp", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8) returned 0x0 [0225.433] _wcsicmp (_String1="netiohlp.dll", _String2="ipxmontr.dll") returned 5 [0225.433] _wcsicmp (_String1="netiohlp.dll", _String2="ipxpromn.dll") returned 5 [0225.433] GetProcessHeap () returned 0x640000 [0225.433] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xb4) returned 0x651680 [0225.433] memcpy (in: _Dst=0x651680, _Src=0x65a070, _Size=0xa0 | out: _Dst=0x651680) returned 0x651680 [0225.433] GetProcessHeap () returned 0x640000 [0225.433] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x12) returned 0x658c20 [0225.434] GetProcessHeap () returned 0x640000 [0225.434] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x1a) returned 0x650630 [0225.434] _wcsupr (in: _String="netiohlp.dll" | out: _String="NETIOHLP.DLL") returned="NETIOHLP.DLL" [0225.434] GetProcessHeap () returned 0x640000 [0225.434] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x65a070) returned 1 [0225.434] LoadLibraryExW (lpLibFileName="NETIOHLP.DLL", hFile=0x0, dwFlags=0x0) returned 0x6ecd0000 [0225.444] GetProcAddress (hModule=0x6ecd0000, lpProcName="InitHelperDll") returned 0x6ece69d0 [0225.444] InitHelperDll () returned 0x0 [0225.444] RegisterHelper () returned 0x0 [0225.444] GetProcessHeap () returned 0x640000 [0225.444] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x510) returned 0x65f008 [0225.444] memcpy (in: _Dst=0x65f008, _Src=0x65eb38, _Size=0x4c8 | out: _Dst=0x65f008) returned 0x65f008 [0225.444] GetProcessHeap () returned 0x640000 [0225.445] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x65eb38) returned 1 [0225.445] RegisterHelper () returned 0x0 [0225.445] GetProcessHeap () returned 0x640000 [0225.445] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x558) returned 0x65e678 [0225.445] memcpy (in: _Dst=0x65e678, _Src=0x65f008, _Size=0x510 | out: _Dst=0x65e678) returned 0x65e678 [0225.445] GetProcessHeap () returned 0x640000 [0225.446] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x65f008) returned 1 [0225.446] RegisterHelper () returned 0x0 [0225.446] GetProcessHeap () returned 0x640000 [0225.446] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x5a0) returned 0x65ebd8 [0225.446] memcpy (in: _Dst=0x65ebd8, _Src=0x65e678, _Size=0x558 | out: _Dst=0x65ebd8) returned 0x65ebd8 [0225.446] GetProcessHeap () returned 0x640000 [0225.446] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x65e678) returned 1 [0225.446] RegisterHelper () returned 0x0 [0225.446] GetProcessHeap () returned 0x640000 [0225.446] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x5e8) returned 0x65f180 [0225.446] memcpy (in: _Dst=0x65f180, _Src=0x65ebd8, _Size=0x5a0 | out: _Dst=0x65f180) returned 0x65f180 [0225.446] GetProcessHeap () returned 0x640000 [0225.447] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x65ebd8) returned 1 [0225.447] RegisterHelper () returned 0x0 [0225.447] GetProcessHeap () returned 0x640000 [0225.447] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x630) returned 0x65f770 [0225.447] memcpy (in: _Dst=0x65f770, _Src=0x65f180, _Size=0x5e8 | out: _Dst=0x65f770) returned 0x65f770 [0225.447] GetProcessHeap () returned 0x640000 [0225.447] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x65f180) returned 1 [0225.448] RegisterHelper () returned 0x0 [0225.448] GetProcessHeap () returned 0x640000 [0225.448] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x678) returned 0x65e678 [0225.448] memcpy (in: _Dst=0x65e678, _Src=0x65f770, _Size=0x630 | out: _Dst=0x65e678) returned 0x65e678 [0225.448] GetProcessHeap () returned 0x640000 [0225.448] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x65f770) returned 1 [0225.448] RegisterHelper () returned 0x0 [0225.448] GetProcessHeap () returned 0x640000 [0225.448] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x6c0) returned 0x65ecf8 [0225.448] memcpy (in: _Dst=0x65ecf8, _Src=0x65e678, _Size=0x678 | out: _Dst=0x65ecf8) returned 0x65ecf8 [0225.448] GetProcessHeap () returned 0x640000 [0225.449] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x65e678) returned 1 [0225.449] RegisterHelper () returned 0x0 [0225.449] GetProcessHeap () returned 0x640000 [0225.449] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x708) returned 0x65f3c0 [0225.449] memcpy (in: _Dst=0x65f3c0, _Src=0x65ecf8, _Size=0x6c0 | out: _Dst=0x65f3c0) returned 0x65f3c0 [0225.449] GetProcessHeap () returned 0x640000 [0225.450] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x65ecf8) returned 1 [0225.450] RegisterHelper () returned 0x0 [0225.450] GetProcessHeap () returned 0x640000 [0225.450] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x750) returned 0x65e678 [0225.450] memcpy (in: _Dst=0x65e678, _Src=0x65f3c0, _Size=0x708 | out: _Dst=0x65e678) returned 0x65e678 [0225.450] GetProcessHeap () returned 0x640000 [0225.450] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x65f3c0) returned 1 [0225.450] RegEnumValueW (in: hKey=0xc4, dwIndex=0x8, lpValueName=0x646748, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8 | out: lpValueName="nshhttp", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8) returned 0x0 [0225.450] _wcsicmp (_String1="nshhttp.dll", _String2="ipxmontr.dll") returned 5 [0225.450] _wcsicmp (_String1="nshhttp.dll", _String2="ipxpromn.dll") returned 5 [0225.450] GetProcessHeap () returned 0x640000 [0225.450] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc8) returned 0x65de38 [0225.450] memcpy (in: _Dst=0x65de38, _Src=0x651680, _Size=0xb4 | out: _Dst=0x65de38) returned 0x65de38 [0225.450] GetProcessHeap () returned 0x640000 [0225.450] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x10) returned 0x65e588 [0225.450] GetProcessHeap () returned 0x640000 [0225.450] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x18) returned 0x658b60 [0225.450] _wcsupr (in: _String="nshhttp.dll" | out: _String="NSHHTTP.DLL") returned="NSHHTTP.DLL" [0225.450] GetProcessHeap () returned 0x640000 [0225.451] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x651680) returned 1 [0225.451] LoadLibraryExW (lpLibFileName="NSHHTTP.DLL", hFile=0x0, dwFlags=0x0) returned 0x6ec20000 [0225.458] GetProcAddress (hModule=0x6ec20000, lpProcName="InitHelperDll") returned 0x6ec21b90 [0225.458] InitHelperDll () returned 0x0 [0225.458] RegisterHelper () returned 0x0 [0225.458] GetProcessHeap () returned 0x640000 [0225.458] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x798) returned 0x65edd0 [0225.458] memcpy (in: _Dst=0x65edd0, _Src=0x65e678, _Size=0x750 | out: _Dst=0x65edd0) returned 0x65edd0 [0225.458] GetProcessHeap () returned 0x640000 [0225.459] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x65e678) returned 1 [0225.459] RegEnumValueW (in: hKey=0xc4, dwIndex=0x9, lpValueName=0x646748, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8 | out: lpValueName="nshipsec", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8) returned 0x0 [0225.459] _wcsicmp (_String1="nshipsec.dll", _String2="ipxmontr.dll") returned 5 [0225.459] _wcsicmp (_String1="nshipsec.dll", _String2="ipxpromn.dll") returned 5 [0225.459] GetProcessHeap () returned 0x640000 [0225.459] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xdc) returned 0x651680 [0225.459] memcpy (in: _Dst=0x651680, _Src=0x65de38, _Size=0xc8 | out: _Dst=0x651680) returned 0x651680 [0225.459] GetProcessHeap () returned 0x640000 [0225.459] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x12) returned 0x658ca0 [0225.459] GetProcessHeap () returned 0x640000 [0225.459] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x1a) returned 0x6506a8 [0225.459] _wcsupr (in: _String="nshipsec.dll" | out: _String="NSHIPSEC.DLL") returned="NSHIPSEC.DLL" [0225.459] GetProcessHeap () returned 0x640000 [0225.459] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x65de38) returned 1 [0225.459] LoadLibraryExW (lpLibFileName="NSHIPSEC.DLL", hFile=0x0, dwFlags=0x0) returned 0x6eba0000 [0225.496] GetProcAddress (hModule=0x6eba0000, lpProcName="InitHelperDll") returned 0x6eba3910 [0225.496] InitHelperDll () returned 0x0 [0225.496] RegisterHelper () returned 0x0 [0225.496] GetProcessHeap () returned 0x640000 [0225.496] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x7e0) returned 0x662d88 [0225.496] memcpy (in: _Dst=0x662d88, _Src=0x65edd0, _Size=0x798 | out: _Dst=0x662d88) returned 0x662d88 [0225.496] GetProcessHeap () returned 0x640000 [0225.497] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x65edd0) returned 1 [0225.497] RegisterHelper () returned 0x0 [0225.497] GetProcessHeap () returned 0x640000 [0225.497] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x828) returned 0x663570 [0225.497] memcpy (in: _Dst=0x663570, _Src=0x662d88, _Size=0x7e0 | out: _Dst=0x663570) returned 0x663570 [0225.497] GetProcessHeap () returned 0x640000 [0225.498] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x662d88) returned 1 [0225.498] RegisterHelper () returned 0x0 [0225.498] GetProcessHeap () returned 0x640000 [0225.498] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x870) returned 0x65ea78 [0225.498] memcpy (in: _Dst=0x65ea78, _Src=0x663570, _Size=0x828 | out: _Dst=0x65ea78) returned 0x65ea78 [0225.498] GetProcessHeap () returned 0x640000 [0225.498] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x663570) returned 1 [0225.504] RegEnumValueW (in: hKey=0xc4, dwIndex=0xa, lpValueName=0x646748, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8 | out: lpValueName="nshwfp", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8) returned 0x0 [0225.504] _wcsicmp (_String1="nshwfp.dll", _String2="ipxmontr.dll") returned 5 [0225.504] _wcsicmp (_String1="nshwfp.dll", _String2="ipxpromn.dll") returned 5 [0225.504] GetProcessHeap () returned 0x640000 [0225.504] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xf0) returned 0x6524e8 [0225.504] memcpy (in: _Dst=0x6524e8, _Src=0x651680, _Size=0xdc | out: _Dst=0x6524e8) returned 0x6524e8 [0225.504] GetProcessHeap () returned 0x640000 [0225.504] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xe) returned 0x663818 [0225.504] GetProcessHeap () returned 0x640000 [0225.504] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x16) returned 0x658e40 [0225.504] _wcsupr (in: _String="nshwfp.dll" | out: _String="NSHWFP.DLL") returned="NSHWFP.DLL" [0225.504] GetProcessHeap () returned 0x640000 [0225.505] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x651680) returned 1 [0225.505] LoadLibraryExW (lpLibFileName="NSHWFP.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e9f0000 [0225.515] GetProcAddress (hModule=0x6e9f0000, lpProcName="InitHelperDll") returned 0x6ea43bb0 [0225.515] InitHelperDll () returned 0x0 [0225.515] RegisterHelper () returned 0x0 [0225.515] GetProcessHeap () returned 0x640000 [0225.515] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8b8) returned 0x666eb8 [0225.515] memcpy (in: _Dst=0x666eb8, _Src=0x65ea78, _Size=0x870 | out: _Dst=0x666eb8) returned 0x666eb8 [0225.515] GetProcessHeap () returned 0x640000 [0225.516] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x65ea78) returned 1 [0225.516] RegEnumValueW (in: hKey=0xc4, dwIndex=0xb, lpValueName=0x646748, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8 | out: lpValueName="p2pnetsh", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8) returned 0x0 [0225.516] _wcsicmp (_String1="p2pnetsh.dll", _String2="ipxmontr.dll") returned 7 [0225.516] _wcsicmp (_String1="p2pnetsh.dll", _String2="ipxpromn.dll") returned 7 [0225.516] GetProcessHeap () returned 0x640000 [0225.516] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x104) returned 0x663998 [0225.516] memcpy (in: _Dst=0x663998, _Src=0x6524e8, _Size=0xf0 | out: _Dst=0x663998) returned 0x663998 [0225.516] GetProcessHeap () returned 0x640000 [0225.516] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x12) returned 0x658e00 [0225.516] GetProcessHeap () returned 0x640000 [0225.516] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x1a) returned 0x662bf0 [0225.516] _wcsupr (in: _String="p2pnetsh.dll" | out: _String="P2PNETSH.DLL") returned="P2PNETSH.DLL" [0225.516] GetProcessHeap () returned 0x640000 [0225.517] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6524e8) returned 1 [0225.517] LoadLibraryExW (lpLibFileName="P2PNETSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e980000 [0225.524] GetProcAddress (hModule=0x6e980000, lpProcName="InitHelperDll") returned 0x6e9858d0 [0225.524] InitHelperDll () returned 0x0 [0225.524] RegisterHelper () returned 0x0 [0225.524] GetProcessHeap () returned 0x640000 [0225.524] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x900) returned 0x667778 [0225.524] memcpy (in: _Dst=0x667778, _Src=0x666eb8, _Size=0x8b8 | out: _Dst=0x667778) returned 0x667778 [0225.524] GetProcessHeap () returned 0x640000 [0225.525] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x666eb8) returned 1 [0225.525] RegisterHelper () returned 0x0 [0225.525] GetProcessHeap () returned 0x640000 [0225.525] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x948) returned 0x668080 [0225.525] memcpy (in: _Dst=0x668080, _Src=0x667778, _Size=0x900 | out: _Dst=0x668080) returned 0x668080 [0225.525] GetProcessHeap () returned 0x640000 [0225.526] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x667778) returned 1 [0225.526] RegisterHelper () returned 0x0 [0225.526] GetProcessHeap () returned 0x640000 [0225.526] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x990) returned 0x666eb8 [0225.526] memcpy (in: _Dst=0x666eb8, _Src=0x668080, _Size=0x948 | out: _Dst=0x666eb8) returned 0x666eb8 [0225.526] GetProcessHeap () returned 0x640000 [0225.526] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x668080) returned 1 [0225.526] RegisterHelper () returned 0x0 [0225.526] GetProcessHeap () returned 0x640000 [0225.526] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x9d8) returned 0x667850 [0225.526] memcpy (in: _Dst=0x667850, _Src=0x666eb8, _Size=0x990 | out: _Dst=0x667850) returned 0x667850 [0225.527] GetProcessHeap () returned 0x640000 [0225.527] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x666eb8) returned 1 [0225.528] RegisterHelper () returned 0x0 [0225.528] GetProcessHeap () returned 0x640000 [0225.528] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xa20) returned 0x668230 [0225.528] memcpy (in: _Dst=0x668230, _Src=0x667850, _Size=0x9d8 | out: _Dst=0x668230) returned 0x668230 [0225.528] GetProcessHeap () returned 0x640000 [0225.528] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x667850) returned 1 [0225.528] RegisterHelper () returned 0x0 [0225.528] GetProcessHeap () returned 0x640000 [0225.529] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xa68) returned 0x666eb8 [0225.529] memcpy (in: _Dst=0x666eb8, _Src=0x668230, _Size=0xa20 | out: _Dst=0x666eb8) returned 0x666eb8 [0225.529] GetProcessHeap () returned 0x640000 [0225.529] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x668230) returned 1 [0225.529] RegisterHelper () returned 0x0 [0225.529] GetProcessHeap () returned 0x640000 [0225.529] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xab0) returned 0x667928 [0225.529] memcpy (in: _Dst=0x667928, _Src=0x666eb8, _Size=0xa68 | out: _Dst=0x667928) returned 0x667928 [0225.529] GetProcessHeap () returned 0x640000 [0225.530] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x666eb8) returned 1 [0225.530] RegisterHelper () returned 0x0 [0225.530] GetProcessHeap () returned 0x640000 [0225.530] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xaf8) returned 0x6683e0 [0225.530] memcpy (in: _Dst=0x6683e0, _Src=0x667928, _Size=0xab0 | out: _Dst=0x6683e0) returned 0x6683e0 [0225.530] GetProcessHeap () returned 0x640000 [0225.531] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x667928) returned 1 [0225.531] RegEnumValueW (in: hKey=0xc4, dwIndex=0xc, lpValueName=0x646748, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8 | out: lpValueName="rpc", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8) returned 0x0 [0225.531] _wcsicmp (_String1="rpcnsh.dll", _String2="ipxmontr.dll") returned 9 [0225.531] _wcsicmp (_String1="rpcnsh.dll", _String2="ipxpromn.dll") returned 9 [0225.531] GetProcessHeap () returned 0x640000 [0225.531] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x118) returned 0x663aa8 [0225.531] memcpy (in: _Dst=0x663aa8, _Src=0x663998, _Size=0x104 | out: _Dst=0x663aa8) returned 0x663aa8 [0225.531] GetProcessHeap () returned 0x640000 [0225.531] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x8) returned 0x658700 [0225.531] GetProcessHeap () returned 0x640000 [0225.531] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x16) returned 0x658cc0 [0225.531] _wcsupr (in: _String="rpcnsh.dll" | out: _String="RPCNSH.DLL") returned="RPCNSH.DLL" [0225.531] GetProcessHeap () returned 0x640000 [0225.531] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x663998) returned 1 [0225.532] LoadLibraryExW (lpLibFileName="RPCNSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e940000 [0225.535] GetProcAddress (hModule=0x6e940000, lpProcName="InitHelperDll") returned 0x6e942a80 [0225.535] InitHelperDll () returned 0x0 [0225.535] RegisterHelper () returned 0x0 [0225.535] GetProcessHeap () returned 0x640000 [0225.535] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xb40) returned 0x666eb8 [0225.535] memcpy (in: _Dst=0x666eb8, _Src=0x6683e0, _Size=0xaf8 | out: _Dst=0x666eb8) returned 0x666eb8 [0225.535] GetProcessHeap () returned 0x640000 [0225.536] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6683e0) returned 1 [0225.536] RegisterHelper () returned 0x0 [0225.536] GetProcessHeap () returned 0x640000 [0225.536] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xb88) returned 0x667a00 [0225.536] memcpy (in: _Dst=0x667a00, _Src=0x666eb8, _Size=0xb40 | out: _Dst=0x667a00) returned 0x667a00 [0225.536] GetProcessHeap () returned 0x640000 [0225.536] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x666eb8) returned 1 [0225.536] RegEnumValueW (in: hKey=0xc4, dwIndex=0xd, lpValueName=0x646748, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8 | out: lpValueName="whhelper", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8) returned 0x0 [0225.536] _wcsicmp (_String1="whhelper.dll", _String2="ipxmontr.dll") returned 14 [0225.536] _wcsicmp (_String1="whhelper.dll", _String2="ipxpromn.dll") returned 14 [0225.536] GetProcessHeap () returned 0x640000 [0225.536] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x12c) returned 0x65ea78 [0225.536] memcpy (in: _Dst=0x65ea78, _Src=0x663aa8, _Size=0x118 | out: _Dst=0x65ea78) returned 0x65ea78 [0225.536] GetProcessHeap () returned 0x640000 [0225.536] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x12) returned 0x658b80 [0225.536] GetProcessHeap () returned 0x640000 [0225.536] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x1a) returned 0x662ce0 [0225.537] _wcsupr (in: _String="whhelper.dll" | out: _String="WHHELPER.DLL") returned="WHHELPER.DLL" [0225.537] GetProcessHeap () returned 0x640000 [0225.537] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x663aa8) returned 1 [0225.537] LoadLibraryExW (lpLibFileName="WHHELPER.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e930000 [0225.547] GetProcAddress (hModule=0x6e930000, lpProcName="InitHelperDll") returned 0x6e9317b0 [0225.547] InitHelperDll () returned 0x0 [0225.547] RegisterHelper () returned 0x0 [0225.547] GetProcessHeap () returned 0x640000 [0225.547] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xbd0) returned 0x668590 [0225.547] memcpy (in: _Dst=0x668590, _Src=0x667a00, _Size=0xb88 | out: _Dst=0x668590) returned 0x668590 [0225.547] GetProcessHeap () returned 0x640000 [0225.547] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x667a00) returned 1 [0225.547] RegEnumValueW (in: hKey=0xc4, dwIndex=0xe, lpValueName=0x646748, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8 | out: lpValueName="wlancfg", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8) returned 0x0 [0225.548] _wcsicmp (_String1="wlancfg.dll", _String2="ipxmontr.dll") returned 14 [0225.548] _wcsicmp (_String1="wlancfg.dll", _String2="ipxpromn.dll") returned 14 [0225.548] GetProcessHeap () returned 0x640000 [0225.548] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x140) returned 0x663998 [0225.548] memcpy (in: _Dst=0x663998, _Src=0x65ea78, _Size=0x12c | out: _Dst=0x663998) returned 0x663998 [0225.548] GetProcessHeap () returned 0x640000 [0225.548] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x10) returned 0x663680 [0225.548] GetProcessHeap () returned 0x640000 [0225.548] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x18) returned 0x658c40 [0225.548] _wcsupr (in: _String="wlancfg.dll" | out: _String="WLANCFG.DLL") returned="WLANCFG.DLL" [0225.548] GetProcessHeap () returned 0x640000 [0225.548] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x65ea78) returned 1 [0225.548] LoadLibraryExW (lpLibFileName="WLANCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e850000 [0225.574] GetProcAddress (hModule=0x6e850000, lpProcName="InitHelperDll") returned 0x6e859fb0 [0225.574] InitHelperDll () returned 0x0 [0225.574] RegisterHelper () returned 0x0 [0225.574] GetProcessHeap () returned 0x640000 [0225.574] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc18) returned 0x669168 [0225.574] memcpy (in: _Dst=0x669168, _Src=0x668590, _Size=0xbd0 | out: _Dst=0x669168) returned 0x669168 [0225.574] GetProcessHeap () returned 0x640000 [0225.574] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x668590) returned 1 [0225.574] RegEnumValueW (in: hKey=0xc4, dwIndex=0xf, lpValueName=0x646748, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8 | out: lpValueName="wshelper", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8) returned 0x0 [0225.575] _wcsicmp (_String1="wshelper.dll", _String2="ipxmontr.dll") returned 14 [0225.575] _wcsicmp (_String1="wshelper.dll", _String2="ipxpromn.dll") returned 14 [0225.575] GetProcessHeap () returned 0x640000 [0225.575] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x154) returned 0x663ae0 [0225.575] memcpy (in: _Dst=0x663ae0, _Src=0x663998, _Size=0x140 | out: _Dst=0x663ae0) returned 0x663ae0 [0225.575] GetProcessHeap () returned 0x640000 [0225.575] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x12) returned 0x658c60 [0225.575] GetProcessHeap () returned 0x640000 [0225.575] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x1a) returned 0x662ad8 [0225.575] _wcsupr (in: _String="wshelper.dll" | out: _String="WSHELPER.DLL") returned="WSHELPER.DLL" [0225.575] GetProcessHeap () returned 0x640000 [0225.575] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x663998) returned 1 [0225.576] LoadLibraryExW (lpLibFileName="WSHELPER.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e790000 [0225.587] GetProcAddress (hModule=0x6e790000, lpProcName="InitHelperDll") returned 0x6e7916c0 [0225.587] InitHelperDll () returned 0x0 [0225.587] RegisterHelper () returned 0x0 [0225.587] GetProcessHeap () returned 0x640000 [0225.587] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc60) returned 0x669d88 [0225.587] memcpy (in: _Dst=0x669d88, _Src=0x669168, _Size=0xc18 | out: _Dst=0x669d88) returned 0x669d88 [0225.587] GetProcessHeap () returned 0x640000 [0225.588] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x669168) returned 1 [0225.588] RegEnumValueW (in: hKey=0xc4, dwIndex=0x10, lpValueName=0x646748, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8 | out: lpValueName="peerdistsh", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x647218, lpcbData=0x197ad8) returned 0x0 [0225.588] _wcsicmp (_String1="peerdistsh.dll", _String2="ipxmontr.dll") returned 7 [0225.588] _wcsicmp (_String1="peerdistsh.dll", _String2="ipxpromn.dll") returned 7 [0225.588] GetProcessHeap () returned 0x640000 [0225.588] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x168) returned 0x65f108 [0225.588] memcpy (in: _Dst=0x65f108, _Src=0x663ae0, _Size=0x154 | out: _Dst=0x65f108) returned 0x65f108 [0225.588] GetProcessHeap () returned 0x640000 [0225.588] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x16) returned 0x667488 [0225.588] GetProcessHeap () returned 0x640000 [0225.588] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x1e) returned 0x662b00 [0225.588] _wcsupr (in: _String="peerdistsh.dll" | out: _String="PEERDISTSH.DLL") returned="PEERDISTSH.DLL" [0225.588] GetProcessHeap () returned 0x640000 [0225.588] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x663ae0) returned 1 [0225.588] LoadLibraryExW (lpLibFileName="PEERDISTSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e690000 [0225.597] GetProcAddress (hModule=0x6e690000, lpProcName="InitHelperDll") returned 0x6e6ae4d0 [0225.597] InitHelperDll () returned 0x0 [0225.597] RegisterHelper () returned 0x0 [0225.597] GetProcessHeap () returned 0x640000 [0225.598] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xca8) returned 0x668ed8 [0225.598] memcpy (in: _Dst=0x668ed8, _Src=0x669d88, _Size=0xc60 | out: _Dst=0x668ed8) returned 0x668ed8 [0225.598] GetProcessHeap () returned 0x640000 [0225.598] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x669d88) returned 1 [0225.598] RegisterHelper () returned 0x0 [0225.598] GetProcessHeap () returned 0x640000 [0225.598] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xcf0) returned 0x669b88 [0225.598] memcpy (in: _Dst=0x669b88, _Src=0x668ed8, _Size=0xca8 | out: _Dst=0x669b88) returned 0x669b88 [0225.598] GetProcessHeap () returned 0x640000 [0225.599] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x668ed8) returned 1 [0225.599] RegCloseKey (hKey=0xc4) returned 0x0 [0225.599] GetProcessHeap () returned 0x640000 [0225.599] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x646748) returned 1 [0225.599] GetProcessHeap () returned 0x640000 [0225.599] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x647218) returned 1 [0225.601] GetProcessHeap () returned 0x640000 [0225.601] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x48) returned 0x6576b0 [0225.601] memcpy (in: _Dst=0x6576b0, _Src=0x197a50, _Size=0x48 | out: _Dst=0x6576b0) returned 0x6576b0 [0225.601] GetProcessHeap () returned 0x640000 [0225.601] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x0) returned 1 [0225.601] RegisterContext () returned 0x0 [0225.601] GetProcessHeap () returned 0x640000 [0225.601] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x48) returned 0x657700 [0225.601] memcpy (in: _Dst=0x657700, _Src=0x197a48, _Size=0x48 | out: _Dst=0x657700) returned 0x657700 [0225.601] GetProcessHeap () returned 0x640000 [0225.601] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x0) returned 1 [0225.601] RegisterContext () returned 0x0 [0225.603] _wcsicmp (_String1="ras", _String2="interface") returned 9 [0225.603] _wcsicmp (_String1="ras", _String2="interface") returned 9 [0225.603] GetProcessHeap () returned 0x640000 [0225.603] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x90) returned 0x666398 [0225.603] memcpy (in: _Dst=0x666398, _Src=0x657700, _Size=0x48 | out: _Dst=0x666398) returned 0x666398 [0225.603] memcpy (in: _Dst=0x6663e0, _Src=0x197a50, _Size=0x48 | out: _Dst=0x6663e0) returned 0x6663e0 [0225.603] GetProcessHeap () returned 0x640000 [0225.604] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x657700) returned 1 [0225.634] RegisterContext () returned 0x0 [0225.636] GetProcessHeap () returned 0x640000 [0225.636] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x48) returned 0x657d40 [0225.636] memcpy (in: _Dst=0x657d40, _Src=0x197a50, _Size=0x48 | out: _Dst=0x657d40) returned 0x657d40 [0225.636] GetProcessHeap () returned 0x640000 [0225.636] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x0) returned 1 [0225.636] RegisterContext () returned 0x0 [0225.637] _wcsicmp (_String1="ipv6", _String2="ip") returned 118 [0225.637] _wcsicmp (_String1="ipv6", _String2="ip") returned 118 [0225.637] GetProcessHeap () returned 0x640000 [0225.637] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x90) returned 0x666a20 [0225.637] memcpy (in: _Dst=0x666a20, _Src=0x657d40, _Size=0x48 | out: _Dst=0x666a20) returned 0x666a20 [0225.637] memcpy (in: _Dst=0x666a68, _Src=0x197a50, _Size=0x48 | out: _Dst=0x666a68) returned 0x666a68 [0225.637] GetProcessHeap () returned 0x640000 [0225.637] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x657d40) returned 1 [0225.638] RegisterContext () returned 0x0 [0225.638] _wcsicmp (_String1="aaaa", _String2="ip") returned -8 [0225.638] _wcsicmp (_String1="aaaa", _String2="ipv6") returned -8 [0225.638] _wcsicmp (_String1="aaaa", _String2="ip") returned -8 [0225.639] GetProcessHeap () returned 0x640000 [0225.639] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xd8) returned 0x669330 [0225.639] memcpy (in: _Dst=0x669330, _Src=0x197a50, _Size=0x48 | out: _Dst=0x669330) returned 0x669330 [0225.639] memcpy (in: _Dst=0x669378, _Src=0x666a20, _Size=0x90 | out: _Dst=0x669378) returned 0x669378 [0225.639] GetProcessHeap () returned 0x640000 [0225.639] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x666a20) returned 1 [0225.639] RegisterContext () returned 0x0 [0225.640] _wcsicmp (_String1="diagnostics", _String2="aaaa") returned 3 [0225.640] _wcsicmp (_String1="diagnostics", _String2="ip") returned -5 [0225.640] _wcsicmp (_String1="diagnostics", _String2="ipv6") returned -5 [0225.640] _wcsicmp (_String1="diagnostics", _String2="aaaa") returned 3 [0225.640] _wcsicmp (_String1="diagnostics", _String2="ip") returned -5 [0225.640] GetProcessHeap () returned 0x640000 [0225.640] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x120) returned 0x669410 [0225.640] memcpy (in: _Dst=0x669410, _Src=0x669330, _Size=0x48 | out: _Dst=0x669410) returned 0x669410 [0225.640] memcpy (in: _Dst=0x669458, _Src=0x197a50, _Size=0x48 | out: _Dst=0x669458) returned 0x669458 [0225.640] memcpy (in: _Dst=0x6694a0, _Src=0x669378, _Size=0x90 | out: _Dst=0x6694a0) returned 0x6694a0 [0225.640] GetProcessHeap () returned 0x640000 [0225.641] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x669330) returned 1 [0225.644] RegisterContext () returned 0x0 [0225.644] _wcsicmp (_String1="advfirewall", _String2="interface") returned -8 [0225.644] _wcsicmp (_String1="advfirewall", _String2="ras") returned -17 [0225.644] _wcsicmp (_String1="advfirewall", _String2="interface") returned -8 [0225.644] GetProcessHeap () returned 0x640000 [0225.644] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xd8) returned 0x669330 [0225.644] memcpy (in: _Dst=0x669330, _Src=0x197a48, _Size=0x48 | out: _Dst=0x669330) returned 0x669330 [0225.644] memcpy (in: _Dst=0x669378, _Src=0x666398, _Size=0x90 | out: _Dst=0x669378) returned 0x669378 [0225.644] GetProcessHeap () returned 0x640000 [0225.645] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x666398) returned 1 [0225.645] RegisterContext () returned 0x0 [0225.645] GetProcessHeap () returned 0x640000 [0225.645] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x48) returned 0x657930 [0225.645] memcpy (in: _Dst=0x657930, _Src=0x197a48, _Size=0x48 | out: _Dst=0x657930) returned 0x657930 [0225.645] GetProcessHeap () returned 0x640000 [0225.645] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x0) returned 1 [0225.645] RegisterContext () returned 0x0 [0225.645] _wcsicmp (_String1="firewall", _String2="consec") returned 3 [0225.645] _wcsicmp (_String1="firewall", _String2="consec") returned 3 [0225.645] GetProcessHeap () returned 0x640000 [0225.645] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x90) returned 0x666b50 [0225.645] memcpy (in: _Dst=0x666b50, _Src=0x657930, _Size=0x48 | out: _Dst=0x666b50) returned 0x666b50 [0225.645] memcpy (in: _Dst=0x666b98, _Src=0x197a48, _Size=0x48 | out: _Dst=0x666b98) returned 0x666b98 [0225.645] GetProcessHeap () returned 0x640000 [0225.646] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x657930) returned 1 [0225.646] RegisterContext () returned 0x0 [0225.646] _wcsicmp (_String1="monitor", _String2="consec") returned 10 [0225.646] _wcsicmp (_String1="monitor", _String2="firewall") returned 7 [0225.646] _wcsicmp (_String1="monitor", _String2="consec") returned 10 [0225.646] _wcsicmp (_String1="monitor", _String2="firewall") returned 7 [0225.646] GetProcessHeap () returned 0x640000 [0225.646] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xd8) returned 0x669538 [0225.646] memcpy (in: _Dst=0x669538, _Src=0x666b50, _Size=0x90 | out: _Dst=0x669538) returned 0x669538 [0225.646] memcpy (in: _Dst=0x6695c8, _Src=0x197a48, _Size=0x48 | out: _Dst=0x6695c8) returned 0x6695c8 [0225.646] GetProcessHeap () returned 0x640000 [0225.647] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x666b50) returned 1 [0225.648] RegisterContext () returned 0x0 [0225.648] _wcsicmp (_String1="mainmode", _String2="consec") returned 10 [0225.648] _wcsicmp (_String1="mainmode", _String2="firewall") returned 7 [0225.648] _wcsicmp (_String1="mainmode", _String2="monitor") returned -14 [0225.649] _wcsicmp (_String1="mainmode", _String2="consec") returned 10 [0225.649] _wcsicmp (_String1="mainmode", _String2="firewall") returned 7 [0225.649] _wcsicmp (_String1="mainmode", _String2="monitor") returned -14 [0225.649] GetProcessHeap () returned 0x640000 [0225.649] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x120) returned 0x669618 [0225.649] memcpy (in: _Dst=0x669618, _Src=0x669538, _Size=0x90 | out: _Dst=0x669618) returned 0x669618 [0225.649] memcpy (in: _Dst=0x6696a8, _Src=0x197a48, _Size=0x48 | out: _Dst=0x6696a8) returned 0x6696a8 [0225.649] memcpy (in: _Dst=0x6696f0, _Src=0x6695c8, _Size=0x48 | out: _Dst=0x6696f0) returned 0x6696f0 [0225.649] GetProcessHeap () returned 0x640000 [0225.649] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x669538) returned 1 [0225.649] RegisterContext () returned 0x0 [0225.649] _wcsicmp (_String1="dhcpclient", _String2="advfirewall") returned 3 [0225.649] _wcsicmp (_String1="dhcpclient", _String2="interface") returned -5 [0225.649] _wcsicmp (_String1="dhcpclient", _String2="ras") returned -14 [0225.649] _wcsicmp (_String1="dhcpclient", _String2="advfirewall") returned 3 [0225.649] _wcsicmp (_String1="dhcpclient", _String2="interface") returned -5 [0225.649] GetProcessHeap () returned 0x640000 [0225.649] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x120) returned 0x669740 [0225.650] memcpy (in: _Dst=0x669740, _Src=0x669330, _Size=0x48 | out: _Dst=0x669740) returned 0x669740 [0225.650] memcpy (in: _Dst=0x669788, _Src=0x197a50, _Size=0x48 | out: _Dst=0x669788) returned 0x669788 [0225.650] memcpy (in: _Dst=0x6697d0, _Src=0x669378, _Size=0x90 | out: _Dst=0x6697d0) returned 0x6697d0 [0225.650] GetProcessHeap () returned 0x640000 [0225.650] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x669330) returned 1 [0225.650] RegisterContext () returned 0x0 [0225.650] _wcsicmp (_String1="lan", _String2="advfirewall") returned 11 [0225.650] _wcsicmp (_String1="lan", _String2="dhcpclient") returned 8 [0225.650] _wcsicmp (_String1="lan", _String2="interface") returned 3 [0225.650] _wcsicmp (_String1="lan", _String2="ras") returned -6 [0225.650] _wcsicmp (_String1="lan", _String2="advfirewall") returned 11 [0225.650] _wcsicmp (_String1="lan", _String2="dhcpclient") returned 8 [0225.650] _wcsicmp (_String1="lan", _String2="interface") returned 3 [0225.650] _wcsicmp (_String1="lan", _String2="ras") returned -6 [0225.650] GetProcessHeap () returned 0x640000 [0225.650] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x168) returned 0x669868 [0225.650] memcpy (in: _Dst=0x669868, _Src=0x669740, _Size=0xd8 | out: _Dst=0x669868) returned 0x669868 [0225.650] memcpy (in: _Dst=0x669940, _Src=0x197a50, _Size=0x48 | out: _Dst=0x669940) returned 0x669940 [0225.650] memcpy (in: _Dst=0x669988, _Src=0x669818, _Size=0x48 | out: _Dst=0x669988) returned 0x669988 [0225.651] GetProcessHeap () returned 0x640000 [0225.651] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x669740) returned 1 [0225.653] RegisterContext () returned 0x0 [0225.653] _wcsicmp (_String1="firewall", _String2="advfirewall") returned 5 [0225.653] _wcsicmp (_String1="firewall", _String2="dhcpclient") returned 2 [0225.653] _wcsicmp (_String1="firewall", _String2="interface") returned -3 [0225.653] _wcsicmp (_String1="firewall", _String2="lan") returned -6 [0225.653] _wcsicmp (_String1="firewall", _String2="ras") returned -12 [0225.653] _wcsicmp (_String1="firewall", _String2="advfirewall") returned 5 [0225.653] _wcsicmp (_String1="firewall", _String2="dhcpclient") returned 2 [0225.653] _wcsicmp (_String1="firewall", _String2="interface") returned -3 [0225.653] GetProcessHeap () returned 0x640000 [0225.653] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x1b0) returned 0x670788 [0225.653] memcpy (in: _Dst=0x670788, _Src=0x669868, _Size=0x90 | out: _Dst=0x670788) returned 0x670788 [0225.653] memcpy (in: _Dst=0x670818, _Src=0x197a48, _Size=0x48 | out: _Dst=0x670818) returned 0x670818 [0225.653] memcpy (in: _Dst=0x670860, _Src=0x6698f8, _Size=0xd8 | out: _Dst=0x670860) returned 0x670860 [0225.653] GetProcessHeap () returned 0x640000 [0225.654] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x669868) returned 1 [0225.654] RegisterContext () returned 0x0 [0225.654] _wcsicmp (_String1="bridge", _String2="advfirewall") returned 1 [0225.654] _wcsicmp (_String1="bridge", _String2="dhcpclient") returned -2 [0225.654] _wcsicmp (_String1="bridge", _String2="firewall") returned -4 [0225.654] _wcsicmp (_String1="bridge", _String2="interface") returned -7 [0225.654] _wcsicmp (_String1="bridge", _String2="lan") returned -10 [0225.654] _wcsicmp (_String1="bridge", _String2="ras") returned -16 [0225.654] _wcsicmp (_String1="bridge", _String2="advfirewall") returned 1 [0225.654] _wcsicmp (_String1="bridge", _String2="dhcpclient") returned -2 [0225.654] GetProcessHeap () returned 0x640000 [0225.654] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x1f8) returned 0x669740 [0225.654] memcpy (in: _Dst=0x669740, _Src=0x670788, _Size=0x48 | out: _Dst=0x669740) returned 0x669740 [0225.654] memcpy (in: _Dst=0x669788, _Src=0x197a50, _Size=0x48 | out: _Dst=0x669788) returned 0x669788 [0225.654] memcpy (in: _Dst=0x6697d0, _Src=0x6707d0, _Size=0x168 | out: _Dst=0x6697d0) returned 0x6697d0 [0225.654] GetProcessHeap () returned 0x640000 [0225.654] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x670788) returned 1 [0225.655] RegisterContext () returned 0x0 [0225.655] _wcsicmp (_String1="netio", _String2="advfirewall") returned 13 [0225.656] _wcsicmp (_String1="netio", _String2="bridge") returned 12 [0225.656] _wcsicmp (_String1="netio", _String2="dhcpclient") returned 10 [0225.656] _wcsicmp (_String1="netio", _String2="firewall") returned 8 [0225.657] _wcsicmp (_String1="netio", _String2="interface") returned 5 [0225.657] _wcsicmp (_String1="netio", _String2="lan") returned 2 [0225.657] _wcsicmp (_String1="netio", _String2="ras") returned -4 [0225.657] _wcsicmp (_String1="netio", _String2="advfirewall") returned 13 [0225.657] _wcsicmp (_String1="netio", _String2="bridge") returned 12 [0225.657] _wcsicmp (_String1="netio", _String2="dhcpclient") returned 10 [0225.657] _wcsicmp (_String1="netio", _String2="firewall") returned 8 [0225.657] _wcsicmp (_String1="netio", _String2="interface") returned 5 [0225.657] _wcsicmp (_String1="netio", _String2="lan") returned 2 [0225.657] _wcsicmp (_String1="netio", _String2="ras") returned -4 [0225.657] GetProcessHeap () returned 0x640000 [0225.657] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x240) returned 0x669940 [0225.657] memcpy (in: _Dst=0x669940, _Src=0x669740, _Size=0x1b0 | out: _Dst=0x669940) returned 0x669940 [0225.657] memcpy (in: _Dst=0x669af0, _Src=0x197a4c, _Size=0x48 | out: _Dst=0x669af0) returned 0x669af0 [0225.657] memcpy (in: _Dst=0x669b38, _Src=0x6698f0, _Size=0x48 | out: _Dst=0x669b38) returned 0x669b38 [0225.657] GetProcessHeap () returned 0x640000 [0225.657] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x669740) returned 1 [0225.657] RegisterContext () returned 0x0 [0225.658] _wcsicmp (_String1="dnsclient", _String2="advfirewall") returned 3 [0225.658] _wcsicmp (_String1="dnsclient", _String2="bridge") returned 2 [0225.658] _wcsicmp (_String1="dnsclient", _String2="dhcpclient") returned 6 [0225.658] _wcsicmp (_String1="dnsclient", _String2="firewall") returned -2 [0225.658] _wcsicmp (_String1="dnsclient", _String2="interface") returned -5 [0225.658] _wcsicmp (_String1="dnsclient", _String2="lan") returned -8 [0225.658] _wcsicmp (_String1="dnsclient", _String2="netio") returned -10 [0225.658] _wcsicmp (_String1="dnsclient", _String2="ras") returned -14 [0225.658] _wcsicmp (_String1="dnsclient", _String2="advfirewall") returned 3 [0225.658] _wcsicmp (_String1="dnsclient", _String2="bridge") returned 2 [0225.658] _wcsicmp (_String1="dnsclient", _String2="dhcpclient") returned 6 [0225.658] _wcsicmp (_String1="dnsclient", _String2="firewall") returned -2 [0225.658] GetProcessHeap () returned 0x640000 [0225.658] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x288) returned 0x670788 [0225.658] memcpy (in: _Dst=0x670788, _Src=0x669940, _Size=0xd8 | out: _Dst=0x670788) returned 0x670788 [0225.658] memcpy (in: _Dst=0x670860, _Src=0x197a4c, _Size=0x48 | out: _Dst=0x670860) returned 0x670860 [0225.658] memcpy (in: _Dst=0x6708a8, _Src=0x669a18, _Size=0x168 | out: _Dst=0x6708a8) returned 0x6708a8 [0225.658] GetProcessHeap () returned 0x640000 [0225.658] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x669940) returned 1 [0225.658] RegisterContext () returned 0x0 [0225.658] _wcsicmp (_String1="namespace", _String2="advfirewall") returned 13 [0225.659] _wcsicmp (_String1="namespace", _String2="bridge") returned 12 [0225.659] _wcsicmp (_String1="namespace", _String2="dhcpclient") returned 10 [0225.659] _wcsicmp (_String1="namespace", _String2="dnsclient") returned 10 [0225.659] _wcsicmp (_String1="namespace", _String2="firewall") returned 8 [0225.659] _wcsicmp (_String1="namespace", _String2="interface") returned 5 [0225.659] _wcsicmp (_String1="namespace", _String2="lan") returned 2 [0225.659] _wcsicmp (_String1="namespace", _String2="netio") returned -4 [0225.659] _wcsicmp (_String1="namespace", _String2="ras") returned -4 [0225.659] _wcsicmp (_String1="namespace", _String2="advfirewall") returned 13 [0225.659] _wcsicmp (_String1="namespace", _String2="bridge") returned 12 [0225.659] _wcsicmp (_String1="namespace", _String2="dhcpclient") returned 10 [0225.659] _wcsicmp (_String1="namespace", _String2="dnsclient") returned 10 [0225.659] _wcsicmp (_String1="namespace", _String2="firewall") returned 8 [0225.659] _wcsicmp (_String1="namespace", _String2="interface") returned 5 [0225.659] _wcsicmp (_String1="namespace", _String2="lan") returned 2 [0225.659] _wcsicmp (_String1="namespace", _String2="netio") returned -4 [0225.659] GetProcessHeap () returned 0x640000 [0225.659] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x2d0) returned 0x669740 [0225.659] memcpy (in: _Dst=0x669740, _Src=0x670788, _Size=0x1f8 | out: _Dst=0x669740) returned 0x669740 [0225.659] memcpy (in: _Dst=0x669938, _Src=0x197a4c, _Size=0x48 | out: _Dst=0x669938) returned 0x669938 [0225.659] memcpy (in: _Dst=0x669980, _Src=0x670980, _Size=0x90 | out: _Dst=0x669980) returned 0x669980 [0225.659] GetProcessHeap () returned 0x640000 [0225.659] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x670788) returned 1 [0225.660] RegisterContext () returned 0x0 [0225.660] GetProcessHeap () returned 0x640000 [0225.660] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x48) returned 0x657a20 [0225.660] memcpy (in: _Dst=0x657a20, _Src=0x197a4c, _Size=0x48 | out: _Dst=0x657a20) returned 0x657a20 [0225.660] GetProcessHeap () returned 0x640000 [0225.660] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x0) returned 1 [0225.660] RegisterContext () returned 0x0 [0225.660] _wcsicmp (_String1="ipv6", _String2="ipv4") returned 2 [0225.660] _wcsicmp (_String1="ipv6", _String2="ipv4") returned 2 [0225.660] GetProcessHeap () returned 0x640000 [0225.660] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x90) returned 0x666430 [0225.660] memcpy (in: _Dst=0x666430, _Src=0x657a20, _Size=0x48 | out: _Dst=0x666430) returned 0x666430 [0225.660] memcpy (in: _Dst=0x666478, _Src=0x197a4c, _Size=0x48 | out: _Dst=0x666478) returned 0x666478 [0225.660] GetProcessHeap () returned 0x640000 [0225.660] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x657a20) returned 1 [0225.661] RegisterContext () returned 0x0 [0225.661] _wcsicmp (_String1="6to4", _String2="ipv4") returned -51 [0225.661] _wcsicmp (_String1="6to4", _String2="ipv6") returned -51 [0225.661] _wcsicmp (_String1="6to4", _String2="ipv4") returned -51 [0225.661] GetProcessHeap () returned 0x640000 [0225.661] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xd8) returned 0x669330 [0225.661] memcpy (in: _Dst=0x669330, _Src=0x197a20, _Size=0x48 | out: _Dst=0x669330) returned 0x669330 [0225.661] memcpy (in: _Dst=0x669378, _Src=0x666430, _Size=0x90 | out: _Dst=0x669378) returned 0x669378 [0225.661] GetProcessHeap () returned 0x640000 [0225.661] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x666430) returned 1 [0225.661] RegisterContext () returned 0x0 [0225.661] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0225.661] _wcsicmp (_String1="isatap", _String2="ipv4") returned 3 [0225.661] _wcsicmp (_String1="isatap", _String2="ipv6") returned 3 [0225.661] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0225.661] _wcsicmp (_String1="isatap", _String2="ipv4") returned 3 [0225.661] _wcsicmp (_String1="isatap", _String2="ipv6") returned 3 [0225.661] GetProcessHeap () returned 0x640000 [0225.661] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x120) returned 0x669a18 [0225.662] memcpy (in: _Dst=0x669a18, _Src=0x669330, _Size=0xd8 | out: _Dst=0x669a18) returned 0x669a18 [0225.662] memcpy (in: _Dst=0x669af0, _Src=0x197a20, _Size=0x48 | out: _Dst=0x669af0) returned 0x669af0 [0225.662] GetProcessHeap () returned 0x640000 [0225.662] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x669330) returned 1 [0225.662] RegisterContext () returned 0x0 [0225.662] _wcsicmp (_String1="teredo", _String2="6to4") returned 62 [0225.662] _wcsicmp (_String1="teredo", _String2="ipv4") returned 11 [0225.662] _wcsicmp (_String1="teredo", _String2="ipv6") returned 11 [0225.662] _wcsicmp (_String1="teredo", _String2="isatap") returned 11 [0225.662] _wcsicmp (_String1="teredo", _String2="6to4") returned 62 [0225.662] _wcsicmp (_String1="teredo", _String2="ipv4") returned 11 [0225.662] _wcsicmp (_String1="teredo", _String2="ipv6") returned 11 [0225.662] _wcsicmp (_String1="teredo", _String2="isatap") returned 11 [0225.662] GetProcessHeap () returned 0x640000 [0225.662] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x168) returned 0x670788 [0225.662] memcpy (in: _Dst=0x670788, _Src=0x669a18, _Size=0x120 | out: _Dst=0x670788) returned 0x670788 [0225.662] memcpy (in: _Dst=0x6708a8, _Src=0x197a30, _Size=0x48 | out: _Dst=0x6708a8) returned 0x6708a8 [0225.662] GetProcessHeap () returned 0x640000 [0225.663] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x669a18) returned 1 [0225.663] RegisterContext () returned 0x0 [0225.663] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0225.663] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0225.663] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0225.663] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0225.663] _wcsicmp (_String1="portproxy", _String2="teredo") returned -4 [0225.663] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0225.663] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0225.663] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0225.663] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0225.663] _wcsicmp (_String1="portproxy", _String2="teredo") returned -4 [0225.663] GetProcessHeap () returned 0x640000 [0225.663] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x1b0) returned 0x6708f8 [0225.663] memcpy (in: _Dst=0x6708f8, _Src=0x670788, _Size=0x120 | out: _Dst=0x6708f8) returned 0x6708f8 [0225.663] memcpy (in: _Dst=0x670a18, _Src=0x197a20, _Size=0x48 | out: _Dst=0x670a18) returned 0x670a18 [0225.663] memcpy (in: _Dst=0x670a60, _Src=0x6708a8, _Size=0x48 | out: _Dst=0x670a60) returned 0x670a60 [0225.663] GetProcessHeap () returned 0x640000 [0225.664] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x670788) returned 1 [0225.664] RegisterContext () returned 0x0 [0225.664] GetProcessHeap () returned 0x640000 [0225.664] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x48) returned 0x657ac0 [0225.664] memcpy (in: _Dst=0x657ac0, _Src=0x197a20, _Size=0x48 | out: _Dst=0x657ac0) returned 0x657ac0 [0225.665] GetProcessHeap () returned 0x640000 [0225.665] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x0) returned 1 [0225.665] RegisterContext () returned 0x0 [0225.665] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0225.665] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0225.665] GetProcessHeap () returned 0x640000 [0225.665] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x90) returned 0x666690 [0225.665] memcpy (in: _Dst=0x666690, _Src=0x657ac0, _Size=0x48 | out: _Dst=0x666690) returned 0x666690 [0225.665] memcpy (in: _Dst=0x6666d8, _Src=0x197a20, _Size=0x48 | out: _Dst=0x6666d8) returned 0x6666d8 [0225.665] GetProcessHeap () returned 0x640000 [0225.665] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x657ac0) returned 1 [0225.665] RegisterContext () returned 0x0 [0225.665] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0225.665] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0225.665] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0225.665] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0225.665] _wcsicmp (_String1="portproxy", _String2="portproxy") returned 0 [0225.665] memcpy (in: _Dst=0x670a18, _Src=0x197a20, _Size=0x48 | out: _Dst=0x670a18) returned 0x670a18 [0225.666] RegisterContext () returned 0x0 [0225.666] _wcsicmp (_String1="httpstunnel", _String2="6to4") returned 50 [0225.666] _wcsicmp (_String1="httpstunnel", _String2="ipv4") returned -1 [0225.666] _wcsicmp (_String1="httpstunnel", _String2="ipv6") returned -1 [0225.666] _wcsicmp (_String1="httpstunnel", _String2="isatap") returned -1 [0225.666] _wcsicmp (_String1="httpstunnel", _String2="portproxy") returned -8 [0225.666] _wcsicmp (_String1="httpstunnel", _String2="teredo") returned -12 [0225.666] _wcsicmp (_String1="httpstunnel", _String2="6to4") returned 50 [0225.666] _wcsicmp (_String1="httpstunnel", _String2="ipv4") returned -1 [0225.666] GetProcessHeap () returned 0x640000 [0225.666] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x1f8) returned 0x670ab0 [0225.666] memcpy (in: _Dst=0x670ab0, _Src=0x6708f8, _Size=0x48 | out: _Dst=0x670ab0) returned 0x670ab0 [0225.666] memcpy (in: _Dst=0x670af8, _Src=0x197a4c, _Size=0x48 | out: _Dst=0x670af8) returned 0x670af8 [0225.666] memcpy (in: _Dst=0x670b40, _Src=0x670940, _Size=0x168 | out: _Dst=0x670b40) returned 0x670b40 [0225.666] GetProcessHeap () returned 0x640000 [0225.666] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6708f8) returned 1 [0225.666] RegisterContext () returned 0x0 [0225.667] _wcsicmp (_String1="tcp", _String2="6to4") returned 62 [0225.667] _wcsicmp (_String1="tcp", _String2="httpstunnel") returned 12 [0225.667] _wcsicmp (_String1="tcp", _String2="ipv4") returned 11 [0225.667] _wcsicmp (_String1="tcp", _String2="ipv6") returned 11 [0225.667] _wcsicmp (_String1="tcp", _String2="isatap") returned 11 [0225.667] _wcsicmp (_String1="tcp", _String2="portproxy") returned 4 [0225.667] _wcsicmp (_String1="tcp", _String2="teredo") returned -2 [0225.667] _wcsicmp (_String1="tcp", _String2="6to4") returned 62 [0225.667] _wcsicmp (_String1="tcp", _String2="httpstunnel") returned 12 [0225.667] _wcsicmp (_String1="tcp", _String2="ipv4") returned 11 [0225.667] _wcsicmp (_String1="tcp", _String2="ipv6") returned 11 [0225.667] _wcsicmp (_String1="tcp", _String2="isatap") returned 11 [0225.667] _wcsicmp (_String1="tcp", _String2="portproxy") returned 4 [0225.667] _wcsicmp (_String1="tcp", _String2="teredo") returned -2 [0225.667] GetProcessHeap () returned 0x640000 [0225.667] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x240) returned 0x670788 [0225.667] memcpy (in: _Dst=0x670788, _Src=0x670ab0, _Size=0x1b0 | out: _Dst=0x670788) returned 0x670788 [0225.667] memcpy (in: _Dst=0x670938, _Src=0x197a4c, _Size=0x48 | out: _Dst=0x670938) returned 0x670938 [0225.667] memcpy (in: _Dst=0x670980, _Src=0x670c60, _Size=0x48 | out: _Dst=0x670980) returned 0x670980 [0225.667] GetProcessHeap () returned 0x640000 [0225.667] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x670ab0) returned 1 [0225.668] RegisterContext () returned 0x0 [0225.668] _wcsicmp (_String1="http", _String2="advfirewall") returned 7 [0225.668] _wcsicmp (_String1="http", _String2="bridge") returned 6 [0225.668] _wcsicmp (_String1="http", _String2="dhcpclient") returned 4 [0225.668] _wcsicmp (_String1="http", _String2="dnsclient") returned 4 [0225.668] _wcsicmp (_String1="http", _String2="firewall") returned 2 [0225.668] _wcsicmp (_String1="http", _String2="interface") returned -1 [0225.668] _wcsicmp (_String1="http", _String2="lan") returned -4 [0225.668] _wcsicmp (_String1="http", _String2="namespace") returned -6 [0225.668] _wcsicmp (_String1="http", _String2="netio") returned -6 [0225.668] _wcsicmp (_String1="http", _String2="ras") returned -10 [0225.668] _wcsicmp (_String1="http", _String2="advfirewall") returned 7 [0225.668] _wcsicmp (_String1="http", _String2="bridge") returned 6 [0225.668] _wcsicmp (_String1="http", _String2="dhcpclient") returned 4 [0225.668] _wcsicmp (_String1="http", _String2="dnsclient") returned 4 [0225.668] _wcsicmp (_String1="http", _String2="firewall") returned 2 [0225.668] _wcsicmp (_String1="http", _String2="interface") returned -1 [0225.668] GetProcessHeap () returned 0x640000 [0225.668] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x318) returned 0x6709d0 [0225.668] memcpy (in: _Dst=0x6709d0, _Src=0x669740, _Size=0x168 | out: _Dst=0x6709d0) returned 0x6709d0 [0225.668] memcpy (in: _Dst=0x670b38, _Src=0x197a4c, _Size=0x48 | out: _Dst=0x670b38) returned 0x670b38 [0225.668] memcpy (in: _Dst=0x670b80, _Src=0x6698a8, _Size=0x168 | out: _Dst=0x670b80) returned 0x670b80 [0225.668] GetProcessHeap () returned 0x640000 [0225.669] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x669740) returned 1 [0225.669] RegisterContext () returned 0x0 [0225.669] _wcsicmp (_String1="ipsec", _String2="advfirewall") returned 8 [0225.669] _wcsicmp (_String1="ipsec", _String2="bridge") returned 7 [0225.669] _wcsicmp (_String1="ipsec", _String2="dhcpclient") returned 5 [0225.669] _wcsicmp (_String1="ipsec", _String2="dnsclient") returned 5 [0225.669] _wcsicmp (_String1="ipsec", _String2="firewall") returned 3 [0225.669] _wcsicmp (_String1="ipsec", _String2="http") returned 1 [0225.669] _wcsicmp (_String1="ipsec", _String2="interface") returned 2 [0225.669] _wcsicmp (_String1="ipsec", _String2="lan") returned -3 [0225.669] _wcsicmp (_String1="ipsec", _String2="namespace") returned -5 [0225.669] _wcsicmp (_String1="ipsec", _String2="netio") returned -5 [0225.669] _wcsicmp (_String1="ipsec", _String2="ras") returned -9 [0225.669] _wcsicmp (_String1="ipsec", _String2="advfirewall") returned 8 [0225.669] _wcsicmp (_String1="ipsec", _String2="bridge") returned 7 [0225.669] _wcsicmp (_String1="ipsec", _String2="dhcpclient") returned 5 [0225.669] _wcsicmp (_String1="ipsec", _String2="dnsclient") returned 5 [0225.669] _wcsicmp (_String1="ipsec", _String2="firewall") returned 3 [0225.669] _wcsicmp (_String1="ipsec", _String2="http") returned 1 [0225.669] _wcsicmp (_String1="ipsec", _String2="interface") returned 2 [0225.670] _wcsicmp (_String1="ipsec", _String2="lan") returned -3 [0225.670] GetProcessHeap () returned 0x640000 [0225.670] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x360) returned 0x669740 [0225.670] memcpy (in: _Dst=0x669740, _Src=0x6709d0, _Size=0x1f8 | out: _Dst=0x669740) returned 0x669740 [0225.670] memcpy (in: _Dst=0x669938, _Src=0x197a48, _Size=0x48 | out: _Dst=0x669938) returned 0x669938 [0225.670] memcpy (in: _Dst=0x669980, _Src=0x670bc8, _Size=0x120 | out: _Dst=0x669980) returned 0x669980 [0225.670] GetProcessHeap () returned 0x640000 [0225.670] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6709d0) returned 1 [0225.670] RegisterContext () returned 0x0 [0225.670] GetProcessHeap () returned 0x640000 [0225.670] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x48) returned 0x657d40 [0225.670] memcpy (in: _Dst=0x657d40, _Src=0x197a48, _Size=0x48 | out: _Dst=0x657d40) returned 0x657d40 [0225.670] GetProcessHeap () returned 0x640000 [0225.670] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x0) returned 1 [0225.670] RegisterContext () returned 0x0 [0225.670] _wcsicmp (_String1="dynamic", _String2="static") returned -15 [0225.670] _wcsicmp (_String1="dynamic", _String2="static") returned -15 [0225.670] GetProcessHeap () returned 0x640000 [0225.670] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x90) returned 0x666858 [0225.670] memcpy (in: _Dst=0x666858, _Src=0x197a48, _Size=0x48 | out: _Dst=0x666858) returned 0x666858 [0225.670] memcpy (in: _Dst=0x6668a0, _Src=0x657d40, _Size=0x48 | out: _Dst=0x6668a0) returned 0x6668a0 [0225.670] GetProcessHeap () returned 0x640000 [0225.671] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x657d40) returned 1 [0225.671] RegisterContext () returned 0x0 [0225.671] _wcsicmp (_String1="static", _String2="dynamic") returned 15 [0225.671] _wcsicmp (_String1="static", _String2="static") returned 0 [0225.671] memcpy (in: _Dst=0x6668a0, _Src=0x197a48, _Size=0x48 | out: _Dst=0x6668a0) returned 0x6668a0 [0225.671] RegisterContext () returned 0x0 [0225.671] _wcsicmp (_String1="dynamic", _String2="dynamic") returned 0 [0225.671] memcpy (in: _Dst=0x666858, _Src=0x197a48, _Size=0x48 | out: _Dst=0x666858) returned 0x666858 [0225.671] RegisterContext () returned 0x0 [0225.671] _wcsicmp (_String1="wfp", _String2="advfirewall") returned 22 [0225.671] _wcsicmp (_String1="wfp", _String2="bridge") returned 21 [0225.671] _wcsicmp (_String1="wfp", _String2="dhcpclient") returned 19 [0225.671] _wcsicmp (_String1="wfp", _String2="dnsclient") returned 19 [0225.671] _wcsicmp (_String1="wfp", _String2="firewall") returned 17 [0225.671] _wcsicmp (_String1="wfp", _String2="http") returned 15 [0225.671] _wcsicmp (_String1="wfp", _String2="interface") returned 14 [0225.671] _wcsicmp (_String1="wfp", _String2="ipsec") returned 14 [0225.671] _wcsicmp (_String1="wfp", _String2="lan") returned 11 [0225.671] _wcsicmp (_String1="wfp", _String2="namespace") returned 9 [0225.671] _wcsicmp (_String1="wfp", _String2="netio") returned 9 [0225.672] _wcsicmp (_String1="wfp", _String2="ras") returned 5 [0225.672] _wcsicmp (_String1="wfp", _String2="advfirewall") returned 22 [0225.672] _wcsicmp (_String1="wfp", _String2="bridge") returned 21 [0225.672] _wcsicmp (_String1="wfp", _String2="dhcpclient") returned 19 [0225.672] _wcsicmp (_String1="wfp", _String2="dnsclient") returned 19 [0225.672] _wcsicmp (_String1="wfp", _String2="firewall") returned 17 [0225.672] _wcsicmp (_String1="wfp", _String2="http") returned 15 [0225.672] _wcsicmp (_String1="wfp", _String2="interface") returned 14 [0225.672] _wcsicmp (_String1="wfp", _String2="ipsec") returned 14 [0225.672] _wcsicmp (_String1="wfp", _String2="lan") returned 11 [0225.672] _wcsicmp (_String1="wfp", _String2="namespace") returned 9 [0225.674] _wcsicmp (_String1="wfp", _String2="netio") returned 9 [0225.674] _wcsicmp (_String1="wfp", _String2="ras") returned 5 [0225.674] GetProcessHeap () returned 0x640000 [0225.674] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x3a8) returned 0x670b48 [0225.674] memcpy (in: _Dst=0x670b48, _Src=0x669740, _Size=0x360 | out: _Dst=0x670b48) returned 0x670b48 [0225.674] memcpy (in: _Dst=0x670ea8, _Src=0x197a38, _Size=0x48 | out: _Dst=0x670ea8) returned 0x670ea8 [0225.674] GetProcessHeap () returned 0x640000 [0225.674] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x669740) returned 1 [0225.675] RegisterContext () returned 0x0 [0225.676] _wcsicmp (_String1="p2p", _String2="advfirewall") returned 15 [0225.676] _wcsicmp (_String1="p2p", _String2="bridge") returned 14 [0225.676] _wcsicmp (_String1="p2p", _String2="dhcpclient") returned 12 [0225.676] _wcsicmp (_String1="p2p", _String2="dnsclient") returned 12 [0225.676] _wcsicmp (_String1="p2p", _String2="firewall") returned 10 [0225.676] _wcsicmp (_String1="p2p", _String2="http") returned 8 [0225.676] _wcsicmp (_String1="p2p", _String2="interface") returned 7 [0225.676] _wcsicmp (_String1="p2p", _String2="ipsec") returned 7 [0225.676] _wcsicmp (_String1="p2p", _String2="lan") returned 4 [0225.676] _wcsicmp (_String1="p2p", _String2="namespace") returned 2 [0225.676] _wcsicmp (_String1="p2p", _String2="netio") returned 2 [0225.676] _wcsicmp (_String1="p2p", _String2="ras") returned -2 [0225.676] _wcsicmp (_String1="p2p", _String2="wfp") returned -7 [0225.676] _wcsicmp (_String1="p2p", _String2="advfirewall") returned 15 [0225.676] _wcsicmp (_String1="p2p", _String2="bridge") returned 14 [0225.676] _wcsicmp (_String1="p2p", _String2="dhcpclient") returned 12 [0225.676] _wcsicmp (_String1="p2p", _String2="dnsclient") returned 12 [0225.676] _wcsicmp (_String1="p2p", _String2="firewall") returned 10 [0225.676] _wcsicmp (_String1="p2p", _String2="http") returned 8 [0225.676] _wcsicmp (_String1="p2p", _String2="interface") returned 7 [0225.676] _wcsicmp (_String1="p2p", _String2="ipsec") returned 7 [0225.676] _wcsicmp (_String1="p2p", _String2="lan") returned 4 [0225.676] _wcsicmp (_String1="p2p", _String2="namespace") returned 2 [0225.676] _wcsicmp (_String1="p2p", _String2="netio") returned 2 [0225.676] _wcsicmp (_String1="p2p", _String2="ras") returned -2 [0225.676] GetProcessHeap () returned 0x640000 [0225.676] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x3f0) returned 0x669740 [0225.676] memcpy (in: _Dst=0x669740, _Src=0x670b48, _Size=0x318 | out: _Dst=0x669740) returned 0x669740 [0225.676] memcpy (in: _Dst=0x669a58, _Src=0x1978b8, _Size=0x48 | out: _Dst=0x669a58) returned 0x669a58 [0225.676] memcpy (in: _Dst=0x669aa0, _Src=0x670e60, _Size=0x90 | out: _Dst=0x669aa0) returned 0x669aa0 [0225.676] GetProcessHeap () returned 0x640000 [0225.677] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x670b48) returned 1 [0225.677] RegisterContext () returned 0x0 [0225.677] GetProcessHeap () returned 0x640000 [0225.677] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x48) returned 0x6577a0 [0225.677] memcpy (in: _Dst=0x6577a0, _Src=0x197a48, _Size=0x48 | out: _Dst=0x6577a0) returned 0x6577a0 [0225.677] GetProcessHeap () returned 0x640000 [0225.677] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x0) returned 1 [0225.678] RegisterContext () returned 0x0 [0225.678] _wcsicmp (_String1="group", _String2="pnrp") returned -9 [0225.678] _wcsicmp (_String1="group", _String2="pnrp") returned -9 [0225.678] GetProcessHeap () returned 0x640000 [0225.678] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x90) returned 0x6668f0 [0225.678] memcpy (in: _Dst=0x6668f0, _Src=0x197a48, _Size=0x48 | out: _Dst=0x6668f0) returned 0x6668f0 [0225.678] memcpy (in: _Dst=0x666938, _Src=0x6577a0, _Size=0x48 | out: _Dst=0x666938) returned 0x666938 [0225.679] GetProcessHeap () returned 0x640000 [0225.679] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6577a0) returned 1 [0225.679] RegisterContext () returned 0x0 [0225.679] _wcsicmp (_String1="idmgr", _String2="group") returned 2 [0225.679] _wcsicmp (_String1="idmgr", _String2="pnrp") returned -7 [0225.679] _wcsicmp (_String1="idmgr", _String2="group") returned 2 [0225.679] _wcsicmp (_String1="idmgr", _String2="pnrp") returned -7 [0225.679] GetProcessHeap () returned 0x640000 [0225.679] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xd8) returned 0x669330 [0225.679] memcpy (in: _Dst=0x669330, _Src=0x6668f0, _Size=0x48 | out: _Dst=0x669330) returned 0x669330 [0225.679] memcpy (in: _Dst=0x669378, _Src=0x197a48, _Size=0x48 | out: _Dst=0x669378) returned 0x669378 [0225.679] memcpy (in: _Dst=0x6693c0, _Src=0x666938, _Size=0x48 | out: _Dst=0x6693c0) returned 0x6693c0 [0225.679] GetProcessHeap () returned 0x640000 [0225.680] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6668f0) returned 1 [0225.680] RegisterContext () returned 0x0 [0225.680] GetProcessHeap () returned 0x640000 [0225.680] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x48) returned 0x657ac0 [0225.680] memcpy (in: _Dst=0x657ac0, _Src=0x197a48, _Size=0x48 | out: _Dst=0x657ac0) returned 0x657ac0 [0225.680] GetProcessHeap () returned 0x640000 [0225.680] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x0) returned 1 [0225.680] RegisterContext () returned 0x0 [0225.680] _wcsicmp (_String1="diagnostics", _String2="cloud") returned 1 [0225.680] _wcsicmp (_String1="diagnostics", _String2="cloud") returned 1 [0225.680] GetProcessHeap () returned 0x640000 [0225.680] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x90) returned 0x665f70 [0225.680] memcpy (in: _Dst=0x665f70, _Src=0x657ac0, _Size=0x48 | out: _Dst=0x665f70) returned 0x665f70 [0225.680] memcpy (in: _Dst=0x665fb8, _Src=0x197a48, _Size=0x48 | out: _Dst=0x665fb8) returned 0x665fb8 [0225.680] GetProcessHeap () returned 0x640000 [0225.680] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x657ac0) returned 1 [0225.680] RegisterContext () returned 0x0 [0225.681] _wcsicmp (_String1="peer", _String2="cloud") returned 13 [0225.681] _wcsicmp (_String1="peer", _String2="diagnostics") returned 12 [0225.681] _wcsicmp (_String1="peer", _String2="cloud") returned 13 [0225.681] _wcsicmp (_String1="peer", _String2="diagnostics") returned 12 [0225.681] GetProcessHeap () returned 0x640000 [0225.681] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xd8) returned 0x669538 [0225.681] memcpy (in: _Dst=0x669538, _Src=0x665f70, _Size=0x90 | out: _Dst=0x669538) returned 0x669538 [0225.681] memcpy (in: _Dst=0x6695c8, _Src=0x197a48, _Size=0x48 | out: _Dst=0x6695c8) returned 0x6695c8 [0225.681] GetProcessHeap () returned 0x640000 [0225.681] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x665f70) returned 1 [0225.681] RegisterContext () returned 0x0 [0225.681] GetProcessHeap () returned 0x640000 [0225.681] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x48) returned 0x6577a0 [0225.681] memcpy (in: _Dst=0x6577a0, _Src=0x197a48, _Size=0x48 | out: _Dst=0x6577a0) returned 0x6577a0 [0225.681] GetProcessHeap () returned 0x640000 [0225.681] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x0) returned 1 [0225.681] RegisterContext () returned 0x0 [0225.681] _wcsicmp (_String1="rpc", _String2="advfirewall") returned 17 [0225.681] _wcsicmp (_String1="rpc", _String2="bridge") returned 16 [0225.681] _wcsicmp (_String1="rpc", _String2="dhcpclient") returned 14 [0225.682] _wcsicmp (_String1="rpc", _String2="dnsclient") returned 14 [0225.682] _wcsicmp (_String1="rpc", _String2="firewall") returned 12 [0225.682] _wcsicmp (_String1="rpc", _String2="http") returned 10 [0225.682] _wcsicmp (_String1="rpc", _String2="interface") returned 9 [0225.682] _wcsicmp (_String1="rpc", _String2="ipsec") returned 9 [0225.682] _wcsicmp (_String1="rpc", _String2="lan") returned 6 [0225.682] _wcsicmp (_String1="rpc", _String2="namespace") returned 4 [0225.682] _wcsicmp (_String1="rpc", _String2="netio") returned 4 [0225.682] _wcsicmp (_String1="rpc", _String2="p2p") returned 2 [0225.682] _wcsicmp (_String1="rpc", _String2="ras") returned 15 [0225.682] _wcsicmp (_String1="rpc", _String2="wfp") returned -5 [0225.682] _wcsicmp (_String1="rpc", _String2="advfirewall") returned 17 [0225.682] _wcsicmp (_String1="rpc", _String2="bridge") returned 16 [0225.682] _wcsicmp (_String1="rpc", _String2="dhcpclient") returned 14 [0225.682] _wcsicmp (_String1="rpc", _String2="dnsclient") returned 14 [0225.682] _wcsicmp (_String1="rpc", _String2="firewall") returned 12 [0225.682] _wcsicmp (_String1="rpc", _String2="http") returned 10 [0225.682] _wcsicmp (_String1="rpc", _String2="interface") returned 9 [0225.682] _wcsicmp (_String1="rpc", _String2="ipsec") returned 9 [0225.682] _wcsicmp (_String1="rpc", _String2="lan") returned 6 [0225.682] _wcsicmp (_String1="rpc", _String2="namespace") returned 4 [0225.682] _wcsicmp (_String1="rpc", _String2="netio") returned 4 [0225.682] _wcsicmp (_String1="rpc", _String2="p2p") returned 2 [0225.682] _wcsicmp (_String1="rpc", _String2="ras") returned 15 [0225.682] _wcsicmp (_String1="rpc", _String2="wfp") returned -5 [0225.682] GetProcessHeap () returned 0x640000 [0225.682] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x438) returned 0x672f00 [0225.682] memcpy (in: _Dst=0x672f00, _Src=0x669740, _Size=0x3a8 | out: _Dst=0x672f00) returned 0x672f00 [0225.682] memcpy (in: _Dst=0x6732a8, _Src=0x197a50, _Size=0x48 | out: _Dst=0x6732a8) returned 0x6732a8 [0225.682] memcpy (in: _Dst=0x6732f0, _Src=0x669ae8, _Size=0x48 | out: _Dst=0x6732f0) returned 0x6732f0 [0225.682] GetProcessHeap () returned 0x640000 [0225.683] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x669740) returned 1 [0225.683] RegisterContext () returned 0x0 [0225.683] GetProcessHeap () returned 0x640000 [0225.683] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x48) returned 0x657700 [0225.683] memcpy (in: _Dst=0x657700, _Src=0x197a50, _Size=0x48 | out: _Dst=0x657700) returned 0x657700 [0225.683] GetProcessHeap () returned 0x640000 [0225.683] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x0) returned 1 [0225.683] RegisterContext () returned 0x0 [0225.683] _wcsicmp (_String1="winhttp", _String2="advfirewall") returned 22 [0225.683] _wcsicmp (_String1="winhttp", _String2="bridge") returned 21 [0225.683] _wcsicmp (_String1="winhttp", _String2="dhcpclient") returned 19 [0225.683] _wcsicmp (_String1="winhttp", _String2="dnsclient") returned 19 [0225.683] _wcsicmp (_String1="winhttp", _String2="firewall") returned 17 [0225.683] _wcsicmp (_String1="winhttp", _String2="http") returned 15 [0225.683] _wcsicmp (_String1="winhttp", _String2="interface") returned 14 [0225.683] _wcsicmp (_String1="winhttp", _String2="ipsec") returned 14 [0225.683] _wcsicmp (_String1="winhttp", _String2="lan") returned 11 [0225.683] _wcsicmp (_String1="winhttp", _String2="namespace") returned 9 [0225.683] _wcsicmp (_String1="winhttp", _String2="netio") returned 9 [0225.683] _wcsicmp (_String1="winhttp", _String2="p2p") returned 7 [0225.683] _wcsicmp (_String1="winhttp", _String2="ras") returned 5 [0225.683] _wcsicmp (_String1="winhttp", _String2="rpc") returned 5 [0225.683] _wcsicmp (_String1="winhttp", _String2="wfp") returned 3 [0225.684] _wcsicmp (_String1="winhttp", _String2="advfirewall") returned 22 [0225.684] _wcsicmp (_String1="winhttp", _String2="bridge") returned 21 [0225.684] _wcsicmp (_String1="winhttp", _String2="dhcpclient") returned 19 [0225.684] _wcsicmp (_String1="winhttp", _String2="dnsclient") returned 19 [0225.684] _wcsicmp (_String1="winhttp", _String2="firewall") returned 17 [0225.684] _wcsicmp (_String1="winhttp", _String2="http") returned 15 [0225.684] _wcsicmp (_String1="winhttp", _String2="interface") returned 14 [0225.684] _wcsicmp (_String1="winhttp", _String2="ipsec") returned 14 [0225.684] _wcsicmp (_String1="winhttp", _String2="lan") returned 11 [0225.684] _wcsicmp (_String1="winhttp", _String2="namespace") returned 9 [0225.684] _wcsicmp (_String1="winhttp", _String2="netio") returned 9 [0225.684] _wcsicmp (_String1="winhttp", _String2="p2p") returned 7 [0225.684] _wcsicmp (_String1="winhttp", _String2="ras") returned 5 [0225.684] _wcsicmp (_String1="winhttp", _String2="rpc") returned 5 [0225.684] _wcsicmp (_String1="winhttp", _String2="wfp") returned 3 [0225.684] GetProcessHeap () returned 0x640000 [0225.684] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x480) returned 0x673340 [0225.684] memcpy (in: _Dst=0x673340, _Src=0x672f00, _Size=0x438 | out: _Dst=0x673340) returned 0x673340 [0225.684] memcpy (in: _Dst=0x673778, _Src=0x197a50, _Size=0x48 | out: _Dst=0x673778) returned 0x673778 [0225.684] GetProcessHeap () returned 0x640000 [0225.684] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x672f00) returned 1 [0225.691] RegisterContext () returned 0x0 [0225.691] _wcsicmp (_String1="wlan", _String2="advfirewall") returned 22 [0225.691] _wcsicmp (_String1="wlan", _String2="bridge") returned 21 [0225.691] _wcsicmp (_String1="wlan", _String2="dhcpclient") returned 19 [0225.691] _wcsicmp (_String1="wlan", _String2="dnsclient") returned 19 [0225.691] _wcsicmp (_String1="wlan", _String2="firewall") returned 17 [0225.691] _wcsicmp (_String1="wlan", _String2="http") returned 15 [0225.691] _wcsicmp (_String1="wlan", _String2="interface") returned 14 [0225.691] _wcsicmp (_String1="wlan", _String2="ipsec") returned 14 [0225.692] _wcsicmp (_String1="wlan", _String2="lan") returned 11 [0225.692] _wcsicmp (_String1="wlan", _String2="namespace") returned 9 [0225.692] _wcsicmp (_String1="wlan", _String2="netio") returned 9 [0225.692] _wcsicmp (_String1="wlan", _String2="p2p") returned 7 [0225.692] _wcsicmp (_String1="wlan", _String2="ras") returned 5 [0225.692] _wcsicmp (_String1="wlan", _String2="rpc") returned 5 [0225.692] _wcsicmp (_String1="wlan", _String2="wfp") returned 6 [0225.692] _wcsicmp (_String1="wlan", _String2="winhttp") returned 3 [0225.692] _wcsicmp (_String1="wlan", _String2="advfirewall") returned 22 [0225.692] _wcsicmp (_String1="wlan", _String2="bridge") returned 21 [0225.692] _wcsicmp (_String1="wlan", _String2="dhcpclient") returned 19 [0225.692] _wcsicmp (_String1="wlan", _String2="dnsclient") returned 19 [0225.692] _wcsicmp (_String1="wlan", _String2="firewall") returned 17 [0225.692] _wcsicmp (_String1="wlan", _String2="http") returned 15 [0225.692] _wcsicmp (_String1="wlan", _String2="interface") returned 14 [0225.692] _wcsicmp (_String1="wlan", _String2="ipsec") returned 14 [0225.692] _wcsicmp (_String1="wlan", _String2="lan") returned 11 [0225.692] _wcsicmp (_String1="wlan", _String2="namespace") returned 9 [0225.692] _wcsicmp (_String1="wlan", _String2="netio") returned 9 [0225.692] _wcsicmp (_String1="wlan", _String2="p2p") returned 7 [0225.692] _wcsicmp (_String1="wlan", _String2="ras") returned 5 [0225.692] _wcsicmp (_String1="wlan", _String2="rpc") returned 5 [0225.692] _wcsicmp (_String1="wlan", _String2="wfp") returned 6 [0225.692] _wcsicmp (_String1="wlan", _String2="winhttp") returned 3 [0225.692] GetProcessHeap () returned 0x640000 [0225.692] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x4c8) returned 0x6737c8 [0225.692] memcpy (in: _Dst=0x6737c8, _Src=0x673340, _Size=0x480 | out: _Dst=0x6737c8) returned 0x6737c8 [0225.692] memcpy (in: _Dst=0x673c48, _Src=0x197a50, _Size=0x48 | out: _Dst=0x673c48) returned 0x673c48 [0225.692] GetProcessHeap () returned 0x640000 [0225.693] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x673340) returned 1 [0225.693] RegisterContext () returned 0x0 [0225.693] _wcsicmp (_String1="winsock", _String2="advfirewall") returned 22 [0225.693] _wcsicmp (_String1="winsock", _String2="bridge") returned 21 [0225.693] _wcsicmp (_String1="winsock", _String2="dhcpclient") returned 19 [0225.693] _wcsicmp (_String1="winsock", _String2="dnsclient") returned 19 [0225.693] _wcsicmp (_String1="winsock", _String2="firewall") returned 17 [0225.693] _wcsicmp (_String1="winsock", _String2="http") returned 15 [0225.693] _wcsicmp (_String1="winsock", _String2="interface") returned 14 [0225.693] _wcsicmp (_String1="winsock", _String2="ipsec") returned 14 [0225.693] _wcsicmp (_String1="winsock", _String2="lan") returned 11 [0225.693] _wcsicmp (_String1="winsock", _String2="namespace") returned 9 [0225.693] _wcsicmp (_String1="winsock", _String2="netio") returned 9 [0225.693] _wcsicmp (_String1="winsock", _String2="p2p") returned 7 [0225.693] _wcsicmp (_String1="winsock", _String2="ras") returned 5 [0225.693] _wcsicmp (_String1="winsock", _String2="rpc") returned 5 [0225.693] _wcsicmp (_String1="winsock", _String2="wfp") returned 3 [0225.693] _wcsicmp (_String1="winsock", _String2="winhttp") returned 11 [0225.693] _wcsicmp (_String1="winsock", _String2="wlan") returned -3 [0225.694] _wcsicmp (_String1="winsock", _String2="advfirewall") returned 22 [0225.694] _wcsicmp (_String1="winsock", _String2="bridge") returned 21 [0225.694] _wcsicmp (_String1="winsock", _String2="dhcpclient") returned 19 [0225.694] _wcsicmp (_String1="winsock", _String2="dnsclient") returned 19 [0225.694] _wcsicmp (_String1="winsock", _String2="firewall") returned 17 [0225.694] _wcsicmp (_String1="winsock", _String2="http") returned 15 [0225.694] _wcsicmp (_String1="winsock", _String2="interface") returned 14 [0225.694] _wcsicmp (_String1="winsock", _String2="ipsec") returned 14 [0225.694] _wcsicmp (_String1="winsock", _String2="lan") returned 11 [0225.694] _wcsicmp (_String1="winsock", _String2="namespace") returned 9 [0225.694] _wcsicmp (_String1="winsock", _String2="netio") returned 9 [0225.694] _wcsicmp (_String1="winsock", _String2="p2p") returned 7 [0225.694] _wcsicmp (_String1="winsock", _String2="ras") returned 5 [0225.694] _wcsicmp (_String1="winsock", _String2="rpc") returned 5 [0225.694] _wcsicmp (_String1="winsock", _String2="wfp") returned 3 [0225.694] _wcsicmp (_String1="winsock", _String2="winhttp") returned 11 [0225.694] _wcsicmp (_String1="winsock", _String2="wlan") returned -3 [0225.694] GetProcessHeap () returned 0x640000 [0225.694] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x510) returned 0x672f00 [0225.694] memcpy (in: _Dst=0x672f00, _Src=0x6737c8, _Size=0x480 | out: _Dst=0x672f00) returned 0x672f00 [0225.694] memcpy (in: _Dst=0x673380, _Src=0x197a4c, _Size=0x48 | out: _Dst=0x673380) returned 0x673380 [0225.694] memcpy (in: _Dst=0x6733c8, _Src=0x673c48, _Size=0x48 | out: _Dst=0x6733c8) returned 0x6733c8 [0225.694] GetProcessHeap () returned 0x640000 [0225.695] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6737c8) returned 1 [0225.728] RegisterContext () returned 0x0 [0225.728] _wcsicmp (_String1="branchcache", _String2="advfirewall") returned 1 [0225.728] _wcsicmp (_String1="branchcache", _String2="bridge") returned -8 [0225.728] _wcsicmp (_String1="branchcache", _String2="dhcpclient") returned -2 [0225.728] _wcsicmp (_String1="branchcache", _String2="dnsclient") returned -2 [0225.728] _wcsicmp (_String1="branchcache", _String2="firewall") returned -4 [0225.728] _wcsicmp (_String1="branchcache", _String2="http") returned -6 [0225.728] _wcsicmp (_String1="branchcache", _String2="interface") returned -7 [0225.728] _wcsicmp (_String1="branchcache", _String2="ipsec") returned -7 [0225.728] _wcsicmp (_String1="branchcache", _String2="lan") returned -10 [0225.728] _wcsicmp (_String1="branchcache", _String2="namespace") returned -12 [0225.728] _wcsicmp (_String1="branchcache", _String2="netio") returned -12 [0225.728] _wcsicmp (_String1="branchcache", _String2="p2p") returned -14 [0225.728] _wcsicmp (_String1="branchcache", _String2="ras") returned -16 [0225.728] _wcsicmp (_String1="branchcache", _String2="rpc") returned -16 [0225.728] _wcsicmp (_String1="branchcache", _String2="wfp") returned -21 [0225.728] _wcsicmp (_String1="branchcache", _String2="winhttp") returned -21 [0225.728] _wcsicmp (_String1="branchcache", _String2="winsock") returned -21 [0225.729] _wcsicmp (_String1="branchcache", _String2="wlan") returned -21 [0225.729] _wcsicmp (_String1="branchcache", _String2="advfirewall") returned 1 [0225.729] _wcsicmp (_String1="branchcache", _String2="bridge") returned -8 [0225.729] GetProcessHeap () returned 0x640000 [0225.729] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x558) returned 0x673830 [0225.729] memcpy (in: _Dst=0x673830, _Src=0x672f00, _Size=0x48 | out: _Dst=0x673830) returned 0x673830 [0225.729] memcpy (in: _Dst=0x673878, _Src=0x197a48, _Size=0x48 | out: _Dst=0x673878) returned 0x673878 [0225.729] memcpy (in: _Dst=0x6738c0, _Src=0x672f48, _Size=0x4c8 | out: _Dst=0x6738c0) returned 0x6738c0 [0225.729] GetProcessHeap () returned 0x640000 [0225.729] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x672f00) returned 1 [0225.730] RegisterContext () returned 0x0 [0225.730] GetProcessHeap () returned 0x640000 [0225.730] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x48) returned 0x657930 [0225.730] memcpy (in: _Dst=0x657930, _Src=0x197a48, _Size=0x48 | out: _Dst=0x657930) returned 0x657930 [0225.730] GetProcessHeap () returned 0x640000 [0225.730] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x0) returned 1 [0225.730] SetConsoleCtrlHandler (HandlerRoutine=0x9182a0, Add=1) returned 1 [0225.730] SetThreadUILanguage (LangId=0x0) returned 0x409 [0225.730] _wcsicmp (_String1="wlan", _String2="-?") returned 74 [0225.730] _wcsicmp (_String1="wlan", _String2="-h") returned 74 [0225.731] _wcsicmp (_String1="wlan", _String2="?") returned 56 [0225.731] _wcsicmp (_String1="wlan", _String2="/?") returned 72 [0225.731] _wcsicmp (_String1="wlan", _String2="-v") returned 74 [0225.731] _wcsicmp (_String1="wlan", _String2="-a") returned 74 [0225.731] _wcsicmp (_String1="wlan", _String2="-c") returned 74 [0225.731] _wcsicmp (_String1="wlan", _String2="-f") returned 74 [0225.731] _wcsicmp (_String1="wlan", _String2="-r") returned 74 [0225.731] _wcsicmp (_String1="wlan", _String2="-u") returned 74 [0225.731] _wcsicmp (_String1="wlan", _String2="-p") returned 74 [0225.731] GetVersionExW (in: lpVersionInformation=0x1979c4*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1979c4*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0225.731] _vsnwprintf (in: _Buffer=0x923780, _BufferCount=0x103, _Format="%d.%d.%d", _ArgList=0x1979b0 | out: _Buffer="10.0.10586") returned 10 [0225.731] _vsnwprintf (in: _Buffer=0x923990, _BufferCount=0x103, _Format="%d", _ArgList=0x1979a0 | out: _Buffer="10586") returned 5 [0225.731] _vsnwprintf (in: _Buffer=0x923ba0, _BufferCount=0x103, _Format="%d", _ArgList=0x197990 | out: _Buffer="0") returned 1 [0225.731] _vsnwprintf (in: _Buffer=0x923db0, _BufferCount=0x103, _Format="%d", _ArgList=0x197980 | out: _Buffer="0") returned 1 [0225.731] GetProcessHeap () returned 0x640000 [0225.731] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x66ad08 [0225.731] GetProcessHeap () returned 0x640000 [0225.731] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x66aa50 [0225.731] GetProcessHeap () returned 0x640000 [0225.731] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x66ad80 [0225.731] GetProcessHeap () returned 0x640000 [0225.731] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x66ade0 [0225.731] GetProcessHeap () returned 0x640000 [0225.731] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x66adb0 [0225.731] wcscpy_s (in: _Destination=0x66adb0, _SizeInWords=0x6, _Source="netsh" | out: _Destination="netsh") returned 0x0 [0225.731] GetProcessHeap () returned 0x640000 [0225.732] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x66ad80) returned 1 [0225.732] GetProcessHeap () returned 0x640000 [0225.732] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x66aa50) returned 1 [0225.732] GetProcessHeap () returned 0x640000 [0225.732] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x66aa50 [0225.732] GetProcessHeap () returned 0x640000 [0225.732] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x66ad80 [0225.732] GetProcessHeap () returned 0x640000 [0225.732] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x3c) returned 0x665628 [0225.732] GetProcessHeap () returned 0x640000 [0225.732] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x66ad68 [0225.732] GetProcessHeap () returned 0x640000 [0225.732] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xa) returned 0x66ad98 [0225.732] wcscpy_s (in: _Destination=0x66ad98, _SizeInWords=0x5, _Source="wlan" | out: _Destination="wlan") returned 0x0 [0225.732] GetProcessHeap () returned 0x640000 [0225.732] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x66ad38 [0225.732] GetProcessHeap () returned 0x640000 [0225.732] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xa) returned 0x66ad50 [0225.732] wcscpy_s (in: _Destination=0x66ad50, _SizeInWords=0x5, _Source="show" | out: _Destination="show") returned 0x0 [0225.732] GetProcessHeap () returned 0x640000 [0225.732] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x66adc8 [0225.732] GetProcessHeap () returned 0x640000 [0225.732] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x12) returned 0x666ee8 [0225.732] wcscpy_s (in: _Destination=0x666ee8, _SizeInWords=0x9, _Source="networks" | out: _Destination="networks") returned 0x0 [0225.732] GetProcessHeap () returned 0x640000 [0225.732] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x66ad20 [0225.732] GetProcessHeap () returned 0x640000 [0225.732] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xa) returned 0x673188 [0225.732] wcscpy_s (in: _Destination=0x673188, _SizeInWords=0x5, _Source="mode" | out: _Destination="mode") returned 0x0 [0225.732] GetProcessHeap () returned 0x640000 [0225.732] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x6730f8 [0225.732] GetProcessHeap () returned 0x640000 [0225.732] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x4) returned 0x658760 [0225.732] wcscpy_s (in: _Destination=0x658760, _SizeInWords=0x2, _Source="=" | out: _Destination="=") returned 0x0 [0225.733] GetProcessHeap () returned 0x640000 [0225.733] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x673050 [0225.733] GetProcessHeap () returned 0x640000 [0225.733] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x673098 [0225.733] wcscpy_s (in: _Destination=0x673098, _SizeInWords=0x6, _Source="bssid" | out: _Destination="bssid") returned 0x0 [0225.733] GetProcessHeap () returned 0x640000 [0225.733] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x665628) returned 1 [0225.733] GetProcessHeap () returned 0x640000 [0225.733] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x66ad80) returned 1 [0225.733] GetProcessHeap () returned 0x640000 [0225.733] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x673158 [0225.733] GetProcessHeap () returned 0x640000 [0225.733] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xa) returned 0x673110 [0225.733] wcscpy_s (in: _Destination=0x673110, _SizeInWords=0x5, _Source="wlan" | out: _Destination="wlan") returned 0x0 [0225.733] GetProcessHeap () returned 0x640000 [0225.733] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x66ad98) returned 1 [0225.733] GetProcessHeap () returned 0x640000 [0225.734] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x66ad68) returned 1 [0225.734] GetProcessHeap () returned 0x640000 [0225.734] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x673128 [0225.734] GetProcessHeap () returned 0x640000 [0225.734] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xa) returned 0x673218 [0225.734] wcscpy_s (in: _Destination=0x673218, _SizeInWords=0x5, _Source="wlan" | out: _Destination="wlan") returned 0x0 [0225.734] GetProcessHeap () returned 0x640000 [0225.734] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x673110) returned 1 [0225.734] GetProcessHeap () returned 0x640000 [0225.734] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x673158) returned 1 [0225.734] GetProcessHeap () returned 0x640000 [0225.734] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x672f78 [0225.734] GetProcessHeap () returned 0x640000 [0225.734] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xa) returned 0x672fa8 [0225.734] wcscpy_s (in: _Destination=0x672fa8, _SizeInWords=0x5, _Source="show" | out: _Destination="show") returned 0x0 [0225.734] GetProcessHeap () returned 0x640000 [0225.734] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x66ad50) returned 1 [0225.734] GetProcessHeap () returned 0x640000 [0225.734] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x66ad38) returned 1 [0225.734] GetProcessHeap () returned 0x640000 [0225.734] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x673038 [0225.734] GetProcessHeap () returned 0x640000 [0225.734] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x12) returned 0x666fa8 [0225.734] wcscpy_s (in: _Destination=0x666fa8, _SizeInWords=0x9, _Source="networks" | out: _Destination="networks") returned 0x0 [0225.734] GetProcessHeap () returned 0x640000 [0225.734] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x666ee8) returned 1 [0225.734] GetProcessHeap () returned 0x640000 [0225.734] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x66adc8) returned 1 [0225.734] GetProcessHeap () returned 0x640000 [0225.734] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x6731a0 [0225.735] GetProcessHeap () returned 0x640000 [0225.735] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xa) returned 0x672f30 [0225.735] wcscpy_s (in: _Destination=0x672f30, _SizeInWords=0x5, _Source="mode" | out: _Destination="mode") returned 0x0 [0225.735] GetProcessHeap () returned 0x640000 [0225.735] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x673188) returned 1 [0225.735] GetProcessHeap () returned 0x640000 [0225.735] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x66ad20) returned 1 [0225.735] GetProcessHeap () returned 0x640000 [0225.735] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x672f90 [0225.735] GetProcessHeap () returned 0x640000 [0225.735] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x4) returned 0x6587c0 [0225.735] wcscpy_s (in: _Destination=0x6587c0, _SizeInWords=0x2, _Source="=" | out: _Destination="=") returned 0x0 [0225.735] GetProcessHeap () returned 0x640000 [0225.735] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x658760) returned 1 [0225.735] GetProcessHeap () returned 0x640000 [0225.735] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6730f8) returned 1 [0225.735] GetProcessHeap () returned 0x640000 [0225.735] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x673020 [0225.735] GetProcessHeap () returned 0x640000 [0225.735] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x673140 [0225.735] wcscpy_s (in: _Destination=0x673140, _SizeInWords=0x6, _Source="bssid" | out: _Destination="bssid") returned 0x0 [0225.735] GetProcessHeap () returned 0x640000 [0225.735] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x673098) returned 1 [0225.735] GetProcessHeap () returned 0x640000 [0225.735] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x673050) returned 1 [0225.735] GetProcessHeap () returned 0x640000 [0225.735] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x1c) returned 0x6627b8 [0225.736] GetProcessHeap () returned 0x640000 [0225.736] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x672f48 [0225.736] GetProcessHeap () returned 0x640000 [0225.736] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xa) returned 0x673098 [0225.736] GetProcessHeap () returned 0x640000 [0225.736] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xa) returned 0x673170 [0225.736] GetProcessHeap () returned 0x640000 [0225.736] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x12) returned 0x667108 [0225.736] GetProcessHeap () returned 0x640000 [0225.736] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xa) returned 0x6730b0 [0225.736] GetProcessHeap () returned 0x640000 [0225.736] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x6730b0, Size=0xc) returned 0x6730e0 [0225.736] GetProcessHeap () returned 0x640000 [0225.736] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x6730e0, Size=0x16) returned 0x667068 [0225.736] GetProcessHeap () returned 0x640000 [0225.736] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x672fd8 [0225.736] GetProcessHeap () returned 0x640000 [0225.736] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x672fd8, Size=0xe) returned 0x6730b0 [0225.736] GetProcessHeap () returned 0x640000 [0225.736] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x6730b0, Size=0x16) returned 0x6672a8 [0225.736] GetProcessHeap () returned 0x640000 [0225.736] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x6672a8, Size=0x18) returned 0x666fc8 [0225.736] GetProcessHeap () returned 0x640000 [0225.736] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x666fc8, Size=0x20) returned 0x6628f8 [0225.736] GetProcessHeap () returned 0x640000 [0225.736] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x6628f8, Size=0x22) returned 0x668258 [0225.736] GetProcessHeap () returned 0x640000 [0225.736] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x668258, Size=0x32) returned 0x661ea8 [0225.736] GetProcessHeap () returned 0x640000 [0225.736] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x661ea8, Size=0x34) returned 0x661ee8 [0225.736] GetProcessHeap () returned 0x640000 [0225.736] RtlReAllocateHeap (Heap=0x640000, Flags=0x0, Ptr=0x661ee8, Size=0x48) returned 0x657a20 [0225.737] GetProcessHeap () returned 0x640000 [0225.737] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x657a20) returned 1 [0225.737] lstrcmpiW (lpString1="netsh", lpString2="namespace") returned 1 [0225.738] lstrcmpiW (lpString1="netsh", lpString2="branchcache") returned 1 [0225.738] lstrcmpiW (lpString1="netsh", lpString2="advfirewall") returned 1 [0225.738] lstrcmpiW (lpString1="netsh", lpString2="firewall") returned 1 [0225.738] lstrcmpiW (lpString1="netsh", lpString2="interface") returned 1 [0225.738] lstrcmpiW (lpString1="netsh", lpString2="dhcp") returned 1 [0225.738] lstrcmpiW (lpString1="netsh", lpString2="dnsclient") returned 1 [0225.738] lstrcmpiW (lpString1="netsh", lpString2="routing") returned -1 [0225.738] lstrcmpiW (lpString1="netsh", lpString2="ip") returned 1 [0225.738] lstrcmpiW (lpString1="netsh", lpString2="ipv6") returned 1 [0225.738] lstrcmpiW (lpString1="netsh", lpString2="aaaa") returned 1 [0225.738] lstrcmpiW (lpString1="netsh", lpString2="ras") returned -1 [0225.738] _wcsnicmp (_String1="wlan", _String2="dump", _MaxCount=0x4) returned 19 [0225.738] _wcsnicmp (_String1="wlan", _String2="help", _MaxCount=0x4) returned 15 [0225.738] _wcsnicmp (_String1="wlan", _String2="?", _MaxCount=0x4) returned 56 [0225.738] _wcsnicmp (_String1="wlan", _String2="exec", _MaxCount=0x4) returned 18 [0225.738] _wcsnicmp (_String1="wlan", _String2="advf", _MaxCount=0x4) returned 22 [0225.738] _wcsnicmp (_String1="wlan", _String2="bran", _MaxCount=0x4) returned 21 [0225.738] _wcsnicmp (_String1="wlan", _String2="brid", _MaxCount=0x4) returned 21 [0225.738] _wcsnicmp (_String1="wlan", _String2="dhcp", _MaxCount=0x4) returned 19 [0225.738] _wcsnicmp (_String1="wlan", _String2="dnsc", _MaxCount=0x4) returned 19 [0225.738] _wcsnicmp (_String1="wlan", _String2="fire", _MaxCount=0x4) returned 17 [0225.738] _wcsnicmp (_String1="wlan", _String2="http", _MaxCount=0x4) returned 15 [0225.738] _wcsnicmp (_String1="wlan", _String2="inte", _MaxCount=0x4) returned 14 [0225.738] _wcsnicmp (_String1="wlan", _String2="ipse", _MaxCount=0x4) returned 14 [0225.738] _wcsnicmp (_String1="wlan", _String2="lan", _MaxCount=0x4) returned 11 [0225.738] _wcsnicmp (_String1="wlan", _String2="name", _MaxCount=0x4) returned 9 [0225.738] _wcsnicmp (_String1="wlan", _String2="neti", _MaxCount=0x4) returned 9 [0225.738] _wcsnicmp (_String1="wlan", _String2="p2p", _MaxCount=0x4) returned 7 [0225.739] _wcsnicmp (_String1="wlan", _String2="ras", _MaxCount=0x4) returned 5 [0225.739] _wcsnicmp (_String1="wlan", _String2="rpc", _MaxCount=0x4) returned 5 [0225.739] _wcsnicmp (_String1="wlan", _String2="wfp", _MaxCount=0x4) returned 6 [0225.739] _wcsnicmp (_String1="wlan", _String2="winh", _MaxCount=0x4) returned 3 [0225.739] _wcsnicmp (_String1="wlan", _String2="wins", _MaxCount=0x4) returned 3 [0225.739] _wcsnicmp (_String1="wlan", _String2="wlan", _MaxCount=0x4) returned 0 [0225.739] lstrcmpiW (lpString1="wlan", lpString2="namespace") returned 1 [0225.739] lstrcmpiW (lpString1="wlan", lpString2="branchcache") returned 1 [0225.739] lstrcmpiW (lpString1="wlan", lpString2="advfirewall") returned 1 [0225.739] lstrcmpiW (lpString1="wlan", lpString2="firewall") returned 1 [0225.739] lstrcmpiW (lpString1="wlan", lpString2="interface") returned 1 [0225.739] lstrcmpiW (lpString1="wlan", lpString2="dhcp") returned 1 [0225.739] lstrcmpiW (lpString1="wlan", lpString2="dnsclient") returned 1 [0225.739] GetProcessHeap () returned 0x640000 [0225.739] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x6731b8 [0225.739] GetProcessHeap () returned 0x640000 [0225.739] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x673050 [0225.739] GetProcessHeap () returned 0x640000 [0225.739] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x48) returned 0x657a20 [0225.739] GetProcessHeap () returned 0x640000 [0225.739] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x673188 [0225.739] GetProcessHeap () returned 0x640000 [0225.739] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x6730b0 [0225.739] wcscpy_s (in: _Destination=0x6730b0, _SizeInWords=0x6, _Source="netsh" | out: _Destination="netsh") returned 0x0 [0225.739] GetProcessHeap () returned 0x640000 [0225.739] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x6731d0 [0225.739] GetProcessHeap () returned 0x640000 [0225.739] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xa) returned 0x6731e8 [0225.739] wcscpy_s (in: _Destination=0x6731e8, _SizeInWords=0x5, _Source="wlan" | out: _Destination="wlan") returned 0x0 [0225.739] GetProcessHeap () returned 0x640000 [0225.739] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x6730f8 [0225.739] GetProcessHeap () returned 0x640000 [0225.739] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xa) returned 0x673158 [0225.739] wcscpy_s (in: _Destination=0x673158, _SizeInWords=0x5, _Source="show" | out: _Destination="show") returned 0x0 [0225.740] GetProcessHeap () returned 0x640000 [0225.740] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x673110 [0225.740] GetProcessHeap () returned 0x640000 [0225.740] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x12) returned 0x6671c8 [0225.740] wcscpy_s (in: _Destination=0x6671c8, _SizeInWords=0x9, _Source="networks" | out: _Destination="networks") returned 0x0 [0225.740] GetProcessHeap () returned 0x640000 [0225.740] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x673200 [0225.740] GetProcessHeap () returned 0x640000 [0225.740] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xa) returned 0x672f60 [0225.740] wcscpy_s (in: _Destination=0x672f60, _SizeInWords=0x5, _Source="mode" | out: _Destination="mode") returned 0x0 [0225.740] GetProcessHeap () returned 0x640000 [0225.740] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x672fc0 [0225.740] GetProcessHeap () returned 0x640000 [0225.740] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x4) returned 0x6586d0 [0225.740] wcscpy_s (in: _Destination=0x6586d0, _SizeInWords=0x2, _Source="=" | out: _Destination="=") returned 0x0 [0225.740] GetProcessHeap () returned 0x640000 [0225.740] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x672fd8 [0225.740] GetProcessHeap () returned 0x640000 [0225.740] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xc) returned 0x672ff0 [0225.740] wcscpy_s (in: _Destination=0x672ff0, _SizeInWords=0x6, _Source="bssid" | out: _Destination="bssid") returned 0x0 [0225.740] GetProcessHeap () returned 0x640000 [0225.741] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x657a20) returned 1 [0225.741] GetProcessHeap () returned 0x640000 [0225.741] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x673050) returned 1 [0225.741] GetProcessHeap () returned 0x640000 [0225.741] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6731e8) returned 1 [0225.741] GetProcessHeap () returned 0x640000 [0225.741] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0xa) returned 0x6731e8 [0225.741] lstrcmpiW (lpString1="wlan", lpString2="namespace") returned 1 [0225.741] lstrcmpiW (lpString1="wlan", lpString2="branchcache") returned 1 [0225.741] lstrcmpiW (lpString1="wlan", lpString2="advfirewall") returned 1 [0225.741] lstrcmpiW (lpString1="wlan", lpString2="firewall") returned 1 [0225.741] lstrcmpiW (lpString1="wlan", lpString2="interface") returned 1 [0225.741] lstrcmpiW (lpString1="wlan", lpString2="dhcp") returned 1 [0225.741] lstrcmpiW (lpString1="wlan", lpString2="dnsclient") returned 1 [0225.741] lstrcmpiW (lpString1="wlan", lpString2="routing") returned 1 [0225.741] lstrcmpiW (lpString1="wlan", lpString2="ip") returned 1 [0225.741] lstrcmpiW (lpString1="wlan", lpString2="ipv6") returned 1 [0225.741] lstrcmpiW (lpString1="wlan", lpString2="aaaa") returned 1 [0225.741] lstrcmpiW (lpString1="wlan", lpString2="ras") returned 1 [0225.741] _wcsnicmp (_String1="show", _String2="dump", _MaxCount=0x4) returned 15 [0225.741] _wcsnicmp (_String1="show", _String2="help", _MaxCount=0x4) returned 11 [0225.741] _wcsnicmp (_String1="show", _String2="?", _MaxCount=0x4) returned 52 [0225.741] _wcsnicmp (_String1="show", _String2="conn", _MaxCount=0x4) returned 16 [0225.741] _wcsnicmp (_String1="show", _String2="disc", _MaxCount=0x4) returned 15 [0225.741] _wcsnicmp (_String1="show", _String2="repo", _MaxCount=0x4) returned 1 [0225.742] _wcsnicmp (_String1="show", _String2="add", _MaxCount=0x4) returned 18 [0225.742] _wcsnicmp (_String1="show", _String2="dele", _MaxCount=0x4) returned 15 [0225.742] _wcsnicmp (_String1="show", _String2="set", _MaxCount=0x4) returned 3 [0225.742] _wcsnicmp (_String1="show", _String2="show", _MaxCount=0x4) returned 0 [0225.742] _wcsnicmp (_String1="networks", _String2="help", _MaxCount=0x8) returned 6 [0225.742] _wcsnicmp (_String1="networks", _String2="?", _MaxCount=0x8) returned 47 [0225.742] wcstok (in: _String="settings", _Delimiter=" ", _Context=0x673d40 | out: _String="settings", _Context=0x673d40) returned="settings" [0225.742] _wcsnicmp (_String1="networks", _String2="settings", _MaxCount=0x8) returned -5 [0225.742] wcstok (in: _String="interfaces", _Delimiter=" ", _Context=0x673d40 | out: _String="interfaces", _Context=0x673d40) returned="interfaces" [0225.742] _wcsnicmp (_String1="networks", _String2="interfac", _MaxCount=0x8) returned 5 [0225.742] wcstok (in: _String="networks", _Delimiter=" ", _Context=0x673d40 | out: _String="networks", _Context=0x673d40) returned="networks" [0225.742] _wcsnicmp (_String1="networks", _String2="networks", _MaxCount=0x8) returned 0 [0225.742] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x673d40 | out: _String=0x0, _Context=0x673d40) returned 0x0 [0225.742] _wcsnicmp (_String1="mode=bssid", _String2="help", _MaxCount=0xa) returned 5 [0225.742] _wcsnicmp (_String1="mode=bssid", _String2="?", _MaxCount=0xa) returned 46 [0225.742] lstrcmpiW (lpString1="wlan", lpString2="netsh") returned 1 [0225.742] MatchTagsInCmdLine () returned 0x0 [0225.742] wcspbrk (_String="mode=bssid", _Control="=") returned="=bssid" [0225.742] GetProcessHeap () returned 0x640000 [0225.742] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x16) returned 0x667088 [0225.742] wcscpy_s (in: _Destination=0x667088, _SizeInWords=0xb, _Source="mode=bssid" | out: _Destination="mode=bssid") returned 0x0 [0225.742] wcstok (in: _String="mode=bssid", _Delimiter="=", _Context=0x667088 | out: _String="mode", _Context=0x667088) returned="mode" [0225.742] _wcsnicmp (_String1="mode", _String2="mode", _MaxCount=0x4) returned 0 [0225.742] wcscpy_s (in: _Destination=0x667068, _SizeInWords=0xb, _Source="bssid" | out: _Destination="bssid") returned 0x0 [0225.742] GetProcessHeap () returned 0x640000 [0225.742] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x667088) returned 1 [0225.742] MatchEnumTag () returned 0x0 [0225.742] _wcsnicmp (_String1="bssid", _String2="ssid", _MaxCount=0x5) returned -17 [0225.742] _wcsnicmp (_String1="bssid", _String2="bssid", _MaxCount=0x5) returned 0 [0225.744] PrintMessageFromModule () returned 0x39 [0225.744] LoadStringW (in: hInstance=0x6e850000, uID=0xe870, lpBuffer=0x18ea88, cchBufferMax=16384 | out: lpBuffer="The Wireless AutoConfig Service (wlansvc) is not running.") returned 0x39 [0225.745] FormatMessageW (in: dwFlags=0x500, lpSource=0x18ea88, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0x18ea6c, nSize=0x0, Arguments=0x18ea84 | out: lpBuffer="㻀g檐\x19腣\x91歐\x19") returned 0x39 [0225.745] GetStdHandle (nStdHandle=0xfffffff5) returned 0x31c [0225.746] GetConsoleOutputCP () returned 0xfde9 [0225.746] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="The Wireless AutoConfig Service (wlansvc) is not running.", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 58 [0225.746] GetProcessHeap () returned 0x640000 [0225.746] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x3a) returned 0x665478 [0225.746] GetConsoleOutputCP () returned 0xfde9 [0225.746] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="The Wireless AutoConfig Service (wlansvc) is not running.", cchWideChar=-1, lpMultiByteStr=0x665478, cbMultiByte=58, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="The Wireless AutoConfig Service (wlansvc) is not running.", lpUsedDefaultChar=0x0) returned 58 [0225.746] WriteFile (in: hFile=0x31c, lpBuffer=0x665478*, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0x18ea58, lpOverlapped=0x0 | out: lpBuffer=0x665478*, lpNumberOfBytesWritten=0x18ea58*=0x39, lpOverlapped=0x0) returned 1 [0225.747] GetProcessHeap () returned 0x640000 [0225.747] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x665478) returned 1 [0225.747] LocalFree (hMem=0x673ec0) returned 0x0 [0225.747] FormatMessageW (in: dwFlags=0x500, lpSource=0x911244, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0x197988, nSize=0x0, Arguments=0x197994 | out: lpBuffer="〈g禘\x19胐\x91禤\x19禼\x19寯\x91ቄ\x91㵀g\x02") returned 0x2 [0225.747] GetStdHandle (nStdHandle=0xfffffff5) returned 0x31c [0225.747] GetConsoleOutputCP () returned 0xfde9 [0225.748] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0225.748] GetProcessHeap () returned 0x640000 [0225.748] RtlAllocateHeap (HeapHandle=0x640000, Flags=0x0, Size=0x3) returned 0x6586e0 [0225.748] GetConsoleOutputCP () returned 0xfde9 [0225.748] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x6586e0, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0225.748] WriteFile (in: hFile=0x31c, lpBuffer=0x6586e0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x197974, lpOverlapped=0x0 | out: lpBuffer=0x6586e0*, lpNumberOfBytesWritten=0x197974*=0x2, lpOverlapped=0x0) returned 1 [0225.748] GetProcessHeap () returned 0x640000 [0225.748] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6586e0) returned 1 [0225.748] LocalFree (hMem=0x673008) returned 0x0 [0225.748] GetProcessHeap () returned 0x640000 [0225.748] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x672f48) returned 1 [0225.748] GetProcessHeap () returned 0x640000 [0225.748] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x673098) returned 1 [0225.748] GetProcessHeap () returned 0x640000 [0225.748] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x673170) returned 1 [0225.748] GetProcessHeap () returned 0x640000 [0225.748] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x667108) returned 1 [0225.748] GetProcessHeap () returned 0x640000 [0225.748] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x667068) returned 1 [0225.748] GetProcessHeap () returned 0x640000 [0225.748] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6627b8) returned 1 [0225.749] GetProcessHeap () returned 0x640000 [0225.749] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x673218) returned 1 [0225.749] GetProcessHeap () returned 0x640000 [0225.749] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x673128) returned 1 [0225.749] GetProcessHeap () returned 0x640000 [0225.749] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x672fa8) returned 1 [0225.749] GetProcessHeap () returned 0x640000 [0225.749] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x672f78) returned 1 [0225.749] GetProcessHeap () returned 0x640000 [0225.749] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x666fa8) returned 1 [0225.749] GetProcessHeap () returned 0x640000 [0225.749] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x673038) returned 1 [0225.749] GetProcessHeap () returned 0x640000 [0225.749] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x672f30) returned 1 [0225.749] GetProcessHeap () returned 0x640000 [0225.749] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6731a0) returned 1 [0225.749] GetProcessHeap () returned 0x640000 [0225.749] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6587c0) returned 1 [0225.749] GetProcessHeap () returned 0x640000 [0225.749] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x672f90) returned 1 [0225.749] GetProcessHeap () returned 0x640000 [0225.749] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x673140) returned 1 [0225.749] GetProcessHeap () returned 0x640000 [0225.749] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x673020) returned 1 [0225.749] GetProcessHeap () returned 0x640000 [0225.749] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x66aa50) returned 1 [0225.749] GetProcessHeap () returned 0x640000 [0225.749] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x66adb0) returned 1 [0225.749] GetProcessHeap () returned 0x640000 [0225.749] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x66ade0) returned 1 [0225.749] GetProcessHeap () returned 0x640000 [0225.749] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x66ad08) returned 1 [0225.764] GetProcessHeap () returned 0x640000 [0225.765] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x669b88) returned 1 [0225.765] FreeLibrary (hLibModule=0x910000) returned 1 [0225.765] FreeLibrary (hLibModule=0x6f620000) returned 1 [0225.766] FreeLibrary (hLibModule=0x6f5a0000) returned 1 [0225.772] free (_Block=0x833cb0) [0225.773] LocalFree (hMem=0x655390) returned 0x0 [0225.774] LocalFree (hMem=0x655510) returned 0x0 [0225.774] LocalFree (hMem=0x652628) returned 0x0 [0225.774] LocalFree (hMem=0x651e08) returned 0x0 [0225.774] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x669188 [0225.774] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x673128 [0225.774] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x673170 [0225.774] free (_Block=0x831190) [0225.774] free (_Block=0x0) [0225.774] free (_Block=0x831178) [0225.774] free (_Block=0x8311a8) [0225.774] free (_Block=0x833c90) [0225.774] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x6435f8 [0225.776] LocalFree (hMem=0x6435f8) returned 0x0 [0225.777] LocalFree (hMem=0x6555a0) returned 0x0 [0225.777] LocalFree (hMem=0x669188) returned 0x0 [0225.778] free (_Block=0x833b88) [0225.778] GetModuleHandleA (lpModuleName="MSVCRT.DLL") returned 0x77610000 [0225.779] FreeLibrary (hLibModule=0x77610000) returned 1 [0225.779] LocalFree (hMem=0x673170) returned 0x0 [0225.779] LocalFree (hMem=0x673128) returned 0x0 [0225.779] GlobalHandle (pMem=0x655280) returned 0x740004 [0225.779] GlobalUnlock (hMem=0x740004) returned 0 [0225.786] FreeLibrary (hLibModule=0x6f1a0000) returned 1 [0225.789] FreeLibrary (hLibModule=0x6f130000) returned 1 [0225.791] FreeLibrary (hLibModule=0x6f0d0000) returned 1 [0225.797] FreeLibrary (hLibModule=0x6efd0000) returned 1 [0225.799] FreeLibrary (hLibModule=0x6efc0000) returned 1 [0225.814] FreeLibrary (hLibModule=0x6ecd0000) returned 1 [0225.818] FreeLibrary (hLibModule=0x6ec20000) returned 1 [0225.819] FreeLibrary (hLibModule=0x6eba0000) returned 1 [0225.830] FreeLibrary (hLibModule=0x6e9f0000) returned 1 [0225.833] FreeLibrary (hLibModule=0x6e980000) returned 1 [0225.838] FreeLibrary (hLibModule=0x6e940000) returned 1 [0225.840] FreeLibrary (hLibModule=0x6e930000) returned 1 [0225.842] FreeLibrary (hLibModule=0x6e850000) returned 1 [0225.851] FreeLibrary (hLibModule=0x6e790000) returned 1 [0225.854] FreeLibrary (hLibModule=0x6e690000) returned 1 [0225.864] GetProcessHeap () returned 0x640000 [0225.865] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x65f108) returned 1 [0225.865] GetProcessHeap () returned 0x640000 [0225.865] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x640598) returned 1 [0225.865] GetProcessHeap () returned 0x640000 [0225.865] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x646cc8) returned 1 [0225.865] GetProcessHeap () returned 0x640000 [0225.865] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x647328) returned 1 [0225.865] GetProcessHeap () returned 0x640000 [0225.865] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x646f60) returned 1 [0225.865] GetProcessHeap () returned 0x640000 [0225.865] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x646f70) returned 1 [0225.865] GetProcessHeap () returned 0x640000 [0225.865] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648748) returned 1 [0225.865] GetProcessHeap () returned 0x640000 [0225.865] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648758) returned 1 [0225.865] GetProcessHeap () returned 0x640000 [0225.865] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648768) returned 1 [0225.865] GetProcessHeap () returned 0x640000 [0225.865] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648778) returned 1 [0225.865] GetProcessHeap () returned 0x640000 [0225.865] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x646d28) returned 1 [0225.866] GetProcessHeap () returned 0x640000 [0225.866] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x646d38) returned 1 [0225.866] GetProcessHeap () returned 0x640000 [0225.866] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x646d48) returned 1 [0225.866] GetProcessHeap () returned 0x640000 [0225.866] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x646d58) returned 1 [0225.866] GetProcessHeap () returned 0x640000 [0225.866] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x646d68) returned 1 [0225.866] GetProcessHeap () returned 0x640000 [0225.866] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x646d78) returned 1 [0225.866] GetProcessHeap () returned 0x640000 [0225.866] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648f80) returned 1 [0225.866] GetProcessHeap () returned 0x640000 [0225.866] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648f70) returned 1 [0225.866] GetProcessHeap () returned 0x640000 [0225.866] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649020) returned 1 [0225.866] GetProcessHeap () returned 0x640000 [0225.866] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648fa0) returned 1 [0225.866] GetProcessHeap () returned 0x640000 [0225.866] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649030) returned 1 [0225.866] GetProcessHeap () returned 0x640000 [0225.866] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648fd0) returned 1 [0225.866] GetProcessHeap () returned 0x640000 [0225.866] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648f40) returned 1 [0225.866] GetProcessHeap () returned 0x640000 [0225.866] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648e60) returned 1 [0225.866] GetProcessHeap () returned 0x640000 [0225.866] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648f10) returned 1 [0225.866] GetProcessHeap () returned 0x640000 [0225.866] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648eb0) returned 1 [0225.866] GetProcessHeap () returned 0x640000 [0225.866] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648fe0) returned 1 [0225.866] GetProcessHeap () returned 0x640000 [0225.866] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648f90) returned 1 [0225.866] GetProcessHeap () returned 0x640000 [0225.866] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648e80) returned 1 [0225.866] GetProcessHeap () returned 0x640000 [0225.867] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648fb0) returned 1 [0225.867] GetProcessHeap () returned 0x640000 [0225.867] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648fc0) returned 1 [0225.867] GetProcessHeap () returned 0x640000 [0225.867] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648e70) returned 1 [0225.867] GetProcessHeap () returned 0x640000 [0225.867] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648f30) returned 1 [0225.867] GetProcessHeap () returned 0x640000 [0225.867] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648ff0) returned 1 [0225.867] GetProcessHeap () returned 0x640000 [0225.867] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648ee0) returned 1 [0225.867] GetProcessHeap () returned 0x640000 [0225.867] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649000) returned 1 [0225.867] GetProcessHeap () returned 0x640000 [0225.867] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648e90) returned 1 [0225.867] GetProcessHeap () returned 0x640000 [0225.867] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648ea0) returned 1 [0225.867] GetProcessHeap () returned 0x640000 [0225.867] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648ed0) returned 1 [0225.867] GetProcessHeap () returned 0x640000 [0225.867] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648ef0) returned 1 [0225.867] GetProcessHeap () returned 0x640000 [0225.867] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649010) returned 1 [0225.867] GetProcessHeap () returned 0x640000 [0225.867] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648ec0) returned 1 [0225.867] GetProcessHeap () returned 0x640000 [0225.867] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648f00) returned 1 [0225.867] GetProcessHeap () returned 0x640000 [0225.867] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648f20) returned 1 [0225.867] GetProcessHeap () returned 0x640000 [0225.867] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648f50) returned 1 [0225.867] GetProcessHeap () returned 0x640000 [0225.867] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x648f60) returned 1 [0225.867] GetProcessHeap () returned 0x640000 [0225.867] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6493c0) returned 1 [0225.867] GetProcessHeap () returned 0x640000 [0225.868] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649350) returned 1 [0225.868] GetProcessHeap () returned 0x640000 [0225.868] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6493e0) returned 1 [0225.868] GetProcessHeap () returned 0x640000 [0225.868] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6493f0) returned 1 [0225.868] GetProcessHeap () returned 0x640000 [0225.868] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649380) returned 1 [0225.868] GetProcessHeap () returned 0x640000 [0225.868] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6493a0) returned 1 [0225.868] GetProcessHeap () returned 0x640000 [0225.868] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6492e0) returned 1 [0225.868] GetProcessHeap () returned 0x640000 [0225.868] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649400) returned 1 [0225.868] GetProcessHeap () returned 0x640000 [0225.868] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649410) returned 1 [0225.868] GetProcessHeap () returned 0x640000 [0225.868] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6492d0) returned 1 [0225.868] GetProcessHeap () returned 0x640000 [0225.868] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6493b0) returned 1 [0225.868] GetProcessHeap () returned 0x640000 [0225.868] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6493d0) returned 1 [0225.868] GetProcessHeap () returned 0x640000 [0225.868] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649420) returned 1 [0225.868] GetProcessHeap () returned 0x640000 [0225.868] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649330) returned 1 [0225.868] GetProcessHeap () returned 0x640000 [0225.868] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649430) returned 1 [0225.868] GetProcessHeap () returned 0x640000 [0225.868] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6492b0) returned 1 [0225.868] GetProcessHeap () returned 0x640000 [0225.868] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649270) returned 1 [0225.868] GetProcessHeap () returned 0x640000 [0225.868] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649280) returned 1 [0225.868] GetProcessHeap () returned 0x640000 [0225.868] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6492c0) returned 1 [0225.868] GetProcessHeap () returned 0x640000 [0225.868] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649290) returned 1 [0225.868] GetProcessHeap () returned 0x640000 [0225.869] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6492a0) returned 1 [0225.869] GetProcessHeap () returned 0x640000 [0225.869] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6492f0) returned 1 [0225.869] GetProcessHeap () returned 0x640000 [0225.869] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649300) returned 1 [0225.869] GetProcessHeap () returned 0x640000 [0225.869] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649310) returned 1 [0225.869] GetProcessHeap () returned 0x640000 [0225.869] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649390) returned 1 [0225.869] GetProcessHeap () returned 0x640000 [0225.869] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649360) returned 1 [0225.869] GetProcessHeap () returned 0x640000 [0225.869] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649320) returned 1 [0225.869] GetProcessHeap () returned 0x640000 [0225.869] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649340) returned 1 [0225.869] GetProcessHeap () returned 0x640000 [0225.869] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649370) returned 1 [0225.869] GetProcessHeap () returned 0x640000 [0225.869] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649170) returned 1 [0225.869] GetProcessHeap () returned 0x640000 [0225.869] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649130) returned 1 [0225.869] GetProcessHeap () returned 0x640000 [0225.869] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649180) returned 1 [0225.869] GetProcessHeap () returned 0x640000 [0225.869] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6491d0) returned 1 [0225.869] GetProcessHeap () returned 0x640000 [0225.869] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6490e0) returned 1 [0225.869] GetProcessHeap () returned 0x640000 [0225.869] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6490f0) returned 1 [0225.869] GetProcessHeap () returned 0x640000 [0225.869] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649100) returned 1 [0225.869] GetProcessHeap () returned 0x640000 [0225.869] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6491c0) returned 1 [0225.869] GetProcessHeap () returned 0x640000 [0225.869] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649190) returned 1 [0225.869] GetProcessHeap () returned 0x640000 [0225.869] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649140) returned 1 [0225.869] GetProcessHeap () returned 0x640000 [0225.870] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649120) returned 1 [0225.870] GetProcessHeap () returned 0x640000 [0225.870] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649110) returned 1 [0225.870] GetProcessHeap () returned 0x640000 [0225.870] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649150) returned 1 [0225.870] GetProcessHeap () returned 0x640000 [0225.870] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649070) returned 1 [0225.870] GetProcessHeap () returned 0x640000 [0225.870] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6491a0) returned 1 [0225.870] GetProcessHeap () returned 0x640000 [0225.870] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649080) returned 1 [0225.870] GetProcessHeap () returned 0x640000 [0225.870] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649160) returned 1 [0225.870] GetProcessHeap () returned 0x640000 [0225.870] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6491b0) returned 1 [0225.870] GetProcessHeap () returned 0x640000 [0225.870] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6491e0) returned 1 [0225.870] GetProcessHeap () returned 0x640000 [0225.870] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6491f0) returned 1 [0225.870] GetProcessHeap () returned 0x640000 [0225.870] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649240) returned 1 [0225.870] GetProcessHeap () returned 0x640000 [0225.870] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649200) returned 1 [0225.870] GetProcessHeap () returned 0x640000 [0225.870] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649210) returned 1 [0225.870] GetProcessHeap () returned 0x640000 [0225.870] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649220) returned 1 [0225.870] GetProcessHeap () returned 0x640000 [0225.870] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6490b0) returned 1 [0225.870] GetProcessHeap () returned 0x640000 [0225.870] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649230) returned 1 [0225.870] GetProcessHeap () returned 0x640000 [0225.870] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6490c0) returned 1 [0225.870] GetProcessHeap () returned 0x640000 [0225.870] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649090) returned 1 [0225.870] GetProcessHeap () returned 0x640000 [0225.870] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649250) returned 1 [0225.871] GetProcessHeap () returned 0x640000 [0225.871] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649260) returned 1 [0225.871] GetProcessHeap () returned 0x640000 [0225.871] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6490a0) returned 1 [0225.871] GetProcessHeap () returned 0x640000 [0225.871] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6490d0) returned 1 [0225.871] GetProcessHeap () returned 0x640000 [0225.871] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6497d8) returned 1 [0225.871] GetProcessHeap () returned 0x640000 [0225.871] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649748) returned 1 [0225.871] GetProcessHeap () returned 0x640000 [0225.871] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649798) returned 1 [0225.871] GetProcessHeap () returned 0x640000 [0225.871] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6496a8) returned 1 [0225.871] GetProcessHeap () returned 0x640000 [0225.871] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649778) returned 1 [0225.871] GetProcessHeap () returned 0x640000 [0225.871] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649708) returned 1 [0225.871] GetProcessHeap () returned 0x640000 [0225.871] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649768) returned 1 [0225.871] GetProcessHeap () returned 0x640000 [0225.871] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6497f8) returned 1 [0225.871] GetProcessHeap () returned 0x640000 [0225.871] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649718) returned 1 [0225.871] GetProcessHeap () returned 0x640000 [0225.871] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649788) returned 1 [0225.871] GetProcessHeap () returned 0x640000 [0225.871] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6497a8) returned 1 [0225.871] GetProcessHeap () returned 0x640000 [0225.871] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649758) returned 1 [0225.871] GetProcessHeap () returned 0x640000 [0225.871] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6496e8) returned 1 [0225.871] GetProcessHeap () returned 0x640000 [0225.871] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649818) returned 1 [0225.871] GetProcessHeap () returned 0x640000 [0225.871] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6497b8) returned 1 [0225.871] GetProcessHeap () returned 0x640000 [0225.871] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6497c8) returned 1 [0225.871] GetProcessHeap () returned 0x640000 [0225.872] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649728) returned 1 [0225.872] GetProcessHeap () returned 0x640000 [0225.872] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6497e8) returned 1 [0225.872] GetProcessHeap () returned 0x640000 [0225.872] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6496f8) returned 1 [0225.872] GetProcessHeap () returned 0x640000 [0225.872] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649738) returned 1 [0225.872] GetProcessHeap () returned 0x640000 [0225.872] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649808) returned 1 [0225.872] GetProcessHeap () returned 0x640000 [0225.872] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649828) returned 1 [0225.872] GetProcessHeap () returned 0x640000 [0225.872] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6496b8) returned 1 [0225.872] GetProcessHeap () returned 0x640000 [0225.872] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649838) returned 1 [0225.872] GetProcessHeap () returned 0x640000 [0225.872] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6496c8) returned 1 [0225.872] GetProcessHeap () returned 0x640000 [0225.872] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649678) returned 1 [0225.872] GetProcessHeap () returned 0x640000 [0225.872] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649688) returned 1 [0225.872] GetProcessHeap () returned 0x640000 [0225.872] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6496d8) returned 1 [0225.872] GetProcessHeap () returned 0x640000 [0225.872] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649698) returned 1 [0225.872] GetProcessHeap () returned 0x640000 [0225.872] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649638) returned 1 [0225.872] GetProcessHeap () returned 0x640000 [0225.872] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649558) returned 1 [0225.872] GetProcessHeap () returned 0x640000 [0225.872] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6495c8) returned 1 [0225.872] GetProcessHeap () returned 0x640000 [0225.872] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649668) returned 1 [0225.872] GetProcessHeap () returned 0x640000 [0225.872] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649508) returned 1 [0225.872] GetProcessHeap () returned 0x640000 [0225.872] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6495e8) returned 1 [0225.873] GetProcessHeap () returned 0x640000 [0225.873] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649648) returned 1 [0225.873] GetProcessHeap () returned 0x640000 [0225.873] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649478) returned 1 [0225.873] GetProcessHeap () returned 0x640000 [0225.873] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649608) returned 1 [0225.873] GetProcessHeap () returned 0x640000 [0225.873] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649488) returned 1 [0225.873] GetProcessHeap () returned 0x640000 [0225.873] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6494c8) returned 1 [0225.873] GetProcessHeap () returned 0x640000 [0225.873] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649618) returned 1 [0225.873] GetProcessHeap () returned 0x640000 [0225.873] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6495b8) returned 1 [0225.873] GetProcessHeap () returned 0x640000 [0225.873] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6495a8) returned 1 [0225.873] GetProcessHeap () returned 0x640000 [0225.873] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649578) returned 1 [0225.873] GetProcessHeap () returned 0x640000 [0225.873] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649498) returned 1 [0225.873] GetProcessHeap () returned 0x640000 [0225.873] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6494d8) returned 1 [0225.873] GetProcessHeap () returned 0x640000 [0225.873] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649628) returned 1 [0225.873] GetProcessHeap () returned 0x640000 [0225.873] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6494b8) returned 1 [0225.873] GetProcessHeap () returned 0x640000 [0225.873] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649588) returned 1 [0225.873] GetProcessHeap () returned 0x640000 [0225.873] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6495d8) returned 1 [0225.873] GetProcessHeap () returned 0x640000 [0225.873] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649518) returned 1 [0225.873] GetProcessHeap () returned 0x640000 [0225.873] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649528) returned 1 [0225.873] GetProcessHeap () returned 0x640000 [0225.873] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649598) returned 1 [0225.873] GetProcessHeap () returned 0x640000 [0225.874] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6495f8) returned 1 [0225.874] GetProcessHeap () returned 0x640000 [0225.874] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649658) returned 1 [0225.874] GetProcessHeap () returned 0x640000 [0225.874] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6494a8) returned 1 [0225.874] GetProcessHeap () returned 0x640000 [0225.874] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649538) returned 1 [0225.874] GetProcessHeap () returned 0x640000 [0225.874] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6494e8) returned 1 [0225.874] GetProcessHeap () returned 0x640000 [0225.874] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649548) returned 1 [0225.874] GetProcessHeap () returned 0x640000 [0225.874] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6494f8) returned 1 [0225.874] GetProcessHeap () returned 0x640000 [0225.874] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649568) returned 1 [0225.874] GetProcessHeap () returned 0x640000 [0225.874] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649c40) returned 1 [0225.874] GetProcessHeap () returned 0x640000 [0225.874] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649aa0) returned 1 [0225.874] GetProcessHeap () returned 0x640000 [0225.874] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649b60) returned 1 [0225.874] GetProcessHeap () returned 0x640000 [0225.874] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649a80) returned 1 [0225.874] GetProcessHeap () returned 0x640000 [0225.874] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649a90) returned 1 [0225.874] GetProcessHeap () returned 0x640000 [0225.874] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649b90) returned 1 [0225.874] GetProcessHeap () returned 0x640000 [0225.874] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649bf0) returned 1 [0225.874] GetProcessHeap () returned 0x640000 [0225.874] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649be0) returned 1 [0225.874] GetProcessHeap () returned 0x640000 [0225.874] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649c00) returned 1 [0225.874] GetProcessHeap () returned 0x640000 [0225.874] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649ba0) returned 1 [0225.874] GetProcessHeap () returned 0x640000 [0225.874] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649b20) returned 1 [0225.874] GetProcessHeap () returned 0x640000 [0225.875] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649ab0) returned 1 [0225.875] GetProcessHeap () returned 0x640000 [0225.875] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649af0) returned 1 [0225.875] GetProcessHeap () returned 0x640000 [0225.875] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649ad0) returned 1 [0225.875] GetProcessHeap () returned 0x640000 [0225.875] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649c10) returned 1 [0225.875] GetProcessHeap () returned 0x640000 [0225.875] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649ac0) returned 1 [0225.875] GetProcessHeap () returned 0x640000 [0225.875] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649b70) returned 1 [0225.875] GetProcessHeap () returned 0x640000 [0225.875] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649b30) returned 1 [0225.875] GetProcessHeap () returned 0x640000 [0225.875] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649c20) returned 1 [0225.875] GetProcessHeap () returned 0x640000 [0225.875] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649bc0) returned 1 [0225.875] GetProcessHeap () returned 0x640000 [0225.875] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649b80) returned 1 [0225.885] GetProcessHeap () returned 0x640000 [0225.885] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649ae0) returned 1 [0225.885] GetProcessHeap () returned 0x640000 [0225.885] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649c30) returned 1 [0225.885] GetProcessHeap () returned 0x640000 [0225.885] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649b00) returned 1 [0225.885] GetProcessHeap () returned 0x640000 [0225.885] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649bd0) returned 1 [0225.885] GetProcessHeap () returned 0x640000 [0225.885] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649b10) returned 1 [0225.885] GetProcessHeap () returned 0x640000 [0225.885] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649b40) returned 1 [0225.885] GetProcessHeap () returned 0x640000 [0225.885] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649b50) returned 1 [0225.885] GetProcessHeap () returned 0x640000 [0225.885] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649bb0) returned 1 [0225.885] GetProcessHeap () returned 0x640000 [0225.885] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649900) returned 1 [0225.885] GetProcessHeap () returned 0x640000 [0225.885] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649940) returned 1 [0225.885] GetProcessHeap () returned 0x640000 [0225.885] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649960) returned 1 [0225.885] GetProcessHeap () returned 0x640000 [0225.885] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649910) returned 1 [0225.885] GetProcessHeap () returned 0x640000 [0225.885] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649920) returned 1 [0225.885] GetProcessHeap () returned 0x640000 [0225.885] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649930) returned 1 [0225.885] GetProcessHeap () returned 0x640000 [0225.885] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649a50) returned 1 [0225.885] GetProcessHeap () returned 0x640000 [0225.885] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649950) returned 1 [0225.886] GetProcessHeap () returned 0x640000 [0225.886] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649970) returned 1 [0225.886] GetProcessHeap () returned 0x640000 [0225.886] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6498a0) returned 1 [0225.886] GetProcessHeap () returned 0x640000 [0225.886] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6499d0) returned 1 [0225.886] GetProcessHeap () returned 0x640000 [0225.886] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6499c0) returned 1 [0225.886] GetProcessHeap () returned 0x640000 [0225.886] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6498b0) returned 1 [0225.886] GetProcessHeap () returned 0x640000 [0225.886] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x6498c0) returned 1 [0225.886] GetProcessHeap () returned 0x640000 [0225.886] RtlFreeHeap (HeapHandle=0x640000, Flags=0x0, BaseAddress=0x649a00) returned 1 [0225.886] exit (_Code=1) Thread: id = 289 os_tid = 0x654 Thread: id = 290 os_tid = 0x6a0 [0225.759] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x668ed8 [0225.759] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x6730c8 [0225.759] LocalAlloc (uFlags=0x0, uBytes=0xc) returned 0x672fa8 [0225.759] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x669188 [0225.759] LocalReAlloc (hMem=0x672fa8, uBytes=0x10, uFlags=0x2) returned 0x66a9d8 [0225.760] LocalFree (hMem=0x668ed8) returned 0x0 [0225.760] LocalFree (hMem=0x669188) returned 0x0 [0225.760] LocalFree (hMem=0x66a9d8) returned 0x0 [0225.761] LocalFree (hMem=0x6730c8) returned 0x0 Thread: id = 291 os_tid = 0x6d4